aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorErwin Lansing <erwin@FreeBSD.org>2014-12-15 12:14:41 +0000
committerErwin Lansing <erwin@FreeBSD.org>2014-12-15 12:14:41 +0000
commit4c9547cd12b5bb569f10b368eb6bb04d897d596f (patch)
tree025b1191fa4f9c03bf5345071dd2658f5d240b69
parent989b3b2d6068ce5b525479b7754977baf6364a7d (diff)
Vendor import of BIND 9.9.6-P1vendor/bind9/9.9.6-P1
Sponsored by: DK Hostmaster A/S
Notes
Notes: svn path=/vendor/bind9/dist/; revision=275801 svn path=/vendor/bind9/9.9.6-P1/; revision=275803; tag=vendor/bind9/9.9.6-P1
-rw-r--r--CHANGES578
-rw-r--r--FAQ13
-rw-r--r--FAQ.xml8
-rw-r--r--FREEBSD-Xlist1
-rw-r--r--README39
-rw-r--r--acconfig.h5
-rw-r--r--aclocal.m412
-rw-r--r--bin/check/Makefile.in4
-rw-r--r--bin/check/named-checkconf.84
-rw-r--r--bin/check/named-checkconf.c38
-rw-r--r--bin/check/named-checkconf.docbook3
-rw-r--r--bin/check/named-checkconf.html10
-rw-r--r--bin/check/named-checkzone.810
-rw-r--r--bin/check/named-checkzone.docbook14
-rw-r--r--bin/check/named-checkzone.html20
-rw-r--r--bin/confgen/ddns-confgen.88
-rw-r--r--bin/confgen/ddns-confgen.c3
-rw-r--r--bin/confgen/ddns-confgen.docbook6
-rw-r--r--bin/confgen/ddns-confgen.html10
-rw-r--r--bin/confgen/rndc-confgen.88
-rw-r--r--bin/confgen/rndc-confgen.docbook6
-rw-r--r--bin/confgen/rndc-confgen.html12
-rw-r--r--bin/dig/dig.1322
-rw-r--r--bin/dig/dig.c57
-rw-r--r--bin/dig/dig.docbook1118
-rw-r--r--bin/dig/dig.html619
-rw-r--r--bin/dig/dighost.c98
-rw-r--r--bin/dig/host.116
-rw-r--r--bin/dig/host.c22
-rw-r--r--bin/dig/host.docbook13
-rw-r--r--bin/dig/host.html16
-rw-r--r--bin/dig/include/dig/dig.h4
-rw-r--r--bin/dig/nslookup.110
-rw-r--r--bin/dig/nslookup.c16
-rw-r--r--bin/dig/nslookup.docbook8
-rw-r--r--bin/dig/nslookup.html19
-rw-r--r--bin/dnssec/Makefile.in6
-rw-r--r--bin/dnssec/dnssec-dsfromkey.820
-rw-r--r--bin/dnssec/dnssec-dsfromkey.c12
-rw-r--r--bin/dnssec/dnssec-dsfromkey.docbook29
-rw-r--r--bin/dnssec/dnssec-dsfromkey.html25
-rw-r--r--bin/dnssec/dnssec-importkey.888
-rw-r--r--bin/dnssec/dnssec-importkey.c24
-rw-r--r--bin/dnssec/dnssec-importkey.docbook22
-rw-r--r--bin/dnssec/dnssec-importkey.html86
-rw-r--r--bin/dnssec/dnssec-keyfromlabel.834
-rw-r--r--bin/dnssec/dnssec-keyfromlabel.c340
-rw-r--r--bin/dnssec/dnssec-keyfromlabel.docbook73
-rw-r--r--bin/dnssec/dnssec-keyfromlabel.html66
-rw-r--r--bin/dnssec/dnssec-keygen.819
-rw-r--r--bin/dnssec/dnssec-keygen.c72
-rw-r--r--bin/dnssec/dnssec-keygen.docbook23
-rw-r--r--bin/dnssec/dnssec-keygen.html29
-rw-r--r--bin/dnssec/dnssec-revoke.815
-rw-r--r--bin/dnssec/dnssec-revoke.c18
-rw-r--r--bin/dnssec/dnssec-revoke.docbook16
-rw-r--r--bin/dnssec/dnssec-revoke.html16
-rw-r--r--bin/dnssec/dnssec-settime.817
-rw-r--r--bin/dnssec/dnssec-settime.c67
-rw-r--r--bin/dnssec/dnssec-settime.docbook18
-rw-r--r--bin/dnssec/dnssec-settime.html22
-rw-r--r--bin/dnssec/dnssec-signzone.815
-rw-r--r--bin/dnssec/dnssec-signzone.c73
-rw-r--r--bin/dnssec/dnssec-signzone.docbook16
-rw-r--r--bin/dnssec/dnssec-signzone.html18
-rw-r--r--bin/dnssec/dnssec-verify.815
-rw-r--r--bin/dnssec/dnssec-verify.c23
-rw-r--r--bin/dnssec/dnssec-verify.docbook16
-rw-r--r--bin/dnssec/dnssec-verify.html16
-rw-r--r--bin/dnssec/dnssectool.c36
-rw-r--r--bin/dnssec/dnssectool.h8
-rw-r--r--bin/named/bind9.ver3.xsl7
-rw-r--r--bin/named/bind9.ver3.xsl.h7
-rw-r--r--bin/named/client.c24
-rw-r--r--bin/named/config.c4
-rw-r--r--bin/named/control.c4
-rw-r--r--bin/named/controlconf.c8
-rw-r--r--bin/named/include/named/query.h4
-rw-r--r--bin/named/include/named/server.h4
-rw-r--r--bin/named/lwresd.88
-rw-r--r--bin/named/lwresd.docbook6
-rw-r--r--bin/named/lwresd.html14
-rw-r--r--bin/named/main.c32
-rw-r--r--bin/named/named.812
-rw-r--r--bin/named/named.conf.54
-rw-r--r--bin/named/named.conf.docbook3
-rw-r--r--bin/named/named.conf.html32
-rw-r--r--bin/named/named.docbook16
-rw-r--r--bin/named/named.html26
-rw-r--r--bin/named/query.c73
-rw-r--r--bin/named/server.c164
-rw-r--r--bin/named/unix/dlz_dlopen_driver.c8
-rw-r--r--bin/named/unix/os.c6
-rw-r--r--bin/named/update.c23
-rw-r--r--bin/named/zoneconf.c7
-rw-r--r--bin/nsupdate/Makefile.in2
-rw-r--r--bin/nsupdate/nsupdate.146
-rw-r--r--bin/nsupdate/nsupdate.c203
-rw-r--r--bin/nsupdate/nsupdate.docbook51
-rw-r--r--bin/nsupdate/nsupdate.html50
-rw-r--r--bin/rndc/rndc.810
-rw-r--r--bin/rndc/rndc.c114
-rw-r--r--bin/rndc/rndc.conf.58
-rw-r--r--bin/rndc/rndc.conf.docbook6
-rw-r--r--bin/rndc/rndc.conf.html12
-rw-r--r--bin/rndc/rndc.docbook10
-rw-r--r--bin/rndc/rndc.html18
-rw-r--r--bin/tools/arpaname.18
-rw-r--r--bin/tools/arpaname.docbook6
-rw-r--r--bin/tools/arpaname.html8
-rw-r--r--bin/tools/genrandom.88
-rw-r--r--bin/tools/genrandom.c6
-rw-r--r--bin/tools/genrandom.docbook6
-rw-r--r--bin/tools/genrandom.html10
-rw-r--r--bin/tools/isc-hmac-fixup.88
-rw-r--r--bin/tools/isc-hmac-fixup.c4
-rw-r--r--bin/tools/isc-hmac-fixup.docbook6
-rw-r--r--bin/tools/isc-hmac-fixup.html10
-rw-r--r--bin/tools/named-journalprint.88
-rw-r--r--bin/tools/named-journalprint.docbook6
-rw-r--r--bin/tools/named-journalprint.html8
-rw-r--r--bin/tools/nsec3hash.88
-rw-r--r--bin/tools/nsec3hash.c9
-rw-r--r--bin/tools/nsec3hash.docbook6
-rw-r--r--bin/tools/nsec3hash.html10
-rw-r--r--config.h.in8
-rw-r--r--configure.in460
-rw-r--r--doc/arm/Bv9ARM-book.xml21483
-rw-r--r--doc/arm/Bv9ARM.ch01.html55
-rw-r--r--doc/arm/Bv9ARM.ch02.html23
-rw-r--r--doc/arm/Bv9ARM.ch03.html27
-rw-r--r--doc/arm/Bv9ARM.ch04.html197
-rw-r--r--doc/arm/Bv9ARM.ch05.html7
-rw-r--r--doc/arm/Bv9ARM.ch06.html343
-rw-r--r--doc/arm/Bv9ARM.ch07.html15
-rw-r--r--doc/arm/Bv9ARM.ch08.html19
-rw-r--r--doc/arm/Bv9ARM.ch09.html223
-rw-r--r--doc/arm/Bv9ARM.ch10.html3
-rw-r--r--doc/arm/Bv9ARM.html208
-rw-r--r--doc/arm/Bv9ARM.pdf16313
-rw-r--r--doc/arm/Makefile.in22
-rw-r--r--doc/arm/libdns.xml4
-rw-r--r--doc/arm/man.arpaname.html9
-rw-r--r--doc/arm/man.ddns-confgen.html11
-rw-r--r--doc/arm/man.dig.html620
-rw-r--r--doc/arm/man.dnssec-checkds.html11
-rw-r--r--doc/arm/man.dnssec-coverage.html15
-rw-r--r--doc/arm/man.dnssec-dsfromkey.html26
-rw-r--r--doc/arm/man.dnssec-keyfromlabel.html67
-rw-r--r--doc/arm/man.dnssec-keygen.html30
-rw-r--r--doc/arm/man.dnssec-revoke.html17
-rw-r--r--doc/arm/man.dnssec-settime.html23
-rw-r--r--doc/arm/man.dnssec-signzone.html19
-rw-r--r--doc/arm/man.dnssec-verify.html17
-rw-r--r--doc/arm/man.genrandom.html11
-rw-r--r--doc/arm/man.host.html17
-rw-r--r--doc/arm/man.isc-hmac-fixup.html11
-rw-r--r--doc/arm/man.named-checkconf.html13
-rw-r--r--doc/arm/man.named-checkzone.html21
-rw-r--r--doc/arm/man.named-journalprint.html9
-rw-r--r--doc/arm/man.named.html27
-rw-r--r--doc/arm/man.nsec3hash.html11
-rw-r--r--doc/arm/man.nsupdate.html51
-rw-r--r--doc/arm/man.rndc-confgen.html13
-rw-r--r--doc/arm/man.rndc.conf.html13
-rw-r--r--doc/arm/man.rndc.html19
-rw-r--r--doc/arm/pkcs11.xml15
-rw-r--r--doc/misc/options7
-rw-r--r--lib/bind9/Makefile.in4
-rw-r--r--lib/bind9/api2
-rw-r--r--lib/bind9/check.c169
-rw-r--r--lib/bind9/getaddresses.c5
-rw-r--r--lib/dns/Makefile.in4
-rw-r--r--lib/dns/acl.c3
-rw-r--r--lib/dns/adb.c168
-rw-r--r--lib/dns/api6
-rw-r--r--lib/dns/dispatch.c28
-rw-r--r--lib/dns/dns64.c8
-rw-r--r--lib/dns/dnssec.c9
-rw-r--r--lib/dns/ecdb.c23
-rw-r--r--lib/dns/gen.c19
-rw-r--r--lib/dns/gssapictx.c4
-rw-r--r--lib/dns/include/dns/Makefile.in24
-rw-r--r--lib/dns/include/dns/adb.h46
-rw-r--r--lib/dns/include/dns/dns64.h4
-rw-r--r--lib/dns/include/dns/dnssec.h6
-rw-r--r--lib/dns/include/dns/message.h6
-rw-r--r--lib/dns/include/dns/rbt.h28
-rw-r--r--lib/dns/include/dns/rdataset.h7
-rw-r--r--lib/dns/include/dns/resolver.h39
-rw-r--r--lib/dns/include/dns/view.h4
-rw-r--r--lib/dns/keytable.c7
-rw-r--r--lib/dns/master.c22
-rw-r--r--lib/dns/message.c16
-rw-r--r--lib/dns/name.c15
-rw-r--r--lib/dns/nsec.c2
-rw-r--r--lib/dns/nsec3.c18
-rw-r--r--lib/dns/openssl_link.c5
-rw-r--r--lib/dns/peer.c11
-rw-r--r--lib/dns/rbt.c7
-rw-r--r--lib/dns/rbtdb.c216
-rw-r--r--lib/dns/rcode.c8
-rw-r--r--lib/dns/rdata.c95
-rw-r--r--lib/dns/rdata/generic/caa_257.c370
-rw-r--r--lib/dns/rdata/generic/caa_257.h32
-rw-r--r--lib/dns/rdata/generic/cdnskey_60.c378
-rw-r--r--lib/dns/rdata/generic/cdnskey_60.h32
-rw-r--r--lib/dns/rdata/generic/cds_59.c354
-rw-r--r--lib/dns/rdata/generic/cds_59.h31
-rw-r--r--lib/dns/rdata/generic/gpos_27.c4
-rw-r--r--lib/dns/rdata/generic/hinfo_13.c6
-rw-r--r--lib/dns/rdata/generic/hip_55.c16
-rw-r--r--lib/dns/rdata/generic/isdn_20.c6
-rw-r--r--lib/dns/rdata/generic/naptr_35.c8
-rw-r--r--lib/dns/rdata/generic/nsec3_50.c29
-rw-r--r--lib/dns/rdata/generic/opt_41.c8
-rw-r--r--lib/dns/rdata/generic/spf_99.c2
-rw-r--r--lib/dns/rdata/generic/tkey_249.c4
-rw-r--r--lib/dns/rdata/generic/tlsa_52.c4
-rw-r--r--lib/dns/rdata/generic/tlsa_52.h4
-rw-r--r--lib/dns/rdata/generic/txt_16.c2
-rw-r--r--lib/dns/rdata/generic/uri_256.c25
-rw-r--r--lib/dns/rdata/generic/x25_19.c4
-rw-r--r--lib/dns/rdataslab.c61
-rw-r--r--lib/dns/resolver.c251
-rw-r--r--lib/dns/rootns.c3
-rw-r--r--lib/dns/rpz.c8
-rw-r--r--lib/dns/rrl.c1
-rw-r--r--lib/dns/time.c10
-rw-r--r--lib/dns/tsig.c2
-rw-r--r--lib/dns/validator.c25
-rw-r--r--lib/dns/view.c31
-rw-r--r--lib/dns/zone.c178
-rw-r--r--lib/export/isc/Makefile.in4
-rw-r--r--lib/export/samples/sample-update.c1
-rw-r--r--lib/irs/Makefile.in2
-rw-r--r--lib/irs/api2
-rw-r--r--lib/irs/context.c4
-rw-r--r--lib/irs/getaddrinfo.c16
-rw-r--r--lib/irs/include/irs/Makefile.in4
-rw-r--r--lib/isc/Makefile.in10
-rw-r--r--lib/isc/api4
-rw-r--r--lib/isc/backtrace.c4
-rw-r--r--lib/isc/base32.c98
-rw-r--r--lib/isc/counter.c138
-rw-r--r--lib/isc/event.c23
-rw-r--r--lib/isc/hash.c4
-rw-r--r--lib/isc/include/isc/Makefile.in18
-rw-r--r--lib/isc/include/isc/base32.h24
-rw-r--r--lib/isc/include/isc/buffer.h12
-rw-r--r--lib/isc/include/isc/counter.h90
-rw-r--r--lib/isc/include/isc/event.h11
-rw-r--r--lib/isc/include/isc/file.h8
-rw-r--r--lib/isc/include/isc/iterated_hash.h4
-rw-r--r--lib/isc/include/isc/print.h5
-rw-r--r--lib/isc/include/isc/result.h5
-rw-r--r--lib/isc/include/isc/socket.h26
-rw-r--r--lib/isc/include/isc/task.h6
-rw-r--r--lib/isc/include/isc/timer.h6
-rw-r--r--lib/isc/include/isc/types.h1
-rw-r--r--lib/isc/lib.c4
-rw-r--r--lib/isc/log.c1
-rw-r--r--lib/isc/mem.c3
-rw-r--r--lib/isc/netaddr.c3
-rw-r--r--lib/isc/print.c8
-rw-r--r--lib/isc/radix.c17
-rw-r--r--lib/isc/random.c12
-rw-r--r--lib/isc/regex.c8
-rw-r--r--lib/isc/result.c3
-rw-r--r--lib/isc/socket_api.c8
-rw-r--r--lib/isc/task.c8
-rw-r--r--lib/isc/task_api.c6
-rw-r--r--lib/isc/timer.c8
-rw-r--r--lib/isc/timer_api.c4
-rw-r--r--lib/isc/tm.c6
-rw-r--r--lib/isc/unix/app.c10
-rw-r--r--lib/isc/unix/include/isc/Makefile.in6
-rw-r--r--lib/isc/unix/include/isc/net.h2
-rw-r--r--lib/isc/unix/include/isc/stat.h4
-rw-r--r--lib/isc/unix/socket.c157
-rw-r--r--lib/isccc/Makefile.in4
-rw-r--r--lib/isccfg/Makefile.in4
-rw-r--r--lib/isccfg/aclconf.c97
-rw-r--r--lib/isccfg/api6
-rw-r--r--lib/isccfg/include/isccfg/Makefile.in5
-rw-r--r--lib/isccfg/include/isccfg/aclconf.h22
-rw-r--r--lib/isccfg/namedconf.c69
-rw-r--r--lib/isccfg/parser.c5
-rw-r--r--lib/lwres/Makefile.in16
-rw-r--r--lib/lwres/api4
-rw-r--r--lib/lwres/compat.c (renamed from lib/lwres/strtoul.c)28
-rw-r--r--lib/lwres/gai_strerror.c5
-rw-r--r--lib/lwres/getaddrinfo.c8
-rw-r--r--lib/lwres/gethost.c3
-rw-r--r--lib/lwres/include/lwres/Makefile.in9
-rw-r--r--lib/lwres/include/lwres/lwres.h3
-rw-r--r--lib/lwres/include/lwres/netdb.h.in6
-rw-r--r--lib/lwres/include/lwres/platform.h.in11
-rw-r--r--lib/lwres/include/lwres/stdlib.h4
-rw-r--r--lib/lwres/include/lwres/string.h37
-rw-r--r--lib/lwres/lwconfig.c61
-rw-r--r--lib/lwres/man/lwres.310
-rw-r--r--lib/lwres/man/lwres.docbook8
-rw-r--r--lib/lwres/man/lwres.html16
-rw-r--r--lib/lwres/man/lwres_buffer.38
-rw-r--r--lib/lwres/man/lwres_buffer.docbook6
-rw-r--r--lib/lwres/man/lwres_buffer.html4
-rw-r--r--lib/lwres/man/lwres_config.38
-rw-r--r--lib/lwres/man/lwres_config.docbook6
-rw-r--r--lib/lwres/man/lwres_config.html10
-rw-r--r--lib/lwres/man/lwres_context.38
-rw-r--r--lib/lwres/man/lwres_context.docbook6
-rw-r--r--lib/lwres/man/lwres_context.html8
-rw-r--r--lib/lwres/man/lwres_gabn.310
-rw-r--r--lib/lwres/man/lwres_gabn.docbook8
-rw-r--r--lib/lwres/man/lwres_gabn.html12
-rw-r--r--lib/lwres/man/lwres_gai_strerror.38
-rw-r--r--lib/lwres/man/lwres_gai_strerror.docbook6
-rw-r--r--lib/lwres/man/lwres_gai_strerror.html6
-rw-r--r--lib/lwres/man/lwres_getaddrinfo.38
-rw-r--r--lib/lwres/man/lwres_getaddrinfo.docbook6
-rw-r--r--lib/lwres/man/lwres_getaddrinfo.html8
-rw-r--r--lib/lwres/man/lwres_gethostent.38
-rw-r--r--lib/lwres/man/lwres_gethostent.docbook6
-rw-r--r--lib/lwres/man/lwres_gethostent.html10
-rw-r--r--lib/lwres/man/lwres_getipnode.38
-rw-r--r--lib/lwres/man/lwres_getipnode.docbook6
-rw-r--r--lib/lwres/man/lwres_getipnode.html8
-rw-r--r--lib/lwres/man/lwres_getnameinfo.38
-rw-r--r--lib/lwres/man/lwres_getnameinfo.docbook6
-rw-r--r--lib/lwres/man/lwres_getnameinfo.html10
-rw-r--r--lib/lwres/man/lwres_getrrsetbyname.38
-rw-r--r--lib/lwres/man/lwres_getrrsetbyname.docbook6
-rw-r--r--lib/lwres/man/lwres_getrrsetbyname.html8
-rw-r--r--lib/lwres/man/lwres_gnba.38
-rw-r--r--lib/lwres/man/lwres_gnba.docbook6
-rw-r--r--lib/lwres/man/lwres_gnba.html10
-rw-r--r--lib/lwres/man/lwres_hstrerror.38
-rw-r--r--lib/lwres/man/lwres_hstrerror.docbook6
-rw-r--r--lib/lwres/man/lwres_hstrerror.html8
-rw-r--r--lib/lwres/man/lwres_inetntop.38
-rw-r--r--lib/lwres/man/lwres_inetntop.docbook6
-rw-r--r--lib/lwres/man/lwres_inetntop.html8
-rw-r--r--lib/lwres/man/lwres_noop.310
-rw-r--r--lib/lwres/man/lwres_noop.docbook8
-rw-r--r--lib/lwres/man/lwres_noop.html12
-rw-r--r--lib/lwres/man/lwres_packet.38
-rw-r--r--lib/lwres/man/lwres_packet.docbook6
-rw-r--r--lib/lwres/man/lwres_packet.html6
-rw-r--r--lib/lwres/man/lwres_resutil.310
-rw-r--r--lib/lwres/man/lwres_resutil.docbook8
-rw-r--r--lib/lwres/man/lwres_resutil.html10
-rw-r--r--lib/lwres/print.c5
-rw-r--r--make/rules.in11
-rw-r--r--version6
355 files changed, 27619 insertions, 23170 deletions
diff --git a/CHANGES b/CHANGES
index 00a0ffd0cc01..e8d75ea9d348 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,439 @@
+ --- 9.9.6-P1 released ---
+
+4006. [security] A flaw in delegation handling could be exploited
+ to put named into an infinite loop. This has
+ been addressed by placing limits on the number
+ of levels of recursion named will allow (default 7),
+ and the number of iterative queries that it will
+ send (default 50) before terminating a recursive
+ query (CVE-2014-8500).
+
+ The recursion depth limit is configured via the
+ "max-recursion-depth" option, and the query limit
+ via the "max-recursion-queries" option. [RT #37580]
+
+ --- 9.9.6 released ---
+
+3950. [port] Changed the bin/python Makefile to work around a
+ bmake bug in FreeBSD 10 and NetBSD 6. [RT #36993]
+
+ --- 9.9.6rc2 released ---
+
+3947. [cleanup] Set the executable bit on libraries when using
+ libtool. [RT #36786]
+
+3946. [cleanup] Improved "configure" search for a python interpreter.
+ [RT #36992]
+
+3945. [bug] Invalid wildcard expansions could be incorrectly
+ accepted by the validator. [RT #37093]
+
+3944. [test] Added a regression test for "server-id". [RT #37057]
+
+3942. [bug] Wildcard responses from a optout range should be
+ marked as insecure. [RT #37072]
+
+3941. [doc] Include the BIND version number in the ARM. [RT #37067]
+
+ --- 9.9.6rc1 released ---
+
+3933. [bug] Corrected the implementation of dns_rdata_casecompare()
+ for the HIP rdata type. [RT #36911]
+
+3932. [test] Improved named-checkconf tests. [RT #36911]
+
+3931. [cleanup] Cleanup how dlz grammar is defined. [RT #36879]
+
+3929. [bug] 'host -a' needed to clear idnoptions. [RT #36963]
+
+3928. [test] Improve rndc system test. [RT #36898]
+
+3925. [bug] DS lookup of RFC 1918 empty zones failed. [RT #36917]
+
+3924. [bug] Improve 'rndc addzone' error reporting. [RT #35187]
+
+3923. [bug] Sanity check the xml2-config output. [RT #22246]
+
+3922. [bug] When resigning, dnssec-signzone was removing
+ all signatures from delegation nodes. It now
+ retains DS and (if applicable) NSEC signatures.
+ [RT #36946]
+
+3921. [bug] AD was inappropriately set on RPZ responses. [RT #36833]
+
+3919. [bug] dig: continue to next line if a address lookup fails
+ in batch mode. [RT #36755]
+
+3918. [doc] Update check-spf documentation. [RT #36910]
+
+3917. [bug] dig, nslookup and host now continue on names that are
+ too long after applying a search list elements.
+ [RT #36892]
+
+3916. [contrib] zone2sqlite checked wrong result code. Address
+ compiler warnings. [RT #36931]
+
+ --- 9.9.6b2 released ---
+
+3914. [bug] Allow the URI target and CAA value fields to
+ be zero length. [RT #36737]
+
+3913. [bug] Address race issue in dispatch. [RT #36731]
+
+3910. [bug] Fix races to free event during shutdown. [RT #36720]
+
+3909. [bug] When computing the number of elements required for a
+ acl count_acl_elements could have a short count leading
+ to a assertion failure. Also zero out new acl elements
+ in dns_acl_merge. [RT #36675]
+
+3908. [bug] rndc now differentiates between a zone in multiple
+ views and a zone that doesn't exist at all. [RT #36691]
+
+3907. [cleanup] Alphabetize rndc help. [RT #36683]
+
+3906. [protocol] Update URI record format to comply with
+ draft-faltstrom-uri-08. [RT #36642]
+
+3905. [bug] Address deadlock between view.c and adb.c. [RT #36341]
+
+3904. [func] Add the RPZ SOA to the additional section. [RT36507]
+
+3903. [bug] Improve the accuracy of DiG's reported round trip
+ time. [RT 36611]
+
+3902. [bug] liblwres wasn't handling link-local addresses in
+ nameserver clauses in resolv.conf. [RT #36039]
+
+3901. [protocol] Added support for CAA record type (RFC 6844).
+ [RT #36625]
+
+3900. [bug] Fix a crash in PostgreSQL DLZ driver. [RT #36637]
+
+3899. [bug] "request-ixfr" is only applicable to slave and redirect
+ zones. [RT #36608]
+
+3898. [bug] Too small a buffer in tohexstr() calls in test code.
+ [RT #36598]
+
+3894. [bug] Buffers in isc_print_vsnprintf were not properly
+ initialized leading to potential overflows when
+ printing out quad values. [RT #36505]
+
+3892. [bug] Setting '-t aaaa' in .digrc had unintended side
+ effects. [RT #36452]
+
+3891. [bug] Use ${INSTALL_SCRIPT} rather than ${INSTALL_PROGRAM}
+ to install python programs.
+
+3890. [bug] RRSIG sets that were not loaded in a single transaction
+ at start up where not being correctly added to
+ re-signing heaps. [RT #36302]
+
+3889. [port] hurd: configure fixes as per:
+ https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746540
+
+3887. [cleanup] Make all static symbols in rbtdb64 end in "64" so
+ they are easier to use in a debugger. [RT #36373]
+
+ --- 9.9.6b1 released ---
+
+3885. [port] Use 'open()' rather than 'file()' to open files in
+ python.
+
+3884. [protocol] Add CDS and CDNSKEY record types. [RT #36333]
+
+3881. [bug] Address memory leak with UPDATE error handling.
+ [RT #36303]
+
+3880. [test] Update ans.pl to work with new TSIG support in
+ Net::DNS; add additional Net::DNS version prerequisite
+ checks. [RT #36327]
+
+3879. [func] Add version printing option to various BIND utilities.
+ [RT #10686]
+
+3878. [bug] Using the incorrect filename for a DLZ module
+ caused a segmentation fault on startup. [RT #36286]
+
+3874. [test] Check that only "check-names master" is needed for
+ updates to be accepted.
+
+3873. [protocol] Only warn for SPF without TXT spf record. [RT #36210]
+
+3872. [bug] Address issues found by static analysis. [RT #36209]
+
+3871. [bug] Don't publish an activated key automatically before
+ its publish time. [RT #35063]
+
+3870. [placeholder]
+
+3869. [placeholder]
+
+3868. [bug] isc_mem_setwater incorrectly cleared hi_called
+ potentially leaving over memory cleaner running.
+ [RT #35270]
+
+3866. [bug] Named could die on disk full in generate_session_key.
+ [RT #36119]
+
+3864. [bug] RPZ didn't work well when being used as forwarder.
+ [RT #36060]
+
+3862. [cleanup] Return immediately if we are not going to log the
+ message in ns_client_dumpmessage.
+
+3861. [bug] Benign missing isc_buffer_availablelength check in
+ dns_message_pseudosectiontotext. [RT #36078]
+
+3860. [bug] ioctl(DP_POLL) array size needs to be determined
+ at run time as it is limited to {OPEN_MAX}.
+ [RT #35878]
+
+3858. [bug] Disable GCC 4.9 "delete null pointer check".
+ [RT #35968]
+
+3857. [bug] Make it harder for a incorrect NOEDNS classification
+ to be made. [RT #36020]
+
+3855. [bug] Limit smoothed round trip time aging to no more than
+ once a second. [RT #32909]
+
+3854. [cleanup] Report unrecognized options, if any, in the final
+ configure summary. [RT #36014]
+
+3853. [cleanup] Refactor dns_rdataslab_fromrdataset to separate out
+ the handling of a rdataset with no records. [RT #35968]
+
+3849. [doc] Alphabetized dig's +options. [RT #35992]
+
+3847. [bug] 'configure --with-dlz-postgres' failed to fail when
+ there is not support available.
+
+3846. [bug] "dig +notcp ixfr=<serial>" should result in a UDP
+ ixfr query. [RT #35980]
+
+3844. [bug] Use the x64 version of the Microsoft Visual C++
+ Redistributable when built for 64 bit Windows.
+ [RT #35973]
+
+3843. [protocol] Check EDNS EXPIRE option in dns_rdata_fromwire.
+ [RT #35969]
+
+3842. [bug] Adjust RRL log-only logging category. [RT #35945]
+
+3841. [cleanup] Refactor zone.c:add_opt to use dns_message_buildopt.
+ [RT #35924]
+
+3840. [port] Check for arc4random_addrandom() before using it;
+ it's been removed from OpenBSD 5.5. [RT #35907]
+
+3839. [test] Use only posix-compatible shell in system tests.
+ [RT #35625]
+
+3838. [protocol] EDNS EXPIRE as been assigned a code point of 9.
+
+3836. [bug] Address C++ keyword usage in header file.
+
+3834. [bug] The re-signing heaps were not being updated soon enough
+ leading to multiple re-generations of the same RRSIG
+ when a zone transfer was in progress. [RT #35273]
+
+3833. [bug] Cross compiling was broken due to calling genrandom at
+ build time. [RT #35869]
+
+3827. [contrib] The example DLZ driver (a version of which is
+ also used in the dlzexternal system test) could
+ use absolute names as relative. [RT #35802]
+
+3826. [bug] Corrected bad INSIST logic in isc_radix_remove().
+ [RT #35870]
+
+3825. [bug] Address sign extension bug in isc_regex_validate.
+ [RT #35758]
+
+3824. [bug] A collision between two flag values could cause
+ problems with cache cleaning. [RT #35858]
+
+3822. [bug] Log the correct type of static-stub zones when
+ removing them. [RT #35842]
+
+3819. [bug] NSEC3 hashes need to be able to be entered and
+ displayed without padding. This is not a issue for
+ currently defined algorithms but may be for future
+ hash algorithms. [RT #27925]
+
+3818. [bug] Stop lying to the optimizer that 'void *arg' is a
+ constant in isc_event_allocate.
+
+3815. [doc] Clarify "nsupdate -y" usage in man page. [RT #35808]
+
+3809. [doc] Fix NSID documentation.
+
+3807. [bug] Fix sign extension bug in dns_name_fromtext when
+ lowercase is set. [RT #35743]
+
+3806. [test] Improved system test portability. [RT #35625]
+
+3805. [contrib] Added contrib/perftcpdns, a performance testing tool
+ for DNS over TCP. [RT #35710]
+
+3804. [bug] Corrected a race condition in dispatch.c in which
+ portentry could be reset leading to an assertion
+ failure in socket_search(). (Change #3708
+ addressed the same issue but was incomplete.)
+ [RT #35128]
+
+3803. [bug] "named-checkconf -z" incorrectly rejected zones
+ using alternate data sources for not having a "file"
+ option. [RT #35685]
+
+3802. [bug] Various header files were not being installed.
+
+3801. [port] Fix probing for gssapi support on FreeBSD. [RT #35615]
+
+3799. [bug] Improve named's command line error reporting.
+ [RT #35603]
+
+3796. [bug] Register dns error codes. [RT #35629]
+
+3795. [bug] Make named-checkconf detect raw masterfiles for
+ hint zones and reject them. [RT #35268]
+
+3794. [maint] Added AAAA for C.ROOT-SERVERS.NET.
+
+3793. [bug] zone.c:save_nsec3param() could assert when out of
+ memory. [RT #35621]
+
+3792. [func] Provide links to the alternate statistics views when
+ displaying in a browser. [RT #35605]
+
+3791. [bug] solaris: remove extraneous return. [RT #35589]
+
+3787. [bug] The code that checks whether "auto-dnssec" is
+ allowed was ignoring "allow-update" ACLs set at
+ the options or view level. [RT #29536]
+
+3780. [bug] $GENERATE handled negative numbers incorrectly.
+ [RT #25528]
+
+3779. [cleanup] Clarify the error message when using an option
+ that was not enabled at compile time. [RT #35504]
+
+3778. [bug] Log a warning when the wrong address family is
+ used in "listen-on" or "listen-on-v6". [RT #17848]
+
+3775. [bug] dlz_dlopen driver could return the wrong error
+ code on API version mismatch, leading to a segfault.
+ [RT #35495]
+
+3773. [func] "host", "nslookup" and "nsupdate" now have
+ options to print the version number and exit.
+ [RT #26057]
+
+3770. [bug] "dig +trace" could fail with an assertion when it
+ needed to fall back to TCP due to a truncated
+ response. [RT #24660]
+
+3769. [doc] Improved documentation of "rndc signing -list".
+ [RT #30652]
+
+3768. [bug] "dnssec-checkds" was missing the SHA-384 digest
+ algorithm. [RT #34000]
+
+3767. [func] Log explicitly when using rndc.key to configure
+ command channel. [RT #35316]
+
+3765. [bug] Fixed a bug in "rndc secroots" that could crash
+ named when dumping an empty keynode. [RT #35469]
+
+3764. [bug] The dnssec-keygen/settime -S and -i options
+ (to set up a successor key and set the prepublication
+ interval) were missing from dnssec-keyfromlabel.
+ [RT #35394]
+
+3761. [bug] Address dangling reference bug in dns_keytable_add.
+ [RT #35471]
+
+3757. [port] Enable Python tools (dnssec-coverage,
+ dnssec-checkds) to run on Windows. [RT #34355]
+
+3756. [bug] GSSAPI Kerberos realm checking was broken in
+ check_config leading to spurious messages being
+ logged. [RT #35443]
+
+3754. [cleanup] win32: Installer now places files in the
+ Program Files area rather than system services.
+ [RT #35361]
+
+3753. [bug] allow-notify was ignoring keys. [RT #35425]
+
+3751. [tuning] The default setting for the -U option (setting
+ the number of UDP listeners per interface) has
+ been adjusted to improve performance. [RT #35417]
+
+3747. [bug] A race condition could lead to a core dump when
+ destroying a resolver fetch object. [RT #35385]
+
+3743. [bug] delegation-only flag wasn't working in forward zone
+ declarations despite being documented. This is
+ needed to support turning off forwarding and turning
+ on delegation only at the same name. [RT #35392]
+
+3742. [port] linux: libcap support: declare curval at start of
+ block. [RT #35387]
+
+3740. [contrib] Minor fixes to configure --with-dlz-bdb,
+ --with-dlz-postgres and --with-dlz-odbc. [RT #35340]
+
+3737. [bug] 'rndc retransfer' could trigger a assertion failure
+ with inline zones. [RT #35353]
+
+3736. [bug] nsupdate: When specifying a server by name,
+ fall back to alternate addresses if the first
+ address for that name is not reachable. [RT #25784]
+
+3734. [bug] Improve building with libtool. [RT #35314]
+
+3732. [contrib] Fixed a type mismatch causing the ODBC DLZ
+ driver to dump core on 64-bit systems. [RT #35324]
+
+3731. [func] Added a "no-case-compress" ACL, which causes
+ named to use case-insensitive compression
+ (disabling change #3645) for specified
+ clients. (This is useful when dealing
+ with broken client implementations that
+ use case-sensitive name comparisons,
+ rejecting responses that fail to match the
+ capitalization of the query that was sent.)
+ [RT #35300]
+
+3730. [cleanup] Added "never" as a synonym for "none" when
+ configuring key event dates in the dnssec tools.
+ [RT #35277]
+
+3729. [bug] dnssec-keygen could set the publication date
+ incorrectly when only the activation date was
+ specified on the command line. [RT #35278]
+
+3724. [bug] win32: Fixed a bug that prevented dig and
+ host from exiting properly after completing
+ a UDP query. [RT #35288]
+
+3720. [bug] Address compiler warnings. [RT #35261]
+
+3719. [bug] Address memory leak in in peer.c. [RT #35255]
+
+3718. [bug] A missing ISC_LINK_INIT in log.c. [RT #35260]
+
+3714. [test] System tests that need to test for cryptography
+ support before running can now use a common
+ "testcrypto.sh" script to do so. [RT #35213]
+
+3713. [bug] Save memory by not storing "also-notify" addresses
+ in zone objects that are configured not to send
+ notify requests. [RT #35195]
+
--- 9.9.5 released ---
--- 9.9.5rc2 released ---
@@ -163,7 +599,7 @@
3660. [cleanup] Changed the name of "isc-config.sh" to "bind9-config".
[RT #23825]
-3659. [port] solaris: don't add explict dependancies/rules for
+3659. [port] solaris: don't add explicit dependencies/rules for
python programs as make won't use the implicit rules.
[RT #34835]
@@ -1015,7 +1451,7 @@
when queryperf is available.
- the encoding of PASSTHRU action to "rpz-passthru".
(The old encoding is still accepted.)
- [RT #26172]
+ [RT #26172]
3329. [bug] Handle RRSIG signer-name case consistently: We
@@ -1279,7 +1715,7 @@
timestamp. [RT #26883]
3238. [bug] keyrdata was not being reinitialized in
- lib/dns/rbtdb.c:iszonesecure. [RT#26913]
+ lib/dns/rbtdb.c:iszonesecure. [RT #26913]
3237. [bug] dig -6 didn't work with +trace. [RT #26906]
@@ -1531,7 +1967,7 @@
3162. [test] start.pl: modified to allow for "named.args" in
ns*/ subdirectory to override stock arguments to
- named. Largely from RT#26044, but no separate ticket.
+ named. Largely from RT #26044, but no separate ticket.
3161. [bug] zone.c:del_sigs failed to always reset rdata leading
assertion failures. [RT #25880]
@@ -1787,7 +2223,7 @@
3090. [func] Make --with-gssapi default [RT #23738]
3089. [func] dnssec-dsfromkey now supports reading keys from
- standard input "dnssec-dsfromkey -f -". [RT# 20662]
+ standard input "dnssec-dsfromkey -f -". [RT #20662]
3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
and add setup.sh in order to resolve changing
@@ -2313,13 +2749,13 @@
2939. [func] Check that named successfully skips NSEC3 records
that fail to match the NSEC3PARAM record currently
- in use. [RT# 21868]
+ in use. [RT #21868]
2938. [bug] When generating signed responses, from a signed zone
that uses NSEC3, named would use a uninitialized
pointer if it needed to skip a NSEC3 record because
it didn't match the selected NSEC3PARAM record for
- zone. [RT# 21868]
+ zone. [RT #21868]
2937. [bug] Worked around an apparent race condition in over
memory conditions. Without this fix a DNS cache DB or
@@ -2398,7 +2834,7 @@
2926. [placeholder]
2925. [bug] Named failed to accept uncachable negative responses
- from insecure zones. [RT# 21555]
+ from insecure zones. [RT #21555]
2924. [func] 'rndc secroots' dump a combined summary of the
current managed keys combined with trusted keys.
@@ -2458,7 +2894,7 @@
2904. [bug] When using DLV, sub-zones of the zones in the DLV,
could be incorrectly marked as insecure instead of
secure leading to negative proofs failing. This was
- a unintended outcome from change 2890. [RT# 21392]
+ a unintended outcome from change 2890. [RT #21392]
2903. [bug] managed-keys-directory missing from namedconf.c.
[RT #21370]
@@ -2493,7 +2929,7 @@
2892. [bug] Handle REVOKED keys better. [RT #20961]
2891. [maint] Update empty-zones list to match
- draft-ietf-dnsop-default-local-zones-13. [RT# 21099]
+ draft-ietf-dnsop-default-local-zones-13. [RT #21099]
2890. [bug] Handle the introduction of new trusted-keys and
DS, DLV RRsets better. [RT #21097]
@@ -2904,7 +3340,7 @@
2761. [cleanup] Enable internal symbol table for backtrace only for
systems that are known to work. Currently, BSD
- variants, Linux and Solaris are supported. [RT# 20202]
+ variants, Linux and Solaris are supported. [RT #20202]
2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533]
@@ -2918,7 +3354,7 @@
2757. [bug] dig: assertion failure could occur in connect
timeout. [RT #20599]
-2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597]
+2756. [bug] Fixed corrupt logfile message in update.c. [RT #20597]
2755. [placeholder]
@@ -3913,7 +4349,7 @@
glue when sibling checks were disabled. [RT #18768]
2470. [bug] Elements of the isc_radix_node_t could be incorrectly
- overwritten. [RT# 18719]
+ overwritten. [RT #18719]
2469. [port] solaris: Work around Solaris's select() limitations.
[RT #18769]
@@ -3986,7 +4422,7 @@
2446. [func] Add a new log message about build options on startup.
A new command-line option '-V' for named is also
- provided to show this information. [RT# 18645]
+ provided to show this information. [RT #18645]
2445. [doc] ARM out-of-date on empty reverse zones (list includes
RFC1918 address, but these are not yet compiled in).
@@ -4000,7 +4436,7 @@
Fix this by doing an immediate WSAConnect() rather
than an io completion port type for UDP.
-2442. [bug] A lock could be destroyed twice. [RT# 18626]
+2442. [bug] A lock could be destroyed twice. [RT #18626]
2441. [bug] isc_radix_insert() could copy radix tree nodes
incompletely. [RT #18573]
@@ -4237,7 +4673,7 @@
[RT #18054]
2368. [port] Linux: use libcap for capability management if
- possible. [RT# 18026]
+ possible. [RT #18026]
2367. [bug] Improve counting of dns_resstatscounter_retry
[RT #18030]
@@ -4515,7 +4951,7 @@
2277. [bug] Empty zone names were not correctly being caught at
in the post parse checks. [RT #17357]
-2276. [bug] Install <dst/gssapi.h>. [RT# 17359]
+2276. [bug] Install <dst/gssapi.h>. [RT #17359]
2275. [func] Add support to dig to perform IXFR queries over UDP.
[RT #17235]
@@ -4523,7 +4959,7 @@
2274. [func] Log zone transfer statistics. [RT #17336]
2273. [bug] Adjust log level to WARNING when saving inconsistent
- stub/slave master and journal files. [RT# 17279]
+ stub/slave master and journal files. [RT #17279]
2272. [bug] Handle illegal dnssec-lookaside trust-anchor names.
[RT #17262]
@@ -4949,7 +5385,7 @@
packet was sent to. [RT #16613]
2142. [bug] Handle master files with a modification time that
- matches the epoch. [RT# 16612]
+ matches the epoch. [RT #16612]
2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
equivalent of LDH checks). [RT #16609]
@@ -4963,12 +5399,12 @@
2138. [bug] Lock order reversal in resolver.c. [RT #16653]
2137. [port] Mips little endian and/or mips 64 bit are now
- supported for atomic operations. [RT#16648]
+ supported for atomic operations. [RT #16648]
2136. [bug] nslookup/host looped if there was no search list
and the host didn't exist. [RT #16657]
-2135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
+2135. [bug] Uninitialized rdataset in sdlz.c. [RT #16656]
2134. [func] Additional statistics support. [RT #16666]
@@ -5036,7 +5472,7 @@
labels were failing. [RT #16447]
2113. [bug] nsupdate: if a zone is specified it should be used
- for server discover. [RT# 16455]
+ for server discover. [RT #16455]
2112. [security] Warn if weak RSA exponent is used. [RT #16460]
@@ -5084,7 +5520,7 @@
2095. [port] libbind: alway prototype inet_cidr_ntop_ipv6() and
net_cidr_ntop_ipv6(). [RT #16388]
-2094. [contrib] Update named-bootconf. [RT# 16404]
+2094. [contrib] Update named-bootconf. [RT #16404]
2093. [bug] named-checkzone -s was broken.
@@ -5236,7 +5672,7 @@
[RT #16179]
2043. [port] nsupdate/nslookup: Force the flushing of the prompt
- for interactive sessions. [RT#16148]
+ for interactive sessions. [RT #16148]
2042. [bug] named-checkconf was incorrectly rejecting the
logging category "config". [RT #16117]
@@ -5608,7 +6044,7 @@
1927. [bug] Access to soanode or nsnode in rbtdb violated the
lock order rule and could cause a dead lock.
- [RT# 15518]
+ [RT #15518]
1926. [bug] The Windows installer did not check for empty
passwords. BINDinstall was being installed in
@@ -5625,7 +6061,7 @@
dns_log_setcontext().
1921. [bug] Client memory contexts were not using internal
- malloc. [RT# 15434]
+ malloc. [RT #15434]
1920. [bug] The cache rbtdb lock array was too small to
have the desired performance characteristics.
@@ -5897,7 +6333,7 @@
1832. [bug] named fails to return BADKEY on unknown TSIG algorithm.
[RT #13620]
-1831. [doc] Update named-checkzone documentation. [RT#13604]
+1831. [doc] Update named-checkzone documentation. [RT #13604]
1830. [bug] adb lame cache has sence of test reversed. [RT #13600]
@@ -5918,7 +6354,7 @@
[RT #13510]
1823. [bug] Wrong macro used to check for point to point interface.
- [RT#13418]
+ [RT #13418]
1822. [bug] check-names test for RT was reversed. [RT #13382]
@@ -6078,7 +6514,7 @@
1771. [placeholder]
1770. [bug] named-checkconf failed to report missing a missing
- file clause for rbt{64} master/hint zones. [RT#13009]
+ file clause for rbt{64} master/hint zones. [RT #13009]
1769. [port] win32: change compiler flags /MTd ==> /MDd,
/MT ==> /MD.
@@ -6090,7 +6526,7 @@
support for (struct in6_pktinfo) failed. [RT #13077]
1766. [bug] Update the master file timestamp on successful refresh
- as well as the journal's timestamp. [RT# 13062]
+ as well as the journal's timestamp. [RT #13062]
1765. [bug] configure --with-openssl=auto failed. [RT #12937]
@@ -6243,7 +6679,7 @@
"ifconfig.sh down" didn't work for Solaris 9.
1716. [doc] named.conf(5) was being installed in the wrong
- location. [RT# 12441]
+ location. [RT #12441]
1715. [func] 'dig +trace' now randomly selects the next servers
to try. Report if there is a bad delegation.
@@ -6312,7 +6748,7 @@
are defined in named.conf. [RT #12023]
1693. [bug] max-journal-size was not effective for master zones
- with ixfr-from-differences set. [RT# 12024]
+ with ixfr-from-differences set. [RT #12024]
1692. [bug] Don't set -I, -L and -R flags when libcrypto is in
/usr/lib. [RT #11971]
@@ -6378,7 +6814,7 @@
1671. [contrib] queryperf: add NAPTR to the list of known types.
1670. [func] Log UPDATE requests to slave zones without an acl as
- "disabled" at debug level 3. [RT# 11657]
+ "disabled" at debug level 3. [RT #11657]
1669. [placeholder]
@@ -6445,7 +6881,7 @@
[RT #11445]
1646. [bug] win32: logging file versions didn't work with
- non-UNC filenames. [RT#11486]
+ non-UNC filenames. [RT #11486]
1645. [bug] named could trigger a REQUIRE failure if multiple
masters with keys are specified.
@@ -6495,17 +6931,17 @@
1629. [func] dig now supports IPv6 scoped addresses with the
extended format in the local-server part. [RT #8753]
-1628. [bug] Typo in Compaq Trucluster support. [RT# 11264]
+1628. [bug] Typo in Compaq Trucluster support. [RT #11264]
1627. [bug] win32: sockets were not being closed when the
- last external reference was removed. [RT# 11179]
+ last external reference was removed. [RT #11179]
-1626. [bug] --enable-getifaddrs was broken. [RT#11259]
+1626. [bug] --enable-getifaddrs was broken. [RT #11259]
1625. [bug] named failed to load/transfer RFC2535 signed zones
- which contained CNAMES. [RT# 11237]
+ which contained CNAMES. [RT #11237]
-1624. [bug] zonemgr_putio() call should be locked. [RT# 11163]
+1624. [bug] zonemgr_putio() call should be locked. [RT #11163]
1623. [bug] A serial number of zero was being displayed in the
"sending notifies" log message when also-notify was
@@ -6515,12 +6951,12 @@
available, and suppress wildcard binding if not.
1621. [bug] match-destinations did not work for IPv6 TCP queries.
- [RT# 11156]
+ [RT #11156]
1620. [func] When loading a zone report if it is signed. [RT #11149]
1619. [bug] Missing ISC_LIST_UNLINK in end_reserved_dispatches().
- [RT# 11118]
+ [RT #11118]
1618. [bug] Fencepost errors in dns_name_ishostname() and
dns_name_ismailbox() could trigger a INSIST().
@@ -6533,14 +6969,14 @@
1615. [port] Define ISC_SOCKADDR_LEN_T based on _BSD_SOCKLEN_T_ if
it is defined.
-1614. [port] win32: silence resource limit messages. [RT# 11101]
+1614. [port] win32: silence resource limit messages. [RT #11101]
1613. [bug] Builds would fail on machines w/o a if_nametoindex().
Missing #ifdef ISC_PLATFORM_HAVEIFNAMETOINDEX/#endif.
[RT #11119]
1612. [bug] check-names at the option/view level could trigger
- an INSIST. [RT# 11116]
+ an INSIST. [RT #11116]
1611. [bug] solaris: IPv6 interface scanning failed to cope with
no active IPv6 interfaces.
@@ -6560,7 +6996,7 @@
to use when making queries.
1607. [bug] dig, host and nslookup were still using random()
- to generate query ids. [RT# 11013]
+ to generate query ids. [RT #11013]
1606. [bug] DLV insecurity proof was failing.
@@ -6571,14 +7007,14 @@
partially initialized structure.
1603. [bug] nsupdate: set interactive based on isatty().
- [RT# 10929]
+ [RT #10929]
1602. [bug] Logging to a file failed unless a size was specified.
- [RT# 10925]
+ [RT #10925]
1601. [bug] Silence spurious warning 'both "recursion no;" and
"allow-recursion" active' warning from view "_bind".
- [RT# 10920]
+ [RT #10920]
1600. [bug] Duplicate zone pre-load checks were not case
insensitive.
@@ -6601,9 +7037,9 @@
queries while the dump was in progress. [RT #10565]
1593. [bug] rndc should return "unknown command" to unknown
- commands. [RT# 10642]
+ commands. [RT #10642]
-1592. [bug] configure_view() could leak a dispatch. [RT# 10675]
+1592. [bug] configure_view() could leak a dispatch. [RT #10675]
1591. [bug] libbind: updated to BIND 8.4.5.
@@ -6644,7 +7080,7 @@
workaround code. [RT #10331]
1576. [bug] Race condition in dns_dispatch_addresponse().
- [RT# 10272]
+ [RT #10272]
1575. [func] Log TSIG name on TSIG verify failure. [RT #4404]
@@ -6669,7 +7105,7 @@
complete answer message to the last update.
1568. [bug] nsupdate now reports that the update failed in
- interactive mode. [RT# 10236]
+ interactive mode. [RT #10236]
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
@@ -6720,7 +7156,7 @@
were specified in /etc/resolv.conf. [RT #8232]
1553. [bug] The windows socket code could stop accepting
- connections. [RT#10115]
+ connections. [RT #10115]
1552. [bug] Accept NOTIFY requests from mapped masters if
matched-mapped is set. [RT #10049]
@@ -6733,7 +7169,7 @@
in a easily parsable format (-D and -o).
1548. [bug] When parsing APL records it was possible to silently
- accept out of range ADDRESSFAMILY values. [RT# 9979]
+ accept out of range ADDRESSFAMILY values. [RT #9979]
1547. [bug] Named wasted memory recording duplicate lame zone
entries. [RT #9341]
@@ -6770,10 +7206,10 @@
1535. [placeholder]
-1534. [bug] Race condition when priming cache. [RT# 9940]
+1534. [bug] Race condition when priming cache. [RT #9940]
1533. [func] Warn if both "recursion no;" and "allow-recursion"
- are active. [RT# 4389]
+ are active. [RT #4389]
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
@@ -6785,7 +7221,7 @@
moment. [RT #9462]
1529. [bug] "notify explicit;" failed to log that NOTIFY messages
- were being sent for the zone. [RT# 9442]
+ were being sent for the zone. [RT #9442]
1528. [cleanup] Simplify some dns_name_ functions based on the
deprecation of bitstring labels.
@@ -6801,18 +7237,18 @@
1525. [bug] dns_cache_create() could trigger a REQUIRE
failure in isc_mem_put() during error cleanup.
- [RT# 9360]
+ [RT #9360]
1524. [port] AIX needs to be able to resolve all symbols when
creating shared libraries (--with-libtool).
-1523. [bug] Fix race condition in rbtdb. [RT# 9189]
+1523. [bug] Fix race condition in rbtdb. [RT #9189]
1522. [bug] dns_db_findnode() relax the requirements on 'name'.
- [RT# 9286]
+ [RT #9286]
1521. [bug] dns_view_createresolver() failed to check the
- result from isc_mem_create(). [RT# 9294]
+ result from isc_mem_create(). [RT #9294]
1520. [protocol] Add SSHFP (SSH Finger Print) type.
@@ -6912,7 +7348,7 @@
[RT #6189]
1486. [bug] isc_print_snprintf() '%%' consumed one too many format
- characters. [RT# 8230]
+ characters. [RT #8230]
1485. [bug] gen failed to handle high type values. [RT #6225]
@@ -7249,7 +7685,7 @@
1372. [bug] named crashes with an assertion failure on exit when
sharing the same port for listening and querying, and
- changing listening addresses several times. [RT# 3509]
+ changing listening addresses several times. [RT #3509]
1371. [bug] notify-source-v6, transfer-source-v6 and
query-source-v6 with explicit addresses and using the
@@ -7272,7 +7708,7 @@
addresses / prefixes.
1364. [func] Log file name when unable to open memory statistics
- and dump database files. [RT# 3437]
+ and dump database files. [RT #3437]
1363. [func] Listen-on-v6 now supports specific addresses.
@@ -7584,7 +8020,7 @@
1252. [bug] Dig, host and nslookup were not checking the address
the answer was coming from against the address it was
- sent to. [RT# 2692]
+ sent to. [RT #2692]
1251. [port] win32: a make file contained absolute version specific
references.
@@ -7656,7 +8092,7 @@
1227. [bug] dns_lex_getmastertoken() now returns ISC_R_BADNUMBER
if a number was expected and some other token was
- found. [RT#2532]
+ found. [RT #2532]
1226. [func] Use EDNS for zone refresh queries. [RT #2551]
@@ -9269,7 +9705,7 @@
729. [port] pthread_setconcurrency() needs to be called on Solaris.
728. [bug] Fix comment processing on master file directives.
- [RT# 757]
+ [RT #757]
727. [port] Work around OS bug where accept() succeeds but
fails to fill in the peer address of the accepted
@@ -9311,7 +9747,7 @@
failure in adb.c. [RT #738]
714. [bug] Preserve interval timers across reloads unless changed.
- [RT# 729]
+ [RT #729]
713. [func] named-checkconf takes '-t directory' similar to named.
[RT #726]
@@ -9531,7 +9967,7 @@
644. [bug] #622 needed more work. [RT #562]
643. [bug] xfrin error messages made more verbose, added class
- of the zone. [RT# 599]
+ of the zone. [RT #599]
642. [bug] Break the exit_check() race in the zone module.
[RT #598]
@@ -9959,7 +10395,7 @@
assertion. [RT #399]
515. [bug] The ssu table was not being attached / detached
- by dns_zone_[sg]etssutable. [RT#397]
+ by dns_zone_[sg]etssutable. [RT #397]
514. [func] Retry refresh and notify queries if they timeout.
[RT #388]
@@ -10293,7 +10729,7 @@
transfers were finished.
413. [bug] Notify could attempt to use the zone database after
- it had been unloaded. [RT#267]
+ it had been unloaded. [RT #267]
412. [bug] named -v didn't print the version.
@@ -10481,7 +10917,7 @@
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
- [RT# 187]
+ [RT #187]
352. [bug] Race condition in dns_client_t startup could cause
an assertion failure.
diff --git a/FAQ b/FAQ
index 5e86a082f5cb..2b71a1930af0 100644
--- a/FAQ
+++ b/FAQ
@@ -1,6 +1,7 @@
Frequently Asked Questions about BIND 9
-Copyright © 2004-2010, 2013 Internet Systems Consortium, Inc. ("ISC")
+Copyright © 2004-2010, 2013, 2014 Internet Systems Consortium, Inc.
+("ISC")
Copyright © 2000-2003 Internet Software Consortium.
@@ -28,8 +29,8 @@ A: Short Answer: No.
What addresses to listen on? For a laptop on the move a lot you may
only want to listen on the loop back interfaces.
- Who do you offer recursive service to? Is there are firewall to
- consider? If so is it stateless or stateful. Are you directly on the
+ To whom do you offer recursive service? Is there a firewall to
+ consider? If so, is it stateless or stateful? Are you directly on the
Internet? Are you on a private network? Are you on a NAT'd network? The
answers to all these questions change how you configure even a caching
name server.
@@ -104,8 +105,8 @@ A: You are most likely running named as a non-root user, and that user
fixing this are to create a /var/run/named directory owned by the named
user and set pid-file to "/var/run/named/named.pid", or set pid-file to
"named.pid", which will put the file in the directory specified by the
- directory option (which, in this case, must be writable by the named
- user).
+ directory option (which, in this case, must be writable by the user
+ named is running as).
Q: I can query the nameserver from the nameserver but not from other
machines. Why?
@@ -264,7 +265,7 @@ Q: I get a error message like "zone wireless.ietf56.ietf.org/IN: loading
master file primaries/wireless.ietf56.ietf.org: no owner".
A: This error is produced when a line in the master file contains leading
- white space (tab/space) but the is no current record owner name to
+ white space (tab/space) but there is no current record owner name to
inherit the name from. Usually this is the result of putting white
space before a comment, forgetting the "@" for the SOA record, or
indenting the master file.
diff --git a/FAQ.xml b/FAQ.xml
index d0f903be782e..6a5b77e1c370 100644
--- a/FAQ.xml
+++ b/FAQ.xml
@@ -83,8 +83,8 @@
you may only want to listen on the loop back interfaces.
</para>
<para>
- Who do you offer recursive service to? Is there are firewall
- to consider? If so is it stateless or stateful. Are you
+ To whom do you offer recursive service? Is there a firewall
+ to consider? If so, is it stateless or stateful? Are you
directly on the Internet? Are you on a private network? Are
you on a NAT'd network? The answers
to all these questions change how you configure even a
@@ -246,7 +246,7 @@ view "chaos" chaos {
"/var/run/named/named.pid", or set pid-file to "named.pid",
which will put the file in the directory specified by the
directory option (which, in this case, must be writable by
- the named user).
+ the user named is running as).
</para>
</answer>
</qandaentry>
@@ -480,7 +480,7 @@ Master 10.0.1.1:
<answer>
<para>
This error is produced when a line in the master file
- contains leading white space (tab/space) but the is no
+ contains leading white space (tab/space) but there is no
current record owner name to inherit the name from. Usually
this is the result of putting white space before a comment,
forgetting the "@" for the SOA record, or indenting the master
diff --git a/FREEBSD-Xlist b/FREEBSD-Xlist
index 47b335c3ae45..a7936b6f3f36 100644
--- a/FREEBSD-Xlist
+++ b/FREEBSD-Xlist
@@ -26,6 +26,7 @@ lib/dns/Atffile
lib/dns/tests
lib/isc/Atffile
lib/isc/tests
+lib/lwres/tests
# Doc stuff
doc/arm/latex-fixup.pl
diff --git a/README b/README
index 718b71a978cd..7519a116834a 100644
--- a/README
+++ b/README
@@ -51,6 +51,15 @@ BIND 9
For up-to-date release notes and errata, see
http://www.isc.org/software/bind9/releasenotes
+BIND 9.9.6
+
+ BIND 9.9.6 is a maintenance release, and also includes
+ the following new functionality.
+
+ - The former behavior with respect to capitalization of names
+ (prior to BIND 9.9.5) can be restored for specific clients via
+ the new "no-case-compress" ACL.
+
BIND 9.9.5
BIND 9.9.5 is a maintenance release, and patches the security
@@ -370,6 +379,14 @@ Change Log
[doc] Documentation
+ [contrib] Changes to the contributed tools and
+ libraries in the 'contrib' subdirectory
+
+ [placeholder] Used in the master development branch to
+ reserve change numbers for use in other
+ branches, e.g. when fixing a bug that only
+ exists in older releases
+
In general, [func] and [experimental] tags will only appear
in new-feature releases (i.e., those with version numbers
ending in zero). Some new functionality may be backported to
@@ -379,22 +396,28 @@ Change Log
Bug Reports and Mailing Lists
- Bugs reports should be sent to
+ Bug reports should be sent to:
bind9-bugs@isc.org
- To join the BIND Users mailing list, send mail to
+ Feature requests can be sent to:
- bind-users-request@isc.org
+ bind-suggest@isc.org
- archives of which can be found via
+ To join or view the archives of the BIND Users mailing list,
+ visit:
- http://www.isc.org/ops/lists/
+ https://lists.isc.org/mailman/listinfo/bind-users
If you're planning on making changes to the BIND 9 source
- code, you might want to join the BIND Workers mailing list.
- Send mail to
+ code, you may also want to join the BIND Workers mailing
+ list:
+
+ https://lists.isc.org/mailman/listinfo/bind-workers
+
+ Information on read-only Git access, coding style and developer
+ guidelines can be found at:
- bind-workers-request@isc.org
+ http://www.isc.org/git/
diff --git a/acconfig.h b/acconfig.h
index 3d412d93c878..14eca17cf821 100644
--- a/acconfig.h
+++ b/acconfig.h
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004, 2005, 2007, 2008, 2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004, 2005, 2007, 2008, 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -73,6 +73,9 @@
/** define if arc4random() exists */
#undef HAVE_ARC4RANDOM
+/** define if arc4random_addrandom() exists */
+#undef HAVE_ARC4RANDOM_ADDRANDOM
+
/**
* define if pthread_setconcurrency() should be called to tell the
* OS how many threads we might want to run.
diff --git a/aclocal.m4 b/aclocal.m4
index 3f017c999647..a7ee53146f8b 100644
--- a/aclocal.m4
+++ b/aclocal.m4
@@ -3,3 +3,15 @@ sinclude(libtool.m4/ltoptions.m4)dnl
sinclude(libtool.m4/ltsugar.m4)dnl
sinclude(libtool.m4/ltversion.m4)dnl
sinclude(libtool.m4/lt~obsolete.m4)dnl
+
+m4_divert_text(HELP_CANON, [[
+ NOTE: If PREFIX is not set, then the default values for --sysconfdir
+ and --localstatedir are /etc and /var, respectively.]])
+m4_divert_text(HELP_END, [[
+Professional support for BIND is provided by Internet Systems Consortium,
+Inc. Information about paid support and training options is available at
+https://www.isc.org/support.
+
+Help can also often be found on the BIND Users mailing list
+(https://lists.isc.org/mailman/listinfo/bind-users) or in the #bind
+channel of the Freenode IRC service.]])
diff --git a/bin/check/Makefile.in b/bin/check/Makefile.in
index c191605605b1..b88be3cb85bf 100644
--- a/bin/check/Makefile.in
+++ b/bin/check/Makefile.in
@@ -1,4 +1,4 @@
-# Copyright (C) 2004-2007, 2009, 2012 Internet Systems Consortium, Inc. ("ISC")
+# Copyright (C) 2004-2007, 2009, 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
# Copyright (C) 2000-2003 Internet Software Consortium.
#
# Permission to use, copy, modify, and/or distribute this software for any
@@ -70,7 +70,7 @@ named-checkzone.@O@: named-checkzone.c
-c ${srcdir}/named-checkzone.c
named-checkconf@EXEEXT@: named-checkconf.@O@ check-tool.@O@ ${ISCDEPLIBS} \
- ${ISCCFGDEPLIBS} ${BIND9DEPLIBS}
+ ${DNSDEPLIBS} ${ISCCFGDEPLIBS} ${BIND9DEPLIBS}
export BASEOBJS="named-checkconf.@O@ check-tool.@O@"; \
export LIBS0="${BIND9LIBS} ${ISCCFGLIBS} ${DNSLIBS}"; \
${FINALBUILDCMD}
diff --git a/bin/check/named-checkconf.8 b/bin/check/named-checkconf.8
index 909184ef2f1d..ad6c497f3a31 100644
--- a/bin/check/named-checkconf.8
+++ b/bin/check/named-checkconf.8
@@ -20,11 +20,11 @@
.\" Title: named\-checkconf
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: June 14, 2000
+.\" Date: January 10, 2014
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "NAMED\-CHECKCONF" "8" "June 14, 2000" "BIND9" "BIND9"
+.TH "NAMED\-CHECKCONF" "8" "January 10, 2014" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
diff --git a/bin/check/named-checkconf.c b/bin/check/named-checkconf.c
index fd3795a57fd2..a75df96d1fea 100644
--- a/bin/check/named-checkconf.c
+++ b/bin/check/named-checkconf.c
@@ -143,18 +143,6 @@ get_checknames(const cfg_obj_t **maps, const cfg_obj_t **obj) {
}
static isc_result_t
-config_get(const cfg_obj_t **maps, const char *name, const cfg_obj_t **obj) {
- int i;
-
- for (i = 0;; i++) {
- if (maps[i] == NULL)
- return (ISC_R_NOTFOUND);
- if (cfg_map_get(maps[i], name, obj) == ISC_R_SUCCESS)
- return (ISC_R_SUCCESS);
- }
-}
-
-static isc_result_t
configure_hint(const char *zfile, const char *zclass, isc_mem_t *mctx) {
isc_result_t result;
dns_db_t *db = NULL;
@@ -190,6 +178,7 @@ configure_zone(const char *vclass, const char *view,
const char *zname;
const char *zfile = NULL;
const cfg_obj_t *maps[4];
+ const cfg_obj_t *mastersobj = NULL;
const cfg_obj_t *zoptions = NULL;
const cfg_obj_t *classobj = NULL;
const cfg_obj_t *typeobj = NULL;
@@ -223,6 +212,15 @@ configure_zone(const char *vclass, const char *view,
if (typeobj == NULL)
return (ISC_R_FAILURE);
+ /*
+ * Skip checks when using an alternate data source.
+ */
+ cfg_map_get(zoptions, "database", &dbobj);
+ if (dbobj != NULL &&
+ strcmp("rbt", cfg_obj_asstring(dbobj)) != 0 &&
+ strcmp("rbt64", cfg_obj_asstring(dbobj)) != 0)
+ return (ISC_R_SUCCESS);
+
cfg_map_get(zoptions, "file", &fileobj);
if (fileobj != NULL)
zfile = cfg_obj_asstring(fileobj);
@@ -238,13 +236,18 @@ configure_zone(const char *vclass, const char *view,
(strcasecmp(cfg_obj_asstring(typeobj), "redirect") != 0))
return (ISC_R_SUCCESS);
+ /*
+ * Is the redirect zone configured as a slave?
+ */
+ if (strcasecmp(cfg_obj_asstring(typeobj), "redirect") == 0) {
+ cfg_map_get(zoptions, "masters", &mastersobj);
+ if (mastersobj != NULL)
+ return (ISC_R_SUCCESS);
+ }
+
if (zfile == NULL)
return (ISC_R_FAILURE);
- cfg_map_get(zoptions, "database", &dbobj);
- if (dbobj != NULL)
- return (ISC_R_SUCCESS);
-
obj = NULL;
if (get_maps(maps, "check-dup-records", &obj)) {
if (strcasecmp(cfg_obj_asstring(obj), "warn") == 0) {
@@ -366,8 +369,7 @@ configure_zone(const char *vclass, const char *view,
masterformat = dns_masterformat_text;
fmtobj = NULL;
- result = config_get(maps, "masterfile-format", &fmtobj);
- if (result == ISC_R_SUCCESS) {
+ if (get_maps(maps, "masterfile-format", &fmtobj)) {
const char *masterformatstr = cfg_obj_asstring(fmtobj);
if (strcasecmp(masterformatstr, "text") == 0)
masterformat = dns_masterformat_text;
diff --git a/bin/check/named-checkconf.docbook b/bin/check/named-checkconf.docbook
index 485dc42a93d1..a5e50334e2ae 100644
--- a/bin/check/named-checkconf.docbook
+++ b/bin/check/named-checkconf.docbook
@@ -18,10 +18,9 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: named-checkconf.docbook,v 1.22 2009/12/28 23:21:16 each Exp $ -->
<refentry id="man.named-checkconf">
<refentryinfo>
- <date>June 14, 2000</date>
+ <date>January 10, 2014</date>
</refentryinfo>
<refmeta>
diff --git a/bin/check/named-checkconf.html b/bin/check/named-checkconf.html
index 1c5ebc125768..8caabf260e1e 100644
--- a/bin/check/named-checkconf.html
+++ b/bin/check/named-checkconf.html
@@ -32,7 +32,7 @@
<div class="cmdsynopsis"><p><code class="command">named-checkconf</code> [<code class="option">-h</code>] [<code class="option">-v</code>] [<code class="option">-j</code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] {filename} [<code class="option">-p</code>] [<code class="option">-x</code>] [<code class="option">-z</code>]</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543403"></a><h2>DESCRIPTION</h2>
+<a name="id2543411"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">named-checkconf</strong></span>
checks the syntax, but not the semantics, of a
<span><strong class="command">named</strong></span> configuration file. The file is parsed
@@ -52,7 +52,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543452"></a><h2>OPTIONS</h2>
+<a name="id2543460"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-h</span></dt>
<dd><p>
@@ -101,21 +101,21 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543596"></a><h2>RETURN VALUES</h2>
+<a name="id2543604"></a><h2>RETURN VALUES</h2>
<p><span><strong class="command">named-checkconf</strong></span>
returns an exit status of 1 if
errors were detected and 0 otherwise.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543608"></a><h2>SEE ALSO</h2>
+<a name="id2543616"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">named-checkzone</span>(8)</span>,
<em class="citetitle">BIND 9 Administrator Reference Manual</em>.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543638"></a><h2>AUTHOR</h2>
+<a name="id2543645"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
diff --git a/bin/check/named-checkzone.8 b/bin/check/named-checkzone.8
index 8538ca886c2a..f9bba0e73de2 100644
--- a/bin/check/named-checkzone.8
+++ b/bin/check/named-checkzone.8
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2004-2007, 2009-2011, 2013 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004-2007, 2009-2011, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
.\" Copyright (C) 2000-2002 Internet Software Consortium.
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
@@ -20,11 +20,11 @@
.\" Title: named\-checkzone
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: June 13, 2000
+.\" Date: April 29, 2013
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "NAMED\-CHECKZONE" "8" "June 13, 2000" "BIND9" "BIND9"
+.TH "NAMED\-CHECKZONE" "8" "April 29, 2013" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -251,7 +251,7 @@ so that include directives in the configuration file are processed as if run by
.PP
\-T \fImode\fR
.RS 4
-Check if Sender Policy Framework records (TXT and SPF) both exist or both don't exist. A warning is issued if they don't match. Possible modes are
+Check if Sender Policy Framework (SPF) records exist and issues a warning if an SPF\-formatted TXT record is not also present. Possible modes are
\fB"warn"\fR
(default),
\fB"ignore"\fR.
@@ -302,7 +302,7 @@ BIND 9 Administrator Reference Manual.
.PP
Internet Systems Consortium
.SH "COPYRIGHT"
-Copyright \(co 2004\-2007, 2009\-2011, 2013 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2004\-2007, 2009\-2011, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
Copyright \(co 2000\-2002 Internet Software Consortium.
.br
diff --git a/bin/check/named-checkzone.docbook b/bin/check/named-checkzone.docbook
index ea37fa2b57f9..f1590b55474a 100644
--- a/bin/check/named-checkzone.docbook
+++ b/bin/check/named-checkzone.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2004-2007, 2009-2011, 2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2007, 2009-2011, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2002 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -18,10 +18,9 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: named-checkzone.docbook,v 1.44 2011/12/22 07:32:39 each Exp $ -->
<refentry id="man.named-checkzone">
<refentryinfo>
- <date>June 13, 2000</date>
+ <date>April 29, 2013</date>
</refentryinfo>
<refmeta>
@@ -40,6 +39,7 @@
<year>2010</year>
<year>2011</year>
<year>2013</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
@@ -408,10 +408,10 @@
<term>-T <replaceable class="parameter">mode</replaceable></term>
<listitem>
<para>
- Check if Sender Policy Framework records (TXT and SPF)
- both exist or both don't exist. A warning is issued
- if they don't match. Possible modes are
- <command>"warn"</command> (default), <command>"ignore"</command>.
+ Check if Sender Policy Framework (SPF) records exist
+ and issues a warning if an SPF-formatted TXT record is
+ not also present. Possible modes are <command>"warn"</command>
+ (default), <command>"ignore"</command>.
</para>
</listitem>
</varlistentry>
diff --git a/bin/check/named-checkzone.html b/bin/check/named-checkzone.html
index 6941326996cc..7d44053c252d 100644
--- a/bin/check/named-checkzone.html
+++ b/bin/check/named-checkzone.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2007, 2009-2011, 2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2007, 2009-2011, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2002 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -33,7 +33,7 @@
<div class="cmdsynopsis"><p><code class="command">named-compilezone</code> [<code class="option">-d</code>] [<code class="option">-j</code>] [<code class="option">-q</code>] [<code class="option">-v</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-C <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-f <em class="replaceable"><code>format</code></em></code>] [<code class="option">-F <em class="replaceable"><code>format</code></em></code>] [<code class="option">-i <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-k <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-m <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-n <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-L <em class="replaceable"><code>serial</code></em></code>] [<code class="option">-r <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-s <em class="replaceable"><code>style</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-T <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-w <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-D</code>] [<code class="option">-W <em class="replaceable"><code>mode</code></em></code>] {<code class="option">-o <em class="replaceable"><code>filename</code></em></code>} {zonename} {filename}</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543736"></a><h2>DESCRIPTION</h2>
+<a name="id2543747"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">named-checkzone</strong></span>
checks the syntax and integrity of a zone file. It performs the
same checks as <span><strong class="command">named</strong></span> does when loading a
@@ -53,7 +53,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543771"></a><h2>OPTIONS</h2>
+<a name="id2543782"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-d</span></dt>
<dd><p>
@@ -232,10 +232,10 @@
</p></dd>
<dt><span class="term">-T <em class="replaceable"><code>mode</code></em></span></dt>
<dd><p>
- Check if Sender Policy Framework records (TXT and SPF)
- both exist or both don't exist. A warning is issued
- if they don't match. Possible modes are
- <span><strong class="command">"warn"</strong></span> (default), <span><strong class="command">"ignore"</strong></span>.
+ Check if Sender Policy Framework (SPF) records exist
+ and issues a warning if an SPF-formatted TXT record is
+ not also present. Possible modes are <span><strong class="command">"warn"</strong></span>
+ (default), <span><strong class="command">"ignore"</strong></span>.
</p></dd>
<dt><span class="term">-w <em class="replaceable"><code>directory</code></em></span></dt>
<dd><p>
@@ -270,14 +270,14 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2544612"></a><h2>RETURN VALUES</h2>
+<a name="id2544622"></a><h2>RETURN VALUES</h2>
<p><span><strong class="command">named-checkzone</strong></span>
returns an exit status of 1 if
errors were detected and 0 otherwise.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2544624"></a><h2>SEE ALSO</h2>
+<a name="id2544634"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
<em class="citetitle">RFC 1035</em>,
@@ -285,7 +285,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2544657"></a><h2>AUTHOR</h2>
+<a name="id2544667"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
diff --git a/bin/confgen/ddns-confgen.8 b/bin/confgen/ddns-confgen.8
index fd2670e5ff4e..5ceb80e96af4 100644
--- a/bin/confgen/ddns-confgen.8
+++ b/bin/confgen/ddns-confgen.8
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
.\" purpose with or without fee is hereby granted, provided that the above
@@ -19,11 +19,11 @@
.\" Title: ddns\-confgen
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: Jan 29, 2009
+.\" Date: September 18, 2009
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "DDNS\-CONFGEN" "8" "Jan 29, 2009" "BIND9" "BIND9"
+.TH "DDNS\-CONFGEN" "8" "September 18, 2009" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -139,5 +139,5 @@ BIND 9 Administrator Reference Manual.
.PP
Internet Systems Consortium
.SH "COPYRIGHT"
-Copyright \(co 2009 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
diff --git a/bin/confgen/ddns-confgen.c b/bin/confgen/ddns-confgen.c
index e2a8628377ae..99663428d843 100644
--- a/bin/confgen/ddns-confgen.c
+++ b/bin/confgen/ddns-confgen.c
@@ -46,6 +46,7 @@
#include <dns/keyvalues.h>
#include <dns/name.h>
+#include <dns/result.h>
#include <dst/dst.h>
#include <confgen/os.h>
@@ -99,6 +100,8 @@ main(int argc, char **argv) {
int len = 0;
int ch;
+ dns_result_register();
+
result = isc_file_progname(*argv, program, sizeof(program));
if (result != ISC_R_SUCCESS)
memmove(program, "ddns-confgen", 13);
diff --git a/bin/confgen/ddns-confgen.docbook b/bin/confgen/ddns-confgen.docbook
index cedfbf5726c8..1627c9ea04f8 100644
--- a/bin/confgen/ddns-confgen.docbook
+++ b/bin/confgen/ddns-confgen.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
-
- Permission to use, copy, modify, and/or distribute this software for any
- purpose with or without fee is hereby granted, provided that the above
@@ -17,10 +17,9 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: ddns-confgen.docbook,v 1.6 2009/09/18 22:08:55 fdupont Exp $ -->
<refentry id="man.ddns-confgen">
<refentryinfo>
- <date>Jan 29, 2009</date>
+ <date>September 18, 2009</date>
</refentryinfo>
<refmeta>
@@ -37,6 +36,7 @@
<docinfo>
<copyright>
<year>2009</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
</docinfo>
diff --git a/bin/confgen/ddns-confgen.html b/bin/confgen/ddns-confgen.html
index 6b2f7dc5d563..bdbd35ea0148 100644
--- a/bin/confgen/ddns-confgen.html
+++ b/bin/confgen/ddns-confgen.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
-
- Permission to use, copy, modify, and/or distribute this software for any
- purpose with or without fee is hereby granted, provided that the above
@@ -31,7 +31,7 @@
<div class="cmdsynopsis"><p><code class="command">ddns-confgen</code> [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>] [<code class="option">-h</code>] [<code class="option">-k <em class="replaceable"><code>keyname</code></em></code>] [<code class="option">-r <em class="replaceable"><code>randomfile</code></em></code>] [ -s <em class="replaceable"><code>name</code></em> | -z <em class="replaceable"><code>zone</code></em> ] [<code class="option">-q</code>] [name]</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543396"></a><h2>DESCRIPTION</h2>
+<a name="id2543406"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">ddns-confgen</strong></span>
generates a key for use by <span><strong class="command">nsupdate</strong></span>
and <span><strong class="command">named</strong></span>. It simplifies configuration
@@ -58,7 +58,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543456"></a><h2>OPTIONS</h2>
+<a name="id2543466"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-a <em class="replaceable"><code>algorithm</code></em></span></dt>
<dd><p>
@@ -125,7 +125,7 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543643"></a><h2>SEE ALSO</h2>
+<a name="id2543654"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">nsupdate</span>(1)</span>,
<span class="citerefentry"><span class="refentrytitle">named.conf</span>(5)</span>,
<span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
@@ -133,7 +133,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543682"></a><h2>AUTHOR</h2>
+<a name="id2543692"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
diff --git a/bin/confgen/rndc-confgen.8 b/bin/confgen/rndc-confgen.8
index faffdac4b5e3..1276344e372e 100644
--- a/bin/confgen/rndc-confgen.8
+++ b/bin/confgen/rndc-confgen.8
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2004, 2005, 2007, 2009 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004, 2005, 2007, 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
.\" Copyright (C) 2001, 2003 Internet Software Consortium.
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
@@ -20,11 +20,11 @@
.\" Title: rndc\-confgen
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: Aug 27, 2001
+.\" Date: June 15, 2009
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "RNDC\-CONFGEN" "8" "Aug 27, 2001" "BIND9" "BIND9"
+.TH "RNDC\-CONFGEN" "8" "June 15, 2009" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -205,7 +205,7 @@ BIND 9 Administrator Reference Manual.
.PP
Internet Systems Consortium
.SH "COPYRIGHT"
-Copyright \(co 2004, 2005, 2007, 2009 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2004, 2005, 2007, 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
Copyright \(co 2001, 2003 Internet Software Consortium.
.br
diff --git a/bin/confgen/rndc-confgen.docbook b/bin/confgen/rndc-confgen.docbook
index af2cc4321dda..b3220754ad66 100644
--- a/bin/confgen/rndc-confgen.docbook
+++ b/bin/confgen/rndc-confgen.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2004, 2005, 2007, 2009 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2001, 2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -18,10 +18,9 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: rndc-confgen.docbook,v 1.4 2009/06/15 23:47:59 tbox Exp $ -->
<refentry id="man.rndc-confgen">
<refentryinfo>
- <date>Aug 27, 2001</date>
+ <date>June 15, 2009</date>
</refentryinfo>
<refmeta>
@@ -41,6 +40,7 @@
<year>2005</year>
<year>2007</year>
<year>2009</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
diff --git a/bin/confgen/rndc-confgen.html b/bin/confgen/rndc-confgen.html
index 03ee5199a116..84eae417d1f4 100644
--- a/bin/confgen/rndc-confgen.html
+++ b/bin/confgen/rndc-confgen.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004, 2005, 2007, 2009 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2001, 2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -32,7 +32,7 @@
<div class="cmdsynopsis"><p><code class="command">rndc-confgen</code> [<code class="option">-a</code>] [<code class="option">-b <em class="replaceable"><code>keysize</code></em></code>] [<code class="option">-c <em class="replaceable"><code>keyfile</code></em></code>] [<code class="option">-h</code>] [<code class="option">-k <em class="replaceable"><code>keyname</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-r <em class="replaceable"><code>randomfile</code></em></code>] [<code class="option">-s <em class="replaceable"><code>address</code></em></code>] [<code class="option">-t <em class="replaceable"><code>chrootdir</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>]</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543433"></a><h2>DESCRIPTION</h2>
+<a name="id2543444"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">rndc-confgen</strong></span>
generates configuration files
for <span><strong class="command">rndc</strong></span>. It can be used as a
@@ -48,7 +48,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543478"></a><h2>OPTIONS</h2>
+<a name="id2543489"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-a</span></dt>
<dd>
@@ -155,7 +155,7 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543792"></a><h2>EXAMPLES</h2>
+<a name="id2543802"></a><h2>EXAMPLES</h2>
<p>
To allow <span><strong class="command">rndc</strong></span> to be used with
no manual configuration, run
@@ -172,7 +172,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543833"></a><h2>SEE ALSO</h2>
+<a name="id2543844"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">rndc.conf</span>(5)</span>,
<span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
@@ -180,7 +180,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543872"></a><h2>AUTHOR</h2>
+<a name="id2543882"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
diff --git a/bin/dig/dig.1 b/bin/dig/dig.1
index e6c28f3de0f9..cd79ceaea9bc 100644
--- a/bin/dig/dig.1
+++ b/bin/dig/dig.1
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2004-2011, 2013 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004-2011, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
.\" Copyright (C) 2000-2003 Internet Software Consortium.
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
@@ -20,11 +20,11 @@
.\" Title: dig
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: June 30, 2000
+.\" Date: February 12, 2014
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "DIG" "1" "June 30, 2000" "BIND9" "BIND9"
+.TH "DIG" "1" "February 12, 2014" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -33,7 +33,7 @@
dig \- DNS lookup utility
.SH "SYNOPSIS"
.HP 4
-\fBdig\fR [@server] [\fB\-b\ \fR\fB\fIaddress\fR\fR] [\fB\-c\ \fR\fB\fIclass\fR\fR] [\fB\-f\ \fR\fB\fIfilename\fR\fR] [\fB\-k\ \fR\fB\fIfilename\fR\fR] [\fB\-m\fR] [\fB\-p\ \fR\fB\fIport#\fR\fR] [\fB\-q\ \fR\fB\fIname\fR\fR] [\fB\-t\ \fR\fB\fItype\fR\fR] [\fB\-x\ \fR\fB\fIaddr\fR\fR] [\fB\-y\ \fR\fB\fI[hmac:]\fR\fIname:key\fR\fR] [\fB\-4\fR] [\fB\-6\fR] [name] [type] [class] [queryopt...]
+\fBdig\fR [@server] [\fB\-b\ \fR\fB\fIaddress\fR\fR] [\fB\-c\ \fR\fB\fIclass\fR\fR] [\fB\-f\ \fR\fB\fIfilename\fR\fR] [\fB\-k\ \fR\fB\fIfilename\fR\fR] [\fB\-m\fR] [\fB\-p\ \fR\fB\fIport#\fR\fR] [\fB\-q\ \fR\fB\fIname\fR\fR] [\fB\-t\ \fR\fB\fItype\fR\fR] [\fB\-v\fR] [\fB\-x\ \fR\fB\fIaddr\fR\fR] [\fB\-y\ \fR\fB\fI[hmac:]\fR\fIname:key\fR\fR] [\fB\-4\fR] [\fB\-6\fR] [name] [type] [class] [queryopt...]
.HP 4
\fBdig\fR [\fB\-h\fR]
.HP 4
@@ -70,7 +70,7 @@ It is possible to set per\-user defaults for
via
\fI${HOME}/.digrc\fR. This file is read and any options in it are applied before the command line arguments.
.PP
-The IN and CH class names overlap with the IN and CH top level domains names. Either use the
+The IN and CH class names overlap with the IN and CH top level domain names. Either use the
\fB\-t\fR
and
\fB\-c\fR
@@ -186,10 +186,16 @@ ixfr=N. The incremental zone transfer will contain the changes made to the zone
The
\fB\-q\fR
option sets the query name to
-\fIname\fR. This useful do distinguish the
+\fIname\fR. This is useful to distinguish the
\fIname\fR
from other arguments.
.PP
+The
+\fB\-v\fR
+causes
+\fBdig\fR
+to print the version number and exit.
+.PP
Reverse lookups \(em mapping addresses to names \(em are simplified by the
\fB\-x\fR
option.
@@ -241,66 +247,52 @@ no
to negate the meaning of that keyword. Other keywords assign values to options like the timeout interval. They have the form
\fB+keyword=value\fR. The query options are:
.PP
-\fB+[no]tcp\fR
-.RS 4
-Use [do not use] TCP when querying name servers. The default behavior is to use UDP unless an AXFR or IXFR query is requested, in which case a TCP connection is used.
-.RE
-.PP
-\fB+[no]vc\fR
+\fB+[no]aaflag\fR
.RS 4
-Use [do not use] TCP when querying name servers. This alternate syntax to
-\fI+[no]tcp\fR
-is provided for backwards compatibility. The "vc" stands for "virtual circuit".
+A synonym for
+\fI+[no]aaonly\fR.
.RE
.PP
-\fB+[no]ignore\fR
+\fB+[no]aaonly\fR
.RS 4
-Ignore truncation in UDP responses instead of retrying with TCP. By default, TCP retries are performed.
+Sets the "aa" flag in the query.
.RE
.PP
-\fB+domain=somename\fR
+\fB+[no]additional\fR
.RS 4
-Set the search list to contain the single domain
-\fIsomename\fR, as if specified in a
-\fBdomain\fR
-directive in
-\fI/etc/resolv.conf\fR, and enable search list processing as if the
-\fI+search\fR
-option were given.
+Display [do not display] the additional section of a reply. The default is to display it.
.RE
.PP
-\fB+[no]search\fR
+\fB+[no]adflag\fR
.RS 4
-Use [do not use] the search list defined by the searchlist or domain directive in
-\fIresolv.conf\fR
-(if any). The search list is not used by default.
+Set [do not set] the AD (authentic data) bit in the query. This requests the server to return whether all of the answer and authority sections have all been validated as secure according to the security policy of the server. AD=1 indicates that all records have been validated as secure and the answer is not from a OPT\-OUT range. AD=0 indicate that some part of the answer was insecure or not validated. This bit is set by default.
.RE
.PP
-\fB+[no]showsearch\fR
+\fB+[no]all\fR
.RS 4
-Perform [do not perform] a search showing intermediate results.
+Set or clear all display flags.
.RE
.PP
-\fB+[no]defname\fR
+\fB+[no]answer\fR
.RS 4
-Deprecated, treated as a synonym for
-\fI+[no]search\fR
+Display [do not display] the answer section of a reply. The default is to display it.
.RE
.PP
-\fB+[no]aaonly\fR
+\fB+[no]authority\fR
.RS 4
-Sets the "aa" flag in the query.
+Display [do not display] the authority section of a reply. The default is to display it.
.RE
.PP
-\fB+[no]aaflag\fR
+\fB+[no]besteffort\fR
.RS 4
-A synonym for
-\fI+[no]aaonly\fR.
+Attempt to display the contents of messages which are malformed. The default is to not display malformed answers.
.RE
.PP
-\fB+[no]adflag\fR
+\fB+bufsize=B\fR
.RS 4
-Set [do not set] the AD (authentic data) bit in the query. This requests the server to return whether all of the answer and authority sections have all been validated as secure according to the security policy of the server. AD=1 indicates that all records have been validated as secure and the answer is not from a OPT\-OUT range. AD=0 indicate that some part of the answer was insecure or not validated. This bit is set by default.
+Set the UDP message buffer size advertised using EDNS0 to
+\fIB\fR
+bytes. The maximum and minimum sizes of this buffer are 65535 and 0 respectively. Values outside this range are rounded up or down appropriately. Values other than zero will cause a EDNS query to be sent.
.RE
.PP
\fB+[no]cdflag\fR
@@ -313,49 +305,50 @@ Set [do not set] the CD (checking disabled) bit in the query. This requests the
Display [do not display] the CLASS when printing the record.
.RE
.PP
-\fB+[no]ttlid\fR
+\fB+[no]cmd\fR
.RS 4
-Display [do not display] the TTL when printing the record.
+Toggles the printing of the initial comment in the output identifying the version of
+\fBdig\fR
+and the query options that have been applied. This comment is printed by default.
.RE
.PP
-\fB+[no]recurse\fR
+\fB+[no]comments\fR
.RS 4
-Toggle the setting of the RD (recursion desired) bit in the query. This bit is set by default, which means
-\fBdig\fR
-normally sends recursive queries. Recursion is automatically disabled when the
-\fI+nssearch\fR
-or
-\fI+trace\fR
-query options are used.
+Toggle the display of comment lines in the output. The default is to print comments.
.RE
.PP
-\fB+[no]nssearch\fR
+\fB+[no]defname\fR
.RS 4
-When this option is set,
-\fBdig\fR
-attempts to find the authoritative name servers for the zone containing the name being looked up and display the SOA record that each name server has for the zone.
+Deprecated, treated as a synonym for
+\fI+[no]search\fR
.RE
.PP
-\fB+[no]trace\fR
+\fB+[no]dnssec\fR
.RS 4
-Toggle tracing of the delegation path from the root name servers for the name being looked up. Tracing is disabled by default. When tracing is enabled,
-\fBdig\fR
-makes iterative queries to resolve the name being looked up. It will follow referrals from the root servers, showing the answer from each server that was used to resolve the lookup.
-.sp
-\fB+dnssec\fR
-is also set when +trace is set to better emulate the default queries from a nameserver.
+Requests DNSSEC records be sent by setting the DNSSEC OK bit (DO) in the OPT record in the additional section of the query.
.RE
.PP
-\fB+[no]cmd\fR
+\fB+domain=somename\fR
.RS 4
-Toggles the printing of the initial comment in the output identifying the version of
-\fBdig\fR
-and the query options that have been applied. This comment is printed by default.
+Set the search list to contain the single domain
+\fIsomename\fR, as if specified in a
+\fBdomain\fR
+directive in
+\fI/etc/resolv.conf\fR, and enable search list processing as if the
+\fI+search\fR
+option were given.
.RE
.PP
-\fB+[no]short\fR
+\fB+[no]edns[=#]\fR
.RS 4
-Provide a terse answer. The default is to print the answer in a verbose form.
+Specify the EDNS version to query with. Valid values are 0 to 255. Setting the EDNS version will cause a EDNS query to be sent.
+\fB+noedns\fR
+clears the remembered EDNS version. EDNS is set to 0 by default.
+.RE
+.PP
+\fB+[no]fail\fR
+.RS 4
+Do not try the next server if you receive a SERVFAIL. The default is to not try the next server which is the reverse of normal stub resolver behavior.
.RE
.PP
\fB+[no]identify\fR
@@ -365,149 +358,168 @@ Show [or do not show] the IP address and port number that supplied the answer wh
option is enabled. If short form answers are requested, the default is not to show the source address and port number of the server that provided the answer.
.RE
.PP
-\fB+[no]comments\fR
+\fB+[no]ignore\fR
.RS 4
-Toggle the display of comment lines in the output. The default is to print comments.
+Ignore truncation in UDP responses instead of retrying with TCP. By default, TCP retries are performed.
.RE
.PP
-\fB+[no]rrcomments\fR
+\fB+[no]keepopen\fR
.RS 4
-Toggle the display of per\-record comments in the output (for example, human\-readable key information about DNSKEY records). The default is not to print record comments unless multiline mode is active.
+Keep the TCP socket open between queries and reuse it rather than creating a new TCP socket for each lookup. The default is
+\fB+nokeepopen\fR.
.RE
.PP
-\fB+split=W\fR
+\fB+[no]multiline\fR
.RS 4
-Split long hex\- or base64\-formatted fields in resource records into chunks of
-\fIW\fR
-characters (where
-\fIW\fR
-is rounded up to the nearest multiple of 4).
-\fI+nosplit\fR
-or
-\fI+split=0\fR
-causes fields not to be split at all. The default is 56 characters, or 44 characters when multiline mode is active.
+Print records like the SOA records in a verbose multi\-line format with human\-readable comments. The default is to print each record on a single line, to facilitate machine parsing of the
+\fBdig\fR
+output.
.RE
.PP
-\fB+[no]stats\fR
+\fB+ndots=D\fR
.RS 4
-This query option toggles the printing of statistics: when the query was made, the size of the reply and so on. The default behavior is to print the query statistics.
+Set the number of dots that have to appear in
+\fIname\fR
+to
+\fID\fR
+for it to be considered absolute. The default value is that defined using the ndots statement in
+\fI/etc/resolv.conf\fR, or 1 if no ndots statement is present. Names with fewer dots are interpreted as relative names and will be searched for in the domains listed in the
+\fBsearch\fR
+or
+\fBdomain\fR
+directive in
+\fI/etc/resolv.conf\fR.
.RE
.PP
-\fB+[no]qr\fR
+\fB+[no]nsid\fR
.RS 4
-Print [do not print] the query as it is sent. By default, the query is not printed.
+Include an EDNS name server ID request when sending a query.
.RE
.PP
-\fB+[no]question\fR
+\fB+[no]nssearch\fR
.RS 4
-Print [do not print] the question section of a query when an answer is returned. The default is to print the question section as a comment.
+When this option is set,
+\fBdig\fR
+attempts to find the authoritative name servers for the zone containing the name being looked up and display the SOA record that each name server has for the zone.
.RE
.PP
-\fB+[no]answer\fR
+\fB+[no]onesoa\fR
.RS 4
-Display [do not display] the answer section of a reply. The default is to display it.
+Print only one (starting) SOA record when performing an AXFR. The default is to print both the starting and ending SOA records.
.RE
.PP
-\fB+[no]authority\fR
+\fB+[no]qr\fR
.RS 4
-Display [do not display] the authority section of a reply. The default is to display it.
+Print [do not print] the query as it is sent. By default, the query is not printed.
.RE
.PP
-\fB+[no]additional\fR
+\fB+[no]question\fR
.RS 4
-Display [do not display] the additional section of a reply. The default is to display it.
+Print [do not print] the question section of a query when an answer is returned. The default is to print the question section as a comment.
.RE
.PP
-\fB+[no]all\fR
+\fB+[no]recurse\fR
.RS 4
-Set or clear all display flags.
+Toggle the setting of the RD (recursion desired) bit in the query. This bit is set by default, which means
+\fBdig\fR
+normally sends recursive queries. Recursion is automatically disabled when the
+\fI+nssearch\fR
+or
+\fI+trace\fR
+query options are used.
.RE
.PP
-\fB+time=T\fR
+\fB+retry=T\fR
.RS 4
-Sets the timeout for a query to
-\fIT\fR
-seconds. The default timeout is 5 seconds. An attempt to set
+Sets the number of times to retry UDP queries to server to
\fIT\fR
-to less than 1 will result in a query timeout of 1 second being applied.
+instead of the default, 2. Unlike
+\fI+tries\fR, this does not include the initial query.
.RE
.PP
-\fB+tries=T\fR
+\fB+[no]rrcomments\fR
.RS 4
-Sets the number of times to try UDP queries to server to
-\fIT\fR
-instead of the default, 3. If
-\fIT\fR
-is less than or equal to zero, the number of tries is silently rounded up to 1.
+Toggle the display of per\-record comments in the output (for example, human\-readable key information about DNSKEY records). The default is not to print record comments unless multiline mode is active.
.RE
.PP
-\fB+retry=T\fR
+\fB+[no]search\fR
.RS 4
-Sets the number of times to retry UDP queries to server to
-\fIT\fR
-instead of the default, 2. Unlike
-\fI+tries\fR, this does not include the initial query.
+Use [do not use] the search list defined by the searchlist or domain directive in
+\fIresolv.conf\fR
+(if any). The search list is not used by default.
.RE
.PP
-\fB+ndots=D\fR
+\fB+[no]short\fR
.RS 4
-Set the number of dots that have to appear in
-\fIname\fR
-to
-\fID\fR
-for it to be considered absolute. The default value is that defined using the ndots statement in
-\fI/etc/resolv.conf\fR, or 1 if no ndots statement is present. Names with fewer dots are interpreted as relative names and will be searched for in the domains listed in the
-\fBsearch\fR
-or
-\fBdomain\fR
-directive in
-\fI/etc/resolv.conf\fR.
+Provide a terse answer. The default is to print the answer in a verbose form.
.RE
.PP
-\fB+bufsize=B\fR
+\fB+[no]showsearch\fR
.RS 4
-Set the UDP message buffer size advertised using EDNS0 to
-\fIB\fR
-bytes. The maximum and minimum sizes of this buffer are 65535 and 0 respectively. Values outside this range are rounded up or down appropriately. Values other than zero will cause a EDNS query to be sent.
+Perform [do not perform] a search showing intermediate results.
.RE
.PP
-\fB+edns=#\fR
+\fB+[no]sigchase\fR
.RS 4
-Specify the EDNS version to query with. Valid values are 0 to 255. Setting the EDNS version will cause a EDNS query to be sent.
-\fB+noedns\fR
-clears the remembered EDNS version. EDNS is set to 0 by default.
+Chase DNSSEC signature chains. Requires dig be compiled with \-DDIG_SIGCHASE.
.RE
.PP
-\fB+[no]multiline\fR
+\fB+split=W\fR
.RS 4
-Print records like the SOA records in a verbose multi\-line format with human\-readable comments. The default is to print each record on a single line, to facilitate machine parsing of the
-\fBdig\fR
-output.
+Split long hex\- or base64\-formatted fields in resource records into chunks of
+\fIW\fR
+characters (where
+\fIW\fR
+is rounded up to the nearest multiple of 4).
+\fI+nosplit\fR
+or
+\fI+split=0\fR
+causes fields not to be split at all. The default is 56 characters, or 44 characters when multiline mode is active.
.RE
.PP
-\fB+[no]onesoa\fR
+\fB+[no]stats\fR
.RS 4
-Print only one (starting) SOA record when performing an AXFR. The default is to print both the starting and ending SOA records.
+This query option toggles the printing of statistics: when the query was made, the size of the reply and so on. The default behavior is to print the query statistics.
.RE
.PP
-\fB+[no]fail\fR
+\fB+[no]tcp\fR
.RS 4
-Do not try the next server if you receive a SERVFAIL. The default is to not try the next server which is the reverse of normal stub resolver behavior.
+Use [do not use] TCP when querying name servers. The default behavior is to use UDP unless an
+ixfr=N
+query is requested, in which case the default is TCP. AXFR queries always use TCP.
.RE
.PP
-\fB+[no]besteffort\fR
+\fB+time=T\fR
.RS 4
-Attempt to display the contents of messages which are malformed. The default is to not display malformed answers.
+Sets the timeout for a query to
+\fIT\fR
+seconds. The default timeout is 5 seconds. An attempt to set
+\fIT\fR
+to less than 1 will result in a query timeout of 1 second being applied.
.RE
.PP
-\fB+[no]dnssec\fR
+\fB+[no]topdown\fR
.RS 4
-Requests DNSSEC records be sent by setting the DNSSEC OK bit (DO) in the OPT record in the additional section of the query.
+When chasing DNSSEC signature chains perform a top\-down validation. Requires dig be compiled with \-DDIG_SIGCHASE.
.RE
.PP
-\fB+[no]sigchase\fR
+\fB+[no]trace\fR
.RS 4
-Chase DNSSEC signature chains. Requires dig be compiled with \-DDIG_SIGCHASE.
+Toggle tracing of the delegation path from the root name servers for the name being looked up. Tracing is disabled by default. When tracing is enabled,
+\fBdig\fR
+makes iterative queries to resolve the name being looked up. It will follow referrals from the root servers, showing the answer from each server that was used to resolve the lookup.
+.sp
+\fB+dnssec\fR
+is also set when +trace is set to better emulate the default queries from a nameserver.
+.RE
+.PP
+\fB+tries=T\fR
+.RS 4
+Sets the number of times to try UDP queries to server to
+\fIT\fR
+instead of the default, 3. If
+\fIT\fR
+is less than or equal to zero, the number of tries is silently rounded up to 1.
.RE
.PP
\fB+trusted\-key=####\fR
@@ -526,20 +538,16 @@ in the current directory.
Requires dig be compiled with \-DDIG_SIGCHASE.
.RE
.PP
-\fB+[no]topdown\fR
-.RS 4
-When chasing DNSSEC signature chains perform a top\-down validation. Requires dig be compiled with \-DDIG_SIGCHASE.
-.RE
-.PP
-\fB+[no]nsid\fR
+\fB+[no]ttlid\fR
.RS 4
-Include an EDNS name server ID request when sending a query.
+Display [do not display] the TTL when printing the record.
.RE
.PP
-\fB+[no]keepopen\fR
+\fB+[no]vc\fR
.RS 4
-Keep the TCP socket open between queries and reuse it rather than creating a new TCP socket for each lookup. The default is
-\fB+nokeepopen\fR.
+Use [do not use] TCP when querying name servers. This alternate syntax to
+\fI+[no]tcp\fR
+is provided for backwards compatibility. The "vc" stands for "virtual circuit".
.RE
.SH "MULTIPLE QUERIES"
.PP
@@ -603,7 +611,7 @@ RFC1035.
.PP
There are probably too many query options.
.SH "COPYRIGHT"
-Copyright \(co 2004\-2011, 2013 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2004\-2011, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
Copyright \(co 2000\-2003 Internet Software Consortium.
.br
diff --git a/bin/dig/dig.c b/bin/dig/dig.c
index c7a50b5af2fc..07d8b0b7e14a 100644
--- a/bin/dig/dig.c
+++ b/bin/dig/dig.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 2000-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -243,7 +243,6 @@ help(void) {
void
received(int bytes, isc_sockaddr_t *from, dig_query_t *query) {
isc_uint64_t diff;
- isc_time_t now;
time_t tnow;
struct tm tmnow;
char time_str[100];
@@ -251,10 +250,8 @@ received(int bytes, isc_sockaddr_t *from, dig_query_t *query) {
isc_sockaddr_format(from, fromtext, sizeof(fromtext));
- TIME_NOW(&now);
-
if (query->lookup->stats && !short_form) {
- diff = isc_time_microdiff(&now, &query->time_sent);
+ diff = isc_time_microdiff(&query->time_recv, &query->time_sent);
printf(";; Query time: %ld msec\n", (long int)diff/1000);
printf(";; SERVER: %s(%s)\n", fromtext, query->servname);
time(&tnow);
@@ -280,7 +277,7 @@ received(int bytes, isc_sockaddr_t *from, dig_query_t *query) {
}
puts("");
} else if (query->lookup->identify && !short_form) {
- diff = isc_time_microdiff(&now, &query->time_sent);
+ diff = isc_time_microdiff(&query->time_recv, &query->time_sent);
printf(";; Received %" ISC_PRINT_QUADFORMAT "u bytes "
"from %s(%s) in %d ms\n\n",
query->lookup->doing_xfr ?
@@ -308,7 +305,6 @@ static isc_result_t
say_message(dns_rdata_t *rdata, dig_query_t *query, isc_buffer_t *buf) {
isc_result_t result;
isc_uint64_t diff;
- isc_time_t now;
char store[sizeof("12345678901234567890")];
if (query->lookup->trace || query->lookup->ns_search_only) {
@@ -322,8 +318,7 @@ say_message(dns_rdata_t *rdata, dig_query_t *query, isc_buffer_t *buf) {
return (result);
check_result(result, "dns_rdata_totext");
if (query->lookup->identify) {
- TIME_NOW(&now);
- diff = isc_time_microdiff(&now, &query->time_sent);
+ diff = isc_time_microdiff(&query->time_recv, &query->time_sent);
ADD_STRING(buf, " from server ");
ADD_STRING(buf, query->servname);
snprintf(store, 19, " in %d ms.", (int)diff/1000);
@@ -1092,7 +1087,7 @@ plus_option(char *option, isc_boolean_t is_batchfile,
if (splitwidth)
splitwidth += 3;
if (result != ISC_R_SUCCESS)
- fatal("Couldn't parse retries");
+ fatal("Couldn't parse split");
break;
case 't': /* stats */
FULLCHECK("stats");
@@ -1106,8 +1101,10 @@ plus_option(char *option, isc_boolean_t is_batchfile,
switch (cmd[1]) {
case 'c': /* tcp */
FULLCHECK("tcp");
- if (!is_batchfile)
+ if (!is_batchfile) {
lookup->tcp_mode = state;
+ lookup->tcp_mode_set = ISC_TRUE;
+ }
break;
case 'i': /* timeout */
FULLCHECK("timeout");
@@ -1187,8 +1184,10 @@ plus_option(char *option, isc_boolean_t is_batchfile,
break;
case 'v':
FULLCHECK("vc");
- if (!is_batchfile)
+ if (!is_batchfile) {
lookup->tcp_mode = state;
+ lookup->tcp_mode_set = ISC_TRUE;
+ }
break;
default:
invalid_option:
@@ -1403,10 +1402,12 @@ dash_option(char *option, char *next, dig_lookup_t **lookup,
(*lookup)->ixfr_serial = serial;
(*lookup)->section_question = plusquest;
(*lookup)->comments = pluscomm;
- (*lookup)->tcp_mode = ISC_TRUE;
+ if (!(*lookup)->tcp_mode_set)
+ (*lookup)->tcp_mode = ISC_TRUE;
} else {
(*lookup)->rdtype = rdtype;
- (*lookup)->rdtypeset = ISC_TRUE;
+ if (!config_only)
+ (*lookup)->rdtypeset = ISC_TRUE;
if (rdtype == dns_rdatatype_axfr) {
(*lookup)->section_question = plusquest;
(*lookup)->comments = pluscomm;
@@ -1448,6 +1449,7 @@ dash_option(char *option, char *next, dig_lookup_t **lookup,
ip6_int, ISC_FALSE) == ISC_R_SUCCESS) {
strncpy((*lookup)->textname, textname,
sizeof((*lookup)->textname));
+ (*lookup)->textname[sizeof((*lookup)->textname)-1] = 0;
debug("looking up %s", (*lookup)->textname);
(*lookup)->trace_root = ISC_TF((*lookup)->trace ||
(*lookup)->ns_search_only);
@@ -1511,7 +1513,8 @@ preparse_args(int argc, char **argv) {
static void
parse_args(isc_boolean_t is_batchfile, isc_boolean_t config_only,
- int argc, char **argv) {
+ int argc, char **argv)
+{
isc_result_t result;
isc_textregion_t tr;
isc_boolean_t firstarg = ISC_TRUE;
@@ -1604,8 +1607,25 @@ parse_args(isc_boolean_t is_batchfile, isc_boolean_t config_only,
debug("main parsing %s", rv[0]);
if (strncmp(rv[0], "%", 1) == 0)
break;
- if (strncmp(rv[0], "@", 1) == 0) {
- addresscount = getaddresses(lookup, &rv[0][1], NULL);
+ if (rv[0][0] == '@') {
+
+ if (is_batchfile && !config_only) {
+ addresscount = getaddresses(lookup, &rv[0][1],
+ &result);
+ if (result != ISC_R_SUCCESS) {
+ fprintf(stderr, "couldn't get address "
+ "for '%s': %s: skipping "
+ "lookup\n", &rv[0][1],
+ isc_result_totext(result));
+ if (ISC_LINK_LINKED(lookup, link))
+ ISC_LIST_DEQUEUE(lookup_list,
+ lookup, link);
+ destroy_lookup(lookup);
+ return;
+ }
+ } else
+ addresscount = getaddresses(lookup, &rv[0][1],
+ NULL);
} else if (rv[0][0] == '+') {
plus_option(&rv[0][1], is_batchfile,
lookup);
@@ -1669,7 +1689,8 @@ parse_args(isc_boolean_t is_batchfile, isc_boolean_t config_only,
lookup->section_question =
plusquest;
lookup->comments = pluscomm;
- lookup->tcp_mode = ISC_TRUE;
+ if (!lookup->tcp_mode_set)
+ lookup->tcp_mode = ISC_TRUE;
} else {
lookup->rdtype = rdtype;
lookup->rdtypeset = ISC_TRUE;
diff --git a/bin/dig/dig.docbook b/bin/dig/dig.docbook
index 7a01ec064d15..89d766b541cb 100644
--- a/bin/dig/dig.docbook
+++ b/bin/dig/dig.docbook
@@ -1,8 +1,8 @@
<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
- "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
+ "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2004-2011, 2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2011, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -18,11 +18,10 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: dig.docbook,v 1.51 2011/11/04 11:02:50 jreed Exp $ -->
<refentry id="man.dig">
<refentryinfo>
- <date>June 30, 2000</date>
+ <date>February 12, 2014</date>
</refentryinfo>
<refmeta>
@@ -47,6 +46,7 @@
<year>2010</year>
<year>2011</year>
<year>2013</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
@@ -70,6 +70,7 @@
<arg><option>-p <replaceable class="parameter">port#</replaceable></option></arg>
<arg><option>-q <replaceable class="parameter">name</replaceable></option></arg>
<arg><option>-t <replaceable class="parameter">type</replaceable></option></arg>
+ <arg><option>-v</option></arg>
<arg><option>-x <replaceable class="parameter">addr</replaceable></option></arg>
<arg><option>-y <replaceable class="parameter"><optional>hmac:</optional>name:key</replaceable></option></arg>
<arg><option>-4</option></arg>
@@ -138,7 +139,7 @@
<para>
The IN and CH class names overlap with the IN and CH top level
- domains names. Either use the <option>-t</option> and
+ domain names. Either use the <option>-t</option> and
<option>-c</option> options to specify the type and class,
use the <option>-q</option> the specify the domain name, or
use "IN." and "CH." when looking up these top level domains.
@@ -156,56 +157,56 @@
<variablelist>
- <varlistentry>
- <term><constant>server</constant></term>
- <listitem>
- <para>
- is the name or IP address of the name server to query. This
- can be an IPv4 address in dotted-decimal notation or an IPv6
- address in colon-delimited notation. When the supplied
- <parameter>server</parameter> argument is a hostname,
- <command>dig</command> resolves that name before querying
- that name server.
- </para>
- <para>
- If no <parameter>server</parameter> argument is
- provided, <command>dig</command> consults
- <filename>/etc/resolv.conf</filename>; if an
- address is found there, it queries the name server at
- that address. If either of the <option>-4</option> or
- <option>-6</option> options are in use, then
- only addresses for the corresponding transport
- will be tried. If no usable addresses are found,
- <command>dig</command> will send the query to the
- local host. The reply from the name server that
- responds is displayed.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><constant>name</constant></term>
- <listitem>
- <para>
- is the name of the resource record that is to be looked up.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><constant>type</constant></term>
- <listitem>
- <para>
- indicates what type of query is required &mdash;
- ANY, A, MX, SIG, etc.
- <parameter>type</parameter> can be any valid query
- type. If no
- <parameter>type</parameter> argument is supplied,
- <command>dig</command> will perform a lookup for an
- A record.
- </para>
- </listitem>
- </varlistentry>
+ <varlistentry>
+ <term><constant>server</constant></term>
+ <listitem>
+ <para>
+ is the name or IP address of the name server to query. This
+ can be an IPv4 address in dotted-decimal notation or an IPv6
+ address in colon-delimited notation. When the supplied
+ <parameter>server</parameter> argument is a hostname,
+ <command>dig</command> resolves that name before querying
+ that name server.
+ </para>
+ <para>
+ If no <parameter>server</parameter> argument is
+ provided, <command>dig</command> consults
+ <filename>/etc/resolv.conf</filename>; if an
+ address is found there, it queries the name server at
+ that address. If either of the <option>-4</option> or
+ <option>-6</option> options are in use, then
+ only addresses for the corresponding transport
+ will be tried. If no usable addresses are found,
+ <command>dig</command> will send the query to the
+ local host. The reply from the name server that
+ responds is displayed.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><constant>name</constant></term>
+ <listitem>
+ <para>
+ is the name of the resource record that is to be looked up.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><constant>type</constant></term>
+ <listitem>
+ <para>
+ indicates what type of query is required &mdash;
+ ANY, A, MX, SIG, etc.
+ <parameter>type</parameter> can be any valid query
+ type. If no
+ <parameter>type</parameter> argument is supplied,
+ <command>dig</command> will perform a lookup for an
+ A record.
+ </para>
+ </listitem>
+ </varlistentry>
</variablelist>
</para>
@@ -245,7 +246,7 @@
<para>
The <option>-m</option> option enables memory usage debugging.
<!-- It enables ISC_MEM_DEBUGTRACE and ISC_MEM_DEBUGRECORD
- documented in include/isc/mem.h -->
+ documented in include/isc/mem.h -->
</para>
<para>
@@ -281,11 +282,16 @@
<para>
The <option>-q</option> option sets the query name to
- <parameter>name</parameter>. This useful do distinguish the
+ <parameter>name</parameter>. This is useful to distinguish the
<parameter>name</parameter> from other arguments.
</para>
<para>
+ The <option>-v</option> causes <command>dig</command> to
+ print the version number and exit.
+ </para>
+
+ <para>
Reverse lookups &mdash; mapping addresses to names &mdash; are simplified by the
<option>-x</option> option. <parameter>addr</parameter> is
an IPv4
@@ -315,13 +321,13 @@
base-64
encoded string, typically generated by
<citerefentry>
- <refentrytitle>dnssec-keygen</refentrytitle><manvolnum>8</manvolnum>
+ <refentrytitle>dnssec-keygen</refentrytitle><manvolnum>8</manvolnum>
</citerefentry>.
Caution should be taken when using the <option>-y</option> option on
multi-user systems as the key can be visible in the output from
<citerefentry>
- <refentrytitle>ps</refentrytitle><manvolnum>1</manvolnum>
+ <refentrytitle>ps</refentrytitle><manvolnum>1</manvolnum>
</citerefentry>
or in the shell's history file. When
using TSIG authentication with <command>dig</command>, the name
@@ -356,109 +362,36 @@
<variablelist>
- <varlistentry>
- <term><option>+[no]tcp</option></term>
- <listitem>
- <para>
- Use [do not use] TCP when querying name servers. The default
- behavior is to use UDP unless an AXFR or IXFR query is
- requested, in
- which case a TCP connection is used.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+[no]vc</option></term>
- <listitem>
- <para>
- Use [do not use] TCP when querying name servers. This alternate
- syntax to <parameter>+[no]tcp</parameter> is
- provided for backwards
- compatibility. The "vc" stands for "virtual circuit".
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+[no]ignore</option></term>
- <listitem>
- <para>
- Ignore truncation in UDP responses instead of retrying with TCP.
- By
- default, TCP retries are performed.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+domain=somename</option></term>
- <listitem>
- <para>
- Set the search list to contain the single domain
- <parameter>somename</parameter>, as if specified in
- a
- <command>domain</command> directive in
- <filename>/etc/resolv.conf</filename>, and enable
- search list
- processing as if the <parameter>+search</parameter>
- option were given.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+[no]search</option></term>
- <listitem>
- <para>
- Use [do not use] the search list defined by the searchlist or
- domain
- directive in <filename>resolv.conf</filename> (if
- any).
- The search list is not used by default.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+[no]showsearch</option></term>
- <listitem>
- <para>
- Perform [do not perform] a search showing intermediate
- results.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+[no]defname</option></term>
- <listitem>
- <para>
- Deprecated, treated as a synonym for <parameter>+[no]search</parameter>
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+[no]aaonly</option></term>
- <listitem>
- <para>
- Sets the "aa" flag in the query.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+[no]aaflag</option></term>
- <listitem>
- <para>
- A synonym for <parameter>+[no]aaonly</parameter>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+[no]adflag</option></term>
+ <varlistentry>
+ <term><option>+[no]aaflag</option></term>
+ <listitem>
+ <para>
+ A synonym for <parameter>+[no]aaonly</parameter>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+[no]aaonly</option></term>
+ <listitem>
+ <para>
+ Sets the "aa" flag in the query.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+[no]additional</option></term>
+ <listitem>
+ <para>
+ Display [do not display] the additional section of a
+ reply. The default is to display it.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+[no]adflag</option></term>
<listitem>
<para>
Set [do not set] the AD (authentic data) bit in the
@@ -474,38 +407,285 @@
</listitem>
</varlistentry>
- <varlistentry>
- <term><option>+[no]cdflag</option></term>
- <listitem>
- <para>
- Set [do not set] the CD (checking disabled) bit in the query.
- This
- requests the server to not perform DNSSEC validation of
- responses.
- </para>
- </listitem>
- </varlistentry>
+ <varlistentry>
+ <term><option>+[no]all</option></term>
+ <listitem>
+ <para>
+ Set or clear all display flags.
+ </para>
+ </listitem>
+ </varlistentry>
- <varlistentry>
- <term><option>+[no]cl</option></term>
- <listitem>
- <para>
- Display [do not display] the CLASS when printing the record.
- </para>
- </listitem>
- </varlistentry>
+ <varlistentry>
+ <term><option>+[no]answer</option></term>
+ <listitem>
+ <para>
+ Display [do not display] the answer section of a
+ reply. The default is to display it.
+ </para>
+ </listitem>
+ </varlistentry>
- <varlistentry>
- <term><option>+[no]ttlid</option></term>
- <listitem>
- <para>
- Display [do not display] the TTL when printing the record.
- </para>
- </listitem>
- </varlistentry>
+ <varlistentry>
+ <term><option>+[no]authority</option></term>
+ <listitem>
+ <para>
+ Display [do not display] the authority section of a
+ reply. The default is to display it.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+[no]besteffort</option></term>
+ <listitem>
+ <para>
+ Attempt to display the contents of messages which are
+ malformed. The default is to not display malformed
+ answers.
+ </para>
+ </listitem>
+ </varlistentry>
- <varlistentry>
- <term><option>+[no]recurse</option></term>
+ <varlistentry>
+ <term><option>+bufsize=B</option></term>
+ <listitem>
+ <para>
+ Set the UDP message buffer size advertised using EDNS0
+ to <parameter>B</parameter> bytes. The maximum and
+ minimum sizes of this buffer are 65535 and 0 respectively.
+ Values outside this range are rounded up or down
+ appropriately. Values other than zero will cause a
+ EDNS query to be sent.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+[no]cdflag</option></term>
+ <listitem>
+ <para>
+ Set [do not set] the CD (checking disabled) bit in
+ the query. This requests the server to not perform
+ DNSSEC validation of responses.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+[no]cl</option></term>
+ <listitem>
+ <para>
+ Display [do not display] the CLASS when printing the
+ record.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+[no]cmd</option></term>
+ <listitem>
+ <para>
+ Toggles the printing of the initial comment in the
+ output identifying the version of <command>dig</command>
+ and the query options that have been applied. This
+ comment is printed by default.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+[no]comments</option></term>
+ <listitem>
+ <para>
+ Toggle the display of comment lines in the output.
+ The default is to print comments.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+[no]defname</option></term>
+ <listitem>
+ <para>
+ Deprecated, treated as a synonym for
+ <parameter>+[no]search</parameter>
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+[no]dnssec</option></term>
+ <listitem>
+ <para>
+ Requests DNSSEC records be sent by setting the DNSSEC
+ OK bit (DO) in the OPT record in the additional section
+ of the query.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+domain=somename</option></term>
+ <listitem>
+ <para>
+ Set the search list to contain the single domain
+ <parameter>somename</parameter>, as if specified in
+ a <command>domain</command> directive in
+ <filename>/etc/resolv.conf</filename>, and enable
+ search list processing as if the
+ <parameter>+search</parameter> option were given.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+[no]edns[=#]</option></term>
+ <listitem>
+ <para>
+ Specify the EDNS version to query with. Valid values
+ are 0 to 255. Setting the EDNS version will cause
+ a EDNS query to be sent. <option>+noedns</option>
+ clears the remembered EDNS version. EDNS is set to
+ 0 by default.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+[no]fail</option></term>
+ <listitem>
+ <para>
+ Do not try the next server if you receive a SERVFAIL.
+ The default is to not try the next server which is
+ the reverse of normal stub resolver behavior.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+[no]identify</option></term>
+ <listitem>
+ <para>
+ Show [or do not show] the IP address and port number
+ that supplied the answer when the
+ <parameter>+short</parameter> option is enabled. If
+ short form answers are requested, the default is not
+ to show the source address and port number of the
+ server that provided the answer.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+[no]ignore</option></term>
+ <listitem>
+ <para>
+ Ignore truncation in UDP responses instead of retrying
+ with TCP. By default, TCP retries are performed.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+[no]keepopen</option></term>
+ <listitem>
+ <para>
+ Keep the TCP socket open between queries and reuse
+ it rather than creating a new TCP socket for each
+ lookup. The default is <option>+nokeepopen</option>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+[no]multiline</option></term>
+ <listitem>
+ <para>
+ Print records like the SOA records in a verbose
+ multi-line format with human-readable comments. The
+ default is to print each record on a single line, to
+ facilitate machine parsing of the <command>dig</command>
+ output.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+ndots=D</option></term>
+ <listitem>
+ <para>
+ Set the number of dots that have to appear in
+ <parameter>name</parameter> to <parameter>D</parameter>
+ for it to be considered absolute. The default value
+ is that defined using the ndots statement in
+ <filename>/etc/resolv.conf</filename>, or 1 if no
+ ndots statement is present. Names with fewer dots
+ are interpreted as relative names and will be searched
+ for in the domains listed in the <option>search</option>
+ or <option>domain</option> directive in
+ <filename>/etc/resolv.conf</filename>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+[no]nsid</option></term>
+ <listitem>
+ <para>
+ Include an EDNS name server ID request when sending
+ a query.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+[no]nssearch</option></term>
+ <listitem>
+ <para>
+ When this option is set, <command>dig</command>
+ attempts to find the authoritative name servers for
+ the zone containing the name being looked up and
+ display the SOA record that each name server has for
+ the zone.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+[no]onesoa</option></term>
+ <listitem>
+ <para>
+ Print only one (starting) SOA record when performing
+ an AXFR. The default is to print both the starting
+ and ending SOA records.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+[no]qr</option></term>
+ <listitem>
+ <para>
+ Print [do not print] the query as it is sent. By
+ default, the query is not printed.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+[no]question</option></term>
+ <listitem>
+ <para>
+ Print [do not print] the question section of a query
+ when an answer is returned. The default is to print
+ the question section as a comment.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+[no]recurse</option></term>
<listitem>
<para>
Toggle the setting of the RD (recursion desired) bit
@@ -518,24 +698,141 @@
</listitem>
</varlistentry>
- <varlistentry>
- <term><option>+[no]nssearch</option></term>
- <listitem>
- <para>
- When this option is set, <command>dig</command>
- attempts to find the
- authoritative name servers for the zone containing the name
- being
- looked up and display the SOA record that each name server has
- for the
- zone.
- </para>
- </listitem>
- </varlistentry>
+ <varlistentry>
+ <term><option>+retry=T</option></term>
+ <listitem>
+ <para>
+ Sets the number of times to retry UDP queries to
+ server to <parameter>T</parameter> instead of the
+ default, 2. Unlike <parameter>+tries</parameter>,
+ this does not include the initial query.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+[no]rrcomments</option></term>
+ <listitem>
+ <para>
+ Toggle the display of per-record comments in the
+ output (for example, human-readable key information
+ about DNSKEY records). The default is not to print
+ record comments unless multiline mode is active.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+[no]search</option></term>
+ <listitem>
+ <para>
+ Use [do not use] the search list defined by the
+ searchlist or domain directive in
+ <filename>resolv.conf</filename> (if any). The search
+ list is not used by default.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+[no]short</option></term>
+ <listitem>
+ <para>
+ Provide a terse answer. The default is to print the
+ answer in a verbose form.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+[no]showsearch</option></term>
+ <listitem>
+ <para>
+ Perform [do not perform] a search showing intermediate
+ results.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+[no]sigchase</option></term>
+ <listitem>
+ <para>
+ Chase DNSSEC signature chains. Requires dig be
+ compiled with -DDIG_SIGCHASE.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+split=W</option></term>
+ <listitem>
+ <para>
+ Split long hex- or base64-formatted fields in resource
+ records into chunks of <parameter>W</parameter>
+ characters (where <parameter>W</parameter> is rounded
+ up to the nearest multiple of 4).
+ <parameter>+nosplit</parameter> or
+ <parameter>+split=0</parameter> causes fields not to
+ be split at all. The default is 56 characters, or
+ 44 characters when multiline mode is active.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+[no]stats</option></term>
+ <listitem>
+ <para>
+ This query option toggles the printing of statistics:
+ when the query was made, the size of the reply and
+ so on. The default behavior is to print the query
+ statistics.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+[no]tcp</option></term>
+ <listitem>
+ <para>
+ Use [do not use] TCP when querying name servers. The
+ default behavior is to use UDP unless an
+ <literal>ixfr=N</literal> query is requested, in which
+ case the default is TCP. AXFR queries always use
+ TCP.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+time=T</option></term>
+ <listitem>
+ <para>
+
+ Sets the timeout for a query to
+ <parameter>T</parameter> seconds. The default
+ timeout is 5 seconds.
+ An attempt to set <parameter>T</parameter> to less
+ than 1 will result
+ in a query timeout of 1 second being applied.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+[no]topdown</option></term>
+ <listitem>
+ <para>
+ When chasing DNSSEC signature chains perform a top-down
+ validation. Requires dig be compiled with -DDIG_SIGCHASE.
+ </para>
+ </listitem>
+ </varlistentry>
- <varlistentry>
- <term><option>+[no]trace</option></term>
- <listitem>
+ <varlistentry>
+ <term><option>+[no]trace</option></term>
+ <listitem>
<para>
Toggle tracing of the delegation path from the root
name servers for the name being looked up. Tracing
@@ -544,369 +841,66 @@
resolve the name being looked up. It will follow
referrals from the root servers, showing the answer
from each server that was used to resolve the lookup.
+ </para> <para>
+ <command>+dnssec</command> is also set when +trace
+ is set to better emulate the default queries from a
+ nameserver.
</para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+tries=T</option></term>
+ <listitem>
<para>
- <command>+dnssec</command> is also set when +trace is
- set to better emulate the default queries from a nameserver.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+[no]cmd</option></term>
- <listitem>
- <para>
- Toggles the printing of the initial comment in the output
- identifying
- the version of <command>dig</command> and the query
- options that have
- been applied. This comment is printed by default.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+[no]short</option></term>
- <listitem>
- <para>
- Provide a terse answer. The default is to print the answer in a
- verbose form.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+[no]identify</option></term>
- <listitem>
- <para>
- Show [or do not show] the IP address and port number that
- supplied the
- answer when the <parameter>+short</parameter> option
- is enabled. If
- short form answers are requested, the default is not to show the
- source address and port number of the server that provided the
- answer.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+[no]comments</option></term>
- <listitem>
- <para>
- Toggle the display of comment lines in the output. The default
- is to print comments.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+[no]rrcomments</option></term>
- <listitem>
- <para>
- Toggle the display of per-record comments in the output (for
- example, human-readable key information about DNSKEY records).
- The default is not to print record comments unless multiline
- mode is active.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+split=W</option></term>
- <listitem>
- <para>
- Split long hex- or base64-formatted fields in resource
- records into chunks of <parameter>W</parameter> characters
- (where <parameter>W</parameter> is rounded up to the nearest
- multiple of 4).
- <parameter>+nosplit</parameter> or
- <parameter>+split=0</parameter> causes fields not to be
- split at all. The default is 56 characters, or 44 characters
- when multiline mode is active.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+[no]stats</option></term>
- <listitem>
- <para>
- This query option toggles the printing of statistics: when the
- query
- was made, the size of the reply and so on. The default
- behavior is
- to print the query statistics.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+[no]qr</option></term>
- <listitem>
- <para>
- Print [do not print] the query as it is sent.
- By default, the query is not printed.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+[no]question</option></term>
- <listitem>
- <para>
- Print [do not print] the question section of a query when an
- answer is
- returned. The default is to print the question section as a
- comment.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+[no]answer</option></term>
- <listitem>
- <para>
- Display [do not display] the answer section of a reply. The
- default
- is to display it.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+[no]authority</option></term>
- <listitem>
- <para>
- Display [do not display] the authority section of a reply. The
- default is to display it.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+[no]additional</option></term>
- <listitem>
- <para>
- Display [do not display] the additional section of a reply.
- The default is to display it.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+[no]all</option></term>
- <listitem>
- <para>
- Set or clear all display flags.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+time=T</option></term>
- <listitem>
- <para>
-
- Sets the timeout for a query to
- <parameter>T</parameter> seconds. The default
- timeout is 5 seconds.
- An attempt to set <parameter>T</parameter> to less
- than 1 will result
- in a query timeout of 1 second being applied.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+tries=T</option></term>
- <listitem>
- <para>
- Sets the number of times to try UDP queries to server to
- <parameter>T</parameter> instead of the default, 3.
- If
- <parameter>T</parameter> is less than or equal to
- zero, the number of
- tries is silently rounded up to 1.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+retry=T</option></term>
- <listitem>
- <para>
- Sets the number of times to retry UDP queries to server to
- <parameter>T</parameter> instead of the default, 2.
- Unlike
- <parameter>+tries</parameter>, this does not include
- the initial
- query.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+ndots=D</option></term>
- <listitem>
- <para>
- Set the number of dots that have to appear in
- <parameter>name</parameter> to <parameter>D</parameter> for it to be
- considered absolute. The default value is that defined using
- the
- ndots statement in <filename>/etc/resolv.conf</filename>, or 1 if no
- ndots statement is present. Names with fewer dots are
- interpreted as
- relative names and will be searched for in the domains listed in
- the
- <option>search</option> or <option>domain</option> directive in
- <filename>/etc/resolv.conf</filename>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+bufsize=B</option></term>
- <listitem>
- <para>
- Set the UDP message buffer size advertised using EDNS0 to
- <parameter>B</parameter> bytes. The maximum and minimum sizes
- of this buffer are 65535 and 0 respectively. Values outside
- this range are rounded up or down appropriately.
- Values other than zero will cause a EDNS query to be sent.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+edns=#</option></term>
+ Sets the number of times to try UDP queries to server
+ to <parameter>T</parameter> instead of the default,
+ 3. If <parameter>T</parameter> is less than or equal
+ to zero, the number of tries is silently rounded up
+ to 1.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><option>+trusted-key=####</option></term>
<listitem>
<para>
- Specify the EDNS version to query with. Valid values
- are 0 to 255. Setting the EDNS version will cause
- a EDNS query to be sent. <option>+noedns</option>
- clears the remembered EDNS version. EDNS is set to
- 0 by default.
+ Specifies a file containing trusted keys to be used
+ with <option>+sigchase</option>. Each DNSKEY record
+ must be on its own line.
+ </para> <para>
+ If not specified, <command>dig</command> will look
+ for <filename>/etc/trusted-key.key</filename> then
+ <filename>trusted-key.key</filename> in the current
+ directory.
+ </para> <para>
+ Requires dig be compiled with -DDIG_SIGCHASE.
</para>
</listitem>
</varlistentry>
- <varlistentry>
- <term><option>+[no]multiline</option></term>
- <listitem>
- <para>
- Print records like the SOA records in a verbose multi-line
- format with human-readable comments. The default is to print
- each record on a single line, to facilitate machine parsing
- of the <command>dig</command> output.
- </para>
- </listitem>
- </varlistentry>
+ <varlistentry>
+ <term><option>+[no]ttlid</option></term>
+ <listitem>
+ <para>
+ Display [do not display] the TTL when printing the
+ record.
+ </para>
+ </listitem>
+ </varlistentry>
<varlistentry>
- <term><option>+[no]onesoa</option></term>
+ <term><option>+[no]vc</option></term>
<listitem>
<para>
- Print only one (starting) SOA record when performing
- an AXFR. The default is to print both the starting and
- ending SOA records.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+[no]fail</option></term>
- <listitem>
- <para>
- Do not try the next server if you receive a SERVFAIL. The
- default is
- to not try the next server which is the reverse of normal stub
- resolver
- behavior.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+[no]besteffort</option></term>
- <listitem>
- <para>
- Attempt to display the contents of messages which are malformed.
- The default is to not display malformed answers.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+[no]dnssec</option></term>
- <listitem>
- <para>
- Requests DNSSEC records be sent by setting the DNSSEC OK bit
- (DO)
- in the OPT record in the additional section of the query.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+[no]sigchase</option></term>
- <listitem>
- <para>
- Chase DNSSEC signature chains. Requires dig be compiled with
- -DDIG_SIGCHASE.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+trusted-key=####</option></term>
- <listitem>
- <para>
- Specifies a file containing trusted keys to be used with
- <option>+sigchase</option>. Each DNSKEY record must be
- on its own line.
- </para>
- <para>
- If not specified, <command>dig</command> will look for
- <filename>/etc/trusted-key.key</filename> then
- <filename>trusted-key.key</filename> in the current directory.
- </para>
- <para>
- Requires dig be compiled with -DDIG_SIGCHASE.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+[no]topdown</option></term>
- <listitem>
- <para>
- When chasing DNSSEC signature chains perform a top-down
- validation.
- Requires dig be compiled with -DDIG_SIGCHASE.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+[no]nsid</option></term>
- <listitem>
- <para>
- Include an EDNS name server ID request when sending a query.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><option>+[no]keepopen</option></term>
- <listitem>
- <para>
- Keep the TCP socket open between queries and reuse it rather
- than creating a new TCP socket for each lookup. The default
- is <option>+nokeepopen</option>.
- </para>
- </listitem>
- </varlistentry>
+ Use [do not use] TCP when querying name servers. This
+ alternate syntax to <parameter>+[no]tcp</parameter>
+ is provided for backwards compatibility. The "vc"
+ stands for "virtual circuit".
+ </para>
+ </listitem>
+ </varlistentry>
</variablelist>
@@ -988,13 +982,13 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
<refsect1>
<title>SEE ALSO</title>
<para><citerefentry>
- <refentrytitle>host</refentrytitle><manvolnum>1</manvolnum>
+ <refentrytitle>host</refentrytitle><manvolnum>1</manvolnum>
</citerefentry>,
<citerefentry>
- <refentrytitle>named</refentrytitle><manvolnum>8</manvolnum>
+ <refentrytitle>named</refentrytitle><manvolnum>8</manvolnum>
</citerefentry>,
<citerefentry>
- <refentrytitle>dnssec-keygen</refentrytitle><manvolnum>8</manvolnum>
+ <refentrytitle>dnssec-keygen</refentrytitle><manvolnum>8</manvolnum>
</citerefentry>,
<citetitle>RFC1035</citetitle>.
</para>
diff --git a/bin/dig/dig.html b/bin/dig/dig.html
index f6d7f6f2420b..829aa2c9ae89 100644
--- a/bin/dig/dig.html
+++ b/bin/dig/dig.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2011, 2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2011, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -29,12 +29,12 @@
</div>
<div class="refsynopsisdiv">
<h2>Synopsis</h2>
-<div class="cmdsynopsis"><p><code class="command">dig</code> [@server] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-k <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-m</code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]name:key</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [name] [type] [class] [queryopt...]</p></div>
+<div class="cmdsynopsis"><p><code class="command">dig</code> [@server] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-k <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-m</code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-v</code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]name:key</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [name] [type] [class] [queryopt...]</p></div>
<div class="cmdsynopsis"><p><code class="command">dig</code> [<code class="option">-h</code>]</p></div>
<div class="cmdsynopsis"><p><code class="command">dig</code> [global-queryopt...] [query...]</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543530"></a><h2>DESCRIPTION</h2>
+<a name="id2543544"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">dig</strong></span>
(domain information groper) is a flexible tool
for interrogating DNS name servers. It performs DNS lookups and
@@ -74,14 +74,14 @@
</p>
<p>
The IN and CH class names overlap with the IN and CH top level
- domains names. Either use the <code class="option">-t</code> and
+ domain names. Either use the <code class="option">-t</code> and
<code class="option">-c</code> options to specify the type and class,
use the <code class="option">-q</code> the specify the domain name, or
use "IN." and "CH." when looking up these top level domains.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543609"></a><h2>SIMPLE USAGE</h2>
+<a name="id2543623"></a><h2>SIMPLE USAGE</h2>
<p>
A typical invocation of <span><strong class="command">dig</strong></span> looks like:
</p>
@@ -94,47 +94,47 @@
<dt><span class="term"><code class="constant">server</code></span></dt>
<dd>
<p>
- is the name or IP address of the name server to query. This
- can be an IPv4 address in dotted-decimal notation or an IPv6
- address in colon-delimited notation. When the supplied
- <em class="parameter"><code>server</code></em> argument is a hostname,
- <span><strong class="command">dig</strong></span> resolves that name before querying
- that name server.
- </p>
-<p>
- If no <em class="parameter"><code>server</code></em> argument is
- provided, <span><strong class="command">dig</strong></span> consults
- <code class="filename">/etc/resolv.conf</code>; if an
- address is found there, it queries the name server at
- that address. If either of the <code class="option">-4</code> or
- <code class="option">-6</code> options are in use, then
- only addresses for the corresponding transport
- will be tried. If no usable addresses are found,
- <span><strong class="command">dig</strong></span> will send the query to the
- local host. The reply from the name server that
- responds is displayed.
- </p>
+ is the name or IP address of the name server to query. This
+ can be an IPv4 address in dotted-decimal notation or an IPv6
+ address in colon-delimited notation. When the supplied
+ <em class="parameter"><code>server</code></em> argument is a hostname,
+ <span><strong class="command">dig</strong></span> resolves that name before querying
+ that name server.
+ </p>
+<p>
+ If no <em class="parameter"><code>server</code></em> argument is
+ provided, <span><strong class="command">dig</strong></span> consults
+ <code class="filename">/etc/resolv.conf</code>; if an
+ address is found there, it queries the name server at
+ that address. If either of the <code class="option">-4</code> or
+ <code class="option">-6</code> options are in use, then
+ only addresses for the corresponding transport
+ will be tried. If no usable addresses are found,
+ <span><strong class="command">dig</strong></span> will send the query to the
+ local host. The reply from the name server that
+ responds is displayed.
+ </p>
</dd>
<dt><span class="term"><code class="constant">name</code></span></dt>
<dd><p>
- is the name of the resource record that is to be looked up.
- </p></dd>
+ is the name of the resource record that is to be looked up.
+ </p></dd>
<dt><span class="term"><code class="constant">type</code></span></dt>
<dd><p>
- indicates what type of query is required &#8212;
- ANY, A, MX, SIG, etc.
- <em class="parameter"><code>type</code></em> can be any valid query
- type. If no
- <em class="parameter"><code>type</code></em> argument is supplied,
- <span><strong class="command">dig</strong></span> will perform a lookup for an
- A record.
- </p></dd>
+ indicates what type of query is required &#8212;
+ ANY, A, MX, SIG, etc.
+ <em class="parameter"><code>type</code></em> can be any valid query
+ type. If no
+ <em class="parameter"><code>type</code></em> argument is supplied,
+ <span><strong class="command">dig</strong></span> will perform a lookup for an
+ A record.
+ </p></dd>
</dl></div>
<p>
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543713"></a><h2>OPTIONS</h2>
+<a name="id2543726"></a><h2>OPTIONS</h2>
<p>
The <code class="option">-b</code> option sets the source IP address of the query
to <em class="parameter"><code>address</code></em>. This must be a valid
@@ -193,10 +193,14 @@
</p>
<p>
The <code class="option">-q</code> option sets the query name to
- <em class="parameter"><code>name</code></em>. This useful do distinguish the
+ <em class="parameter"><code>name</code></em>. This is useful to distinguish the
<em class="parameter"><code>name</code></em> from other arguments.
</p>
<p>
+ The <code class="option">-v</code> causes <span><strong class="command">dig</strong></span> to
+ print the version number and exit.
+ </p>
+<p>
Reverse lookups &#8212; mapping addresses to names &#8212; are simplified by the
<code class="option">-x</code> option. <em class="parameter"><code>addr</code></em> is
an IPv4
@@ -238,7 +242,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2544061"></a><h2>QUERY OPTIONS</h2>
+<a name="id2544018"></a><h2>QUERY OPTIONS</h2>
<p><span><strong class="command">dig</strong></span>
provides a number of query options which affect
the way in which lookups are made and the results displayed. Some of
@@ -258,62 +262,19 @@
</p>
<div class="variablelist"><dl>
-<dt><span class="term"><code class="option">+[no]tcp</code></span></dt>
-<dd><p>
- Use [do not use] TCP when querying name servers. The default
- behavior is to use UDP unless an AXFR or IXFR query is
- requested, in
- which case a TCP connection is used.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]vc</code></span></dt>
-<dd><p>
- Use [do not use] TCP when querying name servers. This alternate
- syntax to <em class="parameter"><code>+[no]tcp</code></em> is
- provided for backwards
- compatibility. The "vc" stands for "virtual circuit".
- </p></dd>
-<dt><span class="term"><code class="option">+[no]ignore</code></span></dt>
-<dd><p>
- Ignore truncation in UDP responses instead of retrying with TCP.
- By
- default, TCP retries are performed.
- </p></dd>
-<dt><span class="term"><code class="option">+domain=somename</code></span></dt>
-<dd><p>
- Set the search list to contain the single domain
- <em class="parameter"><code>somename</code></em>, as if specified in
- a
- <span><strong class="command">domain</strong></span> directive in
- <code class="filename">/etc/resolv.conf</code>, and enable
- search list
- processing as if the <em class="parameter"><code>+search</code></em>
- option were given.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]search</code></span></dt>
-<dd><p>
- Use [do not use] the search list defined by the searchlist or
- domain
- directive in <code class="filename">resolv.conf</code> (if
- any).
- The search list is not used by default.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]showsearch</code></span></dt>
-<dd><p>
- Perform [do not perform] a search showing intermediate
- results.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]defname</code></span></dt>
+<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
<dd><p>
- Deprecated, treated as a synonym for <em class="parameter"><code>+[no]search</code></em>
- </p></dd>
+ A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
+ </p></dd>
<dt><span class="term"><code class="option">+[no]aaonly</code></span></dt>
<dd><p>
- Sets the "aa" flag in the query.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
+ Sets the "aa" flag in the query.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]additional</code></span></dt>
<dd><p>
- A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
- </p></dd>
+ Display [do not display] the additional section of a
+ reply. The default is to display it.
+ </p></dd>
<dt><span class="term"><code class="option">+[no]adflag</code></span></dt>
<dd><p>
Set [do not set] the AD (authentic data) bit in the
@@ -326,276 +287,310 @@
of the answer was insecure or not validated. This
bit is set by default.
</p></dd>
+<dt><span class="term"><code class="option">+[no]all</code></span></dt>
+<dd><p>
+ Set or clear all display flags.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]answer</code></span></dt>
+<dd><p>
+ Display [do not display] the answer section of a
+ reply. The default is to display it.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]authority</code></span></dt>
+<dd><p>
+ Display [do not display] the authority section of a
+ reply. The default is to display it.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]besteffort</code></span></dt>
+<dd><p>
+ Attempt to display the contents of messages which are
+ malformed. The default is to not display malformed
+ answers.
+ </p></dd>
+<dt><span class="term"><code class="option">+bufsize=B</code></span></dt>
+<dd><p>
+ Set the UDP message buffer size advertised using EDNS0
+ to <em class="parameter"><code>B</code></em> bytes. The maximum and
+ minimum sizes of this buffer are 65535 and 0 respectively.
+ Values outside this range are rounded up or down
+ appropriately. Values other than zero will cause a
+ EDNS query to be sent.
+ </p></dd>
<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
<dd><p>
- Set [do not set] the CD (checking disabled) bit in the query.
- This
- requests the server to not perform DNSSEC validation of
- responses.
- </p></dd>
+ Set [do not set] the CD (checking disabled) bit in
+ the query. This requests the server to not perform
+ DNSSEC validation of responses.
+ </p></dd>
<dt><span class="term"><code class="option">+[no]cl</code></span></dt>
<dd><p>
- Display [do not display] the CLASS when printing the record.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt>
+ Display [do not display] the CLASS when printing the
+ record.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]cmd</code></span></dt>
<dd><p>
- Display [do not display] the TTL when printing the record.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
+ Toggles the printing of the initial comment in the
+ output identifying the version of <span><strong class="command">dig</strong></span>
+ and the query options that have been applied. This
+ comment is printed by default.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]comments</code></span></dt>
<dd><p>
- Toggle the setting of the RD (recursion desired) bit
- in the query. This bit is set by default, which means
- <span><strong class="command">dig</strong></span> normally sends recursive
- queries. Recursion is automatically disabled when
- the <em class="parameter"><code>+nssearch</code></em> or
- <em class="parameter"><code>+trace</code></em> query options are used.
+ Toggle the display of comment lines in the output.
+ The default is to print comments.
</p></dd>
-<dt><span class="term"><code class="option">+[no]nssearch</code></span></dt>
+<dt><span class="term"><code class="option">+[no]defname</code></span></dt>
<dd><p>
- When this option is set, <span><strong class="command">dig</strong></span>
- attempts to find the
- authoritative name servers for the zone containing the name
- being
- looked up and display the SOA record that each name server has
- for the
- zone.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]trace</code></span></dt>
-<dd>
-<p>
- Toggle tracing of the delegation path from the root
- name servers for the name being looked up. Tracing
- is disabled by default. When tracing is enabled,
- <span><strong class="command">dig</strong></span> makes iterative queries to
- resolve the name being looked up. It will follow
- referrals from the root servers, showing the answer
- from each server that was used to resolve the lookup.
- </p>
-<p>
- <span><strong class="command">+dnssec</strong></span> is also set when +trace is
- set to better emulate the default queries from a nameserver.
- </p>
-</dd>
-<dt><span class="term"><code class="option">+[no]cmd</code></span></dt>
+ Deprecated, treated as a synonym for
+ <em class="parameter"><code>+[no]search</code></em>
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]dnssec</code></span></dt>
<dd><p>
- Toggles the printing of the initial comment in the output
- identifying
- the version of <span><strong class="command">dig</strong></span> and the query
- options that have
- been applied. This comment is printed by default.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]short</code></span></dt>
+ Requests DNSSEC records be sent by setting the DNSSEC
+ OK bit (DO) in the OPT record in the additional section
+ of the query.
+ </p></dd>
+<dt><span class="term"><code class="option">+domain=somename</code></span></dt>
<dd><p>
- Provide a terse answer. The default is to print the answer in a
- verbose form.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]identify</code></span></dt>
+ Set the search list to contain the single domain
+ <em class="parameter"><code>somename</code></em>, as if specified in
+ a <span><strong class="command">domain</strong></span> directive in
+ <code class="filename">/etc/resolv.conf</code>, and enable
+ search list processing as if the
+ <em class="parameter"><code>+search</code></em> option were given.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]edns[=#]</code></span></dt>
<dd><p>
- Show [or do not show] the IP address and port number that
- supplied the
- answer when the <em class="parameter"><code>+short</code></em> option
- is enabled. If
- short form answers are requested, the default is not to show the
- source address and port number of the server that provided the
- answer.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]comments</code></span></dt>
+ Specify the EDNS version to query with. Valid values
+ are 0 to 255. Setting the EDNS version will cause
+ a EDNS query to be sent. <code class="option">+noedns</code>
+ clears the remembered EDNS version. EDNS is set to
+ 0 by default.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]fail</code></span></dt>
<dd><p>
- Toggle the display of comment lines in the output. The default
- is to print comments.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]rrcomments</code></span></dt>
+ Do not try the next server if you receive a SERVFAIL.
+ The default is to not try the next server which is
+ the reverse of normal stub resolver behavior.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]identify</code></span></dt>
<dd><p>
- Toggle the display of per-record comments in the output (for
- example, human-readable key information about DNSKEY records).
- The default is not to print record comments unless multiline
- mode is active.
- </p></dd>
-<dt><span class="term"><code class="option">+split=W</code></span></dt>
+ Show [or do not show] the IP address and port number
+ that supplied the answer when the
+ <em class="parameter"><code>+short</code></em> option is enabled. If
+ short form answers are requested, the default is not
+ to show the source address and port number of the
+ server that provided the answer.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]ignore</code></span></dt>
<dd><p>
- Split long hex- or base64-formatted fields in resource
- records into chunks of <em class="parameter"><code>W</code></em> characters
- (where <em class="parameter"><code>W</code></em> is rounded up to the nearest
- multiple of 4).
- <em class="parameter"><code>+nosplit</code></em> or
- <em class="parameter"><code>+split=0</code></em> causes fields not to be
- split at all. The default is 56 characters, or 44 characters
- when multiline mode is active.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]stats</code></span></dt>
+ Ignore truncation in UDP responses instead of retrying
+ with TCP. By default, TCP retries are performed.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]keepopen</code></span></dt>
<dd><p>
- This query option toggles the printing of statistics: when the
- query
- was made, the size of the reply and so on. The default
- behavior is
- to print the query statistics.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]qr</code></span></dt>
+ Keep the TCP socket open between queries and reuse
+ it rather than creating a new TCP socket for each
+ lookup. The default is <code class="option">+nokeepopen</code>.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]multiline</code></span></dt>
<dd><p>
- Print [do not print] the query as it is sent.
- By default, the query is not printed.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]question</code></span></dt>
+ Print records like the SOA records in a verbose
+ multi-line format with human-readable comments. The
+ default is to print each record on a single line, to
+ facilitate machine parsing of the <span><strong class="command">dig</strong></span>
+ output.
+ </p></dd>
+<dt><span class="term"><code class="option">+ndots=D</code></span></dt>
<dd><p>
- Print [do not print] the question section of a query when an
- answer is
- returned. The default is to print the question section as a
- comment.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]answer</code></span></dt>
+ Set the number of dots that have to appear in
+ <em class="parameter"><code>name</code></em> to <em class="parameter"><code>D</code></em>
+ for it to be considered absolute. The default value
+ is that defined using the ndots statement in
+ <code class="filename">/etc/resolv.conf</code>, or 1 if no
+ ndots statement is present. Names with fewer dots
+ are interpreted as relative names and will be searched
+ for in the domains listed in the <code class="option">search</code>
+ or <code class="option">domain</code> directive in
+ <code class="filename">/etc/resolv.conf</code>.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]nsid</code></span></dt>
<dd><p>
- Display [do not display] the answer section of a reply. The
- default
- is to display it.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]authority</code></span></dt>
+ Include an EDNS name server ID request when sending
+ a query.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]nssearch</code></span></dt>
<dd><p>
- Display [do not display] the authority section of a reply. The
- default is to display it.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]additional</code></span></dt>
+ When this option is set, <span><strong class="command">dig</strong></span>
+ attempts to find the authoritative name servers for
+ the zone containing the name being looked up and
+ display the SOA record that each name server has for
+ the zone.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]onesoa</code></span></dt>
<dd><p>
- Display [do not display] the additional section of a reply.
- The default is to display it.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]all</code></span></dt>
+ Print only one (starting) SOA record when performing
+ an AXFR. The default is to print both the starting
+ and ending SOA records.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]qr</code></span></dt>
<dd><p>
- Set or clear all display flags.
- </p></dd>
-<dt><span class="term"><code class="option">+time=T</code></span></dt>
+ Print [do not print] the query as it is sent. By
+ default, the query is not printed.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]question</code></span></dt>
<dd><p>
-
- Sets the timeout for a query to
- <em class="parameter"><code>T</code></em> seconds. The default
- timeout is 5 seconds.
- An attempt to set <em class="parameter"><code>T</code></em> to less
- than 1 will result
- in a query timeout of 1 second being applied.
- </p></dd>
-<dt><span class="term"><code class="option">+tries=T</code></span></dt>
+ Print [do not print] the question section of a query
+ when an answer is returned. The default is to print
+ the question section as a comment.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
<dd><p>
- Sets the number of times to try UDP queries to server to
- <em class="parameter"><code>T</code></em> instead of the default, 3.
- If
- <em class="parameter"><code>T</code></em> is less than or equal to
- zero, the number of
- tries is silently rounded up to 1.
- </p></dd>
+ Toggle the setting of the RD (recursion desired) bit
+ in the query. This bit is set by default, which means
+ <span><strong class="command">dig</strong></span> normally sends recursive
+ queries. Recursion is automatically disabled when
+ the <em class="parameter"><code>+nssearch</code></em> or
+ <em class="parameter"><code>+trace</code></em> query options are used.
+ </p></dd>
<dt><span class="term"><code class="option">+retry=T</code></span></dt>
<dd><p>
- Sets the number of times to retry UDP queries to server to
- <em class="parameter"><code>T</code></em> instead of the default, 2.
- Unlike
- <em class="parameter"><code>+tries</code></em>, this does not include
- the initial
- query.
- </p></dd>
-<dt><span class="term"><code class="option">+ndots=D</code></span></dt>
+ Sets the number of times to retry UDP queries to
+ server to <em class="parameter"><code>T</code></em> instead of the
+ default, 2. Unlike <em class="parameter"><code>+tries</code></em>,
+ this does not include the initial query.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]rrcomments</code></span></dt>
<dd><p>
- Set the number of dots that have to appear in
- <em class="parameter"><code>name</code></em> to <em class="parameter"><code>D</code></em> for it to be
- considered absolute. The default value is that defined using
- the
- ndots statement in <code class="filename">/etc/resolv.conf</code>, or 1 if no
- ndots statement is present. Names with fewer dots are
- interpreted as
- relative names and will be searched for in the domains listed in
- the
- <code class="option">search</code> or <code class="option">domain</code> directive in
- <code class="filename">/etc/resolv.conf</code>.
- </p></dd>
-<dt><span class="term"><code class="option">+bufsize=B</code></span></dt>
+ Toggle the display of per-record comments in the
+ output (for example, human-readable key information
+ about DNSKEY records). The default is not to print
+ record comments unless multiline mode is active.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]search</code></span></dt>
<dd><p>
- Set the UDP message buffer size advertised using EDNS0 to
- <em class="parameter"><code>B</code></em> bytes. The maximum and minimum sizes
- of this buffer are 65535 and 0 respectively. Values outside
- this range are rounded up or down appropriately.
- Values other than zero will cause a EDNS query to be sent.
- </p></dd>
-<dt><span class="term"><code class="option">+edns=#</code></span></dt>
+ Use [do not use] the search list defined by the
+ searchlist or domain directive in
+ <code class="filename">resolv.conf</code> (if any). The search
+ list is not used by default.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]short</code></span></dt>
<dd><p>
- Specify the EDNS version to query with. Valid values
- are 0 to 255. Setting the EDNS version will cause
- a EDNS query to be sent. <code class="option">+noedns</code>
- clears the remembered EDNS version. EDNS is set to
- 0 by default.
+ Provide a terse answer. The default is to print the
+ answer in a verbose form.
</p></dd>
-<dt><span class="term"><code class="option">+[no]multiline</code></span></dt>
+<dt><span class="term"><code class="option">+[no]showsearch</code></span></dt>
<dd><p>
- Print records like the SOA records in a verbose multi-line
- format with human-readable comments. The default is to print
- each record on a single line, to facilitate machine parsing
- of the <span><strong class="command">dig</strong></span> output.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]onesoa</code></span></dt>
+ Perform [do not perform] a search showing intermediate
+ results.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]sigchase</code></span></dt>
<dd><p>
- Print only one (starting) SOA record when performing
- an AXFR. The default is to print both the starting and
- ending SOA records.
+ Chase DNSSEC signature chains. Requires dig be
+ compiled with -DDIG_SIGCHASE.
</p></dd>
-<dt><span class="term"><code class="option">+[no]fail</code></span></dt>
+<dt><span class="term"><code class="option">+split=W</code></span></dt>
<dd><p>
- Do not try the next server if you receive a SERVFAIL. The
- default is
- to not try the next server which is the reverse of normal stub
- resolver
- behavior.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]besteffort</code></span></dt>
+ Split long hex- or base64-formatted fields in resource
+ records into chunks of <em class="parameter"><code>W</code></em>
+ characters (where <em class="parameter"><code>W</code></em> is rounded
+ up to the nearest multiple of 4).
+ <em class="parameter"><code>+nosplit</code></em> or
+ <em class="parameter"><code>+split=0</code></em> causes fields not to
+ be split at all. The default is 56 characters, or
+ 44 characters when multiline mode is active.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]stats</code></span></dt>
<dd><p>
- Attempt to display the contents of messages which are malformed.
- The default is to not display malformed answers.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]dnssec</code></span></dt>
+ This query option toggles the printing of statistics:
+ when the query was made, the size of the reply and
+ so on. The default behavior is to print the query
+ statistics.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]tcp</code></span></dt>
<dd><p>
- Requests DNSSEC records be sent by setting the DNSSEC OK bit
- (DO)
- in the OPT record in the additional section of the query.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]sigchase</code></span></dt>
+ Use [do not use] TCP when querying name servers. The
+ default behavior is to use UDP unless an
+ <code class="literal">ixfr=N</code> query is requested, in which
+ case the default is TCP. AXFR queries always use
+ TCP.
+ </p></dd>
+<dt><span class="term"><code class="option">+time=T</code></span></dt>
+<dd><p>
+
+ Sets the timeout for a query to
+ <em class="parameter"><code>T</code></em> seconds. The default
+ timeout is 5 seconds.
+ An attempt to set <em class="parameter"><code>T</code></em> to less
+ than 1 will result
+ in a query timeout of 1 second being applied.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]topdown</code></span></dt>
+<dd><p>
+ When chasing DNSSEC signature chains perform a top-down
+ validation. Requires dig be compiled with -DDIG_SIGCHASE.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]trace</code></span></dt>
+<dd>
+<p>
+ Toggle tracing of the delegation path from the root
+ name servers for the name being looked up. Tracing
+ is disabled by default. When tracing is enabled,
+ <span><strong class="command">dig</strong></span> makes iterative queries to
+ resolve the name being looked up. It will follow
+ referrals from the root servers, showing the answer
+ from each server that was used to resolve the lookup.
+ </p>
+<p>
+ <span><strong class="command">+dnssec</strong></span> is also set when +trace
+ is set to better emulate the default queries from a
+ nameserver.
+ </p>
+</dd>
+<dt><span class="term"><code class="option">+tries=T</code></span></dt>
<dd><p>
- Chase DNSSEC signature chains. Requires dig be compiled with
- -DDIG_SIGCHASE.
- </p></dd>
+ Sets the number of times to try UDP queries to server
+ to <em class="parameter"><code>T</code></em> instead of the default,
+ 3. If <em class="parameter"><code>T</code></em> is less than or equal
+ to zero, the number of tries is silently rounded up
+ to 1.
+ </p></dd>
<dt><span class="term"><code class="option">+trusted-key=####</code></span></dt>
<dd>
<p>
- Specifies a file containing trusted keys to be used with
- <code class="option">+sigchase</code>. Each DNSKEY record must be
- on its own line.
- </p>
+ Specifies a file containing trusted keys to be used
+ with <code class="option">+sigchase</code>. Each DNSKEY record
+ must be on its own line.
+ </p>
<p>
- If not specified, <span><strong class="command">dig</strong></span> will look for
- <code class="filename">/etc/trusted-key.key</code> then
- <code class="filename">trusted-key.key</code> in the current directory.
+ If not specified, <span><strong class="command">dig</strong></span> will look
+ for <code class="filename">/etc/trusted-key.key</code> then
+ <code class="filename">trusted-key.key</code> in the current
+ directory.
</p>
<p>
- Requires dig be compiled with -DDIG_SIGCHASE.
+ Requires dig be compiled with -DDIG_SIGCHASE.
</p>
</dd>
-<dt><span class="term"><code class="option">+[no]topdown</code></span></dt>
-<dd><p>
- When chasing DNSSEC signature chains perform a top-down
- validation.
- Requires dig be compiled with -DDIG_SIGCHASE.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]nsid</code></span></dt>
+<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt>
<dd><p>
- Include an EDNS name server ID request when sending a query.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]keepopen</code></span></dt>
+ Display [do not display] the TTL when printing the
+ record.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]vc</code></span></dt>
<dd><p>
- Keep the TCP socket open between queries and reuse it rather
- than creating a new TCP socket for each lookup. The default
- is <code class="option">+nokeepopen</code>.
- </p></dd>
+ Use [do not use] TCP when querying name servers. This
+ alternate syntax to <em class="parameter"><code>+[no]tcp</code></em>
+ is provided for backwards compatibility. The "vc"
+ stands for "virtual circuit".
+ </p></dd>
</dl></div>
<p>
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2545341"></a><h2>MULTIPLE QUERIES</h2>
+<a name="id2545168"></a><h2>MULTIPLE QUERIES</h2>
<p>
The BIND 9 implementation of <span><strong class="command">dig </strong></span>
supports
@@ -641,7 +636,7 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2545403"></a><h2>IDN SUPPORT</h2>
+<a name="id2545229"></a><h2>IDN SUPPORT</h2>
<p>
If <span><strong class="command">dig</strong></span> has been built with IDN (internationalized
domain name) support, it can accept and display non-ASCII domain names.
@@ -655,14 +650,14 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2545426"></a><h2>FILES</h2>
+<a name="id2545252"></a><h2>FILES</h2>
<p><code class="filename">/etc/resolv.conf</code>
</p>
<p><code class="filename">${HOME}/.digrc</code>
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2545443"></a><h2>SEE ALSO</h2>
+<a name="id2545269"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">host</span>(1)</span>,
<span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
@@ -670,7 +665,7 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2545548"></a><h2>BUGS</h2>
+<a name="id2545306"></a><h2>BUGS</h2>
<p>
There are probably too many query options.
</p>
diff --git a/bin/dig/dighost.c b/bin/dig/dighost.c
index 56d763c295d7..a2aabdf34130 100644
--- a/bin/dig/dighost.c
+++ b/bin/dig/dighost.c
@@ -368,6 +368,11 @@ connect_timeout(isc_task_t *task, isc_event_t *event);
static void
launch_next_query(dig_query_t *query, isc_boolean_t include_question);
+static void
+check_next_lookup(dig_lookup_t *lookup);
+
+static isc_boolean_t
+next_origin(dig_lookup_t *oldlookup);
static void *
mem_alloc(void *arg, size_t size) {
@@ -611,7 +616,8 @@ addr2af(int lwresaddrtype)
static void
copy_server_list(lwres_conf_t *confdata, dig_serverlist_t *dest) {
dig_server_t *newsrv;
- char tmp[sizeof("ffff:ffff:ffff:ffff:ffff:ffff:255.255.255.255")];
+ char tmp[sizeof("ffff:ffff:ffff:ffff:ffff:ffff:255.255.255.255") +
+ sizeof("%4000000000")];
int af;
int i;
@@ -626,6 +632,12 @@ copy_server_list(lwres_conf_t *confdata, dig_serverlist_t *dest) {
lwres_net_ntop(af, confdata->nameservers[i].address,
tmp, sizeof(tmp));
+ if (af == AF_INET6 && confdata->nameservers[i].zone != 0) {
+ char buf[sizeof("%4000000000")];
+ snprintf(buf, sizeof(buf), "%%%u",
+ confdata->nameservers[i].zone);
+ strlcat(tmp, buf, sizeof(tmp));
+ }
newsrv = make_server(tmp, tmp);
ISC_LINK_INIT(newsrv, link);
ISC_LIST_ENQUEUE(*dest, newsrv, link);
@@ -791,6 +803,7 @@ make_empty_lookup(void) {
looknew->retries = tries;
looknew->nsfound = 0;
looknew->tcp_mode = ISC_FALSE;
+ looknew->tcp_mode_set = ISC_FALSE;
looknew->ip6_int = ISC_FALSE;
looknew->comments = ISC_TRUE;
looknew->stats = ISC_TRUE;
@@ -801,6 +814,7 @@ make_empty_lookup(void) {
looknew->new_search = ISC_FALSE;
looknew->done_as_is = ISC_FALSE;
looknew->need_search = ISC_FALSE;
+ dns_fixedname_init(&looknew->fdomain);
ISC_LINK_INIT(looknew, link);
ISC_LIST_INIT(looknew->q);
ISC_LIST_INIT(looknew->connecting);
@@ -867,6 +881,7 @@ clone_lookup(dig_lookup_t *lookold, isc_boolean_t servers) {
looknew->cdflag = lookold->cdflag;
looknew->ns_search_only = lookold->ns_search_only;
looknew->tcp_mode = lookold->tcp_mode;
+ looknew->tcp_mode_set = lookold->tcp_mode_set;
looknew->comments = lookold->comments;
looknew->stats = lookold->stats;
looknew->section_question = lookold->section_question;
@@ -878,6 +893,9 @@ clone_lookup(dig_lookup_t *lookold, isc_boolean_t servers) {
looknew->need_search = lookold->need_search;
looknew->done_as_is = lookold->done_as_is;
+ dns_name_copy(dns_fixedname_name(&lookold->fdomain),
+ dns_fixedname_name(&looknew->fdomain), NULL);
+
if (servers)
clone_server_list(lookold->my_server_list,
&looknew->my_server_list);
@@ -1688,8 +1706,10 @@ start_lookup(void) {
}
novalidation:
#endif
- setup_lookup(current_lookup);
- do_lookup(current_lookup);
+ if (setup_lookup(current_lookup))
+ do_lookup(current_lookup);
+ else if (next_origin(current_lookup))
+ check_next_lookup(current_lookup);
} else {
check_if_done();
}
@@ -1823,7 +1843,6 @@ followup_lookup(dns_message_t *msg, dig_query_t *query, dns_section_t section)
lookup->trace_root = ISC_FALSE;
if (lookup->ns_search_only)
lookup->recurse = ISC_FALSE;
- dns_fixedname_init(&lookup->fdomain);
domain = dns_fixedname_name(&lookup->fdomain);
dns_name_copy(name, domain, NULL);
}
@@ -1891,8 +1910,8 @@ followup_lookup(dns_message_t *msg, dig_query_t *query, dns_section_t section)
* Return ISC_TRUE iff there was another searchlist entry.
*/
static isc_boolean_t
-next_origin(dig_query_t *query) {
- dig_lookup_t *lookup;
+next_origin(dig_lookup_t *oldlookup) {
+ dig_lookup_t *newlookup;
dig_searchlist_t *search;
dns_fixedname_t fixed;
dns_name_t *name;
@@ -1901,7 +1920,7 @@ next_origin(dig_query_t *query) {
INSIST(!free_now);
debug("next_origin()");
- debug("following up %s", query->lookup->textname);
+ debug("following up %s", oldlookup->textname);
if (!usesearch)
/*
@@ -1915,30 +1934,30 @@ next_origin(dig_query_t *query) {
*/
dns_fixedname_init(&fixed);
name = dns_fixedname_name(&fixed);
- result = dns_name_fromstring2(name, query->lookup->textname, NULL,
+ result = dns_name_fromstring2(name, oldlookup->textname, NULL,
0, NULL);
if (result == ISC_R_SUCCESS &&
(dns_name_isabsolute(name) ||
(int)dns_name_countlabels(name) > ndots))
return (ISC_FALSE);
- if (query->lookup->origin == NULL && !query->lookup->need_search)
+ if (oldlookup->origin == NULL && !oldlookup->need_search)
/*
* Then we just did rootorg; there's nothing left.
*/
return (ISC_FALSE);
- if (query->lookup->origin == NULL && query->lookup->need_search) {
- lookup = requeue_lookup(query->lookup, ISC_TRUE);
- lookup->origin = ISC_LIST_HEAD(search_list);
- lookup->need_search = ISC_FALSE;
+ if (oldlookup->origin == NULL && oldlookup->need_search) {
+ newlookup = requeue_lookup(oldlookup, ISC_TRUE);
+ newlookup->origin = ISC_LIST_HEAD(search_list);
+ newlookup->need_search = ISC_FALSE;
} else {
- search = ISC_LIST_NEXT(query->lookup->origin, link);
- if (search == NULL && query->lookup->done_as_is)
+ search = ISC_LIST_NEXT(oldlookup->origin, link);
+ if (search == NULL && oldlookup->done_as_is)
return (ISC_FALSE);
- lookup = requeue_lookup(query->lookup, ISC_TRUE);
- lookup->origin = search;
+ newlookup = requeue_lookup(oldlookup, ISC_TRUE);
+ newlookup->origin = search;
}
- cancel_lookup(query->lookup);
+ cancel_lookup(oldlookup);
return (ISC_TRUE);
}
@@ -2014,7 +2033,7 @@ insert_soa(dig_lookup_t *lookup) {
* well as the query structures and buffer space for the replies. If the
* server list is empty, clone it from the system default list.
*/
-void
+isc_boolean_t
setup_lookup(dig_lookup_t *lookup) {
isc_result_t result;
isc_uint32_t id;
@@ -2140,20 +2159,35 @@ setup_lookup(dig_lookup_t *lookup) {
if (lookup->trace && lookup->trace_root) {
dns_name_clone(dns_rootname, lookup->name);
} else {
+ dns_fixedname_t fixed;
+ dns_name_t *name;
+
+ dns_fixedname_init(&fixed);
+ name = dns_fixedname_name(&fixed);
len = strlen(lookup->textname);
isc_buffer_init(&b, lookup->textname, len);
isc_buffer_add(&b, len);
- result = dns_name_fromtext(lookup->name, &b,
- lookup->oname, 0,
- &lookup->namebuf);
- }
- if (result != ISC_R_SUCCESS) {
- dns_message_puttempname(lookup->sendmsg,
- &lookup->name);
- dns_message_puttempname(lookup->sendmsg,
- &lookup->oname);
- fatal("'%s' is not in legal name syntax (%s)",
- lookup->textname, isc_result_totext(result));
+ result = dns_name_fromtext(name, &b, NULL, 0, NULL);
+ if (result == ISC_R_SUCCESS &&
+ !dns_name_isabsolute(name))
+ result = dns_name_concatenate(name,
+ lookup->oname,
+ lookup->name,
+ &lookup->namebuf);
+ else if (result == ISC_R_SUCCESS)
+ result = dns_name_copy(name, lookup->name,
+ &lookup->namebuf);
+ if (result != ISC_R_SUCCESS) {
+ dns_message_puttempname(lookup->sendmsg,
+ &lookup->name);
+ dns_message_puttempname(lookup->sendmsg,
+ &lookup->oname);
+ if (result == DNS_R_NAMETOOLONG)
+ return (ISC_FALSE);
+ fatal("'%s' is not in legal name syntax (%s)",
+ lookup->textname,
+ isc_result_totext(result));
+ }
}
dns_message_puttempname(lookup->sendmsg, &lookup->oname);
} else
@@ -2353,6 +2387,7 @@ setup_lookup(dig_lookup_t *lookup) {
printmessage(ISC_LIST_HEAD(lookup->q), lookup->sendmsg,
ISC_TRUE);
}
+ return (ISC_TRUE);
}
/*%
@@ -3149,6 +3184,7 @@ recv_done(isc_task_t *task, isc_event_t *event) {
INSIST(recvcount >= 0);
query = event->ev_arg;
+ TIME_NOW(&query->time_recv);
debug("lookup=%p, query=%p", query->lookup, query);
l = query->lookup;
@@ -3472,7 +3508,7 @@ recv_done(isc_task_t *task, isc_event_t *event) {
if (!l->doing_xfr || l->xfr_q == query) {
if (msg->rcode == dns_rcode_nxdomain &&
(l->origin != NULL || l->need_search)) {
- if (!next_origin(query) || showsearch) {
+ if (!next_origin(query->lookup) || showsearch) {
printmessage(query, msg, ISC_TRUE);
received(b->used, &sevent->address, query);
}
diff --git a/bin/dig/host.1 b/bin/dig/host.1
index b6eb81ba40f6..4ff5a7cc6177 100644
--- a/bin/dig/host.1
+++ b/bin/dig/host.1
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2004, 2005, 2007-2009 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004, 2005, 2007-2009, 2014 Internet Systems Consortium, Inc. ("ISC")
.\" Copyright (C) 2000-2002 Internet Software Consortium.
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
@@ -20,11 +20,11 @@
.\" Title: host
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: Jun 30, 2000
+.\" Date: January 20, 2009
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "HOST" "1" "Jun 30, 2000" "BIND9" "BIND9"
+.TH "HOST" "1" "January 20, 2009" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -33,7 +33,7 @@
host \- DNS lookup utility
.SH "SYNOPSIS"
.HP 5
-\fBhost\fR [\fB\-aCdlnrsTwv\fR] [\fB\-c\ \fR\fB\fIclass\fR\fR] [\fB\-N\ \fR\fB\fIndots\fR\fR] [\fB\-R\ \fR\fB\fInumber\fR\fR] [\fB\-t\ \fR\fB\fItype\fR\fR] [\fB\-W\ \fR\fB\fIwait\fR\fR] [\fB\-m\ \fR\fB\fIflag\fR\fR] [\fB\-4\fR] [\fB\-6\fR] {name} [server]
+\fBhost\fR [\fB\-aCdlnrsTwv\fR] [\fB\-c\ \fR\fB\fIclass\fR\fR] [\fB\-N\ \fR\fB\fIndots\fR\fR] [\fB\-R\ \fR\fB\fInumber\fR\fR] [\fB\-t\ \fR\fB\fItype\fR\fR] [\fB\-W\ \fR\fB\fIwait\fR\fR] [\fB\-m\ \fR\fB\fIflag\fR\fR] [\fB\-4\fR] [\fB\-6\fR] [\fB\-v\fR] [\fB\-V\fR] {name} [server]
.SH "DESCRIPTION"
.PP
\fBhost\fR
@@ -194,6 +194,12 @@ can be used to set the memory usage debugging flags
\fIusage\fR
and
\fItrace\fR.
+.PP
+The
+\fB\-V\fR
+option causes
+\fBhost\fR
+to print the version number and exit.
.SH "IDN SUPPORT"
.PP
If
@@ -213,7 +219,7 @@ runs.
\fBdig\fR(1),
\fBnamed\fR(8).
.SH "COPYRIGHT"
-Copyright \(co 2004, 2005, 2007\-2009 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2004, 2005, 2007\-2009, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
Copyright \(co 2000\-2002 Internet Software Consortium.
.br
diff --git a/bin/dig/host.c b/bin/dig/host.c
index d1392fc8460b..08f89bf74c9e 100644
--- a/bin/dig/host.c
+++ b/bin/dig/host.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2007, 2009-2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2007, 2009-2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 2000-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -15,8 +15,6 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
-/* $Id: host.c,v 1.127 2011/03/11 06:11:20 marka Exp $ */
-
/*! \file */
#include <config.h>
@@ -166,7 +164,8 @@ show_usage(void) {
" -W specifies how long to wait for a reply\n"
" -4 use IPv4 query transport only\n"
" -6 use IPv6 query transport only\n"
-" -m set memory debugging flag (trace|record|usage)\n", stderr);
+" -m set memory debugging flag (trace|record|usage)\n"
+" -v print version number and exit\n", stderr);
exit(1);
}
@@ -603,7 +602,13 @@ printmessage(dig_query_t *query, dns_message_t *msg, isc_boolean_t headers) {
return (result);
}
-static const char * optstring = "46ac:dilnm:rst:vwCDN:R:TW:";
+static const char * optstring = "46ac:dilnm:rst:vVwCDN:R:TW:";
+
+/*% version */
+static void
+version(void) {
+ fputs("host " VERSION "\n", stderr);
+}
static void
pre_parse_args(int argc, char **argv) {
@@ -635,6 +640,10 @@ pre_parse_args(int argc, char **argv) {
case 's': break;
case 't': break;
case 'v': break;
+ case 'V':
+ version();
+ exit(0);
+ break;
case 'w': break;
case 'C': break;
case 'D':
@@ -756,6 +765,9 @@ parse_args(isc_boolean_t is_batchfile, int argc, char **argv) {
if (!lookup->rdtypeset ||
lookup->rdtype != dns_rdatatype_axfr)
lookup->rdtype = dns_rdatatype_any;
+#ifdef WITH_IDN
+ idnoptions = 0;
+#endif
list_type = dns_rdatatype_any;
list_addresses = ISC_FALSE;
lookup->rdtypeset = ISC_TRUE;
diff --git a/bin/dig/host.docbook b/bin/dig/host.docbook
index bc435f92f11c..30fc441044ef 100644
--- a/bin/dig/host.docbook
+++ b/bin/dig/host.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2004, 2005, 2007-2009 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007-2009, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2002 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -18,11 +18,10 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: host.docbook,v 1.20 2009/01/20 23:47:56 tbox Exp $ -->
<refentry id="man.host">
<refentryinfo>
- <date>Jun 30, 2000</date>
+ <date>January 20, 2009</date>
</refentryinfo>
<refmeta>
@@ -43,6 +42,7 @@
<year>2007</year>
<year>2008</year>
<year>2009</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
@@ -65,6 +65,8 @@
<arg><option>-m <replaceable class="parameter">flag</replaceable></option></arg>
<arg><option>-4</option></arg>
<arg><option>-6</option></arg>
+ <arg><option>-v</option></arg>
+ <arg><option>-V</option></arg>
<arg choice="req">name</arg>
<arg choice="opt">server</arg>
</cmdsynopsis>
@@ -238,6 +240,11 @@
<parameter>record</parameter>, <parameter>usage</parameter> and
<parameter>trace</parameter>.
</para>
+
+ <para>
+ The <option>-V</option> option causes <command>host</command>
+ to print the version number and exit.
+ </para>
</refsect1>
<refsect1>
diff --git a/bin/dig/host.html b/bin/dig/host.html
index d5fb6e735fb1..a04536afec56 100644
--- a/bin/dig/host.html
+++ b/bin/dig/host.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004, 2005, 2007-2009 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007-2009, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2002 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -29,10 +29,10 @@
</div>
<div class="refsynopsisdiv">
<h2>Synopsis</h2>
-<div class="cmdsynopsis"><p><code class="command">host</code> [<code class="option">-aCdlnrsTwv</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-N <em class="replaceable"><code>ndots</code></em></code>] [<code class="option">-R <em class="replaceable"><code>number</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-W <em class="replaceable"><code>wait</code></em></code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] {name} [server]</p></div>
+<div class="cmdsynopsis"><p><code class="command">host</code> [<code class="option">-aCdlnrsTwv</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-N <em class="replaceable"><code>ndots</code></em></code>] [<code class="option">-R <em class="replaceable"><code>number</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-W <em class="replaceable"><code>wait</code></em></code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-v</code>] [<code class="option">-V</code>] {name} [server]</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543436"></a><h2>DESCRIPTION</h2>
+<a name="id2543454"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">host</strong></span>
is a simple utility for performing DNS lookups.
It is normally used to convert names to IP addresses and vice versa.
@@ -182,9 +182,13 @@
<em class="parameter"><code>record</code></em>, <em class="parameter"><code>usage</code></em> and
<em class="parameter"><code>trace</code></em>.
</p>
+<p>
+ The <code class="option">-V</code> option causes <span><strong class="command">host</strong></span>
+ to print the version number and exit.
+ </p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543802"></a><h2>IDN SUPPORT</h2>
+<a name="id2543831"></a><h2>IDN SUPPORT</h2>
<p>
If <span><strong class="command">host</strong></span> has been built with IDN (internationalized
domain name) support, it can accept and display non-ASCII domain names.
@@ -198,12 +202,12 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543825"></a><h2>FILES</h2>
+<a name="id2543853"></a><h2>FILES</h2>
<p><code class="filename">/etc/resolv.conf</code>
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543836"></a><h2>SEE ALSO</h2>
+<a name="id2543865"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">dig</span>(1)</span>,
<span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>.
</p>
diff --git a/bin/dig/include/dig/dig.h b/bin/dig/include/dig/dig.h
index 0150d11dfb3c..99bf236d717d 100644
--- a/bin/dig/include/dig/dig.h
+++ b/bin/dig/include/dig/dig.h
@@ -117,6 +117,7 @@ struct dig_lookup {
trace, /*% dig +trace */
trace_root, /*% initial query for either +trace or +nssearch */
tcp_mode,
+ tcp_mode_set,
ip6_int,
comments,
stats,
@@ -219,6 +220,7 @@ struct dig_query {
ISC_LINK(dig_query_t) clink;
isc_sockaddr_t sockaddr;
isc_time_t time_sent;
+ isc_time_t time_recv;
isc_uint64_t byte_count;
isc_buffer_t sendbuf;
};
@@ -309,7 +311,7 @@ debug(const char *format, ...) ISC_FORMAT_PRINTF(1, 2);
void
check_result(isc_result_t result, const char *msg);
-void
+isc_boolean_t
setup_lookup(dig_lookup_t *lookup);
void
diff --git a/bin/dig/nslookup.1 b/bin/dig/nslookup.1
index 3d6975910701..e5ea2396a12d 100644
--- a/bin/dig/nslookup.1
+++ b/bin/dig/nslookup.1
@@ -19,11 +19,11 @@
.\" Title: nslookup
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: Jun 30, 2000
+.\" Date: January 24, 2014
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "NSLOOKUP" "1" "Jun 30, 2000" "BIND9" "BIND9"
+.TH "NSLOOKUP" "1" "January 24, 2014" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -61,6 +61,12 @@ nslookup \-query=hinfo \-timeout=10
.fi
.RE
.sp
+.PP
+The
+\fB\-version\fR
+option causes
+\fBnslookup\fR
+to print the version number and immediately exits.
.SH "INTERACTIVE COMMANDS"
.PP
\fBhost\fR [server]
diff --git a/bin/dig/nslookup.c b/bin/dig/nslookup.c
index 6c2f0a949983..051ed34b9415 100644
--- a/bin/dig/nslookup.c
+++ b/bin/dig/nslookup.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 2000-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -15,8 +15,6 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
-/* $Id: nslookup.c,v 1.130 2011/12/16 23:01:16 each Exp $ */
-
#include <config.h>
#include <stdlib.h>
@@ -582,6 +580,11 @@ set_ndots(const char *value) {
}
static void
+version(void) {
+ fputs("nslookup " VERSION "\n", stderr);
+}
+
+static void
setoption(char *opt) {
if (strncasecmp(opt, "all", 4) == 0) {
show_settings(ISC_TRUE, ISC_FALSE);
@@ -805,9 +808,12 @@ parse_args(int argc, char **argv) {
for (argc--, argv++; argc > 0; argc--, argv++) {
debug("main parsing %s", argv[0]);
if (argv[0][0] == '-') {
- if (argv[0][1] != 0)
+ if (strncasecmp(argv[0], "-ver", 4) == 0) {
+ version();
+ exit(0);
+ } else if (argv[0][1] != 0) {
setoption(&argv[0][1]);
- else
+ } else
have_lookup = ISC_TRUE;
} else {
if (!have_lookup) {
diff --git a/bin/dig/nslookup.docbook b/bin/dig/nslookup.docbook
index 4da87b1eb5dd..022de672b80f 100644
--- a/bin/dig/nslookup.docbook
+++ b/bin/dig/nslookup.docbook
@@ -17,7 +17,6 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: nslookup.docbook,v 1.18 2010/02/22 23:49:11 tbox Exp $ -->
<!--
- Copyright (c) 1985, 1989
- The Regents of the University of California. All rights reserved.
@@ -49,7 +48,7 @@
<refentry>
<refentryinfo>
- <date>Jun 30, 2000</date>
+ <date>January 24, 2014</date>
</refentryinfo>
<refmeta>
@@ -134,6 +133,11 @@ nslookup -query=hinfo -timeout=10
</programlisting>
<!-- </informalexample> -->
</para>
+ <para>
+ The <option>-version</option> option causes
+ <command>nslookup</command> to print the version
+ number and immediately exits.
+ </para>
</refsect1>
diff --git a/bin/dig/nslookup.html b/bin/dig/nslookup.html
index b7e88e947319..96777b3106e5 100644
--- a/bin/dig/nslookup.html
+++ b/bin/dig/nslookup.html
@@ -21,7 +21,7 @@
<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
-<a name="id2476277"></a><div class="titlepage"></div>
+<a name="id2476283"></a><div class="titlepage"></div>
<div class="refnamediv">
<h2>Name</h2>
<p>nslookup &#8212; query Internet name servers interactively</p>
@@ -31,7 +31,7 @@
<div class="cmdsynopsis"><p><code class="command">nslookup</code> [<code class="option">-option</code>] [name | -] [server]</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543435"></a><h2>DESCRIPTION</h2>
+<a name="id2543442"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">Nslookup</strong></span>
is a program to query Internet domain name servers. <span><strong class="command">Nslookup</strong></span>
has two modes: interactive and non-interactive. Interactive mode allows
@@ -43,7 +43,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543451"></a><h2>ARGUMENTS</h2>
+<a name="id2543458"></a><h2>ARGUMENTS</h2>
<p>
Interactive mode is entered in the following cases:
</p>
@@ -76,9 +76,14 @@ nslookup -query=hinfo -timeout=10
<p>
</p>
+<p>
+ The <code class="option">-version</code> option causes
+ <span><strong class="command">nslookup</strong></span> to print the version
+ number and immediately exits.
+ </p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543495"></a><h2>INTERACTIVE COMMANDS</h2>
+<a name="id2543512"></a><h2>INTERACTIVE COMMANDS</h2>
<div class="variablelist"><dl>
<dt><span class="term"><code class="constant">host</code> [<span class="optional">server</span>]</span></dt>
<dd>
@@ -294,19 +299,19 @@ nslookup -query=hinfo -timeout=10
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2546309"></a><h2>FILES</h2>
+<a name="id2546326"></a><h2>FILES</h2>
<p><code class="filename">/etc/resolv.conf</code>
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2546321"></a><h2>SEE ALSO</h2>
+<a name="id2546338"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">dig</span>(1)</span>,
<span class="citerefentry"><span class="refentrytitle">host</span>(1)</span>,
<span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2546355"></a><h2>Author</h2>
+<a name="id2546372"></a><h2>Author</h2>
<p>
Andrew Cherenson
</p>
diff --git a/bin/dnssec/Makefile.in b/bin/dnssec/Makefile.in
index 5966d16389f6..81f65938a0c3 100644
--- a/bin/dnssec/Makefile.in
+++ b/bin/dnssec/Makefile.in
@@ -1,4 +1,4 @@
-# Copyright (C) 2004, 2005, 2007-2009, 2012, 2013 Internet Systems Consortium, Inc. ("ISC")
+# Copyright (C) 2004, 2005, 2007-2009, 2012-2014 Internet Systems Consortium, Inc. ("ISC")
# Copyright (C) 2000-2002 Internet Software Consortium.
#
# Permission to use, copy, modify, and/or distribute this software for any
@@ -55,12 +55,12 @@ SRCS = dnssec-dsfromkey.c dnssec-keyfromlabel.c dnssec-keygen.c \
MANPAGES = dnssec-dsfromkey.8 dnssec-keyfromlabel.8 dnssec-keygen.8 \
dnssec-revoke.8 dnssec-settime.8 dnssec-signzone.8 \
- dnssec-verify.8
+ dnssec-verify.8 dnssec-importkey.8
HTMLPAGES = dnssec-dsfromkey.html dnssec-keyfromlabel.html \
dnssec-keygen.html dnssec-revoke.html \
dnssec-settime.html dnssec-signzone.html \
- dnssec-verify.html
+ dnssec-verify.html dnssec-importkey.html
MANOBJS = ${MANPAGES} ${HTMLPAGES}
diff --git a/bin/dnssec/dnssec-dsfromkey.8 b/bin/dnssec/dnssec-dsfromkey.8
index 89d4228e0214..1c7e867eae7b 100644
--- a/bin/dnssec/dnssec-dsfromkey.8
+++ b/bin/dnssec/dnssec-dsfromkey.8
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2008-2012 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2008-2012, 2014 Internet Systems Consortium, Inc. ("ISC")
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
.\" purpose with or without fee is hereby granted, provided that the above
@@ -19,11 +19,11 @@
.\" Title: dnssec\-dsfromkey
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: August 26, 2009
+.\" Date: May 17, 2012
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "DNSSEC\-DSFROMKEY" "8" "August 26, 2009" "BIND9" "BIND9"
+.TH "DNSSEC\-DSFROMKEY" "8" "May 17, 2012" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -35,6 +35,8 @@ dnssec\-dsfromkey \- DNSSEC DS RR generation tool
\fBdnssec\-dsfromkey\fR [\fB\-v\ \fR\fB\fIlevel\fR\fR] [\fB\-1\fR] [\fB\-2\fR] [\fB\-a\ \fR\fB\fIalg\fR\fR] [\fB\-l\ \fR\fB\fIdomain\fR\fR] [\fB\-T\ \fR\fB\fITTL\fR\fR] {keyfile}
.HP 17
\fBdnssec\-dsfromkey\fR {\-s} [\fB\-1\fR] [\fB\-2\fR] [\fB\-a\ \fR\fB\fIalg\fR\fR] [\fB\-K\ \fR\fB\fIdirectory\fR\fR] [\fB\-l\ \fR\fB\fIdomain\fR\fR] [\fB\-s\fR] [\fB\-c\ \fR\fB\fIclass\fR\fR] [\fB\-T\ \fR\fB\fITTL\fR\fR] [\fB\-f\ \fR\fB\fIfile\fR\fR] [\fB\-A\fR] [\fB\-v\ \fR\fB\fIlevel\fR\fR] {dnsname}
+.HP 17
+\fBdnssec\-dsfromkey\fR [\fB\-h\fR] [\fB\-V\fR]
.SH "DESCRIPTION"
.PP
\fBdnssec\-dsfromkey\fR
@@ -113,6 +115,16 @@ Specifies the DNS class (default is IN). Useful only in keyset or zone file mode
.RS 4
Sets the debugging level.
.RE
+.PP
+\-h
+.RS 4
+Prints usage information.
+.RE
+.PP
+\-V
+.RS 4
+Prints version information.
+.RE
.SH "EXAMPLE"
.PP
To build the SHA\-256 DS RR from the
@@ -153,5 +165,5 @@ RFC 4509.
.PP
Internet Systems Consortium
.SH "COPYRIGHT"
-Copyright \(co 2008\-2012 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2008\-2012, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
diff --git a/bin/dnssec/dnssec-dsfromkey.c b/bin/dnssec/dnssec-dsfromkey.c
index bfedae830b5c..fca7b17d3cfa 100644
--- a/bin/dnssec/dnssec-dsfromkey.c
+++ b/bin/dnssec/dnssec-dsfromkey.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2008-2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2008-2012, 2014 Internet Systems Consortium, Inc. ("ISC")
*
* Permission to use, copy, modify, and/or distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
@@ -14,8 +14,6 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
-/* $Id: dnssec-dsfromkey.c,v 1.24 2011/10/25 01:54:18 marka Exp $ */
-
/*! \file */
#include <config.h>
@@ -326,6 +324,7 @@ usage(void) {
fprintf(stderr, "Version: %s\n", VERSION);
fprintf(stderr, "Options:\n");
fprintf(stderr, " -v <verbose level>\n");
+ fprintf(stderr, " -V: print version information\n");
fprintf(stderr, " -K <directory>: directory in which to find "
"key file or keyset file\n");
fprintf(stderr, " -a algorithm: digest algorithm "
@@ -375,7 +374,7 @@ main(int argc, char **argv) {
isc_commandline_errprint = ISC_FALSE;
while ((ch = isc_commandline_parse(argc, argv,
- "12Aa:c:d:Ff:K:l:sT:v:h")) != -1) {
+ "12Aa:c:d:Ff:K:l:sT:v:hV")) != -1) {
switch (ch) {
case '1':
dtype = DNS_DSDIGEST_SHA1;
@@ -432,8 +431,13 @@ main(int argc, char **argv) {
program, isc_commandline_option);
/* FALLTHROUGH */
case 'h':
+ /* Does not return. */
usage();
+ case 'V':
+ /* Does not return. */
+ version(program);
+
default:
fprintf(stderr, "%s: unhandled option -%c\n",
program, isc_commandline_option);
diff --git a/bin/dnssec/dnssec-dsfromkey.docbook b/bin/dnssec/dnssec-dsfromkey.docbook
index 77c0994dd3ba..7245a83f4de6 100644
--- a/bin/dnssec/dnssec-dsfromkey.docbook
+++ b/bin/dnssec/dnssec-dsfromkey.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2008-2012 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2008-2012, 2014 Internet Systems Consortium, Inc. ("ISC")
-
- Permission to use, copy, modify, and/or distribute this software for any
- purpose with or without fee is hereby granted, provided that the above
@@ -17,10 +17,9 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: dnssec-dsfromkey.docbook,v 1.17 2011/10/25 01:54:18 marka Exp $ -->
<refentry id="man.dnssec-dsfromkey">
<refentryinfo>
- <date>August 26, 2009</date>
+ <date>May 17, 2012</date>
</refentryinfo>
<refmeta>
@@ -41,6 +40,7 @@
<year>2010</year>
<year>2011</year>
<year>2012</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
</docinfo>
@@ -72,6 +72,11 @@
<arg><option>-v <replaceable class="parameter">level</replaceable></option></arg>
<arg choice="req">dnsname</arg>
</cmdsynopsis>
+ <cmdsynopsis>
+ <command>dnssec-dsfromkey</command>
+ <arg><option>-h</option></arg>
+ <arg><option>-V</option></arg>
+ </cmdsynopsis>
</refsynopsisdiv>
<refsect1>
@@ -210,6 +215,24 @@
</para>
</listitem>
</varlistentry>
+
+ <varlistentry>
+ <term>-h</term>
+ <listitem>
+ <para>
+ Prints usage information.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term>-V</term>
+ <listitem>
+ <para>
+ Prints version information.
+ </para>
+ </listitem>
+ </varlistentry>
</variablelist>
</refsect1>
diff --git a/bin/dnssec/dnssec-dsfromkey.html b/bin/dnssec/dnssec-dsfromkey.html
index 50d4d7802bd4..3f27b49e5bc2 100644
--- a/bin/dnssec/dnssec-dsfromkey.html
+++ b/bin/dnssec/dnssec-dsfromkey.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2008-2012 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2008-2012, 2014 Internet Systems Consortium, Inc. ("ISC")
-
- Permission to use, copy, modify, and/or distribute this software for any
- purpose with or without fee is hereby granted, provided that the above
@@ -30,16 +30,17 @@
<h2>Synopsis</h2>
<div class="cmdsynopsis"><p><code class="command">dnssec-dsfromkey</code> [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-1</code>] [<code class="option">-2</code>] [<code class="option">-a <em class="replaceable"><code>alg</code></em></code>] [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-T <em class="replaceable"><code>TTL</code></em></code>] {keyfile}</p></div>
<div class="cmdsynopsis"><p><code class="command">dnssec-dsfromkey</code> {-s} [<code class="option">-1</code>] [<code class="option">-2</code>] [<code class="option">-a <em class="replaceable"><code>alg</code></em></code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-s</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-T <em class="replaceable"><code>TTL</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-A</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] {dnsname}</p></div>
+<div class="cmdsynopsis"><p><code class="command">dnssec-dsfromkey</code> [<code class="option">-h</code>] [<code class="option">-V</code>]</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543489"></a><h2>DESCRIPTION</h2>
+<a name="id2543514"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">dnssec-dsfromkey</strong></span>
outputs the Delegation Signer (DS) resource record (RR), as defined in
RFC 3658 and RFC 4509, for the given key(s).
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543500"></a><h2>OPTIONS</h2>
+<a name="id2543526"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-1</span></dt>
<dd><p>
@@ -113,10 +114,18 @@
<dd><p>
Sets the debugging level.
</p></dd>
+<dt><span class="term">-h</span></dt>
+<dd><p>
+ Prints usage information.
+ </p></dd>
+<dt><span class="term">-V</span></dt>
+<dd><p>
+ Prints version information.
+ </p></dd>
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543726"></a><h2>EXAMPLE</h2>
+<a name="id2543780"></a><h2>EXAMPLE</h2>
<p>
To build the SHA-256 DS RR from the
<strong class="userinput"><code>Kexample.com.+003+26160</code></strong>
@@ -131,7 +140,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543756"></a><h2>FILES</h2>
+<a name="id2543810"></a><h2>FILES</h2>
<p>
The keyfile can be designed by the key identification
<code class="filename">Knnnn.+aaa+iiiii</code> or the full file name
@@ -145,13 +154,13 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543792"></a><h2>CAVEAT</h2>
+<a name="id2543845"></a><h2>CAVEAT</h2>
<p>
A keyfile error can give a "file not found" even if the file exists.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543801"></a><h2>SEE ALSO</h2>
+<a name="id2543854"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
<em class="citetitle">BIND 9 Administrator Reference Manual</em>,
@@ -161,7 +170,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543841"></a><h2>AUTHOR</h2>
+<a name="id2543894"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
diff --git a/bin/dnssec/dnssec-importkey.8 b/bin/dnssec/dnssec-importkey.8
index a7b31261070d..225077da0878 100644
--- a/bin/dnssec/dnssec-importkey.8
+++ b/bin/dnssec/dnssec-importkey.8
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2013 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
.\" purpose with or without fee is hereby granted, provided that the above
@@ -16,97 +16,105 @@
.\"
.hy 0
.ad l
-'\" t
-.\" Title: dnssec-importkey
-.\" Author: [see the "AUTHOR" section]
-.\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/>
-.\" Date: August 30, 2013
+.\" Title: dnssec\-importkey
+.\" Author:
+.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
+.\" Date: February 07, 2014
.\" Manual: BIND9
.\" Source: BIND9
-.\" Language: English
.\"
-.TH "DNSSEC\-IMPORTKEY" "8" "August 30, 2013" "BIND9" "BIND9"
-.\" -----------------------------------------------------------------
-.\" * Define some portability stuff
-.\" -----------------------------------------------------------------
-.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-.\" http://bugs.debian.org/507673
-.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html
-.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.\" -----------------------------------------------------------------
-.\" * set default formatting
-.\" -----------------------------------------------------------------
+.TH "DNSSEC\-IMPORTKEY" "8" "February 07, 2014" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
.ad l
-.\" -----------------------------------------------------------------
-.\" * MAIN CONTENT STARTS HERE *
-.\" -----------------------------------------------------------------
.SH "NAME"
-dnssec-importkey \- Import DNSKEY records from external systems so they can be managed\&.
+dnssec\-importkey \- Import DNSKEY records from external systems so they can be managed.
.SH "SYNOPSIS"
.HP 17
-\fBdnssec\-importkey\fR [\fB\-f\ \fR\fB\fIfilename\fR\fR] [\fB\-K\ \fR\fB\fIdirectory\fR\fR] [\fB\-P\ \fR\fB\fIdate/offset\fR\fR] [\fB\-D\ \fR\fB\fIdate/offset\fR\fR] [\fB\-h\fR] [\fB\-v\ \fR\fB\fIlevel\fR\fR] [\fBkeyname\fR]
+\fBdnssec\-importkey\fR [\fB\-K\ \fR\fB\fIdirectory\fR\fR] [\fB\-L\ \fR\fB\fIttl\fR\fR] [\fB\-P\ \fR\fB\fIdate/offset\fR\fR] [\fB\-D\ \fR\fB\fIdate/offset\fR\fR] [\fB\-h\fR] [\fB\-v\ \fR\fB\fIlevel\fR\fR] [\fB\-V\fR] {\fBkeyfile\fR}
+.HP 17
+\fBdnssec\-importkey\fR {\fB\-f\ \fR\fB\fIfilename\fR\fR} [\fB\-K\ \fR\fB\fIdirectory\fR\fR] [\fB\-L\ \fR\fB\fIttl\fR\fR] [\fB\-P\ \fR\fB\fIdate/offset\fR\fR] [\fB\-D\ \fR\fB\fIdate/offset\fR\fR] [\fB\-h\fR] [\fB\-v\ \fR\fB\fIlevel\fR\fR] [\fB\-V\fR] [\fBdnsname\fR]
.SH "DESCRIPTION"
.PP
\fBdnssec\-importkey\fR
-read a DNSKEY record and generated a \&.key/\&.private key pair\&. Publication (\fB\-P\fR) and deletions (\fB\-D\fR) times can be set for the key\&.
+reads a public DNSKEY record and generates a pair of .key/.private files. The DNSKEY record may be read from an existing .key file, in which case a corresponding .private file will be generated, or it may be read from any other file or from the standard input, in which case both .key and .private files will be generated.
+.PP
+The newly\-created .private file does
+\fInot\fR
+contain private key data, and cannot be used for signing. However, having a .private file makes it possible to set publication (\fB\-P\fR) and deletion (\fB\-D\fR) times for the key, which means the public key can be added to and removed from the DNSKEY RRset on schedule even if the true private key is stored offline.
.SH "OPTIONS"
.PP
\-f \fIfilename\fR
.RS 4
-Filename to read the key from\&.
+Zone file mode: instead of a public keyfile name, the argument is the DNS domain name of a zone master file, which can be read from
+\fBfile\fR. If the domain name is the same as
+\fBfile\fR, then it may be omitted.
+.sp
+If
+\fBfile\fR
+is set to
+"\-", then the zone data is read from the standard input.
.RE
.PP
\-K \fIdirectory\fR
.RS 4
-Sets the directory in which the key files are to reside\&.
+Sets the directory in which the key files are to reside.
.RE
.PP
\-L \fIttl\fR
.RS 4
-Sets the default TTL to use for this key when it is converted into a DNSKEY RR\&. If the key is imported into a zone, this is the TTL that will be used for it, unless there was already a DNSKEY RRset in place, in which case the existing TTL would take precedence\&. importkey the default TTL to
+Sets the default TTL to use for this key when it is converted into a DNSKEY RR. If the key is imported into a zone, this is the TTL that will be used for it, unless there was already a DNSKEY RRset in place, in which case the existing TTL would take precedence. Setting the default TTL to
0
or
none
-removes it\&.
+removes it.
.RE
.PP
\-h
.RS 4
-Emit usage message and exit\&.
+Emit usage message and exit.
.RE
.PP
\-v \fIlevel\fR
.RS 4
-Sets the debugging level\&.
+Sets the debugging level.
+.RE
+.PP
+\-V
+.RS 4
+Prints version information.
.RE
.SH "TIMING OPTIONS"
.PP
-Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS\&. If the argument begins with a \*(Aq+\*(Aq or \*(Aq\-\*(Aq, it is interpreted as an offset from the present time\&. For convenience, if such an offset is followed by one of the suffixes \*(Aqy\*(Aq, \*(Aqmo\*(Aq, \*(Aqw\*(Aq, \*(Aqd\*(Aq, \*(Aqh\*(Aq, or \*(Aqmi\*(Aq, then the offset is computed in years (defined as 365 24\-hour days, ignoring leap years), months (defined as 30 24\-hour days), weeks, days, hours, or minutes, respectively\&. Without a suffix, the offset is computed in seconds\&. To unset a date, use \*(Aqnone\*(Aq\&.
+Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS. If the argument begins with a '+' or '\-', it is interpreted as an offset from the present time. For convenience, if such an offset is followed by one of the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi', then the offset is computed in years (defined as 365 24\-hour days, ignoring leap years), months (defined as 30 24\-hour days), weeks, days, hours, or minutes, respectively. Without a suffix, the offset is computed in seconds. To explicitly prevent a date from being set, use 'none' or 'never'.
.PP
\-P \fIdate/offset\fR
.RS 4
-Sets the date on which a key is to be published to the zone\&. After that date, the key will be included in the zone but will not be used to sign it\&.
+Sets the date on which a key is to be published to the zone. After that date, the key will be included in the zone but will not be used to sign it.
.RE
.PP
\-D \fIdate/offset\fR
.RS 4
-Sets the date on which the key is to be deleted\&. After that date, the key will no longer be included in the zone\&. (It may remain in the key repository, however\&.)
+Sets the date on which the key is to be deleted. After that date, the key will no longer be included in the zone. (It may remain in the key repository, however.)
.RE
+.SH "FILES"
+.PP
+A keyfile can be designed by the key identification
+\fIKnnnn.+aaa+iiiii\fR
+or the full file name
+\fIKnnnn.+aaa+iiiii.key\fR
+as generated by
+dnssec\-keygen(8).
.SH "SEE ALSO"
.PP
-\fBdnssec-keygen\fR(8),
-\fBdnssec-signzone\fR(8),
+\fBdnssec\-keygen\fR(8),
+\fBdnssec\-signzone\fR(8),
BIND 9 Administrator Reference Manual,
-RFC 5011\&.
+RFC 5011.
.SH "AUTHOR"
.PP
Internet Systems Consortium
.SH "COPYRIGHT"
-.br
-Copyright \(co 2013 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
diff --git a/bin/dnssec/dnssec-importkey.c b/bin/dnssec/dnssec-importkey.c
index 67502a6939d5..f07f02ecf5b7 100644
--- a/bin/dnssec/dnssec-importkey.c
+++ b/bin/dnssec/dnssec-importkey.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
*
* Permission to use, copy, modify, and/or distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
@@ -269,6 +269,7 @@ usage(void) {
"the key files\n");
fprintf(stderr, " -L ttl: set default key TTL\n");
fprintf(stderr, " -v <verbose level>\n");
+ fprintf(stderr, " -V: print version information\n");
fprintf(stderr, " -h: print usage and exit\n");
fprintf(stderr, "Timing options:\n");
fprintf(stderr, " -P date/[+-]offset/none: set/unset key "
@@ -306,15 +307,15 @@ main(int argc, char **argv) {
isc_commandline_errprint = ISC_FALSE;
-#define CMDLINE_FLAGS "D:f:hK:L:P:v:"
+#define CMDLINE_FLAGS "D:f:hK:L:P:v:V"
while ((ch = isc_commandline_parse(argc, argv, CMDLINE_FLAGS)) != -1) {
switch (ch) {
case 'D':
if (setdel)
fatal("-D specified more than once");
- setdel = ISC_TRUE;
- del = strtotime(isc_commandline_argument, now, now);
+ del = strtotime(isc_commandline_argument,
+ now, now, &setdel);
break;
case 'K':
dir = isc_commandline_argument;
@@ -322,17 +323,15 @@ main(int argc, char **argv) {
fatal("directory must be non-empty string");
break;
case 'L':
- if (strcmp(isc_commandline_argument, "none") == 0)
- ttl = 0;
- else
- ttl = strtottl(isc_commandline_argument);
+ ttl = strtottl(isc_commandline_argument);
setttl = ISC_TRUE;
break;
case 'P':
if (setpub)
fatal("-P specified more than once");
- setpub = ISC_TRUE;
- pub = strtotime(isc_commandline_argument, now, now);
+
+ pub = strtotime(isc_commandline_argument,
+ now, now, &setpub);
break;
case 'f':
filename = isc_commandline_argument;
@@ -348,8 +347,13 @@ main(int argc, char **argv) {
program, isc_commandline_option);
/* FALLTHROUGH */
case 'h':
+ /* Does not return. */
usage();
+ case 'V':
+ /* Does not return. */
+ version(program);
+
default:
fprintf(stderr, "%s: unhandled option -%c\n",
program, isc_commandline_option);
diff --git a/bin/dnssec/dnssec-importkey.docbook b/bin/dnssec/dnssec-importkey.docbook
index f9b322c884be..5893abd270a3 100644
--- a/bin/dnssec/dnssec-importkey.docbook
+++ b/bin/dnssec/dnssec-importkey.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
-
- Permission to use, copy, modify, and/or distribute this software for any
- purpose with or without fee is hereby granted, provided that the above
@@ -17,10 +17,9 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: dnssec-importkey.docbook,v 1.15 2011/11/03 20:21:37 each Exp $ -->
<refentry id="man.dnssec-importkey">
<refentryinfo>
- <date>August 30, 2013</date>
+ <date>February 07, 2014</date>
</refentryinfo>
<refmeta>
@@ -37,6 +36,7 @@
<docinfo>
<copyright>
<year>2013</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
</docinfo>
@@ -50,6 +50,7 @@
<arg><option>-D <replaceable class="parameter">date/offset</replaceable></option></arg>
<arg><option>-h</option></arg>
<arg><option>-v <replaceable class="parameter">level</replaceable></option></arg>
+ <arg><option>-V</option></arg>
<arg choice="req"><option>keyfile</option></arg>
</cmdsynopsis>
<cmdsynopsis>
@@ -61,6 +62,7 @@
<arg><option>-D <replaceable class="parameter">date/offset</replaceable></option></arg>
<arg><option>-h</option></arg>
<arg><option>-v <replaceable class="parameter">level</replaceable></option></arg>
+ <arg><option>-V</option></arg>
<arg><option>dnsname</option></arg>
</cmdsynopsis>
</refsynopsisdiv>
@@ -76,7 +78,7 @@
files will be generated.
</para>
<para>
- The newly-created .private file does <emphasis>not</command>
+ The newly-created .private file does <emphasis>not</emphasis>
contain private key data, and cannot be used for signing.
However, having a .private file makes it possible to set
publication (<option>-P</option>) and deletion
@@ -147,6 +149,15 @@
</listitem>
</varlistentry>
+ <varlistentry>
+ <term>-V</term>
+ <listitem>
+ <para>
+ Prints version information.
+ </para>
+ </listitem>
+ </varlistentry>
+
</variablelist>
</refsect1>
@@ -160,7 +171,8 @@
then the offset is computed in years (defined as 365 24-hour days,
ignoring leap years), months (defined as 30 24-hour days), weeks,
days, hours, or minutes, respectively. Without a suffix, the offset
- is computed in seconds. To unset a date, use 'none'.
+ is computed in seconds. To explicitly prevent a date from being
+ set, use 'none' or 'never'.
</para>
<variablelist>
diff --git a/bin/dnssec/dnssec-importkey.html b/bin/dnssec/dnssec-importkey.html
index 55729ba56b05..90f13f295b65 100644
--- a/bin/dnssec/dnssec-importkey.html
+++ b/bin/dnssec/dnssec-importkey.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
-
- Permission to use, copy, modify, and/or distribute this software for any
- purpose with or without fee is hereby granted, provided that the above
@@ -19,9 +19,9 @@
<head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
<title>dnssec-importkey</title>
-<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
+<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
</head>
-<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry">
+<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
<a name="man.dnssec-importkey"></a><div class="titlepage"></div>
<div class="refnamediv">
<h2>Name</h2>
@@ -29,23 +29,45 @@
</div>
<div class="refsynopsisdiv">
<h2>Synopsis</h2>
-<div class="cmdsynopsis"><p><code class="command">dnssec-importkey</code> [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-h</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">keyname</code>]</p></div>
+<div class="cmdsynopsis"><p><code class="command">dnssec-importkey</code> [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-L <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-h</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-V</code>] {<code class="option">keyfile</code>}</p></div>
+<div class="cmdsynopsis"><p><code class="command">dnssec-importkey</code> {<code class="option">-f <em class="replaceable"><code>filename</code></em></code>} [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-L <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-h</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-V</code>] [<code class="option">dnsname</code>]</p></div>
</div>
-<div class="refsect1">
-<a name="idp5321760"></a><h2>DESCRIPTION</h2>
-<p><span class="command"><strong>dnssec-importkey</strong></span>
- read a DNSKEY record and generated a .key/.private key pair.
- Publication (<code class="option">-P</code>) and deletions (<code class="option">-D</code>)
- times can be set for the key.
+<div class="refsect1" lang="en">
+<a name="id2543475"></a><h2>DESCRIPTION</h2>
+<p><span><strong class="command">dnssec-importkey</strong></span>
+ reads a public DNSKEY record and generates a pair of
+ .key/.private files. The DNSKEY record may be read from an
+ existing .key file, in which case a corresponding .private file
+ will be generated, or it may be read from any other file or
+ from the standard input, in which case both .key and .private
+ files will be generated.
+ </p>
+<p>
+ The newly-created .private file does <span class="emphasis"><em>not</em></span>
+ contain private key data, and cannot be used for signing.
+ However, having a .private file makes it possible to set
+ publication (<code class="option">-P</code>) and deletion
+ (<code class="option">-D</code>) times for the key, which means the
+ public key can be added to and removed from the DNSKEY RRset
+ on schedule even if the true private key is stored offline.
</p>
</div>
-<div class="refsect1">
-<a name="idp5324080"></a><h2>OPTIONS</h2>
-<div class="variablelist"><dl class="variablelist">
+<div class="refsect1" lang="en">
+<a name="id2543500"></a><h2>OPTIONS</h2>
+<div class="variablelist"><dl>
<dt><span class="term">-f <em class="replaceable"><code>filename</code></em></span></dt>
-<dd><p>
- Filename to read the key from.
- </p></dd>
+<dd>
+<p>
+ Zone file mode: instead of a public keyfile name, the argument
+ is the DNS domain name of a zone master file, which can be read
+ from <code class="option">file</code>. If the domain name is the same as
+ <code class="option">file</code>, then it may be omitted.
+ </p>
+<p>
+ If <code class="option">file</code> is set to <code class="literal">"-"</code>, then
+ the zone data is read from the standard input.
+ </p>
+</dd>
<dt><span class="term">-K <em class="replaceable"><code>directory</code></em></span></dt>
<dd><p>
Sets the directory in which the key files are to reside.
@@ -56,7 +78,7 @@
into a DNSKEY RR. If the key is imported into a zone,
this is the TTL that will be used for it, unless there was
already a DNSKEY RRset in place, in which case the existing TTL
- would take precedence. importkey the default TTL to
+ would take precedence. Setting the default TTL to
<code class="literal">0</code> or <code class="literal">none</code> removes it.
</p></dd>
<dt><span class="term">-h</span></dt>
@@ -67,10 +89,14 @@
<dd><p>
Sets the debugging level.
</p></dd>
+<dt><span class="term">-V</span></dt>
+<dd><p>
+ Prints version information.
+ </p></dd>
</dl></div>
</div>
-<div class="refsect1">
-<a name="idp5336224"></a><h2>TIMING OPTIONS</h2>
+<div class="refsect1" lang="en">
+<a name="id2543632"></a><h2>TIMING OPTIONS</h2>
<p>
Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS.
If the argument begins with a '+' or '-', it is interpreted as
@@ -79,9 +105,10 @@
then the offset is computed in years (defined as 365 24-hour days,
ignoring leap years), months (defined as 30 24-hour days), weeks,
days, hours, or minutes, respectively. Without a suffix, the offset
- is computed in seconds. To unset a date, use 'none'.
+ is computed in seconds. To explicitly prevent a date from being
+ set, use 'none' or 'never'.
</p>
-<div class="variablelist"><dl class="variablelist">
+<div class="variablelist"><dl>
<dt><span class="term">-P <em class="replaceable"><code>date/offset</code></em></span></dt>
<dd><p>
Sets the date on which a key is to be published to the zone.
@@ -96,16 +123,25 @@
</p></dd>
</dl></div>
</div>
-<div class="refsect1">
-<a name="idp5342816"></a><h2>SEE ALSO</h2>
+<div class="refsect1" lang="en">
+<a name="id2543678"></a><h2>FILES</h2>
+<p>
+ A keyfile can be designed by the key identification
+ <code class="filename">Knnnn.+aaa+iiiii</code> or the full file name
+ <code class="filename">Knnnn.+aaa+iiiii.key</code> as generated by
+ <span class="refentrytitle">dnssec-keygen</span>(8).
+ </p>
+</div>
+<div class="refsect1" lang="en">
+<a name="id2543700"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
<em class="citetitle">BIND 9 Administrator Reference Manual</em>,
<em class="citetitle">RFC 5011</em>.
</p>
</div>
-<div class="refsect1">
-<a name="idp5346704"></a><h2>AUTHOR</h2>
+<div class="refsect1" lang="en">
+<a name="id2543733"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
diff --git a/bin/dnssec/dnssec-keyfromlabel.8 b/bin/dnssec/dnssec-keyfromlabel.8
index 0e1ea1624881..24da7c4d9df7 100644
--- a/bin/dnssec/dnssec-keyfromlabel.8
+++ b/bin/dnssec/dnssec-keyfromlabel.8
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2008-2012 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2008-2012, 2014 Internet Systems Consortium, Inc. ("ISC")
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
.\" purpose with or without fee is hereby granted, provided that the above
@@ -19,11 +19,11 @@
.\" Title: dnssec\-keyfromlabel
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: February 8, 2008
+.\" Date: February 27, 2014
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "DNSSEC\-KEYFROMLABEL" "8" "February 8, 2008" "BIND9" "BIND9"
+.TH "DNSSEC\-KEYFROMLABEL" "8" "February 27, 2014" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -32,11 +32,12 @@
dnssec\-keyfromlabel \- DNSSEC key generation tool
.SH "SYNOPSIS"
.HP 20
-\fBdnssec\-keyfromlabel\fR {\-l\ \fIlabel\fR} [\fB\-3\fR] [\fB\-a\ \fR\fB\fIalgorithm\fR\fR] [\fB\-A\ \fR\fB\fIdate/offset\fR\fR] [\fB\-c\ \fR\fB\fIclass\fR\fR] [\fB\-D\ \fR\fB\fIdate/offset\fR\fR] [\fB\-E\ \fR\fB\fIengine\fR\fR] [\fB\-f\ \fR\fB\fIflag\fR\fR] [\fB\-G\fR] [\fB\-I\ \fR\fB\fIdate/offset\fR\fR] [\fB\-k\fR] [\fB\-K\ \fR\fB\fIdirectory\fR\fR] [\fB\-L\ \fR\fB\fIttl\fR\fR] [\fB\-n\ \fR\fB\fInametype\fR\fR] [\fB\-P\ \fR\fB\fIdate/offset\fR\fR] [\fB\-p\ \fR\fB\fIprotocol\fR\fR] [\fB\-R\ \fR\fB\fIdate/offset\fR\fR] [\fB\-t\ \fR\fB\fItype\fR\fR] [\fB\-v\ \fR\fB\fIlevel\fR\fR] [\fB\-y\fR] {name}
+\fBdnssec\-keyfromlabel\fR {\-l\ \fIlabel\fR} [\fB\-3\fR] [\fB\-a\ \fR\fB\fIalgorithm\fR\fR] [\fB\-A\ \fR\fB\fIdate/offset\fR\fR] [\fB\-c\ \fR\fB\fIclass\fR\fR] [\fB\-D\ \fR\fB\fIdate/offset\fR\fR] [\fB\-E\ \fR\fB\fIengine\fR\fR] [\fB\-f\ \fR\fB\fIflag\fR\fR] [\fB\-G\fR] [\fB\-I\ \fR\fB\fIdate/offset\fR\fR] [\fB\-i\ \fR\fB\fIinterval\fR\fR] [\fB\-k\fR] [\fB\-K\ \fR\fB\fIdirectory\fR\fR] [\fB\-L\ \fR\fB\fIttl\fR\fR] [\fB\-n\ \fR\fB\fInametype\fR\fR] [\fB\-P\ \fR\fB\fIdate/offset\fR\fR] [\fB\-p\ \fR\fB\fIprotocol\fR\fR] [\fB\-R\ \fR\fB\fIdate/offset\fR\fR] [\fB\-S\ \fR\fB\fIkey\fR\fR] [\fB\-t\ \fR\fB\fItype\fR\fR] [\fB\-v\ \fR\fB\fIlevel\fR\fR] [\fB\-V\fR] [\fB\-y\fR] {name}
.SH "DESCRIPTION"
.PP
\fBdnssec\-keyfromlabel\fR
-gets keys with the given label from a crypto hardware and builds key files for DNSSEC (Secure DNS), as defined in RFC 2535 and RFC 4034.
+generates a key pair of files that referencing a key object stored in a cryptographic hardware service module (HSM). The private key file can be used for DNSSEC signing of zone data as if it were a conventional signing key created by
+\fBdnssec\-keygen\fR, but the key material is stored within the HSM, and the actual signing takes place there.
.PP
The
\fBname\fR
@@ -136,6 +137,11 @@ removes it.
Sets the protocol value for the key. The protocol is a number between 0 and 255. The default is 3 (DNSSEC). Other possible values for this argument are listed in RFC 2535 and its successors.
.RE
.PP
+\-S \fIkey\fR
+.RS 4
+Generate a key as an explicit successor to an existing key. The name, algorithm, size, and type of the key will be set to match the predecessor. The activation date of the new key will be set to the inactivation date of the existing one. The publication date will be set to the activation date minus the prepublication interval, which defaults to 30 days.
+.RE
+.PP
\-t \fItype\fR
.RS 4
Indicates the use of the key.
@@ -148,13 +154,18 @@ must be one of AUTHCONF, NOAUTHCONF, NOAUTH, or NOCONF. The default is AUTHCONF.
Sets the debugging level.
.RE
.PP
+\-V
+.RS 4
+Prints version information.
+.RE
+.PP
\-y
.RS 4
Allows DNSSEC key files to be generated even if the key ID would collide with that of an existing key, in the event of either key being revoked. (This is only safe to use if you are sure you won't be using RFC 5011 trust anchor maintenance with either of the keys involved.)
.RE
.SH "TIMING OPTIONS"
.PP
-Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS. If the argument begins with a '+' or '\-', it is interpreted as an offset from the present time. For convenience, if such an offset is followed by one of the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi', then the offset is computed in years (defined as 365 24\-hour days, ignoring leap years), months (defined as 30 24\-hour days), weeks, days, hours, or minutes, respectively. Without a suffix, the offset is computed in seconds.
+Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS. If the argument begins with a '+' or '\-', it is interpreted as an offset from the present time. For convenience, if such an offset is followed by one of the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi', then the offset is computed in years (defined as 365 24\-hour days, ignoring leap years), months (defined as 30 24\-hour days), weeks, days, hours, or minutes, respectively. Without a suffix, the offset is computed in seconds. To explicitly prevent a date from being set, use 'none' or 'never'.
.PP
\-P \fIdate/offset\fR
.RS 4
@@ -180,6 +191,15 @@ Sets the date on which the key is to be retired. After that date, the key will s
.RS 4
Sets the date on which the key is to be deleted. After that date, the key will no longer be included in the zone. (It may remain in the key repository, however.)
.RE
+.PP
+\-i \fIinterval\fR
+.RS 4
+Sets the prepublication interval for a key. If set, then the publication and activation dates must be separated by at least this much time. If the activation date is specified but the publication date isn't, then the publication date will default to this much time before the activation date; conversely, if the publication date is specified but activation date isn't, then activation will be set to this much time after publication.
+.sp
+If the key is being created as an explicit successor to another key, then the default prepublication interval is 30 days; otherwise it is zero.
+.sp
+As with date offsets, if the argument is followed by one of the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi', then the interval is measured in years, months, weeks, days, hours, or minutes, respectively. Without a suffix, the interval is measured in seconds.
+.RE
.SH "GENERATED KEY FILES"
.PP
When
@@ -224,5 +244,5 @@ RFC 4034.
.PP
Internet Systems Consortium
.SH "COPYRIGHT"
-Copyright \(co 2008\-2012 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2008\-2012, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
diff --git a/bin/dnssec/dnssec-keyfromlabel.c b/bin/dnssec/dnssec-keyfromlabel.c
index 3ad00d7a04f3..9dc9df75194d 100644
--- a/bin/dnssec/dnssec-keyfromlabel.c
+++ b/bin/dnssec/dnssec-keyfromlabel.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2007-2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2007-2012, 2014 Internet Systems Consortium, Inc. ("ISC")
*
* Permission to use, copy, modify, and/or distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
@@ -14,8 +14,6 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
-/* $Id: dnssec-keyfromlabel.c,v 1.38 2011/11/30 00:48:51 marka Exp $ */
-
/*! \file */
#include <config.h>
@@ -94,6 +92,7 @@ usage(void) {
"(default: AUTHCONF)\n");
fprintf(stderr, " -y: permit keys that might collide\n");
fprintf(stderr, " -v verbose level\n");
+ fprintf(stderr, " -V: print version information\n");
fprintf(stderr, "Date options:\n");
fprintf(stderr, " -P date/[+-]offset: set key publication date\n");
fprintf(stderr, " -A date/[+-]offset: set key activation date\n");
@@ -103,6 +102,11 @@ usage(void) {
fprintf(stderr, " -G: generate key only; do not set -P or -A\n");
fprintf(stderr, " -C: generate a backward-compatible key, omitting"
" all dates\n");
+ fprintf(stderr, " -S <key>: generate a successor to an existing "
+ "key\n");
+ fprintf(stderr, " -i <interval>: prepublication interval for "
+ "successor key "
+ "(default: 30 days)\n");
fprintf(stderr, "Output:\n");
fprintf(stderr, " K<name>+<alg>+<id>.key, "
"K<name>+<alg>+<id>.private\n");
@@ -115,6 +119,8 @@ main(int argc, char **argv) {
char *algname = NULL, *freeit = NULL;
char *nametype = NULL, *type = NULL;
const char *directory = NULL;
+ const char *predecessor = NULL;
+ dst_key_t *prevkey = NULL;
#ifdef USE_PKCS11
const char *engine = "pkcs11";
#else
@@ -144,6 +150,7 @@ main(int argc, char **argv) {
isc_stdtime_t publish = 0, activate = 0, revoke = 0;
isc_stdtime_t inactive = 0, delete = 0;
isc_stdtime_t now;
+ int prepub = -1;
isc_boolean_t setpub = ISC_FALSE, setact = ISC_FALSE;
isc_boolean_t setrev = ISC_FALSE, setinact = ISC_FALSE;
isc_boolean_t setdel = ISC_FALSE, setttl = ISC_FALSE;
@@ -167,9 +174,8 @@ main(int argc, char **argv) {
isc_stdtime_get(&now);
- while ((ch = isc_commandline_parse(argc, argv,
- "3a:Cc:E:f:K:kl:L:n:p:t:v:yFhGP:A:R:I:D:")) != -1)
- {
+#define CMDLINE_FLAGS "3A:a:Cc:D:E:Ff:GhI:i:kK:L:l:n:P:p:R:S:t:v:Vy"
+ while ((ch = isc_commandline_parse(argc, argv, CMDLINE_FLAGS)) != -1) {
switch (ch) {
case '3':
use_nsec3 = ISC_TRUE;
@@ -207,10 +213,7 @@ main(int argc, char **argv) {
options |= DST_TYPE_KEY;
break;
case 'L':
- if (strcmp(isc_commandline_argument, "none") == 0)
- ttl = 0;
- else
- ttl = strtottl(isc_commandline_argument);
+ ttl = strtottl(isc_commandline_argument);
setttl = ISC_TRUE;
break;
case 'l':
@@ -243,61 +246,47 @@ main(int argc, char **argv) {
if (setpub || unsetpub)
fatal("-P specified more than once");
- if (strcasecmp(isc_commandline_argument, "none")) {
- setpub = ISC_TRUE;
- publish = strtotime(isc_commandline_argument,
- now, now);
- } else {
- unsetpub = ISC_TRUE;
- }
+ publish = strtotime(isc_commandline_argument,
+ now, now, &setpub);
+ unsetpub = !setpub;
break;
case 'A':
if (setact || unsetact)
fatal("-A specified more than once");
- if (strcasecmp(isc_commandline_argument, "none")) {
- setact = ISC_TRUE;
- activate = strtotime(isc_commandline_argument,
- now, now);
- } else {
- unsetact = ISC_TRUE;
- }
+ activate = strtotime(isc_commandline_argument,
+ now, now, &setact);
+ unsetact = !setact;
break;
case 'R':
if (setrev || unsetrev)
fatal("-R specified more than once");
- if (strcasecmp(isc_commandline_argument, "none")) {
- setrev = ISC_TRUE;
- revoke = strtotime(isc_commandline_argument,
- now, now);
- } else {
- unsetrev = ISC_TRUE;
- }
+ revoke = strtotime(isc_commandline_argument,
+ now, now, &setrev);
+ unsetrev = !setrev;
break;
case 'I':
if (setinact || unsetinact)
fatal("-I specified more than once");
- if (strcasecmp(isc_commandline_argument, "none")) {
- setinact = ISC_TRUE;
- inactive = strtotime(isc_commandline_argument,
- now, now);
- } else {
- unsetinact = ISC_TRUE;
- }
+ inactive = strtotime(isc_commandline_argument,
+ now, now, &setinact);
+ unsetinact = !setinact;
break;
case 'D':
if (setdel || unsetdel)
fatal("-D specified more than once");
- if (strcasecmp(isc_commandline_argument, "none")) {
- setdel = ISC_TRUE;
- delete = strtotime(isc_commandline_argument,
- now, now);
- } else {
- unsetdel = ISC_TRUE;
- }
+ delete = strtotime(isc_commandline_argument,
+ now, now, &setdel);
+ unsetdel = !setdel;
+ break;
+ case 'S':
+ predecessor = isc_commandline_argument;
+ break;
+ case 'i':
+ prepub = strtottl(isc_commandline_argument);
break;
case 'F':
/* Reserved for FIPS mode */
@@ -308,8 +297,13 @@ main(int argc, char **argv) {
program, isc_commandline_option);
/* FALLTHROUGH */
case 'h':
+ /* Does not return. */
usage();
+ case 'V':
+ /* Does not return. */
+ version(program);
+
default:
fprintf(stderr, "%s: unhandled option -%c\n",
program, isc_commandline_option);
@@ -327,78 +321,190 @@ main(int argc, char **argv) {
setup_logging(verbose, mctx, &log);
- if (label == NULL)
- fatal("the key label was not specified");
- if (argc < isc_commandline_index + 1)
- fatal("the key name was not specified");
- if (argc > isc_commandline_index + 1)
- fatal("extraneous arguments");
-
- if (strchr(label, ':') == NULL &&
- engine != NULL && strlen(engine) != 0U) {
- char *l;
- int len;
-
- len = strlen(label) + strlen(engine) + 2;
- l = isc_mem_allocate(mctx, len);
- if (l == NULL)
- fatal("cannot allocate memory");
- snprintf(l, len, "%s:%s", engine, label);
- isc_mem_free(mctx, label);
- label = l;
- }
+ if (predecessor == NULL) {
+ if (label == NULL)
+ fatal("the key label was not specified");
+ if (argc < isc_commandline_index + 1)
+ fatal("the key name was not specified");
+ if (argc > isc_commandline_index + 1)
+ fatal("extraneous arguments");
+
+ dns_fixedname_init(&fname);
+ name = dns_fixedname_name(&fname);
+ isc_buffer_init(&buf, argv[isc_commandline_index],
+ strlen(argv[isc_commandline_index]));
+ isc_buffer_add(&buf, strlen(argv[isc_commandline_index]));
+ ret = dns_name_fromtext(name, &buf, dns_rootname, 0, NULL);
+ if (ret != ISC_R_SUCCESS)
+ fatal("invalid key name %s: %s",
+ argv[isc_commandline_index],
+ isc_result_totext(ret));
- if (algname == NULL) {
- if (use_nsec3)
- algname = strdup(DEFAULT_NSEC3_ALGORITHM);
- else
- algname = strdup(DEFAULT_ALGORITHM);
- if (algname == NULL)
- fatal("strdup failed");
- freeit = algname;
- if (verbose > 0)
- fprintf(stderr, "no algorithm specified; "
- "defaulting to %s\n", algname);
- }
+ if (strchr(label, ':') == NULL) {
+ char *l;
+ int len;
+
+ len = strlen(label) + 8;
+ l = isc_mem_allocate(mctx, len);
+ if (l == NULL)
+ fatal("cannot allocate memory");
+ snprintf(l, len, "pkcs11:%s", label);
+ isc_mem_free(mctx, label);
+ label = l;
+ }
+
+ if (algname == NULL) {
+ if (use_nsec3)
+ algname = strdup(DEFAULT_NSEC3_ALGORITHM);
+ else
+ algname = strdup(DEFAULT_ALGORITHM);
+ if (algname == NULL)
+ fatal("strdup failed");
+ freeit = algname;
+ if (verbose > 0)
+ fprintf(stderr, "no algorithm specified; "
+ "defaulting to %s\n", algname);
+ }
+
+ if (strcasecmp(algname, "RSA") == 0) {
+ fprintf(stderr, "The use of RSA (RSAMD5) is not "
+ "recommended.\nIf you still wish to "
+ "use RSA (RSAMD5) please specify "
+ "\"-a RSAMD5\"\n");
+ if (freeit != NULL)
+ free(freeit);
+ return (1);
+ } else {
+ r.base = algname;
+ r.length = strlen(algname);
+ ret = dns_secalg_fromtext(&alg, &r);
+ if (ret != ISC_R_SUCCESS)
+ fatal("unknown algorithm %s", algname);
+ if (alg == DST_ALG_DH)
+ options |= DST_TYPE_KEY;
+ }
+
+ if (use_nsec3 &&
+ alg != DST_ALG_NSEC3DSA && alg != DST_ALG_NSEC3RSASHA1 &&
+ alg != DST_ALG_RSASHA256 && alg != DST_ALG_RSASHA512 &&
+ alg != DST_ALG_ECCGOST &&
+ alg != DST_ALG_ECDSA256 && alg != DST_ALG_ECDSA384) {
+ fatal("%s is incompatible with NSEC3; "
+ "do not use the -3 option", algname);
+ }
+
+ if (type != NULL && (options & DST_TYPE_KEY) != 0) {
+ if (strcasecmp(type, "NOAUTH") == 0)
+ flags |= DNS_KEYTYPE_NOAUTH;
+ else if (strcasecmp(type, "NOCONF") == 0)
+ flags |= DNS_KEYTYPE_NOCONF;
+ else if (strcasecmp(type, "NOAUTHCONF") == 0)
+ flags |= (DNS_KEYTYPE_NOAUTH |
+ DNS_KEYTYPE_NOCONF);
+ else if (strcasecmp(type, "AUTHCONF") == 0)
+ /* nothing */;
+ else
+ fatal("invalid type %s", type);
+ }
- if (strcasecmp(algname, "RSA") == 0) {
- fprintf(stderr, "The use of RSA (RSAMD5) is not recommended.\n"
- "If you still wish to use RSA (RSAMD5) please "
- "specify \"-a RSAMD5\"\n");
- if (freeit != NULL)
- free(freeit);
- return (1);
+ if (!oldstyle && prepub > 0) {
+ if (setpub && setact && (activate - prepub) < publish)
+ fatal("Activation and publication dates "
+ "are closer together than the\n\t"
+ "prepublication interval.");
+
+ if (!setpub && !setact) {
+ setpub = setact = ISC_TRUE;
+ publish = now;
+ activate = now + prepub;
+ } else if (setpub && !setact) {
+ setact = ISC_TRUE;
+ activate = publish + prepub;
+ } else if (setact && !setpub) {
+ setpub = ISC_TRUE;
+ publish = activate - prepub;
+ }
+
+ if ((activate - prepub) < now)
+ fatal("Time until activation is shorter "
+ "than the\n\tprepublication interval.");
+ }
} else {
- r.base = algname;
- r.length = strlen(algname);
- ret = dns_secalg_fromtext(&alg, &r);
+ char keystr[DST_KEY_FORMATSIZE];
+ isc_stdtime_t when;
+ int major, minor;
+
+ if (prepub == -1)
+ prepub = (30 * 86400);
+
+ if (algname != NULL)
+ fatal("-S and -a cannot be used together");
+ if (nametype != NULL)
+ fatal("-S and -n cannot be used together");
+ if (type != NULL)
+ fatal("-S and -t cannot be used together");
+ if (setpub || unsetpub)
+ fatal("-S and -P cannot be used together");
+ if (setact || unsetact)
+ fatal("-S and -A cannot be used together");
+ if (use_nsec3)
+ fatal("-S and -3 cannot be used together");
+ if (oldstyle)
+ fatal("-S and -C cannot be used together");
+ if (genonly)
+ fatal("-S and -G cannot be used together");
+
+ ret = dst_key_fromnamedfile(predecessor, directory,
+ DST_TYPE_PUBLIC | DST_TYPE_PRIVATE,
+ mctx, &prevkey);
if (ret != ISC_R_SUCCESS)
- fatal("unknown algorithm %s", algname);
- if (alg == DST_ALG_DH)
- options |= DST_TYPE_KEY;
- }
+ fatal("Invalid keyfile %s: %s",
+ predecessor, isc_result_totext(ret));
+ if (!dst_key_isprivate(prevkey))
+ fatal("%s is not a private key", predecessor);
+
+ name = dst_key_name(prevkey);
+ alg = dst_key_alg(prevkey);
+ flags = dst_key_flags(prevkey);
+
+ dst_key_format(prevkey, keystr, sizeof(keystr));
+ dst_key_getprivateformat(prevkey, &major, &minor);
+ if (major != DST_MAJOR_VERSION || minor < DST_MINOR_VERSION)
+ fatal("Key %s has incompatible format version %d.%d\n\t"
+ "It is not possible to generate a successor key.",
+ keystr, major, minor);
+
+ ret = dst_key_gettime(prevkey, DST_TIME_ACTIVATE, &when);
+ if (ret != ISC_R_SUCCESS)
+ fatal("Key %s has no activation date.\n\t"
+ "You must use dnssec-settime -A to set one "
+ "before generating a successor.", keystr);
- if (use_nsec3 &&
- alg != DST_ALG_NSEC3DSA && alg != DST_ALG_NSEC3RSASHA1 &&
- alg != DST_ALG_RSASHA256 && alg != DST_ALG_RSASHA512 &&
- alg != DST_ALG_ECCGOST &&
- alg != DST_ALG_ECDSA256 && alg != DST_ALG_ECDSA384) {
- fatal("%s is incompatible with NSEC3; "
- "do not use the -3 option", algname);
- }
+ ret = dst_key_gettime(prevkey, DST_TIME_INACTIVE, &activate);
+ if (ret != ISC_R_SUCCESS)
+ fatal("Key %s has no inactivation date.\n\t"
+ "You must use dnssec-settime -I to set one "
+ "before generating a successor.", keystr);
+
+ publish = activate - prepub;
+ if (publish < now)
+ fatal("Key %s becomes inactive\n\t"
+ "sooner than the prepublication period "
+ "for the new key ends.\n\t"
+ "Either change the inactivation date with "
+ "dnssec-settime -I,\n\t"
+ "or use the -i option to set a shorter "
+ "prepublication interval.", keystr);
+
+ ret = dst_key_gettime(prevkey, DST_TIME_DELETE, &when);
+ if (ret != ISC_R_SUCCESS)
+ fprintf(stderr, "%s: WARNING: Key %s has no removal "
+ "date;\n\t it will remain in the zone "
+ "indefinitely after rollover.\n\t "
+ "You can use dnssec-settime -D to "
+ "change this.\n", program, keystr);
- if (type != NULL && (options & DST_TYPE_KEY) != 0) {
- if (strcasecmp(type, "NOAUTH") == 0)
- flags |= DNS_KEYTYPE_NOAUTH;
- else if (strcasecmp(type, "NOCONF") == 0)
- flags |= DNS_KEYTYPE_NOCONF;
- else if (strcasecmp(type, "NOAUTHCONF") == 0) {
- flags |= (DNS_KEYTYPE_NOAUTH | DNS_KEYTYPE_NOCONF);
- }
- else if (strcasecmp(type, "AUTHCONF") == 0)
- /* nothing */;
- else
- fatal("invalid type %s", type);
+ setpub = setact = ISC_TRUE;
}
if (nametype == NULL) {
@@ -446,16 +552,6 @@ main(int argc, char **argv) {
fatal("a key with algorithm '%s' cannot be a zone key",
algname);
- dns_fixedname_init(&fname);
- name = dns_fixedname_name(&fname);
- isc_buffer_init(&buf, argv[isc_commandline_index],
- strlen(argv[isc_commandline_index]));
- isc_buffer_add(&buf, strlen(argv[isc_commandline_index]));
- ret = dns_name_fromtext(name, &buf, dns_rootname, 0, NULL);
- if (ret != ISC_R_SUCCESS)
- fatal("invalid key name %s: %s", argv[isc_commandline_index],
- isc_result_totext(ret));
-
isc_buffer_init(&buf, filename, sizeof(filename) - 1);
/* associate the key */
@@ -570,6 +666,8 @@ main(int argc, char **argv) {
isc_result_totext(ret));
printf("%s\n", filename);
dst_key_free(&key);
+ if (prevkey != NULL)
+ dst_key_free(&prevkey);
cleanup_logging(&log);
cleanup_entropy(&ectx);
diff --git a/bin/dnssec/dnssec-keyfromlabel.docbook b/bin/dnssec/dnssec-keyfromlabel.docbook
index 0dd3c0ea66b8..a47c95589f64 100644
--- a/bin/dnssec/dnssec-keyfromlabel.docbook
+++ b/bin/dnssec/dnssec-keyfromlabel.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2008-2012 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2008-2012, 2014 Internet Systems Consortium, Inc. ("ISC")
-
- Permission to use, copy, modify, and/or distribute this software for any
- purpose with or without fee is hereby granted, provided that the above
@@ -17,10 +17,9 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: dnssec-keyfromlabel.docbook,v 1.21 2011/03/17 01:40:34 each Exp $ -->
<refentry id="man.dnssec-keyfromlabel">
<refentryinfo>
- <date>February 8, 2008</date>
+ <date>February 27, 2014</date>
</refentryinfo>
<refmeta>
@@ -41,6 +40,7 @@
<year>2010</year>
<year>2011</year>
<year>2012</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
</docinfo>
@@ -58,6 +58,7 @@
<arg><option>-f <replaceable class="parameter">flag</replaceable></option></arg>
<arg><option>-G</option></arg>
<arg><option>-I <replaceable class="parameter">date/offset</replaceable></option></arg>
+ <arg><option>-i <replaceable class="parameter">interval</replaceable></option></arg>
<arg><option>-k</option></arg>
<arg><option>-K <replaceable class="parameter">directory</replaceable></option></arg>
<arg><option>-L <replaceable class="parameter">ttl</replaceable></option></arg>
@@ -65,8 +66,10 @@
<arg><option>-P <replaceable class="parameter">date/offset</replaceable></option></arg>
<arg><option>-p <replaceable class="parameter">protocol</replaceable></option></arg>
<arg><option>-R <replaceable class="parameter">date/offset</replaceable></option></arg>
+ <arg><option>-S <replaceable class="parameter">key</replaceable></option></arg>
<arg><option>-t <replaceable class="parameter">type</replaceable></option></arg>
<arg><option>-v <replaceable class="parameter">level</replaceable></option></arg>
+ <arg><option>-V</option></arg>
<arg><option>-y</option></arg>
<arg choice="req">name</arg>
</cmdsynopsis>
@@ -75,9 +78,12 @@
<refsect1>
<title>DESCRIPTION</title>
<para><command>dnssec-keyfromlabel</command>
- gets keys with the given label from a crypto hardware and builds
- key files for DNSSEC (Secure DNS), as defined in RFC 2535
- and RFC 4034.
+ generates a key pair of files that referencing a key object stored
+ in a cryptographic hardware service module (HSM). The private key
+ file can be used for DNSSEC signing of zone data as if it were a
+ conventional signing key created by <command>dnssec-keygen</command>,
+ but the key material is stored within the HSM, and the actual signing
+ takes place there.
</para>
<para>
The <option>name</option> of the key is specified on the command
@@ -264,6 +270,21 @@
</varlistentry>
<varlistentry>
+ <term>-S <replaceable class="parameter">key</replaceable></term>
+ <listitem>
+ <para>
+ Generate a key as an explicit successor to an existing key.
+ The name, algorithm, size, and type of the key will be set
+ to match the predecessor. The activation date of the new
+ key will be set to the inactivation date of the existing
+ one. The publication date will be set to the activation
+ date minus the prepublication interval, which defaults to
+ 30 days.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
<term>-t <replaceable class="parameter">type</replaceable></term>
<listitem>
<para>
@@ -285,6 +306,15 @@
</varlistentry>
<varlistentry>
+ <term>-V</term>
+ <listitem>
+ <para>
+ Prints version information.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
<term>-y</term>
<listitem>
<para>
@@ -311,7 +341,8 @@
then the offset is computed in years (defined as 365 24-hour days,
ignoring leap years), months (defined as 30 24-hour days), weeks,
days, hours, or minutes, respectively. Without a suffix, the offset
- is computed in seconds.
+ is computed in seconds. To explicitly prevent a date from being
+ set, use 'none' or 'never'.
</para>
<variablelist>
@@ -371,6 +402,34 @@
</para>
</listitem>
</varlistentry>
+
+ <varlistentry>
+ <term>-i <replaceable class="parameter">interval</replaceable></term>
+ <listitem>
+ <para>
+ Sets the prepublication interval for a key. If set, then
+ the publication and activation dates must be separated by at least
+ this much time. If the activation date is specified but the
+ publication date isn't, then the publication date will default
+ to this much time before the activation date; conversely, if
+ the publication date is specified but activation date isn't,
+ then activation will be set to this much time after publication.
+ </para>
+ <para>
+ If the key is being created as an explicit successor to another
+ key, then the default prepublication interval is 30 days;
+ otherwise it is zero.
+ </para>
+ <para>
+ As with date offsets, if the argument is followed by one of
+ the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi', then the
+ interval is measured in years, months, weeks, days, hours,
+ or minutes, respectively. Without a suffix, the interval is
+ measured in seconds.
+ </para>
+ </listitem>
+ </varlistentry>
+
</variablelist>
</refsect1>
diff --git a/bin/dnssec/dnssec-keyfromlabel.html b/bin/dnssec/dnssec-keyfromlabel.html
index f0e2c5c3b86e..36971c466adc 100644
--- a/bin/dnssec/dnssec-keyfromlabel.html
+++ b/bin/dnssec/dnssec-keyfromlabel.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2008-2012 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2008-2012, 2014 Internet Systems Consortium, Inc. ("ISC")
-
- Permission to use, copy, modify, and/or distribute this software for any
- purpose with or without fee is hereby granted, provided that the above
@@ -28,14 +28,17 @@
</div>
<div class="refsynopsisdiv">
<h2>Synopsis</h2>
-<div class="cmdsynopsis"><p><code class="command">dnssec-keyfromlabel</code> {-l <em class="replaceable"><code>label</code></em>} [<code class="option">-3</code>] [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>] [<code class="option">-A <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-G</code>] [<code class="option">-I <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-k</code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-L <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-n <em class="replaceable"><code>nametype</code></em></code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-p <em class="replaceable"><code>protocol</code></em></code>] [<code class="option">-R <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-y</code>] {name}</p></div>
+<div class="cmdsynopsis"><p><code class="command">dnssec-keyfromlabel</code> {-l <em class="replaceable"><code>label</code></em>} [<code class="option">-3</code>] [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>] [<code class="option">-A <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-G</code>] [<code class="option">-I <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-i <em class="replaceable"><code>interval</code></em></code>] [<code class="option">-k</code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-L <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-n <em class="replaceable"><code>nametype</code></em></code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-p <em class="replaceable"><code>protocol</code></em></code>] [<code class="option">-R <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-S <em class="replaceable"><code>key</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-V</code>] [<code class="option">-y</code>] {name}</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543507"></a><h2>DESCRIPTION</h2>
+<a name="id2543539"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">dnssec-keyfromlabel</strong></span>
- gets keys with the given label from a crypto hardware and builds
- key files for DNSSEC (Secure DNS), as defined in RFC 2535
- and RFC 4034.
+ generates a key pair of files that referencing a key object stored
+ in a cryptographic hardware service module (HSM). The private key
+ file can be used for DNSSEC signing of zone data as if it were a
+ conventional signing key created by <span><strong class="command">dnssec-keygen</strong></span>,
+ but the key material is stored within the HSM, and the actual signing
+ takes place there.
</p>
<p>
The <code class="option">name</code> of the key is specified on the command
@@ -44,7 +47,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543525"></a><h2>OPTIONS</h2>
+<a name="id2543560"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-a <em class="replaceable"><code>algorithm</code></em></span></dt>
<dd>
@@ -151,6 +154,16 @@
Other possible values for this argument are listed in
RFC 2535 and its successors.
</p></dd>
+<dt><span class="term">-S <em class="replaceable"><code>key</code></em></span></dt>
+<dd><p>
+ Generate a key as an explicit successor to an existing key.
+ The name, algorithm, size, and type of the key will be set
+ to match the predecessor. The activation date of the new
+ key will be set to the inactivation date of the existing
+ one. The publication date will be set to the activation
+ date minus the prepublication interval, which defaults to
+ 30 days.
+ </p></dd>
<dt><span class="term">-t <em class="replaceable"><code>type</code></em></span></dt>
<dd><p>
Indicates the use of the key. <code class="option">type</code> must be
@@ -162,6 +175,10 @@
<dd><p>
Sets the debugging level.
</p></dd>
+<dt><span class="term">-V</span></dt>
+<dd><p>
+ Prints version information.
+ </p></dd>
<dt><span class="term">-y</span></dt>
<dd><p>
Allows DNSSEC key files to be generated even if the key ID
@@ -173,7 +190,7 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543980"></a><h2>TIMING OPTIONS</h2>
+<a name="id2544046"></a><h2>TIMING OPTIONS</h2>
<p>
Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS.
If the argument begins with a '+' or '-', it is interpreted as
@@ -182,7 +199,8 @@
then the offset is computed in years (defined as 365 24-hour days,
ignoring leap years), months (defined as 30 24-hour days), weeks,
days, hours, or minutes, respectively. Without a suffix, the offset
- is computed in seconds.
+ is computed in seconds. To explicitly prevent a date from being
+ set, use 'none' or 'never'.
</p>
<div class="variablelist"><dl>
<dt><span class="term">-P <em class="replaceable"><code>date/offset</code></em></span></dt>
@@ -217,10 +235,34 @@
date, the key will no longer be included in the zone. (It
may remain in the key repository, however.)
</p></dd>
+<dt><span class="term">-i <em class="replaceable"><code>interval</code></em></span></dt>
+<dd>
+<p>
+ Sets the prepublication interval for a key. If set, then
+ the publication and activation dates must be separated by at least
+ this much time. If the activation date is specified but the
+ publication date isn't, then the publication date will default
+ to this much time before the activation date; conversely, if
+ the publication date is specified but activation date isn't,
+ then activation will be set to this much time after publication.
+ </p>
+<p>
+ If the key is being created as an explicit successor to another
+ key, then the default prepublication interval is 30 days;
+ otherwise it is zero.
+ </p>
+<p>
+ As with date offsets, if the argument is followed by one of
+ the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi', then the
+ interval is measured in years, months, weeks, days, hours,
+ or minutes, respectively. Without a suffix, the interval is
+ measured in seconds.
+ </p>
+</dd>
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543054"></a><h2>GENERATED KEY FILES</h2>
+<a name="id2543008"></a><h2>GENERATED KEY FILES</h2>
<p>
When <span><strong class="command">dnssec-keyfromlabel</strong></span> completes
successfully,
@@ -259,7 +301,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543127"></a><h2>SEE ALSO</h2>
+<a name="id2543080"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
<em class="citetitle">BIND 9 Administrator Reference Manual</em>,
@@ -267,7 +309,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543160"></a><h2>AUTHOR</h2>
+<a name="id2543113"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
diff --git a/bin/dnssec/dnssec-keygen.8 b/bin/dnssec/dnssec-keygen.8
index 90daddd15690..11d7e4f01366 100644
--- a/bin/dnssec/dnssec-keygen.8
+++ b/bin/dnssec/dnssec-keygen.8
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2004, 2005, 2007-2012 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004, 2005, 2007-2012, 2014 Internet Systems Consortium, Inc. ("ISC")
.\" Copyright (C) 2000-2003 Internet Software Consortium.
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
@@ -20,11 +20,11 @@
.\" Title: dnssec\-keygen
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: June 30, 2000
+.\" Date: February 07, 2014
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "DNSSEC\-KEYGEN" "8" "June 30, 2000" "BIND9" "BIND9"
+.TH "DNSSEC\-KEYGEN" "8" "February 07, 2014" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -33,7 +33,7 @@
dnssec\-keygen \- DNSSEC key generation tool
.SH "SYNOPSIS"
.HP 14
-\fBdnssec\-keygen\fR [\fB\-a\ \fR\fB\fIalgorithm\fR\fR] [\fB\-b\ \fR\fB\fIkeysize\fR\fR] [\fB\-n\ \fR\fB\fInametype\fR\fR] [\fB\-3\fR] [\fB\-A\ \fR\fB\fIdate/offset\fR\fR] [\fB\-C\fR] [\fB\-c\ \fR\fB\fIclass\fR\fR] [\fB\-D\ \fR\fB\fIdate/offset\fR\fR] [\fB\-E\ \fR\fB\fIengine\fR\fR] [\fB\-f\ \fR\fB\fIflag\fR\fR] [\fB\-G\fR] [\fB\-g\ \fR\fB\fIgenerator\fR\fR] [\fB\-h\fR] [\fB\-I\ \fR\fB\fIdate/offset\fR\fR] [\fB\-i\ \fR\fB\fIinterval\fR\fR] [\fB\-K\ \fR\fB\fIdirectory\fR\fR] [\fB\-L\ \fR\fB\fIttl\fR\fR] [\fB\-k\fR] [\fB\-P\ \fR\fB\fIdate/offset\fR\fR] [\fB\-p\ \fR\fB\fIprotocol\fR\fR] [\fB\-q\fR] [\fB\-R\ \fR\fB\fIdate/offset\fR\fR] [\fB\-r\ \fR\fB\fIrandomdev\fR\fR] [\fB\-S\ \fR\fB\fIkey\fR\fR] [\fB\-s\ \fR\fB\fIstrength\fR\fR] [\fB\-t\ \fR\fB\fItype\fR\fR] [\fB\-v\ \fR\fB\fIlevel\fR\fR] [\fB\-z\fR] {name}
+\fBdnssec\-keygen\fR [\fB\-a\ \fR\fB\fIalgorithm\fR\fR] [\fB\-b\ \fR\fB\fIkeysize\fR\fR] [\fB\-n\ \fR\fB\fInametype\fR\fR] [\fB\-3\fR] [\fB\-A\ \fR\fB\fIdate/offset\fR\fR] [\fB\-C\fR] [\fB\-c\ \fR\fB\fIclass\fR\fR] [\fB\-D\ \fR\fB\fIdate/offset\fR\fR] [\fB\-E\ \fR\fB\fIengine\fR\fR] [\fB\-f\ \fR\fB\fIflag\fR\fR] [\fB\-G\fR] [\fB\-g\ \fR\fB\fIgenerator\fR\fR] [\fB\-h\fR] [\fB\-I\ \fR\fB\fIdate/offset\fR\fR] [\fB\-i\ \fR\fB\fIinterval\fR\fR] [\fB\-K\ \fR\fB\fIdirectory\fR\fR] [\fB\-L\ \fR\fB\fIttl\fR\fR] [\fB\-k\fR] [\fB\-P\ \fR\fB\fIdate/offset\fR\fR] [\fB\-p\ \fR\fB\fIprotocol\fR\fR] [\fB\-q\fR] [\fB\-R\ \fR\fB\fIdate/offset\fR\fR] [\fB\-r\ \fR\fB\fIrandomdev\fR\fR] [\fB\-S\ \fR\fB\fIkey\fR\fR] [\fB\-s\ \fR\fB\fIstrength\fR\fR] [\fB\-t\ \fR\fB\fItype\fR\fR] [\fB\-v\ \fR\fB\fIlevel\fR\fR] [\fB\-V\fR] [\fB\-z\fR] {name}
.SH "DESCRIPTION"
.PP
\fBdnssec\-keygen\fR
@@ -197,9 +197,14 @@ must be one of AUTHCONF, NOAUTHCONF, NOAUTH, or NOCONF. The default is AUTHCONF.
.RS 4
Sets the debugging level.
.RE
+.PP
+\-V
+.RS 4
+Prints version information.
+.RE
.SH "TIMING OPTIONS"
.PP
-Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS. If the argument begins with a '+' or '\-', it is interpreted as an offset from the present time. For convenience, if such an offset is followed by one of the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi', then the offset is computed in years (defined as 365 24\-hour days, ignoring leap years), months (defined as 30 24\-hour days), weeks, days, hours, or minutes, respectively. Without a suffix, the offset is computed in seconds.
+Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS. If the argument begins with a '+' or '\-', it is interpreted as an offset from the present time. For convenience, if such an offset is followed by one of the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi', then the offset is computed in years (defined as 365 24\-hour days, ignoring leap years), months (defined as 30 24\-hour days), weeks, days, hours, or minutes, respectively. Without a suffix, the offset is computed in seconds. To explicitly prevent a date from being set, use 'none' or 'never'.
.PP
\-P \fIdate/offset\fR
.RS 4
@@ -208,7 +213,7 @@ Sets the date on which a key is to be published to the zone. After that date, th
.PP
\-A \fIdate/offset\fR
.RS 4
-Sets the date on which the key is to be activated. After that date, the key will be included in the zone and used to sign it. If not set, and if the \-G option has not been used, the default is "now".
+Sets the date on which the key is to be activated. After that date, the key will be included in the zone and used to sign it. If not set, and if the \-G option has not been used, the default is "now". If set, if and \-P is not set, then the publication date will be set to the activation date minus the prepublication interval.
.RE
.PP
\-R \fIdate/offset\fR
@@ -302,7 +307,7 @@ RFC 4034.
.PP
Internet Systems Consortium
.SH "COPYRIGHT"
-Copyright \(co 2004, 2005, 2007\-2012 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2004, 2005, 2007\-2012, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
Copyright \(co 2000\-2003 Internet Software Consortium.
.br
diff --git a/bin/dnssec/dnssec-keygen.c b/bin/dnssec/dnssec-keygen.c
index 706182977e28..26504410db2e 100644
--- a/bin/dnssec/dnssec-keygen.c
+++ b/bin/dnssec/dnssec-keygen.c
@@ -1,5 +1,5 @@
/*
- * Portions Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ * Portions Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
* Portions Copyright (C) 1999-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -29,8 +29,6 @@
* IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
*/
-/* $Id: dnssec-keygen.c,v 1.120 2011/11/30 00:48:51 marka Exp $ */
-
/*! \file */
#include <config.h>
@@ -142,6 +140,7 @@ usage(void) {
fprintf(stderr, " -m <memory debugging mode>:\n");
fprintf(stderr, " usage | trace | record | size | mctx\n");
fprintf(stderr, " -v <level>: set verbosity level (0 - 10)\n");
+ fprintf(stderr, " -V: print version information\n");
fprintf(stderr, "Timing options:\n");
fprintf(stderr, " -P date/[+-]offset/none: set key publication date "
"(default: now)\n");
@@ -257,7 +256,8 @@ main(int argc, char **argv) {
/*
* Process memory debugging argument first.
*/
-#define CMDLINE_FLAGS "3A:a:b:Cc:D:d:E:eFf:Gg:hI:i:K:kL:m:n:P:p:qR:r:S:s:T:t:v:"
+#define CMDLINE_FLAGS "3A:a:b:Cc:D:d:E:eFf:Gg:hI:i:K:kL:m:n:P:p:qR:r:S:s:T:t:" \
+ "v:V"
while ((ch = isc_commandline_parse(argc, argv, CMDLINE_FLAGS)) != -1) {
switch (ch) {
case 'm':
@@ -343,10 +343,7 @@ main(int argc, char **argv) {
"To generate a key with TYPE=KEY, use -T KEY.\n");
break;
case 'L':
- if (strcmp(isc_commandline_argument, "none") == 0)
- ttl = 0;
- else
- ttl = strtottl(isc_commandline_argument);
+ ttl = strtottl(isc_commandline_argument);
setttl = ISC_TRUE;
break;
case 'n':
@@ -403,61 +400,41 @@ main(int argc, char **argv) {
if (setpub || unsetpub)
fatal("-P specified more than once");
- if (strcasecmp(isc_commandline_argument, "none")) {
- setpub = ISC_TRUE;
- publish = strtotime(isc_commandline_argument,
- now, now);
- } else {
- unsetpub = ISC_TRUE;
- }
+ publish = strtotime(isc_commandline_argument,
+ now, now, &setpub);
+ unsetpub = !setpub;
break;
case 'A':
if (setact || unsetact)
fatal("-A specified more than once");
- if (strcasecmp(isc_commandline_argument, "none")) {
- setact = ISC_TRUE;
- activate = strtotime(isc_commandline_argument,
- now, now);
- } else {
- unsetact = ISC_TRUE;
- }
+ activate = strtotime(isc_commandline_argument,
+ now, now, &setact);
+ unsetact = !setact;
break;
case 'R':
if (setrev || unsetrev)
fatal("-R specified more than once");
- if (strcasecmp(isc_commandline_argument, "none")) {
- setrev = ISC_TRUE;
- revoke = strtotime(isc_commandline_argument,
- now, now);
- } else {
- unsetrev = ISC_TRUE;
- }
+ revoke = strtotime(isc_commandline_argument,
+ now, now, &setrev);
+ unsetrev = !setrev;
break;
case 'I':
if (setinact || unsetinact)
fatal("-I specified more than once");
- if (strcasecmp(isc_commandline_argument, "none")) {
- setinact = ISC_TRUE;
- inactive = strtotime(isc_commandline_argument,
- now, now);
- } else {
- unsetinact = ISC_TRUE;
- }
+ inactive = strtotime(isc_commandline_argument,
+ now, now, &setinact);
+ unsetinact = !setinact;
break;
case 'D':
if (setdel || unsetdel)
fatal("-D specified more than once");
- if (strcasecmp(isc_commandline_argument, "none")) {
- setdel = ISC_TRUE;
- delete = strtotime(isc_commandline_argument,
- now, now);
- } else {
- unsetdel = ISC_TRUE;
- }
+ delete = strtotime(isc_commandline_argument,
+ now, now, &setdel);
+ unsetdel = !setdel;
break;
case 'S':
predecessor = isc_commandline_argument;
@@ -474,8 +451,13 @@ main(int argc, char **argv) {
program, isc_commandline_option);
/* FALLTHROUGH */
case 'h':
+ /* Does not return. */
usage();
+ case 'V':
+ /* Does not return. */
+ version(program);
+
default:
fprintf(stderr, "%s: unhandled option -%c\n",
program, isc_commandline_option);
@@ -936,9 +918,9 @@ main(int argc, char **argv) {
if (setpub)
dst_key_settime(key, DST_TIME_PUBLISH, publish);
- else if (setact)
+ else if (setact && !unsetpub)
dst_key_settime(key, DST_TIME_PUBLISH,
- activate);
+ activate - prepub);
else if (!genonly && !unsetpub)
dst_key_settime(key, DST_TIME_PUBLISH, now);
diff --git a/bin/dnssec/dnssec-keygen.docbook b/bin/dnssec/dnssec-keygen.docbook
index bc50c0226da2..725c4e1cbb2f 100644
--- a/bin/dnssec/dnssec-keygen.docbook
+++ b/bin/dnssec/dnssec-keygen.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2004, 2005, 2007-2012 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007-2012, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -18,10 +18,9 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: dnssec-keygen.docbook,v 1.38 2011/03/17 23:47:29 tbox Exp $ -->
<refentry id="man.dnssec-keygen">
<refentryinfo>
- <date>June 30, 2000</date>
+ <date>February 07, 2014</date>
</refentryinfo>
<refmeta>
@@ -45,6 +44,7 @@
<year>2010</year>
<year>2011</year>
<year>2012</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
@@ -86,6 +86,7 @@
<arg><option>-s <replaceable class="parameter">strength</replaceable></option></arg>
<arg><option>-t <replaceable class="parameter">type</replaceable></option></arg>
<arg><option>-v <replaceable class="parameter">level</replaceable></option></arg>
+ <arg><option>-V</option></arg>
<arg><option>-z</option></arg>
<arg choice="req">name</arg>
</cmdsynopsis>
@@ -417,6 +418,15 @@
</listitem>
</varlistentry>
+ <varlistentry>
+ <term>-V</term>
+ <listitem>
+ <para>
+ Prints version information.
+ </para>
+ </listitem>
+ </varlistentry>
+
</variablelist>
</refsect1>
@@ -431,7 +441,8 @@
then the offset is computed in years (defined as 365 24-hour days,
ignoring leap years), months (defined as 30 24-hour days), weeks,
days, hours, or minutes, respectively. Without a suffix, the offset
- is computed in seconds.
+ is computed in seconds. To explicitly prevent a date from being
+ set, use 'none' or 'never'.
</para>
<variablelist>
@@ -454,7 +465,9 @@
Sets the date on which the key is to be activated. After that
date, the key will be included in the zone and used to sign
it. If not set, and if the -G option has not been used, the
- default is "now".
+ default is "now". If set, if and -P is not set, then
+ the publication date will be set to the activation date
+ minus the prepublication interval.
</para>
</listitem>
</varlistentry>
diff --git a/bin/dnssec/dnssec-keygen.html b/bin/dnssec/dnssec-keygen.html
index ecf512b165f8..43837abecb11 100644
--- a/bin/dnssec/dnssec-keygen.html
+++ b/bin/dnssec/dnssec-keygen.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004, 2005, 2007-2012 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007-2012, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -29,10 +29,10 @@
</div>
<div class="refsynopsisdiv">
<h2>Synopsis</h2>
-<div class="cmdsynopsis"><p><code class="command">dnssec-keygen</code> [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>] [<code class="option">-b <em class="replaceable"><code>keysize</code></em></code>] [<code class="option">-n <em class="replaceable"><code>nametype</code></em></code>] [<code class="option">-3</code>] [<code class="option">-A <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-C</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-G</code>] [<code class="option">-g <em class="replaceable"><code>generator</code></em></code>] [<code class="option">-h</code>] [<code class="option">-I <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-i <em class="replaceable"><code>interval</code></em></code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-L <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-k</code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-p <em class="replaceable"><code>protocol</code></em></code>] [<code class="option">-q</code>] [<code class="option">-R <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-r <em class="replaceable"><code>randomdev</code></em></code>] [<code class="option">-S <em class="replaceable"><code>key</code></em></code>] [<code class="option">-s <em class="replaceable"><code>strength</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-z</code>] {name}</p></div>
+<div class="cmdsynopsis"><p><code class="command">dnssec-keygen</code> [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>] [<code class="option">-b <em class="replaceable"><code>keysize</code></em></code>] [<code class="option">-n <em class="replaceable"><code>nametype</code></em></code>] [<code class="option">-3</code>] [<code class="option">-A <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-C</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-G</code>] [<code class="option">-g <em class="replaceable"><code>generator</code></em></code>] [<code class="option">-h</code>] [<code class="option">-I <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-i <em class="replaceable"><code>interval</code></em></code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-L <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-k</code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-p <em class="replaceable"><code>protocol</code></em></code>] [<code class="option">-q</code>] [<code class="option">-R <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-r <em class="replaceable"><code>randomdev</code></em></code>] [<code class="option">-S <em class="replaceable"><code>key</code></em></code>] [<code class="option">-s <em class="replaceable"><code>strength</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-V</code>] [<code class="option">-z</code>] {name}</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543590"></a><h2>DESCRIPTION</h2>
+<a name="id2543605"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">dnssec-keygen</strong></span>
generates keys for DNSSEC (Secure DNS), as defined in RFC 2535
and RFC 4034. It can also generate keys for use with
@@ -46,7 +46,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543608"></a><h2>OPTIONS</h2>
+<a name="id2543623"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-a <em class="replaceable"><code>algorithm</code></em></span></dt>
<dd>
@@ -253,10 +253,14 @@
<dd><p>
Sets the debugging level.
</p></dd>
+<dt><span class="term">-V</span></dt>
+<dd><p>
+ Prints version information.
+ </p></dd>
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2544187"></a><h2>TIMING OPTIONS</h2>
+<a name="id2544216"></a><h2>TIMING OPTIONS</h2>
<p>
Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS.
If the argument begins with a '+' or '-', it is interpreted as
@@ -265,7 +269,8 @@
then the offset is computed in years (defined as 365 24-hour days,
ignoring leap years), months (defined as 30 24-hour days), weeks,
days, hours, or minutes, respectively. Without a suffix, the offset
- is computed in seconds.
+ is computed in seconds. To explicitly prevent a date from being
+ set, use 'none' or 'never'.
</p>
<div class="variablelist"><dl>
<dt><span class="term">-P <em class="replaceable"><code>date/offset</code></em></span></dt>
@@ -280,7 +285,9 @@
Sets the date on which the key is to be activated. After that
date, the key will be included in the zone and used to sign
it. If not set, and if the -G option has not been used, the
- default is "now".
+ default is "now". If set, if and -P is not set, then
+ the publication date will be set to the activation date
+ minus the prepublication interval.
</p></dd>
<dt><span class="term">-R <em class="replaceable"><code>date/offset</code></em></span></dt>
<dd><p>
@@ -327,7 +334,7 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2544377"></a><h2>GENERATED KEYS</h2>
+<a name="id2544406"></a><h2>GENERATED KEYS</h2>
<p>
When <span><strong class="command">dnssec-keygen</strong></span> completes
successfully,
@@ -373,7 +380,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2544459"></a><h2>EXAMPLE</h2>
+<a name="id2544625"></a><h2>EXAMPLE</h2>
<p>
To generate a 768-bit DSA key for the domain
<strong class="userinput"><code>example.com</code></strong>, the following command would be
@@ -394,7 +401,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2544571"></a><h2>SEE ALSO</h2>
+<a name="id2544668"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
<em class="citetitle">BIND 9 Administrator Reference Manual</em>,
<em class="citetitle">RFC 2539</em>,
@@ -403,7 +410,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2544602"></a><h2>AUTHOR</h2>
+<a name="id2544699"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
diff --git a/bin/dnssec/dnssec-revoke.8 b/bin/dnssec/dnssec-revoke.8
index 2af719e249df..eb8754557556 100644
--- a/bin/dnssec/dnssec-revoke.8
+++ b/bin/dnssec/dnssec-revoke.8
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2009, 2011 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2009, 2011, 2014 Internet Systems Consortium, Inc. ("ISC")
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
.\" purpose with or without fee is hereby granted, provided that the above
@@ -19,11 +19,11 @@
.\" Title: dnssec\-revoke
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: June 1, 2009
+.\" Date: October 20, 2011
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "DNSSEC\-REVOKE" "8" "June 1, 2009" "BIND9" "BIND9"
+.TH "DNSSEC\-REVOKE" "8" "October 20, 2011" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -32,7 +32,7 @@
dnssec\-revoke \- Set the REVOKED bit on a DNSSEC key
.SH "SYNOPSIS"
.HP 14
-\fBdnssec\-revoke\fR [\fB\-hr\fR] [\fB\-v\ \fR\fB\fIlevel\fR\fR] [\fB\-K\ \fR\fB\fIdirectory\fR\fR] [\fB\-E\ \fR\fB\fIengine\fR\fR] [\fB\-f\fR] [\fB\-R\fR] {keyfile}
+\fBdnssec\-revoke\fR [\fB\-hr\fR] [\fB\-v\ \fR\fB\fIlevel\fR\fR] [\fB\-V\fR] [\fB\-K\ \fR\fB\fIdirectory\fR\fR] [\fB\-E\ \fR\fB\fIengine\fR\fR] [\fB\-f\fR] [\fB\-R\fR] {keyfile}
.SH "DESCRIPTION"
.PP
\fBdnssec\-revoke\fR
@@ -59,6 +59,11 @@ After writing the new keyset files remove the original keyset files.
Sets the debugging level.
.RE
.PP
+\-V
+.RS 4
+Prints version information.
+.RE
+.PP
\-E \fIengine\fR
.RS 4
Use the given OpenSSL engine. When compiled with PKCS#11 support it defaults to pkcs11; the empty name resets it to no engine.
@@ -84,5 +89,5 @@ RFC 5011.
.PP
Internet Systems Consortium
.SH "COPYRIGHT"
-Copyright \(co 2009, 2011 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2009, 2011, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
diff --git a/bin/dnssec/dnssec-revoke.c b/bin/dnssec/dnssec-revoke.c
index 7b115810642e..0b9a1f59ea61 100644
--- a/bin/dnssec/dnssec-revoke.c
+++ b/bin/dnssec/dnssec-revoke.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2009-2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2009-2012, 2014 Internet Systems Consortium, Inc. ("ISC")
*
* Permission to use, copy, modify, and/or distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
@@ -14,8 +14,6 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
-/* $Id: dnssec-revoke.c,v 1.24 2011/10/20 23:46:51 tbox Exp $ */
-
/*! \file */
#include <config.h>
@@ -65,6 +63,7 @@ usage(void) {
fprintf(stderr, " -r: remove old keyfiles after "
"creating revoked version\n");
fprintf(stderr, " -v level: set level of verbosity\n");
+ fprintf(stderr, " -V: print version information\n");
fprintf(stderr, "Output:\n");
fprintf(stderr, " K<name>+<alg>+<new id>.key, "
"K<name>+<alg>+<new id>.private\n");
@@ -104,7 +103,7 @@ main(int argc, char **argv) {
isc_commandline_errprint = ISC_FALSE;
- while ((ch = isc_commandline_parse(argc, argv, "E:fK:rRhv:")) != -1) {
+ while ((ch = isc_commandline_parse(argc, argv, "E:fK:rRhv:V")) != -1) {
switch (ch) {
case 'E':
engine = isc_commandline_argument;
@@ -140,8 +139,13 @@ main(int argc, char **argv) {
program, isc_commandline_option);
/* Falls into */
case 'h':
+ /* Does not return. */
usage();
+ case 'V':
+ /* Does not return. */
+ version(program);
+
default:
fprintf(stderr, "%s: unhandled option -%c\n",
program, isc_commandline_option);
@@ -249,12 +253,10 @@ main(int argc, char **argv) {
dst_key_buildfilename(key, DST_TYPE_PRIVATE, dir, &buf);
if (strcmp(oldname, newname) == 0)
goto cleanup;
- if (access(oldname, F_OK) == 0)
- unlink(oldname);
+ (void)unlink(oldname);
isc_buffer_clear(&buf);
dst_key_buildfilename(key, DST_TYPE_PUBLIC, dir, &buf);
- if (access(oldname, F_OK) == 0)
- unlink(oldname);
+ (void)unlink(oldname);
}
} else {
dst_key_format(key, keystr, sizeof(keystr));
diff --git a/bin/dnssec/dnssec-revoke.docbook b/bin/dnssec/dnssec-revoke.docbook
index 4062f5e0407d..85463d682cda 100644
--- a/bin/dnssec/dnssec-revoke.docbook
+++ b/bin/dnssec/dnssec-revoke.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2009, 2011 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2009, 2011, 2014 Internet Systems Consortium, Inc. ("ISC")
-
- Permission to use, copy, modify, and/or distribute this software for any
- purpose with or without fee is hereby granted, provided that the above
@@ -17,10 +17,9 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: dnssec-revoke.docbook,v 1.9 2011/10/20 23:46:51 tbox Exp $ -->
<refentry id="man.dnssec-revoke">
<refentryinfo>
- <date>June 1, 2009</date>
+ <date>October 20, 2011</date>
</refentryinfo>
<refmeta>
@@ -38,6 +37,7 @@
<copyright>
<year>2009</year>
<year>2011</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
</docinfo>
@@ -47,6 +47,7 @@
<command>dnssec-revoke</command>
<arg><option>-hr</option></arg>
<arg><option>-v <replaceable class="parameter">level</replaceable></option></arg>
+ <arg><option>-V</option></arg>
<arg><option>-K <replaceable class="parameter">directory</replaceable></option></arg>
<arg><option>-E <replaceable class="parameter">engine</replaceable></option></arg>
<arg><option>-f</option></arg>
@@ -106,6 +107,15 @@
</varlistentry>
<varlistentry>
+ <term>-V</term>
+ <listitem>
+ <para>
+ Prints version information.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
<term>-E <replaceable class="parameter">engine</replaceable></term>
<listitem>
<para>
diff --git a/bin/dnssec/dnssec-revoke.html b/bin/dnssec/dnssec-revoke.html
index b3b71b961cf4..d09b7dcd378a 100644
--- a/bin/dnssec/dnssec-revoke.html
+++ b/bin/dnssec/dnssec-revoke.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2009, 2011 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2009, 2011, 2014 Internet Systems Consortium, Inc. ("ISC")
-
- Permission to use, copy, modify, and/or distribute this software for any
- purpose with or without fee is hereby granted, provided that the above
@@ -28,10 +28,10 @@
</div>
<div class="refsynopsisdiv">
<h2>Synopsis</h2>
-<div class="cmdsynopsis"><p><code class="command">dnssec-revoke</code> [<code class="option">-hr</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f</code>] [<code class="option">-R</code>] {keyfile}</p></div>
+<div class="cmdsynopsis"><p><code class="command">dnssec-revoke</code> [<code class="option">-hr</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-V</code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f</code>] [<code class="option">-R</code>] {keyfile}</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543382"></a><h2>DESCRIPTION</h2>
+<a name="id2543397"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">dnssec-revoke</strong></span>
reads a DNSSEC key file, sets the REVOKED bit on the key as defined
in RFC 5011, and creates a new pair of key files containing the
@@ -39,7 +39,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543394"></a><h2>OPTIONS</h2>
+<a name="id2543409"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-h</span></dt>
<dd><p>
@@ -58,6 +58,10 @@
<dd><p>
Sets the debugging level.
</p></dd>
+<dt><span class="term">-V</span></dt>
+<dd><p>
+ Prints version information.
+ </p></dd>
<dt><span class="term">-E <em class="replaceable"><code>engine</code></em></span></dt>
<dd><p>
Use the given OpenSSL engine. When compiled with PKCS#11 support
@@ -77,14 +81,14 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543512"></a><h2>SEE ALSO</h2>
+<a name="id2543541"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
<em class="citetitle">BIND 9 Administrator Reference Manual</em>,
<em class="citetitle">RFC 5011</em>.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543537"></a><h2>AUTHOR</h2>
+<a name="id2543565"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
diff --git a/bin/dnssec/dnssec-settime.8 b/bin/dnssec/dnssec-settime.8
index 7c0c3b289285..87bc52dc7839 100644
--- a/bin/dnssec/dnssec-settime.8
+++ b/bin/dnssec/dnssec-settime.8
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2009-2011 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2009-2011, 2014 Internet Systems Consortium, Inc. ("ISC")
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
.\" purpose with or without fee is hereby granted, provided that the above
@@ -19,11 +19,11 @@
.\" Title: dnssec\-settime
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: July 15, 2009
+.\" Date: February 07, 2014
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "DNSSEC\-SETTIME" "8" "July 15, 2009" "BIND9" "BIND9"
+.TH "DNSSEC\-SETTIME" "8" "February 07, 2014" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -32,7 +32,7 @@
dnssec\-settime \- Set the key timing metadata for a DNSSEC key
.SH "SYNOPSIS"
.HP 15
-\fBdnssec\-settime\fR [\fB\-f\fR] [\fB\-K\ \fR\fB\fIdirectory\fR\fR] [\fB\-L\ \fR\fB\fIttl\fR\fR] [\fB\-P\ \fR\fB\fIdate/offset\fR\fR] [\fB\-A\ \fR\fB\fIdate/offset\fR\fR] [\fB\-R\ \fR\fB\fIdate/offset\fR\fR] [\fB\-I\ \fR\fB\fIdate/offset\fR\fR] [\fB\-D\ \fR\fB\fIdate/offset\fR\fR] [\fB\-h\fR] [\fB\-v\ \fR\fB\fIlevel\fR\fR] [\fB\-E\ \fR\fB\fIengine\fR\fR] {keyfile}
+\fBdnssec\-settime\fR [\fB\-f\fR] [\fB\-K\ \fR\fB\fIdirectory\fR\fR] [\fB\-L\ \fR\fB\fIttl\fR\fR] [\fB\-P\ \fR\fB\fIdate/offset\fR\fR] [\fB\-A\ \fR\fB\fIdate/offset\fR\fR] [\fB\-R\ \fR\fB\fIdate/offset\fR\fR] [\fB\-I\ \fR\fB\fIdate/offset\fR\fR] [\fB\-D\ \fR\fB\fIdate/offset\fR\fR] [\fB\-h\fR] [\fB\-V\fR] [\fB\-v\ \fR\fB\fIlevel\fR\fR] [\fB\-E\ \fR\fB\fIengine\fR\fR] {keyfile}
.SH "DESCRIPTION"
.PP
\fBdnssec\-settime\fR
@@ -81,6 +81,11 @@ removes it.
Emit usage message and exit.
.RE
.PP
+\-V
+.RS 4
+Prints version information.
+.RE
+.PP
\-v \fIlevel\fR
.RS 4
Sets the debugging level.
@@ -92,7 +97,7 @@ Use the given OpenSSL engine. When compiled with PKCS#11 support it defaults to
.RE
.SH "TIMING OPTIONS"
.PP
-Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS. If the argument begins with a '+' or '\-', it is interpreted as an offset from the present time. For convenience, if such an offset is followed by one of the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi', then the offset is computed in years (defined as 365 24\-hour days, ignoring leap years), months (defined as 30 24\-hour days), weeks, days, hours, or minutes, respectively. Without a suffix, the offset is computed in seconds. To unset a date, use 'none'.
+Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS. If the argument begins with a '+' or '\-', it is interpreted as an offset from the present time. For convenience, if such an offset is followed by one of the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi', then the offset is computed in years (defined as 365 24\-hour days, ignoring leap years), months (defined as 30 24\-hour days), weeks, days, hours, or minutes, respectively. Without a suffix, the offset is computed in seconds. To unset a date, use 'none' or 'never'.
.PP
\-P \fIdate/offset\fR
.RS 4
@@ -171,5 +176,5 @@ RFC 5011.
.PP
Internet Systems Consortium
.SH "COPYRIGHT"
-Copyright \(co 2009\-2011 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2009\-2011, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
diff --git a/bin/dnssec/dnssec-settime.c b/bin/dnssec/dnssec-settime.c
index 108d8033c126..88f8cf168331 100644
--- a/bin/dnssec/dnssec-settime.c
+++ b/bin/dnssec/dnssec-settime.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2009-2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2009-2014 Internet Systems Consortium, Inc. ("ISC")
*
* Permission to use, copy, modify, and/or distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
@@ -14,8 +14,6 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
-/* $Id: dnssec-settime.c,v 1.32 2011/06/02 20:24:45 each Exp $ */
-
/*! \file */
#include <config.h>
@@ -68,6 +66,7 @@ usage(void) {
fprintf(stderr, " -K directory: set key file location\n");
fprintf(stderr, " -L ttl: set default key TTL\n");
fprintf(stderr, " -v level: set level of verbosity\n");
+ fprintf(stderr, " -V: print version information\n");
fprintf(stderr, " -h: help\n");
fprintf(stderr, "Timing options:\n");
fprintf(stderr, " -P date/[+-]offset/none: set/unset key "
@@ -171,7 +170,7 @@ main(int argc, char **argv) {
isc_stdtime_get(&now);
-#define CMDLINE_FLAGS "A:D:E:fhI:i:K:L:P:p:R:S:uv:"
+#define CMDLINE_FLAGS "A:D:E:fhI:i:K:L:P:p:R:S:uv:V"
while ((ch = isc_commandline_parse(argc, argv, CMDLINE_FLAGS)) != -1) {
switch (ch) {
case 'E':
@@ -236,10 +235,7 @@ main(int argc, char **argv) {
}
break;
case 'L':
- if (strcmp(isc_commandline_argument, "none") == 0)
- ttl = 0;
- else
- ttl = strtottl(isc_commandline_argument);
+ ttl = strtottl(isc_commandline_argument);
setttl = ISC_TRUE;
break;
case 'v':
@@ -252,65 +248,45 @@ main(int argc, char **argv) {
fatal("-P specified more than once");
changed = ISC_TRUE;
- if (!strcasecmp(isc_commandline_argument, "none")) {
- unsetpub = ISC_TRUE;
- } else {
- setpub = ISC_TRUE;
- pub = strtotime(isc_commandline_argument,
- now, now);
- }
+ pub = strtotime(isc_commandline_argument,
+ now, now, &setpub);
+ unsetpub = !setpub;
break;
case 'A':
if (setact || unsetact)
fatal("-A specified more than once");
changed = ISC_TRUE;
- if (!strcasecmp(isc_commandline_argument, "none")) {
- unsetact = ISC_TRUE;
- } else {
- setact = ISC_TRUE;
- act = strtotime(isc_commandline_argument,
- now, now);
- }
+ act = strtotime(isc_commandline_argument,
+ now, now, &setact);
+ unsetact = !setact;
break;
case 'R':
if (setrev || unsetrev)
fatal("-R specified more than once");
changed = ISC_TRUE;
- if (!strcasecmp(isc_commandline_argument, "none")) {
- unsetrev = ISC_TRUE;
- } else {
- setrev = ISC_TRUE;
- rev = strtotime(isc_commandline_argument,
- now, now);
- }
+ rev = strtotime(isc_commandline_argument,
+ now, now, &setrev);
+ unsetrev = !setrev;
break;
case 'I':
if (setinact || unsetinact)
fatal("-I specified more than once");
changed = ISC_TRUE;
- if (!strcasecmp(isc_commandline_argument, "none")) {
- unsetinact = ISC_TRUE;
- } else {
- setinact = ISC_TRUE;
- inact = strtotime(isc_commandline_argument,
- now, now);
- }
+ inact = strtotime(isc_commandline_argument,
+ now, now, &setinact);
+ unsetinact = !setinact;
break;
case 'D':
if (setdel || unsetdel)
fatal("-D specified more than once");
changed = ISC_TRUE;
- if (!strcasecmp(isc_commandline_argument, "none")) {
- unsetdel = ISC_TRUE;
- } else {
- setdel = ISC_TRUE;
- del = strtotime(isc_commandline_argument,
- now, now);
- }
+ del = strtotime(isc_commandline_argument,
+ now, now, &setdel);
+ unsetdel = !setdel;
break;
case 'S':
predecessor = isc_commandline_argument;
@@ -324,8 +300,13 @@ main(int argc, char **argv) {
program, isc_commandline_option);
/* Falls into */
case 'h':
+ /* Does not return. */
usage();
+ case 'V':
+ /* Does not return. */
+ version(program);
+
default:
fprintf(stderr, "%s: unhandled option -%c\n",
program, isc_commandline_option);
diff --git a/bin/dnssec/dnssec-settime.docbook b/bin/dnssec/dnssec-settime.docbook
index bc6870b13212..b2c6a2a2398a 100644
--- a/bin/dnssec/dnssec-settime.docbook
+++ b/bin/dnssec/dnssec-settime.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2009-2011 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2009-2011, 2014 Internet Systems Consortium, Inc. ("ISC")
-
- Permission to use, copy, modify, and/or distribute this software for any
- purpose with or without fee is hereby granted, provided that the above
@@ -17,10 +17,9 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: dnssec-settime.docbook,v 1.15 2011/11/03 20:21:37 each Exp $ -->
<refentry id="man.dnssec-settime">
<refentryinfo>
- <date>July 15, 2009</date>
+ <date>February 07, 2014</date>
</refentryinfo>
<refmeta>
@@ -39,6 +38,7 @@
<year>2009</year>
<year>2010</year>
<year>2011</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
</docinfo>
@@ -55,6 +55,7 @@
<arg><option>-I <replaceable class="parameter">date/offset</replaceable></option></arg>
<arg><option>-D <replaceable class="parameter">date/offset</replaceable></option></arg>
<arg><option>-h</option></arg>
+ <arg><option>-V</option></arg>
<arg><option>-v <replaceable class="parameter">level</replaceable></option></arg>
<arg><option>-E <replaceable class="parameter">engine</replaceable></option></arg>
<arg choice="req">keyfile</arg>
@@ -141,6 +142,15 @@
</varlistentry>
<varlistentry>
+ <term>-V</term>
+ <listitem>
+ <para>
+ Prints version information.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
<term>-v <replaceable class="parameter">level</replaceable></term>
<listitem>
<para>
@@ -171,7 +181,7 @@
then the offset is computed in years (defined as 365 24-hour days,
ignoring leap years), months (defined as 30 24-hour days), weeks,
days, hours, or minutes, respectively. Without a suffix, the offset
- is computed in seconds. To unset a date, use 'none'.
+ is computed in seconds. To unset a date, use 'none' or 'never'.
</para>
<variablelist>
diff --git a/bin/dnssec/dnssec-settime.html b/bin/dnssec/dnssec-settime.html
index 7b022658c058..6cf3d2aab10d 100644
--- a/bin/dnssec/dnssec-settime.html
+++ b/bin/dnssec/dnssec-settime.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2009-2011 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2009-2011, 2014 Internet Systems Consortium, Inc. ("ISC")
-
- Permission to use, copy, modify, and/or distribute this software for any
- purpose with or without fee is hereby granted, provided that the above
@@ -28,10 +28,10 @@
</div>
<div class="refsynopsisdiv">
<h2>Synopsis</h2>
-<div class="cmdsynopsis"><p><code class="command">dnssec-settime</code> [<code class="option">-f</code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-L <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-A <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-R <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-I <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-h</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] {keyfile}</p></div>
+<div class="cmdsynopsis"><p><code class="command">dnssec-settime</code> [<code class="option">-f</code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-L <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-A <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-R <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-I <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-h</code>] [<code class="option">-V</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] {keyfile}</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543432"></a><h2>DESCRIPTION</h2>
+<a name="id2543447"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">dnssec-settime</strong></span>
reads a DNSSEC private key file and sets the key timing metadata
as specified by the <code class="option">-P</code>, <code class="option">-A</code>,
@@ -57,7 +57,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543480"></a><h2>OPTIONS</h2>
+<a name="id2543495"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-f</span></dt>
<dd><p>
@@ -87,6 +87,10 @@
<dd><p>
Emit usage message and exit.
</p></dd>
+<dt><span class="term">-V</span></dt>
+<dd><p>
+ Prints version information.
+ </p></dd>
<dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt>
<dd><p>
Sets the debugging level.
@@ -99,7 +103,7 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543664"></a><h2>TIMING OPTIONS</h2>
+<a name="id2543692"></a><h2>TIMING OPTIONS</h2>
<p>
Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS.
If the argument begins with a '+' or '-', it is interpreted as
@@ -108,7 +112,7 @@
then the offset is computed in years (defined as 365 24-hour days,
ignoring leap years), months (defined as 30 24-hour days), weeks,
days, hours, or minutes, respectively. Without a suffix, the offset
- is computed in seconds. To unset a date, use 'none'.
+ is computed in seconds. To unset a date, use 'none' or 'never'.
</p>
<div class="variablelist"><dl>
<dt><span class="term">-P <em class="replaceable"><code>date/offset</code></em></span></dt>
@@ -178,7 +182,7 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543802"></a><h2>PRINTING OPTIONS</h2>
+<a name="id2543831"></a><h2>PRINTING OPTIONS</h2>
<p>
<span><strong class="command">dnssec-settime</strong></span> can also be used to print the
timing metadata associated with a key.
@@ -204,7 +208,7 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543880"></a><h2>SEE ALSO</h2>
+<a name="id2543909"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
<em class="citetitle">BIND 9 Administrator Reference Manual</em>,
@@ -212,7 +216,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2542138"></a><h2>AUTHOR</h2>
+<a name="id2543942"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
diff --git a/bin/dnssec/dnssec-signzone.8 b/bin/dnssec/dnssec-signzone.8
index d35a54b99955..be2f5b34e0ad 100644
--- a/bin/dnssec/dnssec-signzone.8
+++ b/bin/dnssec/dnssec-signzone.8
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2004-2009, 2011, 2013 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004-2009, 2011, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
.\" Copyright (C) 2000-2003 Internet Software Consortium.
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
@@ -20,11 +20,11 @@
.\" Title: dnssec\-signzone
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: June 05, 2009
+.\" Date: December 11, 2013
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "DNSSEC\-SIGNZONE" "8" "June 05, 2009" "BIND9" "BIND9"
+.TH "DNSSEC\-SIGNZONE" "8" "December 11, 2013" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -33,7 +33,7 @@
dnssec\-signzone \- DNSSEC zone signing tool
.SH "SYNOPSIS"
.HP 16
-\fBdnssec\-signzone\fR [\fB\-a\fR] [\fB\-c\ \fR\fB\fIclass\fR\fR] [\fB\-d\ \fR\fB\fIdirectory\fR\fR] [\fB\-D\fR] [\fB\-E\ \fR\fB\fIengine\fR\fR] [\fB\-e\ \fR\fB\fIend\-time\fR\fR] [\fB\-f\ \fR\fB\fIoutput\-file\fR\fR] [\fB\-g\fR] [\fB\-h\fR] [\fB\-K\ \fR\fB\fIdirectory\fR\fR] [\fB\-k\ \fR\fB\fIkey\fR\fR] [\fB\-L\ \fR\fB\fIserial\fR\fR] [\fB\-l\ \fR\fB\fIdomain\fR\fR] [\fB\-i\ \fR\fB\fIinterval\fR\fR] [\fB\-I\ \fR\fB\fIinput\-format\fR\fR] [\fB\-j\ \fR\fB\fIjitter\fR\fR] [\fB\-N\ \fR\fB\fIsoa\-serial\-format\fR\fR] [\fB\-o\ \fR\fB\fIorigin\fR\fR] [\fB\-O\ \fR\fB\fIoutput\-format\fR\fR] [\fB\-P\fR] [\fB\-p\fR] [\fB\-R\fR] [\fB\-r\ \fR\fB\fIrandomdev\fR\fR] [\fB\-S\fR] [\fB\-s\ \fR\fB\fIstart\-time\fR\fR] [\fB\-T\ \fR\fB\fIttl\fR\fR] [\fB\-t\fR] [\fB\-u\fR] [\fB\-v\ \fR\fB\fIlevel\fR\fR] [\fB\-X\ \fR\fB\fIextended\ end\-time\fR\fR] [\fB\-x\fR] [\fB\-z\fR] [\fB\-3\ \fR\fB\fIsalt\fR\fR] [\fB\-H\ \fR\fB\fIiterations\fR\fR] [\fB\-A\fR] {zonefile} [key...]
+\fBdnssec\-signzone\fR [\fB\-a\fR] [\fB\-c\ \fR\fB\fIclass\fR\fR] [\fB\-d\ \fR\fB\fIdirectory\fR\fR] [\fB\-D\fR] [\fB\-E\ \fR\fB\fIengine\fR\fR] [\fB\-e\ \fR\fB\fIend\-time\fR\fR] [\fB\-f\ \fR\fB\fIoutput\-file\fR\fR] [\fB\-g\fR] [\fB\-h\fR] [\fB\-K\ \fR\fB\fIdirectory\fR\fR] [\fB\-k\ \fR\fB\fIkey\fR\fR] [\fB\-L\ \fR\fB\fIserial\fR\fR] [\fB\-l\ \fR\fB\fIdomain\fR\fR] [\fB\-i\ \fR\fB\fIinterval\fR\fR] [\fB\-I\ \fR\fB\fIinput\-format\fR\fR] [\fB\-j\ \fR\fB\fIjitter\fR\fR] [\fB\-N\ \fR\fB\fIsoa\-serial\-format\fR\fR] [\fB\-o\ \fR\fB\fIorigin\fR\fR] [\fB\-O\ \fR\fB\fIoutput\-format\fR\fR] [\fB\-P\fR] [\fB\-p\fR] [\fB\-R\fR] [\fB\-r\ \fR\fB\fIrandomdev\fR\fR] [\fB\-S\fR] [\fB\-s\ \fR\fB\fIstart\-time\fR\fR] [\fB\-T\ \fR\fB\fIttl\fR\fR] [\fB\-t\fR] [\fB\-u\fR] [\fB\-v\ \fR\fB\fIlevel\fR\fR] [\fB\-V\fR] [\fB\-X\ \fR\fB\fIextended\ end\-time\fR\fR] [\fB\-x\fR] [\fB\-z\fR] [\fB\-3\ \fR\fB\fIsalt\fR\fR] [\fB\-H\ \fR\fB\fIiterations\fR\fR] [\fB\-A\fR] {zonefile} [key...]
.SH "DESCRIPTION"
.PP
\fBdnssec\-signzone\fR
@@ -159,6 +159,11 @@ Prints a short summary of the options and arguments to
\fBdnssec\-signzone\fR.
.RE
.PP
+\-V
+.RS 4
+Prints version information.
+.RE
+.PP
\-i \fIinterval\fR
.RS 4
When a previously\-signed zone is passed as input, records may be resigned. The
@@ -439,7 +444,7 @@ RFC 4641.
.PP
Internet Systems Consortium
.SH "COPYRIGHT"
-Copyright \(co 2004\-2009, 2011, 2013 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2004\-2009, 2011, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
Copyright \(co 2000\-2003 Internet Software Consortium.
.br
diff --git a/bin/dnssec/dnssec-signzone.c b/bin/dnssec/dnssec-signzone.c
index 0a13d9fa0a4e..d3250d9c4c99 100644
--- a/bin/dnssec/dnssec-signzone.c
+++ b/bin/dnssec/dnssec-signzone.c
@@ -29,8 +29,6 @@
* IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
*/
-/* $Id: dnssec-signzone.c,v 1.285 2011/12/22 07:32:39 each Exp $ */
-
/*! \file */
#include <config.h>
@@ -500,6 +498,8 @@ signset(dns_diff_t *del, dns_diff_t *add, dns_dbnode_t *node, dns_name_t *name,
result = dns_db_findrdataset(gdb, node, gversion, dns_rdatatype_rrsig,
set->type, 0, &sigset, NULL);
if (result == ISC_R_NOTFOUND) {
+ vbprintf(2, "no existing signatures for %s/%s\n",
+ namestr, typestr);
result = ISC_R_SUCCESS;
nosigs = ISC_TRUE;
}
@@ -1652,10 +1652,14 @@ remove_records(dns_dbnode_t *node, dns_rdatatype_t which,
}
/*
- * Remove signatures covering the given type (0 == all signatures).
+ * Remove signatures covering the given type. If type == 0,
+ * then remove all signatures, unless this is a delegation, in
+ * which case remove all signatures except for DS or nsec_datatype
*/
static void
-remove_sigs(dns_dbnode_t *node, dns_rdatatype_t which) {
+remove_sigs(dns_dbnode_t *node, isc_boolean_t delegation,
+ dns_rdatatype_t which)
+{
isc_result_t result;
dns_rdatatype_t type, covers;
dns_rdatasetiter_t *rdsiter = NULL;
@@ -1672,14 +1676,21 @@ remove_sigs(dns_dbnode_t *node, dns_rdatatype_t which) {
covers = rdataset.covers;
dns_rdataset_disassociate(&rdataset);
- if (type == dns_rdatatype_rrsig &&
- (covers == which || which == 0))
- {
- result = dns_db_deleterdataset(gdb, node, gversion,
- type, covers);
- check_result(result, "dns_db_deleterdataset()");
+ if (type != dns_rdatatype_rrsig)
continue;
- }
+
+ if (which == 0 && delegation &&
+ (dns_rdatatype_atparent(covers) ||
+ (nsec_datatype == dns_rdatatype_nsec &&
+ covers == nsec_datatype)))
+ continue;
+
+ if (which != 0 && covers != which)
+ continue;
+
+ result = dns_db_deleterdataset(gdb, node, gversion,
+ type, covers);
+ check_result(result, "dns_db_deleterdataset()");
}
dns_rdatasetiter_destroy(&rdsiter);
}
@@ -1766,7 +1777,7 @@ nsecify(void) {
if (is_delegation(gdb, gversion, gorigin, name, node, &nsttl)) {
zonecut = dns_fixedname_name(&fzonecut);
dns_name_copy(name, zonecut, NULL);
- remove_sigs(node, 0);
+ remove_sigs(node, ISC_TRUE, 0);
if (generateds)
add_ds(name, node, nsttl);
}
@@ -1788,7 +1799,7 @@ nsecify(void) {
(zonecut != NULL &&
dns_name_issubdomain(nextname, zonecut)))
{
- remove_sigs(nextnode, 0);
+ remove_sigs(nextnode, ISC_FALSE, 0);
remove_records(nextnode, dns_rdatatype_nsec,
ISC_FALSE);
dns_db_detachnode(gdb, &nextnode);
@@ -2199,7 +2210,7 @@ nsec3ify(unsigned int hashalg, dns_iterations_t iterations,
if (!dns_name_issubdomain(nextname, gorigin) ||
(zonecut != NULL &&
dns_name_issubdomain(nextname, zonecut))) {
- remove_sigs(nextnode, 0);
+ remove_sigs(nextnode, ISC_FALSE, 0);
dns_db_detachnode(gdb, &nextnode);
result = dns_dbiterator_next(dbiter);
continue;
@@ -2209,7 +2220,7 @@ nsec3ify(unsigned int hashalg, dns_iterations_t iterations,
{
zonecut = dns_fixedname_name(&fzonecut);
dns_name_copy(nextname, zonecut, NULL);
- remove_sigs(nextnode, 0);
+ remove_sigs(nextnode, ISC_TRUE, 0);
if (generateds)
add_ds(nextname, nextnode, nsttl);
if (OPTOUT(nsec3flags) &&
@@ -2540,7 +2551,7 @@ report(const char *format, ...) {
}
static void
-build_final_keylist() {
+build_final_keylist(void) {
isc_result_t result;
dns_dbversion_t *ver = NULL;
dns_diff_t diff;
@@ -2926,6 +2937,7 @@ usage(void) {
fprintf(stderr, "\t-j jitter:\n");
fprintf(stderr, "\t\trandomize signature end time up to jitter seconds\n");
fprintf(stderr, "\t-v debuglevel (0)\n");
+ fprintf(stderr, "\t-V:\tprint version information\n");
fprintf(stderr, "\t-o origin:\n");
fprintf(stderr, "\t\tzone origin (name of zonefile)\n");
fprintf(stderr, "\t-f outfile:\n");
@@ -2981,6 +2993,7 @@ usage(void) {
fprintf(stderr, "Signing Keys: ");
fprintf(stderr, "(default: all zone keys that have private keys)\n");
fprintf(stderr, "\tkeyfile (Kname+alg+tag)\n");
+
exit(0);
}
@@ -3063,7 +3076,7 @@ main(int argc, char *argv[]) {
/* Unused letters: Bb G J M q Yy (and F is reserved). */
#define CMDLINE_FLAGS \
- "3:AaCc:Dd:E:e:f:FghH:i:I:j:K:k:L:l:m:n:N:o:O:PpQRr:s:ST:tuUv:X:xzZ:"
+ "3:AaCc:Dd:E:e:f:FghH:i:I:j:K:k:L:l:m:n:N:o:O:PpQRr:s:ST:tuUv:VX:xzZ:"
/*
* Process memory debugging argument first.
@@ -3180,10 +3193,6 @@ main(int argc, char *argv[]) {
fatal("iterations too big");
break;
- case 'h':
- usage();
- break;
-
case 'I':
inputformatstr = isc_commandline_argument;
break;
@@ -3330,17 +3339,24 @@ main(int argc, char *argv[]) {
if (isc_commandline_option != '?')
fprintf(stderr, "%s: invalid argument -%c\n",
program, isc_commandline_option);
+ /* FALLTHROUGH */
+ case 'h':
+ /* Does not return. */
usage();
+
+ case 'V':
+ /* Does not return. */
+ version(program);
+
+ case 'Z': /* Undocumented test options */
+ if (!strcmp(isc_commandline_argument, "nonsecify"))
+ nonsecify = ISC_TRUE;
break;
default:
fprintf(stderr, "%s: unhandled option -%c\n",
program, isc_commandline_option);
exit(1);
- case 'Z': /* Undocumented test options */
- if (!strcmp(isc_commandline_argument, "nonsecify"))
- nonsecify = ISC_TRUE;
- break;
}
}
@@ -3361,17 +3377,18 @@ main(int argc, char *argv[]) {
isc_stdtime_get(&now);
if (startstr != NULL) {
- starttime = strtotime(startstr, now, now);
+ starttime = strtotime(startstr, now, now, NULL);
} else
starttime = now - 3600; /* Allow for some clock skew. */
if (endstr != NULL)
- endtime = strtotime(endstr, now, starttime);
+ endtime = strtotime(endstr, now, starttime, NULL);
else
endtime = starttime + (30 * 24 * 60 * 60);
if (dnskey_endstr != NULL) {
- dnskey_endtime = strtotime(dnskey_endstr, now, starttime);
+ dnskey_endtime = strtotime(dnskey_endstr, now, starttime,
+ NULL);
if (endstr != NULL && dnskey_endtime == endtime)
fprintf(stderr, "WARNING: -e and -X were both set, "
"but have identical values.\n");
diff --git a/bin/dnssec/dnssec-signzone.docbook b/bin/dnssec/dnssec-signzone.docbook
index a1adafd04201..4a092112c76f 100644
--- a/bin/dnssec/dnssec-signzone.docbook
+++ b/bin/dnssec/dnssec-signzone.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2004-2009, 2011, 2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2009, 2011, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -18,10 +18,9 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: dnssec-signzone.docbook,v 1.52 2011/12/22 07:32:40 each Exp $ -->
<refentry id="man.dnssec-signzone">
<refentryinfo>
- <date>June 05, 2009</date>
+ <date>December 11, 2013</date>
</refentryinfo>
<refmeta>
@@ -45,6 +44,7 @@
<year>2009</year>
<year>2011</year>
<year>2013</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
@@ -88,6 +88,7 @@
<arg><option>-t</option></arg>
<arg><option>-u</option></arg>
<arg><option>-v <replaceable class="parameter">level</replaceable></option></arg>
+ <arg><option>-V</option></arg>
<arg><option>-X <replaceable class="parameter">extended end-time</replaceable></option></arg>
<arg><option>-x</option></arg>
<arg><option>-z</option></arg>
@@ -309,6 +310,15 @@
</varlistentry>
<varlistentry>
+ <term>-V</term>
+ <listitem>
+ <para>
+ Prints version information.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
<term>-i <replaceable class="parameter">interval</replaceable></term>
<listitem>
<para>
diff --git a/bin/dnssec/dnssec-signzone.html b/bin/dnssec/dnssec-signzone.html
index 65abf80eb53d..3995507201b6 100644
--- a/bin/dnssec/dnssec-signzone.html
+++ b/bin/dnssec/dnssec-signzone.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2009, 2011, 2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2009, 2011, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -29,10 +29,10 @@
</div>
<div class="refsynopsisdiv">
<h2>Synopsis</h2>
-<div class="cmdsynopsis"><p><code class="command">dnssec-signzone</code> [<code class="option">-a</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-d <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-D</code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-e <em class="replaceable"><code>end-time</code></em></code>] [<code class="option">-f <em class="replaceable"><code>output-file</code></em></code>] [<code class="option">-g</code>] [<code class="option">-h</code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-k <em class="replaceable"><code>key</code></em></code>] [<code class="option">-L <em class="replaceable"><code>serial</code></em></code>] [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-i <em class="replaceable"><code>interval</code></em></code>] [<code class="option">-I <em class="replaceable"><code>input-format</code></em></code>] [<code class="option">-j <em class="replaceable"><code>jitter</code></em></code>] [<code class="option">-N <em class="replaceable"><code>soa-serial-format</code></em></code>] [<code class="option">-o <em class="replaceable"><code>origin</code></em></code>] [<code class="option">-O <em class="replaceable"><code>output-format</code></em></code>] [<code class="option">-P</code>] [<code class="option">-p</code>] [<code class="option">-R</code>] [<code class="option">-r <em class="replaceable"><code>randomdev</code></em></code>] [<code class="option">-S</code>] [<code class="option">-s <em class="replaceable"><code>start-time</code></em></code>] [<code class="option">-T <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-t</code>] [<code class="option">-u</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-X <em class="replaceable"><code>extended end-time</code></em></code>] [<code class="option">-x</code>] [<code class="option">-z</code>] [<code class="option">-3 <em class="replaceable"><code>salt</code></em></code>] [<code class="option">-H <em class="replaceable"><code>iterations</code></em></code>] [<code class="option">-A</code>] {zonefile} [key...]</p></div>
+<div class="cmdsynopsis"><p><code class="command">dnssec-signzone</code> [<code class="option">-a</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-d <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-D</code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-e <em class="replaceable"><code>end-time</code></em></code>] [<code class="option">-f <em class="replaceable"><code>output-file</code></em></code>] [<code class="option">-g</code>] [<code class="option">-h</code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-k <em class="replaceable"><code>key</code></em></code>] [<code class="option">-L <em class="replaceable"><code>serial</code></em></code>] [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-i <em class="replaceable"><code>interval</code></em></code>] [<code class="option">-I <em class="replaceable"><code>input-format</code></em></code>] [<code class="option">-j <em class="replaceable"><code>jitter</code></em></code>] [<code class="option">-N <em class="replaceable"><code>soa-serial-format</code></em></code>] [<code class="option">-o <em class="replaceable"><code>origin</code></em></code>] [<code class="option">-O <em class="replaceable"><code>output-format</code></em></code>] [<code class="option">-P</code>] [<code class="option">-p</code>] [<code class="option">-R</code>] [<code class="option">-r <em class="replaceable"><code>randomdev</code></em></code>] [<code class="option">-S</code>] [<code class="option">-s <em class="replaceable"><code>start-time</code></em></code>] [<code class="option">-T <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-t</code>] [<code class="option">-u</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-V</code>] [<code class="option">-X <em class="replaceable"><code>extended end-time</code></em></code>] [<code class="option">-x</code>] [<code class="option">-z</code>] [<code class="option">-3 <em class="replaceable"><code>salt</code></em></code>] [<code class="option">-H <em class="replaceable"><code>iterations</code></em></code>] [<code class="option">-A</code>] {zonefile} [key...]</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543629"></a><h2>DESCRIPTION</h2>
+<a name="id2543644"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">dnssec-signzone</strong></span>
signs a zone. It generates
NSEC and RRSIG records and produces a signed version of the
@@ -43,7 +43,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543644"></a><h2>OPTIONS</h2>
+<a name="id2543659"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-a</span></dt>
<dd><p>
@@ -165,6 +165,10 @@
Prints a short summary of the options and arguments to
<span><strong class="command">dnssec-signzone</strong></span>.
</p></dd>
+<dt><span class="term">-V</span></dt>
+<dd><p>
+ Prints version information.
+ </p></dd>
<dt><span class="term">-i <em class="replaceable"><code>interval</code></em></span></dt>
<dd>
<p>
@@ -461,7 +465,7 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2545153"></a><h2>EXAMPLE</h2>
+<a name="id2545181"></a><h2>EXAMPLE</h2>
<p>
The following command signs the <strong class="userinput"><code>example.com</code></strong>
zone with the DSA key generated by <span><strong class="command">dnssec-keygen</strong></span>
@@ -491,14 +495,14 @@ db.example.com.signed
%</pre>
</div>
<div class="refsect1" lang="en">
-<a name="id2545208"></a><h2>SEE ALSO</h2>
+<a name="id2545237"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
<em class="citetitle">BIND 9 Administrator Reference Manual</em>,
<em class="citetitle">RFC 4033</em>, <em class="citetitle">RFC 4641</em>.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2545236"></a><h2>AUTHOR</h2>
+<a name="id2545265"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
diff --git a/bin/dnssec/dnssec-verify.8 b/bin/dnssec/dnssec-verify.8
index 1de88fa03a2d..df4278333dd7 100644
--- a/bin/dnssec/dnssec-verify.8
+++ b/bin/dnssec/dnssec-verify.8
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2012 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
.\" purpose with or without fee is hereby granted, provided that the above
@@ -19,11 +19,11 @@
.\" Title: dnssec\-verify
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: April 12, 2012
+.\" Date: June 26, 2012
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "DNSSEC\-VERIFY" "8" "April 12, 2012" "BIND9" "BIND9"
+.TH "DNSSEC\-VERIFY" "8" "June 26, 2012" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -32,7 +32,7 @@
dnssec\-verify \- DNSSEC zone verification tool
.SH "SYNOPSIS"
.HP 14
-\fBdnssec\-verify\fR [\fB\-c\ \fR\fB\fIclass\fR\fR] [\fB\-E\ \fR\fB\fIengine\fR\fR] [\fB\-I\ \fR\fB\fIinput\-format\fR\fR] [\fB\-o\ \fR\fB\fIorigin\fR\fR] [\fB\-v\ \fR\fB\fIlevel\fR\fR] [\fB\-x\fR] [\fB\-z\fR] {zonefile}
+\fBdnssec\-verify\fR [\fB\-c\ \fR\fB\fIclass\fR\fR] [\fB\-E\ \fR\fB\fIengine\fR\fR] [\fB\-I\ \fR\fB\fIinput\-format\fR\fR] [\fB\-o\ \fR\fB\fIorigin\fR\fR] [\fB\-v\ \fR\fB\fIlevel\fR\fR] [\fB\-V\fR] [\fB\-x\fR] [\fB\-z\fR] {zonefile}
.SH "DESCRIPTION"
.PP
\fBdnssec\-verify\fR
@@ -62,6 +62,11 @@ The zone origin. If not specified, the name of the zone file is assumed to be th
Sets the debugging level.
.RE
.PP
+\-V
+.RS 4
+Prints version information.
+.RE
+.PP
\-x
.RS 4
Only verify that the DNSKEY RRset is signed with key\-signing keys. Without this flag, it is assumed that the DNSKEY RRset will be signed by all active keys. When this flag is set, it will not be an error if the DNSKEY RRset is not signed by zone\-signing keys. This corresponds to the
@@ -93,5 +98,5 @@ RFC 4033.
.PP
Internet Systems Consortium
.SH "COPYRIGHT"
-Copyright \(co 2012 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
diff --git a/bin/dnssec/dnssec-verify.c b/bin/dnssec/dnssec-verify.c
index 682896cb768c..09e5211d47af 100644
--- a/bin/dnssec/dnssec-verify.c
+++ b/bin/dnssec/dnssec-verify.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
*
* Permission to use, copy, modify, and/or distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
@@ -14,8 +14,6 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
-/* $Id: dnssec-verify.c,v 1.1.2.1 2011/03/16 06:37:51 each Exp $ */
-
/*! \file */
#include <config.h>
@@ -131,6 +129,7 @@ usage(void) {
fprintf(stderr, "Options: (default value in parenthesis) \n");
fprintf(stderr, "\t-v debuglevel (0)\n");
+ fprintf(stderr, "\t-V:\tprint version information\n");
fprintf(stderr, "\t-o origin:\n");
fprintf(stderr, "\t\tzone origin (name of zonefile)\n");
fprintf(stderr, "\t-I format:\n");
@@ -162,10 +161,11 @@ main(int argc, char *argv[]) {
#endif
char *classname = NULL;
dns_rdataclass_t rdclass;
- char ch, *endp;
+ char *endp;
+ int ch;
#define CMDLINE_FLAGS \
- "m:o:I:c:E:v:xz"
+ "hm:o:I:c:E:v:Vxz"
/*
* Process memory debugging argument first.
@@ -209,10 +209,6 @@ main(int argc, char *argv[]) {
engine = isc_commandline_argument;
break;
- case 'h':
- usage();
- break;
-
case 'I':
inputformatstr = isc_commandline_argument;
break;
@@ -243,8 +239,15 @@ main(int argc, char *argv[]) {
if (isc_commandline_option != '?')
fprintf(stderr, "%s: invalid argument -%c\n",
program, isc_commandline_option);
+ /* FALLTHROUGH */
+
+ case 'h':
+ /* Does not return. */
usage();
- break;
+
+ case 'V':
+ /* Does not return. */
+ version(program);
default:
fprintf(stderr, "%s: unhandled option -%c\n",
diff --git a/bin/dnssec/dnssec-verify.docbook b/bin/dnssec/dnssec-verify.docbook
index 0835df1d5ea3..d3c47c9c15a6 100644
--- a/bin/dnssec/dnssec-verify.docbook
+++ b/bin/dnssec/dnssec-verify.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2012 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
-
- Permission to use, copy, modify, and/or distribute this software for any
- purpose with or without fee is hereby granted, provided that the above
@@ -17,10 +17,9 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: dnssec-verify.docbook,v 1.52 2011/12/22 07:32:40 each Exp $ -->
<refentry id="man.dnssec-verify">
<refentryinfo>
- <date>April 12, 2012</date>
+ <date>June 26, 2012</date>
</refentryinfo>
<refmeta>
@@ -37,6 +36,7 @@
<docinfo>
<copyright>
<year>2012</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
</docinfo>
@@ -49,6 +49,7 @@
<arg><option>-I <replaceable class="parameter">input-format</replaceable></option></arg>
<arg><option>-o <replaceable class="parameter">origin</replaceable></option></arg>
<arg><option>-v <replaceable class="parameter">level</replaceable></option></arg>
+ <arg><option>-V</option></arg>
<arg><option>-x</option></arg>
<arg><option>-z</option></arg>
<arg choice="req">zonefile</arg>
@@ -113,6 +114,15 @@
</varlistentry>
<varlistentry>
+ <term>-V</term>
+ <listitem>
+ <para>
+ Prints version information.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
<term>-x</term>
<listitem>
<para>
diff --git a/bin/dnssec/dnssec-verify.html b/bin/dnssec/dnssec-verify.html
index 135556f51001..8e237668992a 100644
--- a/bin/dnssec/dnssec-verify.html
+++ b/bin/dnssec/dnssec-verify.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2012 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
-
- Permission to use, copy, modify, and/or distribute this software for any
- purpose with or without fee is hereby granted, provided that the above
@@ -28,10 +28,10 @@
</div>
<div class="refsynopsisdiv">
<h2>Synopsis</h2>
-<div class="cmdsynopsis"><p><code class="command">dnssec-verify</code> [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-I <em class="replaceable"><code>input-format</code></em></code>] [<code class="option">-o <em class="replaceable"><code>origin</code></em></code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-x</code>] [<code class="option">-z</code>] {zonefile}</p></div>
+<div class="cmdsynopsis"><p><code class="command">dnssec-verify</code> [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-I <em class="replaceable"><code>input-format</code></em></code>] [<code class="option">-o <em class="replaceable"><code>origin</code></em></code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-V</code>] [<code class="option">-x</code>] [<code class="option">-z</code>] {zonefile}</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543390"></a><h2>DESCRIPTION</h2>
+<a name="id2543405"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">dnssec-verify</strong></span>
verifies that a zone is fully signed for each algorithm found
in the DNSKEY RRset for the zone, and that the NSEC / NSEC3
@@ -39,7 +39,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543402"></a><h2>OPTIONS</h2>
+<a name="id2543417"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-c <em class="replaceable"><code>class</code></em></span></dt>
<dd><p>
@@ -65,6 +65,10 @@
<dd><p>
Sets the debugging level.
</p></dd>
+<dt><span class="term">-V</span></dt>
+<dd><p>
+ Prints version information.
+ </p></dd>
<dt><span class="term">-x</span></dt>
<dd><p>
Only verify that the DNSKEY RRset is signed with key-signing
@@ -101,7 +105,7 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543543"></a><h2>SEE ALSO</h2>
+<a name="id2543640"></a><h2>SEE ALSO</h2>
<p>
<span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
<em class="citetitle">BIND 9 Administrator Reference Manual</em>,
@@ -109,7 +113,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543637"></a><h2>AUTHOR</h2>
+<a name="id2543666"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
diff --git a/bin/dnssec/dnssectool.c b/bin/dnssec/dnssectool.c
index 74698e1b17ec..b1d1ed664bf2 100644
--- a/bin/dnssec/dnssectool.c
+++ b/bin/dnssec/dnssectool.c
@@ -15,8 +15,6 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
-/* $Id: dnssectool.c,v 1.63 2011/10/21 03:55:33 marka Exp $ */
-
/*! \file */
/*%
@@ -122,6 +120,12 @@ vbprintf(int level, const char *fmt, ...) {
}
void
+version(const char *program) {
+ fprintf(stderr, "%s %s\n", program, VERSION);
+ exit(0);
+}
+
+void
type_format(const dns_rdatatype_t type, char *cp, unsigned int size) {
isc_buffer_t b;
isc_region_t r;
@@ -300,12 +304,21 @@ time_units(isc_stdtime_t offset, char *suffix, const char *str) {
return(0); /* silence compiler warning */
}
+static inline isc_boolean_t
+isnone(const char *str) {
+ return (ISC_TF((strcasecmp(str, "none") == 0) ||
+ (strcasecmp(str, "never") == 0)));
+}
+
dns_ttl_t
strtottl(const char *str) {
const char *orig = str;
dns_ttl_t ttl;
char *endp;
+ if (isnone(str))
+ return ((dns_ttl_t) 0);
+
ttl = strtol(str, &endp, 0);
if (ttl == 0 && endp == str)
fatal("TTL must be numeric");
@@ -314,12 +327,23 @@ strtottl(const char *str) {
}
isc_stdtime_t
-strtotime(const char *str, isc_int64_t now, isc_int64_t base) {
+strtotime(const char *str, isc_int64_t now, isc_int64_t base,
+ isc_boolean_t *setp)
+{
isc_int64_t val, offset;
isc_result_t result;
const char *orig = str;
char *endp;
- int n;
+ size_t n;
+
+ if (isnone(str)) {
+ if (setp != NULL)
+ *setp = ISC_FALSE;
+ return ((isc_stdtime_t) 0);
+ }
+
+ if (setp != NULL)
+ *setp = ISC_TRUE;
if ((str[0] == '0' || str[0] == '-') && str[1] == '\0')
return ((isc_stdtime_t) 0);
@@ -332,14 +356,14 @@ strtotime(const char *str, isc_int64_t now, isc_int64_t base) {
* [+-]offset
*/
n = strspn(str, "0123456789");
- if ((n == 8 || n == 14) &&
+ if ((n == 8u || n == 14u) &&
(str[n] == '\0' || str[n] == '-' || str[n] == '+'))
{
char timestr[15];
strlcpy(timestr, str, sizeof(timestr));
timestr[n] = 0;
- if (n == 8)
+ if (n == 8u)
strlcat(timestr, "000000", sizeof(timestr));
result = dns_time64_fromtext(timestr, &val);
if (result != ISC_R_SUCCESS)
diff --git a/bin/dnssec/dnssectool.h b/bin/dnssec/dnssectool.h
index 09b4fb103b13..f51bd0001a7b 100644
--- a/bin/dnssec/dnssectool.h
+++ b/bin/dnssec/dnssectool.h
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004, 2007-2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004, 2007-2012, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 2000, 2001, 2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -46,6 +46,9 @@ void
vbprintf(int level, const char *fmt, ...) ISC_FORMAT_PRINTF(2, 3);
void
+version(const char *program);
+
+void
type_format(const dns_rdatatype_t type, char *cp, unsigned int size);
#define TYPE_FORMATSIZE 20
@@ -68,7 +71,8 @@ cleanup_entropy(isc_entropy_t **ectx);
dns_ttl_t strtottl(const char *str);
isc_stdtime_t
-strtotime(const char *str, isc_int64_t now, isc_int64_t base);
+strtotime(const char *str, isc_int64_t now, isc_int64_t base,
+ isc_boolean_t *setp);
dns_rdataclass_t
strtoclass(const char *str);
diff --git a/bin/named/bind9.ver3.xsl b/bin/named/bind9.ver3.xsl
index 699bcb4830a5..6720154d0b5b 100644
--- a/bin/named/bind9.ver3.xsl
+++ b/bin/named/bind9.ver3.xsl
@@ -267,6 +267,13 @@
<div class="header">
<h1>ISC Bind 9 Configuration and Statistics</h1>
</div>
+ <p>Alternate statistics views: <a href="/">All</a>,
+ <a href="/xml/v3/status">Status</a>,
+ <a href="/xml/v3/server">Server</a>,
+ <a href="/xml/v3/zones">Zones</a>,
+ <a href="/xml/v3/net">Network</a>,
+ <a href="/xml/v3/tasks">Tasks</a> and
+ <a href="/xml/v3/mem">Memory</a></p>
<hr/>
<h2>Server Times</h2>
<table class="info">
diff --git a/bin/named/bind9.ver3.xsl.h b/bin/named/bind9.ver3.xsl.h
index 371e69c7a171..b90ae594ed5b 100644
--- a/bin/named/bind9.ver3.xsl.h
+++ b/bin/named/bind9.ver3.xsl.h
@@ -272,6 +272,13 @@ static char xslmsg[] =
" <div class=\"header\">\n"
" <h1>ISC Bind 9 Configuration and Statistics</h1>\n"
" </div>\n"
+ " <p>Alternate statistics views: <a href=\"/\">All</a>,\n"
+ " <a href=\"/xml/v3/status\">Status</a>,\n"
+ " <a href=\"/xml/v3/server\">Server</a>,\n"
+ " <a href=\"/xml/v3/zones\">Zones</a>,\n"
+ " <a href=\"/xml/v3/net\">Network</a>,\n"
+ " <a href=\"/xml/v3/tasks\">Tasks</a> and\n"
+ " <a href=\"/xml/v3/mem\">Memory</a></p>\n"
" <hr/>\n"
" <h2>Server Times</h2>\n"
" <table class=\"info\">\n"
diff --git a/bin/named/client.c b/bin/named/client.c
index e68f96defa2c..aed3b178133c 100644
--- a/bin/named/client.c
+++ b/bin/named/client.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -233,6 +233,8 @@ static void client_request(isc_task_t *task, isc_event_t *event);
static void ns_client_dumpmessage(ns_client_t *client, const char *reason);
static isc_result_t get_client(ns_clientmgr_t *manager, ns_interface_t *ifp,
dns_dispatch_t *disp, isc_boolean_t tcp);
+static inline isc_boolean_t
+allowed(isc_netaddr_t *addr, dns_name_t *signer, dns_acl_t *acl);
void
ns_client_recursing(ns_client_t *client) {
@@ -973,7 +975,19 @@ ns_client_send(ns_client_t *client) {
result = dns_compress_init(&cctx, -1, client->mctx);
if (result != ISC_R_SUCCESS)
goto done;
- dns_compress_setsensitive(&cctx, ISC_TRUE);
+ if (client->peeraddr_valid && client->view != NULL) {
+ isc_netaddr_t netaddr;
+ dns_name_t *name = NULL;
+
+ isc_netaddr_fromsockaddr(&netaddr, &client->peeraddr);
+ if (client->message->tsigkey != NULL)
+ name = &client->message->tsigkey->name;
+ if (client->view->nocasecompress == NULL ||
+ !allowed(&netaddr, name, client->view->nocasecompress))
+ {
+ dns_compress_setsensitive(&cctx, ISC_TRUE);
+ }
+ }
cleanup_cctx = ISC_TRUE;
result = dns_message_renderbegin(client->message, &cctx, &buffer);
@@ -1249,7 +1263,7 @@ client_addopt(ns_client_t *client) {
dns_view_t *view;
dns_resolver_t *resolver;
isc_uint16_t udpsize;
- dns_ednsopt_t ednsopts[2];
+ dns_ednsopt_t ednsopts[DNS_EDNSOPTIONS];
int count = 0;
unsigned int flags;
@@ -1278,6 +1292,7 @@ client_addopt(ns_client_t *client) {
} else
nsidp = ns_g_server->server_id;
+ INSIST(count < DNS_EDNSOPTIONS);
ednsopts[count].code = DNS_OPT_NSID;
ednsopts[count].length = strlen(nsidp);
ednsopts[count].value = (unsigned char *)nsidp;
@@ -2820,6 +2835,9 @@ ns_client_dumpmessage(ns_client_t *client, const char *reason) {
int len = 1024;
isc_result_t result;
+ if (!isc_log_wouldlog(ns_g_lctx, ISC_LOG_DEBUG(1)))
+ return;
+
/*
* Note that these are multiline debug messages. We want a newline
* to appear in the log after each message.
diff --git a/bin/named/config.c b/bin/named/config.c
index 278272082ae2..ebc48cfc464e 100644
--- a/bin/named/config.c
+++ b/bin/named/config.c
@@ -15,8 +15,6 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
-/* $Id: config.c,v 1.123 2012/01/06 23:46:41 tbox Exp $ */
-
/*! \file */
#include <config.h>
@@ -160,6 +158,8 @@ options {\n\
dnssec-accept-expired no;\n\
clients-per-query 10;\n\
max-clients-per-query 100;\n\
+ max-recursion-depth 7;\n\
+ max-recursion-queries 50;\n\
zero-no-soa-ttl-cache no;\n\
nsec3-test-zone no;\n\
allow-new-zones no;\n\
diff --git a/bin/named/control.c b/bin/named/control.c
index 35312fee59f3..306bca0b2794 100644
--- a/bin/named/control.c
+++ b/bin/named/control.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2007, 2009-2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2007, 2009-2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 2001-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -203,7 +203,7 @@ ns_control_docommand(isccc_sexpr_t *message, isc_buffer_t *text) {
command_compare(command, NS_COMMAND_LOADKEYS)) {
result = ns_server_rekey(ns_g_server, command, text);
} else if (command_compare(command, NS_COMMAND_ADDZONE)) {
- result = ns_server_add_zone(ns_g_server, command);
+ result = ns_server_add_zone(ns_g_server, command, text);
} else if (command_compare(command, NS_COMMAND_DELZONE)) {
result = ns_server_del_zone(ns_g_server, command, text);
} else if (command_compare(command, NS_COMMAND_SIGNING)) {
diff --git a/bin/named/controlconf.c b/bin/named/controlconf.c
index 509a113b3597..a9d498401d49 100644
--- a/bin/named/controlconf.c
+++ b/bin/named/controlconf.c
@@ -24,6 +24,7 @@
#include <isc/base64.h>
#include <isc/buffer.h>
#include <isc/event.h>
+#include <isc/file.h>
#include <isc/mem.h>
#include <isc/net.h>
#include <isc/netaddr.h>
@@ -811,6 +812,13 @@ get_rndckey(isc_mem_t *mctx, controlkeylist_t *keyids) {
char secret[1024];
isc_buffer_t b;
+ isc_log_write(ns_g_lctx, NS_LOGCATEGORY_GENERAL,
+ NS_LOGMODULE_CONTROL, ISC_LOG_INFO,
+ "configuring command channel from '%s'",
+ ns_g_keyfile);
+ if (! isc_file_exists(ns_g_keyfile))
+ return (ISC_R_FILENOTFOUND);
+
CHECK(cfg_parser_create(mctx, ns_g_lctx, &pctx));
CHECK(cfg_parse_file(pctx, ns_g_keyfile, &cfg_type_rndckey, &config));
CHECK(cfg_map_get(config, "key", &key));
diff --git a/bin/named/include/named/query.h b/bin/named/include/named/query.h
index 3beabb82b2f6..444729a98f77 100644
--- a/bin/named/include/named/query.h
+++ b/bin/named/include/named/query.h
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004, 2005, 2007, 2010, 2011, 2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004, 2005, 2007, 2010, 2011, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2002 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -15,8 +15,6 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
-/* $Id: query.h,v 1.45 2011/01/13 04:59:24 tbox Exp $ */
-
#ifndef NAMED_QUERY_H
#define NAMED_QUERY_H 1
diff --git a/bin/named/include/named/server.h b/bin/named/include/named/server.h
index 52ba94d29538..1680776cd991 100644
--- a/bin/named/include/named/server.h
+++ b/bin/named/include/named/server.h
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -345,7 +345,7 @@ ns_server_validation(ns_server_t *server, char *args);
* Add a zone to a running process
*/
isc_result_t
-ns_server_add_zone(ns_server_t *server, char *args);
+ns_server_add_zone(ns_server_t *server, char *args, isc_buffer_t *text);
/*%
* Deletes a zone from a running process
diff --git a/bin/named/lwresd.8 b/bin/named/lwresd.8
index 47a6b782b68a..400e8a7e531b 100644
--- a/bin/named/lwresd.8
+++ b/bin/named/lwresd.8
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2004, 2005, 2007-2009 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004, 2005, 2007-2009, 2014 Internet Systems Consortium, Inc. ("ISC")
.\" Copyright (C) 2000, 2001 Internet Software Consortium.
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
@@ -20,11 +20,11 @@
.\" Title: lwresd
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: June 30, 2000
+.\" Date: January 20, 2009
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "LWRESD" "8" "June 30, 2000" "BIND9" "BIND9"
+.TH "LWRESD" "8" "January 20, 2009" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -217,7 +217,7 @@ The default process\-id file.
.PP
Internet Systems Consortium
.SH "COPYRIGHT"
-Copyright \(co 2004, 2005, 2007\-2009 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2004, 2005, 2007\-2009, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
Copyright \(co 2000, 2001 Internet Software Consortium.
.br
diff --git a/bin/named/lwresd.docbook b/bin/named/lwresd.docbook
index dddfe5e51784..307131ad8475 100644
--- a/bin/named/lwresd.docbook
+++ b/bin/named/lwresd.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2004, 2005, 2007-2009 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007-2009, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -18,10 +18,9 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwresd.docbook,v 1.20 2009/01/20 23:47:56 tbox Exp $ -->
<refentry>
<refentryinfo>
- <date>June 30, 2000</date>
+ <date>January 20, 2009</date>
</refentryinfo>
<refmeta>
@@ -42,6 +41,7 @@
<year>2007</year>
<year>2008</year>
<year>2009</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
diff --git a/bin/named/lwresd.html b/bin/named/lwresd.html
index 5dc01be1dfb7..4bef3e262593 100644
--- a/bin/named/lwresd.html
+++ b/bin/named/lwresd.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004, 2005, 2007-2009 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007-2009, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -22,7 +22,7 @@
<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
-<a name="id2476274"></a><div class="titlepage"></div>
+<a name="id2476282"></a><div class="titlepage"></div>
<div class="refnamediv">
<h2>Name</h2>
<p><span class="application">lwresd</span> &#8212; lightweight resolver daemon</p>
@@ -32,7 +32,7 @@
<div class="cmdsynopsis"><p><code class="command">lwresd</code> [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-C <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-i <em class="replaceable"><code>pid-file</code></em></code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-P <em class="replaceable"><code>port</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-4</code>] [<code class="option">-6</code>]</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543469"></a><h2>DESCRIPTION</h2>
+<a name="id2543479"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">lwresd</strong></span>
is the daemon providing name lookup
services to clients that use the BIND 9 lightweight resolver
@@ -67,7 +67,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543516"></a><h2>OPTIONS</h2>
+<a name="id2543526"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-4</span></dt>
<dd><p>
@@ -197,7 +197,7 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543933"></a><h2>FILES</h2>
+<a name="id2543943"></a><h2>FILES</h2>
<div class="variablelist"><dl>
<dt><span class="term"><code class="filename">/etc/resolv.conf</code></span></dt>
<dd><p>
@@ -210,14 +210,14 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543973"></a><h2>SEE ALSO</h2>
+<a name="id2543982"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">lwres</span>(3)</span>,
<span class="citerefentry"><span class="refentrytitle">resolver</span>(5)</span>.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2544007"></a><h2>AUTHOR</h2>
+<a name="id2544017"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
diff --git a/bin/named/main.c b/bin/named/main.c
index 1d844e03e3d1..599c142fd498 100644
--- a/bin/named/main.c
+++ b/bin/named/main.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -15,8 +15,6 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
-/* $Id$ */
-
/*! \file */
#include <config.h>
@@ -410,16 +408,16 @@ static void
parse_command_line(int argc, char *argv[]) {
int ch;
int port;
+ const char *p;
isc_boolean_t disable6 = ISC_FALSE;
isc_boolean_t disable4 = ISC_FALSE;
save_command_line(argc, argv);
/* PLEASE keep options synchronized when main is hooked! */
+#define CMDLINE_FLAGS "46c:C:d:E:fFgi:lm:n:N:p:P:sS:t:T:U:u:vVx:"
isc_commandline_errprint = ISC_FALSE;
- while ((ch = isc_commandline_parse(argc, argv,
- "46c:C:d:E:fFgi:lm:n:N:p:P:"
- "sS:t:T:U:u:vVx:")) != -1) {
+ while ((ch = isc_commandline_parse(argc, argv, CMDLINE_FLAGS)) != -1) {
switch (ch) {
case '4':
if (disable4)
@@ -585,8 +583,14 @@ parse_command_line(int argc, char *argv[]) {
usage();
if (isc_commandline_option == '?')
exit(0);
- ns_main_earlyfatal("unknown option '-%c'",
- isc_commandline_option);
+ p = strchr(CMDLINE_FLAGS, isc_commandline_option);
+ if (p == NULL || *++p != ':')
+ ns_main_earlyfatal("unknown option '-%c'",
+ isc_commandline_option);
+ else
+ ns_main_earlyfatal("option '-%c' requires "
+ "an argument",
+ isc_commandline_option);
/* FALLTHROUGH */
default:
ns_main_earlyfatal("parsing options returned %d", ch);
@@ -621,8 +625,14 @@ create_managers(void) {
#ifdef WIN32
ns_g_udpdisp = 1;
#else
- if (ns_g_udpdisp == 0)
- ns_g_udpdisp = ns_g_cpus_detected;
+ if (ns_g_udpdisp == 0) {
+ if (ns_g_cpus_detected == 1)
+ ns_g_udpdisp = 1;
+ else if (ns_g_cpus_detected < 4)
+ ns_g_udpdisp = 2;
+ else
+ ns_g_udpdisp = ns_g_cpus_detected / 2;
+ }
if (ns_g_udpdisp > ns_g_cpus)
ns_g_udpdisp = ns_g_cpus;
#endif
@@ -704,7 +714,7 @@ destroy_managers(void) {
}
static void
-dump_symboltable() {
+dump_symboltable(void) {
int i;
isc_result_t result;
const char *fname;
diff --git a/bin/named/named.8 b/bin/named/named.8
index b27be3185997..fe6bb4207e37 100644
--- a/bin/named/named.8
+++ b/bin/named/named.8
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2004-2009, 2011, 2013 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004-2009, 2011, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
.\" Copyright (C) 2000, 2001, 2003 Internet Software Consortium.
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
@@ -20,11 +20,11 @@
.\" Title: named
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: May 21, 2009
+.\" Date: February 20, 2014
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "NAMED" "8" "May 21, 2009" "BIND9" "BIND9"
+.TH "NAMED" "8" "February 20, 2014" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -174,9 +174,9 @@ Use
\fI#listeners\fR
worker threads to listen for incoming UDP packets on each address. If not specified,
\fBnamed\fR
-will use the number of detected CPUs. If
+will calculate a default value based on the number of detected CPUs: 1 for 1 CPU, 2 for 2\-4 CPUs, and the number of detected CPUs divided by 2 for values higher than 4. If
\fB\-n\fR
-has been set to a higher value than the number of CPUs, then
+has been set to a higher value than the number of detected CPUs, then
\fB\-U\fR
may be increased as high as that value, but no higher.
.RE
@@ -280,7 +280,7 @@ BIND 9 Administrator Reference Manual.
.PP
Internet Systems Consortium
.SH "COPYRIGHT"
-Copyright \(co 2004\-2009, 2011, 2013 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2004\-2009, 2011, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
Copyright \(co 2000, 2001, 2003 Internet Software Consortium.
.br
diff --git a/bin/named/named.conf.5 b/bin/named/named.conf.5
index 0f5662c3ae8c..c4d75437da2e 100644
--- a/bin/named/named.conf.5
+++ b/bin/named/named.conf.5
@@ -19,11 +19,11 @@
.\" Title: \fInamed.conf\fR
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: Aug 13, 2004
+.\" Date: January 08, 2014
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "\fINAMED.CONF\fR" "5" "Aug 13, 2004" "BIND9" "BIND9"
+.TH "\fINAMED.CONF\fR" "5" "January 08, 2014" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
diff --git a/bin/named/named.conf.docbook b/bin/named/named.conf.docbook
index b4d0c38e5e62..85d13db95d39 100644
--- a/bin/named/named.conf.docbook
+++ b/bin/named/named.conf.docbook
@@ -17,10 +17,9 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: named.conf.docbook,v 1.55 2011/11/07 00:25:53 each Exp $ -->
<refentry>
<refentryinfo>
- <date>Aug 13, 2004</date>
+ <date>January 08, 2014</date>
</refentryinfo>
<refmeta>
diff --git a/bin/named/named.conf.html b/bin/named/named.conf.html
index 5847466785a4..0e1d2eb60da3 100644
--- a/bin/named/named.conf.html
+++ b/bin/named/named.conf.html
@@ -21,7 +21,7 @@
<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
-<a name="id2476274"></a><div class="titlepage"></div>
+<a name="id2476282"></a><div class="titlepage"></div>
<div class="refnamediv">
<h2>Name</h2>
<p><code class="filename">named.conf</code> &#8212; configuration file for named</p>
@@ -31,7 +31,7 @@
<div class="cmdsynopsis"><p><code class="command">named.conf</code> </p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543361"></a><h2>DESCRIPTION</h2>
+<a name="id2543367"></a><h2>DESCRIPTION</h2>
<p><code class="filename">named.conf</code> is the configuration file
for
<span><strong class="command">named</strong></span>. Statements are enclosed
@@ -50,14 +50,14 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543388"></a><h2>ACL</h2>
+<a name="id2543395"></a><h2>ACL</h2>
<div class="literallayout"><p><br>
acl <em class="replaceable"><code>string</code></em> { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
<br>
</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543404"></a><h2>KEY</h2>
+<a name="id2543411"></a><h2>KEY</h2>
<div class="literallayout"><p><br>
key <em class="replaceable"><code>domain_name</code></em> {<br>
algorithm <em class="replaceable"><code>string</code></em>;<br>
@@ -66,7 +66,7 @@ key <em class="replaceable"><code>domain_name</code></em> {<br>
</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543424"></a><h2>MASTERS</h2>
+<a name="id2543430"></a><h2>MASTERS</h2>
<div class="literallayout"><p><br>
masters <em class="replaceable"><code>string</code></em> [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
( <em class="replaceable"><code>masters</code></em> | <em class="replaceable"><code>ipv4_address</code></em> [<span class="optional">port <em class="replaceable"><code>integer</code></em></span>] |<br>
@@ -75,7 +75,7 @@ masters <em class="replaceable"><code>string</code></em> [<span class="optional"
</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543469"></a><h2>SERVER</h2>
+<a name="id2543476"></a><h2>SERVER</h2>
<div class="literallayout"><p><br>
server ( <em class="replaceable"><code>ipv4_address[<span class="optional">/prefixlen</span>]</code></em> | <em class="replaceable"><code>ipv6_address[<span class="optional">/prefixlen</span>]</code></em> ) {<br>
bogus <em class="replaceable"><code>boolean</code></em>;<br>
@@ -97,7 +97,7 @@ server ( <em class="replaceable"><code>ipv4_address[<span class="optional">/pref
</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543538"></a><h2>TRUSTED-KEYS</h2>
+<a name="id2543544"></a><h2>TRUSTED-KEYS</h2>
<div class="literallayout"><p><br>
trusted-keys {<br>
<em class="replaceable"><code>domain_name</code></em> <em class="replaceable"><code>flags</code></em> <em class="replaceable"><code>protocol</code></em> <em class="replaceable"><code>algorithm</code></em> <em class="replaceable"><code>key</code></em>; ... <br>
@@ -105,7 +105,7 @@ trusted-keys {<br>
</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543563"></a><h2>MANAGED-KEYS</h2>
+<a name="id2543570"></a><h2>MANAGED-KEYS</h2>
<div class="literallayout"><p><br>
managed-keys {<br>
<em class="replaceable"><code>domain_name</code></em> <code class="constant">initial-key</code> <em class="replaceable"><code>flags</code></em> <em class="replaceable"><code>protocol</code></em> <em class="replaceable"><code>algorithm</code></em> <em class="replaceable"><code>key</code></em>; ... <br>
@@ -113,7 +113,7 @@ managed-keys {<br>
</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543592"></a><h2>CONTROLS</h2>
+<a name="id2543598"></a><h2>CONTROLS</h2>
<div class="literallayout"><p><br>
controls {<br>
inet ( <em class="replaceable"><code>ipv4_address</code></em> | <em class="replaceable"><code>ipv6_address</code></em> | * )<br>
@@ -125,7 +125,7 @@ controls {<br>
</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543627"></a><h2>LOGGING</h2>
+<a name="id2543634"></a><h2>LOGGING</h2>
<div class="literallayout"><p><br>
logging {<br>
channel <em class="replaceable"><code>string</code></em> {<br>
@@ -143,7 +143,7 @@ logging {<br>
</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543666"></a><h2>LWRES</h2>
+<a name="id2543672"></a><h2>LWRES</h2>
<div class="literallayout"><p><br>
lwres {<br>
listen-on [<span class="optional"> port <em class="replaceable"><code>integer</code></em> </span>] {<br>
@@ -156,7 +156,7 @@ lwres {<br>
</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543707"></a><h2>OPTIONS</h2>
+<a name="id2543714"></a><h2>OPTIONS</h2>
<div class="literallayout"><p><br>
options {<br>
avoid-v4-udp-ports { <em class="replaceable"><code>port</code></em>; ... };<br>
@@ -361,7 +361,7 @@ options {<br>
</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2544586"></a><h2>VIEW</h2>
+<a name="id2544593"></a><h2>VIEW</h2>
<div class="literallayout"><p><br>
view <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>optional_class</code></em> {<br>
match-clients { <em class="replaceable"><code>address_match_element</code></em>; ... };<br>
@@ -525,7 +525,7 @@ view <em class="replaceable"><code>string</code></em> <em class="replaceable"><c
</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2545302"></a><h2>ZONE</h2>
+<a name="id2545308"></a><h2>ZONE</h2>
<div class="literallayout"><p><br>
zone <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>optional_class</code></em> {<br>
type ( master | slave | stub | hint | redirect |<br>
@@ -622,12 +622,12 @@ zone <em class="replaceable"><code>string</code></em> <em class="replaceable"><c
</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2545691"></a><h2>FILES</h2>
+<a name="id2545698"></a><h2>FILES</h2>
<p><code class="filename">/etc/named.conf</code>
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2545703"></a><h2>SEE ALSO</h2>
+<a name="id2545709"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
diff --git a/bin/named/named.docbook b/bin/named/named.docbook
index 1f08e196e040..7ca3d2bf6a7a 100644
--- a/bin/named/named.docbook
+++ b/bin/named/named.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2004-2009, 2011, 2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2009, 2011, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001, 2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -18,10 +18,9 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: named.docbook,v 1.28 2011/11/09 23:46:23 tbox Exp $ -->
<refentry id="man.named">
<refentryinfo>
- <date>May 21, 2009</date>
+ <date>February 20, 2014</date>
</refentryinfo>
<refmeta>
@@ -45,6 +44,7 @@
<year>2009</year>
<year>2011</year>
<year>2013</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
@@ -291,10 +291,12 @@
Use <replaceable class="parameter">#listeners</replaceable>
worker threads to listen for incoming UDP packets on each
address. If not specified, <command>named</command> will
- use the number of detected CPUs. If <option>-n</option>
- has been set to a higher value than the number of CPUs,
- then <option>-U</option> may be increased as high as that
- value, but no higher.
+ calculate a default value based on the number of detected
+ CPUs: 1 for 1 CPU, 2 for 2-4 CPUs, and the number of
+ detected CPUs divided by 2 for values higher than 4.
+ If <option>-n</option> has been set to a higher value than
+ the number of detected CPUs, then <option>-U</option> may
+ be increased as high as that value, but no higher.
</para>
</listitem>
</varlistentry>
diff --git a/bin/named/named.html b/bin/named/named.html
index fc8de5147ad8..218639991fa6 100644
--- a/bin/named/named.html
+++ b/bin/named/named.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2009, 2011, 2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2009, 2011, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001, 2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -32,7 +32,7 @@
<div class="cmdsynopsis"><p><code class="command">named</code> [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine-name</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-S <em class="replaceable"><code>#max-socks</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-U <em class="replaceable"><code>#listeners</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-V</code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543497"></a><h2>DESCRIPTION</h2>
+<a name="id2543507"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">named</strong></span>
is a Domain Name System (DNS) server,
part of the BIND 9 distribution from ISC. For more
@@ -47,7 +47,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543522"></a><h2>OPTIONS</h2>
+<a name="id2543531"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-4</span></dt>
<dd><p>
@@ -183,10 +183,12 @@
Use <em class="replaceable"><code>#listeners</code></em>
worker threads to listen for incoming UDP packets on each
address. If not specified, <span><strong class="command">named</strong></span> will
- use the number of detected CPUs. If <code class="option">-n</code>
- has been set to a higher value than the number of CPUs,
- then <code class="option">-U</code> may be increased as high as that
- value, but no higher.
+ calculate a default value based on the number of detected
+ CPUs: 1 for 1 CPU, 2 for 2-4 CPUs, and the number of
+ detected CPUs divided by 2 for values higher than 4.
+ If <code class="option">-n</code> has been set to a higher value than
+ the number of detected CPUs, then <code class="option">-U</code> may
+ be increased as high as that value, but no higher.
</p></dd>
<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt>
<dd>
@@ -238,7 +240,7 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2544012"></a><h2>SIGNALS</h2>
+<a name="id2544021"></a><h2>SIGNALS</h2>
<p>
In routine operation, signals should not be used to control
the nameserver; <span><strong class="command">rndc</strong></span> should be used
@@ -259,7 +261,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2544060"></a><h2>CONFIGURATION</h2>
+<a name="id2544205"></a><h2>CONFIGURATION</h2>
<p>
The <span><strong class="command">named</strong></span> configuration file is too complex
to describe in detail here. A complete description is provided
@@ -276,7 +278,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2544233"></a><h2>FILES</h2>
+<a name="id2544310"></a><h2>FILES</h2>
<div class="variablelist"><dl>
<dt><span class="term"><code class="filename">/etc/named.conf</code></span></dt>
<dd><p>
@@ -289,7 +291,7 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2544273"></a><h2>SEE ALSO</h2>
+<a name="id2544349"></a><h2>SEE ALSO</h2>
<p><em class="citetitle">RFC 1033</em>,
<em class="citetitle">RFC 1034</em>,
<em class="citetitle">RFC 1035</em>,
@@ -302,7 +304,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2544343"></a><h2>AUTHOR</h2>
+<a name="id2544420"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
diff --git a/bin/named/query.c b/bin/named/query.c
index c357f83ee427..af8e5da8204d 100644
--- a/bin/named/query.c
+++ b/bin/named/query.c
@@ -2278,7 +2278,7 @@ query_dns64(ns_client_t *client, dns_name_t **namep, dns_rdataset_t *rdataset,
dns64 != NULL; dns64 = dns_dns64_next(dns64)) {
dns_rdataset_current(rdataset, &rdata);
- isc__buffer_availableregion(buffer, &r);
+ isc_buffer_availableregion(buffer, &r);
INSIST(r.length >= 16);
result = dns_dns64_aaaafroma(dns64, &netaddr,
client->signer,
@@ -2518,11 +2518,12 @@ query_addrrset(ns_client_t *client, dns_name_t **namep,
if (result == ISC_R_SUCCESS) {
/*
* We've already got an RRset of the given name and type.
- * There's nothing else to do;
*/
CTRACE("query_addrrset: dns_message_findname succeeded: done");
if (dbuf != NULL)
query_releasename(client, namep);
+ if ((rdataset->attributes & DNS_RDATASETATTR_REQUIRED) != 0)
+ mrdataset->attributes |= DNS_RDATASETATTR_REQUIRED;
return;
} else if (result == DNS_R_NXDOMAIN) {
/*
@@ -2562,7 +2563,8 @@ query_addrrset(ns_client_t *client, dns_name_t **namep,
static inline isc_result_t
query_addsoa(ns_client_t *client, dns_db_t *db, dns_dbversion_t *version,
- unsigned int override_ttl, isc_boolean_t isassociated)
+ unsigned int override_ttl, isc_boolean_t isassociated,
+ dns_section_t section)
{
dns_name_t *name;
dns_dbnode_t *node;
@@ -2669,8 +2671,11 @@ query_addsoa(ns_client_t *client, dns_db_t *db, dns_dbversion_t *version,
sigrdatasetp = &sigrdataset;
else
sigrdatasetp = NULL;
+
+ if (section == DNS_SECTION_ADDITIONAL)
+ rdataset->attributes |= DNS_RDATASETATTR_REQUIRED;
query_addrrset(client, &name, &rdataset, sigrdatasetp, NULL,
- DNS_SECTION_AUTHORITY);
+ section);
}
cleanup:
@@ -3872,12 +3877,11 @@ query_recurse(ns_client_t *client, dns_rdatatype_t qtype, dns_name_t *qname,
peeraddr = &client->peeraddr;
else
peeraddr = NULL;
- result = dns_resolver_createfetch2(client->view->resolver,
+ result = dns_resolver_createfetch3(client->view->resolver,
qname, qtype, qdomain, nameservers,
NULL, peeraddr, client->message->id,
- client->query.fetchoptions,
- client->task,
- query_resume, client,
+ client->query.fetchoptions, 0, NULL,
+ client->task, query_resume, client,
rdataset, sigrdataset,
&client->query.fetch);
@@ -4946,7 +4950,7 @@ rpz_add_cname(ns_client_t *client, dns_rpz_st_t *st,
* response policy zone cannot verify.
*/
client->attributes &= ~(NS_CLIENTATTR_WANTDNSSEC |
- DNS_MESSAGEFLAG_AD);
+ NS_CLIENTATTR_WANTAD);
return (ISC_R_SUCCESS);
}
@@ -5138,7 +5142,7 @@ answer_in_glue(ns_client_t *client, dns_rdatatype_t qtype) {
ISC_LIST_PREPEND(msg->sections[section], name, link);
ISC_LIST_UNLINK(name->list, rdataset, link);
ISC_LIST_PREPEND(name->list, rdataset, link);
- rdataset->attributes |= DNS_RDATASETATTR_REQUIREDGLUE;
+ rdataset->attributes |= DNS_RDATASETATTR_REQUIRED;
}
}
@@ -5594,8 +5598,12 @@ query_find(ns_client_t *client, dns_fetchevent_t *event, dns_rdatatype_t qtype)
isc_boolean_t resuming;
int line = -1;
isc_boolean_t dns64_exclude, dns64;
+ isc_boolean_t nxrewrite = ISC_FALSE;
dns_clientinfomethods_t cm;
dns_clientinfo_t ci;
+ isc_boolean_t associated;
+ dns_section_t section;
+ dns_ttl_t ttl;
CTRACE("query_find");
@@ -5964,8 +5972,7 @@ query_find(ns_client_t *client, dns_fetchevent_t *event, dns_rdatatype_t qtype)
* with other truncated responses in RespTruncated.
*/
if (wouldlog) {
- ns_client_log(client,
- NS_LOGCATEGORY_QUERY_EERRORS,
+ ns_client_log(client, DNS_LOGCATEGORY_RRL,
NS_LOGMODULE_QUERY,
DNS_RRL_LOG_DROP,
"%s", log_buf);
@@ -6069,9 +6076,11 @@ query_find(ns_client_t *client, dns_fetchevent_t *event, dns_rdatatype_t qtype)
switch (rpz_st->m.policy) {
case DNS_RPZ_POLICY_NXDOMAIN:
result = DNS_R_NXDOMAIN;
+ nxrewrite = ISC_TRUE;
break;
case DNS_RPZ_POLICY_NODATA:
result = DNS_R_NXRRSET;
+ nxrewrite = ISC_TRUE;
break;
case DNS_RPZ_POLICY_RECORD:
result = rpz_st->m.result;
@@ -6130,7 +6139,8 @@ query_find(ns_client_t *client, dns_fetchevent_t *event, dns_rdatatype_t qtype)
* response policy zone cannot verify.
*/
client->attributes &= ~(NS_CLIENTATTR_WANTDNSSEC |
- DNS_MESSAGEFLAG_AD);
+ NS_CLIENTATTR_WANTAD);
+ client->message->flags &= ~DNS_MESSAGEFLAG_AD;
query_putrdataset(client, &sigrdataset);
rpz_st->q.is_zone = is_zone;
is_zone = ISC_TRUE;
@@ -6615,15 +6625,22 @@ query_find(ns_client_t *client, dns_fetchevent_t *event, dns_rdatatype_t qtype)
*/
query_releasename(client, &fname);
}
+
/*
- * Add SOA.
+ * Add SOA to the additional section if generated by a RPZ
+ * rewrite.
*/
+ associated = dns_rdataset_isassociated(rdataset);
+ section = nxrewrite ? DNS_SECTION_ADDITIONAL :
+ DNS_SECTION_AUTHORITY;
+
result = query_addsoa(client, db, version, ISC_UINT32_MAX,
- dns_rdataset_isassociated(rdataset));
+ associated, section);
if (result != ISC_R_SUCCESS) {
QUERY_ERROR(result);
goto cleanup;
}
+
/*
* Add NSEC record if we found one.
*/
@@ -6662,20 +6679,23 @@ query_find(ns_client_t *client, dns_fetchevent_t *event, dns_rdatatype_t qtype)
}
/*
- * Add SOA. If the query was for a SOA record force the
+ * Add SOA to the additional section if generated by a
+ * RPZ rewrite.
+ *
+ * If the query was for a SOA record force the
* ttl to zero so that it is possible for clients to find
* the containing zone of an arbitrary name with a stub
* resolver and not have it cached.
*/
- if (qtype == dns_rdatatype_soa &&
- zone != NULL &&
- dns_zone_getzeronosoattl(zone))
- result = query_addsoa(client, db, version, 0,
- dns_rdataset_isassociated(rdataset));
- else
- result = query_addsoa(client, db, version,
- ISC_UINT32_MAX,
- dns_rdataset_isassociated(rdataset));
+ associated = dns_rdataset_isassociated(rdataset);
+ section = nxrewrite ? DNS_SECTION_ADDITIONAL :
+ DNS_SECTION_AUTHORITY;
+ ttl = ISC_UINT32_MAX;
+ if (!nxrewrite && qtype == dns_rdatatype_soa &&
+ zone != NULL && dns_zone_getzeronosoattl(zone))
+ ttl = 0;
+ result = query_addsoa(client, db, version, ttl, associated,
+ section);
if (result != ISC_R_SUCCESS) {
QUERY_ERROR(result);
goto cleanup;
@@ -7342,7 +7362,8 @@ query_find(ns_client_t *client, dns_fetchevent_t *event, dns_rdatatype_t qtype)
* Add a fake SOA record.
*/
(void)query_addsoa(client, db, version,
- 600, ISC_FALSE);
+ 600, ISC_FALSE,
+ DNS_SECTION_AUTHORITY);
goto cleanup;
}
#endif
diff --git a/bin/named/server.c b/bin/named/server.c
index 77a4e4406976..84e3ecf32108 100644
--- a/bin/named/server.c
+++ b/bin/named/server.c
@@ -130,6 +130,14 @@
if (result != ISC_R_SUCCESS) goto cleanup; \
} while (0)
+#define TCHECK(op) \
+ do { tresult = (op); \
+ if (tresult != ISC_R_SUCCESS) { \
+ isc_buffer_clear(text); \
+ goto cleanup; \
+ } \
+ } while (0)
+
#define CHECKM(op, msg) \
do { result = (op); \
if (result != ISC_R_SUCCESS) { \
@@ -357,12 +365,12 @@ ns_server_reload(isc_task_t *task, isc_event_t *event);
static isc_result_t
ns_listenelt_fromconfig(const cfg_obj_t *listener, const cfg_obj_t *config,
- cfg_aclconfctx_t *actx,
- isc_mem_t *mctx, ns_listenelt_t **target);
+ cfg_aclconfctx_t *actx, isc_mem_t *mctx,
+ isc_uint16_t family, ns_listenelt_t **target);
static isc_result_t
ns_listenlist_fromconfig(const cfg_obj_t *listenlist, const cfg_obj_t *config,
- cfg_aclconfctx_t *actx,
- isc_mem_t *mctx, ns_listenlist_t **target);
+ cfg_aclconfctx_t *actx, isc_mem_t *mctx,
+ isc_uint16_t family, ns_listenlist_t **target);
static isc_result_t
configure_forward(const cfg_obj_t *config, dns_view_t *view, dns_name_t *origin,
@@ -389,6 +397,9 @@ newzone_cfgctx_destroy(void **cfgp);
static isc_result_t
putstr(isc_buffer_t *b, const char *str);
+static isc_result_t
+putnull(isc_buffer_t *b);
+
isc_result_t
add_comment(FILE *fp, const char *viewname);
@@ -1338,10 +1349,8 @@ check_dbtype(dns_zone_t *zone, unsigned int dbtypec, const char **dbargv,
* Check that all the arguments match.
*/
for (i = 0; i < dbtypec; i++)
- if (argv[i] == NULL || strcmp(argv[i], dbargv[i]) != 0) {
+ if (argv[i] == NULL || strcmp(argv[i], dbargv[i]) != 0)
CHECK(ISC_R_FAILURE);
- break;
- }
/*
* Check that there are not extra arguments.
@@ -2321,9 +2330,9 @@ configure_view(dns_view_t *view, cfg_obj_t *config, cfg_obj_t *vconfig,
obj = NULL;
if (dlz != NULL) {
- (void)cfg_map_get(cfg_tuple_get(dlz, "options"),
- "database", &obj);
+ (void)cfg_map_get(dlz, "database", &obj);
if (obj != NULL) {
+ const cfg_obj_t *name;
char *s = isc_mem_strdup(mctx, cfg_obj_asstring(obj));
if (s == NULL) {
result = ISC_R_NOMEMORY;
@@ -2336,8 +2345,8 @@ configure_view(dns_view_t *view, cfg_obj_t *config, cfg_obj_t *vconfig,
goto cleanup;
}
- obj = cfg_tuple_get(dlz, "name");
- result = dns_dlzcreate(mctx, cfg_obj_asstring(obj),
+ name = cfg_map_getname(dlz);
+ result = dns_dlzcreate(mctx, cfg_obj_asstring(name),
dlzargv[0], dlzargc, dlzargv,
&view->dlzdatabase);
isc_mem_free(mctx, s);
@@ -3073,6 +3082,14 @@ configure_view(dns_view_t *view, cfg_obj_t *config, cfg_obj_t *vconfig,
}
/*
+ * Ignore case when compressing responses to the specified
+ * clients. This causes case not always to be preserved,
+ * and is needed by some broken clients.
+ */
+ CHECK(configure_view_acl(vconfig, config, "no-case-compress", NULL,
+ actx, ns_g_mctx, &view->nocasecompress));
+
+ /*
* Filter setting on addresses in the answer section.
*/
CHECK(configure_view_acl(vconfig, config, "deny-answer-addresses",
@@ -3141,6 +3158,16 @@ configure_view(dns_view_t *view, cfg_obj_t *config, cfg_obj_t *vconfig,
cfg_obj_asuint32(obj),
max_clients_per_query);
+ obj = NULL;
+ result = ns_config_get(maps, "max-recursion-depth", &obj);
+ INSIST(result == ISC_R_SUCCESS);
+ dns_resolver_setmaxdepth(view->resolver, cfg_obj_asuint32(obj));
+
+ obj = NULL;
+ result = ns_config_get(maps, "max-recursion-queries", &obj);
+ INSIST(result == ISC_R_SUCCESS);
+ dns_resolver_setmaxqueries(view->resolver, cfg_obj_asuint32(obj));
+
#ifdef ALLOW_FILTER_AAAA_ON_V4
obj = NULL;
result = ns_config_get(maps, "filter-aaaa-on-v4", &obj);
@@ -3872,8 +3899,16 @@ configure_zone(const cfg_obj_t *config, const cfg_obj_t *zconfig,
(void)cfg_map_get(zoptions, "forward", &forwardtype);
(void)cfg_map_get(zoptions, "forwarders", &forwarders);
- result = configure_forward(config, view, origin, forwarders,
- forwardtype);
+ CHECK(configure_forward(config, view, origin, forwarders,
+ forwardtype));
+
+ /*
+ * Forward zones may also set delegation only.
+ */
+ only = NULL;
+ tresult = cfg_map_get(zoptions, "delegation-only", &only);
+ if (tresult == ISC_R_SUCCESS && cfg_obj_asboolean(only))
+ CHECK(dns_view_adddelegationonly(view, origin));
goto cleanup;
}
@@ -4559,6 +4594,9 @@ removed(dns_zone_t *zone, void *uap) {
case dns_zone_stub:
type = "stub";
break;
+ case dns_zone_staticstub:
+ type = "static-stub";
+ break;
case dns_zone_redirect:
type = "redirect";
break;
@@ -4654,8 +4692,8 @@ generate_session_key(const char *filename, const char *keynamestr,
(int) isc_buffer_usedlength(&key_txtbuffer),
(char*) isc_buffer_base(&key_txtbuffer));
- RUNTIME_CHECK(isc_stdio_flush(fp) == ISC_R_SUCCESS);
- RUNTIME_CHECK(isc_stdio_close(fp) == ISC_R_SUCCESS);
+ CHECK(isc_stdio_flush(fp));
+ CHECK(isc_stdio_close(fp));
dst_key_free(&key);
@@ -4668,6 +4706,11 @@ generate_session_key(const char *filename, const char *keynamestr,
NS_LOGMODULE_SERVER, ISC_LOG_ERROR,
"failed to generate session key "
"for dynamic DNS: %s", isc_result_totext(result));
+ if (fp != NULL) {
+ if (isc_file_exists(filename))
+ (void)isc_file_remove(filename);
+ (void)isc_stdio_close(fp);
+ }
if (tsigkey != NULL)
dns_tsigkey_detach(&tsigkey);
if (key != NULL)
@@ -5217,7 +5260,8 @@ load_configuration(const char *filename, ns_server_t *server,
/* check return code? */
(void)ns_listenlist_fromconfig(clistenon, config,
ns_g_aclconfctx,
- ns_g_mctx, &listenon);
+ ns_g_mctx, AF_INET,
+ &listenon);
} else if (!ns_g_lwresdonly) {
/*
* Not specified, use default.
@@ -5244,7 +5288,8 @@ load_configuration(const char *filename, ns_server_t *server,
/* check return code? */
(void)ns_listenlist_fromconfig(clistenon, config,
ns_g_aclconfctx,
- ns_g_mctx, &listenon);
+ ns_g_mctx, AF_INET6,
+ &listenon);
} else if (!ns_g_lwresdonly) {
isc_boolean_t enable;
/*
@@ -5759,7 +5804,7 @@ load_configuration(const char *filename, ns_server_t *server,
}
if (bindkeys_parser != NULL) {
- if (bindkeys != NULL)
+ if (bindkeys != NULL)
cfg_obj_destroy(bindkeys_parser, &bindkeys);
cfg_parser_destroy(&bindkeys_parser);
}
@@ -6574,6 +6619,10 @@ zone_from_args(ns_server_t *server, char *args, const char *zonetxt,
snprintf(problem, sizeof(problem),
"no matching zone '%s' in any view",
zonetxt);
+ else if (result == ISC_R_MULTIPLE)
+ snprintf(problem, sizeof(problem),
+ "zone '%s' was found in multiple views",
+ zonetxt);
} else {
result = dns_viewlist_find(&server->viewlist, viewtxt,
rdclass, &view);
@@ -6600,9 +6649,8 @@ zone_from_args(ns_server_t *server, char *args, const char *zonetxt,
isc_result_t tresult;
tresult = putstr(text, problem);
- if (tresult == ISC_R_SUCCESS &&
- isc_buffer_availablelength(text) > 0U)
- isc_buffer_putuint8(text, 0);
+ if (tresult == ISC_R_SUCCESS)
+ putnull(text);
}
cleanup:
@@ -6805,8 +6853,8 @@ ns_server_togglequerylog(ns_server_t *server, char *args) {
static isc_result_t
ns_listenlist_fromconfig(const cfg_obj_t *listenlist, const cfg_obj_t *config,
- cfg_aclconfctx_t *actx,
- isc_mem_t *mctx, ns_listenlist_t **target)
+ cfg_aclconfctx_t *actx, isc_mem_t *mctx,
+ isc_uint16_t family, ns_listenlist_t **target)
{
isc_result_t result;
const cfg_listelt_t *element;
@@ -6825,7 +6873,7 @@ ns_listenlist_fromconfig(const cfg_obj_t *listenlist, const cfg_obj_t *config,
ns_listenelt_t *delt = NULL;
const cfg_obj_t *listener = cfg_listelt_value(element);
result = ns_listenelt_fromconfig(listener, config, actx,
- mctx, &delt);
+ mctx, family, &delt);
if (result != ISC_R_SUCCESS)
goto cleanup;
ISC_LIST_APPEND(dlist->elts, delt, link);
@@ -6844,8 +6892,8 @@ ns_listenlist_fromconfig(const cfg_obj_t *listenlist, const cfg_obj_t *config,
*/
static isc_result_t
ns_listenelt_fromconfig(const cfg_obj_t *listener, const cfg_obj_t *config,
- cfg_aclconfctx_t *actx,
- isc_mem_t *mctx, ns_listenelt_t **target)
+ cfg_aclconfctx_t *actx, isc_mem_t *mctx,
+ isc_uint16_t family, ns_listenelt_t **target)
{
isc_result_t result;
const cfg_obj_t *portobj;
@@ -6876,9 +6924,9 @@ ns_listenelt_fromconfig(const cfg_obj_t *listener, const cfg_obj_t *config,
if (result != ISC_R_SUCCESS)
return (result);
- result = cfg_acl_fromconfig(cfg_tuple_get(listener, "acl"),
- config, ns_g_lctx, actx, mctx, 0,
- &delt->acl);
+ result = cfg_acl_fromconfig2(cfg_tuple_get(listener, "acl"),
+ config, ns_g_lctx, actx, mctx, 0,
+ family, &delt->acl);
if (result != ISC_R_SUCCESS) {
ns_listenelt_destroy(delt);
return (result);
@@ -8179,8 +8227,8 @@ add_comment(FILE *fp, const char *viewname) {
* Act on an "addzone" command from the command channel.
*/
isc_result_t
-ns_server_add_zone(ns_server_t *server, char *args) {
- isc_result_t result;
+ns_server_add_zone(ns_server_t *server, char *args, isc_buffer_t *text) {
+ isc_result_t result, tresult;
isc_buffer_t argbuf;
size_t arglen;
cfg_parser_t *parser = NULL;
@@ -8195,7 +8243,7 @@ ns_server_add_zone(ns_server_t *server, char *args) {
const char *argp;
const char *viewname = NULL;
dns_rdataclass_t rdclass;
- dns_view_t *view = 0;
+ dns_view_t *view = NULL;
isc_buffer_t buf;
dns_fixedname_t fname;
dns_name_t *dnsname;
@@ -8276,7 +8324,14 @@ ns_server_add_zone(ns_server_t *server, char *args) {
}
/* Open save file for write configuration */
- CHECK(isc_stdio_open(view->new_zone_file, "a", &fp));
+ result = isc_stdio_open(view->new_zone_file, "a", &fp);
+ if (result != ISC_R_SUCCESS) {
+ TCHECK(putstr(text, "unable to open '"));
+ TCHECK(putstr(text, view->new_zone_file));
+ TCHECK(putstr(text, "': "));
+ TCHECK(putstr(text, isc_result_totext(result)));
+ goto cleanup;
+ }
CHECK(isc_stdio_tell(fp, &offset));
if (offset == 0)
CHECK(add_comment(fp, view->name));
@@ -8289,8 +8344,11 @@ ns_server_add_zone(ns_server_t *server, char *args) {
server->mctx, view, cfg->actx, ISC_FALSE);
dns_view_freeze(view);
isc_task_endexclusive(server->task);
- if (result != ISC_R_SUCCESS)
+ if (result != ISC_R_SUCCESS) {
+ TCHECK(putstr(text, "configure_zone failed: "));
+ TCHECK(putstr(text, isc_result_totext(result)));
goto cleanup;
+ }
/* Is it there yet? */
CHECK(dns_zt_find(view->zonetable, dnsname, 0, NULL, &zone));
@@ -8303,6 +8361,9 @@ ns_server_add_zone(ns_server_t *server, char *args) {
if (result != ISC_R_SUCCESS) {
dns_db_t *dbp = NULL;
+ TCHECK(putstr(text, "dns_zone_loadnew failed: "));
+ TCHECK(putstr(text, isc_result_totext(result)));
+
isc_log_write(ns_g_lctx, NS_LOGCATEGORY_GENERAL,
NS_LOGMODULE_SERVER, ISC_LOG_INFO,
"addzone failed; reverting.");
@@ -8324,7 +8385,7 @@ ns_server_add_zone(ns_server_t *server, char *args) {
/* Emit the zone name, quoted and escaped */
isc_buffer_init(&buf, namebuf, sizeof(namebuf));
CHECK(dns_name_totext(dnsname, ISC_TRUE, &buf));
- isc_buffer_putuint8(&buf, 0);
+ putnull(&buf);
CHECK(isc_stdio_write("zone \"", 6, 1, fp, NULL));
CHECK(isc_stdio_write(namebuf, strlen(namebuf), 1, fp, NULL));
CHECK(isc_stdio_write("\" ", 2, 1, fp, NULL));
@@ -8360,6 +8421,8 @@ ns_server_add_zone(ns_server_t *server, char *args) {
result = ISC_R_SUCCESS;
cleanup:
+ if (isc_buffer_usedlength(text) > 0)
+ putnull(text);
if (fp != NULL)
isc_stdio_close(fp);
if (parser != NULL) {
@@ -8538,6 +8601,8 @@ ns_server_del_zone(ns_server_t *server, char *args, isc_buffer_t *text) {
result = ISC_R_SUCCESS;
cleanup:
+ if (isc_buffer_usedlength(text) > 0)
+ putnull(text);
if (ifp != NULL)
isc_stdio_close(ifp);
if (ofp != NULL) {
@@ -8667,15 +8732,15 @@ ns_server_signing(ns_server_t *server, char *args, isc_buffer_t *text) {
if (clear) {
CHECK(dns_zone_keydone(zone, keystr));
- isc_buffer_putstr(text, "request queued");
- isc_buffer_putuint8(text, 0);
+ putstr(text, "request queued");
+ putnull(text);
} else if (chain) {
CHECK(dns_zone_setnsec3param(zone, (isc_uint8_t)hash,
(isc_uint8_t)flags, iter,
(isc_uint8_t)saltlen, salt,
ISC_TRUE));
- isc_buffer_putstr(text, "request queued");
- isc_buffer_putuint8(text, 0);
+ putstr(text, "request queued");
+ putnull(text);
} else if (list) {
privatetype = dns_zone_getprivatetype(zone);
origin = dns_zone_getorigin(zone);
@@ -8687,8 +8752,8 @@ ns_server_signing(ns_server_t *server, char *args, isc_buffer_t *text) {
dns_rdatatype_none, 0,
&privset, NULL);
if (result == ISC_R_NOTFOUND) {
- isc_buffer_putstr(text, "No signing records found");
- isc_buffer_putuint8(text, 0);
+ putstr(text, "No signing records found");
+ putnull(text);
result = ISC_R_SUCCESS;
goto cleanup;
}
@@ -8707,7 +8772,7 @@ ns_server_signing(ns_server_t *server, char *args, isc_buffer_t *text) {
CHECK(dns_private_totext(&priv, &buf));
if (!first)
- isc_buffer_putstr(text, "\n");
+ putstr(text, "\n");
first = ISC_FALSE;
n = snprintf((char *)isc_buffer_used(text),
@@ -8718,8 +8783,8 @@ ns_server_signing(ns_server_t *server, char *args, isc_buffer_t *text) {
isc_buffer_add(text, (unsigned int)n);
}
- if (!first && isc_buffer_availablelength(text) > 0)
- isc_buffer_putuint8(text, 0);
+ if (!first)
+ putnull(text);
if (result == ISC_R_NOMORE)
result = ISC_R_SUCCESS;
@@ -8742,7 +8807,7 @@ ns_server_signing(ns_server_t *server, char *args, isc_buffer_t *text) {
static isc_result_t
putstr(isc_buffer_t *b, const char *str) {
- size_t l = strlen(str);
+ unsigned int l = strlen(str);
/*
* Use >= to leave space for NUL termination.
@@ -8753,3 +8818,12 @@ putstr(isc_buffer_t *b, const char *str) {
isc_buffer_putmem(b, (const unsigned char *)str, l);
return (ISC_R_SUCCESS);
}
+
+static isc_result_t
+putnull(isc_buffer_t *b) {
+ if (isc_buffer_availablelength(b) == 0)
+ return (ISC_R_NOSPACE);
+
+ isc_buffer_putuint8(b, 0);
+ return (ISC_R_SUCCESS);
+}
diff --git a/bin/named/unix/dlz_dlopen_driver.c b/bin/named/unix/dlz_dlopen_driver.c
index 2ba8a028a37a..e41cf00b77cb 100644
--- a/bin/named/unix/dlz_dlopen_driver.c
+++ b/bin/named/unix/dlz_dlopen_driver.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2011-2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2011-2014 Internet Systems Consortium, Inc. ("ISC")
*
* Permission to use, copy, modify, and/or distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
@@ -243,11 +243,13 @@ dlopen_dlz_create(const char *dlzname, unsigned int argc, char *argv[],
cd->dl_path = isc_mem_strdup(cd->mctx, argv[1]);
if (cd->dl_path == NULL) {
+ result = ISC_R_NOMEMORY;
goto failed;
}
cd->dlzname = isc_mem_strdup(cd->mctx, dlzname);
if (cd->dlzname == NULL) {
+ result = ISC_R_NOMEMORY;
goto failed;
}
@@ -277,6 +279,7 @@ dlopen_dlz_create(const char *dlzname, unsigned int argc, char *argv[],
dlopen_log(ISC_LOG_ERROR,
"dlz_dlopen failed to open library '%s' - %s",
cd->dl_path, dlerror());
+ result = ISC_R_FAILURE;
goto failed;
}
@@ -295,6 +298,7 @@ dlopen_dlz_create(const char *dlzname, unsigned int argc, char *argv[],
cd->dlz_findzonedb == NULL)
{
/* We're missing a required symbol */
+ result = ISC_R_FAILURE;
goto failed;
}
@@ -330,6 +334,7 @@ dlopen_dlz_create(const char *dlzname, unsigned int argc, char *argv[],
"dlz_dlopen: incorrect version %d "
"should be %d in '%s'",
cd->version, DLZ_DLOPEN_VERSION, cd->dl_path);
+ result = ISC_R_FAILURE;
goto failed;
}
@@ -373,7 +378,6 @@ failed:
return (result);
}
-
/*
* Called when bind is shutting down
*/
diff --git a/bin/named/unix/os.c b/bin/named/unix/os.c
index d6c82a764ad8..18e8c3910373 100644
--- a/bin/named/unix/os.c
+++ b/bin/named/unix/os.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2011, 2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2011, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2002 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -197,8 +197,8 @@ linux_setcaps(cap_t caps) {
#ifdef HAVE_LIBCAP
#define SET_CAP(flag) \
do { \
- capval = (flag); \
cap_flag_value_t curval; \
+ capval = (flag); \
err = cap_get_flag(curcaps, capval, CAP_PERMITTED, &curval); \
if (err != -1 && curval) { \
err = cap_set_flag(caps, CAP_EFFECTIVE, 1, &capval, CAP_SET); \
@@ -607,7 +607,7 @@ ns_os_changeuser(void) {
}
void
-ns_os_adjustnofile() {
+ns_os_adjustnofile(void) {
#ifdef HAVE_LINUXTHREADS
isc_result_t result;
isc_resourcevalue_t newvalue;
diff --git a/bin/named/update.c b/bin/named/update.c
index f3ad83878532..01e3c58de573 100644
--- a/bin/named/update.c
+++ b/bin/named/update.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -2887,10 +2887,18 @@ update_action(isc_task_t *task, isc_event_t *event) {
dns_diff_clear(&ctx.del_diff);
dns_diff_clear(&ctx.add_diff);
} else {
- CHECK(do_diff(&ctx.del_diff, db, ver,
- &diff));
- CHECK(do_diff(&ctx.add_diff, db, ver,
- &diff));
+ result = do_diff(&ctx.del_diff, db, ver,
+ &diff);
+ if (result == ISC_R_SUCCESS) {
+ result = do_diff(&ctx.add_diff,
+ db, ver,
+ &diff);
+ }
+ if (result != ISC_R_SUCCESS) {
+ dns_diff_clear(&ctx.del_diff);
+ dns_diff_clear(&ctx.add_diff);
+ goto failure;
+ }
CHECK(update_one_rr(db, ver, &diff,
DNS_DIFFOP_ADD,
name, ttl, &rdata));
@@ -3039,10 +3047,9 @@ update_action(isc_task_t *task, isc_event_t *event) {
#define ALLOW_SECURE_TO_INSECURE(zone) \
((dns_zone_getoptions(zone) & DNS_ZONEOPT_SECURETOINSECURE) != 0)
+ CHECK(rrset_exists(db, oldver, zonename, dns_rdatatype_dnskey,
+ 0, &had_dnskey));
if (!ALLOW_SECURE_TO_INSECURE(zone)) {
- CHECK(rrset_exists(db, oldver, zonename,
- dns_rdatatype_dnskey, 0,
- &had_dnskey));
if (had_dnskey && !has_dnskey) {
update_log(client, zone, LOGLEVEL_PROTOCOL,
"update rejected: all DNSKEY "
diff --git a/bin/named/zoneconf.c b/bin/named/zoneconf.c
index 3369c42de1f9..b3839762d336 100644
--- a/bin/named/zoneconf.c
+++ b/bin/named/zoneconf.c
@@ -1082,7 +1082,12 @@ ns_zone_configure(const cfg_obj_t *config, const cfg_obj_t *vconfig,
obj = NULL;
result = ns_config_get(maps, "also-notify", &obj);
- if (result == ISC_R_SUCCESS) {
+ if (result == ISC_R_SUCCESS &&
+ (notifytype == dns_notifytype_yes ||
+ notifytype == dns_notifytype_explicit ||
+ (notifytype == dns_notifytype_masteronly &&
+ ztype == dns_zone_master)))
+ {
isc_uint32_t addrcount;
addrs = NULL;
keynames = NULL;
diff --git a/bin/nsupdate/Makefile.in b/bin/nsupdate/Makefile.in
index 6546e9c7cc76..5dc20ad90714 100644
--- a/bin/nsupdate/Makefile.in
+++ b/bin/nsupdate/Makefile.in
@@ -30,7 +30,7 @@ DST_GSSAPI_INC = @DST_GSSAPI_INC@
CINCLUDES = ${LWRES_INCLUDES} ${DNS_INCLUDES} ${BIND9_INCLUDES} \
${ISC_INCLUDES} ${ISCCFG_INCLUDES} ${DST_GSSAPI_INC}
-CDEFINES = @USE_GSSAPI@
+CDEFINES = -DVERSION=\"${VERSION}\" @USE_GSSAPI@
CWARNINGS =
LWRESLIBS = ../../lib/lwres/liblwres.@A@
diff --git a/bin/nsupdate/nsupdate.1 b/bin/nsupdate/nsupdate.1
index 1e2dcaffbc30..c46d023e8e81 100644
--- a/bin/nsupdate/nsupdate.1
+++ b/bin/nsupdate/nsupdate.1
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004-2012, 2014 Internet Systems Consortium, Inc. ("ISC")
.\" Copyright (C) 2000-2003 Internet Software Consortium.
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
@@ -20,11 +20,11 @@
.\" Title: nsupdate
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: Aug 25, 2009
+.\" Date: April 18, 2014
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "NSUPDATE" "1" "Aug 25, 2009" "BIND9" "BIND9"
+.TH "NSUPDATE" "1" "April 18, 2014" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -33,7 +33,7 @@
nsupdate \- Dynamic DNS update utility
.SH "SYNOPSIS"
.HP 9
-\fBnsupdate\fR [\fB\-d\fR] [\fB\-D\fR] [[\fB\-g\fR] | [\fB\-o\fR] | [\fB\-l\fR] | [\fB\-y\ \fR\fB\fI[hmac:]\fR\fIkeyname:secret\fR\fR] | [\fB\-k\ \fR\fB\fIkeyfile\fR\fR]] [\fB\-t\ \fR\fB\fItimeout\fR\fR] [\fB\-u\ \fR\fB\fIudptimeout\fR\fR] [\fB\-r\ \fR\fB\fIudpretries\fR\fR] [\fB\-R\ \fR\fB\fIrandomdev\fR\fR] [\fB\-v\fR] [filename]
+\fBnsupdate\fR [\fB\-d\fR] [\fB\-D\fR] [[\fB\-g\fR] | [\fB\-o\fR] | [\fB\-l\fR] | [\fB\-y\ \fR\fB\fI[hmac:]\fR\fIkeyname:secret\fR\fR] | [\fB\-k\ \fR\fB\fIkeyfile\fR\fR]] [\fB\-t\ \fR\fB\fItimeout\fR\fR] [\fB\-u\ \fR\fB\fIudptimeout\fR\fR] [\fB\-r\ \fR\fB\fIudpretries\fR\fR] [\fB\-R\ \fR\fB\fIrandomdev\fR\fR] [\fB\-v\fR] [\fB\-V\fR] [filename]
.SH "DESCRIPTION"
.PP
\fBnsupdate\fR
@@ -97,7 +97,18 @@ option is used, a signature is generated from
\fIkeyname\fR
is the name of the key, and
\fIsecret\fR
-is the base64 encoded shared secret. Use of the
+is the base64 encoded shared secret.
+\fIhmac\fR
+is the name of the key algorithm; valid choices are
+hmac\-md5,
+hmac\-sha1,
+hmac\-sha224,
+hmac\-sha256,
+hmac\-sha384, or
+hmac\-sha512. If
+\fIhmac\fR
+is not specified, the default is
+hmac\-md5. NOTE: Use of the
\fB\-y\fR
option is discouraged because the shared secret is supplied as a command line argument in clear text. This may be visible in the output from
\fBps\fR(1)
@@ -168,6 +179,10 @@ or equivalent device, the default source of randomness is keyboard input.
specifies the name of a character device or file containing random data to be used instead of the default. The special value
\fIkeyboard\fR
indicates that keyboard input should be used. This option may be specified multiple times.
+.PP
+The \-V option causes
+\fBnsupdate\fR
+to print the version number and exit.
.SH "INPUT FORMAT"
.PP
\fBnsupdate\fR
@@ -228,12 +243,15 @@ Specify the default time to live for records to be added. The value
will clear the default ttl.
.RE
.PP
-\fBkey\fR {name} {secret}
+\fBkey\fR [hmac:] {keyname} {secret}
.RS 4
Specifies that all updates are to be TSIG\-signed using the
\fIkeyname\fR
-\fIkeysecret\fR
-pair. The
+\fIsecret\fR
+pair. If
+\fIhmac\fR
+is specified, then it sets the signing algorithm in use; the default is
+hmac\-md5. The
\fBkey\fR
command overrides any key specified on the command line via
\fB\-y\fR
@@ -358,6 +376,16 @@ Displays the answer.
Turn on debugging.
.RE
.PP
+\fBversion\fR
+.RS 4
+Print version number.
+.RE
+.PP
+\fBhelp\fR
+.RS 4
+Print a list of commands.
+.RE
+.PP
Lines beginning with a semicolon are comments and are ignored.
.SH "EXAMPLES"
.PP
@@ -435,7 +463,7 @@ RFC 2931,
.PP
The TSIG key is redundantly stored in two separate files. This is a consequence of nsupdate using the DST library for its cryptographic operations, and may change in future releases.
.SH "COPYRIGHT"
-Copyright \(co 2004\-2012 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2004\-2012, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
Copyright \(co 2000\-2003 Internet Software Consortium.
.br
diff --git a/bin/nsupdate/nsupdate.c b/bin/nsupdate/nsupdate.c
index 9923f89156be..b77938d080f7 100644
--- a/bin/nsupdate/nsupdate.c
+++ b/bin/nsupdate/nsupdate.c
@@ -118,6 +118,9 @@ extern int h_errno;
#define DNSDEFAULTPORT 53
+/* Number of addresses to request from bind9_getaddresses() */
+#define MAX_SERVERADDRS 4
+
static isc_uint16_t dnsport = DNSDEFAULTPORT;
#ifndef RESOLV_CONF
@@ -156,13 +159,11 @@ static dns_tsigkey_t *tsigkey = NULL;
static dst_key_t *sig0key = NULL;
static lwres_context_t *lwctx = NULL;
static lwres_conf_t *lwconf;
-static isc_sockaddr_t *servers;
+static isc_sockaddr_t *servers = NULL;
+static isc_boolean_t default_servers = ISC_TRUE;
static int ns_inuse = 0;
static int ns_total = 0;
-static isc_sockaddr_t *userserver = NULL;
static isc_sockaddr_t *localaddr = NULL;
-static isc_sockaddr_t *serveraddr = NULL;
-static isc_sockaddr_t tempaddr;
static const char *keyfile = NULL;
static char *keystr = NULL;
static isc_entropy_t *entropy = NULL;
@@ -713,8 +714,8 @@ static void
doshutdown(void) {
isc_task_detach(&global_task);
- if (userserver != NULL)
- isc_mem_put(mctx, userserver, sizeof(isc_sockaddr_t));
+ if (servers != NULL)
+ isc_mem_put(mctx, servers, ns_total * sizeof(isc_sockaddr_t));
if (localaddr != NULL)
isc_mem_put(mctx, localaddr, sizeof(isc_sockaddr_t));
@@ -743,8 +744,6 @@ doshutdown(void) {
lwres_conf_clear(lwctx);
lwres_context_destroy(&lwctx);
- isc_mem_put(mctx, servers, ns_total * sizeof(isc_sockaddr_t));
-
ddebug("Destroying request manager");
dns_requestmgr_detach(&requestmgr);
@@ -825,17 +824,37 @@ setup_system(void) {
(void)lwres_conf_parse(lwctx, RESOLV_CONF);
lwconf = lwres_conf_get(lwctx);
- ns_total = lwconf->nsnext;
- if (ns_total <= 0) {
- /* No name servers in resolv.conf; default to loopback. */
- struct in_addr localhost;
- ns_total = 1;
+ ns_inuse = 0;
+ if (local_only || lwconf->nsnext <= 0) {
+ struct in_addr in;
+ struct in6_addr in6;
+
+ if (local_only && keyfile == NULL)
+ keyfile = SESSION_KEYFILE;
+
+ default_servers = ISC_FALSE;
+
+ if (servers != NULL)
+ isc_mem_put(mctx, servers,
+ ns_total * sizeof(isc_sockaddr_t));
+
+ ns_total = (have_ipv4 ? 1 : 0) + (have_ipv6 ? 1 : 0);
servers = isc_mem_get(mctx, ns_total * sizeof(isc_sockaddr_t));
if (servers == NULL)
fatal("out of memory");
- localhost.s_addr = htonl(INADDR_LOOPBACK);
- isc_sockaddr_fromin(&servers[0], &localhost, dnsport);
+
+ if (have_ipv4) {
+ in.s_addr = htonl(INADDR_LOOPBACK);
+ isc_sockaddr_fromin(&servers[0], &in, dnsport);
+ }
+ if (have_ipv6) {
+ memset(&in6, 0, sizeof(in6));
+ in6.s6_addr[15] = 1;
+ isc_sockaddr_fromin6(&servers[(have_ipv4 ? 1 : 0)],
+ &in6, dnsport);
+ }
} else {
+ ns_total = lwconf->nsnext;
servers = isc_mem_get(mctx, ns_total * sizeof(isc_sockaddr_t));
if (servers == NULL)
fatal("out of memory");
@@ -845,13 +864,14 @@ setup_system(void) {
struct in_addr in4;
memmove(&in4,
lwconf->nameservers[i].address, 4);
- isc_sockaddr_fromin(&servers[i], &in4, dnsport);
+ isc_sockaddr_fromin(&servers[i],
+ &in4, dnsport);
} else {
struct in6_addr in6;
memmove(&in6,
lwconf->nameservers[i].address, 16);
- isc_sockaddr_fromin6(&servers[i], &in6,
- dnsport);
+ isc_sockaddr_fromin6(&servers[i],
+ &in6, dnsport);
}
}
}
@@ -928,20 +948,26 @@ setup_system(void) {
}
static void
-get_address(char *host, in_port_t port, isc_sockaddr_t *sockaddr) {
+get_addresses(char *host, in_port_t port,
+ isc_sockaddr_t *sockaddr, int naddrs)
+{
int count;
isc_result_t result;
isc_app_block();
- result = bind9_getaddresses(host, port, sockaddr, 1, &count);
+ result = bind9_getaddresses(host, port, sockaddr, naddrs, &count);
isc_app_unblock();
if (result != ISC_R_SUCCESS)
fatal("couldn't get address for '%s': %s",
host, isc_result_totext(result));
- INSIST(count == 1);
}
-#define PARSE_ARGS_FMT "dDML:y:ghlovk:p:r:R::t:u:"
+static void
+version(void) {
+ fputs("nsupdate " VERSION "\n", stderr);
+}
+
+#define PARSE_ARGS_FMT "dDML:y:ghlovk:p:r:R::t:u:V"
static void
pre_parse_args(int argc, char **argv) {
@@ -964,7 +990,11 @@ pre_parse_args(int argc, char **argv) {
argv[0], isc_commandline_option);
fprintf(stderr, "usage: nsupdate [-dD] [-L level] [-l]"
"[-g | -o | -y keyname:secret | -k keyfile] "
- "[-v] [filename]\n");
+ "[-v] [-V] [filename]\n");
+ exit(1);
+
+ case 'V':
+ version();
exit(1);
default:
@@ -1077,22 +1107,6 @@ parse_args(int argc, char **argv, isc_mem_t *mctx, isc_entropy_t **ectx) {
exit(1);
}
- if (local_only) {
- struct in_addr localhost;
-
- if (keyfile == NULL)
- keyfile = SESSION_KEYFILE;
-
- if (userserver == NULL) {
- userserver = isc_mem_get(mctx, sizeof(isc_sockaddr_t));
- if (userserver == NULL)
- fatal("out of memory");
- }
-
- localhost.s_addr = htonl(INADDR_LOOPBACK);
- isc_sockaddr_fromin(userserver, &localhost, dnsport);
- }
-
#ifdef GSSAPI
if (usegsstsig && (keyfile != NULL || keystr != NULL)) {
fprintf(stderr, "%s: cannot specify -g with -k or -y\n",
@@ -1382,13 +1396,18 @@ evaluate_server(char *cmdline) {
}
}
- if (userserver == NULL) {
- userserver = isc_mem_get(mctx, sizeof(isc_sockaddr_t));
- if (userserver == NULL)
- fatal("out of memory");
- }
+ if (servers != NULL)
+ isc_mem_put(mctx, servers, ns_total * sizeof(isc_sockaddr_t));
+
+ default_servers = ISC_FALSE;
+
+ ns_total = MAX_SERVERADDRS;
+ servers = isc_mem_get(mctx, ns_total * sizeof(isc_sockaddr_t));
+ if (servers == NULL)
+ fatal("out of memory");
- get_address(server, (in_port_t)port, userserver);
+ memset(servers, 0, ns_total * sizeof(isc_sockaddr_t));
+ get_addresses(server, (in_port_t)port, servers, ns_total);
return (STATUS_MORE);
}
@@ -1985,6 +2004,7 @@ do_next_command(char *cmdline) {
}
if (strcasecmp(word, "help") == 0) {
fprintf(stdout,
+"nsupdate " VERSION ":\n"
"local address [port] (set local resolver)\n"
"server address [port] (set master server for zone)\n"
"send (send the update request)\n"
@@ -2005,6 +2025,10 @@ do_next_command(char *cmdline) {
"[update] del[ete] .... (remove the given record(s) from the zone)\n");
return (STATUS_MORE);
}
+ if (strcasecmp(word, "version") == 0) {
+ fprintf(stdout, "nsupdate " VERSION "\n");
+ return (STATUS_MORE);
+ }
fprintf(stderr, "incorrect section name: %s\n", word);
return (STATUS_SYNTAX);
}
@@ -2084,12 +2108,12 @@ check_tsig_error(dns_rdataset_t *rdataset, isc_buffer_t *b) {
if (tsig.error != 0) {
if (isc_buffer_remaininglength(b) < 1)
check_result(ISC_R_NOSPACE, "isc_buffer_remaininglength");
- isc__buffer_putstr(b, "(" /*)*/);
+ isc_buffer_putstr(b, "(" /*)*/);
result = dns_tsigrcode_totext(tsig.error, b);
check_result(result, "dns_tsigrcode_totext");
if (isc_buffer_remaininglength(b) < 1)
check_result(ISC_R_NOSPACE, "isc_buffer_remaininglength");
- isc__buffer_putstr(b, /*(*/ ")");
+ isc_buffer_putstr(b, /*(*/ ")");
}
}
@@ -2226,6 +2250,19 @@ send_update(dns_name_t *zonename, isc_sockaddr_t *master,
}
static void
+next_server(const char *caller, isc_sockaddr_t *addr, isc_result_t eresult) {
+ char addrbuf[ISC_SOCKADDR_FORMATSIZE];
+
+ isc_sockaddr_format(addr, addrbuf, sizeof(addrbuf));
+ fprintf(stderr, "; Communication with %s failed: %s\n",
+ addrbuf, isc_result_totext(eresult));
+ if (++ns_inuse >= ns_total)
+ fatal("could not reach any name server");
+ else
+ ddebug("%s: trying next server", caller);
+}
+
+static void
recvsoa(isc_task_t *task, isc_event_t *event) {
dns_requestevent_t *reqev = NULL;
dns_request_t *request = NULL;
@@ -2269,15 +2306,7 @@ recvsoa(isc_task_t *task, isc_event_t *event) {
}
if (eresult != ISC_R_SUCCESS) {
- char addrbuf[ISC_SOCKADDR_FORMATSIZE];
-
- isc_sockaddr_format(addr, addrbuf, sizeof(addrbuf));
- fprintf(stderr, "; Communication with %s failed: %s\n",
- addrbuf, isc_result_totext(eresult));
- if (userserver != NULL)
- fatal("could not talk to specified name server");
- else if (++ns_inuse >= lwconf->nsnext)
- fatal("could not talk to any default name server");
+ next_server("recvsoa", addr, eresult);
ddebug("Destroying request [%p]", request);
dns_request_destroy(&request);
dns_message_renderreset(soaquery);
@@ -2299,7 +2328,7 @@ recvsoa(isc_task_t *task, isc_event_t *event) {
check_result(result, "dns_message_create");
result = dns_request_getresponse(request, rcvmsg,
DNS_MESSAGEPARSE_PRESERVEORDER);
- if (result == DNS_R_TSIGERRORSET && userserver != NULL) {
+ if (result == DNS_R_TSIGERRORSET && servers != NULL) {
dns_message_destroy(&rcvmsg);
ddebug("Destroying request [%p]", request);
dns_request_destroy(&request);
@@ -2415,9 +2444,7 @@ recvsoa(isc_task_t *task, isc_event_t *event) {
fprintf(stderr, "The master is: %s\n", namestr);
}
- if (userserver != NULL)
- serveraddr = userserver;
- else {
+ if (servers == NULL) {
char serverstr[DNS_NAME_MAXTEXT+1];
isc_buffer_t buf;
@@ -2425,8 +2452,14 @@ recvsoa(isc_task_t *task, isc_event_t *event) {
result = dns_name_totext(&master, ISC_TRUE, &buf);
check_result(result, "dns_name_totext");
serverstr[isc_buffer_usedlength(&buf)] = 0;
- get_address(serverstr, dnsport, &tempaddr);
- serveraddr = &tempaddr;
+
+ ns_total = MAX_SERVERADDRS;
+ servers = isc_mem_get(mctx, ns_total * sizeof(isc_sockaddr_t));
+ if (servers == NULL)
+ fatal("out of memory");
+
+ memset(servers, 0, ns_total * sizeof(isc_sockaddr_t));
+ get_addresses(serverstr, dnsport, servers, ns_total);
}
dns_rdata_freestruct(&soa);
@@ -2438,11 +2471,11 @@ recvsoa(isc_task_t *task, isc_event_t *event) {
dns_name_dup(&master, mctx, &restart_master);
start_gssrequest(&master);
} else {
- send_update(zonename, serveraddr, localaddr);
+ send_update(zonename, &servers[ns_inuse], localaddr);
setzoneclass(dns_rdataclass_none);
}
#else
- send_update(zonename, serveraddr, localaddr);
+ send_update(zonename, &servers[ns_inuse], localaddr);
setzoneclass(dns_rdataclass_none);
#endif
@@ -2468,10 +2501,7 @@ recvsoa(isc_task_t *task, isc_event_t *event) {
dns_request_destroy(&request);
dns_message_renderreset(soaquery);
dns_message_settsigkey(soaquery, NULL);
- if (userserver != NULL)
- sendrequest(localaddr, userserver, soaquery, &request);
- else
- sendrequest(localaddr, &servers[ns_inuse], soaquery, &request);
+ sendrequest(localaddr, &servers[ns_inuse], soaquery, &request);
goto out;
}
@@ -2488,7 +2518,7 @@ sendrequest(isc_sockaddr_t *srcaddr, isc_sockaddr_t *destaddr,
reqinfo->msg = msg;
reqinfo->addr = destaddr;
result = dns_request_createvia3(requestmgr, msg, srcaddr, destaddr, 0,
- (userserver != NULL) ? tsigkey : NULL,
+ default_servers ? NULL : tsigkey,
FIND_TIMEOUT * 20, FIND_TIMEOUT, 3,
global_task, recvsoa, reqinfo, request);
check_result(result, "dns_request_createvia");
@@ -2580,10 +2610,10 @@ start_gssrequest(dns_name_t *master) {
if (kserver == NULL)
fatal("out of memory");
}
- if (userserver == NULL)
- get_address(namestr, dnsport, kserver);
+ if (servers == NULL)
+ get_addresses(namestr, dnsport, kserver, 1);
else
- (void)memmove(kserver, userserver, sizeof(isc_sockaddr_t));
+ memmove(kserver, &servers[ns_inuse], sizeof(isc_sockaddr_t));
dns_fixedname_init(&fname);
servname = dns_fixedname_name(&fname);
@@ -2712,20 +2742,11 @@ recvgss(isc_task_t *task, isc_event_t *event) {
}
if (eresult != ISC_R_SUCCESS) {
- char addrbuf[ISC_SOCKADDR_FORMATSIZE];
-
- isc_sockaddr_format(addr, addrbuf, sizeof(addrbuf));
- fprintf(stderr, "; Communication with %s failed: %s\n",
- addrbuf, isc_result_totext(eresult));
- if (userserver != NULL)
- fatal("could not talk to specified name server");
- else if (++ns_inuse >= lwconf->nsnext)
- fatal("could not talk to any default name server");
+ next_server("recvgss", addr, eresult);
ddebug("Destroying request [%p]", request);
dns_request_destroy(&request);
dns_message_renderreset(tsigquery);
- sendrequest(localaddr, &servers[ns_inuse], tsigquery,
- &request);
+ sendrequest(localaddr, &servers[ns_inuse], tsigquery, &request);
isc_mem_put(mctx, reqinfo, sizeof(nsu_gssinfo_t));
isc_event_free(&event);
return;
@@ -2813,7 +2834,7 @@ recvgss(isc_task_t *task, isc_event_t *event) {
check_result(result, "dns_message_checksig");
#endif /* 0 */
- send_update(&tmpzonename, serveraddr, localaddr);
+ send_update(&tmpzonename, &servers[ns_inuse], localaddr);
setzoneclass(dns_rdataclass_none);
break;
@@ -2847,8 +2868,8 @@ start_update(void) {
if (answer != NULL)
dns_message_destroy(&answer);
- if (userzone != NULL && userserver != NULL && ! usegsstsig) {
- send_update(userzone, userserver, localaddr);
+ if (userzone != NULL && ! usegsstsig) {
+ send_update(userzone, &servers[ns_inuse], localaddr);
setzoneclass(dns_rdataclass_none);
return;
}
@@ -2857,7 +2878,7 @@ start_update(void) {
&soaquery);
check_result(result, "dns_message_create");
- if (userserver == NULL)
+ if (default_servers)
soaquery->flags |= DNS_MESSAGEFLAG_RD;
result = dns_message_gettempname(soaquery, &name);
@@ -2909,12 +2930,8 @@ start_update(void) {
ISC_LIST_APPEND(name->list, rdataset, link);
dns_message_addname(soaquery, name, DNS_SECTION_QUESTION);
- if (userserver != NULL)
- sendrequest(localaddr, userserver, soaquery, &request);
- else {
- ns_inuse = 0;
- sendrequest(localaddr, &servers[ns_inuse], soaquery, &request);
- }
+ ns_inuse = 0;
+ sendrequest(localaddr, &servers[ns_inuse], soaquery, &request);
}
static void
diff --git a/bin/nsupdate/nsupdate.docbook b/bin/nsupdate/nsupdate.docbook
index c54211cc87a1..e0f53e2a24c9 100644
--- a/bin/nsupdate/nsupdate.docbook
+++ b/bin/nsupdate/nsupdate.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2012, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -18,10 +18,9 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id$ -->
<refentry id="man.nsupdate">
<refentryinfo>
- <date>Aug 25, 2009</date>
+ <date>April 18, 2014</date>
</refentryinfo>
<refmeta>
<refentrytitle><application>nsupdate</application></refentrytitle>
@@ -44,6 +43,7 @@
<year>2010</year>
<year>2011</year>
<year>2012</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
@@ -72,6 +72,7 @@
<arg><option>-r <replaceable class="parameter">udpretries</replaceable></option></arg>
<arg><option>-R <replaceable class="parameter">randomdev</replaceable></option></arg>
<arg><option>-v</option></arg>
+ <arg><option>-V</option></arg>
<arg>filename</arg>
</cmdsynopsis>
</refsynopsisdiv>
@@ -158,7 +159,13 @@
<optional><parameter>hmac:</parameter></optional><parameter>keyname:secret.</parameter>
<parameter>keyname</parameter> is the name of the key, and
<parameter>secret</parameter> is the base64 encoded shared secret.
- Use of the <option>-y</option> option is discouraged because the
+ <parameter>hmac</parameter> is the name of the key algorithm;
+ valid choices are <literal>hmac-md5</literal>,
+ <literal>hmac-sha1</literal>, <literal>hmac-sha224</literal>,
+ <literal>hmac-sha256</literal>, <literal>hmac-sha384</literal>, or
+ <literal>hmac-sha512</literal>. If <parameter>hmac</parameter>
+ is not specified, the default is <literal>hmac-md5</literal>.
+ NOTE: Use of the <option>-y</option> option is discouraged because the
shared secret is supplied as a command line argument in clear text.
This may be visible in the output from
<citerefentry>
@@ -238,6 +245,10 @@
<filename>keyboard</filename> indicates that keyboard input
should be used. This option may be specified multiple times.
</para>
+ <para>
+ The -V option causes <command>nsupdate</command> to print the
+ version number and exit.
+ </para>
</refsect1>
<refsect1>
@@ -371,15 +382,17 @@
<varlistentry>
<term>
<command>key</command>
- <arg choice="req">name</arg>
+ <arg choice="opt">hmac:</arg><arg choice="req">keyname</arg>
<arg choice="req">secret</arg>
</term>
<listitem>
<para>
Specifies that all updates are to be TSIG-signed using the
- <parameter>keyname</parameter> <parameter>keysecret</parameter> pair.
- The <command>key</command> command
- overrides any key specified on the command line via
+ <parameter>keyname</parameter> <parameter>secret</parameter> pair.
+ If <parameter>hmac</parameter> is specified, then it sets the
+ signing algorithm in use; the default is
+ <literal>hmac-md5</literal>. The <command>key</command>
+ command overrides any key specified on the command line via
<option>-y</option> or <option>-k</option>.
</para>
</listitem>
@@ -623,6 +636,28 @@
</listitem>
</varlistentry>
+ <varlistentry>
+ <term>
+ <command>version</command>
+ </term>
+ <listitem>
+ <para>
+ Print version number.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term>
+ <command>help</command>
+ </term>
+ <listitem>
+ <para>
+ Print a list of commands.
+ </para>
+ </listitem>
+ </varlistentry>
+
</variablelist>
</para>
diff --git a/bin/nsupdate/nsupdate.html b/bin/nsupdate/nsupdate.html
index 276d4af6fbe1..2e71ec1b1a47 100644
--- a/bin/nsupdate/nsupdate.html
+++ b/bin/nsupdate/nsupdate.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2012, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -29,10 +29,10 @@
</div>
<div class="refsynopsisdiv">
<h2>Synopsis</h2>
-<div class="cmdsynopsis"><p><code class="command">nsupdate</code> [<code class="option">-d</code>] [<code class="option">-D</code>] [[<code class="option">-g</code>] | [<code class="option">-o</code>] | [<code class="option">-l</code>] | [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]keyname:secret</code></em></code>] | [<code class="option">-k <em class="replaceable"><code>keyfile</code></em></code>]] [<code class="option">-t <em class="replaceable"><code>timeout</code></em></code>] [<code class="option">-u <em class="replaceable"><code>udptimeout</code></em></code>] [<code class="option">-r <em class="replaceable"><code>udpretries</code></em></code>] [<code class="option">-R <em class="replaceable"><code>randomdev</code></em></code>] [<code class="option">-v</code>] [filename]</p></div>
+<div class="cmdsynopsis"><p><code class="command">nsupdate</code> [<code class="option">-d</code>] [<code class="option">-D</code>] [[<code class="option">-g</code>] | [<code class="option">-o</code>] | [<code class="option">-l</code>] | [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]keyname:secret</code></em></code>] | [<code class="option">-k <em class="replaceable"><code>keyfile</code></em></code>]] [<code class="option">-t <em class="replaceable"><code>timeout</code></em></code>] [<code class="option">-u <em class="replaceable"><code>udptimeout</code></em></code>] [<code class="option">-r <em class="replaceable"><code>udpretries</code></em></code>] [<code class="option">-R <em class="replaceable"><code>randomdev</code></em></code>] [<code class="option">-v</code>] [<code class="option">-V</code>] [filename]</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543464"></a><h2>DESCRIPTION</h2>
+<a name="id2543479"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">nsupdate</strong></span>
is used to submit Dynamic DNS Update requests as defined in RFC 2136
to a name server.
@@ -113,7 +113,13 @@
[<span class="optional"><em class="parameter"><code>hmac:</code></em></span>]<em class="parameter"><code>keyname:secret.</code></em>
<em class="parameter"><code>keyname</code></em> is the name of the key, and
<em class="parameter"><code>secret</code></em> is the base64 encoded shared secret.
- Use of the <code class="option">-y</code> option is discouraged because the
+ <em class="parameter"><code>hmac</code></em> is the name of the key algorithm;
+ valid choices are <code class="literal">hmac-md5</code>,
+ <code class="literal">hmac-sha1</code>, <code class="literal">hmac-sha224</code>,
+ <code class="literal">hmac-sha256</code>, <code class="literal">hmac-sha384</code>, or
+ <code class="literal">hmac-sha512</code>. If <em class="parameter"><code>hmac</code></em>
+ is not specified, the default is <code class="literal">hmac-md5</code>.
+ NOTE: Use of the <code class="option">-y</code> option is discouraged because the
shared secret is supplied as a command line argument in clear text.
This may be visible in the output from
<span class="citerefentry"><span class="refentrytitle">ps</span>(1)</span>
@@ -190,9 +196,13 @@
<code class="filename">keyboard</code> indicates that keyboard input
should be used. This option may be specified multiple times.
</p>
+<p>
+ The -V option causes <span><strong class="command">nsupdate</strong></span> to print the
+ version number and exit.
+ </p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543796"></a><h2>INPUT FORMAT</h2>
+<a name="id2543849"></a><h2>INPUT FORMAT</h2>
<p><span><strong class="command">nsupdate</strong></span>
reads input from
<em class="parameter"><code>filename</code></em>
@@ -296,14 +306,16 @@
</p></dd>
<dt><span class="term">
<span><strong class="command">key</strong></span>
- {name}
+ [hmac:] {keyname}
{secret}
</span></dt>
<dd><p>
Specifies that all updates are to be TSIG-signed using the
- <em class="parameter"><code>keyname</code></em> <em class="parameter"><code>keysecret</code></em> pair.
- The <span><strong class="command">key</strong></span> command
- overrides any key specified on the command line via
+ <em class="parameter"><code>keyname</code></em> <em class="parameter"><code>secret</code></em> pair.
+ If <em class="parameter"><code>hmac</code></em> is specified, then it sets the
+ signing algorithm in use; the default is
+ <code class="literal">hmac-md5</code>. The <span><strong class="command">key</strong></span>
+ command overrides any key specified on the command line via
<code class="option">-y</code> or <code class="option">-k</code>.
</p></dd>
<dt><span class="term">
@@ -472,6 +484,18 @@
<dd><p>
Turn on debugging.
</p></dd>
+<dt><span class="term">
+ <span><strong class="command">version</strong></span>
+ </span></dt>
+<dd><p>
+ Print version number.
+ </p></dd>
+<dt><span class="term">
+ <span><strong class="command">help</strong></span>
+ </span></dt>
+<dd><p>
+ Print a list of commands.
+ </p></dd>
</dl></div>
<p>
</p>
@@ -480,7 +504,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2544725"></a><h2>EXAMPLES</h2>
+<a name="id2544823"></a><h2>EXAMPLES</h2>
<p>
The examples below show how
<span><strong class="command">nsupdate</strong></span>
@@ -534,7 +558,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2544769"></a><h2>FILES</h2>
+<a name="id2544867"></a><h2>FILES</h2>
<div class="variablelist"><dl>
<dt><span class="term"><code class="constant">/etc/resolv.conf</code></span></dt>
<dd><p>
@@ -557,7 +581,7 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2542121"></a><h2>SEE ALSO</h2>
+<a name="id2544950"></a><h2>SEE ALSO</h2>
<p>
<em class="citetitle">RFC 2136</em>,
<em class="citetitle">RFC 3007</em>,
@@ -572,7 +596,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2542179"></a><h2>BUGS</h2>
+<a name="id2542004"></a><h2>BUGS</h2>
<p>
The TSIG key is redundantly stored in two separate files.
This is a consequence of nsupdate using the DST library
diff --git a/bin/rndc/rndc.8 b/bin/rndc/rndc.8
index 9c87c68a7578..27887cf08192 100644
--- a/bin/rndc/rndc.8
+++ b/bin/rndc/rndc.8
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2004, 2005, 2007, 2013 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004, 2005, 2007, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
.\" Copyright (C) 2000, 2001 Internet Software Consortium.
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
@@ -20,11 +20,11 @@
.\" Title: rndc
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: June 7, 2013
+.\" Date: December 04, 2013
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "RNDC" "8" "June 7, 2013" "BIND9" "BIND9"
+.TH "RNDC" "8" "December 04, 2013" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -364,7 +364,7 @@ can be deleted in this manner.
.PP
\fBsigning \fR\fB[( \-list | \-clear \fIkeyid/algorithm\fR | \-clear all | \-nsec3param ( \fIparameters\fR | none ) ) ]\fR\fB \fR\fB\fIzone\fR\fR\fB \fR\fB[\fIclass\fR [\fIview\fR]]\fR\fB \fR
.RS 4
-List, edit, or remove the DNSSEC signing state for the specified zone. The status of ongoing DNSSEC operations (such as signing or generating NSEC3 chains) is stored in the zone in the form of DNS resource records of type
+List, edit, or remove the DNSSEC signing state records for the specified zone. The status of ongoing DNSSEC operations (such as signing or generating NSEC3 chains) is stored in the zone in the form of DNS resource records of type
\fBsig\-signing\-type\fR.
\fBrndc signing \-list\fR
converts these records into a human\-readable form, indicating which keys are currently signing or have finished signing the zone, and which NSEC3 chains are being created or removed.
@@ -417,7 +417,7 @@ BIND 9 Administrator Reference Manual.
.PP
Internet Systems Consortium
.SH "COPYRIGHT"
-Copyright \(co 2004, 2005, 2007, 2013 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2004, 2005, 2007, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
Copyright \(co 2000, 2001 Internet Software Consortium.
.br
diff --git a/bin/rndc/rndc.c b/bin/rndc/rndc.c
index 33802db2aa40..edb3a3110904 100644
--- a/bin/rndc/rndc.c
+++ b/bin/rndc/rndc.c
@@ -15,8 +15,6 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
-/* $Id$ */
-
/*! \file */
/*
@@ -101,82 +99,80 @@ Usage: %s [-b address] [-c config] [-s server] [-p port]\n\
\n\
command is one of the following:\n\
\n\
- reload Reload configuration file and zones.\n\
- reload zone [class [view]]\n\
- Reload a single zone.\n\
- refresh zone [class [view]]\n\
- Schedule immediate maintenance for a zone.\n\
- retransfer zone [class [view]]\n\
- Retransfer a single zone without checking serial number.\n\
+ addzone zone [class [view]] { zone-options }\n\
+ Add zone to given view. Requires new-zone-file option.\n\
+ delzone zone [class [view]]\n\
+ Removes zone from given view. Requires new-zone-file option.\n\
+ dumpdb [-all|-cache|-zones] [view ...]\n\
+ Dump cache(s) to the dump file (named_dump.db).\n\
+ flush Flushes all of the server's caches.\n\
+ flush [view] Flushes the server's cache for a view.\n\
+ flushname name [view]\n\
+ Flush the given name from the server's cache(s)\n\
+ flushtree name [view]\n\
+ Flush all names under the given name from the server's cache(s)\n\
freeze Suspend updates to all dynamic zones.\n\
freeze zone [class [view]]\n\
Suspend updates to a dynamic zone.\n\
- thaw Enable updates to all dynamic zones and reload them.\n\
- thaw zone [class [view]]\n\
- Enable updates to a frozen dynamic zone and reload it.\n\
- sync [-clean] Dump changes to all dynamic zones to disk, and optionally\n\
- remove their journal files.\n\
- sync [-clean] zone [class [view]]\n\
- Dump a single zone's changes to disk, and optionally\n\
- remove its journal file.\n\
- notify zone [class [view]]\n\
- Resend NOTIFY messages for the zone.\n\
- reconfig Reload configuration file and new zones only.\n\
- sign zone [class [view]]\n\
- Update zone keys, and sign as needed.\n\
+ halt Stop the server without saving pending updates.\n\
+ halt -p Stop the server without saving pending updates reporting\n\
+ process id.\n\
loadkeys zone [class [view]]\n\
Update keys without signing immediately.\n\
- stats Write server statistics to the statistics file.\n\
+ notify zone [class [view]]\n\
+ Resend NOTIFY messages for the zone.\n\
+ notrace Set debugging level to 0.\n\
querylog newstate\n\
Enable / disable query logging.\n\
- dumpdb [-all|-cache|-zones] [view ...]\n\
- Dump cache(s) to the dump file (named_dump.db).\n\
+ reconfig Reload configuration file and new zones only.\n\
+ recursing Dump the queries that are currently recursing (named.recursing)\n\
+ refresh zone [class [view]]\n\
+ Schedule immediate maintenance for a zone.\n\
+ reload Reload configuration file and zones.\n\
+ reload zone [class [view]]\n\
+ Reload a single zone.\n\
+ retransfer zone [class [view]]\n\
+ Retransfer a single zone without checking serial number.\n\
secroots [view ...]\n\
Write security roots to the secroots file.\n\
+ sign zone [class [view]]\n\
+ Update zone keys, and sign as needed.\n\
+ signing -clear all zone [class [view]]\n\
+ Remove the private records for all keys that have\n\
+ finished signing the given zone.\n\
+ signing -clear <keyid>/<algorithm> zone [class [view]]\n\
+ Remove the private record that indicating the given key\n\
+ has finished signing the given zone.\n\
+ signing -list zone [class [view]]\n\
+ List the private records showing the state of DNSSEC\n\
+ signing in the given zone.\n\
+ signing -nsec3param hash flags iterations salt zone [class [view]]\n\
+ Add NSEC3 chain to zone if already signed.\n\
+ Prime zone with NSEC3 chain if not yet signed.\n\
+ signing -nsec3param none zone [class [view]]\n\
+ Remove NSEC3 chains from zone.\n\
+ stats Write server statistics to the statistics file.\n\
+ status Display status of the server.\n\
stop Save pending updates to master files and stop the server.\n\
stop -p Save pending updates to master files and stop the server\n\
reporting process id.\n\
- halt Stop the server without saving pending updates.\n\
- halt -p Stop the server without saving pending updates reporting\n\
- process id.\n\
+ sync [-clean] Dump changes to all dynamic zones to disk, and optionally\n\
+ remove their journal files.\n\
+ sync [-clean] zone [class [view]]\n\
+ Dump a single zone's changes to disk, and optionally\n\
+ remove its journal file.\n\
+ thaw Enable updates to all dynamic zones and reload them.\n\
+ thaw zone [class [view]]\n\
+ Enable updates to a frozen dynamic zone and reload it.\n\
trace Increment debugging level by one.\n\
trace level Change the debugging level.\n\
- notrace Set debugging level to 0.\n\
- flush Flushes all of the server's caches.\n\
- flush [view] Flushes the server's cache for a view.\n\
- flushname name [view]\n\
- Flush the given name from the server's cache(s)\n\
- flushtree name [view]\n\
- Flush all names under the given name from the server's cache(s)\n\
- status Display status of the server.\n\
- recursing Dump the queries that are currently recursing (named.recursing)\n\
+ tsig-delete keyname [view]\n\
+ Delete a TKEY-negotiated TSIG key.\n\
tsig-list List all currently active TSIG keys, including both statically\n\
configured and TKEY-negotiated keys.\n\
- tsig-delete keyname [view] \n\
- Delete a TKEY-negotiated TSIG key.\n\
validation newstate [view]\n\
Enable / disable DNSSEC validation.\n\
- addzone [\"file\"] zone [class [view]] { zone-options }\n\
- Add zone to given view. Requires new-zone-file option.\n\
- delzone [\"file\"] zone [class [view]]\n\
- Removes zone from given view. Requires new-zone-file option.\n\
- signing -list zone [class [view]]\n\
- List the private records showing the state of DNSSEC\n\
- signing in the given zone.\n\
- signing -clear <keyid>/<algorithm> zone [class [view]]\n\
- Remove the private record that indicating the given key\n\
- has finished signing the given zone.\n\
- signing -clear all zone [class [view]]\n\
- Remove the private records for all keys that have\n\
- finished signing the given zone.\n\
- signing -nsec3param none zone [class [view]]\n\
- Remove NSEC3 chains from zone.\n\
- signing -nsec3param hash flags iterations salt zone [class [view]]\n\
- Add NSEC3 chain to zone if already signed.\n\
- Prime zone with NSEC3 chain if not yet signed.\n\
- *restart Restart the server.\n\
\n\
-* == not yet implemented\n\
Version: %s\n",
progname, version);
diff --git a/bin/rndc/rndc.conf.5 b/bin/rndc/rndc.conf.5
index 694a4815dac6..ce7b09930e96 100644
--- a/bin/rndc/rndc.conf.5
+++ b/bin/rndc/rndc.conf.5
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.\" Copyright (C) 2000, 2001 Internet Software Consortium.
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
@@ -20,11 +20,11 @@
.\" Title: \fIrndc.conf\fR
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: June 30, 2000
+.\" Date: June 18, 2007
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "\fIRNDC.CONF\fR" "5" "June 30, 2000" "BIND9" "BIND9"
+.TH "\fIRNDC.CONF\fR" "5" "June 18, 2007" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -208,7 +208,7 @@ BIND 9 Administrator Reference Manual.
.PP
Internet Systems Consortium
.SH "COPYRIGHT"
-Copyright \(co 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
Copyright \(co 2000, 2001 Internet Software Consortium.
.br
diff --git a/bin/rndc/rndc.conf.docbook b/bin/rndc/rndc.conf.docbook
index 9de1995467fd..8dcdef819718 100644
--- a/bin/rndc/rndc.conf.docbook
+++ b/bin/rndc/rndc.conf.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -18,10 +18,9 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: rndc.conf.docbook,v 1.17 2007/06/18 23:47:25 tbox Exp $ -->
<refentry id="man.rndc.conf">
<refentryinfo>
- <date>June 30, 2000</date>
+ <date>June 18, 2007</date>
</refentryinfo>
<refmeta>
@@ -40,6 +39,7 @@
<year>2004</year>
<year>2005</year>
<year>2007</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
diff --git a/bin/rndc/rndc.conf.html b/bin/rndc/rndc.conf.html
index b0f904b2ab37..5b33584b9848 100644
--- a/bin/rndc/rndc.conf.html
+++ b/bin/rndc/rndc.conf.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -32,7 +32,7 @@
<div class="cmdsynopsis"><p><code class="command">rndc.conf</code> </p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543354"></a><h2>DESCRIPTION</h2>
+<a name="id2543364"></a><h2>DESCRIPTION</h2>
<p><code class="filename">rndc.conf</code> is the configuration file
for <span><strong class="command">rndc</strong></span>, the BIND 9 name server control
utility. This file has a similar structure and syntax to
@@ -117,7 +117,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543502"></a><h2>EXAMPLE</h2>
+<a name="id2543512"></a><h2>EXAMPLE</h2>
<pre class="programlisting">
options {
default-server localhost;
@@ -191,7 +191,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543594"></a><h2>NAME SERVER CONFIGURATION</h2>
+<a name="id2543604"></a><h2>NAME SERVER CONFIGURATION</h2>
<p>
The name server must be configured to accept rndc connections and
to recognize the key specified in the <code class="filename">rndc.conf</code>
@@ -201,7 +201,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543616"></a><h2>SEE ALSO</h2>
+<a name="id2543625"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">rndc-confgen</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">mmencode</span>(1)</span>,
@@ -209,7 +209,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543654"></a><h2>AUTHOR</h2>
+<a name="id2543664"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
diff --git a/bin/rndc/rndc.docbook b/bin/rndc/rndc.docbook
index 2b91d2d57acc..5de34d27a3b8 100644
--- a/bin/rndc/rndc.docbook
+++ b/bin/rndc/rndc.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2004, 2005, 2007, 2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -18,10 +18,9 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: rndc.docbook,v 1.21 2007/12/14 20:39:14 marka Exp $ -->
<refentry id="man.rndc">
<refentryinfo>
- <date>June 7, 2013</date>
+ <date>December 04, 2013</date>
</refentryinfo>
<refmeta>
@@ -41,6 +40,7 @@
<year>2005</year>
<year>2007</year>
<year>2013</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
@@ -632,8 +632,8 @@
<term><userinput>signing <optional>( -list | -clear <replaceable>keyid/algorithm</replaceable> | -clear <literal>all</literal> | -nsec3param ( <replaceable>parameters</replaceable> | <literal>none</literal> ) ) </optional> <replaceable>zone</replaceable> <optional><replaceable>class</replaceable> <optional><replaceable>view</replaceable></optional></optional> </userinput></term>
<listitem>
<para>
- List, edit, or remove the DNSSEC signing state for
- the specified zone. The status of ongoing DNSSEC
+ List, edit, or remove the DNSSEC signing state records
+ for the specified zone. The status of ongoing DNSSEC
operations (such as signing or generating
NSEC3 chains) is stored in the zone in the form
of DNS resource records of type
diff --git a/bin/rndc/rndc.html b/bin/rndc/rndc.html
index 34972772fe5a..0e74ea3531ed 100644
--- a/bin/rndc/rndc.html
+++ b/bin/rndc/rndc.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004, 2005, 2007, 2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -32,7 +32,7 @@
<div class="cmdsynopsis"><p><code class="command">rndc</code> [<code class="option">-b <em class="replaceable"><code>source-address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-k <em class="replaceable"><code>key-file</code></em></code>] [<code class="option">-s <em class="replaceable"><code>server</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-V</code>] [<code class="option">-y <em class="replaceable"><code>key_id</code></em></code>] {command}</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543418"></a><h2>DESCRIPTION</h2>
+<a name="id2543428"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">rndc</strong></span>
controls the operation of a name
server. It supersedes the <span><strong class="command">ndc</strong></span> utility
@@ -61,7 +61,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543453"></a><h2>OPTIONS</h2>
+<a name="id2543463"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-b <em class="replaceable"><code>source-address</code></em></span></dt>
<dd><p>
@@ -127,7 +127,7 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543650"></a><h2>COMMANDS</h2>
+<a name="id2543659"></a><h2>COMMANDS</h2>
<p>
A list of commands supported by <span><strong class="command">rndc</strong></span> can
be seen by running <span><strong class="command">rndc</strong></span> without arguments.
@@ -419,8 +419,8 @@
<dt><span class="term"><strong class="userinput"><code>signing [<span class="optional">( -list | -clear <em class="replaceable"><code>keyid/algorithm</code></em> | -clear <code class="literal">all</code> | -nsec3param ( <em class="replaceable"><code>parameters</code></em> | <code class="literal">none</code> ) ) </span>] <em class="replaceable"><code>zone</code></em> [<span class="optional"><em class="replaceable"><code>class</code></em> [<span class="optional"><em class="replaceable"><code>view</code></em></span>]</span>] </code></strong></span></dt>
<dd>
<p>
- List, edit, or remove the DNSSEC signing state for
- the specified zone. The status of ongoing DNSSEC
+ List, edit, or remove the DNSSEC signing state records
+ for the specified zone. The status of ongoing DNSSEC
operations (such as signing or generating
NSEC3 chains) is stored in the zone in the form
of DNS resource records of type
@@ -480,7 +480,7 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2544843"></a><h2>LIMITATIONS</h2>
+<a name="id2541986"></a><h2>LIMITATIONS</h2>
<p>
There is currently no way to provide the shared secret for a
<code class="option">key_id</code> without using the configuration file.
@@ -490,7 +490,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2542131"></a><h2>SEE ALSO</h2>
+<a name="id2542004"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">rndc.conf</span>(5)</span>,
<span class="citerefentry"><span class="refentrytitle">rndc-confgen</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
@@ -500,7 +500,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2545190"></a><h2>AUTHOR</h2>
+<a name="id2545200"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
diff --git a/bin/tools/arpaname.1 b/bin/tools/arpaname.1
index 5b582514224f..d8a43171f502 100644
--- a/bin/tools/arpaname.1
+++ b/bin/tools/arpaname.1
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
.\" purpose with or without fee is hereby granted, provided that the above
@@ -19,11 +19,11 @@
.\" Title: arpaname
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: March 4, 2009
+.\" Date: March 03, 2009
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "ARPANAME" "1" "March 4, 2009" "BIND9" "BIND9"
+.TH "ARPANAME" "1" "March 03, 2009" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -44,5 +44,5 @@ BIND 9 Administrator Reference Manual.
.PP
Internet Systems Consortium
.SH "COPYRIGHT"
-Copyright \(co 2009 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
diff --git a/bin/tools/arpaname.docbook b/bin/tools/arpaname.docbook
index 6fb3ca29e5a2..04fd54aec593 100644
--- a/bin/tools/arpaname.docbook
+++ b/bin/tools/arpaname.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
-
- Permission to use, copy, modify, and/or distribute this software for any
- purpose with or without fee is hereby granted, provided that the above
@@ -17,10 +17,9 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: arpaname.docbook,v 1.1 2009/03/04 01:30:27 marka Exp $ -->
<refentry id="man.arpaname">
<refentryinfo>
- <date>March 4, 2009</date>
+ <date>March 03, 2009</date>
</refentryinfo>
<refmeta>
@@ -37,6 +36,7 @@
<docinfo>
<copyright>
<year>2009</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
</docinfo>
diff --git a/bin/tools/arpaname.html b/bin/tools/arpaname.html
index 92f46b4f71f6..29ea03b51399 100644
--- a/bin/tools/arpaname.html
+++ b/bin/tools/arpaname.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
-
- Permission to use, copy, modify, and/or distribute this software for any
- purpose with or without fee is hereby granted, provided that the above
@@ -31,20 +31,20 @@
<div class="cmdsynopsis"><p><code class="command">arpaname</code> {<em class="replaceable"><code>ipaddress </code></em>...}</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543347"></a><h2>DESCRIPTION</h2>
+<a name="id2543356"></a><h2>DESCRIPTION</h2>
<p>
<span><strong class="command">arpaname</strong></span> translates IP addresses (IPv4 and
IPv6) to the corresponding IN-ADDR.ARPA or IP6.ARPA names.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543360"></a><h2>SEE ALSO</h2>
+<a name="id2543369"></a><h2>SEE ALSO</h2>
<p>
<em class="citetitle">BIND 9 Administrator Reference Manual</em>.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543373"></a><h2>AUTHOR</h2>
+<a name="id2543383"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
diff --git a/bin/tools/genrandom.8 b/bin/tools/genrandom.8
index fd9ebf46eb80..30d50d7eaabc 100644
--- a/bin/tools/genrandom.8
+++ b/bin/tools/genrandom.8
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2009-2011 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2009-2011, 2014 Internet Systems Consortium, Inc. ("ISC")
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
.\" purpose with or without fee is hereby granted, provided that the above
@@ -19,11 +19,11 @@
.\" Title: genrandom
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: Feb 19, 2009
+.\" Date: August 08, 2011
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "GENRANDOM" "8" "Feb 19, 2009" "BIND9" "BIND9"
+.TH "GENRANDOM" "8" "August 08, 2011" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -65,5 +65,5 @@ The file name into which random data should be written.
.PP
Internet Systems Consortium
.SH "COPYRIGHT"
-Copyright \(co 2009\-2011 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2009\-2011, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
diff --git a/bin/tools/genrandom.c b/bin/tools/genrandom.c
index 0d7eb726d6de..7a6c64153ee7 100644
--- a/bin/tools/genrandom.c
+++ b/bin/tools/genrandom.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004, 2005, 2007, 2009, 2010, 2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004, 2005, 2007, 2009, 2010, 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 2000-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -120,7 +120,9 @@ main(int argc, char **argv) {
return (0);
}
- len = strlen(argv[isc_commandline_index]) + 2;
+ len = strlen(argv[isc_commandline_index]);
+ INSIST((len + 2) > len);
+ len += 2;
name = (char *) malloc(len);
if (name == NULL) {
perror("malloc");
diff --git a/bin/tools/genrandom.docbook b/bin/tools/genrandom.docbook
index 33d5cf71d815..ecc206a5496c 100644
--- a/bin/tools/genrandom.docbook
+++ b/bin/tools/genrandom.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2009-2011 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2009-2011, 2014 Internet Systems Consortium, Inc. ("ISC")
-
- Permission to use, copy, modify, and/or distribute this software for any
- purpose with or without fee is hereby granted, provided that the above
@@ -17,10 +17,9 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: genrandom.docbook,v 1.8 2011/08/08 23:46:41 tbox Exp $ -->
<refentry id="man.genrandom">
<refentryinfo>
- <date>Feb 19, 2009</date>
+ <date>August 08, 2011</date>
</refentryinfo>
<refmeta>
@@ -39,6 +38,7 @@
<year>2009</year>
<year>2010</year>
<year>2011</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
</docinfo>
diff --git a/bin/tools/genrandom.html b/bin/tools/genrandom.html
index 6b7043407973..e125a0120889 100644
--- a/bin/tools/genrandom.html
+++ b/bin/tools/genrandom.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2009-2011 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2009-2011, 2014 Internet Systems Consortium, Inc. ("ISC")
-
- Permission to use, copy, modify, and/or distribute this software for any
- purpose with or without fee is hereby granted, provided that the above
@@ -31,7 +31,7 @@
<div class="cmdsynopsis"><p><code class="command">genrandom</code> [<code class="option">-n <em class="replaceable"><code>number</code></em></code>] {<em class="replaceable"><code>size</code></em>} {<em class="replaceable"><code>filename</code></em>}</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543368"></a><h2>DESCRIPTION</h2>
+<a name="id2543378"></a><h2>DESCRIPTION</h2>
<p>
<span><strong class="command">genrandom</strong></span>
generates a file or a set of files containing a specified quantity
@@ -40,7 +40,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543381"></a><h2>ARGUMENTS</h2>
+<a name="id2543390"></a><h2>ARGUMENTS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-n <em class="replaceable"><code>number</code></em></span></dt>
<dd><p>
@@ -58,14 +58,14 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543442"></a><h2>SEE ALSO</h2>
+<a name="id2543451"></a><h2>SEE ALSO</h2>
<p>
<span class="citerefentry"><span class="refentrytitle">rand</span>(3)</span>,
<span class="citerefentry"><span class="refentrytitle">arc4random</span>(3)</span>
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543468"></a><h2>AUTHOR</h2>
+<a name="id2543478"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
diff --git a/bin/tools/isc-hmac-fixup.8 b/bin/tools/isc-hmac-fixup.8
index 6364e54d94b8..1b842fbd00b7 100644
--- a/bin/tools/isc-hmac-fixup.8
+++ b/bin/tools/isc-hmac-fixup.8
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2010, 2013 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2010, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
.\" purpose with or without fee is hereby granted, provided that the above
@@ -19,11 +19,11 @@
.\" Title: isc\-hmac\-fixup
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: January 5, 2010
+.\" Date: April 28, 2013
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "ISC\-HMAC\-FIXUP" "8" "January 5, 2010" "BIND9" "BIND9"
+.TH "ISC\-HMAC\-FIXUP" "8" "April 28, 2013" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -57,5 +57,5 @@ RFC 2104.
.PP
Internet Systems Consortium
.SH "COPYRIGHT"
-Copyright \(co 2010, 2013 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2010, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
diff --git a/bin/tools/isc-hmac-fixup.c b/bin/tools/isc-hmac-fixup.c
index daf391a81cd6..00613b387c48 100644
--- a/bin/tools/isc-hmac-fixup.c
+++ b/bin/tools/isc-hmac-fixup.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2010 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2010, 2014 Internet Systems Consortium, Inc. ("ISC")
*
* Permission to use, copy, modify, and/or distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
@@ -52,7 +52,7 @@ main(int argc, char **argv) {
fprintf(stderr, "error: %s\n", isc_result_totext(result));
return (1);
}
- isc__buffer_usedregion(&buf, &r);
+ isc_buffer_usedregion(&buf, &r);
if (!strcasecmp(argv[1], "md5") ||
!strcasecmp(argv[1], "hmac-md5")) {
diff --git a/bin/tools/isc-hmac-fixup.docbook b/bin/tools/isc-hmac-fixup.docbook
index cc72373352c4..986c30b8551c 100644
--- a/bin/tools/isc-hmac-fixup.docbook
+++ b/bin/tools/isc-hmac-fixup.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2010, 2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2010, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
-
- Permission to use, copy, modify, and/or distribute this software for any
- purpose with or without fee is hereby granted, provided that the above
@@ -17,10 +17,9 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: isc-hmac-fixup.docbook,v 1.2 2010/01/07 21:52:11 each Exp $ -->
<refentry id="man.isc-hmac-fixup">
<refentryinfo>
- <date>January 5, 2010</date>
+ <date>April 28, 2013</date>
</refentryinfo>
<refmeta>
@@ -38,6 +37,7 @@
<copyright>
<year>2010</year>
<year>2013</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
</docinfo>
diff --git a/bin/tools/isc-hmac-fixup.html b/bin/tools/isc-hmac-fixup.html
index f5ab4b5a2054..cb975589c25e 100644
--- a/bin/tools/isc-hmac-fixup.html
+++ b/bin/tools/isc-hmac-fixup.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2010, 2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2010, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
-
- Permission to use, copy, modify, and/or distribute this software for any
- purpose with or without fee is hereby granted, provided that the above
@@ -31,7 +31,7 @@
<div class="cmdsynopsis"><p><code class="command">isc-hmac-fixup</code> {<em class="replaceable"><code>algorithm</code></em>} {<em class="replaceable"><code>secret</code></em>}</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543355"></a><h2>DESCRIPTION</h2>
+<a name="id2543366"></a><h2>DESCRIPTION</h2>
<p>
Versions of BIND 9 up to and including BIND 9.6 had a bug causing
HMAC-SHA* TSIG keys which were longer than the digest length of the
@@ -57,7 +57,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543379"></a><h2>SECURITY CONSIDERATIONS</h2>
+<a name="id2543389"></a><h2>SECURITY CONSIDERATIONS</h2>
<p>
Secrets that have been converted by <span><strong class="command">isc-hmac-fixup</strong></span>
are shortened, but as this is how the HMAC protocol works in
@@ -68,14 +68,14 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543393"></a><h2>SEE ALSO</h2>
+<a name="id2543403"></a><h2>SEE ALSO</h2>
<p>
<em class="citetitle">BIND 9 Administrator Reference Manual</em>,
<em class="citetitle">RFC 2104</em>.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543410"></a><h2>AUTHOR</h2>
+<a name="id2543489"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
diff --git a/bin/tools/named-journalprint.8 b/bin/tools/named-journalprint.8
index 670cd5d3dda0..ec91eb273494 100644
--- a/bin/tools/named-journalprint.8
+++ b/bin/tools/named-journalprint.8
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
.\" purpose with or without fee is hereby granted, provided that the above
@@ -19,11 +19,11 @@
.\" Title: named\-journalprint
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: Feb 18, 2009
+.\" Date: December 04, 2009
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "NAMED\-JOURNALPRINT" "8" "Feb 18, 2009" "BIND9" "BIND9"
+.TH "NAMED\-JOURNALPRINT" "8" "December 04, 2009" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -56,5 +56,5 @@ BIND 9 Administrator Reference Manual.
.PP
Internet Systems Consortium
.SH "COPYRIGHT"
-Copyright \(co 2009 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
diff --git a/bin/tools/named-journalprint.docbook b/bin/tools/named-journalprint.docbook
index d0bea2c483ad..8d65c8e30093 100644
--- a/bin/tools/named-journalprint.docbook
+++ b/bin/tools/named-journalprint.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
-
- Permission to use, copy, modify, and/or distribute this software for any
- purpose with or without fee is hereby granted, provided that the above
@@ -17,10 +17,9 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: named-journalprint.docbook,v 1.2 2009/12/04 21:59:23 marka Exp $ -->
<refentry id="man.named-journalprint">
<refentryinfo>
- <date>Feb 18, 2009</date>
+ <date>December 04, 2009</date>
</refentryinfo>
<refmeta>
@@ -37,6 +36,7 @@
<docinfo>
<copyright>
<year>2009</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
</docinfo>
diff --git a/bin/tools/named-journalprint.html b/bin/tools/named-journalprint.html
index 8639ee885a86..3e5e19f239f2 100644
--- a/bin/tools/named-journalprint.html
+++ b/bin/tools/named-journalprint.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
-
- Permission to use, copy, modify, and/or distribute this software for any
- purpose with or without fee is hereby granted, provided that the above
@@ -31,7 +31,7 @@
<div class="cmdsynopsis"><p><code class="command">named-journalprint</code> {<em class="replaceable"><code>journal</code></em>}</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543344"></a><h2>DESCRIPTION</h2>
+<a name="id2543354"></a><h2>DESCRIPTION</h2>
<p>
<span><strong class="command">named-journalprint</strong></span>
prints the contents of a zone journal file in a human-readable
@@ -57,7 +57,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543379"></a><h2>SEE ALSO</h2>
+<a name="id2543389"></a><h2>SEE ALSO</h2>
<p>
<span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">nsupdate</span>(8)</span>,
@@ -65,7 +65,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543410"></a><h2>AUTHOR</h2>
+<a name="id2543420"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
diff --git a/bin/tools/nsec3hash.8 b/bin/tools/nsec3hash.8
index 324391042c90..d4444ce8e2c3 100644
--- a/bin/tools/nsec3hash.8
+++ b/bin/tools/nsec3hash.8
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
.\" purpose with or without fee is hereby granted, provided that the above
@@ -19,11 +19,11 @@
.\" Title: nsec3hash
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: Feb 18, 2009
+.\" Date: March 02, 2009
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "NSEC3HASH" "8" "Feb 18, 2009" "BIND9" "BIND9"
+.TH "NSEC3HASH" "8" "March 02, 2009" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -66,5 +66,5 @@ RFC 5155.
.PP
Internet Systems Consortium
.SH "COPYRIGHT"
-Copyright \(co 2009 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
diff --git a/bin/tools/nsec3hash.c b/bin/tools/nsec3hash.c
index 57f24c251eee..1a2a9558bf3f 100644
--- a/bin/tools/nsec3hash.c
+++ b/bin/tools/nsec3hash.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2006, 2008, 2009, 2011 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2006, 2008, 2009, 2011, 2014 Internet Systems Consortium, Inc. ("ISC")
*
* Permission to use, copy, modify, and/or distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
@@ -59,8 +59,9 @@ check_result(isc_result_t result, const char *message) {
}
static void
-usage() {
- printf("Usage: %s salt algorithm iterations domain\n", program);
+usage(void) {
+ fprintf(stderr, "Usage: %s salt algorithm iterations domain\n",
+ program);
exit(1);
}
@@ -115,7 +116,7 @@ main(int argc, char **argv) {
region.base = hash;
region.length = length;
isc_buffer_init(&buffer, text, sizeof(text));
- isc_base32hex_totext(&region, 1, "", &buffer);
+ isc_base32hexnp_totext(&region, 1, "", &buffer);
fprintf(stdout, "%.*s (salt=%s, hash=%u, iterations=%u)\n",
(int)isc_buffer_usedlength(&buffer), text, argv[1], hash_alg, iterations);
return(0);
diff --git a/bin/tools/nsec3hash.docbook b/bin/tools/nsec3hash.docbook
index d20eb83b990b..618e53a1aae7 100644
--- a/bin/tools/nsec3hash.docbook
+++ b/bin/tools/nsec3hash.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
-
- Permission to use, copy, modify, and/or distribute this software for any
- purpose with or without fee is hereby granted, provided that the above
@@ -17,10 +17,9 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: nsec3hash.docbook,v 1.3 2009/03/02 23:47:43 tbox Exp $ -->
<refentry id="man.nsec3hash">
<refentryinfo>
- <date>Feb 18, 2009</date>
+ <date>March 02, 2009</date>
</refentryinfo>
<refmeta>
@@ -37,6 +36,7 @@
<docinfo>
<copyright>
<year>2009</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
</docinfo>
diff --git a/bin/tools/nsec3hash.html b/bin/tools/nsec3hash.html
index e5b5a14842a4..acb83e6ee152 100644
--- a/bin/tools/nsec3hash.html
+++ b/bin/tools/nsec3hash.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
-
- Permission to use, copy, modify, and/or distribute this software for any
- purpose with or without fee is hereby granted, provided that the above
@@ -31,7 +31,7 @@
<div class="cmdsynopsis"><p><code class="command">nsec3hash</code> {<em class="replaceable"><code>salt</code></em>} {<em class="replaceable"><code>algorithm</code></em>} {<em class="replaceable"><code>iterations</code></em>} {<em class="replaceable"><code>domain</code></em>}</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543369"></a><h2>DESCRIPTION</h2>
+<a name="id2543379"></a><h2>DESCRIPTION</h2>
<p>
<span><strong class="command">nsec3hash</strong></span> generates an NSEC3 hash based on
a set of NSEC3 parameters. This can be used to check the validity
@@ -39,7 +39,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543382"></a><h2>ARGUMENTS</h2>
+<a name="id2543392"></a><h2>ARGUMENTS</h2>
<div class="variablelist"><dl>
<dt><span class="term">salt</span></dt>
<dd><p>
@@ -63,14 +63,14 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543444"></a><h2>SEE ALSO</h2>
+<a name="id2543453"></a><h2>SEE ALSO</h2>
<p>
<em class="citetitle">BIND 9 Administrator Reference Manual</em>,
<em class="citetitle">RFC 5155</em>.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543461"></a><h2>AUTHOR</h2>
+<a name="id2543470"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
diff --git a/config.h.in b/config.h.in
index d0fc095f69e6..71048b6effdd 100644
--- a/config.h.in
+++ b/config.h.in
@@ -1,6 +1,6 @@
/* config.h.in. Generated from configure.in by autoheader. */
/*
- * Copyright (C) 2004, 2005, 2007, 2008, 2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004, 2005, 2007, 2008, 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -73,6 +73,9 @@
/** define if arc4random() exists */
#undef HAVE_ARC4RANDOM
+/** define if arc4random_addrandom() exists */
+#undef HAVE_ARC4RANDOM_ADDRANDOM
+
/**
* define if pthread_setconcurrency() should be called to tell the
* OS how many threads we might want to run.
@@ -226,6 +229,9 @@ int sigwait(const unsigned int *set, int *sig);
/* Define to 1 if you have the <gssapi_krb5.h> header file. */
#undef HAVE_GSSAPI_KRB5_H
+/* Define to 1 if you have the `if_nametoindex' function. */
+#undef HAVE_IF_NAMETOINDEX
+
/* Define to 1 if you have the <inttypes.h> header file. */
#undef HAVE_INTTYPES_H
diff --git a/configure.in b/configure.in
index 3d04f4c8552c..8403790400bf 100644
--- a/configure.in
+++ b/configure.in
@@ -18,9 +18,7 @@ AC_DIVERT_PUSH(1)dnl
esyscmd([sed -e 's/^/# /' -e '/Portions of this code/,$d' COPYRIGHT])dnl
AC_DIVERT_POP()dnl
-AC_REVISION($Revision: 1.533 $)
-
-AC_INIT(lib/dns/name.c)
+AC_INIT(BIND, [9.9], [bind9-bugs@isc.org], [], [https://www.isc.org/downloads/BIND/])
AC_PREREQ(2.59)
AC_CONFIG_HEADER(config.h)
@@ -51,6 +49,7 @@ AC_SUBST(STD_CDEFINES)
AC_SUBST(STD_CWARNINGS)
AC_SUBST(CCOPT)
AC_SUBST(CCNOOPT)
+AC_SUBST(BACKTRACECFLAGS)
# Warn if the user specified libbind, which is now deprecated
AC_ARG_ENABLE(libbind, [ --enable-libbind deprecated])
@@ -64,6 +63,8 @@ It is available from http://www.isc.org as a separate download.])
;;
esac
+AC_ARG_ENABLE(warn_error, [ --enable-warn-error turn on -Werror when compiling])
+
AC_ARG_ENABLE(developer, [ --enable-developer enable developer build settings])
case "$enable_developer" in
yes)
@@ -82,6 +83,7 @@ yes)
;;
esac
test "${enable_symtable+set}" = set || enable_symtable=all
+ test "${enable_warn_error+set}" = set || enable_warn_error=yes
;;
esac
#
@@ -147,50 +149,63 @@ AC_ARG_WITH(python,
[ --with-python=PATH Specify path to python interpreter],
use_python="$withval", use_python="unspec")
+python="python python3 python3.4 python3.3 python3.2 python3.1 python3.0 python2 python2.7 python2.6 python2.5 python2.4"
+testscript='try: import argparse
+except: exit(1)'
case "$use_python" in
no)
+ AC_MSG_CHECKING([for python support])
AC_MSG_RESULT(disabled)
;;
unspec|yes|*)
case "$use_python" in
unspec|yes|'')
- AC_PATH_PROGS(PYTHON, python)
+ for p in $python
+ do
+ AC_PATH_PROGS(PYTHON, $p)
+ if test "X$PYTHON" == "X"; then
+ continue;
+ fi
+ AC_MSG_CHECKING([python module 'argparse'])
+ if ${PYTHON:-false} -c "$testscript"; then
+ AC_MSG_RESULT([found, using $PYTHON])
+ break
+ fi
+ AC_MSG_RESULT([not found])
+ unset ac_cv_path_PYTHON
+ unset PYTHON
+ done
+ if test "X$PYTHON" == "X"
+ then
+ AC_MSG_CHECKING([for python support])
+ case "$use_python" in
+ unspec)
+ AC_MSG_RESULT(disabled)
+ ;;
+ yes)
+ AC_MSG_ERROR([missing python])
+ ;;
+ esac
+ fi
;;
*)
- AC_PATH_PROGS(PYTHON, $use_python)
- ;;
- esac
- if test "X$PYTHON" == "X"
- then
- case "$use_python" in
- unspec)
- AC_MSG_RESULT(disabled)
- ;;
- yes|*)
- AC_MSG_ERROR([missing python])
- ;;
- esac
- break
- fi
- testscript='try: import argparse
-except: exit(1)'
- AC_MSG_CHECKING([python module 'argparse'])
- if $PYTHON -c "$testscript"; then
- AC_MSG_RESULT([found, using $PYTHON])
- else
case "$use_python" in
- unspec)
- PYTHON=""
- AC_SUBST(CHECKDS)
- AC_SUBST(COVERAGE)
- AC_MSG_RESULT([not found, python disabled])
+ /*)
+ PYTHON="$use_python"
;;
- yes)
- AC_MSG_RESULT([no found])
- AC_MSG_ERROR([python 'argparse' module not supported])
+ *)
+ AC_PATH_PROGS(PYTHON, $use_python)
;;
esac
- fi
+ AC_MSG_CHECKING([python module 'argparse'])
+ if ${PYTHON:-false} -c "$testscript"; then
+ AC_MSG_RESULT([found, using $PYTHON])
+ break
+ else
+ AC_MSG_ERROR([not found])
+ fi
+ ;;
+ esac
;;
esac
@@ -198,7 +213,7 @@ PYTHON_TOOLS=''
CHECKDS=''
COVERAGE=''
if test "X$PYTHON" != "X"; then
- PYTHON_TOOLS=python
+ PYTHON_TOOLS=python
CHECKDS=checkds
COVERAGE=coverage
fi
@@ -352,7 +367,7 @@ case "$host" in
# as it breaks how the two halves (Basic and Advanced) of the IPv6
# Socket API were designed to be used but we have to live with it.
# Define _GNU_SOURCE to pull in the IPv6 Advanced Socket API.
- *-linux* | *-kfreebsd*-gnu)
+ *-linux* | *-kfreebsd*-gnu*)
STD_CDEFINES="$STD_CDEFINES -D_GNU_SOURCE"
CPPFLAGS="$CPPFLAGS -D_GNU_SOURCE"
;;
@@ -482,7 +497,7 @@ AC_ARG_ENABLE(newstats,
[ --enable-newstats use the new statistics])
case "$enable_newstats" in
yes)
- AC_DEFINE(NEWSTATS, 1, [Use the new XML schema for statistics])
+ AC_DEFINE(NEWSTATS, 1, [Use the new XML schema for statistics])
;;
*)
;;
@@ -495,13 +510,13 @@ AC_ARG_ENABLE(rrl,
[ --enable-rrl use DNS Response Rate Limiting])
case "$enable_rrl" in
yes)
- AC_DEFINE(USE_RRL, 1, [Enable DNS Response Rate Limiting])
- RRLLINKOBJS='${RRLOBJS}'
- RRLLINKSRCS='${RRLSRCS}'
+ AC_DEFINE(USE_RRL, 1, [Enable DNS Response Rate Limiting])
+ RRLLINKOBJS='${RRLOBJS}'
+ RRLLINKSRCS='${RRLSRCS}'
;;
*)
- RRLLINKOBJS=""
- RRLLINKSRCS=""
+ RRLLINKOBJS=""
+ RRLLINKSRCS=""
;;
esac
AC_SUBST(RRLLINKOBJS)
@@ -804,20 +819,20 @@ no)
;;
esac
- AC_MSG_CHECKING(for OpenSSL DSA support)
- if test -f $use_openssl/include/openssl/dsa.h
- then
- AC_DEFINE(HAVE_OPENSSL_DSA)
- AC_MSG_RESULT(yes)
- else
- AC_MSG_RESULT(no)
- fi
+ AC_MSG_CHECKING(for OpenSSL DSA support)
+ if test -f $use_openssl/include/openssl/dsa.h
+ then
+ AC_DEFINE(HAVE_OPENSSL_DSA)
+ AC_MSG_RESULT(yes)
+ else
+ AC_MSG_RESULT(no)
+ fi
- AC_CHECK_FUNCS(EVP_sha256 EVP_sha384 EVP_sha512)
+ AC_CHECK_FUNCS(EVP_sha256 EVP_sha384 EVP_sha512)
- AC_MSG_CHECKING(for OpenSSL ECDSA support)
- have_ecdsa=""
- AC_TRY_RUN([
+ AC_MSG_CHECKING(for OpenSSL ECDSA support)
+ have_ecdsa=""
+ AC_TRY_RUN([
#include <stdio.h>
#include <openssl/ecdsa.h>
#include <openssl/objects.h>
@@ -834,42 +849,42 @@ int main() {
return (0);
}
],
- [AC_MSG_RESULT(yes)
- have_ecdsa="yes"],
- [AC_MSG_RESULT(no)
- have_ecdsa="no"],
- [AC_MSG_RESULT(using --with-ecdsa)])
- AC_ARG_WITH(ecdsa, [ --with-ecdsa OpenSSL ECDSA],
- with_ecdsa="$withval", with_ecdsa="auto")
- case "$with_ecdsa" in
- yes)
- case "$have_ecdsa" in
- no) AC_MSG_ERROR([ecdsa not supported]) ;;
- *) have_ecdsa=yes ;;
- esac
- ;;
- no)
- have_ecdsa=no ;;
- *)
- case "$have_ecdsa" in
- yes|no) ;;
- *) AC_MSG_ERROR([need --with-ecdsa=[[yes or no]]]) ;;
- esac
- ;;
- esac
- case $have_ecdsa in
- yes)
- OPENSSL_ECDSA="yes"
- AC_DEFINE(HAVE_OPENSSL_ECDSA, 1,
- [Define if your OpenSSL version supports ECDSA.])
- ;;
- *)
- ;;
- esac
-
- AC_MSG_CHECKING(for OpenSSL GOST support)
- have_gost=""
- AC_TRY_RUN([
+ [AC_MSG_RESULT(yes)
+ have_ecdsa="yes"],
+ [AC_MSG_RESULT(no)
+ have_ecdsa="no"],
+ [AC_MSG_RESULT(using --with-ecdsa)])
+ AC_ARG_WITH(ecdsa, [ --with-ecdsa OpenSSL ECDSA],
+ with_ecdsa="$withval", with_ecdsa="auto")
+ case "$with_ecdsa" in
+ yes)
+ case "$have_ecdsa" in
+ no) AC_MSG_ERROR([ecdsa not supported]) ;;
+ *) have_ecdsa=yes ;;
+ esac
+ ;;
+ no)
+ have_ecdsa=no ;;
+ *)
+ case "$have_ecdsa" in
+ yes|no) ;;
+ *) AC_MSG_ERROR([need --with-ecdsa=[[yes or no]]]) ;;
+ esac
+ ;;
+ esac
+ case $have_ecdsa in
+ yes)
+ OPENSSL_ECDSA="yes"
+ AC_DEFINE(HAVE_OPENSSL_ECDSA, 1,
+ [Define if your OpenSSL version supports ECDSA.])
+ ;;
+ *)
+ ;;
+ esac
+
+ AC_MSG_CHECKING(for OpenSSL GOST support)
+ have_gost=""
+ AC_TRY_RUN([
#include <openssl/conf.h>
#include <openssl/engine.h>
int main() {
@@ -891,46 +906,46 @@ int main() {
#endif
}
],
- [AC_MSG_RESULT(yes)
- have_gost="yes"],
- [AC_MSG_RESULT(no)
- have_gost="no"],
- [AC_MSG_RESULT(using --with-gost)])
- AC_ARG_WITH(gost, [ --with-gost OpenSSL GOST],
- with_gost="$withval", with_gost="auto")
- case "$with_gost" in
- yes)
- case "$have_gost" in
- no) AC_MSG_ERROR([gost not supported]) ;;
- *) have_gost=yes ;;
- esac
- ;;
- no)
- have_gost=no ;;
- *)
- case "$have_gost" in
- yes|no) ;;
- *) AC_MSG_ERROR([need --with-gost=[[yes or no]]]) ;;
- esac
- ;;
- esac
- case $have_gost in
- yes)
+ [AC_MSG_RESULT(yes)
+ have_gost="yes"],
+ [AC_MSG_RESULT(no)
+ have_gost="no"],
+ [AC_MSG_RESULT(using --with-gost)])
+ AC_ARG_WITH(gost, [ --with-gost OpenSSL GOST],
+ with_gost="$withval", with_gost="auto")
+ case "$with_gost" in
+ yes)
+ case "$have_gost" in
+ no) AC_MSG_ERROR([gost not supported]) ;;
+ *) have_gost=yes ;;
+ esac
+ ;;
+ no)
+ have_gost=no ;;
+ *)
+ case "$have_gost" in
+ yes|no) ;;
+ *) AC_MSG_ERROR([need --with-gost=[[yes or no]]]) ;;
+ esac
+ ;;
+ esac
+ case $have_gost in
+ yes)
OPENSSL_GOST="yes"
OPENSSLGOSTLINKOBJS='${OPENSSLGOSTLINKOBJS}'
OPENSSLGOSTLINKSRCS='${OPENSSLGOSTLINKSRCS}'
AC_DEFINE(HAVE_OPENSSL_GOST, 1,
[Define if your OpenSSL version supports GOST.])
;;
- *)
- ;;
- esac
- CFLAGS="$saved_cflags"
- LIBS="$saved_libs"
- OPENSSLLINKOBJS='${OPENSSLLINKOBJS}'
- OPENSSLLINKSRCS='${OPENSSLLINKSRCS}'
+ *)
+ ;;
+ esac
+ CFLAGS="$saved_cflags"
+ LIBS="$saved_libs"
+ OPENSSLLINKOBJS='${OPENSSLLINKOBJS}'
+ OPENSSLLINKSRCS='${OPENSSLLINKSRCS}'
- ;;
+ ;;
esac
#
@@ -982,7 +997,7 @@ AC_SUBST(ISC_OPENSSL_INC)
AC_MSG_CHECKING(for PKCS11 support)
AC_ARG_WITH(pkcs11,
[ --with-pkcs11[=PATH] Build with PKCS11 support [yes|no|path]
- (PATH is for the PKCS11 provider)],
+ (PATH is for the PKCS11 provider)],
use_pkcs11="$withval", use_pkcs11="no")
case "$use_pkcs11" in
@@ -1039,10 +1054,10 @@ then
for d in $krb5dirs
do
if test -f $d/include/gssapi/gssapi_krb5.h -o \
- -f $d/include/krb5.h
+ -f $d/include/krb5.h
then
if test -f $d/include/gssapi/gssapi.h -o \
- -f $d/include/gssapi.h
+ -f $d/include/gssapi.h
then
use_gssapi=$d
break
@@ -1067,24 +1082,25 @@ case "$use_gssapi" in
saved_cppflags="$CPPFLAGS"
CPPFLAGS="-I$use_gssapi/include $CPPFLAGS"
AC_CHECK_HEADERS(gssapi.h gssapi/gssapi.h,
- [ISC_PLATFORM_GSSAPIHEADER="#define ISC_PLATFORM_GSSAPIHEADER <$ac_header>"])
+ [ISC_PLATFORM_GSSAPIHEADER="#define ISC_PLATFORM_GSSAPIHEADER <$ac_header>"
+ gssapi_hack="#include <$ac_header>"])
if test "$ISC_PLATFORM_GSSAPIHEADER" = ""; then
AC_MSG_ERROR([gssapi.h not found])
fi
AC_CHECK_HEADERS(gssapi_krb5.h gssapi/gssapi_krb5.h,
- [ISC_PLATFORM_GSSAPI_KRB5_HEADER="#define ISC_PLATFORM_GSSAPI_KRB5_HEADER <$ac_header>"])
+ [ISC_PLATFORM_GSSAPI_KRB5_HEADER="#define ISC_PLATFORM_GSSAPI_KRB5_HEADER <$ac_header>"
+ gssapi_krb5_hack="#include <$ac_header>"])
AC_CHECK_HEADERS(krb5.h krb5/krb5.h kerberosv5/krb5.h,
- [ISC_PLATFORM_KRB5HEADER="#define ISC_PLATFORM_KRB5HEADER <$ac_header>"])
+ [ISC_PLATFORM_KRB5HEADER="#define ISC_PLATFORM_KRB5HEADER <$ac_header>"
+ krb5_hack="#include <$ac_header>"])
if test "$ISC_PLATFORM_KRB5HEADER" = ""; then
AC_MSG_ERROR([krb5.h not found])
fi
- CPPFLAGS="$saved_cppflags"
-
#
# XXXDCL This probably doesn't work right on all systems.
# It will need to be worked on as problems become evident.
@@ -1113,6 +1129,7 @@ case "$use_gssapi" in
"-lgssapi" \
"-lgssapi -lkrb5 -ldes -lcrypt -lasn1 -lroken -lcom_err" \
"-lgssapi -lkrb5 -lcrypto -lcrypt -lasn1 -lroken -lcom_err" \
+ "-lgssapi -lkrb5 -lgssapi_krb5 -lcrypto -lcrypt -lasn1 -lroken -lcom_err" \
"-lgssapi -lkrb5 -lhx509 -lcrypto -lcrypt -lasn1 -lroken -lcom_err" \
"-lgss -lkrb5"
do
@@ -1128,7 +1145,15 @@ case "$use_gssapi" in
LIBS="-L$use_gssapi/lib $TRY_LIBS"
fi
AC_MSG_CHECKING(linking as $TRY_LIBS)
- AC_TRY_LINK( , [gss_acquire_cred();krb5_init_context()],
+ AC_TRY_LINK([
+#include <sys/types.h>
+$gssapi_hack
+$gssapi_krb5_hack
+$krb5_hack
+ ] , [gss_acquire_cred(NULL, NULL, 0, NULL, 0, NULL, NULL, NULL);krb5_init_context(NULL);
+#if defined(HAVE_GSSAPI_KRB5_H) || defined(HAVE_GSSAPI_GSSAPI_KRB5_H)
+gsskrb5_register_acceptor_identity(NULL);
+#endif],
gssapi_linked=yes, gssapi_linked=no)
case $gssapi_linked in
yes) AC_MSG_RESULT(yes); break ;;
@@ -1136,6 +1161,8 @@ case "$use_gssapi" in
esac
done
+ CPPFLAGS="$saved_cppflags"
+
case $gssapi_linked in
no) AC_MSG_ERROR(could not determine proper GSSAPI linkage) ;;
esac
@@ -1246,9 +1273,26 @@ case "$use_randomdev" in
esac
#
-# Do we have arc4random() ?
+# Only check dsa signature generation on these platforms when performing
+# system tests.
+#
+CHECK_DSA=0
+if grep "#define PATH_RANDOMDEV " confdefs.h > /dev/null
+then
+ case "$host" in
+ *darwin*|*freebsd*)
+ CHECK_DSA=1
+ ;;
+ esac
+fi
+AC_SUBST(CHECK_DSA)
+
+#
+# Do we have arc4random(), etc ? arc4random_addrandom() has been removed
+# from OpenBSD 5.5 onwards.
#
AC_CHECK_FUNC(arc4random, AC_DEFINE(HAVE_ARC4RANDOM))
+AC_CHECK_FUNC(arc4random_addrandom, AC_DEFINE(HAVE_ARC4RANDOM_ADDRANDOM))
sinclude(config.threads.in)dnl
@@ -1389,7 +1433,6 @@ then
# Look for sysconf to allow detection of the number of processors.
#
AC_CHECK_FUNC(sysconf, AC_DEFINE(HAVE_SYSCONF),)
-
else
ISC_PLATFORM_USETHREADS="#undef ISC_PLATFORM_USETHREADS"
thread_dir=nothreads
@@ -1439,9 +1482,15 @@ esac
if test "X$libxml2_libs" != "X"
then
- AC_MSG_RESULT(yes)
CFLAGS="$CFLAGS $libxml2_cflags"
LIBS="$LIBS $libxml2_libs"
+ #
+ # Sanity check xml2-config output.
+ #
+ AC_TRY_LINK([#include <libxml/xmlwriter.h>],
+ [return(xmlTextWriterStartElement(NULL, NULL));],
+ AC_MSG_RESULT(yes),
+ AC_MSG_ERROR(xml2-config returns badness))
AC_DEFINE(HAVE_LIBXML2, 1, [Define if libxml2 was found])
else
AC_MSG_RESULT(no)
@@ -1495,23 +1544,42 @@ MKDEPCFLAGS="-M"
IRIX_DNSSEC_WARNINGS_HACK=""
if test "X$GCC" = "Xyes"; then
+ STD_CWARNINGS="$STD_CWARNINGS -W -Wall -Wmissing-prototypes -Wcast-qual -Wwrite-strings -Wformat -Wpointer-arith"
AC_MSG_CHECKING(if "$CC" supports -fno-strict-aliasing)
- SAVE_CFLAGS=$CFLAGS
+ SAVE_CFLAGS="$CFLAGS"
CFLAGS="$CFLAGS -fno-strict-aliasing"
AC_TRY_COMPILE(,, [FNOSTRICTALIASING=yes],[FNOSTRICTALIASING=no])
- CFLAGS=$SAVE_CFLAGS
+ CFLAGS="$SAVE_CFLAGS"
if test "$FNOSTRICTALIASING" = "yes"; then
AC_MSG_RESULT(yes)
- STD_CWARNINGS="$STD_CWARNINGS -W -Wall -Wmissing-prototypes -Wcast-qual -Wwrite-strings -Wformat -Wpointer-arith -fno-strict-aliasing"
+ STD_CWARNINGS="$STD_CWARNINGS -fno-strict-aliasing"
+ else
+ AC_MSG_RESULT(no)
+ fi
+ #
+ # turn off delete null pointer checks
+ #
+ AC_MSG_CHECKING(if "$CC" supports -fno-delete-null-pointer-checks)
+ SAVE_CFLAGS="$CFLAGS"
+ CFLAGS="$CFLAGS -fno-delete-null-pointer-checks"
+ AC_TRY_COMPILE(,, [FNODELETENULLPOINTERCHECKS=yes],
+ [FNODELETENULLPOINTERCHECKS=no])
+ CFLAGS="$SAVE_CFLAGS"
+ if test "$FNODELETENULLPOINTERCHECKS" = "yes"; then
+ AC_MSG_RESULT(yes)
+ STD_CWARNINGS="$STD_CWARNINGS -fno-delete-null-pointer-checks"
else
AC_MSG_RESULT(no)
- STD_CWARNINGS="$STD_CWARNINGS -W -Wall -Wmissing-prototypes -Wcast-qual -Wwrite-strings -Wformat -Wpointer-arith"
fi
case "$host" in
*-hp-hpux*)
- LDFLAGS="-Wl,+vnocompatwarnings $LDFLAGS"
+ CFLAGS="$CFLAGS -Wl,+vnocompatwarnings"
+ BACKTRACECFLAGS="$BACKTRACECFLAGS -Wl,+vnocompatwarnings"
;;
esac
+ if test "X$enable_warn_error" = Xyes; then
+ STD_CWARNINGS="$STD_CWARNINGS -Werror"
+ fi
else
case $host in
*-dec-osf*)
@@ -1537,7 +1605,8 @@ else
esac
CCOPT="$CCOPT -Ae -z"
CCNOOPT="$CCNOOPT -Ae -z"
- LDFLAGS="-Wl,+vnocompatwarnings $LDFLAGS"
+ CFLAGS="$CFLAGS -Wl,+vnocompatwarnings"
+ BACKTRACECFLAGS="$BACKTRACECFLAGS -Wl,+vnocompatwarnings"
MKDEPPROG='cc -Ae -E -Wp,-M >/dev/null 2>>$TMP'
;;
*-sgi-irix*)
@@ -1643,7 +1712,6 @@ esac
AC_SUBST(PURIFY)
-
AC_ARG_WITH(libtool,
[ --with-libtool use GNU libtool],
use_libtool="$withval", use_libtool="no")
@@ -1657,6 +1725,7 @@ case $use_libtool in
LIBTOOL_MODE_COMPILE='--mode=compile --tag=CC'
LIBTOOL_MODE_INSTALL='--mode=install --tag=CC'
LIBTOOL_MODE_LINK='--mode=link --tag=CC'
+ INSTALL_LIBRARY='${INSTALL_PROGRAM}'
case "$host" in
*) LIBTOOL_ALLOW_UNDEFINED= ;;
esac
@@ -1676,8 +1745,10 @@ case $use_libtool in
LIBTOOL_MODE_LINK=
LIBTOOL_ALLOW_UNDEFINED=
LIBTOOL_IN_MAIN=
+ INSTALL_LIBRARY='${INSTALL_DATA}'
;;
esac
+AC_SUBST(INSTALL_LIBRARY)
#
# enable/disable dumping stack backtrace. Also check if the system supports
@@ -1701,7 +1772,7 @@ AC_SUBST(ISC_PLATFORM_USEBACKTRACE)
AC_ARG_ENABLE(symtable,
[ --enable-symtable use internal symbol table for backtrace
- [[all|minimal(default)|none]]],
+ [[all|minimal(default)|none]]],
want_symtable="$enableval", want_symtable="minimal")
case $want_symtable in
yes|all|minimal) # "yes" is a hidden value equivalent to "minimal"
@@ -1759,7 +1830,7 @@ AC_SUBST(LIBTOOL_IN_MAIN)
#
AC_ARG_ENABLE(exportlib,
[ --enable-exportlib build exportable library (GNU make required)
- [[default=no]]])
+ [[default=no]]])
case "$enable_exportlib" in
yes)
gmake=
@@ -1784,8 +1855,8 @@ AC_SUBST(BIND9_CO_RULE)
AC_ARG_WITH(export-libdir,
[ --with-export-libdir[=PATH]
- installation directory for the export library
- [[EPREFIX/lib/bind9]]],
+ installation directory for the export library
+ [[EPREFIX/lib/bind9]]],
export_libdir="$withval",)
if test -z "$export_libdir"; then
export_libdir="\${exec_prefix}/lib/bind9/"
@@ -1794,8 +1865,8 @@ AC_SUBST(export_libdir)
AC_ARG_WITH(export-includedir,
[ --with-export-includedir[=PATH]
- installation directory for the header files of the
- export library [[PREFIX/include/bind9]]],
+ installation directory for the header files of the
+ export library [[PREFIX/include/bind9]]],
export_includedir="$withval",)
if test -z "$export_includedir"; then
export_includedir="\${prefix}/include/bind9/"
@@ -2283,7 +2354,7 @@ AC_TRY_COMPILE([
#include <sys/socket.h>
#include <netdb.h>
int getnameinfo(const struct sockaddr *, socklen_t, char *,
- socklen_t, char *, socklen_t, unsigned int);],
+ socklen_t, char *, socklen_t, unsigned int);],
[ return (0);],
[AC_MSG_RESULT(socklen_t for buflen; u_int for flags)
AC_DEFINE(IRS_GETNAMEINFO_BUFLEN_T, socklen_t,
@@ -2295,7 +2366,7 @@ int getnameinfo(const struct sockaddr *, socklen_t, char *,
#include <sys/socket.h>
#include <netdb.h>
int getnameinfo(const struct sockaddr *, socklen_t, char *,
- size_t, char *, size_t, int);],
+ size_t, char *, size_t, int);],
[ return (0);],
[AC_MSG_RESULT(size_t for buflen; int for flags)
AC_DEFINE(IRS_GETNAMEINFO_BUFLEN_T, size_t)
@@ -2410,9 +2481,12 @@ AC_SUBST(LWRES_PLATFORM_NEEDSTRTOUL)
AC_SUBST(GENRANDOMLIB)
AC_CHECK_FUNC(strlcpy,
- [ISC_PLATFORM_NEEDSTRLCPY="#undef ISC_PLATFORM_NEEDSTRLCPY"],
- [ISC_PLATFORM_NEEDSTRLCPY="#define ISC_PLATFORM_NEEDSTRLCPY 1"])
+ [ISC_PLATFORM_NEEDSTRLCPY="#undef ISC_PLATFORM_NEEDSTRLCPY"
+ LWRES_PLATFORM_NEEDSTRLCPY="#undef LWRES_PLATFORM_NEEDSTRLCPY"],
+ [ISC_PLATFORM_NEEDSTRLCPY="#define ISC_PLATFORM_NEEDSTRLCPY 1"
+ LWRES_PLATFORM_NEEDSTRLCPY="#define LWRES_PLATFORM_NEEDSTRLCPY 1"])
AC_SUBST(ISC_PLATFORM_NEEDSTRLCPY)
+AC_SUBST(LWRES_PLATFORM_NEEDSTRLCPY)
AC_CHECK_FUNC(strlcat,
[ISC_PLATFORM_NEEDSTRLCAT="#undef ISC_PLATFORM_NEEDSTRLCAT"],
@@ -2426,8 +2500,8 @@ AC_SUBST(ISC_PLATFORM_NEEDSTRCASESTR)
AC_SUBST(READLINE_LIB)
AC_ARG_WITH(readline,
- [ --with-readline[=LIBSPEC] specify readline library [default -lreadline]],
- readline="$withval", readline="-lreadline")
+ [ --with-readline[=LIBSPEC] specify readline library [default -lreadline]],
+ readline="$withval", readline="-lreadline")
case "$readline" in
no) ;;
*)
@@ -2443,7 +2517,7 @@ no) ;;
READLINE_LIB="$readline"
fi
LIBS="$saved_LIBS"
- ;;
+ ;;
esac
ISC_PRINT_OBJS=
@@ -2661,7 +2735,7 @@ AC_SUBST(ISC_PLATFORM_RLIMITTYPE)
# Older HP-UX doesn't have gettune
#
case "$host" in
- *-hp-hpux*)
+ *-hp-hpux*)
AC_CHECK_HEADERS(sys/dyntune.h)
;;
*)
@@ -2795,6 +2869,7 @@ esac
case $ac_cv_have_if_nametoindex in
yes)
ISC_PLATFORM_HAVEIFNAMETOINDEX="#define ISC_PLATFORM_HAVEIFNAMETOINDEX 1"
+ AC_DEFINE(HAVE_IF_NAMETOINDEX, 1)
;;
*)
ISC_PLATFORM_HAVEIFNAMETOINDEX="#undef ISC_PLATFORM_HAVEIFNAMETOINDEX"
@@ -2862,7 +2937,7 @@ if test "$use_atomic" = "yes"; then
[i[3456]86-*])
# XXX: some old x86 architectures actually do not support
# (some of) these operations. Do we need stricter checks?
- AC_CHECK_SIZEOF([void *])
+ AC_CHECK_SIZEOF([void *])
if test $ac_cv_sizeof_void_p = 8; then
arch=x86_64
have_xaddq=yes
@@ -2871,7 +2946,7 @@ if test "$use_atomic" = "yes"; then
fi
;;
x86_64-*|amd64-*)
- AC_CHECK_SIZEOF([void *])
+ AC_CHECK_SIZEOF([void *])
if test $ac_cv_sizeof_void_p = 8; then
arch=x86_64
have_xaddq=yes
@@ -3195,7 +3270,7 @@ auto)
;;
*)
docbook_xsl_trees="$withval"
- AC_MSG_RESULT($docbook_xsl_trees)
+ AC_MSG_RESULT($docbook_xsl_trees)
;;
esac
@@ -3412,7 +3487,7 @@ if test -f "${srcdir}/srcid"; then
. "${srcdir}/srcid"
BIND9_SRCID="SRCID=$SRCID"
elif test -d "${srcdir}/.git"; then
- BIND9_SRCID="SRCID="`(cd "${srcdir}";git log -n 1 --format=%h)`
+ BIND9_SRCID="SRCID="`(cd "${srcdir}";git rev-parse --short HEAD)`
fi
AC_SUBST(BIND9_SRCID)
@@ -3478,6 +3553,7 @@ DLZ_SYSTEM_TEST=""
#
SO="so"
SO_CFLAGS=""
+SO_LDFLAGS=""
SO_LD=""
SO_TARGETS=""
@@ -3495,37 +3571,44 @@ if test "$dlopen" = "yes"; then
if test "$have_dl" = "yes"; then
LIBS="-ldl $LIBS"
fi
- AC_CHECK_FUNCS(dlopen dlclose dlsym,,dlopen=no)
+ AC_CHECK_FUNCS(dlopen dlclose dlsym,,dlopen=no)
fi
if test "$dlopen" = "yes"; then
case $host in
- *-linux*)
+ *-linux*|*-gnu*)
SO_CFLAGS="-fPIC"
+ SO_LDFLAGS=""
if test "$have_dl" = "yes"
then
if test "$use_libtool" = "yes"; then
- SO_LD="${CC} -Xcompiler -shared"
+ SO_LDFLAGS="-Xcompiler -shared"
+ SO_LD="${CC}"
else
- SO_LD="${CC} -shared"
+ SO_LDFLAGS="-shared"
+ SO_LD="${CC}"
fi
else
- SO_LD="ld -shared"
+ SO_LDFLAGS="-shared"
+ SO_LD="ld"
fi
;;
*-freebsd*|*-openbsd*|*-netbsd*)
SO_CFLAGS="-fpic"
- SO_LD="ld -Bshareable -x"
+ SO_LDFLAGS="-Bshareable -x"
+ SO_LD="ld"
;;
*-solaris*)
SO_CFLAGS="-KPIC"
- SO_LD="ld -G -z text"
- ;;
+ SO_LDFLAGS="-G -z text"
+ SO_LD="ld"
+ ;;
*-hp-hpux*)
SO=sl
SO_CFLAGS="+z"
- SO_LD="ld -b"
- ;;
+ SO_LDFLAGS="-b +vnocompatwarnings"
+ SO_LD="ld"
+ ;;
*)
SO_CFLAGS="-fPIC"
;;
@@ -3533,7 +3616,16 @@ if test "$dlopen" = "yes"; then
if test "X$GCC" = "Xyes"; then
SO_CFLAGS="-fPIC"
- test -n "$SO_LD" || SO_LD="${CC} -shared"
+ if test -z "$SO_LD"
+ then
+ if test "$use_libtool" = "yes"; then
+ SO_LDFLAGS="-Xcompiler -shared"
+ SO_LD="${CC}"
+ else
+ SO_LDFLAGS="-shared"
+ SO_LD="${CC}"
+ fi
+ fi
fi
# If we still don't know how to make shared objects, don't make any.
@@ -3546,6 +3638,7 @@ fi
AC_SUBST(SO)
AC_SUBST(SO_CFLAGS)
+AC_SUBST(SO_LDFLAGS)
AC_SUBST(SO_LD)
AC_SUBST(SO_TARGETS)
@@ -3572,7 +3665,7 @@ AC_SUBST_FILE(DLZ_DRIVER_RULES)
if test "$cross_compiling" = "yes"; then
if test -z "$BUILD_CC"; then
- AC_ERROR([BUILD_CC not set])
+ AC_MSG_ERROR([BUILD_CC not set])
fi
BUILD_CFLAGS="$BUILD_CFLAGS"
BUILD_CPPFLAGS="$BUILD_CPPFLAGS"
@@ -3743,12 +3836,11 @@ AC_CONFIG_FILES([
bin/tests/sockaddr/Makefile
bin/tests/system/Makefile
bin/tests/system/conf.sh
+ bin/tests/system/builtin/Makefile
bin/tests/system/dlz/prereq.sh
bin/tests/system/dlzexternal/Makefile
bin/tests/system/dlzexternal/ns1/named.conf
- bin/tests/system/ecdsa/prereq.sh
bin/tests/system/filter-aaaa/Makefile
- bin/tests/system/gost/prereq.sh
bin/tests/system/inline/checkdsa.sh
bin/tests/system/lwresd/Makefile
bin/tests/system/rpz/Makefile
@@ -3839,6 +3931,7 @@ AC_CONFIG_FILES([
lib/lwres/include/lwres/netdb.h
lib/lwres/include/lwres/platform.h
lib/lwres/man/Makefile
+ lib/lwres/tests/Makefile
lib/lwres/unix/Makefile
lib/lwres/unix/include/Makefile
lib/lwres/unix/include/lwres/Makefile
@@ -3897,13 +3990,13 @@ test "$atf" = "no" || echo " Automated Testing Framework (--with-atf)"
# these lines are only printed if run with --enable-full-report
if test "$enable_full_report" = "yes"; then
test "$enable_ipv6" = "no" -o "$found_ipv6" = "no" || \
- echo " IPv6 support (--enable-ipv6)"
+ echo " IPv6 support (--enable-ipv6)"
test "X$USE_OPENSSL" = "X" || \
- echo " OpenSSL cryptography/DNSSEC (--with-openssl)"
+ echo " OpenSSL cryptography/DNSSEC (--with-openssl)"
test "$OPENSSL_GOST" != "yes" || \
- echo " GOST algorithm support (--with-gost)"
+ echo " GOST algorithm support (--with-gost)"
test "$OPENSSL_ECDSA" != "yes" || \
- echo " ECDSA algorithm support (--with-ecdsa)"
+ echo " ECDSA algorithm support (--with-ecdsa)"
test "X$PYTHON" = "X" || echo " Python tools (--with-python)"
test "X$libxml2_libs" = "X" || echo " XML statistics (--with-libxml2)"
fi
@@ -3916,7 +4009,7 @@ test "$use_dlz_ldap" = "no" || \
test "$use_dlz_mysql" = "no" || \
echo " MySQL (--with-dlz-mysql)"
test "$use_dlz_odbc" = "no" || \
- echo " ODBC (--with-dlz-bdb)"
+ echo " ODBC (--with-dlz-odbc)"
test "$use_dlz_postgres" = "no" || \
echo " Postgres (--with-dlz-postgres)"
test "$use_dlz_filesystem" = "no" || \
@@ -3929,7 +4022,7 @@ echo
echo "Features disabled or unavailable on this platform:"
$use_threads || echo " Multiprocessing support (--enable-threads)"
test "$enable_ipv6" = "no" -o "$found_ipv6" = "no" && \
- echo " IPv6 support (--enable-ipv6)"
+ echo " IPv6 support (--enable-ipv6)"
test "$enable_rrl" = "yes" || \
echo " Response Rate Limiting (--enable-rrl)"
test "$use_gssapi" = "no" && echo " GSS-API (--with-gssapi)"
@@ -3941,7 +4034,7 @@ test "$want_backtrace" = "yes" || \
echo " Print backtrace on crash (--enable-backtrace)"
test "$atf" = "no" && echo " Automated Testing Framework (--with-atf)"
test "X$USE_OPENSSL" = "X" && \
- echo " OpenSSL cryptography/DNSSEC (--with-openssl)"
+ echo " OpenSSL cryptography/DNSSEC (--with-openssl)"
test "X$USE_OPENSSL" != "X" -a "$OPENSSL_GOST" != "yes" && \
echo " GOST algorithm support (--with-gost)"
test "X$USE_OPENSSL" != "X" -a "$OPENSSL_ECDSA" != "yes" && \
@@ -3949,6 +4042,11 @@ test "X$USE_OPENSSL" != "X" -a "$OPENSSL_ECDSA" != "yes" && \
test "X$PYTHON" = "X" && echo " Python tools (--with-python)"
test "X$libxml2_libs" = "X" && echo " XML statistics (--with-libxml2)"
+if test "X$ac_unrecognized_opts" != "X"; then
+ echo
+ echo "Unrecognized options:"
+ echo " $ac_unrecognized_opts"
+fi
echo "========================================================================"
if test "X$USE_OPENSSL" = "X"; then
diff --git a/doc/arm/Bv9ARM-book.xml b/doc/arm/Bv9ARM-book.xml
index 0238065523d3..e9b52d61c9dd 100644
--- a/doc/arm/Bv9ARM-book.xml
+++ b/doc/arm/Bv9ARM-book.xml
@@ -1,8 +1,8 @@
<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
- "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
+ "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -18,7 +18,6 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- File: $Id$ -->
<book xmlns:xi="http://www.w3.org/2001/XInclude">
<title>BIND 9 Administrator Reference Manual</title>
@@ -34,6 +33,7 @@
<year>2011</year>
<year>2012</year>
<year>2013</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
@@ -43,6 +43,7 @@
<year>2003</year>
<holder>Internet Software Consortium.</holder>
</copyright>
+ <xi:include href="releaseinfo.xml"/>
</bookinfo>
<chapter id="Bv9ARM.ch01">
@@ -62,414 +63,411 @@
<title>Scope of Document</title>
<para>
- The Berkeley Internet Name Domain
- (<acronym>BIND</acronym>) implements a
- domain name server for a number of operating systems. This
- document provides basic information about the installation and
- care of the Internet Systems Consortium (<acronym>ISC</acronym>)
- <acronym>BIND</acronym> version 9 software package for
- system administrators.
+ The Berkeley Internet Name Domain
+ (<acronym>BIND</acronym>) implements a
+ domain name server for a number of operating systems. This
+ document provides basic information about the installation and
+ care of the Internet Systems Consortium (<acronym>ISC</acronym>)
+ <acronym>BIND</acronym> version 9 software package for
+ system administrators.
</para>
-
- <para>
- This version of the manual corresponds to BIND version 9.9.
- </para>
-
+ <xi:include href="pkgversion.xml"/>
</sect1>
+
<sect1>
<title>Organization of This Document</title>
<para>
- In this document, <emphasis>Chapter 1</emphasis> introduces
- the basic <acronym>DNS</acronym> and <acronym>BIND</acronym> concepts. <emphasis>Chapter 2</emphasis>
- describes resource requirements for running <acronym>BIND</acronym> in various
- environments. Information in <emphasis>Chapter 3</emphasis> is
- <emphasis>task-oriented</emphasis> in its presentation and is
- organized functionally, to aid in the process of installing the
- <acronym>BIND</acronym> 9 software. The task-oriented
- section is followed by
- <emphasis>Chapter 4</emphasis>, which contains more advanced
- concepts that the system administrator may need for implementing
- certain options. <emphasis>Chapter 5</emphasis>
- describes the <acronym>BIND</acronym> 9 lightweight
- resolver. The contents of <emphasis>Chapter 6</emphasis> are
- organized as in a reference manual to aid in the ongoing
- maintenance of the software. <emphasis>Chapter 7</emphasis> addresses
- security considerations, and
- <emphasis>Chapter 8</emphasis> contains troubleshooting help. The
- main body of the document is followed by several
- <emphasis>appendices</emphasis> which contain useful reference
- information, such as a <emphasis>bibliography</emphasis> and
- historic information related to <acronym>BIND</acronym>
- and the Domain Name
- System.
+ In this document, <emphasis>Chapter 1</emphasis> introduces
+ the basic <acronym>DNS</acronym> and <acronym>BIND</acronym> concepts. <emphasis>Chapter 2</emphasis>
+ describes resource requirements for running <acronym>BIND</acronym> in various
+ environments. Information in <emphasis>Chapter 3</emphasis> is
+ <emphasis>task-oriented</emphasis> in its presentation and is
+ organized functionally, to aid in the process of installing the
+ <acronym>BIND</acronym> 9 software. The task-oriented
+ section is followed by
+ <emphasis>Chapter 4</emphasis>, which contains more advanced
+ concepts that the system administrator may need for implementing
+ certain options. <emphasis>Chapter 5</emphasis>
+ describes the <acronym>BIND</acronym> 9 lightweight
+ resolver. The contents of <emphasis>Chapter 6</emphasis> are
+ organized as in a reference manual to aid in the ongoing
+ maintenance of the software. <emphasis>Chapter 7</emphasis> addresses
+ security considerations, and
+ <emphasis>Chapter 8</emphasis> contains troubleshooting help. The
+ main body of the document is followed by several
+ <emphasis>appendices</emphasis> which contain useful reference
+ information, such as a <emphasis>bibliography</emphasis> and
+ historic information related to <acronym>BIND</acronym>
+ and the Domain Name
+ System.
</para>
</sect1>
<sect1>
<title>Conventions Used in This Document</title>
<para>
- In this document, we use the following general typographic
- conventions:
+ In this document, we use the following general typographic
+ conventions:
</para>
<informaltable>
- <tgroup cols="2">
- <colspec colname="1" colnum="1" colwidth="3.000in"/>
- <colspec colname="2" colnum="2" colwidth="2.625in"/>
- <tbody>
- <row>
- <entry colname="1">
- <para>
- <emphasis>To describe:</emphasis>
- </para>
- </entry>
- <entry colname="2">
- <para>
- <emphasis>We use the style:</emphasis>
- </para>
- </entry>
- </row>
- <row>
- <entry colname="1">
- <para>
- a pathname, filename, URL, hostname,
- mailing list name, or new term or concept
- </para>
- </entry>
- <entry colname="2">
- <para>
- <filename>Fixed width</filename>
- </para>
- </entry>
- </row>
- <row>
- <entry colname="1">
- <para>
- literal user
- input
- </para>
- </entry>
- <entry colname="2">
- <para>
- <userinput>Fixed Width Bold</userinput>
- </para>
- </entry>
- </row>
- <row>
- <entry colname="1">
- <para>
- program output
- </para>
- </entry>
- <entry colname="2">
- <para>
- <computeroutput>Fixed Width</computeroutput>
- </para>
- </entry>
- </row>
- </tbody>
- </tgroup>
+ <tgroup cols="2">
+ <colspec colname="1" colnum="1" colwidth="3.000in"/>
+ <colspec colname="2" colnum="2" colwidth="2.625in"/>
+ <tbody>
+ <row>
+ <entry colname="1">
+ <para>
+ <emphasis>To describe:</emphasis>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ <emphasis>We use the style:</emphasis>
+ </para>
+ </entry>
+ </row>
+ <row>
+ <entry colname="1">
+ <para>
+ a pathname, filename, URL, hostname,
+ mailing list name, or new term or concept
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ <filename>Fixed width</filename>
+ </para>
+ </entry>
+ </row>
+ <row>
+ <entry colname="1">
+ <para>
+ literal user
+ input
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ <userinput>Fixed Width Bold</userinput>
+ </para>
+ </entry>
+ </row>
+ <row>
+ <entry colname="1">
+ <para>
+ program output
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ <computeroutput>Fixed Width</computeroutput>
+ </para>
+ </entry>
+ </row>
+ </tbody>
+ </tgroup>
</informaltable>
<para>
- The following conventions are used in descriptions of the
- <acronym>BIND</acronym> configuration file:<informaltable colsep="0" frame="all" rowsep="0">
- <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="2Level-table">
- <colspec colname="1" colnum="1" colsep="0" colwidth="3.000in"/>
- <colspec colname="2" colnum="2" colsep="0" colwidth="2.625in"/>
- <tbody>
- <row rowsep="0">
- <entry colname="1" colsep="1" rowsep="1">
- <para>
- <emphasis>To describe:</emphasis>
- </para>
- </entry>
- <entry colname="2" rowsep="1">
- <para>
- <emphasis>We use the style:</emphasis>
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1" colsep="1" rowsep="1">
- <para>
- keywords
- </para>
- </entry>
- <entry colname="2" rowsep="1">
- <para>
- <literal>Fixed Width</literal>
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1" colsep="1" rowsep="1">
- <para>
- variables
- </para>
- </entry>
- <entry colname="2" rowsep="1">
- <para>
- <varname>Fixed Width</varname>
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1" colsep="1">
- <para>
- Optional input
- </para>
- </entry>
- <entry colname="2">
- <para>
- <optional>Text is enclosed in square brackets</optional>
- </para>
- </entry>
- </row>
- </tbody>
- </tgroup>
- </informaltable>
+ The following conventions are used in descriptions of the
+ <acronym>BIND</acronym> configuration file:<informaltable colsep="0" frame="all" rowsep="0">
+ <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="2Level-table">
+ <colspec colname="1" colnum="1" colsep="0" colwidth="3.000in"/>
+ <colspec colname="2" colnum="2" colsep="0" colwidth="2.625in"/>
+ <tbody>
+ <row rowsep="0">
+ <entry colname="1" colsep="1" rowsep="1">
+ <para>
+ <emphasis>To describe:</emphasis>
+ </para>
+ </entry>
+ <entry colname="2" rowsep="1">
+ <para>
+ <emphasis>We use the style:</emphasis>
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1" colsep="1" rowsep="1">
+ <para>
+ keywords
+ </para>
+ </entry>
+ <entry colname="2" rowsep="1">
+ <para>
+ <literal>Fixed Width</literal>
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1" colsep="1" rowsep="1">
+ <para>
+ variables
+ </para>
+ </entry>
+ <entry colname="2" rowsep="1">
+ <para>
+ <varname>Fixed Width</varname>
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1" colsep="1">
+ <para>
+ Optional input
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ <optional>Text is enclosed in square brackets</optional>
+ </para>
+ </entry>
+ </row>
+ </tbody>
+ </tgroup>
+ </informaltable>
</para>
</sect1>
<sect1>
<title>The Domain Name System (<acronym>DNS</acronym>)</title>
<para>
- The purpose of this document is to explain the installation
- and upkeep of the <acronym>BIND</acronym> (Berkeley Internet
+ The purpose of this document is to explain the installation
+ and upkeep of the <acronym>BIND</acronym> (Berkeley Internet
Name Domain) software package, and we
- begin by reviewing the fundamentals of the Domain Name System
- (<acronym>DNS</acronym>) as they relate to <acronym>BIND</acronym>.
+ begin by reviewing the fundamentals of the Domain Name System
+ (<acronym>DNS</acronym>) as they relate to <acronym>BIND</acronym>.
</para>
<sect2>
- <title>DNS Fundamentals</title>
-
- <para>
- The Domain Name System (DNS) is a hierarchical, distributed
- database. It stores information for mapping Internet host names to
- IP
- addresses and vice versa, mail routing information, and other data
- used by Internet applications.
- </para>
-
- <para>
- Clients look up information in the DNS by calling a
- <emphasis>resolver</emphasis> library, which sends queries to one or
- more <emphasis>name servers</emphasis> and interprets the responses.
- The <acronym>BIND</acronym> 9 software distribution
- contains a
- name server, <command>named</command>, and a resolver
- library, <command>liblwres</command>. The older
- <command>libbind</command> resolver library is also available
- from ISC as a separate download.
- </para>
-
- </sect2><sect2>
- <title>Domains and Domain Names</title>
-
- <para>
- The data stored in the DNS is identified by <emphasis>domain names</emphasis> that are organized as a tree according to
- organizational or administrative boundaries. Each node of the tree,
- called a <emphasis>domain</emphasis>, is given a label. The domain
- name of the
- node is the concatenation of all the labels on the path from the
- node to the <emphasis>root</emphasis> node. This is represented
- in written form as a string of labels listed from right to left and
- separated by dots. A label need only be unique within its parent
- domain.
- </para>
-
- <para>
- For example, a domain name for a host at the
- company <emphasis>Example, Inc.</emphasis> could be
- <literal>ourhost.example.com</literal>,
- where <literal>com</literal> is the
- top level domain to which
- <literal>ourhost.example.com</literal> belongs,
- <literal>example</literal> is
- a subdomain of <literal>com</literal>, and
- <literal>ourhost</literal> is the
- name of the host.
- </para>
-
- <para>
- For administrative purposes, the name space is partitioned into
- areas called <emphasis>zones</emphasis>, each starting at a node and
- extending down to the leaf nodes or to nodes where other zones
- start.
- The data for each zone is stored in a <emphasis>name server</emphasis>, which answers queries about the zone using the
- <emphasis>DNS protocol</emphasis>.
- </para>
-
- <para>
- The data associated with each domain name is stored in the
- form of <emphasis>resource records</emphasis> (<acronym>RR</acronym>s).
- Some of the supported resource record types are described in
- <xref linkend="types_of_resource_records_and_when_to_use_them"/>.
- </para>
-
- <para>
- For more detailed information about the design of the DNS and
- the DNS protocol, please refer to the standards documents listed in
- <xref linkend="rfcs"/>.
- </para>
+ <title>DNS Fundamentals</title>
+
+ <para>
+ The Domain Name System (DNS) is a hierarchical, distributed
+ database. It stores information for mapping Internet host names to
+ IP
+ addresses and vice versa, mail routing information, and other data
+ used by Internet applications.
+ </para>
+
+ <para>
+ Clients look up information in the DNS by calling a
+ <emphasis>resolver</emphasis> library, which sends queries to one or
+ more <emphasis>name servers</emphasis> and interprets the responses.
+ The <acronym>BIND</acronym> 9 software distribution
+ contains a
+ name server, <command>named</command>, and a resolver
+ library, <command>liblwres</command>. The older
+ <command>libbind</command> resolver library is also available
+ from ISC as a separate download.
+ </para>
+
+ </sect2><sect2>
+ <title>Domains and Domain Names</title>
+
+ <para>
+ The data stored in the DNS is identified by <emphasis>domain names</emphasis> that are organized as a tree according to
+ organizational or administrative boundaries. Each node of the tree,
+ called a <emphasis>domain</emphasis>, is given a label. The domain
+ name of the
+ node is the concatenation of all the labels on the path from the
+ node to the <emphasis>root</emphasis> node. This is represented
+ in written form as a string of labels listed from right to left and
+ separated by dots. A label need only be unique within its parent
+ domain.
+ </para>
+
+ <para>
+ For example, a domain name for a host at the
+ company <emphasis>Example, Inc.</emphasis> could be
+ <literal>ourhost.example.com</literal>,
+ where <literal>com</literal> is the
+ top level domain to which
+ <literal>ourhost.example.com</literal> belongs,
+ <literal>example</literal> is
+ a subdomain of <literal>com</literal>, and
+ <literal>ourhost</literal> is the
+ name of the host.
+ </para>
+
+ <para>
+ For administrative purposes, the name space is partitioned into
+ areas called <emphasis>zones</emphasis>, each starting at a node and
+ extending down to the leaf nodes or to nodes where other zones
+ start.
+ The data for each zone is stored in a <emphasis>name server</emphasis>, which answers queries about the zone using the
+ <emphasis>DNS protocol</emphasis>.
+ </para>
+
+ <para>
+ The data associated with each domain name is stored in the
+ form of <emphasis>resource records</emphasis> (<acronym>RR</acronym>s).
+ Some of the supported resource record types are described in
+ <xref linkend="types_of_resource_records_and_when_to_use_them"/>.
+ </para>
+
+ <para>
+ For more detailed information about the design of the DNS and
+ the DNS protocol, please refer to the standards documents listed in
+ <xref linkend="rfcs"/>.
+ </para>
</sect2>
<sect2>
- <title>Zones</title>
- <para>
- To properly operate a name server, it is important to understand
- the difference between a <emphasis>zone</emphasis>
- and a <emphasis>domain</emphasis>.
- </para>
-
- <para>
- As stated previously, a zone is a point of delegation in
- the <acronym>DNS</acronym> tree. A zone consists of
- those contiguous parts of the domain
- tree for which a name server has complete information and over which
- it has authority. It contains all domain names from a certain point
- downward in the domain tree except those which are delegated to
- other zones. A delegation point is marked by one or more
- <emphasis>NS records</emphasis> in the
- parent zone, which should be matched by equivalent NS records at
- the root of the delegated zone.
- </para>
-
- <para>
- For instance, consider the <literal>example.com</literal>
- domain which includes names
- such as <literal>host.aaa.example.com</literal> and
- <literal>host.bbb.example.com</literal> even though
- the <literal>example.com</literal> zone includes
- only delegations for the <literal>aaa.example.com</literal> and
- <literal>bbb.example.com</literal> zones. A zone can
- map
- exactly to a single domain, but could also include only part of a
- domain, the rest of which could be delegated to other
- name servers. Every name in the <acronym>DNS</acronym>
- tree is a
- <emphasis>domain</emphasis>, even if it is
- <emphasis>terminal</emphasis>, that is, has no
- <emphasis>subdomains</emphasis>. Every subdomain is a domain and
- every domain except the root is also a subdomain. The terminology is
- not intuitive and we suggest that you read RFCs 1033, 1034 and 1035
- to
- gain a complete understanding of this difficult and subtle
- topic.
- </para>
-
- <para>
- Though <acronym>BIND</acronym> is called a "domain name
- server",
- it deals primarily in terms of zones. The master and slave
- declarations in the <filename>named.conf</filename> file
- specify
- zones, not domains. When you ask some other site if it is willing to
- be a slave server for your <emphasis>domain</emphasis>, you are
- actually asking for slave service for some collection of zones.
- </para>
+ <title>Zones</title>
+ <para>
+ To properly operate a name server, it is important to understand
+ the difference between a <emphasis>zone</emphasis>
+ and a <emphasis>domain</emphasis>.
+ </para>
+
+ <para>
+ As stated previously, a zone is a point of delegation in
+ the <acronym>DNS</acronym> tree. A zone consists of
+ those contiguous parts of the domain
+ tree for which a name server has complete information and over which
+ it has authority. It contains all domain names from a certain point
+ downward in the domain tree except those which are delegated to
+ other zones. A delegation point is marked by one or more
+ <emphasis>NS records</emphasis> in the
+ parent zone, which should be matched by equivalent NS records at
+ the root of the delegated zone.
+ </para>
+
+ <para>
+ For instance, consider the <literal>example.com</literal>
+ domain which includes names
+ such as <literal>host.aaa.example.com</literal> and
+ <literal>host.bbb.example.com</literal> even though
+ the <literal>example.com</literal> zone includes
+ only delegations for the <literal>aaa.example.com</literal> and
+ <literal>bbb.example.com</literal> zones. A zone can
+ map
+ exactly to a single domain, but could also include only part of a
+ domain, the rest of which could be delegated to other
+ name servers. Every name in the <acronym>DNS</acronym>
+ tree is a
+ <emphasis>domain</emphasis>, even if it is
+ <emphasis>terminal</emphasis>, that is, has no
+ <emphasis>subdomains</emphasis>. Every subdomain is a domain and
+ every domain except the root is also a subdomain. The terminology is
+ not intuitive and we suggest that you read RFCs 1033, 1034 and 1035
+ to
+ gain a complete understanding of this difficult and subtle
+ topic.
+ </para>
+
+ <para>
+ Though <acronym>BIND</acronym> is called a "domain name
+ server",
+ it deals primarily in terms of zones. The master and slave
+ declarations in the <filename>named.conf</filename> file
+ specify
+ zones, not domains. When you ask some other site if it is willing to
+ be a slave server for your <emphasis>domain</emphasis>, you are
+ actually asking for slave service for some collection of zones.
+ </para>
</sect2>
<sect2>
- <title>Authoritative Name Servers</title>
-
- <para>
- Each zone is served by at least
- one <emphasis>authoritative name server</emphasis>,
- which contains the complete data for the zone.
- To make the DNS tolerant of server and network failures,
- most zones have two or more authoritative servers, on
- different networks.
- </para>
-
- <para>
- Responses from authoritative servers have the "authoritative
- answer" (AA) bit set in the response packets. This makes them
- easy to identify when debugging DNS configurations using tools like
- <command>dig</command> (<xref linkend="diagnostic_tools"/>).
- </para>
-
- <sect3>
- <title>The Primary Master</title>
-
- <para>
- The authoritative server where the master copy of the zone
- data is maintained is called the
+ <title>Authoritative Name Servers</title>
+
+ <para>
+ Each zone is served by at least
+ one <emphasis>authoritative name server</emphasis>,
+ which contains the complete data for the zone.
+ To make the DNS tolerant of server and network failures,
+ most zones have two or more authoritative servers, on
+ different networks.
+ </para>
+
+ <para>
+ Responses from authoritative servers have the "authoritative
+ answer" (AA) bit set in the response packets. This makes them
+ easy to identify when debugging DNS configurations using tools like
+ <command>dig</command> (<xref linkend="diagnostic_tools"/>).
+ </para>
+
+ <sect3>
+ <title>The Primary Master</title>
+
+ <para>
+ The authoritative server where the master copy of the zone
+ data is maintained is called the
<emphasis>primary master</emphasis> server, or simply the
- <emphasis>primary</emphasis>. Typically it loads the zone
- contents from some local file edited by humans or perhaps
- generated mechanically from some other local file which is
- edited by humans. This file is called the
+ <emphasis>primary</emphasis>. Typically it loads the zone
+ contents from some local file edited by humans or perhaps
+ generated mechanically from some other local file which is
+ edited by humans. This file is called the
<emphasis>zone file</emphasis> or
<emphasis>master file</emphasis>.
- </para>
+ </para>
<para>
In some cases, however, the master file may not be edited
by humans at all, but may instead be the result of
<emphasis>dynamic update</emphasis> operations.
</para>
- </sect3>
-
- <sect3>
- <title>Slave Servers</title>
- <para>
- The other authoritative servers, the <emphasis>slave</emphasis>
- servers (also known as <emphasis>secondary</emphasis> servers)
- load
- the zone contents from another server using a replication process
- known as a <emphasis>zone transfer</emphasis>. Typically the data
- are
- transferred directly from the primary master, but it is also
- possible
- to transfer it from another slave. In other words, a slave server
- may itself act as a master to a subordinate slave server.
- </para>
- </sect3>
-
- <sect3>
- <title>Stealth Servers</title>
-
- <para>
- Usually all of the zone's authoritative servers are listed in
- NS records in the parent zone. These NS records constitute
- a <emphasis>delegation</emphasis> of the zone from the parent.
- The authoritative servers are also listed in the zone file itself,
- at the <emphasis>top level</emphasis> or <emphasis>apex</emphasis>
- of the zone. You can list servers in the zone's top-level NS
- records that are not in the parent's NS delegation, but you cannot
- list servers in the parent's delegation that are not present at
- the zone's top level.
- </para>
-
- <para>
- A <emphasis>stealth server</emphasis> is a server that is
- authoritative for a zone but is not listed in that zone's NS
- records. Stealth servers can be used for keeping a local copy of
- a
- zone to speed up access to the zone's records or to make sure that
- the
- zone is available even if all the "official" servers for the zone
- are
- inaccessible.
- </para>
-
- <para>
- A configuration where the primary master server itself is a
- stealth server is often referred to as a "hidden primary"
- configuration. One use for this configuration is when the primary
- master
- is behind a firewall and therefore unable to communicate directly
- with the outside world.
- </para>
-
- </sect3>
+ </sect3>
+
+ <sect3>
+ <title>Slave Servers</title>
+ <para>
+ The other authoritative servers, the <emphasis>slave</emphasis>
+ servers (also known as <emphasis>secondary</emphasis> servers)
+ load
+ the zone contents from another server using a replication process
+ known as a <emphasis>zone transfer</emphasis>. Typically the data
+ are
+ transferred directly from the primary master, but it is also
+ possible
+ to transfer it from another slave. In other words, a slave server
+ may itself act as a master to a subordinate slave server.
+ </para>
+ </sect3>
+
+ <sect3>
+ <title>Stealth Servers</title>
+
+ <para>
+ Usually all of the zone's authoritative servers are listed in
+ NS records in the parent zone. These NS records constitute
+ a <emphasis>delegation</emphasis> of the zone from the parent.
+ The authoritative servers are also listed in the zone file itself,
+ at the <emphasis>top level</emphasis> or <emphasis>apex</emphasis>
+ of the zone. You can list servers in the zone's top-level NS
+ records that are not in the parent's NS delegation, but you cannot
+ list servers in the parent's delegation that are not present at
+ the zone's top level.
+ </para>
+
+ <para>
+ A <emphasis>stealth server</emphasis> is a server that is
+ authoritative for a zone but is not listed in that zone's NS
+ records. Stealth servers can be used for keeping a local copy of
+ a
+ zone to speed up access to the zone's records or to make sure that
+ the
+ zone is available even if all the "official" servers for the zone
+ are
+ inaccessible.
+ </para>
+
+ <para>
+ A configuration where the primary master server itself is a
+ stealth server is often referred to as a "hidden primary"
+ configuration. One use for this configuration is when the primary
+ master
+ is behind a firewall and therefore unable to communicate directly
+ with the outside world.
+ </para>
+
+ </sect3>
</sect2>
<sect2>
- <title>Caching Name Servers</title>
+ <title>Caching Name Servers</title>
<!--
- Terminology here is inconsistent. Probably ought to
@@ -477,88 +475,88 @@
- with just a note about "caching" terminology.
-->
- <para>
- The resolver libraries provided by most operating systems are
- <emphasis>stub resolvers</emphasis>, meaning that they are not
- capable of
- performing the full DNS resolution process by themselves by talking
- directly to the authoritative servers. Instead, they rely on a
- local
- name server to perform the resolution on their behalf. Such a
- server
- is called a <emphasis>recursive</emphasis> name server; it performs
- <emphasis>recursive lookups</emphasis> for local clients.
- </para>
-
- <para>
- To improve performance, recursive servers cache the results of
- the lookups they perform. Since the processes of recursion and
- caching are intimately connected, the terms
- <emphasis>recursive server</emphasis> and
- <emphasis>caching server</emphasis> are often used synonymously.
- </para>
-
- <para>
- The length of time for which a record may be retained in
- the cache of a caching name server is controlled by the
- Time To Live (TTL) field associated with each resource record.
- </para>
-
- <sect3>
- <title>Forwarding</title>
-
- <para>
- Even a caching name server does not necessarily perform
- the complete recursive lookup itself. Instead, it can
- <emphasis>forward</emphasis> some or all of the queries
- that it cannot satisfy from its cache to another caching name
- server,
- commonly referred to as a <emphasis>forwarder</emphasis>.
- </para>
-
- <para>
- There may be one or more forwarders,
- and they are queried in turn until the list is exhausted or an
- answer
- is found. Forwarders are typically used when you do not
- wish all the servers at a given site to interact directly with the
- rest of
- the Internet servers. A typical scenario would involve a number
- of internal <acronym>DNS</acronym> servers and an
- Internet firewall. Servers unable
- to pass packets through the firewall would forward to the server
- that can do it, and that server would query the Internet <acronym>DNS</acronym> servers
- on the internal server's behalf.
- </para>
- </sect3>
+ <para>
+ The resolver libraries provided by most operating systems are
+ <emphasis>stub resolvers</emphasis>, meaning that they are not
+ capable of
+ performing the full DNS resolution process by themselves by talking
+ directly to the authoritative servers. Instead, they rely on a
+ local
+ name server to perform the resolution on their behalf. Such a
+ server
+ is called a <emphasis>recursive</emphasis> name server; it performs
+ <emphasis>recursive lookups</emphasis> for local clients.
+ </para>
+
+ <para>
+ To improve performance, recursive servers cache the results of
+ the lookups they perform. Since the processes of recursion and
+ caching are intimately connected, the terms
+ <emphasis>recursive server</emphasis> and
+ <emphasis>caching server</emphasis> are often used synonymously.
+ </para>
+
+ <para>
+ The length of time for which a record may be retained in
+ the cache of a caching name server is controlled by the
+ Time To Live (TTL) field associated with each resource record.
+ </para>
+
+ <sect3>
+ <title>Forwarding</title>
+
+ <para>
+ Even a caching name server does not necessarily perform
+ the complete recursive lookup itself. Instead, it can
+ <emphasis>forward</emphasis> some or all of the queries
+ that it cannot satisfy from its cache to another caching name
+ server,
+ commonly referred to as a <emphasis>forwarder</emphasis>.
+ </para>
+
+ <para>
+ There may be one or more forwarders,
+ and they are queried in turn until the list is exhausted or an
+ answer
+ is found. Forwarders are typically used when you do not
+ wish all the servers at a given site to interact directly with the
+ rest of
+ the Internet servers. A typical scenario would involve a number
+ of internal <acronym>DNS</acronym> servers and an
+ Internet firewall. Servers unable
+ to pass packets through the firewall would forward to the server
+ that can do it, and that server would query the Internet <acronym>DNS</acronym> servers
+ on the internal server's behalf.
+ </para>
+ </sect3>
</sect2>
<sect2>
- <title>Name Servers in Multiple Roles</title>
-
- <para>
- The <acronym>BIND</acronym> name server can
- simultaneously act as
- a master for some zones, a slave for other zones, and as a caching
- (recursive) server for a set of local clients.
- </para>
-
- <para>
- However, since the functions of authoritative name service
- and caching/recursive name service are logically separate, it is
- often advantageous to run them on separate server machines.
-
- A server that only provides authoritative name service
- (an <emphasis>authoritative-only</emphasis> server) can run with
- recursion disabled, improving reliability and security.
-
- A server that is not authoritative for any zones and only provides
- recursive service to local
- clients (a <emphasis>caching-only</emphasis> server)
- does not need to be reachable from the Internet at large and can
- be placed inside a firewall.
- </para>
+ <title>Name Servers in Multiple Roles</title>
+
+ <para>
+ The <acronym>BIND</acronym> name server can
+ simultaneously act as
+ a master for some zones, a slave for other zones, and as a caching
+ (recursive) server for a set of local clients.
+ </para>
+
+ <para>
+ However, since the functions of authoritative name service
+ and caching/recursive name service are logically separate, it is
+ often advantageous to run them on separate server machines.
+
+ A server that only provides authoritative name service
+ (an <emphasis>authoritative-only</emphasis> server) can run with
+ recursion disabled, improving reliability and security.
+
+ A server that is not authoritative for any zones and only provides
+ recursive service to local
+ clients (a <emphasis>caching-only</emphasis> server)
+ does not need to be reachable from the Internet at large and can
+ be placed inside a firewall.
+ </para>
</sect2>
</sect1>
@@ -572,87 +570,87 @@
<title>Hardware requirements</title>
<para>
- <acronym>DNS</acronym> hardware requirements have
- traditionally been quite modest.
- For many installations, servers that have been pensioned off from
- active duty have performed admirably as <acronym>DNS</acronym> servers.
+ <acronym>DNS</acronym> hardware requirements have
+ traditionally been quite modest.
+ For many installations, servers that have been pensioned off from
+ active duty have performed admirably as <acronym>DNS</acronym> servers.
</para>
<para>
- The DNSSEC features of <acronym>BIND</acronym> 9
- may prove to be quite
- CPU intensive however, so organizations that make heavy use of these
- features may wish to consider larger systems for these applications.
- <acronym>BIND</acronym> 9 is fully multithreaded, allowing
- full utilization of
- multiprocessor systems for installations that need it.
+ The DNSSEC features of <acronym>BIND</acronym> 9
+ may prove to be quite
+ CPU intensive however, so organizations that make heavy use of these
+ features may wish to consider larger systems for these applications.
+ <acronym>BIND</acronym> 9 is fully multithreaded, allowing
+ full utilization of
+ multiprocessor systems for installations that need it.
</para>
</sect1>
<sect1>
<title>CPU Requirements</title>
<para>
- CPU requirements for <acronym>BIND</acronym> 9 range from
- i486-class machines
- for serving of static zones without caching, to enterprise-class
- machines if you intend to process many dynamic updates and DNSSEC
- signed zones, serving many thousands of queries per second.
+ CPU requirements for <acronym>BIND</acronym> 9 range from
+ i486-class machines
+ for serving of static zones without caching, to enterprise-class
+ machines if you intend to process many dynamic updates and DNSSEC
+ signed zones, serving many thousands of queries per second.
</para>
</sect1>
<sect1>
<title>Memory Requirements</title>
<para>
- The memory of the server has to be large enough to fit the
- cache and zones loaded off disk. The <command>max-cache-size</command>
- option can be used to limit the amount of memory used by the cache,
- at the expense of reducing cache hit rates and causing more <acronym>DNS</acronym>
- traffic.
- Additionally, if additional section caching
- (<xref linkend="acache"/>) is enabled,
- the <command>max-acache-size</command> option can be used to
- limit the amount
- of memory used by the mechanism.
- It is still good practice to have enough memory to load
- all zone and cache data into memory &mdash; unfortunately, the best
- way
- to determine this for a given installation is to watch the name server
- in operation. After a few weeks the server process should reach
- a relatively stable size where entries are expiring from the cache as
- fast as they are being inserted.
+ The memory of the server has to be large enough to fit the
+ cache and zones loaded off disk. The <command>max-cache-size</command>
+ option can be used to limit the amount of memory used by the cache,
+ at the expense of reducing cache hit rates and causing more <acronym>DNS</acronym>
+ traffic.
+ Additionally, if additional section caching
+ (<xref linkend="acache"/>) is enabled,
+ the <command>max-acache-size</command> option can be used to
+ limit the amount
+ of memory used by the mechanism.
+ It is still good practice to have enough memory to load
+ all zone and cache data into memory &mdash; unfortunately, the best
+ way
+ to determine this for a given installation is to watch the name server
+ in operation. After a few weeks the server process should reach
+ a relatively stable size where entries are expiring from the cache as
+ fast as they are being inserted.
</para>
<!--
- - Add something here about leaving overhead for attacks?
+ - Add something here about leaving overhead for attacks?
- How much overhead? Percentage?
- -->
+ -->
</sect1>
<sect1>
<title>Name Server Intensive Environment Issues</title>
<para>
- For name server intensive environments, there are two alternative
- configurations that may be used. The first is where clients and
- any second-level internal name servers query a main name server, which
- has enough memory to build a large cache. This approach minimizes
- the bandwidth used by external name lookups. The second alternative
- is to set up second-level internal name servers to make queries
- independently.
- In this configuration, none of the individual machines needs to
- have as much memory or CPU power as in the first alternative, but
- this has the disadvantage of making many more external queries,
- as none of the name servers share their cached data.
+ For name server intensive environments, there are two alternative
+ configurations that may be used. The first is where clients and
+ any second-level internal name servers query a main name server, which
+ has enough memory to build a large cache. This approach minimizes
+ the bandwidth used by external name lookups. The second alternative
+ is to set up second-level internal name servers to make queries
+ independently.
+ In this configuration, none of the individual machines needs to
+ have as much memory or CPU power as in the first alternative, but
+ this has the disadvantage of making many more external queries,
+ as none of the name servers share their cached data.
</para>
</sect1>
<sect1>
<title>Supported Operating Systems</title>
<para>
- ISC <acronym>BIND</acronym> 9 compiles and runs on a large
- number
- of Unix-like operating systems and on
- Microsoft Windows Server 2003 and 2008, and Windows XP and Vista.
- For an up-to-date
- list of supported systems, see the README file in the top level
- directory
- of the BIND 9 source distribution.
+ ISC <acronym>BIND</acronym> 9 compiles and runs on a large
+ number
+ of Unix-like operating systems and on
+ Microsoft Windows Server 2003 and 2008, and Windows XP and Vista.
+ For an up-to-date
+ list of supported systems, see the README file in the top level
+ directory
+ of the BIND 9 source distribution.
</para>
</sect1>
</chapter>
@@ -668,16 +666,16 @@
<sect1 id="sample_configuration">
<title>Sample Configurations</title>
<sect2>
- <title>A Caching-only Name Server</title>
- <para>
- The following sample configuration is appropriate for a caching-only
- name server for use by clients internal to a corporation. All
- queries
- from outside clients are refused using the <command>allow-query</command>
- option. Alternatively, the same effect could be achieved using
- suitable
- firewall rules.
- </para>
+ <title>A Caching-only Name Server</title>
+ <para>
+ The following sample configuration is appropriate for a caching-only
+ name server for use by clients internal to a corporation. All
+ queries
+ from outside clients are refused using the <command>allow-query</command>
+ option. Alternatively, the same effect could be achieved using
+ suitable
+ firewall rules.
+ </para>
<programlisting>
// Two corporate subnets we wish to allow queries from.
@@ -700,12 +698,12 @@ zone "0.0.127.in-addr.arpa" {
</sect2>
<sect2>
- <title>An Authoritative-only Name Server</title>
- <para>
- This sample configuration is for an authoritative-only server
- that is the master server for "<filename>example.com</filename>"
- and a slave for the subdomain "<filename>eng.example.com</filename>".
- </para>
+ <title>An Authoritative-only Name Server</title>
+ <para>
+ This sample configuration is for an authoritative-only server
+ that is the master server for "<filename>example.com</filename>"
+ and a slave for the subdomain "<filename>eng.example.com</filename>".
+ </para>
<programlisting>
options {
@@ -733,8 +731,8 @@ zone "example.com" {
// IP addresses of slave servers allowed to
// transfer example.com
allow-transfer {
- 192.168.4.14;
- 192.168.5.53;
+ 192.168.4.14;
+ 192.168.5.53;
};
};
// We are a slave server for eng.example.com
@@ -752,150 +750,150 @@ zone "eng.example.com" {
<sect1>
<title>Load Balancing</title>
<!--
- - Add explanation of why load balancing is fragile at best
+ - Add explanation of why load balancing is fragile at best
- and completely pointless in the general case.
- -->
+ -->
<para>
- A primitive form of load balancing can be achieved in
- the <acronym>DNS</acronym> by using multiple records
+ A primitive form of load balancing can be achieved in
+ the <acronym>DNS</acronym> by using multiple records
(such as multiple A records) for one name.
</para>
<para>
- For example, if you have three WWW servers with network addresses
- of 10.0.0.1, 10.0.0.2 and 10.0.0.3, a set of records such as the
- following means that clients will connect to each machine one third
- of the time:
+ For example, if you have three WWW servers with network addresses
+ of 10.0.0.1, 10.0.0.2 and 10.0.0.3, a set of records such as the
+ following means that clients will connect to each machine one third
+ of the time:
</para>
<informaltable colsep="0" rowsep="0">
- <tgroup cols="5" colsep="0" rowsep="0" tgroupstyle="2Level-table">
- <colspec colname="1" colnum="1" colsep="0" colwidth="0.875in"/>
- <colspec colname="2" colnum="2" colsep="0" colwidth="0.500in"/>
- <colspec colname="3" colnum="3" colsep="0" colwidth="0.750in"/>
- <colspec colname="4" colnum="4" colsep="0" colwidth="0.750in"/>
- <colspec colname="5" colnum="5" colsep="0" colwidth="2.028in"/>
- <tbody>
- <row rowsep="0">
- <entry colname="1">
- <para>
- Name
- </para>
- </entry>
- <entry colname="2">
- <para>
- TTL
- </para>
- </entry>
- <entry colname="3">
- <para>
- CLASS
- </para>
- </entry>
- <entry colname="4">
- <para>
- TYPE
- </para>
- </entry>
- <entry colname="5">
- <para>
- Resource Record (RR) Data
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <literal>www</literal>
- </para>
- </entry>
- <entry colname="2">
- <para>
- <literal>600</literal>
- </para>
- </entry>
- <entry colname="3">
- <para>
- <literal>IN</literal>
- </para>
- </entry>
- <entry colname="4">
- <para>
- <literal>A</literal>
- </para>
- </entry>
- <entry colname="5">
- <para>
- <literal>10.0.0.1</literal>
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para/>
- </entry>
- <entry colname="2">
- <para>
- <literal>600</literal>
- </para>
- </entry>
- <entry colname="3">
- <para>
- <literal>IN</literal>
- </para>
- </entry>
- <entry colname="4">
- <para>
- <literal>A</literal>
- </para>
- </entry>
- <entry colname="5">
- <para>
- <literal>10.0.0.2</literal>
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para/>
- </entry>
- <entry colname="2">
- <para>
- <literal>600</literal>
- </para>
- </entry>
- <entry colname="3">
- <para>
- <literal>IN</literal>
- </para>
- </entry>
- <entry colname="4">
- <para>
- <literal>A</literal>
- </para>
- </entry>
- <entry colname="5">
- <para>
- <literal>10.0.0.3</literal>
- </para>
- </entry>
- </row>
- </tbody>
- </tgroup>
+ <tgroup cols="5" colsep="0" rowsep="0" tgroupstyle="2Level-table">
+ <colspec colname="1" colnum="1" colsep="0" colwidth="0.875in"/>
+ <colspec colname="2" colnum="2" colsep="0" colwidth="0.500in"/>
+ <colspec colname="3" colnum="3" colsep="0" colwidth="0.750in"/>
+ <colspec colname="4" colnum="4" colsep="0" colwidth="0.750in"/>
+ <colspec colname="5" colnum="5" colsep="0" colwidth="2.028in"/>
+ <tbody>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ Name
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ TTL
+ </para>
+ </entry>
+ <entry colname="3">
+ <para>
+ CLASS
+ </para>
+ </entry>
+ <entry colname="4">
+ <para>
+ TYPE
+ </para>
+ </entry>
+ <entry colname="5">
+ <para>
+ Resource Record (RR) Data
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <literal>www</literal>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ <literal>600</literal>
+ </para>
+ </entry>
+ <entry colname="3">
+ <para>
+ <literal>IN</literal>
+ </para>
+ </entry>
+ <entry colname="4">
+ <para>
+ <literal>A</literal>
+ </para>
+ </entry>
+ <entry colname="5">
+ <para>
+ <literal>10.0.0.1</literal>
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para/>
+ </entry>
+ <entry colname="2">
+ <para>
+ <literal>600</literal>
+ </para>
+ </entry>
+ <entry colname="3">
+ <para>
+ <literal>IN</literal>
+ </para>
+ </entry>
+ <entry colname="4">
+ <para>
+ <literal>A</literal>
+ </para>
+ </entry>
+ <entry colname="5">
+ <para>
+ <literal>10.0.0.2</literal>
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para/>
+ </entry>
+ <entry colname="2">
+ <para>
+ <literal>600</literal>
+ </para>
+ </entry>
+ <entry colname="3">
+ <para>
+ <literal>IN</literal>
+ </para>
+ </entry>
+ <entry colname="4">
+ <para>
+ <literal>A</literal>
+ </para>
+ </entry>
+ <entry colname="5">
+ <para>
+ <literal>10.0.0.3</literal>
+ </para>
+ </entry>
+ </row>
+ </tbody>
+ </tgroup>
</informaltable>
<para>
- When a resolver queries for these records, <acronym>BIND</acronym> will rotate
- them and respond to the query with the records in a different
- order. In the example above, clients will randomly receive
- records in the order 1, 2, 3; 2, 3, 1; and 3, 1, 2. Most clients
- will use the first record returned and discard the rest.
+ When a resolver queries for these records, <acronym>BIND</acronym> will rotate
+ them and respond to the query with the records in a different
+ order. In the example above, clients will randomly receive
+ records in the order 1, 2, 3; 2, 3, 1; and 3, 1, 2. Most clients
+ will use the first record returned and discard the rest.
</para>
<para>
- For more detail on ordering responses, check the
- <command>rrset-order</command> sub-statement in the
- <command>options</command> statement, see
- <xref endterm="rrset_ordering_title" linkend="rrset_ordering"/>.
+ For more detail on ordering responses, check the
+ <command>rrset-order</command> sub-statement in the
+ <command>options</command> statement, see
+ <xref endterm="rrset_ordering_title" linkend="rrset_ordering"/>.
</para>
</sect1>
@@ -904,188 +902,188 @@ zone "eng.example.com" {
<title>Name Server Operations</title>
<sect2>
- <title>Tools for Use With the Name Server Daemon</title>
- <para>
- This section describes several indispensable diagnostic,
- administrative and monitoring tools available to the system
- administrator for controlling and debugging the name server
- daemon.
- </para>
- <sect3 id="diagnostic_tools">
- <title>Diagnostic Tools</title>
- <para>
- The <command>dig</command>, <command>host</command>, and
- <command>nslookup</command> programs are all command
- line tools
- for manually querying name servers. They differ in style and
- output format.
- </para>
-
- <variablelist>
- <varlistentry>
- <term id="dig"><command>dig</command></term>
- <listitem>
- <para>
- The domain information groper (<command>dig</command>)
- is the most versatile and complete of these lookup tools.
- It has two modes: simple interactive
- mode for a single query, and batch mode which executes a
- query for
- each in a list of several query lines. All query options are
- accessible
- from the command line.
- </para>
- <cmdsynopsis label="Usage">
- <command>dig</command>
- <arg>@<replaceable>server</replaceable></arg>
- <arg choice="plain"><replaceable>domain</replaceable></arg>
- <arg><replaceable>query-type</replaceable></arg>
- <arg><replaceable>query-class</replaceable></arg>
- <arg>+<replaceable>query-option</replaceable></arg>
- <arg>-<replaceable>dig-option</replaceable></arg>
- <arg>%<replaceable>comment</replaceable></arg>
- </cmdsynopsis>
- <para>
- The usual simple use of <command>dig</command> will take the form
- </para>
- <simpara>
- <command>dig @server domain query-type query-class</command>
- </simpara>
- <para>
- For more information and a list of available commands and
- options, see the <command>dig</command> man
- page.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>host</command></term>
- <listitem>
- <para>
- The <command>host</command> utility emphasizes
- simplicity
- and ease of use. By default, it converts
- between host names and Internet addresses, but its
- functionality
- can be extended with the use of options.
- </para>
- <cmdsynopsis label="Usage">
- <command>host</command>
- <arg>-aCdlnrsTwv</arg>
- <arg>-c <replaceable>class</replaceable></arg>
- <arg>-N <replaceable>ndots</replaceable></arg>
- <arg>-t <replaceable>type</replaceable></arg>
- <arg>-W <replaceable>timeout</replaceable></arg>
- <arg>-R <replaceable>retries</replaceable></arg>
- <arg>-m <replaceable>flag</replaceable></arg>
+ <title>Tools for Use With the Name Server Daemon</title>
+ <para>
+ This section describes several indispensable diagnostic,
+ administrative and monitoring tools available to the system
+ administrator for controlling and debugging the name server
+ daemon.
+ </para>
+ <sect3 id="diagnostic_tools">
+ <title>Diagnostic Tools</title>
+ <para>
+ The <command>dig</command>, <command>host</command>, and
+ <command>nslookup</command> programs are all command
+ line tools
+ for manually querying name servers. They differ in style and
+ output format.
+ </para>
+
+ <variablelist>
+ <varlistentry>
+ <term id="dig"><command>dig</command></term>
+ <listitem>
+ <para>
+ The domain information groper (<command>dig</command>)
+ is the most versatile and complete of these lookup tools.
+ It has two modes: simple interactive
+ mode for a single query, and batch mode which executes a
+ query for
+ each in a list of several query lines. All query options are
+ accessible
+ from the command line.
+ </para>
+ <cmdsynopsis label="Usage">
+ <command>dig</command>
+ <arg>@<replaceable>server</replaceable></arg>
+ <arg choice="plain"><replaceable>domain</replaceable></arg>
+ <arg><replaceable>query-type</replaceable></arg>
+ <arg><replaceable>query-class</replaceable></arg>
+ <arg>+<replaceable>query-option</replaceable></arg>
+ <arg>-<replaceable>dig-option</replaceable></arg>
+ <arg>%<replaceable>comment</replaceable></arg>
+ </cmdsynopsis>
+ <para>
+ The usual simple use of <command>dig</command> will take the form
+ </para>
+ <simpara>
+ <command>dig @server domain query-type query-class</command>
+ </simpara>
+ <para>
+ For more information and a list of available commands and
+ options, see the <command>dig</command> man
+ page.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>host</command></term>
+ <listitem>
+ <para>
+ The <command>host</command> utility emphasizes
+ simplicity
+ and ease of use. By default, it converts
+ between host names and Internet addresses, but its
+ functionality
+ can be extended with the use of options.
+ </para>
+ <cmdsynopsis label="Usage">
+ <command>host</command>
+ <arg>-aCdlnrsTwv</arg>
+ <arg>-c <replaceable>class</replaceable></arg>
+ <arg>-N <replaceable>ndots</replaceable></arg>
+ <arg>-t <replaceable>type</replaceable></arg>
+ <arg>-W <replaceable>timeout</replaceable></arg>
+ <arg>-R <replaceable>retries</replaceable></arg>
+ <arg>-m <replaceable>flag</replaceable></arg>
<arg>-4</arg>
<arg>-6</arg>
- <arg choice="plain"><replaceable>hostname</replaceable></arg>
- <arg><replaceable>server</replaceable></arg>
- </cmdsynopsis>
- <para>
- For more information and a list of available commands and
- options, see the <command>host</command> man
- page.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>nslookup</command></term>
- <listitem>
- <para><command>nslookup</command>
+ <arg choice="plain"><replaceable>hostname</replaceable></arg>
+ <arg><replaceable>server</replaceable></arg>
+ </cmdsynopsis>
+ <para>
+ For more information and a list of available commands and
+ options, see the <command>host</command> man
+ page.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>nslookup</command></term>
+ <listitem>
+ <para><command>nslookup</command>
has two modes: interactive and
- non-interactive. Interactive mode allows the user to
- query name servers for information about various
- hosts and domains or to print a list of hosts in a
- domain. Non-interactive mode is used to print just
- the name and requested information for a host or
- domain.
- </para>
- <cmdsynopsis label="Usage">
- <command>nslookup</command>
- <arg rep="repeat">-option</arg>
- <group>
- <arg><replaceable>host-to-find</replaceable></arg>
- <arg>- <arg>server</arg></arg>
- </group>
- </cmdsynopsis>
- <para>
- Interactive mode is entered when no arguments are given (the
- default name server will be used) or when the first argument
- is a
- hyphen (`-') and the second argument is the host name or
- Internet address
- of a name server.
- </para>
- <para>
- Non-interactive mode is used when the name or Internet
- address
- of the host to be looked up is given as the first argument.
- The
- optional second argument specifies the host name or address
- of a name server.
- </para>
- <para>
- Due to its arcane user interface and frequently inconsistent
- behavior, we do not recommend the use of <command>nslookup</command>.
- Use <command>dig</command> instead.
- </para>
- </listitem>
-
- </varlistentry>
- </variablelist>
- </sect3>
-
- <sect3 id="admin_tools">
- <title>Administrative Tools</title>
- <para>
- Administrative tools play an integral part in the management
- of a server.
- </para>
- <variablelist>
- <varlistentry id="named-checkconf" xreflabel="Named Configuration Checking application">
-
- <term><command>named-checkconf</command></term>
- <listitem>
- <para>
- The <command>named-checkconf</command> program
- checks the syntax of a <filename>named.conf</filename> file.
- </para>
- <cmdsynopsis label="Usage">
- <command>named-checkconf</command>
- <arg>-jvz</arg>
- <arg>-t <replaceable>directory</replaceable></arg>
- <arg><replaceable>filename</replaceable></arg>
- </cmdsynopsis>
- </listitem>
- </varlistentry>
- <varlistentry id="named-checkzone" xreflabel="Zone Checking application">
-
- <term><command>named-checkzone</command></term>
- <listitem>
- <para>
- The <command>named-checkzone</command> program
- checks a master file for
- syntax and consistency.
- </para>
- <cmdsynopsis label="Usage">
- <command>named-checkzone</command>
- <arg>-djqvD</arg>
- <arg>-c <replaceable>class</replaceable></arg>
- <arg>-o <replaceable>output</replaceable></arg>
- <arg>-t <replaceable>directory</replaceable></arg>
- <arg>-w <replaceable>directory</replaceable></arg>
- <arg>-k <replaceable>(ignore|warn|fail)</replaceable></arg>
- <arg>-n <replaceable>(ignore|warn|fail)</replaceable></arg>
- <arg>-W <replaceable>(ignore|warn)</replaceable></arg>
- <arg choice="plain"><replaceable>zone</replaceable></arg>
- <arg><replaceable>filename</replaceable></arg>
- </cmdsynopsis>
- </listitem>
- </varlistentry>
+ non-interactive. Interactive mode allows the user to
+ query name servers for information about various
+ hosts and domains or to print a list of hosts in a
+ domain. Non-interactive mode is used to print just
+ the name and requested information for a host or
+ domain.
+ </para>
+ <cmdsynopsis label="Usage">
+ <command>nslookup</command>
+ <arg rep="repeat">-option</arg>
+ <group>
+ <arg><replaceable>host-to-find</replaceable></arg>
+ <arg>- <arg>server</arg></arg>
+ </group>
+ </cmdsynopsis>
+ <para>
+ Interactive mode is entered when no arguments are given (the
+ default name server will be used) or when the first argument
+ is a
+ hyphen (`-') and the second argument is the host name or
+ Internet address
+ of a name server.
+ </para>
+ <para>
+ Non-interactive mode is used when the name or Internet
+ address
+ of the host to be looked up is given as the first argument.
+ The
+ optional second argument specifies the host name or address
+ of a name server.
+ </para>
+ <para>
+ Due to its arcane user interface and frequently inconsistent
+ behavior, we do not recommend the use of <command>nslookup</command>.
+ Use <command>dig</command> instead.
+ </para>
+ </listitem>
+
+ </varlistentry>
+ </variablelist>
+ </sect3>
+
+ <sect3 id="admin_tools">
+ <title>Administrative Tools</title>
+ <para>
+ Administrative tools play an integral part in the management
+ of a server.
+ </para>
+ <variablelist>
+ <varlistentry id="named-checkconf" xreflabel="Named Configuration Checking application">
+
+ <term><command>named-checkconf</command></term>
+ <listitem>
+ <para>
+ The <command>named-checkconf</command> program
+ checks the syntax of a <filename>named.conf</filename> file.
+ </para>
+ <cmdsynopsis label="Usage">
+ <command>named-checkconf</command>
+ <arg>-jvz</arg>
+ <arg>-t <replaceable>directory</replaceable></arg>
+ <arg><replaceable>filename</replaceable></arg>
+ </cmdsynopsis>
+ </listitem>
+ </varlistentry>
+ <varlistentry id="named-checkzone" xreflabel="Zone Checking application">
+
+ <term><command>named-checkzone</command></term>
+ <listitem>
+ <para>
+ The <command>named-checkzone</command> program
+ checks a master file for
+ syntax and consistency.
+ </para>
+ <cmdsynopsis label="Usage">
+ <command>named-checkzone</command>
+ <arg>-djqvD</arg>
+ <arg>-c <replaceable>class</replaceable></arg>
+ <arg>-o <replaceable>output</replaceable></arg>
+ <arg>-t <replaceable>directory</replaceable></arg>
+ <arg>-w <replaceable>directory</replaceable></arg>
+ <arg>-k <replaceable>(ignore|warn|fail)</replaceable></arg>
+ <arg>-n <replaceable>(ignore|warn|fail)</replaceable></arg>
+ <arg>-W <replaceable>(ignore|warn)</replaceable></arg>
+ <arg choice="plain"><replaceable>zone</replaceable></arg>
+ <arg><replaceable>filename</replaceable></arg>
+ </cmdsynopsis>
+ </listitem>
+ </varlistentry>
<varlistentry id="named-compilezone" xreflabel="Zone Compilation application">
<term><command>named-compilezone</command></term>
<listitem>
@@ -1096,139 +1094,139 @@ zone "eng.example.com" {
</para>
</listitem>
</varlistentry>
- <varlistentry id="rndc" xreflabel="Remote Name Daemon Control application">
-
- <term><command>rndc</command></term>
- <listitem>
- <para>
- The remote name daemon control
- (<command>rndc</command>) program allows the
- system
- administrator to control the operation of a name server.
- Since <acronym>BIND</acronym> 9.2, <command>rndc</command>
- supports all the commands of the BIND 8 <command>ndc</command>
- utility except <command>ndc start</command> and
- <command>ndc restart</command>, which were also
- not supported in <command>ndc</command>'s
- channel mode.
- If you run <command>rndc</command> without any
- options
- it will display a usage message as follows:
- </para>
- <cmdsynopsis label="Usage">
- <command>rndc</command>
- <arg>-c <replaceable>config</replaceable></arg>
- <arg>-s <replaceable>server</replaceable></arg>
- <arg>-p <replaceable>port</replaceable></arg>
- <arg>-y <replaceable>key</replaceable></arg>
- <arg choice="plain"><replaceable>command</replaceable></arg>
- <arg rep="repeat"><replaceable>command</replaceable></arg>
- </cmdsynopsis>
-
- <para>See <xref linkend="man.rndc"/> for details of
- the available <command>rndc</command> commands.
- </para>
-
- <para>
- <command>rndc</command> requires a configuration file,
- since all
- communication with the server is authenticated with
- digital signatures that rely on a shared secret, and
- there is no way to provide that secret other than with a
- configuration file. The default location for the
- <command>rndc</command> configuration file is
- <filename>/etc/rndc.conf</filename>, but an
- alternate
- location can be specified with the <option>-c</option>
- option. If the configuration file is not found,
- <command>rndc</command> will also look in
- <filename>/etc/rndc.key</filename> (or whatever
- <varname>sysconfdir</varname> was defined when
- the <acronym>BIND</acronym> build was
- configured).
- The <filename>rndc.key</filename> file is
- generated by
- running <command>rndc-confgen -a</command> as
- described in
- <xref linkend="controls_statement_definition_and_usage"/>.
- </para>
-
- <para>
- The format of the configuration file is similar to
- that of <filename>named.conf</filename>, but
- limited to
- only four statements, the <command>options</command>,
- <command>key</command>, <command>server</command> and
- <command>include</command>
- statements. These statements are what associate the
- secret keys to the servers with which they are meant to
- be shared. The order of statements is not
- significant.
- </para>
-
- <para>
- The <command>options</command> statement has
- three clauses:
- <command>default-server</command>, <command>default-key</command>,
- and <command>default-port</command>.
- <command>default-server</command> takes a
- host name or address argument and represents the server
- that will
- be contacted if no <option>-s</option>
- option is provided on the command line.
- <command>default-key</command> takes
- the name of a key as its argument, as defined by a <command>key</command> statement.
- <command>default-port</command> specifies the
- port to which
- <command>rndc</command> should connect if no
- port is given on the command line or in a
- <command>server</command> statement.
- </para>
-
- <para>
- The <command>key</command> statement defines a
- key to be used
- by <command>rndc</command> when authenticating
- with
- <command>named</command>. Its syntax is
- identical to the
- <command>key</command> statement in <filename>named.conf</filename>.
- The keyword <userinput>key</userinput> is
- followed by a key name, which must be a valid
- domain name, though it need not actually be hierarchical;
- thus,
- a string like "<userinput>rndc_key</userinput>" is a valid
- name.
- The <command>key</command> statement has two
- clauses:
- <command>algorithm</command> and <command>secret</command>.
- While the configuration parser will accept any string as the
- argument
- to algorithm, currently only the string "<userinput>hmac-md5</userinput>"
- has any meaning. The secret is a base-64 encoded string
+ <varlistentry id="rndc" xreflabel="Remote Name Daemon Control application">
+
+ <term><command>rndc</command></term>
+ <listitem>
+ <para>
+ The remote name daemon control
+ (<command>rndc</command>) program allows the
+ system
+ administrator to control the operation of a name server.
+ Since <acronym>BIND</acronym> 9.2, <command>rndc</command>
+ supports all the commands of the BIND 8 <command>ndc</command>
+ utility except <command>ndc start</command> and
+ <command>ndc restart</command>, which were also
+ not supported in <command>ndc</command>'s
+ channel mode.
+ If you run <command>rndc</command> without any
+ options
+ it will display a usage message as follows:
+ </para>
+ <cmdsynopsis label="Usage">
+ <command>rndc</command>
+ <arg>-c <replaceable>config</replaceable></arg>
+ <arg>-s <replaceable>server</replaceable></arg>
+ <arg>-p <replaceable>port</replaceable></arg>
+ <arg>-y <replaceable>key</replaceable></arg>
+ <arg choice="plain"><replaceable>command</replaceable></arg>
+ <arg rep="repeat"><replaceable>command</replaceable></arg>
+ </cmdsynopsis>
+
+ <para>See <xref linkend="man.rndc"/> for details of
+ the available <command>rndc</command> commands.
+ </para>
+
+ <para>
+ <command>rndc</command> requires a configuration file,
+ since all
+ communication with the server is authenticated with
+ digital signatures that rely on a shared secret, and
+ there is no way to provide that secret other than with a
+ configuration file. The default location for the
+ <command>rndc</command> configuration file is
+ <filename>/etc/rndc.conf</filename>, but an
+ alternate
+ location can be specified with the <option>-c</option>
+ option. If the configuration file is not found,
+ <command>rndc</command> will also look in
+ <filename>/etc/rndc.key</filename> (or whatever
+ <varname>sysconfdir</varname> was defined when
+ the <acronym>BIND</acronym> build was
+ configured).
+ The <filename>rndc.key</filename> file is
+ generated by
+ running <command>rndc-confgen -a</command> as
+ described in
+ <xref linkend="controls_statement_definition_and_usage"/>.
+ </para>
+
+ <para>
+ The format of the configuration file is similar to
+ that of <filename>named.conf</filename>, but
+ limited to
+ only four statements, the <command>options</command>,
+ <command>key</command>, <command>server</command> and
+ <command>include</command>
+ statements. These statements are what associate the
+ secret keys to the servers with which they are meant to
+ be shared. The order of statements is not
+ significant.
+ </para>
+
+ <para>
+ The <command>options</command> statement has
+ three clauses:
+ <command>default-server</command>, <command>default-key</command>,
+ and <command>default-port</command>.
+ <command>default-server</command> takes a
+ host name or address argument and represents the server
+ that will
+ be contacted if no <option>-s</option>
+ option is provided on the command line.
+ <command>default-key</command> takes
+ the name of a key as its argument, as defined by a <command>key</command> statement.
+ <command>default-port</command> specifies the
+ port to which
+ <command>rndc</command> should connect if no
+ port is given on the command line or in a
+ <command>server</command> statement.
+ </para>
+
+ <para>
+ The <command>key</command> statement defines a
+ key to be used
+ by <command>rndc</command> when authenticating
+ with
+ <command>named</command>. Its syntax is
+ identical to the
+ <command>key</command> statement in <filename>named.conf</filename>.
+ The keyword <userinput>key</userinput> is
+ followed by a key name, which must be a valid
+ domain name, though it need not actually be hierarchical;
+ thus,
+ a string like "<userinput>rndc_key</userinput>" is a valid
+ name.
+ The <command>key</command> statement has two
+ clauses:
+ <command>algorithm</command> and <command>secret</command>.
+ While the configuration parser will accept any string as the
+ argument
+ to algorithm, currently only the string "<userinput>hmac-md5</userinput>"
+ has any meaning. The secret is a base-64 encoded string
as specified in RFC 3548.
- </para>
-
- <para>
- The <command>server</command> statement
- associates a key
- defined using the <command>key</command>
- statement with a server.
- The keyword <userinput>server</userinput> is followed by a
- host name or address. The <command>server</command> statement
- has two clauses: <command>key</command> and <command>port</command>.
- The <command>key</command> clause specifies the
- name of the key
- to be used when communicating with this server, and the
- <command>port</command> clause can be used to
- specify the port <command>rndc</command> should
- connect
- to on the server.
- </para>
-
- <para>
- A sample minimal configuration file is as follows:
- </para>
+ </para>
+
+ <para>
+ The <command>server</command> statement
+ associates a key
+ defined using the <command>key</command>
+ statement with a server.
+ The keyword <userinput>server</userinput> is followed by a
+ host name or address. The <command>server</command> statement
+ has two clauses: <command>key</command> and <command>port</command>.
+ The <command>key</command> clause specifies the
+ name of the key
+ to be used when communicating with this server, and the
+ <command>port</command> clause can be used to
+ specify the port <command>rndc</command> should
+ connect
+ to on the server.
+ </para>
+
+ <para>
+ A sample minimal configuration file is as follows:
+ </para>
<programlisting>
key rndc_key {
@@ -1242,103 +1240,103 @@ options {
};
</programlisting>
- <para>
- This file, if installed as <filename>/etc/rndc.conf</filename>,
- would allow the command:
- </para>
+ <para>
+ This file, if installed as <filename>/etc/rndc.conf</filename>,
+ would allow the command:
+ </para>
- <para>
- <prompt>$ </prompt><userinput>rndc reload</userinput>
- </para>
+ <para>
+ <prompt>$ </prompt><userinput>rndc reload</userinput>
+ </para>
- <para>
- to connect to 127.0.0.1 port 953 and cause the name server
- to reload, if a name server on the local machine were
- running with
- following controls statements:
- </para>
+ <para>
+ to connect to 127.0.0.1 port 953 and cause the name server
+ to reload, if a name server on the local machine were
+ running with
+ following controls statements:
+ </para>
<programlisting>
controls {
- inet 127.0.0.1
- allow { localhost; } keys { rndc_key; };
+ inet 127.0.0.1
+ allow { localhost; } keys { rndc_key; };
};
</programlisting>
- <para>
- and it had an identical key statement for
- <literal>rndc_key</literal>.
- </para>
-
- <para>
- Running the <command>rndc-confgen</command>
- program will
- conveniently create a <filename>rndc.conf</filename>
- file for you, and also display the
- corresponding <command>controls</command>
- statement that you need to
- add to <filename>named.conf</filename>.
- Alternatively,
- you can run <command>rndc-confgen -a</command>
- to set up
- a <filename>rndc.key</filename> file and not
- modify
- <filename>named.conf</filename> at all.
- </para>
-
- </listitem>
- </varlistentry>
- </variablelist>
-
- </sect3>
+ <para>
+ and it had an identical key statement for
+ <literal>rndc_key</literal>.
+ </para>
+
+ <para>
+ Running the <command>rndc-confgen</command>
+ program will
+ conveniently create a <filename>rndc.conf</filename>
+ file for you, and also display the
+ corresponding <command>controls</command>
+ statement that you need to
+ add to <filename>named.conf</filename>.
+ Alternatively,
+ you can run <command>rndc-confgen -a</command>
+ to set up
+ a <filename>rndc.key</filename> file and not
+ modify
+ <filename>named.conf</filename> at all.
+ </para>
+
+ </listitem>
+ </varlistentry>
+ </variablelist>
+
+ </sect3>
</sect2>
<sect2>
- <title>Signals</title>
- <para>
- Certain UNIX signals cause the name server to take specific
- actions, as described in the following table. These signals can
- be sent using the <command>kill</command> command.
- </para>
- <informaltable frame="all">
- <tgroup cols="2">
- <colspec colname="1" colnum="1" colsep="0" colwidth="1.125in"/>
- <colspec colname="2" colnum="2" colsep="0" colwidth="4.000in"/>
- <tbody>
- <row rowsep="0">
- <entry colname="1">
- <para><command>SIGHUP</command></para>
- </entry>
- <entry colname="2">
- <para>
- Causes the server to read <filename>named.conf</filename> and
- reload the database.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>SIGTERM</command></para>
- </entry>
- <entry colname="2">
- <para>
- Causes the server to clean up and exit.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>SIGINT</command></para>
- </entry>
- <entry colname="2">
- <para>
- Causes the server to clean up and exit.
- </para>
- </entry>
- </row>
- </tbody>
- </tgroup>
- </informaltable>
+ <title>Signals</title>
+ <para>
+ Certain UNIX signals cause the name server to take specific
+ actions, as described in the following table. These signals can
+ be sent using the <command>kill</command> command.
+ </para>
+ <informaltable frame="all">
+ <tgroup cols="2">
+ <colspec colname="1" colnum="1" colsep="0" colwidth="1.125in"/>
+ <colspec colname="2" colnum="2" colsep="0" colwidth="4.000in"/>
+ <tbody>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>SIGHUP</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Causes the server to read <filename>named.conf</filename> and
+ reload the database.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>SIGTERM</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Causes the server to clean up and exit.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>SIGINT</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Causes the server to clean up and exit.
+ </para>
+ </entry>
+ </row>
+ </tbody>
+ </tgroup>
+ </informaltable>
</sect2>
</sect1>
</chapter>
@@ -1350,25 +1348,25 @@ controls {
<title>Notify</title>
<para>
- <acronym>DNS</acronym> NOTIFY is a mechanism that allows master
- servers to notify their slave servers of changes to a zone's data. In
- response to a <command>NOTIFY</command> from a master server, the
- slave will check to see that its version of the zone is the
- current version and, if not, initiate a zone transfer.
+ <acronym>DNS</acronym> NOTIFY is a mechanism that allows master
+ servers to notify their slave servers of changes to a zone's data. In
+ response to a <command>NOTIFY</command> from a master server, the
+ slave will check to see that its version of the zone is the
+ current version and, if not, initiate a zone transfer.
</para>
<para>
- For more information about <acronym>DNS</acronym>
- <command>NOTIFY</command>, see the description of the
- <command>notify</command> option in <xref linkend="boolean_options"/> and
- the description of the zone option <command>also-notify</command> in
- <xref linkend="zone_transfers"/>. The <command>NOTIFY</command>
- protocol is specified in RFC 1996.
+ For more information about <acronym>DNS</acronym>
+ <command>NOTIFY</command>, see the description of the
+ <command>notify</command> option in <xref linkend="boolean_options"/> and
+ the description of the zone option <command>also-notify</command> in
+ <xref linkend="zone_transfers"/>. The <command>NOTIFY</command>
+ protocol is specified in RFC 1996.
</para>
<note>
As a slave zone can also be a master to other slaves, <command>named</command>,
- by default, sends <command>NOTIFY</command> messages for every zone
+ by default, sends <command>NOTIFY</command> messages for every zone
it loads. Specifying <command>notify master-only;</command> will
cause <command>named</command> to only send <command>NOTIFY</command> for master
zones that it loads.
@@ -1380,10 +1378,10 @@ controls {
<title>Dynamic Update</title>
<para>
- Dynamic Update is a method for adding, replacing or deleting
- records in a master server by sending it a special form of DNS
- messages. The format and meaning of these messages is specified
- in RFC 2136.
+ Dynamic Update is a method for adding, replacing or deleting
+ records in a master server by sending it a special form of DNS
+ messages. The format and meaning of these messages is specified
+ in RFC 2136.
</para>
<para>
@@ -1396,7 +1394,7 @@ controls {
If the zone's <command>update-policy</command> is set to
<userinput>local</userinput>, updates to the zone
will be permitted for the key <varname>local-ddns</varname>,
- which will be generated by <command>named</command> at startup.
+ which will be generated by <command>named</command> at startup.
See <xref linkend="dynamic_update_policies"/> for more details.
</para>
@@ -1422,62 +1420,72 @@ controls {
<sect2 id="journal">
<title>The journal file</title>
- <para>
- All changes made to a zone using dynamic update are stored
- in the zone's journal file. This file is automatically created
- by the server when the first dynamic update takes place.
- The name of the journal file is formed by appending the extension
- <filename>.jnl</filename> to the name of the
- corresponding zone
- file unless specifically overridden. The journal file is in a
- binary format and should not be edited manually.
- </para>
-
- <para>
- The server will also occasionally write ("dump")
- the complete contents of the updated zone to its zone file.
- This is not done immediately after
- each dynamic update, because that would be too slow when a large
- zone is updated frequently. Instead, the dump is delayed by
- up to 15 minutes, allowing additional updates to take place.
- During the dump process, transient files will be created
- with the extensions <filename>.jnw</filename> and
- <filename>.jbk</filename>; under ordinary circumstances, these
- will be removed when the dump is complete, and can be safely
- ignored.
- </para>
-
- <para>
- When a server is restarted after a shutdown or crash, it will replay
- the journal file to incorporate into the zone any updates that
- took
- place after the last zone dump.
- </para>
-
- <para>
- Changes that result from incoming incremental zone transfers are
- also
- journalled in a similar way.
- </para>
-
- <para>
- The zone files of dynamic zones cannot normally be edited by
- hand because they are not guaranteed to contain the most recent
- dynamic changes &mdash; those are only in the journal file.
- The only way to ensure that the zone file of a dynamic zone
- is up to date is to run <command>rndc stop</command>.
- </para>
-
- <para>
- If you have to make changes to a dynamic zone
- manually, the following procedure will work: Disable dynamic updates
- to the zone using
- <command>rndc freeze <replaceable>zone</replaceable></command>.
- This will also remove the zone's <filename>.jnl</filename> file
- and update the master file. Edit the zone file. Run
- <command>rndc thaw <replaceable>zone</replaceable></command>
- to reload the changed zone and re-enable dynamic updates.
- </para>
+ <para>
+ All changes made to a zone using dynamic update are stored
+ in the zone's journal file. This file is automatically created
+ by the server when the first dynamic update takes place.
+ The name of the journal file is formed by appending the extension
+ <filename>.jnl</filename> to the name of the
+ corresponding zone
+ file unless specifically overridden. The journal file is in a
+ binary format and should not be edited manually.
+ </para>
+
+ <para>
+ The server will also occasionally write ("dump")
+ the complete contents of the updated zone to its zone file.
+ This is not done immediately after
+ each dynamic update, because that would be too slow when a large
+ zone is updated frequently. Instead, the dump is delayed by
+ up to 15 minutes, allowing additional updates to take place.
+ During the dump process, transient files will be created
+ with the extensions <filename>.jnw</filename> and
+ <filename>.jbk</filename>; under ordinary circumstances, these
+ will be removed when the dump is complete, and can be safely
+ ignored.
+ </para>
+
+ <para>
+ When a server is restarted after a shutdown or crash, it will replay
+ the journal file to incorporate into the zone any updates that
+ took
+ place after the last zone dump.
+ </para>
+
+ <para>
+ Changes that result from incoming incremental zone transfers are
+ also
+ journalled in a similar way.
+ </para>
+
+ <para>
+ The zone files of dynamic zones cannot normally be edited by
+ hand because they are not guaranteed to contain the most recent
+ dynamic changes &mdash; those are only in the journal file.
+ The only way to ensure that the zone file of a dynamic zone
+ is up to date is to run <command>rndc stop</command>.
+ </para>
+
+ <para>
+ If you have to make changes to a dynamic zone
+ manually, the following procedure will work:
+ Disable dynamic updates to the zone using
+ <command>rndc freeze <replaceable>zone</replaceable></command>.
+ This will update the zone's master file with the changes
+ stored in its <filename>.jnl</filename> file.
+ Edit the zone file. Run
+ <command>rndc thaw <replaceable>zone</replaceable></command>
+ to reload the changed zone and re-enable dynamic updates.
+ </para>
+
+ <para>
+ <command>rndc sync <replaceable>zone</replaceable></command>
+ will update the zone file with changes from the journal file
+ without stopping dynamic updates; this may be useful for viewing
+ the current zone state. To remove the <filename>.jnl</filename>
+ file after updating the zone file, use
+ <command>rndc sync -clean</command>.
+ </para>
</sect2>
@@ -1487,194 +1495,194 @@ controls {
<title>Incremental Zone Transfers (IXFR)</title>
<para>
- The incremental zone transfer (IXFR) protocol is a way for
- slave servers to transfer only changed data, instead of having to
- transfer the entire zone. The IXFR protocol is specified in RFC
- 1995. See <xref linkend="proposed_standards"/>.
+ The incremental zone transfer (IXFR) protocol is a way for
+ slave servers to transfer only changed data, instead of having to
+ transfer the entire zone. The IXFR protocol is specified in RFC
+ 1995. See <xref linkend="proposed_standards"/>.
</para>
<para>
- When acting as a master, <acronym>BIND</acronym> 9
- supports IXFR for those zones
- where the necessary change history information is available. These
- include master zones maintained by dynamic update and slave zones
- whose data was obtained by IXFR. For manually maintained master
- zones, and for slave zones obtained by performing a full zone
- transfer (AXFR), IXFR is supported only if the option
- <command>ixfr-from-differences</command> is set
- to <userinput>yes</userinput>.
+ When acting as a master, <acronym>BIND</acronym> 9
+ supports IXFR for those zones
+ where the necessary change history information is available. These
+ include master zones maintained by dynamic update and slave zones
+ whose data was obtained by IXFR. For manually maintained master
+ zones, and for slave zones obtained by performing a full zone
+ transfer (AXFR), IXFR is supported only if the option
+ <command>ixfr-from-differences</command> is set
+ to <userinput>yes</userinput>.
</para>
<para>
- When acting as a slave, <acronym>BIND</acronym> 9 will
- attempt to use IXFR unless
- it is explicitly disabled. For more information about disabling
- IXFR, see the description of the <command>request-ixfr</command> clause
- of the <command>server</command> statement.
+ When acting as a slave, <acronym>BIND</acronym> 9 will
+ attempt to use IXFR unless
+ it is explicitly disabled. For more information about disabling
+ IXFR, see the description of the <command>request-ixfr</command> clause
+ of the <command>server</command> statement.
</para>
</sect1>
<sect1>
<title>Split DNS</title>
<para>
- Setting up different views, or visibility, of the DNS space to
- internal and external resolvers is usually referred to as a
+ Setting up different views, or visibility, of the DNS space to
+ internal and external resolvers is usually referred to as a
<emphasis>Split DNS</emphasis> setup. There are several
- reasons an organization would want to set up its DNS this way.
+ reasons an organization would want to set up its DNS this way.
</para>
<para>
- One common reason for setting up a DNS system this way is
- to hide "internal" DNS information from "external" clients on the
- Internet. There is some debate as to whether or not this is actually
- useful.
- Internal DNS information leaks out in many ways (via email headers,
- for example) and most savvy "attackers" can find the information
- they need using other means.
+ One common reason for setting up a DNS system this way is
+ to hide "internal" DNS information from "external" clients on the
+ Internet. There is some debate as to whether or not this is actually
+ useful.
+ Internal DNS information leaks out in many ways (via email headers,
+ for example) and most savvy "attackers" can find the information
+ they need using other means.
However, since listing addresses of internal servers that
- external clients cannot possibly reach can result in
- connection delays and other annoyances, an organization may
- choose to use a Split DNS to present a consistent view of itself
- to the outside world.
+ external clients cannot possibly reach can result in
+ connection delays and other annoyances, an organization may
+ choose to use a Split DNS to present a consistent view of itself
+ to the outside world.
</para>
<para>
- Another common reason for setting up a Split DNS system is
- to allow internal networks that are behind filters or in RFC 1918
- space (reserved IP space, as documented in RFC 1918) to resolve DNS
- on the Internet. Split DNS can also be used to allow mail from outside
- back in to the internal network.
+ Another common reason for setting up a Split DNS system is
+ to allow internal networks that are behind filters or in RFC 1918
+ space (reserved IP space, as documented in RFC 1918) to resolve DNS
+ on the Internet. Split DNS can also be used to allow mail from outside
+ back in to the internal network.
</para>
<sect2>
<title>Example split DNS setup</title>
<para>
- Let's say a company named <emphasis>Example, Inc.</emphasis>
- (<literal>example.com</literal>)
- has several corporate sites that have an internal network with
- reserved
- Internet Protocol (IP) space and an external demilitarized zone (DMZ),
- or "outside" section of a network, that is available to the public.
+ Let's say a company named <emphasis>Example, Inc.</emphasis>
+ (<literal>example.com</literal>)
+ has several corporate sites that have an internal network with
+ reserved
+ Internet Protocol (IP) space and an external demilitarized zone (DMZ),
+ or "outside" section of a network, that is available to the public.
</para>
<para>
- <emphasis>Example, Inc.</emphasis> wants its internal clients
- to be able to resolve external hostnames and to exchange mail with
- people on the outside. The company also wants its internal resolvers
- to have access to certain internal-only zones that are not available
- at all outside of the internal network.
+ <emphasis>Example, Inc.</emphasis> wants its internal clients
+ to be able to resolve external hostnames and to exchange mail with
+ people on the outside. The company also wants its internal resolvers
+ to have access to certain internal-only zones that are not available
+ at all outside of the internal network.
</para>
<para>
- In order to accomplish this, the company will set up two sets
- of name servers. One set will be on the inside network (in the
- reserved
- IP space) and the other set will be on bastion hosts, which are
- "proxy"
- hosts that can talk to both sides of its network, in the DMZ.
+ In order to accomplish this, the company will set up two sets
+ of name servers. One set will be on the inside network (in the
+ reserved
+ IP space) and the other set will be on bastion hosts, which are
+ "proxy"
+ hosts that can talk to both sides of its network, in the DMZ.
</para>
<para>
- The internal servers will be configured to forward all queries,
- except queries for <filename>site1.internal</filename>, <filename>site2.internal</filename>, <filename>site1.example.com</filename>,
- and <filename>site2.example.com</filename>, to the servers
- in the
- DMZ. These internal servers will have complete sets of information
- for <filename>site1.example.com</filename>, <filename>site2.example.com</filename>, <filename>site1.internal</filename>,
- and <filename>site2.internal</filename>.
+ The internal servers will be configured to forward all queries,
+ except queries for <filename>site1.internal</filename>, <filename>site2.internal</filename>, <filename>site1.example.com</filename>,
+ and <filename>site2.example.com</filename>, to the servers
+ in the
+ DMZ. These internal servers will have complete sets of information
+ for <filename>site1.example.com</filename>, <filename>site2.example.com</filename>, <filename>site1.internal</filename>,
+ and <filename>site2.internal</filename>.
</para>
<para>
- To protect the <filename>site1.internal</filename> and <filename>site2.internal</filename> domains,
- the internal name servers must be configured to disallow all queries
- to these domains from any external hosts, including the bastion
- hosts.
+ To protect the <filename>site1.internal</filename> and <filename>site2.internal</filename> domains,
+ the internal name servers must be configured to disallow all queries
+ to these domains from any external hosts, including the bastion
+ hosts.
</para>
<para>
- The external servers, which are on the bastion hosts, will
- be configured to serve the "public" version of the <filename>site1</filename> and <filename>site2.example.com</filename> zones.
- This could include things such as the host records for public servers
- (<filename>www.example.com</filename> and <filename>ftp.example.com</filename>),
- and mail exchange (MX) records (<filename>a.mx.example.com</filename> and <filename>b.mx.example.com</filename>).
+ The external servers, which are on the bastion hosts, will
+ be configured to serve the "public" version of the <filename>site1</filename> and <filename>site2.example.com</filename> zones.
+ This could include things such as the host records for public servers
+ (<filename>www.example.com</filename> and <filename>ftp.example.com</filename>),
+ and mail exchange (MX) records (<filename>a.mx.example.com</filename> and <filename>b.mx.example.com</filename>).
</para>
<para>
- In addition, the public <filename>site1</filename> and <filename>site2.example.com</filename> zones
- should have special MX records that contain wildcard (`*') records
- pointing to the bastion hosts. This is needed because external mail
- servers do not have any other way of looking up how to deliver mail
- to those internal hosts. With the wildcard records, the mail will
- be delivered to the bastion host, which can then forward it on to
- internal hosts.
+ In addition, the public <filename>site1</filename> and <filename>site2.example.com</filename> zones
+ should have special MX records that contain wildcard (`*') records
+ pointing to the bastion hosts. This is needed because external mail
+ servers do not have any other way of looking up how to deliver mail
+ to those internal hosts. With the wildcard records, the mail will
+ be delivered to the bastion host, which can then forward it on to
+ internal hosts.
</para>
<para>
- Here's an example of a wildcard MX record:
+ Here's an example of a wildcard MX record:
</para>
<programlisting>* IN MX 10 external1.example.com.</programlisting>
<para>
- Now that they accept mail on behalf of anything in the internal
- network, the bastion hosts will need to know how to deliver mail
- to internal hosts. In order for this to work properly, the resolvers
- on
- the bastion hosts will need to be configured to point to the internal
- name servers for DNS resolution.
+ Now that they accept mail on behalf of anything in the internal
+ network, the bastion hosts will need to know how to deliver mail
+ to internal hosts. In order for this to work properly, the resolvers
+ on
+ the bastion hosts will need to be configured to point to the internal
+ name servers for DNS resolution.
</para>
<para>
- Queries for internal hostnames will be answered by the internal
- servers, and queries for external hostnames will be forwarded back
- out to the DNS servers on the bastion hosts.
+ Queries for internal hostnames will be answered by the internal
+ servers, and queries for external hostnames will be forwarded back
+ out to the DNS servers on the bastion hosts.
</para>
<para>
- In order for all this to work properly, internal clients will
- need to be configured to query <emphasis>only</emphasis> the internal
- name servers for DNS queries. This could also be enforced via
- selective
- filtering on the network.
+ In order for all this to work properly, internal clients will
+ need to be configured to query <emphasis>only</emphasis> the internal
+ name servers for DNS queries. This could also be enforced via
+ selective
+ filtering on the network.
</para>
<para>
- If everything has been set properly, <emphasis>Example, Inc.</emphasis>'s
- internal clients will now be able to:
+ If everything has been set properly, <emphasis>Example, Inc.</emphasis>'s
+ internal clients will now be able to:
</para>
<itemizedlist>
- <listitem>
- <simpara>
- Look up any hostnames in the <literal>site1</literal>
- and
- <literal>site2.example.com</literal> zones.
- </simpara>
- </listitem>
- <listitem>
- <simpara>
- Look up any hostnames in the <literal>site1.internal</literal> and
- <literal>site2.internal</literal> domains.
- </simpara>
- </listitem>
- <listitem>
- <simpara>Look up any hostnames on the Internet.</simpara>
- </listitem>
- <listitem>
- <simpara>Exchange mail with both internal and external people.</simpara>
- </listitem>
+ <listitem>
+ <simpara>
+ Look up any hostnames in the <literal>site1</literal>
+ and
+ <literal>site2.example.com</literal> zones.
+ </simpara>
+ </listitem>
+ <listitem>
+ <simpara>
+ Look up any hostnames in the <literal>site1.internal</literal> and
+ <literal>site2.internal</literal> domains.
+ </simpara>
+ </listitem>
+ <listitem>
+ <simpara>Look up any hostnames on the Internet.</simpara>
+ </listitem>
+ <listitem>
+ <simpara>Exchange mail with both internal and external people.</simpara>
+ </listitem>
</itemizedlist>
<para>
- Hosts on the Internet will be able to:
+ Hosts on the Internet will be able to:
</para>
<itemizedlist>
- <listitem>
- <simpara>
- Look up any hostnames in the <literal>site1</literal>
- and
- <literal>site2.example.com</literal> zones.
- </simpara>
- </listitem>
- <listitem>
- <simpara>
- Exchange mail with anyone in the <literal>site1</literal> and
- <literal>site2.example.com</literal> zones.
- </simpara>
- </listitem>
+ <listitem>
+ <simpara>
+ Look up any hostnames in the <literal>site1</literal>
+ and
+ <literal>site2.example.com</literal> zones.
+ </simpara>
+ </listitem>
+ <listitem>
+ <simpara>
+ Exchange mail with anyone in the <literal>site1</literal> and
+ <literal>site2.example.com</literal> zones.
+ </simpara>
+ </listitem>
</itemizedlist>
<para>
- Here is an example configuration for the setup we just
- described above. Note that this is only configuration information;
- for information on how to configure your zone files, see <xref linkend="sample_configuration"/>.
+ Here is an example configuration for the setup we just
+ described above. Note that this is only configuration information;
+ for information on how to configure your zone files, see <xref linkend="sample_configuration"/>.
</para>
<para>
- Internal DNS server config:
+ Internal DNS server config:
</para>
<programlisting>
@@ -1689,7 +1697,7 @@ options {
forward only;
// forward to external servers
forwarders {
- <varname>bastion-ips-go-here</varname>;
+ <varname>bastion-ips-go-here</varname>;
};
// sample allow-transfer (no one)
allow-transfer { none; };
@@ -1740,7 +1748,7 @@ zone "site2.internal" {
</programlisting>
<para>
- External (bastion host) DNS server config:
+ External (bastion host) DNS server config:
</para>
<programlisting>
@@ -1779,8 +1787,8 @@ zone "site2.example.com" {
</programlisting>
<para>
- In the <filename>resolv.conf</filename> (or equivalent) on
- the bastion host(s):
+ In the <filename>resolv.conf</filename> (or equivalent) on
+ the bastion host(s):
</para>
<programlisting>
@@ -1795,89 +1803,89 @@ nameserver 172.16.72.4
<sect1 id="tsig">
<title>TSIG</title>
<para>
- This is a short guide to setting up Transaction SIGnatures
- (TSIG) based transaction security in <acronym>BIND</acronym>. It describes changes
- to the configuration file as well as what changes are required for
- different features, including the process of creating transaction
- keys and using transaction signatures with <acronym>BIND</acronym>.
+ This is a short guide to setting up Transaction SIGnatures
+ (TSIG) based transaction security in <acronym>BIND</acronym>. It describes changes
+ to the configuration file as well as what changes are required for
+ different features, including the process of creating transaction
+ keys and using transaction signatures with <acronym>BIND</acronym>.
</para>
<para>
- <acronym>BIND</acronym> primarily supports TSIG for server
- to server communication.
- This includes zone transfer, notify, and recursive query messages.
- Resolvers based on newer versions of <acronym>BIND</acronym> 8 have limited support
- for TSIG.
+ <acronym>BIND</acronym> primarily supports TSIG for server
+ to server communication.
+ This includes zone transfer, notify, and recursive query messages.
+ Resolvers based on newer versions of <acronym>BIND</acronym> 8 have limited support
+ for TSIG.
</para>
<para>
- TSIG can also be useful for dynamic update. A primary
- server for a dynamic zone should control access to the dynamic
- update service, but IP-based access control is insufficient.
- The cryptographic access control provided by TSIG
- is far superior. The <command>nsupdate</command>
- program supports TSIG via the <option>-k</option> and
- <option>-y</option> command line options or inline by use
+ TSIG can also be useful for dynamic update. A primary
+ server for a dynamic zone should control access to the dynamic
+ update service, but IP-based access control is insufficient.
+ The cryptographic access control provided by TSIG
+ is far superior. The <command>nsupdate</command>
+ program supports TSIG via the <option>-k</option> and
+ <option>-y</option> command line options or inline by use
of the <command>key</command>.
</para>
<sect2>
- <title>Generate Shared Keys for Each Pair of Hosts</title>
- <para>
- A shared secret is generated to be shared between <emphasis>host1</emphasis> and <emphasis>host2</emphasis>.
- An arbitrary key name is chosen: "host1-host2.". The key name must
- be the same on both hosts.
- </para>
- <sect3>
- <title>Automatic Generation</title>
- <para>
- The following command will generate a 128-bit (16 byte) HMAC-SHA256
- key as described above. Longer keys are better, but shorter keys
- are easier to read. Note that the maximum key length is the digest
- length, here 256 bits.
- </para>
- <para>
- <userinput>dnssec-keygen -a hmac-sha256 -b 128 -n HOST host1-host2.</userinput>
- </para>
- <para>
- The key is in the file <filename>Khost1-host2.+163+00000.private</filename>.
- Nothing directly uses this file, but the base-64 encoded string
- following "<literal>Key:</literal>"
- can be extracted from the file and used as a shared secret:
- </para>
- <programlisting>Key: La/E5CjG9O+os1jq0a2jdA==</programlisting>
- <para>
- The string "<literal>La/E5CjG9O+os1jq0a2jdA==</literal>" can
- be used as the shared secret.
- </para>
- </sect3>
- <sect3>
- <title>Manual Generation</title>
- <para>
- The shared secret is simply a random sequence of bits, encoded
- in base-64. Most ASCII strings are valid base-64 strings (assuming
- the length is a multiple of 4 and only valid characters are used),
- so the shared secret can be manually generated.
- </para>
- <para>
- Also, a known string can be run through <command>mmencode</command> or
- a similar program to generate base-64 encoded data.
- </para>
- </sect3>
+ <title>Generate Shared Keys for Each Pair of Hosts</title>
+ <para>
+ A shared secret is generated to be shared between <emphasis>host1</emphasis> and <emphasis>host2</emphasis>.
+ An arbitrary key name is chosen: "host1-host2.". The key name must
+ be the same on both hosts.
+ </para>
+ <sect3>
+ <title>Automatic Generation</title>
+ <para>
+ The following command will generate a 128-bit (16 byte) HMAC-SHA256
+ key as described above. Longer keys are better, but shorter keys
+ are easier to read. Note that the maximum key length is the digest
+ length, here 256 bits.
+ </para>
+ <para>
+ <userinput>dnssec-keygen -a hmac-sha256 -b 128 -n HOST host1-host2.</userinput>
+ </para>
+ <para>
+ The key is in the file <filename>Khost1-host2.+163+00000.private</filename>.
+ Nothing directly uses this file, but the base-64 encoded string
+ following "<literal>Key:</literal>"
+ can be extracted from the file and used as a shared secret:
+ </para>
+ <programlisting>Key: La/E5CjG9O+os1jq0a2jdA==</programlisting>
+ <para>
+ The string "<literal>La/E5CjG9O+os1jq0a2jdA==</literal>" can
+ be used as the shared secret.
+ </para>
+ </sect3>
+ <sect3>
+ <title>Manual Generation</title>
+ <para>
+ The shared secret is simply a random sequence of bits, encoded
+ in base-64. Most ASCII strings are valid base-64 strings (assuming
+ the length is a multiple of 4 and only valid characters are used),
+ so the shared secret can be manually generated.
+ </para>
+ <para>
+ Also, a known string can be run through <command>mmencode</command> or
+ a similar program to generate base-64 encoded data.
+ </para>
+ </sect3>
</sect2>
<sect2>
- <title>Copying the Shared Secret to Both Machines</title>
- <para>
- This is beyond the scope of DNS. A secure transport mechanism
- should be used. This could be secure FTP, ssh, telephone, etc.
- </para>
+ <title>Copying the Shared Secret to Both Machines</title>
+ <para>
+ This is beyond the scope of DNS. A secure transport mechanism
+ should be used. This could be secure FTP, ssh, telephone, etc.
+ </para>
</sect2>
<sect2>
- <title>Informing the Servers of the Key's Existence</title>
- <para>
- Imagine <emphasis>host1</emphasis> and <emphasis>host 2</emphasis>
- are
- both servers. The following is added to each server's <filename>named.conf</filename> file:
- </para>
+ <title>Informing the Servers of the Key's Existence</title>
+ <para>
+ Imagine <emphasis>host1</emphasis> and <emphasis>host 2</emphasis>
+ are
+ both servers. The following is added to each server's <filename>named.conf</filename> file:
+ </para>
<programlisting>
key host1-host2. {
@@ -1886,28 +1894,28 @@ key host1-host2. {
};
</programlisting>
- <para>
- The secret is the one generated above. Since this is a secret, it
- is recommended that either <filename>named.conf</filename> be
- non-world readable, or the key directive be added to a non-world
- readable file that is included by <filename>named.conf</filename>.
- </para>
- <para>
- At this point, the key is recognized. This means that if the
- server receives a message signed by this key, it can verify the
- signature. If the signature is successfully verified, the
- response is signed by the same key.
- </para>
+ <para>
+ The secret is the one generated above. Since this is a secret, it
+ is recommended that either <filename>named.conf</filename> be
+ non-world readable, or the key directive be added to a non-world
+ readable file that is included by <filename>named.conf</filename>.
+ </para>
+ <para>
+ At this point, the key is recognized. This means that if the
+ server receives a message signed by this key, it can verify the
+ signature. If the signature is successfully verified, the
+ response is signed by the same key.
+ </para>
</sect2>
<sect2>
- <title>Instructing the Server to Use the Key</title>
- <para>
- Since keys are shared between two hosts only, the server must
- be told when keys are to be used. The following is added to the <filename>named.conf</filename> file
- for <emphasis>host1</emphasis>, if the IP address of <emphasis>host2</emphasis> is
- 10.1.2.3:
- </para>
+ <title>Instructing the Server to Use the Key</title>
+ <para>
+ Since keys are shared between two hosts only, the server must
+ be told when keys are to be used. The following is added to the <filename>named.conf</filename> file
+ for <emphasis>host1</emphasis>, if the IP address of <emphasis>host2</emphasis> is
+ 10.1.2.3:
+ </para>
<programlisting>
server 10.1.2.3 {
@@ -1915,38 +1923,38 @@ server 10.1.2.3 {
};
</programlisting>
- <para>
- Multiple keys may be present, but only the first is used.
- This directive does not contain any secrets, so it may be in a
- world-readable
- file.
- </para>
- <para>
- If <emphasis>host1</emphasis> sends a message that is a request
- to that address, the message will be signed with the specified key. <emphasis>host1</emphasis> will
- expect any responses to signed messages to be signed with the same
- key.
- </para>
- <para>
- A similar statement must be present in <emphasis>host2</emphasis>'s
- configuration file (with <emphasis>host1</emphasis>'s address) for <emphasis>host2</emphasis> to
- sign request messages to <emphasis>host1</emphasis>.
- </para>
+ <para>
+ Multiple keys may be present, but only the first is used.
+ This directive does not contain any secrets, so it may be in a
+ world-readable
+ file.
+ </para>
+ <para>
+ If <emphasis>host1</emphasis> sends a message that is a request
+ to that address, the message will be signed with the specified key. <emphasis>host1</emphasis> will
+ expect any responses to signed messages to be signed with the same
+ key.
+ </para>
+ <para>
+ A similar statement must be present in <emphasis>host2</emphasis>'s
+ configuration file (with <emphasis>host1</emphasis>'s address) for <emphasis>host2</emphasis> to
+ sign request messages to <emphasis>host1</emphasis>.
+ </para>
</sect2>
<sect2>
- <title>TSIG Key Based Access Control</title>
- <para>
- <acronym>BIND</acronym> allows IP addresses and ranges
- to be specified in ACL
- definitions and
- <command>allow-{ query | transfer | update }</command>
- directives.
- This has been extended to allow TSIG keys also. The above key would
- be denoted <command>key host1-host2.</command>
- </para>
- <para>
- An example of an <command>allow-update</command> directive would be:
- </para>
+ <title>TSIG Key Based Access Control</title>
+ <para>
+ <acronym>BIND</acronym> allows IP addresses and ranges
+ to be specified in ACL
+ definitions and
+ <command>allow-{ query | transfer | update }</command>
+ directives.
+ This has been extended to allow TSIG keys also. The above key would
+ be denoted <command>key host1-host2.</command>
+ </para>
+ <para>
+ An example of an <command>allow-update</command> directive would be:
+ </para>
<programlisting>
allow-update { key host1-host2. ;};
@@ -1959,35 +1967,35 @@ allow-update { key host1-host2. ;};
<para>
See <xref linkend="dynamic_update_policies"/> for a discussion of
- the more flexible <command>update-policy</command> statement.
+ the more flexible <command>update-policy</command> statement.
</para>
</sect2>
<sect2>
- <title>Errors</title>
-
- <para>
- The processing of TSIG signed messages can result in
- several errors. If a signed message is sent to a non-TSIG aware
- server, a FORMERR (format error) will be returned, since the server will not
- understand the record. This is a result of misconfiguration,
- since the server must be explicitly configured to send a TSIG
- signed message to a specific server.
- </para>
-
- <para>
- If a TSIG aware server receives a message signed by an
- unknown key, the response will be unsigned with the TSIG
- extended error code set to BADKEY. If a TSIG aware server
- receives a message with a signature that does not validate, the
- response will be unsigned with the TSIG extended error code set
- to BADSIG. If a TSIG aware server receives a message with a time
- outside of the allowed range, the response will be signed with
- the TSIG extended error code set to BADTIME, and the time values
- will be adjusted so that the response can be successfully
- verified. In any of these cases, the message's rcode (response code) is set to
- NOTAUTH (not authenticated).
- </para>
+ <title>Errors</title>
+
+ <para>
+ The processing of TSIG signed messages can result in
+ several errors. If a signed message is sent to a non-TSIG aware
+ server, a FORMERR (format error) will be returned, since the server will not
+ understand the record. This is a result of misconfiguration,
+ since the server must be explicitly configured to send a TSIG
+ signed message to a specific server.
+ </para>
+
+ <para>
+ If a TSIG aware server receives a message signed by an
+ unknown key, the response will be unsigned with the TSIG
+ extended error code set to BADKEY. If a TSIG aware server
+ receives a message with a signature that does not validate, the
+ response will be unsigned with the TSIG extended error code set
+ to BADSIG. If a TSIG aware server receives a message with a time
+ outside of the allowed range, the response will be signed with
+ the TSIG extended error code set to BADTIME, and the time values
+ will be adjusted so that the response can be successfully
+ verified. In any of these cases, the message's rcode (response code) is set to
+ NOTAUTH (not authenticated).
+ </para>
</sect2>
</sect1>
@@ -1995,37 +2003,37 @@ allow-update { key host1-host2. ;};
<title>TKEY</title>
<para><command>TKEY</command>
- is a mechanism for automatically generating a shared secret
- between two hosts. There are several "modes" of
- <command>TKEY</command> that specify how the key is generated
- or assigned. <acronym>BIND</acronym> 9 implements only one of
- these modes, the Diffie-Hellman key exchange. Both hosts are
- required to have a Diffie-Hellman KEY record (although this
- record is not required to be present in a zone). The
- <command>TKEY</command> process must use signed messages,
- signed either by TSIG or SIG(0). The result of
- <command>TKEY</command> is a shared secret that can be used to
- sign messages with TSIG. <command>TKEY</command> can also be
- used to delete shared secrets that it had previously
- generated.
+ is a mechanism for automatically generating a shared secret
+ between two hosts. There are several "modes" of
+ <command>TKEY</command> that specify how the key is generated
+ or assigned. <acronym>BIND</acronym> 9 implements only one of
+ these modes, the Diffie-Hellman key exchange. Both hosts are
+ required to have a Diffie-Hellman KEY record (although this
+ record is not required to be present in a zone). The
+ <command>TKEY</command> process must use signed messages,
+ signed either by TSIG or SIG(0). The result of
+ <command>TKEY</command> is a shared secret that can be used to
+ sign messages with TSIG. <command>TKEY</command> can also be
+ used to delete shared secrets that it had previously
+ generated.
</para>
<para>
- The <command>TKEY</command> process is initiated by a
- client
- or server by sending a signed <command>TKEY</command>
- query
- (including any appropriate KEYs) to a TKEY-aware server. The
- server response, if it indicates success, will contain a
- <command>TKEY</command> record and any appropriate keys.
- After
- this exchange, both participants have enough information to
- determine the shared secret; the exact process depends on the
- <command>TKEY</command> mode. When using the
- Diffie-Hellman
- <command>TKEY</command> mode, Diffie-Hellman keys are
- exchanged,
- and the shared secret is derived by both participants.
+ The <command>TKEY</command> process is initiated by a
+ client
+ or server by sending a signed <command>TKEY</command>
+ query
+ (including any appropriate KEYs) to a TKEY-aware server. The
+ server response, if it indicates success, will contain a
+ <command>TKEY</command> record and any appropriate keys.
+ After
+ this exchange, both participants have enough information to
+ determine the shared secret; the exact process depends on the
+ <command>TKEY</command> mode. When using the
+ Diffie-Hellman
+ <command>TKEY</command> mode, Diffie-Hellman keys are
+ exchanged,
+ and the shared secret is derived by both participants.
</para>
</sect1>
@@ -2033,28 +2041,28 @@ allow-update { key host1-host2. ;};
<title>SIG(0)</title>
<para>
- <acronym>BIND</acronym> 9 partially supports DNSSEC SIG(0)
- transaction signatures as specified in RFC 2535 and RFC 2931.
- SIG(0)
- uses public/private keys to authenticate messages. Access control
- is performed in the same manner as TSIG keys; privileges can be
- granted or denied based on the key name.
+ <acronym>BIND</acronym> 9 partially supports DNSSEC SIG(0)
+ transaction signatures as specified in RFC 2535 and RFC 2931.
+ SIG(0)
+ uses public/private keys to authenticate messages. Access control
+ is performed in the same manner as TSIG keys; privileges can be
+ granted or denied based on the key name.
</para>
<para>
- When a SIG(0) signed message is received, it will only be
- verified if the key is known and trusted by the server; the server
- will not attempt to locate and/or validate the key.
+ When a SIG(0) signed message is received, it will only be
+ verified if the key is known and trusted by the server; the server
+ will not attempt to locate and/or validate the key.
</para>
<para>
- SIG(0) signing of multiple-message TCP streams is not
- supported.
+ SIG(0) signing of multiple-message TCP streams is not
+ supported.
</para>
<para>
- The only tool shipped with <acronym>BIND</acronym> 9 that
- generates SIG(0) signed messages is <command>nsupdate</command>.
+ The only tool shipped with <acronym>BIND</acronym> 9 that
+ generates SIG(0) signed messages is <command>nsupdate</command>.
</para>
</sect1>
@@ -2062,108 +2070,108 @@ allow-update { key host1-host2. ;};
<title>DNSSEC</title>
<para>
- Cryptographic authentication of DNS information is possible
- through the DNS Security (<emphasis>DNSSEC-bis</emphasis>) extensions,
- defined in RFC 4033, RFC 4034, and RFC 4035.
+ Cryptographic authentication of DNS information is possible
+ through the DNS Security (<emphasis>DNSSEC-bis</emphasis>) extensions,
+ defined in RFC 4033, RFC 4034, and RFC 4035.
This section describes the creation and use of DNSSEC signed zones.
</para>
<para>
- In order to set up a DNSSEC secure zone, there are a series
- of steps which must be followed. <acronym>BIND</acronym>
- 9 ships
- with several tools
- that are used in this process, which are explained in more detail
- below. In all cases, the <option>-h</option> option prints a
- full list of parameters. Note that the DNSSEC tools require the
- keyset files to be in the working directory or the
- directory specified by the <option>-d</option> option, and
- that the tools shipped with BIND 9.2.x and earlier are not compatible
- with the current ones.
+ In order to set up a DNSSEC secure zone, there are a series
+ of steps which must be followed. <acronym>BIND</acronym>
+ 9 ships
+ with several tools
+ that are used in this process, which are explained in more detail
+ below. In all cases, the <option>-h</option> option prints a
+ full list of parameters. Note that the DNSSEC tools require the
+ keyset files to be in the working directory or the
+ directory specified by the <option>-d</option> option, and
+ that the tools shipped with BIND 9.2.x and earlier are not compatible
+ with the current ones.
</para>
<para>
- There must also be communication with the administrators of
- the parent and/or child zone to transmit keys. A zone's security
- status must be indicated by the parent zone for a DNSSEC capable
- resolver to trust its data. This is done through the presence
- or absence of a <literal>DS</literal> record at the
- delegation
- point.
+ There must also be communication with the administrators of
+ the parent and/or child zone to transmit keys. A zone's security
+ status must be indicated by the parent zone for a DNSSEC capable
+ resolver to trust its data. This is done through the presence
+ or absence of a <literal>DS</literal> record at the
+ delegation
+ point.
</para>
<para>
- For other servers to trust data in this zone, they must
- either be statically configured with this zone's zone key or the
- zone key of another zone above this one in the DNS tree.
+ For other servers to trust data in this zone, they must
+ either be statically configured with this zone's zone key or the
+ zone key of another zone above this one in the DNS tree.
</para>
<sect2>
- <title>Generating Keys</title>
-
- <para>
- The <command>dnssec-keygen</command> program is used to
- generate keys.
- </para>
-
- <para>
- A secure zone must contain one or more zone keys. The
- zone keys will sign all other records in the zone, as well as
- the zone keys of any secure delegated zones. Zone keys must
- have the same name as the zone, a name type of
- <command>ZONE</command>, and must be usable for
- authentication.
- It is recommended that zone keys use a cryptographic algorithm
- designated as "mandatory to implement" by the IETF; currently
- the only one is RSASHA1.
- </para>
-
- <para>
- The following command will generate a 768-bit RSASHA1 key for
- the <filename>child.example</filename> zone:
- </para>
-
- <para>
- <userinput>dnssec-keygen -a RSASHA1 -b 768 -n ZONE child.example.</userinput>
- </para>
-
- <para>
- Two output files will be produced:
- <filename>Kchild.example.+005+12345.key</filename> and
- <filename>Kchild.example.+005+12345.private</filename>
- (where
- 12345 is an example of a key tag). The key filenames contain
- the key name (<filename>child.example.</filename>),
- algorithm (3
- is DSA, 1 is RSAMD5, 5 is RSASHA1, etc.), and the key tag (12345 in
- this case).
- The private key (in the <filename>.private</filename>
- file) is
- used to generate signatures, and the public key (in the
- <filename>.key</filename> file) is used for signature
- verification.
- </para>
-
- <para>
- To generate another key with the same properties (but with
- a different key tag), repeat the above command.
- </para>
-
- <para>
- The <command>dnssec-keyfromlabel</command> program is used
- to get a key pair from a crypto hardware and build the key
- files. Its usage is similar to <command>dnssec-keygen</command>.
- </para>
-
- <para>
- The public keys should be inserted into the zone file by
- including the <filename>.key</filename> files using
- <command>$INCLUDE</command> statements.
- </para>
+ <title>Generating Keys</title>
+
+ <para>
+ The <command>dnssec-keygen</command> program is used to
+ generate keys.
+ </para>
+
+ <para>
+ A secure zone must contain one or more zone keys. The
+ zone keys will sign all other records in the zone, as well as
+ the zone keys of any secure delegated zones. Zone keys must
+ have the same name as the zone, a name type of
+ <command>ZONE</command>, and must be usable for
+ authentication.
+ It is recommended that zone keys use a cryptographic algorithm
+ designated as "mandatory to implement" by the IETF; currently
+ the only one is RSASHA1.
+ </para>
+
+ <para>
+ The following command will generate a 768-bit RSASHA1 key for
+ the <filename>child.example</filename> zone:
+ </para>
+
+ <para>
+ <userinput>dnssec-keygen -a RSASHA1 -b 768 -n ZONE child.example.</userinput>
+ </para>
+
+ <para>
+ Two output files will be produced:
+ <filename>Kchild.example.+005+12345.key</filename> and
+ <filename>Kchild.example.+005+12345.private</filename>
+ (where
+ 12345 is an example of a key tag). The key filenames contain
+ the key name (<filename>child.example.</filename>),
+ algorithm (3
+ is DSA, 1 is RSAMD5, 5 is RSASHA1, etc.), and the key tag (12345 in
+ this case).
+ The private key (in the <filename>.private</filename>
+ file) is
+ used to generate signatures, and the public key (in the
+ <filename>.key</filename> file) is used for signature
+ verification.
+ </para>
+
+ <para>
+ To generate another key with the same properties (but with
+ a different key tag), repeat the above command.
+ </para>
+
+ <para>
+ The <command>dnssec-keyfromlabel</command> program is used
+ to get a key pair from a crypto hardware and build the key
+ files. Its usage is similar to <command>dnssec-keygen</command>.
+ </para>
+
+ <para>
+ The public keys should be inserted into the zone file by
+ including the <filename>.key</filename> files using
+ <command>$INCLUDE</command> statements.
+ </para>
</sect2>
<sect2>
- <title>Signing the Zone</title>
+ <title>Signing the Zone</title>
<para>
The <command>dnssec-signzone</command> program is used
@@ -2181,66 +2189,66 @@ allow-update { key host1-host2. ;};
zones need to be added manually.
</para>
- <para>
- The following command signs the zone, assuming it is in a
- file called <filename>zone.child.example</filename>. By
- default, all zone keys which have an available private key are
- used to generate signatures.
- </para>
-
- <para>
- <userinput>dnssec-signzone -o child.example zone.child.example</userinput>
- </para>
-
- <para>
- One output file is produced:
- <filename>zone.child.example.signed</filename>. This
- file
- should be referenced by <filename>named.conf</filename>
- as the
- input file for the zone.
- </para>
-
- <para><command>dnssec-signzone</command>
+ <para>
+ The following command signs the zone, assuming it is in a
+ file called <filename>zone.child.example</filename>. By
+ default, all zone keys which have an available private key are
+ used to generate signatures.
+ </para>
+
+ <para>
+ <userinput>dnssec-signzone -o child.example zone.child.example</userinput>
+ </para>
+
+ <para>
+ One output file is produced:
+ <filename>zone.child.example.signed</filename>. This
+ file
+ should be referenced by <filename>named.conf</filename>
+ as the
+ input file for the zone.
+ </para>
+
+ <para><command>dnssec-signzone</command>
will also produce a keyset and dsset files and optionally a
- dlvset file. These are used to provide the parent zone
- administrators with the <literal>DNSKEYs</literal> (or their
- corresponding <literal>DS</literal> records) that are the
- secure entry point to the zone.
- </para>
+ dlvset file. These are used to provide the parent zone
+ administrators with the <literal>DNSKEYs</literal> (or their
+ corresponding <literal>DS</literal> records) that are the
+ secure entry point to the zone.
+ </para>
</sect2>
<sect2>
- <title>Configuring Servers</title>
+ <title>Configuring Servers</title>
<para>
To enable <command>named</command> to respond appropriately
to DNS requests from DNSSEC aware clients,
<command>dnssec-enable</command> must be set to yes.
- (This is the default setting.)
- </para>
+ (This is the default setting.)
+ </para>
<para>
To enable <command>named</command> to validate answers from
other servers, the <command>dnssec-enable</command> option
- must be set to <userinput>yes</userinput>, and the
- <command>dnssec-validation</command> options must be set to
- <userinput>yes</userinput> or <userinput>auto</userinput>.
- </para>
+ must be set to <userinput>yes</userinput>, and the
+ <command>dnssec-validation</command> options must be set to
+ <userinput>yes</userinput> or <userinput>auto</userinput>.
+ </para>
<para>
- If <command>dnssec-validation</command> is set to
- <userinput>auto</userinput>, then a default
- trust anchor for the DNS root zone will be used.
- If it is set to <userinput>yes</userinput>, however,
- then at least one trust anchor must be configured
- with a <command>trusted-keys</command> or
- <command>managed-keys</command> statement in
- <filename>named.conf</filename>, or DNSSEC validation
- will not occur. The default setting is
- <userinput>yes</userinput>.
- </para>
+ If <command>dnssec-validation</command> is set to
+ <userinput>auto</userinput>, then a default
+ trust anchor for the DNS root zone will be used.
+ If it is set to <userinput>yes</userinput>, however,
+ then at least one trust anchor must be configured
+ with a <command>trusted-keys</command> or
+ <command>managed-keys</command> statement in
+ <filename>named.conf</filename>, or DNSSEC validation
+ will not occur. The default setting is
+ <userinput>yes</userinput>.
+ </para>
<para>
<command>trusted-keys</command> are copies of DNSKEY RRs
@@ -2253,13 +2261,13 @@ allow-update { key host1-host2. ;};
<para>
<command>managed-keys</command> are trusted keys which are
- automatically kept up to date via RFC 5011 trust anchor
- maintenance.
+ automatically kept up to date via RFC 5011 trust anchor
+ maintenance.
</para>
<para>
<command>trusted-keys</command> and
- <command>managed-keys</command> are described in more detail
+ <command>managed-keys</command> are described in more detail
later in this document.
</para>
@@ -2276,55 +2284,55 @@ allow-update { key host1-host2. ;};
more public keys for the root. This allows answers from
outside the organization to be validated. It will also
have several keys for parts of the namespace the organization
- controls. These are here to ensure that <command>named</command>
- is immune to compromises in the DNSSEC components of the security
- of parent zones.
+ controls. These are here to ensure that <command>named</command>
+ is immune to compromises in the DNSSEC components of the security
+ of parent zones.
</para>
<programlisting>
managed-keys {
/* Root Key */
- "." initial-key 257 3 3 "BNY4wrWM1nCfJ+CXd0rVXyYmobt7sEEfK3clRbGaTwS
- JxrGkxJWoZu6I7PzJu/E9gx4UC1zGAHlXKdE4zYIpRh
- aBKnvcC2U9mZhkdUpd1Vso/HAdjNe8LmMlnzY3zy2Xy
- 4klWOADTPzSv9eamj8V18PHGjBLaVtYvk/ln5ZApjYg
- hf+6fElrmLkdaz MQ2OCnACR817DF4BBa7UR/beDHyp
- 5iWTXWSi6XmoJLbG9Scqc7l70KDqlvXR3M/lUUVRbke
- g1IPJSidmK3ZyCllh4XSKbje/45SKucHgnwU5jefMtq
- 66gKodQj+MiA21AfUVe7u99WzTLzY3qlxDhxYQQ20FQ
- 97S+LKUTpQcq27R7AT3/V5hRQxScINqwcz4jYqZD2fQ
- dgxbcDTClU0CRBdiieyLMNzXG3";
+ "." initial-key 257 3 3 "BNY4wrWM1nCfJ+CXd0rVXyYmobt7sEEfK3clRbGaTwS
+ JxrGkxJWoZu6I7PzJu/E9gx4UC1zGAHlXKdE4zYIpRh
+ aBKnvcC2U9mZhkdUpd1Vso/HAdjNe8LmMlnzY3zy2Xy
+ 4klWOADTPzSv9eamj8V18PHGjBLaVtYvk/ln5ZApjYg
+ hf+6fElrmLkdaz MQ2OCnACR817DF4BBa7UR/beDHyp
+ 5iWTXWSi6XmoJLbG9Scqc7l70KDqlvXR3M/lUUVRbke
+ g1IPJSidmK3ZyCllh4XSKbje/45SKucHgnwU5jefMtq
+ 66gKodQj+MiA21AfUVe7u99WzTLzY3qlxDhxYQQ20FQ
+ 97S+LKUTpQcq27R7AT3/V5hRQxScINqwcz4jYqZD2fQ
+ dgxbcDTClU0CRBdiieyLMNzXG3";
};
trusted-keys {
- /* Key for our organization's forward zone */
- example.com. 257 3 5 "AwEAAaxPMcR2x0HbQV4WeZB6oEDX+r0QM6
- 5KbhTjrW1ZaARmPhEZZe3Y9ifgEuq7vZ/z
- GZUdEGNWy+JZzus0lUptwgjGwhUS1558Hb
- 4JKUbbOTcM8pwXlj0EiX3oDFVmjHO444gL
- kBOUKUf/mC7HvfwYH/Be22GnClrinKJp1O
- g4ywzO9WglMk7jbfW33gUKvirTHr25GL7S
- TQUzBb5Usxt8lgnyTUHs1t3JwCY5hKZ6Cq
- FxmAVZP20igTixin/1LcrgX/KMEGd/biuv
- F4qJCyduieHukuY3H4XMAcR+xia2nIUPvm
- /oyWR8BW/hWdzOvnSCThlHf3xiYleDbt/o
- 1OTQ09A0=";
-
- /* Key for our reverse zone. */
- 2.0.192.IN-ADDRPA.NET. 257 3 5 "AQOnS4xn/IgOUpBPJ3bogzwc
- xOdNax071L18QqZnQQQAVVr+i
- LhGTnNGp3HoWQLUIzKrJVZ3zg
- gy3WwNT6kZo6c0tszYqbtvchm
- gQC8CzKojM/W16i6MG/eafGU3
- siaOdS0yOI6BgPsw+YZdzlYMa
- IJGf4M4dyoKIhzdZyQ2bYQrjy
- Q4LB0lC7aOnsMyYKHHYeRvPxj
- IQXmdqgOJGq+vsevG06zW+1xg
- YJh9rCIfnm1GX/KMgxLPG2vXT
- D/RnLX+D3T3UL7HJYHJhAZD5L
- 59VvjSPsZJHeDCUyWYrvPZesZ
- DIRvhDD52SKvbheeTJUm6Ehkz
- ytNN2SN96QRk8j/iI8ib";
+ /* Key for our organization's forward zone */
+ example.com. 257 3 5 "AwEAAaxPMcR2x0HbQV4WeZB6oEDX+r0QM6
+ 5KbhTjrW1ZaARmPhEZZe3Y9ifgEuq7vZ/z
+ GZUdEGNWy+JZzus0lUptwgjGwhUS1558Hb
+ 4JKUbbOTcM8pwXlj0EiX3oDFVmjHO444gL
+ kBOUKUf/mC7HvfwYH/Be22GnClrinKJp1O
+ g4ywzO9WglMk7jbfW33gUKvirTHr25GL7S
+ TQUzBb5Usxt8lgnyTUHs1t3JwCY5hKZ6Cq
+ FxmAVZP20igTixin/1LcrgX/KMEGd/biuv
+ F4qJCyduieHukuY3H4XMAcR+xia2nIUPvm
+ /oyWR8BW/hWdzOvnSCThlHf3xiYleDbt/o
+ 1OTQ09A0=";
+
+ /* Key for our reverse zone. */
+ 2.0.192.IN-ADDRPA.NET. 257 3 5 "AQOnS4xn/IgOUpBPJ3bogzwc
+ xOdNax071L18QqZnQQQAVVr+i
+ LhGTnNGp3HoWQLUIzKrJVZ3zg
+ gy3WwNT6kZo6c0tszYqbtvchm
+ gQC8CzKojM/W16i6MG/eafGU3
+ siaOdS0yOI6BgPsw+YZdzlYMa
+ IJGf4M4dyoKIhzdZyQ2bYQrjy
+ Q4LB0lC7aOnsMyYKHHYeRvPxj
+ IQXmdqgOJGq+vsevG06zW+1xg
+ YJh9rCIfnm1GX/KMgxLPG2vXT
+ D/RnLX+D3T3UL7HJYHJhAZD5L
+ 59VvjSPsZJHeDCUyWYrvPZesZ
+ DIRvhDD52SKvbheeTJUm6Ehkz
+ ytNN2SN96QRk8j/iI8ib";
};
options {
@@ -2368,10 +2376,10 @@ options {
forgery; it rejects the response and logs an error.
</para>
<para>
- The logged error reads "insecurity proof failed" and
- "got insecure response; parent indicates it should be secure".
+ The logged error reads "insecurity proof failed" and
+ "got insecure response; parent indicates it should be secure".
(Prior to BIND 9.7, the logged error was "not insecure".
- This referred to the zone, not the response.)
+ This referred to the zone, not the response.)
</para>
</note>
</sect2>
@@ -2388,82 +2396,82 @@ options {
<title>IPv6 Support in <acronym>BIND</acronym> 9</title>
<para>
- <acronym>BIND</acronym> 9 fully supports all currently
- defined forms of IPv6 name to address and address to name
- lookups. It will also use IPv6 addresses to make queries when
- running on an IPv6 capable system.
+ <acronym>BIND</acronym> 9 fully supports all currently
+ defined forms of IPv6 name to address and address to name
+ lookups. It will also use IPv6 addresses to make queries when
+ running on an IPv6 capable system.
</para>
<para>
- For forward lookups, <acronym>BIND</acronym> 9 supports
- only AAAA records. RFC 3363 deprecated the use of A6 records,
- and client-side support for A6 records was accordingly removed
- from <acronym>BIND</acronym> 9.
- However, authoritative <acronym>BIND</acronym> 9 name servers still
- load zone files containing A6 records correctly, answer queries
- for A6 records, and accept zone transfer for a zone containing A6
- records.
+ For forward lookups, <acronym>BIND</acronym> 9 supports
+ only AAAA records. RFC 3363 deprecated the use of A6 records,
+ and client-side support for A6 records was accordingly removed
+ from <acronym>BIND</acronym> 9.
+ However, authoritative <acronym>BIND</acronym> 9 name servers still
+ load zone files containing A6 records correctly, answer queries
+ for A6 records, and accept zone transfer for a zone containing A6
+ records.
</para>
<para>
- For IPv6 reverse lookups, <acronym>BIND</acronym> 9 supports
- the traditional "nibble" format used in the
- <emphasis>ip6.arpa</emphasis> domain, as well as the older, deprecated
- <emphasis>ip6.int</emphasis> domain.
- Older versions of <acronym>BIND</acronym> 9
- supported the "binary label" (also known as "bitstring") format,
- but support of binary labels has been completely removed per
- RFC 3363.
- Many applications in <acronym>BIND</acronym> 9 do not understand
- the binary label format at all any more, and will return an
- error if given.
+ For IPv6 reverse lookups, <acronym>BIND</acronym> 9 supports
+ the traditional "nibble" format used in the
+ <emphasis>ip6.arpa</emphasis> domain, as well as the older, deprecated
+ <emphasis>ip6.int</emphasis> domain.
+ Older versions of <acronym>BIND</acronym> 9
+ supported the "binary label" (also known as "bitstring") format,
+ but support of binary labels has been completely removed per
+ RFC 3363.
+ Many applications in <acronym>BIND</acronym> 9 do not understand
+ the binary label format at all any more, and will return an
+ error if given.
In particular, an authoritative <acronym>BIND</acronym> 9
- name server will not load a zone file containing binary labels.
+ name server will not load a zone file containing binary labels.
</para>
<para>
- For an overview of the format and structure of IPv6 addresses,
- see <xref linkend="ipv6addresses"/>.
+ For an overview of the format and structure of IPv6 addresses,
+ see <xref linkend="ipv6addresses"/>.
</para>
<sect2>
- <title>Address Lookups Using AAAA Records</title>
+ <title>Address Lookups Using AAAA Records</title>
- <para>
- The IPv6 AAAA record is a parallel to the IPv4 A record,
- and, unlike the deprecated A6 record, specifies the entire
- IPv6 address in a single record. For example,
- </para>
+ <para>
+ The IPv6 AAAA record is a parallel to the IPv4 A record,
+ and, unlike the deprecated A6 record, specifies the entire
+ IPv6 address in a single record. For example,
+ </para>
<programlisting>
$ORIGIN example.com.
host 3600 IN AAAA 2001:db8::1
</programlisting>
- <para>
- Use of IPv4-in-IPv6 mapped addresses is not recommended.
+ <para>
+ Use of IPv4-in-IPv6 mapped addresses is not recommended.
If a host has an IPv4 address, use an A record, not
- a AAAA, with <literal>::ffff:192.168.42.1</literal> as
- the address.
- </para>
+ a AAAA, with <literal>::ffff:192.168.42.1</literal> as
+ the address.
+ </para>
</sect2>
<sect2>
- <title>Address to Name Lookups Using Nibble Format</title>
-
- <para>
- When looking up an address in nibble format, the address
- components are simply reversed, just as in IPv4, and
- <literal>ip6.arpa.</literal> is appended to the
- resulting name.
- For example, the following would provide reverse name lookup for
- a host with address
- <literal>2001:db8::1</literal>.
- </para>
+ <title>Address to Name Lookups Using Nibble Format</title>
+
+ <para>
+ When looking up an address in nibble format, the address
+ components are simply reversed, just as in IPv4, and
+ <literal>ip6.arpa.</literal> is appended to the
+ resulting name.
+ For example, the following would provide reverse name lookup for
+ a host with address
+ <literal>2001:db8::1</literal>.
+ </para>
<programlisting>
$ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 14400 IN PTR (
- host.example.com. )
+ host.example.com. )
</programlisting>
</sect2>
@@ -2475,75 +2483,75 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
<sect1>
<title>The Lightweight Resolver Library</title>
<para>
- Traditionally applications have been linked with a stub resolver
- library that sends recursive DNS queries to a local caching name
- server.
+ Traditionally applications have been linked with a stub resolver
+ library that sends recursive DNS queries to a local caching name
+ server.
</para>
<para>
- IPv6 once introduced new complexity into the resolution process,
- such as following A6 chains and DNAME records, and simultaneous
- lookup of IPv4 and IPv6 addresses. Though most of the complexity was
- then removed, these are hard or impossible
- to implement in a traditional stub resolver.
+ IPv6 once introduced new complexity into the resolution process,
+ such as following A6 chains and DNAME records, and simultaneous
+ lookup of IPv4 and IPv6 addresses. Though most of the complexity was
+ then removed, these are hard or impossible
+ to implement in a traditional stub resolver.
</para>
<para>
- <acronym>BIND</acronym> 9 therefore can also provide resolution
- services to local clients
- using a combination of a lightweight resolver library and a resolver
- daemon process running on the local host. These communicate using
- a simple UDP-based protocol, the "lightweight resolver protocol"
- that is distinct from and simpler than the full DNS protocol.
+ <acronym>BIND</acronym> 9 therefore can also provide resolution
+ services to local clients
+ using a combination of a lightweight resolver library and a resolver
+ daemon process running on the local host. These communicate using
+ a simple UDP-based protocol, the "lightweight resolver protocol"
+ that is distinct from and simpler than the full DNS protocol.
</para>
</sect1>
<sect1 id="lwresd">
<title>Running a Resolver Daemon</title>
<para>
- To use the lightweight resolver interface, the system must
- run the resolver daemon <command>lwresd</command> or a
- local
- name server configured with a <command>lwres</command>
- statement.
+ To use the lightweight resolver interface, the system must
+ run the resolver daemon <command>lwresd</command> or a
+ local
+ name server configured with a <command>lwres</command>
+ statement.
</para>
<para>
- By default, applications using the lightweight resolver library will
- make
- UDP requests to the IPv4 loopback address (127.0.0.1) on port 921.
- The
- address can be overridden by <command>lwserver</command>
- lines in
- <filename>/etc/resolv.conf</filename>.
+ By default, applications using the lightweight resolver library will
+ make
+ UDP requests to the IPv4 loopback address (127.0.0.1) on port 921.
+ The
+ address can be overridden by <command>lwserver</command>
+ lines in
+ <filename>/etc/resolv.conf</filename>.
</para>
<para>
- The daemon currently only looks in the DNS, but in the future
- it may use other sources such as <filename>/etc/hosts</filename>,
- NIS, etc.
+ The daemon currently only looks in the DNS, but in the future
+ it may use other sources such as <filename>/etc/hosts</filename>,
+ NIS, etc.
</para>
<para>
- The <command>lwresd</command> daemon is essentially a
- caching-only name server that responds to requests using the
- lightweight
- resolver protocol rather than the DNS protocol. Because it needs
- to run on each host, it is designed to require no or minimal
- configuration.
- Unless configured otherwise, it uses the name servers listed on
- <command>nameserver</command> lines in <filename>/etc/resolv.conf</filename>
- as forwarders, but is also capable of doing the resolution
- autonomously if
- none are specified.
+ The <command>lwresd</command> daemon is essentially a
+ caching-only name server that responds to requests using the
+ lightweight
+ resolver protocol rather than the DNS protocol. Because it needs
+ to run on each host, it is designed to require no or minimal
+ configuration.
+ Unless configured otherwise, it uses the name servers listed on
+ <command>nameserver</command> lines in <filename>/etc/resolv.conf</filename>
+ as forwarders, but is also capable of doing the resolution
+ autonomously if
+ none are specified.
</para>
<para>
- The <command>lwresd</command> daemon may also be
- configured with a
- <filename>named.conf</filename> style configuration file,
- in
- <filename>/etc/lwresd.conf</filename> by default. A name
- server may also
- be configured to act as a lightweight resolver daemon using the
- <command>lwres</command> statement in <filename>named.conf</filename>.
+ The <command>lwresd</command> daemon may also be
+ configured with a
+ <filename>named.conf</filename> style configuration file,
+ in
+ <filename>/etc/lwresd.conf</filename> by default. A name
+ server may also
+ be configured to act as a lightweight resolver daemon using the
+ <command>lwres</command> statement in <filename>named.conf</filename>.
</para>
</sect1>
@@ -2572,118 +2580,118 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
<sect1 id="configuration_file_elements">
<title>Configuration File Elements</title>
<para>
- Following is a list of elements used throughout the <acronym>BIND</acronym> configuration
- file documentation:
+ Following is a list of elements used throughout the <acronym>BIND</acronym> configuration
+ file documentation:
</para>
<informaltable colsep="0" rowsep="0">
- <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="2Level-table">
- <colspec colname="1" colnum="1" colsep="0" colwidth="1.855in"/>
- <colspec colname="2" colnum="2" colsep="0" colwidth="3.770in"/>
- <tbody>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <varname>acl_name</varname>
- </para>
- </entry>
- <entry colname="2">
- <para>
- The name of an <varname>address_match_list</varname> as
- defined by the <command>acl</command> statement.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <varname>address_match_list</varname>
- </para>
- </entry>
- <entry colname="2">
- <para>
- A list of one or more
- <varname>ip_addr</varname>,
- <varname>ip_prefix</varname>, <varname>key_id</varname>,
- or <varname>acl_name</varname> elements, see
- <xref linkend="address_match_lists"/>.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <varname>masters_list</varname>
- </para>
- </entry>
- <entry colname="2">
- <para>
- A named list of one or more <varname>ip_addr</varname>
+ <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="2Level-table">
+ <colspec colname="1" colnum="1" colsep="0" colwidth="1.855in"/>
+ <colspec colname="2" colnum="2" colsep="0" colwidth="3.770in"/>
+ <tbody>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <varname>acl_name</varname>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ The name of an <varname>address_match_list</varname> as
+ defined by the <command>acl</command> statement.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <varname>address_match_list</varname>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ A list of one or more
+ <varname>ip_addr</varname>,
+ <varname>ip_prefix</varname>, <varname>key_id</varname>,
+ or <varname>acl_name</varname> elements, see
+ <xref linkend="address_match_lists"/>.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <varname>masters_list</varname>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ A named list of one or more <varname>ip_addr</varname>
with optional <varname>key_id</varname> and/or
<varname>ip_port</varname>.
A <varname>masters_list</varname> may include other
<varname>masters_lists</varname>.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <varname>domain_name</varname>
- </para>
- </entry>
- <entry colname="2">
- <para>
- A quoted string which will be used as
- a DNS name, for example "<literal>my.test.domain</literal>".
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <varname>namelist</varname>
- </para>
- </entry>
- <entry colname="2">
- <para>
- A list of one or more <varname>domain_name</varname>
- elements.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <varname>dotted_decimal</varname>
- </para>
- </entry>
- <entry colname="2">
- <para>
- One to four integers valued 0 through
- 255 separated by dots (`.'), such as <command>123</command>,
- <command>45.67</command> or <command>89.123.45.67</command>.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <varname>ip4_addr</varname>
- </para>
- </entry>
- <entry colname="2">
- <para>
- An IPv4 address with exactly four elements
- in <varname>dotted_decimal</varname> notation.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <varname>ip6_addr</varname>
- </para>
- </entry>
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <varname>domain_name</varname>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ A quoted string which will be used as
+ a DNS name, for example "<literal>my.test.domain</literal>".
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <varname>namelist</varname>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ A list of one or more <varname>domain_name</varname>
+ elements.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <varname>dotted_decimal</varname>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ One to four integers valued 0 through
+ 255 separated by dots (`.'), such as <command>123</command>,
+ <command>45.67</command> or <command>89.123.45.67</command>.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <varname>ip4_addr</varname>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ An IPv4 address with exactly four elements
+ in <varname>dotted_decimal</varname> notation.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <varname>ip6_addr</varname>
+ </para>
+ </entry>
<entry colname="2">
<para>
An IPv6 address, such as <command>2001:db8::1234</command>.
@@ -2707,126 +2715,126 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
</para>
</entry>
</row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <varname>ip_addr</varname>
- </para>
- </entry>
- <entry colname="2">
- <para>
- An <varname>ip4_addr</varname> or <varname>ip6_addr</varname>.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <varname>ip_port</varname>
- </para>
- </entry>
- <entry colname="2">
- <para>
- An IP port <varname>number</varname>.
- The <varname>number</varname> is limited to 0
- through 65535, with values
- below 1024 typically restricted to use by processes running
- as root.
- In some cases, an asterisk (`*') character can be used as a
- placeholder to
- select a random high-numbered port.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <varname>ip_prefix</varname>
- </para>
- </entry>
- <entry colname="2">
- <para>
- An IP network specified as an <varname>ip_addr</varname>,
- followed by a slash (`/') and then the number of bits in the
- netmask.
- Trailing zeros in a <varname>ip_addr</varname>
- may omitted.
- For example, <command>127/8</command> is the
- network <command>127.0.0.0</command> with
- netmask <command>255.0.0.0</command> and <command>1.2.3.0/28</command> is
- network <command>1.2.3.0</command> with netmask <command>255.255.255.240</command>.
- </para>
- <para>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <varname>ip_addr</varname>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ An <varname>ip4_addr</varname> or <varname>ip6_addr</varname>.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <varname>ip_port</varname>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ An IP port <varname>number</varname>.
+ The <varname>number</varname> is limited to 0
+ through 65535, with values
+ below 1024 typically restricted to use by processes running
+ as root.
+ In some cases, an asterisk (`*') character can be used as a
+ placeholder to
+ select a random high-numbered port.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <varname>ip_prefix</varname>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ An IP network specified as an <varname>ip_addr</varname>,
+ followed by a slash (`/') and then the number of bits in the
+ netmask.
+ Trailing zeros in a <varname>ip_addr</varname>
+ may omitted.
+ For example, <command>127/8</command> is the
+ network <command>127.0.0.0</command> with
+ netmask <command>255.0.0.0</command> and <command>1.2.3.0/28</command> is
+ network <command>1.2.3.0</command> with netmask <command>255.255.255.240</command>.
+ </para>
+ <para>
When specifying a prefix involving a IPv6 scoped address
the scope may be omitted. In that case the prefix will
match packets from any scope.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <varname>key_id</varname>
- </para>
- </entry>
- <entry colname="2">
- <para>
- A <varname>domain_name</varname> representing
- the name of a shared key, to be used for transaction
- security.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <varname>key_list</varname>
- </para>
- </entry>
- <entry colname="2">
- <para>
- A list of one or more
- <varname>key_id</varname>s,
- separated by semicolons and ending with a semicolon.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <varname>number</varname>
- </para>
- </entry>
- <entry colname="2">
- <para>
- A non-negative 32-bit integer
- (i.e., a number between 0 and 4294967295, inclusive).
- Its acceptable value might further
- be limited by the context in which it is used.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <varname>path_name</varname>
- </para>
- </entry>
- <entry colname="2">
- <para>
- A quoted string which will be used as
- a pathname, such as <filename>zones/master/my.test.domain</filename>.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <varname>port_list</varname>
- </para>
- </entry>
- <entry colname="2">
- <para>
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <varname>key_id</varname>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ A <varname>domain_name</varname> representing
+ the name of a shared key, to be used for transaction
+ security.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <varname>key_list</varname>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ A list of one or more
+ <varname>key_id</varname>s,
+ separated by semicolons and ending with a semicolon.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <varname>number</varname>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ A non-negative 32-bit integer
+ (i.e., a number between 0 and 4294967295, inclusive).
+ Its acceptable value might further
+ be limited by the context in which it is used.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <varname>path_name</varname>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ A quoted string which will be used as
+ a pathname, such as <filename>zones/master/my.test.domain</filename>.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <varname>port_list</varname>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
A list of an <varname>ip_port</varname> or a port
range.
A port range is specified in the form of
@@ -2843,99 +2851,101 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
ports from 1024 through 65535.
In either case an asterisk (`*') character is not
allowed as a valid <varname>ip_port</varname>.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <varname>size_spec</varname>
- </para>
- </entry>
- <entry colname="2">
- <para>
- A 64-bit unsigned integer, or the keywords
- <userinput>unlimited</userinput> or
- <userinput>default</userinput>.
- </para>
- <para>
- Integers may take values
- 0 &lt;= value &lt;= 18446744073709551615, though
- certain parameters may use a more limited range
- within these extremes. In most cases, setting a
- value to 0 does not literally mean zero; it means
- "undefined" or "as big as psosible", depending on
- the context. See the expalantions of particular
- parameters that use <varname>size_spec</varname>
- for details on how they interpret its use.
- </para>
- <para>
- Numeric values can optionally be followed by a
- scaling factor:
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <varname>size_spec</varname>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ A 64-bit unsigned integer, or the keywords
+ <userinput>unlimited</userinput> or
+ <userinput>default</userinput>.
+ </para>
+ <para>
+ Integers may take values
+ 0 &lt;= value &lt;= 18446744073709551615, though
+ certain parameters
+ (such as <command>max-journal-size</command>) may
+ use a more limited range within these extremes.
+ In most cases, setting a value to 0 does not
+ literally mean zero; it means "undefined" or
+ "as big as possible", depending on the context.
+ See the explanations of particular parameters
+ that use <varname>size_spec</varname>
+ for details on how they interpret its use.
+ </para>
+ <para>
+ Numeric values can optionally be followed by a
+ scaling factor:
<userinput>K</userinput> or <userinput>k</userinput>
for kilobytes,
<userinput>M</userinput> or <userinput>m</userinput>
for megabytes, and
- <userinput>G</userinput> or <userinput>g</userinput>
- for gigabytes, which scale by 1024, 1024*1024, and
- 1024*1024*1024 respectively.
- </para>
- <para>
- <varname>unlimited</varname> generally means
- "as big as possible", though in certain contexts,
- (including <option>max-cache-size</option>), it may
- mean the largest possible 32-bit unsigned integer
- (0xffffffff); this distinction can be important when
- dealing with larger quantities.
- <varname>unlimited</varname> is usually the best way
- to safely set a very large number.
- </para>
- <para>
- <varname>default</varname>
- uses the limit that was in force when the server was started.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <varname>yes_or_no</varname>
- </para>
- </entry>
- <entry colname="2">
- <para>
- Either <userinput>yes</userinput> or <userinput>no</userinput>.
- The words <userinput>true</userinput> and <userinput>false</userinput> are
- also accepted, as are the numbers <userinput>1</userinput>
- and <userinput>0</userinput>.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <varname>dialup_option</varname>
- </para>
- </entry>
- <entry colname="2">
- <para>
- One of <userinput>yes</userinput>,
- <userinput>no</userinput>, <userinput>notify</userinput>,
- <userinput>notify-passive</userinput>, <userinput>refresh</userinput> or
- <userinput>passive</userinput>.
- When used in a zone, <userinput>notify-passive</userinput>,
- <userinput>refresh</userinput>, and <userinput>passive</userinput>
- are restricted to slave and stub zones.
- </para>
- </entry>
- </row>
- </tbody>
- </tgroup>
+ <userinput>G</userinput> or <userinput>g</userinput>
+ for gigabytes, which scale by 1024, 1024*1024, and
+ 1024*1024*1024 respectively.
+ </para>
+ <para>
+ <varname>unlimited</varname> generally means
+ "as big as possible", though in certain contexts,
+ (including <option>max-cache-size</option>), it may
+ mean the largest possible 32-bit unsigned integer
+ (0xffffffff); this distinction can be important when
+ dealing with larger quantities.
+ <varname>unlimited</varname> is usually the best way
+ to safely set a very large number.
+ </para>
+ <para>
+ <varname>default</varname>
+ uses the limit that was in force when the server was started.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <varname>yes_or_no</varname>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Either <userinput>yes</userinput> or <userinput>no</userinput>.
+ The words <userinput>true</userinput> and <userinput>false</userinput> are
+ also accepted, as are the numbers <userinput>1</userinput>
+ and <userinput>0</userinput>.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <varname>dialup_option</varname>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ One of <userinput>yes</userinput>,
+ <userinput>no</userinput>, <userinput>notify</userinput>,
+ <userinput>notify-passive</userinput>, <userinput>refresh</userinput> or
+ <userinput>passive</userinput>.
+ When used in a zone, <userinput>notify-passive</userinput>,
+ <userinput>refresh</userinput>, and <userinput>passive</userinput>
+ are restricted to slave and stub zones.
+ </para>
+ </entry>
+ </row>
+ </tbody>
+ </tgroup>
</informaltable>
<sect2 id="address_match_lists">
- <title>Address Match Lists</title>
- <sect3>
- <title>Syntax</title>
+ <title>Address Match Lists</title>
+ <sect3>
+ <title>Syntax</title>
<programlisting><varname>address_match_list</varname> = address_match_list_element ;
<optional> address_match_list_element; ... </optional>
@@ -2943,67 +2953,67 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
key key_id | acl_name | { address_match_list } )
</programlisting>
- </sect3>
- <sect3>
- <title>Definition and Usage</title>
- <para>
- Address match lists are primarily used to determine access
- control for various server operations. They are also used in
- the <command>listen-on</command> and <command>sortlist</command>
- statements. The elements which constitute an address match
- list can be any of the following:
- </para>
- <itemizedlist>
- <listitem>
- <simpara>an IP address (IPv4 or IPv6)</simpara>
- </listitem>
- <listitem>
- <simpara>an IP prefix (in `/' notation)</simpara>
- </listitem>
- <listitem>
- <simpara>
- a key ID, as defined by the <command>key</command>
- statement
- </simpara>
- </listitem>
- <listitem>
- <simpara>the name of an address match list defined with
- the <command>acl</command> statement
- </simpara>
- </listitem>
- <listitem>
- <simpara>a nested address match list enclosed in braces</simpara>
- </listitem>
- </itemizedlist>
-
- <para>
- Elements can be negated with a leading exclamation mark (`!'),
- and the match list names "any", "none", "localhost", and
- "localnets" are predefined. More information on those names
- can be found in the description of the acl statement.
- </para>
-
- <para>
- The addition of the key clause made the name of this syntactic
- element something of a misnomer, since security keys can be used
- to validate access without regard to a host or network address.
- Nonetheless, the term "address match list" is still used
- throughout the documentation.
- </para>
-
- <para>
- When a given IP address or prefix is compared to an address
- match list, the comparison takes place in approximately O(1)
- time. However, key comparisons require that the list of keys
- be traversed until a matching key is found, and therefore may
- be somewhat slower.
- </para>
-
- <para>
- The interpretation of a match depends on whether the list is being
- used for access control, defining <command>listen-on</command> ports, or in a
- <command>sortlist</command>, and whether the element was negated.
- </para>
+ </sect3>
+ <sect3>
+ <title>Definition and Usage</title>
+ <para>
+ Address match lists are primarily used to determine access
+ control for various server operations. They are also used in
+ the <command>listen-on</command> and <command>sortlist</command>
+ statements. The elements which constitute an address match
+ list can be any of the following:
+ </para>
+ <itemizedlist>
+ <listitem>
+ <simpara>an IP address (IPv4 or IPv6)</simpara>
+ </listitem>
+ <listitem>
+ <simpara>an IP prefix (in `/' notation)</simpara>
+ </listitem>
+ <listitem>
+ <simpara>
+ a key ID, as defined by the <command>key</command>
+ statement
+ </simpara>
+ </listitem>
+ <listitem>
+ <simpara>the name of an address match list defined with
+ the <command>acl</command> statement
+ </simpara>
+ </listitem>
+ <listitem>
+ <simpara>a nested address match list enclosed in braces</simpara>
+ </listitem>
+ </itemizedlist>
+
+ <para>
+ Elements can be negated with a leading exclamation mark (`!'),
+ and the match list names "any", "none", "localhost", and
+ "localnets" are predefined. More information on those names
+ can be found in the description of the acl statement.
+ </para>
+
+ <para>
+ The addition of the key clause made the name of this syntactic
+ element something of a misnomer, since security keys can be used
+ to validate access without regard to a host or network address.
+ Nonetheless, the term "address match list" is still used
+ throughout the documentation.
+ </para>
+
+ <para>
+ When a given IP address or prefix is compared to an address
+ match list, the comparison takes place in approximately O(1)
+ time. However, key comparisons require that the list of keys
+ be traversed until a matching key is found, and therefore may
+ be somewhat slower.
+ </para>
+
+ <para>
+ The interpretation of a match depends on whether the list is being
+ used for access control, defining <command>listen-on</command> ports, or in a
+ <command>sortlist</command>, and whether the element was negated.
+ </para>
<para>
When used as an access control list, a non-negated match
@@ -3025,63 +3035,63 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
addresses which do not match the list.
</para>
- <para>
- Order of insertion is significant. If more than one element
- in an ACL is found to match a given IP address or prefix,
- preference will be given to the one that came
- <emphasis>first</emphasis> in the ACL definition.
- Because of this first-match behavior, an element that
- defines a subset of another element in the list should
- come before the broader element, regardless of whether
- either is negated. For example, in
- <command>1.2.3/24; ! 1.2.3.13;</command>
- the 1.2.3.13 element is completely useless because the
- algorithm will match any lookup for 1.2.3.13 to the 1.2.3/24
- element. Using <command>! 1.2.3.13; 1.2.3/24</command> fixes
- that problem by having 1.2.3.13 blocked by the negation, but
- all other 1.2.3.* hosts fall through.
- </para>
- </sect3>
+ <para>
+ Order of insertion is significant. If more than one element
+ in an ACL is found to match a given IP address or prefix,
+ preference will be given to the one that came
+ <emphasis>first</emphasis> in the ACL definition.
+ Because of this first-match behavior, an element that
+ defines a subset of another element in the list should
+ come before the broader element, regardless of whether
+ either is negated. For example, in
+ <command>1.2.3/24; ! 1.2.3.13;</command>
+ the 1.2.3.13 element is completely useless because the
+ algorithm will match any lookup for 1.2.3.13 to the 1.2.3/24
+ element. Using <command>! 1.2.3.13; 1.2.3/24</command> fixes
+ that problem by having 1.2.3.13 blocked by the negation, but
+ all other 1.2.3.* hosts fall through.
+ </para>
+ </sect3>
</sect2>
<sect2>
- <title>Comment Syntax</title>
-
- <para>
- The <acronym>BIND</acronym> 9 comment syntax allows for
- comments to appear
- anywhere that whitespace may appear in a <acronym>BIND</acronym> configuration
- file. To appeal to programmers of all kinds, they can be written
- in the C, C++, or shell/perl style.
- </para>
-
- <sect3>
- <title>Syntax</title>
-
- <para>
- <programlisting>/* This is a <acronym>BIND</acronym> comment as in C */</programlisting>
- <programlisting>// This is a <acronym>BIND</acronym> comment as in C++</programlisting>
- <programlisting># This is a <acronym>BIND</acronym> comment as in common UNIX shells
+ <title>Comment Syntax</title>
+
+ <para>
+ The <acronym>BIND</acronym> 9 comment syntax allows for
+ comments to appear
+ anywhere that whitespace may appear in a <acronym>BIND</acronym> configuration
+ file. To appeal to programmers of all kinds, they can be written
+ in the C, C++, or shell/perl style.
+ </para>
+
+ <sect3>
+ <title>Syntax</title>
+
+ <para>
+ <programlisting>/* This is a <acronym>BIND</acronym> comment as in C */</programlisting>
+ <programlisting>// This is a <acronym>BIND</acronym> comment as in C++</programlisting>
+ <programlisting># This is a <acronym>BIND</acronym> comment as in common UNIX shells
# and perl</programlisting>
- </para>
- </sect3>
- <sect3>
- <title>Definition and Usage</title>
- <para>
- Comments may appear anywhere that whitespace may appear in
- a <acronym>BIND</acronym> configuration file.
- </para>
- <para>
- C-style comments start with the two characters /* (slash,
- star) and end with */ (star, slash). Because they are completely
- delimited with these characters, they can be used to comment only
- a portion of a line or to span multiple lines.
- </para>
- <para>
- C-style comments cannot be nested. For example, the following
- is not valid because the entire comment ends with the first */:
- </para>
- <para>
+ </para>
+ </sect3>
+ <sect3>
+ <title>Definition and Usage</title>
+ <para>
+ Comments may appear anywhere that whitespace may appear in
+ a <acronym>BIND</acronym> configuration file.
+ </para>
+ <para>
+ C-style comments start with the two characters /* (slash,
+ star) and end with */ (star, slash). Because they are completely
+ delimited with these characters, they can be used to comment only
+ a portion of a line or to span multiple lines.
+ </para>
+ <para>
+ C-style comments cannot be nested. For example, the following
+ is not valid because the entire comment ends with the first */:
+ </para>
+ <para>
<programlisting>/* This is the start of a comment.
This is still part of the comment.
@@ -3089,49 +3099,49 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
This is no longer in any comment. */
</programlisting>
- </para>
+ </para>
- <para>
- C++-style comments start with the two characters // (slash,
- slash) and continue to the end of the physical line. They cannot
- be continued across multiple physical lines; to have one logical
- comment span multiple lines, each line must use the // pair.
- For example:
- </para>
- <para>
+ <para>
+ C++-style comments start with the two characters // (slash,
+ slash) and continue to the end of the physical line. They cannot
+ be continued across multiple physical lines; to have one logical
+ comment span multiple lines, each line must use the // pair.
+ For example:
+ </para>
+ <para>
<programlisting>// This is the start of a comment. The next line
// is a new comment, even though it is logically
// part of the previous comment.
</programlisting>
- </para>
- <para>
- Shell-style (or perl-style, if you prefer) comments start
- with the character <literal>#</literal> (number sign)
- and continue to the end of the
- physical line, as in C++ comments.
- For example:
- </para>
+ </para>
+ <para>
+ Shell-style (or perl-style, if you prefer) comments start
+ with the character <literal>#</literal> (number sign)
+ and continue to the end of the
+ physical line, as in C++ comments.
+ For example:
+ </para>
- <para>
+ <para>
<programlisting># This is the start of a comment. The next line
# is a new comment, even though it is logically
# part of the previous comment.
</programlisting>
- </para>
-
- <warning>
- <para>
- You cannot use the semicolon (`;') character
- to start a comment such as you would in a zone file. The
- semicolon indicates the end of a configuration
- statement.
- </para>
- </warning>
- </sect3>
+ </para>
+
+ <warning>
+ <para>
+ You cannot use the semicolon (`;') character
+ to start a comment such as you would in a zone file. The
+ semicolon indicates the end of a configuration
+ statement.
+ </para>
+ </warning>
+ </sect3>
</sect2>
</sect1>
@@ -3139,188 +3149,188 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
<title>Configuration File Grammar</title>
<para>
- A <acronym>BIND</acronym> 9 configuration consists of
- statements and comments.
- Statements end with a semicolon. Statements and comments are the
- only elements that can appear without enclosing braces. Many
- statements contain a block of sub-statements, which are also
- terminated with a semicolon.
+ A <acronym>BIND</acronym> 9 configuration consists of
+ statements and comments.
+ Statements end with a semicolon. Statements and comments are the
+ only elements that can appear without enclosing braces. Many
+ statements contain a block of sub-statements, which are also
+ terminated with a semicolon.
</para>
<para>
- The following statements are supported:
+ The following statements are supported:
</para>
<informaltable colsep="0" rowsep="0">
- <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="2Level-table">
- <colspec colname="1" colnum="1" colsep="0" colwidth="1.336in"/>
- <colspec colname="2" colnum="2" colsep="0" colwidth="3.778in"/>
- <tbody>
- <row rowsep="0">
- <entry colname="1">
- <para><command>acl</command></para>
- </entry>
- <entry colname="2">
- <para>
- defines a named IP address
- matching list, for access control and other uses.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>controls</command></para>
- </entry>
- <entry colname="2">
- <para>
- declares control channels to be used
- by the <command>rndc</command> utility.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>include</command></para>
- </entry>
- <entry colname="2">
- <para>
- includes a file.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>key</command></para>
- </entry>
- <entry colname="2">
- <para>
- specifies key information for use in
- authentication and authorization using TSIG.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>logging</command></para>
- </entry>
- <entry colname="2">
- <para>
- specifies what the server logs, and where
- the log messages are sent.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>lwres</command></para>
- </entry>
- <entry colname="2">
- <para>
- configures <command>named</command> to
- also act as a light-weight resolver daemon (<command>lwresd</command>).
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>masters</command></para>
- </entry>
- <entry colname="2">
- <para>
- defines a named masters list for
- inclusion in stub and slave zones'
- <command>masters</command> or
- <command>also-notify</command> lists.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>options</command></para>
- </entry>
- <entry colname="2">
- <para>
- controls global server configuration
- options and sets defaults for other statements.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>server</command></para>
- </entry>
- <entry colname="2">
- <para>
- sets certain configuration options on
- a per-server basis.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>statistics-channels</command></para>
- </entry>
- <entry colname="2">
- <para>
+ <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="2Level-table">
+ <colspec colname="1" colnum="1" colsep="0" colwidth="1.336in"/>
+ <colspec colname="2" colnum="2" colsep="0" colwidth="3.778in"/>
+ <tbody>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>acl</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ defines a named IP address
+ matching list, for access control and other uses.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>controls</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ declares control channels to be used
+ by the <command>rndc</command> utility.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>include</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ includes a file.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>key</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ specifies key information for use in
+ authentication and authorization using TSIG.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>logging</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ specifies what the server logs, and where
+ the log messages are sent.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>lwres</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ configures <command>named</command> to
+ also act as a light-weight resolver daemon (<command>lwresd</command>).
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>masters</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ defines a named masters list for
+ inclusion in stub and slave zones'
+ <command>masters</command> or
+ <command>also-notify</command> lists.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>options</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ controls global server configuration
+ options and sets defaults for other statements.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>server</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ sets certain configuration options on
+ a per-server basis.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>statistics-channels</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
declares communication channels to get access to
<command>named</command> statistics.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>trusted-keys</command></para>
- </entry>
- <entry colname="2">
- <para>
- defines trusted DNSSEC keys.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>managed-keys</command></para>
- </entry>
- <entry colname="2">
- <para>
- lists DNSSEC keys to be kept up to date
- using RFC 5011 trust anchor maintenance.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>view</command></para>
- </entry>
- <entry colname="2">
- <para>
- defines a view.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>zone</command></para>
- </entry>
- <entry colname="2">
- <para>
- defines a zone.
- </para>
- </entry>
- </row>
- </tbody>
- </tgroup>
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>trusted-keys</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ defines trusted DNSSEC keys.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>managed-keys</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ lists DNSSEC keys to be kept up to date
+ using RFC 5011 trust anchor maintenance.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>view</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ defines a view.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>zone</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ defines a zone.
+ </para>
+ </entry>
+ </row>
+ </tbody>
+ </tgroup>
</informaltable>
<para>
- The <command>logging</command> and
- <command>options</command> statements may only occur once
- per
- configuration.
+ The <command>logging</command> and
+ <command>options</command> statements may only occur once
+ per
+ configuration.
</para>
<sect2>
- <title><command>acl</command> Statement Grammar</title>
+ <title><command>acl</command> Statement Grammar</title>
<programlisting><command>acl</command> acl-name {
address_match_list
@@ -3329,90 +3339,95 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
</sect2>
<sect2 id="acl">
- <title><command>acl</command> Statement Definition and
- Usage</title>
-
- <para>
- The <command>acl</command> statement assigns a symbolic
- name to an address match list. It gets its name from a primary
- use of address match lists: Access Control Lists (ACLs).
- </para>
-
- <para>
- Note that an address match list's name must be defined
- with <command>acl</command> before it can be used
- elsewhere; no forward references are allowed.
- </para>
-
- <para>
- The following ACLs are built-in:
- </para>
-
- <informaltable colsep="0" rowsep="0">
- <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="3Level-table">
- <colspec colname="1" colnum="1" colsep="0" colwidth="1.130in"/>
- <colspec colname="2" colnum="2" colsep="0" colwidth="4.000in"/>
- <tbody>
- <row rowsep="0">
- <entry colname="1">
- <para><command>any</command></para>
- </entry>
- <entry colname="2">
- <para>
- Matches all hosts.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>none</command></para>
- </entry>
- <entry colname="2">
- <para>
- Matches no hosts.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>localhost</command></para>
- </entry>
- <entry colname="2">
- <para>
- Matches the IPv4 and IPv6 addresses of all network
- interfaces on the system.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>localnets</command></para>
- </entry>
- <entry colname="2">
- <para>
- Matches any host on an IPv4 or IPv6 network
- for which the system has an interface.
- Some systems do not provide a way to determine the prefix
- lengths of
- local IPv6 addresses.
- In such a case, <command>localnets</command>
- only matches the local
- IPv6 addresses, just like <command>localhost</command>.
- </para>
- </entry>
- </row>
- </tbody>
- </tgroup>
- </informaltable>
+ <title><command>acl</command> Statement Definition and
+ Usage</title>
+
+ <para>
+ The <command>acl</command> statement assigns a symbolic
+ name to an address match list. It gets its name from a primary
+ use of address match lists: Access Control Lists (ACLs).
+ </para>
+
+ <para>
+ Note that an address match list's name must be defined
+ with <command>acl</command> before it can be used
+ elsewhere; no forward references are allowed.
+ </para>
+
+ <para>
+ The following ACLs are built-in:
+ </para>
+
+ <informaltable colsep="0" rowsep="0">
+ <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="3Level-table">
+ <colspec colname="1" colnum="1" colsep="0" colwidth="1.130in"/>
+ <colspec colname="2" colnum="2" colsep="0" colwidth="4.000in"/>
+ <tbody>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>any</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Matches all hosts.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>none</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Matches no hosts.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>localhost</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Matches the IPv4 and IPv6 addresses of all network
+ interfaces on the system. When addresses are
+ added or removed, the <command>localhost</command>
+ ACL element is updated to reflect the changes.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>localnets</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Matches any host on an IPv4 or IPv6 network
+ for which the system has an interface.
+ When addresses are added or removed,
+ the <command>localnets</command>
+ ACL element is updated to reflect the changes.
+ Some systems do not provide a way to determine the prefix
+ lengths of
+ local IPv6 addresses.
+ In such a case, <command>localnets</command>
+ only matches the local
+ IPv6 addresses, just like <command>localhost</command>.
+ </para>
+ </entry>
+ </row>
+ </tbody>
+ </tgroup>
+ </informaltable>
</sect2>
<sect2>
- <title><command>controls</command> Statement Grammar</title>
+ <title><command>controls</command> Statement Grammar</title>
<programlisting><command>controls</command> {
[ inet ( ip_addr | * ) [ port ip_port ]
- allow { <replaceable> address_match_list </replaceable> }
- keys { <replaceable>key_list</replaceable> }; ]
+ allow { <replaceable> address_match_list </replaceable> }
+ keys { <replaceable>key_list</replaceable> }; ]
[ inet ...; ]
[ unix <replaceable>path</replaceable> perm <replaceable>number</replaceable> owner <replaceable>number</replaceable> group <replaceable>number</replaceable>
keys { <replaceable>key_list</replaceable> }; ]
@@ -3423,46 +3438,46 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
</sect2>
<sect2 id="controls_statement_definition_and_usage">
- <title><command>controls</command> Statement Definition and
- Usage</title>
-
- <para>
- The <command>controls</command> statement declares control
- channels to be used by system administrators to control the
- operation of the name server. These control channels are
- used by the <command>rndc</command> utility to send
- commands to and retrieve non-DNS results from a name server.
- </para>
-
- <para>
- An <command>inet</command> control channel is a TCP socket
+ <title><command>controls</command> Statement Definition and
+ Usage</title>
+
+ <para>
+ The <command>controls</command> statement declares control
+ channels to be used by system administrators to control the
+ operation of the name server. These control channels are
+ used by the <command>rndc</command> utility to send
+ commands to and retrieve non-DNS results from a name server.
+ </para>
+
+ <para>
+ An <command>inet</command> control channel is a TCP socket
listening at the specified <command>ip_port</command> on the
specified <command>ip_addr</command>, which can be an IPv4 or IPv6
address. An <command>ip_addr</command> of <literal>*</literal> (asterisk) is
interpreted as the IPv4 wildcard address; connections will be
accepted on any of the system's IPv4 addresses.
To listen on the IPv6 wildcard address,
- use an <command>ip_addr</command> of <literal>::</literal>.
- If you will only use <command>rndc</command> on the local host,
- using the loopback address (<literal>127.0.0.1</literal>
- or <literal>::1</literal>) is recommended for maximum security.
- </para>
-
- <para>
- If no port is specified, port 953 is used. The asterisk
+ use an <command>ip_addr</command> of <literal>::</literal>.
+ If you will only use <command>rndc</command> on the local host,
+ using the loopback address (<literal>127.0.0.1</literal>
+ or <literal>::1</literal>) is recommended for maximum security.
+ </para>
+
+ <para>
+ If no port is specified, port 953 is used. The asterisk
"<literal>*</literal>" cannot be used for <command>ip_port</command>.
- </para>
+ </para>
- <para>
- The ability to issue commands over the control channel is
- restricted by the <command>allow</command> and
- <command>keys</command> clauses.
+ <para>
+ The ability to issue commands over the control channel is
+ restricted by the <command>allow</command> and
+ <command>keys</command> clauses.
Connections to the control channel are permitted based on the
- <command>address_match_list</command>. This is for simple
- IP address based filtering only; any <command>key_id</command>
- elements of the <command>address_match_list</command>
- are ignored.
- </para>
+ <command>address_match_list</command>. This is for simple
+ IP address based filtering only; any <command>key_id</command>
+ elements of the <command>address_match_list</command>
+ are ignored.
+ </para>
<para>
A <command>unix</command> control channel is a UNIX domain
@@ -3474,96 +3489,96 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
as the permissions on the socket itself are ignored.
</para>
- <para>
- The primary authorization mechanism of the command
- channel is the <command>key_list</command>, which
- contains a list of <command>key_id</command>s.
- Each <command>key_id</command> in the <command>key_list</command>
+ <para>
+ The primary authorization mechanism of the command
+ channel is the <command>key_list</command>, which
+ contains a list of <command>key_id</command>s.
+ Each <command>key_id</command> in the <command>key_list</command>
is authorized to execute commands over the control channel.
- See <xref linkend="rndc"/> in <xref linkend="admin_tools"/>)
+ See <xref linkend="rndc"/> in <xref linkend="admin_tools"/>)
for information about configuring keys in <command>rndc</command>.
- </para>
-
- <para>
- If no <command>controls</command> statement is present,
- <command>named</command> will set up a default
- control channel listening on the loopback address 127.0.0.1
- and its IPv6 counterpart ::1.
- In this case, and also when the <command>controls</command> statement
- is present but does not have a <command>keys</command> clause,
- <command>named</command> will attempt to load the command channel key
- from the file <filename>rndc.key</filename> in
- <filename>/etc</filename> (or whatever <varname>sysconfdir</varname>
- was specified as when <acronym>BIND</acronym> was built).
- To create a <filename>rndc.key</filename> file, run
- <userinput>rndc-confgen -a</userinput>.
- </para>
-
- <para>
- The <filename>rndc.key</filename> feature was created to
- ease the transition of systems from <acronym>BIND</acronym> 8,
- which did not have digital signatures on its command channel
- messages and thus did not have a <command>keys</command> clause.
-
- It makes it possible to use an existing <acronym>BIND</acronym> 8
- configuration file in <acronym>BIND</acronym> 9 unchanged,
- and still have <command>rndc</command> work the same way
- <command>ndc</command> worked in BIND 8, simply by executing the
- command <userinput>rndc-confgen -a</userinput> after BIND 9 is
- installed.
- </para>
-
- <para>
- Since the <filename>rndc.key</filename> feature
- is only intended to allow the backward-compatible usage of
- <acronym>BIND</acronym> 8 configuration files, this
- feature does not
- have a high degree of configurability. You cannot easily change
- the key name or the size of the secret, so you should make a
- <filename>rndc.conf</filename> with your own key if you
- wish to change
- those things. The <filename>rndc.key</filename> file
- also has its
- permissions set such that only the owner of the file (the user that
- <command>named</command> is running as) can access it.
- If you
- desire greater flexibility in allowing other users to access
- <command>rndc</command> commands, then you need to create
- a
- <filename>rndc.conf</filename> file and make it group
- readable by a group
- that contains the users who should have access.
- </para>
-
- <para>
- To disable the command channel, use an empty
+ </para>
+
+ <para>
+ If no <command>controls</command> statement is present,
+ <command>named</command> will set up a default
+ control channel listening on the loopback address 127.0.0.1
+ and its IPv6 counterpart ::1.
+ In this case, and also when the <command>controls</command> statement
+ is present but does not have a <command>keys</command> clause,
+ <command>named</command> will attempt to load the command channel key
+ from the file <filename>rndc.key</filename> in
+ <filename>/etc</filename> (or whatever <varname>sysconfdir</varname>
+ was specified as when <acronym>BIND</acronym> was built).
+ To create a <filename>rndc.key</filename> file, run
+ <userinput>rndc-confgen -a</userinput>.
+ </para>
+
+ <para>
+ The <filename>rndc.key</filename> feature was created to
+ ease the transition of systems from <acronym>BIND</acronym> 8,
+ which did not have digital signatures on its command channel
+ messages and thus did not have a <command>keys</command> clause.
+
+ It makes it possible to use an existing <acronym>BIND</acronym> 8
+ configuration file in <acronym>BIND</acronym> 9 unchanged,
+ and still have <command>rndc</command> work the same way
+ <command>ndc</command> worked in BIND 8, simply by executing the
+ command <userinput>rndc-confgen -a</userinput> after BIND 9 is
+ installed.
+ </para>
+
+ <para>
+ Since the <filename>rndc.key</filename> feature
+ is only intended to allow the backward-compatible usage of
+ <acronym>BIND</acronym> 8 configuration files, this
+ feature does not
+ have a high degree of configurability. You cannot easily change
+ the key name or the size of the secret, so you should make a
+ <filename>rndc.conf</filename> with your own key if you
+ wish to change
+ those things. The <filename>rndc.key</filename> file
+ also has its
+ permissions set such that only the owner of the file (the user that
+ <command>named</command> is running as) can access it.
+ If you
+ desire greater flexibility in allowing other users to access
+ <command>rndc</command> commands, then you need to create
+ a
+ <filename>rndc.conf</filename> file and make it group
+ readable by a group
+ that contains the users who should have access.
+ </para>
+
+ <para>
+ To disable the command channel, use an empty
<command>controls</command> statement:
<command>controls { };</command>.
- </para>
+ </para>
</sect2>
<sect2>
- <title><command>include</command> Statement Grammar</title>
- <programlisting><command>include</command> <replaceable>filename</replaceable>;</programlisting>
+ <title><command>include</command> Statement Grammar</title>
+ <programlisting><command>include</command> <replaceable>filename</replaceable>;</programlisting>
</sect2>
<sect2>
- <title><command>include</command> Statement Definition and
- Usage</title>
-
- <para>
- The <command>include</command> statement inserts the
- specified file at the point where the <command>include</command>
- statement is encountered. The <command>include</command>
- statement facilitates the administration of configuration
- files
- by permitting the reading or writing of some things but not
- others. For example, the statement could include private keys
- that are readable only by the name server.
- </para>
+ <title><command>include</command> Statement Definition and
+ Usage</title>
+
+ <para>
+ The <command>include</command> statement inserts the
+ specified file at the point where the <command>include</command>
+ statement is encountered. The <command>include</command>
+ statement facilitates the administration of configuration
+ files
+ by permitting the reading or writing of some things but not
+ others. For example, the statement could include private keys
+ that are readable only by the name server.
+ </para>
</sect2>
<sect2>
- <title><command>key</command> Statement Grammar</title>
+ <title><command>key</command> Statement Grammar</title>
<programlisting><command>key</command> <replaceable>key_id</replaceable> {
algorithm <replaceable>string</replaceable>;
@@ -3574,35 +3589,35 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
</sect2>
<sect2>
- <title><command>key</command> Statement Definition and Usage</title>
-
- <para>
- The <command>key</command> statement defines a shared
- secret key for use with TSIG (see <xref linkend="tsig"/>)
- or the command channel
- (see <xref linkend="controls_statement_definition_and_usage"/>).
- </para>
-
- <para>
- The <command>key</command> statement can occur at the
- top level
- of the configuration file or inside a <command>view</command>
- statement. Keys defined in top-level <command>key</command>
- statements can be used in all views. Keys intended for use in
- a <command>controls</command> statement
- (see <xref linkend="controls_statement_definition_and_usage"/>)
- must be defined at the top level.
- </para>
-
- <para>
- The <replaceable>key_id</replaceable>, also known as the
- key name, is a domain name uniquely identifying the key. It can
- be used in a <command>server</command>
- statement to cause requests sent to that
- server to be signed with this key, or in address match lists to
- verify that incoming requests have been signed with a key
- matching this name, algorithm, and secret.
- </para>
+ <title><command>key</command> Statement Definition and Usage</title>
+
+ <para>
+ The <command>key</command> statement defines a shared
+ secret key for use with TSIG (see <xref linkend="tsig"/>)
+ or the command channel
+ (see <xref linkend="controls_statement_definition_and_usage"/>).
+ </para>
+
+ <para>
+ The <command>key</command> statement can occur at the
+ top level
+ of the configuration file or inside a <command>view</command>
+ statement. Keys defined in top-level <command>key</command>
+ statements can be used in all views. Keys intended for use in
+ a <command>controls</command> statement
+ (see <xref linkend="controls_statement_definition_and_usage"/>)
+ must be defined at the top level.
+ </para>
+
+ <para>
+ The <replaceable>key_id</replaceable>, also known as the
+ key name, is a domain name uniquely identifying the key. It can
+ be used in a <command>server</command>
+ statement to cause requests sent to that
+ server to be signed with this key, or in address match lists to
+ verify that incoming requests have been signed with a key
+ matching this name, algorithm, and secret.
+ </para>
<para>
The <replaceable>algorithm_id</replaceable> is a string
@@ -3621,18 +3636,18 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
</sect2>
<sect2>
- <title><command>logging</command> Statement Grammar</title>
+ <title><command>logging</command> Statement Grammar</title>
<programlisting><command>logging</command> {
[ <command>channel</command> <replaceable>channel_name</replaceable> {
( <command>file</command> <replaceable>path_name</replaceable>
- [ <command>versions</command> ( <replaceable>number</replaceable> | <command>unlimited</command> ) ]
- [ <command>size</command> <replaceable>size_spec</replaceable> ]
+ [ <command>versions</command> ( <replaceable>number</replaceable> | <command>unlimited</command> ) ]
+ [ <command>size</command> <replaceable>size_spec</replaceable> ]
| <command>syslog</command> <replaceable>syslog_facility</replaceable>
| <command>stderr</command>
| <command>null</command> );
[ <command>severity</command> (<option>critical</option> | <option>error</option> | <option>warning</option> | <option>notice</option> |
- <option>info</option> | <option>debug</option> [ <replaceable>level</replaceable> ] | <option>dynamic</option> ); ]
+ <option>info</option> | <option>debug</option> [ <replaceable>level</replaceable> ] | <option>dynamic</option> ); ]
[ <command>print-category</command> <option>yes</option> or <option>no</option>; ]
[ <command>print-severity</command> <option>yes</option> or <option>no</option>; ]
[ <command>print-time</command> <option>yes</option> or <option>no</option>; ]
@@ -3647,23 +3662,23 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
</sect2>
<sect2>
- <title><command>logging</command> Statement Definition and
- Usage</title>
-
- <para>
- The <command>logging</command> statement configures a
- wide
- variety of logging options for the name server. Its <command>channel</command> phrase
- associates output methods, format options and severity levels with
- a name that can then be used with the <command>category</command> phrase
- to select how various classes of messages are logged.
- </para>
- <para>
- Only one <command>logging</command> statement is used to
- define
- as many channels and categories as are wanted. If there is no <command>logging</command> statement,
- the logging configuration will be:
- </para>
+ <title><command>logging</command> Statement Definition and
+ Usage</title>
+
+ <para>
+ The <command>logging</command> statement configures a
+ wide
+ variety of logging options for the name server. Its <command>channel</command> phrase
+ associates output methods, format options and severity levels with
+ a name that can then be used with the <command>category</command> phrase
+ to select how various classes of messages are logged.
+ </para>
+ <para>
+ Only one <command>logging</command> statement is used to
+ define
+ as many channels and categories as are wanted. If there is no <command>logging</command> statement,
+ the logging configuration will be:
+ </para>
<programlisting>logging {
category default { default_syslog; default_debug; };
@@ -3671,98 +3686,98 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
};
</programlisting>
- <para>
- In <acronym>BIND</acronym> 9, the logging configuration
- is only established when
- the entire configuration file has been parsed. In <acronym>BIND</acronym> 8, it was
- established as soon as the <command>logging</command>
- statement
- was parsed. When the server is starting up, all logging messages
- regarding syntax errors in the configuration file go to the default
- channels, or to standard error if the "<option>-g</option>" option
- was specified.
- </para>
-
- <sect3>
- <title>The <command>channel</command> Phrase</title>
-
- <para>
- All log output goes to one or more <emphasis>channels</emphasis>;
- you can make as many of them as you want.
- </para>
-
- <para>
- Every channel definition must include a destination clause that
- says whether messages selected for the channel go to a file, to a
- particular syslog facility, to the standard error stream, or are
- discarded. It can optionally also limit the message severity level
- that will be accepted by the channel (the default is
- <command>info</command>), and whether to include a
- <command>named</command>-generated time stamp, the
- category name
- and/or severity level (the default is not to include any).
- </para>
-
- <para>
- The <command>null</command> destination clause
- causes all messages sent to the channel to be discarded;
- in that case, other options for the channel are meaningless.
- </para>
-
- <para>
- The <command>file</command> destination clause directs
- the channel
- to a disk file. It can include limitations
- both on how large the file is allowed to become, and how many
- versions
- of the file will be saved each time the file is opened.
- </para>
-
- <para>
- If you use the <command>versions</command> log file
- option, then
- <command>named</command> will retain that many backup
- versions of the file by
- renaming them when opening. For example, if you choose to keep
- three old versions
- of the file <filename>lamers.log</filename>, then just
- before it is opened
- <filename>lamers.log.1</filename> is renamed to
- <filename>lamers.log.2</filename>, <filename>lamers.log.0</filename> is renamed
- to <filename>lamers.log.1</filename>, and <filename>lamers.log</filename> is
- renamed to <filename>lamers.log.0</filename>.
- You can say <command>versions unlimited</command> to
- not limit
- the number of versions.
- If a <command>size</command> option is associated with
- the log file,
- then renaming is only done when the file being opened exceeds the
- indicated size. No backup versions are kept by default; any
- existing
- log file is simply appended.
- </para>
-
- <para>
- The <command>size</command> option for files is used
- to limit log
- growth. If the file ever exceeds the size, then <command>named</command> will
- stop writing to the file unless it has a <command>versions</command> option
- associated with it. If backup versions are kept, the files are
- rolled as
- described above and a new one begun. If there is no
- <command>versions</command> option, no more data will
- be written to the log
- until some out-of-band mechanism removes or truncates the log to
- less than the
- maximum size. The default behavior is not to limit the size of
- the
- file.
- </para>
-
- <para>
- Example usage of the <command>size</command> and
- <command>versions</command> options:
- </para>
+ <para>
+ In <acronym>BIND</acronym> 9, the logging configuration
+ is only established when
+ the entire configuration file has been parsed. In <acronym>BIND</acronym> 8, it was
+ established as soon as the <command>logging</command>
+ statement
+ was parsed. When the server is starting up, all logging messages
+ regarding syntax errors in the configuration file go to the default
+ channels, or to standard error if the "<option>-g</option>" option
+ was specified.
+ </para>
+
+ <sect3>
+ <title>The <command>channel</command> Phrase</title>
+
+ <para>
+ All log output goes to one or more <emphasis>channels</emphasis>;
+ you can make as many of them as you want.
+ </para>
+
+ <para>
+ Every channel definition must include a destination clause that
+ says whether messages selected for the channel go to a file, to a
+ particular syslog facility, to the standard error stream, or are
+ discarded. It can optionally also limit the message severity level
+ that will be accepted by the channel (the default is
+ <command>info</command>), and whether to include a
+ <command>named</command>-generated time stamp, the
+ category name
+ and/or severity level (the default is not to include any).
+ </para>
+
+ <para>
+ The <command>null</command> destination clause
+ causes all messages sent to the channel to be discarded;
+ in that case, other options for the channel are meaningless.
+ </para>
+
+ <para>
+ The <command>file</command> destination clause directs
+ the channel
+ to a disk file. It can include limitations
+ both on how large the file is allowed to become, and how many
+ versions
+ of the file will be saved each time the file is opened.
+ </para>
+
+ <para>
+ If you use the <command>versions</command> log file
+ option, then
+ <command>named</command> will retain that many backup
+ versions of the file by
+ renaming them when opening. For example, if you choose to keep
+ three old versions
+ of the file <filename>lamers.log</filename>, then just
+ before it is opened
+ <filename>lamers.log.1</filename> is renamed to
+ <filename>lamers.log.2</filename>, <filename>lamers.log.0</filename> is renamed
+ to <filename>lamers.log.1</filename>, and <filename>lamers.log</filename> is
+ renamed to <filename>lamers.log.0</filename>.
+ You can say <command>versions unlimited</command> to
+ not limit
+ the number of versions.
+ If a <command>size</command> option is associated with
+ the log file,
+ then renaming is only done when the file being opened exceeds the
+ indicated size. No backup versions are kept by default; any
+ existing
+ log file is simply appended.
+ </para>
+
+ <para>
+ The <command>size</command> option for files is used
+ to limit log
+ growth. If the file ever exceeds the size, then <command>named</command> will
+ stop writing to the file unless it has a <command>versions</command> option
+ associated with it. If backup versions are kept, the files are
+ rolled as
+ described above and a new one begun. If there is no
+ <command>versions</command> option, no more data will
+ be written to the log
+ until some out-of-band mechanism removes or truncates the log to
+ less than the
+ maximum size. The default behavior is not to limit the size of
+ the
+ file.
+ </para>
+
+ <para>
+ Example usage of the <command>size</command> and
+ <command>versions</command> options:
+ </para>
<programlisting>channel an_example_channel {
file "example.log" versions 3 size 20m;
@@ -3771,77 +3786,77 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
};
</programlisting>
- <para>
- The <command>syslog</command> destination clause
- directs the
- channel to the system log. Its argument is a
- syslog facility as described in the <command>syslog</command> man
- page. Known facilities are <command>kern</command>, <command>user</command>,
- <command>mail</command>, <command>daemon</command>, <command>auth</command>,
- <command>syslog</command>, <command>lpr</command>, <command>news</command>,
- <command>uucp</command>, <command>cron</command>, <command>authpriv</command>,
- <command>ftp</command>, <command>local0</command>, <command>local1</command>,
- <command>local2</command>, <command>local3</command>, <command>local4</command>,
- <command>local5</command>, <command>local6</command> and
- <command>local7</command>, however not all facilities
- are supported on
- all operating systems.
- How <command>syslog</command> will handle messages
- sent to
- this facility is described in the <command>syslog.conf</command> man
- page. If you have a system which uses a very old version of <command>syslog</command> that
- only uses two arguments to the <command>openlog()</command> function,
- then this clause is silently ignored.
- </para>
- <para>
+ <para>
+ The <command>syslog</command> destination clause
+ directs the
+ channel to the system log. Its argument is a
+ syslog facility as described in the <command>syslog</command> man
+ page. Known facilities are <command>kern</command>, <command>user</command>,
+ <command>mail</command>, <command>daemon</command>, <command>auth</command>,
+ <command>syslog</command>, <command>lpr</command>, <command>news</command>,
+ <command>uucp</command>, <command>cron</command>, <command>authpriv</command>,
+ <command>ftp</command>, <command>local0</command>, <command>local1</command>,
+ <command>local2</command>, <command>local3</command>, <command>local4</command>,
+ <command>local5</command>, <command>local6</command> and
+ <command>local7</command>, however not all facilities
+ are supported on
+ all operating systems.
+ How <command>syslog</command> will handle messages
+ sent to
+ this facility is described in the <command>syslog.conf</command> man
+ page. If you have a system which uses a very old version of <command>syslog</command> that
+ only uses two arguments to the <command>openlog()</command> function,
+ then this clause is silently ignored.
+ </para>
+ <para>
On Windows machines syslog messages are directed to the EventViewer.
- </para>
- <para>
- The <command>severity</command> clause works like <command>syslog</command>'s
- "priorities", except that they can also be used if you are writing
- straight to a file rather than using <command>syslog</command>.
- Messages which are not at least of the severity level given will
- not be selected for the channel; messages of higher severity
- levels
- will be accepted.
- </para>
- <para>
- If you are using <command>syslog</command>, then the <command>syslog.conf</command> priorities
- will also determine what eventually passes through. For example,
- defining a channel facility and severity as <command>daemon</command> and <command>debug</command> but
- only logging <command>daemon.warning</command> via <command>syslog.conf</command> will
- cause messages of severity <command>info</command> and
- <command>notice</command> to
- be dropped. If the situation were reversed, with <command>named</command> writing
- messages of only <command>warning</command> or higher,
- then <command>syslogd</command> would
- print all messages it received from the channel.
- </para>
-
- <para>
- The <command>stderr</command> destination clause
- directs the
- channel to the server's standard error stream. This is intended
- for
- use when the server is running as a foreground process, for
- example
- when debugging a configuration.
- </para>
-
- <para>
- The server can supply extensive debugging information when
- it is in debugging mode. If the server's global debug level is
- greater
- than zero, then debugging mode will be active. The global debug
- level is set either by starting the <command>named</command> server
- with the <option>-d</option> flag followed by a positive integer,
- or by running <command>rndc trace</command>.
- The global debug level
- can be set to zero, and debugging mode turned off, by running <command>rndc
+ </para>
+ <para>
+ The <command>severity</command> clause works like <command>syslog</command>'s
+ "priorities", except that they can also be used if you are writing
+ straight to a file rather than using <command>syslog</command>.
+ Messages which are not at least of the severity level given will
+ not be selected for the channel; messages of higher severity
+ levels
+ will be accepted.
+ </para>
+ <para>
+ If you are using <command>syslog</command>, then the <command>syslog.conf</command> priorities
+ will also determine what eventually passes through. For example,
+ defining a channel facility and severity as <command>daemon</command> and <command>debug</command> but
+ only logging <command>daemon.warning</command> via <command>syslog.conf</command> will
+ cause messages of severity <command>info</command> and
+ <command>notice</command> to
+ be dropped. If the situation were reversed, with <command>named</command> writing
+ messages of only <command>warning</command> or higher,
+ then <command>syslogd</command> would
+ print all messages it received from the channel.
+ </para>
+
+ <para>
+ The <command>stderr</command> destination clause
+ directs the
+ channel to the server's standard error stream. This is intended
+ for
+ use when the server is running as a foreground process, for
+ example
+ when debugging a configuration.
+ </para>
+
+ <para>
+ The server can supply extensive debugging information when
+ it is in debugging mode. If the server's global debug level is
+ greater
+ than zero, then debugging mode will be active. The global debug
+ level is set either by starting the <command>named</command> server
+ with the <option>-d</option> flag followed by a positive integer,
+ or by running <command>rndc trace</command>.
+ The global debug level
+ can be set to zero, and debugging mode turned off, by running <command>rndc
notrace</command>. All debugging messages in the server have a debug
- level, and higher debug levels give more detailed output. Channels
- that specify a specific debug severity, for example:
- </para>
+ level, and higher debug levels give more detailed output. Channels
+ that specify a specific debug severity, for example:
+ </para>
<programlisting>channel specific_debug_level {
file "foo";
@@ -3849,42 +3864,42 @@ notrace</command>. All debugging messages in the server have a debug
};
</programlisting>
- <para>
- will get debugging output of level 3 or less any time the
- server is in debugging mode, regardless of the global debugging
- level. Channels with <command>dynamic</command>
- severity use the
- server's global debug level to determine what messages to print.
- </para>
- <para>
- If <command>print-time</command> has been turned on,
- then
- the date and time will be logged. <command>print-time</command> may
- be specified for a <command>syslog</command> channel,
- but is usually
- pointless since <command>syslog</command> also logs
- the date and
- time. If <command>print-category</command> is
- requested, then the
- category of the message will be logged as well. Finally, if <command>print-severity</command> is
- on, then the severity level of the message will be logged. The <command>print-</command> options may
- be used in any combination, and will always be printed in the
- following
- order: time, category, severity. Here is an example where all
- three <command>print-</command> options
- are on:
- </para>
-
- <para>
- <computeroutput>28-Feb-2000 15:05:32.863 general: notice: running</computeroutput>
- </para>
-
- <para>
- There are four predefined channels that are used for
- <command>named</command>'s default logging as follows.
- How they are
- used is described in <xref linkend="the_category_phrase"/>.
- </para>
+ <para>
+ will get debugging output of level 3 or less any time the
+ server is in debugging mode, regardless of the global debugging
+ level. Channels with <command>dynamic</command>
+ severity use the
+ server's global debug level to determine what messages to print.
+ </para>
+ <para>
+ If <command>print-time</command> has been turned on,
+ then
+ the date and time will be logged. <command>print-time</command> may
+ be specified for a <command>syslog</command> channel,
+ but is usually
+ pointless since <command>syslog</command> also logs
+ the date and
+ time. If <command>print-category</command> is
+ requested, then the
+ category of the message will be logged as well. Finally, if <command>print-severity</command> is
+ on, then the severity level of the message will be logged. The <command>print-</command> options may
+ be used in any combination, and will always be printed in the
+ following
+ order: time, category, severity. Here is an example where all
+ three <command>print-</command> options
+ are on:
+ </para>
+
+ <para>
+ <computeroutput>28-Feb-2000 15:05:32.863 general: notice: running</computeroutput>
+ </para>
+
+ <para>
+ There are four predefined channels that are used for
+ <command>named</command>'s default logging as follows.
+ How they are
+ used is described in <xref linkend="the_category_phrase"/>.
+ </para>
<programlisting>channel default_syslog {
// send to syslog's daemon facility
@@ -3914,55 +3929,55 @@ channel null {
};
</programlisting>
- <para>
- The <command>default_debug</command> channel has the
- special
- property that it only produces output when the server's debug
- level is
- nonzero. It normally writes to a file called <filename>named.run</filename>
- in the server's working directory.
- </para>
-
- <para>
- For security reasons, when the "<option>-u</option>"
- command line option is used, the <filename>named.run</filename> file
- is created only after <command>named</command> has
- changed to the
- new UID, and any debug output generated while <command>named</command> is
- starting up and still running as root is discarded. If you need
- to capture this output, you must run the server with the "<option>-g</option>"
- option and redirect standard error to a file.
- </para>
-
- <para>
- Once a channel is defined, it cannot be redefined. Thus you
- cannot alter the built-in channels directly, but you can modify
- the default logging by pointing categories at channels you have
- defined.
- </para>
- </sect3>
-
- <sect3 id="the_category_phrase">
- <title>The <command>category</command> Phrase</title>
-
- <para>
- There are many categories, so you can send the logs you want
- to see wherever you want, without seeing logs you don't want. If
- you don't specify a list of channels for a category, then log
- messages
- in that category will be sent to the <command>default</command> category
- instead. If you don't specify a default category, the following
- "default default" is used:
- </para>
+ <para>
+ The <command>default_debug</command> channel has the
+ special
+ property that it only produces output when the server's debug
+ level is
+ nonzero. It normally writes to a file called <filename>named.run</filename>
+ in the server's working directory.
+ </para>
+
+ <para>
+ For security reasons, when the "<option>-u</option>"
+ command line option is used, the <filename>named.run</filename> file
+ is created only after <command>named</command> has
+ changed to the
+ new UID, and any debug output generated while <command>named</command> is
+ starting up and still running as root is discarded. If you need
+ to capture this output, you must run the server with the "<option>-g</option>"
+ option and redirect standard error to a file.
+ </para>
+
+ <para>
+ Once a channel is defined, it cannot be redefined. Thus you
+ cannot alter the built-in channels directly, but you can modify
+ the default logging by pointing categories at channels you have
+ defined.
+ </para>
+ </sect3>
+
+ <sect3 id="the_category_phrase">
+ <title>The <command>category</command> Phrase</title>
+
+ <para>
+ There are many categories, so you can send the logs you want
+ to see wherever you want, without seeing logs you don't want. If
+ you don't specify a list of channels for a category, then log
+ messages
+ in that category will be sent to the <command>default</command> category
+ instead. If you don't specify a default category, the following
+ "default default" is used:
+ </para>
<programlisting>category default { default_syslog; default_debug; };
</programlisting>
- <para>
- As an example, let's say you want to log security events to
- a file, but you also want keep the default logging behavior. You'd
- specify the following:
- </para>
+ <para>
+ As an example, let's say you want to log security events to
+ a file, but you also want keep the default logging behavior. You'd
+ specify the following:
+ </para>
<programlisting>channel my_security_channel {
file "my_security_file";
@@ -3974,190 +3989,190 @@ category security {
default_debug;
};</programlisting>
- <para>
- To discard all messages in a category, specify the <command>null</command> channel:
- </para>
+ <para>
+ To discard all messages in a category, specify the <command>null</command> channel:
+ </para>
<programlisting>category xfer-out { null; };
category notify { null; };
</programlisting>
- <para>
- Following are the available categories and brief descriptions
- of the types of log information they contain. More
- categories may be added in future <acronym>BIND</acronym> releases.
- </para>
- <informaltable colsep="0" rowsep="0">
- <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="4Level-table">
- <colspec colname="1" colnum="1" colsep="0" colwidth="1.150in"/>
- <colspec colname="2" colnum="2" colsep="0" colwidth="3.350in"/>
- <tbody>
- <row rowsep="0">
- <entry colname="1">
- <para><command>default</command></para>
- </entry>
- <entry colname="2">
- <para>
- The default category defines the logging
- options for those categories where no specific
- configuration has been
- defined.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>general</command></para>
- </entry>
- <entry colname="2">
- <para>
- The catch-all. Many things still aren't
- classified into categories, and they all end up here.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>database</command></para>
- </entry>
- <entry colname="2">
- <para>
- Messages relating to the databases used
- internally by the name server to store zone and cache
- data.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>security</command></para>
- </entry>
- <entry colname="2">
- <para>
- Approval and denial of requests.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>config</command></para>
- </entry>
- <entry colname="2">
- <para>
- Configuration file parsing and processing.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>resolver</command></para>
- </entry>
- <entry colname="2">
- <para>
- DNS resolution, such as the recursive
- lookups performed on behalf of clients by a caching name
- server.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>xfer-in</command></para>
- </entry>
- <entry colname="2">
- <para>
- Zone transfers the server is receiving.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>xfer-out</command></para>
- </entry>
- <entry colname="2">
- <para>
- Zone transfers the server is sending.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>notify</command></para>
- </entry>
- <entry colname="2">
- <para>
- The NOTIFY protocol.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>client</command></para>
- </entry>
- <entry colname="2">
- <para>
- Processing of client requests.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>unmatched</command></para>
- </entry>
- <entry colname="2">
- <para>
- Messages that <command>named</command> was unable to determine the
- class of or for which there was no matching <command>view</command>.
- A one line summary is also logged to the <command>client</command> category.
- This category is best sent to a file or stderr, by
- default it is sent to
- the <command>null</command> channel.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>network</command></para>
- </entry>
- <entry colname="2">
- <para>
- Network operations.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>update</command></para>
- </entry>
- <entry colname="2">
- <para>
- Dynamic updates.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>update-security</command></para>
- </entry>
- <entry colname="2">
- <para>
- Approval and denial of update requests.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>queries</command></para>
- </entry>
- <entry colname="2">
- <para>
- Specify where queries should be logged to.
- </para>
- <para>
- At startup, specifying the category <command>queries</command> will also
- enable query logging unless <command>querylog</command> option has been
- specified.
- </para>
+ <para>
+ Following are the available categories and brief descriptions
+ of the types of log information they contain. More
+ categories may be added in future <acronym>BIND</acronym> releases.
+ </para>
+ <informaltable colsep="0" rowsep="0">
+ <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="4Level-table">
+ <colspec colname="1" colnum="1" colsep="0" colwidth="1.150in"/>
+ <colspec colname="2" colnum="2" colsep="0" colwidth="3.350in"/>
+ <tbody>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>default</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ The default category defines the logging
+ options for those categories where no specific
+ configuration has been
+ defined.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>general</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ The catch-all. Many things still aren't
+ classified into categories, and they all end up here.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>database</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Messages relating to the databases used
+ internally by the name server to store zone and cache
+ data.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>security</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Approval and denial of requests.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>config</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Configuration file parsing and processing.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>resolver</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ DNS resolution, such as the recursive
+ lookups performed on behalf of clients by a caching name
+ server.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>xfer-in</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Zone transfers the server is receiving.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>xfer-out</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Zone transfers the server is sending.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>notify</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ The NOTIFY protocol.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>client</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Processing of client requests.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>unmatched</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Messages that <command>named</command> was unable to determine the
+ class of or for which there was no matching <command>view</command>.
+ A one line summary is also logged to the <command>client</command> category.
+ This category is best sent to a file or stderr, by
+ default it is sent to
+ the <command>null</command> channel.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>network</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Network operations.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>update</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Dynamic updates.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>update-security</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Approval and denial of update requests.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>queries</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Specify where queries should be logged to.
+ </para>
+ <para>
+ At startup, specifying the category <command>queries</command> will also
+ enable query logging unless <command>querylog</command> option has been
+ specified.
+ </para>
<para>
The query log entry reports the client's IP
@@ -4172,82 +4187,82 @@ category notify { null; };
reported.
</para>
- <para>
- <computeroutput>client 127.0.0.1#62536 (www.example.com): query: www.example.com IN AAAA +SE</computeroutput>
- </para>
- <para>
- <computeroutput>client ::1#62537 (www.example.net): query: www.example.net IN AAAA -SE</computeroutput>
- </para>
<para>
- (The first part of this log message, showing the
- client address/port number and query name, is
- repeated in all subsequent log messages related
- to the same query.)
+ <computeroutput>client 127.0.0.1#62536 (www.example.com): query: www.example.com IN AAAA +SE</computeroutput>
</para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>query-errors</command></para>
- </entry>
- <entry colname="2">
- <para>
- Information about queries that resulted in some
- failure.
+ <para>
+ <computeroutput>client ::1#62537 (www.example.net): query: www.example.net IN AAAA -SE</computeroutput>
+ </para>
+ <para>
+ (The first part of this log message, showing the
+ client address/port number and query name, is
+ repeated in all subsequent log messages related
+ to the same query.)
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>query-errors</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Information about queries that resulted in some
+ failure.
</para>
</entry>
</row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>dispatch</command></para>
- </entry>
- <entry colname="2">
- <para>
- Dispatching of incoming packets to the
- server modules where they are to be processed.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>dnssec</command></para>
- </entry>
- <entry colname="2">
- <para>
- DNSSEC and TSIG protocol processing.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>lame-servers</command></para>
- </entry>
- <entry colname="2">
- <para>
- Lame servers. These are misconfigurations
- in remote servers, discovered by BIND 9 when trying to
- query those servers during resolution.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>delegation-only</command></para>
- </entry>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>dispatch</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Dispatching of incoming packets to the
+ server modules where they are to be processed.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>dnssec</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ DNSSEC and TSIG protocol processing.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>lame-servers</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Lame servers. These are misconfigurations
+ in remote servers, discovered by BIND 9 when trying to
+ query those servers during resolution.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>delegation-only</command></para>
+ </entry>
<entry colname="2">
<para>
Delegation only. Logs queries that have been
forced to NXDOMAIN as the result of a
delegation-only zone or a
- <command>delegation-only</command> in a hint
- or stub zone declaration.
+ <command>delegation-only</command> in a
+ forward, hint or stub zone declaration.
</para>
</entry>
</row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>edns-disabled</command></para>
- </entry>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>edns-disabled</command></para>
+ </entry>
<entry colname="2">
<para>
Log queries that have been forced to use plain
@@ -4278,10 +4293,10 @@ category notify { null; };
</para>
</entry>
</row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>RPZ</command></para>
- </entry>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>RPZ</command></para>
+ </entry>
<entry colname="2">
<para>
Information about errors in response policy zone files,
@@ -4291,16 +4306,16 @@ category notify { null; };
</para>
</entry>
</row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>rate-limit</command></para>
- </entry>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>rate-limit</command></para>
+ </entry>
<entry colname="2">
<para>
- (Only available when <acronym>BIND</acronym> 9 is
- configured with the <userinput>--enable-rrl</userinput>
- option at compile time.)
- </para>
+ (Only available when <acronym>BIND</acronym> 9 is
+ configured with the <userinput>--enable-rrl</userinput>
+ option at compile time.)
+ </para>
<para>
The start, periodic, and final notices of the
rate limiting of a stream of responses are logged at
@@ -4360,12 +4375,12 @@ category notify { null; };
</para>
<para>
<!-- NOTE: newlines and some spaces added so this would fit on page -->
- <programlisting>
+ <programlisting>
fetch completed at resolver.c:2970 for www.example.com/A
in 30.000183: timed out/success [domain:example.com,
referral:2,restart:7,qrysent:8,timeout:5,lame:0,neterr:0,
badresp:1,adberr:0,findfail:0,valfail:0]
- </programlisting>
+ </programlisting>
</para>
<para>
The first part before the colon shows that a recursive
@@ -4395,30 +4410,30 @@ badresp:1,adberr:0,findfail:0,valfail:0]
following table.
</para>
- <informaltable colsep="0" rowsep="0">
- <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="4Level-table">
- <colspec colname="1" colnum="1" colsep="0" colwidth="1.150in"/>
- <colspec colname="2" colnum="2" colsep="0" colwidth="3.350in"/>
- <tbody>
- <row rowsep="0">
- <entry colname="1">
- <para><varname>referral</varname></para>
- </entry>
- <entry colname="2">
- <para>
+ <informaltable colsep="0" rowsep="0">
+ <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="4Level-table">
+ <colspec colname="1" colnum="1" colsep="0" colwidth="1.150in"/>
+ <colspec colname="2" colnum="2" colsep="0" colwidth="3.350in"/>
+ <tbody>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><varname>referral</varname></para>
+ </entry>
+ <entry colname="2">
+ <para>
The number of referrals the resolver received
throughout the resolution process.
In the above example this is 2, which are most
likely com and example.com.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><varname>restart</varname></para>
- </entry>
- <entry colname="2">
- <para>
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><varname>restart</varname></para>
+ </entry>
+ <entry colname="2">
+ <para>
The number of cycles that the resolver tried
remote servers at the <varname>domain</varname>
zone.
@@ -4426,37 +4441,37 @@ badresp:1,adberr:0,findfail:0,valfail:0]
(possibly resending it, depending on the response)
to each known name server of
the <varname>domain</varname> zone.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><varname>qrysent</varname></para>
- </entry>
- <entry colname="2">
- <para>
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><varname>qrysent</varname></para>
+ </entry>
+ <entry colname="2">
+ <para>
The number of queries the resolver sent at the
<varname>domain</varname> zone.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><varname>timeout</varname></para>
- </entry>
- <entry colname="2">
- <para>
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><varname>timeout</varname></para>
+ </entry>
+ <entry colname="2">
+ <para>
The number of timeouts since the resolver
received the last response.
</para>
</entry>
</row>
- <row rowsep="0">
- <entry colname="1">
- <para><varname>lame</varname></para>
- </entry>
- <entry colname="2">
- <para>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><varname>lame</varname></para>
+ </entry>
+ <entry colname="2">
+ <para>
The number of lame servers the resolver detected
at the <varname>domain</varname> zone.
A server is detected to be lame either by an
@@ -4466,12 +4481,12 @@ badresp:1,adberr:0,findfail:0,valfail:0]
</para>
</entry>
</row>
- <row rowsep="0">
- <entry colname="1">
- <para><varname>neterr</varname></para>
- </entry>
- <entry colname="2">
- <para>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><varname>neterr</varname></para>
+ </entry>
+ <entry colname="2">
+ <para>
The number of erroneous results that the
resolver encountered in sending queries
at the <varname>domain</varname> zone.
@@ -4481,24 +4496,24 @@ badresp:1,adberr:0,findfail:0,valfail:0]
</para>
</entry>
</row>
- <row rowsep="0">
- <entry colname="1">
- <para><varname>badresp</varname></para>
- </entry>
- <entry colname="2">
- <para>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><varname>badresp</varname></para>
+ </entry>
+ <entry colname="2">
+ <para>
The number of unexpected responses (other than
<varname>lame</varname>) to queries sent by the
resolver at the <varname>domain</varname> zone.
</para>
</entry>
</row>
- <row rowsep="0">
- <entry colname="1">
- <para><varname>adberr</varname></para>
- </entry>
- <entry colname="2">
- <para>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><varname>adberr</varname></para>
+ </entry>
+ <entry colname="2">
+ <para>
Failures in finding remote server addresses
of the <varname>domain</varname> zone in the ADB.
One common case of this is that the remote
@@ -4506,24 +4521,24 @@ badresp:1,adberr:0,findfail:0,valfail:0]
</para>
</entry>
</row>
- <row rowsep="0">
- <entry colname="1">
- <para><varname>findfail</varname></para>
- </entry>
- <entry colname="2">
- <para>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><varname>findfail</varname></para>
+ </entry>
+ <entry colname="2">
+ <para>
Failures of resolving remote server addresses.
This is a total number of failures throughout
the resolution process.
</para>
</entry>
</row>
- <row rowsep="0">
- <entry colname="1">
- <para><varname>valfail</varname></para>
- </entry>
- <entry colname="2">
- <para>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><varname>valfail</varname></para>
+ </entry>
+ <entry colname="2">
+ <para>
Failures of DNSSEC validation.
Validation failures are counted throughout
the resolution process (not limited to
@@ -4555,16 +4570,16 @@ badresp:1,adberr:0,findfail:0,valfail:0]
</sect2>
<sect2>
- <title><command>lwres</command> Statement Grammar</title>
+ <title><command>lwres</command> Statement Grammar</title>
- <para>
- This is the grammar of the <command>lwres</command>
- statement in the <filename>named.conf</filename> file:
- </para>
+ <para>
+ This is the grammar of the <command>lwres</command>
+ statement in the <filename>named.conf</filename> file:
+ </para>
<programlisting><command>lwres</command> {
<optional> listen-on { <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> ;
- <optional> <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> ; ... </optional> }; </optional>
+ <optional> <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> ; ... </optional> }; </optional>
<optional> view <replaceable>view_name</replaceable>; </optional>
<optional> search { <replaceable>domain_name</replaceable> ; <optional> <replaceable>domain_name</replaceable> ; ... </optional> }; </optional>
<optional> ndots <replaceable>number</replaceable>; </optional>
@@ -4573,62 +4588,62 @@ badresp:1,adberr:0,findfail:0,valfail:0]
</sect2>
<sect2>
- <title><command>lwres</command> Statement Definition and Usage</title>
-
- <para>
- The <command>lwres</command> statement configures the
- name
- server to also act as a lightweight resolver server. (See
- <xref linkend="lwresd"/>.) There may be multiple
- <command>lwres</command> statements configuring
- lightweight resolver servers with different properties.
- </para>
-
- <para>
- The <command>listen-on</command> statement specifies a
- list of
- addresses (and ports) that this instance of a lightweight resolver
- daemon
- should accept requests on. If no port is specified, port 921 is
- used.
- If this statement is omitted, requests will be accepted on
- 127.0.0.1,
- port 921.
- </para>
-
- <para>
- The <command>view</command> statement binds this
- instance of a
- lightweight resolver daemon to a view in the DNS namespace, so that
- the
- response will be constructed in the same manner as a normal DNS
- query
- matching this view. If this statement is omitted, the default view
- is
- used, and if there is no default view, an error is triggered.
- </para>
-
- <para>
- The <command>search</command> statement is equivalent to
- the
- <command>search</command> statement in
- <filename>/etc/resolv.conf</filename>. It provides a
- list of domains
- which are appended to relative names in queries.
- </para>
-
- <para>
- The <command>ndots</command> statement is equivalent to
- the
- <command>ndots</command> statement in
- <filename>/etc/resolv.conf</filename>. It indicates the
- minimum
- number of dots in a relative domain name that should result in an
- exact match lookup before search path elements are appended.
- </para>
+ <title><command>lwres</command> Statement Definition and Usage</title>
+
+ <para>
+ The <command>lwres</command> statement configures the
+ name
+ server to also act as a lightweight resolver server. (See
+ <xref linkend="lwresd"/>.) There may be multiple
+ <command>lwres</command> statements configuring
+ lightweight resolver servers with different properties.
+ </para>
+
+ <para>
+ The <command>listen-on</command> statement specifies a
+ list of
+ IPv4 addresses (and ports) that this instance of a lightweight
+ resolver daemon
+ should accept requests on. If no port is specified, port 921 is
+ used.
+ If this statement is omitted, requests will be accepted on
+ 127.0.0.1,
+ port 921.
+ </para>
+
+ <para>
+ The <command>view</command> statement binds this
+ instance of a
+ lightweight resolver daemon to a view in the DNS namespace, so that
+ the
+ response will be constructed in the same manner as a normal DNS
+ query
+ matching this view. If this statement is omitted, the default view
+ is
+ used, and if there is no default view, an error is triggered.
+ </para>
+
+ <para>
+ The <command>search</command> statement is equivalent to
+ the
+ <command>search</command> statement in
+ <filename>/etc/resolv.conf</filename>. It provides a
+ list of domains
+ which are appended to relative names in queries.
+ </para>
+
+ <para>
+ The <command>ndots</command> statement is equivalent to
+ the
+ <command>ndots</command> statement in
+ <filename>/etc/resolv.conf</filename>. It indicates the
+ minimum
+ number of dots in a relative domain name that should result in an
+ exact match lookup before search path elements are appended.
+ </para>
</sect2>
<sect2>
- <title><command>masters</command> Statement Grammar</title>
+ <title><command>masters</command> Statement Grammar</title>
<programlisting>
<command>masters</command> <replaceable>name</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> { ( <replaceable>masters_list</replaceable> |
@@ -4638,22 +4653,22 @@ badresp:1,adberr:0,findfail:0,valfail:0]
</sect2>
<sect2>
- <title><command>masters</command> Statement Definition and
- Usage</title>
- <para><command>masters</command>
+ <title><command>masters</command> Statement Definition and
+ Usage</title>
+ <para><command>masters</command>
lists allow for a common set of masters to be easily used by
- multiple stub and slave zones in their <command>masters</command>
- or <command>also-notify</command> lists.
- </para>
+ multiple stub and slave zones in their <command>masters</command>
+ or <command>also-notify</command> lists.
+ </para>
</sect2>
<sect2>
- <title><command>options</command> Statement Grammar</title>
+ <title><command>options</command> Statement Grammar</title>
- <para>
- This is the grammar of the <command>options</command>
- statement in the <filename>named.conf</filename> file:
- </para>
+ <para>
+ This is the grammar of the <command>options</command>
+ statement in the <filename>named.conf</filename> file:
+ </para>
<programlisting><command>options</command> {
<optional> attach-cache <replaceable>cache_name</replaceable>; </optional>
@@ -4703,17 +4718,17 @@ badresp:1,adberr:0,findfail:0,valfail:0]
<optional> dnssec-validation (<replaceable>yes_or_no</replaceable> | <constant>auto</constant>); </optional>
<optional> dnssec-lookaside ( <replaceable>auto</replaceable> |
<replaceable>no</replaceable> |
- <replaceable>domain</replaceable> trust-anchor <replaceable>domain</replaceable> ); </optional>
+ <replaceable>domain</replaceable> trust-anchor <replaceable>domain</replaceable> ); </optional>
<optional> dnssec-must-be-secure <replaceable>domain yes_or_no</replaceable>; </optional>
<optional> dnssec-accept-expired <replaceable>yes_or_no</replaceable>; </optional>
<optional> forward ( <replaceable>only</replaceable> | <replaceable>first</replaceable> ); </optional>
<optional> forwarders { <optional> <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> ; ... </optional> }; </optional>
<optional> dual-stack-servers <optional>port <replaceable>ip_port</replaceable></optional> {
- ( <replaceable>domain_name</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> |
- <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> ) ;
- ... }; </optional>
+ ( <replaceable>domain_name</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> |
+ <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> ) ;
+ ... }; </optional>
<optional> check-names ( <replaceable>master</replaceable> | <replaceable>slave</replaceable> | <replaceable>response</replaceable> )
- ( <replaceable>warn</replaceable> | <replaceable>fail</replaceable> | <replaceable>ignore</replaceable> ); </optional>
+ ( <replaceable>warn</replaceable> | <replaceable>fail</replaceable> | <replaceable>ignore</replaceable> ); </optional>
<optional> check-dup-records ( <replaceable>warn</replaceable> | <replaceable>fail</replaceable> | <replaceable>ignore</replaceable> ); </optional>
<optional> check-mx ( <replaceable>warn</replaceable> | <replaceable>fail</replaceable> | <replaceable>ignore</replaceable> ); </optional>
<optional> check-wildcard <replaceable>yes_or_no</replaceable>; </optional>
@@ -4721,7 +4736,7 @@ badresp:1,adberr:0,findfail:0,valfail:0]
<optional> check-mx-cname ( <replaceable>warn</replaceable> | <replaceable>fail</replaceable> | <replaceable>ignore</replaceable> ); </optional>
<optional> check-srv-cname ( <replaceable>warn</replaceable> | <replaceable>fail</replaceable> | <replaceable>ignore</replaceable> ); </optional>
<optional> check-sibling <replaceable>yes_or_no</replaceable>; </optional>
- <optional> check-spf ( <replaceable>warn</replaceable> | <replaceable>fail</replaceable> | <replaceable>ignore</replaceable> ); </optional>
+ <optional> check-spf ( <replaceable>warn</replaceable> | <replaceable>ignore</replaceable> ); </optional>
<optional> allow-new-zones { <replaceable>yes_or_no</replaceable> }; </optional>
<optional> allow-notify { <replaceable>address_match_list</replaceable> }; </optional>
<optional> allow-query { <replaceable>address_match_list</replaceable> }; </optional>
@@ -4741,6 +4756,7 @@ badresp:1,adberr:0,findfail:0,valfail:0]
<optional> try-tcp-refresh <replaceable>yes_or_no</replaceable>; </optional>
<optional> allow-v6-synthesis { <replaceable>address_match_list</replaceable> }; </optional>
<optional> blackhole { <replaceable>address_match_list</replaceable> }; </optional>
+ <optional> no-case-compress { <replaceable>address_match_list</replaceable> }; </optional>
<optional> use-v4-udp-ports { <replaceable>port_list</replaceable> }; </optional>
<optional> avoid-v4-udp-ports { <replaceable>port_list</replaceable> }; </optional>
<optional> use-v6-udp-ports { <replaceable>port_list</replaceable> }; </optional>
@@ -4748,13 +4764,13 @@ badresp:1,adberr:0,findfail:0,valfail:0]
<optional> listen-on <optional> port <replaceable>ip_port</replaceable> </optional> { <replaceable>address_match_list</replaceable> }; </optional>
<optional> listen-on-v6 <optional> port <replaceable>ip_port</replaceable> </optional> { <replaceable>address_match_list</replaceable> }; </optional>
<optional> query-source ( ( <replaceable>ip4_addr</replaceable> | <replaceable>*</replaceable> )
- <optional> port ( <replaceable>ip_port</replaceable> | <replaceable>*</replaceable> ) </optional> |
- <optional> address ( <replaceable>ip4_addr</replaceable> | <replaceable>*</replaceable> ) </optional>
- <optional> port ( <replaceable>ip_port</replaceable> | <replaceable>*</replaceable> ) </optional> ) ; </optional>
+ <optional> port ( <replaceable>ip_port</replaceable> | <replaceable>*</replaceable> ) </optional> |
+ <optional> address ( <replaceable>ip4_addr</replaceable> | <replaceable>*</replaceable> ) </optional>
+ <optional> port ( <replaceable>ip_port</replaceable> | <replaceable>*</replaceable> ) </optional> ) ; </optional>
<optional> query-source-v6 ( ( <replaceable>ip6_addr</replaceable> | <replaceable>*</replaceable> )
- <optional> port ( <replaceable>ip_port</replaceable> | <replaceable>*</replaceable> ) </optional> |
- <optional> address ( <replaceable>ip6_addr</replaceable> | <replaceable>*</replaceable> ) </optional>
- <optional> port ( <replaceable>ip_port</replaceable> | <replaceable>*</replaceable> ) </optional> ) ; </optional>
+ <optional> port ( <replaceable>ip_port</replaceable> | <replaceable>*</replaceable> ) </optional> |
+ <optional> address ( <replaceable>ip6_addr</replaceable> | <replaceable>*</replaceable> ) </optional>
+ <optional> port ( <replaceable>ip_port</replaceable> | <replaceable>*</replaceable> ) </optional> ) ; </optional>
<optional> use-queryport-pool <replaceable>yes_or_no</replaceable>; </optional>
<optional> queryport-pool-ports <replaceable>number</replaceable>; </optional>
<optional> queryport-pool-updateinterval <replaceable>number</replaceable>; </optional>
@@ -4776,15 +4792,15 @@ badresp:1,adberr:0,findfail:0,valfail:0]
<optional> transfer-source-v6 (<replaceable>ip6_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional>
<optional> alt-transfer-source (<replaceable>ip4_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional>
<optional> alt-transfer-source-v6 (<replaceable>ip6_addr</replaceable> | <constant>*</constant>)
- <optional>port <replaceable>ip_port</replaceable></optional> ; </optional>
+ <optional>port <replaceable>ip_port</replaceable></optional> ; </optional>
<optional> use-alt-transfer-source <replaceable>yes_or_no</replaceable>; </optional>
<optional> notify-delay <replaceable>seconds</replaceable> ; </optional>
<optional> notify-source (<replaceable>ip4_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional>
<optional> notify-source-v6 (<replaceable>ip6_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional>
<optional> notify-to-soa <replaceable>yes_or_no</replaceable> ; </optional>
<optional> also-notify { <replaceable>ip_addr</replaceable>
- <optional>port <replaceable>ip_port</replaceable></optional> <optional>key <replaceable>keyname</replaceable></optional> ;
- <optional> <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> <optional>key <replaceable>keyname</replaceable></optional> ; ... </optional> }; </optional>
+ <optional>port <replaceable>ip_port</replaceable></optional> <optional>key <replaceable>keyname</replaceable></optional> ;
+ <optional> <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> <optional>key <replaceable>keyname</replaceable></optional> ; ... </optional> }; </optional>
<optional> max-ixfr-log-size <replaceable>number</replaceable>; </optional>
<optional> max-journal-size <replaceable>size_spec</replaceable>; </optional>
<optional> coresize <replaceable>size_spec</replaceable> ; </optional>
@@ -4825,7 +4841,7 @@ badresp:1,adberr:0,findfail:0,valfail:0]
<optional> dns64 <replaceable>ipv6-prefix</replaceable> {
<optional> clients { <replaceable>address_match_list</replaceable> }; </optional>
<optional> mapped { <replaceable>address_match_list</replaceable> }; </optional>
- <optional> exclude { <replaceable>address_match_list</replaceable> }; </optional>
+ <optional> exclude { <replaceable>address_match_list</replaceable> }; </optional>
<optional> suffix IPv6-address; </optional>
<optional> recursive-only <replaceable>yes_or_no</replaceable>; </optional>
<optional> break-dnssec <replaceable>yes_or_no</replaceable>; </optional>
@@ -4839,12 +4855,14 @@ badresp:1,adberr:0,findfail:0,valfail:0]
<optional> root-delegation-only <optional> exclude { <replaceable>namelist</replaceable> } </optional> ; </optional>
<optional> querylog <replaceable>yes_or_no</replaceable> ; </optional>
<optional> disable-algorithms <replaceable>domain</replaceable> { <replaceable>algorithm</replaceable>;
- <optional> <replaceable>algorithm</replaceable>; </optional> }; </optional>
+ <optional> <replaceable>algorithm</replaceable>; </optional> }; </optional>
<optional> acache-enable <replaceable>yes_or_no</replaceable> ; </optional>
<optional> acache-cleaning-interval <replaceable>number</replaceable>; </optional>
<optional> max-acache-size <replaceable>size_spec</replaceable> ; </optional>
<optional> clients-per-query <replaceable>number</replaceable> ; </optional>
<optional> max-clients-per-query <replaceable>number</replaceable> ; </optional>
+ <optional> max-recursion-depth <replaceable>number</replaceable> ; </optional>
+ <optional> max-recursion-queries <replaceable>number</replaceable> ; </optional>
<optional> masterfile-format (<constant>text</constant>|<constant>raw</constant>) ; </optional>
<optional> empty-server <replaceable>name</replaceable> ; </optional>
<optional> empty-contact <replaceable>name</replaceable> ; </optional>
@@ -4883,25 +4901,25 @@ badresp:1,adberr:0,findfail:0,valfail:0]
</sect2>
<sect2 id="options">
- <title><command>options</command> Statement Definition and
- Usage</title>
-
- <para>
- The <command>options</command> statement sets up global
- options
- to be used by <acronym>BIND</acronym>. This statement
- may appear only
- once in a configuration file. If there is no <command>options</command>
- statement, an options block with each option set to its default will
- be used.
- </para>
-
- <variablelist>
-
- <varlistentry>
- <term><command>attach-cache</command></term>
- <listitem>
- <para>
+ <title><command>options</command> Statement Definition and
+ Usage</title>
+
+ <para>
+ The <command>options</command> statement sets up global
+ options
+ to be used by <acronym>BIND</acronym>. This statement
+ may appear only
+ once in a configuration file. If there is no <command>options</command>
+ statement, an options block with each option set to its default will
+ be used.
+ </para>
+
+ <variablelist>
+
+ <varlistentry>
+ <term><command>attach-cache</command></term>
+ <listitem>
+ <para>
Allows multiple views to share a single cache
database.
Each view has its own cache database by default, but
@@ -4909,14 +4927,14 @@ badresp:1,adberr:0,findfail:0,valfail:0]
for name resolution and caching, those views can
share a single cache to save memory and possibly
improve resolution efficiency by using this option.
- </para>
+ </para>
- <para>
- The <command>attach-cache</command> option
- may also be specified in <command>view</command>
- statements, in which case it overrides the
- global <command>attach-cache</command> option.
- </para>
+ <para>
+ The <command>attach-cache</command> option
+ may also be specified in <command>view</command>
+ statements, in which case it overrides the
+ global <command>attach-cache</command> option.
+ </para>
<para>
The <replaceable>cache_name</replaceable> specifies
@@ -4990,68 +5008,68 @@ badresp:1,adberr:0,findfail:0,valfail:0]
configuration differences in different views do
not cause disruption with a shared cache.
</para>
- </listitem>
-
- </varlistentry>
-
- <varlistentry>
- <term><command>directory</command></term>
- <listitem>
- <para>
- The working directory of the server.
- Any non-absolute pathnames in the configuration file will be
- taken
- as relative to this directory. The default location for most
- server
- output files (e.g. <filename>named.run</filename>)
- is this directory.
- If a directory is not specified, the working directory
- defaults to `<filename>.</filename>', the directory from
- which the server
- was started. The directory specified should be an absolute
- path.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>key-directory</command></term>
- <listitem>
- <para>
- When performing dynamic update of secure zones, the
- directory where the public and private DNSSEC key files
- should be found, if different than the current working
- directory. (Note that this option has no effect on the
- paths for files containing non-DNSSEC keys such as
- <filename>bind.keys</filename>,
- <filename>rndc.key</filename> or
- <filename>session.key</filename>.)
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>managed-keys-directory</command></term>
- <listitem>
- <para>
- Specifies the directory in which to store the files that
- track managed DNSSEC keys. By default, this is the working
- directory.
- </para>
- <para>
- If <command>named</command> is not configured to use views,
- then managed keys for the server will be tracked in a single
- file called <filename>managed-keys.bind</filename>.
- Otherwise, managed keys will be tracked in separate files,
- one file per view; each file name will be the SHA256 hash
- of the view name, followed by the extension
- <filename>.mkeys</filename>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>named-xfer</command></term>
+ </listitem>
+
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>directory</command></term>
+ <listitem>
+ <para>
+ The working directory of the server.
+ Any non-absolute pathnames in the configuration file will be
+ taken
+ as relative to this directory. The default location for most
+ server
+ output files (e.g. <filename>named.run</filename>)
+ is this directory.
+ If a directory is not specified, the working directory
+ defaults to `<filename>.</filename>', the directory from
+ which the server
+ was started. The directory specified should be an absolute
+ path.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>key-directory</command></term>
+ <listitem>
+ <para>
+ When performing dynamic update of secure zones, the
+ directory where the public and private DNSSEC key files
+ should be found, if different than the current working
+ directory. (Note that this option has no effect on the
+ paths for files containing non-DNSSEC keys such as
+ <filename>bind.keys</filename>,
+ <filename>rndc.key</filename> or
+ <filename>session.key</filename>.)
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>managed-keys-directory</command></term>
+ <listitem>
+ <para>
+ Specifies the directory in which to store the files that
+ track managed DNSSEC keys. By default, this is the working
+ directory.
+ </para>
+ <para>
+ If <command>named</command> is not configured to use views,
+ then managed keys for the server will be tracked in a single
+ file called <filename>managed-keys.bind</filename>.
+ Otherwise, managed keys will be tracked in separate files,
+ one file per view; each file name will be the SHA256 hash
+ of the view name, followed by the extension
+ <filename>.mkeys</filename>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>named-xfer</command></term>
<listitem>
<para>
<emphasis>This option is obsolete.</emphasis> It
@@ -5096,8 +5114,8 @@ badresp:1,adberr:0,findfail:0,valfail:0]
</listitem>
</varlistentry>
- <varlistentry>
- <term><command>tkey-domain</command></term>
+ <varlistentry>
+ <term><command>tkey-domain</command></term>
<listitem>
<para>
The domain appended to the names of all shared keys
@@ -5119,224 +5137,224 @@ badresp:1,adberr:0,findfail:0,valfail:0]
</listitem>
</varlistentry>
- <varlistentry>
- <term><command>tkey-dhkey</command></term>
- <listitem>
- <para>
- The Diffie-Hellman key used by the server
- to generate shared keys with clients using the Diffie-Hellman
- mode
- of <command>TKEY</command>. The server must be
- able to load the
- public and private keys from files in the working directory.
- In
- most cases, the keyname should be the server's host name.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>cache-file</command></term>
- <listitem>
- <para>
+ <varlistentry>
+ <term><command>tkey-dhkey</command></term>
+ <listitem>
+ <para>
+ The Diffie-Hellman key used by the server
+ to generate shared keys with clients using the Diffie-Hellman
+ mode
+ of <command>TKEY</command>. The server must be
+ able to load the
+ public and private keys from files in the working directory.
+ In
+ most cases, the keyname should be the server's host name.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>cache-file</command></term>
+ <listitem>
+ <para>
This is for testing only. Do not use.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>dump-file</command></term>
- <listitem>
- <para>
- The pathname of the file the server dumps
- the database to when instructed to do so with
- <command>rndc dumpdb</command>.
- If not specified, the default is <filename>named_dump.db</filename>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>memstatistics-file</command></term>
- <listitem>
- <para>
- The pathname of the file the server writes memory
- usage statistics to on exit. If not specified,
- the default is <filename>named.memstats</filename>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>pid-file</command></term>
- <listitem>
- <para>
- The pathname of the file the server writes its process ID
- in. If not specified, the default is
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>dump-file</command></term>
+ <listitem>
+ <para>
+ The pathname of the file the server dumps
+ the database to when instructed to do so with
+ <command>rndc dumpdb</command>.
+ If not specified, the default is <filename>named_dump.db</filename>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>memstatistics-file</command></term>
+ <listitem>
+ <para>
+ The pathname of the file the server writes memory
+ usage statistics to on exit. If not specified,
+ the default is <filename>named.memstats</filename>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>pid-file</command></term>
+ <listitem>
+ <para>
+ The pathname of the file the server writes its process ID
+ in. If not specified, the default is
<filename>/var/run/named/named.pid</filename>.
- The PID file is used by programs that want to send signals to
- the running
- name server. Specifying <command>pid-file none</command> disables the
- use of a PID file &mdash; no file will be written and any
- existing one will be removed. Note that <command>none</command>
- is a keyword, not a filename, and therefore is not enclosed
- in
- double quotes.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>recursing-file</command></term>
- <listitem>
- <para>
- The pathname of the file the server dumps
- the queries that are currently recursing when instructed
- to do so with <command>rndc recursing</command>.
- If not specified, the default is <filename>named.recursing</filename>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>statistics-file</command></term>
- <listitem>
- <para>
- The pathname of the file the server appends statistics
- to when instructed to do so using <command>rndc stats</command>.
- If not specified, the default is <filename>named.stats</filename> in the
- server's current directory. The format of the file is
- described
- in <xref linkend="statsfile"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>bindkeys-file</command></term>
- <listitem>
- <para>
- The pathname of a file to override the built-in trusted
+ The PID file is used by programs that want to send signals to
+ the running
+ name server. Specifying <command>pid-file none</command> disables the
+ use of a PID file &mdash; no file will be written and any
+ existing one will be removed. Note that <command>none</command>
+ is a keyword, not a filename, and therefore is not enclosed
+ in
+ double quotes.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>recursing-file</command></term>
+ <listitem>
+ <para>
+ The pathname of the file the server dumps
+ the queries that are currently recursing when instructed
+ to do so with <command>rndc recursing</command>.
+ If not specified, the default is <filename>named.recursing</filename>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>statistics-file</command></term>
+ <listitem>
+ <para>
+ The pathname of the file the server appends statistics
+ to when instructed to do so using <command>rndc stats</command>.
+ If not specified, the default is <filename>named.stats</filename> in the
+ server's current directory. The format of the file is
+ described
+ in <xref linkend="statsfile"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>bindkeys-file</command></term>
+ <listitem>
+ <para>
+ The pathname of a file to override the built-in trusted
keys provided by <command>named</command>.
See the discussion of <command>dnssec-lookaside</command>
- and <command>dnssec-validation</command> for details.
- If not specified, the default is
+ and <command>dnssec-validation</command> for details.
+ If not specified, the default is
<filename>/etc/bind.keys</filename>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>secroots-file</command></term>
- <listitem>
- <para>
- The pathname of the file the server dumps
- security roots to when instructed to do so with
- <command>rndc secroots</command>.
- If not specified, the default is
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>secroots-file</command></term>
+ <listitem>
+ <para>
+ The pathname of the file the server dumps
+ security roots to when instructed to do so with
+ <command>rndc secroots</command>.
+ If not specified, the default is
<filename>named.secroots</filename>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>session-keyfile</command></term>
- <listitem>
- <para>
- The pathname of the file into which to write a TSIG
- session key generated by <command>named</command> for use by
- <command>nsupdate -l</command>. If not specified, the
- default is <filename>/var/run/named/session.key</filename>.
- (See <xref linkend="dynamic_update_policies"/>, and in
- particular the discussion of the
- <command>update-policy</command> statement's
- <userinput>local</userinput> option for more
- information about this feature.)
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>session-keyname</command></term>
- <listitem>
- <para>
- The key name to use for the TSIG session key.
- If not specified, the default is "local-ddns".
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>session-keyalg</command></term>
- <listitem>
- <para>
- The algorithm to use for the TSIG session key.
- Valid values are hmac-sha1, hmac-sha224, hmac-sha256,
- hmac-sha384, hmac-sha512 and hmac-md5. If not
- specified, the default is hmac-sha256.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>port</command></term>
- <listitem>
- <para>
- The UDP/TCP port number the server uses for
- receiving and sending DNS protocol traffic.
- The default is 53. This option is mainly intended for server
- testing;
- a server using a port other than 53 will not be able to
- communicate with
- the global DNS.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>random-device</command></term>
- <listitem>
- <para>
- The source of entropy to be used by the server. Entropy is
- primarily needed
- for DNSSEC operations, such as TKEY transactions and dynamic
- update of signed
- zones. This options specifies the device (or file) from which
- to read
- entropy. If this is a file, operations requiring entropy will
- fail when the
- file has been exhausted. If not specified, the default value
- is
- <filename>/dev/random</filename>
- (or equivalent) when present, and none otherwise. The
- <command>random-device</command> option takes
- effect during
- the initial configuration load at server startup time and
- is ignored on subsequent reloads.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>preferred-glue</command></term>
- <listitem>
- <para>
- If specified, the listed type (A or AAAA) will be emitted
- before other glue
- in the additional section of a query response.
- The default is not to prefer any type (NONE).
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry id="root_delegation_only">
- <term><command>root-delegation-only</command></term>
- <listitem>
- <para>
- Turn on enforcement of delegation-only in TLDs
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>session-keyfile</command></term>
+ <listitem>
+ <para>
+ The pathname of the file into which to write a TSIG
+ session key generated by <command>named</command> for use by
+ <command>nsupdate -l</command>. If not specified, the
+ default is <filename>/var/run/named/session.key</filename>.
+ (See <xref linkend="dynamic_update_policies"/>, and in
+ particular the discussion of the
+ <command>update-policy</command> statement's
+ <userinput>local</userinput> option for more
+ information about this feature.)
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>session-keyname</command></term>
+ <listitem>
+ <para>
+ The key name to use for the TSIG session key.
+ If not specified, the default is "local-ddns".
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>session-keyalg</command></term>
+ <listitem>
+ <para>
+ The algorithm to use for the TSIG session key.
+ Valid values are hmac-sha1, hmac-sha224, hmac-sha256,
+ hmac-sha384, hmac-sha512 and hmac-md5. If not
+ specified, the default is hmac-sha256.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>port</command></term>
+ <listitem>
+ <para>
+ The UDP/TCP port number the server uses for
+ receiving and sending DNS protocol traffic.
+ The default is 53. This option is mainly intended for server
+ testing;
+ a server using a port other than 53 will not be able to
+ communicate with
+ the global DNS.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>random-device</command></term>
+ <listitem>
+ <para>
+ The source of entropy to be used by the server. Entropy is
+ primarily needed
+ for DNSSEC operations, such as TKEY transactions and dynamic
+ update of signed
+ zones. This options specifies the device (or file) from which
+ to read
+ entropy. If this is a file, operations requiring entropy will
+ fail when the
+ file has been exhausted. If not specified, the default value
+ is
+ <filename>/dev/random</filename>
+ (or equivalent) when present, and none otherwise. The
+ <command>random-device</command> option takes
+ effect during
+ the initial configuration load at server startup time and
+ is ignored on subsequent reloads.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>preferred-glue</command></term>
+ <listitem>
+ <para>
+ If specified, the listed type (A or AAAA) will be emitted
+ before other glue
+ in the additional section of a query response.
+ The default is not to prefer any type (NONE).
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry id="root_delegation_only">
+ <term><command>root-delegation-only</command></term>
+ <listitem>
+ <para>
+ Turn on enforcement of delegation-only in TLDs
(top level domains) and root zones with an optional
exclude list.
- </para>
+ </para>
<para>
DS queries are expected to be made to and be answered by
delegation only zones. Such queries and responses are
@@ -5365,10 +5383,10 @@ badresp:1,adberr:0,findfail:0,valfail:0]
(no records at the name) in the delegation only zone
when the query type is not ANY.
</para>
- <para>
- Note some TLDs are not delegation only (e.g. "DE", "LV",
+ <para>
+ Note some TLDs are not delegation only (e.g. "DE", "LV",
"US" and "MUSEUM"). This list is not exhaustive.
- </para>
+ </para>
<programlisting>
options {
@@ -5376,26 +5394,26 @@ options {
};
</programlisting>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>disable-algorithms</command></term>
- <listitem>
- <para>
- Disable the specified DNSSEC algorithms at and below the
- specified name.
- Multiple <command>disable-algorithms</command>
- statements are allowed.
- Only the most specific will be applied.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>dnssec-lookaside</command></term>
- <listitem>
- <para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>disable-algorithms</command></term>
+ <listitem>
+ <para>
+ Disable the specified DNSSEC algorithms at and below the
+ specified name.
+ Multiple <command>disable-algorithms</command>
+ statements are allowed.
+ Only the most specific will be applied.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>dnssec-lookaside</command></term>
+ <listitem>
+ <para>
When set, <command>dnssec-lookaside</command> provides the
validator with an alternate method to validate DNSKEY
records at the top of a zone. When a DNSKEY is at or
@@ -5405,7 +5423,7 @@ options {
will be appended to the key name and a DLV record will be
looked up to see if it can validate the key. If the DLV
record validates a DNSKEY (similarly to the way a DS
- record does) the DNSKEY RRset is deemed to be trusted.
+ record does) the DNSKEY RRset is deemed to be trusted.
</para>
<para>
If <command>dnssec-lookaside</command> is set to
@@ -5418,54 +5436,54 @@ options {
<userinput>no</userinput>, then dnssec-lookaside
is not used.
</para>
- <para>
- The default DLV key is stored in the file
- <filename>bind.keys</filename>;
- <command>named</command> will load that key at
- startup if <command>dnssec-lookaside</command> is set to
- <constant>auto</constant>. A copy of the file is
- installed along with <acronym>BIND</acronym> 9, and is
- current as of the release date. If the DLV key expires, a
- new copy of <filename>bind.keys</filename> can be downloaded
- from <ulink url="https://www.isc.org/solutions/dlv/"
+ <para>
+ The default DLV key is stored in the file
+ <filename>bind.keys</filename>;
+ <command>named</command> will load that key at
+ startup if <command>dnssec-lookaside</command> is set to
+ <constant>auto</constant>. A copy of the file is
+ installed along with <acronym>BIND</acronym> 9, and is
+ current as of the release date. If the DLV key expires, a
+ new copy of <filename>bind.keys</filename> can be downloaded
+ from <ulink url="https://www.isc.org/solutions/dlv/"
>https://www.isc.org/solutions/dlv/</ulink>.
- </para>
- <para>
- (To prevent problems if <filename>bind.keys</filename> is
- not found, the current key is also compiled in to
- <command>named</command>. Relying on this is not
- recommended, however, as it requires <command>named</command>
- to be recompiled with a new key when the DLV key expires.)
- </para>
- <para>
- NOTE: <command>named</command> only loads certain specific
- keys from <filename>bind.keys</filename>: those for the
- DLV zone and for the DNS root zone. The file cannot be
- used to store keys for other zones.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>dnssec-must-be-secure</command></term>
- <listitem>
- <para>
- Specify hierarchies which must be or may not be secure
- (signed and validated). If <userinput>yes</userinput>,
- then <command>named</command> will only accept answers if
- they are secure. If <userinput>no</userinput>, then normal
- DNSSEC validation applies allowing for insecure answers to
- be accepted. The specified domain must be under a
- <command>trusted-keys</command> or
- <command>managed-keys</command> statement, or
- <command>dnssec-lookaside</command> must be active.
- </para>
- </listitem>
- </varlistentry>
+ </para>
+ <para>
+ (To prevent problems if <filename>bind.keys</filename> is
+ not found, the current key is also compiled in to
+ <command>named</command>. Relying on this is not
+ recommended, however, as it requires <command>named</command>
+ to be recompiled with a new key when the DLV key expires.)
+ </para>
+ <para>
+ NOTE: <command>named</command> only loads certain specific
+ keys from <filename>bind.keys</filename>: those for the
+ DLV zone and for the DNS root zone. The file cannot be
+ used to store keys for other zones.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>dnssec-must-be-secure</command></term>
+ <listitem>
+ <para>
+ Specify hierarchies which must be or may not be secure
+ (signed and validated). If <userinput>yes</userinput>,
+ then <command>named</command> will only accept answers if
+ they are secure. If <userinput>no</userinput>, then normal
+ DNSSEC validation applies allowing for insecure answers to
+ be accepted. The specified domain must be under a
+ <command>trusted-keys</command> or
+ <command>managed-keys</command> statement, or
+ <command>dnssec-lookaside</command> must be active.
+ </para>
+ </listitem>
+ </varlistentry>
<varlistentry>
<term><command>dns64</command></term>
- <listitem>
+ <listitem>
<para>
This directive instructs <command>named</command> to
return mapped IPv4 addresses to AAAA queries when
@@ -5491,8 +5509,8 @@ options {
<para>
Each <command>dns64</command> supports an optional
<command>clients</command> ACL that determines which
- clients are affected by this directive. If not defined,
- it defaults to <userinput>any;</userinput>.
+ clients are affected by this directive. If not defined,
+ it defaults to <userinput>any;</userinput>.
</para>
<para>
Each <command>dns64</command> supports an optional
@@ -5538,515 +5556,515 @@ options {
<programlisting>
acl rfc1918 { 10/8; 192.168/16; 172.16/12; };
- dns64 64:FF9B::/96 {
- clients { any; };
- mapped { !rfc1918; any; };
- exclude { 64:FF9B::/96; ::ffff:0000:0000/96; };
- suffix ::;
- };
+ dns64 64:FF9B::/96 {
+ clients { any; };
+ mapped { !rfc1918; any; };
+ exclude { 64:FF9B::/96; ::ffff:0000:0000/96; };
+ suffix ::;
+ };
</programlisting>
- </listitem>
+ </listitem>
</varlistentry>
<varlistentry>
<term><command>dnssec-update-mode</command></term>
<listitem>
- <para>
- If this option is set to its default value of
- <literal>maintain</literal> in a zone of type
- <literal>master</literal> which is DNSSEC-signed
- and configured to allow dynamic updates (see
- <xref linkend="dynamic_update_policies"/>), and
- if <command>named</command> has access to the
- private signing key(s) for the zone, then
- <command>named</command> will automatically sign all new
- or changed records and maintain signatures for the zone
- by regenerating RRSIG records whenever they approach
- their expiration date.
- </para>
- <para>
- If the option is changed to <literal>no-resign</literal>,
- then <command>named</command> will sign all new or
- changed records, but scheduled maintenance of
- signatures is disabled.
- </para>
- <para>
- With either of these settings, <command>named</command>
- will reject updates to a DNSSEC-signed zone when the
- signing keys are inactive or unavailable to
- <command>named</command>. (A planned third option,
- <literal>external</literal>, will disable all automatic
- signing and allow DNSSEC data to be submitted into a zone
- via dynamic update; this is not yet implemented.)
+ <para>
+ If this option is set to its default value of
+ <literal>maintain</literal> in a zone of type
+ <literal>master</literal> which is DNSSEC-signed
+ and configured to allow dynamic updates (see
+ <xref linkend="dynamic_update_policies"/>), and
+ if <command>named</command> has access to the
+ private signing key(s) for the zone, then
+ <command>named</command> will automatically sign all new
+ or changed records and maintain signatures for the zone
+ by regenerating RRSIG records whenever they approach
+ their expiration date.
+ </para>
+ <para>
+ If the option is changed to <literal>no-resign</literal>,
+ then <command>named</command> will sign all new or
+ changed records, but scheduled maintenance of
+ signatures is disabled.
+ </para>
+ <para>
+ With either of these settings, <command>named</command>
+ will reject updates to a DNSSEC-signed zone when the
+ signing keys are inactive or unavailable to
+ <command>named</command>. (A planned third option,
+ <literal>external</literal>, will disable all automatic
+ signing and allow DNSSEC data to be submitted into a zone
+ via dynamic update; this is not yet implemented.)
</para>
</listitem>
</varlistentry>
- <varlistentry>
- <term><command>zone-statistics</command></term>
- <listitem>
- <para>
- If <userinput>full</userinput>, the server will collect
- statistical data on all zones (unless specifically
- turned off on a per-zone basis by specifying
- <command>zone-statistics terse</command> or
- <command>zone-statistics none</command>
- in the <command>zone</command> statement).
- The default is <userinput>terse</userinput>, providing
- minimal statistics on zones (including name and
- current serial number, but not query type
- counters).
- </para>
- <para>
- These statistics may be accessed via the
- <command>statistics-channel</command> or
- using <command>rndc stats</command>, which
- will dump them to the file listed
- in the <command>statistics-file</command>. See
- also <xref linkend="statsfile"/>.
- </para>
- <para>
- For backward compatibility with earlier versions
- of BIND 9, the <command>zone-statistics</command>
- option can also accept <userinput>yes</userinput>
- or <userinput>no</userinput>, which have the same
- effect as <userinput>full</userinput> and
- <userinput>terse</userinput>, respectively.
- </para>
- </listitem>
- </varlistentry>
- </variablelist>
-
- <sect3 id="boolean_options">
- <title>Boolean Options</title>
-
- <variablelist>
-
- <varlistentry>
- <term><command>allow-new-zones</command></term>
- <listitem>
- <para>
- If <userinput>yes</userinput>, then zones can be
- added at runtime via <command>rndc addzone</command>
- or deleted via <command>rndc delzone</command>.
- The default is <userinput>no</userinput>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>auth-nxdomain</command></term>
- <listitem>
- <para>
- If <userinput>yes</userinput>, then the <command>AA</command> bit
- is always set on NXDOMAIN responses, even if the server is
- not actually
- authoritative. The default is <userinput>no</userinput>;
- this is
- a change from <acronym>BIND</acronym> 8. If you
- are using very old DNS software, you
- may need to set it to <userinput>yes</userinput>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>deallocate-on-exit</command></term>
- <listitem>
- <para>
- This option was used in <acronym>BIND</acronym>
- 8 to enable checking
- for memory leaks on exit. <acronym>BIND</acronym> 9 ignores the option and always performs
- the checks.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>memstatistics</command></term>
- <listitem>
- <para>
+ <varlistentry>
+ <term><command>zone-statistics</command></term>
+ <listitem>
+ <para>
+ If <userinput>full</userinput>, the server will collect
+ statistical data on all zones (unless specifically
+ turned off on a per-zone basis by specifying
+ <command>zone-statistics terse</command> or
+ <command>zone-statistics none</command>
+ in the <command>zone</command> statement).
+ The default is <userinput>terse</userinput>, providing
+ minimal statistics on zones (including name and
+ current serial number, but not query type
+ counters).
+ </para>
+ <para>
+ These statistics may be accessed via the
+ <command>statistics-channel</command> or
+ using <command>rndc stats</command>, which
+ will dump them to the file listed
+ in the <command>statistics-file</command>. See
+ also <xref linkend="statsfile"/>.
+ </para>
+ <para>
+ For backward compatibility with earlier versions
+ of BIND 9, the <command>zone-statistics</command>
+ option can also accept <userinput>yes</userinput>
+ or <userinput>no</userinput>, which have the same
+ effect as <userinput>full</userinput> and
+ <userinput>terse</userinput>, respectively.
+ </para>
+ </listitem>
+ </varlistentry>
+ </variablelist>
+
+ <sect3 id="boolean_options">
+ <title>Boolean Options</title>
+
+ <variablelist>
+
+ <varlistentry>
+ <term><command>allow-new-zones</command></term>
+ <listitem>
+ <para>
+ If <userinput>yes</userinput>, then zones can be
+ added at runtime via <command>rndc addzone</command>
+ or deleted via <command>rndc delzone</command>.
+ The default is <userinput>no</userinput>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>auth-nxdomain</command></term>
+ <listitem>
+ <para>
+ If <userinput>yes</userinput>, then the <command>AA</command> bit
+ is always set on NXDOMAIN responses, even if the server is
+ not actually
+ authoritative. The default is <userinput>no</userinput>;
+ this is
+ a change from <acronym>BIND</acronym> 8. If you
+ are using very old DNS software, you
+ may need to set it to <userinput>yes</userinput>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>deallocate-on-exit</command></term>
+ <listitem>
+ <para>
+ This option was used in <acronym>BIND</acronym>
+ 8 to enable checking
+ for memory leaks on exit. <acronym>BIND</acronym> 9 ignores the option and always performs
+ the checks.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>memstatistics</command></term>
+ <listitem>
+ <para>
Write memory statistics to the file specified by
<command>memstatistics-file</command> at exit.
The default is <userinput>no</userinput> unless
'-m record' is specified on the command line in
which case it is <userinput>yes</userinput>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>dialup</command></term>
- <listitem>
- <para>
- If <userinput>yes</userinput>, then the
- server treats all zones as if they are doing zone transfers
- across
- a dial-on-demand dialup link, which can be brought up by
- traffic
- originating from this server. This has different effects
- according
- to zone type and concentrates the zone maintenance so that
- it all
- happens in a short interval, once every <command>heartbeat-interval</command> and
- hopefully during the one call. It also suppresses some of
- the normal
- zone maintenance traffic. The default is <userinput>no</userinput>.
- </para>
- <para>
- The <command>dialup</command> option
- may also be specified in the <command>view</command> and
- <command>zone</command> statements,
- in which case it overrides the global <command>dialup</command>
- option.
- </para>
- <para>
- If the zone is a master zone, then the server will send out a
- NOTIFY
- request to all the slaves (default). This should trigger the
- zone serial
- number check in the slave (providing it supports NOTIFY)
- allowing the slave
- to verify the zone while the connection is active.
- The set of servers to which NOTIFY is sent can be controlled
- by
- <command>notify</command> and <command>also-notify</command>.
- </para>
- <para>
- If the
- zone is a slave or stub zone, then the server will suppress
- the regular
- "zone up to date" (refresh) queries and only perform them
- when the
- <command>heartbeat-interval</command> expires in
- addition to sending
- NOTIFY requests.
- </para>
- <para>
- Finer control can be achieved by using
- <userinput>notify</userinput> which only sends NOTIFY
- messages,
- <userinput>notify-passive</userinput> which sends NOTIFY
- messages and
- suppresses the normal refresh queries, <userinput>refresh</userinput>
- which suppresses normal refresh processing and sends refresh
- queries
- when the <command>heartbeat-interval</command>
- expires, and
- <userinput>passive</userinput> which just disables normal
- refresh
- processing.
- </para>
-
- <informaltable colsep="0" rowsep="0">
- <tgroup cols="4" colsep="0" rowsep="0" tgroupstyle="4Level-table">
- <colspec colname="1" colnum="1" colsep="0" colwidth="1.150in"/>
- <colspec colname="2" colnum="2" colsep="0" colwidth="1.150in"/>
- <colspec colname="3" colnum="3" colsep="0" colwidth="1.150in"/>
- <colspec colname="4" colnum="4" colsep="0" colwidth="1.150in"/>
- <tbody>
- <row rowsep="0">
- <entry colname="1">
- <para>
- dialup mode
- </para>
- </entry>
- <entry colname="2">
- <para>
- normal refresh
- </para>
- </entry>
- <entry colname="3">
- <para>
- heart-beat refresh
- </para>
- </entry>
- <entry colname="4">
- <para>
- heart-beat notify
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>no</command> (default)</para>
- </entry>
- <entry colname="2">
- <para>
- yes
- </para>
- </entry>
- <entry colname="3">
- <para>
- no
- </para>
- </entry>
- <entry colname="4">
- <para>
- no
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>yes</command></para>
- </entry>
- <entry colname="2">
- <para>
- no
- </para>
- </entry>
- <entry colname="3">
- <para>
- yes
- </para>
- </entry>
- <entry colname="4">
- <para>
- yes
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>notify</command></para>
- </entry>
- <entry colname="2">
- <para>
- yes
- </para>
- </entry>
- <entry colname="3">
- <para>
- no
- </para>
- </entry>
- <entry colname="4">
- <para>
- yes
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>refresh</command></para>
- </entry>
- <entry colname="2">
- <para>
- no
- </para>
- </entry>
- <entry colname="3">
- <para>
- yes
- </para>
- </entry>
- <entry colname="4">
- <para>
- no
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>passive</command></para>
- </entry>
- <entry colname="2">
- <para>
- no
- </para>
- </entry>
- <entry colname="3">
- <para>
- no
- </para>
- </entry>
- <entry colname="4">
- <para>
- no
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>notify-passive</command></para>
- </entry>
- <entry colname="2">
- <para>
- no
- </para>
- </entry>
- <entry colname="3">
- <para>
- no
- </para>
- </entry>
- <entry colname="4">
- <para>
- yes
- </para>
- </entry>
- </row>
- </tbody>
- </tgroup>
- </informaltable>
-
- <para>
- Note that normal NOTIFY processing is not affected by
- <command>dialup</command>.
- </para>
-
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>fake-iquery</command></term>
- <listitem>
- <para>
- In <acronym>BIND</acronym> 8, this option
- enabled simulating the obsolete DNS query type
- IQUERY. <acronym>BIND</acronym> 9 never does
- IQUERY simulation.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>fetch-glue</command></term>
- <listitem>
- <para>
- This option is obsolete.
- In BIND 8, <userinput>fetch-glue yes</userinput>
- caused the server to attempt to fetch glue resource records
- it
- didn't have when constructing the additional
- data section of a response. This is now considered a bad
- idea
- and BIND 9 never does it.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>flush-zones-on-shutdown</command></term>
- <listitem>
- <para>
- When the nameserver exits due receiving SIGTERM,
- flush or do not flush any pending zone writes. The default
- is
- <command>flush-zones-on-shutdown</command> <userinput>no</userinput>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>has-old-clients</command></term>
- <listitem>
- <para>
- This option was incorrectly implemented
- in <acronym>BIND</acronym> 8, and is ignored by <acronym>BIND</acronym> 9.
- To achieve the intended effect
- of
- <command>has-old-clients</command> <userinput>yes</userinput>, specify
- the two separate options <command>auth-nxdomain</command> <userinput>yes</userinput>
- and <command>rfc2308-type1</command> <userinput>no</userinput> instead.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>host-statistics</command></term>
- <listitem>
- <para>
- In BIND 8, this enables keeping of
- statistics for every host that the name server interacts
- with.
- Not implemented in BIND 9.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>maintain-ixfr-base</command></term>
- <listitem>
- <para>
- <emphasis>This option is obsolete</emphasis>.
- It was used in <acronym>BIND</acronym> 8 to
- determine whether a transaction log was
- kept for Incremental Zone Transfer. <acronym>BIND</acronym> 9 maintains a transaction
- log whenever possible. If you need to disable outgoing
- incremental zone
- transfers, use <command>provide-ixfr</command> <userinput>no</userinput>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>minimal-responses</command></term>
- <listitem>
- <para>
- If <userinput>yes</userinput>, then when generating
- responses the server will only add records to the authority
- and additional data sections when they are required (e.g.
- delegations, negative responses). This may improve the
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>dialup</command></term>
+ <listitem>
+ <para>
+ If <userinput>yes</userinput>, then the
+ server treats all zones as if they are doing zone transfers
+ across
+ a dial-on-demand dialup link, which can be brought up by
+ traffic
+ originating from this server. This has different effects
+ according
+ to zone type and concentrates the zone maintenance so that
+ it all
+ happens in a short interval, once every <command>heartbeat-interval</command> and
+ hopefully during the one call. It also suppresses some of
+ the normal
+ zone maintenance traffic. The default is <userinput>no</userinput>.
+ </para>
+ <para>
+ The <command>dialup</command> option
+ may also be specified in the <command>view</command> and
+ <command>zone</command> statements,
+ in which case it overrides the global <command>dialup</command>
+ option.
+ </para>
+ <para>
+ If the zone is a master zone, then the server will send out a
+ NOTIFY
+ request to all the slaves (default). This should trigger the
+ zone serial
+ number check in the slave (providing it supports NOTIFY)
+ allowing the slave
+ to verify the zone while the connection is active.
+ The set of servers to which NOTIFY is sent can be controlled
+ by
+ <command>notify</command> and <command>also-notify</command>.
+ </para>
+ <para>
+ If the
+ zone is a slave or stub zone, then the server will suppress
+ the regular
+ "zone up to date" (refresh) queries and only perform them
+ when the
+ <command>heartbeat-interval</command> expires in
+ addition to sending
+ NOTIFY requests.
+ </para>
+ <para>
+ Finer control can be achieved by using
+ <userinput>notify</userinput> which only sends NOTIFY
+ messages,
+ <userinput>notify-passive</userinput> which sends NOTIFY
+ messages and
+ suppresses the normal refresh queries, <userinput>refresh</userinput>
+ which suppresses normal refresh processing and sends refresh
+ queries
+ when the <command>heartbeat-interval</command>
+ expires, and
+ <userinput>passive</userinput> which just disables normal
+ refresh
+ processing.
+ </para>
+
+ <informaltable colsep="0" rowsep="0">
+ <tgroup cols="4" colsep="0" rowsep="0" tgroupstyle="4Level-table">
+ <colspec colname="1" colnum="1" colsep="0" colwidth="1.150in"/>
+ <colspec colname="2" colnum="2" colsep="0" colwidth="1.150in"/>
+ <colspec colname="3" colnum="3" colsep="0" colwidth="1.150in"/>
+ <colspec colname="4" colnum="4" colsep="0" colwidth="1.150in"/>
+ <tbody>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ dialup mode
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ normal refresh
+ </para>
+ </entry>
+ <entry colname="3">
+ <para>
+ heart-beat refresh
+ </para>
+ </entry>
+ <entry colname="4">
+ <para>
+ heart-beat notify
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>no</command> (default)</para>
+ </entry>
+ <entry colname="2">
+ <para>
+ yes
+ </para>
+ </entry>
+ <entry colname="3">
+ <para>
+ no
+ </para>
+ </entry>
+ <entry colname="4">
+ <para>
+ no
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>yes</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ no
+ </para>
+ </entry>
+ <entry colname="3">
+ <para>
+ yes
+ </para>
+ </entry>
+ <entry colname="4">
+ <para>
+ yes
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>notify</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ yes
+ </para>
+ </entry>
+ <entry colname="3">
+ <para>
+ no
+ </para>
+ </entry>
+ <entry colname="4">
+ <para>
+ yes
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>refresh</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ no
+ </para>
+ </entry>
+ <entry colname="3">
+ <para>
+ yes
+ </para>
+ </entry>
+ <entry colname="4">
+ <para>
+ no
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>passive</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ no
+ </para>
+ </entry>
+ <entry colname="3">
+ <para>
+ no
+ </para>
+ </entry>
+ <entry colname="4">
+ <para>
+ no
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>notify-passive</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ no
+ </para>
+ </entry>
+ <entry colname="3">
+ <para>
+ no
+ </para>
+ </entry>
+ <entry colname="4">
+ <para>
+ yes
+ </para>
+ </entry>
+ </row>
+ </tbody>
+ </tgroup>
+ </informaltable>
+
+ <para>
+ Note that normal NOTIFY processing is not affected by
+ <command>dialup</command>.
+ </para>
+
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>fake-iquery</command></term>
+ <listitem>
+ <para>
+ In <acronym>BIND</acronym> 8, this option
+ enabled simulating the obsolete DNS query type
+ IQUERY. <acronym>BIND</acronym> 9 never does
+ IQUERY simulation.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>fetch-glue</command></term>
+ <listitem>
+ <para>
+ This option is obsolete.
+ In BIND 8, <userinput>fetch-glue yes</userinput>
+ caused the server to attempt to fetch glue resource records
+ it
+ didn't have when constructing the additional
+ data section of a response. This is now considered a bad
+ idea
+ and BIND 9 never does it.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>flush-zones-on-shutdown</command></term>
+ <listitem>
+ <para>
+ When the nameserver exits due receiving SIGTERM,
+ flush or do not flush any pending zone writes. The default
+ is
+ <command>flush-zones-on-shutdown</command> <userinput>no</userinput>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>has-old-clients</command></term>
+ <listitem>
+ <para>
+ This option was incorrectly implemented
+ in <acronym>BIND</acronym> 8, and is ignored by <acronym>BIND</acronym> 9.
+ To achieve the intended effect
+ of
+ <command>has-old-clients</command> <userinput>yes</userinput>, specify
+ the two separate options <command>auth-nxdomain</command> <userinput>yes</userinput>
+ and <command>rfc2308-type1</command> <userinput>no</userinput> instead.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>host-statistics</command></term>
+ <listitem>
+ <para>
+ In BIND 8, this enables keeping of
+ statistics for every host that the name server interacts
+ with.
+ Not implemented in BIND 9.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>maintain-ixfr-base</command></term>
+ <listitem>
+ <para>
+ <emphasis>This option is obsolete</emphasis>.
+ It was used in <acronym>BIND</acronym> 8 to
+ determine whether a transaction log was
+ kept for Incremental Zone Transfer. <acronym>BIND</acronym> 9 maintains a transaction
+ log whenever possible. If you need to disable outgoing
+ incremental zone
+ transfers, use <command>provide-ixfr</command> <userinput>no</userinput>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>minimal-responses</command></term>
+ <listitem>
+ <para>
+ If <userinput>yes</userinput>, then when generating
+ responses the server will only add records to the authority
+ and additional data sections when they are required (e.g.
+ delegations, negative responses). This may improve the
performance of the server.
- The default is <userinput>no</userinput>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>multiple-cnames</command></term>
- <listitem>
- <para>
- This option was used in <acronym>BIND</acronym> 8 to allow
- a domain name to have multiple CNAME records in violation of
- the DNS standards. <acronym>BIND</acronym> 9.2 onwards
- always strictly enforces the CNAME rules both in master
+ The default is <userinput>no</userinput>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>multiple-cnames</command></term>
+ <listitem>
+ <para>
+ This option was used in <acronym>BIND</acronym> 8 to allow
+ a domain name to have multiple CNAME records in violation of
+ the DNS standards. <acronym>BIND</acronym> 9.2 onwards
+ always strictly enforces the CNAME rules both in master
files and dynamic updates.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>notify</command></term>
- <listitem>
- <para>
- If <userinput>yes</userinput> (the default),
- DNS NOTIFY messages are sent when a zone the server is
- authoritative for
- changes, see <xref linkend="notify"/>. The messages are
- sent to the
- servers listed in the zone's NS records (except the master
- server identified
- in the SOA MNAME field), and to any servers listed in the
- <command>also-notify</command> option.
- </para>
- <para>
- If <userinput>master-only</userinput>, notifies are only
- sent
- for master zones.
- If <userinput>explicit</userinput>, notifies are sent only
- to
- servers explicitly listed using <command>also-notify</command>.
- If <userinput>no</userinput>, no notifies are sent.
- </para>
- <para>
- The <command>notify</command> option may also be
- specified in the <command>zone</command>
- statement,
- in which case it overrides the <command>options notify</command> statement.
- It would only be necessary to turn off this option if it
- caused slaves
- to crash.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>notify-to-soa</command></term>
- <listitem>
- <para>
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>notify</command></term>
+ <listitem>
+ <para>
+ If <userinput>yes</userinput> (the default),
+ DNS NOTIFY messages are sent when a zone the server is
+ authoritative for
+ changes, see <xref linkend="notify"/>. The messages are
+ sent to the
+ servers listed in the zone's NS records (except the master
+ server identified
+ in the SOA MNAME field), and to any servers listed in the
+ <command>also-notify</command> option.
+ </para>
+ <para>
+ If <userinput>master-only</userinput>, notifies are only
+ sent
+ for master zones.
+ If <userinput>explicit</userinput>, notifies are sent only
+ to
+ servers explicitly listed using <command>also-notify</command>.
+ If <userinput>no</userinput>, no notifies are sent.
+ </para>
+ <para>
+ The <command>notify</command> option may also be
+ specified in the <command>zone</command>
+ statement,
+ in which case it overrides the <command>options notify</command> statement.
+ It would only be necessary to turn off this option if it
+ caused slaves
+ to crash.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>notify-to-soa</command></term>
+ <listitem>
+ <para>
If <userinput>yes</userinput> do not check the nameservers
in the NS RRset against the SOA MNAME. Normally a NOTIFY
message is not sent to the SOA MNAME (SOA ORIGIN) as it is
@@ -6055,435 +6073,435 @@ options {
hidden master configurations and in that case you would
want the ultimate master to still send NOTIFY messages to
all the nameservers listed in the NS RRset.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>recursion</command></term>
- <listitem>
- <para>
- If <userinput>yes</userinput>, and a
- DNS query requests recursion, then the server will attempt
- to do
- all the work required to answer the query. If recursion is
- off
- and the server does not already know the answer, it will
- return a
- referral response. The default is
- <userinput>yes</userinput>.
- Note that setting <command>recursion no</command> does not prevent
- clients from getting data from the server's cache; it only
- prevents new data from being cached as an effect of client
- queries.
- Caching may still occur as an effect the server's internal
- operation, such as NOTIFY address lookups.
- See also <command>fetch-glue</command> above.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>request-nsid</command></term>
- <listitem>
- <para>
- If <userinput>yes</userinput>, then an empty EDNS(0)
- NSID (Name Server Identifier) option is sent with all
- queries to authoritative name servers during iterative
- resolution. If the authoritative server returns an NSID
- option in its response, then its contents are logged in
- the <command>resolver</command> category at level
- <command>info</command>.
- The default is <userinput>no</userinput>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>rfc2308-type1</command></term>
- <listitem>
- <para>
- Setting this to <userinput>yes</userinput> will
- cause the server to send NS records along with the SOA
- record for negative
- answers. The default is <userinput>no</userinput>.
- </para>
- <note>
- <simpara>
- Not yet implemented in <acronym>BIND</acronym>
- 9.
- </simpara>
- </note>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>use-id-pool</command></term>
- <listitem>
- <para>
- <emphasis>This option is obsolete</emphasis>.
- <acronym>BIND</acronym> 9 always allocates query
- IDs from a pool.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>use-ixfr</command></term>
- <listitem>
- <para>
- <emphasis>This option is obsolete</emphasis>.
- If you need to disable IXFR to a particular server or
- servers, see
- the information on the <command>provide-ixfr</command> option
- in <xref linkend="server_statement_definition_and_usage"/>.
- See also
- <xref linkend="incremental_zone_transfers"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>provide-ixfr</command></term>
- <listitem>
- <para>
- See the description of
- <command>provide-ixfr</command> in
- <xref linkend="server_statement_definition_and_usage"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>request-ixfr</command></term>
- <listitem>
- <para>
- See the description of
- <command>request-ixfr</command> in
- <xref linkend="server_statement_definition_and_usage"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>treat-cr-as-space</command></term>
- <listitem>
- <para>
- This option was used in <acronym>BIND</acronym>
- 8 to make
- the server treat carriage return ("<command>\r</command>") characters the same way
- as a space or tab character,
- to facilitate loading of zone files on a UNIX system that
- were generated
- on an NT or DOS machine. In <acronym>BIND</acronym> 9, both UNIX "<command>\n</command>"
- and NT/DOS "<command>\r\n</command>" newlines
- are always accepted,
- and the option is ignored.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>additional-from-auth</command></term>
- <term><command>additional-from-cache</command></term>
- <listitem>
-
- <para>
- These options control the behavior of an authoritative
- server when
- answering queries which have additional data, or when
- following CNAME
- and DNAME chains.
- </para>
-
- <para>
- When both of these options are set to <userinput>yes</userinput>
- (the default) and a
- query is being answered from authoritative data (a zone
- configured into the server), the additional data section of
- the
- reply will be filled in using data from other authoritative
- zones
- and from the cache. In some situations this is undesirable,
- such
- as when there is concern over the correctness of the cache,
- or
- in servers where slave zones may be added and modified by
- untrusted third parties. Also, avoiding
- the search for this additional data will speed up server
- operations
- at the possible expense of additional queries to resolve
- what would
- otherwise be provided in the additional section.
- </para>
-
- <para>
- For example, if a query asks for an MX record for host <literal>foo.example.com</literal>,
- and the record found is "<literal>MX 10 mail.example.net</literal>", normally the address
- records (A and AAAA) for <literal>mail.example.net</literal> will be provided as well,
- if known, even though they are not in the example.com zone.
- Setting these options to <command>no</command>
- disables this behavior and makes
- the server only search for additional data in the zone it
- answers from.
- </para>
-
- <para>
- These options are intended for use in authoritative-only
- servers, or in authoritative-only views. Attempts to set
- them to <command>no</command> without also
- specifying
- <command>recursion no</command> will cause the
- server to
- ignore the options and log a warning message.
- </para>
-
- <para>
- Specifying <command>additional-from-cache no</command> actually
- disables the use of the cache not only for additional data
- lookups
- but also when looking up the answer. This is usually the
- desired
- behavior in an authoritative-only server where the
- correctness of
- the cached data is an issue.
- </para>
-
- <para>
- When a name server is non-recursively queried for a name
- that is not
- below the apex of any served zone, it normally answers with
- an
- "upwards referral" to the root servers or the servers of
- some other
- known parent of the query name. Since the data in an
- upwards referral
- comes from the cache, the server will not be able to provide
- upwards
- referrals when <command>additional-from-cache no</command>
- has been specified. Instead, it will respond to such
- queries
- with REFUSED. This should not cause any problems since
- upwards referrals are not required for the resolution
- process.
- </para>
-
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>match-mapped-addresses</command></term>
- <listitem>
- <para>
- If <userinput>yes</userinput>, then an
- IPv4-mapped IPv6 address will match any address match
- list entries that match the corresponding IPv4 address.
- </para>
- <para>
- This option was introduced to work around a kernel quirk
- in some operating systems that causes IPv4 TCP
- connections, such as zone transfers, to be accepted on an
- IPv6 socket using mapped addresses. This caused address
- match lists designed for IPv4 to fail to match. However,
- <command>named</command> now solves this problem
- internally. The use of this option is discouraged.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>filter-aaaa-on-v4</command></term>
- <listitem>
- <para>
- This option is only available when
- <acronym>BIND</acronym> 9 is compiled with the
- <userinput>--enable-filter-aaaa</userinput> option on the
- "configure" command line. It is intended to help the
- transition from IPv4 to IPv6 by not giving IPv6 addresses
- to DNS clients unless they have connections to the IPv6
- Internet. This is not recommended unless absolutely
- necessary. The default is <userinput>no</userinput>.
- The <command>filter-aaaa-on-v4</command> option
- may also be specified in <command>view</command> statements
- to override the global <command>filter-aaaa-on-v4</command>
- option.
- </para>
- <para>
- If <userinput>yes</userinput>,
- the DNS client is at an IPv4 address, in <command>filter-aaaa</command>,
- and if the response does not include DNSSEC signatures,
- then all AAAA records are deleted from the response.
- This filtering applies to all responses and not only
- authoritative responses.
- </para>
- <para>
- If <userinput>break-dnssec</userinput>,
- then AAAA records are deleted even when dnssec is enabled.
- As suggested by the name, this makes the response not verify,
- because the DNSSEC protocol is designed detect deletions.
- </para>
- <para>
- This mechanism can erroneously cause other servers to
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>recursion</command></term>
+ <listitem>
+ <para>
+ If <userinput>yes</userinput>, and a
+ DNS query requests recursion, then the server will attempt
+ to do
+ all the work required to answer the query. If recursion is
+ off
+ and the server does not already know the answer, it will
+ return a
+ referral response. The default is
+ <userinput>yes</userinput>.
+ Note that setting <command>recursion no</command> does not prevent
+ clients from getting data from the server's cache; it only
+ prevents new data from being cached as an effect of client
+ queries.
+ Caching may still occur as an effect the server's internal
+ operation, such as NOTIFY address lookups.
+ See also <command>fetch-glue</command> above.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>request-nsid</command></term>
+ <listitem>
+ <para>
+ If <userinput>yes</userinput>, then an empty EDNS(0)
+ NSID (Name Server Identifier) option is sent with all
+ queries to authoritative name servers during iterative
+ resolution. If the authoritative server returns an NSID
+ option in its response, then its contents are logged in
+ the <command>resolver</command> category at level
+ <command>info</command>.
+ The default is <userinput>no</userinput>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>rfc2308-type1</command></term>
+ <listitem>
+ <para>
+ Setting this to <userinput>yes</userinput> will
+ cause the server to send NS records along with the SOA
+ record for negative
+ answers. The default is <userinput>no</userinput>.
+ </para>
+ <note>
+ <simpara>
+ Not yet implemented in <acronym>BIND</acronym>
+ 9.
+ </simpara>
+ </note>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>use-id-pool</command></term>
+ <listitem>
+ <para>
+ <emphasis>This option is obsolete</emphasis>.
+ <acronym>BIND</acronym> 9 always allocates query
+ IDs from a pool.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>use-ixfr</command></term>
+ <listitem>
+ <para>
+ <emphasis>This option is obsolete</emphasis>.
+ If you need to disable IXFR to a particular server or
+ servers, see
+ the information on the <command>provide-ixfr</command> option
+ in <xref linkend="server_statement_definition_and_usage"/>.
+ See also
+ <xref linkend="incremental_zone_transfers"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>provide-ixfr</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>provide-ixfr</command> in
+ <xref linkend="server_statement_definition_and_usage"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>request-ixfr</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>request-ixfr</command> in
+ <xref linkend="server_statement_definition_and_usage"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>treat-cr-as-space</command></term>
+ <listitem>
+ <para>
+ This option was used in <acronym>BIND</acronym>
+ 8 to make
+ the server treat carriage return ("<command>\r</command>") characters the same way
+ as a space or tab character,
+ to facilitate loading of zone files on a UNIX system that
+ were generated
+ on an NT or DOS machine. In <acronym>BIND</acronym> 9, both UNIX "<command>\n</command>"
+ and NT/DOS "<command>\r\n</command>" newlines
+ are always accepted,
+ and the option is ignored.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>additional-from-auth</command></term>
+ <term><command>additional-from-cache</command></term>
+ <listitem>
+
+ <para>
+ These options control the behavior of an authoritative
+ server when
+ answering queries which have additional data, or when
+ following CNAME
+ and DNAME chains.
+ </para>
+
+ <para>
+ When both of these options are set to <userinput>yes</userinput>
+ (the default) and a
+ query is being answered from authoritative data (a zone
+ configured into the server), the additional data section of
+ the
+ reply will be filled in using data from other authoritative
+ zones
+ and from the cache. In some situations this is undesirable,
+ such
+ as when there is concern over the correctness of the cache,
+ or
+ in servers where slave zones may be added and modified by
+ untrusted third parties. Also, avoiding
+ the search for this additional data will speed up server
+ operations
+ at the possible expense of additional queries to resolve
+ what would
+ otherwise be provided in the additional section.
+ </para>
+
+ <para>
+ For example, if a query asks for an MX record for host <literal>foo.example.com</literal>,
+ and the record found is "<literal>MX 10 mail.example.net</literal>", normally the address
+ records (A and AAAA) for <literal>mail.example.net</literal> will be provided as well,
+ if known, even though they are not in the example.com zone.
+ Setting these options to <command>no</command>
+ disables this behavior and makes
+ the server only search for additional data in the zone it
+ answers from.
+ </para>
+
+ <para>
+ These options are intended for use in authoritative-only
+ servers, or in authoritative-only views. Attempts to set
+ them to <command>no</command> without also
+ specifying
+ <command>recursion no</command> will cause the
+ server to
+ ignore the options and log a warning message.
+ </para>
+
+ <para>
+ Specifying <command>additional-from-cache no</command> actually
+ disables the use of the cache not only for additional data
+ lookups
+ but also when looking up the answer. This is usually the
+ desired
+ behavior in an authoritative-only server where the
+ correctness of
+ the cached data is an issue.
+ </para>
+
+ <para>
+ When a name server is non-recursively queried for a name
+ that is not
+ below the apex of any served zone, it normally answers with
+ an
+ "upwards referral" to the root servers or the servers of
+ some other
+ known parent of the query name. Since the data in an
+ upwards referral
+ comes from the cache, the server will not be able to provide
+ upwards
+ referrals when <command>additional-from-cache no</command>
+ has been specified. Instead, it will respond to such
+ queries
+ with REFUSED. This should not cause any problems since
+ upwards referrals are not required for the resolution
+ process.
+ </para>
+
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>match-mapped-addresses</command></term>
+ <listitem>
+ <para>
+ If <userinput>yes</userinput>, then an
+ IPv4-mapped IPv6 address will match any address match
+ list entries that match the corresponding IPv4 address.
+ </para>
+ <para>
+ This option was introduced to work around a kernel quirk
+ in some operating systems that causes IPv4 TCP
+ connections, such as zone transfers, to be accepted on an
+ IPv6 socket using mapped addresses. This caused address
+ match lists designed for IPv4 to fail to match. However,
+ <command>named</command> now solves this problem
+ internally. The use of this option is discouraged.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>filter-aaaa-on-v4</command></term>
+ <listitem>
+ <para>
+ This option is only available when
+ <acronym>BIND</acronym> 9 is compiled with the
+ <userinput>--enable-filter-aaaa</userinput> option on the
+ "configure" command line. It is intended to help the
+ transition from IPv4 to IPv6 by not giving IPv6 addresses
+ to DNS clients unless they have connections to the IPv6
+ Internet. This is not recommended unless absolutely
+ necessary. The default is <userinput>no</userinput>.
+ The <command>filter-aaaa-on-v4</command> option
+ may also be specified in <command>view</command> statements
+ to override the global <command>filter-aaaa-on-v4</command>
+ option.
+ </para>
+ <para>
+ If <userinput>yes</userinput>,
+ the DNS client is at an IPv4 address, in <command>filter-aaaa</command>,
+ and if the response does not include DNSSEC signatures,
+ then all AAAA records are deleted from the response.
+ This filtering applies to all responses and not only
+ authoritative responses.
+ </para>
+ <para>
+ If <userinput>break-dnssec</userinput>,
+ then AAAA records are deleted even when dnssec is enabled.
+ As suggested by the name, this makes the response not verify,
+ because the DNSSEC protocol is designed detect deletions.
+ </para>
+ <para>
+ This mechanism can erroneously cause other servers to
not give AAAA records to their clients.
A recursing server with both IPv6 and IPv4 network connections
that queries an authoritative server using this mechanism
via IPv4 will be denied AAAA records even if its client is
using IPv6.
- </para>
- <para>
- This mechanism is applied to authoritative as well as
+ </para>
+ <para>
+ This mechanism is applied to authoritative as well as
non-authoritative records.
A client using IPv4 that is not allowed recursion can
erroneously be given AAAA records because the server is not
allowed to check for A records.
- </para>
- <para>
+ </para>
+ <para>
Some AAAA records are given to IPv4 clients in glue records.
IPv4 clients that are servers can then erroneously
answer requests for AAAA records received via IPv4.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>ixfr-from-differences</command></term>
- <listitem>
- <para>
- When <userinput>yes</userinput> and the server loads a new
- version of a master zone from its zone file or receives a
- new version of a slave file via zone transfer, it will
- compare the new version to the previous one and calculate
- a set of differences. The differences are then logged in
- the zone's journal file such that the changes can be
- transmitted to downstream slaves as an incremental zone
- transfer.
- </para>
- <para>
- By allowing incremental zone transfers to be used for
- non-dynamic zones, this option saves bandwidth at the
- expense of increased CPU and memory consumption at the
- master.
- In particular, if the new version of a zone is completely
- different from the previous one, the set of differences
- will be of a size comparable to the combined size of the
- old and new zone version, and the server will need to
- temporarily allocate memory to hold this complete
- difference set.
- </para>
- <para><command>ixfr-from-differences</command>
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>ixfr-from-differences</command></term>
+ <listitem>
+ <para>
+ When <userinput>yes</userinput> and the server loads a new
+ version of a master zone from its zone file or receives a
+ new version of a slave file via zone transfer, it will
+ compare the new version to the previous one and calculate
+ a set of differences. The differences are then logged in
+ the zone's journal file such that the changes can be
+ transmitted to downstream slaves as an incremental zone
+ transfer.
+ </para>
+ <para>
+ By allowing incremental zone transfers to be used for
+ non-dynamic zones, this option saves bandwidth at the
+ expense of increased CPU and memory consumption at the
+ master.
+ In particular, if the new version of a zone is completely
+ different from the previous one, the set of differences
+ will be of a size comparable to the combined size of the
+ old and new zone version, and the server will need to
+ temporarily allocate memory to hold this complete
+ difference set.
+ </para>
+ <para><command>ixfr-from-differences</command>
also accepts <command>master</command> and
- <command>slave</command> at the view and options
- levels which causes
- <command>ixfr-from-differences</command> to be enabled for
- all <command>master</command> or
- <command>slave</command> zones respectively.
- It is off by default.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>multi-master</command></term>
- <listitem>
- <para>
- This should be set when you have multiple masters for a zone
- and the
- addresses refer to different machines. If <userinput>yes</userinput>, <command>named</command> will
- not log
- when the serial number on the master is less than what <command>named</command>
- currently
- has. The default is <userinput>no</userinput>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>dnssec-enable</command></term>
- <listitem>
- <para>
- Enable DNSSEC support in <command>named</command>. Unless set to <userinput>yes</userinput>,
- <command>named</command> behaves as if it does not support DNSSEC.
- The default is <userinput>yes</userinput>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>dnssec-validation</command></term>
- <listitem>
- <para>
- Enable DNSSEC validation in <command>named</command>.
+ <command>slave</command> at the view and options
+ levels which causes
+ <command>ixfr-from-differences</command> to be enabled for
+ all <command>master</command> or
+ <command>slave</command> zones respectively.
+ It is off by default.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>multi-master</command></term>
+ <listitem>
+ <para>
+ This should be set when you have multiple masters for a zone
+ and the
+ addresses refer to different machines. If <userinput>yes</userinput>, <command>named</command> will
+ not log
+ when the serial number on the master is less than what <command>named</command>
+ currently
+ has. The default is <userinput>no</userinput>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>dnssec-enable</command></term>
+ <listitem>
+ <para>
+ Enable DNSSEC support in <command>named</command>. Unless set to <userinput>yes</userinput>,
+ <command>named</command> behaves as if it does not support DNSSEC.
+ The default is <userinput>yes</userinput>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>dnssec-validation</command></term>
+ <listitem>
+ <para>
+ Enable DNSSEC validation in <command>named</command>.
Note <command>dnssec-enable</command> also needs to be
set to <userinput>yes</userinput> to be effective.
- If set to <userinput>no</userinput>, DNSSEC validation
- is disabled. If set to <userinput>auto</userinput>,
- DNSSEC validation is enabled, and a default
- trust-anchor for the DNS root zone is used. If set to
- <userinput>yes</userinput>, DNSSEC validation is enabled,
- but a trust anchor must be manually configured using
- a <command>trusted-keys</command> or
- <command>managed-keys</command> statement. The default
- is <userinput>yes</userinput>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>dnssec-accept-expired</command></term>
- <listitem>
- <para>
+ If set to <userinput>no</userinput>, DNSSEC validation
+ is disabled. If set to <userinput>auto</userinput>,
+ DNSSEC validation is enabled, and a default
+ trust-anchor for the DNS root zone is used. If set to
+ <userinput>yes</userinput>, DNSSEC validation is enabled,
+ but a trust anchor must be manually configured using
+ a <command>trusted-keys</command> or
+ <command>managed-keys</command> statement. The default
+ is <userinput>yes</userinput>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>dnssec-accept-expired</command></term>
+ <listitem>
+ <para>
Accept expired signatures when verifying DNSSEC signatures.
- The default is <userinput>no</userinput>.
+ The default is <userinput>no</userinput>.
Setting this option to <userinput>yes</userinput>
leaves <command>named</command> vulnerable to
replay attacks.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>querylog</command></term>
- <listitem>
- <para>
- Specify whether query logging should be started when <command>named</command>
- starts.
- If <command>querylog</command> is not specified,
- then the query logging
- is determined by the presence of the logging category <command>queries</command>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>check-names</command></term>
- <listitem>
- <para>
- This option is used to restrict the character set and syntax
- of
- certain domain names in master files and/or DNS responses
- received
- from the network. The default varies according to usage
- area. For
- <command>master</command> zones the default is <command>fail</command>.
- For <command>slave</command> zones the default
- is <command>warn</command>.
- For answers received from the network (<command>response</command>)
- the default is <command>ignore</command>.
- </para>
- <para>
- The rules for legal hostnames and mail domains are derived
- from RFC 952 and RFC 821 as modified by RFC 1123.
- </para>
- <para><command>check-names</command>
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>querylog</command></term>
+ <listitem>
+ <para>
+ Specify whether query logging should be started when <command>named</command>
+ starts.
+ If <command>querylog</command> is not specified,
+ then the query logging
+ is determined by the presence of the logging category <command>queries</command>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>check-names</command></term>
+ <listitem>
+ <para>
+ This option is used to restrict the character set and syntax
+ of
+ certain domain names in master files and/or DNS responses
+ received
+ from the network. The default varies according to usage
+ area. For
+ <command>master</command> zones the default is <command>fail</command>.
+ For <command>slave</command> zones the default
+ is <command>warn</command>.
+ For answers received from the network (<command>response</command>)
+ the default is <command>ignore</command>.
+ </para>
+ <para>
+ The rules for legal hostnames and mail domains are derived
+ from RFC 952 and RFC 821 as modified by RFC 1123.
+ </para>
+ <para><command>check-names</command>
applies to the owner names of A, AAAA and MX records.
It also applies to the domain names in the RDATA of NS, SOA,
MX, and SRV records.
It also applies to the RDATA of PTR records where the owner
name indicated that it is a reverse lookup of a hostname
(the owner name ends in IN-ADDR.ARPA, IP6.ARPA, or IP6.INT).
- </para>
- </listitem>
- </varlistentry>
+ </para>
+ </listitem>
+ </varlistentry>
<varlistentry>
<term><command>check-dup-records</command></term>
@@ -6510,20 +6528,20 @@ options {
</listitem>
</varlistentry>
- <varlistentry>
- <term><command>check-wildcard</command></term>
- <listitem>
- <para>
- This option is used to check for non-terminal wildcards.
- The use of non-terminal wildcards is almost always as a
- result of a failure
- to understand the wildcard matching algorithm (RFC 1034).
- This option
- affects master zones. The default (<command>yes</command>) is to check
- for non-terminal wildcards and issue a warning.
- </para>
- </listitem>
- </varlistentry>
+ <varlistentry>
+ <term><command>check-wildcard</command></term>
+ <listitem>
+ <para>
+ This option is used to check for non-terminal wildcards.
+ The use of non-terminal wildcards is almost always as a
+ result of a failure
+ to understand the wildcard matching algorithm (RFC 1034).
+ This option
+ affects master zones. The default (<command>yes</command>) is to check
+ for non-terminal wildcards and issue a warning.
+ </para>
+ </listitem>
+ </varlistentry>
<varlistentry>
<term><command>check-integrity</command></term>
@@ -6539,13 +6557,16 @@ options {
For NS records only names below top of zone are
checked (for out-of-zone names and glue consistency
checks use <command>named-checkzone</command>).
- The default is <command>yes</command>.
+ The default is <command>yes</command>.
</para>
<para>
- Check that the two forms of Sender Policy Framework
- records (TXT records starting with "v=spf1" and SPF) either
- both exist or both don't exist. Warnings are
- emitted it they don't and be suppressed with
+ The use of the SPF record for publishing Sender
+ Policy Framework is deprecated as the migration
+ from using TXT records to SPF records was abandoned.
+ Enabling this option also checks that a TXT Sender
+ Policy Framework record exists (starts with "v=spf1")
+ if there is an SPF record. Warnings are emitted if the
+ TXT record does not exist and can be suppressed with
<command>check-spf</command>.
</para>
</listitem>
@@ -6587,11 +6608,11 @@ options {
<term><command>check-spf</command></term>
<listitem>
<para>
- When performing integrity checks, check that the
- two forms of Sender Policy Framwork records (TXT
- records starting with "v=spf1" and SPF) both exist
- or both don't exist and issue a warning if not
- met. The default is <command>warn</command>.
+ If <command>check-integrity</command> is set then
+ check that there is a TXT Sender Policy Framework
+ record present (starts with "v=spf1") if there is an
+ SPF record present. The default is
+ <command>warn</command>.
</para>
</listitem>
</varlistentry>
@@ -6599,52 +6620,52 @@ options {
<varlistentry>
<term><command>zero-no-soa-ttl</command></term>
<listitem>
- <para>
+ <para>
When returning authoritative negative responses to
SOA queries set the TTL of the SOA record returned in
the authority section to zero.
The default is <command>yes</command>.
- </para>
+ </para>
</listitem>
</varlistentry>
<varlistentry>
<term><command>zero-no-soa-ttl-cache</command></term>
<listitem>
- <para>
+ <para>
When caching a negative response to a SOA query
set the TTL to zero.
The default is <command>no</command>.
- </para>
+ </para>
</listitem>
</varlistentry>
<varlistentry>
<term><command>update-check-ksk</command></term>
<listitem>
- <para>
- When set to the default value of <literal>yes</literal>,
- check the KSK bit in each key to determine how the key
- should be used when generating RRSIGs for a secure zone.
- </para>
- <para>
- Ordinarily, zone-signing keys (that is, keys without the
- KSK bit set) are used to sign the entire zone, while
- key-signing keys (keys with the KSK bit set) are only
- used to sign the DNSKEY RRset at the zone apex.
- However, if this option is set to <literal>no</literal>,
- then the KSK bit is ignored; KSKs are treated as if they
- were ZSKs and are used to sign the entire zone. This is
- similar to the <command>dnssec-signzone -z</command>
- command line option.
- </para>
- <para>
- When this option is set to <literal>yes</literal>, there
- must be at least two active keys for every algorithm
- represented in the DNSKEY RRset: at least one KSK and one
- ZSK per algorithm. If there is any algorithm for which
- this requirement is not met, this option will be ignored
- for that algorithm.
+ <para>
+ When set to the default value of <literal>yes</literal>,
+ check the KSK bit in each key to determine how the key
+ should be used when generating RRSIGs for a secure zone.
+ </para>
+ <para>
+ Ordinarily, zone-signing keys (that is, keys without the
+ KSK bit set) are used to sign the entire zone, while
+ key-signing keys (keys with the KSK bit set) are only
+ used to sign the DNSKEY RRset at the zone apex.
+ However, if this option is set to <literal>no</literal>,
+ then the KSK bit is ignored; KSKs are treated as if they
+ were ZSKs and are used to sign the entire zone. This is
+ similar to the <command>dnssec-signzone -z</command>
+ command line option.
+ </para>
+ <para>
+ When this option is set to <literal>yes</literal>, there
+ must be at least two active keys for every algorithm
+ represented in the DNSKEY RRset: at least one KSK and one
+ ZSK per algorithm. If there is any algorithm for which
+ this requirement is not met, this option will be ignored
+ for that algorithm.
</para>
</listitem>
</varlistentry>
@@ -6652,20 +6673,20 @@ options {
<varlistentry>
<term><command>dnssec-dnskey-kskonly</command></term>
<listitem>
- <para>
- When this option and <command>update-check-ksk</command>
- are both set to <literal>yes</literal>, only key-signing
- keys (that is, keys with the KSK bit set) will be used
- to sign the DNSKEY RRset at the zone apex. Zone-signing
- keys (keys without the KSK bit set) will be used to sign
- the remainder of the zone, but not the DNSKEY RRset.
- This is similar to the
- <command>dnssec-signzone -x</command> command line option.
+ <para>
+ When this option and <command>update-check-ksk</command>
+ are both set to <literal>yes</literal>, only key-signing
+ keys (that is, keys with the KSK bit set) will be used
+ to sign the DNSKEY RRset at the zone apex. Zone-signing
+ keys (keys without the KSK bit set) will be used to sign
+ the remainder of the zone, but not the DNSKEY RRset.
+ This is similar to the
+ <command>dnssec-signzone -x</command> command line option.
</para>
<para>
The default is <command>no</command>. If
- <command>update-check-ksk</command> is set to
- <literal>no</literal>, this option is ignored.
+ <command>update-check-ksk</command> is set to
+ <literal>no</literal>, this option is ignored.
</para>
</listitem>
</varlistentry>
@@ -6673,19 +6694,19 @@ options {
<varlistentry>
<term><command>dnssec-loadkeys-interval</command></term>
<listitem>
- <para>
- When a zone is configured with <command>auto-dnssec
- maintain;</command> its key repository must be checked
- periodically to see if any new keys have been added
- or any existing keys' timing metadata has been updated
- (see <xref linkend="man.dnssec-keygen"/> and
- <xref linkend="man.dnssec-settime"/>). The
- <command>dnssec-loadkeys-interval</command> option
- sets the frequency of automatic repository checks, in
- minutes. The default is <literal>60</literal> (1 hour),
- the minimum is <literal>1</literal> (1 minute), and the
- maximum is <literal>1440</literal> (24 hours); any higher
- value is silently reduced.
+ <para>
+ When a zone is configured with <command>auto-dnssec
+ maintain;</command> its key repository must be checked
+ periodically to see if any new keys have been added
+ or any existing keys' timing metadata has been updated
+ (see <xref linkend="man.dnssec-keygen"/> and
+ <xref linkend="man.dnssec-settime"/>). The
+ <command>dnssec-loadkeys-interval</command> option
+ sets the frequency of automatic repository checks, in
+ minutes. The default is <literal>60</literal> (1 hour),
+ the minimum is <literal>1</literal> (1 minute), and the
+ maximum is <literal>1440</literal> (24 hours); any higher
+ value is silently reduced.
</para>
</listitem>
</varlistentry>
@@ -6693,7 +6714,7 @@ options {
<varlistentry>
<term><command>try-tcp-refresh</command></term>
<listitem>
- <para>
+ <para>
Try to refresh the zone using TCP if UDP queries fail.
For BIND 8 compatibility, the default is
<command>yes</command>.
@@ -6704,148 +6725,148 @@ options {
<varlistentry>
<term><command>dnssec-secure-to-insecure</command></term>
<listitem>
- <para>
+ <para>
Allow a dynamic zone to transition from secure to
- insecure (i.e., signed to unsigned) by deleting all
- of the DNSKEY records. The default is <command>no</command>.
- If set to <command>yes</command>, and if the DNSKEY RRset
- at the zone apex is deleted, all RRSIG and NSEC records
- will be removed from the zone as well.
- </para>
- <para>
- If the zone uses NSEC3, then it is also necessary to
- delete the NSEC3PARAM RRset from the zone apex; this will
- cause the removal of all corresponding NSEC3 records.
- (It is expected that this requirement will be eliminated
- in a future release.)
- </para>
- <para>
- Note that if a zone has been configured with
- <command>auto-dnssec maintain</command> and the
- private keys remain accessible in the key repository,
- then the zone will be automatically signed again the
- next time <command>named</command> is started.
+ insecure (i.e., signed to unsigned) by deleting all
+ of the DNSKEY records. The default is <command>no</command>.
+ If set to <command>yes</command>, and if the DNSKEY RRset
+ at the zone apex is deleted, all RRSIG and NSEC records
+ will be removed from the zone as well.
+ </para>
+ <para>
+ If the zone uses NSEC3, then it is also necessary to
+ delete the NSEC3PARAM RRset from the zone apex; this will
+ cause the removal of all corresponding NSEC3 records.
+ (It is expected that this requirement will be eliminated
+ in a future release.)
+ </para>
+ <para>
+ Note that if a zone has been configured with
+ <command>auto-dnssec maintain</command> and the
+ private keys remain accessible in the key repository,
+ then the zone will be automatically signed again the
+ next time <command>named</command> is started.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ </variablelist>
+
+ </sect3>
+
+ <sect3>
+ <title>Forwarding</title>
+ <para>
+ The forwarding facility can be used to create a large site-wide
+ cache on a few servers, reducing traffic over links to external
+ name servers. It can also be used to allow queries by servers that
+ do not have direct access to the Internet, but wish to look up
+ exterior
+ names anyway. Forwarding occurs only on those queries for which
+ the server is not authoritative and does not have the answer in
+ its cache.
+ </para>
+
+ <variablelist>
+ <varlistentry>
+ <term><command>forward</command></term>
+ <listitem>
+ <para>
+ This option is only meaningful if the
+ forwarders list is not empty. A value of <varname>first</varname>,
+ the default, causes the server to query the forwarders
+ first &mdash; and
+ if that doesn't answer the question, the server will then
+ look for
+ the answer itself. If <varname>only</varname> is
+ specified, the
+ server will only query the forwarders.
</para>
</listitem>
</varlistentry>
- </variablelist>
-
- </sect3>
-
- <sect3>
- <title>Forwarding</title>
- <para>
- The forwarding facility can be used to create a large site-wide
- cache on a few servers, reducing traffic over links to external
- name servers. It can also be used to allow queries by servers that
- do not have direct access to the Internet, but wish to look up
- exterior
- names anyway. Forwarding occurs only on those queries for which
- the server is not authoritative and does not have the answer in
- its cache.
- </para>
-
- <variablelist>
- <varlistentry>
- <term><command>forward</command></term>
- <listitem>
- <para>
- This option is only meaningful if the
- forwarders list is not empty. A value of <varname>first</varname>,
- the default, causes the server to query the forwarders
- first &mdash; and
- if that doesn't answer the question, the server will then
- look for
- the answer itself. If <varname>only</varname> is
- specified, the
- server will only query the forwarders.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>forwarders</command></term>
- <listitem>
- <para>
- Specifies the IP addresses to be used
- for forwarding. The default is the empty list (no
- forwarding).
- </para>
- </listitem>
- </varlistentry>
-
- </variablelist>
-
- <para>
- Forwarding can also be configured on a per-domain basis, allowing
- for the global forwarding options to be overridden in a variety
- of ways. You can set particular domains to use different
- forwarders,
- or have a different <command>forward only/first</command> behavior,
- or not forward at all, see <xref linkend="zone_statement_grammar"/>.
- </para>
- </sect3>
-
- <sect3>
- <title>Dual-stack Servers</title>
- <para>
- Dual-stack servers are used as servers of last resort to work
- around
- problems in reachability due the lack of support for either IPv4
- or IPv6
- on the host machine.
- </para>
-
- <variablelist>
- <varlistentry>
- <term><command>dual-stack-servers</command></term>
- <listitem>
- <para>
- Specifies host names or addresses of machines with access to
- both IPv4 and IPv6 transports. If a hostname is used, the
- server must be able
- to resolve the name using only the transport it has. If the
- machine is dual
- stacked, then the <command>dual-stack-servers</command> have no effect unless
- access to a transport has been disabled on the command line
- (e.g. <command>named -4</command>).
- </para>
- </listitem>
- </varlistentry>
- </variablelist>
- </sect3>
-
- <sect3 id="access_control">
- <title>Access Control</title>
-
- <para>
- Access to the server can be restricted based on the IP address
- of the requesting system. See <xref linkend="address_match_lists"/> for
- details on how to specify IP address lists.
- </para>
-
- <variablelist>
-
- <varlistentry>
- <term><command>allow-notify</command></term>
- <listitem>
- <para>
- Specifies which hosts are allowed to
- notify this server, a slave, of zone changes in addition
- to the zone masters.
- <command>allow-notify</command> may also be
- specified in the
- <command>zone</command> statement, in which case
- it overrides the
- <command>options allow-notify</command>
- statement. It is only meaningful
- for a slave zone. If not specified, the default is to
- process notify messages
- only from a zone's master.
- </para>
- </listitem>
- </varlistentry>
+ <varlistentry>
+ <term><command>forwarders</command></term>
+ <listitem>
+ <para>
+ Specifies the IP addresses to be used
+ for forwarding. The default is the empty list (no
+ forwarding).
+ </para>
+ </listitem>
+ </varlistentry>
+
+ </variablelist>
+
+ <para>
+ Forwarding can also be configured on a per-domain basis, allowing
+ for the global forwarding options to be overridden in a variety
+ of ways. You can set particular domains to use different
+ forwarders,
+ or have a different <command>forward only/first</command> behavior,
+ or not forward at all, see <xref linkend="zone_statement_grammar"/>.
+ </para>
+ </sect3>
+
+ <sect3>
+ <title>Dual-stack Servers</title>
+ <para>
+ Dual-stack servers are used as servers of last resort to work
+ around
+ problems in reachability due the lack of support for either IPv4
+ or IPv6
+ on the host machine.
+ </para>
+
+ <variablelist>
+ <varlistentry>
+ <term><command>dual-stack-servers</command></term>
+ <listitem>
+ <para>
+ Specifies host names or addresses of machines with access to
+ both IPv4 and IPv6 transports. If a hostname is used, the
+ server must be able
+ to resolve the name using only the transport it has. If the
+ machine is dual
+ stacked, then the <command>dual-stack-servers</command> have no effect unless
+ access to a transport has been disabled on the command line
+ (e.g. <command>named -4</command>).
+ </para>
+ </listitem>
+ </varlistentry>
+ </variablelist>
+ </sect3>
+
+ <sect3 id="access_control">
+ <title>Access Control</title>
+
+ <para>
+ Access to the server can be restricted based on the IP address
+ of the requesting system. See <xref linkend="address_match_lists"/> for
+ details on how to specify IP address lists.
+ </para>
+
+ <variablelist>
+
+ <varlistentry>
+ <term><command>allow-notify</command></term>
+ <listitem>
+ <para>
+ Specifies which hosts are allowed to
+ notify this server, a slave, of zone changes in addition
+ to the zone masters.
+ <command>allow-notify</command> may also be
+ specified in the
+ <command>zone</command> statement, in which case
+ it overrides the
+ <command>options allow-notify</command>
+ statement. It is only meaningful
+ for a slave zone. If not specified, the default is to
+ process notify messages
+ only from a zone's master.
+ </para>
+ </listitem>
+ </varlistentry>
<varlistentry>
<term><command>allow-query</command></term>
@@ -6879,10 +6900,10 @@ options {
necessarily knowing the internal network's addresses.
</para>
<para>
- Note that <command>allow-query-on</command> is only
- checked for queries that are permitted by
- <command>allow-query</command>. A query must be
- allowed by both ACLs, or it will be refused.
+ Note that <command>allow-query-on</command> is only
+ checked for queries that are permitted by
+ <command>allow-query</command>. A query must be
+ allowed by both ACLs, or it will be refused.
</para>
<para>
<command>allow-query-on</command> may
@@ -6932,9 +6953,9 @@ options {
</listitem>
</varlistentry>
- <varlistentry>
- <term><command>allow-recursion</command></term>
- <listitem>
+ <varlistentry>
+ <term><command>allow-recursion</command></term>
+ <listitem>
<para>
Specifies which hosts are allowed to make recursive
queries through this server. If
@@ -6945,277 +6966,334 @@ options {
(<command>localnets;</command>
<command>localhost;</command>) is used.
</para>
- </listitem>
- </varlistentry>
+ </listitem>
+ </varlistentry>
- <varlistentry>
- <term><command>allow-recursion-on</command></term>
- <listitem>
- <para>
+ <varlistentry>
+ <term><command>allow-recursion-on</command></term>
+ <listitem>
+ <para>
Specifies which local addresses can accept recursive
queries. If not specified, the default is to allow
recursive queries on all addresses.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>allow-update</command></term>
- <listitem>
- <para>
- Specifies which hosts are allowed to
- submit Dynamic DNS updates for master zones. The default is
- to deny
- updates from all hosts. Note that allowing updates based
- on the requestor's IP address is insecure; see
- <xref linkend="dynamic_update_security"/> for details.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>allow-update-forwarding</command></term>
- <listitem>
- <para>
- Specifies which hosts are allowed to
- submit Dynamic DNS updates to slave zones to be forwarded to
- the
- master. The default is <userinput>{ none; }</userinput>,
- which
- means that no update forwarding will be performed. To
- enable
- update forwarding, specify
- <userinput>allow-update-forwarding { any; };</userinput>.
- Specifying values other than <userinput>{ none; }</userinput> or
- <userinput>{ any; }</userinput> is usually
- counterproductive, since
- the responsibility for update access control should rest
- with the
- master server, not the slaves.
- </para>
- <para>
- Note that enabling the update forwarding feature on a slave
- server
- may expose master servers relying on insecure IP address
- based
- access control to attacks; see <xref linkend="dynamic_update_security"/>
- for more details.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>allow-v6-synthesis</command></term>
- <listitem>
- <para>
- This option was introduced for the smooth transition from
- AAAA
- to A6 and from "nibble labels" to binary labels.
- However, since both A6 and binary labels were then
- deprecated,
- this option was also deprecated.
- It is now ignored with some warning messages.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>allow-transfer</command></term>
- <listitem>
- <para>
- Specifies which hosts are allowed to
- receive zone transfers from the server. <command>allow-transfer</command> may
- also be specified in the <command>zone</command>
- statement, in which
- case it overrides the <command>options allow-transfer</command> statement.
- If not specified, the default is to allow transfers to all
- hosts.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>blackhole</command></term>
- <listitem>
- <para>
- Specifies a list of addresses that the
- server will not accept queries from or use to resolve a
- query. Queries
- from these addresses will not be responded to. The default
- is <userinput>none</userinput>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>filter-aaaa</command></term>
- <listitem>
- <para>
- Specifies a list of addresses to which
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>allow-update</command></term>
+ <listitem>
+ <para>
+ Specifies which hosts are allowed to
+ submit Dynamic DNS updates for master zones. The default is
+ to deny
+ updates from all hosts. Note that allowing updates based
+ on the requestor's IP address is insecure; see
+ <xref linkend="dynamic_update_security"/> for details.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>allow-update-forwarding</command></term>
+ <listitem>
+ <para>
+ Specifies which hosts are allowed to
+ submit Dynamic DNS updates to slave zones to be forwarded to
+ the
+ master. The default is <userinput>{ none; }</userinput>,
+ which
+ means that no update forwarding will be performed. To
+ enable
+ update forwarding, specify
+ <userinput>allow-update-forwarding { any; };</userinput>.
+ Specifying values other than <userinput>{ none; }</userinput> or
+ <userinput>{ any; }</userinput> is usually
+ counterproductive, since
+ the responsibility for update access control should rest
+ with the
+ master server, not the slaves.
+ </para>
+ <para>
+ Note that enabling the update forwarding feature on a slave
+ server
+ may expose master servers relying on insecure IP address
+ based
+ access control to attacks; see <xref linkend="dynamic_update_security"/>
+ for more details.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>allow-v6-synthesis</command></term>
+ <listitem>
+ <para>
+ This option was introduced for the smooth transition from
+ AAAA
+ to A6 and from "nibble labels" to binary labels.
+ However, since both A6 and binary labels were then
+ deprecated,
+ this option was also deprecated.
+ It is now ignored with some warning messages.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>allow-transfer</command></term>
+ <listitem>
+ <para>
+ Specifies which hosts are allowed to
+ receive zone transfers from the server. <command>allow-transfer</command> may
+ also be specified in the <command>zone</command>
+ statement, in which
+ case it overrides the <command>options allow-transfer</command> statement.
+ If not specified, the default is to allow transfers to all
+ hosts.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>blackhole</command></term>
+ <listitem>
+ <para>
+ Specifies a list of addresses that the
+ server will not accept queries from or use to resolve a
+ query. Queries
+ from these addresses will not be responded to. The default
+ is <userinput>none</userinput>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>filter-aaaa</command></term>
+ <listitem>
+ <para>
+ Specifies a list of addresses to which
<command>filter-aaaa-on-v4</command>
- is applies. The default is <userinput>any</userinput>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>resolver-query-timeout</command></term>
- <listitem>
- <para>
+ is applies. The default is <userinput>any</userinput>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>no-case-compress</command></term> <listitem>
+ <para>
+ Specifies a list of addresses which require responses
+ to use case-insensitive compression. This ACL can be
+ used when <command>named</command> needs to work with
+ clients that do not comply with the requirement in RFC
+ 1034 to use case-insensitive name comparisons when
+ checking for matching domain names.
+ </para>
+ <para>
+ If left undefined, the ACL defaults to
+ <command>none</command>: case-insensitive compression
+ will be used for all clients. If the ACL is defined and
+ matches a client, then case will be ignored when
+ compressing domain names in DNS responses sent to that
+ client.
+ </para>
+ <para>
+ This can result in slightly smaller responses: if
+ a response contains the names "example.com" and
+ "example.COM", case-insensitive compression would treat
+ the second one as a duplicate. It also ensures
+ that the case of the query name exactly matches the
+ case of the owner names of returned records, rather
+ than matching the case of the records entered in
+ the zone file. This allows responses to exactly
+ match the query, which is required by some clients
+ due to incorrect use of case-sensitive comparisons.
+ </para>
+ <para>
+ Case-insensitive compression is <emphasis>always</emphasis>
+ used in AXFR and IXFR responses, regardless of whether
+ the client matches this ACL.
+ </para>
+ <para>
+ There are circumstances in which <command>named</command>
+ will not preserve the case of owner names of records:
+ if a zone file defines records of different types with
+ the same name, but the capitalization of the name is
+ different (e.g., "www.example.com/A" and
+ "WWW.EXAMPLE.COM/AAAA"), then all responses for that
+ name will use the <emphasis>first</emphasis> version
+ of the name that was used in the zone file. This
+ limitation may be addressed in a future release. However,
+ domain names specified in the rdata of resource records
+ (i.e., records of type NS, MX, CNAME, etc) will always
+ have their case preserved unless the client matches this
+ ACL.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>resolver-query-timeout</command></term>
+ <listitem>
+ <para>
The amount of time the resolver will spend attempting
to resolve a recursive query before failing. The default
and minimum is <literal>10</literal> and the maximum is
<literal>30</literal>. Setting it to <literal>0</literal>
will result in the default being used.
- </para>
- </listitem>
- </varlistentry>
- </variablelist>
-
- </sect3>
-
- <sect3>
- <title>Interfaces</title>
- <para>
- The interfaces and ports that the server will answer queries
- from may be specified using the <command>listen-on</command> option. <command>listen-on</command> takes
- an optional port and an <varname>address_match_list</varname>.
- The server will listen on all interfaces allowed by the address
- match list. If a port is not specified, port 53 will be used.
- </para>
- <para>
- Multiple <command>listen-on</command> statements are
- allowed.
- For example,
- </para>
+ </para>
+ </listitem>
+ </varlistentry>
+ </variablelist>
+
+ </sect3>
+
+ <sect3>
+ <title>Interfaces</title>
+ <para>
+ The interfaces and ports that the server will answer queries
+ from may be specified using the <command>listen-on</command> option. <command>listen-on</command> takes
+ an optional port and an <varname>address_match_list</varname>
+ of IPv4 addresses. (IPv6 addresses are ignored, with a
+ logged warning.)
+ The server will listen on all interfaces allowed by the address
+ match list. If a port is not specified, port 53 will be used.
+ </para>
+ <para>
+ Multiple <command>listen-on</command> statements are
+ allowed.
+ For example,
+ </para>
<programlisting>listen-on { 5.6.7.8; };
listen-on port 1234 { !1.2.3.4; 1.2/16; };
</programlisting>
- <para>
- will enable the name server on port 53 for the IP address
- 5.6.7.8, and on port 1234 of an address on the machine in net
- 1.2 that is not 1.2.3.4.
- </para>
-
- <para>
- If no <command>listen-on</command> is specified, the
- server will listen on port 53 on all IPv4 interfaces.
- </para>
-
- <para>
- The <command>listen-on-v6</command> option is used to
- specify the interfaces and the ports on which the server will
- listen
- for incoming queries sent using IPv6.
- </para>
-
- <para>
- When <programlisting>{ any; }</programlisting> is
- specified
- as the <varname>address_match_list</varname> for the
- <command>listen-on-v6</command> option,
- the server does not bind a separate socket to each IPv6 interface
- address as it does for IPv4 if the operating system has enough API
- support for IPv6 (specifically if it conforms to RFC 3493 and RFC
- 3542).
- Instead, it listens on the IPv6 wildcard address.
- If the system only has incomplete API support for IPv6, however,
- the behavior is the same as that for IPv4.
- </para>
-
- <para>
- A list of particular IPv6 addresses can also be specified, in
- which case
- the server listens on a separate socket for each specified
- address,
- regardless of whether the desired API is supported by the system.
- </para>
-
- <para>
- Multiple <command>listen-on-v6</command> options can
- be used.
- For example,
- </para>
+ <para>
+ will enable the name server on port 53 for the IP address
+ 5.6.7.8, and on port 1234 of an address on the machine in net
+ 1.2 that is not 1.2.3.4.
+ </para>
+
+ <para>
+ If no <command>listen-on</command> is specified, the
+ server will listen on port 53 on all IPv4 interfaces.
+ </para>
+
+ <para>
+ The <command>listen-on-v6</command> option is used to
+ specify the interfaces and the ports on which the server will
+ listen
+ for incoming queries sent using IPv6.
+ </para>
+
+ <para>
+ When <programlisting>{ any; }</programlisting> is
+ specified
+ as the <varname>address_match_list</varname> for the
+ <command>listen-on-v6</command> option,
+ the server does not bind a separate socket to each IPv6 interface
+ address as it does for IPv4 if the operating system has enough API
+ support for IPv6 (specifically if it conforms to RFC 3493 and RFC
+ 3542).
+ Instead, it listens on the IPv6 wildcard address.
+ If the system only has incomplete API support for IPv6, however,
+ the behavior is the same as that for IPv4.
+ </para>
+
+ <para>
+ A list of particular IPv6 addresses can also be specified, in
+ which case
+ the server listens on a separate socket for each specified
+ address,
+ regardless of whether the desired API is supported by the system.
+ IPv4 addresses specified in <command>listen-on-v6</command>
+ will be ignored, with a logged warning.
+ </para>
+
+ <para>
+ Multiple <command>listen-on-v6</command> options can
+ be used.
+ For example,
+ </para>
<programlisting>listen-on-v6 { any; };
listen-on-v6 port 1234 { !2001:db8::/32; any; };
</programlisting>
- <para>
- will enable the name server on port 53 for any IPv6 addresses
- (with a single wildcard socket),
- and on port 1234 of IPv6 addresses that is not in the prefix
- 2001:db8::/32 (with separate sockets for each matched address.)
- </para>
+ <para>
+ will enable the name server on port 53 for any IPv6 addresses
+ (with a single wildcard socket),
+ and on port 1234 of IPv6 addresses that is not in the prefix
+ 2001:db8::/32 (with separate sockets for each matched address.)
+ </para>
- <para>
- To make the server not listen on any IPv6 address, use
- </para>
+ <para>
+ To make the server not listen on any IPv6 address, use
+ </para>
<programlisting>listen-on-v6 { none; };
</programlisting>
- <para>
- If no <command>listen-on-v6</command> option is
- specified, the server will not listen on any IPv6 address
+ <para>
+ If no <command>listen-on-v6</command> option is
+ specified, the server will not listen on any IPv6 address
unless <command>-6</command> is specified when <command>named</command> is
invoked. If <command>-6</command> is specified then
<command>named</command> will listen on port 53 on all IPv6 interfaces by default.
- </para>
- </sect3>
+ </para>
+ </sect3>
- <sect3 id="query_address">
- <title>Query Address</title>
- <para>
- If the server doesn't know the answer to a question, it will
- query other name servers. <command>query-source</command> specifies
- the address and port used for such queries. For queries sent over
- IPv6, there is a separate <command>query-source-v6</command> option.
- If <command>address</command> is <command>*</command> (asterisk) or is omitted,
- a wildcard IP address (<command>INADDR_ANY</command>)
- will be used.
+ <sect3 id="query_address">
+ <title>Query Address</title>
+ <para>
+ If the server doesn't know the answer to a question, it will
+ query other name servers. <command>query-source</command> specifies
+ the address and port used for such queries. For queries sent over
+ IPv6, there is a separate <command>query-source-v6</command> option.
+ If <command>address</command> is <command>*</command> (asterisk) or is omitted,
+ a wildcard IP address (<command>INADDR_ANY</command>)
+ will be used.
</para>
<para>
- If <command>port</command> is <command>*</command> or is omitted,
+ If <command>port</command> is <command>*</command> or is omitted,
a random port number from a pre-configured
range is picked up and will be used for each query.
The port range(s) is that specified in
the <command>use-v4-udp-ports</command> (for IPv4)
- and <command>use-v6-udp-ports</command> (for IPv6)
+ and <command>use-v6-udp-ports</command> (for IPv6)
options, excluding the ranges specified in
the <command>avoid-v4-udp-ports</command>
- and <command>avoid-v6-udp-ports</command> options, respectively.
+ and <command>avoid-v6-udp-ports</command> options, respectively.
</para>
- <para>
+ <para>
The defaults of the <command>query-source</command> and
<command>query-source-v6</command> options
are:
- </para>
+ </para>
<programlisting>query-source address * port *;
query-source-v6 address * port *;
</programlisting>
- <para>
+ <para>
If <command>use-v4-udp-ports</command> or
- <command>use-v6-udp-ports</command> is unspecified,
+ <command>use-v6-udp-ports</command> is unspecified,
<command>named</command> will check if the operating
system provides a programming interface to retrieve the
system's default range for ephemeral ports.
If such an interface is available,
<command>named</command> will use the corresponding system
default range; otherwise, it will use its own defaults:
- </para>
+ </para>
<programlisting>use-v4-udp-ports { range 1024 65535; };
use-v6-udp-ports { range 1024 65535; };
</programlisting>
- <para>
+ <para>
Note: make sure the ranges be sufficiently large for
security. A desirable size depends on various parameters,
but we generally recommend it contain at least 16384 ports
@@ -7227,10 +7305,10 @@ use-v6-udp-ports { range 1024 65535; };
is reloaded.
It is encouraged to
configure <command>use-v4-udp-ports</command> and
- <command>use-v6-udp-ports</command> explicitly so that the
- ranges are sufficiently large and are reasonably
- independent from the ranges used by other applications.
- </para>
+ <command>use-v6-udp-ports</command> explicitly so that the
+ ranges are sufficiently large and are reasonably
+ independent from the ranges used by other applications.
+ </para>
<para>
Note: the operational configuration
@@ -7245,11 +7323,11 @@ use-v6-udp-ports { range 1024 65535; };
that can be safely used in the expected operational environment.
</para>
- <para>
+ <para>
The defaults of the <command>avoid-v4-udp-ports</command> and
<command>avoid-v6-udp-ports</command> options
are:
- </para>
+ </para>
<programlisting>avoid-v4-udp-ports {};
avoid-v6-udp-ports {};
@@ -7262,161 +7340,161 @@ avoid-v6-udp-ports {};
option is now obsolete because reusing the same ports in
the pool may not be sufficiently secure.
For the same reason, it is generally strongly discouraged to
- specify a particular port for the
+ specify a particular port for the
<command>query-source</command> or
<command>query-source-v6</command> options;
it implicitly disables the use of randomized port numbers.
- </para>
+ </para>
- <variablelist>
- <varlistentry>
- <term><command>use-queryport-pool</command></term>
- <listitem>
- <para>
+ <variablelist>
+ <varlistentry>
+ <term><command>use-queryport-pool</command></term>
+ <listitem>
+ <para>
This option is obsolete.
</para>
</listitem>
</varlistentry>
- <varlistentry>
- <term><command>queryport-pool-ports</command></term>
- <listitem>
- <para>
+ <varlistentry>
+ <term><command>queryport-pool-ports</command></term>
+ <listitem>
+ <para>
This option is obsolete.
</para>
</listitem>
</varlistentry>
- <varlistentry>
- <term><command>queryport-pool-updateinterval</command></term>
- <listitem>
- <para>
+ <varlistentry>
+ <term><command>queryport-pool-updateinterval</command></term>
+ <listitem>
+ <para>
This option is obsolete.
</para>
</listitem>
</varlistentry>
- </variablelist>
- <note>
- <para>
- The address specified in the <command>query-source</command> option
- is used for both UDP and TCP queries, but the port applies only
- to UDP queries. TCP queries always use a random
- unprivileged port.
- </para>
- </note>
+ </variablelist>
+ <note>
+ <para>
+ The address specified in the <command>query-source</command> option
+ is used for both UDP and TCP queries, but the port applies only
+ to UDP queries. TCP queries always use a random
+ unprivileged port.
+ </para>
+ </note>
<note>
<para>
Solaris 2.5.1 and earlier does not support setting the source
address for TCP sockets.
</para>
</note>
- <note>
- <para>
- See also <command>transfer-source</command> and
- <command>notify-source</command>.
- </para>
- </note>
- </sect3>
-
- <sect3 id="zone_transfers">
- <title>Zone Transfers</title>
- <para>
- <acronym>BIND</acronym> has mechanisms in place to
- facilitate zone transfers
- and set limits on the amount of load that transfers place on the
- system. The following options apply to zone transfers.
- </para>
-
- <variablelist>
-
- <varlistentry>
- <term><command>also-notify</command></term>
- <listitem>
- <para>
- Defines a global list of IP addresses of name servers
- that are also sent NOTIFY messages whenever a fresh copy of
- the
- zone is loaded, in addition to the servers listed in the
- zone's NS records.
- This helps to ensure that copies of the zones will
- quickly converge on stealth servers.
- Optionally, a port may be specified with each
- <command>also-notify</command> address to send
- the notify messages to a port other than the
- default of 53.
- An optional TSIG key can also be specified with each
- address to cause the notify messages to be signed; this
- can be useful when sending notifies to multiple views.
- In place of explicit addresses, one or more named
- <command>masters</command> lists can be used.
- </para>
- <para>
- If an <command>also-notify</command> list
- is given in a <command>zone</command> statement,
- it will override
- the <command>options also-notify</command>
- statement. When a <command>zone notify</command>
- statement
- is set to <command>no</command>, the IP
- addresses in the global <command>also-notify</command> list will
- not be sent NOTIFY messages for that zone. The default is
- the empty
- list (no global notification list).
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>max-transfer-time-in</command></term>
- <listitem>
- <para>
- Inbound zone transfers running longer than
- this many minutes will be terminated. The default is 120
- minutes
- (2 hours). The maximum value is 28 days (40320 minutes).
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>max-transfer-idle-in</command></term>
- <listitem>
- <para>
- Inbound zone transfers making no progress
- in this many minutes will be terminated. The default is 60
- minutes
- (1 hour). The maximum value is 28 days (40320 minutes).
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>max-transfer-time-out</command></term>
- <listitem>
- <para>
- Outbound zone transfers running longer than
- this many minutes will be terminated. The default is 120
- minutes
- (2 hours). The maximum value is 28 days (40320 minutes).
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>max-transfer-idle-out</command></term>
- <listitem>
- <para>
- Outbound zone transfers making no progress
- in this many minutes will be terminated. The default is 60
- minutes (1
- hour). The maximum value is 28 days (40320 minutes).
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>serial-query-rate</command></term>
+ <note>
+ <para>
+ See also <command>transfer-source</command> and
+ <command>notify-source</command>.
+ </para>
+ </note>
+ </sect3>
+
+ <sect3 id="zone_transfers">
+ <title>Zone Transfers</title>
+ <para>
+ <acronym>BIND</acronym> has mechanisms in place to
+ facilitate zone transfers
+ and set limits on the amount of load that transfers place on the
+ system. The following options apply to zone transfers.
+ </para>
+
+ <variablelist>
+
+ <varlistentry>
+ <term><command>also-notify</command></term>
+ <listitem>
+ <para>
+ Defines a global list of IP addresses of name servers
+ that are also sent NOTIFY messages whenever a fresh copy of
+ the
+ zone is loaded, in addition to the servers listed in the
+ zone's NS records.
+ This helps to ensure that copies of the zones will
+ quickly converge on stealth servers.
+ Optionally, a port may be specified with each
+ <command>also-notify</command> address to send
+ the notify messages to a port other than the
+ default of 53.
+ An optional TSIG key can also be specified with each
+ address to cause the notify messages to be signed; this
+ can be useful when sending notifies to multiple views.
+ In place of explicit addresses, one or more named
+ <command>masters</command> lists can be used.
+ </para>
+ <para>
+ If an <command>also-notify</command> list
+ is given in a <command>zone</command> statement,
+ it will override
+ the <command>options also-notify</command>
+ statement. When a <command>zone notify</command>
+ statement
+ is set to <command>no</command>, the IP
+ addresses in the global <command>also-notify</command> list will
+ not be sent NOTIFY messages for that zone. The default is
+ the empty
+ list (no global notification list).
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>max-transfer-time-in</command></term>
+ <listitem>
+ <para>
+ Inbound zone transfers running longer than
+ this many minutes will be terminated. The default is 120
+ minutes
+ (2 hours). The maximum value is 28 days (40320 minutes).
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>max-transfer-idle-in</command></term>
+ <listitem>
+ <para>
+ Inbound zone transfers making no progress
+ in this many minutes will be terminated. The default is 60
+ minutes
+ (1 hour). The maximum value is 28 days (40320 minutes).
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>max-transfer-time-out</command></term>
+ <listitem>
+ <para>
+ Outbound zone transfers running longer than
+ this many minutes will be terminated. The default is 120
+ minutes
+ (2 hours). The maximum value is 28 days (40320 minutes).
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>max-transfer-idle-out</command></term>
+ <listitem>
+ <para>
+ Outbound zone transfers making no progress
+ in this many minutes will be terminated. The default is 60
+ minutes (1
+ hour). The maximum value is 28 days (40320 minutes).
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>serial-query-rate</command></term>
<listitem>
<para>
Slave servers will periodically query master
@@ -7439,148 +7517,148 @@ avoid-v6-udp-ports {};
</listitem>
</varlistentry>
- <varlistentry>
- <term><command>serial-queries</command></term>
- <listitem>
- <para>
- In BIND 8, the <command>serial-queries</command>
- option
- set the maximum number of concurrent serial number queries
- allowed to be outstanding at any given time.
- BIND 9 does not limit the number of outstanding
- serial queries and ignores the <command>serial-queries</command> option.
- Instead, it limits the rate at which the queries are sent
- as defined using the <command>serial-query-rate</command> option.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>transfer-format</command></term>
- <listitem>
-
- <para>
- Zone transfers can be sent using two different formats,
- <command>one-answer</command> and
+ <varlistentry>
+ <term><command>serial-queries</command></term>
+ <listitem>
+ <para>
+ In BIND 8, the <command>serial-queries</command>
+ option
+ set the maximum number of concurrent serial number queries
+ allowed to be outstanding at any given time.
+ BIND 9 does not limit the number of outstanding
+ serial queries and ignores the <command>serial-queries</command> option.
+ Instead, it limits the rate at which the queries are sent
+ as defined using the <command>serial-query-rate</command> option.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>transfer-format</command></term>
+ <listitem>
+
+ <para>
+ Zone transfers can be sent using two different formats,
+ <command>one-answer</command> and
<command>many-answers</command>.
- The <command>transfer-format</command> option is used
- on the master server to determine which format it sends.
- <command>one-answer</command> uses one DNS message per
- resource record transferred.
- <command>many-answers</command> packs as many resource
+ The <command>transfer-format</command> option is used
+ on the master server to determine which format it sends.
+ <command>one-answer</command> uses one DNS message per
+ resource record transferred.
+ <command>many-answers</command> packs as many resource
records as possible into a message.
<command>many-answers</command> is more efficient, but is
only supported by relatively new slave servers,
- such as <acronym>BIND</acronym> 9, <acronym>BIND</acronym>
+ such as <acronym>BIND</acronym> 9, <acronym>BIND</acronym>
8.x and <acronym>BIND</acronym> 4.9.5 onwards.
- The <command>many-answers</command> format is also supported by
+ The <command>many-answers</command> format is also supported by
recent Microsoft Windows nameservers.
The default is <command>many-answers</command>.
<command>transfer-format</command> may be overridden on a
per-server basis by using the <command>server</command>
statement.
- </para>
-
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>transfers-in</command></term>
- <listitem>
- <para>
- The maximum number of inbound zone transfers
- that can be running concurrently. The default value is <literal>10</literal>.
- Increasing <command>transfers-in</command> may
- speed up the convergence
- of slave zones, but it also may increase the load on the
- local system.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>transfers-out</command></term>
- <listitem>
- <para>
- The maximum number of outbound zone transfers
- that can be running concurrently. Zone transfer requests in
- excess
- of the limit will be refused. The default value is <literal>10</literal>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>transfers-per-ns</command></term>
- <listitem>
- <para>
- The maximum number of inbound zone transfers
- that can be concurrently transferring from a given remote
- name server.
- The default value is <literal>2</literal>.
- Increasing <command>transfers-per-ns</command>
- may
- speed up the convergence of slave zones, but it also may
- increase
- the load on the remote name server. <command>transfers-per-ns</command> may
- be overridden on a per-server basis by using the <command>transfers</command> phrase
- of the <command>server</command> statement.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>transfer-source</command></term>
- <listitem>
- <para><command>transfer-source</command>
+ </para>
+
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>transfers-in</command></term>
+ <listitem>
+ <para>
+ The maximum number of inbound zone transfers
+ that can be running concurrently. The default value is <literal>10</literal>.
+ Increasing <command>transfers-in</command> may
+ speed up the convergence
+ of slave zones, but it also may increase the load on the
+ local system.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>transfers-out</command></term>
+ <listitem>
+ <para>
+ The maximum number of outbound zone transfers
+ that can be running concurrently. Zone transfer requests in
+ excess
+ of the limit will be refused. The default value is <literal>10</literal>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>transfers-per-ns</command></term>
+ <listitem>
+ <para>
+ The maximum number of inbound zone transfers
+ that can be concurrently transferring from a given remote
+ name server.
+ The default value is <literal>2</literal>.
+ Increasing <command>transfers-per-ns</command>
+ may
+ speed up the convergence of slave zones, but it also may
+ increase
+ the load on the remote name server. <command>transfers-per-ns</command> may
+ be overridden on a per-server basis by using the <command>transfers</command> phrase
+ of the <command>server</command> statement.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>transfer-source</command></term>
+ <listitem>
+ <para><command>transfer-source</command>
determines which local address will be bound to IPv4
- TCP connections used to fetch zones transferred
- inbound by the server. It also determines the
- source IPv4 address, and optionally the UDP port,
- used for the refresh queries and forwarded dynamic
- updates. If not set, it defaults to a system
- controlled value which will usually be the address
- of the interface "closest to" the remote end. This
- address must appear in the remote end's
- <command>allow-transfer</command> option for the
- zone being transferred, if one is specified. This
- statement sets the
- <command>transfer-source</command> for all zones,
- but can be overridden on a per-view or per-zone
- basis by including a
- <command>transfer-source</command> statement within
- the <command>view</command> or
- <command>zone</command> block in the configuration
- file.
- </para>
- <note>
- <para>
- Solaris 2.5.1 and earlier does not support setting the
+ TCP connections used to fetch zones transferred
+ inbound by the server. It also determines the
+ source IPv4 address, and optionally the UDP port,
+ used for the refresh queries and forwarded dynamic
+ updates. If not set, it defaults to a system
+ controlled value which will usually be the address
+ of the interface "closest to" the remote end. This
+ address must appear in the remote end's
+ <command>allow-transfer</command> option for the
+ zone being transferred, if one is specified. This
+ statement sets the
+ <command>transfer-source</command> for all zones,
+ but can be overridden on a per-view or per-zone
+ basis by including a
+ <command>transfer-source</command> statement within
+ the <command>view</command> or
+ <command>zone</command> block in the configuration
+ file.
+ </para>
+ <note>
+ <para>
+ Solaris 2.5.1 and earlier does not support setting the
source address for TCP sockets.
- </para>
- </note>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>transfer-source-v6</command></term>
- <listitem>
- <para>
- The same as <command>transfer-source</command>,
- except zone transfers are performed using IPv6.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>alt-transfer-source</command></term>
- <listitem>
- <para>
- An alternate transfer source if the one listed in
- <command>transfer-source</command> fails and
- <command>use-alt-transfer-source</command> is
- set.
- </para>
+ </para>
+ </note>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>transfer-source-v6</command></term>
+ <listitem>
+ <para>
+ The same as <command>transfer-source</command>,
+ except zone transfers are performed using IPv6.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>alt-transfer-source</command></term>
+ <listitem>
+ <para>
+ An alternate transfer source if the one listed in
+ <command>transfer-source</command> fails and
+ <command>use-alt-transfer-source</command> is
+ set.
+ </para>
<note>
If you do not wish the alternate transfer source
to be used, you should set
@@ -7589,77 +7667,77 @@ avoid-v6-udp-ports {};
getting an answer back to the first refresh
query.
</note>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>alt-transfer-source-v6</command></term>
- <listitem>
- <para>
- An alternate transfer source if the one listed in
- <command>transfer-source-v6</command> fails and
- <command>use-alt-transfer-source</command> is
- set.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>use-alt-transfer-source</command></term>
- <listitem>
- <para>
- Use the alternate transfer sources or not. If views are
- specified this defaults to <command>no</command>
- otherwise it defaults to
- <command>yes</command> (for BIND 8
- compatibility).
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>notify-source</command></term>
- <listitem>
- <para><command>notify-source</command>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>alt-transfer-source-v6</command></term>
+ <listitem>
+ <para>
+ An alternate transfer source if the one listed in
+ <command>transfer-source-v6</command> fails and
+ <command>use-alt-transfer-source</command> is
+ set.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>use-alt-transfer-source</command></term>
+ <listitem>
+ <para>
+ Use the alternate transfer sources or not. If views are
+ specified this defaults to <command>no</command>
+ otherwise it defaults to
+ <command>yes</command> (for BIND 8
+ compatibility).
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>notify-source</command></term>
+ <listitem>
+ <para><command>notify-source</command>
determines which local source address, and
- optionally UDP port, will be used to send NOTIFY
- messages. This address must appear in the slave
- server's <command>masters</command> zone clause or
- in an <command>allow-notify</command> clause. This
- statement sets the <command>notify-source</command>
- for all zones, but can be overridden on a per-zone or
- per-view basis by including a
- <command>notify-source</command> statement within
- the <command>zone</command> or
- <command>view</command> block in the configuration
- file.
- </para>
- <note>
- <para>
- Solaris 2.5.1 and earlier does not support setting the
+ optionally UDP port, will be used to send NOTIFY
+ messages. This address must appear in the slave
+ server's <command>masters</command> zone clause or
+ in an <command>allow-notify</command> clause. This
+ statement sets the <command>notify-source</command>
+ for all zones, but can be overridden on a per-zone or
+ per-view basis by including a
+ <command>notify-source</command> statement within
+ the <command>zone</command> or
+ <command>view</command> block in the configuration
+ file.
+ </para>
+ <note>
+ <para>
+ Solaris 2.5.1 and earlier does not support setting the
source address for TCP sockets.
- </para>
- </note>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>notify-source-v6</command></term>
- <listitem>
- <para>
- Like <command>notify-source</command>,
- but applies to notify messages sent to IPv6 addresses.
- </para>
- </listitem>
- </varlistentry>
-
- </variablelist>
-
- </sect3>
-
- <sect3>
- <title>UDP Port Lists</title>
- <para>
+ </para>
+ </note>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>notify-source-v6</command></term>
+ <listitem>
+ <para>
+ Like <command>notify-source</command>,
+ but applies to notify messages sent to IPv6 addresses.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ </variablelist>
+
+ </sect3>
+
+ <sect3>
+ <title>UDP Port Lists</title>
+ <para>
<command>use-v4-udp-ports</command>,
<command>avoid-v4-udp-ports</command>,
<command>use-v6-udp-ports</command>, and
@@ -7669,7 +7747,7 @@ avoid-v6-udp-ports {};
See <xref linkend="query_address"/> about how the
available ports are determined.
For example, with the following configuration
- </para>
+ </para>
<programlisting>
use-v6-udp-ports { range 32768 65535; };
@@ -7686,13 +7764,13 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
<para>
<command>avoid-v4-udp-ports</command> and
<command>avoid-v6-udp-ports</command> can be used
- to prevent <command>named</command> from choosing as its random source port a
- port that is blocked by your firewall or a port that is
- used by other applications;
+ to prevent <command>named</command> from choosing as its random source port a
+ port that is blocked by your firewall or a port that is
+ used by other applications;
if a query went out with a source port blocked by a
- firewall, the
+ firewall, the
answer would not get by the firewall and the name server would
- have to query again.
+ have to query again.
Note: the desired range can also be represented only with
<command>use-v4-udp-ports</command> and
<command>use-v6-udp-ports</command>, and the
@@ -7700,177 +7778,177 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
sense; they are provided for backward compatibility and
to possibly simplify the port specification.
</para>
- </sect3>
-
- <sect3>
- <title>Operating System Resource Limits</title>
-
- <para>
- The server's usage of many system resources can be limited.
- Scaled values are allowed when specifying resource limits. For
- example, <command>1G</command> can be used instead of
- <command>1073741824</command> to specify a limit of
- one
- gigabyte. <command>unlimited</command> requests
- unlimited use, or the
- maximum available amount. <command>default</command>
- uses the limit
- that was in force when the server was started. See the description
- of <command>size_spec</command> in <xref linkend="configuration_file_elements"/>.
- </para>
-
- <para>
- The following options set operating system resource limits for
- the name server process. Some operating systems don't support
- some or
- any of the limits. On such systems, a warning will be issued if
- the
- unsupported limit is used.
- </para>
-
- <variablelist>
-
- <varlistentry>
- <term><command>coresize</command></term>
- <listitem>
- <para>
- The maximum size of a core dump. The default
- is <literal>default</literal>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>datasize</command></term>
- <listitem>
- <para>
- The maximum amount of data memory the server
- may use. The default is <literal>default</literal>.
- This is a hard limit on server memory usage.
- If the server attempts to allocate memory in excess of this
- limit, the allocation will fail, which may in turn leave
- the server unable to perform DNS service. Therefore,
- this option is rarely useful as a way of limiting the
- amount of memory used by the server, but it can be used
- to raise an operating system data size limit that is
- too small by default. If you wish to limit the amount
- of memory used by the server, use the
- <command>max-cache-size</command> and
- <command>recursive-clients</command>
- options instead.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>files</command></term>
- <listitem>
- <para>
- The maximum number of files the server
- may have open concurrently. The default is <literal>unlimited</literal>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>stacksize</command></term>
- <listitem>
- <para>
- The maximum amount of stack memory the server
- may use. The default is <literal>default</literal>.
- </para>
- </listitem>
- </varlistentry>
-
- </variablelist>
-
- </sect3>
-
- <sect3 id="server_resource_limits">
- <title>Server Resource Limits</title>
-
- <para>
- The following options set limits on the server's
- resource consumption that are enforced internally by the
- server rather than the operating system.
- </para>
-
- <variablelist>
-
- <varlistentry>
- <term><command>max-ixfr-log-size</command></term>
- <listitem>
- <para>
- This option is obsolete; it is accepted
- and ignored for BIND 8 compatibility. The option
- <command>max-journal-size</command> performs a
- similar function in BIND 9.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>max-journal-size</command></term>
- <listitem>
- <para>
- Sets a maximum size for each journal file
- (see <xref linkend="journal"/>). When the journal file
- approaches
- the specified size, some of the oldest transactions in the
- journal
- will be automatically removed. The largest permitted
- value is 2 gigabytes. The default is
- <literal>unlimited</literal>, which also
- means 2 gigabytes.
- This may also be set on a per-zone basis.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>host-statistics-max</command></term>
- <listitem>
- <para>
- In BIND 8, specifies the maximum number of host statistics
- entries to be kept.
- Not implemented in BIND 9.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>recursive-clients</command></term>
- <listitem>
- <para>
- The maximum number of simultaneous recursive lookups
- the server will perform on behalf of clients. The default
- is
- <literal>1000</literal>. Because each recursing
- client uses a fair
- bit of memory, on the order of 20 kilobytes, the value of
- the
- <command>recursive-clients</command> option may
- have to be decreased
- on hosts with limited memory.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>tcp-clients</command></term>
- <listitem>
- <para>
- The maximum number of simultaneous client TCP
- connections that the server will accept.
- The default is <literal>100</literal>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>reserved-sockets</command></term>
- <listitem>
- <para>
+ </sect3>
+
+ <sect3>
+ <title>Operating System Resource Limits</title>
+
+ <para>
+ The server's usage of many system resources can be limited.
+ Scaled values are allowed when specifying resource limits. For
+ example, <command>1G</command> can be used instead of
+ <command>1073741824</command> to specify a limit of
+ one
+ gigabyte. <command>unlimited</command> requests
+ unlimited use, or the
+ maximum available amount. <command>default</command>
+ uses the limit
+ that was in force when the server was started. See the description
+ of <command>size_spec</command> in <xref linkend="configuration_file_elements"/>.
+ </para>
+
+ <para>
+ The following options set operating system resource limits for
+ the name server process. Some operating systems don't support
+ some or
+ any of the limits. On such systems, a warning will be issued if
+ the
+ unsupported limit is used.
+ </para>
+
+ <variablelist>
+
+ <varlistentry>
+ <term><command>coresize</command></term>
+ <listitem>
+ <para>
+ The maximum size of a core dump. The default
+ is <literal>default</literal>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>datasize</command></term>
+ <listitem>
+ <para>
+ The maximum amount of data memory the server
+ may use. The default is <literal>default</literal>.
+ This is a hard limit on server memory usage.
+ If the server attempts to allocate memory in excess of this
+ limit, the allocation will fail, which may in turn leave
+ the server unable to perform DNS service. Therefore,
+ this option is rarely useful as a way of limiting the
+ amount of memory used by the server, but it can be used
+ to raise an operating system data size limit that is
+ too small by default. If you wish to limit the amount
+ of memory used by the server, use the
+ <command>max-cache-size</command> and
+ <command>recursive-clients</command>
+ options instead.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>files</command></term>
+ <listitem>
+ <para>
+ The maximum number of files the server
+ may have open concurrently. The default is <literal>unlimited</literal>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>stacksize</command></term>
+ <listitem>
+ <para>
+ The maximum amount of stack memory the server
+ may use. The default is <literal>default</literal>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ </variablelist>
+
+ </sect3>
+
+ <sect3 id="server_resource_limits">
+ <title>Server Resource Limits</title>
+
+ <para>
+ The following options set limits on the server's
+ resource consumption that are enforced internally by the
+ server rather than the operating system.
+ </para>
+
+ <variablelist>
+
+ <varlistentry>
+ <term><command>max-ixfr-log-size</command></term>
+ <listitem>
+ <para>
+ This option is obsolete; it is accepted
+ and ignored for BIND 8 compatibility. The option
+ <command>max-journal-size</command> performs a
+ similar function in BIND 9.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>max-journal-size</command></term>
+ <listitem>
+ <para>
+ Sets a maximum size for each journal file
+ (see <xref linkend="journal"/>). When the journal file
+ approaches
+ the specified size, some of the oldest transactions in the
+ journal
+ will be automatically removed. The largest permitted
+ value is 2 gigabytes. The default is
+ <literal>unlimited</literal>, which also
+ means 2 gigabytes.
+ This may also be set on a per-zone basis.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>host-statistics-max</command></term>
+ <listitem>
+ <para>
+ In BIND 8, specifies the maximum number of host statistics
+ entries to be kept.
+ Not implemented in BIND 9.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>recursive-clients</command></term>
+ <listitem>
+ <para>
+ The maximum number of simultaneous recursive lookups
+ the server will perform on behalf of clients. The default
+ is
+ <literal>1000</literal>. Because each recursing
+ client uses a fair
+ bit of memory, on the order of 20 kilobytes, the value of
+ the
+ <command>recursive-clients</command> option may
+ have to be decreased
+ on hosts with limited memory.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>tcp-clients</command></term>
+ <listitem>
+ <para>
+ The maximum number of simultaneous client TCP
+ connections that the server will accept.
+ The default is <literal>100</literal>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>reserved-sockets</command></term>
+ <listitem>
+ <para>
The number of file descriptors reserved for TCP, stdio,
etc. This needs to be big enough to cover the number of
interfaces <command>named</command> listens on, <command>tcp-clients</command> as well as
@@ -7879,159 +7957,159 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
The minimum value is <literal>128</literal> and the
maximum value is <literal>128</literal> less than
maxsockets (-S). This option may be removed in the future.
- </para>
- <para>
+ </para>
+ <para>
This option has little effect on Windows.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>max-cache-size</command></term>
- <listitem>
- <para>
- The maximum amount of memory to use for the
- server's cache, in bytes.
- When the amount of data in the cache
- reaches this limit, the server will cause records to expire
- prematurely based on an LRU based strategy so that
- the limit is not exceeded.
- A value of 0 is special, meaning that
- records are purged from the cache only when their
- TTLs expire.
- Another special keyword <userinput>unlimited</userinput>
- means the maximum value of 32-bit unsigned integers
- (0xffffffff), which may not have the same effect as
- 0 on machines that support more than 32 bits of
- memory space.
- Any positive values less than 2MB will be ignored reset
- to 2MB.
- In a server with multiple views, the limit applies
- separately to the cache of each view.
- The default is 0.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>tcp-listen-queue</command></term>
- <listitem>
- <para>
- The listen queue depth. The default and minimum is 10.
- If the kernel supports the accept filter "dataready" this
- also controls how
- many TCP connections that will be queued in kernel space
- waiting for
- some data before being passed to accept. Nonzero values
- less than 10 will be silently raised. A value of 0 may also
- be used; on most platforms this sets the listen queue
- length to a system-defined default value.
- </para>
- </listitem>
- </varlistentry>
-
- </variablelist>
-
- </sect3>
-
- <sect3>
- <title>Periodic Task Intervals</title>
-
- <variablelist>
-
- <varlistentry>
- <term><command>cleaning-interval</command></term>
- <listitem>
- <para>
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>max-cache-size</command></term>
+ <listitem>
+ <para>
+ The maximum amount of memory to use for the
+ server's cache, in bytes.
+ When the amount of data in the cache
+ reaches this limit, the server will cause records to expire
+ prematurely based on an LRU based strategy so that
+ the limit is not exceeded.
+ A value of 0 is special, meaning that
+ records are purged from the cache only when their
+ TTLs expire.
+ Another special keyword <userinput>unlimited</userinput>
+ means the maximum value of 32-bit unsigned integers
+ (0xffffffff), which may not have the same effect as
+ 0 on machines that support more than 32 bits of
+ memory space.
+ Any positive values less than 2MB will be ignored reset
+ to 2MB.
+ In a server with multiple views, the limit applies
+ separately to the cache of each view.
+ The default is 0.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>tcp-listen-queue</command></term>
+ <listitem>
+ <para>
+ The listen queue depth. The default and minimum is 10.
+ If the kernel supports the accept filter "dataready" this
+ also controls how
+ many TCP connections that will be queued in kernel space
+ waiting for
+ some data before being passed to accept. Nonzero values
+ less than 10 will be silently raised. A value of 0 may also
+ be used; on most platforms this sets the listen queue
+ length to a system-defined default value.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ </variablelist>
+
+ </sect3>
+
+ <sect3>
+ <title>Periodic Task Intervals</title>
+
+ <variablelist>
+
+ <varlistentry>
+ <term><command>cleaning-interval</command></term>
+ <listitem>
+ <para>
This interval is effectively obsolete. Previously,
the server would remove expired resource records
- from the cache every <command>cleaning-interval</command> minutes.
+ from the cache every <command>cleaning-interval</command> minutes.
<acronym>BIND</acronym> 9 now manages cache
memory in a more sophisticated manner and does not
rely on the periodic cleaning any more.
Specifying this option therefore has no effect on
the server's behavior.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>heartbeat-interval</command></term>
- <listitem>
- <para>
- The server will perform zone maintenance tasks
- for all zones marked as <command>dialup</command> whenever this
- interval expires. The default is 60 minutes. Reasonable
- values are up
- to 1 day (1440 minutes). The maximum value is 28 days
- (40320 minutes).
- If set to 0, no zone maintenance for these zones will occur.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>interface-interval</command></term>
- <listitem>
- <para>
- The server will scan the network interface list
- every <command>interface-interval</command>
- minutes. The default
- is 60 minutes. The maximum value is 28 days (40320 minutes).
- If set to 0, interface scanning will only occur when
- the configuration file is loaded. After the scan, the
- server will
- begin listening for queries on any newly discovered
- interfaces (provided they are allowed by the
- <command>listen-on</command> configuration), and
- will
- stop listening on interfaces that have gone away.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>statistics-interval</command></term>
- <listitem>
- <para>
- Name server statistics will be logged
- every <command>statistics-interval</command>
- minutes. The default is
- 60. The maximum value is 28 days (40320 minutes).
- If set to 0, no statistics will be logged.
- </para><note>
- <simpara>
- Not yet implemented in
- <acronym>BIND</acronym> 9.
- </simpara>
- </note>
- </listitem>
- </varlistentry>
-
- </variablelist>
-
- </sect3>
-
- <sect3 id="topology">
- <title>Topology</title>
-
- <para>
- All other things being equal, when the server chooses a name
- server
- to query from a list of name servers, it prefers the one that is
- topologically closest to itself. The <command>topology</command> statement
- takes an <command>address_match_list</command> and
- interprets it
- in a special way. Each top-level list element is assigned a
- distance.
- Non-negated elements get a distance based on their position in the
- list, where the closer the match is to the start of the list, the
- shorter the distance is between it and the server. A negated match
- will be assigned the maximum distance from the server. If there
- is no match, the address will get a distance which is further than
- any non-negated list element, and closer than any negated element.
- For example,
- </para>
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>heartbeat-interval</command></term>
+ <listitem>
+ <para>
+ The server will perform zone maintenance tasks
+ for all zones marked as <command>dialup</command> whenever this
+ interval expires. The default is 60 minutes. Reasonable
+ values are up
+ to 1 day (1440 minutes). The maximum value is 28 days
+ (40320 minutes).
+ If set to 0, no zone maintenance for these zones will occur.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>interface-interval</command></term>
+ <listitem>
+ <para>
+ The server will scan the network interface list
+ every <command>interface-interval</command>
+ minutes. The default
+ is 60 minutes. The maximum value is 28 days (40320 minutes).
+ If set to 0, interface scanning will only occur when
+ the configuration file is loaded. After the scan, the
+ server will
+ begin listening for queries on any newly discovered
+ interfaces (provided they are allowed by the
+ <command>listen-on</command> configuration), and
+ will
+ stop listening on interfaces that have gone away.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>statistics-interval</command></term>
+ <listitem>
+ <para>
+ Name server statistics will be logged
+ every <command>statistics-interval</command>
+ minutes. The default is
+ 60. The maximum value is 28 days (40320 minutes).
+ If set to 0, no statistics will be logged.
+ </para><note>
+ <simpara>
+ Not yet implemented in
+ <acronym>BIND</acronym> 9.
+ </simpara>
+ </note>
+ </listitem>
+ </varlistentry>
+
+ </variablelist>
+
+ </sect3>
+
+ <sect3 id="topology">
+ <title>Topology</title>
+
+ <para>
+ All other things being equal, when the server chooses a name
+ server
+ to query from a list of name servers, it prefers the one that is
+ topologically closest to itself. The <command>topology</command> statement
+ takes an <command>address_match_list</command> and
+ interprets it
+ in a special way. Each top-level list element is assigned a
+ distance.
+ Non-negated elements get a distance based on their position in the
+ list, where the closer the match is to the start of the list, the
+ shorter the distance is between it and the server. A negated match
+ will be assigned the maximum distance from the server. If there
+ is no match, the address will get a distance which is further than
+ any non-negated list element, and closer than any negated element.
+ For example,
+ </para>
<programlisting>topology {
10/8;
@@ -8039,221 +8117,221 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
{ 1.2/16; 3/8; };
};</programlisting>
- <para>
- will prefer servers on network 10 the most, followed by hosts
- on network 1.2.0.0 (netmask 255.255.0.0) and network 3, with the
- exception of hosts on network 1.2.3 (netmask 255.255.255.0), which
- is preferred least of all.
- </para>
- <para>
- The default topology is
- </para>
+ <para>
+ will prefer servers on network 10 the most, followed by hosts
+ on network 1.2.0.0 (netmask 255.255.0.0) and network 3, with the
+ exception of hosts on network 1.2.3 (netmask 255.255.255.0), which
+ is preferred least of all.
+ </para>
+ <para>
+ The default topology is
+ </para>
<programlisting> topology { localhost; localnets; };
</programlisting>
- <note>
- <simpara>
- The <command>topology</command> option
- is not implemented in <acronym>BIND</acronym> 9.
- </simpara>
- </note>
- </sect3>
-
- <sect3 id="the_sortlist_statement">
-
- <title>The <command>sortlist</command> Statement</title>
-
- <para>
- The response to a DNS query may consist of multiple resource
- records (RRs) forming a resource records set (RRset).
- The name server will normally return the
- RRs within the RRset in an indeterminate order
- (but see the <command>rrset-order</command>
- statement in <xref linkend="rrset_ordering"/>).
- The client resolver code should rearrange the RRs as appropriate,
- that is, using any addresses on the local net in preference to
- other addresses.
- However, not all resolvers can do this or are correctly
- configured.
- When a client is using a local server, the sorting can be performed
- in the server, based on the client's address. This only requires
- configuring the name servers, not all the clients.
- </para>
-
- <para>
- The <command>sortlist</command> statement (see below)
- takes
- an <command>address_match_list</command> and
- interprets it even
- more specifically than the <command>topology</command>
- statement
- does (<xref linkend="topology"/>).
- Each top level statement in the <command>sortlist</command> must
- itself be an explicit <command>address_match_list</command> with
- one or two elements. The first element (which may be an IP
- address,
- an IP prefix, an ACL name or a nested <command>address_match_list</command>)
- of each top level list is checked against the source address of
- the query until a match is found.
- </para>
- <para>
- Once the source address of the query has been matched, if
- the top level statement contains only one element, the actual
- primitive
- element that matched the source address is used to select the
- address
- in the response to move to the beginning of the response. If the
- statement is a list of two elements, then the second element is
- treated the same as the <command>address_match_list</command> in
- a <command>topology</command> statement. Each top
- level element
- is assigned a distance and the address in the response with the
- minimum
- distance is moved to the beginning of the response.
- </para>
- <para>
- In the following example, any queries received from any of
- the addresses of the host itself will get responses preferring
- addresses
- on any of the locally connected networks. Next most preferred are
- addresses
- on the 192.168.1/24 network, and after that either the
- 192.168.2/24
- or
- 192.168.3/24 network with no preference shown between these two
- networks. Queries received from a host on the 192.168.1/24 network
- will prefer other addresses on that network to the 192.168.2/24
- and
- 192.168.3/24 networks. Queries received from a host on the
- 192.168.4/24
- or the 192.168.5/24 network will only prefer other addresses on
- their directly connected networks.
- </para>
+ <note>
+ <simpara>
+ The <command>topology</command> option
+ is not implemented in <acronym>BIND</acronym> 9.
+ </simpara>
+ </note>
+ </sect3>
+
+ <sect3 id="the_sortlist_statement">
+
+ <title>The <command>sortlist</command> Statement</title>
+
+ <para>
+ The response to a DNS query may consist of multiple resource
+ records (RRs) forming a resource records set (RRset).
+ The name server will normally return the
+ RRs within the RRset in an indeterminate order
+ (but see the <command>rrset-order</command>
+ statement in <xref linkend="rrset_ordering"/>).
+ The client resolver code should rearrange the RRs as appropriate,
+ that is, using any addresses on the local net in preference to
+ other addresses.
+ However, not all resolvers can do this or are correctly
+ configured.
+ When a client is using a local server, the sorting can be performed
+ in the server, based on the client's address. This only requires
+ configuring the name servers, not all the clients.
+ </para>
+
+ <para>
+ The <command>sortlist</command> statement (see below)
+ takes
+ an <command>address_match_list</command> and
+ interprets it even
+ more specifically than the <command>topology</command>
+ statement
+ does (<xref linkend="topology"/>).
+ Each top level statement in the <command>sortlist</command> must
+ itself be an explicit <command>address_match_list</command> with
+ one or two elements. The first element (which may be an IP
+ address,
+ an IP prefix, an ACL name or a nested <command>address_match_list</command>)
+ of each top level list is checked against the source address of
+ the query until a match is found.
+ </para>
+ <para>
+ Once the source address of the query has been matched, if
+ the top level statement contains only one element, the actual
+ primitive
+ element that matched the source address is used to select the
+ address
+ in the response to move to the beginning of the response. If the
+ statement is a list of two elements, then the second element is
+ treated the same as the <command>address_match_list</command> in
+ a <command>topology</command> statement. Each top
+ level element
+ is assigned a distance and the address in the response with the
+ minimum
+ distance is moved to the beginning of the response.
+ </para>
+ <para>
+ In the following example, any queries received from any of
+ the addresses of the host itself will get responses preferring
+ addresses
+ on any of the locally connected networks. Next most preferred are
+ addresses
+ on the 192.168.1/24 network, and after that either the
+ 192.168.2/24
+ or
+ 192.168.3/24 network with no preference shown between these two
+ networks. Queries received from a host on the 192.168.1/24 network
+ will prefer other addresses on that network to the 192.168.2/24
+ and
+ 192.168.3/24 networks. Queries received from a host on the
+ 192.168.4/24
+ or the 192.168.5/24 network will only prefer other addresses on
+ their directly connected networks.
+ </para>
<programlisting>sortlist {
// IF the local host
// THEN first fit on the following nets
{ localhost;
- { localnets;
- 192.168.1/24;
- { 192.168.2/24; 192.168.3/24; }; }; };
+ { localnets;
+ 192.168.1/24;
+ { 192.168.2/24; 192.168.3/24; }; }; };
// IF on class C 192.168.1 THEN use .1, or .2 or .3
{ 192.168.1/24;
- { 192.168.1/24;
- { 192.168.2/24; 192.168.3/24; }; }; };
+ { 192.168.1/24;
+ { 192.168.2/24; 192.168.3/24; }; }; };
// IF on class C 192.168.2 THEN use .2, or .1 or .3
{ 192.168.2/24;
- { 192.168.2/24;
- { 192.168.1/24; 192.168.3/24; }; }; };
+ { 192.168.2/24;
+ { 192.168.1/24; 192.168.3/24; }; }; };
// IF on class C 192.168.3 THEN use .3, or .1 or .2
{ 192.168.3/24;
- { 192.168.3/24;
- { 192.168.1/24; 192.168.2/24; }; }; };
+ { 192.168.3/24;
+ { 192.168.1/24; 192.168.2/24; }; }; };
// IF .4 or .5 THEN prefer that net
{ { 192.168.4/24; 192.168.5/24; };
};
};</programlisting>
- <para>
- The following example will give reasonable behavior for the
- local host and hosts on directly connected networks. It is similar
- to the behavior of the address sort in <acronym>BIND</acronym> 4.9.x. Responses sent
- to queries from the local host will favor any of the directly
- connected
- networks. Responses sent to queries from any other hosts on a
- directly
- connected network will prefer addresses on that same network.
- Responses
- to other queries will not be sorted.
- </para>
+ <para>
+ The following example will give reasonable behavior for the
+ local host and hosts on directly connected networks. It is similar
+ to the behavior of the address sort in <acronym>BIND</acronym> 4.9.x. Responses sent
+ to queries from the local host will favor any of the directly
+ connected
+ networks. Responses sent to queries from any other hosts on a
+ directly
+ connected network will prefer addresses on that same network.
+ Responses
+ to other queries will not be sorted.
+ </para>
<programlisting>sortlist {
- { localhost; localnets; };
- { localnets; };
+ { localhost; localnets; };
+ { localnets; };
};
</programlisting>
- </sect3>
- <sect3 id="rrset_ordering">
- <title id="rrset_ordering_title">RRset Ordering</title>
- <para>
- When multiple records are returned in an answer it may be
- useful to configure the order of the records placed into the
- response.
- The <command>rrset-order</command> statement permits
- configuration
- of the ordering of the records in a multiple record response.
- See also the <command>sortlist</command> statement,
- <xref linkend="the_sortlist_statement"/>.
- </para>
-
- <para>
- An <command>order_spec</command> is defined as
- follows:
- </para>
- <para>
+ </sect3>
+ <sect3 id="rrset_ordering">
+ <title id="rrset_ordering_title">RRset Ordering</title>
+ <para>
+ When multiple records are returned in an answer it may be
+ useful to configure the order of the records placed into the
+ response.
+ The <command>rrset-order</command> statement permits
+ configuration
+ of the ordering of the records in a multiple record response.
+ See also the <command>sortlist</command> statement,
+ <xref linkend="the_sortlist_statement"/>.
+ </para>
+
+ <para>
+ An <command>order_spec</command> is defined as
+ follows:
+ </para>
+ <para>
<optional>class <replaceable>class_name</replaceable></optional>
- <optional>type <replaceable>type_name</replaceable></optional>
- <optional>name <replaceable>"domain_name"</replaceable></optional>
+ <optional>type <replaceable>type_name</replaceable></optional>
+ <optional>name <replaceable>"domain_name"</replaceable></optional>
order <replaceable>ordering</replaceable>
</para>
- <para>
- If no class is specified, the default is <command>ANY</command>.
- If no type is specified, the default is <command>ANY</command>.
- If no name is specified, the default is "<command>*</command>" (asterisk).
- </para>
- <para>
- The legal values for <command>ordering</command> are:
- </para>
- <informaltable colsep="0" rowsep="0">
- <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="4Level-table">
- <colspec colname="1" colnum="1" colsep="0" colwidth="0.750in"/>
- <colspec colname="2" colnum="2" colsep="0" colwidth="3.750in"/>
- <tbody>
- <row rowsep="0">
- <entry colname="1">
- <para><command>fixed</command></para>
- </entry>
- <entry colname="2">
- <para>
- Records are returned in the order they
- are defined in the zone file.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>random</command></para>
- </entry>
- <entry colname="2">
- <para>
- Records are returned in some random order.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>cyclic</command></para>
- </entry>
- <entry colname="2">
- <para>
- Records are returned in a cyclic round-robin order.
- </para>
- <para>
- If <acronym>BIND</acronym> is configured with the
- "--enable-fixed-rrset" option at compile time, then
- the initial ordering of the RRset will match the
- one specified in the zone file.
- </para>
- </entry>
- </row>
- </tbody>
- </tgroup>
- </informaltable>
- <para>
- For example:
- </para>
+ <para>
+ If no class is specified, the default is <command>ANY</command>.
+ If no type is specified, the default is <command>ANY</command>.
+ If no name is specified, the default is "<command>*</command>" (asterisk).
+ </para>
+ <para>
+ The legal values for <command>ordering</command> are:
+ </para>
+ <informaltable colsep="0" rowsep="0">
+ <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="4Level-table">
+ <colspec colname="1" colnum="1" colsep="0" colwidth="0.750in"/>
+ <colspec colname="2" colnum="2" colsep="0" colwidth="3.750in"/>
+ <tbody>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>fixed</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Records are returned in the order they
+ are defined in the zone file.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>random</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Records are returned in some random order.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>cyclic</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Records are returned in a cyclic round-robin order.
+ </para>
+ <para>
+ If <acronym>BIND</acronym> is configured with the
+ "--enable-fixed-rrset" option at compile time, then
+ the initial ordering of the RRset will match the
+ one specified in the zone file.
+ </para>
+ </entry>
+ </row>
+ </tbody>
+ </tgroup>
+ </informaltable>
+ <para>
+ For example:
+ </para>
<programlisting>rrset-order {
class IN type A name "host.example.com" order random;
@@ -8261,47 +8339,47 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
};
</programlisting>
- <para>
- will cause any responses for type A records in class IN that
- have "<literal>host.example.com</literal>" as a
- suffix, to always be returned
- in random order. All other records are returned in cyclic order.
- </para>
- <para>
- If multiple <command>rrset-order</command> statements
- appear, they are not combined &mdash; the last one applies.
- </para>
- <para>
- By default, all records are returned in random order.
- </para>
-
- <note>
- <simpara>
- In this release of <acronym>BIND</acronym> 9, the
- <command>rrset-order</command> statement does not support
- "fixed" ordering by default. Fixed ordering can be enabled
- at compile time by specifying "--enable-fixed-rrset" on
- the "configure" command line.
- </simpara>
- </note>
- </sect3>
-
- <sect3 id="tuning">
- <title>Tuning</title>
-
- <variablelist>
-
- <varlistentry>
- <term><command>lame-ttl</command></term>
- <listitem>
- <para>
- Sets the number of seconds to cache a
- lame server indication. 0 disables caching. (This is
- <emphasis role="bold">NOT</emphasis> recommended.)
- The default is <literal>600</literal> (10 minutes) and the
- maximum value is
- <literal>1800</literal> (30 minutes).
- </para>
+ <para>
+ will cause any responses for type A records in class IN that
+ have "<literal>host.example.com</literal>" as a
+ suffix, to always be returned
+ in random order. All other records are returned in cyclic order.
+ </para>
+ <para>
+ If multiple <command>rrset-order</command> statements
+ appear, they are not combined &mdash; the last one applies.
+ </para>
+ <para>
+ By default, all records are returned in random order.
+ </para>
+
+ <note>
+ <simpara>
+ In this release of <acronym>BIND</acronym> 9, the
+ <command>rrset-order</command> statement does not support
+ "fixed" ordering by default. Fixed ordering can be enabled
+ at compile time by specifying "--enable-fixed-rrset" on
+ the "configure" command line.
+ </simpara>
+ </note>
+ </sect3>
+
+ <sect3 id="tuning">
+ <title>Tuning</title>
+
+ <variablelist>
+
+ <varlistentry>
+ <term><command>lame-ttl</command></term>
+ <listitem>
+ <para>
+ Sets the number of seconds to cache a
+ lame server indication. 0 disables caching. (This is
+ <emphasis role="bold">NOT</emphasis> recommended.)
+ The default is <literal>600</literal> (10 minutes) and the
+ maximum value is
+ <literal>1800</literal> (30 minutes).
+ </para>
<para>
Lame-ttl also controls the amount of time DNSSEC
@@ -8310,57 +8388,57 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
lame-ttl is set to less than 30 seconds.
</para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>max-ncache-ttl</command></term>
- <listitem>
- <para>
- To reduce network traffic and increase performance,
- the server stores negative answers. <command>max-ncache-ttl</command> is
- used to set a maximum retention time for these answers in
- the server
- in seconds. The default
- <command>max-ncache-ttl</command> is <literal>10800</literal> seconds (3 hours).
- <command>max-ncache-ttl</command> cannot exceed
- 7 days and will
- be silently truncated to 7 days if set to a greater value.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>max-cache-ttl</command></term>
- <listitem>
- <para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>max-ncache-ttl</command></term>
+ <listitem>
+ <para>
+ To reduce network traffic and increase performance,
+ the server stores negative answers. <command>max-ncache-ttl</command> is
+ used to set a maximum retention time for these answers in
+ the server
+ in seconds. The default
+ <command>max-ncache-ttl</command> is <literal>10800</literal> seconds (3 hours).
+ <command>max-ncache-ttl</command> cannot exceed
+ 7 days and will
+ be silently truncated to 7 days if set to a greater value.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>max-cache-ttl</command></term>
+ <listitem>
+ <para>
Sets the maximum time for which the server will
- cache ordinary (positive) answers. The default is
- one week (7 days).
+ cache ordinary (positive) answers. The default is
+ one week (7 days).
A value of zero may cause all queries to return
SERVFAIL, because of lost caches of intermediate
RRsets (such as NS and glue AAAA/A records) in the
resolution process.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>min-roots</command></term>
- <listitem>
- <para>
- The minimum number of root servers that
- is required for a request for the root servers to be
- accepted. The default
- is <userinput>2</userinput>.
- </para>
- <note>
- <simpara>
- Not implemented in <acronym>BIND</acronym> 9.
- </simpara>
- </note>
- </listitem>
- </varlistentry>
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>min-roots</command></term>
+ <listitem>
+ <para>
+ The minimum number of root servers that
+ is required for a request for the root servers to be
+ accepted. The default
+ is <userinput>2</userinput>.
+ </para>
+ <note>
+ <simpara>
+ Not implemented in <acronym>BIND</acronym> 9.
+ </simpara>
+ </note>
+ </listitem>
+ </varlistentry>
<varlistentry>
<term><command>sig-validity-interval</command></term>
@@ -8423,7 +8501,7 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
<listitem>
<para>
Specify a private RDATA type to be used when generating
- key signing records. The default is
+ signing state records. The default is
<literal>65534</literal>.
</para>
<para>
@@ -8431,42 +8509,49 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
in a future version once there is a standard type.
</para>
<para>
- These records can be removed from the zone once named
- has completed signing the zone with the matching key
- using <command>nsupdate</command> or
- <command>rndc signing -clear</command>.
- <command>rndc signing -clear</command> is the only supported
- way to remove these records from
- <command>inline-signing</command> zones.
+ Signing state records are used to internally by
+ <command>named</command> to track the current state of
+ a zone-signing process, i.e., whether it is still active
+ or has been completed. The records can be inspected
+ using the command
+ <command>rndc signing -list <replaceable>zone</replaceable></command>.
+ Once <command>named</command> has finished signing
+ a zone with a particular key, the signing state
+ record associated with that key can be removed from
+ the zone by running
+ <command>rndc signing -clear <replaceable>keyid/algorithm</replaceable> <replaceable>zone</replaceable></command>.
+ To clear all of the completed signing state
+ records for a zone, use
+ <command>rndc signing -clear all <replaceable>zone</replaceable></command>.
</para>
</listitem>
</varlistentry>
- <varlistentry>
- <term><command>min-refresh-time</command></term>
- <term><command>max-refresh-time</command></term>
- <term><command>min-retry-time</command></term>
- <term><command>max-retry-time</command></term>
- <listitem>
- <para>
- These options control the server's behavior on refreshing a
- zone
- (querying for SOA changes) or retrying failed transfers.
- Usually the SOA values for the zone are used, but these
- values
- are set by the master, giving slave server administrators
- little
- control over their contents.
- </para>
- <para>
- These options allow the administrator to set a minimum and
- maximum
- refresh and retry time either per-zone, per-view, or
- globally.
- These options are valid for slave and stub zones,
- and clamp the SOA refresh and retry times to the specified
- values.
- </para>
+ <varlistentry>
+ <term><command>min-refresh-time</command></term>
+ <term><command>max-refresh-time</command></term>
+ <term><command>min-retry-time</command></term>
+ <term><command>max-retry-time</command></term>
+ <listitem>
+ <para>
+ These options control the server's behavior on refreshing a
+ zone
+ (querying for SOA changes) or retrying failed transfers.
+ Usually the SOA values for the zone are used, but these
+ values
+ are set by the master, giving slave server administrators
+ little
+ control over their contents.
+ </para>
+ <para>
+ These options allow the administrator to set a minimum and
+ maximum
+ refresh and retry time either per-zone, per-view, or
+ globally.
+ These options are valid for slave and stub zones,
+ and clamp the SOA refresh and retry times to the specified
+ values.
+ </para>
<para>
The following defaults apply.
<command>min-refresh-time</command> 300 seconds,
@@ -8475,35 +8560,35 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
and <command>max-retry-time</command> 1209600 seconds
(2 weeks).
</para>
- </listitem>
- </varlistentry>
+ </listitem>
+ </varlistentry>
- <varlistentry>
- <term><command>edns-udp-size</command></term>
- <listitem>
- <para>
+ <varlistentry>
+ <term><command>edns-udp-size</command></term>
+ <listitem>
+ <para>
Sets the advertised EDNS UDP buffer size in bytes
- to control the size of packets received.
- Valid values are 512 to 4096 (values outside this range
+ to control the size of packets received.
+ Valid values are 512 to 4096 (values outside this range
will be silently adjusted). The default value
is 4096. The usual reason for setting
<command>edns-udp-size</command> to a non-default
value is to get UDP answers to pass through broken
firewalls that block fragmented packets and/or
block UDP packets that are greater than 512 bytes.
- </para>
+ </para>
<para>
<command>named</command> will fallback to using 512 bytes
if it get a series of timeout at the initial value. 512
bytes is not being offered to encourage sites to fix their
- firewalls. Small EDNS UDP sizes will result in the
+ firewalls. Small EDNS UDP sizes will result in the
excessive use of TCP.
</para>
- </listitem>
- </varlistentry>
+ </listitem>
+ </varlistentry>
- <varlistentry>
- <term><command>max-udp-size</command></term>
+ <varlistentry>
+ <term><command>max-udp-size</command></term>
<listitem>
<para>
Sets the maximum EDNS UDP message size
@@ -8528,21 +8613,21 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
<varlistentry>
<term><command>masterfile-format</command></term>
<listitem>
- <para>Specifies
+ <para>Specifies
the file format of zone files (see
- <xref linkend="zonefile_format"/>).
- The default value is <constant>text</constant>, which is the
+ <xref linkend="zonefile_format"/>).
+ The default value is <constant>text</constant>, which is the
standard textual representation, except for slave zones,
- in which the default value is <constant>raw</constant>.
- Files in other formats than <constant>text</constant> are
- typically expected to be generated by the
- <command>named-compilezone</command> tool, or dumped by
- <command>named</command>.
- </para>
- <para>
+ in which the default value is <constant>raw</constant>.
+ Files in other formats than <constant>text</constant> are
+ typically expected to be generated by the
+ <command>named-compilezone</command> tool, or dumped by
+ <command>named</command>.
+ </para>
+ <para>
Note that when a zone file in a different format than
<constant>text</constant> is loaded, <command>named</command>
- may omit some of the checks which would be performed for a
+ may omit some of the checks which would be performed for a
file in the <constant>text</constant> format. In particular,
<command>check-names</command> checks do not apply
for the <constant>raw</constant> format. This means
@@ -8556,14 +8641,14 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
statement within the <command>zone</command> or
<command>view</command> block in the configuration
file.
- </para>
+ </para>
</listitem>
</varlistentry>
<varlistentry id="clients-per-query">
<term><command>clients-per-query</command></term>
<term><command>max-clients-per-query</command></term>
- <listitem>
+ <listitem>
<para>These set the
initial value (minimum) and maximum number of recursive
simultaneous clients for any given query
@@ -8573,7 +8658,7 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
default values are 10 and 100.
</para>
<para>
- This value should reflect how many queries come in for
+ This value should reflect how many queries come in for
a given name in the time it takes to resolve that name.
If the number of queries exceed this value, <command>named</command> will
assume that it is dealing with a non-responsive zone
@@ -8592,136 +8677,165 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
then there is no upper bound other than imposed by
<command>recursive-clients</command>.
</para>
- </listitem>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry id="max-recursion-depth">
+ <term><command>max-recursion-depth</command></term>
+ <listitem>
+ <para>
+ Sets the maximum number of levels of recursion
+ that are permitted at any one time while servicing
+ a recursive query. Resolving a name may require
+ looking up a name server address, which in turn
+ requires resolving another name, etc; if the number
+ of indirections exceeds this value, the recursive
+ query is terminated and returns SERVFAIL. The
+ default is 7.
+ </para>
+ </listitem>
</varlistentry>
- <varlistentry>
- <term><command>notify-delay</command></term>
- <listitem>
- <para>
- The delay, in seconds, between sending sets of notify
- messages for a zone. The default is five (5) seconds.
- </para>
- <para>
+ <varlistentry id="max-recursion-queries">
+ <term><command>max-recursion-queries</command></term>
+ <listitem>
+ <para>
+ Sets the maximum number of iterative queries that
+ may be sent while servicing a recursive query.
+ If more queries are sent, the recursive query
+ is terminated and returns SERVFAIL. The default
+ is 50.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>notify-delay</command></term>
+ <listitem>
+ <para>
+ The delay, in seconds, between sending sets of notify
+ messages for a zone. The default is five (5) seconds.
+ </para>
+ <para>
The overall rate that NOTIFY messages are sent for all
zones is controlled by <command>serial-query-rate</command>.
</para>
- </listitem>
- </varlistentry>
+ </listitem>
+ </varlistentry>
- <varlistentry>
- <term><command>max-rsa-exponent-size</command></term>
- <listitem>
- <para>
+ <varlistentry>
+ <term><command>max-rsa-exponent-size</command></term>
+ <listitem>
+ <para>
The maximum RSA exponent size, in bits, that will
be accepted when validating. Valid values are 35
to 4096 bits. The default zero (0) is also accepted
and is equivalent to 4096.
</para>
- </listitem>
- </varlistentry>
+ </listitem>
+ </varlistentry>
</variablelist>
- </sect3>
-
- <sect3 id="builtin">
- <title>Built-in server information zones</title>
-
- <para>
- The server provides some helpful diagnostic information
- through a number of built-in zones under the
- pseudo-top-level-domain <literal>bind</literal> in the
- <command>CHAOS</command> class. These zones are part
- of a
- built-in view (see <xref linkend="view_statement_grammar"/>) of
- class
- <command>CHAOS</command> which is separate from the
- default view of class <command>IN</command>. Most global
- configuration options (<command>allow-query</command>,
- etc) will apply to this view, but some are locally
- overridden: <command>notify</command>,
- <command>recursion</command> and
- <command>allow-new-zones</command> are
- always set to <userinput>no</userinput>.
- </para>
- <para>
- If you need to disable these zones, use the options
- below, or hide the built-in <command>CHAOS</command>
- view by
- defining an explicit view of class <command>CHAOS</command>
- that matches all clients.
- </para>
-
- <variablelist>
-
- <varlistentry>
- <term><command>version</command></term>
- <listitem>
- <para>
- The version the server should report
- via a query of the name <literal>version.bind</literal>
- with type <command>TXT</command>, class <command>CHAOS</command>.
- The default is the real version number of this server.
- Specifying <command>version none</command>
- disables processing of the queries.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>hostname</command></term>
- <listitem>
- <para>
- The hostname the server should report via a query of
- the name <filename>hostname.bind</filename>
- with type <command>TXT</command>, class <command>CHAOS</command>.
- This defaults to the hostname of the machine hosting the
- name server as
- found by the gethostname() function. The primary purpose of such queries
- is to
- identify which of a group of anycast servers is actually
- answering your queries. Specifying <command>hostname none;</command>
- disables processing of the queries.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>server-id</command></term>
- <listitem>
- <para>
- The ID the server should report when receiving a Name
- Server Identifier (NSID) query, or a query of the name
- <filename>ID.SERVER</filename> with type
- <command>TXT</command>, class <command>CHAOS</command>.
- The primary purpose of such queries is to
- identify which of a group of anycast servers is actually
- answering your queries. Specifying <command>server-id none;</command>
- disables processing of the queries.
- Specifying <command>server-id hostname;</command> will cause <command>named</command> to
- use the hostname as found by the gethostname() function.
- The default <command>server-id</command> is <command>none</command>.
- </para>
- </listitem>
- </varlistentry>
-
- </variablelist>
-
- </sect3>
-
- <sect3 id="empty">
- <title>Built-in Empty Zones</title>
+ </sect3>
+
+ <sect3 id="builtin">
+ <title>Built-in server information zones</title>
+
+ <para>
+ The server provides some helpful diagnostic information
+ through a number of built-in zones under the
+ pseudo-top-level-domain <literal>bind</literal> in the
+ <command>CHAOS</command> class. These zones are part
+ of a
+ built-in view (see <xref linkend="view_statement_grammar"/>) of
+ class
+ <command>CHAOS</command> which is separate from the
+ default view of class <command>IN</command>. Most global
+ configuration options (<command>allow-query</command>,
+ etc) will apply to this view, but some are locally
+ overridden: <command>notify</command>,
+ <command>recursion</command> and
+ <command>allow-new-zones</command> are
+ always set to <userinput>no</userinput>.
+ </para>
+ <para>
+ If you need to disable these zones, use the options
+ below, or hide the built-in <command>CHAOS</command>
+ view by
+ defining an explicit view of class <command>CHAOS</command>
+ that matches all clients.
+ </para>
+
+ <variablelist>
+
+ <varlistentry>
+ <term><command>version</command></term>
+ <listitem>
+ <para>
+ The version the server should report
+ via a query of the name <literal>version.bind</literal>
+ with type <command>TXT</command>, class <command>CHAOS</command>.
+ The default is the real version number of this server.
+ Specifying <command>version none</command>
+ disables processing of the queries.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>hostname</command></term>
+ <listitem>
+ <para>
+ The hostname the server should report via a query of
+ the name <filename>hostname.bind</filename>
+ with type <command>TXT</command>, class <command>CHAOS</command>.
+ This defaults to the hostname of the machine hosting the
+ name server as
+ found by the gethostname() function. The primary purpose of such queries
+ is to
+ identify which of a group of anycast servers is actually
+ answering your queries. Specifying <command>hostname none;</command>
+ disables processing of the queries.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>server-id</command></term>
+ <listitem>
+ <para>
+ The ID the server should report when receiving a Name
+ Server Identifier (NSID) query, or a query of the name
+ <filename>ID.SERVER</filename> with type
+ <command>TXT</command>, class <command>CHAOS</command>.
+ The primary purpose of such queries is to
+ identify which of a group of anycast servers is actually
+ answering your queries. Specifying <command>server-id none;</command>
+ disables processing of the queries.
+ Specifying <command>server-id hostname;</command> will cause <command>named</command> to
+ use the hostname as found by the gethostname() function.
+ The default <command>server-id</command> is <command>none</command>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ </variablelist>
+
+ </sect3>
+
+ <sect3 id="empty">
+ <title>Built-in Empty Zones</title>
<para>
Named has some built-in empty zones (SOA and NS records only).
These are for zones that should normally be answered locally
and which queries should not be sent to the Internet's root
servers. The official servers which cover these namespaces
return NXDOMAIN responses to these queries. In particular,
- these cover the reverse namespaces for addresses from
- RFC 1918, RFC 4193, RFC 5737 and RFC 6598. They also include the
- reverse namespace for IPv6 local address (locally assigned),
- IPv6 link local addresses, the IPv6 loopback address and the
- IPv6 unknown address.
+ these cover the reverse namespaces for addresses from
+ RFC 1918, RFC 4193, RFC 5737 and RFC 6598. They also include the
+ reverse namespace for IPv6 local address (locally assigned),
+ IPv6 link local addresses, the IPv6 loopback address and the
+ IPv6 unknown address.
</para>
<para>
Named will attempt to determine if a built-in zone already exists
@@ -8855,168 +8969,168 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
root servers, this is all built-in empty zones. This will
enable them to return referrals to deeper in the tree.
</note>
- <variablelist>
+ <variablelist>
<varlistentry>
<term><command>empty-server</command></term>
<listitem>
- <para>
+ <para>
Specify what server name will appear in the returned
SOA record for empty zones. If none is specified, then
the zone's name will be used.
- </para>
+ </para>
</listitem>
</varlistentry>
<varlistentry>
<term><command>empty-contact</command></term>
<listitem>
- <para>
+ <para>
Specify what contact name will appear in the returned
SOA record for empty zones. If none is specified, then
"." will be used.
- </para>
+ </para>
</listitem>
</varlistentry>
<varlistentry>
<term><command>empty-zones-enable</command></term>
<listitem>
- <para>
+ <para>
Enable or disable all empty zones. By default, they
are enabled.
- </para>
+ </para>
</listitem>
</varlistentry>
<varlistentry>
<term><command>disable-empty-zone</command></term>
<listitem>
- <para>
+ <para>
Disable individual empty zones. By default, none are
disabled. This option can be specified multiple times.
- </para>
+ </para>
</listitem>
</varlistentry>
- </variablelist>
- </sect3>
-
- <sect3 id="acache">
- <title>Additional Section Caching</title>
-
- <para>
- The additional section cache, also called <command>acache</command>,
- is an internal cache to improve the response performance of BIND 9.
- When additional section caching is enabled, BIND 9 will
- cache an internal short-cut to the additional section content for
- each answer RR.
- Note that <command>acache</command> is an internal caching
- mechanism of BIND 9, and is not related to the DNS caching
- server function.
- </para>
-
- <para>
- Additional section caching does not change the
- response content (except the RRsets ordering of the additional
- section, see below), but can improve the response performance
- significantly.
- It is particularly effective when BIND 9 acts as an authoritative
- server for a zone that has many delegations with many glue RRs.
- </para>
-
- <para>
- In order to obtain the maximum performance improvement
- from additional section caching, setting
- <command>additional-from-cache</command>
- to <command>no</command> is recommended, since the current
- implementation of <command>acache</command>
- does not short-cut of additional section information from the
- DNS cache data.
- </para>
-
- <para>
- One obvious disadvantage of <command>acache</command> is
- that it requires much more
- memory for the internal cached data.
- Thus, if the response performance does not matter and memory
- consumption is much more critical, the
- <command>acache</command> mechanism can be
- disabled by setting <command>acache-enable</command> to
- <command>no</command>.
- It is also possible to specify the upper limit of memory
- consumption
- for acache by using <command>max-acache-size</command>.
- </para>
-
- <para>
- Additional section caching also has a minor effect on the
- RRset ordering in the additional section.
- Without <command>acache</command>,
- <command>cyclic</command> order is effective for the additional
- section as well as the answer and authority sections.
- However, additional section caching fixes the ordering when it
- first caches an RRset for the additional section, and the same
- ordering will be kept in succeeding responses, regardless of the
- setting of <command>rrset-order</command>.
- The effect of this should be minor, however, since an
- RRset in the additional section
- typically only contains a small number of RRs (and in many cases
- it only contains a single RR), in which case the
- ordering does not matter much.
- </para>
-
- <para>
- The following is a summary of options related to
- <command>acache</command>.
- </para>
-
- <variablelist>
-
- <varlistentry>
- <term><command>acache-enable</command></term>
- <listitem>
- <para>
- If <command>yes</command>, additional section caching is
+ </variablelist>
+ </sect3>
+
+ <sect3 id="acache">
+ <title>Additional Section Caching</title>
+
+ <para>
+ The additional section cache, also called <command>acache</command>,
+ is an internal cache to improve the response performance of BIND 9.
+ When additional section caching is enabled, BIND 9 will
+ cache an internal short-cut to the additional section content for
+ each answer RR.
+ Note that <command>acache</command> is an internal caching
+ mechanism of BIND 9, and is not related to the DNS caching
+ server function.
+ </para>
+
+ <para>
+ Additional section caching does not change the
+ response content (except the RRsets ordering of the additional
+ section, see below), but can improve the response performance
+ significantly.
+ It is particularly effective when BIND 9 acts as an authoritative
+ server for a zone that has many delegations with many glue RRs.
+ </para>
+
+ <para>
+ In order to obtain the maximum performance improvement
+ from additional section caching, setting
+ <command>additional-from-cache</command>
+ to <command>no</command> is recommended, since the current
+ implementation of <command>acache</command>
+ does not short-cut of additional section information from the
+ DNS cache data.
+ </para>
+
+ <para>
+ One obvious disadvantage of <command>acache</command> is
+ that it requires much more
+ memory for the internal cached data.
+ Thus, if the response performance does not matter and memory
+ consumption is much more critical, the
+ <command>acache</command> mechanism can be
+ disabled by setting <command>acache-enable</command> to
+ <command>no</command>.
+ It is also possible to specify the upper limit of memory
+ consumption
+ for acache by using <command>max-acache-size</command>.
+ </para>
+
+ <para>
+ Additional section caching also has a minor effect on the
+ RRset ordering in the additional section.
+ Without <command>acache</command>,
+ <command>cyclic</command> order is effective for the additional
+ section as well as the answer and authority sections.
+ However, additional section caching fixes the ordering when it
+ first caches an RRset for the additional section, and the same
+ ordering will be kept in succeeding responses, regardless of the
+ setting of <command>rrset-order</command>.
+ The effect of this should be minor, however, since an
+ RRset in the additional section
+ typically only contains a small number of RRs (and in many cases
+ it only contains a single RR), in which case the
+ ordering does not matter much.
+ </para>
+
+ <para>
+ The following is a summary of options related to
+ <command>acache</command>.
+ </para>
+
+ <variablelist>
+
+ <varlistentry>
+ <term><command>acache-enable</command></term>
+ <listitem>
+ <para>
+ If <command>yes</command>, additional section caching is
enabled. The default value is <command>no</command>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>acache-cleaning-interval</command></term>
- <listitem>
- <para>
- The server will remove stale cache entries, based on an LRU
- based
- algorithm, every <command>acache-cleaning-interval</command> minutes.
- The default is 60 minutes.
- If set to 0, no periodic cleaning will occur.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>max-acache-size</command></term>
- <listitem>
- <para>
- The maximum amount of memory in bytes to use for the server's acache.
- When the amount of data in the acache reaches this limit,
- the server
- will clean more aggressively so that the limit is not
- exceeded.
- In a server with multiple views, the limit applies
- separately to the
- acache of each view.
- The default is <literal>16M</literal>.
- </para>
- </listitem>
- </varlistentry>
-
- </variablelist>
-
- </sect3>
-
- <sect3>
- <title>Content Filtering</title>
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>acache-cleaning-interval</command></term>
+ <listitem>
+ <para>
+ The server will remove stale cache entries, based on an LRU
+ based
+ algorithm, every <command>acache-cleaning-interval</command> minutes.
+ The default is 60 minutes.
+ If set to 0, no periodic cleaning will occur.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>max-acache-size</command></term>
+ <listitem>
+ <para>
+ The maximum amount of memory in bytes to use for the server's acache.
+ When the amount of data in the acache reaches this limit,
+ the server
+ will clean more aggressively so that the limit is not
+ exceeded.
+ In a server with multiple views, the limit applies
+ separately to the
+ acache of each view.
+ The default is <literal>16M</literal>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ </variablelist>
+
+ </sect3>
+
+ <sect3>
+ <title>Content Filtering</title>
<para>
<acronym>BIND</acronym> 9 provides the ability to filter
out DNS responses from external DNS servers containing
@@ -9051,7 +9165,7 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
<para>
In the <varname>address_match_list</varname> of the
<command>deny-answer-addresses</command> option, only
- <varname>ip_addr</varname>
+ <varname>ip_addr</varname>
and <varname>ip_prefix</varname>
are meaningful;
any <varname>key_id</varname> will be silently ignored.
@@ -9152,7 +9266,7 @@ deny-answer-aliases { "example.net"; };
</para>
</sect3>
- <sect3>
+ <sect3>
<title>Response Policy Zone (RPZ) Rewriting</title>
<para>
<acronym>BIND</acronym> 9 includes a limited
@@ -9362,24 +9476,24 @@ deny-answer-aliases { "example.net"; };
<para>
For example, you might use this option statement
- </para>
+ </para>
<programlisting> response-policy { zone "badlist"; };</programlisting>
- <para>
- and this zone statement
- </para>
+ <para>
+ and this zone statement
+ </para>
<programlisting> zone "badlist" {type master; file "master/badlist"; allow-query {none;}; };</programlisting>
- <para>
- with this zone file
- </para>
+ <para>
+ with this zone file
+ </para>
<programlisting>$TTL 1H
@ SOA LOCALHOST. named-mgr.example.com (1 1h 15m 30d 2h)
- NS LOCALHOST.
+ NS LOCALHOST.
; QNAME policy records. There are no periods (.) after the owner names.
nxdomain.domain.com CNAME . ; NXDOMAIN policy
nodata.domain.com CNAME *. ; NODATA policy
bad.domain.com A 10.0.0.1 ; redirect to a walled garden
- AAAA 2001:2::1
+ AAAA 2001:2::1
; do not rewrite (PASSTHRU) OK.DOMAIN.COM
ok.domain.com CNAME rpz-passthru.
@@ -9398,35 +9512,35 @@ bzone.domain.com CNAME garden.example.com.
ns.domain.com.rpz-nsdname CNAME .
48.zz.2.2001.rpz-nsip CNAME .
</programlisting>
- <para>
- RPZ can affect server performance.
- Each configured response policy zone requires the server to
- perform one to four additional database lookups before a
- query can be answered.
- For example, a DNS server with four policy zones, each with all
- four kinds of response triggers, QNAME, IP, NSIP, and
- NSDNAME, requires a total of 17 times as many database
- lookups as a similar DNS server with no response policy zones.
- A <acronym>BIND9</acronym> server with adequate memory and one
- response policy zone with QNAME and IP triggers might achieve a
- maximum queries-per-second rate about 20% lower.
- A server with four response policy zones with QNAME and IP
- triggers might have a maximum QPS rate about 50% lower.
- </para>
-
- <para>
- Responses rewritten by RPZ are counted in the
- <command>RPZRewrites</command> statistics.
- </para>
- </sect3>
+ <para>
+ RPZ can affect server performance.
+ Each configured response policy zone requires the server to
+ perform one to four additional database lookups before a
+ query can be answered.
+ For example, a DNS server with four policy zones, each with all
+ four kinds of response triggers, QNAME, IP, NSIP, and
+ NSDNAME, requires a total of 17 times as many database
+ lookups as a similar DNS server with no response policy zones.
+ A <acronym>BIND9</acronym> server with adequate memory and one
+ response policy zone with QNAME and IP triggers might achieve a
+ maximum queries-per-second rate about 20% lower.
+ A server with four response policy zones with QNAME and IP
+ triggers might have a maximum QPS rate about 50% lower.
+ </para>
+
+ <para>
+ Responses rewritten by RPZ are counted in the
+ <command>RPZRewrites</command> statistics.
+ </para>
+ </sect3>
<sect3>
<title>Response Rate Limiting</title>
<para>
- This feature is only available when <acronym>BIND</acronym> 9
- is compiled with the <userinput>--enable-rrl</userinput>
- option on the "configure" command line.
- </para>
+ This feature is only available when <acronym>BIND</acronym> 9
+ is compiled with the <userinput>--enable-rrl</userinput>
+ option on the "configure" command line.
+ </para>
<para>
Excessive almost identical UDP <emphasis>responses</emphasis>
can be controlled by configuring a
@@ -9458,16 +9572,16 @@ ns.domain.com.rpz-nsdname CNAME .
A prospective response debits its account by one.
Responses are dropped or truncated
while the account is negative.
- Responses are tracked within a rolling window of time
- which defaults to 15 seconds, but can be configured with
- the <command>window</command> option to any value from
- 1 to 3600 seconds (1 hour).
+ Responses are tracked within a rolling window of time
+ which defaults to 15 seconds, but can be configured with
+ the <command>window</command> option to any value from
+ 1 to 3600 seconds (1 hour).
The account cannot become more positive than
the per-second limit
or more negative than <command>window</command>
times the per-second limit.
- When the specified number of credits for a class of
- responses is set to 0, those responses are not rate limited.
+ When the specified number of credits for a class of
+ responses is set to 0, those responses are not rate limited.
</para>
<para>
@@ -9491,8 +9605,8 @@ ns.domain.com.rpz-nsdname CNAME .
<command>nodata-per-second</command>
(default <command>responses-per-second</command>).
Requests for any and all undefined subdomains of a given
- valid domain result in NXDOMAIN errors, and are identical
- regardless of query type.
+ valid domain result in NXDOMAIN errors, and are identical
+ regardless of query type.
They are limited by <command>nxdomain-per-second</command>
(default <command>responses-per-second</command>).
This controls some attacks using random names, but
@@ -9512,9 +9626,9 @@ ns.domain.com.rpz-nsdname CNAME .
</para>
<para>
- All requests that result in DNS errors other
+ All requests that result in DNS errors other
than NXDOMAIN, such as SERVFAIL and FORMERR, are identical
- regardless of requested name (qname) or record type (qtype).
+ regardless of requested name (qname) or record type (qtype).
This controls attacks using invalid requests or distant,
broken authoritative servers.
By default the limit on errors is the same as the
@@ -9662,12 +9776,13 @@ ns.domain.com.rpz-nsdname CNAME .
</sect2>
<sect2 id="server_statement_grammar">
- <title><command>server</command> Statement Grammar</title>
+ <title><command>server</command> Statement Grammar</title>
<programlisting><command>server</command> <replaceable>ip_addr[/prefixlen]</replaceable> {
<optional> bogus <replaceable>yes_or_no</replaceable> ; </optional>
<optional> provide-ixfr <replaceable>yes_or_no</replaceable> ; </optional>
<optional> request-ixfr <replaceable>yes_or_no</replaceable> ; </optional>
+ <optional> request-nsid <replaceable>yes_or_no</replaceable> ; </optional>
<optional> edns <replaceable>yes_or_no</replaceable> ; </optional>
<optional> edns-udp-size <replaceable>number</replaceable> ; </optional>
<optional> max-udp-size <replaceable>number</replaceable> ; </optional>
@@ -9679,113 +9794,113 @@ ns.domain.com.rpz-nsdname CNAME .
<optional> notify-source (<replaceable>ip4_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional>
<optional> notify-source-v6 (<replaceable>ip6_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional>
<optional> query-source <optional> address ( <replaceable>ip_addr</replaceable> | <replaceable>*</replaceable> ) </optional>
- <optional> port ( <replaceable>ip_port</replaceable> | <replaceable>*</replaceable> ) </optional>; </optional>
+ <optional> port ( <replaceable>ip_port</replaceable> | <replaceable>*</replaceable> ) </optional>; </optional>
<optional> query-source-v6 <optional> address ( <replaceable>ip_addr</replaceable> | <replaceable>*</replaceable> ) </optional>
- <optional> port ( <replaceable>ip_port</replaceable> | <replaceable>*</replaceable> ) </optional>; </optional>
+ <optional> port ( <replaceable>ip_port</replaceable> | <replaceable>*</replaceable> ) </optional>; </optional>
<optional> use-queryport-pool <replaceable>yes_or_no</replaceable>; </optional>
<optional> queryport-pool-ports <replaceable>number</replaceable>; </optional>
<optional> queryport-pool-updateinterval <replaceable>number</replaceable>; </optional>
};
</programlisting>
- </sect2>
-
- <sect2 id="server_statement_definition_and_usage">
- <title><command>server</command> Statement Definition and
- Usage</title>
-
- <para>
- The <command>server</command> statement defines
- characteristics
- to be associated with a remote name server. If a prefix length is
- specified, then a range of servers is covered. Only the most
- specific
- server clause applies regardless of the order in
- <filename>named.conf</filename>.
- </para>
-
- <para>
- The <command>server</command> statement can occur at
- the top level of the
- configuration file or inside a <command>view</command>
- statement.
- If a <command>view</command> statement contains
- one or more <command>server</command> statements, only
- those
- apply to the view and any top-level ones are ignored.
- If a view contains no <command>server</command>
- statements,
- any top-level <command>server</command> statements are
- used as
- defaults.
- </para>
-
- <para>
- If you discover that a remote server is giving out bad data,
- marking it as bogus will prevent further queries to it. The
- default
- value of <command>bogus</command> is <command>no</command>.
- </para>
- <para>
- The <command>provide-ixfr</command> clause determines
- whether
- the local server, acting as master, will respond with an
- incremental
- zone transfer when the given remote server, a slave, requests it.
- If set to <command>yes</command>, incremental transfer
- will be provided
- whenever possible. If set to <command>no</command>,
- all transfers
- to the remote server will be non-incremental. If not set, the
- value
- of the <command>provide-ixfr</command> option in the
- view or
- global options block is used as a default.
- </para>
-
- <para>
- The <command>request-ixfr</command> clause determines
- whether
- the local server, acting as a slave, will request incremental zone
- transfers from the given remote server, a master. If not set, the
- value of the <command>request-ixfr</command> option in
- the view or global options block is used as a default. It may
- also be set in the zone block and, if set there, it will
- override the global or view setting for that zone.
- </para>
-
- <para>
- IXFR requests to servers that do not support IXFR will
- automatically
- fall back to AXFR. Therefore, there is no need to manually list
- which servers support IXFR and which ones do not; the global
- default
- of <command>yes</command> should always work.
- The purpose of the <command>provide-ixfr</command> and
- <command>request-ixfr</command> clauses is
- to make it possible to disable the use of IXFR even when both
- master
- and slave claim to support it, for example if one of the servers
- is buggy and crashes or corrupts data when IXFR is used.
- </para>
-
- <para>
- The <command>edns</command> clause determines whether
- the local server will attempt to use EDNS when communicating
+ </sect2>
+
+ <sect2 id="server_statement_definition_and_usage">
+ <title><command>server</command> Statement Definition and
+ Usage</title>
+
+ <para>
+ The <command>server</command> statement defines
+ characteristics
+ to be associated with a remote name server. If a prefix length is
+ specified, then a range of servers is covered. Only the most
+ specific
+ server clause applies regardless of the order in
+ <filename>named.conf</filename>.
+ </para>
+
+ <para>
+ The <command>server</command> statement can occur at
+ the top level of the
+ configuration file or inside a <command>view</command>
+ statement.
+ If a <command>view</command> statement contains
+ one or more <command>server</command> statements, only
+ those
+ apply to the view and any top-level ones are ignored.
+ If a view contains no <command>server</command>
+ statements,
+ any top-level <command>server</command> statements are
+ used as
+ defaults.
+ </para>
+
+ <para>
+ If you discover that a remote server is giving out bad data,
+ marking it as bogus will prevent further queries to it. The
+ default
+ value of <command>bogus</command> is <command>no</command>.
+ </para>
+ <para>
+ The <command>provide-ixfr</command> clause determines
+ whether
+ the local server, acting as master, will respond with an
+ incremental
+ zone transfer when the given remote server, a slave, requests it.
+ If set to <command>yes</command>, incremental transfer
+ will be provided
+ whenever possible. If set to <command>no</command>,
+ all transfers
+ to the remote server will be non-incremental. If not set, the
+ value
+ of the <command>provide-ixfr</command> option in the
+ view or
+ global options block is used as a default.
+ </para>
+
+ <para>
+ The <command>request-ixfr</command> clause determines
+ whether
+ the local server, acting as a slave, will request incremental zone
+ transfers from the given remote server, a master. If not set, the
+ value of the <command>request-ixfr</command> option in
+ the view or global options block is used as a default. It may
+ also be set in the zone block and, if set there, it will
+ override the global or view setting for that zone.
+ </para>
+
+ <para>
+ IXFR requests to servers that do not support IXFR will
+ automatically
+ fall back to AXFR. Therefore, there is no need to manually list
+ which servers support IXFR and which ones do not; the global
+ default
+ of <command>yes</command> should always work.
+ The purpose of the <command>provide-ixfr</command> and
+ <command>request-ixfr</command> clauses is
+ to make it possible to disable the use of IXFR even when both
+ master
+ and slave claim to support it, for example if one of the servers
+ is buggy and crashes or corrupts data when IXFR is used.
+ </para>
+
+ <para>
+ The <command>edns</command> clause determines whether
+ the local server will attempt to use EDNS when communicating
with the remote server. The default is <command>yes</command>.
- </para>
+ </para>
- <para>
- The <command>edns-udp-size</command> option sets the EDNS UDP size
+ <para>
+ The <command>edns-udp-size</command> option sets the EDNS UDP size
that is advertised by <command>named</command> when querying the remote server.
Valid values are 512 to 4096 bytes (values outside this range will be
silently adjusted). This option is useful when you wish to
advertises a different value to this server than the value you
advertise globally, for example, when there is a firewall at the
remote site that is blocking large replies.
- </para>
+ </para>
- <para>
+ <para>
The <command>max-udp-size</command> option sets the
maximum EDNS UDP message size <command>named</command> will send. Valid
values are 512 to 4096 bytes (values outside this range will
@@ -9794,65 +9909,65 @@ ns.domain.com.rpz-nsdname CNAME .
replies from <command>named</command>.
</para>
- <para>
- The server supports two zone transfer methods. The first, <command>one-answer</command>,
- uses one DNS message per resource record transferred. <command>many-answers</command> packs
- as many resource records as possible into a message. <command>many-answers</command> is
- more efficient, but is only known to be understood by <acronym>BIND</acronym> 9, <acronym>BIND</acronym>
- 8.x, and patched versions of <acronym>BIND</acronym>
- 4.9.5. You can specify which method
- to use for a server with the <command>transfer-format</command> option.
- If <command>transfer-format</command> is not
- specified, the <command>transfer-format</command>
- specified
- by the <command>options</command> statement will be
- used.
- </para>
-
- <para><command>transfers</command>
+ <para>
+ The server supports two zone transfer methods. The first, <command>one-answer</command>,
+ uses one DNS message per resource record transferred. <command>many-answers</command> packs
+ as many resource records as possible into a message. <command>many-answers</command> is
+ more efficient, but is only known to be understood by <acronym>BIND</acronym> 9, <acronym>BIND</acronym>
+ 8.x, and patched versions of <acronym>BIND</acronym>
+ 4.9.5. You can specify which method
+ to use for a server with the <command>transfer-format</command> option.
+ If <command>transfer-format</command> is not
+ specified, the <command>transfer-format</command>
+ specified
+ by the <command>options</command> statement will be
+ used.
+ </para>
+
+ <para><command>transfers</command>
is used to limit the number of concurrent inbound zone
- transfers from the specified server. If no
- <command>transfers</command> clause is specified, the
- limit is set according to the
- <command>transfers-per-ns</command> option.
- </para>
-
- <para>
- The <command>keys</command> clause identifies a
- <command>key_id</command> defined by the <command>key</command> statement,
- to be used for transaction security (TSIG, <xref linkend="tsig"/>)
- when talking to the remote server.
- When a request is sent to the remote server, a request signature
- will be generated using the key specified here and appended to the
- message. A request originating from the remote server is not
- required
- to be signed by this key.
- </para>
-
- <para>
- Although the grammar of the <command>keys</command>
- clause
- allows for multiple keys, only a single key per server is
- currently
- supported.
- </para>
-
- <para>
- The <command>transfer-source</command> and
- <command>transfer-source-v6</command> clauses specify
- the IPv4 and IPv6 source
- address to be used for zone transfer with the remote server,
- respectively.
- For an IPv4 remote server, only <command>transfer-source</command> can
- be specified.
- Similarly, for an IPv6 remote server, only
- <command>transfer-source-v6</command> can be
- specified.
- For more details, see the description of
- <command>transfer-source</command> and
- <command>transfer-source-v6</command> in
- <xref linkend="zone_transfers"/>.
- </para>
+ transfers from the specified server. If no
+ <command>transfers</command> clause is specified, the
+ limit is set according to the
+ <command>transfers-per-ns</command> option.
+ </para>
+
+ <para>
+ The <command>keys</command> clause identifies a
+ <command>key_id</command> defined by the <command>key</command> statement,
+ to be used for transaction security (TSIG, <xref linkend="tsig"/>)
+ when talking to the remote server.
+ When a request is sent to the remote server, a request signature
+ will be generated using the key specified here and appended to the
+ message. A request originating from the remote server is not
+ required
+ to be signed by this key.
+ </para>
+
+ <para>
+ Although the grammar of the <command>keys</command>
+ clause
+ allows for multiple keys, only a single key per server is
+ currently
+ supported.
+ </para>
+
+ <para>
+ The <command>transfer-source</command> and
+ <command>transfer-source-v6</command> clauses specify
+ the IPv4 and IPv6 source
+ address to be used for zone transfer with the remote server,
+ respectively.
+ For an IPv4 remote server, only <command>transfer-source</command> can
+ be specified.
+ Similarly, for an IPv6 remote server, only
+ <command>transfer-source-v6</command> can be
+ specified.
+ For more details, see the description of
+ <command>transfer-source</command> and
+ <command>transfer-source-v6</command> in
+ <xref linkend="zone_transfers"/>.
+ </para>
<para>
The <command>notify-source</command> and
@@ -9874,10 +9989,17 @@ ns.domain.com.rpz-nsdname CNAME .
only <command>query-source-v6</command> can be specified.
</para>
- </sect2>
+ <para>
+ The <command>request-nsid</command> clause determines
+ whether the local server will add a NSID EDNS option
+ to requests sent to the server. This overrides
+ <command>request-nsid</command> set at the view or
+ option level.
+ </para>
+ </sect2>
<sect2 id="statschannels">
- <title><command>statistics-channels</command> Statement Grammar</title>
+ <title><command>statistics-channels</command> Statement Grammar</title>
<programlisting><command>statistics-channels</command> {
[ inet ( ip_addr | * ) [ port ip_port ]
@@ -9888,17 +10010,17 @@ ns.domain.com.rpz-nsdname CNAME .
</sect2>
<sect2>
- <title><command>statistics-channels</command> Statement Definition and
- Usage</title>
+ <title><command>statistics-channels</command> Statement Definition and
+ Usage</title>
- <para>
- The <command>statistics-channels</command> statement
+ <para>
+ The <command>statistics-channels</command> statement
declares communication channels to be used by system
administrators to get access to statistics information of
the name server.
- </para>
+ </para>
- <para>
+ <para>
This statement intends to be flexible to support multiple
communication protocols in the future, but currently only
HTTP access is supported.
@@ -9906,76 +10028,76 @@ ns.domain.com.rpz-nsdname CNAME .
the <command>statistics-channels</command> statement is
still accepted even if it is built without the library,
but any HTTP access will fail with an error.
- </para>
+ </para>
- <para>
- An <command>inet</command> control channel is a TCP socket
+ <para>
+ An <command>inet</command> control channel is a TCP socket
listening at the specified <command>ip_port</command> on the
specified <command>ip_addr</command>, which can be an IPv4 or IPv6
address. An <command>ip_addr</command> of <literal>*</literal> (asterisk) is
interpreted as the IPv4 wildcard address; connections will be
accepted on any of the system's IPv4 addresses.
To listen on the IPv6 wildcard address,
- use an <command>ip_addr</command> of <literal>::</literal>.
- </para>
+ use an <command>ip_addr</command> of <literal>::</literal>.
+ </para>
- <para>
- If no port is specified, port 80 is used for HTTP channels.
+ <para>
+ If no port is specified, port 80 is used for HTTP channels.
The asterisk "<literal>*</literal>" cannot be used for
<command>ip_port</command>.
- </para>
+ </para>
- <para>
- The attempt of opening a statistics channel is
- restricted by the optional <command>allow</command> clause.
+ <para>
+ The attempt of opening a statistics channel is
+ restricted by the optional <command>allow</command> clause.
Connections to the statistics channel are permitted based on the
- <command>address_match_list</command>.
+ <command>address_match_list</command>.
If no <command>allow</command> clause is present,
<command>named</command> accepts connection
attempts from any address; since the statistics may
contain sensitive internal information, it is highly
recommended to restrict the source of connection requests
appropriately.
- </para>
-
- <para>
- If no <command>statistics-channels</command> statement is present,
- <command>named</command> will not open any communication channels.
- </para>
-
- <para>
- If the statistics channel is configured to listen on 127.0.0.1
- port 8888, then the statistics are accessible in XML format at
- <ulink url="http://127.0.0.1:8888/"
- >http://127.0.0.1:8888/</ulink> or
- <ulink url="http://127.0.0.1:8888/xml"
- >http://127.0.0.1:8888/xml</ulink>. A CSS file is
- included which can format the XML statistics into tables
- when viewed with a stylesheet-capable browser. When
- <acronym>BIND</acronym> 9 is configured with --enable-newstats,
- a new XML schema is used (version 3) which adds additional
- zone statistics and uses a flatter tree for more efficient
- parsing. The stylesheet included uses the Google Charts API
- to render data into into charts and graphs when using a
- javascript-capable browser.
- </para>
-
- <para>
- Applications that depend on a particular XML schema
- can request
- <ulink url="http://127.0.0.1:8888/xml/v2"
- >http://127.0.0.1:8888/xml/v2</ulink> for version 2
- of the statistics XML schema or
- <ulink url="http://127.0.0.1:8888/xml/v3"
- >http://127.0.0.1:8888/xml/v3</ulink> for version 3.
- If the requested schema is supported by the server, then
- it will respond; if not, it will return a "page not found"
- error.
- </para>
+ </para>
+
+ <para>
+ If no <command>statistics-channels</command> statement is present,
+ <command>named</command> will not open any communication channels.
+ </para>
+
+ <para>
+ If the statistics channel is configured to listen on 127.0.0.1
+ port 8888, then the statistics are accessible in XML format at
+ <ulink url="http://127.0.0.1:8888/"
+ >http://127.0.0.1:8888/</ulink> or
+ <ulink url="http://127.0.0.1:8888/xml"
+ >http://127.0.0.1:8888/xml</ulink>. A CSS file is
+ included which can format the XML statistics into tables
+ when viewed with a stylesheet-capable browser. When
+ <acronym>BIND</acronym> 9 is configured with --enable-newstats,
+ a new XML schema is used (version 3) which adds additional
+ zone statistics and uses a flatter tree for more efficient
+ parsing. The stylesheet included uses the Google Charts API
+ to render data into into charts and graphs when using a
+ javascript-capable browser.
+ </para>
+
+ <para>
+ Applications that depend on a particular XML schema
+ can request
+ <ulink url="http://127.0.0.1:8888/xml/v2"
+ >http://127.0.0.1:8888/xml/v2</ulink> for version 2
+ of the statistics XML schema or
+ <ulink url="http://127.0.0.1:8888/xml/v3"
+ >http://127.0.0.1:8888/xml/v3</ulink> for version 3.
+ If the requested schema is supported by the server, then
+ it will respond; if not, it will return a "page not found"
+ error.
+ </para>
</sect2>
<sect2 id="trusted-keys">
- <title><command>trusted-keys</command> Statement Grammar</title>
+ <title><command>trusted-keys</command> Statement Grammar</title>
<programlisting><command>trusted-keys</command> {
<replaceable>string</replaceable> <replaceable>number</replaceable> <replaceable>number</replaceable> <replaceable>number</replaceable> <replaceable>string</replaceable> ;
@@ -9983,7 +10105,7 @@ ns.domain.com.rpz-nsdname CNAME .
};
</programlisting>
- </sect2>
+ </sect2>
<sect2>
<title><command>trusted-keys</command> Statement Definition
and Usage</title>
@@ -10025,134 +10147,134 @@ ns.domain.com.rpz-nsdname CNAME .
</para>
</sect2>
- <sect2>
- <title><command>managed-keys</command> Statement Grammar</title>
+ <sect2>
+ <title><command>managed-keys</command> Statement Grammar</title>
<programlisting><command>managed-keys</command> {
- <replaceable>name</replaceable> <literal>initial-key</literal> <replaceable>flags</replaceable> <replaceable>protocol</replaceable> <replaceable>algorithm</replaceable> <replaceable>key-data</replaceable> ;
- <optional> <replaceable>name</replaceable> <literal>initial-key</literal> <replaceable>flags</replaceable> <replaceable>protocol</replaceable> <replaceable>algorithm</replaceable> <replaceable>key-data</replaceable> ; <optional>...</optional></optional>
+ <replaceable>name</replaceable> initial-key <replaceable>flags</replaceable> <replaceable>protocol</replaceable> <replaceable>algorithm</replaceable> <replaceable>key-data</replaceable> ;
+ <optional> <replaceable>name</replaceable> initial-key <replaceable>flags</replaceable> <replaceable>protocol</replaceable> <replaceable>algorithm</replaceable> <replaceable>key-data</replaceable> ; <optional>...</optional></optional>
};
</programlisting>
- </sect2>
+ </sect2>
<sect2 id="managed-keys">
<title><command>managed-keys</command> Statement Definition
and Usage</title>
<para>
The <command>managed-keys</command> statement, like
- <command>trusted-keys</command>, defines DNSSEC
- security roots. The difference is that
- <command>managed-keys</command> can be kept up to date
- automatically, without intervention from the resolver
- operator.
- </para>
- <para>
- Suppose, for example, that a zone's key-signing
- key was compromised, and the zone owner had to revoke and
- replace the key. A resolver which had the old key in a
- <command>trusted-keys</command> statement would be
- unable to validate this zone any longer; it would
- reply with a SERVFAIL response code. This would
- continue until the resolver operator had updated the
- <command>trusted-keys</command> statement with the new key.
- </para>
- <para>
- If, however, the zone were listed in a
- <command>managed-keys</command> statement instead, then the
- zone owner could add a "stand-by" key to the zone in advance.
- <command>named</command> would store the stand-by key, and
- when the original key was revoked, <command>named</command>
- would be able to transition smoothly to the new key. It would
- also recognize that the old key had been revoked, and cease
- using that key to validate answers, minimizing the damage that
- the compromised key could do.
- </para>
- <para>
- A <command>managed-keys</command> statement contains a list of
- the keys to be managed, along with information about how the
- keys are to be initialized for the first time. The only
- initialization method currently supported (as of
- <acronym>BIND</acronym> 9.7.0) is <literal>initial-key</literal>.
- This means the <command>managed-keys</command> statement must
- contain a copy of the initializing key. (Future releases may
- allow keys to be initialized by other methods, eliminating this
- requirement.)
- </para>
- <para>
- Consequently, a <command>managed-keys</command> statement
- appears similar to a <command>trusted-keys</command>, differing
- in the presence of the second field, containing the keyword
- <literal>initial-key</literal>. The difference is, whereas the
- keys listed in a <command>trusted-keys</command> continue to be
- trusted until they are removed from
- <filename>named.conf</filename>, an initializing key listed
- in a <command>managed-keys</command> statement is only trusted
- <emphasis>once</emphasis>: for as long as it takes to load the
- managed key database and start the RFC 5011 key maintenance
- process.
- </para>
- <para>
- The first time <command>named</command> runs with a managed key
- configured in <filename>named.conf</filename>, it fetches the
- DNSKEY RRset directly from the zone apex, and validates it
- using the key specified in the <command>managed-keys</command>
- statement. If the DNSKEY RRset is validly signed, then it is
- used as the basis for a new managed keys database.
- </para>
- <para>
- From that point on, whenever <command>named</command> runs, it
- sees the <command>managed-keys</command> statement, checks to
- make sure RFC 5011 key maintenance has already been initialized
- for the specified domain, and if so, it simply moves on. The
- key specified in the <command>managed-keys</command> is not
- used to validate answers; it has been superseded by the key or
- keys stored in the managed keys database.
- </para>
- <para>
- The next time <command>named</command> runs after a name
- has been <emphasis>removed</emphasis> from the
- <command>managed-keys</command> statement, the corresponding
- zone will be removed from the managed keys database,
- and RFC 5011 key maintenance will no longer be used for that
- domain.
+ <command>trusted-keys</command>, defines DNSSEC
+ security roots. The difference is that
+ <command>managed-keys</command> can be kept up to date
+ automatically, without intervention from the resolver
+ operator.
+ </para>
+ <para>
+ Suppose, for example, that a zone's key-signing
+ key was compromised, and the zone owner had to revoke and
+ replace the key. A resolver which had the old key in a
+ <command>trusted-keys</command> statement would be
+ unable to validate this zone any longer; it would
+ reply with a SERVFAIL response code. This would
+ continue until the resolver operator had updated the
+ <command>trusted-keys</command> statement with the new key.
+ </para>
+ <para>
+ If, however, the zone were listed in a
+ <command>managed-keys</command> statement instead, then the
+ zone owner could add a "stand-by" key to the zone in advance.
+ <command>named</command> would store the stand-by key, and
+ when the original key was revoked, <command>named</command>
+ would be able to transition smoothly to the new key. It would
+ also recognize that the old key had been revoked, and cease
+ using that key to validate answers, minimizing the damage that
+ the compromised key could do.
+ </para>
+ <para>
+ A <command>managed-keys</command> statement contains a list of
+ the keys to be managed, along with information about how the
+ keys are to be initialized for the first time. The only
+ initialization method currently supported (as of
+ <acronym>BIND</acronym> 9.7.0) is <literal>initial-key</literal>.
+ This means the <command>managed-keys</command> statement must
+ contain a copy of the initializing key. (Future releases may
+ allow keys to be initialized by other methods, eliminating this
+ requirement.)
+ </para>
+ <para>
+ Consequently, a <command>managed-keys</command> statement
+ appears similar to a <command>trusted-keys</command>, differing
+ in the presence of the second field, containing the keyword
+ <literal>initial-key</literal>. The difference is, whereas the
+ keys listed in a <command>trusted-keys</command> continue to be
+ trusted until they are removed from
+ <filename>named.conf</filename>, an initializing key listed
+ in a <command>managed-keys</command> statement is only trusted
+ <emphasis>once</emphasis>: for as long as it takes to load the
+ managed key database and start the RFC 5011 key maintenance
+ process.
+ </para>
+ <para>
+ The first time <command>named</command> runs with a managed key
+ configured in <filename>named.conf</filename>, it fetches the
+ DNSKEY RRset directly from the zone apex, and validates it
+ using the key specified in the <command>managed-keys</command>
+ statement. If the DNSKEY RRset is validly signed, then it is
+ used as the basis for a new managed keys database.
+ </para>
+ <para>
+ From that point on, whenever <command>named</command> runs, it
+ sees the <command>managed-keys</command> statement, checks to
+ make sure RFC 5011 key maintenance has already been initialized
+ for the specified domain, and if so, it simply moves on. The
+ key specified in the <command>managed-keys</command> is not
+ used to validate answers; it has been superseded by the key or
+ keys stored in the managed keys database.
+ </para>
+ <para>
+ The next time <command>named</command> runs after a name
+ has been <emphasis>removed</emphasis> from the
+ <command>managed-keys</command> statement, the corresponding
+ zone will be removed from the managed keys database,
+ and RFC 5011 key maintenance will no longer be used for that
+ domain.
</para>
<para>
<command>named</command> only maintains a single managed keys
- database; consequently, unlike <command>trusted-keys</command>,
- <command>managed-keys</command> may only be set at the top
- level of <filename>named.conf</filename>, not within a view.
- </para>
- <para>
- In the current implementation, the managed keys database is
- stored as a master-format zone file called
- <filename>managed-keys.bind</filename>. When the key database
- is changed, the zone is updated. As with any other dynamic
- zone, changes will be written into a journal file,
- <filename>managed-keys.bind.jnl</filename>. They are committed
- to the master file as soon as possible afterward; in the case
- of the managed key database, this will usually occur within 30
- seconds. So, whenever <command>named</command> is using
- automatic key maintenance, those two files can be expected to
- exist in the working directory. (For this reason among others,
- the working directory should be always be writable by
- <command>named</command>.)
+ database; consequently, unlike <command>trusted-keys</command>,
+ <command>managed-keys</command> may only be set at the top
+ level of <filename>named.conf</filename>, not within a view.
+ </para>
+ <para>
+ In the current implementation, the managed keys database is
+ stored as a master-format zone file called
+ <filename>managed-keys.bind</filename>. When the key database
+ is changed, the zone is updated. As with any other dynamic
+ zone, changes will be written into a journal file,
+ <filename>managed-keys.bind.jnl</filename>. They are committed
+ to the master file as soon as possible afterward; in the case
+ of the managed key database, this will usually occur within 30
+ seconds. So, whenever <command>named</command> is using
+ automatic key maintenance, those two files can be expected to
+ exist in the working directory. (For this reason among others,
+ the working directory should be always be writable by
+ <command>named</command>.)
</para>
<para>
If the <command>dnssec-validation</command> option is
set to <userinput>auto</userinput>, <command>named</command>
will automatically initialize a managed key for the
- root zone. Similarly, if the <command>dnssec-lookaside</command>
- option is set to <userinput>auto</userinput>,
- <command>named</command> will automatically initialize
- a managed key for the zone <literal>dlv.isc.org</literal>.
- In both cases, the key that is used to initialize the key
- maintenance process is built into <command>named</command>,
- and can be overridden from <command>bindkeys-file</command>.
+ root zone. Similarly, if the <command>dnssec-lookaside</command>
+ option is set to <userinput>auto</userinput>,
+ <command>named</command> will automatically initialize
+ a managed key for the zone <literal>dlv.isc.org</literal>.
+ In both cases, the key that is used to initialize the key
+ maintenance process is built into <command>named</command>,
+ and can be overridden from <command>bindkeys-file</command>.
</para>
</sect2>
- <sect2 id="view_statement_grammar">
- <title><command>view</command> Statement Grammar</title>
+ <sect2 id="view_statement_grammar">
+ <title><command>view</command> Statement Grammar</title>
<programlisting><command>view</command> <replaceable>view_name</replaceable>
<optional><replaceable>class</replaceable></optional> {
@@ -10164,100 +10286,100 @@ ns.domain.com.rpz-nsdname CNAME .
};
</programlisting>
- </sect2>
- <sect2>
- <title><command>view</command> Statement Definition and Usage</title>
-
- <para>
- The <command>view</command> statement is a powerful
- feature
- of <acronym>BIND</acronym> 9 that lets a name server
- answer a DNS query differently
- depending on who is asking. It is particularly useful for
- implementing
- split DNS setups without having to run multiple servers.
- </para>
-
- <para>
- Each <command>view</command> statement defines a view
- of the
- DNS namespace that will be seen by a subset of clients. A client
- matches
- a view if its source IP address matches the
- <varname>address_match_list</varname> of the view's
- <command>match-clients</command> clause and its
- destination IP address matches
- the <varname>address_match_list</varname> of the
- view's
- <command>match-destinations</command> clause. If not
- specified, both
- <command>match-clients</command> and <command>match-destinations</command>
- default to matching all addresses. In addition to checking IP
- addresses
- <command>match-clients</command> and <command>match-destinations</command>
- can also take <command>keys</command> which provide an
- mechanism for the
- client to select the view. A view can also be specified
- as <command>match-recursive-only</command>, which
- means that only recursive
- requests from matching clients will match that view.
- The order of the <command>view</command> statements is
- significant &mdash;
- a client request will be resolved in the context of the first
- <command>view</command> that it matches.
- </para>
-
- <para>
- Zones defined within a <command>view</command>
- statement will
- only be accessible to clients that match the <command>view</command>.
- By defining a zone of the same name in multiple views, different
- zone data can be given to different clients, for example,
- "internal"
- and "external" clients in a split DNS setup.
- </para>
-
- <para>
- Many of the options given in the <command>options</command> statement
- can also be used within a <command>view</command>
- statement, and then
- apply only when resolving queries with that view. When no
- view-specific
- value is given, the value in the <command>options</command> statement
- is used as a default. Also, zone options can have default values
- specified
- in the <command>view</command> statement; these
- view-specific defaults
- take precedence over those in the <command>options</command> statement.
- </para>
-
- <para>
- Views are class specific. If no class is given, class IN
- is assumed. Note that all non-IN views must contain a hint zone,
- since only the IN class has compiled-in default hints.
- </para>
-
- <para>
- If there are no <command>view</command> statements in
- the config
- file, a default view that matches any client is automatically
- created
- in class IN. Any <command>zone</command> statements
- specified on
- the top level of the configuration file are considered to be part
- of
- this default view, and the <command>options</command>
- statement will
- apply to the default view. If any explicit <command>view</command>
- statements are present, all <command>zone</command>
- statements must
- occur inside <command>view</command> statements.
- </para>
-
- <para>
- Here is an example of a typical split DNS setup implemented
- using <command>view</command> statements:
- </para>
+ </sect2>
+ <sect2>
+ <title><command>view</command> Statement Definition and Usage</title>
+
+ <para>
+ The <command>view</command> statement is a powerful
+ feature
+ of <acronym>BIND</acronym> 9 that lets a name server
+ answer a DNS query differently
+ depending on who is asking. It is particularly useful for
+ implementing
+ split DNS setups without having to run multiple servers.
+ </para>
+
+ <para>
+ Each <command>view</command> statement defines a view
+ of the
+ DNS namespace that will be seen by a subset of clients. A client
+ matches
+ a view if its source IP address matches the
+ <varname>address_match_list</varname> of the view's
+ <command>match-clients</command> clause and its
+ destination IP address matches
+ the <varname>address_match_list</varname> of the
+ view's
+ <command>match-destinations</command> clause. If not
+ specified, both
+ <command>match-clients</command> and <command>match-destinations</command>
+ default to matching all addresses. In addition to checking IP
+ addresses
+ <command>match-clients</command> and <command>match-destinations</command>
+ can also take <command>keys</command> which provide an
+ mechanism for the
+ client to select the view. A view can also be specified
+ as <command>match-recursive-only</command>, which
+ means that only recursive
+ requests from matching clients will match that view.
+ The order of the <command>view</command> statements is
+ significant &mdash;
+ a client request will be resolved in the context of the first
+ <command>view</command> that it matches.
+ </para>
+
+ <para>
+ Zones defined within a <command>view</command>
+ statement will
+ only be accessible to clients that match the <command>view</command>.
+ By defining a zone of the same name in multiple views, different
+ zone data can be given to different clients, for example,
+ "internal"
+ and "external" clients in a split DNS setup.
+ </para>
+
+ <para>
+ Many of the options given in the <command>options</command> statement
+ can also be used within a <command>view</command>
+ statement, and then
+ apply only when resolving queries with that view. When no
+ view-specific
+ value is given, the value in the <command>options</command> statement
+ is used as a default. Also, zone options can have default values
+ specified
+ in the <command>view</command> statement; these
+ view-specific defaults
+ take precedence over those in the <command>options</command> statement.
+ </para>
+
+ <para>
+ Views are class specific. If no class is given, class IN
+ is assumed. Note that all non-IN views must contain a hint zone,
+ since only the IN class has compiled-in default hints.
+ </para>
+
+ <para>
+ If there are no <command>view</command> statements in
+ the config
+ file, a default view that matches any client is automatically
+ created
+ in class IN. Any <command>zone</command> statements
+ specified on
+ the top level of the configuration file are considered to be part
+ of
+ this default view, and the <command>options</command>
+ statement will
+ apply to the default view. If any explicit <command>view</command>
+ statements are present, all <command>zone</command>
+ statements must
+ occur inside <command>view</command> statements.
+ </para>
+
+ <para>
+ Here is an example of a typical split DNS setup implemented
+ using <command>view</command> statements:
+ </para>
<programlisting>view "internal" {
// This should match our internal networks.
@@ -10270,8 +10392,8 @@ ns.domain.com.rpz-nsdname CNAME .
// Provide a complete view of the example.com
// zone including addresses of internal hosts.
zone "example.com" {
- type master;
- file "example-internal.db";
+ type master;
+ file "example-internal.db";
};
};
@@ -10286,16 +10408,16 @@ view "external" {
// Provide a restricted view of the example.com
// zone containing only publicly accessible hosts.
zone "example.com" {
- type master;
- file "example-external.db";
+ type master;
+ file "example-external.db";
};
};
</programlisting>
- </sect2>
- <sect2 id="zone_statement_grammar">
- <title><command>zone</command>
- Statement Grammar</title>
+ </sect2>
+ <sect2 id="zone_statement_grammar">
+ <title><command>zone</command>
+ Statement Grammar</title>
<programlisting><command>zone</command> <replaceable>zone_name</replaceable> <optional><replaceable>class</replaceable></optional> {
type master;
@@ -10308,11 +10430,11 @@ view "external" {
<optional> dnssec-loadkeys-interval <replaceable>number</replaceable>; </optional>
<optional> update-policy <replaceable>local</replaceable> | { <replaceable>update_policy_rule</replaceable> <optional>...</optional> }; </optional>
<optional> also-notify { <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> ;
- <optional> <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> ; ... </optional> }; </optional>
+ <optional> <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> ; ... </optional> }; </optional>
<optional> check-names (<constant>warn</constant>|<constant>fail</constant>|<constant>ignore</constant>) ; </optional>
<optional> check-mx (<constant>warn</constant>|<constant>fail</constant>|<constant>ignore</constant>) ; </optional>
<optional> check-wildcard <replaceable>yes_or_no</replaceable>; </optional>
- <optional> check-spf ( <replaceable>warn</replaceable> | <replaceable>fail</replaceable> | <replaceable>ignore</replaceable> ); </optional>
+ <optional> check-spf ( <replaceable>warn</replaceable> | <replaceable>ignore</replaceable> ); </optional>
<optional> check-integrity <replaceable>yes_or_no</replaceable> ; </optional>
<optional> dialup <replaceable>dialup_option</replaceable> ; </optional>
<optional> file <replaceable>string</replaceable> ; </optional>
@@ -10366,8 +10488,8 @@ zone <replaceable>zone_name</replaceable> <optional><replaceable>class</replacea
<optional> dnssec-secure-to-insecure <replaceable>yes_or_no</replaceable> ; </optional>
<optional> try-tcp-refresh <replaceable>yes_or_no</replaceable>; </optional>
<optional> also-notify <optional>port <replaceable>ip_port</replaceable></optional> { ( <replaceable>masters_list</replaceable> | <replaceable>ip_addr</replaceable>
- <optional>port <replaceable>ip_port</replaceable></optional>
- <optional>key <replaceable>key</replaceable></optional> ) ; <optional>...</optional> }; </optional>
+ <optional>port <replaceable>ip_port</replaceable></optional>
+ <optional>key <replaceable>key</replaceable></optional> ) ; <optional>...</optional> }; </optional>
<optional> check-names (<constant>warn</constant>|<constant>fail</constant>|<constant>ignore</constant>) ; </optional>
<optional> dialup <replaceable>dialup_option</replaceable> ; </optional>
<optional> file <replaceable>string</replaceable> ; </optional>
@@ -10381,8 +10503,8 @@ zone <replaceable>zone_name</replaceable> <optional><replaceable>class</replacea
<optional> ixfr-tmp-file <replaceable>string</replaceable> ; </optional>
<optional> maintain-ixfr-base <replaceable>yes_or_no</replaceable> ; </optional>
<optional> masters <optional>port <replaceable>ip_port</replaceable></optional> { ( <replaceable>masters_list</replaceable> | <replaceable>ip_addr</replaceable>
- <optional>port <replaceable>ip_port</replaceable></optional>
- <optional>key <replaceable>key</replaceable></optional> ) ; <optional>...</optional> }; </optional>
+ <optional>port <replaceable>ip_port</replaceable></optional>
+ <optional>key <replaceable>key</replaceable></optional> ) ; <optional>...</optional> }; </optional>
<optional> max-ixfr-log-size <replaceable>number</replaceable> ; </optional>
<optional> max-transfer-idle-in <replaceable>number</replaceable> ; </optional>
<optional> max-transfer-idle-out <replaceable>number</replaceable> ; </optional>
@@ -10396,7 +10518,7 @@ zone <replaceable>zone_name</replaceable> <optional><replaceable>class</replacea
<optional> transfer-source-v6 (<replaceable>ip6_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional>
<optional> alt-transfer-source (<replaceable>ip4_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional>
<optional> alt-transfer-source-v6 (<replaceable>ip6_addr</replaceable> | <constant>*</constant>)
- <optional>port <replaceable>ip_port</replaceable></optional> ; </optional>
+ <optional>port <replaceable>ip_port</replaceable></optional> ; </optional>
<optional> use-alt-transfer-source <replaceable>yes_or_no</replaceable>; </optional>
<optional> notify-source (<replaceable>ip4_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional>
<optional> notify-source-v6 (<replaceable>ip6_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional>
@@ -10436,17 +10558,17 @@ zone <replaceable>zone_name</replaceable> <optional><replaceable>class</replacea
<optional> forward (<constant>only</constant>|<constant>first</constant>) ; </optional>
<optional> forwarders { <optional> <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> ; ... </optional> }; </optional>
<optional> masters <optional>port <replaceable>ip_port</replaceable></optional> { ( <replaceable>masters_list</replaceable> | <replaceable>ip_addr</replaceable>
- <optional>port <replaceable>ip_port</replaceable></optional>
- <optional>key <replaceable>key</replaceable></optional> ) ; <optional>...</optional> }; </optional>
+ <optional>port <replaceable>ip_port</replaceable></optional>
+ <optional>key <replaceable>key</replaceable></optional> ) ; <optional>...</optional> }; </optional>
<optional> max-transfer-idle-in <replaceable>number</replaceable> ; </optional>
<optional> max-transfer-time-in <replaceable>number</replaceable> ; </optional>
<optional> pubkey <replaceable>number</replaceable> <replaceable>number</replaceable> <replaceable>number</replaceable> <replaceable>string</replaceable> ; </optional>
<optional> transfer-source (<replaceable>ip4_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional>
<optional> transfer-source-v6 (<replaceable>ip6_addr</replaceable> | <constant>*</constant>)
- <optional>port <replaceable>ip_port</replaceable></optional> ; </optional>
+ <optional>port <replaceable>ip_port</replaceable></optional> ; </optional>
<optional> alt-transfer-source (<replaceable>ip4_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional>
<optional> alt-transfer-source-v6 (<replaceable>ip6_addr</replaceable> | <constant>*</constant>)
- <optional>port <replaceable>ip_port</replaceable></optional> ; </optional>
+ <optional>port <replaceable>ip_port</replaceable></optional> ; </optional>
<optional> use-alt-transfer-source <replaceable>yes_or_no</replaceable>; </optional>
<optional> zone-statistics <replaceable>yes_or_no</replaceable> ; </optional>
<optional> database <replaceable>string</replaceable> ; </optional>
@@ -10485,145 +10607,145 @@ zone <replaceable>zone_name</replaceable> <optional><replaceable>class</replacea
</programlisting>
- </sect2>
- <sect2>
- <title><command>zone</command> Statement Definition and Usage</title>
- <sect3>
- <title>Zone Types</title>
- <informaltable colsep="0" rowsep="0">
- <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="3Level-table">
- <!--colspec colname="1" colnum="1" colsep="0" colwidth="1.108in"/-->
- <!--colspec colname="2" colnum="2" colsep="0" colwidth="4.017in"/-->
+ </sect2>
+ <sect2>
+ <title><command>zone</command> Statement Definition and Usage</title>
+ <sect3>
+ <title>Zone Types</title>
+ <informaltable colsep="0" rowsep="0">
+ <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="3Level-table">
+ <!--colspec colname="1" colnum="1" colsep="0" colwidth="1.108in"/-->
+ <!--colspec colname="2" colnum="2" colsep="0" colwidth="4.017in"/-->
<colspec colname="1" colnum="1" colsep="0"/>
- <colspec colname="2" colnum="2" colsep="0" colwidth="4.017in"/>
- <tbody>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <varname>master</varname>
- </para>
- </entry>
- <entry colname="2">
- <para>
- The server has a master copy of the data
- for the zone and will be able to provide authoritative
- answers for
- it.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <varname>slave</varname>
- </para>
- </entry>
- <entry colname="2">
- <para>
- A slave zone is a replica of a master
- zone. The <command>masters</command> list
- specifies one or more IP addresses
- of master servers that the slave contacts to update
- its copy of the zone.
- Masters list elements can also be names of other
- masters lists.
- By default, transfers are made from port 53 on the
- servers; this can
- be changed for all servers by specifying a port number
- before the
- list of IP addresses, or on a per-server basis after
- the IP address.
- Authentication to the master can also be done with
- per-server TSIG keys.
- If a file is specified, then the
- replica will be written to this file whenever the zone
- is changed,
- and reloaded from this file on a server restart. Use
- of a file is
- recommended, since it often speeds server startup and
- eliminates
- a needless waste of bandwidth. Note that for large
- numbers (in the
- tens or hundreds of thousands) of zones per server, it
- is best to
- use a two-level naming scheme for zone filenames. For
- example,
- a slave server for the zone <literal>example.com</literal> might place
- the zone contents into a file called
- <filename>ex/example.com</filename> where <filename>ex/</filename> is
- just the first two letters of the zone name. (Most
- operating systems
- behave very slowly if you put 100000 files into
- a single directory.)
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <varname>stub</varname>
- </para>
- </entry>
- <entry colname="2">
- <para>
- A stub zone is similar to a slave zone,
- except that it replicates only the NS records of a
- master zone instead
- of the entire zone. Stub zones are not a standard part
- of the DNS;
- they are a feature specific to the <acronym>BIND</acronym> implementation.
- </para>
-
- <para>
- Stub zones can be used to eliminate the need for glue
- NS record
- in a parent zone at the expense of maintaining a stub
- zone entry and
- a set of name server addresses in <filename>named.conf</filename>.
- This usage is not recommended for new configurations,
- and BIND 9
- supports it only in a limited way.
- In <acronym>BIND</acronym> 4/8, zone
- transfers of a parent zone
- included the NS records from stub children of that
- zone. This meant
- that, in some cases, users could get away with
- configuring child stubs
- only in the master server for the parent zone. <acronym>BIND</acronym>
- 9 never mixes together zone data from different zones
- in this
- way. Therefore, if a <acronym>BIND</acronym> 9 master serving a parent
- zone has child stub zones configured, all the slave
- servers for the
- parent zone also need to have the same child stub
- zones
- configured.
- </para>
-
- <para>
- Stub zones can also be used as a way of forcing the
- resolution
- of a given domain to use a particular set of
- authoritative servers.
- For example, the caching name servers on a private
- network using
- RFC1918 addressing may be configured with stub zones
- for
- <literal>10.in-addr.arpa</literal>
- to use a set of internal name servers as the
- authoritative
- servers for that domain.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <varname>static-stub</varname>
- </para>
- </entry>
- <entry colname="2">
- <para>
+ <colspec colname="2" colnum="2" colsep="0" colwidth="4.017in"/>
+ <tbody>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <varname>master</varname>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ The server has a master copy of the data
+ for the zone and will be able to provide authoritative
+ answers for
+ it.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <varname>slave</varname>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ A slave zone is a replica of a master
+ zone. The <command>masters</command> list
+ specifies one or more IP addresses
+ of master servers that the slave contacts to update
+ its copy of the zone.
+ Masters list elements can also be names of other
+ masters lists.
+ By default, transfers are made from port 53 on the
+ servers; this can
+ be changed for all servers by specifying a port number
+ before the
+ list of IP addresses, or on a per-server basis after
+ the IP address.
+ Authentication to the master can also be done with
+ per-server TSIG keys.
+ If a file is specified, then the
+ replica will be written to this file whenever the zone
+ is changed,
+ and reloaded from this file on a server restart. Use
+ of a file is
+ recommended, since it often speeds server startup and
+ eliminates
+ a needless waste of bandwidth. Note that for large
+ numbers (in the
+ tens or hundreds of thousands) of zones per server, it
+ is best to
+ use a two-level naming scheme for zone filenames. For
+ example,
+ a slave server for the zone <literal>example.com</literal> might place
+ the zone contents into a file called
+ <filename>ex/example.com</filename> where <filename>ex/</filename> is
+ just the first two letters of the zone name. (Most
+ operating systems
+ behave very slowly if you put 100000 files into
+ a single directory.)
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <varname>stub</varname>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ A stub zone is similar to a slave zone,
+ except that it replicates only the NS records of a
+ master zone instead
+ of the entire zone. Stub zones are not a standard part
+ of the DNS;
+ they are a feature specific to the <acronym>BIND</acronym> implementation.
+ </para>
+
+ <para>
+ Stub zones can be used to eliminate the need for glue
+ NS record
+ in a parent zone at the expense of maintaining a stub
+ zone entry and
+ a set of name server addresses in <filename>named.conf</filename>.
+ This usage is not recommended for new configurations,
+ and BIND 9
+ supports it only in a limited way.
+ In <acronym>BIND</acronym> 4/8, zone
+ transfers of a parent zone
+ included the NS records from stub children of that
+ zone. This meant
+ that, in some cases, users could get away with
+ configuring child stubs
+ only in the master server for the parent zone. <acronym>BIND</acronym>
+ 9 never mixes together zone data from different zones
+ in this
+ way. Therefore, if a <acronym>BIND</acronym> 9 master serving a parent
+ zone has child stub zones configured, all the slave
+ servers for the
+ parent zone also need to have the same child stub
+ zones
+ configured.
+ </para>
+
+ <para>
+ Stub zones can also be used as a way of forcing the
+ resolution
+ of a given domain to use a particular set of
+ authoritative servers.
+ For example, the caching name servers on a private
+ network using
+ RFC1918 addressing may be configured with stub zones
+ for
+ <literal>10.in-addr.arpa</literal>
+ to use a set of internal name servers as the
+ authoritative
+ servers for that domain.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <varname>static-stub</varname>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
A static-stub zone is similar to a stub zone
with the following exceptions:
the zone data is statically configured, rather
@@ -10633,12 +10755,12 @@ zone <replaceable>zone_name</replaceable> <optional><replaceable>class</replacea
configured data (nameserver names and glue addresses)
is always used even if different authoritative
information is cached.
- </para>
- <para>
+ </para>
+ <para>
Zone data is configured via the
<command>server-addresses</command> and
<command>server-names</command> zone options.
- </para>
+ </para>
<para>
The zone data is maintained in the form of NS
and (if necessary) glue A or AAAA RRs
@@ -10663,128 +10785,128 @@ zone <replaceable>zone_name</replaceable> <optional><replaceable>class</replacea
internally generated NS and (if necessary)
glue A or AAAA RRs
</para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <varname>forward</varname>
- </para>
- </entry>
- <entry colname="2">
- <para>
- A "forward zone" is a way to configure
- forwarding on a per-domain basis. A <command>zone</command> statement
- of type <command>forward</command> can
- contain a <command>forward</command>
- and/or <command>forwarders</command>
- statement,
- which will apply to queries within the domain given by
- the zone
- name. If no <command>forwarders</command>
- statement is present or
- an empty list for <command>forwarders</command> is given, then no
- forwarding will be done for the domain, canceling the
- effects of
- any forwarders in the <command>options</command> statement. Thus
- if you want to use this type of zone to change the
- behavior of the
- global <command>forward</command> option
- (that is, "forward first"
- to, then "forward only", or vice versa, but want to
- use the same
- servers as set globally) you need to re-specify the
- global forwarders.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <varname>hint</varname>
- </para>
- </entry>
- <entry colname="2">
- <para>
- The initial set of root name servers is
- specified using a "hint zone". When the server starts
- up, it uses
- the root hints to find a root name server and get the
- most recent
- list of root name servers. If no hint zone is
- specified for class
- IN, the server uses a compiled-in default set of root
- servers hints.
- Classes other than IN have no built-in defaults hints.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <varname>redirect</varname>
- </para>
- </entry>
- <entry colname="2">
- <para>
- Redirect zones are used to provide answers to
- queries when normal resolution would result in
- NXDOMAIN being returned.
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <varname>forward</varname>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ A "forward zone" is a way to configure
+ forwarding on a per-domain basis. A <command>zone</command> statement
+ of type <command>forward</command> can
+ contain a <command>forward</command>
+ and/or <command>forwarders</command>
+ statement,
+ which will apply to queries within the domain given by
+ the zone
+ name. If no <command>forwarders</command>
+ statement is present or
+ an empty list for <command>forwarders</command> is given, then no
+ forwarding will be done for the domain, canceling the
+ effects of
+ any forwarders in the <command>options</command> statement. Thus
+ if you want to use this type of zone to change the
+ behavior of the
+ global <command>forward</command> option
+ (that is, "forward first"
+ to, then "forward only", or vice versa, but want to
+ use the same
+ servers as set globally) you need to re-specify the
+ global forwarders.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <varname>hint</varname>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ The initial set of root name servers is
+ specified using a "hint zone". When the server starts
+ up, it uses
+ the root hints to find a root name server and get the
+ most recent
+ list of root name servers. If no hint zone is
+ specified for class
+ IN, the server uses a compiled-in default set of root
+ servers hints.
+ Classes other than IN have no built-in defaults hints.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <varname>redirect</varname>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Redirect zones are used to provide answers to
+ queries when normal resolution would result in
+ NXDOMAIN being returned.
Only one redirect zone is supported
- per view. <command>allow-query</command> can be
- used to restrict which clients see these answers.
- </para>
- <para>
+ per view. <command>allow-query</command> can be
+ used to restrict which clients see these answers.
+ </para>
+ <para>
If the client has requested DNSSEC records (DO=1) and
the NXDOMAIN response is signed then no substitution
will occur.
- </para>
- <para>
- To redirect all NXDOMAIN responses to
- 100.100.100.2 and
- 2001:ffff:ffff::100.100.100.2, one would
- configure a type redirect zone named ".",
- with the zone file containing wildcard records
- that point to the desired addresses:
- <literal>"*. IN A 100.100.100.2"</literal>
- and
- <literal>"*. IN AAAA 2001:ffff:ffff::100.100.100.2"</literal>.
- </para>
- <para>
- To redirect all Spanish names (under .ES) one
- would use similar entries but with the names
- "*.ES." instead of "*.". To redirect all
- commercial Spanish names (under COM.ES) one
+ </para>
+ <para>
+ To redirect all NXDOMAIN responses to
+ 100.100.100.2 and
+ 2001:ffff:ffff::100.100.100.2, one would
+ configure a type redirect zone named ".",
+ with the zone file containing wildcard records
+ that point to the desired addresses:
+ <literal>"*. IN A 100.100.100.2"</literal>
+ and
+ <literal>"*. IN AAAA 2001:ffff:ffff::100.100.100.2"</literal>.
+ </para>
+ <para>
+ To redirect all Spanish names (under .ES) one
+ would use similar entries but with the names
+ "*.ES." instead of "*.". To redirect all
+ commercial Spanish names (under COM.ES) one
would use wildcard entries called "*.COM.ES.".
- </para>
- <para>
- Note that the redirect zone supports all
- possible types; it is not limited to A and
- AAAA records.
- </para>
- <para>
- Because redirect zones are not referenced
- directly by name, they are not kept in the
- zone lookup table with normal master and slave
- zones. Consequently, it is not currently possible
- to use
- <command>rndc reload
- <replaceable>zonename</replaceable></command>
- to reload a redirect zone. However, when using
- <command>rndc reload</command> without specifying
- a zone name, redirect zones will be reloaded along
- with other zones.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <varname>delegation-only</varname>
- </para>
- </entry>
- <entry colname="2">
- <para>
+ </para>
+ <para>
+ Note that the redirect zone supports all
+ possible types; it is not limited to A and
+ AAAA records.
+ </para>
+ <para>
+ Because redirect zones are not referenced
+ directly by name, they are not kept in the
+ zone lookup table with normal master and slave
+ zones. Consequently, it is not currently possible
+ to use
+ <command>rndc reload
+ <replaceable>zonename</replaceable></command>
+ to reload a redirect zone. However, when using
+ <command>rndc reload</command> without specifying
+ a zone name, redirect zones will be reloaded along
+ with other zones.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <varname>delegation-only</varname>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
This is used to enforce the delegation-only
status of infrastructure zones (e.g. COM,
NET, ORG). Any answer that is received
@@ -10793,497 +10915,498 @@ zone <replaceable>zone_name</replaceable> <optional><replaceable>class</replacea
as NXDOMAIN. This does not apply to the
zone apex. This should not be applied to
leaf zones.
- </para>
- <para>
- <varname>delegation-only</varname> has no
- effect on answers received from forwarders.
- </para>
+ </para>
+ <para>
+ <varname>delegation-only</varname> has no
+ effect on answers received from forwarders.
+ </para>
<para>
See caveats in <xref linkend="root_delegation_only"/>.
</para>
- </entry>
- </row>
- </tbody>
- </tgroup>
- </informaltable>
- </sect3>
-
- <sect3>
- <title>Class</title>
- <para>
- The zone's name may optionally be followed by a class. If
- a class is not specified, class <literal>IN</literal> (for <varname>Internet</varname>),
- is assumed. This is correct for the vast majority of cases.
- </para>
- <para>
- The <literal>hesiod</literal> class is
- named for an information service from MIT's Project Athena. It
- is
- used to share information about various systems databases, such
- as users, groups, printers and so on. The keyword
- <literal>HS</literal> is
- a synonym for hesiod.
- </para>
- <para>
- Another MIT development is Chaosnet, a LAN protocol created
- in the mid-1970s. Zone data for it can be specified with the <literal>CHAOS</literal> class.
- </para>
- </sect3>
- <sect3>
-
- <title>Zone Options</title>
-
- <variablelist>
-
- <varlistentry>
- <term><command>allow-notify</command></term>
- <listitem>
- <para>
- See the description of
- <command>allow-notify</command> in <xref linkend="access_control"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>allow-query</command></term>
- <listitem>
- <para>
- See the description of
- <command>allow-query</command> in <xref linkend="access_control"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>allow-query-on</command></term>
- <listitem>
- <para>
- See the description of
- <command>allow-query-on</command> in <xref linkend="access_control"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>allow-transfer</command></term>
- <listitem>
- <para>
- See the description of <command>allow-transfer</command>
- in <xref linkend="access_control"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>allow-update</command></term>
- <listitem>
- <para>
- See the description of <command>allow-update</command>
- in <xref linkend="access_control"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>update-policy</command></term>
- <listitem>
- <para>
- Specifies a "Simple Secure Update" policy. See
- <xref linkend="dynamic_update_policies"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>allow-update-forwarding</command></term>
- <listitem>
- <para>
- See the description of <command>allow-update-forwarding</command>
- in <xref linkend="access_control"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>also-notify</command></term>
- <listitem>
- <para>
- Only meaningful if <command>notify</command>
- is
- active for this zone. The set of machines that will
- receive a
- <literal>DNS NOTIFY</literal> message
- for this zone is made up of all the listed name servers
- (other than
- the primary master) for the zone plus any IP addresses
- specified
- with <command>also-notify</command>. A port
- may be specified
- with each <command>also-notify</command>
- address to send the notify
- messages to a port other than the default of 53.
- A TSIG key may also be specified to cause the
- <literal>NOTIFY</literal> to be signed by the
- given key.
- <command>also-notify</command> is not
- meaningful for stub zones.
- The default is the empty list.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>check-names</command></term>
- <listitem>
- <para>
- This option is used to restrict the character set and
- syntax of
- certain domain names in master files and/or DNS responses
- received from the
- network. The default varies according to zone type. For <command>master</command> zones the default is <command>fail</command>. For <command>slave</command>
- zones the default is <command>warn</command>.
- It is not implemented for <command>hint</command> zones.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>check-mx</command></term>
- <listitem>
- <para>
- See the description of
- <command>check-mx</command> in <xref linkend="boolean_options"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>check-spf</command></term>
- <listitem>
- <para>
- See the description of
- <command>check-spf</command> in <xref linkend="boolean_options"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>check-wildcard</command></term>
- <listitem>
- <para>
- See the description of
- <command>check-wildcard</command> in <xref linkend="boolean_options"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>check-integrity</command></term>
- <listitem>
- <para>
- See the description of
- <command>check-integrity</command> in <xref linkend="boolean_options"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>check-sibling</command></term>
- <listitem>
- <para>
- See the description of
- <command>check-sibling</command> in <xref linkend="boolean_options"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>zero-no-soa-ttl</command></term>
- <listitem>
- <para>
- See the description of
- <command>zero-no-soa-ttl</command> in <xref linkend="boolean_options"/>.
- </para>
- </listitem>
- </varlistentry>
+ </entry>
+ </row>
+ </tbody>
+ </tgroup>
+ </informaltable>
+ </sect3>
+
+ <sect3>
+ <title>Class</title>
+ <para>
+ The zone's name may optionally be followed by a class. If
+ a class is not specified, class <literal>IN</literal> (for <varname>Internet</varname>),
+ is assumed. This is correct for the vast majority of cases.
+ </para>
+ <para>
+ The <literal>hesiod</literal> class is
+ named for an information service from MIT's Project Athena. It
+ is
+ used to share information about various systems databases, such
+ as users, groups, printers and so on. The keyword
+ <literal>HS</literal> is
+ a synonym for hesiod.
+ </para>
+ <para>
+ Another MIT development is Chaosnet, a LAN protocol created
+ in the mid-1970s. Zone data for it can be specified with the <literal>CHAOS</literal> class.
+ </para>
+ </sect3>
+ <sect3>
+
+ <title>Zone Options</title>
+
+ <variablelist>
+
+ <varlistentry>
+ <term><command>allow-notify</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>allow-notify</command> in <xref linkend="access_control"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>allow-query</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>allow-query</command> in <xref linkend="access_control"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>allow-query-on</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>allow-query-on</command> in <xref linkend="access_control"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>allow-transfer</command></term>
+ <listitem>
+ <para>
+ See the description of <command>allow-transfer</command>
+ in <xref linkend="access_control"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>allow-update</command></term>
+ <listitem>
+ <para>
+ See the description of <command>allow-update</command>
+ in <xref linkend="access_control"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>update-policy</command></term>
+ <listitem>
+ <para>
+ Specifies a "Simple Secure Update" policy. See
+ <xref linkend="dynamic_update_policies"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>allow-update-forwarding</command></term>
+ <listitem>
+ <para>
+ See the description of <command>allow-update-forwarding</command>
+ in <xref linkend="access_control"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>also-notify</command></term>
+ <listitem>
+ <para>
+ Only meaningful if <command>notify</command>
+ is
+ active for this zone. The set of machines that will
+ receive a
+ <literal>DNS NOTIFY</literal> message
+ for this zone is made up of all the listed name servers
+ (other than
+ the primary master) for the zone plus any IP addresses
+ specified
+ with <command>also-notify</command>. A port
+ may be specified
+ with each <command>also-notify</command>
+ address to send the notify
+ messages to a port other than the default of 53.
+ A TSIG key may also be specified to cause the
+ <literal>NOTIFY</literal> to be signed by the
+ given key.
+ <command>also-notify</command> is not
+ meaningful for stub zones.
+ The default is the empty list.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>check-names</command></term>
+ <listitem>
+ <para>
+ This option is used to restrict the character set and
+ syntax of
+ certain domain names in master files and/or DNS responses
+ received from the
+ network. The default varies according to zone type. For <command>master</command> zones the default is <command>fail</command>. For <command>slave</command>
+ zones the default is <command>warn</command>.
+ It is not implemented for <command>hint</command> zones.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>check-mx</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>check-mx</command> in <xref linkend="boolean_options"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>check-spf</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>check-spf</command> in <xref linkend="boolean_options"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>check-wildcard</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>check-wildcard</command> in <xref linkend="boolean_options"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>check-integrity</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>check-integrity</command> in <xref linkend="boolean_options"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>check-sibling</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>check-sibling</command> in <xref linkend="boolean_options"/>.
+ </para>
+ </listitem>
+ </varlistentry>
<varlistentry>
- <term><command>update-check-ksk</command></term>
- <listitem>
- <para>
- See the description of
- <command>update-check-ksk</command> in <xref linkend="boolean_options"/>.
- </para>
- </listitem>
- </varlistentry>
+ <term><command>zero-no-soa-ttl</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>zero-no-soa-ttl</command> in <xref linkend="boolean_options"/>.
+ </para>
+ </listitem>
+ </varlistentry>
<varlistentry>
- <term><command>dnssec-update-mode</command></term>
- <listitem>
- <para>
- See the description of
- <command>dnssec-update-mode</command> in <xref linkend="options"/>.
- </para>
- </listitem>
- </varlistentry>
+ <term><command>update-check-ksk</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>update-check-ksk</command> in <xref linkend="boolean_options"/>.
+ </para>
+ </listitem>
+ </varlistentry>
<varlistentry>
- <term><command>dnssec-dnskey-kskonly</command></term>
- <listitem>
- <para>
- See the description of
- <command>dnssec-dnskey-kskonly</command> in <xref linkend="boolean_options"/>.
- </para>
- </listitem>
- </varlistentry>
+ <term><command>dnssec-update-mode</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>dnssec-update-mode</command> in <xref linkend="options"/>.
+ </para>
+ </listitem>
+ </varlistentry>
<varlistentry>
- <term><command>try-tcp-refresh</command></term>
- <listitem>
- <para>
- See the description of
- <command>try-tcp-refresh</command> in <xref linkend="boolean_options"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>database</command></term>
- <listitem>
- <para>
- Specify the type of database to be used for storing the
- zone data. The string following the <command>database</command> keyword
- is interpreted as a list of whitespace-delimited words.
- The first word
- identifies the database type, and any subsequent words are
- passed
- as arguments to the database to be interpreted in a way
- specific
- to the database type.
- </para>
- <para>
- The default is <userinput>"rbt"</userinput>, BIND 9's
- native in-memory
- red-black-tree database. This database does not take
- arguments.
- </para>
- <para>
- Other values are possible if additional database drivers
- have been linked into the server. Some sample drivers are
- included
- with the distribution but none are linked in by default.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>dialup</command></term>
- <listitem>
- <para>
- See the description of
- <command>dialup</command> in <xref linkend="boolean_options"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>delegation-only</command></term>
- <listitem>
- <para>
- The flag only applies to hint and stub zones. If set
- to <userinput>yes</userinput>, then the zone will also be
- treated as if it is also a delegation-only type zone.
- </para>
+ <term><command>dnssec-dnskey-kskonly</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>dnssec-dnskey-kskonly</command> in <xref linkend="boolean_options"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>try-tcp-refresh</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>try-tcp-refresh</command> in <xref linkend="boolean_options"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>database</command></term>
+ <listitem>
+ <para>
+ Specify the type of database to be used for storing the
+ zone data. The string following the <command>database</command> keyword
+ is interpreted as a list of whitespace-delimited words.
+ The first word
+ identifies the database type, and any subsequent words are
+ passed
+ as arguments to the database to be interpreted in a way
+ specific
+ to the database type.
+ </para>
+ <para>
+ The default is <userinput>"rbt"</userinput>, BIND 9's
+ native in-memory
+ red-black-tree database. This database does not take
+ arguments.
+ </para>
+ <para>
+ Other values are possible if additional database drivers
+ have been linked into the server. Some sample drivers are
+ included
+ with the distribution but none are linked in by default.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>dialup</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>dialup</command> in <xref linkend="boolean_options"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>delegation-only</command></term>
+ <listitem>
+ <para>
+ The flag only applies to forward, hint and stub
+ zones. If set to <userinput>yes</userinput>,
+ then the zone will also be treated as if it is
+ also a delegation-only type zone.
+ </para>
<para>
See caveats in <xref linkend="root_delegation_only"/>.
</para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>forward</command></term>
- <listitem>
- <para>
- Only meaningful if the zone has a forwarders
- list. The <command>only</command> value causes
- the lookup to fail
- after trying the forwarders and getting no answer, while <command>first</command> would
- allow a normal lookup to be tried.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>forwarders</command></term>
- <listitem>
- <para>
- Used to override the list of global forwarders.
- If it is not specified in a zone of type <command>forward</command>,
- no forwarding is done for the zone and the global options are
- not used.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>ixfr-base</command></term>
- <listitem>
- <para>
- Was used in <acronym>BIND</acronym> 8 to
- specify the name
- of the transaction log (journal) file for dynamic update
- and IXFR.
- <acronym>BIND</acronym> 9 ignores the option
- and constructs the name of the journal
- file by appending "<filename>.jnl</filename>"
- to the name of the
- zone file.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>ixfr-tmp-file</command></term>
- <listitem>
- <para>
- Was an undocumented option in <acronym>BIND</acronym> 8.
- Ignored in <acronym>BIND</acronym> 9.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>journal</command></term>
- <listitem>
- <para>
- Allow the default journal's filename to be overridden.
- The default is the zone's filename with "<filename>.jnl</filename>" appended.
- This is applicable to <command>master</command> and <command>slave</command> zones.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>max-journal-size</command></term>
- <listitem>
- <para>
- See the description of
- <command>max-journal-size</command> in <xref linkend="server_resource_limits"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>max-transfer-time-in</command></term>
- <listitem>
- <para>
- See the description of
- <command>max-transfer-time-in</command> in <xref linkend="zone_transfers"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>max-transfer-idle-in</command></term>
- <listitem>
- <para>
- See the description of
- <command>max-transfer-idle-in</command> in <xref linkend="zone_transfers"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>max-transfer-time-out</command></term>
- <listitem>
- <para>
- See the description of
- <command>max-transfer-time-out</command> in <xref linkend="zone_transfers"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>max-transfer-idle-out</command></term>
- <listitem>
- <para>
- See the description of
- <command>max-transfer-idle-out</command> in <xref linkend="zone_transfers"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>notify</command></term>
- <listitem>
- <para>
- See the description of
- <command>notify</command> in <xref linkend="boolean_options"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>notify-delay</command></term>
- <listitem>
- <para>
- See the description of
- <command>notify-delay</command> in <xref linkend="tuning"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>notify-to-soa</command></term>
- <listitem>
- <para>
- See the description of
- <command>notify-to-soa</command> in
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>forward</command></term>
+ <listitem>
+ <para>
+ Only meaningful if the zone has a forwarders
+ list. The <command>only</command> value causes
+ the lookup to fail
+ after trying the forwarders and getting no answer, while <command>first</command> would
+ allow a normal lookup to be tried.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>forwarders</command></term>
+ <listitem>
+ <para>
+ Used to override the list of global forwarders.
+ If it is not specified in a zone of type <command>forward</command>,
+ no forwarding is done for the zone and the global options are
+ not used.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>ixfr-base</command></term>
+ <listitem>
+ <para>
+ Was used in <acronym>BIND</acronym> 8 to
+ specify the name
+ of the transaction log (journal) file for dynamic update
+ and IXFR.
+ <acronym>BIND</acronym> 9 ignores the option
+ and constructs the name of the journal
+ file by appending "<filename>.jnl</filename>"
+ to the name of the
+ zone file.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>ixfr-tmp-file</command></term>
+ <listitem>
+ <para>
+ Was an undocumented option in <acronym>BIND</acronym> 8.
+ Ignored in <acronym>BIND</acronym> 9.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>journal</command></term>
+ <listitem>
+ <para>
+ Allow the default journal's filename to be overridden.
+ The default is the zone's filename with "<filename>.jnl</filename>" appended.
+ This is applicable to <command>master</command> and <command>slave</command> zones.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>max-journal-size</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>max-journal-size</command> in <xref linkend="server_resource_limits"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>max-transfer-time-in</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>max-transfer-time-in</command> in <xref linkend="zone_transfers"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>max-transfer-idle-in</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>max-transfer-idle-in</command> in <xref linkend="zone_transfers"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>max-transfer-time-out</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>max-transfer-time-out</command> in <xref linkend="zone_transfers"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>max-transfer-idle-out</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>max-transfer-idle-out</command> in <xref linkend="zone_transfers"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>notify</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>notify</command> in <xref linkend="boolean_options"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>notify-delay</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>notify-delay</command> in <xref linkend="tuning"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>notify-to-soa</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>notify-to-soa</command> in
<xref linkend="boolean_options"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>pubkey</command></term>
- <listitem>
- <para>
- In <acronym>BIND</acronym> 8, this option was
- intended for specifying
- a public zone key for verification of signatures in DNSSEC
- signed
- zones when they are loaded from disk. <acronym>BIND</acronym> 9 does not verify signatures
- on load and ignores the option.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>zone-statistics</command></term>
- <listitem>
- <para>
- If <userinput>yes</userinput>, the server will keep
- statistical
- information for this zone, which can be dumped to the
- <command>statistics-file</command> defined in
- the server options.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>server-addresses</command></term>
- <listitem>
- <para>
- Only meaningful for static-stub zones.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>pubkey</command></term>
+ <listitem>
+ <para>
+ In <acronym>BIND</acronym> 8, this option was
+ intended for specifying
+ a public zone key for verification of signatures in DNSSEC
+ signed
+ zones when they are loaded from disk. <acronym>BIND</acronym> 9 does not verify signatures
+ on load and ignores the option.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>zone-statistics</command></term>
+ <listitem>
+ <para>
+ If <userinput>yes</userinput>, the server will keep
+ statistical
+ information for this zone, which can be dumped to the
+ <command>statistics-file</command> defined in
+ the server options.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>server-addresses</command></term>
+ <listitem>
+ <para>
+ Only meaningful for static-stub zones.
This is a list of IP addresses to which queries
should be sent in recursive resolution for the
zone.
A non empty list for this option will internally
configure the apex NS RR with associated glue A or
AAAA RRs.
- </para>
+ </para>
<para>
For example, if "example.com" is configured as a
static-stub zone with 192.0.2.1 and 2001:db8::1234
@@ -11301,14 +11424,14 @@ example.com. AAAA 2001:db8::1234</programlisting>
will initiate recursive resolution and send
queries to 192.0.2.1 and/or 2001:db8::1234.
</para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>server-names</command></term>
- <listitem>
- <para>
- Only meaningful for static-stub zones.
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>server-names</command></term>
+ <listitem>
+ <para>
+ Only meaningful for static-stub zones.
This is a list of domain names of nameservers that
act as authoritative servers of the static-stub
zone.
@@ -11347,229 +11470,229 @@ example.com. NS ns2.example.net.
"ns2.example.net" to IP addresses, and then send
queries to (one or more of) these addresses.
</para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>sig-validity-interval</command></term>
- <listitem>
- <para>
- See the description of
- <command>sig-validity-interval</command> in <xref linkend="tuning"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>sig-signing-nodes</command></term>
- <listitem>
- <para>
- See the description of
- <command>sig-signing-nodes</command> in <xref linkend="tuning"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>sig-signing-signatures</command></term>
- <listitem>
- <para>
- See the description of
- <command>sig-signing-signatures</command> in <xref linkend="tuning"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>sig-signing-type</command></term>
- <listitem>
- <para>
- See the description of
- <command>sig-signing-type</command> in <xref linkend="tuning"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>transfer-source</command></term>
- <listitem>
- <para>
- See the description of
- <command>transfer-source</command> in <xref linkend="zone_transfers"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>transfer-source-v6</command></term>
- <listitem>
- <para>
- See the description of
- <command>transfer-source-v6</command> in <xref linkend="zone_transfers"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>alt-transfer-source</command></term>
- <listitem>
- <para>
- See the description of
- <command>alt-transfer-source</command> in <xref linkend="zone_transfers"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>alt-transfer-source-v6</command></term>
- <listitem>
- <para>
- See the description of
- <command>alt-transfer-source-v6</command> in <xref linkend="zone_transfers"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>use-alt-transfer-source</command></term>
- <listitem>
- <para>
- See the description of
- <command>use-alt-transfer-source</command> in <xref linkend="zone_transfers"/>.
- </para>
- </listitem>
- </varlistentry>
-
-
- <varlistentry>
- <term><command>notify-source</command></term>
- <listitem>
- <para>
- See the description of
- <command>notify-source</command> in <xref linkend="zone_transfers"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>notify-source-v6</command></term>
- <listitem>
- <para>
- See the description of
- <command>notify-source-v6</command> in <xref linkend="zone_transfers"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>min-refresh-time</command></term>
- <term><command>max-refresh-time</command></term>
- <term><command>min-retry-time</command></term>
- <term><command>max-retry-time</command></term>
- <listitem>
- <para>
- See the description in <xref linkend="tuning"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>ixfr-from-differences</command></term>
- <listitem>
- <para>
- See the description of
- <command>ixfr-from-differences</command> in <xref linkend="boolean_options"/>.
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>sig-validity-interval</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>sig-validity-interval</command> in <xref linkend="tuning"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>sig-signing-nodes</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>sig-signing-nodes</command> in <xref linkend="tuning"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>sig-signing-signatures</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>sig-signing-signatures</command> in <xref linkend="tuning"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>sig-signing-type</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>sig-signing-type</command> in <xref linkend="tuning"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>transfer-source</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>transfer-source</command> in <xref linkend="zone_transfers"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>transfer-source-v6</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>transfer-source-v6</command> in <xref linkend="zone_transfers"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>alt-transfer-source</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>alt-transfer-source</command> in <xref linkend="zone_transfers"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>alt-transfer-source-v6</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>alt-transfer-source-v6</command> in <xref linkend="zone_transfers"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>use-alt-transfer-source</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>use-alt-transfer-source</command> in <xref linkend="zone_transfers"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+
+ <varlistentry>
+ <term><command>notify-source</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>notify-source</command> in <xref linkend="zone_transfers"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>notify-source-v6</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>notify-source-v6</command> in <xref linkend="zone_transfers"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>min-refresh-time</command></term>
+ <term><command>max-refresh-time</command></term>
+ <term><command>min-retry-time</command></term>
+ <term><command>max-retry-time</command></term>
+ <listitem>
+ <para>
+ See the description in <xref linkend="tuning"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>ixfr-from-differences</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>ixfr-from-differences</command> in <xref linkend="boolean_options"/>.
(Note that the <command>ixfr-from-differences</command>
<userinput>master</userinput> and
<userinput>slave</userinput> choices are not
available at the zone level.)
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>key-directory</command></term>
- <listitem>
- <para>
- See the description of
- <command>key-directory</command> in <xref linkend="options"/>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>auto-dnssec</command></term>
- <listitem>
- <para>
- Zones configured for dynamic DNS may also use this
- option to allow varying levels of automatic DNSSEC key
- management. There are three possible settings:
- </para>
- <para>
- <command>auto-dnssec allow;</command> permits
- keys to be updated and the zone fully re-signed
- whenever the user issues the command <command>rndc sign
- <replaceable>zonename</replaceable></command>.
- </para>
- <para>
- <command>auto-dnssec maintain;</command> includes the
- above, but also automatically adjusts the zone's DNSSEC
- keys on schedule, according to the keys' timing metadata
- (see <xref linkend="man.dnssec-keygen"/> and
- <xref linkend="man.dnssec-settime"/>). The command
- <command>rndc sign
- <replaceable>zonename</replaceable></command> causes
- <command>named</command> to load keys from the key
- repository and sign the zone with all keys that are
- active.
- <command>rndc loadkeys
- <replaceable>zonename</replaceable></command> causes
- <command>named</command> to load keys from the key
- repository and schedule key maintenance events to occur
- in the future, but it does not sign the full zone
- immediately. Note: once keys have been loaded for a
- zone the first time, the repository will be searched
- for changes periodically, regardless of whether
- <command>rndc loadkeys</command> is used. The recheck
- interval is defined by
- <command>dnssec-loadkeys-interval</command>.)
- </para>
- <para>
- The default setting is <command>auto-dnssec off</command>.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>serial-update-method</command></term>
- <listitem>
- <para>
- Zones configured for dynamic DNS may use this
- option to set the update method that will be used for
- the zone serial number in the SOA record.
- </para>
- <para>
- With the default setting of
- <command>serial-update-method increment;</command>, the
- SOA serial number will be incremented by one each time
- the zone is updated.
- </para>
- <para>
- When set to
- <command>serial-update-method unixtime;</command>, the
- SOA serial number will be set to the number of seconds
- since the UNIX epoch, unless the serial number is
- already greater than or equal to that value, in which
- case it is simply incremented by one.
- </para>
- </listitem>
- </varlistentry>
-
- <varlistentry>
- <term><command>inline-signing</command></term>
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>key-directory</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>key-directory</command> in <xref linkend="options"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>auto-dnssec</command></term>
+ <listitem>
+ <para>
+ Zones configured for dynamic DNS may also use this
+ option to allow varying levels of automatic DNSSEC key
+ management. There are three possible settings:
+ </para>
+ <para>
+ <command>auto-dnssec allow;</command> permits
+ keys to be updated and the zone fully re-signed
+ whenever the user issues the command <command>rndc sign
+ <replaceable>zonename</replaceable></command>.
+ </para>
+ <para>
+ <command>auto-dnssec maintain;</command> includes the
+ above, but also automatically adjusts the zone's DNSSEC
+ keys on schedule, according to the keys' timing metadata
+ (see <xref linkend="man.dnssec-keygen"/> and
+ <xref linkend="man.dnssec-settime"/>). The command
+ <command>rndc sign
+ <replaceable>zonename</replaceable></command> causes
+ <command>named</command> to load keys from the key
+ repository and sign the zone with all keys that are
+ active.
+ <command>rndc loadkeys
+ <replaceable>zonename</replaceable></command> causes
+ <command>named</command> to load keys from the key
+ repository and schedule key maintenance events to occur
+ in the future, but it does not sign the full zone
+ immediately. Note: once keys have been loaded for a
+ zone the first time, the repository will be searched
+ for changes periodically, regardless of whether
+ <command>rndc loadkeys</command> is used. The recheck
+ interval is defined by
+ <command>dnssec-loadkeys-interval</command>.)
+ </para>
+ <para>
+ The default setting is <command>auto-dnssec off</command>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>serial-update-method</command></term>
+ <listitem>
+ <para>
+ Zones configured for dynamic DNS may use this
+ option to set the update method that will be used for
+ the zone serial number in the SOA record.
+ </para>
+ <para>
+ With the default setting of
+ <command>serial-update-method increment;</command>, the
+ SOA serial number will be incremented by one each time
+ the zone is updated.
+ </para>
+ <para>
+ When set to
+ <command>serial-update-method unixtime;</command>, the
+ SOA serial number will be set to the number of seconds
+ since the UNIX epoch, unless the serial number is
+ already greater than or equal to that value, in which
+ case it is simply incremented by one.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term><command>inline-signing</command></term>
<listitem>
<para>
- If <literal>yes</literal>, this enables
+ If <literal>yes</literal>, this enables
"bump in the wire" signing of a zone, where a
unsigned zone is transferred in or loaded from
disk and a signed version of the zone is served,
@@ -11579,15 +11702,15 @@ example.com. NS ns2.example.net.
</listitem>
</varlistentry>
- <varlistentry>
- <term><command>multi-master</command></term>
- <listitem>
- <para>
- See the description of <command>multi-master</command> in
+ <varlistentry>
+ <term><command>multi-master</command></term>
+ <listitem>
+ <para>
+ See the description of <command>multi-master</command> in
<xref linkend="boolean_options"/>.
- </para>
- </listitem>
- </varlistentry>
+ </para>
+ </listitem>
+ </varlistentry>
<varlistentry>
<term><command>masterfile-format</command></term>
@@ -11599,21 +11722,21 @@ example.com. NS ns2.example.net.
</listitem>
</varlistentry>
- <varlistentry>
- <term><command>dnssec-secure-to-insecure</command></term>
- <listitem>
- <para>
- See the description of
- <command>dnssec-secure-to-insecure</command> in <xref linkend="boolean_options"/>.
- </para>
- </listitem>
- </varlistentry>
-
- </variablelist>
-
- </sect3>
- <sect3 id="dynamic_update_policies">
- <title>Dynamic Update Policies</title>
+ <varlistentry>
+ <term><command>dnssec-secure-to-insecure</command></term>
+ <listitem>
+ <para>
+ See the description of
+ <command>dnssec-secure-to-insecure</command> in <xref linkend="boolean_options"/>.
+ </para>
+ </listitem>
+ </varlistentry>
+
+ </variablelist>
+
+ </sect3>
+ <sect3 id="dynamic_update_policies">
+ <title>Dynamic Update Policies</title>
<para><acronym>BIND</acronym> 9 supports two alternative
methods of granting clients the right to perform
dynamic updates to a zone, configured by the
@@ -11647,54 +11770,54 @@ example.com. NS ns2.example.net.
address is not relevant.
</para>
<para>
- There is a pre-defined <command>update-policy</command>
- rule which can be switched on with the command
- <command>update-policy local;</command>.
- Switching on this rule in a zone causes
- <command>named</command> to generate a TSIG session
- key and place it in a file, and to allow that key
- to update the zone. (By default, the file is
- <filename>/var/run/named/session.key</filename>, the key
- name is "local-ddns" and the key algorithm is HMAC-SHA256,
- but these values are configurable with the
- <command>session-keyfile</command>,
- <command>session-keyname</command> and
- <command>session-keyalg</command> options, respectively).
- </para>
+ There is a pre-defined <command>update-policy</command>
+ rule which can be switched on with the command
+ <command>update-policy local;</command>.
+ Switching on this rule in a zone causes
+ <command>named</command> to generate a TSIG session
+ key and place it in a file, and to allow that key
+ to update the zone. (By default, the file is
+ <filename>/var/run/named/session.key</filename>, the key
+ name is "local-ddns" and the key algorithm is HMAC-SHA256,
+ but these values are configurable with the
+ <command>session-keyfile</command>,
+ <command>session-keyname</command> and
+ <command>session-keyalg</command> options, respectively).
+ </para>
<para>
- A client running on the local system, and with appropriate
- permissions, may read that file and use the key to sign update
- requests. The zone's update policy will be set to allow that
- key to change any record within the zone. Assuming the
- key name is "local-ddns", this policy is equivalent to:
- </para>
+ A client running on the local system, and with appropriate
+ permissions, may read that file and use the key to sign update
+ requests. The zone's update policy will be set to allow that
+ key to change any record within the zone. Assuming the
+ key name is "local-ddns", this policy is equivalent to:
+ </para>
- <programlisting>update-policy { grant local-ddns zonesub any; };
- </programlisting>
+ <programlisting>update-policy { grant local-ddns zonesub any; };
+ </programlisting>
<para>
- The command <command>nsupdate -l</command> sends update
- requests to localhost, and signs them using the session key.
+ The command <command>nsupdate -l</command> sends update
+ requests to localhost, and signs them using the session key.
</para>
<para>
- Other rule definitions look like this:
- </para>
+ Other rule definitions look like this:
+ </para>
<programlisting>
( <command>grant</command> | <command>deny</command> ) <replaceable>identity</replaceable> <replaceable>nametype</replaceable> <optional> <replaceable>name</replaceable> </optional> <optional> <replaceable>types</replaceable> </optional>
</programlisting>
- <para>
- Each rule grants or denies privileges. Once a message has
- successfully matched a rule, the operation is immediately
- granted or denied and no further rules are examined. A rule
- is matched when the signer matches the identity field, the
- name matches the name field in accordance with the nametype
- field, and the type matches the types specified in the type
- field.
- </para>
- <para>
+ <para>
+ Each rule grants or denies privileges. Once a message has
+ successfully matched a rule, the operation is immediately
+ granted or denied and no further rules are examined. A rule
+ is matched when the signer matches the identity field, the
+ name matches the name field in accordance with the nametype
+ field, and the type matches the types specified in the type
+ field.
+ </para>
+ <para>
No signer is required for <replaceable>tcp-self</replaceable>
or <replaceable>6to4-self</replaceable> however the standard
reverse mapping / prefix conversion must match the identity
@@ -11720,27 +11843,27 @@ example.com. NS ns2.example.net.
<para>
For nametypes <varname>krb5-self</varname>,
<varname>ms-self</varname>, <varname>krb5-subdomain</varname>,
- and <varname>ms-subdomain</varname> the
+ and <varname>ms-subdomain</varname> the
<replaceable>identity</replaceable> field specifies
the Windows or Kerberos realm of the machine belongs to.
</para>
- <para>
- The <replaceable>nametype</replaceable> field has 13
- values:
- <varname>name</varname>, <varname>subdomain</varname>,
- <varname>wildcard</varname>, <varname>self</varname>,
+ <para>
+ The <replaceable>nametype</replaceable> field has 13
+ values:
+ <varname>name</varname>, <varname>subdomain</varname>,
+ <varname>wildcard</varname>, <varname>self</varname>,
<varname>selfsub</varname>, <varname>selfwild</varname>,
<varname>krb5-self</varname>, <varname>ms-self</varname>,
<varname>krb5-subdomain</varname>,
<varname>ms-subdomain</varname>,
<varname>tcp-self</varname>, <varname>6to4-self</varname>,
<varname>zonesub</varname>, and <varname>external</varname>.
- </para>
- <informaltable>
- <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="4Level-table">
- <colspec colname="1" colnum="1" colsep="0" colwidth="0.819in"/>
- <colspec colname="2" colnum="2" colsep="0" colwidth="3.681in"/>
- <tbody>
+ </para>
+ <informaltable>
+ <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="4Level-table">
+ <colspec colname="1" colnum="1" colsep="0" colwidth="0.819in"/>
+ <colspec colname="2" colnum="2" colsep="0" colwidth="3.681in"/>
+ <tbody>
<row rowsep="0">
<entry colname="1">
<para>
@@ -11786,8 +11909,8 @@ example.com. NS ns2.example.net.
multiple zones without modification.
</para>
<para>
- When this rule is used, the
- <replaceable>name</replaceable> field is omitted.
+ When this rule is used, the
+ <replaceable>name</replaceable> field is omitted.
</para>
</entry>
</row>
@@ -11805,13 +11928,13 @@ example.com. NS ns2.example.net.
</para>
</entry>
</row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <varname>self</varname>
- </para>
- </entry>
- <entry colname="2">
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <varname>self</varname>
+ </para>
+ </entry>
+ <entry colname="2">
<para>
This rule matches when the name being updated
matches the contents of the
@@ -11865,7 +11988,7 @@ example.com. NS ns2.example.net.
This rule takes a Windows machine principal
(machine$@REALM) for machine in REALM and
and converts it machine.realm allowing the machine
- to update machine.realm. The REALM to be matched
+ to update machine.realm. The REALM to be matched
is specified in the <replaceable>identity</replaceable>
field.
</para>
@@ -11897,7 +12020,7 @@ example.com. NS ns2.example.net.
This rule takes a Kerberos machine principal
(host/machine@REALM) for machine in REALM and
and converts it machine.realm allowing the machine
- to update machine.realm. The REALM to be matched
+ to update machine.realm. The REALM to be matched
is specified in the <replaceable>identity</replaceable>
field.
</para>
@@ -11973,8 +12096,8 @@ example.com. NS ns2.example.net.
field, the format of which is
"<constant>local:</constant><replaceable>path</replaceable>",
where <replaceable>path</replaceable> is the location
- of a UNIX-domain socket. (Currently, "local" is the
- only supported mechanism.)
+ of a UNIX-domain socket. (Currently, "local" is the
+ only supported mechanism.)
</para>
<para>
Requests to the external daemon are sent over the
@@ -11999,14 +12122,14 @@ example.com. NS ns2.example.net.
</para>
</entry>
</row>
- </tbody>
- </tgroup>
- </informaltable>
+ </tbody>
+ </tgroup>
+ </informaltable>
- <para>
- In all cases, the <replaceable>name</replaceable>
- field must specify a fully-qualified domain name.
- </para>
+ <para>
+ In all cases, the <replaceable>name</replaceable>
+ field must specify a fully-qualified domain name.
+ </para>
<para>
If no types are explicitly specified, this rule matches
@@ -12017,439 +12140,439 @@ example.com. NS ns2.example.net.
all records associated with a name, the rules are
checked for each existing record type.
</para>
- </sect3>
- </sect2>
+ </sect3>
+ </sect2>
</sect1>
<sect1>
- <title>Zone File</title>
- <sect2 id="types_of_resource_records_and_when_to_use_them">
- <title>Types of Resource Records and When to Use Them</title>
- <para>
- This section, largely borrowed from RFC 1034, describes the
- concept of a Resource Record (RR) and explains when each is used.
- Since the publication of RFC 1034, several new RRs have been
- identified
- and implemented in the DNS. These are also included.
- </para>
- <sect3>
- <title>Resource Records</title>
-
- <para>
- A domain name identifies a node. Each node has a set of
- resource information, which may be empty. The set of resource
- information associated with a particular name is composed of
- separate RRs. The order of RRs in a set is not significant and
- need not be preserved by name servers, resolvers, or other
- parts of the DNS. However, sorting of multiple RRs is
- permitted for optimization purposes, for example, to specify
- that a particular nearby server be tried first. See <xref linkend="the_sortlist_statement"/> and <xref linkend="rrset_ordering"/>.
- </para>
-
- <para>
- The components of a Resource Record are:
- </para>
- <informaltable colsep="0" rowsep="0">
- <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="4Level-table">
- <colspec colname="1" colnum="1" colsep="0" colwidth="1.000in"/>
- <colspec colname="2" colnum="2" colsep="0" colwidth="3.500in"/>
- <tbody>
- <row rowsep="0">
- <entry colname="1">
- <para>
- owner name
- </para>
- </entry>
- <entry colname="2">
- <para>
- The domain name where the RR is found.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- type
- </para>
- </entry>
- <entry colname="2">
- <para>
- An encoded 16-bit value that specifies
- the type of the resource record.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- TTL
- </para>
- </entry>
- <entry colname="2">
- <para>
- The time-to-live of the RR. This field
- is a 32-bit integer in units of seconds, and is
- primarily used by
- resolvers when they cache RRs. The TTL describes how
- long a RR can
- be cached before it should be discarded.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- class
- </para>
- </entry>
- <entry colname="2">
- <para>
- An encoded 16-bit value that identifies
- a protocol family or instance of a protocol.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- RDATA
- </para>
- </entry>
- <entry colname="2">
- <para>
- The resource data. The format of the
- data is type (and sometimes class) specific.
- </para>
- </entry>
- </row>
- </tbody>
- </tgroup>
- </informaltable>
- <para>
- The following are <emphasis>types</emphasis> of valid RRs:
- </para>
- <informaltable colsep="0" rowsep="0">
- <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="4Level-table">
- <colspec colname="1" colnum="1" colsep="0" colwidth="0.875in"/>
- <colspec colname="2" colnum="2" colsep="0" colwidth="3.625in"/>
- <tbody>
- <row rowsep="0">
- <entry colname="1">
- <para>
- A
- </para>
- </entry>
- <entry colname="2">
- <para>
- A host address. In the IN class, this is a
- 32-bit IP address. Described in RFC 1035.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- AAAA
- </para>
- </entry>
- <entry colname="2">
- <para>
- IPv6 address. Described in RFC 1886.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- A6
- </para>
- </entry>
- <entry colname="2">
- <para>
- IPv6 address. This can be a partial
- address (a suffix) and an indirection to the name
- where the rest of the
- address (the prefix) can be found. Experimental.
- Described in RFC 2874.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- AFSDB
- </para>
- </entry>
- <entry colname="2">
- <para>
- Location of AFS database servers.
- Experimental. Described in RFC 1183.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- APL
- </para>
- </entry>
- <entry colname="2">
- <para>
- Address prefix list. Experimental.
- Described in RFC 3123.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- CERT
- </para>
- </entry>
- <entry colname="2">
- <para>
- Holds a digital certificate.
- Described in RFC 2538.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- CNAME
- </para>
- </entry>
- <entry colname="2">
- <para>
- Identifies the canonical name of an alias.
- Described in RFC 1035.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- DHCID
- </para>
- </entry>
- <entry colname="2">
- <para>
+ <title>Zone File</title>
+ <sect2 id="types_of_resource_records_and_when_to_use_them">
+ <title>Types of Resource Records and When to Use Them</title>
+ <para>
+ This section, largely borrowed from RFC 1034, describes the
+ concept of a Resource Record (RR) and explains when each is used.
+ Since the publication of RFC 1034, several new RRs have been
+ identified
+ and implemented in the DNS. These are also included.
+ </para>
+ <sect3>
+ <title>Resource Records</title>
+
+ <para>
+ A domain name identifies a node. Each node has a set of
+ resource information, which may be empty. The set of resource
+ information associated with a particular name is composed of
+ separate RRs. The order of RRs in a set is not significant and
+ need not be preserved by name servers, resolvers, or other
+ parts of the DNS. However, sorting of multiple RRs is
+ permitted for optimization purposes, for example, to specify
+ that a particular nearby server be tried first. See <xref linkend="the_sortlist_statement"/> and <xref linkend="rrset_ordering"/>.
+ </para>
+
+ <para>
+ The components of a Resource Record are:
+ </para>
+ <informaltable colsep="0" rowsep="0">
+ <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="4Level-table">
+ <colspec colname="1" colnum="1" colsep="0" colwidth="1.000in"/>
+ <colspec colname="2" colnum="2" colsep="0" colwidth="3.500in"/>
+ <tbody>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ owner name
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ The domain name where the RR is found.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ type
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ An encoded 16-bit value that specifies
+ the type of the resource record.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ TTL
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ The time-to-live of the RR. This field
+ is a 32-bit integer in units of seconds, and is
+ primarily used by
+ resolvers when they cache RRs. The TTL describes how
+ long a RR can
+ be cached before it should be discarded.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ class
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ An encoded 16-bit value that identifies
+ a protocol family or instance of a protocol.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ RDATA
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ The resource data. The format of the
+ data is type (and sometimes class) specific.
+ </para>
+ </entry>
+ </row>
+ </tbody>
+ </tgroup>
+ </informaltable>
+ <para>
+ The following are <emphasis>types</emphasis> of valid RRs:
+ </para>
+ <informaltable colsep="0" rowsep="0">
+ <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="4Level-table">
+ <colspec colname="1" colnum="1" colsep="0" colwidth="0.875in"/>
+ <colspec colname="2" colnum="2" colsep="0" colwidth="3.625in"/>
+ <tbody>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ A
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ A host address. In the IN class, this is a
+ 32-bit IP address. Described in RFC 1035.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ AAAA
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ IPv6 address. Described in RFC 1886.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ A6
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ IPv6 address. This can be a partial
+ address (a suffix) and an indirection to the name
+ where the rest of the
+ address (the prefix) can be found. Experimental.
+ Described in RFC 2874.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ AFSDB
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Location of AFS database servers.
+ Experimental. Described in RFC 1183.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ APL
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Address prefix list. Experimental.
+ Described in RFC 3123.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ CERT
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Holds a digital certificate.
+ Described in RFC 2538.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ CNAME
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Identifies the canonical name of an alias.
+ Described in RFC 1035.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ DHCID
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
Is used for identifying which DHCP client is
associated with this name. Described in RFC 4701.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- DNAME
- </para>
- </entry>
- <entry colname="2">
- <para>
- Replaces the domain name specified with
- another name to be looked up, effectively aliasing an
- entire
- subtree of the domain name space rather than a single
- record
- as in the case of the CNAME RR.
- Described in RFC 2672.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- DNSKEY
- </para>
- </entry>
- <entry colname="2">
- <para>
- Stores a public key associated with a signed
- DNS zone. Described in RFC 4034.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- DS
- </para>
- </entry>
- <entry colname="2">
- <para>
- Stores the hash of a public key associated with a
- signed DNS zone. Described in RFC 4034.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- GPOS
- </para>
- </entry>
- <entry colname="2">
- <para>
- Specifies the global position. Superseded by LOC.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- HINFO
- </para>
- </entry>
- <entry colname="2">
- <para>
- Identifies the CPU and OS used by a host.
- Described in RFC 1035.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- IPSECKEY
- </para>
- </entry>
- <entry colname="2">
- <para>
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ DNAME
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Replaces the domain name specified with
+ another name to be looked up, effectively aliasing an
+ entire
+ subtree of the domain name space rather than a single
+ record
+ as in the case of the CNAME RR.
+ Described in RFC 2672.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ DNSKEY
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Stores a public key associated with a signed
+ DNS zone. Described in RFC 4034.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ DS
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Stores the hash of a public key associated with a
+ signed DNS zone. Described in RFC 4034.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ GPOS
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Specifies the global position. Superseded by LOC.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ HINFO
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Identifies the CPU and OS used by a host.
+ Described in RFC 1035.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ IPSECKEY
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
Provides a method for storing IPsec keying material in
DNS. Described in RFC 4025.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- ISDN
- </para>
- </entry>
- <entry colname="2">
- <para>
- Representation of ISDN addresses.
- Experimental. Described in RFC 1183.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- KEY
- </para>
- </entry>
- <entry colname="2">
- <para>
- Stores a public key associated with a
- DNS name. Used in original DNSSEC; replaced
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ ISDN
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Representation of ISDN addresses.
+ Experimental. Described in RFC 1183.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ KEY
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Stores a public key associated with a
+ DNS name. Used in original DNSSEC; replaced
by DNSKEY in DNSSECbis, but still used with
SIG(0). Described in RFCs 2535 and 2931.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- KX
- </para>
- </entry>
- <entry colname="2">
- <para>
- Identifies a key exchanger for this
- DNS name. Described in RFC 2230.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- LOC
- </para>
- </entry>
- <entry colname="2">
- <para>
- For storing GPS info. Described in RFC 1876.
- Experimental.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- MX
- </para>
- </entry>
- <entry colname="2">
- <para>
- Identifies a mail exchange for the domain with
- a 16-bit preference value (lower is better)
- followed by the host name of the mail exchange.
- Described in RFC 974, RFC 1035.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- NAPTR
- </para>
- </entry>
- <entry colname="2">
- <para>
- Name authority pointer. Described in RFC 2915.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- NSAP
- </para>
- </entry>
- <entry colname="2">
- <para>
- A network service access point.
- Described in RFC 1706.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- NS
- </para>
- </entry>
- <entry colname="2">
- <para>
- The authoritative name server for the
- domain. Described in RFC 1035.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- NSEC
- </para>
- </entry>
- <entry colname="2">
- <para>
- Used in DNSSECbis to securely indicate that
- RRs with an owner name in a certain name interval do
- not exist in
- a zone and indicate what RR types are present for an
- existing name.
- Described in RFC 4034.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- NSEC3
- </para>
- </entry>
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ KX
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Identifies a key exchanger for this
+ DNS name. Described in RFC 2230.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ LOC
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ For storing GPS info. Described in RFC 1876.
+ Experimental.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ MX
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Identifies a mail exchange for the domain with
+ a 16-bit preference value (lower is better)
+ followed by the host name of the mail exchange.
+ Described in RFC 974, RFC 1035.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ NAPTR
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Name authority pointer. Described in RFC 2915.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ NSAP
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ A network service access point.
+ Described in RFC 1706.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ NS
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ The authoritative name server for the
+ domain. Described in RFC 1035.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ NSEC
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Used in DNSSECbis to securely indicate that
+ RRs with an owner name in a certain name interval do
+ not exist in
+ a zone and indicate what RR types are present for an
+ existing name.
+ Described in RFC 4034.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ NSEC3
+ </para>
+ </entry>
<entry colname="2">
<para>
Used in DNSSECbis to securely indicate that
@@ -12464,12 +12587,12 @@ example.com. NS ns2.example.net.
</para>
</entry>
</row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- NSEC3PARAM
- </para>
- </entry>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ NSEC3PARAM
+ </para>
+ </entry>
<entry colname="2">
<para>
Used in DNSSECbis to tell the authoritative
@@ -12478,952 +12601,951 @@ example.com. NS ns2.example.net.
</para>
</entry>
</row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- NXT
- </para>
- </entry>
- <entry colname="2">
- <para>
- Used in DNSSEC to securely indicate that
- RRs with an owner name in a certain name interval do
- not exist in
- a zone and indicate what RR types are present for an
- existing name.
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ NXT
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Used in DNSSEC to securely indicate that
+ RRs with an owner name in a certain name interval do
+ not exist in
+ a zone and indicate what RR types are present for an
+ existing name.
Used in original DNSSEC; replaced by NSEC in
DNSSECbis.
- Described in RFC 2535.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- PTR
- </para>
- </entry>
- <entry colname="2">
- <para>
- A pointer to another part of the domain
- name space. Described in RFC 1035.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- PX
- </para>
- </entry>
- <entry colname="2">
- <para>
- Provides mappings between RFC 822 and X.400
- addresses. Described in RFC 2163.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- RP
- </para>
- </entry>
- <entry colname="2">
- <para>
- Information on persons responsible
- for the domain. Experimental. Described in RFC 1183.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- RRSIG
- </para>
- </entry>
- <entry colname="2">
- <para>
- Contains DNSSECbis signature data. Described
+ Described in RFC 2535.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ PTR
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ A pointer to another part of the domain
+ name space. Described in RFC 1035.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ PX
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Provides mappings between RFC 822 and X.400
+ addresses. Described in RFC 2163.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ RP
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Information on persons responsible
+ for the domain. Experimental. Described in RFC 1183.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ RRSIG
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Contains DNSSECbis signature data. Described
in RFC 4034.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- RT
- </para>
- </entry>
- <entry colname="2">
- <para>
- Route-through binding for hosts that
- do not have their own direct wide area network
- addresses.
- Experimental. Described in RFC 1183.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- SIG
- </para>
- </entry>
- <entry colname="2">
- <para>
- Contains DNSSEC signature data. Used in
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ RT
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Route-through binding for hosts that
+ do not have their own direct wide area network
+ addresses.
+ Experimental. Described in RFC 1183.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ SIG
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Contains DNSSEC signature data. Used in
original DNSSEC; replaced by RRSIG in
DNSSECbis, but still used for SIG(0).
Described in RFCs 2535 and 2931.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- SOA
- </para>
- </entry>
- <entry colname="2">
- <para>
- Identifies the start of a zone of authority.
- Described in RFC 1035.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- SPF
- </para>
- </entry>
- <entry colname="2">
- <para>
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ SOA
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Identifies the start of a zone of authority.
+ Described in RFC 1035.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ SPF
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
Contains the Sender Policy Framework information
for a given email domain. Described in RFC 4408.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- SRV
- </para>
- </entry>
- <entry colname="2">
- <para>
- Information about well known network
- services (replaces WKS). Described in RFC 2782.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- SSHFP
- </para>
- </entry>
- <entry colname="2">
- <para>
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ SRV
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Information about well known network
+ services (replaces WKS). Described in RFC 2782.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ SSHFP
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
Provides a way to securely publish a secure shell key's
fingerprint. Described in RFC 4255.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- TXT
- </para>
- </entry>
- <entry colname="2">
- <para>
- Text records. Described in RFC 1035.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- WKS
- </para>
- </entry>
- <entry colname="2">
- <para>
- Information about which well known
- network services, such as SMTP, that a domain
- supports. Historical.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- X25
- </para>
- </entry>
- <entry colname="2">
- <para>
- Representation of X.25 network addresses.
- Experimental. Described in RFC 1183.
- </para>
- </entry>
- </row>
- </tbody>
- </tgroup>
- </informaltable>
- <para>
- The following <emphasis>classes</emphasis> of resource records
- are currently valid in the DNS:
- </para>
- <informaltable colsep="0" rowsep="0"><tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="4Level-table">
- <colspec colname="1" colnum="1" colsep="0" colwidth="0.875in"/>
- <colspec colname="2" colnum="2" colsep="0" colwidth="3.625in"/>
- <tbody>
-
- <row rowsep="0">
- <entry colname="1">
- <para>
- IN
- </para>
- </entry>
- <entry colname="2">
- <para>
- The Internet.
- </para>
- </entry>
- </row>
-
- <row rowsep="0">
- <entry colname="1">
- <para>
- CH
- </para>
- </entry>
- <entry colname="2">
- <para>
- Chaosnet, a LAN protocol created at MIT in the
- mid-1970s.
- Rarely used for its historical purpose, but reused for
- BIND's
- built-in server information zones, e.g.,
- <literal>version.bind</literal>.
- </para>
- </entry>
- </row>
-
- <row rowsep="0">
- <entry colname="1">
- <para>
- HS
- </para>
- </entry>
- <entry colname="2">
- <para>
- Hesiod, an information service
- developed by MIT's Project Athena. It is used to share
- information
- about various systems databases, such as users,
- groups, printers
- and so on.
- </para>
- </entry>
- </row>
-
- </tbody>
- </tgroup>
- </informaltable>
-
- <para>
- The owner name is often implicit, rather than forming an
- integral
- part of the RR. For example, many name servers internally form
- tree
- or hash structures for the name space, and chain RRs off nodes.
- The remaining RR parts are the fixed header (type, class, TTL)
- which is consistent for all RRs, and a variable part (RDATA)
- that
- fits the needs of the resource being described.
- </para>
- <para>
- The meaning of the TTL field is a time limit on how long an
- RR can be kept in a cache. This limit does not apply to
- authoritative
- data in zones; it is also timed out, but by the refreshing
- policies
- for the zone. The TTL is assigned by the administrator for the
- zone where the data originates. While short TTLs can be used to
- minimize caching, and a zero TTL prohibits caching, the
- realities
- of Internet performance suggest that these times should be on
- the
- order of days for the typical host. If a change can be
- anticipated,
- the TTL can be reduced prior to the change to minimize
- inconsistency
- during the change, and then increased back to its former value
- following
- the change.
- </para>
- <para>
- The data in the RDATA section of RRs is carried as a combination
- of binary strings and domain names. The domain names are
- frequently
- used as "pointers" to other data in the DNS.
- </para>
- </sect3>
- <sect3>
- <title>Textual expression of RRs</title>
- <para>
- RRs are represented in binary form in the packets of the DNS
- protocol, and are usually represented in highly encoded form
- when
- stored in a name server or resolver. In the examples provided
- in
- RFC 1034, a style similar to that used in master files was
- employed
- in order to show the contents of RRs. In this format, most RRs
- are shown on a single line, although continuation lines are
- possible
- using parentheses.
- </para>
- <para>
- The start of the line gives the owner of the RR. If a line
- begins with a blank, then the owner is assumed to be the same as
- that of the previous RR. Blank lines are often included for
- readability.
- </para>
- <para>
- Following the owner, we list the TTL, type, and class of the
- RR. Class and type use the mnemonics defined above, and TTL is
- an integer before the type field. In order to avoid ambiguity
- in
- parsing, type and class mnemonics are disjoint, TTLs are
- integers,
- and the type mnemonic is always last. The IN class and TTL
- values
- are often omitted from examples in the interests of clarity.
- </para>
- <para>
- The resource data or RDATA section of the RR are given using
- knowledge of the typical representation for the data.
- </para>
- <para>
- For example, we might show the RRs carried in a message as:
- </para>
- <informaltable colsep="0" rowsep="0"><tgroup cols="3" colsep="0" rowsep="0" tgroupstyle="4Level-table">
- <colspec colname="1" colnum="1" colsep="0" colwidth="1.381in"/>
- <colspec colname="2" colnum="2" colsep="0" colwidth="1.020in"/>
- <colspec colname="3" colnum="3" colsep="0" colwidth="2.099in"/>
- <tbody>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <literal>ISI.EDU.</literal>
- </para>
- </entry>
- <entry colname="2">
- <para>
- <literal>MX</literal>
- </para>
- </entry>
- <entry colname="3">
- <para>
- <literal>10 VENERA.ISI.EDU.</literal>
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para/>
- </entry>
- <entry colname="2">
- <para>
- <literal>MX</literal>
- </para>
- </entry>
- <entry colname="3">
- <para>
- <literal>10 VAXA.ISI.EDU</literal>
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <literal>VENERA.ISI.EDU</literal>
- </para>
- </entry>
- <entry colname="2">
- <para>
- <literal>A</literal>
- </para>
- </entry>
- <entry colname="3">
- <para>
- <literal>128.9.0.32</literal>
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para/>
- </entry>
- <entry colname="2">
- <para>
- <literal>A</literal>
- </para>
- </entry>
- <entry colname="3">
- <para>
- <literal>10.1.0.52</literal>
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <literal>VAXA.ISI.EDU</literal>
- </para>
- </entry>
- <entry colname="2">
- <para>
- <literal>A</literal>
- </para>
- </entry>
- <entry colname="3">
- <para>
- <literal>10.2.0.27</literal>
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para/>
- </entry>
- <entry colname="2">
- <para>
- <literal>A</literal>
- </para>
- </entry>
- <entry colname="3">
- <para>
- <literal>128.9.0.33</literal>
- </para>
- </entry>
- </row>
- </tbody>
- </tgroup>
- </informaltable>
- <para>
- The MX RRs have an RDATA section which consists of a 16-bit
- number followed by a domain name. The address RRs use a
- standard
- IP address format to contain a 32-bit internet address.
- </para>
- <para>
- The above example shows six RRs, with two RRs at each of three
- domain names.
- </para>
- <para>
- Similarly we might see:
- </para>
- <informaltable colsep="0" rowsep="0"><tgroup cols="3" colsep="0" rowsep="0" tgroupstyle="4Level-table">
- <colspec colname="1" colnum="1" colsep="0" colwidth="1.491in"/>
- <colspec colname="2" colnum="2" colsep="0" colwidth="1.067in"/>
- <colspec colname="3" colnum="3" colsep="0" colwidth="2.067in"/>
- <tbody>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <literal>XX.LCS.MIT.EDU.</literal>
- </para>
- </entry>
- <entry colname="2">
- <para>
- <literal>IN A</literal>
- </para>
- </entry>
- <entry colname="3">
- <para>
- <literal>10.0.0.44</literal>
- </para>
- </entry>
- </row>
- <row rowsep="0">
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ TXT
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Text records. Described in RFC 1035.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ WKS
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Information about which well known
+ network services, such as SMTP, that a domain
+ supports. Historical.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ X25
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Representation of X.25 network addresses.
+ Experimental. Described in RFC 1183.
+ </para>
+ </entry>
+ </row>
+ </tbody>
+ </tgroup>
+ </informaltable>
+ <para>
+ The following <emphasis>classes</emphasis> of resource records
+ are currently valid in the DNS:
+ </para>
+ <informaltable colsep="0" rowsep="0"><tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="4Level-table">
+ <colspec colname="1" colnum="1" colsep="0" colwidth="0.875in"/>
+ <colspec colname="2" colnum="2" colsep="0" colwidth="3.625in"/>
+ <tbody>
+
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ IN
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ The Internet.
+ </para>
+ </entry>
+ </row>
+
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ CH
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Chaosnet, a LAN protocol created at MIT in the
+ mid-1970s.
+ Rarely used for its historical purpose, but reused for
+ BIND's
+ built-in server information zones, e.g.,
+ <literal>version.bind</literal>.
+ </para>
+ </entry>
+ </row>
+
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ HS
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Hesiod, an information service
+ developed by MIT's Project Athena. It is used to share
+ information
+ about various systems databases, such as users,
+ groups, printers
+ and so on.
+ </para>
+ </entry>
+ </row>
+
+ </tbody>
+ </tgroup>
+ </informaltable>
+
+ <para>
+ The owner name is often implicit, rather than forming an
+ integral
+ part of the RR. For example, many name servers internally form
+ tree
+ or hash structures for the name space, and chain RRs off nodes.
+ The remaining RR parts are the fixed header (type, class, TTL)
+ which is consistent for all RRs, and a variable part (RDATA)
+ that
+ fits the needs of the resource being described.
+ </para>
+ <para>
+ The meaning of the TTL field is a time limit on how long an
+ RR can be kept in a cache. This limit does not apply to
+ authoritative
+ data in zones; it is also timed out, but by the refreshing
+ policies
+ for the zone. The TTL is assigned by the administrator for the
+ zone where the data originates. While short TTLs can be used to
+ minimize caching, and a zero TTL prohibits caching, the
+ realities
+ of Internet performance suggest that these times should be on
+ the
+ order of days for the typical host. If a change can be
+ anticipated,
+ the TTL can be reduced prior to the change to minimize
+ inconsistency
+ during the change, and then increased back to its former value
+ following
+ the change.
+ </para>
+ <para>
+ The data in the RDATA section of RRs is carried as a combination
+ of binary strings and domain names. The domain names are
+ frequently
+ used as "pointers" to other data in the DNS.
+ </para>
+ </sect3>
+ <sect3>
+ <title>Textual expression of RRs</title>
+ <para>
+ RRs are represented in binary form in the packets of the DNS
+ protocol, and are usually represented in highly encoded form
+ when
+ stored in a name server or resolver. In the examples provided
+ in
+ RFC 1034, a style similar to that used in master files was
+ employed
+ in order to show the contents of RRs. In this format, most RRs
+ are shown on a single line, although continuation lines are
+ possible
+ using parentheses.
+ </para>
+ <para>
+ The start of the line gives the owner of the RR. If a line
+ begins with a blank, then the owner is assumed to be the same as
+ that of the previous RR. Blank lines are often included for
+ readability.
+ </para>
+ <para>
+ Following the owner, we list the TTL, type, and class of the
+ RR. Class and type use the mnemonics defined above, and TTL is
+ an integer before the type field. In order to avoid ambiguity
+ in
+ parsing, type and class mnemonics are disjoint, TTLs are
+ integers,
+ and the type mnemonic is always last. The IN class and TTL
+ values
+ are often omitted from examples in the interests of clarity.
+ </para>
+ <para>
+ The resource data or RDATA section of the RR are given using
+ knowledge of the typical representation for the data.
+ </para>
+ <para>
+ For example, we might show the RRs carried in a message as:
+ </para>
+ <informaltable colsep="0" rowsep="0"><tgroup cols="3" colsep="0" rowsep="0" tgroupstyle="4Level-table">
+ <colspec colname="1" colnum="1" colsep="0" colwidth="1.381in"/>
+ <colspec colname="2" colnum="2" colsep="0" colwidth="1.020in"/>
+ <colspec colname="3" colnum="3" colsep="0" colwidth="2.099in"/>
+ <tbody>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <literal>ISI.EDU.</literal>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ <literal>MX</literal>
+ </para>
+ </entry>
+ <entry colname="3">
+ <para>
+ <literal>10 VENERA.ISI.EDU.</literal>
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para/>
+ </entry>
+ <entry colname="2">
+ <para>
+ <literal>MX</literal>
+ </para>
+ </entry>
+ <entry colname="3">
+ <para>
+ <literal>10 VAXA.ISI.EDU</literal>
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <literal>VENERA.ISI.EDU</literal>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ <literal>A</literal>
+ </para>
+ </entry>
+ <entry colname="3">
+ <para>
+ <literal>128.9.0.32</literal>
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para/>
+ </entry>
+ <entry colname="2">
+ <para>
+ <literal>A</literal>
+ </para>
+ </entry>
+ <entry colname="3">
+ <para>
+ <literal>10.1.0.52</literal>
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <literal>VAXA.ISI.EDU</literal>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ <literal>A</literal>
+ </para>
+ </entry>
+ <entry colname="3">
+ <para>
+ <literal>10.2.0.27</literal>
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para/>
+ </entry>
+ <entry colname="2">
+ <para>
+ <literal>A</literal>
+ </para>
+ </entry>
+ <entry colname="3">
+ <para>
+ <literal>128.9.0.33</literal>
+ </para>
+ </entry>
+ </row>
+ </tbody>
+ </tgroup>
+ </informaltable>
+ <para>
+ The MX RRs have an RDATA section which consists of a 16-bit
+ number followed by a domain name. The address RRs use a
+ standard
+ IP address format to contain a 32-bit internet address.
+ </para>
+ <para>
+ The above example shows six RRs, with two RRs at each of three
+ domain names.
+ </para>
+ <para>
+ Similarly we might see:
+ </para>
+ <informaltable colsep="0" rowsep="0"><tgroup cols="3" colsep="0" rowsep="0" tgroupstyle="4Level-table">
+ <colspec colname="1" colnum="1" colsep="0" colwidth="1.491in"/>
+ <colspec colname="2" colnum="2" colsep="0" colwidth="1.067in"/>
+ <colspec colname="3" colnum="3" colsep="0" colwidth="2.067in"/>
+ <tbody>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <literal>XX.LCS.MIT.EDU.</literal>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ <literal>IN A</literal>
+ </para>
+ </entry>
+ <entry colname="3">
+ <para>
+ <literal>10.0.0.44</literal>
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
<entry colname="1"/>
- <entry colname="2">
- <para>
- <literal>CH A</literal>
- </para>
- </entry>
- <entry colname="3">
- <para>
- <literal>MIT.EDU. 2420</literal>
- </para>
- </entry>
- </row>
- </tbody>
- </tgroup>
- </informaltable>
- <para>
- This example shows two addresses for
+ <entry colname="2">
+ <para>
+ <literal>CH A</literal>
+ </para>
+ </entry>
+ <entry colname="3">
+ <para>
+ <literal>MIT.EDU. 2420</literal>
+ </para>
+ </entry>
+ </row>
+ </tbody>
+ </tgroup>
+ </informaltable>
+ <para>
+ This example shows two addresses for
<literal>XX.LCS.MIT.EDU</literal>, each of a different class.
- </para>
- </sect3>
- </sect2>
-
- <sect2>
- <title>Discussion of MX Records</title>
-
- <para>
- As described above, domain servers store information as a
- series of resource records, each of which contains a particular
- piece of information about a given domain name (which is usually,
- but not always, a host). The simplest way to think of a RR is as
- a typed pair of data, a domain name matched with a relevant datum,
- and stored with some additional type information to help systems
- determine when the RR is relevant.
- </para>
-
- <para>
- MX records are used to control delivery of email. The data
- specified in the record is a priority and a domain name. The
- priority
- controls the order in which email delivery is attempted, with the
- lowest number first. If two priorities are the same, a server is
- chosen randomly. If no servers at a given priority are responding,
- the mail transport agent will fall back to the next largest
- priority.
- Priority numbers do not have any absolute meaning &mdash; they are
- relevant
- only respective to other MX records for that domain name. The
- domain
- name given is the machine to which the mail will be delivered.
+ </para>
+ </sect3>
+ </sect2>
+
+ <sect2>
+ <title>Discussion of MX Records</title>
+
+ <para>
+ As described above, domain servers store information as a
+ series of resource records, each of which contains a particular
+ piece of information about a given domain name (which is usually,
+ but not always, a host). The simplest way to think of a RR is as
+ a typed pair of data, a domain name matched with a relevant datum,
+ and stored with some additional type information to help systems
+ determine when the RR is relevant.
+ </para>
+
+ <para>
+ MX records are used to control delivery of email. The data
+ specified in the record is a priority and a domain name. The
+ priority
+ controls the order in which email delivery is attempted, with the
+ lowest number first. If two priorities are the same, a server is
+ chosen randomly. If no servers at a given priority are responding,
+ the mail transport agent will fall back to the next largest
+ priority.
+ Priority numbers do not have any absolute meaning &mdash; they are
+ relevant
+ only respective to other MX records for that domain name. The
+ domain
+ name given is the machine to which the mail will be delivered.
It <emphasis>must</emphasis> have an associated address record
(A or AAAA) &mdash; CNAME is not sufficient.
- </para>
- <para>
- For a given domain, if there is both a CNAME record and an
- MX record, the MX record is in error, and will be ignored.
- Instead,
- the mail will be delivered to the server specified in the MX
- record
- pointed to by the CNAME.
- For example:
- </para>
- <informaltable colsep="0" rowsep="0">
- <tgroup cols="5" colsep="0" rowsep="0" tgroupstyle="3Level-table">
- <colspec colname="1" colnum="1" colsep="0" colwidth="1.708in"/>
- <colspec colname="2" colnum="2" colsep="0" colwidth="0.444in"/>
- <colspec colname="3" colnum="3" colsep="0" colwidth="0.444in"/>
- <colspec colname="4" colnum="4" colsep="0" colwidth="0.976in"/>
- <colspec colname="5" colnum="5" colsep="0" colwidth="1.553in"/>
- <tbody>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <literal>example.com.</literal>
- </para>
- </entry>
- <entry colname="2">
- <para>
- <literal>IN</literal>
- </para>
- </entry>
- <entry colname="3">
- <para>
- <literal>MX</literal>
- </para>
- </entry>
- <entry colname="4">
- <para>
- <literal>10</literal>
- </para>
- </entry>
- <entry colname="5">
- <para>
- <literal>mail.example.com.</literal>
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para/>
- </entry>
- <entry colname="2">
- <para>
- <literal>IN</literal>
- </para>
- </entry>
- <entry colname="3">
- <para>
- <literal>MX</literal>
- </para>
- </entry>
- <entry colname="4">
- <para>
- <literal>10</literal>
- </para>
- </entry>
- <entry colname="5">
- <para>
- <literal>mail2.example.com.</literal>
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para/>
- </entry>
- <entry colname="2">
- <para>
- <literal>IN</literal>
- </para>
- </entry>
- <entry colname="3">
- <para>
- <literal>MX</literal>
- </para>
- </entry>
- <entry colname="4">
- <para>
- <literal>20</literal>
- </para>
- </entry>
- <entry colname="5">
- <para>
- <literal>mail.backup.org.</literal>
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <literal>mail.example.com.</literal>
- </para>
- </entry>
- <entry colname="2">
- <para>
- <literal>IN</literal>
- </para>
- </entry>
- <entry colname="3">
- <para>
- <literal>A</literal>
- </para>
- </entry>
- <entry colname="4">
- <para>
- <literal>10.0.0.1</literal>
- </para>
- </entry>
- <entry colname="5">
- <para/>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <literal>mail2.example.com.</literal>
- </para>
- </entry>
- <entry colname="2">
- <para>
- <literal>IN</literal>
- </para>
- </entry>
- <entry colname="3">
- <para>
- <literal>A</literal>
- </para>
- </entry>
- <entry colname="4">
- <para>
- <literal>10.0.0.2</literal>
- </para>
- </entry>
- <entry colname="5">
- <para/>
- </entry>
- </row>
- </tbody>
- </tgroup>
- </informaltable><para>
- Mail delivery will be attempted to <literal>mail.example.com</literal> and
- <literal>mail2.example.com</literal> (in
- any order), and if neither of those succeed, delivery to <literal>mail.backup.org</literal> will
- be attempted.
- </para>
- </sect2>
- <sect2 id="Setting_TTLs">
- <title>Setting TTLs</title>
- <para>
- The time-to-live of the RR field is a 32-bit integer represented
- in units of seconds, and is primarily used by resolvers when they
- cache RRs. The TTL describes how long a RR can be cached before it
- should be discarded. The following three types of TTL are
- currently
- used in a zone file.
- </para>
- <informaltable colsep="0" rowsep="0">
- <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="3Level-table">
- <colspec colname="1" colnum="1" colsep="0" colwidth="0.750in"/>
- <colspec colname="2" colnum="2" colsep="0" colwidth="4.375in"/>
- <tbody>
- <row rowsep="0">
- <entry colname="1">
- <para>
- SOA
- </para>
- </entry>
- <entry colname="2">
- <para>
- The last field in the SOA is the negative
- caching TTL. This controls how long other servers will
- cache no-such-domain
- (NXDOMAIN) responses from you.
- </para>
- <para>
- The maximum time for
- negative caching is 3 hours (3h).
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- $TTL
- </para>
- </entry>
- <entry colname="2">
- <para>
- The $TTL directive at the top of the
- zone file (before the SOA) gives a default TTL for every
- RR without
- a specific TTL set.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- RR TTLs
- </para>
- </entry>
- <entry colname="2">
- <para>
- Each RR can have a TTL as the second
- field in the RR, which will control how long other
- servers can cache
- the it.
- </para>
- </entry>
- </row>
- </tbody>
- </tgroup>
- </informaltable>
- <para>
- All of these TTLs default to units of seconds, though units
- can be explicitly specified, for example, <literal>1h30m</literal>.
- </para>
- </sect2>
- <sect2>
- <title>Inverse Mapping in IPv4</title>
- <para>
- Reverse name resolution (that is, translation from IP address
- to name) is achieved by means of the <emphasis>in-addr.arpa</emphasis> domain
- and PTR records. Entries in the in-addr.arpa domain are made in
- least-to-most significant order, read left to right. This is the
- opposite order to the way IP addresses are usually written. Thus,
- a machine with an IP address of 10.1.2.3 would have a
- corresponding
- in-addr.arpa name of
- 3.2.1.10.in-addr.arpa. This name should have a PTR resource record
- whose data field is the name of the machine or, optionally,
- multiple
- PTR records if the machine has more than one name. For example,
- in the <optional>example.com</optional> domain:
- </para>
- <informaltable colsep="0" rowsep="0">
- <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="3Level-table">
- <colspec colname="1" colnum="1" colsep="0" colwidth="1.125in"/>
- <colspec colname="2" colnum="2" colsep="0" colwidth="4.000in"/>
- <tbody>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <literal>$ORIGIN</literal>
- </para>
- </entry>
- <entry colname="2">
- <para>
- <literal>2.1.10.in-addr.arpa</literal>
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para>
- <literal>3</literal>
- </para>
- </entry>
- <entry colname="2">
- <para>
- <literal>IN PTR foo.example.com.</literal>
- </para>
- </entry>
- </row>
- </tbody>
- </tgroup>
- </informaltable>
- <note>
- <para>
- The <command>$ORIGIN</command> lines in the examples
- are for providing context to the examples only &mdash; they do not
- necessarily
- appear in the actual usage. They are only used here to indicate
- that the example is relative to the listed origin.
- </para>
- </note>
- </sect2>
- <sect2>
- <title>Other Zone File Directives</title>
- <para>
- The Master File Format was initially defined in RFC 1035 and
- has subsequently been extended. While the Master File Format
- itself
- is class independent all records in a Master File must be of the
- same
- class.
- </para>
- <para>
- Master File Directives include <command>$ORIGIN</command>, <command>$INCLUDE</command>,
- and <command>$TTL.</command>
- </para>
- <sect3>
- <title>The <command>@</command> (at-sign)</title>
- <para>
- When used in the label (or name) field, the asperand or
- at-sign (@) symbol represents the current origin.
- At the start of the zone file, it is the
- &lt;<varname>zone_name</varname>&gt; (followed by
- trailing dot).
- </para>
- </sect3>
- <sect3>
- <title>The <command>$ORIGIN</command> Directive</title>
- <para>
- Syntax: <command>$ORIGIN</command>
+ </para>
+ <para>
+ For a given domain, if there is both a CNAME record and an
+ MX record, the MX record is in error, and will be ignored.
+ Instead,
+ the mail will be delivered to the server specified in the MX
+ record
+ pointed to by the CNAME.
+ For example:
+ </para>
+ <informaltable colsep="0" rowsep="0">
+ <tgroup cols="5" colsep="0" rowsep="0" tgroupstyle="3Level-table">
+ <colspec colname="1" colnum="1" colsep="0" colwidth="1.708in"/>
+ <colspec colname="2" colnum="2" colsep="0" colwidth="0.444in"/>
+ <colspec colname="3" colnum="3" colsep="0" colwidth="0.444in"/>
+ <colspec colname="4" colnum="4" colsep="0" colwidth="0.976in"/>
+ <colspec colname="5" colnum="5" colsep="0" colwidth="1.553in"/>
+ <tbody>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <literal>example.com.</literal>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ <literal>IN</literal>
+ </para>
+ </entry>
+ <entry colname="3">
+ <para>
+ <literal>MX</literal>
+ </para>
+ </entry>
+ <entry colname="4">
+ <para>
+ <literal>10</literal>
+ </para>
+ </entry>
+ <entry colname="5">
+ <para>
+ <literal>mail.example.com.</literal>
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para/>
+ </entry>
+ <entry colname="2">
+ <para>
+ <literal>IN</literal>
+ </para>
+ </entry>
+ <entry colname="3">
+ <para>
+ <literal>MX</literal>
+ </para>
+ </entry>
+ <entry colname="4">
+ <para>
+ <literal>10</literal>
+ </para>
+ </entry>
+ <entry colname="5">
+ <para>
+ <literal>mail2.example.com.</literal>
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para/>
+ </entry>
+ <entry colname="2">
+ <para>
+ <literal>IN</literal>
+ </para>
+ </entry>
+ <entry colname="3">
+ <para>
+ <literal>MX</literal>
+ </para>
+ </entry>
+ <entry colname="4">
+ <para>
+ <literal>20</literal>
+ </para>
+ </entry>
+ <entry colname="5">
+ <para>
+ <literal>mail.backup.org.</literal>
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <literal>mail.example.com.</literal>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ <literal>IN</literal>
+ </para>
+ </entry>
+ <entry colname="3">
+ <para>
+ <literal>A</literal>
+ </para>
+ </entry>
+ <entry colname="4">
+ <para>
+ <literal>10.0.0.1</literal>
+ </para>
+ </entry>
+ <entry colname="5">
+ <para/>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <literal>mail2.example.com.</literal>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ <literal>IN</literal>
+ </para>
+ </entry>
+ <entry colname="3">
+ <para>
+ <literal>A</literal>
+ </para>
+ </entry>
+ <entry colname="4">
+ <para>
+ <literal>10.0.0.2</literal>
+ </para>
+ </entry>
+ <entry colname="5">
+ <para/>
+ </entry>
+ </row>
+ </tbody>
+ </tgroup>
+ </informaltable><para>
+ Mail delivery will be attempted to <literal>mail.example.com</literal> and
+ <literal>mail2.example.com</literal> (in
+ any order), and if neither of those succeed, delivery to <literal>mail.backup.org</literal> will
+ be attempted.
+ </para>
+ </sect2>
+ <sect2 id="Setting_TTLs">
+ <title>Setting TTLs</title>
+ <para>
+ The time-to-live of the RR field is a 32-bit integer represented
+ in units of seconds, and is primarily used by resolvers when they
+ cache RRs. The TTL describes how long a RR can be cached before it
+ should be discarded. The following three types of TTL are
+ currently
+ used in a zone file.
+ </para>
+ <informaltable colsep="0" rowsep="0">
+ <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="3Level-table">
+ <colspec colname="1" colnum="1" colsep="0" colwidth="0.750in"/>
+ <colspec colname="2" colnum="2" colsep="0" colwidth="4.375in"/>
+ <tbody>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ SOA
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ The last field in the SOA is the negative
+ caching TTL. This controls how long other servers will
+ cache no-such-domain
+ (NXDOMAIN) responses from you.
+ </para>
+ <para>
+ The maximum time for
+ negative caching is 3 hours (3h).
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ $TTL
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ The $TTL directive at the top of the
+ zone file (before the SOA) gives a default TTL for every
+ RR without
+ a specific TTL set.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ RR TTLs
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Each RR can have a TTL as the second
+ field in the RR, which will control how long other
+ servers can cache it.
+ </para>
+ </entry>
+ </row>
+ </tbody>
+ </tgroup>
+ </informaltable>
+ <para>
+ All of these TTLs default to units of seconds, though units
+ can be explicitly specified, for example, <literal>1h30m</literal>.
+ </para>
+ </sect2>
+ <sect2>
+ <title>Inverse Mapping in IPv4</title>
+ <para>
+ Reverse name resolution (that is, translation from IP address
+ to name) is achieved by means of the <emphasis>in-addr.arpa</emphasis> domain
+ and PTR records. Entries in the in-addr.arpa domain are made in
+ least-to-most significant order, read left to right. This is the
+ opposite order to the way IP addresses are usually written. Thus,
+ a machine with an IP address of 10.1.2.3 would have a
+ corresponding
+ in-addr.arpa name of
+ 3.2.1.10.in-addr.arpa. This name should have a PTR resource record
+ whose data field is the name of the machine or, optionally,
+ multiple
+ PTR records if the machine has more than one name. For example,
+ in the <optional>example.com</optional> domain:
+ </para>
+ <informaltable colsep="0" rowsep="0">
+ <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="3Level-table">
+ <colspec colname="1" colnum="1" colsep="0" colwidth="1.125in"/>
+ <colspec colname="2" colnum="2" colsep="0" colwidth="4.000in"/>
+ <tbody>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <literal>$ORIGIN</literal>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ <literal>2.1.10.in-addr.arpa</literal>
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para>
+ <literal>3</literal>
+ </para>
+ </entry>
+ <entry colname="2">
+ <para>
+ <literal>IN PTR foo.example.com.</literal>
+ </para>
+ </entry>
+ </row>
+ </tbody>
+ </tgroup>
+ </informaltable>
+ <note>
+ <para>
+ The <command>$ORIGIN</command> lines in the examples
+ are for providing context to the examples only &mdash; they do not
+ necessarily
+ appear in the actual usage. They are only used here to indicate
+ that the example is relative to the listed origin.
+ </para>
+ </note>
+ </sect2>
+ <sect2>
+ <title>Other Zone File Directives</title>
+ <para>
+ The Master File Format was initially defined in RFC 1035 and
+ has subsequently been extended. While the Master File Format
+ itself
+ is class independent all records in a Master File must be of the
+ same
+ class.
+ </para>
+ <para>
+ Master File Directives include <command>$ORIGIN</command>, <command>$INCLUDE</command>,
+ and <command>$TTL.</command>
+ </para>
+ <sect3>
+ <title>The <command>@</command> (at-sign)</title>
+ <para>
+ When used in the label (or name) field, the asperand or
+ at-sign (@) symbol represents the current origin.
+ At the start of the zone file, it is the
+ &lt;<varname>zone_name</varname>&gt; (followed by
+ trailing dot).
+ </para>
+ </sect3>
+ <sect3>
+ <title>The <command>$ORIGIN</command> Directive</title>
+ <para>
+ Syntax: <command>$ORIGIN</command>
<replaceable>domain-name</replaceable>
- <optional><replaceable>comment</replaceable></optional>
- </para>
- <para><command>$ORIGIN</command>
+ <optional><replaceable>comment</replaceable></optional>
+ </para>
+ <para><command>$ORIGIN</command>
sets the domain name that will be appended to any
- unqualified records. When a zone is first read in there
- is an implicit <command>$ORIGIN</command>
- &lt;<varname>zone_name</varname>&gt;<command>.</command>
- (followed by trailing dot).
- The current <command>$ORIGIN</command> is appended to
- the domain specified in the <command>$ORIGIN</command>
- argument if it is not absolute.
- </para>
+ unqualified records. When a zone is first read in there
+ is an implicit <command>$ORIGIN</command>
+ &lt;<varname>zone_name</varname>&gt;<command>.</command>
+ (followed by trailing dot).
+ The current <command>$ORIGIN</command> is appended to
+ the domain specified in the <command>$ORIGIN</command>
+ argument if it is not absolute.
+ </para>
<programlisting>
$ORIGIN example.com.
WWW CNAME MAIN-SERVER
</programlisting>
- <para>
- is equivalent to
- </para>
+ <para>
+ is equivalent to
+ </para>
<programlisting>
WWW.EXAMPLE.COM. CNAME MAIN-SERVER.EXAMPLE.COM.
</programlisting>
- </sect3>
- <sect3>
- <title>The <command>$INCLUDE</command> Directive</title>
- <para>
- Syntax: <command>$INCLUDE</command>
- <replaceable>filename</replaceable>
- <optional>
+ </sect3>
+ <sect3>
+ <title>The <command>$INCLUDE</command> Directive</title>
+ <para>
+ Syntax: <command>$INCLUDE</command>
+ <replaceable>filename</replaceable>
+ <optional>
<replaceable>origin</replaceable> </optional>
- <optional> <replaceable>comment</replaceable> </optional>
- </para>
- <para>
- Read and process the file <filename>filename</filename> as
- if it were included into the file at this point. If <command>origin</command> is
- specified the file is processed with <command>$ORIGIN</command> set
- to that value, otherwise the current <command>$ORIGIN</command> is
- used.
- </para>
- <para>
- The origin and the current domain name
- revert to the values they had prior to the <command>$INCLUDE</command> once
- the file has been read.
- </para>
- <note>
- <para>
- RFC 1035 specifies that the current origin should be restored
- after
- an <command>$INCLUDE</command>, but it is silent
- on whether the current
- domain name should also be restored. BIND 9 restores both of
- them.
- This could be construed as a deviation from RFC 1035, a
- feature, or both.
- </para>
- </note>
- </sect3>
- <sect3>
- <title>The <command>$TTL</command> Directive</title>
- <para>
- Syntax: <command>$TTL</command>
- <replaceable>default-ttl</replaceable>
- <optional>
+ <optional> <replaceable>comment</replaceable> </optional>
+ </para>
+ <para>
+ Read and process the file <filename>filename</filename> as
+ if it were included into the file at this point. If <command>origin</command> is
+ specified the file is processed with <command>$ORIGIN</command> set
+ to that value, otherwise the current <command>$ORIGIN</command> is
+ used.
+ </para>
+ <para>
+ The origin and the current domain name
+ revert to the values they had prior to the <command>$INCLUDE</command> once
+ the file has been read.
+ </para>
+ <note>
+ <para>
+ RFC 1035 specifies that the current origin should be restored
+ after
+ an <command>$INCLUDE</command>, but it is silent
+ on whether the current
+ domain name should also be restored. BIND 9 restores both of
+ them.
+ This could be construed as a deviation from RFC 1035, a
+ feature, or both.
+ </para>
+ </note>
+ </sect3>
+ <sect3>
+ <title>The <command>$TTL</command> Directive</title>
+ <para>
+ Syntax: <command>$TTL</command>
+ <replaceable>default-ttl</replaceable>
+ <optional>
<replaceable>comment</replaceable> </optional>
- </para>
- <para>
- Set the default Time To Live (TTL) for subsequent records
- with undefined TTLs. Valid TTLs are of the range 0-2147483647
- seconds.
- </para>
- <para><command>$TTL</command>
+ </para>
+ <para>
+ Set the default Time To Live (TTL) for subsequent records
+ with undefined TTLs. Valid TTLs are of the range 0-2147483647
+ seconds.
+ </para>
+ <para><command>$TTL</command>
is defined in RFC 2308.
- </para>
- </sect3>
- </sect2>
- <sect2>
- <title><acronym>BIND</acronym> Master File Extension: the <command>$GENERATE</command> Directive</title>
- <para>
- Syntax: <command>$GENERATE</command>
+ </para>
+ </sect3>
+ </sect2>
+ <sect2>
+ <title><acronym>BIND</acronym> Master File Extension: the <command>$GENERATE</command> Directive</title>
+ <para>
+ Syntax: <command>$GENERATE</command>
<replaceable>range</replaceable>
<replaceable>lhs</replaceable>
- <optional><replaceable>ttl</replaceable></optional>
- <optional><replaceable>class</replaceable></optional>
+ <optional><replaceable>ttl</replaceable></optional>
+ <optional><replaceable>class</replaceable></optional>
<replaceable>type</replaceable>
<replaceable>rhs</replaceable>
- <optional><replaceable>comment</replaceable></optional>
- </para>
- <para><command>$GENERATE</command>
+ <optional><replaceable>comment</replaceable></optional>
+ </para>
+ <para><command>$GENERATE</command>
is used to create a series of resource records that only
- differ from each other by an
- iterator. <command>$GENERATE</command> can be used to
- easily generate the sets of records required to support
- sub /24 reverse delegations described in RFC 2317:
- Classless IN-ADDR.ARPA delegation.
- </para>
+ differ from each other by an
+ iterator. <command>$GENERATE</command> can be used to
+ easily generate the sets of records required to support
+ sub /24 reverse delegations described in RFC 2317:
+ Classless IN-ADDR.ARPA delegation.
+ </para>
<programlisting>$ORIGIN 0.0.192.IN-ADDR.ARPA.
$GENERATE 1-2 @ NS SERVER$.EXAMPLE.
$GENERATE 1-127 $ CNAME $.0</programlisting>
- <para>
- is equivalent to
- </para>
+ <para>
+ is equivalent to
+ </para>
<programlisting>0.0.0.192.IN-ADDR.ARPA. NS SERVER1.EXAMPLE.
0.0.0.192.IN-ADDR.ARPA. NS SERVER2.EXAMPLE.
@@ -13444,9 +13566,9 @@ $ORIGIN EXAMPLE.
$GENERATE 1-127 HOST-$ A 1.2.3.$
$GENERATE 1-127 HOST-$ MX "0 ."</programlisting>
- <para>
- is equivalent to
- </para>
+ <para>
+ is equivalent to
+ </para>
<programlisting>HOST-1.EXAMPLE. A 1.2.3.1
HOST-1.EXAMPLE. MX 0 .
@@ -13459,65 +13581,66 @@ HOST-127.EXAMPLE. A 1.2.3.127
HOST-127.EXAMPLE. MX 0 .
</programlisting>
- <informaltable colsep="0" rowsep="0">
- <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="3Level-table">
- <colspec colname="1" colnum="1" colsep="0" colwidth="0.875in"/>
- <colspec colname="2" colnum="2" colsep="0" colwidth="4.250in"/>
- <tbody>
- <row rowsep="0">
- <entry colname="1">
- <para><command>range</command></para>
- </entry>
- <entry colname="2">
- <para>
- This can be one of two forms: start-stop
- or start-stop/step. If the first form is used, then step
- is set to
- 1. All of start, stop and step must be positive.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>lhs</command></para>
- </entry>
- <entry colname="2">
- <para>This
+ <informaltable colsep="0" rowsep="0">
+ <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="3Level-table">
+ <colspec colname="1" colnum="1" colsep="0" colwidth="0.875in"/>
+ <colspec colname="2" colnum="2" colsep="0" colwidth="4.250in"/>
+ <tbody>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>range</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ This can be one of two forms: start-stop
+ or start-stop/step. If the first form is used, then step
+ is set to 1. start, stop and step must be positive
+ integers between 0 and (2^31)-1. start must not be
+ larger than stop.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>lhs</command></para>
+ </entry>
+ <entry colname="2">
+ <para>This
describes the owner name of the resource records
- to be created. Any single <command>$</command>
- (dollar sign)
- symbols within the <command>lhs</command> string
- are replaced by the iterator value.
-
- To get a $ in the output, you need to escape the
- <command>$</command> using a backslash
- <command>\</command>,
- e.g. <command>\$</command>. The
- <command>$</command> may optionally be followed
- by modifiers which change the offset from the
- iterator, field width and base.
-
- Modifiers are introduced by a
- <command>{</command> (left brace) immediately following the
- <command>$</command> as
- <command>${offset[,width[,base]]}</command>.
- For example, <command>${-20,3,d}</command>
- subtracts 20 from the current value, prints the
- result as a decimal in a zero-padded field of
- width 3.
+ to be created. Any single <command>$</command>
+ (dollar sign)
+ symbols within the <command>lhs</command> string
+ are replaced by the iterator value.
+
+ To get a $ in the output, you need to escape the
+ <command>$</command> using a backslash
+ <command>\</command>,
+ e.g. <command>\$</command>. The
+ <command>$</command> may optionally be followed
+ by modifiers which change the offset from the
+ iterator, field width and base.
+
+ Modifiers are introduced by a
+ <command>{</command> (left brace) immediately following the
+ <command>$</command> as
+ <command>${offset[,width[,base]]}</command>.
+ For example, <command>${-20,3,d}</command>
+ subtracts 20 from the current value, prints the
+ result as a decimal in a zero-padded field of
+ width 3.
Available output forms are decimal
- (<command>d</command>), octal
- (<command>o</command>), hexadecimal
- (<command>x</command> or <command>X</command>
- for uppercase) and nibble
+ (<command>d</command>), octal
+ (<command>o</command>), hexadecimal
+ (<command>x</command> or <command>X</command>
+ for uppercase) and nibble
(<command>n</command> or <command>N</command>\
for uppercase). The default modifier is
- <command>${0,0,d}</command>. If the
- <command>lhs</command> is not absolute, the
- current <command>$ORIGIN</command> is appended
- to the name.
- </para>
+ <command>${0,0,d}</command>. If the
+ <command>lhs</command> is not absolute, the
+ current <command>$ORIGIN</command> is appended
+ to the name.
+ </para>
<para>
In nibble mode the value will be treated as
if it was a reversed hexadecimal string
@@ -13532,69 +13655,69 @@ HOST-127.EXAMPLE. MX 0 .
</para>
</entry>
</row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>ttl</command></para>
- </entry>
- <entry colname="2">
- <para>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>ttl</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
Specifies the time-to-live of the generated records. If
- not specified this will be inherited using the
- normal TTL inheritance rules.
- </para>
- <para><command>class</command>
+ not specified this will be inherited using the
+ normal TTL inheritance rules.
+ </para>
+ <para><command>class</command>
and <command>ttl</command> can be
- entered in either order.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>class</command></para>
- </entry>
- <entry colname="2">
- <para>
+ entered in either order.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>class</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
Specifies the class of the generated records.
- This must match the zone class if it is
- specified.
- </para>
- <para><command>class</command>
+ This must match the zone class if it is
+ specified.
+ </para>
+ <para><command>class</command>
and <command>ttl</command> can be
- entered in either order.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>type</command></para>
- </entry>
- <entry colname="2">
- <para>
+ entered in either order.
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>type</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
Any valid type.
- </para>
- </entry>
- </row>
- <row rowsep="0">
- <entry colname="1">
- <para><command>rhs</command></para>
- </entry>
- <entry colname="2">
- <para>
- <command>rhs</command>, optionally, quoted string.
- </para>
- </entry>
- </row>
- </tbody>
- </tgroup>
- </informaltable>
- <para>
- The <command>$GENERATE</command> directive is a <acronym>BIND</acronym> extension
- and not part of the standard zone file format.
- </para>
- <para>
- BIND 8 does not support the optional TTL and CLASS fields.
- </para>
- </sect2>
+ </para>
+ </entry>
+ </row>
+ <row rowsep="0">
+ <entry colname="1">
+ <para><command>rhs</command></para>
+ </entry>
+ <entry colname="2">
+ <para>
+ <command>rhs</command>, optionally, quoted string.
+ </para>
+ </entry>
+ </row>
+ </tbody>
+ </tgroup>
+ </informaltable>
+ <para>
+ The <command>$GENERATE</command> directive is a <acronym>BIND</acronym> extension
+ and not part of the standard zone file format.
+ </para>
+ <para>
+ BIND 8 does not support the optional TTL and CLASS fields.
+ </para>
+ </sect2>
<sect2 id="zonefile_format">
<title>Additional File Formats</title>
@@ -13626,7 +13749,7 @@ HOST-127.EXAMPLE. MX 0 .
should then be converted to the binary form by the
<command>named-compilezone</command> command again.
</para>
- <para>
+ <para>
Although the <constant>raw</constant> format uses the
network byte order and avoids architecture-dependent
data alignment so that it is as much portable as
@@ -13640,8 +13763,8 @@ HOST-127.EXAMPLE. MX 0 .
</sect1>
<sect1 id="statistics">
- <title>BIND9 Statistics</title>
- <para>
+ <title>BIND9 Statistics</title>
+ <para>
<acronym>BIND</acronym> 9 maintains lots of statistics
information and provides several interfaces for users to
get access to the statistics.
@@ -13649,96 +13772,96 @@ HOST-127.EXAMPLE. MX 0 .
that were available in <acronym>BIND</acronym> 8 and
are meaningful in <acronym>BIND</acronym> 9,
and other information that is considered useful.
- </para>
+ </para>
- <para>
+ <para>
The statistics information is categorized into the following
sections.
- </para>
+ </para>
<informaltable frame="all">
- <tgroup cols="2">
- <colspec colname="1" colnum="1" colsep="0" colwidth="3.300in"/>
- <colspec colname="2" colnum="2" colsep="0" colwidth="2.625in"/>
- <tbody>
+ <tgroup cols="2">
+ <colspec colname="1" colnum="1" colsep="0" colwidth="3.300in"/>
+ <colspec colname="2" colnum="2" colsep="0" colwidth="2.625in"/>
+ <tbody>
<row rowsep="0">
- <entry colname="1">
- <para>Incoming Requests</para>
- </entry>
- <entry colname="2">
- <para>
- The number of incoming DNS requests for each OPCODE.
- </para>
- </entry>
+ <entry colname="1">
+ <para>Incoming Requests</para>
+ </entry>
+ <entry colname="2">
+ <para>
+ The number of incoming DNS requests for each OPCODE.
+ </para>
+ </entry>
</row>
<row rowsep="0">
- <entry colname="1">
- <para>Incoming Queries</para>
- </entry>
- <entry colname="2">
- <para>
+ <entry colname="1">
+ <para>Incoming Queries</para>
+ </entry>
+ <entry colname="2">
+ <para>
The number of incoming queries for each RR type.
- </para>
- </entry>
+ </para>
+ </entry>
</row>
<row rowsep="0">
- <entry colname="1">
- <para>Outgoing Queries</para>
- </entry>
- <entry colname="2">
- <para>
- The number of outgoing queries for each RR
- type sent from the internal resolver.
+ <entry colname="1">
+ <para>Outgoing Queries</para>
+ </entry>
+ <entry colname="2">
+ <para>
+ The number of outgoing queries for each RR
+ type sent from the internal resolver.
Maintained per view.
- </para>
- </entry>
+ </para>
+ </entry>
</row>
<row rowsep="0">
- <entry colname="1">
- <para>Name Server Statistics</para>
- </entry>
- <entry colname="2">
- <para>
- Statistics counters about incoming request processing.
- </para>
- </entry>
+ <entry colname="1">
+ <para>Name Server Statistics</para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Statistics counters about incoming request processing.
+ </para>
+ </entry>
</row>
<row rowsep="0">
- <entry colname="1">
- <para>Zone Maintenance Statistics</para>
- </entry>
- <entry colname="2">
- <para>
- Statistics counters regarding zone maintenance
- operations such as zone transfers.
- </para>
- </entry>
+ <entry colname="1">
+ <para>Zone Maintenance Statistics</para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Statistics counters regarding zone maintenance
+ operations such as zone transfers.
+ </para>
+ </entry>
</row>
<row rowsep="0">
- <entry colname="1">
- <para>Resolver Statistics</para>
- </entry>
- <entry colname="2">
- <para>
- Statistics counters about name resolution
- performed in the internal resolver.
+ <entry colname="1">
+ <para>Resolver Statistics</para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Statistics counters about name resolution
+ performed in the internal resolver.
Maintained per view.
- </para>
- </entry>
+ </para>
+ </entry>
</row>
<row rowsep="0">
- <entry colname="1">
- <para>Cache DB RRsets</para>
- </entry>
- <entry colname="2">
- <para>
+ <entry colname="1">
+ <para>Cache DB RRsets</para>
+ </entry>
+ <entry colname="2">
+ <para>
The number of RRsets per RR type and nonexistent
names stored in the cache database.
If the exclamation mark (!) is printed for a RR
@@ -13746,19 +13869,19 @@ HOST-127.EXAMPLE. MX 0 .
known to be nonexistent (this is also known as
"NXRRSET").
Maintained per view.
- </para>
- </entry>
+ </para>
+ </entry>
</row>
<row rowsep="0">
- <entry colname="1">
- <para>Socket I/O Statistics</para>
- </entry>
- <entry colname="2">
- <para>
- Statistics counters about network related events.
- </para>
- </entry>
+ <entry colname="1">
+ <para>Socket I/O Statistics</para>
+ </entry>
+ <entry colname="2">
+ <para>
+ Statistics counters about network related events.
+ </para>
+ </entry>
</row>
</tbody>
@@ -13786,21 +13909,21 @@ HOST-127.EXAMPLE. MX 0 .
(see <xref linkend="statschannels"/>.)
</para>
- <sect3 id="statsfile">
- <title>The Statistics File</title>
- <para>
- The text format statistics dump begins with a line, like:
+ <sect3 id="statsfile">
+ <title>The Statistics File</title>
+ <para>
+ The text format statistics dump begins with a line, like:
</para>
- <para>
+ <para>
<command>+++ Statistics Dump +++ (973798949)</command>
</para>
<para>
The number in parentheses is a standard
- Unix-style timestamp, measured as seconds since January 1, 1970.
+ Unix-style timestamp, measured as seconds since January 1, 1970.
- Following
- that line is a set of statistics information, which is categorized
- as described above.
+ Following
+ that line is a set of statistics information, which is categorized
+ as described above.
Each section begins with a line, like:
</para>
@@ -13818,14 +13941,14 @@ HOST-127.EXAMPLE. MX 0 .
<para>
The statistics dump ends with the line where the
- number is identical to the number in the beginning line; for example:
- </para>
- <para>
+ number is identical to the number in the beginning line; for example:
+ </para>
+ <para>
<command>--- Statistics Dump --- (973798949)</command>
- </para>
+ </para>
</sect3>
- <sect2 id="statistics_counters">
+ <sect2 id="statistics_counters">
<title>Statistics Counters</title>
<para>
The following tables summarize statistics counters that
@@ -13845,29 +13968,29 @@ HOST-127.EXAMPLE. MX 0 .
</para>
<sect3>
- <title>Name Server Statistics Counters</title>
+ <title>Name Server Statistics Counters</title>
- <informaltable colsep="0" rowsep="0">
- <tgroup cols="3" colsep="0" rowsep="0" tgroupstyle="4Level-table">
+ <informaltable colsep="0" rowsep="0">
+ <tgroup cols="3" colsep="0" rowsep="0" tgroupstyle="4Level-table">
<colspec colname="1" colnum="1" colsep="0" colwidth="1.150in"/>
<colspec colname="2" colnum="2" colsep="0" colwidth="1.150in"/>
<colspec colname="3" colnum="3" colsep="0" colwidth="3.350in"/>
<tbody>
<row>
<entry colname="1">
- <para>
+ <para>
<emphasis>Symbol</emphasis>
- </para>
+ </para>
</entry>
<entry colname="2">
- <para>
+ <para>
<emphasis>BIND8 Symbol</emphasis>
- </para>
+ </para>
</entry>
<entry colname="3">
- <para>
+ <para>
<emphasis>Description</emphasis>
- </para>
+ </para>
</entry>
</row>
@@ -14438,28 +14561,28 @@ HOST-127.EXAMPLE. MX 0 .
</entry>
</row>
</tbody>
- </tgroup>
- </informaltable>
- </sect3>
+ </tgroup>
+ </informaltable>
+ </sect3>
<sect3>
- <title>Zone Maintenance Statistics Counters</title>
+ <title>Zone Maintenance Statistics Counters</title>
- <informaltable colsep="0" rowsep="0">
- <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="4Level-table">
+ <informaltable colsep="0" rowsep="0">
+ <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="4Level-table">
<colspec colname="1" colnum="1" colsep="0" colwidth="1.150in"/>
<colspec colname="2" colnum="2" colsep="0" colwidth="3.350in"/>
<tbody>
<row>
<entry colname="1">
- <para>
+ <para>
<emphasis>Symbol</emphasis>
- </para>
+ </para>
</entry>
<entry colname="2">
- <para>
+ <para>
<emphasis>Description</emphasis>
- </para>
+ </para>
</entry>
</row>
@@ -14594,34 +14717,34 @@ HOST-127.EXAMPLE. MX 0 .
</entry>
</row>
</tbody>
- </tgroup>
- </informaltable>
+ </tgroup>
+ </informaltable>
</sect3>
<sect3>
- <title>Resolver Statistics Counters</title>
+ <title>Resolver Statistics Counters</title>
- <informaltable colsep="0" rowsep="0">
- <tgroup cols="3" colsep="0" rowsep="0" tgroupstyle="4Level-table">
+ <informaltable colsep="0" rowsep="0">
+ <tgroup cols="3" colsep="0" rowsep="0" tgroupstyle="4Level-table">
<colspec colname="1" colnum="1" colsep="0" colwidth="1.150in"/>
<colspec colname="2" colnum="2" colsep="0" colwidth="1.150in"/>
<colspec colname="3" colnum="3" colsep="0" colwidth="3.350in"/>
<tbody>
<row>
<entry colname="1">
- <para>
+ <para>
<emphasis>Symbol</emphasis>
- </para>
+ </para>
</entry>
<entry colname="2">
- <para>
+ <para>
<emphasis>BIND8 Symbol</emphasis>
- </para>
+ </para>
</entry>
<entry colname="3">
- <para>
+ <para>
<emphasis>Description</emphasis>
- </para>
+ </para>
</entry>
</row>
@@ -14979,13 +15102,13 @@ HOST-127.EXAMPLE. MX 0 .
</entry>
</row>
</tbody>
- </tgroup>
- </informaltable>
+ </tgroup>
+ </informaltable>
</sect3>
<sect3>
- <title>Socket I/O Statistics Counters</title>
+ <title>Socket I/O Statistics Counters</title>
<para>
Socket I/O statistics counters are defined per socket
@@ -15004,20 +15127,20 @@ HOST-127.EXAMPLE. MX 0 .
</para>
<informaltable colsep="0" rowsep="0">
- <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="4Level-table">
+ <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="4Level-table">
<colspec colname="1" colnum="1" colsep="0" colwidth="1.150in"/>
<colspec colname="2" colnum="2" colsep="0" colwidth="3.350in"/>
<tbody>
<row>
<entry colname="1">
- <para>
+ <para>
<emphasis>Symbol</emphasis>
- </para>
+ </para>
</entry>
<entry colname="2">
- <para>
+ <para>
<emphasis>Description</emphasis>
- </para>
+ </para>
</entry>
</row>
@@ -15138,11 +15261,11 @@ HOST-127.EXAMPLE. MX 0 .
</entry>
</row>
</tbody>
- </tgroup>
+ </tgroup>
</informaltable>
</sect3>
<sect3>
- <title>Compatibility with <emphasis>BIND</emphasis> 8 Counters</title>
+ <title>Compatibility with <emphasis>BIND</emphasis> 8 Counters</title>
<para>
Most statistics counters that were available
in <command>BIND</command> 8 are also supported in
@@ -15151,8 +15274,8 @@ HOST-127.EXAMPLE. MX 0 .
in these tables.
</para>
- <variablelist>
- <varlistentry>
+ <variablelist>
+ <varlistentry>
<term><command>RFwdR,SFwdR</command></term>
<listitem>
<para>
@@ -15164,7 +15287,7 @@ HOST-127.EXAMPLE. MX 0 .
</listitem>
</varlistentry>
- <varlistentry>
+ <varlistentry>
<term><command>RAXFR</command></term>
<listitem>
<para>
@@ -15173,7 +15296,7 @@ HOST-127.EXAMPLE. MX 0 .
</listitem>
</varlistentry>
- <varlistentry>
+ <varlistentry>
<term><command>RIQ</command></term>
<listitem>
<para>
@@ -15182,7 +15305,7 @@ HOST-127.EXAMPLE. MX 0 .
</listitem>
</varlistentry>
- <varlistentry>
+ <varlistentry>
<term><command>ROpts</command></term>
<listitem>
<para>
@@ -15194,44 +15317,44 @@ HOST-127.EXAMPLE. MX 0 .
</varlistentry>
</variablelist>
</sect3>
- </sect2>
+ </sect2>
</sect1>
</chapter>
<chapter id="Bv9ARM.ch07">
<title><acronym>BIND</acronym> 9 Security Considerations</title>
<sect1 id="Access_Control_Lists">
- <title>Access Control Lists</title>
- <para>
- Access Control Lists (ACLs) are address match lists that
- you can set up and nickname for future use in <command>allow-notify</command>,
- <command>allow-query</command>, <command>allow-query-on</command>,
+ <title>Access Control Lists</title>
+ <para>
+ Access Control Lists (ACLs) are address match lists that
+ you can set up and nickname for future use in <command>allow-notify</command>,
+ <command>allow-query</command>, <command>allow-query-on</command>,
<command>allow-recursion</command>, <command>allow-recursion-on</command>,
- <command>blackhole</command>, <command>allow-transfer</command>,
- etc.
- </para>
- <para>
- Using ACLs allows you to have finer control over who can access
- your name server, without cluttering up your config files with huge
- lists of IP addresses.
- </para>
- <para>
- It is a <emphasis>good idea</emphasis> to use ACLs, and to
- control access to your server. Limiting access to your server by
- outside parties can help prevent spoofing and denial of service (DoS) attacks against
- your server.
- </para>
- <para>
- Here is an example of how to properly apply ACLs:
- </para>
+ <command>blackhole</command>, <command>allow-transfer</command>,
+ etc.
+ </para>
+ <para>
+ Using ACLs allows you to have finer control over who can access
+ your name server, without cluttering up your config files with huge
+ lists of IP addresses.
+ </para>
+ <para>
+ It is a <emphasis>good idea</emphasis> to use ACLs, and to
+ control access to your server. Limiting access to your server by
+ outside parties can help prevent spoofing and denial of service (DoS) attacks against
+ your server.
+ </para>
+ <para>
+ Here is an example of how to properly apply ACLs:
+ </para>
<programlisting>
// Set up an ACL named "bogusnets" that will block
// RFC1918 space and some reserved space, which is
// commonly used in spoofing attacks.
acl bogusnets {
- 0.0.0.0/8; 192.0.2.0/24; 224.0.0.0/3;
- 10.0.0.0/8; 172.16.0.0/12; 192.168.0.0/16;
+ 0.0.0.0/8; 192.0.2.0/24; 224.0.0.0/3;
+ 10.0.0.0/8; 172.16.0.0/12; 192.168.0.0/16;
};
// Set up an ACL called our-nets. Replace this with the
@@ -15254,14 +15377,14 @@ zone "example.com" {
};
</programlisting>
- <para>
- This allows recursive queries of the server from the outside
- unless recursion has been previously disabled.
- </para>
+ <para>
+ This allows recursive queries of the server from the outside
+ unless recursion has been previously disabled.
+ </para>
</sect1>
<sect1>
- <title><command>Chroot</command> and <command>Setuid</command></title>
- <para>
+ <title><command>Chroot</command> and <command>Setuid</command></title>
+ <para>
On UNIX servers, it is possible to run <acronym>BIND</acronym>
in a <emphasis>chrooted</emphasis> environment (using
the <command>chroot()</command> function) by specifying
@@ -15269,114 +15392,114 @@ zone "example.com" {
This can help improve system security by placing
<acronym>BIND</acronym> in a "sandbox", which will limit
the damage done if a server is compromised.
- </para>
- <para>
- Another useful feature in the UNIX version of <acronym>BIND</acronym> is the
- ability to run the daemon as an unprivileged user ( <option>-u</option> <replaceable>user</replaceable> ).
- We suggest running as an unprivileged user when using the <command>chroot</command> feature.
- </para>
- <para>
- Here is an example command line to load <acronym>BIND</acronym> in a <command>chroot</command> sandbox,
- <command>/var/named</command>, and to run <command>named</command> <command>setuid</command> to
- user 202:
- </para>
- <para>
- <userinput>/usr/local/sbin/named -u 202 -t /var/named</userinput>
- </para>
-
- <sect2>
- <title>The <command>chroot</command> Environment</title>
-
- <para>
- In order for a <command>chroot</command> environment
- to
- work properly in a particular directory
- (for example, <filename>/var/named</filename>),
- you will need to set up an environment that includes everything
- <acronym>BIND</acronym> needs to run.
- From <acronym>BIND</acronym>'s point of view, <filename>/var/named</filename> is
- the root of the filesystem. You will need to adjust the values of
- options like
- like <command>directory</command> and <command>pid-file</command> to account
- for this.
- </para>
- <para>
- Unlike with earlier versions of BIND, you typically will
- <emphasis>not</emphasis> need to compile <command>named</command>
- statically nor install shared libraries under the new root.
- However, depending on your operating system, you may need
- to set up things like
- <filename>/dev/zero</filename>,
- <filename>/dev/random</filename>,
- <filename>/dev/log</filename>, and
- <filename>/etc/localtime</filename>.
- </para>
- </sect2>
-
- <sect2>
- <title>Using the <command>setuid</command> Function</title>
-
- <para>
- Prior to running the <command>named</command> daemon,
- use
- the <command>touch</command> utility (to change file
- access and
- modification times) or the <command>chown</command>
- utility (to
- set the user id and/or group id) on files
- to which you want <acronym>BIND</acronym>
- to write.
- </para>
+ </para>
+ <para>
+ Another useful feature in the UNIX version of <acronym>BIND</acronym> is the
+ ability to run the daemon as an unprivileged user ( <option>-u</option> <replaceable>user</replaceable> ).
+ We suggest running as an unprivileged user when using the <command>chroot</command> feature.
+ </para>
+ <para>
+ Here is an example command line to load <acronym>BIND</acronym> in a <command>chroot</command> sandbox,
+ <command>/var/named</command>, and to run <command>named</command> <command>setuid</command> to
+ user 202:
+ </para>
+ <para>
+ <userinput>/usr/local/sbin/named -u 202 -t /var/named</userinput>
+ </para>
+
+ <sect2>
+ <title>The <command>chroot</command> Environment</title>
+
+ <para>
+ In order for a <command>chroot</command> environment
+ to
+ work properly in a particular directory
+ (for example, <filename>/var/named</filename>),
+ you will need to set up an environment that includes everything
+ <acronym>BIND</acronym> needs to run.
+ From <acronym>BIND</acronym>'s point of view, <filename>/var/named</filename> is
+ the root of the filesystem. You will need to adjust the values of
+ options like
+ like <command>directory</command> and <command>pid-file</command> to account
+ for this.
+ </para>
+ <para>
+ Unlike with earlier versions of BIND, you typically will
+ <emphasis>not</emphasis> need to compile <command>named</command>
+ statically nor install shared libraries under the new root.
+ However, depending on your operating system, you may need
+ to set up things like
+ <filename>/dev/zero</filename>,
+ <filename>/dev/random</filename>,
+ <filename>/dev/log</filename>, and
+ <filename>/etc/localtime</filename>.
+ </para>
+ </sect2>
+
+ <sect2>
+ <title>Using the <command>setuid</command> Function</title>
+
+ <para>
+ Prior to running the <command>named</command> daemon,
+ use
+ the <command>touch</command> utility (to change file
+ access and
+ modification times) or the <command>chown</command>
+ utility (to
+ set the user id and/or group id) on files
+ to which you want <acronym>BIND</acronym>
+ to write.
+ </para>
<note>
Note that if the <command>named</command> daemon is running as an
- unprivileged user, it will not be able to bind to new restricted
- ports if the server is reloaded.
+ unprivileged user, it will not be able to bind to new restricted
+ ports if the server is reloaded.
</note>
- </sect2>
+ </sect2>
</sect1>
<sect1 id="dynamic_update_security">
- <title>Dynamic Update Security</title>
-
- <para>
- Access to the dynamic
- update facility should be strictly limited. In earlier versions of
- <acronym>BIND</acronym>, the only way to do this was
- based on the IP
- address of the host requesting the update, by listing an IP address
- or
- network prefix in the <command>allow-update</command>
- zone option.
- This method is insecure since the source address of the update UDP
- packet
- is easily forged. Also note that if the IP addresses allowed by the
- <command>allow-update</command> option include the
- address of a slave
- server which performs forwarding of dynamic updates, the master can
- be
- trivially attacked by sending the update to the slave, which will
- forward it to the master with its own source IP address causing the
- master to approve it without question.
- </para>
-
- <para>
- For these reasons, we strongly recommend that updates be
- cryptographically authenticated by means of transaction signatures
- (TSIG). That is, the <command>allow-update</command>
- option should
- list only TSIG key names, not IP addresses or network
- prefixes. Alternatively, the new <command>update-policy</command>
- option can be used.
- </para>
-
- <para>
- Some sites choose to keep all dynamically-updated DNS data
- in a subdomain and delegate that subdomain to a separate zone. This
- way, the top-level zone containing critical data such as the IP
- addresses
- of public web and mail servers need not allow dynamic update at
- all.
- </para>
+ <title>Dynamic Update Security</title>
+
+ <para>
+ Access to the dynamic
+ update facility should be strictly limited. In earlier versions of
+ <acronym>BIND</acronym>, the only way to do this was
+ based on the IP
+ address of the host requesting the update, by listing an IP address
+ or
+ network prefix in the <command>allow-update</command>
+ zone option.
+ This method is insecure since the source address of the update UDP
+ packet
+ is easily forged. Also note that if the IP addresses allowed by the
+ <command>allow-update</command> option include the
+ address of a slave
+ server which performs forwarding of dynamic updates, the master can
+ be
+ trivially attacked by sending the update to the slave, which will
+ forward it to the master with its own source IP address causing the
+ master to approve it without question.
+ </para>
+
+ <para>
+ For these reasons, we strongly recommend that updates be
+ cryptographically authenticated by means of transaction signatures
+ (TSIG). That is, the <command>allow-update</command>
+ option should
+ list only TSIG key names, not IP addresses or network
+ prefixes. Alternatively, the new <command>update-policy</command>
+ option can be used.
+ </para>
+
+ <para>
+ Some sites choose to keep all dynamically-updated DNS data
+ in a subdomain and delegate that subdomain to a separate zone. This
+ way, the top-level zone containing critical data such as the IP
+ addresses
+ of public web and mail servers need not allow dynamic update at
+ all.
+ </para>
</sect1>
</chapter>
@@ -15384,22 +15507,22 @@ zone "example.com" {
<chapter id="Bv9ARM.ch08">
<title>Troubleshooting</title>
<sect1>
- <title>Common Problems</title>
- <sect2>
- <title>It's not working; how can I figure out what's wrong?</title>
-
- <para>
- The best solution to solving installation and
- configuration issues is to take preventative measures by setting
- up logging files beforehand. The log files provide a
- source of hints and information that can be used to figure out
- what went wrong and how to fix the problem.
- </para>
-
- </sect2>
+ <title>Common Problems</title>
+ <sect2>
+ <title>It's not working; how can I figure out what's wrong?</title>
+
+ <para>
+ The best solution to solving installation and
+ configuration issues is to take preventative measures by setting
+ up logging files beforehand. The log files provide a
+ source of hints and information that can be used to figure out
+ what went wrong and how to fix the problem.
+ </para>
+
+ </sect2>
</sect1>
<sect1>
- <title>Incrementing and Changing the Serial Number</title>
+ <title>Incrementing and Changing the Serial Number</title>
<para>
Zone serial numbers are just numbers &mdash; they aren't
@@ -15414,464 +15537,464 @@ zone "example.com" {
server will attempt to update its copy of the zone.
</para>
- <para>
- Setting the serial number to a lower number on the master
- server than the slave server means that the slave will not perform
- updates to its copy of the zone.
- </para>
+ <para>
+ Setting the serial number to a lower number on the master
+ server than the slave server means that the slave will not perform
+ updates to its copy of the zone.
+ </para>
- <para>
- The solution to this is to add 2147483647 (2^31-1) to the
- number, reload the zone and make sure all slaves have updated to
- the new zone serial number, then reset the number to what you want
- it to be, and reload the zone again.
- </para>
+ <para>
+ The solution to this is to add 2147483647 (2^31-1) to the
+ number, reload the zone and make sure all slaves have updated to
+ the new zone serial number, then reset the number to what you want
+ it to be, and reload the zone again.
+ </para>
</sect1>
<sect1>
- <title>Where Can I Get Help?</title>
-
- <para>
- The Internet Systems Consortium
- (<acronym>ISC</acronym>) offers a wide range
- of support and service agreements for <acronym>BIND</acronym> and <acronym>DHCP</acronym> servers. Four
- levels of premium support are available and each level includes
- support for all <acronym>ISC</acronym> programs,
- significant discounts on products
- and training, and a recognized priority on bug fixes and
- non-funded feature requests. In addition, <acronym>ISC</acronym> offers a standard
- support agreement package which includes services ranging from bug
- fix announcements to remote support. It also includes training in
- <acronym>BIND</acronym> and <acronym>DHCP</acronym>.
- </para>
-
- <para>
- To discuss arrangements for support, contact
- <ulink url="mailto:info@isc.org">info@isc.org</ulink> or visit the
- <acronym>ISC</acronym> web page at
+ <title>Where Can I Get Help?</title>
+
+ <para>
+ The Internet Systems Consortium
+ (<acronym>ISC</acronym>) offers a wide range
+ of support and service agreements for <acronym>BIND</acronym> and <acronym>DHCP</acronym> servers. Four
+ levels of premium support are available and each level includes
+ support for all <acronym>ISC</acronym> programs,
+ significant discounts on products
+ and training, and a recognized priority on bug fixes and
+ non-funded feature requests. In addition, <acronym>ISC</acronym> offers a standard
+ support agreement package which includes services ranging from bug
+ fix announcements to remote support. It also includes training in
+ <acronym>BIND</acronym> and <acronym>DHCP</acronym>.
+ </para>
+
+ <para>
+ To discuss arrangements for support, contact
+ <ulink url="mailto:info@isc.org">info@isc.org</ulink> or visit the
+ <acronym>ISC</acronym> web page at
<ulink url="http://www.isc.org/services/support/"
- >http://www.isc.org/services/support/</ulink>
- to read more.
- </para>
+ >http://www.isc.org/services/support/</ulink>
+ to read more.
+ </para>
</sect1>
</chapter>
<appendix id="Bv9ARM.ch09">
<title>Appendices</title>
<sect1>
- <title>Acknowledgments</title>
- <sect2 id="historical_dns_information">
- <title>A Brief History of the <acronym>DNS</acronym> and <acronym>BIND</acronym></title>
-
- <para>
- Although the "official" beginning of the Domain Name
- System occurred in 1984 with the publication of RFC 920, the
- core of the new system was described in 1983 in RFCs 882 and
- 883. From 1984 to 1987, the ARPAnet (the precursor to today's
- Internet) became a testbed of experimentation for developing the
- new naming/addressing scheme in a rapidly expanding,
- operational network environment. New RFCs were written and
- published in 1987 that modified the original documents to
- incorporate improvements based on the working model. RFC 1034,
- "Domain Names-Concepts and Facilities", and RFC 1035, "Domain
- Names-Implementation and Specification" were published and
- became the standards upon which all <acronym>DNS</acronym> implementations are
- built.
- </para>
-
- <para>
- The first working domain name server, called "Jeeves", was
- written in 1983-84 by Paul Mockapetris for operation on DEC
- Tops-20
- machines located at the University of Southern California's
- Information
- Sciences Institute (USC-ISI) and SRI International's Network
- Information
- Center (SRI-NIC). A <acronym>DNS</acronym> server for
- Unix machines, the Berkeley Internet
- Name Domain (<acronym>BIND</acronym>) package, was
- written soon after by a group of
- graduate students at the University of California at Berkeley
- under
- a grant from the US Defense Advanced Research Projects
- Administration
- (DARPA).
- </para>
- <para>
+ <title>Acknowledgments</title>
+ <sect2 id="historical_dns_information">
+ <title>A Brief History of the <acronym>DNS</acronym> and <acronym>BIND</acronym></title>
+
+ <para>
+ Although the "official" beginning of the Domain Name
+ System occurred in 1984 with the publication of RFC 920, the
+ core of the new system was described in 1983 in RFCs 882 and
+ 883. From 1984 to 1987, the ARPAnet (the precursor to today's
+ Internet) became a testbed of experimentation for developing the
+ new naming/addressing scheme in a rapidly expanding,
+ operational network environment. New RFCs were written and
+ published in 1987 that modified the original documents to
+ incorporate improvements based on the working model. RFC 1034,
+ "Domain Names-Concepts and Facilities", and RFC 1035, "Domain
+ Names-Implementation and Specification" were published and
+ became the standards upon which all <acronym>DNS</acronym> implementations are
+ built.
+ </para>
+
+ <para>
+ The first working domain name server, called "Jeeves", was
+ written in 1983-84 by Paul Mockapetris for operation on DEC
+ Tops-20
+ machines located at the University of Southern California's
+ Information
+ Sciences Institute (USC-ISI) and SRI International's Network
+ Information
+ Center (SRI-NIC). A <acronym>DNS</acronym> server for
+ Unix machines, the Berkeley Internet
+ Name Domain (<acronym>BIND</acronym>) package, was
+ written soon after by a group of
+ graduate students at the University of California at Berkeley
+ under
+ a grant from the US Defense Advanced Research Projects
+ Administration
+ (DARPA).
+ </para>
+ <para>
Versions of <acronym>BIND</acronym> through
- 4.8.3 were maintained by the Computer
- Systems Research Group (CSRG) at UC Berkeley. Douglas Terry, Mark
- Painter, David Riggle and Songnian Zhou made up the initial <acronym>BIND</acronym>
- project team. After that, additional work on the software package
- was done by Ralph Campbell. Kevin Dunlap, a Digital Equipment
- Corporation
- employee on loan to the CSRG, worked on <acronym>BIND</acronym> for 2 years, from 1985
- to 1987. Many other people also contributed to <acronym>BIND</acronym> development
- during that time: Doug Kingston, Craig Partridge, Smoot
- Carl-Mitchell,
- Mike Muuss, Jim Bloom and Mike Schwartz. <acronym>BIND</acronym> maintenance was subsequently
- handled by Mike Karels and &#216;ivind Kure.
- </para>
- <para>
- <acronym>BIND</acronym> versions 4.9 and 4.9.1 were
- released by Digital Equipment
- Corporation (now Compaq Computer Corporation). Paul Vixie, then
- a DEC employee, became <acronym>BIND</acronym>'s
- primary caretaker. He was assisted
- by Phil Almquist, Robert Elz, Alan Barrett, Paul Albitz, Bryan
- Beecher, Andrew
- Partan, Andy Cherenson, Tom Limoncelli, Berthold Paffrath, Fuat
- Baran, Anant Kumar, Art Harkin, Win Treese, Don Lewis, Christophe
- Wolfhugel, and others.
- </para>
- <para>
- In 1994, <acronym>BIND</acronym> version 4.9.2 was sponsored by
- Vixie Enterprises. Paul
- Vixie became <acronym>BIND</acronym>'s principal
- architect/programmer.
- </para>
- <para>
- <acronym>BIND</acronym> versions from 4.9.3 onward
- have been developed and maintained
- by the Internet Systems Consortium and its predecessor,
- the Internet Software Consortium, with support being provided
- by ISC's sponsors.
- </para>
+ 4.8.3 were maintained by the Computer
+ Systems Research Group (CSRG) at UC Berkeley. Douglas Terry, Mark
+ Painter, David Riggle and Songnian Zhou made up the initial <acronym>BIND</acronym>
+ project team. After that, additional work on the software package
+ was done by Ralph Campbell. Kevin Dunlap, a Digital Equipment
+ Corporation
+ employee on loan to the CSRG, worked on <acronym>BIND</acronym> for 2 years, from 1985
+ to 1987. Many other people also contributed to <acronym>BIND</acronym> development
+ during that time: Doug Kingston, Craig Partridge, Smoot
+ Carl-Mitchell,
+ Mike Muuss, Jim Bloom and Mike Schwartz. <acronym>BIND</acronym> maintenance was subsequently
+ handled by Mike Karels and &#216;ivind Kure.
+ </para>
+ <para>
+ <acronym>BIND</acronym> versions 4.9 and 4.9.1 were
+ released by Digital Equipment
+ Corporation (now Compaq Computer Corporation). Paul Vixie, then
+ a DEC employee, became <acronym>BIND</acronym>'s
+ primary caretaker. He was assisted
+ by Phil Almquist, Robert Elz, Alan Barrett, Paul Albitz, Bryan
+ Beecher, Andrew
+ Partan, Andy Cherenson, Tom Limoncelli, Berthold Paffrath, Fuat
+ Baran, Anant Kumar, Art Harkin, Win Treese, Don Lewis, Christophe
+ Wolfhugel, and others.
+ </para>
+ <para>
+ In 1994, <acronym>BIND</acronym> version 4.9.2 was sponsored by
+ Vixie Enterprises. Paul
+ Vixie became <acronym>BIND</acronym>'s principal
+ architect/programmer.
+ </para>
+ <para>
+ <acronym>BIND</acronym> versions from 4.9.3 onward
+ have been developed and maintained
+ by the Internet Systems Consortium and its predecessor,
+ the Internet Software Consortium, with support being provided
+ by ISC's sponsors.
+ </para>
<para>
As co-architects/programmers, Bob Halley and
- Paul Vixie released the first production-ready version of
+ Paul Vixie released the first production-ready version of
<acronym>BIND</acronym> version 8 in May 1997.
- </para>
+ </para>
<para>
BIND version 9 was released in September 2000 and is a
major rewrite of nearly all aspects of the underlying
BIND architecture.
- </para>
- <para>
+ </para>
+ <para>
BIND versions 4 and 8 are officially deprecated.
No additional development is done
on BIND version 4 or BIND version 8.
- </para>
- <para>
- <acronym>BIND</acronym> development work is made
- possible today by the sponsorship
- of several corporations, and by the tireless work efforts of
- numerous individuals.
- </para>
- </sect2>
+ </para>
+ <para>
+ <acronym>BIND</acronym> development work is made
+ possible today by the sponsorship
+ of several corporations, and by the tireless work efforts of
+ numerous individuals.
+ </para>
+ </sect2>
</sect1>
<sect1>
- <title>General <acronym>DNS</acronym> Reference Information</title>
- <sect2 id="ipv6addresses">
- <title>IPv6 addresses (AAAA)</title>
- <para>
- IPv6 addresses are 128-bit identifiers for interfaces and
- sets of interfaces which were introduced in the <acronym>DNS</acronym> to facilitate
- scalable Internet routing. There are three types of addresses: <emphasis>Unicast</emphasis>,
- an identifier for a single interface;
- <emphasis>Anycast</emphasis>,
- an identifier for a set of interfaces; and <emphasis>Multicast</emphasis>,
- an identifier for a set of interfaces. Here we describe the global
- Unicast address scheme. For more information, see RFC 3587,
+ <title>General <acronym>DNS</acronym> Reference Information</title>
+ <sect2 id="ipv6addresses">
+ <title>IPv6 addresses (AAAA)</title>
+ <para>
+ IPv6 addresses are 128-bit identifiers for interfaces and
+ sets of interfaces which were introduced in the <acronym>DNS</acronym> to facilitate
+ scalable Internet routing. There are three types of addresses: <emphasis>Unicast</emphasis>,
+ an identifier for a single interface;
+ <emphasis>Anycast</emphasis>,
+ an identifier for a set of interfaces; and <emphasis>Multicast</emphasis>,
+ an identifier for a set of interfaces. Here we describe the global
+ Unicast address scheme. For more information, see RFC 3587,
"Global Unicast Address Format."
- </para>
- <para>
+ </para>
+ <para>
IPv6 unicast addresses consist of a
<emphasis>global routing prefix</emphasis>, a
<emphasis>subnet identifier</emphasis>, and an
<emphasis>interface identifier</emphasis>.
- </para>
- <para>
- The global routing prefix is provided by the
- upstream provider or ISP, and (roughly) corresponds to the
+ </para>
+ <para>
+ The global routing prefix is provided by the
+ upstream provider or ISP, and (roughly) corresponds to the
IPv4 <emphasis>network</emphasis> section
- of the address range.
+ of the address range.
The subnet identifier is for local subnetting, much the
- same as subnetting an
- IPv4 /16 network into /24 subnets.
+ same as subnetting an
+ IPv4 /16 network into /24 subnets.
The interface identifier is the address of an individual
- interface on a given network; in IPv6, addresses belong to
- interfaces rather than to machines.
- </para>
- <para>
- The subnetting capability of IPv6 is much more flexible than
- that of IPv4: subnetting can be carried out on bit boundaries,
- in much the same way as Classless InterDomain Routing
- (CIDR), and the DNS PTR representation ("nibble" format)
- makes setting up reverse zones easier.
- </para>
- <para>
- The Interface Identifier must be unique on the local link,
- and is usually generated automatically by the IPv6
- implementation, although it is usually possible to
- override the default setting if necessary. A typical IPv6
- address might look like:
+ interface on a given network; in IPv6, addresses belong to
+ interfaces rather than to machines.
+ </para>
+ <para>
+ The subnetting capability of IPv6 is much more flexible than
+ that of IPv4: subnetting can be carried out on bit boundaries,
+ in much the same way as Classless InterDomain Routing
+ (CIDR), and the DNS PTR representation ("nibble" format)
+ makes setting up reverse zones easier.
+ </para>
+ <para>
+ The Interface Identifier must be unique on the local link,
+ and is usually generated automatically by the IPv6
+ implementation, although it is usually possible to
+ override the default setting if necessary. A typical IPv6
+ address might look like:
<command>2001:db8:201:9:a00:20ff:fe81:2b32</command>
</para>
- <para>
- IPv6 address specifications often contain long strings
- of zeros, so the architects have included a shorthand for
- specifying
- them. The double colon (`::') indicates the longest possible
- string
- of zeros that can fit, and can be used only once in an address.
- </para>
- </sect2>
+ <para>
+ IPv6 address specifications often contain long strings
+ of zeros, so the architects have included a shorthand for
+ specifying
+ them. The double colon (`::') indicates the longest possible
+ string
+ of zeros that can fit, and can be used only once in an address.
+ </para>
+ </sect2>
</sect1>
<sect1 id="bibliography">
- <title>Bibliography (and Suggested Reading)</title>
- <sect2 id="rfcs">
- <title>Request for Comments (RFCs)</title>
- <para>
- Specification documents for the Internet protocol suite, including
- the <acronym>DNS</acronym>, are published as part of
- the Request for Comments (RFCs)
- series of technical notes. The standards themselves are defined
- by the Internet Engineering Task Force (IETF) and the Internet
- Engineering Steering Group (IESG). RFCs can be obtained online via FTP at:
- </para>
- <para>
- <ulink url="ftp://www.isi.edu/in-notes/">
+ <title>Bibliography (and Suggested Reading)</title>
+ <sect2 id="rfcs">
+ <title>Request for Comments (RFCs)</title>
+ <para>
+ Specification documents for the Internet protocol suite, including
+ the <acronym>DNS</acronym>, are published as part of
+ the Request for Comments (RFCs)
+ series of technical notes. The standards themselves are defined
+ by the Internet Engineering Task Force (IETF) and the Internet
+ Engineering Steering Group (IESG). RFCs can be obtained online via FTP at:
+ </para>
+ <para>
+ <ulink url="ftp://www.isi.edu/in-notes/">
ftp://www.isi.edu/in-notes/RFC<replaceable>xxxx</replaceable>.txt
</ulink>
</para>
<para>
(where <replaceable>xxxx</replaceable> is
- the number of the RFC). RFCs are also available via the Web at:
- </para>
- <para>
- <ulink url="http://www.ietf.org/rfc/"
- >http://www.ietf.org/rfc/</ulink>.
- </para>
- <bibliography>
- <bibliodiv>
- <!-- one of (BIBLIOENTRY BIBLIOMIXED) -->
- <title>Standards</title>
- <biblioentry>
- <abbrev>RFC974</abbrev>
- <author>
- <surname>Partridge</surname>
- <firstname>C.</firstname>
- </author>
- <title>Mail Routing and the Domain System</title>
- <pubdate>January 1986</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC1034</abbrev>
- <author>
- <surname>Mockapetris</surname>
- <firstname>P.V.</firstname>
- </author>
- <title>Domain Names &mdash; Concepts and Facilities</title>
- <pubdate>November 1987</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC1035</abbrev>
- <author>
- <surname>Mockapetris</surname>
- <firstname>P. V.</firstname>
- </author> <title>Domain Names &mdash; Implementation and
- Specification</title>
- <pubdate>November 1987</pubdate>
- </biblioentry>
- </bibliodiv>
- <bibliodiv id="proposed_standards" xreflabel="Proposed Standards">
-
- <title>Proposed Standards</title>
- <!-- one of (BIBLIOENTRY BIBLIOMIXED) -->
- <biblioentry>
- <abbrev>RFC2181</abbrev>
- <author>
- <surname>Elz</surname>
- <firstname>R., R. Bush</firstname>
- </author>
- <title>Clarifications to the <acronym>DNS</acronym>
- Specification</title>
- <pubdate>July 1997</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC2308</abbrev>
- <author>
- <surname>Andrews</surname>
- <firstname>M.</firstname>
- </author>
- <title>Negative Caching of <acronym>DNS</acronym>
- Queries</title>
- <pubdate>March 1998</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC1995</abbrev>
- <author>
- <surname>Ohta</surname>
- <firstname>M.</firstname>
- </author>
- <title>Incremental Zone Transfer in <acronym>DNS</acronym></title>
- <pubdate>August 1996</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC1996</abbrev>
- <author>
- <surname>Vixie</surname>
- <firstname>P.</firstname>
- </author>
- <title>A Mechanism for Prompt Notification of Zone Changes</title>
- <pubdate>August 1996</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC2136</abbrev>
- <authorgroup>
- <author>
- <surname>Vixie</surname>
- <firstname>P.</firstname>
- </author>
- <author>
- <firstname>S.</firstname>
- <surname>Thomson</surname>
- </author>
- <author>
- <firstname>Y.</firstname>
- <surname>Rekhter</surname>
- </author>
- <author>
- <firstname>J.</firstname>
- <surname>Bound</surname>
- </author>
- </authorgroup>
- <title>Dynamic Updates in the Domain Name System</title>
- <pubdate>April 1997</pubdate>
- </biblioentry>
+ the number of the RFC). RFCs are also available via the Web at:
+ </para>
+ <para>
+ <ulink url="http://www.ietf.org/rfc/"
+ >http://www.ietf.org/rfc/</ulink>.
+ </para>
+ <bibliography>
+ <bibliodiv>
+ <!-- one of (BIBLIOENTRY BIBLIOMIXED) -->
+ <title>Standards</title>
+ <biblioentry>
+ <abbrev>RFC974</abbrev>
+ <author>
+ <surname>Partridge</surname>
+ <firstname>C.</firstname>
+ </author>
+ <title>Mail Routing and the Domain System</title>
+ <pubdate>January 1986</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC1034</abbrev>
+ <author>
+ <surname>Mockapetris</surname>
+ <firstname>P.V.</firstname>
+ </author>
+ <title>Domain Names &mdash; Concepts and Facilities</title>
+ <pubdate>November 1987</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC1035</abbrev>
+ <author>
+ <surname>Mockapetris</surname>
+ <firstname>P. V.</firstname>
+ </author> <title>Domain Names &mdash; Implementation and
+ Specification</title>
+ <pubdate>November 1987</pubdate>
+ </biblioentry>
+ </bibliodiv>
+ <bibliodiv id="proposed_standards" xreflabel="Proposed Standards">
+
+ <title>Proposed Standards</title>
+ <!-- one of (BIBLIOENTRY BIBLIOMIXED) -->
+ <biblioentry>
+ <abbrev>RFC2181</abbrev>
+ <author>
+ <surname>Elz</surname>
+ <firstname>R., R. Bush</firstname>
+ </author>
+ <title>Clarifications to the <acronym>DNS</acronym>
+ Specification</title>
+ <pubdate>July 1997</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC2308</abbrev>
+ <author>
+ <surname>Andrews</surname>
+ <firstname>M.</firstname>
+ </author>
+ <title>Negative Caching of <acronym>DNS</acronym>
+ Queries</title>
+ <pubdate>March 1998</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC1995</abbrev>
+ <author>
+ <surname>Ohta</surname>
+ <firstname>M.</firstname>
+ </author>
+ <title>Incremental Zone Transfer in <acronym>DNS</acronym></title>
+ <pubdate>August 1996</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC1996</abbrev>
+ <author>
+ <surname>Vixie</surname>
+ <firstname>P.</firstname>
+ </author>
+ <title>A Mechanism for Prompt Notification of Zone Changes</title>
+ <pubdate>August 1996</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC2136</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Vixie</surname>
+ <firstname>P.</firstname>
+ </author>
+ <author>
+ <firstname>S.</firstname>
+ <surname>Thomson</surname>
+ </author>
+ <author>
+ <firstname>Y.</firstname>
+ <surname>Rekhter</surname>
+ </author>
+ <author>
+ <firstname>J.</firstname>
+ <surname>Bound</surname>
+ </author>
+ </authorgroup>
+ <title>Dynamic Updates in the Domain Name System</title>
+ <pubdate>April 1997</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC2671</abbrev>
+ <authorgroup>
+ <author>
+ <firstname>P.</firstname>
+ <surname>Vixie</surname>
+ </author>
+ </authorgroup>
+ <title>Extension Mechanisms for DNS (EDNS0)</title>
+ <pubdate>August 1997</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC2672</abbrev>
+ <authorgroup>
+ <author>
+ <firstname>M.</firstname>
+ <surname>Crawford</surname>
+ </author>
+ </authorgroup>
+ <title>Non-Terminal DNS Name Redirection</title>
+ <pubdate>August 1999</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC2845</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Vixie</surname>
+ <firstname>P.</firstname>
+ </author>
+ <author>
+ <firstname>O.</firstname>
+ <surname>Gudmundsson</surname>
+ </author>
+ <author>
+ <firstname>D.</firstname>
+ <surname>Eastlake</surname>
+ <lineage>3rd</lineage>
+ </author>
+ <author>
+ <firstname>B.</firstname>
+ <surname>Wellington</surname>
+ </author>
+ </authorgroup>
+ <title>Secret Key Transaction Authentication for <acronym>DNS</acronym> (TSIG)</title>
+ <pubdate>May 2000</pubdate>
+ </biblioentry>
<biblioentry>
- <abbrev>RFC2671</abbrev>
- <authorgroup>
- <author>
- <firstname>P.</firstname>
- <surname>Vixie</surname>
- </author>
- </authorgroup>
- <title>Extension Mechanisms for DNS (EDNS0)</title>
- <pubdate>August 1997</pubdate>
+ <abbrev>RFC2930</abbrev>
+ <authorgroup>
+ <author>
+ <firstname>D.</firstname>
+ <surname>Eastlake</surname>
+ <lineage>3rd</lineage>
+ </author>
+ </authorgroup>
+ <title>Secret Key Establishment for DNS (TKEY RR)</title>
+ <pubdate>September 2000</pubdate>
</biblioentry>
<biblioentry>
- <abbrev>RFC2672</abbrev>
- <authorgroup>
- <author>
- <firstname>M.</firstname>
- <surname>Crawford</surname>
- </author>
- </authorgroup>
- <title>Non-Terminal DNS Name Redirection</title>
- <pubdate>August 1999</pubdate>
+ <abbrev>RFC2931</abbrev>
+ <authorgroup>
+ <author>
+ <firstname>D.</firstname>
+ <surname>Eastlake</surname>
+ <lineage>3rd</lineage>
+ </author>
+ </authorgroup>
+ <title>DNS Request and Transaction Signatures (SIG(0)s)</title>
+ <pubdate>September 2000</pubdate>
</biblioentry>
- <biblioentry>
- <abbrev>RFC2845</abbrev>
- <authorgroup>
- <author>
- <surname>Vixie</surname>
- <firstname>P.</firstname>
- </author>
- <author>
- <firstname>O.</firstname>
- <surname>Gudmundsson</surname>
- </author>
- <author>
- <firstname>D.</firstname>
- <surname>Eastlake</surname>
- <lineage>3rd</lineage>
- </author>
- <author>
- <firstname>B.</firstname>
- <surname>Wellington</surname>
- </author>
- </authorgroup>
- <title>Secret Key Transaction Authentication for <acronym>DNS</acronym> (TSIG)</title>
- <pubdate>May 2000</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC2930</abbrev>
- <authorgroup>
- <author>
- <firstname>D.</firstname>
- <surname>Eastlake</surname>
- <lineage>3rd</lineage>
- </author>
- </authorgroup>
- <title>Secret Key Establishment for DNS (TKEY RR)</title>
- <pubdate>September 2000</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC2931</abbrev>
- <authorgroup>
- <author>
- <firstname>D.</firstname>
- <surname>Eastlake</surname>
- <lineage>3rd</lineage>
- </author>
- </authorgroup>
- <title>DNS Request and Transaction Signatures (SIG(0)s)</title>
- <pubdate>September 2000</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC3007</abbrev>
- <authorgroup>
- <author>
- <firstname>B.</firstname>
- <surname>Wellington</surname>
- </author>
- </authorgroup>
- <title>Secure Domain Name System (DNS) Dynamic Update</title>
- <pubdate>November 2000</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC3645</abbrev>
- <authorgroup>
- <author>
- <firstname>S.</firstname>
- <surname>Kwan</surname>
- </author>
- <author>
- <firstname>P.</firstname>
- <surname>Garg</surname>
- </author>
- <author>
- <firstname>J.</firstname>
- <surname>Gilroy</surname>
- </author>
- <author>
- <firstname>L.</firstname>
- <surname>Esibov</surname>
- </author>
- <author>
- <firstname>J.</firstname>
- <surname>Westhead</surname>
- </author>
- <author>
- <firstname>R.</firstname>
- <surname>Hall</surname>
- </author>
- </authorgroup>
- <title>Generic Security Service Algorithm for Secret
+ <biblioentry>
+ <abbrev>RFC3007</abbrev>
+ <authorgroup>
+ <author>
+ <firstname>B.</firstname>
+ <surname>Wellington</surname>
+ </author>
+ </authorgroup>
+ <title>Secure Domain Name System (DNS) Dynamic Update</title>
+ <pubdate>November 2000</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC3645</abbrev>
+ <authorgroup>
+ <author>
+ <firstname>S.</firstname>
+ <surname>Kwan</surname>
+ </author>
+ <author>
+ <firstname>P.</firstname>
+ <surname>Garg</surname>
+ </author>
+ <author>
+ <firstname>J.</firstname>
+ <surname>Gilroy</surname>
+ </author>
+ <author>
+ <firstname>L.</firstname>
+ <surname>Esibov</surname>
+ </author>
+ <author>
+ <firstname>J.</firstname>
+ <surname>Westhead</surname>
+ </author>
+ <author>
+ <firstname>R.</firstname>
+ <surname>Hall</surname>
+ </author>
+ </authorgroup>
+ <title>Generic Security Service Algorithm for Secret
Key Transaction Authentication for DNS
(GSS-TSIG)</title>
- <pubdate>October 2003</pubdate>
- </biblioentry>
- </bibliodiv>
+ <pubdate>October 2003</pubdate>
+ </biblioentry>
+ </bibliodiv>
<bibliodiv>
<title><acronym>DNS</acronym> Security Proposed Standards</title>
<biblioentry>
<abbrev>RFC3225</abbrev>
- <authorgroup>
+ <authorgroup>
<author>
<firstname>D.</firstname>
<surname>Conrad</surname>
</author>
- </authorgroup>
+ </authorgroup>
<title>Indicating Resolver Support of DNSSEC</title>
<pubdate>December 2001</pubdate>
</biblioentry>
<biblioentry>
- <abbrev>RFC3833</abbrev>
- <authorgroup>
+ <abbrev>RFC3833</abbrev>
+ <authorgroup>
<author>
<firstname>D.</firstname>
<surname>Atkins</surname>
@@ -15885,8 +16008,8 @@ zone "example.com" {
<pubdate>August 2004</pubdate>
</biblioentry>
<biblioentry>
- <abbrev>RFC4033</abbrev>
- <authorgroup>
+ <abbrev>RFC4033</abbrev>
+ <authorgroup>
<author>
<firstname>R.</firstname>
<surname>Arends</surname>
@@ -15912,8 +16035,8 @@ zone "example.com" {
<pubdate>March 2005</pubdate>
</biblioentry>
<biblioentry>
- <abbrev>RFC4034</abbrev>
- <authorgroup>
+ <abbrev>RFC4034</abbrev>
+ <authorgroup>
<author>
<firstname>R.</firstname>
<surname>Arends</surname>
@@ -15939,8 +16062,8 @@ zone "example.com" {
<pubdate>March 2005</pubdate>
</biblioentry>
<biblioentry>
- <abbrev>RFC4035</abbrev>
- <authorgroup>
+ <abbrev>RFC4035</abbrev>
+ <authorgroup>
<author>
<firstname>R.</firstname>
<surname>Arends</surname>
@@ -15966,909 +16089,909 @@ zone "example.com" {
Security Extensions</title>
<pubdate>March 2005</pubdate>
</biblioentry>
- </bibliodiv>
- <bibliodiv>
- <title>Other Important RFCs About <acronym>DNS</acronym>
- Implementation</title>
- <biblioentry>
- <abbrev>RFC1535</abbrev>
- <author>
- <surname>Gavron</surname>
- <firstname>E.</firstname>
- </author>
- <title>A Security Problem and Proposed Correction With Widely
- Deployed <acronym>DNS</acronym> Software.</title>
- <pubdate>October 1993</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC1536</abbrev>
- <authorgroup>
- <author>
- <surname>Kumar</surname>
- <firstname>A.</firstname>
- </author>
- <author>
- <firstname>J.</firstname>
- <surname>Postel</surname>
- </author>
- <author>
- <firstname>C.</firstname>
- <surname>Neuman</surname>
- </author>
- <author>
- <firstname>P.</firstname>
- <surname>Danzig</surname>
- </author>
- <author>
- <firstname>S.</firstname>
- <surname>Miller</surname>
- </author>
- </authorgroup>
- <title>Common <acronym>DNS</acronym> Implementation
- Errors and Suggested Fixes</title>
- <pubdate>October 1993</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC1982</abbrev>
- <authorgroup>
- <author>
- <surname>Elz</surname>
- <firstname>R.</firstname>
- </author>
- <author>
- <firstname>R.</firstname>
- <surname>Bush</surname>
- </author>
- </authorgroup>
- <title>Serial Number Arithmetic</title>
- <pubdate>August 1996</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC4074</abbrev>
- <authorgroup>
- <author>
- <surname>Morishita</surname>
- <firstname>Y.</firstname>
- </author>
- <author>
- <firstname>T.</firstname>
- <surname>Jinmei</surname>
- </author>
- </authorgroup>
- <title>Common Misbehaviour Against <acronym>DNS</acronym>
+ </bibliodiv>
+ <bibliodiv>
+ <title>Other Important RFCs About <acronym>DNS</acronym>
+ Implementation</title>
+ <biblioentry>
+ <abbrev>RFC1535</abbrev>
+ <author>
+ <surname>Gavron</surname>
+ <firstname>E.</firstname>
+ </author>
+ <title>A Security Problem and Proposed Correction With Widely
+ Deployed <acronym>DNS</acronym> Software.</title>
+ <pubdate>October 1993</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC1536</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Kumar</surname>
+ <firstname>A.</firstname>
+ </author>
+ <author>
+ <firstname>J.</firstname>
+ <surname>Postel</surname>
+ </author>
+ <author>
+ <firstname>C.</firstname>
+ <surname>Neuman</surname>
+ </author>
+ <author>
+ <firstname>P.</firstname>
+ <surname>Danzig</surname>
+ </author>
+ <author>
+ <firstname>S.</firstname>
+ <surname>Miller</surname>
+ </author>
+ </authorgroup>
+ <title>Common <acronym>DNS</acronym> Implementation
+ Errors and Suggested Fixes</title>
+ <pubdate>October 1993</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC1982</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Elz</surname>
+ <firstname>R.</firstname>
+ </author>
+ <author>
+ <firstname>R.</firstname>
+ <surname>Bush</surname>
+ </author>
+ </authorgroup>
+ <title>Serial Number Arithmetic</title>
+ <pubdate>August 1996</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC4074</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Morishita</surname>
+ <firstname>Y.</firstname>
+ </author>
+ <author>
+ <firstname>T.</firstname>
+ <surname>Jinmei</surname>
+ </author>
+ </authorgroup>
+ <title>Common Misbehaviour Against <acronym>DNS</acronym>
Queries for IPv6 Addresses</title>
- <pubdate>May 2005</pubdate>
- </biblioentry>
- </bibliodiv>
- <bibliodiv>
- <title>Resource Record Types</title>
- <biblioentry>
- <abbrev>RFC1183</abbrev>
- <authorgroup>
- <author>
- <surname>Everhart</surname>
- <firstname>C.F.</firstname>
- </author>
- <author>
- <firstname>L. A.</firstname>
- <surname>Mamakos</surname>
- </author>
- <author>
- <firstname>R.</firstname>
- <surname>Ullmann</surname>
- </author>
- <author>
- <firstname>P.</firstname>
- <surname>Mockapetris</surname>
- </author>
- </authorgroup>
- <title>New <acronym>DNS</acronym> RR Definitions</title>
- <pubdate>October 1990</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC1706</abbrev>
- <authorgroup>
- <author>
- <surname>Manning</surname>
- <firstname>B.</firstname>
- </author>
- <author>
- <firstname>R.</firstname>
- <surname>Colella</surname>
- </author>
- </authorgroup>
- <title><acronym>DNS</acronym> NSAP Resource Records</title>
- <pubdate>October 1994</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC2168</abbrev>
- <authorgroup>
- <author>
- <surname>Daniel</surname>
- <firstname>R.</firstname>
- </author>
- <author>
- <firstname>M.</firstname>
- <surname>Mealling</surname>
- </author>
- </authorgroup>
- <title>Resolution of Uniform Resource Identifiers using
- the Domain Name System</title>
- <pubdate>June 1997</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC1876</abbrev>
- <authorgroup>
- <author>
- <surname>Davis</surname>
- <firstname>C.</firstname>
- </author>
- <author>
- <firstname>P.</firstname>
- <surname>Vixie</surname>
- </author>
- <author>
- <firstname>T.</firstname>
- <firstname>Goodwin</firstname>
- </author>
- <author>
- <firstname>I.</firstname>
- <surname>Dickinson</surname>
- </author>
- </authorgroup>
- <title>A Means for Expressing Location Information in the
- Domain
- Name System</title>
- <pubdate>January 1996</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC2052</abbrev>
- <authorgroup>
- <author>
- <surname>Gulbrandsen</surname>
- <firstname>A.</firstname>
- </author>
- <author>
- <firstname>P.</firstname>
- <surname>Vixie</surname>
- </author>
- </authorgroup>
- <title>A <acronym>DNS</acronym> RR for Specifying the
- Location of
- Services.</title>
- <pubdate>October 1996</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC2163</abbrev>
- <author>
- <surname>Allocchio</surname>
- <firstname>A.</firstname>
- </author>
- <title>Using the Internet <acronym>DNS</acronym> to
- Distribute MIXER
- Conformant Global Address Mapping</title>
- <pubdate>January 1998</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC2230</abbrev>
- <author>
- <surname>Atkinson</surname>
- <firstname>R.</firstname>
- </author>
- <title>Key Exchange Delegation Record for the <acronym>DNS</acronym></title>
- <pubdate>October 1997</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC2536</abbrev>
- <author>
- <surname>Eastlake</surname>
- <firstname>D.</firstname>
- <lineage>3rd</lineage>
- </author>
- <title>DSA KEYs and SIGs in the Domain Name System (DNS)</title>
- <pubdate>March 1999</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC2537</abbrev>
- <author>
- <surname>Eastlake</surname>
- <firstname>D.</firstname>
- <lineage>3rd</lineage>
- </author>
- <title>RSA/MD5 KEYs and SIGs in the Domain Name System (DNS)</title>
- <pubdate>March 1999</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC2538</abbrev>
+ <pubdate>May 2005</pubdate>
+ </biblioentry>
+ </bibliodiv>
+ <bibliodiv>
+ <title>Resource Record Types</title>
+ <biblioentry>
+ <abbrev>RFC1183</abbrev>
<authorgroup>
- <author>
- <surname>Eastlake</surname>
- <firstname>D.</firstname>
- <lineage>3rd</lineage>
- </author>
+ <author>
+ <surname>Everhart</surname>
+ <firstname>C.F.</firstname>
+ </author>
+ <author>
+ <firstname>L. A.</firstname>
+ <surname>Mamakos</surname>
+ </author>
+ <author>
+ <firstname>R.</firstname>
+ <surname>Ullmann</surname>
+ </author>
+ <author>
+ <firstname>P.</firstname>
+ <surname>Mockapetris</surname>
+ </author>
+ </authorgroup>
+ <title>New <acronym>DNS</acronym> RR Definitions</title>
+ <pubdate>October 1990</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC1706</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Manning</surname>
+ <firstname>B.</firstname>
+ </author>
+ <author>
+ <firstname>R.</firstname>
+ <surname>Colella</surname>
+ </author>
+ </authorgroup>
+ <title><acronym>DNS</acronym> NSAP Resource Records</title>
+ <pubdate>October 1994</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC2168</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Daniel</surname>
+ <firstname>R.</firstname>
+ </author>
+ <author>
+ <firstname>M.</firstname>
+ <surname>Mealling</surname>
+ </author>
+ </authorgroup>
+ <title>Resolution of Uniform Resource Identifiers using
+ the Domain Name System</title>
+ <pubdate>June 1997</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC1876</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Davis</surname>
+ <firstname>C.</firstname>
+ </author>
+ <author>
+ <firstname>P.</firstname>
+ <surname>Vixie</surname>
+ </author>
+ <author>
+ <firstname>T.</firstname>
+ <firstname>Goodwin</firstname>
+ </author>
+ <author>
+ <firstname>I.</firstname>
+ <surname>Dickinson</surname>
+ </author>
+ </authorgroup>
+ <title>A Means for Expressing Location Information in the
+ Domain
+ Name System</title>
+ <pubdate>January 1996</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC2052</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Gulbrandsen</surname>
+ <firstname>A.</firstname>
+ </author>
+ <author>
+ <firstname>P.</firstname>
+ <surname>Vixie</surname>
+ </author>
+ </authorgroup>
+ <title>A <acronym>DNS</acronym> RR for Specifying the
+ Location of
+ Services.</title>
+ <pubdate>October 1996</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC2163</abbrev>
+ <author>
+ <surname>Allocchio</surname>
+ <firstname>A.</firstname>
+ </author>
+ <title>Using the Internet <acronym>DNS</acronym> to
+ Distribute MIXER
+ Conformant Global Address Mapping</title>
+ <pubdate>January 1998</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC2230</abbrev>
+ <author>
+ <surname>Atkinson</surname>
+ <firstname>R.</firstname>
+ </author>
+ <title>Key Exchange Delegation Record for the <acronym>DNS</acronym></title>
+ <pubdate>October 1997</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC2536</abbrev>
+ <author>
+ <surname>Eastlake</surname>
+ <firstname>D.</firstname>
+ <lineage>3rd</lineage>
+ </author>
+ <title>DSA KEYs and SIGs in the Domain Name System (DNS)</title>
+ <pubdate>March 1999</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC2537</abbrev>
+ <author>
+ <surname>Eastlake</surname>
+ <firstname>D.</firstname>
+ <lineage>3rd</lineage>
+ </author>
+ <title>RSA/MD5 KEYs and SIGs in the Domain Name System (DNS)</title>
+ <pubdate>March 1999</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC2538</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Eastlake</surname>
+ <firstname>D.</firstname>
+ <lineage>3rd</lineage>
+ </author>
<author>
<surname>Gudmundsson</surname>
<firstname>O.</firstname>
</author>
</authorgroup>
- <title>Storing Certificates in the Domain Name System (DNS)</title>
- <pubdate>March 1999</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC2539</abbrev>
+ <title>Storing Certificates in the Domain Name System (DNS)</title>
+ <pubdate>March 1999</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC2539</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Eastlake</surname>
+ <firstname>D.</firstname>
+ <lineage>3rd</lineage>
+ </author>
+ </authorgroup>
+ <title>Storage of Diffie-Hellman Keys in the Domain Name System (DNS)</title>
+ <pubdate>March 1999</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC2540</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Eastlake</surname>
+ <firstname>D.</firstname>
+ <lineage>3rd</lineage>
+ </author>
+ </authorgroup>
+ <title>Detached Domain Name System (DNS) Information</title>
+ <pubdate>March 1999</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC2782</abbrev>
+ <author>
+ <surname>Gulbrandsen</surname>
+ <firstname>A.</firstname>
+ </author>
+ <author>
+ <surname>Vixie</surname>
+ <firstname>P.</firstname>
+ </author>
+ <author>
+ <surname>Esibov</surname>
+ <firstname>L.</firstname>
+ </author>
+ <title>A DNS RR for specifying the location of services (DNS SRV)</title>
+ <pubdate>February 2000</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC2915</abbrev>
+ <author>
+ <surname>Mealling</surname>
+ <firstname>M.</firstname>
+ </author>
+ <author>
+ <surname>Daniel</surname>
+ <firstname>R.</firstname>
+ </author>
+ <title>The Naming Authority Pointer (NAPTR) DNS Resource Record</title>
+ <pubdate>September 2000</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC3110</abbrev>
+ <author>
+ <surname>Eastlake</surname>
+ <firstname>D.</firstname>
+ <lineage>3rd</lineage>
+ </author>
+ <title>RSA/SHA-1 SIGs and RSA KEYs in the Domain Name System (DNS)</title>
+ <pubdate>May 2001</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC3123</abbrev>
+ <author>
+ <surname>Koch</surname>
+ <firstname>P.</firstname>
+ </author>
+ <title>A DNS RR Type for Lists of Address Prefixes (APL RR)</title>
+ <pubdate>June 2001</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC3596</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Thomson</surname>
+ <firstname>S.</firstname>
+ </author>
+ <author>
+ <firstname>C.</firstname>
+ <surname>Huitema</surname>
+ </author>
+ <author>
+ <firstname>V.</firstname>
+ <surname>Ksinant</surname>
+ </author>
+ <author>
+ <firstname>M.</firstname>
+ <surname>Souissi</surname>
+ </author>
+ </authorgroup>
+ <title><acronym>DNS</acronym> Extensions to support IP
+ version 6</title>
+ <pubdate>October 2003</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC3597</abbrev>
+ <author>
+ <surname>Gustafsson</surname>
+ <firstname>A.</firstname>
+ </author>
+ <title>Handling of Unknown DNS Resource Record (RR) Types</title>
+ <pubdate>September 2003</pubdate>
+ </biblioentry>
+ </bibliodiv>
+ <bibliodiv>
+ <title><acronym>DNS</acronym> and the Internet</title>
+ <biblioentry>
+ <abbrev>RFC1101</abbrev>
+ <author>
+ <surname>Mockapetris</surname>
+ <firstname>P. V.</firstname>
+ </author>
+ <title><acronym>DNS</acronym> Encoding of Network Names
+ and Other Types</title>
+ <pubdate>April 1989</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC1123</abbrev>
+ <author>
+ <surname>Braden</surname>
+ <surname>R.</surname>
+ </author>
+ <title>Requirements for Internet Hosts - Application and
+ Support</title>
+ <pubdate>October 1989</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC1591</abbrev>
+ <author>
+ <surname>Postel</surname>
+ <firstname>J.</firstname>
+ </author>
+ <title>Domain Name System Structure and Delegation</title>
+ <pubdate>March 1994</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC2317</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Eidnes</surname>
+ <firstname>H.</firstname>
+ </author>
+ <author>
+ <firstname>G.</firstname>
+ <surname>de Groot</surname>
+ </author>
+ <author>
+ <firstname>P.</firstname>
+ <surname>Vixie</surname>
+ </author>
+ </authorgroup>
+ <title>Classless IN-ADDR.ARPA Delegation</title>
+ <pubdate>March 1998</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC2826</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Internet Architecture Board</surname>
+ </author>
+ </authorgroup>
+ <title>IAB Technical Comment on the Unique DNS Root</title>
+ <pubdate>May 2000</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC2929</abbrev>
<authorgroup>
- <author>
- <surname>Eastlake</surname>
- <firstname>D.</firstname>
- <lineage>3rd</lineage>
- </author>
+ <author>
+ <surname>Eastlake</surname>
+ <firstname>D.</firstname>
+ <lineage>3rd</lineage>
+ </author>
+ <author>
+ <surname>Brunner-Williams</surname>
+ <firstname>E.</firstname>
+ </author>
+ <author>
+ <surname>Manning</surname>
+ <firstname>B.</firstname>
+ </author>
+ </authorgroup>
+ <title>Domain Name System (DNS) IANA Considerations</title>
+ <pubdate>September 2000</pubdate>
+ </biblioentry>
+ </bibliodiv>
+ <bibliodiv>
+ <title><acronym>DNS</acronym> Operations</title>
+ <biblioentry>
+ <abbrev>RFC1033</abbrev>
+ <author>
+ <surname>Lottor</surname>
+ <firstname>M.</firstname>
+ </author>
+ <title>Domain administrators operations guide.</title>
+ <pubdate>November 1987</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC1537</abbrev>
+ <author>
+ <surname>Beertema</surname>
+ <firstname>P.</firstname>
+ </author>
+ <title>Common <acronym>DNS</acronym> Data File
+ Configuration Errors</title>
+ <pubdate>October 1993</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC1912</abbrev>
+ <author>
+ <surname>Barr</surname>
+ <firstname>D.</firstname>
+ </author>
+ <title>Common <acronym>DNS</acronym> Operational and
+ Configuration Errors</title>
+ <pubdate>February 1996</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC2010</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Manning</surname>
+ <firstname>B.</firstname>
+ </author>
+ <author>
+ <firstname>P.</firstname>
+ <surname>Vixie</surname>
+ </author>
</authorgroup>
- <title>Storage of Diffie-Hellman Keys in the Domain Name System (DNS)</title>
- <pubdate>March 1999</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC2540</abbrev>
+ <title>Operational Criteria for Root Name Servers.</title>
+ <pubdate>October 1996</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC2219</abbrev>
<authorgroup>
- <author>
- <surname>Eastlake</surname>
- <firstname>D.</firstname>
- <lineage>3rd</lineage>
- </author>
+ <author>
+ <surname>Hamilton</surname>
+ <firstname>M.</firstname>
+ </author>
+ <author>
+ <firstname>R.</firstname>
+ <surname>Wright</surname>
+ </author>
</authorgroup>
- <title>Detached Domain Name System (DNS) Information</title>
- <pubdate>March 1999</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC2782</abbrev>
- <author>
- <surname>Gulbrandsen</surname>
- <firstname>A.</firstname>
- </author>
- <author>
- <surname>Vixie</surname>
- <firstname>P.</firstname>
- </author>
- <author>
- <surname>Esibov</surname>
- <firstname>L.</firstname>
- </author>
- <title>A DNS RR for specifying the location of services (DNS SRV)</title>
- <pubdate>February 2000</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC2915</abbrev>
- <author>
- <surname>Mealling</surname>
- <firstname>M.</firstname>
- </author>
- <author>
- <surname>Daniel</surname>
- <firstname>R.</firstname>
- </author>
- <title>The Naming Authority Pointer (NAPTR) DNS Resource Record</title>
- <pubdate>September 2000</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC3110</abbrev>
- <author>
- <surname>Eastlake</surname>
- <firstname>D.</firstname>
- <lineage>3rd</lineage>
- </author>
- <title>RSA/SHA-1 SIGs and RSA KEYs in the Domain Name System (DNS)</title>
- <pubdate>May 2001</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC3123</abbrev>
- <author>
- <surname>Koch</surname>
- <firstname>P.</firstname>
- </author>
- <title>A DNS RR Type for Lists of Address Prefixes (APL RR)</title>
- <pubdate>June 2001</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC3596</abbrev>
- <authorgroup>
- <author>
- <surname>Thomson</surname>
- <firstname>S.</firstname>
- </author>
- <author>
- <firstname>C.</firstname>
- <surname>Huitema</surname>
- </author>
- <author>
- <firstname>V.</firstname>
- <surname>Ksinant</surname>
- </author>
- <author>
- <firstname>M.</firstname>
- <surname>Souissi</surname>
- </author>
- </authorgroup>
- <title><acronym>DNS</acronym> Extensions to support IP
- version 6</title>
- <pubdate>October 2003</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC3597</abbrev>
- <author>
- <surname>Gustafsson</surname>
- <firstname>A.</firstname>
- </author>
- <title>Handling of Unknown DNS Resource Record (RR) Types</title>
- <pubdate>September 2003</pubdate>
- </biblioentry>
- </bibliodiv>
- <bibliodiv>
- <title><acronym>DNS</acronym> and the Internet</title>
- <biblioentry>
- <abbrev>RFC1101</abbrev>
- <author>
- <surname>Mockapetris</surname>
- <firstname>P. V.</firstname>
- </author>
- <title><acronym>DNS</acronym> Encoding of Network Names
- and Other Types</title>
- <pubdate>April 1989</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC1123</abbrev>
- <author>
- <surname>Braden</surname>
- <surname>R.</surname>
- </author>
- <title>Requirements for Internet Hosts - Application and
- Support</title>
- <pubdate>October 1989</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC1591</abbrev>
- <author>
- <surname>Postel</surname>
- <firstname>J.</firstname>
- </author>
- <title>Domain Name System Structure and Delegation</title>
- <pubdate>March 1994</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC2317</abbrev>
- <authorgroup>
- <author>
- <surname>Eidnes</surname>
- <firstname>H.</firstname>
- </author>
- <author>
- <firstname>G.</firstname>
- <surname>de Groot</surname>
- </author>
- <author>
- <firstname>P.</firstname>
- <surname>Vixie</surname>
- </author>
- </authorgroup>
- <title>Classless IN-ADDR.ARPA Delegation</title>
- <pubdate>March 1998</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC2826</abbrev>
- <authorgroup>
- <author>
- <surname>Internet Architecture Board</surname>
- </author>
- </authorgroup>
- <title>IAB Technical Comment on the Unique DNS Root</title>
- <pubdate>May 2000</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC2929</abbrev>
- <authorgroup>
- <author>
- <surname>Eastlake</surname>
- <firstname>D.</firstname>
- <lineage>3rd</lineage>
- </author>
- <author>
- <surname>Brunner-Williams</surname>
- <firstname>E.</firstname>
- </author>
- <author>
- <surname>Manning</surname>
- <firstname>B.</firstname>
- </author>
- </authorgroup>
- <title>Domain Name System (DNS) IANA Considerations</title>
- <pubdate>September 2000</pubdate>
- </biblioentry>
- </bibliodiv>
- <bibliodiv>
- <title><acronym>DNS</acronym> Operations</title>
- <biblioentry>
- <abbrev>RFC1033</abbrev>
- <author>
- <surname>Lottor</surname>
- <firstname>M.</firstname>
- </author>
- <title>Domain administrators operations guide.</title>
- <pubdate>November 1987</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC1537</abbrev>
- <author>
- <surname>Beertema</surname>
- <firstname>P.</firstname>
- </author>
- <title>Common <acronym>DNS</acronym> Data File
- Configuration Errors</title>
- <pubdate>October 1993</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC1912</abbrev>
- <author>
- <surname>Barr</surname>
- <firstname>D.</firstname>
- </author>
- <title>Common <acronym>DNS</acronym> Operational and
- Configuration Errors</title>
- <pubdate>February 1996</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC2010</abbrev>
- <authorgroup>
- <author>
- <surname>Manning</surname>
- <firstname>B.</firstname>
- </author>
- <author>
- <firstname>P.</firstname>
- <surname>Vixie</surname>
- </author>
- </authorgroup>
- <title>Operational Criteria for Root Name Servers.</title>
- <pubdate>October 1996</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC2219</abbrev>
- <authorgroup>
- <author>
- <surname>Hamilton</surname>
- <firstname>M.</firstname>
- </author>
- <author>
- <firstname>R.</firstname>
- <surname>Wright</surname>
- </author>
- </authorgroup>
- <title>Use of <acronym>DNS</acronym> Aliases for
- Network Services.</title>
- <pubdate>October 1997</pubdate>
- </biblioentry>
- </bibliodiv>
+ <title>Use of <acronym>DNS</acronym> Aliases for
+ Network Services.</title>
+ <pubdate>October 1997</pubdate>
+ </biblioentry>
+ </bibliodiv>
<bibliodiv>
- <title>Internationalized Domain Names</title>
- <biblioentry>
- <abbrev>RFC2825</abbrev>
+ <title>Internationalized Domain Names</title>
+ <biblioentry>
+ <abbrev>RFC2825</abbrev>
<authorgroup>
- <author>
- <surname>IAB</surname>
- </author>
- <author>
- <surname>Daigle</surname>
- <firstname>R.</firstname>
- </author>
+ <author>
+ <surname>IAB</surname>
+ </author>
+ <author>
+ <surname>Daigle</surname>
+ <firstname>R.</firstname>
+ </author>
</authorgroup>
- <title>A Tangled Web: Issues of I18N, Domain Names,
+ <title>A Tangled Web: Issues of I18N, Domain Names,
and the Other Internet protocols</title>
- <pubdate>May 2000</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC3490</abbrev>
+ <pubdate>May 2000</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC3490</abbrev>
<authorgroup>
- <author>
- <surname>Faltstrom</surname>
- <firstname>P.</firstname>
- </author>
- <author>
- <surname>Hoffman</surname>
- <firstname>P.</firstname>
- </author>
- <author>
- <surname>Costello</surname>
- <firstname>A.</firstname>
- </author>
+ <author>
+ <surname>Faltstrom</surname>
+ <firstname>P.</firstname>
+ </author>
+ <author>
+ <surname>Hoffman</surname>
+ <firstname>P.</firstname>
+ </author>
+ <author>
+ <surname>Costello</surname>
+ <firstname>A.</firstname>
+ </author>
</authorgroup>
- <title>Internationalizing Domain Names in Applications (IDNA)</title>
- <pubdate>March 2003</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC3491</abbrev>
+ <title>Internationalizing Domain Names in Applications (IDNA)</title>
+ <pubdate>March 2003</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC3491</abbrev>
<authorgroup>
- <author>
- <surname>Hoffman</surname>
- <firstname>P.</firstname>
- </author>
- <author>
- <surname>Blanchet</surname>
- <firstname>M.</firstname>
- </author>
+ <author>
+ <surname>Hoffman</surname>
+ <firstname>P.</firstname>
+ </author>
+ <author>
+ <surname>Blanchet</surname>
+ <firstname>M.</firstname>
+ </author>
</authorgroup>
- <title>Nameprep: A Stringprep Profile for Internationalized Domain Names</title>
- <pubdate>March 2003</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC3492</abbrev>
+ <title>Nameprep: A Stringprep Profile for Internationalized Domain Names</title>
+ <pubdate>March 2003</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC3492</abbrev>
<authorgroup>
- <author>
- <surname>Costello</surname>
- <firstname>A.</firstname>
- </author>
+ <author>
+ <surname>Costello</surname>
+ <firstname>A.</firstname>
+ </author>
</authorgroup>
- <title>Punycode: A Bootstring encoding of Unicode
+ <title>Punycode: A Bootstring encoding of Unicode
for Internationalized Domain Names in
Applications (IDNA)</title>
- <pubdate>March 2003</pubdate>
- </biblioentry>
+ <pubdate>March 2003</pubdate>
+ </biblioentry>
</bibliodiv>
- <bibliodiv>
- <title>Other <acronym>DNS</acronym>-related RFCs</title>
- <note>
- <para>
- Note: the following list of RFCs, although
- <acronym>DNS</acronym>-related, are not
- concerned with implementing software.
- </para>
- </note>
- <biblioentry>
- <abbrev>RFC1464</abbrev>
- <author>
- <surname>Rosenbaum</surname>
- <firstname>R.</firstname>
- </author>
- <title>Using the Domain Name System To Store Arbitrary String
- Attributes</title>
- <pubdate>May 1993</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC1713</abbrev>
- <author>
- <surname>Romao</surname>
- <firstname>A.</firstname>
- </author>
- <title>Tools for <acronym>DNS</acronym> Debugging</title>
- <pubdate>November 1994</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC1794</abbrev>
- <author>
- <surname>Brisco</surname>
- <firstname>T.</firstname>
- </author>
- <title><acronym>DNS</acronym> Support for Load
- Balancing</title>
- <pubdate>April 1995</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC2240</abbrev>
- <author>
- <surname>Vaughan</surname>
- <firstname>O.</firstname>
- </author>
- <title>A Legal Basis for Domain Name Allocation</title>
- <pubdate>November 1997</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC2345</abbrev>
- <authorgroup>
- <author>
- <surname>Klensin</surname>
- <firstname>J.</firstname>
- </author>
- <author>
- <firstname>T.</firstname>
- <surname>Wolf</surname>
- </author>
- <author>
- <firstname>G.</firstname>
- <surname>Oglesby</surname>
- </author>
- </authorgroup>
- <title>Domain Names and Company Name Retrieval</title>
- <pubdate>May 1998</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC2352</abbrev>
- <author>
- <surname>Vaughan</surname>
- <firstname>O.</firstname>
- </author>
- <title>A Convention For Using Legal Names as Domain Names</title>
- <pubdate>May 1998</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC3071</abbrev>
- <authorgroup>
- <author>
- <surname>Klensin</surname>
- <firstname>J.</firstname>
- </author>
- </authorgroup>
- <title>Reflections on the DNS, RFC 1591, and Categories of Domains</title>
- <pubdate>February 2001</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC3258</abbrev>
- <authorgroup>
- <author>
- <surname>Hardie</surname>
- <firstname>T.</firstname>
- </author>
- </authorgroup>
- <title>Distributing Authoritative Name Servers via
+ <bibliodiv>
+ <title>Other <acronym>DNS</acronym>-related RFCs</title>
+ <note>
+ <para>
+ Note: the following list of RFCs, although
+ <acronym>DNS</acronym>-related, are not
+ concerned with implementing software.
+ </para>
+ </note>
+ <biblioentry>
+ <abbrev>RFC1464</abbrev>
+ <author>
+ <surname>Rosenbaum</surname>
+ <firstname>R.</firstname>
+ </author>
+ <title>Using the Domain Name System To Store Arbitrary String
+ Attributes</title>
+ <pubdate>May 1993</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC1713</abbrev>
+ <author>
+ <surname>Romao</surname>
+ <firstname>A.</firstname>
+ </author>
+ <title>Tools for <acronym>DNS</acronym> Debugging</title>
+ <pubdate>November 1994</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC1794</abbrev>
+ <author>
+ <surname>Brisco</surname>
+ <firstname>T.</firstname>
+ </author>
+ <title><acronym>DNS</acronym> Support for Load
+ Balancing</title>
+ <pubdate>April 1995</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC2240</abbrev>
+ <author>
+ <surname>Vaughan</surname>
+ <firstname>O.</firstname>
+ </author>
+ <title>A Legal Basis for Domain Name Allocation</title>
+ <pubdate>November 1997</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC2345</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Klensin</surname>
+ <firstname>J.</firstname>
+ </author>
+ <author>
+ <firstname>T.</firstname>
+ <surname>Wolf</surname>
+ </author>
+ <author>
+ <firstname>G.</firstname>
+ <surname>Oglesby</surname>
+ </author>
+ </authorgroup>
+ <title>Domain Names and Company Name Retrieval</title>
+ <pubdate>May 1998</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC2352</abbrev>
+ <author>
+ <surname>Vaughan</surname>
+ <firstname>O.</firstname>
+ </author>
+ <title>A Convention For Using Legal Names as Domain Names</title>
+ <pubdate>May 1998</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC3071</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Klensin</surname>
+ <firstname>J.</firstname>
+ </author>
+ </authorgroup>
+ <title>Reflections on the DNS, RFC 1591, and Categories of Domains</title>
+ <pubdate>February 2001</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC3258</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Hardie</surname>
+ <firstname>T.</firstname>
+ </author>
+ </authorgroup>
+ <title>Distributing Authoritative Name Servers via
Shared Unicast Addresses</title>
- <pubdate>April 2002</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC3901</abbrev>
- <authorgroup>
- <author>
- <surname>Durand</surname>
- <firstname>A.</firstname>
- </author>
- <author>
- <firstname>J.</firstname>
- <surname>Ihren</surname>
- </author>
- </authorgroup>
- <title>DNS IPv6 Transport Operational Guidelines</title>
- <pubdate>September 2004</pubdate>
- </biblioentry>
- </bibliodiv>
- <bibliodiv>
- <title>Obsolete and Unimplemented Experimental RFC</title>
- <biblioentry>
- <abbrev>RFC1712</abbrev>
- <authorgroup>
- <author>
- <surname>Farrell</surname>
- <firstname>C.</firstname>
- </author>
- <author>
- <firstname>M.</firstname>
- <surname>Schulze</surname>
- </author>
- <author>
- <firstname>S.</firstname>
- <surname>Pleitner</surname>
- </author>
- <author>
- <firstname>D.</firstname>
- <surname>Baldoni</surname>
- </author>
- </authorgroup>
- <title><acronym>DNS</acronym> Encoding of Geographical
- Location</title>
- <pubdate>November 1994</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC2673</abbrev>
- <authorgroup>
- <author>
- <surname>Crawford</surname>
- <firstname>M.</firstname>
- </author>
- </authorgroup>
- <title>Binary Labels in the Domain Name System</title>
- <pubdate>August 1999</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC2874</abbrev>
- <authorgroup>
- <author>
- <surname>Crawford</surname>
- <firstname>M.</firstname>
- </author>
- <author>
- <surname>Huitema</surname>
- <firstname>C.</firstname>
- </author>
- </authorgroup>
- <title>DNS Extensions to Support IPv6 Address Aggregation
+ <pubdate>April 2002</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC3901</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Durand</surname>
+ <firstname>A.</firstname>
+ </author>
+ <author>
+ <firstname>J.</firstname>
+ <surname>Ihren</surname>
+ </author>
+ </authorgroup>
+ <title>DNS IPv6 Transport Operational Guidelines</title>
+ <pubdate>September 2004</pubdate>
+ </biblioentry>
+ </bibliodiv>
+ <bibliodiv>
+ <title>Obsolete and Unimplemented Experimental RFC</title>
+ <biblioentry>
+ <abbrev>RFC1712</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Farrell</surname>
+ <firstname>C.</firstname>
+ </author>
+ <author>
+ <firstname>M.</firstname>
+ <surname>Schulze</surname>
+ </author>
+ <author>
+ <firstname>S.</firstname>
+ <surname>Pleitner</surname>
+ </author>
+ <author>
+ <firstname>D.</firstname>
+ <surname>Baldoni</surname>
+ </author>
+ </authorgroup>
+ <title><acronym>DNS</acronym> Encoding of Geographical
+ Location</title>
+ <pubdate>November 1994</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC2673</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Crawford</surname>
+ <firstname>M.</firstname>
+ </author>
+ </authorgroup>
+ <title>Binary Labels in the Domain Name System</title>
+ <pubdate>August 1999</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC2874</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Crawford</surname>
+ <firstname>M.</firstname>
+ </author>
+ <author>
+ <surname>Huitema</surname>
+ <firstname>C.</firstname>
+ </author>
+ </authorgroup>
+ <title>DNS Extensions to Support IPv6 Address Aggregation
and Renumbering</title>
- <pubdate>July 2000</pubdate>
- </biblioentry>
- </bibliodiv>
- <bibliodiv>
- <title>Obsoleted DNS Security RFCs</title>
+ <pubdate>July 2000</pubdate>
+ </biblioentry>
+ </bibliodiv>
+ <bibliodiv>
+ <title>Obsoleted DNS Security RFCs</title>
<note>
<para>
Most of these have been consolidated into RFC4033,
RFC4034 and RFC4035 which collectively describe DNSSECbis.
</para>
</note>
- <biblioentry>
- <abbrev>RFC2065</abbrev>
- <authorgroup>
- <author>
- <surname>Eastlake</surname>
- <lineage>3rd</lineage>
- <firstname>D.</firstname>
- </author>
- <author>
- <firstname>C.</firstname>
- <surname>Kaufman</surname>
- </author>
- </authorgroup>
- <title>Domain Name System Security Extensions</title>
- <pubdate>January 1997</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC2137</abbrev>
- <author>
- <surname>Eastlake</surname>
- <lineage>3rd</lineage>
- <firstname>D.</firstname>
- </author>
- <title>Secure Domain Name System Dynamic Update</title>
- <pubdate>April 1997</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC2535</abbrev>
- <authorgroup>
- <author>
- <surname>Eastlake</surname>
- <lineage>3rd</lineage>
- <firstname>D.</firstname>
- </author>
- </authorgroup>
- <title>Domain Name System Security Extensions</title>
- <pubdate>March 1999</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC3008</abbrev>
- <authorgroup>
- <author>
- <surname>Wellington</surname>
- <firstname>B.</firstname>
- </author>
- </authorgroup>
- <title>Domain Name System Security (DNSSEC)
+ <biblioentry>
+ <abbrev>RFC2065</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Eastlake</surname>
+ <lineage>3rd</lineage>
+ <firstname>D.</firstname>
+ </author>
+ <author>
+ <firstname>C.</firstname>
+ <surname>Kaufman</surname>
+ </author>
+ </authorgroup>
+ <title>Domain Name System Security Extensions</title>
+ <pubdate>January 1997</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC2137</abbrev>
+ <author>
+ <surname>Eastlake</surname>
+ <lineage>3rd</lineage>
+ <firstname>D.</firstname>
+ </author>
+ <title>Secure Domain Name System Dynamic Update</title>
+ <pubdate>April 1997</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC2535</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Eastlake</surname>
+ <lineage>3rd</lineage>
+ <firstname>D.</firstname>
+ </author>
+ </authorgroup>
+ <title>Domain Name System Security Extensions</title>
+ <pubdate>March 1999</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC3008</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Wellington</surname>
+ <firstname>B.</firstname>
+ </author>
+ </authorgroup>
+ <title>Domain Name System Security (DNSSEC)
Signing Authority</title>
- <pubdate>November 2000</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC3090</abbrev>
- <authorgroup>
- <author>
- <surname>Lewis</surname>
- <firstname>E.</firstname>
- </author>
- </authorgroup>
- <title>DNS Security Extension Clarification on Zone Status</title>
- <pubdate>March 2001</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC3445</abbrev>
- <authorgroup>
- <author>
- <surname>Massey</surname>
- <firstname>D.</firstname>
- </author>
- <author>
- <surname>Rose</surname>
- <firstname>S.</firstname>
- </author>
- </authorgroup>
- <title>Limiting the Scope of the KEY Resource Record (RR)</title>
- <pubdate>December 2002</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC3655</abbrev>
- <authorgroup>
- <author>
- <surname>Wellington</surname>
- <firstname>B.</firstname>
- </author>
- <author>
- <surname>Gudmundsson</surname>
- <firstname>O.</firstname>
- </author>
- </authorgroup>
- <title>Redefinition of DNS Authenticated Data (AD) bit</title>
- <pubdate>November 2003</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC3658</abbrev>
- <authorgroup>
- <author>
- <surname>Gudmundsson</surname>
- <firstname>O.</firstname>
- </author>
- </authorgroup>
- <title>Delegation Signer (DS) Resource Record (RR)</title>
- <pubdate>December 2003</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC3755</abbrev>
- <authorgroup>
- <author>
- <surname>Weiler</surname>
- <firstname>S.</firstname>
- </author>
- </authorgroup>
- <title>Legacy Resolver Compatibility for Delegation Signer (DS)</title>
- <pubdate>May 2004</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC3757</abbrev>
- <authorgroup>
- <author>
- <surname>Kolkman</surname>
- <firstname>O.</firstname>
- </author>
- <author>
- <surname>Schlyter</surname>
- <firstname>J.</firstname>
- </author>
- <author>
- <surname>Lewis</surname>
- <firstname>E.</firstname>
- </author>
- </authorgroup>
- <title>Domain Name System KEY (DNSKEY) Resource Record
+ <pubdate>November 2000</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC3090</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Lewis</surname>
+ <firstname>E.</firstname>
+ </author>
+ </authorgroup>
+ <title>DNS Security Extension Clarification on Zone Status</title>
+ <pubdate>March 2001</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC3445</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Massey</surname>
+ <firstname>D.</firstname>
+ </author>
+ <author>
+ <surname>Rose</surname>
+ <firstname>S.</firstname>
+ </author>
+ </authorgroup>
+ <title>Limiting the Scope of the KEY Resource Record (RR)</title>
+ <pubdate>December 2002</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC3655</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Wellington</surname>
+ <firstname>B.</firstname>
+ </author>
+ <author>
+ <surname>Gudmundsson</surname>
+ <firstname>O.</firstname>
+ </author>
+ </authorgroup>
+ <title>Redefinition of DNS Authenticated Data (AD) bit</title>
+ <pubdate>November 2003</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC3658</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Gudmundsson</surname>
+ <firstname>O.</firstname>
+ </author>
+ </authorgroup>
+ <title>Delegation Signer (DS) Resource Record (RR)</title>
+ <pubdate>December 2003</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC3755</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Weiler</surname>
+ <firstname>S.</firstname>
+ </author>
+ </authorgroup>
+ <title>Legacy Resolver Compatibility for Delegation Signer (DS)</title>
+ <pubdate>May 2004</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC3757</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Kolkman</surname>
+ <firstname>O.</firstname>
+ </author>
+ <author>
+ <surname>Schlyter</surname>
+ <firstname>J.</firstname>
+ </author>
+ <author>
+ <surname>Lewis</surname>
+ <firstname>E.</firstname>
+ </author>
+ </authorgroup>
+ <title>Domain Name System KEY (DNSKEY) Resource Record
(RR) Secure Entry Point (SEP) Flag</title>
- <pubdate>April 2004</pubdate>
- </biblioentry>
- <biblioentry>
- <abbrev>RFC3845</abbrev>
- <authorgroup>
- <author>
- <surname>Schlyter</surname>
- <firstname>J.</firstname>
- </author>
- </authorgroup>
- <title>DNS Security (DNSSEC) NextSECure (NSEC) RDATA Format</title>
- <pubdate>August 2004</pubdate>
- </biblioentry>
- </bibliodiv>
- </bibliography>
- </sect2>
- <sect2 id="internet_drafts">
- <title>Internet Drafts</title>
- <para>
- Internet Drafts (IDs) are rough-draft working documents of
- the Internet Engineering Task Force. They are, in essence, RFCs
- in the preliminary stages of development. Implementors are
- cautioned not
- to regard IDs as archival, and they should not be quoted or cited
- in any formal documents unless accompanied by the disclaimer that
- they are "works in progress." IDs have a lifespan of six months
- after which they are deleted unless updated by their authors.
- </para>
- </sect2>
- <sect2>
- <title>Other Documents About <acronym>BIND</acronym></title>
- <para/>
- <bibliography>
- <biblioentry>
- <authorgroup>
- <author>
- <surname>Albitz</surname>
- <firstname>Paul</firstname>
- </author>
- <author>
- <firstname>Cricket</firstname>
- <surname>Liu</surname>
- </author>
- </authorgroup>
- <title><acronym>DNS</acronym> and <acronym>BIND</acronym></title>
- <copyright>
- <year>1998</year>
- <holder>Sebastopol, CA: O'Reilly and Associates</holder>
- </copyright>
- </biblioentry>
- </bibliography>
- </sect2>
+ <pubdate>April 2004</pubdate>
+ </biblioentry>
+ <biblioentry>
+ <abbrev>RFC3845</abbrev>
+ <authorgroup>
+ <author>
+ <surname>Schlyter</surname>
+ <firstname>J.</firstname>
+ </author>
+ </authorgroup>
+ <title>DNS Security (DNSSEC) NextSECure (NSEC) RDATA Format</title>
+ <pubdate>August 2004</pubdate>
+ </biblioentry>
+ </bibliodiv>
+ </bibliography>
+ </sect2>
+ <sect2 id="internet_drafts">
+ <title>Internet Drafts</title>
+ <para>
+ Internet Drafts (IDs) are rough-draft working documents of
+ the Internet Engineering Task Force. They are, in essence, RFCs
+ in the preliminary stages of development. Implementors are
+ cautioned not
+ to regard IDs as archival, and they should not be quoted or cited
+ in any formal documents unless accompanied by the disclaimer that
+ they are "works in progress." IDs have a lifespan of six months
+ after which they are deleted unless updated by their authors.
+ </para>
+ </sect2>
+ <sect2>
+ <title>Other Documents About <acronym>BIND</acronym></title>
+ <para/>
+ <bibliography>
+ <biblioentry>
+ <authorgroup>
+ <author>
+ <surname>Albitz</surname>
+ <firstname>Paul</firstname>
+ </author>
+ <author>
+ <firstname>Cricket</firstname>
+ <surname>Liu</surname>
+ </author>
+ </authorgroup>
+ <title><acronym>DNS</acronym> and <acronym>BIND</acronym></title>
+ <copyright>
+ <year>1998</year>
+ <holder>Sebastopol, CA: O'Reilly and Associates</holder>
+ </copyright>
+ </biblioentry>
+ </bibliography>
+ </sect2>
</sect1>
<xi:include href="libdns.xml"/>
diff --git a/doc/arm/Bv9ARM.ch01.html b/doc/arm/Bv9ARM.ch01.html
index 39211c7bdd10..afb54dcc9785 100644
--- a/doc/arm/Bv9ARM.ch01.html
+++ b/doc/arm/Bv9ARM.ch01.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -45,17 +45,17 @@
<div class="toc">
<p><b>Table of Contents</b></p>
<dl>
-<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2564378">Scope of Document</a></span></dt>
-<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2564402">Organization of This Document</a></span></dt>
-<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2564541">Conventions Used in This Document</a></span></dt>
-<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2564723">The Domain Name System (<acronym class="acronym">DNS</acronym>)</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2563506">Scope of Document</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2563530">Organization of This Document</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2564626">Conventions Used in This Document</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2564807">The Domain Name System (<acronym class="acronym">DNS</acronym>)</a></span></dt>
<dd><dl>
-<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2564744">DNS Fundamentals</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2564846">Domains and Domain Names</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567184">Zones</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567260">Authoritative Name Servers</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567433">Caching Name Servers</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567563">Name Servers in Multiple Roles</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2564828">DNS Fundamentals</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2564931">Domains and Domain Names</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567268">Zones</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567345">Authoritative Name Servers</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567586">Caching Name Servers</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567648">Name Servers in Multiple Roles</a></span></dt>
</dl></dd>
</dl>
</div>
@@ -71,7 +71,7 @@
</p>
<div class="sect1" lang="en">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2564378"></a>Scope of Document</h2></div></div></div>
+<a name="id2563506"></a>Scope of Document</h2></div></div></div>
<p>
The Berkeley Internet Name Domain
(<acronym class="acronym">BIND</acronym>) implements a
@@ -81,13 +81,11 @@
<acronym class="acronym">BIND</acronym> version 9 software package for
system administrators.
</p>
-<p>
- This version of the manual corresponds to BIND version 9.9.
- </p>
+<p>This version of the manual corresponds to BIND version 9.9.</p>
</div>
<div class="sect1" lang="en">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2564402"></a>Organization of This Document</h2></div></div></div>
+<a name="id2563530"></a>Organization of This Document</h2></div></div></div>
<p>
In this document, <span class="emphasis"><em>Chapter 1</em></span> introduces
the basic <acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym> concepts. <span class="emphasis"><em>Chapter 2</em></span>
@@ -116,7 +114,7 @@
</div>
<div class="sect1" lang="en">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2564541"></a>Conventions Used in This Document</h2></div></div></div>
+<a name="id2564626"></a>Conventions Used in This Document</h2></div></div></div>
<p>
In this document, we use the following general typographic
conventions:
@@ -243,7 +241,7 @@
</div>
<div class="sect1" lang="en">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2564723"></a>The Domain Name System (<acronym class="acronym">DNS</acronym>)</h2></div></div></div>
+<a name="id2564807"></a>The Domain Name System (<acronym class="acronym">DNS</acronym>)</h2></div></div></div>
<p>
The purpose of this document is to explain the installation
and upkeep of the <acronym class="acronym">BIND</acronym> (Berkeley Internet
@@ -253,7 +251,7 @@
</p>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2564744"></a>DNS Fundamentals</h3></div></div></div>
+<a name="id2564828"></a>DNS Fundamentals</h3></div></div></div>
<p>
The Domain Name System (DNS) is a hierarchical, distributed
database. It stores information for mapping Internet host names to
@@ -275,7 +273,7 @@
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2564846"></a>Domains and Domain Names</h3></div></div></div>
+<a name="id2564931"></a>Domains and Domain Names</h3></div></div></div>
<p>
The data stored in the DNS is identified by <span class="emphasis"><em>domain names</em></span> that are organized as a tree according to
organizational or administrative boundaries. Each node of the tree,
@@ -321,7 +319,7 @@
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2567184"></a>Zones</h3></div></div></div>
+<a name="id2567268"></a>Zones</h3></div></div></div>
<p>
To properly operate a name server, it is important to understand
the difference between a <span class="emphasis"><em>zone</em></span>
@@ -374,7 +372,7 @@
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2567260"></a>Authoritative Name Servers</h3></div></div></div>
+<a name="id2567345"></a>Authoritative Name Servers</h3></div></div></div>
<p>
Each zone is served by at least
one <span class="emphasis"><em>authoritative name server</em></span>,
@@ -391,7 +389,7 @@
</p>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2567284"></a>The Primary Master</h4></div></div></div>
+<a name="id2567368"></a>The Primary Master</h4></div></div></div>
<p>
The authoritative server where the master copy of the zone
data is maintained is called the
@@ -411,7 +409,7 @@
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2567382"></a>Slave Servers</h4></div></div></div>
+<a name="id2567398"></a>Slave Servers</h4></div></div></div>
<p>
The other authoritative servers, the <span class="emphasis"><em>slave</em></span>
servers (also known as <span class="emphasis"><em>secondary</em></span> servers)
@@ -427,7 +425,7 @@
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2567403"></a>Stealth Servers</h4></div></div></div>
+<a name="id2567419"></a>Stealth Servers</h4></div></div></div>
<p>
Usually all of the zone's authoritative servers are listed in
NS records in the parent zone. These NS records constitute
@@ -462,7 +460,7 @@
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2567433"></a>Caching Name Servers</h3></div></div></div>
+<a name="id2567586"></a>Caching Name Servers</h3></div></div></div>
<p>
The resolver libraries provided by most operating systems are
<span class="emphasis"><em>stub resolvers</em></span>, meaning that they are not
@@ -489,7 +487,7 @@
</p>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2567537"></a>Forwarding</h4></div></div></div>
+<a name="id2567621"></a>Forwarding</h4></div></div></div>
<p>
Even a caching name server does not necessarily perform
the complete recursive lookup itself. Instead, it can
@@ -516,7 +514,7 @@
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2567563"></a>Name Servers in Multiple Roles</h3></div></div></div>
+<a name="id2567648"></a>Name Servers in Multiple Roles</h3></div></div></div>
<p>
The <acronym class="acronym">BIND</acronym> name server can
simultaneously act as
@@ -558,5 +556,6 @@
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/Bv9ARM.ch02.html b/doc/arm/Bv9ARM.ch02.html
index c62ec1c562d5..2e0c617191e2 100644
--- a/doc/arm/Bv9ARM.ch02.html
+++ b/doc/arm/Bv9ARM.ch02.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -45,16 +45,16 @@
<div class="toc">
<p><b>Table of Contents</b></p>
<dl>
-<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567597">Hardware requirements</a></span></dt>
-<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567624">CPU Requirements</a></span></dt>
-<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567637">Memory Requirements</a></span></dt>
-<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567732">Name Server Intensive Environment Issues</a></span></dt>
-<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567742">Supported Operating Systems</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567682">Hardware requirements</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567708">CPU Requirements</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567789">Memory Requirements</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567816">Name Server Intensive Environment Issues</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567827">Supported Operating Systems</a></span></dt>
</dl>
</div>
<div class="sect1" lang="en">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2567597"></a>Hardware requirements</h2></div></div></div>
+<a name="id2567682"></a>Hardware requirements</h2></div></div></div>
<p>
<acronym class="acronym">DNS</acronym> hardware requirements have
traditionally been quite modest.
@@ -73,7 +73,7 @@
</div>
<div class="sect1" lang="en">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2567624"></a>CPU Requirements</h2></div></div></div>
+<a name="id2567708"></a>CPU Requirements</h2></div></div></div>
<p>
CPU requirements for <acronym class="acronym">BIND</acronym> 9 range from
i486-class machines
@@ -84,7 +84,7 @@
</div>
<div class="sect1" lang="en">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2567637"></a>Memory Requirements</h2></div></div></div>
+<a name="id2567789"></a>Memory Requirements</h2></div></div></div>
<p>
The memory of the server has to be large enough to fit the
cache and zones loaded off disk. The <span><strong class="command">max-cache-size</strong></span>
@@ -107,7 +107,7 @@
</div>
<div class="sect1" lang="en">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2567732"></a>Name Server Intensive Environment Issues</h2></div></div></div>
+<a name="id2567816"></a>Name Server Intensive Environment Issues</h2></div></div></div>
<p>
For name server intensive environments, there are two alternative
configurations that may be used. The first is where clients and
@@ -124,7 +124,7 @@
</div>
<div class="sect1" lang="en">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2567742"></a>Supported Operating Systems</h2></div></div></div>
+<a name="id2567827"></a>Supported Operating Systems</h2></div></div></div>
<p>
ISC <acronym class="acronym">BIND</acronym> 9 compiles and runs on a large
number
@@ -154,5 +154,6 @@
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/Bv9ARM.ch03.html b/doc/arm/Bv9ARM.ch03.html
index 91a4a3fe7d0c..ce6221d8ecb1 100644
--- a/doc/arm/Bv9ARM.ch03.html
+++ b/doc/arm/Bv9ARM.ch03.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -47,14 +47,14 @@
<dl>
<dt><span class="sect1"><a href="Bv9ARM.ch03.html#sample_configuration">Sample Configurations</a></span></dt>
<dd><dl>
-<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2567774">A Caching-only Name Server</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2567995">An Authoritative-only Name Server</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2567995">A Caching-only Name Server</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2568011">An Authoritative-only Name Server</a></span></dt>
</dl></dd>
-<dt><span class="sect1"><a href="Bv9ARM.ch03.html#id2568018">Load Balancing</a></span></dt>
-<dt><span class="sect1"><a href="Bv9ARM.ch03.html#id2568372">Name Server Operations</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch03.html#id2568034">Load Balancing</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch03.html#id2568388">Name Server Operations</a></span></dt>
<dd><dl>
-<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2568377">Tools for Use With the Name Server Daemon</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2569430">Signals</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2568393">Tools for Use With the Name Server Daemon</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2569446">Signals</a></span></dt>
</dl></dd>
</dl>
</div>
@@ -68,7 +68,7 @@
<a name="sample_configuration"></a>Sample Configurations</h2></div></div></div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2567774"></a>A Caching-only Name Server</h3></div></div></div>
+<a name="id2567995"></a>A Caching-only Name Server</h3></div></div></div>
<p>
The following sample configuration is appropriate for a caching-only
name server for use by clients internal to a corporation. All
@@ -98,7 +98,7 @@ zone "0.0.127.in-addr.arpa" {
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2567995"></a>An Authoritative-only Name Server</h3></div></div></div>
+<a name="id2568011"></a>An Authoritative-only Name Server</h3></div></div></div>
<p>
This sample configuration is for an authoritative-only server
that is the master server for "<code class="filename">example.com</code>"
@@ -146,7 +146,7 @@ zone "eng.example.com" {
</div>
<div class="sect1" lang="en">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2568018"></a>Load Balancing</h2></div></div></div>
+<a name="id2568034"></a>Load Balancing</h2></div></div></div>
<p>
A primitive form of load balancing can be achieved in
the <acronym class="acronym">DNS</acronym> by using multiple records
@@ -289,10 +289,10 @@ zone "eng.example.com" {
</div>
<div class="sect1" lang="en">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2568372"></a>Name Server Operations</h2></div></div></div>
+<a name="id2568388"></a>Name Server Operations</h2></div></div></div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2568377"></a>Tools for Use With the Name Server Daemon</h3></div></div></div>
+<a name="id2568393"></a>Tools for Use With the Name Server Daemon</h3></div></div></div>
<p>
This section describes several indispensable diagnostic,
administrative and monitoring tools available to the system
@@ -600,7 +600,7 @@ controls {
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2569430"></a>Signals</h3></div></div></div>
+<a name="id2569446"></a>Signals</h3></div></div></div>
<p>
Certain UNIX signals cause the name server to take specific
actions, as described in the following table. These signals can
@@ -665,5 +665,6 @@ controls {
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/Bv9ARM.ch04.html b/doc/arm/Bv9ARM.ch04.html
index 7b9ef3124ce5..173c5f10e0cc 100644
--- a/doc/arm/Bv9ARM.ch04.html
+++ b/doc/arm/Bv9ARM.ch04.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -49,59 +49,59 @@
<dt><span class="sect1"><a href="Bv9ARM.ch04.html#dynamic_update">Dynamic Update</a></span></dt>
<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch04.html#journal">The journal file</a></span></dt></dl></dd>
<dt><span class="sect1"><a href="Bv9ARM.ch04.html#incremental_zone_transfers">Incremental Zone Transfers (IXFR)</a></span></dt>
-<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2563997">Split DNS</a></span></dt>
-<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2564016">Example split DNS setup</a></span></dt></dl></dd>
+<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2569900">Split DNS</a></span></dt>
+<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2569918">Example split DNS setup</a></span></dt></dl></dd>
<dt><span class="sect1"><a href="Bv9ARM.ch04.html#tsig">TSIG</a></span></dt>
<dd><dl>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2570661">Generate Shared Keys for Each Pair of Hosts</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2570734">Copying the Shared Secret to Both Machines</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2570745">Informing the Servers of the Key's Existence</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2570781">Instructing the Server to Use the Key</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2570839">TSIG Key Based Access Control</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2570888">Errors</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2570420">Generate Shared Keys for Each Pair of Hosts</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2570562">Copying the Shared Secret to Both Machines</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2570572">Informing the Servers of the Key's Existence</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2570609">Instructing the Server to Use the Key</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2570666">TSIG Key Based Access Control</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2570715">Errors</a></span></dt>
</dl></dd>
-<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2570902">TKEY</a></span></dt>
-<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2570951">SIG(0)</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2570729">TKEY</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2570778">SIG(0)</a></span></dt>
<dt><span class="sect1"><a href="Bv9ARM.ch04.html#DNSSEC">DNSSEC</a></span></dt>
<dd><dl>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571156">Generating Keys</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571235">Signing the Zone</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571384">Configuring Servers</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2570915">Generating Keys</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571198">Signing the Zone</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571280">Configuring Servers</a></span></dt>
</dl></dd>
<dt><span class="sect1"><a href="Bv9ARM.ch04.html#dnssec.dynamic.zones">DNSSEC, Dynamic Zones, and Automatic Signing</a></span></dt>
<dd><dl>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2609113">Converting from insecure to secure</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2609150">Dynamic DNS update method</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563516">Fully automatic zone signing</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563756">Private-type records</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563794">DNSKEY rollovers</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563806">Dynamic DNS update method</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2569779">Automatic key rollovers</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2569805">NSEC3PARAM rollovers via UPDATE</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2569815">Converting from NSEC to NSEC3</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2569825">Converting from NSEC3 to NSEC</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2569837">Converting from secure to insecure</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2569875">Periodic re-signing</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2569884">NSEC3 and OPTOUT</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2609345">Converting from insecure to secure</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563643">Dynamic DNS update method</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563680">Fully automatic zone signing</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563920">Private-type records</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563957">DNSKEY rollovers</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563970">Dynamic DNS update method</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2564003">Automatic key rollovers</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2581915">NSEC3PARAM rollovers via UPDATE</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2581925">Converting from NSEC to NSEC3</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2581934">Converting from NSEC3 to NSEC</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2581947">Converting from secure to insecure</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2608745">Periodic re-signing</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2608755">NSEC3 and OPTOUT</a></span></dt>
</dl></dd>
<dt><span class="sect1"><a href="Bv9ARM.ch04.html#rfc5011.support">Dynamic Trust Anchor Management</a></span></dt>
<dd><dl>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2608556">Validating Resolver</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2608579">Authoritative Server</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2582096">Validating Resolver</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2582118">Authoritative Server</a></span></dt>
</dl></dd>
<dt><span class="sect1"><a href="Bv9ARM.ch04.html#pkcs11">PKCS #11 (Cryptoki) support</a></span></dt>
<dd><dl>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2609024">Prerequisites</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2636218">Building BIND 9 with PKCS#11</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2636343">PKCS #11 Tools</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2636374">Using the HSM</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2636572">Specifying the engine on the command line</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2636686">Running named with automatic zone re-signing</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2612122">Prerequisites</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2610030">Building BIND 9 with PKCS#11</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2612545">PKCS #11 Tools</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2612576">Using the HSM</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2636531">Specifying the engine on the command line</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2636577">Running named with automatic zone re-signing</a></span></dt>
</dl></dd>
-<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2571672">IPv6 Support in <acronym class="acronym">BIND</acronym> 9</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2571499">IPv6 Support in <acronym class="acronym">BIND</acronym> 9</a></span></dt>
<dd><dl>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571802">Address Lookups Using AAAA Records</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571892">Address to Name Lookups Using Nibble Format</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571766">Address Lookups Using AAAA Records</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571787">Address to Name Lookups Using Nibble Format</a></span></dt>
</dl></dd>
</dl>
</div>
@@ -216,14 +216,23 @@
</p>
<p>
If you have to make changes to a dynamic zone
- manually, the following procedure will work: Disable dynamic updates
- to the zone using
+ manually, the following procedure will work:
+ Disable dynamic updates to the zone using
<span><strong class="command">rndc freeze <em class="replaceable"><code>zone</code></em></strong></span>.
- This will also remove the zone's <code class="filename">.jnl</code> file
- and update the master file. Edit the zone file. Run
+ This will update the zone's master file with the changes
+ stored in its <code class="filename">.jnl</code> file.
+ Edit the zone file. Run
<span><strong class="command">rndc thaw <em class="replaceable"><code>zone</code></em></strong></span>
to reload the changed zone and re-enable dynamic updates.
</p>
+<p>
+ <span><strong class="command">rndc sync <em class="replaceable"><code>zone</code></em></strong></span>
+ will update the zone file with changes from the journal file
+ without stopping dynamic updates; this may be useful for viewing
+ the current zone state. To remove the <code class="filename">.jnl</code>
+ file after updating the zone file, use
+ <span><strong class="command">rndc sync -clean</strong></span>.
+ </p>
</div>
</div>
<div class="sect1" lang="en">
@@ -256,7 +265,7 @@
</div>
<div class="sect1" lang="en">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2563997"></a>Split DNS</h2></div></div></div>
+<a name="id2569900"></a>Split DNS</h2></div></div></div>
<p>
Setting up different views, or visibility, of the DNS space to
internal and external resolvers is usually referred to as a
@@ -286,7 +295,7 @@
</p>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2564016"></a>Example split DNS setup</h3></div></div></div>
+<a name="id2569918"></a>Example split DNS setup</h3></div></div></div>
<p>
Let's say a company named <span class="emphasis"><em>Example, Inc.</em></span>
(<code class="literal">example.com</code>)
@@ -543,7 +552,7 @@ nameserver 172.16.72.4
</p>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2570661"></a>Generate Shared Keys for Each Pair of Hosts</h3></div></div></div>
+<a name="id2570420"></a>Generate Shared Keys for Each Pair of Hosts</h3></div></div></div>
<p>
A shared secret is generated to be shared between <span class="emphasis"><em>host1</em></span> and <span class="emphasis"><em>host2</em></span>.
An arbitrary key name is chosen: "host1-host2.". The key name must
@@ -551,7 +560,7 @@ nameserver 172.16.72.4
</p>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2570678"></a>Automatic Generation</h4></div></div></div>
+<a name="id2570437"></a>Automatic Generation</h4></div></div></div>
<p>
The following command will generate a 128-bit (16 byte) HMAC-SHA256
key as described above. Longer keys are better, but shorter keys
@@ -575,7 +584,7 @@ nameserver 172.16.72.4
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2570716"></a>Manual Generation</h4></div></div></div>
+<a name="id2570544"></a>Manual Generation</h4></div></div></div>
<p>
The shared secret is simply a random sequence of bits, encoded
in base-64. Most ASCII strings are valid base-64 strings (assuming
@@ -590,7 +599,7 @@ nameserver 172.16.72.4
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2570734"></a>Copying the Shared Secret to Both Machines</h3></div></div></div>
+<a name="id2570562"></a>Copying the Shared Secret to Both Machines</h3></div></div></div>
<p>
This is beyond the scope of DNS. A secure transport mechanism
should be used. This could be secure FTP, ssh, telephone, etc.
@@ -598,7 +607,7 @@ nameserver 172.16.72.4
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2570745"></a>Informing the Servers of the Key's Existence</h3></div></div></div>
+<a name="id2570572"></a>Informing the Servers of the Key's Existence</h3></div></div></div>
<p>
Imagine <span class="emphasis"><em>host1</em></span> and <span class="emphasis"><em>host 2</em></span>
are
@@ -625,7 +634,7 @@ key host1-host2. {
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2570781"></a>Instructing the Server to Use the Key</h3></div></div></div>
+<a name="id2570609"></a>Instructing the Server to Use the Key</h3></div></div></div>
<p>
Since keys are shared between two hosts only, the server must
be told when keys are to be used. The following is added to the <code class="filename">named.conf</code> file
@@ -657,7 +666,7 @@ server 10.1.2.3 {
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2570839"></a>TSIG Key Based Access Control</h3></div></div></div>
+<a name="id2570666"></a>TSIG Key Based Access Control</h3></div></div></div>
<p>
<acronym class="acronym">BIND</acronym> allows IP addresses and ranges
to be specified in ACL
@@ -684,7 +693,7 @@ allow-update { key host1-host2. ;};
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2570888"></a>Errors</h3></div></div></div>
+<a name="id2570715"></a>Errors</h3></div></div></div>
<p>
The processing of TSIG signed messages can result in
several errors. If a signed message is sent to a non-TSIG aware
@@ -710,7 +719,7 @@ allow-update { key host1-host2. ;};
</div>
<div class="sect1" lang="en">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2570902"></a>TKEY</h2></div></div></div>
+<a name="id2570729"></a>TKEY</h2></div></div></div>
<p><span><strong class="command">TKEY</strong></span>
is a mechanism for automatically generating a shared secret
between two hosts. There are several "modes" of
@@ -746,7 +755,7 @@ allow-update { key host1-host2. ;};
</div>
<div class="sect1" lang="en">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2570951"></a>SIG(0)</h2></div></div></div>
+<a name="id2570778"></a>SIG(0)</h2></div></div></div>
<p>
<acronym class="acronym">BIND</acronym> 9 partially supports DNSSEC SIG(0)
transaction signatures as specified in RFC 2535 and RFC 2931.
@@ -807,7 +816,7 @@ allow-update { key host1-host2. ;};
</p>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2571156"></a>Generating Keys</h3></div></div></div>
+<a name="id2570915"></a>Generating Keys</h3></div></div></div>
<p>
The <span><strong class="command">dnssec-keygen</strong></span> program is used to
generate keys.
@@ -863,7 +872,7 @@ allow-update { key host1-host2. ;};
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2571235"></a>Signing the Zone</h3></div></div></div>
+<a name="id2571198"></a>Signing the Zone</h3></div></div></div>
<p>
The <span><strong class="command">dnssec-signzone</strong></span> program is used
to sign a zone.
@@ -905,7 +914,7 @@ allow-update { key host1-host2. ;};
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2571384"></a>Configuring Servers</h3></div></div></div>
+<a name="id2571280"></a>Configuring Servers</h3></div></div></div>
<p>
To enable <span><strong class="command">named</strong></span> to respond appropriately
to DNS requests from DNSSEC aware clients,
@@ -1065,7 +1074,7 @@ options {
from insecure to signed and back again. A secure zone can use
either NSEC or NSEC3 chains.</p>
<div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title">
-<a name="id2609113"></a>Converting from insecure to secure</h3></div></div></div></div>
+<a name="id2609345"></a>Converting from insecure to secure</h3></div></div></div></div>
<p>Changing a zone from insecure to secure can be done in two
ways: using a dynamic DNS update, or the
<span><strong class="command">auto-dnssec</strong></span> zone option.</p>
@@ -1091,7 +1100,7 @@ options {
well. An NSEC chain will be generated as part of the initial
signing process.</p>
<div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title">
-<a name="id2609150"></a>Dynamic DNS update method</h3></div></div></div></div>
+<a name="id2563643"></a>Dynamic DNS update method</h3></div></div></div></div>
<p>To insert the keys via dynamic update:</p>
<pre class="screen">
% nsupdate
@@ -1127,7 +1136,7 @@ options {
<p>While the initial signing and NSEC/NSEC3 chain generation
is happening, other updates are possible as well.</p>
<div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title">
-<a name="id2563516"></a>Fully automatic zone signing</h3></div></div></div></div>
+<a name="id2563680"></a>Fully automatic zone signing</h3></div></div></div></div>
<p>To enable automatic signing, add the
<span><strong class="command">auto-dnssec</strong></span> option to the zone statement in
<code class="filename">named.conf</code>.
@@ -1183,7 +1192,7 @@ options {
configuration. If this has not been done, the configuration will
fail.</p>
<div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title">
-<a name="id2563756"></a>Private-type records</h3></div></div></div></div>
+<a name="id2563920"></a>Private-type records</h3></div></div></div></div>
<p>The state of the signing process is signaled by
private-type records (with a default type value of 65534). When
signing is complete, these records will have a nonzero value for
@@ -1224,12 +1233,12 @@ options {
<p>
</p>
<div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title">
-<a name="id2563794"></a>DNSKEY rollovers</h3></div></div></div></div>
+<a name="id2563957"></a>DNSKEY rollovers</h3></div></div></div></div>
<p>As with insecure-to-secure conversions, rolling DNSSEC
keys can be done in two ways: using a dynamic DNS update, or the
<span><strong class="command">auto-dnssec</strong></span> zone option.</p>
<div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title">
-<a name="id2563806"></a>Dynamic DNS update method</h3></div></div></div></div>
+<a name="id2563970"></a>Dynamic DNS update method</h3></div></div></div></div>
<p> To perform key rollovers via dynamic update, you need to add
the <code class="filename">K*</code> files for the new keys so that
<span><strong class="command">named</strong></span> can find them. You can then add the new
@@ -1251,7 +1260,7 @@ options {
<span><strong class="command">named</strong></span> will clean out any signatures generated
by the old key after the update completes.</p>
<div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title">
-<a name="id2569779"></a>Automatic key rollovers</h3></div></div></div></div>
+<a name="id2564003"></a>Automatic key rollovers</h3></div></div></div></div>
<p>When a new key reaches its activation date (as set by
<span><strong class="command">dnssec-keygen</strong></span> or <span><strong class="command">dnssec-settime</strong></span>),
if the <span><strong class="command">auto-dnssec</strong></span> zone option is set to
@@ -1266,27 +1275,27 @@ options {
completes in 30 days, after which it will be safe to remove the
old key from the DNSKEY RRset.</p>
<div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title">
-<a name="id2569805"></a>NSEC3PARAM rollovers via UPDATE</h3></div></div></div></div>
+<a name="id2581915"></a>NSEC3PARAM rollovers via UPDATE</h3></div></div></div></div>
<p>Add the new NSEC3PARAM record via dynamic update. When the
new NSEC3 chain has been generated, the NSEC3PARAM flag field
will be zero. At this point you can remove the old NSEC3PARAM
record. The old chain will be removed after the update request
completes.</p>
<div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title">
-<a name="id2569815"></a>Converting from NSEC to NSEC3</h3></div></div></div></div>
+<a name="id2581925"></a>Converting from NSEC to NSEC3</h3></div></div></div></div>
<p>To do this, you just need to add an NSEC3PARAM record. When
the conversion is complete, the NSEC chain will have been removed
and the NSEC3PARAM record will have a zero flag field. The NSEC3
chain will be generated before the NSEC chain is
destroyed.</p>
<div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title">
-<a name="id2569825"></a>Converting from NSEC3 to NSEC</h3></div></div></div></div>
+<a name="id2581934"></a>Converting from NSEC3 to NSEC</h3></div></div></div></div>
<p>To do this, use <span><strong class="command">nsupdate</strong></span> to
remove all NSEC3PARAM records with a zero flag
field. The NSEC chain will be generated before the NSEC3 chain is
removed.</p>
<div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title">
-<a name="id2569837"></a>Converting from secure to insecure</h3></div></div></div></div>
+<a name="id2581947"></a>Converting from secure to insecure</h3></div></div></div></div>
<p>To convert a signed zone to unsigned using dynamic DNS,
delete all the DNSKEY records from the zone apex using
<span><strong class="command">nsupdate</strong></span>. All signatures, NSEC or NSEC3 chains,
@@ -1301,14 +1310,14 @@ options {
<span><strong class="command">allow</strong></span> instead (or it will re-sign).
</p>
<div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title">
-<a name="id2569875"></a>Periodic re-signing</h3></div></div></div></div>
+<a name="id2608745"></a>Periodic re-signing</h3></div></div></div></div>
<p>In any secure zone which supports dynamic updates, named
will periodically re-sign RRsets which have not been re-signed as
a result of some update action. The signature lifetimes will be
adjusted so as to spread the re-sign load over time rather than
all at once.</p>
<div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title">
-<a name="id2569884"></a>NSEC3 and OPTOUT</h3></div></div></div></div>
+<a name="id2608755"></a>NSEC3 and OPTOUT</h3></div></div></div></div>
<p>
<span><strong class="command">named</strong></span> only supports creating new NSEC3 chains
where all the NSEC3 records in the zone have the same OPTOUT
@@ -1330,7 +1339,7 @@ options {
configuration files.</p>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2608556"></a>Validating Resolver</h3></div></div></div>
+<a name="id2582096"></a>Validating Resolver</h3></div></div></div>
<p>To configure a validating resolver to use RFC 5011 to
maintain a trust anchor, configure the trust anchor using a
<span><strong class="command">managed-keys</strong></span> statement. Information about
@@ -1341,7 +1350,7 @@ options {
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2608579"></a>Authoritative Server</h3></div></div></div>
+<a name="id2582118"></a>Authoritative Server</h3></div></div></div>
<p>To set up an authoritative zone for RFC 5011 trust anchor
maintenance, generate two (or more) key signing keys (KSKs) for
the zone. Sign the zone with one of them; this is the "active"
@@ -1415,7 +1424,7 @@ $ <strong class="userinput"><code>dnssec-signzone -S -K keys example.net</code><
Debian Linux, Solaris x86 and Windows Server 2003.</p>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2609024"></a>Prerequisites</h3></div></div></div>
+<a name="id2612122"></a>Prerequisites</h3></div></div></div>
<p>See the HSM vendor documentation for information about
installing, initializing, testing and troubleshooting the
HSM.</p>
@@ -1450,12 +1459,13 @@ $ <strong class="userinput"><code>dnssec-signzone -S -K keys example.net</code><
other computationally-intensive operations. The AEP Keyper
is an example of such a device.</p></li>
</ul></div>
-<p>The modified OpenSSL code is included in the BIND 9 release,
- in the form of a context diff against the latest verions of
- OpenSSL. OpenSSL 0.9.8, 1.0.0 and 1.0.1 are supported; there are
- separate diffs for each version. In the examples to follow,
- we use OpenSSL 0.9.8, but the same methods work with OpenSSL 1.0.0
- and 1.0.1.
+<p>
+ The modified OpenSSL code is included in the BIND 9 release,
+ in the form of a context diff against the latest versions of
+ OpenSSL. OpenSSL 0.9.8, 1.0.0, and 1.0.1 are supported; there are
+ separate diffs for each version. In the examples to follow,
+ we use OpenSSL 0.9.8, but the same methods work with OpenSSL
+ 1.0.0 and 1.0.1.
</p>
<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
<h3 class="title">Note</h3>
@@ -1493,7 +1503,7 @@ $ <strong class="userinput"><code>patch -p1 -d openssl-0.9.8s \
when we configure BIND 9.</p>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2609324"></a>Building OpenSSL for the AEP Keyper on Linux</h4></div></div></div>
+<a name="id2609624"></a>Building OpenSSL for the AEP Keyper on Linux</h4></div></div></div>
<p>The AEP Keyper is a highly secure key storage device,
but does not provide hardware cryptographic acceleration. It
can carry out cryptographic operations, but it is probably
@@ -1525,7 +1535,7 @@ $ <strong class="userinput"><code>./Configure linux-generic32 -m32 -pthread \
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2609394"></a>Building OpenSSL for the SCA 6000 on Solaris</h4></div></div></div>
+<a name="id2609762"></a>Building OpenSSL for the SCA 6000 on Solaris</h4></div></div></div>
<p>The SCA-6000 PKCS #11 provider is installed as a system
library, libpkcs11. It is a true crypto accelerator, up to 4
times faster than any CPU, so the flavor shall be
@@ -1547,7 +1557,7 @@ $ <strong class="userinput"><code>./Configure solaris64-x86_64-cc \
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2609443"></a>Building OpenSSL for SoftHSM</h4></div></div></div>
+<a name="id2609811"></a>Building OpenSSL for SoftHSM</h4></div></div></div>
<p>SoftHSM is a software library provided by the OpenDNSSEC
project (http://www.opendnssec.org) which provides a PKCS#11
interface to a virtual HSM, implemented in the form of encrypted
@@ -1607,12 +1617,12 @@ $ <strong class="userinput"><code>./Configure linux-x86_64 -pthread \
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2636218"></a>Building BIND 9 with PKCS#11</h3></div></div></div>
+<a name="id2610030"></a>Building BIND 9 with PKCS#11</h3></div></div></div>
<p>When building BIND 9, the location of the custom-built
OpenSSL library must be specified via configure.</p>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2636227"></a>Configuring BIND 9 for Linux with the AEP Keyper</h4></div></div></div>
+<a name="id2610039"></a>Configuring BIND 9 for Linux with the AEP Keyper</h4></div></div></div>
<p>To link with the PKCS #11 provider, threads must be
enabled in the BIND 9 build.</p>
<p>The PKCS #11 library for the AEP Keyper is currently
@@ -1628,7 +1638,7 @@ $ <strong class="userinput"><code>./configure CC="gcc -m32" --enable-threads \
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2636259"></a>Configuring BIND 9 for Solaris with the SCA 6000</h4></div></div></div>
+<a name="id2610071"></a>Configuring BIND 9 for Solaris with the SCA 6000</h4></div></div></div>
<p>To link with the PKCS #11 provider, threads must be
enabled in the BIND 9 build.</p>
<pre class="screen">
@@ -1646,7 +1656,7 @@ $ <strong class="userinput"><code>./configure CC="cc -xarch=amd64" --enable-thre
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2636295"></a>Configuring BIND 9 for SoftHSM</h4></div></div></div>
+<a name="id2612497"></a>Configuring BIND 9 for SoftHSM</h4></div></div></div>
<pre class="screen">
$ <strong class="userinput"><code>cd ../bind9</code></strong>
$ <strong class="userinput"><code>./configure --enable-threads \
@@ -1663,7 +1673,7 @@ $ <strong class="userinput"><code>./configure --enable-threads \
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2636343"></a>PKCS #11 Tools</h3></div></div></div>
+<a name="id2612545"></a>PKCS #11 Tools</h3></div></div></div>
<p>BIND 9 includes a minimal set of tools to operate the
HSM, including
<span><strong class="command">pkcs11-keygen</strong></span> to generate a new key pair
@@ -1681,7 +1691,7 @@ $ <strong class="userinput"><code>./configure --enable-threads \
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2636374"></a>Using the HSM</h3></div></div></div>
+<a name="id2612576"></a>Using the HSM</h3></div></div></div>
<p>First, we must set up the runtime environment so the
OpenSSL and PKCS #11 libraries can be loaded:</p>
<pre class="screen">
@@ -1769,7 +1779,7 @@ example.net.signed
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2636572"></a>Specifying the engine on the command line</h3></div></div></div>
+<a name="id2636531"></a>Specifying the engine on the command line</h3></div></div></div>
<p>The OpenSSL engine can be specified in
<span><strong class="command">named</strong></span> and all of the BIND
<span><strong class="command">dnssec-*</strong></span> tools by using the "-E
@@ -1790,7 +1800,7 @@ $ <strong class="userinput"><code>dnssec-signzone -E '' -S example.net</code></s
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2636686"></a>Running named with automatic zone re-signing</h3></div></div></div>
+<a name="id2636577"></a>Running named with automatic zone re-signing</h3></div></div></div>
<p>If you want
<span><strong class="command">named</strong></span> to dynamically re-sign zones using HSM
keys, and/or to to sign new records inserted via nsupdate, then
@@ -1826,7 +1836,7 @@ $ <strong class="userinput"><code>dnssec-signzone -E '' -S example.net</code></s
</div>
<div class="sect1" lang="en">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2571672"></a>IPv6 Support in <acronym class="acronym">BIND</acronym> 9</h2></div></div></div>
+<a name="id2571499"></a>IPv6 Support in <acronym class="acronym">BIND</acronym> 9</h2></div></div></div>
<p>
<acronym class="acronym">BIND</acronym> 9 fully supports all currently
defined forms of IPv6 name to address and address to name
@@ -1864,7 +1874,7 @@ $ <strong class="userinput"><code>dnssec-signzone -E '' -S example.net</code></s
</p>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2571802"></a>Address Lookups Using AAAA Records</h3></div></div></div>
+<a name="id2571766"></a>Address Lookups Using AAAA Records</h3></div></div></div>
<p>
The IPv6 AAAA record is a parallel to the IPv4 A record,
and, unlike the deprecated A6 record, specifies the entire
@@ -1883,7 +1893,7 @@ host 3600 IN AAAA 2001:db8::1
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2571892"></a>Address to Name Lookups Using Nibble Format</h3></div></div></div>
+<a name="id2571787"></a>Address to Name Lookups Using Nibble Format</h3></div></div></div>
<p>
When looking up an address in nibble format, the address
components are simply reversed, just as in IPv4, and
@@ -1918,5 +1928,6 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/Bv9ARM.ch05.html b/doc/arm/Bv9ARM.ch05.html
index eb4803ad4301..6e8b9ac06e20 100644
--- a/doc/arm/Bv9ARM.ch05.html
+++ b/doc/arm/Bv9ARM.ch05.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -45,13 +45,13 @@
<div class="toc">
<p><b>Table of Contents</b></p>
<dl>
-<dt><span class="sect1"><a href="Bv9ARM.ch05.html#id2571925">The Lightweight Resolver Library</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch05.html#id2571820">The Lightweight Resolver Library</a></span></dt>
<dt><span class="sect1"><a href="Bv9ARM.ch05.html#lwresd">Running a Resolver Daemon</a></span></dt>
</dl>
</div>
<div class="sect1" lang="en">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2571925"></a>The Lightweight Resolver Library</h2></div></div></div>
+<a name="id2571820"></a>The Lightweight Resolver Library</h2></div></div></div>
<p>
Traditionally applications have been linked with a stub resolver
library that sends recursive DNS queries to a local caching name
@@ -139,5 +139,6 @@
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/Bv9ARM.ch06.html b/doc/arm/Bv9ARM.ch06.html
index 470349609e6e..1047324fbd1e 100644
--- a/doc/arm/Bv9ARM.ch06.html
+++ b/doc/arm/Bv9ARM.ch06.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -48,58 +48,58 @@
<dt><span class="sect1"><a href="Bv9ARM.ch06.html#configuration_file_elements">Configuration File Elements</a></span></dt>
<dd><dl>
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#address_match_lists">Address Match Lists</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2573336">Comment Syntax</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2573235">Comment Syntax</a></span></dt>
</dl></dd>
<dt><span class="sect1"><a href="Bv9ARM.ch06.html#Configuration_File_Grammar">Configuration File Grammar</a></span></dt>
<dd><dl>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2573996"><span><strong class="command">acl</strong></span> Statement Grammar</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2573895"><span><strong class="command">acl</strong></span> Statement Grammar</a></span></dt>
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#acl"><span><strong class="command">acl</strong></span> Statement Definition and
Usage</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574186"><span><strong class="command">controls</strong></span> Statement Grammar</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574091"><span><strong class="command">controls</strong></span> Statement Grammar</a></span></dt>
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#controls_statement_definition_and_usage"><span><strong class="command">controls</strong></span> Statement Definition and
Usage</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574614"><span><strong class="command">include</strong></span> Statement Grammar</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574631"><span><strong class="command">include</strong></span> Statement Definition and
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574451"><span><strong class="command">include</strong></span> Statement Grammar</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574468"><span><strong class="command">include</strong></span> Statement Definition and
Usage</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574654"><span><strong class="command">key</strong></span> Statement Grammar</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574678"><span><strong class="command">key</strong></span> Statement Definition and Usage</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574769"><span><strong class="command">logging</strong></span> Statement Grammar</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574963"><span><strong class="command">logging</strong></span> Statement Definition and
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574628"><span><strong class="command">key</strong></span> Statement Grammar</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574651"><span><strong class="command">key</strong></span> Statement Definition and Usage</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574742"><span><strong class="command">logging</strong></span> Statement Grammar</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574868"><span><strong class="command">logging</strong></span> Statement Definition and
Usage</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2577174"><span><strong class="command">lwres</strong></span> Statement Grammar</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2577248"><span><strong class="command">lwres</strong></span> Statement Definition and Usage</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2577312"><span><strong class="command">masters</strong></span> Statement Grammar</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2577355"><span><strong class="command">masters</strong></span> Statement Definition and
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2577079"><span><strong class="command">lwres</strong></span> Statement Grammar</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2577153"><span><strong class="command">lwres</strong></span> Statement Definition and Usage</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2577285"><span><strong class="command">masters</strong></span> Statement Grammar</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2577329"><span><strong class="command">masters</strong></span> Statement Definition and
Usage</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2577377"><span><strong class="command">options</strong></span> Statement Grammar</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2577350"><span><strong class="command">options</strong></span> Statement Grammar</a></span></dt>
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#options"><span><strong class="command">options</strong></span> Statement Definition and
Usage</a></span></dt>
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#server_statement_grammar"><span><strong class="command">server</strong></span> Statement Grammar</a></span></dt>
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#server_statement_definition_and_usage"><span><strong class="command">server</strong></span> Statement Definition and
Usage</a></span></dt>
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#statschannels"><span><strong class="command">statistics-channels</strong></span> Statement Grammar</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2590101"><span><strong class="command">statistics-channels</strong></span> Statement Definition and
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2590471"><span><strong class="command">statistics-channels</strong></span> Statement Definition and
Usage</a></span></dt>
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#trusted-keys"><span><strong class="command">trusted-keys</strong></span> Statement Grammar</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2590408"><span><strong class="command">trusted-keys</strong></span> Statement Definition
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2590642"><span><strong class="command">trusted-keys</strong></span> Statement Definition
and Usage</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2590523"><span><strong class="command">managed-keys</strong></span> Statement Grammar</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2590757"><span><strong class="command">managed-keys</strong></span> Statement Grammar</a></span></dt>
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#managed-keys"><span><strong class="command">managed-keys</strong></span> Statement Definition
and Usage</a></span></dt>
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#view_statement_grammar"><span><strong class="command">view</strong></span> Statement Grammar</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2590965"><span><strong class="command">view</strong></span> Statement Definition and Usage</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2591192"><span><strong class="command">view</strong></span> Statement Definition and Usage</a></span></dt>
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#zone_statement_grammar"><span><strong class="command">zone</strong></span>
Statement Grammar</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2592813"><span><strong class="command">zone</strong></span> Statement Definition and Usage</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2592901"><span><strong class="command">zone</strong></span> Statement Definition and Usage</a></span></dt>
</dl></dd>
-<dt><span class="sect1"><a href="Bv9ARM.ch06.html#id2596432">Zone File</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch06.html#id2596587">Zone File</a></span></dt>
<dd><dl>
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#types_of_resource_records_and_when_to_use_them">Types of Resource Records and When to Use Them</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2598594">Discussion of MX Records</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2598681">Discussion of MX Records</a></span></dt>
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#Setting_TTLs">Setting TTLs</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2599209">Inverse Mapping in IPv4</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2599336">Other Zone File Directives</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2599541"><acronym class="acronym">BIND</acronym> Master File Extension: the <span><strong class="command">$GENERATE</strong></span> Directive</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2599297">Inverse Mapping in IPv4</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2599492">Other Zone File Directives</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2599765"><acronym class="acronym">BIND</acronym> Master File Extension: the <span><strong class="command">$GENERATE</strong></span> Directive</a></span></dt>
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#zonefile_format">Additional File Formats</a></span></dt>
</dl></dd>
<dt><span class="sect1"><a href="Bv9ARM.ch06.html#statistics">BIND9 Statistics</a></span></dt>
@@ -416,12 +416,14 @@
<p>
Integers may take values
0 &lt;= value &lt;= 18446744073709551615, though
- certain parameters may use a more limited range
- within these extremes. In most cases, setting a
- value to 0 does not literally mean zero; it means
- "undefined" or "as big as psosible", depending on
- the context. See the expalantions of particular
- parameters that use <code class="varname">size_spec</code>
+ certain parameters
+ (such as <span><strong class="command">max-journal-size</strong></span>) may
+ use a more limited range within these extremes.
+ In most cases, setting a value to 0 does not
+ literally mean zero; it means "undefined" or
+ "as big as possible", depending on the context.
+ See the explanations of particular parameters
+ that use <code class="varname">size_spec</code>
for details on how they interpret its use.
</p>
<p>
@@ -491,7 +493,7 @@
<a name="address_match_lists"></a>Address Match Lists</h3></div></div></div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2573034"></a>Syntax</h4></div></div></div>
+<a name="id2572933"></a>Syntax</h4></div></div></div>
<pre class="programlisting"><code class="varname">address_match_list</code> = address_match_list_element ;
[<span class="optional"> address_match_list_element; ... </span>]
<code class="varname">address_match_list_element</code> = [<span class="optional"> ! </span>] (ip_address [<span class="optional">/length</span>] |
@@ -500,7 +502,7 @@
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2573130"></a>Definition and Usage</h4></div></div></div>
+<a name="id2572961"></a>Definition and Usage</h4></div></div></div>
<p>
Address match lists are primarily used to determine access
control for various server operations. They are also used in
@@ -584,7 +586,7 @@
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2573336"></a>Comment Syntax</h3></div></div></div>
+<a name="id2573235"></a>Comment Syntax</h3></div></div></div>
<p>
The <acronym class="acronym">BIND</acronym> 9 comment syntax allows for
comments to appear
@@ -594,7 +596,7 @@
</p>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2573351"></a>Syntax</h4></div></div></div>
+<a name="id2573318"></a>Syntax</h4></div></div></div>
<p>
</p>
<pre class="programlisting">/* This is a <acronym class="acronym">BIND</acronym> comment as in C */</pre>
@@ -610,7 +612,7 @@
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2573381"></a>Definition and Usage</h4></div></div></div>
+<a name="id2573348"></a>Definition and Usage</h4></div></div></div>
<p>
Comments may appear anywhere that whitespace may appear in
a <acronym class="acronym">BIND</acronym> configuration file.
@@ -864,7 +866,7 @@
</p>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2573996"></a><span><strong class="command">acl</strong></span> Statement Grammar</h3></div></div></div>
+<a name="id2573895"></a><span><strong class="command">acl</strong></span> Statement Grammar</h3></div></div></div>
<pre class="programlisting"><span><strong class="command">acl</strong></span> acl-name {
address_match_list
};
@@ -920,7 +922,9 @@
<td>
<p>
Matches the IPv4 and IPv6 addresses of all network
- interfaces on the system.
+ interfaces on the system. When addresses are
+ added or removed, the <span><strong class="command">localhost</strong></span>
+ ACL element is updated to reflect the changes.
</p>
</td>
</tr>
@@ -932,6 +936,9 @@
<p>
Matches any host on an IPv4 or IPv6 network
for which the system has an interface.
+ When addresses are added or removed,
+ the <span><strong class="command">localnets</strong></span>
+ ACL element is updated to reflect the changes.
Some systems do not provide a way to determine the prefix
lengths of
local IPv6 addresses.
@@ -946,7 +953,7 @@
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2574186"></a><span><strong class="command">controls</strong></span> Statement Grammar</h3></div></div></div>
+<a name="id2574091"></a><span><strong class="command">controls</strong></span> Statement Grammar</h3></div></div></div>
<pre class="programlisting"><span><strong class="command">controls</strong></span> {
[ inet ( ip_addr | * ) [ port ip_port ]
allow { <em class="replaceable"><code> address_match_list </code></em> }
@@ -1070,12 +1077,12 @@
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2574614"></a><span><strong class="command">include</strong></span> Statement Grammar</h3></div></div></div>
+<a name="id2574451"></a><span><strong class="command">include</strong></span> Statement Grammar</h3></div></div></div>
<pre class="programlisting"><span><strong class="command">include</strong></span> <em class="replaceable"><code>filename</code></em>;</pre>
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2574631"></a><span><strong class="command">include</strong></span> Statement Definition and
+<a name="id2574468"></a><span><strong class="command">include</strong></span> Statement Definition and
Usage</h3></div></div></div>
<p>
The <span><strong class="command">include</strong></span> statement inserts the
@@ -1090,7 +1097,7 @@
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2574654"></a><span><strong class="command">key</strong></span> Statement Grammar</h3></div></div></div>
+<a name="id2574628"></a><span><strong class="command">key</strong></span> Statement Grammar</h3></div></div></div>
<pre class="programlisting"><span><strong class="command">key</strong></span> <em class="replaceable"><code>key_id</code></em> {
algorithm <em class="replaceable"><code>string</code></em>;
secret <em class="replaceable"><code>string</code></em>;
@@ -1099,7 +1106,7 @@
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2574678"></a><span><strong class="command">key</strong></span> Statement Definition and Usage</h3></div></div></div>
+<a name="id2574651"></a><span><strong class="command">key</strong></span> Statement Definition and Usage</h3></div></div></div>
<p>
The <span><strong class="command">key</strong></span> statement defines a shared
secret key for use with TSIG (see <a href="Bv9ARM.ch04.html#tsig" title="TSIG">the section called &#8220;TSIG&#8221;</a>)
@@ -1146,7 +1153,7 @@
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2574769"></a><span><strong class="command">logging</strong></span> Statement Grammar</h3></div></div></div>
+<a name="id2574742"></a><span><strong class="command">logging</strong></span> Statement Grammar</h3></div></div></div>
<pre class="programlisting"><span><strong class="command">logging</strong></span> {
[ <span><strong class="command">channel</strong></span> <em class="replaceable"><code>channel_name</code></em> {
( <span><strong class="command">file</strong></span> <em class="replaceable"><code>path_name</code></em>
@@ -1170,7 +1177,7 @@
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2574963"></a><span><strong class="command">logging</strong></span> Statement Definition and
+<a name="id2574868"></a><span><strong class="command">logging</strong></span> Statement Definition and
Usage</h3></div></div></div>
<p>
The <span><strong class="command">logging</strong></span> statement configures a
@@ -1204,7 +1211,7 @@
</p>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2575015"></a>The <span><strong class="command">channel</strong></span> Phrase</h4></div></div></div>
+<a name="id2574920"></a>The <span><strong class="command">channel</strong></span> Phrase</h4></div></div></div>
<p>
All log output goes to one or more <span class="emphasis"><em>channels</em></span>;
you can make as many of them as you want.
@@ -1734,8 +1741,8 @@ category notify { null; };
Delegation only. Logs queries that have been
forced to NXDOMAIN as the result of a
delegation-only zone or a
- <span><strong class="command">delegation-only</strong></span> in a hint
- or stub zone declaration.
+ <span><strong class="command">delegation-only</strong></span> in a
+ forward, hint or stub zone declaration.
</p>
</td>
</tr>
@@ -1822,7 +1829,7 @@ category notify { null; };
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2576518"></a>The <span><strong class="command">query-errors</strong></span> Category</h4></div></div></div>
+<a name="id2576491"></a>The <span><strong class="command">query-errors</strong></span> Category</h4></div></div></div>
<p>
The <span><strong class="command">query-errors</strong></span> category is
specifically intended for debugging purposes: To identify
@@ -2050,7 +2057,7 @@ badresp:1,adberr:0,findfail:0,valfail:0]
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2577174"></a><span><strong class="command">lwres</strong></span> Statement Grammar</h3></div></div></div>
+<a name="id2577079"></a><span><strong class="command">lwres</strong></span> Statement Grammar</h3></div></div></div>
<p>
This is the grammar of the <span><strong class="command">lwres</strong></span>
statement in the <code class="filename">named.conf</code> file:
@@ -2066,7 +2073,7 @@ badresp:1,adberr:0,findfail:0,valfail:0]
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2577248"></a><span><strong class="command">lwres</strong></span> Statement Definition and Usage</h3></div></div></div>
+<a name="id2577153"></a><span><strong class="command">lwres</strong></span> Statement Definition and Usage</h3></div></div></div>
<p>
The <span><strong class="command">lwres</strong></span> statement configures the
name
@@ -2078,8 +2085,8 @@ badresp:1,adberr:0,findfail:0,valfail:0]
<p>
The <span><strong class="command">listen-on</strong></span> statement specifies a
list of
- addresses (and ports) that this instance of a lightweight resolver
- daemon
+ IPv4 addresses (and ports) that this instance of a lightweight
+ resolver daemon
should accept requests on. If no port is specified, port 921 is
used.
If this statement is omitted, requests will be accepted on
@@ -2117,7 +2124,7 @@ badresp:1,adberr:0,findfail:0,valfail:0]
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2577312"></a><span><strong class="command">masters</strong></span> Statement Grammar</h3></div></div></div>
+<a name="id2577285"></a><span><strong class="command">masters</strong></span> Statement Grammar</h3></div></div></div>
<pre class="programlisting">
<span><strong class="command">masters</strong></span> <em class="replaceable"><code>name</code></em> [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] { ( <em class="replaceable"><code>masters_list</code></em> |
<em class="replaceable"><code>ip_addr</code></em> [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] [<span class="optional">key <em class="replaceable"><code>key</code></em></span>] ) ; [<span class="optional">...</span>] };
@@ -2125,7 +2132,7 @@ badresp:1,adberr:0,findfail:0,valfail:0]
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2577355"></a><span><strong class="command">masters</strong></span> Statement Definition and
+<a name="id2577329"></a><span><strong class="command">masters</strong></span> Statement Definition and
Usage</h3></div></div></div>
<p><span><strong class="command">masters</strong></span>
lists allow for a common set of masters to be easily used by
@@ -2135,7 +2142,7 @@ badresp:1,adberr:0,findfail:0,valfail:0]
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2577377"></a><span><strong class="command">options</strong></span> Statement Grammar</h3></div></div></div>
+<a name="id2577350"></a><span><strong class="command">options</strong></span> Statement Grammar</h3></div></div></div>
<p>
This is the grammar of the <span><strong class="command">options</strong></span>
statement in the <code class="filename">named.conf</code> file:
@@ -2206,7 +2213,7 @@ badresp:1,adberr:0,findfail:0,valfail:0]
[<span class="optional"> check-mx-cname ( <em class="replaceable"><code>warn</code></em> | <em class="replaceable"><code>fail</code></em> | <em class="replaceable"><code>ignore</code></em> ); </span>]
[<span class="optional"> check-srv-cname ( <em class="replaceable"><code>warn</code></em> | <em class="replaceable"><code>fail</code></em> | <em class="replaceable"><code>ignore</code></em> ); </span>]
[<span class="optional"> check-sibling <em class="replaceable"><code>yes_or_no</code></em>; </span>]
- [<span class="optional"> check-spf ( <em class="replaceable"><code>warn</code></em> | <em class="replaceable"><code>fail</code></em> | <em class="replaceable"><code>ignore</code></em> ); </span>]
+ [<span class="optional"> check-spf ( <em class="replaceable"><code>warn</code></em> | <em class="replaceable"><code>ignore</code></em> ); </span>]
[<span class="optional"> allow-new-zones { <em class="replaceable"><code>yes_or_no</code></em> }; </span>]
[<span class="optional"> allow-notify { <em class="replaceable"><code>address_match_list</code></em> }; </span>]
[<span class="optional"> allow-query { <em class="replaceable"><code>address_match_list</code></em> }; </span>]
@@ -2226,6 +2233,7 @@ badresp:1,adberr:0,findfail:0,valfail:0]
[<span class="optional"> try-tcp-refresh <em class="replaceable"><code>yes_or_no</code></em>; </span>]
[<span class="optional"> allow-v6-synthesis { <em class="replaceable"><code>address_match_list</code></em> }; </span>]
[<span class="optional"> blackhole { <em class="replaceable"><code>address_match_list</code></em> }; </span>]
+ [<span class="optional"> no-case-compress { <em class="replaceable"><code>address_match_list</code></em> }; </span>]
[<span class="optional"> use-v4-udp-ports { <em class="replaceable"><code>port_list</code></em> }; </span>]
[<span class="optional"> avoid-v4-udp-ports { <em class="replaceable"><code>port_list</code></em> }; </span>]
[<span class="optional"> use-v6-udp-ports { <em class="replaceable"><code>port_list</code></em> }; </span>]
@@ -2330,6 +2338,7 @@ badresp:1,adberr:0,findfail:0,valfail:0]
[<span class="optional"> max-acache-size <em class="replaceable"><code>size_spec</code></em> ; </span>]
[<span class="optional"> clients-per-query <em class="replaceable"><code>number</code></em> ; </span>]
[<span class="optional"> max-clients-per-query <em class="replaceable"><code>number</code></em> ; </span>]
+ [<span class="optional"> max-recursion-depth <em class="replaceable"><code>number</code></em> ; </span>]
[<span class="optional"> masterfile-format (<code class="constant">text</code>|<code class="constant">raw</code>) ; </span>]
[<span class="optional"> empty-server <em class="replaceable"><code>name</code></em> ; </span>]
[<span class="optional"> empty-contact <em class="replaceable"><code>name</code></em> ; </span>]
@@ -3710,10 +3719,13 @@ options {
The default is <span><strong class="command">yes</strong></span>.
</p>
<p>
- Check that the two forms of Sender Policy Framework
- records (TXT records starting with "v=spf1" and SPF) either
- both exist or both don't exist. Warnings are
- emitted it they don't and be suppressed with
+ The use of the SPF record for publishing Sender
+ Policy Framework is deprecated as the migration
+ from using TXT records to SPF records was abandoned.
+ Enabling this option also checks that a TXT Sender
+ Policy Framework record exists (starts with "v=spf1")
+ if there is an SPF record. Warnings are emitted if the
+ TXT record does not exist and can be suppressed with
<span><strong class="command">check-spf</strong></span>.
</p>
</dd>
@@ -3736,11 +3748,11 @@ options {
</p></dd>
<dt><span class="term"><span><strong class="command">check-spf</strong></span></span></dt>
<dd><p>
- When performing integrity checks, check that the
- two forms of Sender Policy Framwork records (TXT
- records starting with "v=spf1" and SPF) both exist
- or both don't exist and issue a warning if not
- met. The default is <span><strong class="command">warn</strong></span>.
+ If <span><strong class="command">check-integrity</strong></span> is set then
+ check that there is a TXT Sender Policy Framework
+ record present (starts with "v=spf1") if there is an
+ SPF record present. The default is
+ <span><strong class="command">warn</strong></span>.
</p></dd>
<dt><span class="term"><span><strong class="command">zero-no-soa-ttl</strong></span></span></dt>
<dd><p>
@@ -3850,7 +3862,7 @@ options {
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2583370"></a>Forwarding</h4></div></div></div>
+<a name="id2583425"></a>Forwarding</h4></div></div></div>
<p>
The forwarding facility can be used to create a large site-wide
cache on a few servers, reducing traffic over links to external
@@ -3894,7 +3906,7 @@ options {
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2583565"></a>Dual-stack Servers</h4></div></div></div>
+<a name="id2583483"></a>Dual-stack Servers</h4></div></div></div>
<p>
Dual-stack servers are used as servers of last resort to work
around
@@ -4099,6 +4111,57 @@ options {
<span><strong class="command">filter-aaaa-on-v4</strong></span>
is applies. The default is <strong class="userinput"><code>any</code></strong>.
</p></dd>
+<dt><span class="term"><span><strong class="command">no-case-compress</strong></span></span></dt>
+<dd>
+<p>
+ Specifies a list of addresses which require responses
+ to use case-insensitive compression. This ACL can be
+ used when <span><strong class="command">named</strong></span> needs to work with
+ clients that do not comply with the requirement in RFC
+ 1034 to use case-insensitive name comparisons when
+ checking for matching domain names.
+ </p>
+<p>
+ If left undefined, the ACL defaults to
+ <span><strong class="command">none</strong></span>: case-insensitive compression
+ will be used for all clients. If the ACL is defined and
+ matches a client, then case will be ignored when
+ compressing domain names in DNS responses sent to that
+ client.
+ </p>
+<p>
+ This can result in slightly smaller responses: if
+ a response contains the names "example.com" and
+ "example.COM", case-insensitive compression would treat
+ the second one as a duplicate. It also ensures
+ that the case of the query name exactly matches the
+ case of the owner names of returned records, rather
+ than matching the case of the records entered in
+ the zone file. This allows responses to exactly
+ match the query, which is required by some clients
+ due to incorrect use of case-sensitive comparisons.
+ </p>
+<p>
+ Case-insensitive compression is <span class="emphasis"><em>always</em></span>
+ used in AXFR and IXFR responses, regardless of whether
+ the client matches this ACL.
+ </p>
+<p>
+ There are circumstances in which <span><strong class="command">named</strong></span>
+ will not preserve the case of owner names of records:
+ if a zone file defines records of different types with
+ the same name, but the capitalization of the name is
+ different (e.g., "www.example.com/A" and
+ "WWW.EXAMPLE.COM/AAAA"), then all responses for that
+ name will use the <span class="emphasis"><em>first</em></span> version
+ of the name that was used in the zone file. This
+ limitation may be addressed in a future release. However,
+ domain names specified in the rdata of resource records
+ (i.e., records of type NS, MX, CNAME, etc) will always
+ have their case preserved unless the client matches this
+ ACL.
+ </p>
+</dd>
<dt><span class="term"><span><strong class="command">resolver-query-timeout</strong></span></span></dt>
<dd><p>
The amount of time the resolver will spend attempting
@@ -4111,11 +4174,13 @@ options {
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2584126"></a>Interfaces</h4></div></div></div>
+<a name="id2584157"></a>Interfaces</h4></div></div></div>
<p>
The interfaces and ports that the server will answer queries
from may be specified using the <span><strong class="command">listen-on</strong></span> option. <span><strong class="command">listen-on</strong></span> takes
- an optional port and an <code class="varname">address_match_list</code>.
+ an optional port and an <code class="varname">address_match_list</code>
+ of IPv4 addresses. (IPv6 addresses are ignored, with a
+ logged warning.)
The server will listen on all interfaces allowed by the address
match list. If a port is not specified, port 53 will be used.
</p>
@@ -4163,6 +4228,8 @@ listen-on port 1234 { !1.2.3.4; 1.2/16; };
the server listens on a separate socket for each specified
address,
regardless of whether the desired API is supported by the system.
+ IPv4 addresses specified in <span><strong class="command">listen-on-v6</strong></span>
+ will be ignored, with a logged warning.
</p>
<p>
Multiple <span><strong class="command">listen-on-v6</strong></span> options can
@@ -4579,7 +4646,7 @@ avoid-v6-udp-ports {};
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2585207"></a>UDP Port Lists</h4></div></div></div>
+<a name="id2585310"></a>UDP Port Lists</h4></div></div></div>
<p>
<span><strong class="command">use-v4-udp-ports</strong></span>,
<span><strong class="command">avoid-v4-udp-ports</strong></span>,
@@ -4621,7 +4688,7 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2585403"></a>Operating System Resource Limits</h4></div></div></div>
+<a name="id2585438"></a>Operating System Resource Limits</h4></div></div></div>
<p>
The server's usage of many system resources can be limited.
Scaled values are allowed when specifying resource limits. For
@@ -4786,7 +4853,7 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2585826"></a>Periodic Task Intervals</h4></div></div></div>
+<a name="id2585861"></a>Periodic Task Intervals</h4></div></div></div>
<div class="variablelist"><dl>
<dt><span class="term"><span><strong class="command">cleaning-interval</strong></span></span></dt>
<dd><p>
@@ -5208,7 +5275,7 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
<dd>
<p>
Specify a private RDATA type to be used when generating
- key signing records. The default is
+ signing state records. The default is
<code class="literal">65534</code>.
</p>
<p>
@@ -5216,13 +5283,20 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
in a future version once there is a standard type.
</p>
<p>
- These records can be removed from the zone once named
- has completed signing the zone with the matching key
- using <span><strong class="command">nsupdate</strong></span> or
- <span><strong class="command">rndc signing -clear</strong></span>.
- <span><strong class="command">rndc signing -clear</strong></span> is the only supported
- way to remove these records from
- <span><strong class="command">inline-signing</strong></span> zones.
+ Signing state records are used to internally by
+ <span><strong class="command">named</strong></span> to track the current state of
+ a zone-signing process, i.e., whether it is still active
+ or has been completed. The records can be inspected
+ using the command
+ <span><strong class="command">rndc signing -list <em class="replaceable"><code>zone</code></em></strong></span>.
+ Once <span><strong class="command">named</strong></span> has finished signing
+ a zone with a particular key, the signing state
+ record associated with that key can be removed from
+ the zone by running
+ <span><strong class="command">rndc signing -clear <em class="replaceable"><code>keyid/algorithm</code></em> <em class="replaceable"><code>zone</code></em></strong></span>.
+ To clear all of the completed signing state
+ records for a zone, use
+ <span><strong class="command">rndc signing -clear all <em class="replaceable"><code>zone</code></em></strong></span>.
</p>
</dd>
<dt>
@@ -5363,6 +5437,29 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
<span><strong class="command">recursive-clients</strong></span>.
</p>
</dd>
+<dt>
+<a name="max-recursion-depth"></a><span class="term"><span><strong class="command">max-recursion-depth</strong></span></span>
+</dt>
+<dd><p>
+ Sets the maximum number of levels of recursion
+ that are permitted at any one time while servicing
+ a recursive query. Resolving a name may require
+ looking up a name server address, which in turn
+ requires resolving another name, etc; if the number
+ of indirections exceeds this value, the recursive
+ query is terminated and returns SERVFAIL. The
+ default is 7.
+ </p></dd>
+<dt>
+<a name="max-recursion-queries"></a><span class="term"><span><strong class="command">max-recursion-queries</strong></span></span>
+</dt>
+<dd><p>
+ Sets the maximum number of iterative queries that
+ may be sent while servicing a recursive query.
+ If more queries are sent, the recursive query
+ is terminated and returns SERVFAIL. The default
+ is 50.
+ </p></dd>
<dt><span class="term"><span><strong class="command">notify-delay</strong></span></span></dt>
<dd>
<p>
@@ -5719,7 +5816,7 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2588200"></a>Content Filtering</h4></div></div></div>
+<a name="id2588485"></a>Content Filtering</h4></div></div></div>
<p>
<acronym class="acronym">BIND</acronym> 9 provides the ability to filter
out DNS responses from external DNS servers containing
@@ -5842,7 +5939,7 @@ deny-answer-aliases { "example.net"; };
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2588394"></a>Response Policy Zone (RPZ) Rewriting</h4></div></div></div>
+<a name="id2588747"></a>Response Policy Zone (RPZ) Rewriting</h4></div></div></div>
<p>
<acronym class="acronym">BIND</acronym> 9 includes a limited
mechanism to modify DNS responses for requests
@@ -6109,7 +6206,7 @@ ns.domain.com.rpz-nsdname CNAME .
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2588961"></a>Response Rate Limiting</h4></div></div></div>
+<a name="id2589177"></a>Response Rate Limiting</h4></div></div></div>
<p>
This feature is only available when <acronym class="acronym">BIND</acronym> 9
is compiled with the <strong class="userinput"><code>--enable-rrl</code></strong>
@@ -6341,6 +6438,7 @@ ns.domain.com.rpz-nsdname CNAME .
[<span class="optional"> bogus <em class="replaceable"><code>yes_or_no</code></em> ; </span>]
[<span class="optional"> provide-ixfr <em class="replaceable"><code>yes_or_no</code></em> ; </span>]
[<span class="optional"> request-ixfr <em class="replaceable"><code>yes_or_no</code></em> ; </span>]
+ [<span class="optional"> request-nsid <em class="replaceable"><code>yes_or_no</code></em> ; </span>]
[<span class="optional"> edns <em class="replaceable"><code>yes_or_no</code></em> ; </span>]
[<span class="optional"> edns-udp-size <em class="replaceable"><code>number</code></em> ; </span>]
[<span class="optional"> max-udp-size <em class="replaceable"><code>number</code></em> ; </span>]
@@ -6530,6 +6628,13 @@ ns.domain.com.rpz-nsdname CNAME .
be specified. Similarly, for an IPv6 remote server,
only <span><strong class="command">query-source-v6</strong></span> can be specified.
</p>
+<p>
+ The <span><strong class="command">request-nsid</strong></span> clause determines
+ whether the local server will add a NSID EDNS option
+ to requests sent to the server. This overrides
+ <span><strong class="command">request-nsid</strong></span> set at the view or
+ option level.
+ </p>
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
@@ -6543,7 +6648,7 @@ ns.domain.com.rpz-nsdname CNAME .
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2590101"></a><span><strong class="command">statistics-channels</strong></span> Statement Definition and
+<a name="id2590471"></a><span><strong class="command">statistics-channels</strong></span> Statement Definition and
Usage</h3></div></div></div>
<p>
The <span><strong class="command">statistics-channels</strong></span> statement
@@ -6627,7 +6732,7 @@ ns.domain.com.rpz-nsdname CNAME .
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2590408"></a><span><strong class="command">trusted-keys</strong></span> Statement Definition
+<a name="id2590642"></a><span><strong class="command">trusted-keys</strong></span> Statement Definition
and Usage</h3></div></div></div>
<p>
The <span><strong class="command">trusted-keys</strong></span> statement defines
@@ -6667,10 +6772,10 @@ ns.domain.com.rpz-nsdname CNAME .
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2590523"></a><span><strong class="command">managed-keys</strong></span> Statement Grammar</h3></div></div></div>
+<a name="id2590757"></a><span><strong class="command">managed-keys</strong></span> Statement Grammar</h3></div></div></div>
<pre class="programlisting"><span><strong class="command">managed-keys</strong></span> {
- <em class="replaceable"><code>name</code></em> <code class="literal">initial-key</code> <em class="replaceable"><code>flags</code></em> <em class="replaceable"><code>protocol</code></em> <em class="replaceable"><code>algorithm</code></em> <em class="replaceable"><code>key-data</code></em> ;
- [<span class="optional"> <em class="replaceable"><code>name</code></em> <code class="literal">initial-key</code> <em class="replaceable"><code>flags</code></em> <em class="replaceable"><code>protocol</code></em> <em class="replaceable"><code>algorithm</code></em> <em class="replaceable"><code>key-data</code></em> ; [<span class="optional">...</span>]</span>]
+ <em class="replaceable"><code>name</code></em> initial-key <em class="replaceable"><code>flags</code></em> <em class="replaceable"><code>protocol</code></em> <em class="replaceable"><code>algorithm</code></em> <em class="replaceable"><code>key-data</code></em> ;
+ [<span class="optional"> <em class="replaceable"><code>name</code></em> initial-key <em class="replaceable"><code>flags</code></em> <em class="replaceable"><code>protocol</code></em> <em class="replaceable"><code>algorithm</code></em> <em class="replaceable"><code>key-data</code></em> ; [<span class="optional">...</span>]</span>]
};
</pre>
</div>
@@ -6805,7 +6910,7 @@ ns.domain.com.rpz-nsdname CNAME .
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2590965"></a><span><strong class="command">view</strong></span> Statement Definition and Usage</h3></div></div></div>
+<a name="id2591192"></a><span><strong class="command">view</strong></span> Statement Definition and Usage</h3></div></div></div>
<p>
The <span><strong class="command">view</strong></span> statement is a powerful
feature
@@ -6942,7 +7047,7 @@ view "external" {
[<span class="optional"> check-names (<code class="constant">warn</code>|<code class="constant">fail</code>|<code class="constant">ignore</code>) ; </span>]
[<span class="optional"> check-mx (<code class="constant">warn</code>|<code class="constant">fail</code>|<code class="constant">ignore</code>) ; </span>]
[<span class="optional"> check-wildcard <em class="replaceable"><code>yes_or_no</code></em>; </span>]
- [<span class="optional"> check-spf ( <em class="replaceable"><code>warn</code></em> | <em class="replaceable"><code>fail</code></em> | <em class="replaceable"><code>ignore</code></em> ); </span>]
+ [<span class="optional"> check-spf ( <em class="replaceable"><code>warn</code></em> | <em class="replaceable"><code>ignore</code></em> ); </span>]
[<span class="optional"> check-integrity <em class="replaceable"><code>yes_or_no</code></em> ; </span>]
[<span class="optional"> dialup <em class="replaceable"><code>dialup_option</code></em> ; </span>]
[<span class="optional"> file <em class="replaceable"><code>string</code></em> ; </span>]
@@ -7117,10 +7222,10 @@ zone <em class="replaceable"><code>zone_name</code></em> [<span class="optional"
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2592813"></a><span><strong class="command">zone</strong></span> Statement Definition and Usage</h3></div></div></div>
+<a name="id2592901"></a><span><strong class="command">zone</strong></span> Statement Definition and Usage</h3></div></div></div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2592821"></a>Zone Types</h4></div></div></div>
+<a name="id2592908"></a>Zone Types</h4></div></div></div>
<div class="informaltable"><table border="1">
<colgroup>
<col>
@@ -7438,7 +7543,7 @@ zone <em class="replaceable"><code>zone_name</code></em> [<span class="optional"
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2593429"></a>Class</h4></div></div></div>
+<a name="id2593653"></a>Class</h4></div></div></div>
<p>
The zone's name may optionally be followed by a class. If
a class is not specified, class <code class="literal">IN</code> (for <code class="varname">Internet</code>),
@@ -7460,7 +7565,7 @@ zone <em class="replaceable"><code>zone_name</code></em> [<span class="optional"
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2593462"></a>Zone Options</h4></div></div></div>
+<a name="id2593686"></a>Zone Options</h4></div></div></div>
<div class="variablelist"><dl>
<dt><span class="term"><span><strong class="command">allow-notify</strong></span></span></dt>
<dd><p>
@@ -7616,9 +7721,10 @@ zone <em class="replaceable"><code>zone_name</code></em> [<span class="optional"
<dt><span class="term"><span><strong class="command">delegation-only</strong></span></span></dt>
<dd>
<p>
- The flag only applies to hint and stub zones. If set
- to <strong class="userinput"><code>yes</code></strong>, then the zone will also be
- treated as if it is also a delegation-only type zone.
+ The flag only applies to forward, hint and stub
+ zones. If set to <strong class="userinput"><code>yes</code></strong>,
+ then the zone will also be treated as if it is
+ also a delegation-only type zone.
</p>
<p>
See caveats in <a href="Bv9ARM.ch06.html#root_delegation_only"><span><strong class="command">root-delegation-only</strong></span></a>.
@@ -8376,7 +8482,7 @@ example.com. NS ns2.example.net.
</div>
<div class="sect1" lang="en">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2596432"></a>Zone File</h2></div></div></div>
+<a name="id2596587"></a>Zone File</h2></div></div></div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
<a name="types_of_resource_records_and_when_to_use_them"></a>Types of Resource Records and When to Use Them</h3></div></div></div>
@@ -8389,7 +8495,7 @@ example.com. NS ns2.example.net.
</p>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2596450"></a>Resource Records</h4></div></div></div>
+<a name="id2596605"></a>Resource Records</h4></div></div></div>
<p>
A domain name identifies a node. Each node has a set of
resource information, which may be empty. The set of resource
@@ -9126,7 +9232,7 @@ example.com. NS ns2.example.net.
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2598005"></a>Textual expression of RRs</h4></div></div></div>
+<a name="id2598161"></a>Textual expression of RRs</h4></div></div></div>
<p>
RRs are represented in binary form in the packets of the DNS
protocol, and are usually represented in highly encoded form
@@ -9329,7 +9435,7 @@ example.com. NS ns2.example.net.
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2598594"></a>Discussion of MX Records</h3></div></div></div>
+<a name="id2598681"></a>Discussion of MX Records</h3></div></div></div>
<p>
As described above, domain servers store information as a
series of resource records, each of which contains a particular
@@ -9571,8 +9677,7 @@ example.com. NS ns2.example.net.
<p>
Each RR can have a TTL as the second
field in the RR, which will control how long other
- servers can cache
- the it.
+ servers can cache it.
</p>
</td>
</tr>
@@ -9585,7 +9690,7 @@ example.com. NS ns2.example.net.
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2599209"></a>Inverse Mapping in IPv4</h3></div></div></div>
+<a name="id2599297"></a>Inverse Mapping in IPv4</h3></div></div></div>
<p>
Reverse name resolution (that is, translation from IP address
to name) is achieved by means of the <span class="emphasis"><em>in-addr.arpa</em></span> domain
@@ -9646,7 +9751,7 @@ example.com. NS ns2.example.net.
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2599336"></a>Other Zone File Directives</h3></div></div></div>
+<a name="id2599492"></a>Other Zone File Directives</h3></div></div></div>
<p>
The Master File Format was initially defined in RFC 1035 and
has subsequently been extended. While the Master File Format
@@ -9661,7 +9766,7 @@ example.com. NS ns2.example.net.
</p>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2599358"></a>The <span><strong class="command">@</strong></span> (at-sign)</h4></div></div></div>
+<a name="id2599514"></a>The <span><strong class="command">@</strong></span> (at-sign)</h4></div></div></div>
<p>
When used in the label (or name) field, the asperand or
at-sign (@) symbol represents the current origin.
@@ -9672,7 +9777,7 @@ example.com. NS ns2.example.net.
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2599374"></a>The <span><strong class="command">$ORIGIN</strong></span> Directive</h4></div></div></div>
+<a name="id2599530"></a>The <span><strong class="command">$ORIGIN</strong></span> Directive</h4></div></div></div>
<p>
Syntax: <span><strong class="command">$ORIGIN</strong></span>
<em class="replaceable"><code>domain-name</code></em>
@@ -9701,7 +9806,7 @@ WWW.EXAMPLE.COM. CNAME MAIN-SERVER.EXAMPLE.COM.
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2599435"></a>The <span><strong class="command">$INCLUDE</strong></span> Directive</h4></div></div></div>
+<a name="id2599591"></a>The <span><strong class="command">$INCLUDE</strong></span> Directive</h4></div></div></div>
<p>
Syntax: <span><strong class="command">$INCLUDE</strong></span>
<em class="replaceable"><code>filename</code></em>
@@ -9737,7 +9842,7 @@ WWW.EXAMPLE.COM. CNAME MAIN-SERVER.EXAMPLE.COM.
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2599505"></a>The <span><strong class="command">$TTL</strong></span> Directive</h4></div></div></div>
+<a name="id2599729"></a>The <span><strong class="command">$TTL</strong></span> Directive</h4></div></div></div>
<p>
Syntax: <span><strong class="command">$TTL</strong></span>
<em class="replaceable"><code>default-ttl</code></em>
@@ -9756,7 +9861,7 @@ WWW.EXAMPLE.COM. CNAME MAIN-SERVER.EXAMPLE.COM.
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2599541"></a><acronym class="acronym">BIND</acronym> Master File Extension: the <span><strong class="command">$GENERATE</strong></span> Directive</h3></div></div></div>
+<a name="id2599765"></a><acronym class="acronym">BIND</acronym> Master File Extension: the <span><strong class="command">$GENERATE</strong></span> Directive</h3></div></div></div>
<p>
Syntax: <span><strong class="command">$GENERATE</strong></span>
<em class="replaceable"><code>range</code></em>
@@ -9824,8 +9929,9 @@ HOST-127.EXAMPLE. MX 0 .
<p>
This can be one of two forms: start-stop
or start-stop/step. If the first form is used, then step
- is set to
- 1. All of start, stop and step must be positive.
+ is set to 1. start, stop and step must be positive
+ integers between 0 and (2^31)-1. start must not be
+ larger than stop.
</p>
</td>
</tr>
@@ -10180,7 +10286,7 @@ HOST-127.EXAMPLE. MX 0 .
</p>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2600631"></a>Name Server Statistics Counters</h4></div></div></div>
+<a name="id2600855"></a>Name Server Statistics Counters</h4></div></div></div>
<div class="informaltable"><table border="1">
<colgroup>
<col>
@@ -10776,7 +10882,7 @@ HOST-127.EXAMPLE. MX 0 .
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2602268"></a>Zone Maintenance Statistics Counters</h4></div></div></div>
+<a name="id2602424"></a>Zone Maintenance Statistics Counters</h4></div></div></div>
<div class="informaltable"><table border="1">
<colgroup>
<col>
@@ -10930,7 +11036,7 @@ HOST-127.EXAMPLE. MX 0 .
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2602720"></a>Resolver Statistics Counters</h4></div></div></div>
+<a name="id2602875"></a>Resolver Statistics Counters</h4></div></div></div>
<div class="informaltable"><table border="1">
<colgroup>
<col>
@@ -11313,7 +11419,7 @@ HOST-127.EXAMPLE. MX 0 .
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2603673"></a>Socket I/O Statistics Counters</h4></div></div></div>
+<a name="id2603897"></a>Socket I/O Statistics Counters</h4></div></div></div>
<p>
Socket I/O statistics counters are defined per socket
types, which are
@@ -11468,7 +11574,7 @@ HOST-127.EXAMPLE. MX 0 .
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2604115"></a>Compatibility with <span class="emphasis"><em>BIND</em></span> 8 Counters</h4></div></div></div>
+<a name="id2604339"></a>Compatibility with <span class="emphasis"><em>BIND</em></span> 8 Counters</h4></div></div></div>
<p>
Most statistics counters that were available
in <span><strong class="command">BIND</strong></span> 8 are also supported in
@@ -11520,5 +11626,6 @@ HOST-127.EXAMPLE. MX 0 .
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/Bv9ARM.ch07.html b/doc/arm/Bv9ARM.ch07.html
index bba5e3498be9..59d284e7b7f8 100644
--- a/doc/arm/Bv9ARM.ch07.html
+++ b/doc/arm/Bv9ARM.ch07.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -46,10 +46,10 @@
<p><b>Table of Contents</b></p>
<dl>
<dt><span class="sect1"><a href="Bv9ARM.ch07.html#Access_Control_Lists">Access Control Lists</a></span></dt>
-<dt><span class="sect1"><a href="Bv9ARM.ch07.html#id2604342"><span><strong class="command">Chroot</strong></span> and <span><strong class="command">Setuid</strong></span></a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch07.html#id2604498"><span><strong class="command">Chroot</strong></span> and <span><strong class="command">Setuid</strong></span></a></span></dt>
<dd><dl>
-<dt><span class="sect2"><a href="Bv9ARM.ch07.html#id2604491">The <span><strong class="command">chroot</strong></span> Environment</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch07.html#id2604551">Using the <span><strong class="command">setuid</strong></span> Function</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch07.html#id2604647">The <span><strong class="command">chroot</strong></span> Environment</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch07.html#id2604707">Using the <span><strong class="command">setuid</strong></span> Function</a></span></dt>
</dl></dd>
<dt><span class="sect1"><a href="Bv9ARM.ch07.html#dynamic_update_security">Dynamic Update Security</a></span></dt>
</dl>
@@ -114,7 +114,7 @@ zone "example.com" {
</div>
<div class="sect1" lang="en">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2604342"></a><span><strong class="command">Chroot</strong></span> and <span><strong class="command">Setuid</strong></span>
+<a name="id2604498"></a><span><strong class="command">Chroot</strong></span> and <span><strong class="command">Setuid</strong></span>
</h2></div></div></div>
<p>
On UNIX servers, it is possible to run <acronym class="acronym">BIND</acronym>
@@ -140,7 +140,7 @@ zone "example.com" {
</p>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2604491"></a>The <span><strong class="command">chroot</strong></span> Environment</h3></div></div></div>
+<a name="id2604647"></a>The <span><strong class="command">chroot</strong></span> Environment</h3></div></div></div>
<p>
In order for a <span><strong class="command">chroot</strong></span> environment
to
@@ -168,7 +168,7 @@ zone "example.com" {
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2604551"></a>Using the <span><strong class="command">setuid</strong></span> Function</h3></div></div></div>
+<a name="id2604707"></a>Using the <span><strong class="command">setuid</strong></span> Function</h3></div></div></div>
<p>
Prior to running the <span><strong class="command">named</strong></span> daemon,
use
@@ -247,5 +247,6 @@ zone "example.com" {
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/Bv9ARM.ch08.html b/doc/arm/Bv9ARM.ch08.html
index bfa7458ba819..69925e5d18b0 100644
--- a/doc/arm/Bv9ARM.ch08.html
+++ b/doc/arm/Bv9ARM.ch08.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -45,18 +45,18 @@
<div class="toc">
<p><b>Table of Contents</b></p>
<dl>
-<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2604631">Common Problems</a></span></dt>
-<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch08.html#id2604636">It's not working; how can I figure out what's wrong?</a></span></dt></dl></dd>
-<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2604648">Incrementing and Changing the Serial Number</a></span></dt>
-<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2604665">Where Can I Get Help?</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2604923">Common Problems</a></span></dt>
+<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch08.html#id2604929">It's not working; how can I figure out what's wrong?</a></span></dt></dl></dd>
+<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2604940">Incrementing and Changing the Serial Number</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2604957">Where Can I Get Help?</a></span></dt>
</dl>
</div>
<div class="sect1" lang="en">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2604631"></a>Common Problems</h2></div></div></div>
+<a name="id2604923"></a>Common Problems</h2></div></div></div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2604636"></a>It's not working; how can I figure out what's wrong?</h3></div></div></div>
+<a name="id2604929"></a>It's not working; how can I figure out what's wrong?</h3></div></div></div>
<p>
The best solution to solving installation and
configuration issues is to take preventative measures by setting
@@ -68,7 +68,7 @@
</div>
<div class="sect1" lang="en">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2604648"></a>Incrementing and Changing the Serial Number</h2></div></div></div>
+<a name="id2604940"></a>Incrementing and Changing the Serial Number</h2></div></div></div>
<p>
Zone serial numbers are just numbers &#8212; they aren't
date related. A lot of people set them to a number that
@@ -95,7 +95,7 @@
</div>
<div class="sect1" lang="en">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2604665"></a>Where Can I Get Help?</h2></div></div></div>
+<a name="id2604957"></a>Where Can I Get Help?</h2></div></div></div>
<p>
The Internet Systems Consortium
(<acronym class="acronym">ISC</acronym>) offers a wide range
@@ -135,5 +135,6 @@
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/Bv9ARM.ch09.html b/doc/arm/Bv9ARM.ch09.html
index 0fe9283ab575..0e5178606e10 100644
--- a/doc/arm/Bv9ARM.ch09.html
+++ b/doc/arm/Bv9ARM.ch09.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -45,31 +45,31 @@
<div class="toc">
<p><b>Table of Contents</b></p>
<dl>
-<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2604932">Acknowledgments</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2605019">Acknowledgments</a></span></dt>
<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch09.html#historical_dns_information">A Brief History of the <acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym></a></span></dt></dl></dd>
-<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2605104">General <acronym class="acronym">DNS</acronym> Reference Information</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2605259">General <acronym class="acronym">DNS</acronym> Reference Information</a></span></dt>
<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch09.html#ipv6addresses">IPv6 addresses (AAAA)</a></span></dt></dl></dd>
<dt><span class="sect1"><a href="Bv9ARM.ch09.html#bibliography">Bibliography (and Suggested Reading)</a></span></dt>
<dd><dl>
<dt><span class="sect2"><a href="Bv9ARM.ch09.html#rfcs">Request for Comments (RFCs)</a></span></dt>
<dt><span class="sect2"><a href="Bv9ARM.ch09.html#internet_drafts">Internet Drafts</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2608315">Other Documents About <acronym class="acronym">BIND</acronym></a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2608539">Other Documents About <acronym class="acronym">BIND</acronym></a></span></dt>
</dl></dd>
<dt><span class="sect1"><a href="Bv9ARM.ch09.html#bind9.library">BIND 9 DNS Library Support</a></span></dt>
<dd><dl>
-<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2609722">Prerequisite</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2609732">Compilation</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2609756">Installation</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2609787">Known Defects/Restrictions</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2609864">The dns.conf File</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2609891">Sample Applications</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2611000">Library References</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2610978">Prerequisite</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2610987">Compilation</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2609100">Installation</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2609131">Known Defects/Restrictions</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2610164">The dns.conf File</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2610190">Sample Applications</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2611163">Library References</a></span></dt>
</dl></dd>
</dl>
</div>
<div class="sect1" lang="en">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2604932"></a>Acknowledgments</h2></div></div></div>
+<a name="id2605019"></a>Acknowledgments</h2></div></div></div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
<a name="historical_dns_information"></a>A Brief History of the <acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym>
@@ -172,7 +172,7 @@
</div>
<div class="sect1" lang="en">
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id2605104"></a>General <acronym class="acronym">DNS</acronym> Reference Information</h2></div></div></div>
+<a name="id2605259"></a>General <acronym class="acronym">DNS</acronym> Reference Information</h2></div></div></div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
<a name="ipv6addresses"></a>IPv6 addresses (AAAA)</h3></div></div></div>
@@ -260,17 +260,17 @@
</p>
<div class="bibliography">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2605291"></a>Bibliography</h4></div></div></div>
+<a name="id2605447"></a>Bibliography</h4></div></div></div>
<div class="bibliodiv">
<h3 class="title">Standards</h3>
<div class="biblioentry">
-<a name="id2605302"></a><p>[<abbr class="abbrev">RFC974</abbr>] <span class="author"><span class="firstname">C.</span> <span class="surname">Partridge</span>. </span><span class="title"><i>Mail Routing and the Domain System</i>. </span><span class="pubdate">January 1986. </span></p>
+<a name="id2605458"></a><p>[<abbr class="abbrev">RFC974</abbr>] <span class="author"><span class="firstname">C.</span> <span class="surname">Partridge</span>. </span><span class="title"><i>Mail Routing and the Domain System</i>. </span><span class="pubdate">January 1986. </span></p>
</div>
<div class="biblioentry">
-<a name="id2605325"></a><p>[<abbr class="abbrev">RFC1034</abbr>] <span class="author"><span class="firstname">P.V.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i>Domain Names &#8212; Concepts and Facilities</i>. </span><span class="pubdate">November 1987. </span></p>
+<a name="id2605549"></a><p>[<abbr class="abbrev">RFC1034</abbr>] <span class="author"><span class="firstname">P.V.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i>Domain Names &#8212; Concepts and Facilities</i>. </span><span class="pubdate">November 1987. </span></p>
</div>
<div class="biblioentry">
-<a name="id2605349"></a><p>[<abbr class="abbrev">RFC1035</abbr>] <span class="author"><span class="firstname">P. V.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i>Domain Names &#8212; Implementation and
+<a name="id2605573"></a><p>[<abbr class="abbrev">RFC1035</abbr>] <span class="author"><span class="firstname">P. V.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i>Domain Names &#8212; Implementation and
Specification</i>. </span><span class="pubdate">November 1987. </span></p>
</div>
</div>
@@ -278,42 +278,42 @@
<h3 class="title">
<a name="proposed_standards"></a>Proposed Standards</h3>
<div class="biblioentry">
-<a name="id2605385"></a><p>[<abbr class="abbrev">RFC2181</abbr>] <span class="author"><span class="firstname">R., R. Bush</span> <span class="surname">Elz</span>. </span><span class="title"><i>Clarifications to the <acronym class="acronym">DNS</acronym>
+<a name="id2605609"></a><p>[<abbr class="abbrev">RFC2181</abbr>] <span class="author"><span class="firstname">R., R. Bush</span> <span class="surname">Elz</span>. </span><span class="title"><i>Clarifications to the <acronym class="acronym">DNS</acronym>
Specification</i>. </span><span class="pubdate">July 1997. </span></p>
</div>
<div class="biblioentry">
-<a name="id2605412"></a><p>[<abbr class="abbrev">RFC2308</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Andrews</span>. </span><span class="title"><i>Negative Caching of <acronym class="acronym">DNS</acronym>
+<a name="id2605636"></a><p>[<abbr class="abbrev">RFC2308</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Andrews</span>. </span><span class="title"><i>Negative Caching of <acronym class="acronym">DNS</acronym>
Queries</i>. </span><span class="pubdate">March 1998. </span></p>
</div>
<div class="biblioentry">
-<a name="id2605437"></a><p>[<abbr class="abbrev">RFC1995</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Ohta</span>. </span><span class="title"><i>Incremental Zone Transfer in <acronym class="acronym">DNS</acronym></i>. </span><span class="pubdate">August 1996. </span></p>
+<a name="id2605661"></a><p>[<abbr class="abbrev">RFC1995</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Ohta</span>. </span><span class="title"><i>Incremental Zone Transfer in <acronym class="acronym">DNS</acronym></i>. </span><span class="pubdate">August 1996. </span></p>
</div>
<div class="biblioentry">
-<a name="id2605462"></a><p>[<abbr class="abbrev">RFC1996</abbr>] <span class="author"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>A Mechanism for Prompt Notification of Zone Changes</i>. </span><span class="pubdate">August 1996. </span></p>
+<a name="id2605686"></a><p>[<abbr class="abbrev">RFC1996</abbr>] <span class="author"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>A Mechanism for Prompt Notification of Zone Changes</i>. </span><span class="pubdate">August 1996. </span></p>
</div>
<div class="biblioentry">
-<a name="id2605485"></a><p>[<abbr class="abbrev">RFC2136</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">S.</span> <span class="surname">Thomson</span>, <span class="firstname">Y.</span> <span class="surname">Rekhter</span>, and <span class="firstname">J.</span> <span class="surname">Bound</span>. </span><span class="title"><i>Dynamic Updates in the Domain Name System</i>. </span><span class="pubdate">April 1997. </span></p>
+<a name="id2605709"></a><p>[<abbr class="abbrev">RFC2136</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">S.</span> <span class="surname">Thomson</span>, <span class="firstname">Y.</span> <span class="surname">Rekhter</span>, and <span class="firstname">J.</span> <span class="surname">Bound</span>. </span><span class="title"><i>Dynamic Updates in the Domain Name System</i>. </span><span class="pubdate">April 1997. </span></p>
</div>
<div class="biblioentry">
-<a name="id2605541"></a><p>[<abbr class="abbrev">RFC2671</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>Extension Mechanisms for DNS (EDNS0)</i>. </span><span class="pubdate">August 1997. </span></p>
+<a name="id2605765"></a><p>[<abbr class="abbrev">RFC2671</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>Extension Mechanisms for DNS (EDNS0)</i>. </span><span class="pubdate">August 1997. </span></p>
</div>
<div class="biblioentry">
-<a name="id2605568"></a><p>[<abbr class="abbrev">RFC2672</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span>. </span><span class="title"><i>Non-Terminal DNS Name Redirection</i>. </span><span class="pubdate">August 1999. </span></p>
+<a name="id2605792"></a><p>[<abbr class="abbrev">RFC2672</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span>. </span><span class="title"><i>Non-Terminal DNS Name Redirection</i>. </span><span class="pubdate">August 1999. </span></p>
</div>
<div class="biblioentry">
-<a name="id2605594"></a><p>[<abbr class="abbrev">RFC2845</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>, <span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>, and <span class="firstname">B.</span> <span class="surname">Wellington</span>. </span><span class="title"><i>Secret Key Transaction Authentication for <acronym class="acronym">DNS</acronym> (TSIG)</i>. </span><span class="pubdate">May 2000. </span></p>
+<a name="id2605818"></a><p>[<abbr class="abbrev">RFC2845</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>, <span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>, and <span class="firstname">B.</span> <span class="surname">Wellington</span>. </span><span class="title"><i>Secret Key Transaction Authentication for <acronym class="acronym">DNS</acronym> (TSIG)</i>. </span><span class="pubdate">May 2000. </span></p>
</div>
<div class="biblioentry">
-<a name="id2605656"></a><p>[<abbr class="abbrev">RFC2930</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Secret Key Establishment for DNS (TKEY RR)</i>. </span><span class="pubdate">September 2000. </span></p>
+<a name="id2605880"></a><p>[<abbr class="abbrev">RFC2930</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Secret Key Establishment for DNS (TKEY RR)</i>. </span><span class="pubdate">September 2000. </span></p>
</div>
<div class="biblioentry">
-<a name="id2605686"></a><p>[<abbr class="abbrev">RFC2931</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>DNS Request and Transaction Signatures (SIG(0)s)</i>. </span><span class="pubdate">September 2000. </span></p>
+<a name="id2605910"></a><p>[<abbr class="abbrev">RFC2931</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>DNS Request and Transaction Signatures (SIG(0)s)</i>. </span><span class="pubdate">September 2000. </span></p>
</div>
<div class="biblioentry">
-<a name="id2605716"></a><p>[<abbr class="abbrev">RFC3007</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span>. </span><span class="title"><i>Secure Domain Name System (DNS) Dynamic Update</i>. </span><span class="pubdate">November 2000. </span></p>
+<a name="id2605940"></a><p>[<abbr class="abbrev">RFC3007</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span>. </span><span class="title"><i>Secure Domain Name System (DNS) Dynamic Update</i>. </span><span class="pubdate">November 2000. </span></p>
</div>
<div class="biblioentry">
-<a name="id2605742"></a><p>[<abbr class="abbrev">RFC3645</abbr>] <span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Kwan</span>, <span class="firstname">P.</span> <span class="surname">Garg</span>, <span class="firstname">J.</span> <span class="surname">Gilroy</span>, <span class="firstname">L.</span> <span class="surname">Esibov</span>, <span class="firstname">J.</span> <span class="surname">Westhead</span>, and <span class="firstname">R.</span> <span class="surname">Hall</span>. </span><span class="title"><i>Generic Security Service Algorithm for Secret
+<a name="id2605966"></a><p>[<abbr class="abbrev">RFC3645</abbr>] <span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Kwan</span>, <span class="firstname">P.</span> <span class="surname">Garg</span>, <span class="firstname">J.</span> <span class="surname">Gilroy</span>, <span class="firstname">L.</span> <span class="surname">Esibov</span>, <span class="firstname">J.</span> <span class="surname">Westhead</span>, and <span class="firstname">R.</span> <span class="surname">Hall</span>. </span><span class="title"><i>Generic Security Service Algorithm for Secret
Key Transaction Authentication for DNS
(GSS-TSIG)</i>. </span><span class="pubdate">October 2003. </span></p>
</div>
@@ -322,19 +322,19 @@
<h3 class="title">
<acronym class="acronym">DNS</acronym> Security Proposed Standards</h3>
<div class="biblioentry">
-<a name="id2605825"></a><p>[<abbr class="abbrev">RFC3225</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Conrad</span>. </span><span class="title"><i>Indicating Resolver Support of DNSSEC</i>. </span><span class="pubdate">December 2001. </span></p>
+<a name="id2606049"></a><p>[<abbr class="abbrev">RFC3225</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Conrad</span>. </span><span class="title"><i>Indicating Resolver Support of DNSSEC</i>. </span><span class="pubdate">December 2001. </span></p>
</div>
<div class="biblioentry">
-<a name="id2605851"></a><p>[<abbr class="abbrev">RFC3833</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Atkins</span> and <span class="firstname">R.</span> <span class="surname">Austein</span>. </span><span class="title"><i>Threat Analysis of the Domain Name System (DNS)</i>. </span><span class="pubdate">August 2004. </span></p>
+<a name="id2606075"></a><p>[<abbr class="abbrev">RFC3833</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Atkins</span> and <span class="firstname">R.</span> <span class="surname">Austein</span>. </span><span class="title"><i>Threat Analysis of the Domain Name System (DNS)</i>. </span><span class="pubdate">August 2004. </span></p>
</div>
<div class="biblioentry">
-<a name="id2605888"></a><p>[<abbr class="abbrev">RFC4033</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>DNS Security Introduction and Requirements</i>. </span><span class="pubdate">March 2005. </span></p>
+<a name="id2606112"></a><p>[<abbr class="abbrev">RFC4033</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>DNS Security Introduction and Requirements</i>. </span><span class="pubdate">March 2005. </span></p>
</div>
<div class="biblioentry">
-<a name="id2605953"></a><p>[<abbr class="abbrev">RFC4034</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>Resource Records for the DNS Security Extensions</i>. </span><span class="pubdate">March 2005. </span></p>
+<a name="id2606177"></a><p>[<abbr class="abbrev">RFC4034</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>Resource Records for the DNS Security Extensions</i>. </span><span class="pubdate">March 2005. </span></p>
</div>
<div class="biblioentry">
-<a name="id2606018"></a><p>[<abbr class="abbrev">RFC4035</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>Protocol Modifications for the DNS
+<a name="id2606242"></a><p>[<abbr class="abbrev">RFC4035</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>Protocol Modifications for the DNS
Security Extensions</i>. </span><span class="pubdate">March 2005. </span></p>
</div>
</div>
@@ -342,146 +342,146 @@
<h3 class="title">Other Important RFCs About <acronym class="acronym">DNS</acronym>
Implementation</h3>
<div class="biblioentry">
-<a name="id2606091"></a><p>[<abbr class="abbrev">RFC1535</abbr>] <span class="author"><span class="firstname">E.</span> <span class="surname">Gavron</span>. </span><span class="title"><i>A Security Problem and Proposed Correction With Widely
+<a name="id2606315"></a><p>[<abbr class="abbrev">RFC1535</abbr>] <span class="author"><span class="firstname">E.</span> <span class="surname">Gavron</span>. </span><span class="title"><i>A Security Problem and Proposed Correction With Widely
Deployed <acronym class="acronym">DNS</acronym> Software.</i>. </span><span class="pubdate">October 1993. </span></p>
</div>
<div class="biblioentry">
-<a name="id2606117"></a><p>[<abbr class="abbrev">RFC1536</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Kumar</span>, <span class="firstname">J.</span> <span class="surname">Postel</span>, <span class="firstname">C.</span> <span class="surname">Neuman</span>, <span class="firstname">P.</span> <span class="surname">Danzig</span>, and <span class="firstname">S.</span> <span class="surname">Miller</span>. </span><span class="title"><i>Common <acronym class="acronym">DNS</acronym> Implementation
+<a name="id2606341"></a><p>[<abbr class="abbrev">RFC1536</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Kumar</span>, <span class="firstname">J.</span> <span class="surname">Postel</span>, <span class="firstname">C.</span> <span class="surname">Neuman</span>, <span class="firstname">P.</span> <span class="surname">Danzig</span>, and <span class="firstname">S.</span> <span class="surname">Miller</span>. </span><span class="title"><i>Common <acronym class="acronym">DNS</acronym> Implementation
Errors and Suggested Fixes</i>. </span><span class="pubdate">October 1993. </span></p>
</div>
<div class="biblioentry">
-<a name="id2606253"></a><p>[<abbr class="abbrev">RFC1982</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Elz</span> and <span class="firstname">R.</span> <span class="surname">Bush</span>. </span><span class="title"><i>Serial Number Arithmetic</i>. </span><span class="pubdate">August 1996. </span></p>
+<a name="id2606477"></a><p>[<abbr class="abbrev">RFC1982</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Elz</span> and <span class="firstname">R.</span> <span class="surname">Bush</span>. </span><span class="title"><i>Serial Number Arithmetic</i>. </span><span class="pubdate">August 1996. </span></p>
</div>
<div class="biblioentry">
-<a name="id2606289"></a><p>[<abbr class="abbrev">RFC4074</abbr>] <span class="authorgroup"><span class="firstname">Y.</span> <span class="surname">Morishita</span> and <span class="firstname">T.</span> <span class="surname">Jinmei</span>. </span><span class="title"><i>Common Misbehaviour Against <acronym class="acronym">DNS</acronym>
+<a name="id2606513"></a><p>[<abbr class="abbrev">RFC4074</abbr>] <span class="authorgroup"><span class="firstname">Y.</span> <span class="surname">Morishita</span> and <span class="firstname">T.</span> <span class="surname">Jinmei</span>. </span><span class="title"><i>Common Misbehaviour Against <acronym class="acronym">DNS</acronym>
Queries for IPv6 Addresses</i>. </span><span class="pubdate">May 2005. </span></p>
</div>
</div>
<div class="bibliodiv">
<h3 class="title">Resource Record Types</h3>
<div class="biblioentry">
-<a name="id2606334"></a><p>[<abbr class="abbrev">RFC1183</abbr>] <span class="authorgroup"><span class="firstname">C.F.</span> <span class="surname">Everhart</span>, <span class="firstname">L. A.</span> <span class="surname">Mamakos</span>, <span class="firstname">R.</span> <span class="surname">Ullmann</span>, and <span class="firstname">P.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i>New <acronym class="acronym">DNS</acronym> RR Definitions</i>. </span><span class="pubdate">October 1990. </span></p>
+<a name="id2606558"></a><p>[<abbr class="abbrev">RFC1183</abbr>] <span class="authorgroup"><span class="firstname">C.F.</span> <span class="surname">Everhart</span>, <span class="firstname">L. A.</span> <span class="surname">Mamakos</span>, <span class="firstname">R.</span> <span class="surname">Ullmann</span>, and <span class="firstname">P.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i>New <acronym class="acronym">DNS</acronym> RR Definitions</i>. </span><span class="pubdate">October 1990. </span></p>
</div>
<div class="biblioentry">
-<a name="id2606392"></a><p>[<abbr class="abbrev">RFC1706</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Manning</span> and <span class="firstname">R.</span> <span class="surname">Colella</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> NSAP Resource Records</i>. </span><span class="pubdate">October 1994. </span></p>
+<a name="id2606616"></a><p>[<abbr class="abbrev">RFC1706</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Manning</span> and <span class="firstname">R.</span> <span class="surname">Colella</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> NSAP Resource Records</i>. </span><span class="pubdate">October 1994. </span></p>
</div>
<div class="biblioentry">
-<a name="id2606429"></a><p>[<abbr class="abbrev">RFC2168</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Daniel</span> and <span class="firstname">M.</span> <span class="surname">Mealling</span>. </span><span class="title"><i>Resolution of Uniform Resource Identifiers using
+<a name="id2606653"></a><p>[<abbr class="abbrev">RFC2168</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Daniel</span> and <span class="firstname">M.</span> <span class="surname">Mealling</span>. </span><span class="title"><i>Resolution of Uniform Resource Identifiers using
the Domain Name System</i>. </span><span class="pubdate">June 1997. </span></p>
</div>
<div class="biblioentry">
-<a name="id2606465"></a><p>[<abbr class="abbrev">RFC1876</abbr>] <span class="authorgroup"><span class="firstname">C.</span> <span class="surname">Davis</span>, <span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">T.</span>, and <span class="firstname">I.</span> <span class="surname">Dickinson</span>. </span><span class="title"><i>A Means for Expressing Location Information in the
+<a name="id2606689"></a><p>[<abbr class="abbrev">RFC1876</abbr>] <span class="authorgroup"><span class="firstname">C.</span> <span class="surname">Davis</span>, <span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">T.</span>, and <span class="firstname">I.</span> <span class="surname">Dickinson</span>. </span><span class="title"><i>A Means for Expressing Location Information in the
Domain
Name System</i>. </span><span class="pubdate">January 1996. </span></p>
</div>
<div class="biblioentry">
-<a name="id2606519"></a><p>[<abbr class="abbrev">RFC2052</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Gulbrandsen</span> and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>A <acronym class="acronym">DNS</acronym> RR for Specifying the
+<a name="id2606743"></a><p>[<abbr class="abbrev">RFC2052</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Gulbrandsen</span> and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>A <acronym class="acronym">DNS</acronym> RR for Specifying the
Location of
Services.</i>. </span><span class="pubdate">October 1996. </span></p>
</div>
<div class="biblioentry">
-<a name="id2606557"></a><p>[<abbr class="abbrev">RFC2163</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Allocchio</span>. </span><span class="title"><i>Using the Internet <acronym class="acronym">DNS</acronym> to
+<a name="id2606781"></a><p>[<abbr class="abbrev">RFC2163</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Allocchio</span>. </span><span class="title"><i>Using the Internet <acronym class="acronym">DNS</acronym> to
Distribute MIXER
Conformant Global Address Mapping</i>. </span><span class="pubdate">January 1998. </span></p>
</div>
<div class="biblioentry">
-<a name="id2606583"></a><p>[<abbr class="abbrev">RFC2230</abbr>] <span class="author"><span class="firstname">R.</span> <span class="surname">Atkinson</span>. </span><span class="title"><i>Key Exchange Delegation Record for the <acronym class="acronym">DNS</acronym></i>. </span><span class="pubdate">October 1997. </span></p>
+<a name="id2606807"></a><p>[<abbr class="abbrev">RFC2230</abbr>] <span class="author"><span class="firstname">R.</span> <span class="surname">Atkinson</span>. </span><span class="title"><i>Key Exchange Delegation Record for the <acronym class="acronym">DNS</acronym></i>. </span><span class="pubdate">October 1997. </span></p>
</div>
<div class="biblioentry">
-<a name="id2606609"></a><p>[<abbr class="abbrev">RFC2536</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>DSA KEYs and SIGs in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p>
+<a name="id2606833"></a><p>[<abbr class="abbrev">RFC2536</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>DSA KEYs and SIGs in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p>
</div>
<div class="biblioentry">
-<a name="id2606635"></a><p>[<abbr class="abbrev">RFC2537</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>RSA/MD5 KEYs and SIGs in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p>
+<a name="id2606859"></a><p>[<abbr class="abbrev">RFC2537</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>RSA/MD5 KEYs and SIGs in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p>
</div>
<div class="biblioentry">
-<a name="id2606662"></a><p>[<abbr class="abbrev">RFC2538</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span> and <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span><span class="title"><i>Storing Certificates in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p>
+<a name="id2606886"></a><p>[<abbr class="abbrev">RFC2538</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span> and <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span><span class="title"><i>Storing Certificates in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p>
</div>
<div class="biblioentry">
-<a name="id2606701"></a><p>[<abbr class="abbrev">RFC2539</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Storage of Diffie-Hellman Keys in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p>
+<a name="id2606925"></a><p>[<abbr class="abbrev">RFC2539</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Storage of Diffie-Hellman Keys in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p>
</div>
<div class="biblioentry">
-<a name="id2606731"></a><p>[<abbr class="abbrev">RFC2540</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Detached Domain Name System (DNS) Information</i>. </span><span class="pubdate">March 1999. </span></p>
+<a name="id2606955"></a><p>[<abbr class="abbrev">RFC2540</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Detached Domain Name System (DNS) Information</i>. </span><span class="pubdate">March 1999. </span></p>
</div>
<div class="biblioentry">
-<a name="id2606761"></a><p>[<abbr class="abbrev">RFC2782</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Gulbrandsen</span>. </span><span class="author"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="author"><span class="firstname">L.</span> <span class="surname">Esibov</span>. </span><span class="title"><i>A DNS RR for specifying the location of services (DNS SRV)</i>. </span><span class="pubdate">February 2000. </span></p>
+<a name="id2606985"></a><p>[<abbr class="abbrev">RFC2782</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Gulbrandsen</span>. </span><span class="author"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="author"><span class="firstname">L.</span> <span class="surname">Esibov</span>. </span><span class="title"><i>A DNS RR for specifying the location of services (DNS SRV)</i>. </span><span class="pubdate">February 2000. </span></p>
</div>
<div class="biblioentry">
-<a name="id2606804"></a><p>[<abbr class="abbrev">RFC2915</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Mealling</span>. </span><span class="author"><span class="firstname">R.</span> <span class="surname">Daniel</span>. </span><span class="title"><i>The Naming Authority Pointer (NAPTR) DNS Resource Record</i>. </span><span class="pubdate">September 2000. </span></p>
+<a name="id2607028"></a><p>[<abbr class="abbrev">RFC2915</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Mealling</span>. </span><span class="author"><span class="firstname">R.</span> <span class="surname">Daniel</span>. </span><span class="title"><i>The Naming Authority Pointer (NAPTR) DNS Resource Record</i>. </span><span class="pubdate">September 2000. </span></p>
</div>
<div class="biblioentry">
-<a name="id2606837"></a><p>[<abbr class="abbrev">RFC3110</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>RSA/SHA-1 SIGs and RSA KEYs in the Domain Name System (DNS)</i>. </span><span class="pubdate">May 2001. </span></p>
+<a name="id2607061"></a><p>[<abbr class="abbrev">RFC3110</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>RSA/SHA-1 SIGs and RSA KEYs in the Domain Name System (DNS)</i>. </span><span class="pubdate">May 2001. </span></p>
</div>
<div class="biblioentry">
-<a name="id2606864"></a><p>[<abbr class="abbrev">RFC3123</abbr>] <span class="author"><span class="firstname">P.</span> <span class="surname">Koch</span>. </span><span class="title"><i>A DNS RR Type for Lists of Address Prefixes (APL RR)</i>. </span><span class="pubdate">June 2001. </span></p>
+<a name="id2607088"></a><p>[<abbr class="abbrev">RFC3123</abbr>] <span class="author"><span class="firstname">P.</span> <span class="surname">Koch</span>. </span><span class="title"><i>A DNS RR Type for Lists of Address Prefixes (APL RR)</i>. </span><span class="pubdate">June 2001. </span></p>
</div>
<div class="biblioentry">
-<a name="id2606887"></a><p>[<abbr class="abbrev">RFC3596</abbr>] <span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Thomson</span>, <span class="firstname">C.</span> <span class="surname">Huitema</span>, <span class="firstname">V.</span> <span class="surname">Ksinant</span>, and <span class="firstname">M.</span> <span class="surname">Souissi</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Extensions to support IP
+<a name="id2607111"></a><p>[<abbr class="abbrev">RFC3596</abbr>] <span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Thomson</span>, <span class="firstname">C.</span> <span class="surname">Huitema</span>, <span class="firstname">V.</span> <span class="surname">Ksinant</span>, and <span class="firstname">M.</span> <span class="surname">Souissi</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Extensions to support IP
version 6</i>. </span><span class="pubdate">October 2003. </span></p>
</div>
<div class="biblioentry">
-<a name="id2606945"></a><p>[<abbr class="abbrev">RFC3597</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Gustafsson</span>. </span><span class="title"><i>Handling of Unknown DNS Resource Record (RR) Types</i>. </span><span class="pubdate">September 2003. </span></p>
+<a name="id2607169"></a><p>[<abbr class="abbrev">RFC3597</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Gustafsson</span>. </span><span class="title"><i>Handling of Unknown DNS Resource Record (RR) Types</i>. </span><span class="pubdate">September 2003. </span></p>
</div>
</div>
<div class="bibliodiv">
<h3 class="title">
<acronym class="acronym">DNS</acronym> and the Internet</h3>
<div class="biblioentry">
-<a name="id2606977"></a><p>[<abbr class="abbrev">RFC1101</abbr>] <span class="author"><span class="firstname">P. V.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Encoding of Network Names
+<a name="id2607201"></a><p>[<abbr class="abbrev">RFC1101</abbr>] <span class="author"><span class="firstname">P. V.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Encoding of Network Names
and Other Types</i>. </span><span class="pubdate">April 1989. </span></p>
</div>
<div class="biblioentry">
-<a name="id2607002"></a><p>[<abbr class="abbrev">RFC1123</abbr>] <span class="author"><span class="surname">Braden</span>. </span><span class="title"><i>Requirements for Internet Hosts - Application and
+<a name="id2607226"></a><p>[<abbr class="abbrev">RFC1123</abbr>] <span class="author"><span class="surname">Braden</span>. </span><span class="title"><i>Requirements for Internet Hosts - Application and
Support</i>. </span><span class="pubdate">October 1989. </span></p>
</div>
<div class="biblioentry">
-<a name="id2607025"></a><p>[<abbr class="abbrev">RFC1591</abbr>] <span class="author"><span class="firstname">J.</span> <span class="surname">Postel</span>. </span><span class="title"><i>Domain Name System Structure and Delegation</i>. </span><span class="pubdate">March 1994. </span></p>
+<a name="id2607249"></a><p>[<abbr class="abbrev">RFC1591</abbr>] <span class="author"><span class="firstname">J.</span> <span class="surname">Postel</span>. </span><span class="title"><i>Domain Name System Structure and Delegation</i>. </span><span class="pubdate">March 1994. </span></p>
</div>
<div class="biblioentry">
-<a name="id2607048"></a><p>[<abbr class="abbrev">RFC2317</abbr>] <span class="authorgroup"><span class="firstname">H.</span> <span class="surname">Eidnes</span>, <span class="firstname">G.</span> <span class="surname">de Groot</span>, and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>Classless IN-ADDR.ARPA Delegation</i>. </span><span class="pubdate">March 1998. </span></p>
+<a name="id2607272"></a><p>[<abbr class="abbrev">RFC2317</abbr>] <span class="authorgroup"><span class="firstname">H.</span> <span class="surname">Eidnes</span>, <span class="firstname">G.</span> <span class="surname">de Groot</span>, and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>Classless IN-ADDR.ARPA Delegation</i>. </span><span class="pubdate">March 1998. </span></p>
</div>
<div class="biblioentry">
-<a name="id2607094"></a><p>[<abbr class="abbrev">RFC2826</abbr>] <span class="authorgroup"><span class="surname">Internet Architecture Board</span>. </span><span class="title"><i>IAB Technical Comment on the Unique DNS Root</i>. </span><span class="pubdate">May 2000. </span></p>
+<a name="id2607386"></a><p>[<abbr class="abbrev">RFC2826</abbr>] <span class="authorgroup"><span class="surname">Internet Architecture Board</span>. </span><span class="title"><i>IAB Technical Comment on the Unique DNS Root</i>. </span><span class="pubdate">May 2000. </span></p>
</div>
<div class="biblioentry">
-<a name="id2607117"></a><p>[<abbr class="abbrev">RFC2929</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>, <span class="firstname">E.</span> <span class="surname">Brunner-Williams</span>, and <span class="firstname">B.</span> <span class="surname">Manning</span>. </span><span class="title"><i>Domain Name System (DNS) IANA Considerations</i>. </span><span class="pubdate">September 2000. </span></p>
+<a name="id2607410"></a><p>[<abbr class="abbrev">RFC2929</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>, <span class="firstname">E.</span> <span class="surname">Brunner-Williams</span>, and <span class="firstname">B.</span> <span class="surname">Manning</span>. </span><span class="title"><i>Domain Name System (DNS) IANA Considerations</i>. </span><span class="pubdate">September 2000. </span></p>
</div>
</div>
<div class="bibliodiv">
<h3 class="title">
<acronym class="acronym">DNS</acronym> Operations</h3>
<div class="biblioentry">
-<a name="id2607175"></a><p>[<abbr class="abbrev">RFC1033</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Lottor</span>. </span><span class="title"><i>Domain administrators operations guide.</i>. </span><span class="pubdate">November 1987. </span></p>
+<a name="id2607467"></a><p>[<abbr class="abbrev">RFC1033</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Lottor</span>. </span><span class="title"><i>Domain administrators operations guide.</i>. </span><span class="pubdate">November 1987. </span></p>
</div>
<div class="biblioentry">
-<a name="id2607198"></a><p>[<abbr class="abbrev">RFC1537</abbr>] <span class="author"><span class="firstname">P.</span> <span class="surname">Beertema</span>. </span><span class="title"><i>Common <acronym class="acronym">DNS</acronym> Data File
+<a name="id2607491"></a><p>[<abbr class="abbrev">RFC1537</abbr>] <span class="author"><span class="firstname">P.</span> <span class="surname">Beertema</span>. </span><span class="title"><i>Common <acronym class="acronym">DNS</acronym> Data File
Configuration Errors</i>. </span><span class="pubdate">October 1993. </span></p>
</div>
<div class="biblioentry">
-<a name="id2607225"></a><p>[<abbr class="abbrev">RFC1912</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Barr</span>. </span><span class="title"><i>Common <acronym class="acronym">DNS</acronym> Operational and
+<a name="id2607517"></a><p>[<abbr class="abbrev">RFC1912</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Barr</span>. </span><span class="title"><i>Common <acronym class="acronym">DNS</acronym> Operational and
Configuration Errors</i>. </span><span class="pubdate">February 1996. </span></p>
</div>
<div class="biblioentry">
-<a name="id2607252"></a><p>[<abbr class="abbrev">RFC2010</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Manning</span> and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>Operational Criteria for Root Name Servers.</i>. </span><span class="pubdate">October 1996. </span></p>
+<a name="id2607544"></a><p>[<abbr class="abbrev">RFC2010</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Manning</span> and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>Operational Criteria for Root Name Servers.</i>. </span><span class="pubdate">October 1996. </span></p>
</div>
<div class="biblioentry">
-<a name="id2607288"></a><p>[<abbr class="abbrev">RFC2219</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Hamilton</span> and <span class="firstname">R.</span> <span class="surname">Wright</span>. </span><span class="title"><i>Use of <acronym class="acronym">DNS</acronym> Aliases for
+<a name="id2607580"></a><p>[<abbr class="abbrev">RFC2219</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Hamilton</span> and <span class="firstname">R.</span> <span class="surname">Wright</span>. </span><span class="title"><i>Use of <acronym class="acronym">DNS</acronym> Aliases for
Network Services.</i>. </span><span class="pubdate">October 1997. </span></p>
</div>
</div>
<div class="bibliodiv">
<h3 class="title">Internationalized Domain Names</h3>
<div class="biblioentry">
-<a name="id2607402"></a><p>[<abbr class="abbrev">RFC2825</abbr>] <span class="authorgroup"><span class="surname">IAB</span> and <span class="firstname">R.</span> <span class="surname">Daigle</span>. </span><span class="title"><i>A Tangled Web: Issues of I18N, Domain Names,
+<a name="id2607626"></a><p>[<abbr class="abbrev">RFC2825</abbr>] <span class="authorgroup"><span class="surname">IAB</span> and <span class="firstname">R.</span> <span class="surname">Daigle</span>. </span><span class="title"><i>A Tangled Web: Issues of I18N, Domain Names,
and the Other Internet protocols</i>. </span><span class="pubdate">May 2000. </span></p>
</div>
<div class="biblioentry">
-<a name="id2607434"></a><p>[<abbr class="abbrev">RFC3490</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Faltstrom</span>, <span class="firstname">P.</span> <span class="surname">Hoffman</span>, and <span class="firstname">A.</span> <span class="surname">Costello</span>. </span><span class="title"><i>Internationalizing Domain Names in Applications (IDNA)</i>. </span><span class="pubdate">March 2003. </span></p>
+<a name="id2607658"></a><p>[<abbr class="abbrev">RFC3490</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Faltstrom</span>, <span class="firstname">P.</span> <span class="surname">Hoffman</span>, and <span class="firstname">A.</span> <span class="surname">Costello</span>. </span><span class="title"><i>Internationalizing Domain Names in Applications (IDNA)</i>. </span><span class="pubdate">March 2003. </span></p>
</div>
<div class="biblioentry">
-<a name="id2607480"></a><p>[<abbr class="abbrev">RFC3491</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Hoffman</span> and <span class="firstname">M.</span> <span class="surname">Blanchet</span>. </span><span class="title"><i>Nameprep: A Stringprep Profile for Internationalized Domain Names</i>. </span><span class="pubdate">March 2003. </span></p>
+<a name="id2607704"></a><p>[<abbr class="abbrev">RFC3491</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Hoffman</span> and <span class="firstname">M.</span> <span class="surname">Blanchet</span>. </span><span class="title"><i>Nameprep: A Stringprep Profile for Internationalized Domain Names</i>. </span><span class="pubdate">March 2003. </span></p>
</div>
<div class="biblioentry">
-<a name="id2607515"></a><p>[<abbr class="abbrev">RFC3492</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Costello</span>. </span><span class="title"><i>Punycode: A Bootstring encoding of Unicode
+<a name="id2607739"></a><p>[<abbr class="abbrev">RFC3492</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Costello</span>. </span><span class="title"><i>Punycode: A Bootstring encoding of Unicode
for Internationalized Domain Names in
Applications (IDNA)</i>. </span><span class="pubdate">March 2003. </span></p>
</div>
@@ -497,47 +497,47 @@
</p>
</div>
<div class="biblioentry">
-<a name="id2607560"></a><p>[<abbr class="abbrev">RFC1464</abbr>] <span class="author"><span class="firstname">R.</span> <span class="surname">Rosenbaum</span>. </span><span class="title"><i>Using the Domain Name System To Store Arbitrary String
+<a name="id2607784"></a><p>[<abbr class="abbrev">RFC1464</abbr>] <span class="author"><span class="firstname">R.</span> <span class="surname">Rosenbaum</span>. </span><span class="title"><i>Using the Domain Name System To Store Arbitrary String
Attributes</i>. </span><span class="pubdate">May 1993. </span></p>
</div>
<div class="biblioentry">
-<a name="id2607582"></a><p>[<abbr class="abbrev">RFC1713</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Romao</span>. </span><span class="title"><i>Tools for <acronym class="acronym">DNS</acronym> Debugging</i>. </span><span class="pubdate">November 1994. </span></p>
+<a name="id2607806"></a><p>[<abbr class="abbrev">RFC1713</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Romao</span>. </span><span class="title"><i>Tools for <acronym class="acronym">DNS</acronym> Debugging</i>. </span><span class="pubdate">November 1994. </span></p>
</div>
<div class="biblioentry">
-<a name="id2607608"></a><p>[<abbr class="abbrev">RFC1794</abbr>] <span class="author"><span class="firstname">T.</span> <span class="surname">Brisco</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Support for Load
+<a name="id2607832"></a><p>[<abbr class="abbrev">RFC1794</abbr>] <span class="author"><span class="firstname">T.</span> <span class="surname">Brisco</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Support for Load
Balancing</i>. </span><span class="pubdate">April 1995. </span></p>
</div>
<div class="biblioentry">
-<a name="id2607634"></a><p>[<abbr class="abbrev">RFC2240</abbr>] <span class="author"><span class="firstname">O.</span> <span class="surname">Vaughan</span>. </span><span class="title"><i>A Legal Basis for Domain Name Allocation</i>. </span><span class="pubdate">November 1997. </span></p>
+<a name="id2607858"></a><p>[<abbr class="abbrev">RFC2240</abbr>] <span class="author"><span class="firstname">O.</span> <span class="surname">Vaughan</span>. </span><span class="title"><i>A Legal Basis for Domain Name Allocation</i>. </span><span class="pubdate">November 1997. </span></p>
</div>
<div class="biblioentry">
-<a name="id2607657"></a><p>[<abbr class="abbrev">RFC2345</abbr>] <span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Klensin</span>, <span class="firstname">T.</span> <span class="surname">Wolf</span>, and <span class="firstname">G.</span> <span class="surname">Oglesby</span>. </span><span class="title"><i>Domain Names and Company Name Retrieval</i>. </span><span class="pubdate">May 1998. </span></p>
+<a name="id2607881"></a><p>[<abbr class="abbrev">RFC2345</abbr>] <span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Klensin</span>, <span class="firstname">T.</span> <span class="surname">Wolf</span>, and <span class="firstname">G.</span> <span class="surname">Oglesby</span>. </span><span class="title"><i>Domain Names and Company Name Retrieval</i>. </span><span class="pubdate">May 1998. </span></p>
</div>
<div class="biblioentry">
-<a name="id2607703"></a><p>[<abbr class="abbrev">RFC2352</abbr>] <span class="author"><span class="firstname">O.</span> <span class="surname">Vaughan</span>. </span><span class="title"><i>A Convention For Using Legal Names as Domain Names</i>. </span><span class="pubdate">May 1998. </span></p>
+<a name="id2607927"></a><p>[<abbr class="abbrev">RFC2352</abbr>] <span class="author"><span class="firstname">O.</span> <span class="surname">Vaughan</span>. </span><span class="title"><i>A Convention For Using Legal Names as Domain Names</i>. </span><span class="pubdate">May 1998. </span></p>
</div>
<div class="biblioentry">
-<a name="id2607726"></a><p>[<abbr class="abbrev">RFC3071</abbr>] <span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Klensin</span>. </span><span class="title"><i>Reflections on the DNS, RFC 1591, and Categories of Domains</i>. </span><span class="pubdate">February 2001. </span></p>
+<a name="id2607950"></a><p>[<abbr class="abbrev">RFC3071</abbr>] <span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Klensin</span>. </span><span class="title"><i>Reflections on the DNS, RFC 1591, and Categories of Domains</i>. </span><span class="pubdate">February 2001. </span></p>
</div>
<div class="biblioentry">
-<a name="id2607753"></a><p>[<abbr class="abbrev">RFC3258</abbr>] <span class="authorgroup"><span class="firstname">T.</span> <span class="surname">Hardie</span>. </span><span class="title"><i>Distributing Authoritative Name Servers via
+<a name="id2607977"></a><p>[<abbr class="abbrev">RFC3258</abbr>] <span class="authorgroup"><span class="firstname">T.</span> <span class="surname">Hardie</span>. </span><span class="title"><i>Distributing Authoritative Name Servers via
Shared Unicast Addresses</i>. </span><span class="pubdate">April 2002. </span></p>
</div>
<div class="biblioentry">
-<a name="id2607779"></a><p>[<abbr class="abbrev">RFC3901</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Durand</span> and <span class="firstname">J.</span> <span class="surname">Ihren</span>. </span><span class="title"><i>DNS IPv6 Transport Operational Guidelines</i>. </span><span class="pubdate">September 2004. </span></p>
+<a name="id2608003"></a><p>[<abbr class="abbrev">RFC3901</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Durand</span> and <span class="firstname">J.</span> <span class="surname">Ihren</span>. </span><span class="title"><i>DNS IPv6 Transport Operational Guidelines</i>. </span><span class="pubdate">September 2004. </span></p>
</div>
</div>
<div class="bibliodiv">
<h3 class="title">Obsolete and Unimplemented Experimental RFC</h3>
<div class="biblioentry">
-<a name="id2607822"></a><p>[<abbr class="abbrev">RFC1712</abbr>] <span class="authorgroup"><span class="firstname">C.</span> <span class="surname">Farrell</span>, <span class="firstname">M.</span> <span class="surname">Schulze</span>, <span class="firstname">S.</span> <span class="surname">Pleitner</span>, and <span class="firstname">D.</span> <span class="surname">Baldoni</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Encoding of Geographical
+<a name="id2608046"></a><p>[<abbr class="abbrev">RFC1712</abbr>] <span class="authorgroup"><span class="firstname">C.</span> <span class="surname">Farrell</span>, <span class="firstname">M.</span> <span class="surname">Schulze</span>, <span class="firstname">S.</span> <span class="surname">Pleitner</span>, and <span class="firstname">D.</span> <span class="surname">Baldoni</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Encoding of Geographical
Location</i>. </span><span class="pubdate">November 1994. </span></p>
</div>
<div class="biblioentry">
-<a name="id2607880"></a><p>[<abbr class="abbrev">RFC2673</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span>. </span><span class="title"><i>Binary Labels in the Domain Name System</i>. </span><span class="pubdate">August 1999. </span></p>
+<a name="id2608104"></a><p>[<abbr class="abbrev">RFC2673</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span>. </span><span class="title"><i>Binary Labels in the Domain Name System</i>. </span><span class="pubdate">August 1999. </span></p>
</div>
<div class="biblioentry">
-<a name="id2607907"></a><p>[<abbr class="abbrev">RFC2874</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span> and <span class="firstname">C.</span> <span class="surname">Huitema</span>. </span><span class="title"><i>DNS Extensions to Support IPv6 Address Aggregation
+<a name="id2608131"></a><p>[<abbr class="abbrev">RFC2874</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span> and <span class="firstname">C.</span> <span class="surname">Huitema</span>. </span><span class="title"><i>DNS Extensions to Support IPv6 Address Aggregation
and Renumbering</i>. </span><span class="pubdate">July 2000. </span></p>
</div>
</div>
@@ -551,39 +551,39 @@
</p>
</div>
<div class="biblioentry">
-<a name="id2607955"></a><p>[<abbr class="abbrev">RFC2065</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span> and <span class="firstname">C.</span> <span class="surname">Kaufman</span>. </span><span class="title"><i>Domain Name System Security Extensions</i>. </span><span class="pubdate">January 1997. </span></p>
+<a name="id2608179"></a><p>[<abbr class="abbrev">RFC2065</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span> and <span class="firstname">C.</span> <span class="surname">Kaufman</span>. </span><span class="title"><i>Domain Name System Security Extensions</i>. </span><span class="pubdate">January 1997. </span></p>
</div>
<div class="biblioentry">
-<a name="id2607994"></a><p>[<abbr class="abbrev">RFC2137</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Secure Domain Name System Dynamic Update</i>. </span><span class="pubdate">April 1997. </span></p>
+<a name="id2608218"></a><p>[<abbr class="abbrev">RFC2137</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Secure Domain Name System Dynamic Update</i>. </span><span class="pubdate">April 1997. </span></p>
</div>
<div class="biblioentry">
-<a name="id2608021"></a><p>[<abbr class="abbrev">RFC2535</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Domain Name System Security Extensions</i>. </span><span class="pubdate">March 1999. </span></p>
+<a name="id2608245"></a><p>[<abbr class="abbrev">RFC2535</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Domain Name System Security Extensions</i>. </span><span class="pubdate">March 1999. </span></p>
</div>
<div class="biblioentry">
-<a name="id2608051"></a><p>[<abbr class="abbrev">RFC3008</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span>. </span><span class="title"><i>Domain Name System Security (DNSSEC)
+<a name="id2608275"></a><p>[<abbr class="abbrev">RFC3008</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span>. </span><span class="title"><i>Domain Name System Security (DNSSEC)
Signing Authority</i>. </span><span class="pubdate">November 2000. </span></p>
</div>
<div class="biblioentry">
-<a name="id2608076"></a><p>[<abbr class="abbrev">RFC3090</abbr>] <span class="authorgroup"><span class="firstname">E.</span> <span class="surname">Lewis</span>. </span><span class="title"><i>DNS Security Extension Clarification on Zone Status</i>. </span><span class="pubdate">March 2001. </span></p>
+<a name="id2608300"></a><p>[<abbr class="abbrev">RFC3090</abbr>] <span class="authorgroup"><span class="firstname">E.</span> <span class="surname">Lewis</span>. </span><span class="title"><i>DNS Security Extension Clarification on Zone Status</i>. </span><span class="pubdate">March 2001. </span></p>
</div>
<div class="biblioentry">
-<a name="id2608103"></a><p>[<abbr class="abbrev">RFC3445</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Massey</span> and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>Limiting the Scope of the KEY Resource Record (RR)</i>. </span><span class="pubdate">December 2002. </span></p>
+<a name="id2608327"></a><p>[<abbr class="abbrev">RFC3445</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Massey</span> and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>Limiting the Scope of the KEY Resource Record (RR)</i>. </span><span class="pubdate">December 2002. </span></p>
</div>
<div class="biblioentry">
-<a name="id2608139"></a><p>[<abbr class="abbrev">RFC3655</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span> and <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span><span class="title"><i>Redefinition of DNS Authenticated Data (AD) bit</i>. </span><span class="pubdate">November 2003. </span></p>
+<a name="id2608363"></a><p>[<abbr class="abbrev">RFC3655</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span> and <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span><span class="title"><i>Redefinition of DNS Authenticated Data (AD) bit</i>. </span><span class="pubdate">November 2003. </span></p>
</div>
<div class="biblioentry">
-<a name="id2608176"></a><p>[<abbr class="abbrev">RFC3658</abbr>] <span class="authorgroup"><span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span><span class="title"><i>Delegation Signer (DS) Resource Record (RR)</i>. </span><span class="pubdate">December 2003. </span></p>
+<a name="id2608400"></a><p>[<abbr class="abbrev">RFC3658</abbr>] <span class="authorgroup"><span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span><span class="title"><i>Delegation Signer (DS) Resource Record (RR)</i>. </span><span class="pubdate">December 2003. </span></p>
</div>
<div class="biblioentry">
-<a name="id2608202"></a><p>[<abbr class="abbrev">RFC3755</abbr>] <span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Weiler</span>. </span><span class="title"><i>Legacy Resolver Compatibility for Delegation Signer (DS)</i>. </span><span class="pubdate">May 2004. </span></p>
+<a name="id2608426"></a><p>[<abbr class="abbrev">RFC3755</abbr>] <span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Weiler</span>. </span><span class="title"><i>Legacy Resolver Compatibility for Delegation Signer (DS)</i>. </span><span class="pubdate">May 2004. </span></p>
</div>
<div class="biblioentry">
-<a name="id2608229"></a><p>[<abbr class="abbrev">RFC3757</abbr>] <span class="authorgroup"><span class="firstname">O.</span> <span class="surname">Kolkman</span>, <span class="firstname">J.</span> <span class="surname">Schlyter</span>, and <span class="firstname">E.</span> <span class="surname">Lewis</span>. </span><span class="title"><i>Domain Name System KEY (DNSKEY) Resource Record
+<a name="id2608453"></a><p>[<abbr class="abbrev">RFC3757</abbr>] <span class="authorgroup"><span class="firstname">O.</span> <span class="surname">Kolkman</span>, <span class="firstname">J.</span> <span class="surname">Schlyter</span>, and <span class="firstname">E.</span> <span class="surname">Lewis</span>. </span><span class="title"><i>Domain Name System KEY (DNSKEY) Resource Record
(RR) Secure Entry Point (SEP) Flag</i>. </span><span class="pubdate">April 2004. </span></p>
</div>
<div class="biblioentry">
-<a name="id2608274"></a><p>[<abbr class="abbrev">RFC3845</abbr>] <span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Schlyter</span>. </span><span class="title"><i>DNS Security (DNSSEC) NextSECure (NSEC) RDATA Format</i>. </span><span class="pubdate">August 2004. </span></p>
+<a name="id2608498"></a><p>[<abbr class="abbrev">RFC3845</abbr>] <span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Schlyter</span>. </span><span class="title"><i>DNS Security (DNSSEC) NextSECure (NSEC) RDATA Format</i>. </span><span class="pubdate">August 2004. </span></p>
</div>
</div>
</div>
@@ -604,14 +604,14 @@
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2608315"></a>Other Documents About <acronym class="acronym">BIND</acronym>
+<a name="id2608539"></a>Other Documents About <acronym class="acronym">BIND</acronym>
</h3></div></div></div>
<p></p>
<div class="bibliography">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2608325"></a>Bibliography</h4></div></div></div>
+<a name="id2608549"></a>Bibliography</h4></div></div></div>
<div class="biblioentry">
-<a name="id2608327"></a><p><span class="authorgroup"><span class="firstname">Paul</span> <span class="surname">Albitz</span> and <span class="firstname">Cricket</span> <span class="surname">Liu</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym></i>. </span><span class="copyright">Copyright © 1998 Sebastopol, CA: O'Reilly and Associates. </span></p>
+<a name="id2608551"></a><p><span class="authorgroup"><span class="firstname">Paul</span> <span class="surname">Albitz</span> and <span class="firstname">Cricket</span> <span class="surname">Liu</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym></i>. </span><span class="copyright">Copyright © 1998 Sebastopol, CA: O'Reilly and Associates. </span></p>
</div>
</div>
</div>
@@ -648,7 +648,7 @@
</ul></div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2609722"></a>Prerequisite</h3></div></div></div>
+<a name="id2610978"></a>Prerequisite</h3></div></div></div>
<p>GNU make is required to build the export libraries (other
part of BIND 9 can still be built with other types of make). In
the reminder of this document, "make" means GNU make. Note that
@@ -657,7 +657,7 @@
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2609732"></a>Compilation</h3></div></div></div>
+<a name="id2610987"></a>Compilation</h3></div></div></div>
<pre class="screen">
$ <strong class="userinput"><code>./configure --enable-exportlib <em class="replaceable"><code>[other flags]</code></em></code></strong>
$ <strong class="userinput"><code>make</code></strong>
@@ -672,7 +672,7 @@ $ <strong class="userinput"><code>make</code></strong>
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2609756"></a>Installation</h3></div></div></div>
+<a name="id2609100"></a>Installation</h3></div></div></div>
<pre class="screen">
$ <strong class="userinput"><code>cd lib/export</code></strong>
$ <strong class="userinput"><code>make install</code></strong>
@@ -694,7 +694,7 @@ $ <strong class="userinput"><code>make install</code></strong>
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2609787"></a>Known Defects/Restrictions</h3></div></div></div>
+<a name="id2609131"></a>Known Defects/Restrictions</h3></div></div></div>
<div class="itemizedlist"><ul type="disc">
<li><p>Currently, win32 is not supported for the export
library. (Normal BIND 9 application can be built as
@@ -734,7 +734,7 @@ $ <strong class="userinput"><code>make</code></strong>
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2609864"></a>The dns.conf File</h3></div></div></div>
+<a name="id2610164"></a>The dns.conf File</h3></div></div></div>
<p>The IRS library supports an "advanced" configuration file
related to the DNS library for configuration parameters that
would be beyond the capability of the
@@ -752,14 +752,14 @@ $ <strong class="userinput"><code>make</code></strong>
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2609891"></a>Sample Applications</h3></div></div></div>
+<a name="id2610190"></a>Sample Applications</h3></div></div></div>
<p>Some sample application programs using this API are
provided for reference. The following is a brief description of
these applications.
</p>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2609899"></a>sample: a simple stub resolver utility</h4></div></div></div>
+<a name="id2610199"></a>sample: a simple stub resolver utility</h4></div></div></div>
<p>
It sends a query of a given name (of a given optional RR type) to a
specified recursive server, and prints the result as a list of
@@ -823,7 +823,7 @@ $ <strong class="userinput"><code>make</code></strong>
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2609990"></a>sample-async: a simple stub resolver, working asynchronously</h4></div></div></div>
+<a name="id2610290"></a>sample-async: a simple stub resolver, working asynchronously</h4></div></div></div>
<p>
Similar to "sample", but accepts a list
of (query) domain names as a separate file and resolves the names
@@ -856,7 +856,7 @@ $ <strong class="userinput"><code>make</code></strong>
consists of a single domain name. Example:
<div class="literallayout"><p><br>
  www.example.com<br>
-  mx.examle.net<br>
+  mx.example.net<br>
  ns.xxx.example<br>
</p></div>
</dd>
@@ -864,7 +864,7 @@ $ <strong class="userinput"><code>make</code></strong>
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2610316"></a>sample-request: a simple DNS transaction client</h4></div></div></div>
+<a name="id2610343"></a>sample-request: a simple DNS transaction client</h4></div></div></div>
<p>
It sends a query to a specified server, and
prints the response with minimal processing. It doesn't act as a
@@ -905,7 +905,7 @@ $ <strong class="userinput"><code>make</code></strong>
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2610380"></a>sample-gai: getaddrinfo() and getnameinfo() test code</h4></div></div></div>
+<a name="id2610612"></a>sample-gai: getaddrinfo() and getnameinfo() test code</h4></div></div></div>
<p>
This is a test program
to check getaddrinfo() and getnameinfo() behavior. It takes a
@@ -922,7 +922,7 @@ $ <strong class="userinput"><code>make</code></strong>
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2610395"></a>sample-update: a simple dynamic update client program</h4></div></div></div>
+<a name="id2610627"></a>sample-update: a simple dynamic update client program</h4></div></div></div>
<p>
It accepts a single update command as a
command-line argument, sends an update request message to the
@@ -1017,7 +1017,7 @@ $ <strong class="userinput"><code>sample-update -a sample-update -k Kxxx.+nnn+mm
</div>
<div class="sect3" lang="en">
<div class="titlepage"><div><div><h4 class="title">
-<a name="id2610936"></a>nsprobe: domain/name server checker in terms of RFC 4074</h4></div></div></div>
+<a name="id2610758"></a>nsprobe: domain/name server checker in terms of RFC 4074</h4></div></div></div>
<p>
It checks a set
of domains to see the name servers of the domains behave
@@ -1074,7 +1074,7 @@ $ <strong class="userinput"><code>sample-update -a sample-update -k Kxxx.+nnn+mm
</div>
<div class="sect2" lang="en">
<div class="titlepage"><div><div><h3 class="title">
-<a name="id2611000"></a>Library References</h3></div></div></div>
+<a name="id2611163"></a>Library References</h3></div></div></div>
<p>As of this writing, there is no formal "manual" of the
libraries, except this document, header files (some of them
provide pretty detailed explanations), and sample application
@@ -1099,5 +1099,6 @@ $ <strong class="userinput"><code>sample-update -a sample-update -k Kxxx.+nnn+mm
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/Bv9ARM.ch10.html b/doc/arm/Bv9ARM.ch10.html
index d25c0dd856ce..d3468ed9a258 100644
--- a/doc/arm/Bv9ARM.ch10.html
+++ b/doc/arm/Bv9ARM.ch10.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -140,5 +140,6 @@
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/Bv9ARM.html b/doc/arm/Bv9ARM.html
index ba198d6ddf9c..6b8a09e78a53 100644
--- a/doc/arm/Bv9ARM.html
+++ b/doc/arm/Bv9ARM.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -40,8 +40,9 @@
<div class="titlepage">
<div>
<div><h1 class="title">
-<a name="id2563175"></a>BIND 9 Administrator Reference Manual</h1></div>
-<div><p class="copyright">Copyright © 2004-2013 Internet Systems Consortium, Inc. ("ISC")</p></div>
+<a name="id2563180"></a>BIND 9 Administrator Reference Manual</h1></div>
+<div><p class="releaseinfo">BIND Version 9.9.6-P1</p></div>
+<div><p class="copyright">Copyright © 2004-2014 Internet Systems Consortium, Inc. ("ISC")</p></div>
<div><p class="copyright">Copyright © 2000-2003 Internet Software Consortium.</p></div>
</div>
<hr>
@@ -51,39 +52,39 @@
<dl>
<dt><span class="chapter"><a href="Bv9ARM.ch01.html">1. Introduction</a></span></dt>
<dd><dl>
-<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2564378">Scope of Document</a></span></dt>
-<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2564402">Organization of This Document</a></span></dt>
-<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2564541">Conventions Used in This Document</a></span></dt>
-<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2564723">The Domain Name System (<acronym class="acronym">DNS</acronym>)</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2563506">Scope of Document</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2563530">Organization of This Document</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2564626">Conventions Used in This Document</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2564807">The Domain Name System (<acronym class="acronym">DNS</acronym>)</a></span></dt>
<dd><dl>
-<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2564744">DNS Fundamentals</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2564846">Domains and Domain Names</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567184">Zones</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567260">Authoritative Name Servers</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567433">Caching Name Servers</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567563">Name Servers in Multiple Roles</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2564828">DNS Fundamentals</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2564931">Domains and Domain Names</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567268">Zones</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567345">Authoritative Name Servers</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567586">Caching Name Servers</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567648">Name Servers in Multiple Roles</a></span></dt>
</dl></dd>
</dl></dd>
<dt><span class="chapter"><a href="Bv9ARM.ch02.html">2. <acronym class="acronym">BIND</acronym> Resource Requirements</a></span></dt>
<dd><dl>
-<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567597">Hardware requirements</a></span></dt>
-<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567624">CPU Requirements</a></span></dt>
-<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567637">Memory Requirements</a></span></dt>
-<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567732">Name Server Intensive Environment Issues</a></span></dt>
-<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567742">Supported Operating Systems</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567682">Hardware requirements</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567708">CPU Requirements</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567789">Memory Requirements</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567816">Name Server Intensive Environment Issues</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567827">Supported Operating Systems</a></span></dt>
</dl></dd>
<dt><span class="chapter"><a href="Bv9ARM.ch03.html">3. Name Server Configuration</a></span></dt>
<dd><dl>
<dt><span class="sect1"><a href="Bv9ARM.ch03.html#sample_configuration">Sample Configurations</a></span></dt>
<dd><dl>
-<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2567774">A Caching-only Name Server</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2567995">An Authoritative-only Name Server</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2567995">A Caching-only Name Server</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2568011">An Authoritative-only Name Server</a></span></dt>
</dl></dd>
-<dt><span class="sect1"><a href="Bv9ARM.ch03.html#id2568018">Load Balancing</a></span></dt>
-<dt><span class="sect1"><a href="Bv9ARM.ch03.html#id2568372">Name Server Operations</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch03.html#id2568034">Load Balancing</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch03.html#id2568388">Name Server Operations</a></span></dt>
<dd><dl>
-<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2568377">Tools for Use With the Name Server Daemon</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2569430">Signals</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2568393">Tools for Use With the Name Server Daemon</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2569446">Signals</a></span></dt>
</dl></dd>
</dl></dd>
<dt><span class="chapter"><a href="Bv9ARM.ch04.html">4. Advanced DNS Features</a></span></dt>
@@ -92,64 +93,64 @@
<dt><span class="sect1"><a href="Bv9ARM.ch04.html#dynamic_update">Dynamic Update</a></span></dt>
<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch04.html#journal">The journal file</a></span></dt></dl></dd>
<dt><span class="sect1"><a href="Bv9ARM.ch04.html#incremental_zone_transfers">Incremental Zone Transfers (IXFR)</a></span></dt>
-<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2563997">Split DNS</a></span></dt>
-<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2564016">Example split DNS setup</a></span></dt></dl></dd>
+<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2569900">Split DNS</a></span></dt>
+<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2569918">Example split DNS setup</a></span></dt></dl></dd>
<dt><span class="sect1"><a href="Bv9ARM.ch04.html#tsig">TSIG</a></span></dt>
<dd><dl>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2570661">Generate Shared Keys for Each Pair of Hosts</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2570734">Copying the Shared Secret to Both Machines</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2570745">Informing the Servers of the Key's Existence</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2570781">Instructing the Server to Use the Key</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2570839">TSIG Key Based Access Control</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2570888">Errors</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2570420">Generate Shared Keys for Each Pair of Hosts</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2570562">Copying the Shared Secret to Both Machines</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2570572">Informing the Servers of the Key's Existence</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2570609">Instructing the Server to Use the Key</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2570666">TSIG Key Based Access Control</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2570715">Errors</a></span></dt>
</dl></dd>
-<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2570902">TKEY</a></span></dt>
-<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2570951">SIG(0)</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2570729">TKEY</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2570778">SIG(0)</a></span></dt>
<dt><span class="sect1"><a href="Bv9ARM.ch04.html#DNSSEC">DNSSEC</a></span></dt>
<dd><dl>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571156">Generating Keys</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571235">Signing the Zone</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571384">Configuring Servers</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2570915">Generating Keys</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571198">Signing the Zone</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571280">Configuring Servers</a></span></dt>
</dl></dd>
<dt><span class="sect1"><a href="Bv9ARM.ch04.html#dnssec.dynamic.zones">DNSSEC, Dynamic Zones, and Automatic Signing</a></span></dt>
<dd><dl>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2609113">Converting from insecure to secure</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2609150">Dynamic DNS update method</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563516">Fully automatic zone signing</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563756">Private-type records</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563794">DNSKEY rollovers</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563806">Dynamic DNS update method</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2569779">Automatic key rollovers</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2569805">NSEC3PARAM rollovers via UPDATE</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2569815">Converting from NSEC to NSEC3</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2569825">Converting from NSEC3 to NSEC</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2569837">Converting from secure to insecure</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2569875">Periodic re-signing</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2569884">NSEC3 and OPTOUT</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2609345">Converting from insecure to secure</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563643">Dynamic DNS update method</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563680">Fully automatic zone signing</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563920">Private-type records</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563957">DNSKEY rollovers</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563970">Dynamic DNS update method</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2564003">Automatic key rollovers</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2581915">NSEC3PARAM rollovers via UPDATE</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2581925">Converting from NSEC to NSEC3</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2581934">Converting from NSEC3 to NSEC</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2581947">Converting from secure to insecure</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2608745">Periodic re-signing</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2608755">NSEC3 and OPTOUT</a></span></dt>
</dl></dd>
<dt><span class="sect1"><a href="Bv9ARM.ch04.html#rfc5011.support">Dynamic Trust Anchor Management</a></span></dt>
<dd><dl>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2608556">Validating Resolver</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2608579">Authoritative Server</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2582096">Validating Resolver</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2582118">Authoritative Server</a></span></dt>
</dl></dd>
<dt><span class="sect1"><a href="Bv9ARM.ch04.html#pkcs11">PKCS #11 (Cryptoki) support</a></span></dt>
<dd><dl>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2609024">Prerequisites</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2636218">Building BIND 9 with PKCS#11</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2636343">PKCS #11 Tools</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2636374">Using the HSM</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2636572">Specifying the engine on the command line</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2636686">Running named with automatic zone re-signing</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2612122">Prerequisites</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2610030">Building BIND 9 with PKCS#11</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2612545">PKCS #11 Tools</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2612576">Using the HSM</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2636531">Specifying the engine on the command line</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2636577">Running named with automatic zone re-signing</a></span></dt>
</dl></dd>
-<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2571672">IPv6 Support in <acronym class="acronym">BIND</acronym> 9</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2571499">IPv6 Support in <acronym class="acronym">BIND</acronym> 9</a></span></dt>
<dd><dl>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571802">Address Lookups Using AAAA Records</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571892">Address to Name Lookups Using Nibble Format</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571766">Address Lookups Using AAAA Records</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571787">Address to Name Lookups Using Nibble Format</a></span></dt>
</dl></dd>
</dl></dd>
<dt><span class="chapter"><a href="Bv9ARM.ch05.html">5. The <acronym class="acronym">BIND</acronym> 9 Lightweight Resolver</a></span></dt>
<dd><dl>
-<dt><span class="sect1"><a href="Bv9ARM.ch05.html#id2571925">The Lightweight Resolver Library</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch05.html#id2571820">The Lightweight Resolver Library</a></span></dt>
<dt><span class="sect1"><a href="Bv9ARM.ch05.html#lwresd">Running a Resolver Daemon</a></span></dt>
</dl></dd>
<dt><span class="chapter"><a href="Bv9ARM.ch06.html">6. <acronym class="acronym">BIND</acronym> 9 Configuration Reference</a></span></dt>
@@ -157,58 +158,58 @@
<dt><span class="sect1"><a href="Bv9ARM.ch06.html#configuration_file_elements">Configuration File Elements</a></span></dt>
<dd><dl>
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#address_match_lists">Address Match Lists</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2573336">Comment Syntax</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2573235">Comment Syntax</a></span></dt>
</dl></dd>
<dt><span class="sect1"><a href="Bv9ARM.ch06.html#Configuration_File_Grammar">Configuration File Grammar</a></span></dt>
<dd><dl>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2573996"><span><strong class="command">acl</strong></span> Statement Grammar</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2573895"><span><strong class="command">acl</strong></span> Statement Grammar</a></span></dt>
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#acl"><span><strong class="command">acl</strong></span> Statement Definition and
Usage</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574186"><span><strong class="command">controls</strong></span> Statement Grammar</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574091"><span><strong class="command">controls</strong></span> Statement Grammar</a></span></dt>
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#controls_statement_definition_and_usage"><span><strong class="command">controls</strong></span> Statement Definition and
Usage</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574614"><span><strong class="command">include</strong></span> Statement Grammar</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574631"><span><strong class="command">include</strong></span> Statement Definition and
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574451"><span><strong class="command">include</strong></span> Statement Grammar</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574468"><span><strong class="command">include</strong></span> Statement Definition and
Usage</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574654"><span><strong class="command">key</strong></span> Statement Grammar</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574678"><span><strong class="command">key</strong></span> Statement Definition and Usage</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574769"><span><strong class="command">logging</strong></span> Statement Grammar</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574963"><span><strong class="command">logging</strong></span> Statement Definition and
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574628"><span><strong class="command">key</strong></span> Statement Grammar</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574651"><span><strong class="command">key</strong></span> Statement Definition and Usage</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574742"><span><strong class="command">logging</strong></span> Statement Grammar</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574868"><span><strong class="command">logging</strong></span> Statement Definition and
Usage</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2577174"><span><strong class="command">lwres</strong></span> Statement Grammar</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2577248"><span><strong class="command">lwres</strong></span> Statement Definition and Usage</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2577312"><span><strong class="command">masters</strong></span> Statement Grammar</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2577355"><span><strong class="command">masters</strong></span> Statement Definition and
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2577079"><span><strong class="command">lwres</strong></span> Statement Grammar</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2577153"><span><strong class="command">lwres</strong></span> Statement Definition and Usage</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2577285"><span><strong class="command">masters</strong></span> Statement Grammar</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2577329"><span><strong class="command">masters</strong></span> Statement Definition and
Usage</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2577377"><span><strong class="command">options</strong></span> Statement Grammar</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2577350"><span><strong class="command">options</strong></span> Statement Grammar</a></span></dt>
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#options"><span><strong class="command">options</strong></span> Statement Definition and
Usage</a></span></dt>
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#server_statement_grammar"><span><strong class="command">server</strong></span> Statement Grammar</a></span></dt>
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#server_statement_definition_and_usage"><span><strong class="command">server</strong></span> Statement Definition and
Usage</a></span></dt>
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#statschannels"><span><strong class="command">statistics-channels</strong></span> Statement Grammar</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2590101"><span><strong class="command">statistics-channels</strong></span> Statement Definition and
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2590471"><span><strong class="command">statistics-channels</strong></span> Statement Definition and
Usage</a></span></dt>
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#trusted-keys"><span><strong class="command">trusted-keys</strong></span> Statement Grammar</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2590408"><span><strong class="command">trusted-keys</strong></span> Statement Definition
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2590642"><span><strong class="command">trusted-keys</strong></span> Statement Definition
and Usage</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2590523"><span><strong class="command">managed-keys</strong></span> Statement Grammar</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2590757"><span><strong class="command">managed-keys</strong></span> Statement Grammar</a></span></dt>
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#managed-keys"><span><strong class="command">managed-keys</strong></span> Statement Definition
and Usage</a></span></dt>
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#view_statement_grammar"><span><strong class="command">view</strong></span> Statement Grammar</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2590965"><span><strong class="command">view</strong></span> Statement Definition and Usage</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2591192"><span><strong class="command">view</strong></span> Statement Definition and Usage</a></span></dt>
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#zone_statement_grammar"><span><strong class="command">zone</strong></span>
Statement Grammar</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2592813"><span><strong class="command">zone</strong></span> Statement Definition and Usage</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2592901"><span><strong class="command">zone</strong></span> Statement Definition and Usage</a></span></dt>
</dl></dd>
-<dt><span class="sect1"><a href="Bv9ARM.ch06.html#id2596432">Zone File</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch06.html#id2596587">Zone File</a></span></dt>
<dd><dl>
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#types_of_resource_records_and_when_to_use_them">Types of Resource Records and When to Use Them</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2598594">Discussion of MX Records</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2598681">Discussion of MX Records</a></span></dt>
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#Setting_TTLs">Setting TTLs</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2599209">Inverse Mapping in IPv4</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2599336">Other Zone File Directives</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2599541"><acronym class="acronym">BIND</acronym> Master File Extension: the <span><strong class="command">$GENERATE</strong></span> Directive</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2599297">Inverse Mapping in IPv4</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2599492">Other Zone File Directives</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2599765"><acronym class="acronym">BIND</acronym> Master File Extension: the <span><strong class="command">$GENERATE</strong></span> Directive</a></span></dt>
<dt><span class="sect2"><a href="Bv9ARM.ch06.html#zonefile_format">Additional File Formats</a></span></dt>
</dl></dd>
<dt><span class="sect1"><a href="Bv9ARM.ch06.html#statistics">BIND9 Statistics</a></span></dt>
@@ -217,41 +218,41 @@
<dt><span class="chapter"><a href="Bv9ARM.ch07.html">7. <acronym class="acronym">BIND</acronym> 9 Security Considerations</a></span></dt>
<dd><dl>
<dt><span class="sect1"><a href="Bv9ARM.ch07.html#Access_Control_Lists">Access Control Lists</a></span></dt>
-<dt><span class="sect1"><a href="Bv9ARM.ch07.html#id2604342"><span><strong class="command">Chroot</strong></span> and <span><strong class="command">Setuid</strong></span></a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch07.html#id2604498"><span><strong class="command">Chroot</strong></span> and <span><strong class="command">Setuid</strong></span></a></span></dt>
<dd><dl>
-<dt><span class="sect2"><a href="Bv9ARM.ch07.html#id2604491">The <span><strong class="command">chroot</strong></span> Environment</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch07.html#id2604551">Using the <span><strong class="command">setuid</strong></span> Function</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch07.html#id2604647">The <span><strong class="command">chroot</strong></span> Environment</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch07.html#id2604707">Using the <span><strong class="command">setuid</strong></span> Function</a></span></dt>
</dl></dd>
<dt><span class="sect1"><a href="Bv9ARM.ch07.html#dynamic_update_security">Dynamic Update Security</a></span></dt>
</dl></dd>
<dt><span class="chapter"><a href="Bv9ARM.ch08.html">8. Troubleshooting</a></span></dt>
<dd><dl>
-<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2604631">Common Problems</a></span></dt>
-<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch08.html#id2604636">It's not working; how can I figure out what's wrong?</a></span></dt></dl></dd>
-<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2604648">Incrementing and Changing the Serial Number</a></span></dt>
-<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2604665">Where Can I Get Help?</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2604923">Common Problems</a></span></dt>
+<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch08.html#id2604929">It's not working; how can I figure out what's wrong?</a></span></dt></dl></dd>
+<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2604940">Incrementing and Changing the Serial Number</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2604957">Where Can I Get Help?</a></span></dt>
</dl></dd>
<dt><span class="appendix"><a href="Bv9ARM.ch09.html">A. Appendices</a></span></dt>
<dd><dl>
-<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2604932">Acknowledgments</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2605019">Acknowledgments</a></span></dt>
<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch09.html#historical_dns_information">A Brief History of the <acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym></a></span></dt></dl></dd>
-<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2605104">General <acronym class="acronym">DNS</acronym> Reference Information</a></span></dt>
+<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2605259">General <acronym class="acronym">DNS</acronym> Reference Information</a></span></dt>
<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch09.html#ipv6addresses">IPv6 addresses (AAAA)</a></span></dt></dl></dd>
<dt><span class="sect1"><a href="Bv9ARM.ch09.html#bibliography">Bibliography (and Suggested Reading)</a></span></dt>
<dd><dl>
<dt><span class="sect2"><a href="Bv9ARM.ch09.html#rfcs">Request for Comments (RFCs)</a></span></dt>
<dt><span class="sect2"><a href="Bv9ARM.ch09.html#internet_drafts">Internet Drafts</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2608315">Other Documents About <acronym class="acronym">BIND</acronym></a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2608539">Other Documents About <acronym class="acronym">BIND</acronym></a></span></dt>
</dl></dd>
<dt><span class="sect1"><a href="Bv9ARM.ch09.html#bind9.library">BIND 9 DNS Library Support</a></span></dt>
<dd><dl>
-<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2609722">Prerequisite</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2609732">Compilation</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2609756">Installation</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2609787">Known Defects/Restrictions</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2609864">The dns.conf File</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2609891">Sample Applications</a></span></dt>
-<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2611000">Library References</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2610978">Prerequisite</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2610987">Compilation</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2609100">Installation</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2609131">Known Defects/Restrictions</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2610164">The dns.conf File</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2610190">Sample Applications</a></span></dt>
+<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2611163">Library References</a></span></dt>
</dl></dd>
</dl></dd>
<dt><span class="reference"><a href="Bv9ARM.ch10.html">I. Manual pages</a></span></dt>
@@ -348,5 +349,6 @@
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/Bv9ARM.pdf b/doc/arm/Bv9ARM.pdf
index ef343561a6f1..08d8b20ccbd0 100644
--- a/doc/arm/Bv9ARM.pdf
+++ b/doc/arm/Bv9ARM.pdf
@@ -1413,19 +1413,19 @@ endobj
<< /S /GoTo /D [946 0 R /FitH ] >>
endobj
949 0 obj <<
-/Length 240
+/Length 280
/Filter /FlateDecode
>>
stream
-xÚ•OKA Åïó)rl›N2Éü9ZªRA¡27ñ°´[)¸[ºÖïïlWË‚^$0ïý˜y[Š *Z—BTK
-ÛÖXx+Þ½¡oFÔ¡Šsåð‡[ LÁ+T\@1M±_8±Eo=C¥BÈÌ~À—Ù,C yÄŠƒÂ•Ë»—Ùrý´š——ì,ãf׺Ãǹ¯ÏÇ~”ž›}Ó7ݶ™¿æ a$/¾äKc¼\óXwŸõûà›Û| §â1'p®äðqH'`Ô ð3‹zšüßÚ±y±n VG³1°™ž07l(%tî[þM^Xúendstream
+xÚ‘MOÃ0 †ïý>n‡z±çãÈ4@C1Tí‚8L[‡*ÑVëÆÿÇ]ÇT)vìGök‡Àè!ˆ‚Æ&!9CÛ:3ð®¹ûŒ.Œ‹â¬ÕÇÙÜQÀ¼@Î. 5dÇØ/œØ 7ž!ÅÙîñy‘Í†Š= J W®Ø½Næ˧Å4g1“4˜›]]5ÕñÔmNm7„^Ê}ٕͶœ¾@Ž‘¼óª/aŒñ\æqÓ|n>ú¼¶eeÐ:Õ¤msöh½W¥:vHñgÛõ”ˆ&ew¬Úæ"úü™újÙmqUœÇHœÀ2Ž
+`”3ñm5z­Ó˜áÒðlY,Úl•ÁjDxÂl¿ð¨ Wÿÿµ/•¹k6endstream
endobj
946 0 obj <<
/Type /Page
/Contents 949 0 R
/Resources 948 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 955 0 R
+/Parent 958 0 R
>> endobj
947 0 obj <<
/Type /XObject
@@ -1433,19 +1433,19 @@ endobj
/FormType 1
/PTEX.FileName (./isc-logo.pdf)
/PTEX.PageNumber 1
-/PTEX.InfoDict 956 0 R
+/PTEX.InfoDict 959 0 R
/Matrix [1.00000000 0.00000000 0.00000000 1.00000000 0.00000000 0.00000000]
/BBox [0.00000000 0.00000000 612.00000000 792.00000000]
/PieceInfo <<
-/Illustrator 957 0 R
+/Illustrator 960 0 R
>>
/Resources <<
/ColorSpace <<
-/CS0 958 0 R
+/CS0 961 0 R
>>/Properties <<
-/MC0 959 0 R
+/MC0 962 0 R
>>/ExtGState <<
-/GS0 960 0 R
+/GS0 963 0 R
>>>>
/Length 843
/Filter /FlateDecode
@@ -1461,7 +1461,7 @@ BqÕ•l9uš
!=§ ¨Œø†vGc £I#/'~<1‚ÀÔRPy±´ýl1½Ͷw1 чd }¡þa
Ë9b :žÎÞF" ‹>64”~0IGD˜Ë Ø°$ÙtMâ¯%Z½Gð¾¥Úñ§aÑÌ‘ I¼ ý—/øýzü+À
endobj
-956 0 obj
+959 0 obj
<<
/CreationDate (D:20100303120319-08'00')
/Creator (Adobe Illustrator CS3)
@@ -1470,24 +1470,24 @@ endobj
/Title (ISC_logo_only_RGB)
>>
endobj
-957 0 obj
+960 0 obj
<<
-/Private 961 0 R
+/Private 964 0 R
/LastModified (D:20100412113400-07'00')
>>
endobj
-958 0 obj
-[/ICCBased 962 0 R]
+961 0 obj
+[/ICCBased 965 0 R]
endobj
-959 0 obj
+962 0 obj
<<
-/Intent 963 0 R
-/Usage 964 0 R
+/Intent 966 0 R
+/Usage 967 0 R
/Name (Layer 1)
/Type /OCG
>>
endobj
-960 0 obj
+963 0 obj
<<
/OPM 1
/BM /Normal
@@ -1501,22 +1501,22 @@ endobj
/SA true
>>
endobj
-961 0 obj
+964 0 obj
<<
/RoundtripVersion 13
/ContainerVersion 11
/CreatorVersion 13
-/AIMetaData 965 0 R
-/AIPrivateData1 966 0 R
-/AIPrivateData2 967 0 R
-/AIPrivateData3 968 0 R
-/AIPrivateData4 969 0 R
-/AIPrivateData5 970 0 R
+/AIMetaData 968 0 R
+/AIPrivateData1 969 0 R
+/AIPrivateData2 970 0 R
+/AIPrivateData3 971 0 R
+/AIPrivateData4 972 0 R
+/AIPrivateData5 973 0 R
/NumBlock 5
/RoundtripStreamType 1
>>
endobj
-962 0 obj
+965 0 obj
<<
/Length 281
/Filter /FlateDecode
@@ -1527,10 +1527,10 @@ H‰b``2ptqre``ÈÍ+)
rwRˆˆŒR`?ÏÀÆÀÌ
ò‹KRS€j!îAˆBPˆi
endobj
-963 0 obj
+966 0 obj
[/View/Design]
endobj
-964 0 obj
+967 0 obj
<<
/CreatorInfo <<
/Subtype /Artwork
@@ -1538,21 +1538,21 @@ endobj
>>
>>
endobj
-965 0 obj
+968 0 obj
<<
/Length 981
>>
stream
%!PS-Adobe-3.0 %%Creator: Adobe Illustrator(R) 13.0 %%AI8_CreatorVersion: 13.0.2 %%For: (Brian Reid) () %%Title: (ISC_logo_only_RGB.ai) %%CreationDate: 4/12/10 11:34 AM %%BoundingBox: 247 367 366 413 %%HiResBoundingBox: 247.0869 367.5654 365.0859 412.583 %%DocumentProcessColors: Cyan Magenta Yellow Black %AI5_FileFormat 9.0 %AI12_BuildNumber: 434 %AI3_ColorUsage: Color %AI7_ImageSettings: 0 %%RGBProcessColor: 0 0.658824 0.8 (ISC logo blue) %%+ 0.372549 0.376471 0.384314 (PANTONE 425 U) %%+ 0 0 0 ([Registration]) %AI3_TemplateBox: 306.5 395.5 306.5 395.5 %AI3_TileBox: 18 33.1201 594 786.96 %AI3_DocumentPreview: None %AI5_ArtSize: 612 792 %AI5_RulerUnits: 3 %AI9_ColorModel: 1 %AI5_ArtFlags: 0 0 0 1 0 0 0 0 0 %AI5_TargetResolution: 800 %AI5_NumLayers: 1 %AI9_OpenToView: -381 793 0.92 1268 743 26 0 0 117 75 0 0 1 1 1 0 1 %AI5_OpenViewLayers: 7 %%PageOrigin:0 0 %AI7_GridSettings: 72 8 72 8 1 0 0.8 0.8 0.8 0.9 0.9 0.9 %AI9_Flatten: 1 %AI12_CMSettings: 00.MS %%EndComments endstream
endobj
-966 0 obj
+969 0 obj
<<
/Length 11082
>>
stream
%%BoundingBox: 247 367 366 413 %%HiResBoundingBox: 247.0869 367.5654 365.0859 412.583 %AI7_Thumbnail: 128 52 8 %%BeginData: 10932 Hex Bytes %0000330000660000990000CC0033000033330033660033990033CC0033FF %0066000066330066660066990066CC0066FF009900009933009966009999 %0099CC0099FF00CC0000CC3300CC6600CC9900CCCC00CCFF00FF3300FF66 %00FF9900FFCC3300003300333300663300993300CC3300FF333300333333 %3333663333993333CC3333FF3366003366333366663366993366CC3366FF %3399003399333399663399993399CC3399FF33CC0033CC3333CC6633CC99 %33CCCC33CCFF33FF0033FF3333FF6633FF9933FFCC33FFFF660000660033 %6600666600996600CC6600FF6633006633336633666633996633CC6633FF %6666006666336666666666996666CC6666FF669900669933669966669999 %6699CC6699FF66CC0066CC3366CC6666CC9966CCCC66CCFF66FF0066FF33 %66FF6666FF9966FFCC66FFFF9900009900339900669900999900CC9900FF %9933009933339933669933999933CC9933FF996600996633996666996699 %9966CC9966FF9999009999339999669999999999CC9999FF99CC0099CC33 %99CC6699CC9999CCCC99CCFF99FF0099FF3399FF6699FF9999FFCC99FFFF %CC0000CC0033CC0066CC0099CC00CCCC00FFCC3300CC3333CC3366CC3399 %CC33CCCC33FFCC6600CC6633CC6666CC6699CC66CCCC66FFCC9900CC9933 %CC9966CC9999CC99CCCC99FFCCCC00CCCC33CCCC66CCCC99CCCCCCCCCCFF %CCFF00CCFF33CCFF66CCFF99CCFFCCCCFFFFFF0033FF0066FF0099FF00CC %FF3300FF3333FF3366FF3399FF33CCFF33FFFF6600FF6633FF6666FF6699 %FF66CCFF66FFFF9900FF9933FF9966FF9999FF99CCFF99FFFFCC00FFCC33 %FFCC66FFCC99FFCCCCFFCCFFFFFF33FFFF66FFFF99FFFFCC110000001100 %000011111111220000002200000022222222440000004400000044444444 %550000005500000055555555770000007700000077777777880000008800 %000088888888AA000000AA000000AAAAAAAABB000000BB000000BBBBBBBB %DD000000DD000000DDDDDDDDEE000000EE000000EEEEEEEE0000000000FF %00FF0000FFFFFF0000FF00FFFFFF00FFFFFF %524C45FD1F52285252A8FD04FFFD05A8FFFFFFA87DFD4F52285252522852 %525228525252285252522852525228525252285252522852277DA8FFFFA8 %7D7D525227FD04527DA8FFFFA85252275252522852525228525252285252 %522852525228525252285252522852525228525252285252522852525228 %52525228525252285252522852525228525252285252522852525228FD21 %52A8FFFF7D7D525227FD0752275252A8FFFF7DFD215227FD2A522E522752 %2E5227522E5227522E5227522E5227522E5227522E5227527DFFFFA85252 %27522E5227522E5227522E5227522752A8FF7D5227522E5227522E522752 %2E5227522E5227522E5227522E5227522E522752277D7D7D275227522E52 %27522E5227522E5227522E5227522E5227522E5227522E5227522E522752 %2E5227FD1A52277DA8FFA87D2EFD11522E527DFFA853FD1D52A8FFFFFF7D %28FD285228525252285252522852525228525252285252522852277DFFFF %7D522752525228525252285252522852525228525252275252FFA8522752 %285252522852525228525252285252522852525228525252277DFFA852A8 %FF5227525252285252522852525228525252285252522852525228525252 %285252522852525228FD1852277DFFFFFD1B52FFA8FD1A527DFFA8275252 %FF7DFD265227522E5227522E5227522E5227522E5227522E522752277DFF %FF525227522E5227522E5227522E5227522E5227522E5227522E52275252 %FFA852275227522E5227522E5227522E5227522E5227522E522752A8A827 %522E527DA9275227522E5227522E5227522E5227522E5227522E52275227 %5227522E5227522E5227522EFD17527DFFA8FD1E527DFFA8FD17527DFFFD %0452287DFFFD155228FD075228FD08522852525228525252285252522852 %5252285252522852527D2752525228525252285252522852525228525252 %2852525228525252285252527DFF7D522852525228525252285252522852 %525228FD0452FF7D5228FD0452FF52522852525228525252285252522752 %2752527DA1A8A8FFCACFA8CAA17D5252275228FD3C52A8FFFD145228A8FF %53FD0652FFA82EFD0C527D7DCAFD04FFAFAF85AF85AFAFFFFFFFA87DFD05 %522E5227522E5227522E5227522E5227522E5227522E5227522E5227522E %5227522E5227522E5227522E5227522E5227522E5227522E5227522752A8 %FF275227522E5227522E5227522E5227522E522752FFA827522E5227522E %FF7D522E5227522E522752275252A8FFFFAFAF603CFD041413FD04143C60 %AFFFFF535227FD3A52277DFFA827FD11527DFFFD0852A8FFFD0952A8CFFF %FFAF3C3D1414141A141A141A141A141A14141461AFFFA8FD045228525252 %285252522852525228525252285252522852525228525252285252522852 %5252285252522852525228525252285252522852525227A8FF5227525252 %2852525228525252285252522EFFA85227525252285228A87D5252522852 %27527DFFFFAF603CFD07141A1414141A1414141AFD041460FFA8FD3D52FF %A8FD10527DFF7DFD0F527DFFFFA9611414141A141A141A141A141A141A14 %1A141A141A141A14143CFFA827522E5227522E5227522E5227522E522752 %2E5227522E5227522E5227522E5227522E5227522E5227522E5227522E52 %27522E5227522E5227522E527DFF525227522E5227522E5227522E522752 %A8FF27522E5227522E5227522852275252A8FFFF3C1413FD191436FFFD3C %5259FFA828FD0E52FF7DFD0D527DFFFF8B1414141A141A141A141A141A14 %1A141A141A141A141A141A141A141A141460285252522852525228525252 %285252522852525228525252275227522752275227525252285252522852 %52522852525228525252285252522852525227A8FF7D2752525228525252 %2852525227A8FF52275252522852525228522752A8FFA93CFD05141A1414 %141A1414141A1414141A1414141A1414141A1414141A1414FD1552285252 %7D527D597D527DFD065227FD1852FFA8FD0D52FFFFFD0A52277DFFFF601A %141A141A141A141A141A141A141A141A141A141A141A141A141A141A141A %141A142E5227522E5227522E5227522E5227522752527D7DA8A8FD09FFA8 %FFA8A87D532852275227522E5227522E5227522E5227522E5227522E527D %FF525227522E5227522E52275252FF7D522E5227522E522752277DFFFF36 %FD2314FD0E527D7DFD07FFA8A87DA87DA87DFD04A8FD05FFA87DFD15527D %FFA827FD0A52A8FF7DFD0952A8FFAF1414141A141A141A141A141A141A14 %1A141A141A141A141A141A141A141A141A141A141A145252285252522852 %525227527DA8FFFFFFA87D7D52522752275227522752275227522752527D %A8FFFFFFA87E52522752525228525252285252522852525227A8FF522752 %5252285252522752FFA8275252522852525227A8FF85FD05141A1414141A %1414141A1414141A1414141A1414141A1414141A1414141A1414141AFD07 %52275253A8FFFFFFA8FD045227FD0F522EFD04527D7DFFFFFFA87DFD1052 %7DFF7DFD0A52FF7DFD0852A8FF8B1414141A141A141A141A141A141A141A %141A141A141A141A141A141A141A141A141A141A141A1427522E52275227 %7DA8FFFFA85252275227522E5227522E5227522E5227522E5227522E5227 %522E52275227527DFFFFFF7D52275227522E5227522E5227522752A8A827 %5227522E52275227A8FF5227522752525227A8FF6113FD2714FD0652A8FF %FF7D7D28FD22527DA8FFFF7DFD0C5227A8FF7DFD0852A8FFFD06522EA8FF %61141A141A141A141A141A141A141A141A141A141A141A141A141A141A14 %1A141A141A141A141A141A14285227527DFFFF7D52522752285252522852 %525228525252285252522852525228525252285252522852525228522752 %52FFFFA8525228522852525228FD0452FF7D5228525252285252FF7D5252 %52285227A8FF611414141A1414141A1414141A1414141A1414141A141414 %1A1414141A1414141A1414141A1414141A141452277DFFFFA87D28FD2952 %287DFFFF7EFD0B52A8FFFD065227A8FF7D2752525227A8FF8B141A141A14 %1A141A141A141A141A141A141A141A141A141A141A141A141A141A141A14 %1A141A141A141A1428A8FFFF525227522E5227522E5227522E5227522E52 %27522E5227522E5227522E5227522E5227522E5227522E5227522E522752 %7DFFA87D275227522E522752277EFF52275227522852A8FF52522752277D %FF8BFD121413FD0F1413FD0914FFFFA8FD3352FFFFA8FD0952FF7DFD0652 %FFA8FD04527DFFAF141A141A141A141A141A141A141A141A141A14613C3C %141A141A141A141A141A141A143D3C3C141A141A141A14FF7D2752525228 %525252285252522852525228525252285252522852525228525252285252 %522852525228525252285252522852525227A8FFA8FD045228525252A8A8 %27522852277DFF7D27522752A8FFFD051461A9AF848B1414141A141436AF %AFFFFFFFAFAF36FD04141A14141461A9FFAFFFAFAF601A1414141A7D2EFD %3552277DFFFFFD0752A8FFFD05527DFFFD04527DFF3C14141A141484FFFF %FFAF1A141A141A85FD09FF841A141A141A14AFFD08FF841A141A1427522E %5227522E5227522E5227522E5227522E5227522E5227522E5227522E5227 %522E5227522E5227522E5227522E5227522E5227522E52277DA8FF52522E %5227527DFF52522E5227FFA852275252FF60FD061485FFFFFFAFFD041460 %FD0BFF36FD0414AFFD0AFF60141414FD3A5253FFFF7DFD04527DFFA85252 %527DFFA8285252FFAF1A141A141A141A84FFFFFFAF3D141A14FD05FF603D %60FD04FFAF141A1461FD04FFA96136AFFD04FF141A142852525228525252 %285252522852525228525252285252522852525228525252285252522852 %52522852525228525252285252522852525228522752A8FF5252285252FF %A8FD0452FF7D5227A8FF3C141AFD051485FFFFFFAF14141460FD04FF3614 %141460FFFFFFA91A141484FFFFFFA91A141414FD04FF611414FD3D52A8FF %FD0452A8FF525228A8FF7D277DFF8B141A141A141A141A85FFFFFFAF1A14 %1A60FD04FF3C141A1461FD04FF141A14FD04FF8B141A141AAFFFFFFF601A %142E5227522E5227522E5227522E5227522E5227522E5227522E5227522E %5227522E5227522E5227522E5227522E5227522E5227522E5227522E5227 %522752A8FF5252277DFF7D2752A8FF2752A8FFFD08141385FFFFFFAF1414 %1361FD04FF36FD04148584856014133CFD04FF60FD0414FD04FF851314FD %3D52287DFFFF525252FF7D5252FFA8527DFF3C1A141A141A141A141A85FF %FFFFAF1A141A60FD04FFAF141A141A141A141A141A3CFD04FF61141A141A %3C616061361A145252285252522852525228525252285252522852525228 %525252285252522852525228525252285252522852525228525252275252 %522752525228525252277DFF7E2752FFA82753FF7E27FFA914141A141414 %1A1414148BFFFFFFAF1414143CAFFD04FFAFFD091461FD04FF3614141AFD %07141AFD2B522852285227FD075227FD075227A8FF7D27FFA8527DFF7D7D %FF3D141A141A141A141A141484FFFFFFA91A141A1485FD06FF603C141A14 %1A14143CFD04FF61141A141A141A141A141A1427522E5227522E5227522E %5227522E5227522E5227522E5227522E5227522E5227522E522752275227 %FD04527D7DA8A8FFA8FFA8FFA8A87D7D52522752275227FFA8527DFF277D %FF52A8AF13FD0A1485FFFFFFAFFD0414138BFD06FFA860FD05143CFD04FF %36FD0B14FD2852A8A8FD07FFA8FFA8FFA8FD06FFA87D5227527DFF7D7DFF %7DA8FF7DFF3C1A141A141A141A141A141A84FFFFFFAF3D141A141A148BFD %07FF8B141A141A3CFD04FF61141A141A141A141A141A1428525252285252 %522852525228525252285252522852525228525252285252522752275252 %A8A8FFFFFFA8A87D7DFD065227FD04527D7DA8FFFFA87D2752A8FF52FF7D %A8A8CAA914141A1414141A1414141A1485FFFFFFAFFD071460A8FD06FF8B %1414143CFD04FF36FD04141A1414141A1414FD2252A8FD04FF7D7D525228 %5227FD0B52275252527DFFFFFF5253FFA8A8A8FFA8FF61141A141A141A14 %1A141A141A85FFFFFFAF1A141A141A141A141A60FD06FF85141A3CFD04FF %61141A141A141A141A141A142E5227522E5227522E5227522E5227522E52 %27522E5227522E5227522752277DA8FFFFA859522752275227522E522752 %2E5227522E5227522E5227522752277DA8FF7DA8FFFFA8FFFFAFFD0C1413 %85FFFFFFAFFD061413FD0414AFFD04FFA9141360FD04FF36FD051413FD05 %14FD1D527DFFFFFF7D7DFD1E52A8FFA8FD05FF601A141A141A141A141A14 %1A141A85FFFFFFAF1A141A143D363D141A141A14FD05FF3C1A3CFD04FF61 %141A141A60AF85AF601A1452522852525228525252285252522852525228 %52525228525252277DFFFFA87D2E52275252522852525228525252285252 %52285252522852525228525252285228527DFD06FF3C141A1414141A1414 %141A1414148BFFFFFFAF141414AFFFFFAF8BFD04143CFD04FF3C143CFD04 %FF60FD04148BFFFFFFAF1414FD1752285259FFFFA9525227FD2352A8FD04 %FFAF141A141A141A141A141A141A141484FFFFFFA91A141484FFFFFFA91A %141A1461FD04FF3C1414FD04FF8B141A141AA9FFFFFF85141427522E5227 %522E5227522E5227522E5227522E52275227527DFFA87D27522E5227522E %5227522E5227522E5227522E5227522E5227522E5227522E5227522E5227 %522752A8FFFFFF60FD0E1485FFFFFFAF14141485FD04FFFD041436FD04FF %3C141484FFFFFFA8FD0414FD04FF611414FD16527DFFFF7D5228FD275227 %A8FFFFFF3D141A141A141A141A141A141A141A84FFFFFFAF3D141460FD04 %FFAF363C3CFD05FF141A1461FD04FF853C148BFD04FF3C1A142752275227 %52275227522752275227522752275227A8FFA82852275227522752275227 %522752275227522752275227522752275227522752275227522752275227 %52275252FFFFAFFD0F1485FFFFFFAFFD0414A8FD05FFAFFD05FF36FD0414 %AFFD0AFF841414147D527D527D527D527D527D527D527D527D527D52A8FF %FF527D527D527D527D527D527D527D527D527D527D527D527D527D527D52 %7D527D527D527D527D527D527D527D527DA8FF853C363D3C3C363D3C3C36 %3D3C3C363D85FFFFFFAF3D363D3685FD0AFFAF3C363D3C3C60FD0AFF6136 %3D3CFD16FFA8FD49FFAFFD11FFAFFD09FFAFFFFFFF %%EndData endstream
endobj
-967 0 obj
+970 0 obj
<<
/Length 65536
>>
@@ -1826,7 +1826,7 @@ sÓ ·ÓíÑ·OÒ„ŸuMÊ’ÏyÒÁQÊ—*V€)-z=¦Hèªmƈœ~ÅñÓ×z…Sý[t¸c&4 ŽªªAj^råº;ņÜ(cçç
Dx^QÜ×}Ì
˜ØyY‰Ÿ‹© ¨zŽ…N¬V¥%™­‚¨™@“£=HU˜ü¢³l0¼Tq_PIÐ/u,dÆö¶fý"íŒØ¾MMæu [endstream
endobj
-968 0 obj
+971 0 obj
<<
/Length 65536
>>
@@ -2068,7 +2068,7 @@ qlÞ¯­ò×âô`>
¶“¬ûVG=# [ül&wJ΂fkíY”&{öñß1øÀ ÛÄ%'DSì
 F?؆Fß®U E2,„Ò -[‰Ðð~Eô׈bˆ¨<Þë‹uAhÜš:®—Ú[ɬëxÏ*}ñ
endobj
-969 0 obj
+972 0 obj
<<
/Length 65536
>>
@@ -2291,7 +2291,7 @@ uALŽk‹Š=ŽÉÀÇš?éì•ëðå0ƒ¨Ua¦7S“«ÙŽ®&éÀ­Ó˜çÈî¹m(‚4„Ћz35Ãùd2pnSø׸®÷—fSµNP™š
]×g1ͼ‘ôAÚF¥5³ò(ª®Í
endobj
-970 0 obj
+973 0 obj
<<
/Length 53114
>>
@@ -2495,33 +2495,33 @@ endobj
/D [946 0 R /XYZ 85.0394 769.5949 null]
>> endobj
948 0 obj <<
-/Font << /F21 954 0 R >>
+/Font << /F21 954 0 R /F22 957 0 R >>
/XObject << /Im1 947 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-973 0 obj <<
-/Length 1075
+976 0 obj <<
+/Length 1076
/Filter /FlateDecode
>>
stream
-xÚ¥V]ªH}Ÿ_Áã˜hÛÐÀ¾1ˆÊÁ¼“ÍÞ}`G’1Â\3ÿ~«éD'“Ín|èÓtYuêTõÑ0üˆfpÄmjk¦­#CÛ¾?`íÖDÙèC†ÎL¾XèF–…1YàíÚêÎÚ°38
-¥Œ @E‰0õ=µøì§K‰boáÄ3¹-áàftXœT¨IÓtÙRü‚|è›™.n‚û«uà·¹|Å$šËqåÅîF¦þè<ùŸþÙ'*Øqdë–9|—$¨å ÇPñõ~xàO^öŒZ½žõÀwž…çQÜFUᓵçúN0n5Ž=·á8ncÞ}MŒøPL7
-ï °Ê¡³r·Á«ÏKGDI“‹Ûê%› ùÚI?£•J,Jz‘%Œà`¼)ð&ñÚܤû¦
-ÅùîR–êüu‹zp9¹Ù[ͱȺÏQvקŽtÏ„{:$v¨ëÓoÓéår
-£¢Ú¢²!õ:½»µÕ[—H¼fÿõK÷ùõŸkendstream
+xÚµV]“ª8}Ÿ_ÁãX5Æ|ð•}c•-ðNmíÝFq¤jF,a®5ÿ~;$€¨;µ/[>¤“»OŸî$ Ãh†‰LN¹fq˜Úæãko°7
+£ :c0¹³;Ö™ŽtbQm † Þ.Q7hË@6ábäÈd” ðsú0™QªqÄMjjéN³1²1fZ‡J·=ºåñëT¼íëÑßéïš‘…9BL `#6&3¢_xSd™ÜÒƸŸ¨„‚Š U‘¦
+©ÀNHCE‰0õ=µù⧠iÅÞ܉§òX Îè°8©P?’ÐtÑR¼C>tƒõÔçWÁýå*ðÛ\î1‰fr\z±»€‘¥?:Ï~à§ö‰
+v&âºm Ÿùiè% j9È1T|½ø“„=£V¯gE=ðç@Ù³(n£ªðÉÊs}'xj5Ž=·áØÞ¸á͸h€`d^Ý×Q˜x¬xT¥3ï´¸>Ø}Y8"JšDXÜV/YÍj'ý,Ž–*±(éE”0‚‹ñªÀëÄks“î› ù@G‚ÒÉSËÃ.Ž‡š;íè¦~K i§±3Ð(ôæ?÷B×FŠÏ‚+|OP› Ë-›11 òÖÉeHå؉ý¤“"Z§C&Ñk`zŒûcÑSÐgPVqð9#CW^ ³tú|fß™›§„n™pAà•|û”tàñúö)¡” bÙ¼ó)ˆÞûÀ¸~èš4)…ãÆÌ¡þÜÀ
+¼ÏNàHy©åýתïMdëJ¡8ßžËRÝ¿nQ'7{/à¡9YãA7à»”Ýô©#Ý3ញíëúøÛdr>Ÿ…¨¨6¨lH½Mn^mõÑË $>kÿó'ï?ôr¡endstream
endobj
-972 0 obj <<
+975 0 obj <<
/Type /Page
-/Contents 973 0 R
-/Resources 971 0 R
+/Contents 976 0 R
+/Resources 974 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 955 0 R
+/Parent 958 0 R
>> endobj
-974 0 obj <<
-/D [972 0 R /XYZ 56.6929 794.5015 null]
+977 0 obj <<
+/D [975 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-971 0 obj <<
-/Font << /F22 977 0 R /F14 980 0 R >>
+974 0 obj <<
+/Font << /F22 957 0 R /F14 980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
983 0 obj <<
@@ -2542,7 +2542,7 @@ endobj
/Contents 983 0 R
/Resources 981 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 955 0 R
+/Parent 958 0 R
/Annots [ 986 0 R 987 0 R 988 0 R 989 0 R 990 0 R 991 0 R 992 0 R 993 0 R 994 0 R 995 0 R 996 0 R 997 0 R 998 0 R 999 0 R 1000 0 R 1001 0 R 1002 0 R 1003 0 R 1004 0 R 1005 0 R 1006 0 R 1007 0 R 1008 0 R 1009 0 R 1010 0 R 1011 0 R 1012 0 R 1013 0 R 1014 0 R 1015 0 R 1016 0 R 1017 0 R 1018 0 R 1019 0 R 1020 0 R 1021 0 R 1022 0 R 1023 0 R 1024 0 R 1025 0 R 1026 0 R 1027 0 R 1028 0 R 1029 0 R 1030 0 R 1031 0 R 1032 0 R 1033 0 R 1034 0 R 1035 0 R ]
>> endobj
986 0 obj <<
@@ -2902,37 +2902,39 @@ endobj
/D [982 0 R /XYZ 85.0394 711.9273 null]
>> endobj
981 0 obj <<
-/Font << /F21 954 0 R /F22 977 0 R >>
+/Font << /F21 954 0 R /F22 957 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1038 0 obj <<
-/Length 3274
+/Length 3275
/Filter /FlateDecode
>>
stream
-xÚímsÛ6ÇßûShæÞØ3'ñ ¼t§×6q|‘r3wm_¨6ãhªW–’ºŸþ@‘ ®$pmä’4¶ÕÎD´ÄÕ®öÿ#vA‚ïáÞÓ†/|ÏzÅtÁuïbzPô®ÂkßðfŸ>ìÔÇ{=üã…´=ϼ¦7|×SZ3¡×oæXáï /:<y}6<=Ž~þpp:ŒïŠ=óBVoùûÁO¿½ËÀ“ÞéÞÇðGÁ¸÷¢7=PZ2­¤„g&ƒƒÅ7D¯®M“Ÿ„LH#EôQª5ïY홑B®?ˆbŽñ£>Eqø]9+£åxvuÔº8ü±¼½9ê;#ÙQ_‡Þƒòþ³½Ù¶ÔEȺ•¦ÍçŽ6‹«^½ñ«v}l¸«ÖîûWz‰b'P?Å
-éXQ–™¢0‘Ñ°2_Í"(Ë÷e½ñßù,lÙÂì‰!‰¬fƒ )b°j‚w“ˆƒ"†ôÄHÍ´q>#bN泟‹B\­‘›A¹øP.ª1†Ë§ŠJ'#ÇlF!ÅÖ‰b$ÅéÝò0ä˜PE¨jÒŠ)Ïσӓ¿×p<¿¦ã‹v`¹i^Í.ëãÕr> õªÙ'Iʪo€NÉ!+Ù’#CJrœu!»%OÄAINz‡aóЙh($>6aXc@Ût¼[qw8ŸÖg7åÅjýTSb–óú?ï­|°£A' °l!„‚!é½ÁxÏ”•>Â
+xÚímsÛ6ÇßûShæÞØ3'ñ ¼t§×6q|‘r3wm_¨6ãhªW–’ºŸþ@‘ ®$pmä’4¶ÕÎD´ÄÕ®öÿ#vA‚ïáÞÓ†/|ÏzÅtÁuïbzPô®ÂkßðfŸ>ìÔÇ{=üã…t=ϼ¦7|×SZ3¡×oæXáï /:<y}6<=Ž~þpp:ŒïŠ=óBVoùûÁO¿½ËÀ“ÞéÞÇðGÁ¸÷¢7=PZ2­¤„g&ƒƒÅ7D¯®M“Ÿ„LH#EôQª5ïY홑B®?ˆbŽñ£>Eqø]9+£åxvuÔº8ü±¼½9ê;#ÙQ_‡Þƒòþ³½Ù¶ÔEȺ•¦ÍçŽ6‹«^½ñ«v}l¸«ÖîûWz‰b'P?Å
+éXQ–™¢0‘Ñ°2_Í"(Ë÷e½ñßù,lÙÂì‰!‰¬fƒ )b°j‚w“ˆƒ"†ôÄHÍ´q>#bN泟‹B\­‘›A¹øP.ª1†Ë§ŠJ'#ÇlF!ÅÖ‰b$ÅéÝò0ä˜PE¨jÒŠ)Ïσӓ¿×p<¿¦ã‹v`¹i^Í.ëãÕr> õªÙ'Iʪo€NÉ!+Ù’#CJrœu!»%OÄAINz‡aóЙh($>6aXc@Ût¼[qw8ŸÖg7åÅjýTSb–óú?ï­|°£A' °l!„‚!é½ÁxÏ”•>Â
+/V“Ém3Úoò®;Ìõ
ƒD¤÷í9ãεµ€óû`ÐuºróDæc<a– 6$`Ø„€!í`°AmÛÒÀE Ãy¹Ï/¡q¬åí·g¦¸{âB;a„f )X°`,‰8(XHï
-D ¤w¸ü©µf…óŒªÁÐÛW<‡G¾PÜáêfÙ\îœ]¼Ÿ/êíW£Ù誜–³e%‡}”¼t¢ÙËFRh`u„íF#…éÆ%Yaâ$7]Ç¿«Éçh2¾Dë³Þ”7óIèEŽúRèýyÍ4,ÐlX! Œ‚% é`‘œ²P-,MWr¼Z†‘b¼ ¬|(ñR›Ð’hµïE¶4f#‚ )D°L"‰8(DHï±ÔpǼwáu©9ÿñ¤9Ûý·ê©jãçB'‹Ûëåü·qØnž½Y]_Ï¡ÊXõôÀé$’šM 2¤ˆÁ¢ ×ML"ŠÒ; *… OÅ©çPÎëÙMýïï«ñÍxYVç=Ý^ìùו%Èr6AÈ"«H”ˆƒ"ˆôÎ…aJrÕS%/ã ¨b¨¢È…ñäÙj<¹ŒÌëër6¼lN¤@s—ŸžÇ•è×eóê|V?¾ÏV„7•ê¯iCã‡Ì•n$QøN SqÒÞ[ `¾K(>AÂÁÉq½aŠ¢Øp0ŸŒã0„x)þÒá<~Öl%‘!¥$Î%¥d"JIÒ{«¤-˜‹¿×BÊû 9˜¿[þsðªZeår“YÈ–¸µ£F9–Ýwh$‚ ô¥\7ÕZiÇœ*d«n3ØÔöÙ÷gÏë-_?|/ß×[U'X÷€F=~?æ,›dHÁ€5‘Ý+ëSqP8ÞÛÃ]æ
+D ¤w¸ü©µf…óŒªÁÐÛW<‡G¾PÜáêfÙ\îœ]¼Ÿ/êíW£Ù誜–³e%‡}”¼t¢ÙËFRh`u„íF#…éÆ%Yaâ$7]Ç¿«Éçh2¾Dë³Þ”7óIèEŽúRèýyÍ4,ÐlX! Œ‚% é`‘œ²P-,MWr¼Z†‘b¼ ¬|(ñR›Ð’hµïE¶4f#‚ )D°L"‰8(DHï±ÔpǼwáu©9ÿñ¤9Ûý·ê©jãçB'‹Ûëåü·qØnž½Y]_Ï¡ÊXõôÀé$’šM 2¤ˆÁ¢ ×ML"ŠÒ; *… OÅ©çPÎëÙMýïï«ñÍxYVç=Ý^ìùו%Èr6AÈ"«H”ˆƒ"ˆôÎ…aJrÕS%/ã ¨b¨¢È…ñäÙj<¹ŒÌëër6¼lN¤@s—ŸžÇ•è×eóê|V?¾ÏV„7•ê¯iCã‡Ì•n$QøN SqÒÞ[ `¾K(>AÂÁÉq½aŠ¢Øp0ŸŒã0„x)þÒá<~Öl%‘!¥$Î¥ì^ÀŸŠƒR’ôÞ*i æâÅïµòþBæï–ÿ¼ªVY¹‡ÜäA²%ní(…QŽ)wƒ ô¥\7ÕZiÇœ*d«n3ØÔöÙ÷gÏë-_?|/ß×[U'X÷€F=~?æ,›dHÁ€5‘Ý+ëSqP8ÞÛÃ]æ
Ôð3µ7qÆñÀoÊë&,Ý•Ù(óÕ
/|Âlý!¥Î ¥_"J?Ò{«ŸTÌÚ ùÄ'È‹k‡€[uù³»Ï­bó9³Elí( Q) wƒ ¤\·
-Á¬ÒxH†‚›© T^®æ8 ‰È–RãDS"'â T&½CÝ »[.M+rs'qbeXºÏ'á`4…ÛO7dH¡ƒå£ÐIÄA¡CzoБÞ1ã¸oÑQ5:oovo¨­
+Á¬ÒxH†‚›© T^®æ8 ‰È–RãDS"'â T&½CÝ »[.M+rs'qbeXºÏ'á`4…ÛO7dH¡ƒå“¢D:¤÷é3ŽûU£óöf÷†Úz
Í÷çLÓÂ%˜zY¢oô‚ï  ä8 dH„5”Ý·Ì¥â 
-ÐýtÎ؇¼L$æ%[sdHiŽóNižˆƒÒœôšKÇ´h§"^ùßÖ<®E5‚¦àlü믓fŸóE¨Õ¶ÿæe†TdËŒ )™qª)™qP2ïxçØ{ó5R’&„¬«îo,B.†ÐÄíœ;x9¾z¿üXVÿn­êÌ8aÜ/kÈ ÷Îû®³Ö}~;*[;^“•´‡‚çõrq½þ†‰ê[Eb¾ºÓÓ¼üëb´¸ åô,uøÜG¤/ûHB†Ô‘„塘HÄA±Az6„uQ{×°!66úèQŠŠç£rZMŸ¼Õûõ/’1™¹¤`C‚” ±RRq¤ìzO¹Âxæ´¯15͘»3Ô¶§rà ¦×oÊw墜]”Ý™ƒ7¿ïx‹ ˆñv#hÙ½Æ ¿•©¯ÉcJ[æ„­e2q¼M¦æÅz‹ÓÉzÝru?-·Ou¾Òɤ4ûÈB†Ô‘…%£8IÄAñBzošV¡4³ÞpÀ%~ÔNÓúj´¼xEù¦BÅX±ŸÓn¡éÌFR¨`¹d÷ª•T*¤÷xMHɬQº…e‹¬Î‡ÜΖ£?ŽúÒëýùðû€©ÌR `©(PqP Þ[PgV
-‡@ (Ï˪ÍÆmŠ§¼ßÞŒ®ÊodQó׸4³”Í
-2¤PÁrQ¨$â P!½Çá‚{ËŒñª…e_W>”˜Ê\P°!ʆTª{Ue*Ú{ ŠÓa–Ó,!ªAÙו] KÙ CŠ¬Å@"ŠÒ;Ìo¹•ÌqÂ"î7¿ýn1šNGÕÙ#+÷ÓÛ-\ £Ù¸ C
-¬…K"
-Ò{Ó†pÙ>ÐÂÖËŠ¶NØHÎœ+TpPí5º˜4ûl Aš zžzŸÁr´,Û6&ÒeÅþËÈÚœgó„ )ž°¦ª{X*Š'Ò;ð¤<ÓJØÈ“ø<Ý]Ëœço‚Üfsƒ )n°v7‰8(nHïÀ´LÇÙPµöø.l.æ³å¢ZŸºËŽô¬àRÜ1i÷8¿¸¤Ÿ&ÅÙô´v<H@Õ½Ê0…åÈš)ëÛ
-¦¾:÷h¡µx¤t"¹ÌfR`­(JqP˜Þ.™R¶­LúNNƳ‹Éê²Lab˜õü®nÇqñ´eHq6>ÈÂK¨ºW<¦â ð!½>gŠ›HùRôÜ=È|í‹úŸyÅd2’ÖŽbéD!²EåºÄy&’{' Õ76'ßP¼“w -RºýI_Hy.IÈŽ J”‚ ‰t ¿:d™Ô¢jÜ— éîaFo
-©Íþy¢ÖŽúu"$AL"ê·‰(×ñ·˜íäÉß Ìd~uU­ KÔ¦àÎx}×yœoý ¹>sÍjœÿó`Fþ¸@€f7‚f⯮ö…gÉï´­þåœùf¥öÿ÷#¯íoѪÀŒsë\…+˜6Z÷dhÒe=œŽÇÄÂóõ^(ôÿç»Òhendstream
+ÐýtÎ؇¼L$æ%[sdHiŽóNižˆƒÒœôšKÇ´h§"^ùßÖ<®E5‚¦àlü믓fŸóE¨Õ¶ÿæe†TdËŒ )™qª)™qP2ïxçØ{ó5R’&„¬«îo,B.†ÐÄíœ;x9¾z¿üXVÿn­êÌ8aÜ/kÈ ÷Îû®³Ö½æ¿•­¯ÉJZ„CÁóz¹¸^ÃDõ­"1_Ýéi^þu1Z܆rú@–:|î# Ò—}$!CêHÂòPL$â Ø ½‡º¨½kØ }ô(EÅóQ9­¦OÞêýú—FɘÌ\R°!AʆX)©8Rv½§Æ\a<sÚטšfÌÝjÛS¹aŽÓë7å»rQÎ.ÊîÌÁ›ßw¼ÅÄx»´ì^,€ßŽÊÔŽ×ä1¥-sÂÖ2™8Þ&Sób ½Åéd½n¹ºŸ–Û§:_éäRš}d!CêÈÂ’Qœ$â x!½7M«PšYo8à¿j§i}5Z^¼‡¢|S¡b¬ØÏi·Ptf£‚ )T°\ªûòJ*
+Ò{¼Š&¤dÖ(ݲÆEVçCngËÑG}éõþ|ø}@Tfƒ‚ )P°T(‰8(PHï-(‚3+…C ˆ”çeU‡fã¶
+ÅSÞooFWå7²¨ùk\‰YÊf
+6$@ÙŠ
+í½Åé0Ëi–Õ ìëÊ.¥l!Å
+.Åc‘vó‹K:ñiRœMOkGÁƒTÝœAPèP®¡™²¾­`ê‹¡sZ‹‡@J'"ËlF! ÖŠ¢$… é8á’)eÛʤïäd<»˜¬.Ë&†YÏïêvO«Q†gム)|°„ªûkxSqPøÞŸ‚3ÅM¤Ç|)zîd¾öEýϼb2™ IkG1‚t¢Ù ‚"„rÝ
+¦Ö=štY§ã1±ð|½
+ýÞÆÒlendstream
endobj
1037 0 obj <<
/Type /Page
/Contents 1038 0 R
/Resources 1036 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 955 0 R
+/Parent 958 0 R
/Annots [ 1043 0 R 1044 0 R 1045 0 R 1046 0 R 1047 0 R 1048 0 R 1049 0 R 1050 0 R 1051 0 R 1052 0 R 1053 0 R 1054 0 R 1055 0 R 1056 0 R 1057 0 R 1058 0 R 1059 0 R 1060 0 R 1061 0 R 1062 0 R 1063 0 R 1064 0 R 1065 0 R 1066 0 R 1067 0 R 1068 0 R 1069 0 R 1070 0 R 1071 0 R 1072 0 R 1073 0 R 1074 0 R 1075 0 R 1076 0 R 1077 0 R 1078 0 R 1079 0 R 1080 0 R 1081 0 R 1082 0 R 1083 0 R 1084 0 R 1085 0 R 1086 0 R 1087 0 R 1088 0 R 1089 0 R 1090 0 R 1091 0 R 1092 0 R 1093 0 R 1094 0 R 1095 0 R 1096 0 R 1097 0 R 1098 0 R 1099 0 R ]
>> endobj
1043 0 obj <<
@@ -2973,7 +2975,7 @@ endobj
1048 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.2773 698.3182 511.2325 707.2745]
+/Rect [499.2773 698.4179 511.2325 707.424]
/Subtype /Link
/A << /S /GoTo /D (subsection.4.9.2) >>
>> endobj
@@ -3141,7 +3143,7 @@ endobj
1072 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.2773 409.558 511.2325 418.6637]
+/Rect [499.2773 409.558 511.2325 418.5143]
/Subtype /Link
/A << /S /GoTo /D (subsection.4.11.3) >>
>> endobj
@@ -3225,42 +3227,42 @@ endobj
1084 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.2773 244.6405 511.2325 253.5968]
+/Rect [499.2773 244.7402 511.2325 253.7462]
/Subtype /Link
/A << /S /GoTo /D (subsection.6.1.1) >>
>> endobj
1085 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.2773 232.6088 511.2325 241.5651]
+/Rect [499.2773 232.7085 511.2325 241.7146]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.6.1.1.1) >>
>> endobj
1086 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.2773 220.5771 511.2325 229.5334]
+/Rect [499.2773 220.6768 511.2325 229.6829]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.6.1.1.2) >>
>> endobj
1087 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.2773 208.5455 511.2325 217.5017]
+/Rect [499.2773 208.6451 511.2325 217.6512]
/Subtype /Link
/A << /S /GoTo /D (subsection.6.1.2) >>
>> endobj
1088 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.2773 196.5138 511.2325 205.6195]
+/Rect [499.2773 196.6134 511.2325 205.6195]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.6.1.2.1) >>
>> endobj
1089 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.2773 184.4821 511.2325 193.5878]
+/Rect [499.2773 184.5818 511.2325 193.5878]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.6.1.2.2) >>
>> endobj
@@ -3274,14 +3276,14 @@ endobj
1091 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.2773 160.5184 511.2325 169.5245]
+/Rect [499.2773 160.4187 511.2325 169.5245]
/Subtype /Link
/A << /S /GoTo /D (subsection.6.2.1) >>
>> endobj
1092 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.2773 148.4867 511.2325 157.4928]
+/Rect [499.2773 148.3871 511.2325 157.4928]
/Subtype /Link
/A << /S /GoTo /D (subsection.6.2.2) >>
>> endobj
@@ -3338,48 +3340,44 @@ endobj
/D [1037 0 R /XYZ 56.6929 794.5015 null]
>> endobj
1036 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R >>
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1102 0 obj <<
-/Length 3381
+/Length 3383
/Filter /FlateDecode
>>
stream
xÚíKs7Çïú<ìA:‹÷㶎)§Û‘åÚ­<,j,±B‘
-IÙq>ýb8 GšÂnäH”ÊU6%O³›ýÿÃFÔÿa#«NŽŒ“DQ¦FÓ‹::óÿ÷í믇‹ÆðªoNþùJ˜‘#Ns=:ùÞËj-œþ|øü훓—oNÞýzòÝÁË“ø¦Ð1£¢}Çß~þ•ŽN½ÿï(ΪÑgÿ%Ì9>º8J%…¿™¼?ø1¾!øß­iîƒ(a‰²Üd> çà“0ΉuÆG§Ñ‚‹íGÑ„ûPÛâ/gàrÁˆµTzíeóåÙÙlqÖ_ßV"´Óýuï7“MsÑ,6Gc®èá‹æJùb¶™-Ýo&‹ÓîŇõä¬9;fÉÑXQúuþ‘Îý/vׄVÜÍ)K¹¼¡ÌêlÔ½8†Z»14¼©ÕÍ÷o“+å8‚ö¹80RPïLIbŒq## ÑšI@
-aGþ«COΛ 4šʤéa˜žO‹fžƒÆ©T¸îÝùj²ö,øˆ¾* wÀI<!½Õð
-îG2Ö°üHæÛÕäâb²jÐ÷»ùK:°"M!ßÕ4CŒ&¨§¢eš2q`4¡Þ#MÚ¹®ù‰4ñ»¡i÷¸X2·?}UÌk-5Сf BM.„Ü{¢Æb)h‚ÄNh.&ëM“íšÚé”,M§b#dî{#ôWÔ§¸šŸd‡áÄè¹æ:±c±B³¼+xn3w•"$!—Õ”
-Ô{ÂBùé'7ba;,>¼x×Qñn¹êkßÏÖ›– ùÔR¤ÌUs 1. 2†•¹ÈÄqzO\HI˜Ò° E\ÇÅÛËf5Ùl'¥ÛÉÇ—õ¦¹è^7ëåÕ¶G™6˜‹Y‹Œ•êa­ÆÆTË 1ya‚ /Ë›‰“õžä^Q«Ô 
-Eý Î&w j˜Þ“ïy‘€£j€!F
-Ä|6@÷êªèñ»Ÿü?,T+?¯f]eZ2yï;÷ðñ«Å†˜¸0½™
-•Äp¶—wŠÊ-¦7ÔÜûÖ#$­ `ˆ!EÁÈÄ!zHpljÑ&•LøîC>͚Ϲóq¤ÿ@Fíh5”`½SLw-LÐi §+/µäâ@`½'˜,%ÆÛ¸¾˜v·+Úéý9¢+¦µ`ˆAeàÉÄAƒzOÐø.Ä‚›Ñùîšm»¿"Ï 5n×(ÊÚG¼¶²]R²ÃHZºòÂ^&Œ#ÌuÂHib•J•8nï„£ÝmQl:¬Öj`€!F ”Í•oWÍÅ1ƒzË…\Jσ¥9ŽE¹v{â—Ëf{ šx¬[‹€„V 1@ D ™80@Pï Á‰cB@@ú£RžÏ'Ûû—È )÷dëhLh5.ÀÃ
-æÊ‹A¹80\Pï N‰“\A\Äõö$ž±$øS3u ™«æb\@e0.2q`\ ÞÔg˜†\ô‡©¼ø²˜\„›Þ>\žÆm)ÛÝG³¶×‘Jíì‚è¶8s[Ù{»14ÌÉ~ýýÛÄ3Š I3`º£îi}cÁœ!”ƃd}KÀè )x5›·ëpÊ=ø.ä^Ža{¢ µAC²ÌŒ–w=åA ÃÝÇ™kRÃ](á‰vË8 \[Ø–KwW7ÓewKÔúÚ”æßçM?ËÙ,Ã$' ‹ÏÛûï÷¨d ©b‚ÃŒ£‚gÁGÝÇÞ„Ah»îßJ.vkk{Tƒ‹ WHX5Àã
-‚ò ãuŸxЬ}’À÷8lï§nþØ\…»š?.ÃÑK±~Û…ãítFïm7Ч©‚d‡1
-l?Úøaryi
-÷Q¾~÷É_Ì­xšŠÄ,VC 1H J($™@0HP÷ æû*U„Dõ¼Ýœ‡»¥¯Ï~·‹*³nT2ÝÌ>µÓ!ÙcîŠB«!†$P%ÆÊ[Nr` îÓp•úª:A§/·9Ýå_™;ÿJðpA{ƒÞd3^ÏÎÝMzJ±§î)f½*`ˆAUE¡Ê‚A…ºPYG¸æ0Å+˜úÇÛã×ß¾~“{2¥!‚ŃíÔÑØÝ#°þª½œ!Ÿµ´
-Ôwz¥!Ü1H5¤¼~óüû/^æ¶U+Bµ(¡ÂÅÞõS!“µŒ
-치ïtø½‡‚3€ˆ¬AÄÏ¢r»J4±Òð0J=ªqpŸàZr’1Ž<hçz7°‰ksGl®tÔþÍqª{VÓÿ÷løôû¶×±¶0§Ô©¹ Ïe¿Ò=›Í;™¶—Øÿ [¥“Žendstream
+IÙq>ýb8 GšÂnäH”ÊU6%O³›ýÿÃFÔÿa#«NŽŒ“DQ¦FÓ‹::óÿ÷í믇‹ÆðªoNþùJØ‘#Ns=:ùÞËj-œþ|øü훓—oNÞýzòÝÁË“ø¦Ð1£¢}Çß~þ•ŽN½ÿï(ΪÑgÿ%Ì9>º8J%…¿™¼?ø1¾!øß­iîƒ(a‰²Üd> çà“0ΉuÆG§Ñ‚‹íGÑ„ûPÛâ/gàrÁˆµTzíeóåÙÙlqÖ_ßV"´Óýuï7“MsÑ,6Gc®èá‹æJùb¶™-Ýo&‹ÓîŇõä¬9;fÉÑXQúuþ‘Îý/vׄVÜÍ)K¹¼¡ÌêlÔ½8†Z»14¼©ÕÍ÷o“+õ8‚ö¹80RPïLIbŒq## ÑšI@
+aGþ«COΛ 4šʤéa˜žO‹fžƒÆ©T¸îÝùj²ö,øˆ¾* wÀI<!½Õð
+îG2Ö°üHæÛÕäâb²jÐ÷»ùK:°"M!ßÕ4CŒ&¨§âeš2q`4¡Þ#MÚ¹®ù‰4ñ»¡i÷¸X2·?}UÌk-5Сf BM.„Ü{¢Æb)h‚ÄNh.&ëM“íšÚé”,M§b#dî{#ôWÔ§¸šŸd‡áÄè¹æ:±c±B³¼+xn3w•"$!—Õ”
+ã[Ñ——ËùòÌÏŒ0O“È<!!‡Õ„
+ò"®·(ñ˜%ÁŸ’(\È\5À*ƒ‚‘ uŸÀ –8Ã4£?PåÅ—Åä"Üøöáò4nMÙî@šµTjou‰©ÖbºÃÄ3Š K3`º£îi}kÁœ!”ÆÃd}SÀè -x5›·kqÊ=øNä>c£ µAC²ÌŒ–w>åA ÃÝÇÙkTÃ](ã‰vË8Œ][Ø–KwX7Óew[ÔúÚ´æßçM?ÓÙ,ÃD'ŒŒÏÛ{ð÷¨l ©b‚ÃŒ£‚gÁGÝÇÞ„Ah»ößJ.vkk{Œ£‹˜°j€!Æå!Æê>ñ Yû4+€ïqØÞSÝü±¹
+w44\†ã—b #¶ ÇÛ ÞÛn OS5Éc
+ªŠB• ƒ
+u¡²ŽpÍ `ŠW0õ·Ç¯¿}ý&÷tJC‹§ Ú©£±»G`ýU›!{9C>kiv,P-Œ•L*¨ïô0JC¸c"jHyýæù÷^¼Ìm­V„jQB…‹½ë§B&kv#P'Œ‘Lس1ßé
+yØÎõn`Ø>æŽØ\é¨ý›1âT÷¼¦ÿïùðé)öm¯cmaN/¨!Rs5žË~­{6›!w3m/±ÿД¿endstream
endobj
1101 0 obj <<
/Type /Page
/Contents 1102 0 R
/Resources 1100 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 955 0 R
+/Parent 958 0 R
/Annots [ 1104 0 R 1105 0 R 1106 0 R 1107 0 R 1108 0 R 1109 0 R 1110 0 R 1111 0 R 1112 0 R 1113 0 R 1114 0 R 1115 0 R 1116 0 R 1117 0 R 1118 0 R 1119 0 R 1120 0 R 1121 0 R 1122 0 R 1123 0 R 1124 0 R 1125 0 R 1126 0 R 1127 0 R 1128 0 R 1129 0 R 1130 0 R 1131 0 R 1132 0 R 1133 0 R 1134 0 R 1135 0 R 1136 0 R 1137 0 R 1138 0 R 1139 0 R 1140 0 R 1141 0 R 1142 0 R 1143 0 R 1144 0 R 1145 0 R 1146 0 R 1147 0 R 1148 0 R 1149 0 R 1150 0 R 1151 0 R 1152 0 R 1153 0 R 1154 0 R 1155 0 R 1156 0 R 1157 0 R 1158 0 R 1159 0 R 1160 0 R 1161 0 R 1162 0 R ]
>> endobj
1104 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [527.6238 758.5763 539.579 767.5824]
+/Rect [527.6238 758.4766 539.579 767.5824]
/Subtype /Link
/A << /S /GoTo /D (subsection.6.2.10) >>
>> endobj
1105 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [527.6238 746.6054 539.579 755.6115]
+/Rect [527.6238 746.5057 539.579 755.6115]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.6.2.10.1) >>
>> endobj
@@ -3393,7 +3391,7 @@ endobj
1107 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [527.6238 722.564 539.579 731.6697]
+/Rect [527.6238 722.564 539.579 731.5203]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.6.2.10.3) >>
>> endobj
@@ -3435,14 +3433,14 @@ endobj
1113 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [527.6238 650.7387 539.579 659.8444]
+/Rect [527.6238 650.7387 539.579 659.695]
/Subtype /Link
/A << /S /GoTo /D (subsection.6.2.16) >>
>> endobj
1114 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [527.6238 638.7678 539.579 647.7241]
+/Rect [527.6238 638.7678 539.579 647.8735]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.6.2.16.1) >>
>> endobj
@@ -3477,14 +3475,14 @@ endobj
1119 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [527.6238 578.9134 539.579 587.8696]
+/Rect [527.6238 579.013 539.579 588.0191]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.6.2.16.6) >>
>> endobj
1120 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [527.6238 566.9425 539.579 575.8988]
+/Rect [527.6238 567.0421 539.579 575.8988]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.6.2.16.7) >>
>> endobj
@@ -3498,14 +3496,14 @@ endobj
1122 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [527.6238 543.1004 539.579 551.957]
+/Rect [527.6238 543.0007 539.579 551.957]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.6.2.16.9) >>
>> endobj
1123 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [527.6238 531.1295 539.579 539.9861]
+/Rect [527.6238 531.0298 539.579 539.9861]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.6.2.16.10) >>
>> endobj
@@ -3519,14 +3517,14 @@ endobj
1125 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [527.6238 507.1877 539.579 516.1938]
+/Rect [527.6238 507.0881 539.579 516.0443]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.6.2.16.12) >>
>> endobj
1126 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [527.6238 495.2168 539.579 504.2229]
+/Rect [527.6238 495.2168 539.579 504.0735]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.6.2.16.13) >>
>> endobj
@@ -3547,7 +3545,7 @@ endobj
1129 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [527.6238 459.2045 539.579 468.1608]
+/Rect [527.6238 459.2045 539.579 468.3103]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.6.2.16.16) >>
>> endobj
@@ -3575,7 +3573,7 @@ endobj
1133 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [527.6238 411.321 539.579 420.4267]
+/Rect [527.6238 411.321 539.579 420.2773]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.6.2.16.20) >>
>> endobj
@@ -3589,7 +3587,7 @@ endobj
1135 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [527.6238 387.3792 539.579 396.3355]
+/Rect [527.6238 387.3792 539.579 396.485]
/Subtype /Link
/A << /S /GoTo /D (subsection.6.2.17) >>
>> endobj
@@ -3666,28 +3664,28 @@ endobj
1146 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [527.6238 255.6995 539.579 264.6558]
+/Rect [522.6425 255.6995 539.579 264.8052]
/Subtype /Link
/A << /S /GoTo /D (subsection.6.2.28) >>
>> endobj
1147 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [527.6238 243.7286 539.579 252.6849]
+/Rect [522.6425 243.7286 539.579 252.8343]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.6.2.28.1) >>
>> endobj
1148 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [527.6238 231.7577 539.579 240.714]
+/Rect [522.6425 231.7577 539.579 240.8635]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.6.2.28.2) >>
>> endobj
1149 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [527.6238 219.7868 539.579 228.7431]
+/Rect [522.6425 219.7868 539.579 228.8926]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.6.2.28.3) >>
>> endobj
@@ -3722,14 +3720,14 @@ endobj
1154 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [522.6425 159.9324 539.579 169.0381]
+/Rect [522.6425 160.0321 539.579 169.0381]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.6.3.1.2) >>
>> endobj
1155 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [522.6425 147.9615 539.579 157.0673]
+/Rect [522.6425 148.0612 539.579 157.0673]
/Subtype /Link
/A << /S /GoTo /D (subsection.6.3.2) >>
>> endobj
@@ -3778,7 +3776,7 @@ endobj
1162 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [522.6425 64.265 539.579 73.2711]
+/Rect [522.6425 64.1653 539.579 73.2711]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.6.3.5.4) >>
>> endobj
@@ -3786,38 +3784,39 @@ endobj
/D [1101 0 R /XYZ 85.0394 794.5015 null]
>> endobj
1100 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R >>
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1165 0 obj <<
-/Length 3487
+/Length 3491
/Filter /FlateDecode
>>
stream
-xÚí[sÛÆÇßõ)øЙJ3Õz¯XlûÐÑÅv•&J*)Ó™¦}€HˆÄ˜´ê~ú.ˆÝ塸8b;±,Æ“!%áàžÿoö¨ýÇF*!‰áf¤$Š25/èhjÿöö€¹cŽýAÇð¨Ó›ƒWo„bžŒnîFR)ÂÕúd)¡iÊF7“ŸϾ¿¼y}ys}ôŸ›o^ß„³BÏŒŠö”?üô:šØ
-á3?¸>øG8!øëÚ4úI%\$<òQ8¥ý£b#­ Ië’A’£cÆ)=<½¸<?:æŠ~—ÕM¾ìÞ¿)æy÷îõ›¼¬‹ªüóѱ`ô°™åíç·^ðÂtB´VÒÆÖ:øÃÛ×—¯¯NŽ ?¼yí‡A%‚P*”;ú¼X±ô07Å{ë5¡É!9:V6¸ÏúòHEi¬æÆf(¤j'íËé¨{s„vÇÐpWˆÝó·Ÿ1¾ƒ“W6ÆêÞs µ}¥<p '“IÑX™³ùcÞTËEÖÔVýÛó±/Ò˜ÏH‡Oà`:€!Fˆ1ÑOG$ŒÔ½fÄ–0¡ˆLR‡´pPÕ ÓÑpÝdMQ7ÅØ¡8}@|Ñ<ùŒæ b<AE“ý<EÁxBÝ3náLŽ4D¤ ó@{Á³P KÒÍ,ßEjSzLÊ_$>aƒy
-DcÔ÷FâTû²Q˜;…ÿU•¹”VÅ2+Çù/Él´üR핲ûÀƒ• f˜›d2–ôë¸&#âx£¢V„*m€ŽÂéx•×Õü -4Møó+Ͻ"û| –bBÃ|£RGÁÄFÝoäN81v¬ ä–Nîëjü.o:q/^}ÿKª'T~ rû| –brÃ|3¦û厂ɺßÈ­(IHÜÊÉ}V-î­¶·Å¼h>tâ>ͬ›ïfëlšHC7᳞sÚ² £Ý1é-âKëöáS6˜`ˆ%a,í'"FÄŽ{8Åçg9ž!Y²öÞÎÑ­YD?MWË€ÅYUÖÅ$_fí SÝŸ8jÀÓ v#Þ=o—0ÓŸ0p>,Q;ncs) KWÆ%jÝ{mçRNÆã¼µ°lÖsŸ•›uûÖVÊõßä~Fex»ó Üî€!Öî  (F‘@0œP÷'jk¯ÖÊáÄ#³ðÜVt&™« g³eU5‘:+$¡’»£²r›Ï7D(í§ó¯ófULbgJmàÒ—ì0ø©‰õš&bÄBf§ýÄFÁˆEÝ»Ée8¡F`ÃdÏMt I1Ke*Kã^xí(QsØëò}·xT•‹¼´]O‘ˆ—Sû°
-™Š4D°ÚRÃ*‚îÞc•RB™+î°ú±.Êiw/RêÄvo|u¬{k%š†šöfUŽÛN‹UE¿h¤|Ö# 1¤ ª(R‘@0¤P÷þÚªMŒ`ž)áºjçÊlQŒ;¦~¼ŸdMþ¸w«U²ïʼnñ9L 0Ĉš¡ÄDÁˆÙq)©ˆÐ†û±êztsÄ;\V«Ûy^Ïìõ«-H½ùñgxê` ƒ­Èï_@†çÃò±ã6Ú‚„°îu·X†ÁÎYµX´Å³m4?tj››E;œ—r?¶Þ¨|š7*`ˆ5*(#
-O$ "Ô½¿²sÛ·c*0:ŒÍÝ€¹¬ÜôâCµ|g[×_ºŸfÕC÷fœ9Ø.º—Sʧ«n{Q÷›jåÏ0ËÂi\rúW[ÑYú;PÐ+¸ÏÉ`Á!&8Ì9*x$LpÔ}¨Ô&„œ»¢qQŽ;ÅÚ.}èÓµÕnÒd–•Ó­®ž_ ,üæ¥ËÕâ¶]u°>žQ%èeÀei0;Œ
-Àn˜þ˜o/¿4šÐÐÞ}¯ëŸ³6سGMú­_aø[>¿·íUÊýä)ùd¥Ø!A)1Š"Q íøŽuŤ–DšT¯}ŸØÎùáÉý}^NŠqÞ?ÙÌžÚÿ‚Hÿk+ÆûWÔáù°ì¸6¥„É—„öÊ©µMÃø]Y=ÌóÉ´-¥íB+7û^×ð¦ã“;¸í
-G‚t}ŒÇÛÃ0åÛâv™ù1ëõêþ¾ZZ,fö“^OŸÑÁ¼
-¹çf87>µƒ¹†7P:”›H 7¨{Ï 7D1¹áFøNnÝdsÎW»Ïû7áǧx0?ÀãJˆò ãuïùašHÁYàGvüü½¬Üzèy~—›úÕ•D/‹qwkűùb»6Ÿg¨5˜`ˆQ
-TGAxt¤¬É¸*ïàƒ’Tï ŠŒÏê`d€!† T‰þüÄÁAÝ;d¸„'i &鈹Î÷þ>'÷÷óbìîÅ:V2Ù¯÷nâs8”`‡àÂèˆDÀúwsò”–&:ºšv]¯qùÊ:PêbMݬn»wnÜؽjÜ- Jêg²\ç1Xâ&1H3*ñn˜Ä˜ïĉiŸBg€Æ|Kãã¬þPŽ+­å៶ö^º…¿öd3·²ZÕóí–,þ‘êøÏ0X`ˆésÄDÿv¥X ˜B¨ûDJÊ”HlKä'&l×®_¨0ÉÕ,³²ÎÆ~LAÇób}7”¡âwj^þb ¢FÁDÝo”’aÀU¶{TÚFÀiV8á¦yÓ.Žå]Õ®fu+Y[ûdìe¶ÈwhÂòظšXÑ•PŸ_9ÿÑ+ 1å`êPå"`Ê¡î7Ê NR¥¡rj[¹Õú>ŸþV77­ÀMA¾Ñµïﻂ8]f‹£c½µlù©v‡O2X(`ˆ 3ÅDÿƒÂb`B¡î7BqÚ>QT¡'TY»ôÞz™&Õ"+ÊWex0T  5žåãwþ‡¢ôMk¹¨·w²]½9ëÞHªåð;»zuòd°NÀÓ &Š‰þ-c±@0P÷~´AS’±QIwíe—­­b6險ýFÓ8+>ƒY†+P.”•H +;îcµmß•0éîØ;m·sˆÃï²rå÷ÞgSd¿v°~ê~mh€ì×ÞŠŠ‰þçëÀó!¹Øu[ÇdZªŒËÅzYJ˜ÃI1ý:v<<»9¡ ÇЖ ‘–·¥7JY$Œ6Ô} -aÄh-m¼£mVµÝK¥÷¸ýö¸yAã 1Ü àLö÷²c`¸¡înÒÔ(›pÅ­¬ë||¼îŽMÖý{œ>–#ŸéÁCŒ#¨$“ýƒ€X G¨ûÀ‘Ð$õ÷&ž®—À
-É$ÒŠ‚a„º1Ai<FÉFÏÑ<»ÍçÏüÑå¿;>»ƒÙ†;P=&û› cuØ¡Œ¨Ä=Yãt=O²ÅÎ4o7’Iµïh"š|¾Ó 1š žLõï ‰‚Ñ„º÷4¥†ÈTy˜Ò-˜º©¶÷Õ»v/ˆb{ > P>åCyvNPP¦ú»G‘(˜Pßá;4‘Ô÷±ÍJuÞ4E;§¾/LŸîk;ºtþÒŽ`†}eÇFJ¦úïêÚ ûºÄqx6­"~‹Ü)a´’y†Šiù¿õ÷9H¹ðü³ÅɯÙì¸1CŸ+Td
-{ª8ù¥mŽá ¹ç§ilÊÜþψQŠü÷%n¾ÖQjbÇo=]1® á”êQûÕUn(Z¼Gn'XBÿ?ßðßvendstream
+xÚí[sÛÆÇßõ)øЙJ3Õz¯XlûÐÑÅv•&J*)Ó™¦}€HˆÄ˜´ê~ú.ˆÝ塸8b;±,Æ“!%áàžÿoö¨ýÇF*!‰áf¤$Š25/èhjÿöö€¹cŽýAÇð¨Ó›ƒWoD:2Ä$<ÝܤR„«õÉRBÓ”n&?ž}yóúòæúè?7ß¼¾ g…ží)>øé?t4±|s@‰0©=Ø(aÆðÑâ@*A”Âÿf~p}ðpBð×µiô“0J¸Hxä£p>JûGÅFZ’.Ö$!‚$GÇŒSzxzqy~tÌ=ü.«›|Ù½SÌóîÝëÿ6yYUùç£cÁèa3ËÛÏo½0à…é„h­¤­uð‡·¯/__~xóÚƒJ¡T(wôy±<béa>nŠ÷ÖkB“Crt¬lpŸõå‘ŠÒXÍÍPHÕNÚ—ÓQ÷æ
+쎡á®»ço?;cj'¯l,ŒÔ½ç@jûJyà@;N&“¢±2góǼ©–‹¬©­0ú·æc_¤1Ÿ‘ŸÀÁt
+0ÄHb1–ö“ #u*Gb áœoP …ã2[øÊ‘/ßû.k?B’§ÏAî>}"†Ê ì•aš1‘#Q £¾7§šØ—ÂÜ)ü¯ªÌý ¤°*–Y9ÎIf£å—¢h¯”ݬd0ÄÜ$“1Ó¯ãN˜ŒˆãŠZª´:
+§ãU^Wó'´Ð4áϯ<÷Šìó1Xf`ˆ óJ u¿‘;áÄر&[:¹¯«ñ»¼éĽxõý/©žPù5Èíó1Xn`ˆÉ óm;KýrGÁäFÝoäV”¤F¤@nåä>«÷VÛÛb^4:qŠfÖÍ÷Hºu6M¤¡‰›ðYÏ9íÎ
+Ùƒ„Ñî˜t‡ñ¥u{‰ð)L0Ĉ€’0Îú‰ˆ‚±ãNñùY΄§DH–¬½·³GtkÑOäãÕ2`qV•u1É—Y;ÃT÷'ΟÚ𴄃݈wÏÛ%Lô' œKÔŽÛØ\J•q‰Z÷^Û¹”“ñ8¯C-,›õÜgåfݾµ•rý7¹ŸQÞî|·;`ˆµ;((ŠQ$ 'Ô}À‰ÚÚ«µr8ñÈ,<·Iæ*èÙlYUM¤Î
+I¨äœÄæó Jûéüë¼Y“Ø™R¸ô%ûL~jb½¦ƒ‰†±Æe?±‘@0bQ÷n²GN¨QØ0Ùs]BRÌR™
+ÇÒ¸^;JÔÜöº|ß-Uå"/m×S$âåTÇ>¬Bæ‡b ¬¶”Å°Š‚`…»÷X¥”P&dÀŠ;¬~¬‹rÚ]Fã‹”:±Ý_ëÞšF‰¦¡¦½Y•ã¶ÓbUÑ/)ŸõÁHC )¨*ŠT$ )Ô½¿¶ªD#˜gJ¸®Úù‡2[㎩ï'Y“?îÝj•ì{cqb|N 1b f(1‘@0bvÜÇFAJ*"´á~¬ºÝ1Æ—Õêvž×3{ýj Ro~üž:ØÈ`g+2;ðîÏ 8–·Ñ$„u¯»Å‚4 vΪŢ-žm£ù¡»PÛÜ,Úá¼”û±ÍðFåÓ<¸QC¬QAQx"`¡îý•Û¾S¡Ða¼hþèÌe妪å;ÛºþÒý4«º7ãÌÁvѽü›R>]uÛ‹ºßT+†YNûàúÓ¿ÚŠÎÒß‚^Á}N  1ÁaÎQÁ#`‚£îCÕ †0!œàÜ‹rÜ)ÖvéCŸ®¨v“&³¬œnuõüZ`á7/]®·íªƒõñŒ*A/.KƒØØa
+Ãßòù½m¯Rî¯ O¡È'{(EÀ¡J‰Q‰¡hÇw¬+&µ$Ò¤zíûÄpÎOîïórRŒóþÉæ`öÔþ4@ú_[á0Þ¿<χå`Çm´)%œH–¸$´WN­mÆïÊêažO¦m)mZ¹Ù÷º†7ŸÜÁmbŠ‡" Cuïz]RQ"„L<9-;¦mB]•=]ù+¸EÝTK·¤SÝ=ºþž_^?ºPw‹B e_QõÉL0ÄH€b $DÁH@݇"²žÏçÞ‘·y™/}Ï*¨|•ß¹ËtØšsQÞ­·Š¯§ËóuVŒ^2|î“ 12 6Lôoˆ‚‘º÷5‚'„iÀð5ââ‡÷‰kô“IGC]çµ{)zbÿ³¯¬]¾×û IÈã`H€! Ô …$ ê>”&Û›¥”£Dtåã´¸Õt™ÝÏ>lÀ‰ëÕtš×M>ñe%›Ø±]ÇŒàü…ôÍ}æs 1. 2(‘@0.P÷¾xPN(M¾x\å?¯¬òîöÊá·D,\_Õ£rõæ¬îxHÅKáÁ§l0ÀãJ‚ò ãuïx©ý—2ðÀÝŤÝèUúÑýù2»k)0†ï'O@&du(2ÐAfK5&ú—[b Èàî=2Z“Tò 2¢Cæûfæ7ŸWã('·a¢·†(Æ_F#äj0Àj‚ uïû"QD'T8¤ëc<Þ~†)ß·ËÌY¯W÷÷ÕÒb‘0³ŸÜðzúŒæb¼@ÅP^"`¼ î}áP‚$: ¸ø¾G·é°?¯Šºh—ö5ÛO‹ý
+€|Ž 1€ †Lôß/ uï’Œ(û»
+"` î=T¡è†ÕQ0)k2®Ê;øà„$ÕûÂ"ã³:`ˆ!Uc¢ÿ.±@0dP÷náIˆI:b®³Å½ ÏÉýý¼»{±Ž•Löë½Û€øåØ!x@…0:"Q p ¾ÃÝœ<e„¥É†Žn§¦B×k@ÜC¾²”ºØ@S7«Ûî[ç7v¯w ¨’ú™,×ùD –xc‡I ÒŒJ¼&1æ{#qbڧР1ßÒø8«?”ãÁJkyø§­½—ná¯=ÙÌퟬVõüC»%‹¤:þ3 –búÀ1Ñ¿])¦ê~#‘Ò„r%Ûù‰ Ûµë*Lr5ˬ¬³±SÐÃñ¼Xß e¨øš—ÿ„ƒ†˜€0ƒ¨€‘@0Q÷¥$Fp•í•¶pšN¸iÞ´‹ãEyWµ«YÝJÖÖ>{D™-òÝ#š°<6®&Vt%ÔçWδÁÊCL9˜:T¹H ˜r¨ûr‚“Ti¨œÚVnµ¾Ï§¿ÕMàMA+pSotíûû® N—ÙâèXo-[~ª]Áá“ 
+bBÁL1Ñÿd X ˜P¨ûPœ¶OÕ@¨Ä UÖ.½·^¦IµÈŠòU UƒCgùøÿ¡(}ÓZ.êílWoκ7’j9üή^ü¬0Ät‚‰b¢ËX,L'Ô½mД$FlTÒÝpckÙek«˜Mº¦j¿Ñ4ΊOç`V€!Æ
+” e%ÆÊŽûØFmÛw%Lº;öNÛíâð»¬\ù½…÷ÙÙ¯¬Ÿº_ ûµ·¢²ozsχäb×ml“iI¨2.ëe)a'ÅôëØñðìæ„‚C[4DZÞ–Þ(e‘@0ÚP÷¶„£µp´ñŽ¶YÕv/•ÞãöÛãæŒ0Äpƒ‚3ÙßËŽ‚ᆺ¸ICR£<n·²®óññº;6Y?ôOìqúXŽ|¦s 1Ž ’Löb`¡îGB“Ôß›xº^U¶‡o{ íò»Ùƒô± ùT b A)­úý EÁ@Bݸ"Z0î@R[ Mê»n8¹x—Û‹HÓ=F¿#ŸèÁC #($SH7*†ê>`ÄI¤ñ%[Yx<Góì6Ÿ?óG—ÿìøìfbì@õ˜ê|_,ŒÔ}`‡2¢÷dÓõ<É;Ó¼ÝH&Õ¾£ý‰hòùL0Äh‚z2Õ¿Æ £ uïiJ ‘©ò0¥[0uSmï«wí^Åö@} |ʇò유 ,é¿!'ê;|ç&’ú>¶ÙB©Î›¦hçÔ÷…éÓ}mG—îÁ_ÚÌ°¯ìØHiGêý_رöuˆãðlZEü¹SÂh7$ó Óòëïsr?àÿøg‹“_³Ùqc†>W<¨ÈäéÆ;!ìоÀð˜Ûq~šÆ¦ÌíÿŒ¥øÇ_âæk¥&vüÖÓãÚN©µ_]冢Å{äv‚õQ ôÿLß¿endstream
endobj
1164 0 obj <<
/Type /Page
/Contents 1165 0 R
/Resources 1163 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 955 0 R
+/Parent 958 0 R
/Annots [ 1167 0 R 1168 0 R 1169 0 R 1170 0 R 1171 0 R 1172 0 R 1173 0 R 1174 0 R 1175 0 R 1179 0 R 1180 0 R 1181 0 R 1182 0 R 1183 0 R 1184 0 R 1185 0 R 1186 0 R 1187 0 R 1188 0 R 1189 0 R 1190 0 R 1191 0 R 1192 0 R 1193 0 R 1194 0 R 1195 0 R 1196 0 R 1197 0 R 1198 0 R 1199 0 R 1200 0 R 1201 0 R 1202 0 R 1203 0 R 1204 0 R 1205 0 R 1206 0 R 1207 0 R 1208 0 R 1209 0 R 1210 0 R 1211 0 R 1212 0 R 1213 0 R 1214 0 R 1215 0 R 1216 0 R 1217 0 R 1218 0 R 1219 0 R 1220 0 R 1221 0 R 1222 0 R 1223 0 R 1224 0 R ]
>> endobj
1167 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [494.296 758.5763 511.2325 767.5824]
+/Rect [494.296 758.4766 511.2325 767.5824]
/Subtype /Link
/A << /S /GoTo /D (subsection.6.3.6) >>
>> endobj
@@ -3873,14 +3872,14 @@ endobj
1175 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [494.296 661.9199 511.2325 670.926]
+/Rect [494.296 661.8203 511.2325 670.926]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.6.4.1.4) >>
>> endobj
1179 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [494.296 649.7382 511.2325 658.8439]
+/Rect [494.296 649.8379 511.2325 658.8439]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.6.4.1.5) >>
>> endobj
@@ -3901,63 +3900,63 @@ endobj
1182 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [494.296 603.0219 511.2325 612.1276]
+/Rect [494.296 603.1215 511.2325 612.1276]
/Subtype /Link
/A << /S /GoTo /D (section.7.2) >>
>> endobj
1183 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [494.296 590.9398 511.2325 600.0456]
+/Rect [494.296 591.0395 511.2325 600.0456]
/Subtype /Link
/A << /S /GoTo /D (subsection.7.2.1) >>
>> endobj
1184 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [494.296 578.8578 511.2325 587.9635]
+/Rect [494.296 578.9574 511.2325 587.9635]
/Subtype /Link
/A << /S /GoTo /D (subsection.7.2.2) >>
>> endobj
1185 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [494.296 566.7757 511.2325 575.8815]
+/Rect [494.296 566.8754 511.2325 575.8815]
/Subtype /Link
/A << /S /GoTo /D (section.7.3) >>
>> endobj
1186 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [494.296 544.2037 511.2325 553.0603]
+/Rect [494.296 544.3481 511.2325 553.0603]
/Subtype /Link
/A << /S /GoTo /D (chapter.8) >>
>> endobj
1187 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [494.296 532.1415 511.2325 541.2472]
+/Rect [494.296 532.2411 511.2325 541.2472]
/Subtype /Link
/A << /S /GoTo /D (section.8.1) >>
>> endobj
1188 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [494.296 520.0594 511.2325 529.1652]
+/Rect [494.296 520.1591 511.2325 529.1652]
/Subtype /Link
/A << /S /GoTo /D (subsection.8.1.1) >>
>> endobj
1189 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [494.296 507.9774 511.2325 517.0831]
+/Rect [494.296 508.077 511.2325 517.0831]
/Subtype /Link
/A << /S /GoTo /D (section.8.2) >>
>> endobj
1190 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [494.296 495.8953 511.2325 505.0011]
+/Rect [494.296 495.995 511.2325 505.0011]
/Subtype /Link
/A << /S /GoTo /D (section.8.3) >>
>> endobj
@@ -4125,28 +4124,28 @@ endobj
1214 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [494.296 184.9659 511.2325 193.8226]
+/Rect [494.296 185.1104 511.2325 193.8226]
/Subtype /Link
/A << /S /GoTo /D (appendix.B) >>
>> endobj
1215 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [494.296 172.9038 511.2325 182.0095]
+/Rect [494.296 173.0034 511.2325 182.0095]
/Subtype /Link
/A << /S /GoTo /D (section.B.1) >>
>> endobj
1216 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [494.296 160.8217 511.2325 169.9275]
+/Rect [494.296 160.9214 511.2325 169.9275]
/Subtype /Link
/A << /S /GoTo /D (section.B.2) >>
>> endobj
1217 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [494.296 148.8393 511.2325 157.8454]
+/Rect [494.296 148.7397 511.2325 157.8454]
/Subtype /Link
/A << /S /GoTo /D (section.B.3) >>
>> endobj
@@ -4160,7 +4159,7 @@ endobj
1219 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [494.296 124.6752 511.2325 133.6813]
+/Rect [494.296 124.5756 511.2325 133.6813]
/Subtype /Link
/A << /S /GoTo /D (section.B.5) >>
>> endobj
@@ -4203,21 +4202,23 @@ endobj
/D [1164 0 R /XYZ 56.6929 794.5015 null]
>> endobj
1163 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F39 1178 0 R >>
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F40 1178 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1227 0 obj <<
-/Length 948
+/Length 947
/Filter /FlateDecode
>>
stream
-xÚíÚKsÓ0
-R¨p[ÁËaT…B(TdúŒÊH.”I»I)öOJÝæ•·nÒtOšÒ|Ö„)M¸Ÿà‡Ÿ–
-¡4‘é³&-¸ð"måþ¹û|}=ï7 “vú$vÔ05`4/Hñ O|+Bñ"Óg^Òs&m,åþ|¼G­çÝâjÕ/vòuXiêGÃB,ÜZV¡
-™>Ã÷‘"m)åþ±üå¦e«yËÞ !¿ß\G_&Q÷$*ÍùhQ(…{
-Þ‹*B‰"ÓgQBÇåϤM£LOé7ËV]Ì7 JM·ª£ÀJS?
-¤`áÖ‚wð
-…ÀÊ_`Æzî¼,}"þf7Ôݾnqû¥í¸ò»|‡W«„»ëjexkw±_/5…jÿùŶ)endstream
+xÚíÚKsÓ0
+ÞÔßâ/‚C²^UÚ(n´Ré“OÕ›êUžýuZ:£<7^ºÂ™H‰Î$ÄC§r&p«¤ÚžÉcÐ0­ÂÉ¢Ûl–-ûº\_žýh˜ôú„7Ìñ€~èî>Ë&ŒTq¹½»]÷ƒ&®ÏëÝÁkÜÖÇpàa[çïû
+Ö’œ”
+¡T‘é³*í¸u’*¹SÕÍWËk/–íÇöª;k˜5r"ôÏ„Ò"&„)B¸‰`Ã0¡B!!2}&¤ wB"¤ý¼ê–ñC3]…þPZäÑ„P E7œ&T(„"D¦Ï„bÎZŸiD¨a>˜‡wO;‚­¿KMM RÄp“Á©ab…B(bdúL €{
+¤¼áŽƒ‡ao…B(odúìÍ´ÍÛ¾í®óÑSÇJÉè>E?¨§È·{ÁíÈßfµÐ߀Ý~ädô^¦Nvˆ)‡Xx3ì°PåLŸZÅCyïn¯{¬Çv¾ì¦@M׸ûE•–}4*H¡Âmï†Q
+¡P‘é3*#¹P&í&¥Ø?)]t›[TÞºIÓ=iJë=Z
+¤4á~‚~BZ*„ÒD¦Ïš´à‹´q”ûçîóõõ¼ß<6LÚé?±£ÞSFóB/Ü`þJ…P¼Èô™—ô¤IK¹
+¬´ô£a¡@
+n- «P‹LŸaûH‘¶”rÿXþrÓ²‹Õ¼eï„ßo®£¯
endobj
1226 0 obj <<
/Type /Page
@@ -4258,14 +4259,14 @@ endobj
1233 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [522.6425 710.7556 539.579 719.7617]
+/Rect [522.6425 710.656 539.579 719.7617]
/Subtype /Link
/A << /S /GoTo /D (section.B.15) >>
>> endobj
1234 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [522.6425 698.8005 539.579 707.8065]
+/Rect [522.6425 698.7008 539.579 707.8065]
/Subtype /Link
/A << /S /GoTo /D (section.B.16) >>
>> endobj
@@ -4329,7 +4330,7 @@ endobj
/D [1226 0 R /XYZ 85.0394 794.5015 null]
>> endobj
1225 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F41 1238 0 R >>
+/Font << /F38 1042 0 R /F22 957 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1249 0 obj <<
@@ -4341,12 +4342,14 @@ xÚÝYÝoã6÷_áGXëø%‘ìãî¶ÅÅî’¢½>(c kK®>’ºý 9C[ŠåÍö6ÀE€ˆ¤†äpæ7¿Ê|Éà/M–2iÕR
ìn+×í 7Éz[­‹Žî‹º3k•¼iPÿ¦½1É°ó›ûE†Î•8þдØ(ÝÎmŠ¾ª7´ÏÐo›¶êAÍ#Ž4ŽdÃáh‡¢¦•h+F
žœˆ‡UûÃÎíÁEðëJ€¢ý¶ðîÒYR¬û¡ØíŽ8¾/¶¢)A$؆F~öË2XÂuëRPÂȼŠ¢eÑ(Vuqå
4¨joßñË`wÖj†Ž‚÷f|SHÚê~èÃ"Ùœ?ü¨ßü¾ZEÌs•J• B±b©È%bž§
-<ð|߬o¹ù`&͵KÞºö85ØÓNBƒÅp€ñs°o?||Oñ
+<ð|߬o¹ù`&͵KÞºö85ØÓNBƒÅp€ñs°o?||Oñ
FŠüäuܹê;´¡’<ÕY®§6<ÁG‰ÐB
žD8^øú &®*‚îóSˆÏš|SXuYµ)©Ú„âüѳoSSiùS¯wUý•eg(£ãÜsÙºOëàïg7b¸„%Wð¡Ðñ€^Á;NÀNTÿ¯ÕâÛ»Ó÷›CHᙺQ
ÿñæ·Å/¿²e¹`Ë,•ÖdË'è0°&TŠû…’Ðd™‰#»Åíâ_ÿ㬨ǨP¸ªÎc°5#º§K­â™V܇3üôEjŠfø
-–Q£­¢+O(Ÿèº³ß…Ù¤
-µ¾€Ð5༚ºÜ¸c3Í¡vÃH-Ôø·¿‹ß
+–Q£­¢+O(Ÿèº³ß…Ù¤
+B•å/—Ë”I!ÖŸÓ
+°JsÞaø ~F½#>W^ÙYüŒ•èç
+uø…ÙãOŽç•ânÿ¦ˆùendstream
endobj
1248 0 obj <<
/Type /Page
@@ -4386,26 +4389,26 @@ endobj
/D [1248 0 R /XYZ 85.0394 158.4617 null]
>> endobj
1247 0 obj <<
-/Font << /F21 954 0 R /F22 977 0 R /F39 1178 0 R /F41 1238 0 R /F48 1258 0 R >>
+/Font << /F21 954 0 R /F22 957 0 R /F40 1178 0 R /F42 1238 0 R /F49 1258 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1261 0 obj <<
-/Length 3187
+/Length 3184
/Filter /FlateDecode
>>
stream
-xÚÍÛrã¶õÝ_¡Gyf…àBðÒ7g/3oºv'Ó&y EÈæ,E2"e­÷ë{ÎEJtvÛ¦ÓŒÀ¹ß`µð§6q¦³E’EÂJeëí…\<ÀÚ_/ìÐj õíÝÅ7ïL²ÈDëxq·•
-™¦jqWü¼T"—p‚\Þ}÷ör¥­\¾yÿÃÕõ o®~àÙÛÜÞ½ýÆ¿H+ßÜÜÂG]®”Š¹|ýÝÕwo?кâ#¯oî>¼ó÷×w×ïo.½ûþâíÝ€õ˜2% ¢üÛÅÏ¿ÊE~!…ÉR»8À)T–éÅö"²FØȘ0S]Ü^üm8p´ê·ÎrJI¡M¬gX¥õ«l&b£gÕÝ£#ò6MU5‡²~ Ÿë¦~ru_6uGùîR¥KÞw® QYÓ·pÝzW¶£ ͆¾}¸áÛë›7Ãá¿H©ö»7þK]¹¿œ²4NE¬$`E"ü¿Š§:‰LNxúŸí
-xÈ(…Ȭý hŸ„³xvLZšV‰Ñªè¨ÚÙH^I$²4Y$&]’1‰ëR)µlÆ<¿ž­TªYþt©åHD'üïúçþFY"2•á=.ÿuÈG¶ø?a˜–ÂZ8{VÃÇ4X_d#ϱîùÐxÝ-:¤ý›w‘mÑ:¡¥‡~W~BÍŽ¥\þTýãËÜ"D²?9»$Œ$8Ìße—Òpš$ð”ïÊü¾r(¯FXüyygà£Ôþ>¯$úZKaæ½wwy<a»ïÁc#íòç»ËL/ݧž×Ø'ºz]5g¾³ûm?ñ®÷»|ýÑõݯ/rtŒëÅÑc„ù¸W-3‘&”V¨dƘq¨; y:IE”y1ÈÏ@°>JM-T$Lñpób8UfÀ9N@Nôvˆ~ošmÄq“oyöö¹ëÝö<=ð¦1Qˆ@žÌ’lUS³l÷»¶éø‡ˆðí½>¤zY4ëýÂ,ÍÓ,¬7ôuŸÚŠ°ò›ø”²îú¼ªBä„™¼.è¸}ûѹöô2ÞÇáFHÊ·n÷ÑUî™f®ëÞíj×#eãH‡´0;²˜™D ’Îì²k6ýᨹ
-”'ŽŽÄÅ6Hfr`vJ,z‚oNë¥Û‘€Öå:¯^á4D²ë!qØ÷Þx‘÷ù}Þ9Hquèiºë)rºŽŽ+ëM³ÛÍ
-Â"×ñ=õÉz›÷45²SŒ8ˆø˜ÂKçœ8Å$Sc¯Ñ4ý oTIœžO¡Š ù”LvGizÄY|IäX Rþ„
-9›ÂN<\k)ŸÒˆê8­À^ò 𘎆T¡GKG;&H®EaHôú¡§}7DAζ5fƒcéÇ&\A„‡ýslЛq9nGÎ¥/QèL;:*×63ªšŠÈLò ¡~DCèXÒù£
-V ëOÔ÷3—“ø¬1<QͧÔ:Ï>t`(j7}³nª9çnE¬‡"‚GPBeöÄVH
-ij+PÂé(;­öÔüá3h2ëb6‘O óCˆ­¥:l-¡âeÑò¶ H{÷ÂÈ£)biO\g·oÛf×ýšÁi˜ Ù>Kö¹usÏŽáÁ먰' r€¿‡òTP€ùg"ZÛ=,hðaÒF&ðÕþ¼÷vªï*ºõñíj&¡N‘Á”_)(ǧŸµ²¨/ q~ÚHQue§ÊôœS‡„fè½øJ«pÞo”UbÉ´ùä«/2ÁIA ¼/j®æ6óÕfÌ-•Ì, ´
-H•²/hÊ
-‘tôÚÄ„¶)Ã;Tèu®r£w¦³§(
-®£fw"®höx׺©;°Çn|>”°ÃÓ¶PˇýjÎÖzýÁ”rþ!È£+Œ­$üE™ Bö‘Q™…­Ê"ôãÇœ/Áò±r=?5M[ô°ÌÏ[€Ì°u¸Âz ÆmÜo<)¶ó=P¿+{’‘OíRzwdîØPÖ6ôV`0ÐhõðlÓã>§¦|êv=£lÁá“xý1‡š[ÚÍ„C9ßšÞ4â¦Å7ɵkù ’ß ÿe¬ˆ¦¯¸Çÿ¤ùâãý×þ{Ôñ¿Ä T0iª_ð‡)¶ˆÌ€
-@Ÿ!þêó4Ï©Êendstream
+xÚÍÛrã¶õÝ_¡Gyf…âBðÒ7g/3o²v'Ó&y EÈæ,E2"e­÷ë{ÎEJtvÛ¦ÓŒÀ¹ß`µð§6q¦³E’EÂJeëí…\<ÀÚß.ìÐj õÍÝÅ_Þ™t‘‰,Öñân3:+2MÕâ®øy©D$.á¹¼ûöíåJ[¹|óþû«ëß\}ϳ·ÿ¸½{û=‘V¾¹¹…º\)'rùúÛ«îÞ~ uÅG^ßÜ}xÿæï¯ï®ßß\þz÷ÝÅÛ»ë1eJDù·‹Ÿ•‹üîB
+“¥vq€R¨,Ó‹íEd°‘1a¦º¸½øq8p´ê·ÎrJI¡M¬gX¥õ«l&b£gÕÝ£#ò6MU5‡²~ Ÿë¦~ru_6uGùîR¥KÞw® QYÓ·pÝzW¶£ ͆¾}¸á›ë›7Ãá¿H©ö»7þK]¹¿ž²4NE¬$`E"ü¿Š§:‰LNxúŸí
+xÈ(…Ȭý hŸ„³xvLZšV‰ÑªhW$GòJ"‘¥É"11è’ŒI\—J©e3æù=ðl¥RmÌò§K-G":á×?Ïð7Ê‘© ïpùï¨C>°Åÿ ôÖÂÙ³8¦Áú"yŽ}tχÆënÑ!íÀäñ­ºQzèwå'ÔìXÊåOeÑ?¾Ì-B$û“³KÂHšä÷Ù¥4œ&É<å»2¿¯ÜÊ«^^ÅøÇ(µ¿Ï+‰¾ÖR˜yïÝ]^OØî{°ÄØH»üùî2ÓK÷©ç5ö‰®^WÍ™ïì~ÛO¼ëý._t}÷ë‹ãúGqôaþîUËL¤ ¥*™1fêÎBžNR¥B^ ò3¬RS  A<żN•pŽÓ“½¢ß›f›qÜä[ž½}îz·=O¼iLÔ¢'³$EÕÔ,Ûý®m:þá#"|ûG¯©^Íz¿…0Kó4 ë }ݧ¶"¬ü&>¥¬»>¯ª9a&¯ :nß~t®=½Œ÷qø…’òÛ}t•{¦™ëºw»ÚõHÙ8Ò!-ÌŽ,f&Q‚¤3»ìšM8j.@´ ¸ùƒ{u¹22a¼`úÀË÷îÁ“ƒÃg:ƒv?•ŽSX"Œa°Ù×EŽìÉ«Ž =QcAn0öˆN 3}IŠ”ÖtC”|¦aü ñ³9¦/‚E¯s"ÙCˆ–1ä¥!ùT¬_pm~7&e^}¬0ñHyâèH\lƒ`v f§äÀ¢W!øæ´þXº hýX®óêNC$,»‡}ï=€yŸßçƒ×XP‡ž¦»ž"§ë踲Þ4»mÐ<
+ÕP¥È§dÊ°;JÓ#ΪàK"çÀò'¨é{Ø•}ïøFtå¼?§Æµaìß*ð
+Ç  áäsòᱧ¡g
+» σÁóÙyñOŸ±À·hzÔp¨ö–Ws¹šGÜRíBÚÔ'<÷¡±T—ñi|(¡–aWVöìèZ¶üºÞo6+zçírŸòm[yc"—€“ƒÆ˜5ªŠMØÃPœJâDO¤B0±n¶m^Ϲ9A‰jâ`Žo'×_×k1—k$"Mpëf_tͽ›i–˜Lè$ 4ûâ)˜N˜Í)¨2Â&‘¬Ÿ´Ó*!-@L´ó€9ë(¡:q"&ÕÉ€éì]0”ip4¨á*K‰uPžƒzµ4S¹'Ô
+yxÀ†à(%<GAy›—~+l”…M ŽMýнšã.zS(äSgNŒŒHUšP™îÝþþè‡Ám¦‰H¢è$ ¡N  Â}ìc BxuLfä¯ÒdÊ«9jÎ$#j& Þzh\œõÞ=ó‰Ì ÔØâÃÊ™!L&O$Îq£Ã²>eó2q¸Gþ<ôùFì½@_b ðñÞ`>‚ÇÃSBÎ:gbf”mÒP½|†³æ­…2ñ()F$á·1ñYÞÝó—eƒ©$ö$û¦ÈcUÈÙvò àáZKù„FTï¨Àiö’oh„Çt4¤"è=Z:Ú1Ar-
+C¢×= è»!
+r¶­1ÄK?6á
+"<쟫`ƒÞŒsÈq;r.}ŒBg2ØÑQѸ¶™QÕTDf’Ç`¸õ#BwÀ’ÎÿU°ùX¢¾Ÿ¹œÄgá‰j>РÖi4xö¡CQ»é›uSÍ9w+b=8<‚*³'¶BHÒÐ,€QÞuÍºä ¿1.҈őŒ¢Y2D³„«øN„ó Ù‡Ë8›€Ñà‘&¶%œŽ²ÓÚiOÍ>ƒf!³.fù2ÿ8ØZúð¡ÃÖ*^-o›€´w/Œ1*‘"–öÄuvû¶mv}Яœ†Ùí³dŸ[7÷켎
+{Ò × ø{(O5 ˜&¢µÝÂ&md_áÏ{ÿg§ú®¢[ß.¡fêLù•‚bq|úY+{€úç§U'PvªLÏ9uHh†Þ‹¯´
+çýFYQ%–L›O¾ú"œ”Àûò¡æjn3_mÆÜ‚QÉÌÒØ
endobj
1260 0 obj <<
/Type /Page
@@ -4460,28 +4463,26 @@ endobj
/D [1260 0 R /XYZ 56.6929 137.4068 null]
>> endobj
1259 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F39 1178 0 R /F41 1238 0 R /F21 954 0 R >>
+/Font << /F38 1042 0 R /F22 957 0 R /F40 1178 0 R /F42 1238 0 R /F21 954 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1274 0 obj <<
-/Length 3415
+/Length 3414
/Filter /FlateDecode
>>
stream
-xÚ¥ZKsã6¾ûWè¹jÍàA
-¬f~oöTf¹Ð¹ßÓ”°R9È ªÝÊoH‹ùªÛõͺö&æÛ¹œQJ• *–býgµÝ·u¶ê¶ ‰[—•¥P<vÝm+”:®dë4»U{\×=uìª-5ͼ?Ò|^õ)N,´KPsš}ÓõCVUUX¢SÕSåù驦ÙU"S¶Ð<aµ[§V%JM].—Ù—å •ÌŠÂ…¯êçÅ sqw|ÄMê·äítfAkÿ7q#ø›øËÛ.20,ÓíÚW¢vÊ] $4¡3áÔ™ÐÞP“¥ §0=€4“¥Ì\®¾"ätÌq}]¾§sHR¥EHR¢ ÂÅ|U툴­öÔ€©Wƒ— t#Â!±¢Gßì[þ’ÔMEºùò8¨ðª•ÕAT’õËÖ€§mßQ‹Ï_’aj¡AûOè„ùÉÈñCBŠþì“
-FÙ—´·¤r™ ½úš©Àã§l¢b+åéykçÕWÛq‘´[S£æ9¡9ö[0ƒU½ˆNG ‰ÃÑvœÝ«t\ǼÛx]„ïIº]Û=òŠ4…QñR›¡y®G.Oìé•l°?>>’îƒqÒQ ùµ;‰®Zùó‡ï{jA¦½!åØ̉è%½†§ìˆòèÅ¢ 
-¶ÜÙ¼Ãî!åUVDÄóhyÑ~_¯š‡WZÏoÂ+‰ õD"[+îÍ•óÿlêÑYã,„&ODé»-Ï`hŽ.%8r——Å™½¢
-PÌÛ#„]‡f¨v0 'o†)¹¿„@`>ȤùÂÊ;\¥9¸À–?>¥è<ÖDóé <=VÁ³­«ž›ø]†¶uˆ~ªSnñ;6chñÁ'"NΫÔrr|ù%À—`*ƒ÷Cþ¢ à|‚s@^WCE-:'IÇdasøPÎq£ 7_\—jŽ~ÂÀ‚'”¯ã8I% ¥këCå" ûsjPi¤LqW/ÝቨUÓ9BO\(ÈûFzµ q¯y~¥—ŽO3LOeIߤjª,!q’áþ¡>Í™å> èŸë~xG ›?»Ýâ[q~ð8€W¦~Þ—
-îˆçŸ¡£ë_ìy˜0âöÖW.|ÿÒÇK~~nPšVŒ3³œ=·Ôµ¯VOIQÕÂ¥Ñ%¸2çÏ¿ì–ˆ`¯LëˆÉçn @ê ¡-Ð×õ?¡
-txÕÁ(1Âùãqt0úØÇ‘C×µLm›§:ÂÄ$è’y¦
-sÔæ1eME&Á$£1â¼äc w,°¬’C¼WJˆãV[î<<ΨñyZ­ ão¦\Vk.çEîëÕ -4¤_gª1Rg:“ÙEyJj•A¤_Ìr“ãB.YOŠ£n¦Ã.9¼œe$³„¸ÁfÊg–’U þ%¢30Jø¼õŒŸ|
-ñ,…¸Hs (5Û®ò¥.^ÚóÙz¡¼‡8àlD®}°EsÀÜD ‘’ëuCu0h/Y€ÒØ,Ïeyj.›ã¶ò£I(ðÜ“jlª=w<Ö;ðQ\YÓóm½ÚT»¸+ L؃7fg¤X›ShFN¡«ˆ>à32o45³™Qxê5½ã¼‚'Ó‚P)¼<`È$­ÍOËF¾Àí'K´Édî‚fuÉ S‚Θ0g0©/ΚËÌHm¢þð‘•€¼ÂœºÍˆoÒ1C
-¾ªz
- „Ùt/õDוdå’fd>‰²òôW"RZ*)Ööµ…pHãAQc€æ‹@!óòX:«¬>'NybÏúF†Ø=¤¥«òXÈ^¿B<جH¼Ç=ÀQJ¼à>LYÆCÛ×ì2“ í\VäNÎ' ­¤ï) ÿ[!3A³ŠVg"¼ã+¿¥³ÒÊLˆ<¤”^$@ Ä¢' È!/zq®ÍO»îeÇzªh$…ÉTéÆ™
-¶|üßùò„R!èyìØ5Âiq^·f@ÔÚNGûºI©ž¸9=C@®ˆB
-·o¾Àbº¦úž&\Õ=¯d‚Ó÷aŠKѨðÀæ@pð
-–þvA•c«ÇøÀ†û,¤ÆAg€hCõoœ€}¼ew8ýš*çÐð‡#çô/œÿn1]/‚0Péú\í8 °ef´>+sŒBOD‡+^ .ùRéØ{
+xÚ¥ZKsã6¾ûWè¹jÍàA
+¾ªŸkƒÎAÆÝñ7©ß’·Ó™­ýßÄàlâ/oO¸ÈDÀ°L·k_‰>Ú)w=€^Є΄SgB{C!LV”6œÂô
+Á4ÞyPƒžxe2b?>«žK]fÂZ{Š -ÑŽ‚²ù³Èƒ9!+¼Ô—¼\ |©².ç9†ú°mvU›XLçp²Âž.6l<*ãb=“6ïl×%–³6*e\ÒÞ’þÉe. ôêk¦Ÿ²‰:ˆ¬”§äe¬W_mGÄEÒnMšç„æØoÁ Võ~ :%4&GÛqv¯Òq7òlkàu¾'évm÷È+ÒDÅKAhpl†æ¹¹<Q<²§TN°ÁþøøHºÆIGä×îH$R¸jMäϾï©Q˜ö†”c3'¢—÷ž²#Ê£‹& @àÀÏÀlwà%Ñu®hœ7Dq€²mn~B­Ží²':ŒŽË¡e/>tûf•ôÛ öZˆùwïÞQ‹Öï]µ­·pA¤ßÀy†3Æw¶rh‘•c?ŠEjo2ر®át©¹?4§5§pžÏ´§ehÓc˜c½á%¶U?xxA~Εöß·Õ³ ªZ¯Ú꼑Ž×³oÆ!üº(Ø^pgk𻇔_TYMÏ£åEû}½j^i=¿ ¯$‚Ô‰l­¸7WÎÿ³©wDg³š<¥ï¶<k€U\ 8º”àÈ]^göŠÔX]uOï/MÛ’jaÐÑ£9¼Wô„:M"?øðˆÀâ!µ8
+ÉpÿPŸæ‹ÌrŸôÏu¿¼£„ÇÍÈÝnñ­8?xÀ+S?ïKw Äó‹ÏÐÑõ/ö<Lq{ë+¾éã%??7(M+Æ™YΞ[êÚW«§¤¨êáÒè\„óçßÇ@vKD0„W¦uDäs7 õ…Ðèëz ŽŸP:¼ê`”áüñ8:}ìãÈ¡ëZ¦¶ÍSabtÉ<S…9j󘲦"“`’уq^ò1;XVÉ!Þ+%Äq«-wgÔø<­Ö„ñ7Ó.«5—ó"÷õꆋÒ¯3U©3Éì¢<%µÊ Ò/f¹Éq!—¬'ÅQ7Óa—^ÎÆ2’YBÜàF3å3K ɪÿÑ%|^„zÆO>
+'¾ŠË8wœPÁî—M}XÀ%¤Ç°Ú«nÿJÝ>Òq. ³ôÄ é(¸Å>ô¨®ÞLè1Bã‰.±?Çã.¢¦íY
+ð™7š ‡šÙÌ(<õÀš€Þq^Á“iA¨^0d’Öæ§e#_àö“%Úd2wA³ºd)AgL˜3˜ÔgÍef¤6QøÈJ@^aNÝæGÄ7i‚˜!_U=Âlº—z¢ëJ²rI32ŸDYyú+)-•kûÚB8
+¤ñ ¨1@óÅ
+s 8x€¨¾H:'çbs9: cËsg¡C!
+çb'‹¬Œ—B ¥«¯ÊžúÄ°0ô¹¸é†ïX¨ÖëNÂmB]碇ó/ŒŒ%EÎæ ã}ÌÌΟ\à º¾o–[W”ÑáiÐWCŠ‡xŠØåuÒ¨»$8ç"æ/á戳’ŠS•ÑJcB實8¨j†¾n9“†,žýÉSôö›™L\òºÍaç5Az)˜)|Ñ_
+Ç›®p«Î~—Þ×5߬÷ÔU­(ˆò7`WbQ5tÂeø©°ày¹’êïhn"jð™žæ‚ÕsÕ´Õ2¤ˆ|qŠB жg“`Õ°/²šªå:âX¥mzýjÊ)„
+^>"eoýu
+rLü¿S¢0%bÿÿþ[Õøï²Üeº(TºÂ¥E‰Á‘)<}Q
endobj
1273 0 obj <<
/Type /Page
@@ -4533,7 +4534,7 @@ endobj
/D [1273 0 R /XYZ 85.0394 175.6796 null]
>> endobj
1272 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F39 1178 0 R /F41 1238 0 R /F21 954 0 R >>
+/Font << /F38 1042 0 R /F22 957 0 R /F40 1178 0 R /F42 1238 0 R /F21 954 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1285 0 obj <<
@@ -4541,19 +4542,11 @@ endobj
/Filter /FlateDecode
>>
stream
-xڥ˒ã¶ñ>_¡[4Uš
-my¢¬hIaë3aN•SNìU@7ؾ*ypêŽu C`ab5r´CþT&£ÆàLa¾¤ ¸á { nx¯g§þž7››+ì%£ DäöÚ8V²ˆ-¢ïj2ÀÔÕö¨•éixpÝ+ð[f{¦oÓõ– î`PsŽögÐHãÖÇkÍ"t,©|Æ’L³@dÀeèXêí°½åié.qDR
-^÷,ÊÕº1º9°{m=d˜]=êmg <(¥‚$ŒÔ¥)úÀºêvô…K‚A4tÈdŽ`Ñ”ƒ â0^a˜ š%Y˜žÍ~{7jÀ½_Í5^×ßÆÓ® §»+>ô`÷ݱz¸4n
-âôóŠtiLAâ^¬=:)Hã±Å R¢$3áE–ú[¸ó`™»|5MÖ]¡k´d€€ã`é(7FîÍ|ÆÜ*Þ<Y×;æóy(ö‹žKÖ?sðCg7ì×zÁ3dI¦Ø–XÄñGaÝZžÊƒPAÐ'êvô;:ù¯|´¥/ß»_8|:H¤Êu‹ë®û6–¬?Å‹û•L=i¯\W¦µ}ÀFA”EÙDäJ¦äÿ÷¹\ƒ~T’­«Æû¸ADî×maÀ$ S^3ˆ«z5nEáˆñvÏ»°‚‡Úö4ƒ~„Ö“ú;úuç‹ãAç Äíç
-ؘ.f¢Ñ¯œ©œ\6
-ç|;Û‚)ŠòQèx&ïBì`Pµò‹%Ã\:oÁïŒsH° ÃäEõ*`/LÕÚ…ØRo•›Ä”J^»Èë‚ñ䌅§¹¸Æ›û‚ã ÏãìÊqæùÍ× ˜êzï3ý¹íÚsÓ =HC@qŒ*˜›3éº6í Õ"))¶aò,Y+
- ®%~êŽ'},Q6ÿ³nøðJ&’PÌMfR…ˆÉ,§ë²sn‰óeÀ ·B•AER2Ë0`¡&X]jcyt%Ž S‰Œ™BæSF[ÐÆg¥@|º]ªJ°óI£)¾¢l–RHE„cñÒáÍqW4qüb‘I {ʇ=@ü>*¯p@•
-B3¶œœî!k÷»3 vd’ mäbÝìÃ/î×ññ°–±¼%+ NI.5$BBš\
-¬9ÈÂßM%n×újv¡ƒ˜•Ãº;ÓŠ(„ÊÕ¥d£¤Y™Ž™È² RBúÈ“ùÈãc˜#p!-#ºÖ1é)º9=qáü’f»LRŠPdˆ¼ž/"2 F G; }Ôt(é µÂZÙÑ÷ô5ÿÞë¡·~Ïžn—ª7Ýö'§Ìˆ*Tú®Ú»è4gö× º‰e4¾ó¡ÂRèLsßq‚º+Ä»PeG²Â#Q¿§)2ê(ôÆœÏÊ
-S¦…€Äüœºã2±öŠ 41ÑÍ–,÷úBäí]¨u›«˜úDOâ‚ÙLë–3žatÙ±º÷5vxnïH‘šªmÝóìAߌå³ìž¢Çð²÷CdÔ“õ±0¤RsA„$ÏW¬DŒ‘ß!]ÆZ7]2}e1¼¨„ë1Üi$žo1ž-Û¯N›$†hj¿F&zÂRå§Þ*'MÍ{ˆá`æ[?ס'œUo›rj¸ÂúuquðÏ _ºÚüé®= ×?<>½'È·^³î' Y܈¬8H·†
-8hÁ;ÑÍpÒEë”’ÒÙÛÀT©áßÿ?J1BŽ- LÖúÕ\-à´s³¢]¬£¦„ÁÝÚìYË¥‹œ?NóNolÆ.Ðúzö[£«öcw2Sæ‹$ôÉÜzä\ò«NÚÖž†ÎÝaž[oßeãi!ä¶*x@NKø®ß_÷Vo-ó§”k9ÖÝËß3\vÐG(%ñ"BRi‘qêHs_é#J—¯ºµú „0.¤Ø¿e`·7 A]{yÑz}àLãîe\¬Ísk³ð‚ÂyúRìlýSÃìÑÉÙhr-àù«C2I Ñh6Ë•](!•7ºØñÁ½ÐlÇAšå©¯òÜ%Ø á(v³d”"¹nO“›î&˪ÇÍ…)RA)³Ëx;5äT´)òKL¥·U]Ù3!É”ÐPñDSƒöCXG¹ËéAɸÖÈ|)ÅãVWö (çWt ŸçüùêhÒB:[ÐîuùžG3½åŠ2I>½+ŠÝ•ðN¯Kue ÍŒ€Îö¢~K¡@œ&¡ZR(œÁ­
-M­
- ZãŠÜƒ[æž.ÇñS!L%:P–ô˜¥Hé!”·i"®"!G­š¼ü…3Ãø(M¶æÒ?/ÕºðõwÕNïÉzê-çÕÃÿ­@úÂ?Dþ ÇD÷ÿï2ýý¥Ê2¹ü—ŠÌ OÕÈŠ%ºaÜÿ?sËùy;:»endstream
+xڥ˒ã¶ñ>_¡[4Uš
+my¢¬hIaë3aN•SNìU@7ؾ*ypêŽu C`ab5r´CþT&£ÆàLa¾¤ ¸á { nx¯g§þž7››+ì%£ DäöÚ8V²ˆ-¢ïj2ÀÔÕö¨•éixpÝ+ð[f{¦oÓõ– î`PsŽögÐHãÖÇkÍ"t,EáŒ%™fÈ€ËбÔÛa{ËÓÒ]â8ˆ¤¼î;X”«uct;r`÷ÚzÈ0»zÔ% ÚÎ:xPJI©KS(ôu Ôíè —ƒhèÉÁ¢0(AÄ#`¼Â04K²0=›ýö<nÔ€{¿šk¼®¿§]NwW|èÁî»cõpiÜÄ-èçéÒ˜‚ĽX{tRÆc‹A¤DIf‹,õ·pçÁ2wøjš¬»BׄiÉ
+Înدõ‚f2È’L±-±ˆ‡cºµ<•¡‚ OÔíèwtò_ùhK_¾w¿p*øtH•/ë×]÷m8,YŠ÷+)˜:zÒ^¹®Lkû€ <Œ‚(‹ ³‰4È•LÉÿïs¹ý¨$[W÷qƒˆÜ3®Û€I@¦¼fWõjÜŠÂãížwaµíiý'¬'õwôëÎǃΈÛÏ°1-\ÌD£_9R9¹lÎùv¶Så£ÐñLÞ…Ø18À j-äK†¹tÞ‚ßç ‘`† È;‹êUÀ^˜ª7´ '°¥Þ*7‰(•¼v‘×ãÉ Osq7÷-ÆAžÇÙ•ãÌó›¯0ÕõÞgúsÛµç¦z†€â U07'*fÒumÚªERRlÂäY²V
+“Y(N×eçÜç;Ë€Ao…*ƒŠ¤d–#`ÀBM°º:ÔÆòè&J&A¦3…̧Œ¶ ;ŒÏJøt»T•`ç“FS|EÙ,¥ŠÇâ¥Ã›ã®hâøÅ"“ö”{€ø}0T^á€*„fl99!ÜCÖîwgìÈ$ÚÈź'؇_ܯããa,cyKVœ’\jH$„„4¹,Xs…¿›JÜ®õÕìB1+‡uÿv¦Q•«KÉ.F+H³2#'2‘eA¤„ô‘'ó‘ÇÇ0FàB[Ft­bÒ RtszâÂù $3Ìv™¤¡Èy;=_D
+dŒ@Žv824@ú¨éPÒ9j…µ²£ïékþ½×Coý6ž=Ý.UoºíON™U6¨ô]7´%vÑiÎ.ì¯AtËh|çC…¥Ð™æ(¾ãuWˆ;w¡ÊŽd…F¢~OSdÔQè9Ÿ•x¤e2¾T¯~󾲋¹Û™k"1åB QX]Öºˆ¡`¨å«éc!/¡âBNÓ¸ckxšÙÄš"J±Mw´$¦(L ‰ù9uÆebí;hb¢š-Yîõ…ÈÛ#ºPë6W1õˆžÄ²3˜Ö-!f<Ãè²cuï%jìðÜ:ß‘"59>TÛºçÙƒ.¾ËgÙ=Eáeï†Èþ¨1&ëcaH¥æþ‚Iž¯X-ˆ#¿Cº6 ŒµnºdúÊbxQ ×c¸ÓH<ßb<[:·;_6I ÑÔ~Lô„¥ÊO½U>Nšš÷ÿþÂÁÌ· ®CO8«Þ6åÔp…õ êâêàŸ¾tµùÓ]{®x|zOo½fÝO²¸Y5pn pÐ&‚w¢›á¤‹Ö)=$¥³·'€©Rà :¿ÿ ”b„[@˜¬õ«¹ZÀiçfE»XGM ƒ»µÙ³–K9*œæÞØ] õõì·FW5ìÇîd¦ÌI蓹õȹäW9œ6´6¬= »Ã<·Þ¾ËÆ)Ò BÈmUð€œ–ð]¿¿î­ÞZ*æO)×r¬»—1¾g¸ì PJâE„¤Ò"ãÔ‘æ¾ÒG”._ukõ a\ I±Ë À0no‚ºöò¢õúÀ™ÆÝ˸X›ç.Öfá…óô¥ØÙú§†Ù£“³ÑäZÀóW‡d’¢Ñl–+»PB*ÿnt±ãƒ;{¡ÙŽƒ4ËS_å¹K°ÂQìfÉ(+DrÝž&7Ý'L–U!› S¤‚*Rf—ñvjÈ©hSä—˜Jo«º²gB’)¡¡â!ˆ¦í!†°Žr—Óƒ ’q­ 3øRŠÇ­®ìPίè>ÏùóÕѤ3„.t¶ Ýëò=fzËe’|zW»+á^—êÊšíE?ü–B8MBµ¤P8ƒ[8šZ@µÆ¹3·Ì=]Žã§B ™Jt$ ,è1K‘ÒC(oÓD\EBŽZ5yù g†ñQšlÍ¥#~^ªuáëïªÞ“õÔ[Ϋ‡7þ[ô…ˆ,üŽ‰îÿþßeúû)J•erù/™…Ažª‘)Ktøÿæ–óÿ:tendstream
endobj
1284 0 obj <<
/Type /Page
@@ -4584,7 +4577,7 @@ endobj
/D [1284 0 R /XYZ 56.6929 363.1913 null]
>> endobj
1283 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F39 1178 0 R >>
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F40 1178 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1292 0 obj <<
@@ -4659,7 +4652,7 @@ endobj
/D [1291 0 R /XYZ 85.0394 156.0037 null]
>> endobj
1290 0 obj <<
-/Font << /F21 954 0 R /F22 977 0 R >>
+/Font << /F21 954 0 R /F22 957 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1304 0 obj <<
@@ -4667,8 +4660,7 @@ endobj
/Filter /FlateDecode
>>
stream
-xÚ¥TKs›0¾ó+t3AÕtt’:3Nƒû˜4Ç()SŒ\ÀIóï+!°Iâž: ³«}|ì~Ú…
-ÕºÕõ«3uEó»$hô®ËZ«¤iëâa׺BÿÚ*Æ‘]…#;`ÞþÒþ{ã¿¡0FLzX¦ñÐS‘ŒÙ¾(Klô¡ða3?VþP%6endstream
+xÚ¥TKs›0¾ó+t3AÕtt’:3Nƒû˜4Ç()SŒ\ÀIóï+!°Iâž: ³«}|ì~Ú…
endobj
1303 0 obj <<
/Type /Page
@@ -4687,21 +4679,19 @@ endobj
/D [1303 0 R /XYZ 56.6929 744.7247 null]
>> endobj
1302 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R >>
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1310 0 obj <<
-/Length 1159
+/Length 1158
/Filter /FlateDecode
>>
stream
xÚÍWÉŽã6½÷W}’ˆæ¢}êt$‡ @ Ì!“-Ó–0²èH”NO‘EÊ›2sÈ%ðA\ŠU¯^-¤Ù‚Â-Š”PQ&‹¼LHJYº¨Ot±‡½ïŸ˜—IRAÒD˜ÌìÆ©(HZð|_+ùzý´úŽ³§$ËxºXï&[YXoÞjy4ª_Æ<¥‘Xþ¶þ%$/rfQ0‘V
'ÿ“<(þEõ§pðMw)åû±—¦ÑWÃ%)3žy-#4ϧæ‡æ,2u3ت ,Ÿ~ý’‘>5[…Rƒ>ø­aÜïÕ`Ô§Õ-¯T¶ºÛ{•©q´A]ÛtÊ ítÀ¨ÆÇA‘e,r}X–<ºØŒ­oÖÆH™¦Üyc ¯’ƒîä¦õDd;:[i°ƒJõF6Nôѱæƃ2¦éö™bÁ"’Œ{F2Z2gW¶Œ¥ y8{o÷TLŠd§H0Â3Ÿ hRõêµÈª±îÚw\yýl”yj“ yY×p@d)¸Ý¶úÜØXØé
¦ÝŽÄ$ Žw
-xfŒE_aNX0˜ÀSš¨¿S•/ŽJí‡/bƒ¦Nʯzßœ–±1—²éLœ¥åK­ˆÆV…BIØm
-JxI1|«ÄR{}Ö8!S8ÆM§,ývrö‹çf¨qdü)G%§ÀÚÉ®×r›6H–¬Ú‹½‹…¿ðÃJNXV„ÐO^nóëÅ¿_æ’£5é´¼$E‘—·rÁûºÿäøµ“mÓC\4&Å=î˦“}^)S­l9m7Ï.HÉhòd×.¿oýˆï`¢Ñy'øŸ{ ¸@েÌé¿v€F1yçŠÜ…®öÛ­ÖǬ>}ΆÜn{5xB‡ÀÍô§î¼Þg'²MÛóDöGùüŘ˜÷ã„.±~Ö÷]Ó+­®d[ëÁpúùeS§M³óôwzži~ÅôÌ•@2BIOWW‚¿›^GSë
-Ó–ÿ¼\g¥» ÜE
-¾qÂôrœº=ȘZ\ ö\FØÿxd²ó‘ód¦·$4%9‡‹{¦úÃ9šfؼ!¼‚¦ÿH ËI)xáõ8kØ;ߥo…­<©»çÃ¥ÛŽ›­>L/‰ÁÌ ²”Š,`îö$àžÇV”ðl×ØæÚ,˜Lá5]Ö·[öhLs&¾Ñ¡0ÌC/—U5U}hõö5¡æ^uº…®û]}á¦×=}»ž^êáý-Rb_ósoù _dð!AK"8YXù½±é_Á£µ
+xfŒE_aNX0˜ÀSš¨¿S•/ŽJí‡/bƒ¦Nʯzßœ–±1—²éLœ¥åK­ˆÆV…BIîòPPÂKŠá[­ .Úë³ÆA™Âé0n:eé·“³_<7C#ãO9*q8ÖNv½>Û´A²dÕ^ì],ü…Vr²‚$„®xòr»˜_/þý2—”­I§•à%)Š¼¼• ÞÐý'ǯl›â¢1)îq_6ìóJ™jeËi»yž pAJF“‡$»v1ø}ëG|Î;ÀÿÜû[À?=dN?øµ4ŠÉ;Wä.tµßnµ>ndõés6ävÛ«ÁÊ8„
+¯貾ݲÿCcš3ñ…az¹¬ª©êC«·¯ 5§ðªÓÅ(tÝï:è 7½îéÛõôRïo‘ûšŸ{Ë‘ø"ƒùkÖ-‰àtRdaå÷ƦÖþnýDuendstream
endobj
1309 0 obj <<
/Type /Page
@@ -4738,7 +4728,7 @@ endobj
/D [1309 0 R /XYZ 85.0394 170.5419 null]
>> endobj
1308 0 obj <<
-/Font << /F21 954 0 R /F22 977 0 R /F41 1238 0 R >>
+/Font << /F21 954 0 R /F22 957 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1318 0 obj <<
@@ -4746,14 +4736,17 @@ endobj
/Filter /FlateDecode
>>
stream
-xÚÍXYSãF~÷¯Pñ$WáaáÉ Ë†kˆqB¥6û ¤1V­,y%ÇI忧ç’d#›JJsõôñMOwˆ…á#–ë!/¤¡å‡r1q­x9ÀÖ¬}M32D£.Õ»Ùàä‚ùVˆBzÖlÞá Äš%Ÿl†(l_]χ#êbûÝøj<9»œ|Žq©oŸ}?¾™½ŸªU¦é'ãïÕÌ-,¹®ý³¡8»ž\\~øi:úŽ=»¼ž ?Ï~¼Ÿ5w­"˜ u¿>}ÆVÆý0Àˆ…km`€ Cj-ŽËë0ff²ÁíàdžagUníE‰`D™G{`rH¦ÀCn€ËwCä1Ê$L''ч±=[¤•ê™¶^pÕIø<Zgµ°r(t]*wGYVlF_×¼Ü*Ú?TåÛSÕûó´oŸ‘z^¨6/jÕY•ÅcšhÁ%×e•>êaÅËÇ4æ»üÔakÊ"7ì”Ô Qøá®ðV%ÊP(Ž©«ÒMWƒÈ(òÈËJÏ-£Õ*ÍÔ`^”{heE±ºâ/Ï™%IÉ+3¡>Â𑾿¹æ{$i€6ÍGb?ŠÊUtdP[÷ŒUÈÔÛU£wUó²÷8æif¤dEe‹¢ª}ÔK ‡•Î·Ï#MöîCá΀\ò= •ªí©›~ƒ6ÿ-Z®2ŽâbùjÊ·«Ã%÷GÏZ{y³sö\Ÿ~1×ffQ×ÏÁÝ4¹¸a<Ñ
-tèErÆ)LÌ ìÔ)ÂpÉ!è©n½ˆ4ï8Ky^ëéMšezºÈsk¿²å‘µΔk1…éÔ‹T©¦ô0j }z¬¬Ó%ÿn¿ô¡ô1µ(Ô¾ç{¯ª$ ÔŠAìV’o—Ñ££ëA Ô> ¼t×ìØe526¨CP@¨Ó”©; `;³¨ã‚D&àñÑ0bÏfW£|Ï>»ߊ»êøÔžýr5»C¨gOyU¬%þ±¾/ÓÆWÔXÜÑé´½açQí€@Àó°kieÝn¿@š„PnþŠøìúì@åo e 9S˜n6xïøÔ±!Î %̾œÀ”CePò0%Í-> OGðÿ%Áž~xˆ ïFL0† ÒœÄÇ â죂Û`v•Ž¼·E…¼%*ØE¡ã¿
-¡¦cÞ+Aa‡AiŽ&í«ø¿Ž‹ÐÀˆ¬w dÝçù“g:õ¡°
-˜8I wÝöÇ?ób
-|HÜï\*“Iv‹LÖ»bF¼ÂS‘…Å@ ¢IG<\Û-MÚ„ÄÌ<Ï~w99Wë:ëÊ¢ŽjÞ0Yjé"qwä¯
-3!“£¢mõÙ΢z0«=9ðIF§~(K3ÑFªI ŒUñZÄy-*¨ŠÔ¥M)~Ë ö¥Þ,Õ]i–÷Å£¬Ž¿ÍübAa zð2JŠe¶Õ#¥ —hg¢_ãF¨Q®Tº’ã¾Ç=ÖÿŸNUÛŒuKô¼*šº º?ºÁöGx¶«™Ö&h› ·®tFT
-ÊTˆiivíÚÔ«×eΓ=5’´Š£.mÃU;GÝ©ÔE^à9"–JØCàxy¥™Zÿqdkà“µ› jÝ
-Na>¤¯xÁã/jY»—|‘´7ŠÂ-Ý M¤³•PQŽŠ2Q£ýëq€:Ž¦­Ö÷£J\„¥r8.ù ¬ "~AªíŪNAÕ1̃`àùFŒ!Mr¡äå‡~-zP©Ä¢VÊKu¦}?N[êÃFÓ=¦SYl‹3¼îb¿§ ”Cˆ¹Ê[öOÂ]Có¬ûœ„èéÌEc½â°õbz|í/×<ÇG,„i¸Ï(ôY«•P=x¢ºù7Û£û_`#~›endstream
+xÚÍXYSãF~÷¯Pñ$Wáa£ðä…eCŠ5Ä8¡R›}ò«V–¼’ !©ü÷ô\’ld`RIéa®ž>¾ééîq0|ÄñD4rÂÈC>&¾“¬عƒµbhF–hÔ¥z71îD(
+hàÌ^aΉ3›r¢h°{q9>Ž¨Ýwã‹ñää|òa8"ħ¡{òýøjö~ªW™¡ŸŒ?¾×3×°äûîÏ–âärrvþá§éxzîìür2ü<ûað~ÖhܵŠ`&Õý:øô;s0î‡F,â¾ó
+Ý™‹E¼Éji+äPäûT펳¬x}݈òQÓþ¡›8<Ö½?ûöY©§…nó¢ÖuYܧs#¸ɦ¬Ò{3¬DyŸ&b›Ÿ>lCYä––:¢â<Œ¶…·*Q†"yL]•®ºÄV‘{QVfn¯×i~§‹¢ÜA++Šõmœ|yÎìx>/Eep&4D>Ò·ã÷"7| ЦùHîGq¹Ž,êr뎱™úqÝè]Õ¢ì=ŽEšY)Y‘ÄÙ²¨jFôRÃa¥‹Çç‘&;H÷¡pcA.ņZÕöÔm¿A[ü¯Ö™@I±zµåÛƒÕaŽæ·ÏZ{~µuöÂœ~±0ffq×ÏÁÝ ¹¼abn
+äÎv¥{ ÙfŠ¹ìÝ6ÌÕ0‰s3oöÆÉ2…xn¨S³ªbìœN® ý£n7UÃki0]g†²Pí¼Ò“¿bW›didU½Ð7l$cÝìp>D/(?–売“Ç+Æ!Š ã3EÊ™½ü‡0Š¨›.ä¬ç>Cânt©îŒ¤­—Z´Ð 777z¾ CrðÖK½ž‹ú¡(¿èié”j³hr½Xè%‚uV3:˜!5ûò¹¦6Óì°7FˆØEjÝQg íSà%•z±š±G
+‹B;}Š0\ zº[/cÃ;ÉR‘×fú!Í23]ä¹H „_ÕŠØŠZIgʘÂvêeªUÓzXµ¥>=VÖéJ|·[H†PH†˜:ê¿0ƒWU’jEÎùv%ù÷vY=:ºîÕ@ïÃÀËtíŽmV#kÓˆzqB½¦LÝ
+
+jvÐÀŠªØ(üs_¦¯è±¼£Ói{ÃNã:Þ=
+ÛJ+î­0i_ÅÿEp¤X†FT½ñˆuŸçOžé4„Š3y’@îûíöÄ2ÄCÊî7K! ©¤I»E¦ê]9#_á©ÌÂr ŠÙ¤#®í–&mBbfAà¾;Ÿœêu“õ,eQǵh˜¬Œt™¸;ò×…PÉQÓ¶ú<Zβz°«=9ðIF§a¤J3Ùƺ™C«òµ"‰óZVPé=J›Rþ–A (âî¹Ù¬Ô‘S–·Å½ªŽxØf~¹ 1=xÍ‹UöhFZA¡*ÐÎD¿ÆP«\©u%‡}zhþ?붛–˜y]4uL+t1‚Ýðl×3­M006AoS™Œ¨T©ÓÒîÚ¶©;WoÊ\ÌwÔ˜§Uwi®Æ9ê¦H¥>
+xàuŠT XiArãuœfzEþÇQ­…OÕn’ªu;(8¥ù¾’¥H¾èeã^êEÒÞ(
+·8òyš(g+¡¢å\?Œv¯Äêy†¶ÚÜŽ*yVÚá@º:ä½²"‚ˆü©·ë:U{Ä°
+Y«•T?QÝþ›íÑý/¦~ endstream
endobj
1317 0 obj <<
/Type /Page
@@ -4786,29 +4779,20 @@ endobj
/D [1317 0 R /XYZ 56.6929 254.1661 null]
>> endobj
1316 0 obj <<
-/Font << /F37 1042 0 R /F41 1238 0 R /F21 954 0 R /F22 977 0 R >>
+/Font << /F38 1042 0 R /F42 1238 0 R /F21 954 0 R /F22 957 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1327 0 obj <<
-/Length 2693
+/Length 2694
/Filter /FlateDecode
>>
stream
-xÚÕZK“Û¸¾Ï¯Ð%NÅDˆ9­×·*öÆ–³ÇUáˆÄ¬DjEjÆ“ÊO @$Žìò)5`³»ÑÏÀÐEt‘K’ðB,²B™P¹Xío’ÅÞýtC-Mìˆâ!ÕË›?¿æÙ¢ EÊÒÅr=à•“$ÏébY}Š^üõù/ËWïoc&“ˆ“ÛX¦Iôöùß^áÌx%eôGñâÝÛ×o~úøþùm&¢å›wooã,)|yýÛw¿¼:÷áöóòç›WK¿ŠáJiÂõ~¿ùô9YT°àŸo‹\.à!!´(Øb#$'Rpîfv7nþîÞšOC–“<'2gYÀtŒ.¨ \¤ld;Y
- XݷǺÙàs«64÷e½3|As­«7èÚ·“¥w]¯ö8Ht–ó&\µM¼¥yÔîvFªù@«£•º;m6~Þso¼a»a+cXâ½;²,‡8Îr~v®wïKo!d3p÷¼2ë"F ’Hª£ZÓTõ&À‚¹<·4Ï\Éó¬°[Ð/Ä¥ <͘ç3Aõ.Ù1X?Ë…%mº]Ûþv:x
- )E3Kx@çlŽå^G?Ï£ÒÌhósŠÝgWí~nƒð¤Â‘MŠ.‡9 ;ÁwøôûIÑÃðdË ëØÎxbe¤` G˜ÿѺ¾^k­Ö.êƆGÿ¸S“ jOýáÔû8Ü—=¹¨~ xJ²ÌÁÀI’†ë¼%Š‡T®X]ÖyO5Š¡Ì>É9{Z¦#
-ÈÅEá•
-9º4é“dQÕîKc!¨uƒ60õE¿Ü ÇÆ”ðüÏD&¡ ‚@´ñoˆràD‘§.lZxï4Úëø6#ítÐÆx (Ðk0vØ©ÞÒ·kÏ ³S6 ÍØ„t@V¤ÑËx[v6–$hžðtRÁZ]ç(¨ö/·± ,êj-ç릇B»rE qdBÌ•øÜA<»ÏL|›Š¢ë/®ÖÒè®ìWÛ)«‡mí&Õµ:õXç©cìØWTU®¶ã$(ñgWw6êõLñ´½C? gKÙ(m>N“èùîò}{À6ŠÜ}=Ы•êºúÎ%݃i?©ßçja¥]f €"–C6ˆŒP‘ñMIÁS ãPªØ
-q‡\1Äl3J2>²ŸÆ¦ãòS|ݸõf^PØ(¸ª¿Î-ÕôW]ö9P¯¡6
-ˆe“ÒÊ5°ÉòT°§18ƒ‚øŠzèR÷ÛÊHí€:ê[ýGu8eÒ¦^y‹™´m“D0ef «tNdô£%®Ôº<ízí|³ßÄYØBA\÷~u§ú¥|µEXÓX[ü#`ž&l\­|€½Ñ0§Q½ÛºUÖ]§\ÐÝ9ð\÷nC|j̵´K×áëâèÎF¨úÒ«¦RVÊÃåfyXD†¡> DƒŒ~Wò˜‡žê*4àEJ( ‡è×ê4ä1 <•Mlqù¢Ú5ÇnùpïzF¼
-u"yŸ ×çº(+`:mBñÛ«
-v‚_Ñ&-Ë÷–Ðùs’LŒ“é¨úc­º¯ç½¿ªîzWnBˇ¢—ålÊOøQ‚x# £cÇl»„“¬ðܯb¼ocàÁ
-° ‡åþßv×ùöKð_×^9ø>KRñt{RÍ·WO5=öµXFO2ö´dOuE4åv-¹œ—}yäøÐ9ézÌ2Ž[r=p[r.³ñ6\¿DçÁ i›xðV÷ÎÜö³!=îµÍ—»]ûàdmí$´¡#öÉ´ ”3ß'éù 3Ë4H„¶n6Äðd­`ds€F>ã¶<ËÎ1 ïLØÂ\yך^
-Ã{˜.u{²ßéh²C»ÀÔ‚V;‹|S¯ÐákÇ©glÀ„IÏ4px€P˜aúp+È
-#si¿Xô ªGfœ¥V˜ž2G·ð{Þ÷觑²†l=âà¶VfªÅß;ûFç­sIË«'eóÍ…–
-(>pGÊìéóÉ¥ñ7Þ“†>ïÏê‡]ùè¸Cø½Úø«‰CyìÇWþÔ
-p¬xJ´§¹=vrB þ²¡ðÙ£,ˆ†—
-N8çŒd¬`—·Àvÿ¤?í.îü›¾ü2õÃ%0'üµµQ†Ìè‘2ÂÒTúÄ„íû&·×ˆã<dÏÄŸ¼÷?²œÿ¿Gd„çùÌ9#×çŒ,ñJiõ‹©âþ^.5ÿ+Lendstream
+xÚÕZK“Û¸¾Ï¯Ð%NÅDˆ9­×·*öÆ–³ÇUáˆÄ¬DjEjÆ“ÊO @$Žìò)5`³»ÑÏÀÐEt‘K’ðB,²B™P¹Xío’ÅÞýtC-Mìˆâ!ÕË›?¿æù¢ EÊÒÅr=à•“$ÏébY}Š^üõù/ËWïoc&“ˆ“ÛX¦Iôöùß^áÌx%eôGñâÝÛ×o~úøþùm&¢å›wooã,)|yýÛw¿¼:÷áöóòç›WK¿ŠáJiÂõ~¿ùô9YT°àŸo‹\.à!!´(Øb#$'Rpîfv7nþîÞšOC–“<'2gYÀtŒ.¨ \¤ld;Y
+ XݷǺÙàs«64÷e½3|As­«7èÚ·“¥w]¯ö8Ht–ó&\µM¼¥yÔîvFªù@«£•º;m6~Þso¼a»a+cXâ½;²,‡8Îr~v®wïKo!d3p÷¼2ë"F ’Hª£ZÓTõ&À‚¹PæY€‹ yž–` ú…¸„§ó\b&¨±Þ%;ëg¹°¤M·kÛßN‡
+WÒ º
+†æàyVS
+#æ`aÒ·d!QåÅ´G¯Ò^õŒ˜w
+vÕ5ÞH®¹·N—ªž6å ¶“Ö<s§“‰ˆxF·_$Τ;A…‘¹4ƒ_,Hz„Õ#³ÎR+LO™£[ø=ï{ôÓHYC¶qp[+3Õâï}£sȉֹ¤åÕ“²‹ùæBK€ÀÑÌ08»\¿¸…à½ßÒb’šcxòÎœ|eßÔªÖœÕTœõ*Œ¬š†‰tâ9aw¨Z@ÈÏ_íÇ—'m0Š Cÿšý¤ â°…4¶'#‰öÒº\Ù/ñ,kß;š^ß,!-˜¢ƒ&h–¯gîÔ¶¼¯[£’¹ ͣ˩²:4­¥E†x˜V¡Nüôé`¦LxøДfn«eOßõ sð./Úo8ÖØЫ²"Ás3^$¸#eöŽôùäÒøïICŸ÷ç õî|tHÜ!ü^müÕÄ¡<öã+ j
endobj
1326 0 obj <<
/Type /Page
@@ -4845,7 +4829,7 @@ endobj
/D [1326 0 R /XYZ 85.0394 113.5963 null]
>> endobj
1325 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F41 1238 0 R /F53 1333 0 R >>
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R /F54 1333 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1337 0 obj <<
@@ -4853,22 +4837,21 @@ endobj
/Filter /FlateDecode
>>
stream
-xÚÝ[Ýsã¶÷_¡ÉK噃oÍS’^®n§I{ç$“¦™-ÑséˆÔ¹n§ÿ{X
-Ï'ZC¡ÿ“×}¡  ÿõÖ‹}Ü~†M*—ÊÌä¹zi*Í/¥R@0™¤œ=ŸJ‡Tó©4R â\sx
-¡4-ÏJP–>QØ©«öUg½ tQþc]>t‰T¤œ›GßvűK,¹È(²´EØÉ2@¦¦,å,S QQ}¾²æ@–»êšB €?úx€WžµV”óeÝt^`Ü…rƒóU=cüÚ‚êç”  Zš˜»~Ó"ûõ®¨ërÌͦãâ`õ7÷h³ÿ)%Õ8­?5' _Çk½<¥DâP 3-/؃!b?VÝ®9u¡Æña´y°¾á«¥Êß}¬¬5bXmöÅÓ(Ôž\ÝuUÙöEb®sïßΕ&ÒB6ú1=Œ‡ùZ)],•$ø¥–JŒ@ó¥R¤Š{öLE$9Tz:·mrTÛT£2Á9ŸbÈö"Röñ.É‘1Á¦.r´~”B}#¼ù=]ä÷¾LÕ?p°4êÅXԇшԣ†¾Ž>ÃÈmO–eÙO©X˵
-c˜`CœèCó¼ž$§ò¨'o°zåß–µ­!K/ÔÝþ"8¯«z›JKLfBÆVŠ]eu¹-k|zU$df4b¯Â—È›²]«»Ð.á9 *6­sÑbF@6Hçà‰Ì!âðä«!}HL¹"ŒY÷.ø1ç 1(Î)W#i 1OuAˆsnz¡~hžŠ Ðr‘›+á;Bvì‹j©Jd
-¿mè½¹Ç$ÄldgšûT “Âöúé°7Ž¡6ç2}iË ÃÈkÙïauÌêvu(w¿lmS2¾åéè­b#ï] #TÔ]y
-Êú†Ÿ]Óv8ò­jÊ–J[’ÍÆW"áw¹=ùµ3®¨€>xzoŽ”{g¡±ÓëðÌúžŒî<í4kLûpYÝ{éšDl_…·ÙúªÁª†è‘ýZxÊa™³Á;H!ˆÍaœÝWu™%›ÀPs«œ½Ì ¾’XG‡í‘át–ñÛ#,бn‚Ë÷.´ØkÿUçŸn“¯)˜²VŠ5åžÌå=ÚKµà·HY&hœÇŒ1“ULÆû‰RÊ(×/ô›<“,öú’Æ¿ª îqœjðCrª¢æD\<A
-Œµ†ÎTáM<•kÈ®Ó.³Îö}}ų­>”Ä07(›¢Ågqžî8=ŽKÙ¡ÈHßH{.wS#ûx·l¶p,R¸n&ëK¦å­H¤Í£¶xYàÚ9 0UúH¿26xu÷”’L•Iý‚½54 ÖMnñ¾‘cK 7:9gF°˜EŸp3­gc¢õº2Ê,o:ÿ²þS(_jXEŠI¥Ñbe áɉåZUQ0%3PªQBbavKrB[âVKUÄà‡&'òåˆZ^ÚP_€ð У‡5~=5J›çC £ úØ»:³lÀaåhg‹¸(^[Á_…’XƒèI§Êã8¦—‡“Ë’Ì7T`¦ÀŸžÚàpÓ
-ç@…¬}³¬9mw8íNz€´.Kÿâ2ËoÝü1û`•]%°SÐzg÷ü3´¿;¹‚ó GÛÑLáá}õ¾c@ÿÙ
-c"¡f‘MùÄKFE$0!Z›Ä~1¿äó[\í§D©oW‘ãjÈpôȳ\ÓýÊϘ±û 46컎úJ^† ¸I¾]•ŽgÆÆï‹ñŒ˜x=Œg°À.œÍu Î<t•
-ûms„xsHÀæPùE§š­¶¸Œå¡-jÊTJe
-c½Zm|¿«BW.ósM0r\$ÑÕSˇâØ:¤'TÀw0*ÖîLÇîT¨Þl…D0"By%Ôm
-_Ù;A9Ö D¾\ŸŽá”½çŒEùˆŸ_ì¿ôŒÝ¡X¯™ÞÁwQÞô`ÛãþÇs_[ø «Ã¢lXs?ú½+Úr¥<Ó²^7¡’^ƒƒàq«w
-íÓ»……„½(¹kû-¾„&˜r™pNúJ¼ÅHUà4fx¸âPn¼ñåø\z£àsnøó.ª3ݯ0‘ÈWí½,£Rì' þð\HV¶Ó`]iÒœG]8TlK»ÄÅè0q1Ÿ¸à×&.F|©f'ü÷30rÍeKÒ—jö¿-Ÿ…hÚ6?ò€B÷w
-`1g×vàâš<[ÀsÛ+ԗ¨&>TY Pl>éZÏT
-vÏ©„5¥éŒFÀ`U_Ì  Èp,²Ã—…·²Xg»¦ËP‡Ø9ìkæñ3§Ü·<û[Ôº™'îü3jíŒïáçbxiýÁÝÄãHÇÒw|àá¥uº1
-_Fäü÷gsÿëÅ¥ýÆ&u`A¢ý`ý¿ÇYP¥õÌGŸ,;ÐÀÄ e%§äüÛV@©\±„èÿ:Ìfendstream
+xÚÝ[Ýsã¶÷_¡ÉK噃oÍS’^®n§I{ç$“¦™-ÑséˆÔ¹n§ÿ{X
+¢Á
+‰ˆ–6ሑÌ2]1Ešc„°‹Íc‹Ütáö  V°9T5@¯cÑ9„]N‰Rwˆ)Ay@nÄÉm¨FÍC T*»`NIJ¹ÇßP*œðe[?€ò@ÚI¢È˜W½.qÔ7_ÿ[&c¯’ ™3zA<ëIŒíéá¡9v­çg¿Ç†“‡m€w9
+b~Ô&Ω9è…òQ y*&@Ëyn®„¯Ù¶OªU¤*쨠v€‹®ðÛ†Ú›û¼ÁlOsŸrdRØZ?–ãæÜ1ä&`\¦Om¹aèy-ù=ÌŽQÝÎén㧭mHÆUžŽ^[À7òÞÄÐCAFÝ•€­ É*Ÿ‰UJg†Ð‘WmÌr;Ã(tLËc¶Puë§é³"yþR"ÃìeÌ èj.„‰ÑP×þ´I3B&dX<,îef# è9¨Tk=ì|ÿÎ> ˆ°^>"HVѶͺ²‘Q,Z3Ãdžì bj itn×⬅©04÷âðo}@µ­]å
+!Úmðvö¼Áá,jO>½ ÓGg-5¡´˜/׿qø
+:¸n?
+†!*™¢.Œª
+«éúªÁª†è‘þZ‹xÊaš³Á78B‹ÃØ»¯ê2K!çV9{™†%1Û#ÃéLã·Z˜ cÞïk±Ï~Uç¿n“Ï)¨²VŠ%å¾Ìå=ÚGµà·Hi&HœÇˆ1ULÆû‰èRÂ(×/´›<“,Öú”ƯE ÷9v5ø‹.9UÆ
+–Ê5D×i•Ù3gë¾>ãÙVJ☤MQãˆÓ8?î8=ŽKé¡ÈH_H{.vS=ûx·l´p,R¸n&«Kªé­H„Í£¶øXàê940TzO¿26xu÷”âT•Iý‚½54( æMnò¾cS ×*9gJ°˜E›p3-gc¢öº4Ê,o:¿XʧVb’i´˜Yƒ{rl¹RELÉ ”„l”X_˜Ý’œÄ–¸ÙR1ءɉ|9¢ÖƒEê³`zô°ÆOcÆ®Fió¼«aDk×AFx‚8Ìmo'ÅgËø«k0=©TyÇôòprQ’ù‚
+ôøó¡ØWlnšCáìF!i_,kNÛv»“Z—¥ÿq™¥·îNþ˜}0Ë®‚Ø h½³{þ™?Úß\
+Áyà£íŽ¨¦ðñ¾z_Ž1 ¿¶Â˜HˆYdFS>±’Q DˆÖfÁ±7ò—\¿e@Õ^%J]¾]EŠ«!I<Â1#Ër.L÷3?£ÆîBh,(صŽêJ>† ¸I¾\•ögÆúï‹þŒ˜x=ôg0Á.œÍu ö<t”
+ûmssHÀæùE£šÍ¶¸Œé¡MjÊTHe
+c½}Zi|¿«BU.ósMÐsL$QÕSˇâØ:¤'TÀwÐ*ÖîLÛîT¨^m…D0"Bz%Ôm
+ŸÙ7A8ÖD¾\ŸŽáÊÞSƤ|DÏOö_ZÆîP¬W‡LïÇà^”W=Øö¸ÿñÜ×&~ÀÃ@ë0)æœdà~\)O´¬×G¨¤—ßà x\ꀄ·_}é/äK¡}x·°°wmïèKh‚Ù&— ƒà¤ÏÄ[ôTvc„‡ç!åöÈÇçÂ5
+`2§×¶áüšm<›Às[+ԗܨ&.ª¬6ŸT­g2»çÔ ÜšÒtF" °ªÏ
endobj
1336 0 obj <<
/Type /Page
@@ -4896,23 +4879,22 @@ endobj
/D [1336 0 R /XYZ 56.6929 794.5015 null]
>> endobj
1335 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F41 1238 0 R /F53 1333 0 R /F22 977 0 R /F14 980 0 R /F48 1258 0 R >>
+/Font << /F38 1042 0 R /F21 954 0 R /F42 1238 0 R /F54 1333 0 R /F22 957 0 R /F14 980 0 R /F49 1258 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1345 0 obj <<
-/Length 1558
+/Length 1557
/Filter /FlateDecode
>>
stream
-xÚÝXKoÛF¾ëWðЃ„ë}?š“8‰ÔIm¥(#ÒŠtE:®Qä¿w–³¤(ŠnÜÔ(‚Bícfvvæ›Ç’E~,²ŠPáddœ$Š2­63]ÁÞ‹ 4qG©~XÎŽž 9â4×Ñòr Ëj-‹–é»ù³—Ço–'狘+:d+MçgÇ?žàÊl)5ÿ¹£xöúìùé‹·çÇ #çËÓ×g‹ØP'ó˼¯ßœìø.ï—¯f'ËþÛ2*ü~Ÿ½{O£.üjF‰pVE·0¡„9Ç£ÍL*A”¢[)f³ŸzƒÝ–uÊrJX¢,7¦“l`:Fa,ud”#ZpÑš®ºnòª¬±¦tþ§¿Oıָ(fŒ8¥xK—f—ÉMÑÄu¶ý”m‘œqC(üØÓ–Ns|ÌîÀtè·eºú ¦HÎAW~n7žs>ÐœbÛ’,×yÎø•R^dOp’_†ÿ²n’¢ÈRœ&5
-™‚GÁA´•x”5«#¯YUåå„Vm5äáÀÛê¦è)Šê‡Í:ÃÁªÚl’2ý~âø˜Yp”Õ
-F†8¾ór¿ ¤v@ªˆ3F‡ƒ½ŠhúmVTI:¡i‚`´XSJFJe™­œt‹½qz]mSp‹ÀŸÜÔYà^‡A™l¨ƒÆPøvÁì¼ÕÕÍ2ô’—ùwÜU9:¤¨VI±2„Ë&Y­ó2Xü6Ããp¶]ØùMYæåUØÍ›5Ž.+ï®~¬Ò´ŒUp
-E¶­ ÖUÝ<Åùgüƒxª÷èvQ†d!Ú #F°lè{V þ¯“óeØHÁP¹÷O;Åp±3úv*-%œs6ø(§
-&‰6|JQ"™¶ɪœ8ƒÉœ÷ã¡ÈÄ) †4iOåUô÷;4Zmx WD+f÷£ü¼¥3-ÂQÚð`eÁ(B ŒûÄt••GkA¸±2_#’¯¶ÉO¸Í ï§=P?ee)îpo…ñ~BŠdÊC  ÓZ”¹/K*MŒ%&g<È;¿=ᮺD ¨óðaó·“¢®ÐdBh"9ENš××Eâ•f<$&à>[Ô¿¾®ÊÔ›ôÐ’Œi€rgÉ>Tu‡ª…ë‡ØmL<ôÇ¥2k ,µ©V’t·0aF f |ŸöÒ{ÍèˆÝc©5ÑqÑdÛ2iòOx1U-þ—ÜÈ}‹¡ž>¹uaŠép
-lŠΧ°ÖòÅÉ„Šê!í=ÝZÀG|býæ:¤ˆ CøÔ¨Âi:¤ ècbŒ¦6ó„TVáÀM•æ—w§YH´Ž«‡˜]sÂ}´#iÒô•ôFë- uVRF„ ±P„1ª[6ßBòE ý´ŽùU™L‚ͧX ½“ؾfÛ&É[{³ùÛ³Ó_pT~˜ð¾ôÂzè0XW<=iW<ýv…Mò±Û½ÎV¹7à
-çɪíùž ]RãjšÕ«mþû&(Ôåè´½ªéÅ(22Õø-×Y<5¸Â
- 48ûžÂ)(¼wà½AS
-²ð™ÏØ»O†Ù@ù¿
+xÚÝXKoÛF¾ëWðЃ„ë}?š“8‰ÔIm¥(#ÒŠtE:®Qä¿w–³¤(ŠnÜÔ(‚Bícfvvæ›Ç’E~,²ŠPáddœ$Š2­63]ÁÞ‹ 4qG©~XÎŽž 9â4×Ñòr Ëj-‹–é»ù³—Ço–'狘+:d+MçgÇ?žàÊl)5ÿ¹£xöúìùé‹·çÇ #çËÓ×g‹ØP'ó˼¯ßœìø.ï—¯f'ËþÛ2*ü~Ÿ½{O£.üjF‰pVE·0¡„9Ç£ÍL*A”¢[)f³ŸzƒÝ–uÊrJX¢,7¦“|`:Fa,ud”#ZpÑš®ºnòª¬±¦tþ§¿Oıָ(fŒ8¥xK—f—ÉMÑÄu¶ý”m‘œqC(üØÓ–Ns|ÌîÀtè·eºú ¦HÎAW~n7žó¡æ4Û–d¹ÎktƯ”ò"{‚“ü2ü—u“E–â4©QàÈ”8
+¢­Ä£¬YyíȪ*/'°‚h«y ÞV7EwHQT·8lÖVÕf“”é÷ÇÇÌ‚£¬V02Ä ð—û] uREœ1:ìUDÓo³¢JÒ MãÀ£Åš
+T2
+T*ËlÕà¤[콈Óëjœ8€[þä¦Î÷: ÊdF4†Â· fç­®Þh–¡—¼Ì¿ã®ÊÑ!EµJŠ}!\6Éj—Áâ·‡³íÂÎoÊ2/¯ÂnÞ¬qtYywõ`•¦e¬Š€+
+Œ7AœO{ÄQ(²ýkm°®êæ)Î?ãÄS½G·‹2$ Ñf1‚ýã`Cßû°jðt˜/ÃF
+†Ê½Ú)†ûЈѷSh)ᜳ!ÀG9U0I´àSŠÉ´}HVåÄùLæÔ¸—E&L1¤!H{*¯¢¿ß¡ÑºhÃkà¸"Z1»åç=(iŽÒØ0è-E¨QbŸ˜®²râh-7VâkDòÕ6Ùà ·yá=ã´ꧬÌÁ#Åî­0^ÀOH‘Ly”aZË2÷eI¥‰Q¢£ÄäŒyç·'ÜU7u>lžâvRÔšLM$g£ÈIóúºH¼ÒŒ‡¤ÀÜg‹ú××U™z“Z’1 Pî,Ù‡ê¡îPCµpá»í‘Iƒg‚þ¸Tfm¥6ÕÁJ’î&Ì(ÁŒ€
+¡ÅÀÿ’¹o1ÔÓ'·.L1NMÁùÖZ¾8™PÑ@=¤½§[ øˆÏB¬ß\‡1aŸµsC8M‡`LŒÑÔfž‚Ê*¸©Òüònâ4 ‰Öqõ³kN¸v$Mš¾²“Þh½…¡ÎJʈ0 !Š0FuËæ[H¾ˆ¡¿€Ö1¿*“I°ù+¡cÛ×lÛ$yko6{vú ŽêÀÞ—^X늧'튧߮£I>v»×Ù*÷\á<Yµ=ߤKj\M³zµÍ?`ß…º¶W5½øEF¦¿å:«ƒ§W@ñC·Û‡›º¯ÆÓ‘JeÇ}N›HÂÐ *û`oû/2®' ²¿Qðr€<C$ê!õD´ ½U”¯ãê˜í^ ‚¬0ì8F%­¿àÒ)­èKÚ¾áÎL@ˆH&à©"±…¹8}ñòí›±¡8…”Å | Eþ;5{‘j=Éá:Ò7X{j>ó1PÚìôiŸˆBYK§ò°è¤ùŠŒÐe]O;R%M (’:;€œ‚kK­ä#ZR8A 5Ð5î^†ÿ çó6¼U¿
+3x†ɾ€2a-tHFw(;=[Þ²ÄGÃØXÉIˆí)ù_@ì±.ú­ Œ9N¨aLÁcö¿µ|sƒ'+1Î?ÚŒ,<h¦>ÍÑ苹ñ¡wßG¡gßS8…÷¼"hJA>ó;pc÷É°#(ÿ&Omendstream
endobj
1344 0 obj <<
/Type /Page
@@ -4937,7 +4919,7 @@ endobj
/D [1344 0 R /XYZ 85.0394 421.802 null]
>> endobj
1343 0 obj <<
-/Font << /F37 1042 0 R /F41 1238 0 R /F22 977 0 R /F48 1258 0 R /F21 954 0 R >>
+/Font << /F38 1042 0 R /F42 1238 0 R /F22 957 0 R /F49 1258 0 R /F21 954 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1352 0 obj <<
@@ -4961,27 +4943,25 @@ endobj
/ProcSet [ /PDF ]
>> endobj
1358 0 obj <<
-/Length 2408
+/Length 2409
/Filter /FlateDecode
>>
stream
-xÚ¥YKÛ8¾÷¯ðme RHñ%îžvóBf€6Ý{ÌÌ–änalɱäd:¿~«X¤,Ùêô
-•1aåÊX™)ÆÕªÜß°Õ¬}¸áF*‘))|,¬¦J™*r³J§Lþsóú}ÎW9Ë´ÎÕê~;ž¥Êt!Åê¾ú5yóèC}\§¹b‰\ÿ~ÿm“™) Çm Ž°“\ú ÿ®¾º¶¬+ÚñööŽïk7œŽu?rà2Rçƒ6ã r_§œ1–ÜvC³}
-[ò•Í¬ÎuØ!D&•¤3ý)BèäöÓýÇ÷¿Ð¸éñ×$Ž>÷uùèÚ¦ßÓçð膰¾Ûußú@äz¯,Žûúøµ>†…¡#â–$
-,ê&ÒîÜ×új›Iº-MâÑõ/‡Š¡*œgV©Ü«ò½kë
-tÎ¥yÉÂf‚Á ‘½"–ÞÔ8ðÁAU÷å±9œðQ(–‚ˆe†óxzûÜ@&Æ ê&ü›ÉoÞÝŸS–á\°r¤$Z<>¬hðy’ÃFútºrØ,¯ø¢,wuyFgyÆ5¤˜ ‘Æ49=áÉôÇ‚Ä\*!5ò¼ p…`ƒÐ‘*' ÐkžŒÞÀ9ôÆŒ(„œ”Ѩ >Ò6+$dC2¾Ûõ]ú¬£ š´1L®Ž–ˆÂÿØ9#}:Ýpm“k¾3ç ªÁ9æJ¤«ÅL +ך—„¸à„"ø[$÷‹á•N#ÿB
-5’é@v :te·#Í|^ö‡ºl~c,‡
-é3›Ð
-¬RèyhB~úüþ ¸µ:»4Ëe<Ï´°UþróëïlU}~ºa™°…Z}ƒ–‡|µ¿AZk•Œ3»›»›ÿŽ!…"ÓŒëçyÑ>¼Âv¨ Vi”.9à1÷Ȩìve1¿Àª°6“ÌÒ½ØXié‘g™ytŧuªyrÿçÉ»KË
-®¬´VÑdìu=ÛÀO¼þ¸ÏWo;Ðh5Q*2N§œ½RšÍ’&
-Ò:WXòÂ$ß×2€¿ï@Pº6l€ M£M=aaÎe¦†@ÒAæ8.œÐ#ïWdW= qHj
-ÌÄzÚbM:H—(?Њ…~'ýÎÛ'peSRÆÿß¡Bðùró3nÒ6nòc_rà×ÑϾ; †%[ï%\«*ˆt¼­€b ¥v®Äè÷ë‘®ªwõ0ÎaI°¶
-Çø’59.úÆ¡aðã͉
-rg_ϙ͋imÂE©Î¹Ð‹ ÁĽ<9úÑYðIì9´)n+;âÎÉ\¸Þ–T’S0̸E -~‘7Ò÷¶éé¹HÒyV0 ª÷õsŒs•qá 1LÝ®)—&@e
-¨ËÏbcñgZ e ] »<ê½f pŒ2ê×(eP ¨ÜÎKÊú¾ gÀøç64Š8÷‚TUw™Y£¢îèVî áŽëh¨0I£[§¨ù®+ÝnIuÀø…±“úËò N?2¿Ö‰FÔŽãhfõqß ~ú”0ÛüGô“³@à*Ó
-°§)æ~úöØ”#áå@‘¨øûP·õÑ ñÆmžÛTl’y~]çøëïubN€8:§CHwu}Õ€0Ey"¤꥞(Ò§Ó íÈßyO²aOUE^‰dr¸-v&ÑuSˆ^P*d3ƒªfÂñ¿ªzpÍ®§[ÀÌÄüv©NˆIŒBŒ'§Þg0œÿ¹>njê”Âbß<´èe\¥#¿œê~èiÆÃa$ÛÔ4±wU\yx瀹ûŸßýòúÃÝMÏ[2\ß<Ñ/ÜÍté)ŽêP"©‚Ô8^Î\`¶š˜µàê¤P=M
-ÃRúu$ز3;{/Á7CUW¨Ò7”ÐÖ Í×1¿ ¿ ôY¾ @þIÇ-ô˜¹]®<ÖdÈf1á  #7s»¸ˆ/ÎÈ×Ó#ªnïšv)Eö×|¦¸¯ØªH>µ¥G/ÚB¨‚¯ÌC%×j ¤‡
-΄£Màõ¿|ŒÜHÖôA-08×I@t jæ`Äçü&‚ñvÌ^!ÃÛaˆÇÙò…0s8BYoظ˷K¯ãñ¹ã&Z/ ¾*à|,OãmFlq¹I~cŠ}?Ãô¨ƒñï’wïÞÀ:§¥mÍñƒ€P ÆÌ?×ø¢‘|þ|÷ñÃ+Z¿…­D@Ð+L ^bÉ…‹è¶¸¶…¤èýg5¡"kΙ'ݨ¬¸ÓÐá#+T'ßîØ%ÓZ2áDVµúŒUa-€üZš‚î©iÃáaf±Trh!Š¥œ p/Hºl‹›ïîœæ#¾Ü¸>Ö¹¸ä_šÝ¤$`\àŸSè°Ö¢úφk¬pQ- ;Â.$ð3OJBeò™7Ðs³3Ò,6 @*J B¹xöÑõú¸ÿª_µFendstream
+xÚ¥YÝÛ8Ÿ¿"oç
+ ³©E¦ŠÜ¬Ò©ÿÜß¼~ŸóUÎ2­sµºßŽ{i£2]H±º¯~MÞ<ºÃP×i®X"׿ßÿDËdf
+Ãqƒ-lÆ$—~Á¿«¯®-ëŠV¼½½#â}í†Ó±îG \fBê<HÐ&c4C 2ãë”3Æ’Ûnh¶OaI¾²™Õ¹+„Ȥ’´§ßEÜ~ºÿøþ¢›Mâès_—®mú=}nó»]÷­L®÷‡Eº¯_ëc˜:bnI£ ¢n"ïÎ}­¯–™¤ÛÒ nýP_Èrx0<
+ç™U*÷GùÞµõ?€1*©Üà2àe*ùØÒÐqÍ‹¤î]Û×4‚Òð×–=›‰ç:Ü° ÊÖ¹6§ä™–¶­ß¤ÛG¹þ'Zi:âÚÈäh‰0Cv@ò[³ÛU>Öåseû:jïÝ€T3„S£õš.œ ˆFJ9ˆÕ ÁXÜkJûBt¡ÕˆB¯ãï8UžŽd´v ³|øpmõ*,ÜÒ/x8Ž´Íи!Èq—; G×ö[²C]™óŒ‚¢ò}‡ÑÁL²ïHújÚmwÜ»Áë€nÓ"1ܨà̹4/¹QØL0!¶W$Ò› o$ªº/ÍᬀÒÀ±D,3œÇÝÛçî¤
+È]’hòø°"âó$‡üétå°Y _ÉE]îêò¬ŒÎòŒkH1*irºÃ’鉹TBjäyAá
+Á¡#UN ÐkžŒÞÀ1ôÆŒ)„œ”Ѩ >Ò6+$dC2¾Ûõ]ú¬£ š´1L®Ž–ˆÊÿØ9#:]pm“k¹3çàQƒsÌ•JV‹™BW® </)q! Uð9¶HîÃ*6Fþ…j$Óí@)tèÊnG'óy \Øê²ù±*¤ÏlB+°J¡çe  ùéóû7Dpkuvi–1Êxžia ùËͯ¿³Uöùé†eÂjõ >XòÕþy­U2Žìnînþ;J„VˆL3®Ÿ—EëÈ
+$­P¢Ò¨]*rÀbî‘ñ°Û•Åü³ÂÚL2Kwövbc¥¥GœeJäÑŸÖ©æÉ=üŸ'ï.-2%Õ„RYn”¿¥«/+¸²ÒZALÚŸõl?ðúã>_½íàD«É¡¢àt*ÙJÏ“&
+Ò:WXòÂ$ß×2€¿ïÀPº6,€ MÔ¦žˆ0ç² CC`é svèQö+²«žÆ.”p
+#èhùž>èª ¿'\" vZ¬¦Iäïå%Ì€Êj»JÃÚ¿5§©®ÀL¬§-Ö¤Ó‰|¹ò­XèwòÐï¼}W6%eüÿ*Ÿ/7?ã"mã"Oû’¿Ž~öõðØ!
+rg_Ï…Í‹imÂE©Î¹Ð‹ ÁĽ<9Áñ£³à“ÄshSÜfv$“¹p¾-!©$§`0q‹@Zü"o¤ïmÓÓs‘¤ó¬`6Tïëçç*ã2˜º]S.!L€4Ê6p—;ŸÅ&ÆâÏ´Ê@»VyÔ{-à+d<_? ”A%$£r;/){èû.œA
+¿>QÔŽ#µ #‡ú¸o† ?}J˜-þ£ç“3-¸Ê4@©²iUµýR§1ª5&?©ìiŠ¹Ÿ¾=6å#ÅHx9P¤*þ>Ôm}tC¼q›§Å6›dž_×Ä9þÇú;B˜ ŽŽÃéÒÆ]]_5 LQ^LJ©…z©'ŠüétÁB;r%wÞnØAU‘W*™n‹itݦ—Ô
+™ÀÌÕ *™p|ÀÀ¯ª\³ëéVðC'31¿]cªb£ãÉ©÷ Ç®›š:¥0Ù7-zgiË/§ºzñpÙ65 ì]¨Q*ï0vÿó»_^¸»£áyK†ó›'ú…»™.=ÅQ½J$uCéåÌfË¡‰‰P ®Nú
+C‚ÈK,¹pÝ綽ÿ¬&TdÍ9³à 3î4tøÈ
+ÕÉ·;6FÉ´–L$‘U­>cU £P^KCÐ=5mØ#<ÌÁ(–JÍ#D±”îI—€-`ñcóÝÓ|Ä—×Ç:§üK³›”Œ üs
+ý1àÖºÀTÿyÀp. ÃŽ° )üÌ“’P™|æ ôÜìŒ<K…M…Š˜ðÌ\<ûèz½ÝÿgòµSendstream
endobj
1357 0 obj <<
/Type /Page
@@ -5079,27 +5059,26 @@ endobj
/D [1357 0 R /XYZ 85.0394 263.0631 null]
>> endobj
1356 0 obj <<
-/Font << /F21 954 0 R /F22 977 0 R /F60 1366 0 R /F61 1369 0 R /F48 1258 0 R /F41 1238 0 R >>
+/Font << /F21 954 0 R /F22 957 0 R /F61 1366 0 R /F62 1369 0 R /F49 1258 0 R /F42 1238 0 R >>
/XObject << /Im2 1355 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1380 0 obj <<
-/Length 3579
+/Length 3592
/Filter /FlateDecode
>>
stream
-xÚ¥ZIw㸾ûWèú½‡H‚LNžn;Óy‰gb;Ë›å
-…›
-|™¥ñæ •À³LlŽWQ,ý8’Ò¶ÔWWÿœ:½fê*#ÃÀ2+œá& ý,ŽÅ‚•qæ'RHf¥ða
-ÅS­s<†ÈR–4ÂL.µû‹5f&ð‚5wÀiG$ûÚ·ÝÑ'Êè8 út*›‚$ÍD
-åç¡lúªmHC¢ÐÑ4-V ª*’õmê= (w$yQ“iX˜MæXnWÞvÄýþÔ:{cÕ‚Ò,ØÀ«M]ö=UûS™WØO²D.lÃ4ö3DK· ½®*Š²AÅ ¿b'¦\ñ"¤™é|àíªFwÌO䱸»)xS‡v¬¹Ü´Ü»c¢eQ‘’Aù¨›ÑìaÊŸd¨üLŠÔìš6™¨Yý |®Œ‘BI×}K¥6Ï5ÊUGuÕÀ“1"*Æã ¿„œØ3Xúy{<Õå0ÕЇ¡gÚû‹Á¤ÏUXNIJB‡–ÊN4]+š9p$ckÀ™ðì—x…‚Hc×T¹‚EÍé²ÐÓûÁ°úJxü<P¡M¾a¸Ÿë±gbÃAógÜÙζ¥B_·gEæ%½%5ÁÚ3“ÞBÉœ¾3» ²']ÿmþN’7{üØôC© ر3[¤
-mI¯(kýjéË6‹Ð×¾aLßcÕŒCÙªNE&}º
-^ ®$§„/eY¤'løAº°½x–Ty¯íH…ƒ~Áí¥ìA¡åH4uåÛ­iôÌ…t
-±Ìd'b|çJæìÛÙ»ÃØÉëã¤é=b©í>ý°?½U¯wõ*œM;Ì@†4nÍ°@ûÄ.º ¾e}˜À57MÕ‚õ8uß•åï|?M¤›:ˆ|ð™‚'؈òÝ,ªpšr`‰Äéȸ/B'l›]¦{ˆ0°×ε{l% “¯Þƒ²LD<Èê9®Àa¸UÒ ïú®½L—D!¬{ ïž¼εnù·99g¬ <#CïaÝD¦’¥ rú¼"†Hùq¨¯ˆ!ñC1Ù¹IœÔ­..6Lú_\îžpwš¸-›I5·BE~áTÔñµþtèÄ%‚“Q
-f†4y=\± e»Ë“¦• òP)± KüÎYÔÇ|X`«Å~¢·^9Ú&ÒT:ks—‚{åήŒÍ”# ƒ}*ÞѽÉÉAqmÞ3Ò™ý•¹¿ãU¬aÒ{KÇ"x±¾›]ÉÈ;•
-€@CÒš÷£‰SddºvDÈFHΚ0ZH"Na3‚f†8°gši°ë4L Ð…¯”Qê«`ÊmVŸéê´Ýwíq[
-³b¦^PLZ€Æ*“ÑXl?¶k—Ž[€z׎‰ç—IUÞQO_–Tà|8Œ-û¼«N3ÊZÇöÎMÐif%Óaz¯¶FSÞŠ(Žý8άˆòš/—_]%V>„m6´äÊ[ò2ðÃ0¶ÚÚ€/o¬Dày@#’(» Œ"ŒA&ÃüxöÕXç±X—DbîjømÄ/µØüR•g“ÞŠ(Cm}µ«`ÍéŠ#™/’3.¦`ò°ÐŸLâDrÆ¿€`%Ýj¥E*Œ(ÊÏÃuèM=Ê&DÚšÂ"3•¿c?Nï F³à(ó㕈8Ö•áoD‰âoîdæp*›A,ìMÆ2¯36ŠüT‰t’ö0ž8¢šÝŸYk®à3œ†òYïU÷˜¥í5ÔAô¬›êwk+Ðj³á0ð¬›ay2B&h DsÄY~èáí#›B?xZðk8Ø{ùæx¾7¯$&%fCÊÝ?õ‘³ŽÞj¶š )u`•ÞxqÐ+ø®#5ò.”äY±ƒP’¨0B(x øDb•ËÔÏtåÆ@Ï”I[Qœyé™–Tpó©+z^ÁJ‹OZT$ýVø€SJ0Úm¢bWâØ[ñ̾=rKQî(ŒPŒàŠaX™\ðp0ñ .Æ_“¯ÂÑÄ—*xŽ°ØžØ_;ÛÇÙÐ’˜M2‰/â)h¨Ký©§¢cDߣɑb ÃЯ¿Tš*%„$¼Âî`ªˆ ™qÄgylþ;
+xÚ¥Ërã¸ñî¯Ð-tÕˆ ³'ïŒ';[‰wc;ÚÇ&)‹;©)k<_Ÿntƒ‰R:°4@£ßP´ð‹Vq&™ÌV&Óa,¢x•ï®ÄêÆþz1ÎÚ#­§Xß>^ýù£JWY˜%2Y=n&´ÒP¤i´z,~t¨Âk  ‚Owïïoÿ~{÷xmtpó·ëµŒEðÓw·=ÞßÜ=|¼½ æ/"Ÿþóñ¾ÑõZ-ƒ÷ßÝüøx{Oãš©Þ|ø×uEÁÍÝûÛ4ôáŽi|¼½Áµÿyûpýëã÷W·Ã¡¦„Âý~õó¯bUÀù¿¿¡ÊÒxu‚†£,“«Ý•ŽUk¥|O}õpõàdÔM]dd$B©¹ÀI­¢(ÌâXÎXga¢¤bVÊx ÜÚ–tÆßÚ㡱µgšu‰G‚rr5bµ–:Ìt¤¥›ÚMH‚|k›ç²ÃFìlQRwßÒ×ÒçkÛ”„rìªæ™:‹×ÆÇ}a{žl×Qð„®o©YÐ`Õð
+Ûr¤ý'ÞÀä, ŸnYIÇ­ºi7ã>{ìÛ5žÏ9pι³}•Ûº~¼H9mvZPÇÐn
+Nô†ž8¸âEH2ɼžªÆ˜ŸÈcÛópSð¦¶í±f¸iyô‰‰–EEBðÎ6G·o4Sáp‡&Ì”LÝ®i“‰ÅàSå” [w-Amž[¼?iÄ:T=OF‹ù‹”º8îöø%ˉ#½§Ÿ·»}]öC«yè;¦½9C&y.¨Á÷”¤téÐSù‰nhA2Ö*ö
+œÉÀ‰g
+NE*c¶
+Eš¨ùå8rö´p5:½ÐéW3Û/¥ÞÕ­-¦ÎûŠóÝs¶‚øI‡™PÉ\F‰Üºlœ_šÛpáÐg¾†m ámò¥CCž›FÙ›‡Nd*‰ÅÏL
+ƧõFúSšIN0 @£DAcâµô4¦¥2í±'t´o{²F r|5*‘ˆ3€oPðqÃNŸL
+J‚žÀdä?¡¼ãæXSßÆEdÐùR•lŒŒÏö ¶œí;×f†| † ôë„‚Q{¼†@´¥þ1ºi]j‚›IE¦ßTŸ$£™úÐ*>î2œ°±‘ÞèLÇsÞü¡S{Ç"ו Òfb
+ÖZ'z ºwâ¤FºHßt²®dí“_»©&ƒC?Ry`RjåÖ¸g¤3D}’ •+SaÅ¡aÒOÇ[x¶…¸])ìË^
+ûÀˆŸ$ —„øO
+9—Å®* ìɳY~Ѽô!ÿëâj>f›åd Ö©Žå¢cõÖë0Ö;V`®›Ìê ½áRüæ°û¾Üí{j Õǯ+ +6vñÂUO£·Ë/ûºÊ+,þºvA©WkàžœÄbÿ®]Ê­å¥.K°ö‰‚<
endobj
1379 0 obj <<
/Type /Page
@@ -5112,14 +5091,14 @@ endobj
1387 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [464.1993 393.2115 511.2325 405.2711]
+/Rect [464.1993 351.3684 511.2325 363.428]
/Subtype /Link
/A << /S /GoTo /D (proposed_standards) >>
>> endobj
1388 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [55.6967 382.2725 105.4 393.3159]
+/Rect [55.6967 340.4294 105.4 351.4728]
/Subtype /Link
/A << /S /GoTo /D (proposed_standards) >>
>> endobj
@@ -5133,37 +5112,37 @@ endobj
/D [1379 0 R /XYZ 56.6929 749.4437 null]
>> endobj
146 0 obj <<
-/D [1379 0 R /XYZ 56.6929 458.7525 null]
+/D [1379 0 R /XYZ 56.6929 417.0689 null]
>> endobj
1386 0 obj <<
-/D [1379 0 R /XYZ 56.6929 425.4132 null]
+/D [1379 0 R /XYZ 56.6929 383.5701 null]
>> endobj
150 0 obj <<
-/D [1379 0 R /XYZ 56.6929 270.5184 null]
+/D [1379 0 R /XYZ 56.6929 228.6753 null]
>> endobj
1389 0 obj <<
-/D [1379 0 R /XYZ 56.6929 234.9696 null]
+/D [1379 0 R /XYZ 56.6929 193.1266 null]
>> endobj
1378 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F41 1238 0 R /F63 1385 0 R /F48 1258 0 R /F39 1178 0 R >>
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R /F64 1385 0 R /F49 1258 0 R /F40 1178 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1393 0 obj <<
-/Length 3173
+/Length 3163
/Filter /FlateDecode
>>
stream
-xÚå]sãÆíÝ¿Bo¡3'v¿¹LŸ®9§¹Lr¹äÜ6Ó$3¥%Þ™=™TDÚ:ç×Xì’KŠ’ìfúÔуö°
-ú[5w—<Ùµ_®‹»rMeaäøÎr ¨£çìÅå„‘¼®Wé N¯÷üÂ4# X€d*yЖ„6E®fðé4ÓR ø8ñ|[„Õå®ØÐdÕì¶Í®èJj«®ô`ÝmÑ…'JZ+j$b":Wz±ì´ªº+w5b™Nê²Û7»4ÙWÝ-v—Ü&e[î@‚nåµ{¬D­e&yë
-–³/êÕ+ò¤¢´†Ë«MUö0Èþß”JLÇ;^›ÍæÁƒ
-ÀíÛ¦íð®x|N]Ã㽺-êéÈ…ì+p=RÙ4Y²-wáqŒJÀ'>·@ºÏgŒH®Ã2\aRlÚ†FA"0¬úÁ ˜EGÜy€Î?ì/"\­ÊÖíÚ~wUªçl+PX6õæ‘´Ž†ÙNM¦ âÞ®šnÖ€zàÍÆÛ#I`lœ½yE·t0Ö´çr°¯×(YÎð"
- ¶z[­n=Þ0,y¨-¹ÍOÎGÍÖ!šÚתð.¬+6Çîè¦q}©SP}]UOl üëœeÑ¥Ô£›3¯`œØ MX¾ñÀ«¦þ…1ñážÎ¾¦UgŽðÿ¾ÙíI*kBP„ç»/wUélÓ*t9å¶íôæ¯ÉRiLp yÚ³}èo­„„ÂþbãRiž2™O¬Ä,þæ,å—#NO§
-œŸå6ïq.UFö{ˆ\Øl-–ƒxö rT—†LD¯è•Ž«h@Ñ® üŠH%ä€Aj<XR  <ýÎz´8![Âyl9çUve
- °®‚ê¯÷ȃrP1¡N^~8¢¸ƒP‰Áp_„5WÔÈdÓ4éP°ˆ•©ÃáÂ# :}]nª‡€Ãómwp^O4.´Å n’\jPG èújIŒÕ1"&ºx1)¶3!ßuUœß \‡,`®ï4¨MSÝé „²sT/Þ–~4ª»¨6ôµb=¦3î;ð_{.? Ý2¦Œ»¼“ŽÛÄŽ5Ýü‹ì‹™»‹M`ÁÂ’ÿܱ¾0ÇN8O3%5ù™7—KÃ3þsFÿÁPGYÿ\'nŽÜ×´/)uh·ºQùH#ì*mý*iG.aq÷å¶Ø¼÷kþ ÝE\šUu1,ôY“ÔQñ.µ€†¬&¾m€CŸ¹ËõÜ téË“µ;Ëéúô]#f‡ëƒ‹þLýv>Ê~û4p©¬!?=q7
-3ƒ¾ý4ÆEýùa[î6—<yt/Q\Þ­†VÕ´ÍÚG,?Ö>:¸/íôö99»*Þ€góÊù×#·tÒ¾sõu¤CÞC—rò¤?Þ=ò<¹x¤½ú¼ßJÁŽ¼˜•qC7CKú&zÚvùÜy¤ÿ>×cRw‘‡Þ,EˆOÿÜj<3Ë9Íg]aä°‚ÜoŠÕǾuzDîÑÛ¤HÐM}Ή¶ÇZ«AdÌ8¥srík1n¼U»QCÿ¾K £í¥Ë2(ƒy‚¶Ý¶2–2Àöm}‡‚dÂu0н“>ph =”vÚyœyAéF*m_»îöLö“§ÖÈ’èxTùR>Ê0ÛSöP³O²wo?)5€}âá.Õ)®_ÞNne‰=<ï*XÆCUr|åóà!Q6`×ç 3†pª±î£¾‡ îÚ™KÑ~Bt¥v1º„Á…5ϼ~ÔY
-åk~ðú1yAä! Qwìeë»7ÊùÅ/µ¾8ö–Y
-CEÕ0´2ÂE¥ϦD1ÑÎÊNSí¡ÉNÒv+3&û-¤thÊYÈ6ÙÈ[NÚã3õˆÔ©6Lž¯ñefõj.õÌ‚NgÆ5þ1 J“f"³g4AÐ`€:¯ÁST# NÉÎk0&û¿Ôà™~ ÏŒ}Fùü”# ÌÇ-Æ㊧Q÷œ"#¨Š PçyŠj¤È)ÙyEÆdŸ®Èw>B8*+µ<øIYÅPÇeÕC•ÕIªƒ¬ÈÎÊjDöjè)MjÇðÞox8Ž”£igc¡ÜKùдΘ1ãóë!G>*ÿcYÛ“B 7?¿1gtAÐQ€:¯£ST#MÉÎë(&ûÿZ¸Â¯¡Ä™êb¨ Pç5xŠj¤Á)Ùy ÆdÏß2Ð(}’t^‹Z¤áeOÒ¢yvTù/µ¸XJ ˜³<Ÿ\ö²ÿD!SÔïË”ÿNKEݘôµ4þ+®SVŸ…Îb¦ü—|n¸÷Kÿv¯Âp´.ÛÕ®º¡¯3€ÔMó€_A=’¼iº2 *º0
-L…ÿ1NÌÑlyÙó¨G¯‰ÿ<©EFoc§wòæPdNŠ-Z|lîwçAQÙQ†Î_[–S“V «¤]púÒô1'mî>,hðcdÜ=ü2~àиñ¢ ÞÅ_ÁÉ”pã>3sp¿Ð9¦¸¢WÄÒ²Tkk¦oâð4©ßÇ‚?QÀqâw¬3|³þÕ?ü¹ìàØÔoÖŠy HfR+ò,0…gäzÊyÿ]í!ëÿ•p|endstream
+xÚåZÝ“Û¶¿¿Boáe,Ÿ$˜7×>7ÎØŽc_ÛLãÌ”'ñ,Ž%R©“/}w±
+7ùâ µÊjH 7ì^tâ„žgŒ‡`òYwš[<›Ìàöh¨lÀ&΋®¾æ›íÚl& h Íì@R$±ŠØõ¦h¿CIe€Çü)b
+/'©òÐ9äU‹òYTRÃbÃáź,º9ÖÁmN¥]‡o†Æ ¦ôÀ׫ºiQY=+¯þsœ½XåÕgGÔZ 0¿ëDD2I£mQ[Ƕ5‚ð´ü³$,°zI"¢k? Úâ:dî°å9Ͳkô^pěкf ÁÅ¢hì[Ó½]»6/«)pùæuµ¾'±#2›1fzG†ÀªÛIu“×ë +ìÑù›ÛL;Bž£¶»Xb ™ Ù§ë²Y¹ñUÙ …v€±žëðÁ¡ÄâpƒêŽCØoŽ(¼ih7Ž#ˆÿÕe
+![…°®ÊÅÊ­Ñ!ÃÚ’áüzo­Ôæ,¡1Àº
+— È„×å§áK¡ýëÎë smÑó'Ñ?/µŽ¨*ëº|I Å1qÀ‘,žÒ­¾.ë²Ë  ëwíÀ©ÚS/6M™§[À'žƒŒqU¸Ö ñ¢ìÐe‹£ºï°ôpÜÅÿè¶ù/™9:EXê•ÝF@Ö¤$øòì‡ åÅJ0&§™]þ{»'0†^Ðð8U’*n¯ß]ÎF”ñÉ==RqÿT5nî‰
+yï`/<¨æj[Å=µ°²´u£$^lÙˆÅ*Ì*_ߺ1÷¤[—K={Ë }Ifp…"û+4™:é'õat\å
+Ô•t°åR„m±[_òèÞÞíÙÈ[õÕªq©ÏWXvìŽåÂ4cõ³|V€'Bó`–5°»6±•¥}àCZ9º鎷Ç=OjÞ/]äo¤£`fÌÈ°¨‹/}Kº:šÚæ|sOÏ.ØRìcw‘ùò ÷iˆ‹ÿìhàÜfæSÁ´ßá¤- ,–ç{[Uïñ=¸R
+]Wç¬hs´¼*ÀhÆ.”k—ŽñÄÁÚ¶jzºJ%´¶—6
+H!æ‚»C¶2d3Ìíjû–1…kЀ¼e~ð¡Ý,mÅs?qMG,M—Û÷Dü“Å&‘>($Þñ ù¥ˆ”a¼§F±þ£ï
+‚4šF´([àéxQŒµ³D¥§Wíf=\v¹C[%Ãeß@äè.η>h¹ï-@`ÂùDJ"u¬&ϧù25úi—zbN§K†iþ1 Br!3`ÿi ³NHÐÏ:/ÁS«/;-ÁpÙÿ¥ÏÔyš˜'dÐ)3ÉlXf<.H%`º9§ŠÁ¬‚ô³Î òÔª ÇËN 2\öñ‚|`¯û¿Ì㕸±s fà•ŸužW§V x5^všWá²W}Yi”>úË¿þpè (JÓ,ŒÇÐCÙ«y_¸‡±$%w}”|”ÿÇâ¶G¹£b-õ“ŽKÈO:+ SKöò¯9)žpÍÿ?§’èX
+vÆ“ŽËÎO:+»SKö²¯9)»pÍ󚲤#—Ÿó¦ÓôQòKžìIþ‹ò á_Q'xɺó}ó?^{$(ˆtÓR‘ ÿÝ—¥~S¸{®Ç;ïþûpëÿ/Hlendstream
endobj
1392 0 obj <<
/Type /Page
@@ -5171,63 +5150,62 @@ endobj
/Resources 1391 0 R
/MediaBox [0 0 595.2756 841.8898]
/Parent 1354 0 R
-/Annots [ 1396 0 R ]
->> endobj
-1396 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [417.8476 110.3446 466.5943 122.4042]
-/Subtype /Link
-/A << /S /GoTo /D (sample_configuration) >>
>> endobj
1394 0 obj <<
/D [1392 0 R /XYZ 85.0394 794.5015 null]
>> endobj
154 0 obj <<
-/D [1392 0 R /XYZ 85.0394 769.5949 null]
+/D [1392 0 R /XYZ 85.0394 714.7215 null]
>> endobj
1395 0 obj <<
-/D [1392 0 R /XYZ 85.0394 749.3028 null]
+/D [1392 0 R /XYZ 85.0394 685.6298 null]
>> endobj
1391 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F39 1178 0 R /F41 1238 0 R /F14 980 0 R >>
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F40 1178 0 R /F42 1238 0 R /F14 980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1399 0 obj <<
-/Length 735
+1398 0 obj <<
+/Length 973
/Filter /FlateDecode
>>
stream
-xÚÅWMs›0½ó+˜œà Y€a|r§m¦“IcÚKšÅrÊ Gïɯ@ ܤNÓÉL‚–§ÝÕ{om›Hü`Óõ ÀtvÍ83y!Þ}4ð´QBctHÇf
-:=øncŒ­éñþì µ¥z8œMí±c…ßNgsû<<2faÓiû4ѪÍKãì™ q¨#Aø®y#â ff8.…®C©Š¤ÆÜøÚ$l½­·jÙÁê =ÖÑãУ„ÖôDqj!+Y•Œ¯¢´Ëù Ŀш8“M0¨‚>Äíàã¤"Ct…FN7=»Õ¥ÿe’¯@².ÀE~1ÎÒÉnóuorTU ` ×%5B¨¶Ë0Ö‡%z™ó›ˆ/dÖ|•ÞMt¨ÑH:è2ïO®
-Ư/t-lvWo{‡ Ý‚Zr*4ÐÂ'ºzªë"ÊÖ)“ÏQšæ7 äѪX2.c?‹V¹¢€‰%Ö‘ ÛºÑr%¶õÄÓÈYQò$.åêòŠñ»M_qÌ
--k²l úðÌ´“g.û‹F8‹¯x!>÷d[z!¼§Â@ëcýè4Í„Y” ÷B ]­:^#öŠ¤d²Û:Œól¯mGµ©s€ònÝ©¥¥v™¨†ö²Q¿ÈV9¹2ÏÔ$‰ <*“kÖ(–§We£@åÚ§meg@ûšÀ-Vy[ãm™ž­úÏZ-Š4RÜõ]u® /uy抺ԟLQŒú5´ã"=6ôeD·Òü_Æo¤ð¶Áï °Êù^7½M…É»ÍÒî³óêÑéÍÀKˆÅ» À¯d÷ÿ MÞMÝ5šº°ºûj.½¨cç+öÓÎRß'Íí™Ö홌}èø"ɦ©ªsìõ:Wwñ~ë¿ǸUendstream
+xÚ½WKSÛ0¾ûWx893µ¢‡ŸÍ‰Bèc:LKÒ^ ãHDZRË!¥ ÿ½’e;–C§”Nf"iµÚýv÷[ÙF6?dûbÛaì"ßNW´¯ÅÞ[ Õ:®VrÛZoæÖø„Dv â
+¨X"“9ÓѺ–¹8Ö+ž)åe±LKµú±¡Å]+M)çÃn[ª÷;¤ì°l
+÷;pOÕþñÐSÝ3@"×X
+ó]k¢Ï»>+°‰øoYQ¹2†Ý"÷}¯86ô0"{[í+Œ^àjyÙ
+÷XÛ|v÷¢¡îm<Lþ[/=¿wž›XüW‰55
endobj
-1398 0 obj <<
+1397 0 obj <<
/Type /Page
-/Contents 1399 0 R
-/Resources 1397 0 R
+/Contents 1398 0 R
+/Resources 1396 0 R
/MediaBox [0 0 595.2756 841.8898]
/Parent 1354 0 R
+/Annots [ 1400 0 R ]
>> endobj
1400 0 obj <<
-/D [1398 0 R /XYZ 56.6929 794.5015 null]
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [389.5011 743.8714 438.2478 755.9311]
+/Subtype /Link
+/A << /S /GoTo /D (sample_configuration) >>
>> endobj
-1397 0 obj <<
-/Font << /F37 1042 0 R /F41 1238 0 R /F22 977 0 R >>
+1399 0 obj <<
+/D [1397 0 R /XYZ 56.6929 794.5015 null]
+>> endobj
+1396 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1403 0 obj <<
-/Length 1364
+/Length 1074
/Filter /FlateDecode
>>
stream
-xÚ¥WÝÓ8ï_ñÔJ$µóÛ§…]¸åqл@È›8mtiRâd—ºÿýf<N7-î‡*Õ“ñx>~3öØÜaðãNy,ÈB'ÉB/b<ròíŒ9k˜{9ãFÆ…Ü©Ô³Õlù"HœÌËb?vVåDWê±4åΪx?þûå›ÕõÛ…ëGlz 7ŠÙüòê¯ç|~ùúùõM]½~GÄ‹ëËEÎW¾½F÷3\™•«w7/W¯f׫ƒÓ8 йϳ÷™S@(¯fÌ ²4rîáƒy<Ë|g; £À‹Â 9õìÝìƒÂɬ^jÃ$
-R/JýÄŠïÛ@‰2/ü@ƒrý¥—]#jŠø‹Ø­P}Õ6ÄØ´ª&?AFÉîNvDçmó1ý‚±|ò‰Iæ¸ï± ü@c";1cóª!«Š>¿ÒÀßã±ÿl釆™!3õø”ùïCõ~àeˆô‘zùŦÞæV;å®[w#;yF]¨Õµ;?è@ ν,Š|Ç%‚êÊó¼qù8ÿ{¹$…Jlwµ$ZÔu{ïöhT‰°"SÑ´D·ÔI8RGÆmKM¼ ,û&@›+…,ÅP÷ôñyÝÞ¸•çR)ÛJ²:5&E³?c‘Yì¤ê»*7&s‘oäO˜t' ¾žÔÅIü
-¼¼Ý>y¤üÉÑ~¿3«·°Ádg ²¬Fžl—d¤l[màâ'ËúQv­ÎÚŽ
-غ–›ÅØ‹cQRtù†p9³e±•cg<îgþω¶’8/À¸ÃC/cߤú|4ºƒ…Ë{¸·XRÖxB[bµ© úü8ž£ AmÚ®G2š¯‡ªÄí[3+û¾jÖô1ìh\-àâ„õ'r“`‚è‡nÁÓ¹4&0+èžÉ$˜€Äɘ8Õ ð®ú½qÓpŸÝ¼¾òˆ¼ém°Rå]u‹6ÍóhÖㆡG,=k.7C'È02‘SaVÞ˺>álDo1!(bú *˜ˆ‚¸%Ö6EU"·-N7F_)€{j+•ªÉë¡ <L·ÁN/ju‹¥Rš;iýÚ#´ñ·Ü›E¢)ˆÔyqU­Ó ¼ûªßEIOb¸ùÂíG>H$¸ZmEWÕ{úTÃnu‡Š’˜JXó5TZ`¼‘&”ECނωC.·Û¡©rI(‘ Æ2Obƒ™vTPGÐÊƃ^O•úp±ê«r¯Ÿ O­'®(e&½úª€=Yæ΄$lg% .À•ñù[}
-ÑKL æ—Ä£´ïéãÓ©
-ñ¦lÌ.Ù´C]çÚ¦§‚7nœ¿\ê}Ÿ¤fß'Ùƒzä’£4>U¹„J9$iè‰}óÆ5 ÃÆž9ò'+eÆF z{ãq’W°»Š8ƒê&' €n¿ëÛu'vre‚íÙD¾-Dv¸ºüò“ôá &^¦¾ýµ°ØKý,B˜yrêùáíú­ëÿP6Cendstream
+xÚ¥W_s£6÷§`ò„gŠ, „¡yÊ]œkî!s½Ð¾ÜÝd6S,qÜN¿{%$ll˾¤Ϙeµ»Ò
+ä@ùCND
+'vŶ.Ïm3{85KÛZ¨-p2ŒÈ{‚8Û'=Û³öœ½cm½%JúlÈ¿eCØ"èøÄ…(†
+¶©åÉ›ƒ¼›ìÍIÁh.4,'|N—¬Œûã ÛZâ´¸ÿ6ëÁ 9(
endobj
1402 0 obj <<
/Type /Page
@@ -5240,26 +5218,31 @@ endobj
/D [1402 0 R /XYZ 85.0394 794.5015 null]
>> endobj
158 0 obj <<
-/D [1402 0 R /XYZ 85.0394 223.4026 null]
+/D [1402 0 R /XYZ 85.0394 146.2062 null]
>> endobj
1405 0 obj <<
-/D [1402 0 R /XYZ 85.0394 185.2496 null]
+/D [1402 0 R /XYZ 85.0394 108.682 null]
>> endobj
1401 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F41 1238 0 R /F21 954 0 R >>
+/Font << /F38 1042 0 R /F42 1238 0 R /F22 957 0 R /F21 954 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1408 0 obj <<
-/Length 2265
+/Length 2432
/Filter /FlateDecode
>>
stream
-xÚ¥Y[wÛ6~÷¯ÐéK©“%
-@aQÔyµ£iïŠ8yÈ‹‚F»Ïx=M‹\$>hœ&W]sN³ë7‹Kÿöz!”}mԆݽMÖ®çÜkòU¶±Võ}fô‚íò[]í2 ±D¨¥‘Å+M
-Nƽ“š2:Š`
-„®ìNgx8»u+–ª‹8¶3й=¨©¶Õ;w"ßU„¨Ø~ŠŽRâ×êçSîˆ(•AHÅ
-€u¾}¤1¡
-/À“3ÉÝýsÑÿeKiàendstream
+xڥɖÛ6òÞ_¡—K¨g !
+¢´«‡|Ed¥Þò@#ég–0µj{ûnòÚš»%'¶äÀ{à¿|à¿‚K&Œöuà…„D'‡ž„,iì:ª€©²ѹö)i¹¢IÛ½ ±r@›¦‰phgG^æ!‹¥è^F·¼Ä#|Aæ0‚fœ…¸À¹xY’«‡è_ÖaVïZ癸hhÌ«ãÔŽà îКÆvTЇ™à~è(ü¨ÇHäMý8rgX¦7àB€8Ž\ȈÅ"}âÓ÷}ß{¥+ÝXKGrю½ßôÁq´îXºQÙ–foUÞœrr[›ÖŒ &+BAV°oƒÏK€Ï*Š”+·Ö­Ñ·dHF
+ð#ϳ> #<vŽf©ÛG­+§s¨s‘2)ýNé[ –P+–úé…õø§ÖÃÓ( cˆÀ|â$íµY^Edªf™C’Á˜‡KÔ¯@üѧüg€_WϬóÏD1Ÿé©M¾"°ìÌ,- ×`!TÙ¨‚ʱ/à„^ÀY¹7­3N}´E;1ý!›†ðHÝ:Åã†Ø,èYà{<9ÚXoeó}[—„3BâŒ|æ+Cii
+]mPÕˆ-^ M]˜:gr•C-㬈n>uV¢;Rqe%jÍ(ïm¬øDåÃZcUˆ3
+ô h¦hÜ–*›×[”vcI#(ÙÜÛ?îîÎÀ9ÆíG‹Ãºœ|&¶\L9tZ·Ý LâÅX¢J%„ï€;çÿmHÀÉ'>þ1¨{ÆÓ'OB&Á0Ñ#Õ¹µ€o¯rWi¶…#r‹éìH&
+Ѽ|W¸t P@‰r¨ùO´ŠEÍ,
+HeºÊêU—LÛ6)ô‰KŒ:c)ÚË.KANy6,%K±[ñû€FH©Ô„(ýÂfÖvô¬©°(Ïâ—Ó‹÷Ùzoº[Ê¥5å˜ä»îSѳ†f<ŽOdzj²–1km¿«ŸnÂë¯Ò?žÔ†øä+ña5ÿå—ïµ¼31A®¡`âX‰ýoò@² ßõ¥¼Žùá‹K 3žBM}äX‚.A¼VÕ^ÿSv2>¥HF'åî[@x^
+W¾ôåàYJ"›CCŠdÄÜ2ÅÞǪ~¬hÚ;Ìé˜ØW`l¦Ðñ9X»¥¨²ßlÇJóD0¥]ùW–d#–
+.Ľ‹Ú:Š;ÂÀóB9ØIdI¨i<–3–ØÞ"`ÑY"Åqp¬RÄYvV­m üËv óÃëzwècOïðöà4ÖiËÒ ãó¾<| t=æÛžkÍ3‰ÈL“Tq¨é#Jä Éê&}ðˆð3£Í9 ~mé /c‰¦*ƒ&AJ \å¦tºïöU‚¡cšåqOZE¦;õçøìËÅÛ)©çª cºz¨Õ…ÞmëJ»µn³ïÕŒtš¹«  +Gtc?˜˜Ë¶²kâ~œ†¡çöo>禵îú¹+Õ»×ËöG&,’Aòí>ÊÒ𫇎,Œå
+ çÉåÝÏ"—¤ÿ°dË`endstream
endobj
1407 0 obj <<
/Type /Page
@@ -5272,59 +5255,53 @@ endobj
/D [1407 0 R /XYZ 56.6929 794.5015 null]
>> endobj
162 0 obj <<
-/D [1407 0 R /XYZ 56.6929 726.8027 null]
+/D [1407 0 R /XYZ 56.6929 662.3153 null]
>> endobj
1410 0 obj <<
-/D [1407 0 R /XYZ 56.6929 697.6944 null]
+/D [1407 0 R /XYZ 56.6929 634.3021 null]
>> endobj
166 0 obj <<
-/D [1407 0 R /XYZ 56.6929 648.8841 null]
+/D [1407 0 R /XYZ 56.6929 587.9857 null]
>> endobj
1411 0 obj <<
-/D [1407 0 R /XYZ 56.6929 624.769 null]
+/D [1407 0 R /XYZ 56.6929 564.9659 null]
>> endobj
170 0 obj <<
-/D [1407 0 R /XYZ 56.6929 472.4047 null]
+/D [1407 0 R /XYZ 56.6929 418.0778 null]
>> endobj
1412 0 obj <<
-/D [1407 0 R /XYZ 56.6929 448.2896 null]
+/D [1407 0 R /XYZ 56.6929 395.0579 null]
>> endobj
174 0 obj <<
-/D [1407 0 R /XYZ 56.6929 356.0575 null]
+/D [1407 0 R /XYZ 56.6929 306.0653 null]
>> endobj
1413 0 obj <<
-/D [1407 0 R /XYZ 56.6929 324.2991 null]
+/D [1407 0 R /XYZ 56.6929 275.4022 null]
>> endobj
178 0 obj <<
-/D [1407 0 R /XYZ 56.6929 275.4888 null]
+/D [1407 0 R /XYZ 56.6929 229.0858 null]
>> endobj
1414 0 obj <<
-/D [1407 0 R /XYZ 56.6929 246.3805 null]
+/D [1407 0 R /XYZ 56.6929 201.0727 null]
>> endobj
1406 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F41 1238 0 R /F39 1178 0 R /F48 1258 0 R >>
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F42 1238 0 R /F40 1178 0 R /F49 1258 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1418 0 obj <<
-/Length 2935
+/Length 2728
/Filter /FlateDecode
>>
stream
-xÚ¥Z[sÛÆ~ׯà[©ÙnÍ“l˱’ÚI%º34‰ˆI@!@Ëj§ÿ½ç¶à‚„¬Étø°÷³g¿sö\Ô3?=ËâHÙÜÍÒÜE±Òñlµ=S³{ûáLËœ…Ÿ´g½^ž}÷Φ³<Ê“Ì–w­,RY¦gËò×ù›÷¿,/¯Ï&Vs/âDÍ/Þþã\k=¿øøæò-½ýxÕw—ç©›/?]_bÊaž‹Y¹üéòŸç¿-<»\ü…gÐÊ"sœýú›š•p”ÏTdó,ž=BCE:ÏÍl{æbÅÎZß³9»9ûû@0¥¥S˜Ä6‹â̤ =Ó:ÊãØŒP‰ó(±Æ*°"rç ­”š_5]¿Û¯úº¹gúuÅ•›j÷¥ÚIgË姮:šõSõ„ˆÀ¾&†šÁ`ät–Ò†7u³‚ùVeóÏÕSǵbw®³9uçón-Í’o«þ±ªnô-WÖm×Ëê¶Ù<‘_AÛXf:aëÛ}×3ý[íÛìð¸öäŸa©o=+\=pY<_Âfph<æ€5ó®ÝlÚÇɺã²(K<VˆcϾ{çt€šÖ„”€ä‰\SlaÇUÛÜM œ˜È$I,Sÿ¥”ÙˆDîÚÏ·y0ßêȦ:—ù¤ž jt§™ŸõJÎqw$ó«_†ƒ1`œ´½›Ø9Ë£Ôš,ØÙLíì"•äþ<: 7$2‘ýëZ ët”Äq5 [àR/ÿD–së?$3/°‘äXxЂ˜¸çûÿ~OëGØÐðàé-`Îršóa¿éëSšË–&--ž¸ëV†ÕªéQ p·ûž‡Hí©ÆÒ€å(û]'㔢¬6O@YkÙ¨¬™0Üö/²UÙV²¢i{ž
-×uýE#ÛuÕŠ÷ñ”Ì»v|ˆºgÉñ¡ r+JCQi¸xlw›rÁ$‹²¸õÚËš ¤³ÈÄ)[‘«)íÊ#g3û’Z»È:èQ¢!MI‡N‰”
-n2³ì«N¢Û<ZÜBÉÄ4Úã±Þl¸v+Ã]}ß• Ñ~-;¬eA÷P­jÄæZ¥™ŠOÔ˜lb4”wblò2RÁ56A,ÕW`@DË:9êCÛtU76pÃqPøäG3¼^„3åà¡­éÀrmt¸ÙÂLs«½Š$Äð_—®ÞÖ›b'¾è«-Ü%n²O KUq\7î
-ï~¿+úºm¸s0ÚT~bc ÇÎrû}}„4wN;ˆ$Fcª_6ÓàÕý6$KÂû¾©^â8ëåøæL©ÄÄÅVplÿÔ±EïÇ!p~Â*°Ø6€+uCK´¼¹úáÎPåuÑy­¼X­÷Œã®Ý¼ò¼¾úˆ±e¦ç$Þûr!°«)¹²+Fæ3ÀZTUÌ
-oþÆ•²Âá¦F5"HÙãà=`'З ž§]ˆp¥‡Àán‚R
-–ÈÉ8Èx÷4E%‡ðc~Ÿ ÒH½ZÝ]µ› q¯Ñ¹û…‹pŒaAè—ö%˜)Š¶§Þ,ÞO6=°6r¡zØØz›ÄóuAÃèkÕ×ü É &@¡—àæ.Q>蔀†»–ˆ;Š5¹ï¶%¯ K>“–Bßc»ß”~G++ðäU9‰ŒŽÒ\§§>ƒT{òLêwèŒ/ïŠíƒwÞí÷Ûg˜Ï¤éHßB©‡·™rz
-u?ðÉÉ“L†‡ÚÙÈ(ÃÃѾaÄG8|3ô{.ºc¢xzá¡^>A_¯¸Á»{Ê=˜oj$¼›
-ºOlècÑzÐÛ§Q”5—r ‰°ŒqSö G{0\­´!Ƭ3ö’Ü2\äÄ%cm¹©ªã¼Y+Ì•‹áJÛH¥Î`˃»ûW®ƒ”w˜¿pÊrvJ—X‰ãÈ À¬¹–’,Ê3ðBá'¹÷0ë%FR¹1‚Î7”PYw«}× ¼µÇr߶>)•ðØV_k —OE¨c°ÕÆx[Íê¶xh7õj*IOÐäZ!‡0iÚ‰ZÈ¥RK·éȉ&âD/w»v×½ìÙ éTâ®+çÌÐGÇ׉7ŠÐ3h7Ôƒ°Z«¢áÉâJ!½ârŠ¸´‚L°Øp£Úñv;´Ú&Ï0 âÙ}„ZÇ»H|=tu+›¶YL¥Br¦ûqxYÀ¦¤¨©£ ÛäDúßý|ýáòúš‚²l)µ€öÀ¿rÐ%á¹ã¥¤hûEhwüö‚£¬SŽˆp•=ø+È(9"‘uÏb“Y?)ÛTÆ›AÏ}Y„¬‰ ›$ å.À8:FÆ­:0{Æã€ñ!7ÈC I
-¨zÝ“ 5aÔퟖˆXëi5eÀ¡8â‰sNä2c.WyÎÄÜÄ|”Î&>]XCÙ%¬-Ö¤¡¶àÀð u¼Âà#Xh,­†±Žæ5\î›ÏMûØð*ŸRáš“lûÃÄŽ—±–ÁÊ’m&ã<ÎZ-$¡"dz*ˆ°Pkn®Ú²âi]Õ ‰–Ë×oñù•S@ê!¡,x…ßB„æ€ Ô´ŠWë
-»¾›m1½U*ÿVy‚3,œU*ÏŽÉgêÆhC!"dž®
-öÒ÷rÜò0F ;Ráû“Œ43€-Ȩ£ìæäÃÇ€q–ï"¥´O2žÁ
-Ò*­†'Qg Höî‰kÌŸ­òZ–ç’ìäò¥`E˜ C;^PttÝÏ5-[k`N.0§Å`¸ã%’—!‘¦
-7[døÙ/ÏŽl©\˜G¨Ð½7Þf«ù[Hï4?ÝW‹÷Õf³¥ëèSª¯¨÷•g±¥§Q:xçÙ: ú}‚XÒäfàªâ‹ì]pÇ4 8A„òípc´Œ®W±é×íþ¹³h„k
-ò-?ÎCño _iòvËõT‚du¹|Hyž¿ª1¾ð¤ Ká$î´ô‘…»‚H½R”hcð|æB±­=„” Wào8¦Í9}‚Aìie:l5œÑJ"eò£Ðú™›g 1O•Ñ/žÝ©tôÎç'ù‘‘ÉŽŒLîo*ÔØ»ù¤eø{”Ljeñðflðe]åÉø
-Ÿˆ_–œœž/Ëâ÷âñÌCysI/6ÝÑW‰}wüɶ¬6Uï?J„@>Žù콟㿇­ ™+Šü¥n÷ì UôÜ¿ ,$ÐÖN½G¨!Mÿ¿ÿypø«…K#›eÏ<lÀýŠ2“§ž)„RçÇœQ8eýz°¸endstream
+xÚ¥Y[sÛÆ~ׯà[©s³‹]Üš'Ù–%µ“Útg:i ”€B€–ÕNÿ{Ïm [“éð{={ö;gÏf¡ágY¬´ÍÝ"ÍŠµ‰›ý…^ÜÁÜwFÖ¬ü¢U¸êåúâ›76[ä*O¢d±Þ´2¥³Ì,Öå/ËWß_ý¼¾~¹Šb½têr'zyõú—ƘåÕ»Wׯyêõ»Üxs}u™ºåúãûkÑ9¬s*‘ë¯ÿyùëú‡‹ëõÀ_x£-2÷ÇÅ/¿êE WùáB+›gñâ:Z™<û [;kýÈîâÃÅß‚Á,mÃ$¶™Š³(%Šæ@‰s•ØÈ(W=Þ5Yö÷u‡­tùÐÖMÿÛŒV<ý{õÄ ¿êpi²eµiïšúßU Ø(_®…H²ÜWE#+ûûBΨ·~D¨vÕáSuඬêO•l,<©®+îüŽú®©Jž¿}:e¹Da¾@¹
+Ûûc×3ý[™íÛœðxïÉ¥¾õ¬ð÷Ø‘ª»,UŸ•Á¶ÝíÚÇIVL½,Ê’µvıgß¼q!jÆDð6xïD®Q—jÓ6Û„“HEIËRT±HdÛ„¶Ö[£ljrY@šª‘QqšùU/äÛ™ßü<\L´XnÚngNÎr•Ú( NŽæNvJ'¹¿‡Î€]T‘²A TÚ¨$Žsе\eYÊÊíåŸèq;÷þC2ó;}=_DhEÌ*ùö¿ßÒþÕ v/<9ó
+³Œ–¼=îúú¤”ærb”‚’O<t+SjÅ–ôíöØói=µX°Eèdžpƒ¯èªÍo–aeY‹™íÁÌòº²­dGÓö¼
+ô­/ê†G‹FŽëª oî;â Œq;}f°³(8¾4nEgˆ"ê Ûî\1É¢,n½ò²"«tªrÔ$}3§\¹r6³Ïi5Ø>#Z¤)éÒìdPƒ“I-[Á]föcÕ Rô˜';‚A(¹QL“3ëÝŽ[·2=¸6šíïå„{ÙÐ=Tñ#¬„Öª4Óñü0*‚"²ÉóH¯PرTŸ-ë4BÖMíÛ詵¿ùÉ
+¯áJ¹xhjÈÝQkr¹ÅÊLsk¦*rÅÏ¥«÷õ®8H§/újo‰»ìèQUü ž€ªžãgÒX™Ä=kÆ&ô/S„7…»;Š¾nl6µcM·Ÿ9ØÀÁñŸ3ÜþÜ@áÃóþ!‰Ñ–šç­´3Ã1$KÂû®©D±Æq2µ®Ó—3§3[+àØþ©kÏÆ>À ¸ «£ó(–hýáæ»1š¡ÆË¢óZyE1·_q<´»ç#ž—7ï0¡È̲À˜€ä±ãıQ.5%7EÃÈÀz؈ªš‰ dUaâêÕ߸QV8ÝÔ¨fB){\‚x
+™JǸa;C)Kädd|xš£’Cô1Ä
+N;ÙÙ´Íj.’;D`¹‡ºv%AMå×QN„`üÍOïß^¿Ï AWö”Y@à_â8’è<Ûù’R<4TnBÚW^p–Ujdà„'€Ð8‚»‚„’Ù7Sìð5@úR²©#o£xé¿EÈš †IÒð݃þOƒcdÜê‘ñØ3Œq|$q<|!GM¯{2¡QtûÂk=­¦ 8?<sÏ™TfjÁå%±™XûQÌ'Ùlê³Ù˜GÜÖ˜ µ'†r´§UÒaw ±´Ã—¡MåC\×ð÷ØüÞ´ ï ¦ð¨%ÙÄñ“Ê$lc-!‚•'$ÇÌ ÆiœµFHBC®guáø ÖÜÝ´eÅ˺ª-_^½Æ’;g€4B·àþ3Aº‚Ð>AÐjÞm¡3^ ø’FL
+À‰”
+ÌÝUM…n’&\"=ø÷‡Çj­äßœ¤Sp”þM!Çm0, c” `±C E¾¿ÉTj°g2ê(¹€5ùðWÀ4ÉwJkãsŒ/`á²ÑCEAÔ(’ƒÅ¿ì°sé³Õ^Ëò\r\jàð¬dèÀŠŽžû¥¡ ÅbK­ÖäBSZŒ…;Þ"iiªðzsÿþÚXá_¶3©ƒ"êÿûŸáñ¯p—*›e_ÈAÀò«,ÊSÏjòS·¿ÏYÿÑ2Gendstream
endobj
1417 0 obj <<
/Type /Page
@@ -5337,7 +5314,7 @@ endobj
1422 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [101.3082 379.428 169.9802 391.3282]
+/Rect [101.3082 326.601 169.9802 338.5012]
/Subtype /Link
/A << /S /GoTo /D (dynamic_update_policies) >>
>> endobj
@@ -5345,51 +5322,59 @@ endobj
/D [1417 0 R /XYZ 85.0394 794.5015 null]
>> endobj
182 0 obj <<
-/D [1417 0 R /XYZ 85.0394 769.5949 null]
+/D [1417 0 R /XYZ 85.0394 718.5038 null]
>> endobj
1420 0 obj <<
-/D [1417 0 R /XYZ 85.0394 749.2913 null]
+/D [1417 0 R /XYZ 85.0394 691.1994 null]
>> endobj
186 0 obj <<
-/D [1417 0 R /XYZ 85.0394 546.785 null]
+/D [1417 0 R /XYZ 85.0394 491.8561 null]
>> endobj
1421 0 obj <<
-/D [1417 0 R /XYZ 85.0394 519.0032 null]
+/D [1417 0 R /XYZ 85.0394 464.5517 null]
>> endobj
190 0 obj <<
-/D [1417 0 R /XYZ 85.0394 364.477 null]
+/D [1417 0 R /XYZ 85.0394 313.1885 null]
>> endobj
1423 0 obj <<
-/D [1417 0 R /XYZ 85.0394 339.5007 null]
+/D [1417 0 R /XYZ 85.0394 288.6895 null]
>> endobj
194 0 obj <<
-/D [1417 0 R /XYZ 85.0394 175.6792 null]
+/D [1417 0 R /XYZ 85.0394 127.0564 null]
>> endobj
1424 0 obj <<
-/D [1417 0 R /XYZ 85.0394 143.0963 null]
+/D [1417 0 R /XYZ 85.0394 94.9508 null]
>> endobj
1416 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F41 1238 0 R /F39 1178 0 R /F14 980 0 R >>
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F42 1238 0 R /F40 1178 0 R /F14 980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1427 0 obj <<
-/Length 3227
+/Length 3318
/Filter /FlateDecode
>>
stream
-xÚ¥]sܶñ]¿Bo¡&>ŒŸ[NœLÝÔRÛi>x$¤ã„GÒGžeå×w»À‘'ÚéLG3°X
-Y\æEk‘èËj!.`îû‹„q6i3Çúîîâ›7*¿,â"“ÙåÝýl/ c’Ë»ú×(óø
-vÑíÛïZø—\m¤ÈU½úáúç»›÷0ÔP ñúõ¿®’$‰®ß½ºyMS¯ßÝRçÍÍõUžFwÿ|s{õûÝ7wÎ9/‰PH䇋_—5°ôã…ˆUaôå# Dœ…¼Ü_¤ZÅ:UÊCÚ‹Û‹„ g³néªlK•ÉáH¹&]Ä™’Ê çng‘ @Mf¨vÔ:‡ýÎO7ÿa¤ù~JĹЊ‘†ÃUb¢¾²ãxµQºˆßvÍÔ”“­i¸}‚D\Ò°jÛMÔïÔŽöðÑ–製J¢®nº‡Åò±yè`çò,.„ÈþRFúp´‡'ÚͤéªöÈ'¨ìžp‡K˜Xgùå&IâBkéÖ– `8 ³°$É#8t$[ÃÑÔS[RãH*d´)K·”1÷`bhŒ`„¨¢ùŒëÓŠqè;Ëh_
-îšöttº(
-vDw’§Eá£ÐÕ&â,
-=pÖ˜ç áwoß½F‚²¨ Æ\¶­#ïô
-¶<wÁ†]0ûÈ/8_ºð¯OÃÔÃvME ÉÌõ4­3Ò`¡¹F(²E~A€‘Ú¡ÇfÛZMàˆväš(5AØŽ'Ãf·¶:šé‰F(f"\sùpl|ÊN n¶AÖ‹B@A‘{ ú0²ÒöKm–NÏ~šl7'£»ü8'¼Öì3¤ó™Øº˜ •ŠR¡£2L",e_m¹˜Ôà·•€ªŠr<Øb5‹0j;V‡fë,†ìBÀµó•8a†Ý!¤(gÅQø(ynªö×îÏ[ ep>ëòp¡)"xt9
-!šs
-9ÅZ˜oàwu¾€ˆZb¹óŒA.ÁÑ9'úè‚â6GlxÉ,föñùrûih¡0¡­²°Õ¾Ÿ#Az^6LØÖŸXU9N k v§¿bÄVgÖYqJ¹ÓEN›Æ2-|M³Ù­\'p<ºH}FÛlŒ™ÆàO…HFñšû£ ?ÐkÔ’ÌRrˆ^ ŒC­YŒÒ:z×»8“iïx3>³“e9 é»$™ÇÆ‹O‹03±¼ÞâÖŽt÷¡¦5©:KõqKCf$Y•Òp‚ €ÇþðÈ
-Þƒv‹è—•ýXªÐãgÛ9üø½.ôV©\çæòK¡7= Ü£áÌ(3"”S¿üýÝÍúƒ·’…w†/h;
-ü&„!èmù¤ãÈñÂøÀbÔYA‰ñN@ÞÊ+9ô»ßÛ®¶|
-/\øŽó8«úÁjÜ(,ÿñÃ=½•8 «þXÒЙv¦òsð \}6 óiÁ@È»Ÿ¾û¥ü%Èã;VÅ —A.T¥föµ4ó$N井¯™QqfÂWCd
-<Å^Ÿ"ßX=³°ŸDáS¢“+(}€¦þº7ILç©ð¯¿`yZÐ÷+/a´~¨EJG:š3&<¯§væa´üP„ÁNr9M|zvÜÎî!}Ì3-%Üeàñ³3×>e~æfC‚™Šd¹Õt0øè?ü¶ÏŸ,|(þ̯;”Žñ'+¿Å!}þ¿ùqúÉKšÇʹþ£™›85° å>µ‰g”ûŸˆ<'ý¿w(=
+xÚ¥ZÝsÜ6÷_á·[O³*ÅIlžÜÄiÓÎäz±ïn®Ú]Ú«©VRWZ;î_
+!Ýú{Wׇ²!ößÝ3±¸OÛ}Ù<8°6ÅêÛvØǾ퇞xÊ#ΠQûSE± -*yí’Ë" Ã7ÿÁ
+GQÖþ== tÊ‚ŠUO}Kü¡¯ib)4v{¡á¹qô쨷w «ê(éñgÛ8ô¾ÈVw`fP
+óE§N… Lˆ|žÏWÿÞ;F§Þ»õD™bž´ÙÓS˜Õ
+3÷ôÐ_Š§e’âÁø’x…)ÔD<ØE ©õ3¨Îº¶ÌˆJ¼`ÇxçÂÂBÀ>Ý ÿ>I,ÈXñ´;w¬öñˆÞ«¼r•iÎœcêjcÞHu‰Zò™ÑD­6Ô^­S!Î@íKÁ8Y ð+ü¸oßx‹e+K¿pY×^L<Ó„€®=zäÀ½·7oˆwŽŸ‘2˦gDÏ÷ ¡åpâxB´’§ê;·­ü†ì¨£âAßñÒ(ÃcÈú¹ï[ÀxÒ*Yn_H¥0-öÔêN›ºÚ~ Ñà‘Â(ÐÂþ+
+¡ð,O°ÇÍàcQBZç%®·œ†  £ºš· ÖS³sGŒ¤ŸbýT8~£äú}yàL ¾Ùø¸„Y¾µPà×!-WUí"àˆØ ‚Ø!$üö@ASÚ¦Œ˜¡m pq!j4 YE“;ŸyeÏêóŠ
+:"f„^¶"u¢Ö!;<"¯lÄB)™Úƃ ²Ö+HUÑwüt÷ô$á•fá' ýÞ´OAÚ†%‚+À=†0Ëæyœei‡|Š|}f¦8 ñy‘Ñf-c¨rÜ¡測nɹ<C³û:lÍcYW»Ø3Û ,@—6áÌæ(ØœB0îê=û
+`D,òØÊ€±¤)æ‘Û}\Óƒ&Tefð\sÐ\1KJ
+X…j¡³2M"M3϶œu_|jðRŠ
+“5›8v®ß«÷ %C ØÎgb䌳s­¸l=!Mž»*üýÒ)~ßÐ
+ @>ö„’^c:ö<ÛSD0Їk!—>L{F 3ÎQ¬òiRÃyÚà:&=‡î‰JW HÜð|÷m]·OÖr4ƒ
+ b)ŠB4³úX@ÂC -1…ŠÜGæ àåœ
+M•.òVM`¬xȳúQø|>‹ûÔÕP™ÐTYœêÐN™
+È^!C±0F³úÐúD“™x³?³Ñ³<‘ö›g÷^´B„ÐÄñLxŠk×ÓÙ‡ª¶Ðʼ¬€”¤Û2%y+eÁOíñw*‘ºã%·Cë iè÷ýtÀ žâ eÏæyôrCda£m(pÖ»¥1‰L 9Ûô43N…UØo§Â¯F¡8!R!$D’gy>?%‹i2‘ɧ¨áÊc]E°weš¹·í¡ƒFya–#À€ÈAC›!¤ñó85&úq‘,Ü+‚7…먌Ág†ëN͘ʌ‰K‡D„ãvPü‚³Bºo=uh™0uåT¼l‚™`™}Uïˆ CdY|Er
+¡ŒáÖ¨^S«âMÈŽÉÏDæd«æâó:Ôsïµ
+(œt€’-…ÐgêæL ÝáºÛ€eŽšèUà8TnÃ;“ªNãÅLÃYå™­÷·~ÉþŒ›ë·°SÑdK<aã6Êœ¯Ü´ÑG‚ßÄÞê¼tŒŸÇ¸¬p dõp YªS
+€XÆüˆUú2 Ö0Ÿ¶qÛœÚ$…²}j×ôp´× 8 Sfà¤Ú¦ókgÀè‡ù™yy×j–±Jg',
+uVSbÆ
+@[úÊþ‡¡|àùúxûµåÀ ȳ_ÿ4
+üŸù± ü…ËÂO[DÄÿ÷iÆ_é<QE!—##ó"ÑLÂBùO â…äá7/Eÿ/
+Cšendstream
endobj
1426 0 obj <<
/Type /Page
@@ -5402,43 +5387,46 @@ endobj
/D [1426 0 R /XYZ 56.6929 794.5015 null]
>> endobj
198 0 obj <<
-/D [1426 0 R /XYZ 56.6929 678.9507 null]
+/D [1426 0 R /XYZ 56.6929 626.8646 null]
>> endobj
1429 0 obj <<
-/D [1426 0 R /XYZ 56.6929 644.5195 null]
+/D [1426 0 R /XYZ 56.6929 593.5117 null]
>> endobj
202 0 obj <<
-/D [1426 0 R /XYZ 56.6929 514.5361 null]
+/D [1426 0 R /XYZ 56.6929 468.186 null]
>> endobj
1430 0 obj <<
-/D [1426 0 R /XYZ 56.6929 481.3387 null]
+/D [1426 0 R /XYZ 56.6929 436.0669 null]
>> endobj
206 0 obj <<
-/D [1426 0 R /XYZ 56.6929 279.5586 null]
+/D [1426 0 R /XYZ 56.6929 238.9445 null]
>> endobj
1431 0 obj <<
-/D [1426 0 R /XYZ 56.6929 251.1623 null]
+/D [1426 0 R /XYZ 56.6929 211.6265 null]
>> endobj
1425 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F39 1178 0 R /F41 1238 0 R /F48 1258 0 R >>
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F40 1178 0 R /F42 1238 0 R /F49 1258 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1434 0 obj <<
-/Length 3255
+/Length 3359
/Filter /FlateDecode
>>
stream
-xÚ¥]sã¶ñݿ“éLèö„
-)·‡ù±éòR–UOÏC_4ZznÊ9=øúi°Ï«ŽFk¶›¬[uO{‡c›ÛÅ#=K^ØðQËCU»S·åñdð):ÍÇ1bÌOR†uÙƒÎk%ƒCO¦qèóMIÊA}µ«ê¼£ h†Àñ4Öá?Aíf8™$@h<­L%èp
-¤ž‹o¡3ì˺ZÑ÷8RA¿mxq„.yeÕô ¤eáÞ…¸vp¨~kxû“Û°ªEÕlŽ»ì ¢ñ…ÁÄ„–±vW`^ŸÜ3LEb€ïrÌp:åÐã 県p˜Þò‡¯ÿúíû›Ü‹HJaR™Mí ÀÈw`i½ðØýüCÇ°M‘‡@Ÿ‚”RwÕ¦±·¶RÞ²üyu~:à c¡•Ñ/™JR3UŠŽùmiš‚ÜgÍk¤Œl^¤‰¬ž›†F9==+•I„Ž„‰N½mžfD†PB§”¨b`¶çD‚CÎbcÎd*ø¦ŽŒ³ß·MQ_´J3Vá 88ûÕÀóþ°Dby¿WfÉÊ °=c‰‚¥F‰b‹€)VcI@oŽÐǪ®iÄ.ȘÓàEê…ÑÔ)|äÀwªÈZŒyté73è@2í|#bÑs¼ Eš)^„¾ëè Ä0‡èööîÃWÏ!’ΰˆEÀ}ë!QOŒ Ö-:,Ãfä×bM΋KdŽ
-•±,PMt|˜;a¡Y
-Žzâ4ž?*’j|dlvÇ#ßx§Á†øžó¬Û[0"ÞH¬û–±5à»cU|dXžü’×çEᦠüòº~²Û>“?NLÔÔuûH^^!­ØÙ`Š/hN= )f˜Ô)r6ïûÃÎï¬~ö´°jè=§‡0xPX³Ñ$‚
-ü¸ÕsXGëCîµø¿ÊÞf
->é|Ê™ ½Ÿjµ†œÏIÞºFxçOF»Ž ';0ÞíÀ#¬¨–¤MûF‡=£m ¥|y¨rÜ~yMƒX*5%‚ nEtŸ|Yƒ*¼fU¾Ä•WÛ» ýß>ýl ãÔù„O{mŸ;JÈûUW-nTܼڵÓEC^±šÕÀ¼nºxðù~Ñ®;Û…§ˆ%"îuâÛ¦®~ædö݇øѼtÆù´ƒèÀÐDÑ–œ‘“k„çjýÄéð¤%F0Jž!L·yÁh{Nø¹‰“lA˜é·œÙƒˆ+ˆiÕ¯rV˜-Z!3ŸVŸoÀŽZÀ§ls-]Ÿ¸˜æû>Ó¯µôafM“QU˜à÷ÓžFPCB¡Qõ[ê9keÛ*!8å+<íÑFè}¼ýœ
-=º§u|ü¤ 3ìt¹§v½g¸”Óþ=!ãö"È‘ÞæK<‹Ã—xöôÃÐS_hŒ•HÙäMõóÅN·ô\–s7ôîSmìÃÄ»êDºvZl\Û8Ájô:笉oùìP ³2ñ
-dlVÕïóU9†ãÂ3ê
-¢èêuÏ$º¾Zrôô“‹‘ÛÚ–GÁbB„½žþ0séÄaeø¨(üTŽ=þ(W>€²Úí”hKæ½ý·VvU_º… /Ú21NÅÝP¶fèi²‘æŶ‹U O~šœXŠ0;탆þ[Œ˜É±•%…ŠŽÁ8zjÛtÿ¯=&JEÊ“¨ò…ÂFXŠiºH#M¬?Ú '›ÑÄ­-ºí7üdžض³ôÌvÆ;‚á{¨©<- >Ÿ⪩†*¯öÂ8¥ž<>{÷ñ‡è±û×ßTs½þúO×ß²ûîû§vírHû››õ7zUß.¿Êïïžû‘Žþ÷gæO?Ò· ÿï¿ÿUBÐYÎÿ{Hc54©#
-™ªSÊý‘ÎIÿÝ[ÊXendstream
+xÚ¥ZÝsã¶÷_á‡ÎDž±àÐ7çìK.m¯­íëL›æi‹s”¨”ß_ß]ì")øΙŽ/ÀÅb±¿]JœÇð'ÎuÅÊ$ç¹I¢4éùz{Ÿ?ÂÜg‚×,Ý¢åxÕ÷gß¿WúÜD&“ÙùýÈ—Žb­Åù}ùËâÝOWÿ¸¿¹½XÊ4^$ÑÅ2ÍâÅÕõ¿.„‹«ïn®iêúã Þß\]äÉâþÓí P„ISïi~–Ýݼ»øõþç³›{/áø"V(Þog¿üŸ—p˜ŸÏâHž?Ã?q$Œ‘çÛ³$UQš(å(ÍÙÝÙ?=ÃѬ}5¤•Té(Õ2¨EÊZReJ*«–]±­.–*Ñ‹ÿÆiŒçùþ}2~K‰HH-a+\¾ÞÔMU¿Û}SE´|º‰Š2 ^<Å%°Ïå¢hÛ®6[Ü-·»)Ú¸î‰t}wuIAšÐ‹Û»«¿]§Ì'=™»ûéÊmR ëh¼ç®¤ÕÆù¹zaJñˆÒŸ/…€K‰ÂQ—,à±*ݤ‹z‡O |p_¤¬‹¾ÂÀT/îq¤ï»ú©*ZnwC*²#ÂÊrªf¡ó(Oâ„9>§Nã(–©ôŽec%aI{ÚúÐW%ï×Òó±ÚU‹&}ý¸+†Cw!ô¢ê/‘˜“¾èœî8‡US¯ISRˆYšM5Egñg„qøŒ‰‰Dšº⋧§“Y”Ä"t8`kO>ŒÚŽ“óé©êjä°.†ºÝEtˆ<R{e9ƒÛÜ_¹@-åz¬¥Ü€BZ8JGStR >ƒ‰ô¤Þº’öV„v_uC]õ4‹ªY.à.æ
+"”õ¾õP‘ü»a¶#X+›µÔé‚í«‚Ù±ÀmÕ>±@ëv»´'ŽÝuQÜÂG~b¬weRŒÍÒD‰Ê4ßG¹ëûj½±ºvÛ«ª \¡É#“÷ëã±+¶(y.>ùad-žÕ@ƒ‚|ü|±/êŽFÄm;Y·î^öŽÇ¦°+Êç›Bî «Ä/ÞuS·áPG*×Ù< öèè"^|¼ ÕÔ,ûz[7$P'h<O•<Ñ'˜]@“Ybhï1,%ÄñD=½¾¥Ò±óX;Æ&5¸û¦=àÁ‘ºâ•õ®#­J÷ª×ŽÕ—vÇ#Ò¿þâ^X7‡²Þ=ß
+d©"§êNŸG™½½¾§]=îpªÉ‡™áWþôá㻿~º¾ ð^&q™<ÖS?èpò-xZyîþÖÐ9 Ú¥†WcÞ—
+ h_ÂLó Bн‚1Òº‡Hô@ölT&‹T
+"Llêj÷¸R)TIg”hbටB(Ñ©1'wCîl;Î;ûvWÖ­Å”«ð
+ð¡ÓkX¡°ü¾7æ˜9¬‡ª‡OM2ÁSlÆ1i
+éNF¹vIcW
+Ðòâévˆr±«ï–ß…„Ž•ÃS5¤ßWk
+ªÍDÉŇÐKeâHç¨'Aãõ­Ž˜Åù v»ã–—>h°#^s­q{ NÔÏ -coÀÿªÒ£ªpÃjîð+^_”¥›‚ô(šæÅV=ìû,~ ˜ ¤išö™¢<ü °bK¨þAwêiH9ÃäÎxP³E߶þÍzàgO *âÿ=|†ÁM@ª f“´rölãפ" Ù]Œq<;&ÑeuÀœò(o 9ˆ©w—ÕCqh¾®ÂÚ~êò!Ž(±âèyS¯74ÜONá.Î>
+\øwÝÔXË\Ž¢„„+L’iy19ùúh©lÞÛúaŠ*È9G7úâ‹d4b
+½ãŠÄß8§WÏf€K´m»`_Â7g¾v] \—yÃuåBªñuÓ§¢©Kîø€^wý3š‘ýgÜm
+"s·„ÃFò¦ÛÄ«÷qݧÅôºÝÛ Â€¿=
+þ=3ø§¬ª­“Í"xV¿×6ÍáZǺÝ5Ü’1 J™˜YõâÀ“?ì´ Q»&ÅêÕN‚:å Ž9Cñ(7_øQ°WáÐQÈÀg î[á=~n×
+pŸ»{t4Œr}$NÞÀŒ·…˜°¦z’^Ú4:ì™mKLö!å©.hpûþ ÒXˆ©¼Åt{U$÷ìûT:
endobj
1433 0 obj <<
/Type /Page
@@ -5451,32 +5439,33 @@ endobj
/D [1433 0 R /XYZ 85.0394 794.5015 null]
>> endobj
210 0 obj <<
-/D [1433 0 R /XYZ 85.0394 671.4386 null]
+/D [1433 0 R /XYZ 85.0394 626.7436 null]
>> endobj
1436 0 obj <<
-/D [1433 0 R /XYZ 85.0394 641.1061 null]
+/D [1433 0 R /XYZ 85.0394 595.698 null]
>> endobj
214 0 obj <<
-/D [1433 0 R /XYZ 85.0394 444.8166 null]
+/D [1433 0 R /XYZ 85.0394 395.3576 null]
>> endobj
1437 0 obj <<
-/D [1433 0 R /XYZ 85.0394 417.1342 null]
+/D [1433 0 R /XYZ 85.0394 366.9621 null]
>> endobj
1432 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F41 1238 0 R /F48 1258 0 R >>
+/Font << /F38 1042 0 R /F22 957 0 R /F42 1238 0 R /F21 954 0 R /F49 1258 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1440 0 obj <<
-/Length 1913
+/Length 1599
/Filter /FlateDecode
>>
stream
-xÚ­W[“ªH~ï_aÌËê:B](.qbPlñ.
-^˜AQQؘÿ>¥h»³—8Ñ•·/³2³²` Ð?X"<ÃKH* Ç
-5kó}p‡Ö¡š¤ølV…×Âh,:ž7Úëp[·Úq¯½Q %s½†ÂŽÃÞ¼ª`=Aí,ÔŽ'›
-)ì Dš&›ÉèhvTGiél'#Ó9šEÌJ{œxŠBФ›,=ÇÑ;ÆŽozÛÂ>˜ž4H¼6ÞŠÖo‹þòYbc"ò¥ß~½Úò‹ö·«åßÝj¹4Ã0…÷lx<:«šZËàQp©süV„øÁšXoßï³/ìµB»9ê¢Qò½¼8þ¿šE!b$‰pų(*P¥@­+—T×cù”ø¬êû$/
- 8îcbE裋ё•G”
-iÇ!€D.÷upsõÎ)1„§#.e¤#0l)ð;ÇÆ –uú•›_Cu T„b ¹3¥mj€“$œ3½¬ï®~Á}ƒmïPI‰¨C¥ŸžŠk¯šïNñàe §ÊEíC‘†FÌG§Ám>©!A*GëÛ¯X>ym²sûw›ªn¤À¿Y9ÕŸìþ1ßq*”óÙ$'YñCSRA¤|Ë+Úƒ1GÊí0ßß[ôFà@ùä¯Î]ÓGί_@ÄQtÊ·^à<<P…”£ õ_Œ~9Ž—$Jbé%~.«nùK$ž¦Õ÷çÒÏåüK¢òôò#Òk¢þøâäéý„€tw|æ9·ø"ñãÁy[¿Öõíû=ú›·;ÿ°Âû‚žL\"m>NTà=àts…ÿ
+xÚ¥WI“ªÈÞׯ0îæUµ!™Œqã-(œ˜TèèÊ ¨t¼ÿÞVQU]ÕM¿žÂ…ižé;'ó;'âþŠÆhr†#1Š
+~|$1{º{ ŹiJÂÓp……_Z’ñ4‚qWêTxqõ
+~x¼«~EqéÜjaÓY#ì~.°ÇüÍï§ý.Þˆa0†`éw,ðoØ·Îq’'—ÄK_2è6 Åt ôåëÛxî·r=¹°S‡Â& ÊÕ¦q²Â¿0gIÚih›¾ìY7³K‡ä0qôרu)ju]¸WzÂ,[õŠK\T“¶
+Ðæ27>ö1
+°KEÞ§ÞêâT<Í)—?î¨/z¼Ò;)-³é!ðÚ®.3.„œ 0â39{Œmà~(*ͱÏ•¬­ÍÚLèMV¨S_æÌíiˤ ¡‰§´Úh†§¶½2üCØ—A&KÕL‚LCn#¤iLnLÍ߇8I™Úu«Dùͦöánv9õE§éH+}?œ%<üÎ^…Ì•ãÖ­5½×í”Öb\;º‰g½ÏœcÌáT³­£¾=AÆ`x á+*6ôÚÜNæ§Û¶%÷ÎÉáNïDµ¿-!µ ÁI6ÓÙ¼ÝÈèÛ÷Á }§þ—°ÿûþî "Œ{é /»—òz¾ü îQĽN ½bW”Ý¢¸¾/ÊÈË“Ö»$EþŸó‡ÖÍ+ƒîG[äÝéAĽt2Ôò3_©Ï|…4€~“@X{Ù1 ±m‘aýD¥ÞˆÊß$ž÷êålkÀšP|}E®CwL’¸–„>£»”¸w;šýzD”æÇÖ¾\×ãlK®"‡Kv‘t=1•‹·}÷Bví@’çëf¨ºíõL¤öñr‹öò-¶M@Q¬â÷Y‘ªfûþÂÚÎØãm“î )Ù B|^e{eA’d4í»D‡ñÂÖìž ŒRínŽ‚Cå\HË$×Ô#XôÅŠÈæÖ.¸u”ÎÌÞß­Šl­JJK)!%O³ÏÊÒívìSö¹¾°i”7–­œÁ©7Á¡bÍ¥…SÂç:ãWîId%u’ã`º-£ ®Í$9ÀýäZõÅz&OªÐ×$T®‡«ƒr3ã·Æ°N<˜Oìe•õYáE³6Øñ×A»¨rS°âTÙ¡:qÒPô/xч,,àx⿼û¸ ÃÈ8°þiÊ°
+Ësø+A°Î Ea$¸Ó¿1Ñ
+­VìgøÐ =“ñÐÛÉ6êS>'Þ"0‰f1¡ÇÑò|:nЦÎÌëƒ1Qå9#ƒ¦Ð&q¸}G/÷MŸgœŽ‰T`¼E~ž5Ž¦(NhTËzߧ<Ñ7YpŠª|Vç°’ º]AÝ[ G¹R˜ìò È/܉êéR†ÕÆêó,âF>Ý Ed!{Ê(ª£¨1ïŠÔ´ws«jo.Ï®ª„¢`7k§¬–nxvû`ˆ£ŠE‘‚¦VùqZªÑR|èíƒÍe>‡æœ£uãÀîñdÂ&þ;Å B€ûWF[q|->Õ0 ë³ùùnGaîùéášðü½ñ›jå¥Ið:Ï~£>êÛ¡î{º£;›ê{hýâ_?ëý'sG‡X~¼Øáç;dXŒdïNÞ@½6 ø;äïïÿßCÿçÜ~endstream
endobj
1439 0 obj <<
/Type /Page
@@ -5489,26 +5478,25 @@ endobj
/D [1439 0 R /XYZ 56.6929 794.5015 null]
>> endobj
1438 0 obj <<
-/Font << /F37 1042 0 R /F41 1238 0 R /F22 977 0 R /F60 1366 0 R >>
-/XObject << /Im2 1355 0 R >>
+/Font << /F38 1042 0 R /F42 1238 0 R /F22 957 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1444 0 obj <<
-/Length 2466
+/Length 2639
/Filter /FlateDecode
>>
stream
-xÚ¥kÛ6òûþ
-¡Àò¡VDQÔ£p7›t›ë¦Íº=¤M?heÚÖU–\KÞ­s¸ÿÞÎP¢¥w@°Àj8g†ó"-¼þ„—© ”yì¥y¨P(¯Ü]…Þæ^] ¦™[¢¹KõõòêÙK™zy'Qâ-ׯ,³LxËÕ/þõ7‹ï—7ogóH…~Ìæ* ýÅ‹ŸfBqw}ó‚¦^ÜÝðòf1KcùãÛ›û™LR«r^D÷7×_òŠww‹ïn¯iðó›»›{žXÜ1ÏÅË™Èü7ßGK{ûêîöîÕì×å·W7ËAM×"”¨ãïW¿üz+°È·Wa óLyO0‘ç‘·»Š• T,¥ÅÔW÷W? Y³tÊ´JfÊ¢t¶Q4e[•‰Œ¤±mWm½b­;]¨®¦ñ‡¶ÑO۪ܸ.ªš ¾¥ïcQW«¢×̦hV¼¨ª™’¸öÇCÃöƒãTÊÿé%ZuqûÏs~ý–(ëJ7}€f]ç" D–§Fð·ºÛ·MgäËbWœ`é2EÜ
-„YT»ã•ôAžçST¬Ç”ekÖ²}_¨zöÀQVë­ÛöX³§m‹Gv™­›Ko>§
-‰SUÓÃʪmŠº>Ñ|­×ÌàØ̧‚’4‚R)eâߢÚjH8
-¨:Â=Ì¢Ð?LE`ój}⬵ö±*ˆb0®R¶:(÷üìÜ”ægøOÒγ=¬:ÔêËɬIG“fì
-«WU áŠ&Ì(±ÚVb„Ñä8GÛàÞMbùïC~*@OÔˆÏ }}‹ý6By‚OH땈²&Âl"D¹¸vCSçÙœ‰"¡ÍYR30¦¶öúöâć˜âÐ1¹£ÿ”[
-°i…ÛKÂöºá$Ïía‚óºmàjÔ½9÷OØéÄéÙ7}~*"£²yF'®RRSY=á\'¤¼¼€
-¥ÜdÆl™]Ãtè9¶o0ª$#g{1ÎíÅpÝè7ݸùé¯<—ú;rÚ9h‹'Lž$@ µ†N ¥ƒöíÝ,|ãznÒZ <ßìN|ï‹r¼ÿoõc.^…@ŠùŠŸ[Jè¯Oæ!ÐfÚíuY¡Qôj`ó±—É0â,>sî
->&w›ÓžW튮ׇÉf•rÑ|߂ÞˆºnË¢~>u¹[W5sü‚3Û3G þbr3¶;Ûü“Œxñ|R«ÿ>Ÿ°,“¦çf»5U]òí®Û¯ï_†Ëil§¤ÿ3MŘ¥_õçæ ÍûP Šâ
-fÓqoH‹¨A(u÷—-M:44‘íOÝ–tøÙ€‚‰`ªŸÿ»…Yš76CV 7Y±Šü:mÅ°éT6™ Š¿QÜ5 ;áfÿ ’¾¯ ðïS `üuaâg…p0ägÿˆ1Þ*@%™eÑôï2L@a8-
-u‰ä¥äï‹þ'µÐº¥endstream
+xÚµYÝsÛ6÷_¡éuS!
+=ì8 aÒD!£’Âè4w¯ç‹TE7ð]œžÈLªûäÚí<û}¦„LŠBO0v¦Ž.p„'—÷ñìy Í›¼ÜE Ø™j`Vq&d–Àö±.p3©m,€(+¢vß<ê7Lx?edñ¿CGSuÕõvE³UãÙ«Ž(v®eôGy¿­-M•;–ôa›¨¬« ^'&ºlˆ¾-wóE"£¾Zîk”¿>Qb׶=‘uXÖªð4„+Øôä’"©Nõ,ÄÀçÁ
+lŠ´˜-Æ«ñy ?Fª2Y"õÓ•f±H¤ÌœíßXtqœs€¡ñôFÙW-Ï9Â×6åmíÎ~”Àáì0Ô´[»«çÊùˆË¶y'e|·w“v…Ç¥c>.XMä®­?ØQªºçþa—½ßéà݃Ýu´Ãš¶½?>RkWÝ5´' ¥³KÖ‚~$w4|ØTË ×eUÓ¨oéË^°,†ìÅE¤(ŒHj¿ß5^!Úýüƒîùå_å‘í0XÖ•mz1(ž‹$D âol·m›Îé—'Ñ}y k—’¯Ï·;¯`àn)ðw<\ÖD$…˶@«
+ ·sYïWUsÇV]?ÜdÙ?¶Up~Àî·©·?oÞ.SW«gǻݒ4*ñc¢÷ö@ï®Zgt’¸kêH÷eïgÉw0x~Mß7o:Ël.À„<-pצ'x଀ÓXÊƯ=BPXaw
+D€F+éƒ2§ç,òˆY.[·–ý`¡ê£®­›v_3Ò6å†Ì­µÍ)šÅciÜ䩈µ2_$¡ª ³A–ü¡oXòX Jd*Q’RM¦…”ꋦÔ$×BåIúåsj(ù?$U“
+ëüOÓo8Ïv·êЪ¯'£&ÍXÝ䃿pœ#ü‡÷%„1_âÐ×…Iøú­Ü5Ö]T¡è妪Wc2Ê
+…]!÷‘n…pçKþÐk£5O‡»3YœP
+‚I"
+8^)Oß`My_-ù [ŠÓ>á|ß·PÂzžkÈXŽeŒ‰p´q=@N=ÙyG‰
+¯ÖŒ€0’ˆ¤@ª˜yÛBá~‹ 5Î:u¹)›;¦•DZy½ñÇGʱ0;¹NêQYJô9ÇÎRœ¼-—ï™t¹Ÿ¬2°2O4cÜ•\áî;¦X¨\wã+jN '0¦h^ºÁ (ص*¬%a{B„’¹?L¡ø8Ÿµ ´FýP›sý„ÕùN‚šiÓçgD–pOý NRµ¦¢*öv!h'´>m@€â¶ƒ§tò \ø†Õ ²â™þ¡¥ÁCyè¾Á¢À›§ª @=>Â`¿õ½®æ6 nìàÔ#{Ã#-ç‹UÓÂÎ1)†‚óýxÚík8N¾ÌsÔ ¿p:@)? 
+E×(·<34Ì0¦GÇ傹üðH‘hªœÐ|$ú·¿">ÙAMî¨æ||î>!­kWɧÑy3űîpEÆé ð-_Þ0ø×c'ç»õÉu¯šª¯JÓqmH‹¨@XÚ®{ô‰O@”VSX“3¯ÿgÿ/(œ3¡ó<žþË‚–)
endobj
1443 0 obj <<
/Type /Page
@@ -5521,49 +5509,49 @@ endobj
/D [1443 0 R /XYZ 85.0394 794.5015 null]
>> endobj
218 0 obj <<
-/D [1443 0 R /XYZ 85.0394 486.5796 null]
+/D [1443 0 R /XYZ 85.0394 386.1448 null]
>> endobj
1449 0 obj <<
-/D [1443 0 R /XYZ 85.0394 454.3582 null]
+/D [1443 0 R /XYZ 85.0394 353.5014 null]
>> endobj
222 0 obj <<
-/D [1443 0 R /XYZ 85.0394 412.0822 null]
+/D [1443 0 R /XYZ 85.0394 310.2645 null]
>> endobj
1450 0 obj <<
-/D [1443 0 R /XYZ 85.0394 381.7503 null]
->> endobj
-226 0 obj <<
-/D [1443 0 R /XYZ 85.0394 150.1125 null]
->> endobj
-1451 0 obj <<
-/D [1443 0 R /XYZ 85.0394 122.4306 null]
+/D [1443 0 R /XYZ 85.0394 279.5106 null]
>> endobj
1442 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F60 1366 0 R /F65 1448 0 R /F21 954 0 R /F41 1238 0 R >>
+/Font << /F38 1042 0 R /F22 957 0 R /F61 1366 0 R /F66 1448 0 R /F21 954 0 R /F42 1238 0 R >>
/XObject << /Im2 1355 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1454 0 obj <<
-/Length 3337
+1453 0 obj <<
+/Length 3044
/Filter /FlateDecode
>>
stream
-xÚÝksÛ6ò»…¾ÜTžV4ð…ë]gÇqÝ$ÎÃr’¾>P"eñB‘²IÙq~ýíb|‰I;Ó~¸¹É8\.–‹Åû„ÄÄ…bâN ¥ž„Ús|Wø“ÕöÈÜÀØù‘`š™%šu©ž,ŽNž©p¢È`²XwxEŽEb²H~zŽvŽƒ;}zyuuvúÝñLúðòóåüåÅ)½üòêòìŠæ—O¸^‹húêåü8ô¦ K{uq~yqy~¬‚Пžþ8½8{K#Ï3úîXœNϘLMÀ³3âvýöìêø÷ÅOGg‹f™]UWáo~ýÝ$ ‘ŸŽ\GéÈŸ<À‹ë­åd{äùÊñ=¥,&?º:zÓ0쌚OGU+\Gª@ŽèÖÝ
-F…
-&¡¯@Ie”ûÃñ,pÝé~—ÄuJpœ$¤Ÿâí.O"­ Jx~ö3ÁÒPôé18›Ï)D¸»~æ>ß-_Ïå*<ÿï–"ºwëôùB=ÎÏ×OÖ/¢ôMçÊÿüY1Ó ±=¹š¿yòéâöåúE}ñpûþurSoª½
-âÏço梣Òaå3!íûò¯®"üâ*’“°L®O¯”/Ϋl½|Q¿ÙÖ¯¢äÙÓz1ÿåÃÕùí•ž\_æ·úâÇ[õ³K_¨OÝ‹}üŸÜ~ŒŸ¿ûô!•yÖß&/ƒëtóxzûñk«¨Ò"Áá“gRvöoæ…N$Ýp2SpÜ€Œãý&ËaÅÒUÓzÀUÂwhéí>­jB<dyŽœ®JÔ‹%Œómii²í6M2à‘?;@òàsY¤}njZ”üñ’‡,{àaÞ«ì¦H–°¨³œ×Ø=£BhqE rŒ¨B)'ˆ F¢M\ÓÐ ! Î¶(C(¦uI˜‡8ÿÈcf
-^•æ™TàAP.† ×æÌxA½Ó@óƒÇ‰wé'‚XÛ
-¿ñ›8+œæØFŽò]m½XÚÁk>–{ˆYm…‚ !̾ʊ‘·¢ñ¬¨ê·ñåš—äë;¬aE›rŸ'4n,‘qÑ~ ^k9¿¿¤±¡Ö»R¡†GÌ0+²:3j tkKÍ[Âm"³t¤2ò!@Ko x™ˆ3:$¬Ù"xnâûtðÁ«×¶ z™÷eVE•š †èS¡/Ã1;Ô°µL~s]ß°eÀ‹Lódl±¨l>íŽw•ˆ¸¾²È^pø&ÃúäΊŠuøeW×9{aøïoöïÿQJüÿE©?·
-:Mt’ð]ô.Ë"¤òü Œ´ûwÅÅù ˜Z‹‡Fa|œ×±f€û‘ÑÓÖ»zQ×¾‰Œ
-š¦t—þpö®%@!ŽÝ¦/jA( âJwŠ54T ‰P¾@uÝ“Äx`Œ–m¢jÚ: lM.çXɆ¶‚ö…}ÛýZÓÍ­Ëáb)§¿febíJQ/ 7%"
-$ˆDÑ2ˆ¨"THz\ØýK(;(§…Ál}8Z’aÃÖÓ¶Úpƒ–.€ÒXðÜ+CQ<€EÓéÔè¦ …xÓˆƒç6NRû1VÎÈŸV{£ dXH!9Ÿ„á¦NhQF@OC÷åGÒr êÒöf#f‹±ž-E ÐÕŠ‹!¬ƒ¬)U๊ïî2S¦Àp¹Ç—§ýé“GNÒu¼Ïku›Ì@ØÌ@fÒÔHNpõ‘8Ûª
-ç3úd, ù«À¥'8¿=ìÇ÷cÅÕó
-|*=„CÎcm "Ƚ›™û€™˜š¤Ý&íBjsÙ¾ó2Nð(Í |¥w÷q>À<åxl²2êsîH“„(³køº?eÛý–p¦4…§ôhŽÕWzàµãk!û+_Œ×ÚAØO.LG˜…‘ ÓÆÜ5yŽUZ媑ãI%ÿ(§Džb*Û€6{O`ã¦È øÝÊÝÕàÊÁ±9a|¡29è8K—µ…'¼ì襢úÙ±˜’uÒ· }Q—§wsák…v<²NÁ‚ ÎÓÄt‚D˧¥c¿ Ð’1ͽˆ²í¥ÙhÅÜ»1íªLM«‡Ê~ã!`„TíE㹨¡#uãÈù¸
+xÚíÙrÛFò]_Á—­•ÂÌàl6©¢eYQlˇèĹ@á P²üõÛ=Ýlomò°[.žFOOOO_C1q៘øD2š„‘çø®ð'ëâÈ\ÁØÙ‘`š¹%šw©ž,ŽŸ)=‰œ(Ád¹éðÒŽ«µ˜,“ߦž93ààNŸ^\^žž|3›K^~¹X¼<?¡—__]œ^òÀââ)ï–3¡§¯^.f¡7]ZÚËó³‹ó‹³™
+BzòÃâõòô-x<ÏâéO3!p:9e^05ÏN‰Û»·§—³?–?.ÛevU!\…k¼9úíw’€F~<rir/®#¢HNŠ#ÏWŽï)e1ùÑåÑ›–agÔ|:ªZá:RrD·RL„p"ß—=åú‘(©ZåÊÙ\¸.¬ñ¡Œ‹l=Xð~—ÄMJp‘6Û*ÁesÙÙ8wãŽ'üÈp]Î"9­è›¬¬ÓÛ†àfËŒ®Ó‡š »,& éÎN“þ“fòº3y¡£¥Næ
+–-\šï³y
+âgoïõwó*ÂO®"9«äÝqàUòÅYmV/š7EóJ'Ïž6Ëůï/ß˯߫ôøÝE~ÿp£~qéë÷͉{¾ïóã›ëøùOÞ§2¯ôIóuò2x—nNn®¿ûÌžÕi9fsóQSøy›åhd®bk 5a€oÑ%¤7û´nqŸå9Brº®P/–0΋ÊÒdE‘&ðÈŒc@O#äa‚U™ö¹©iYñÇ+²ì‡y¯³«2MX²Ér^£èŸ«î¶Â IÇT¡”è
+]
+‚„0û:+¯DÞŠÆÁi6)nâ« !/(øuXʶÕ>OhÜœpDÆåáõ}ñâíâ% µÞ•
+5<r ³2k2£¶ :œ¥vÍYÂm´Y:Rù ¥ÌP¼LÄÖl<·ñ]:øàÕkŠãÎÍû*kˆ¢NÍC8®Ñ—á˜jÙZ&¿»®Š¯ødÀ‹LódÌs¢²{¡j¨DÄõ•èü-aJþ‡aJü?LýÏ„©ÿbdNdJø.ú—eRy~êÈý»ãâ
+ÎO…qr^ç8Ü^dÝ«§»Nðmh¸¿%̶ºOïÀ£Â±l§ëÍÐqù8IU~żÀ™Ý[±øùã¢ç¸Rèn`T®G˜à†ÊuJ°ñ…ð\í³<9&‹êÎŽn <½›alZ>@ÿà,µ»ÍÍ×»Þç/ 8Ò¶™›©ÖDß'­py]=£xÌSYyå´nX
+Eá¤;Ví0ÊgUIøß]ß­S&^¥9î ’m€³Á• —ø–¤Mœå5|%08‰€²ü®HñŠlö…úd’Šߊ£:⌜5kˆõ ò†½ä/²þ;r;Ñ+¢ÀÄ[|¡ìESD:¶a):„¥¨MŒr ·šžÛx·K‘®Žbe’3DGŠéâ6³€—]U×Ù*uü1g÷iž;­ÅwÊ7 W‰‡¢XqÝölŸ›œs–}S .—QœÓù‡…¦tÓýÒMËiZÆ+£O­zœaˆùá8ó@4gƒÓ*‚Àñ…Šø"«yRÖuº‘ÊTOK›ÌV;Ö=2¯HÚZ@ðò
+Û‚Žó'áèÀ·‚p šØªUŽe:U¡E)Ï™ïC†¶Q§ôÀBD0b!äR>±-Hÿìäߌ0öí†QwÏÇã„€pËTk“?ìuJ
+_cö.BvQ0p>dìu›êöˆÈMQM(87ë-¥ù€o¹ ù¢ûPªm’ð,iQxªH÷m vÂÄ(+
+ú’ÄTŒõ¥¥ðPFþôÐ6ë»ô§ĵ£¨Ç±éôIEñA@xéNñH-Õ$Êw7èKbü°iZW½îN …Éè+Ùð‡ ¡Áës½7?´Ž‡K¦ œB›U‰=]2нp‚Ü›ÐN3'ˆ¢eQM¨C8éqá ¡ø Ì³Íã©ð<6|†7\Æ Ôà(™OÀ-3tåX:]™†MÔö¢oúqð,â$µ3`åÔþ´Þ] Úx@&Éi% ·ÕÂe´ô4tW]“=P—¶E«M°­#h)J€®Ö\úaÝ$`MÁÏu|{›™b†«=ö¹¼ÈŸ>y á$ÝÄû¼1±·Í„Íäãü@š
+iÀ®¯‰³­­p>£O&Á2š¿
+\z‚ ÜÃ~|;Ö ª^g%ÛC8älFÑ– ‚œ¼™°÷˜¨ÍÝûy äîBF6òòùΫ8ASšCKoïâ|,ŒyÊñÙæfÔîÜ‘&Qf×ðµˆ?dž œ)Pá)=³ºåzR„Èñ#!û»¹/;"Ga?Å0a~DfX,ÄMy7ä9Öi=–±jÇ“J~)³hO1•íC›½'°uSäünýˆîjpóàØÌ0¾P ô\”é¾rÐ$èP~ÂËŽ^j*“
+¢2j9› P2Ò~ôõœ0ƒªÏJ(ß•~Þþ”M.×UQ€#Çκ™g¹­jî¤ñ`Íí9<㦃ִ-»SBØ¢ JS¡£¾× ~ä$î¾ìK›»%seÅ7-æ_^GïGÀ7Ó%
+S®è€®JìçÝ«À j#×\^«È;\^ã‹í©"¼GŒ®b†YHd{ˆ
+jHsƒcvˆØv˜´÷1Heïc̈YÝtdo|ÿÑ Ì c©/dˆø;Š‘,Óm›lùç‡ÌܳÒZŽ§«¦€ó&,nĺ¡äöwEÿ75Ñ%endstream
endobj
-1453 0 obj <<
+1452 0 obj <<
/Type /Page
-/Contents 1454 0 R
-/Resources 1452 0 R
+/Contents 1453 0 R
+/Resources 1451 0 R
/MediaBox [0 0 595.2756 841.8898]
/Parent 1462 0 R
/Annots [ 1460 0 R 1461 0 R ]
@@ -5571,44 +5559,53 @@ endobj
1460 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [411.5778 302.2913 489.9929 314.351]
+/Rect [411.5778 223.879 489.9929 235.9386]
/Subtype /Link
/A << /S /GoTo /D (man.dnssec-keygen) >>
>> endobj
1461 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [55.6967 291.0037 134.1116 302.3958]
+/Rect [55.6967 212.5914 134.1116 223.9834]
/Subtype /Link
/A << /S /GoTo /D (man.dnssec-settime) >>
>> endobj
+1454 0 obj <<
+/D [1452 0 R /XYZ 56.6929 794.5015 null]
+>> endobj
+226 0 obj <<
+/D [1452 0 R /XYZ 56.6929 769.5949 null]
+>> endobj
1455 0 obj <<
-/D [1453 0 R /XYZ 56.6929 794.5015 null]
+/D [1452 0 R /XYZ 56.6929 749.2922 null]
>> endobj
230 0 obj <<
-/D [1453 0 R /XYZ 56.6929 436.3593 null]
+/D [1452 0 R /XYZ 56.6929 357.5215 null]
>> endobj
1456 0 obj <<
-/D [1453 0 R /XYZ 56.6929 405.7905 null]
+/D [1452 0 R /XYZ 56.6929 327.0925 null]
>> endobj
-1452 0 obj <<
-/Font << /F37 1042 0 R /F41 1238 0 R /F22 977 0 R /F21 954 0 R /F11 1459 0 R >>
+1451 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R /F11 1459 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1467 0 obj <<
-/Length 2453
+/Length 2432
/Filter /FlateDecode
>>
stream
-xÚ¥ÛvÛ¸ñÝ_¡·R=+$@웚hÓl;µ•íI7û@SÄŠÔŠ”ï×w3àE¦»îéÑ€Á`07Ì…
-f~ÁLG¾©š%©ò#D³üp%f;Ø{w0ÎÂ!-†X[_ýåG™ÌR?Ãx¶Þhi_hÌÖ›_¼7_~Z¯nç‹0žòç‹(ÞòíÏó ¼åõ›Õ[Úz{}G“WËy¢¼õçÛÕÝ\ÆI§R>Hw«7?ð‰/×ËïßÐâß7׫;ÞX^3Íåçõ<ÐÞÍG¢èpïÞ¿»~ýnþëú§«Õºs¨Š@H”ñ·«_~³ hä§+áËTG³GX?HÓpv¸R‘ô#%¥ƒ”WwWÿìvíÑ)ÕFRû‘“ ݆Á,ü4ŠÂ‘r£Ôe(­rQ3j¾„Þ§SñµfÑ> Éy2y}Ú4('P –3@ðã ‰-™õÞžP^ÓœJ¯Þ¨íöŠ]UT;ZO¨Ø:7MCèEÓce¥ÙÐêþÉ¡y“ž=üá¸áÃ_E$‹vO«Œ†Ùfç²¥cŽ€ò²òÌSÇjERÀG‘QÈN ä¿ö¦<𧦘žÖ–ws
-©ì™¬ÜÕ'ÐÂa¾ˆ!¡¿²q M]eµ„ņNJÆÊ´õé- zÙ§‡4d—/]tByбk[f»Irêùq2~ÎñàÎGîüEœíXYHÈJSÔ¾©Jô%ž©|2Ûí¬NÖÐø5 •cç„œgm[÷ìHZ#ÆC‘ÑÎæ©ÊENÐóq>x3«½eۚñ廬ψѩœì4¥æ>@üd çQ^¸ Ï86Eiª¶|âX´«è
-øk
-uÝ#ÁÕ=.†vîaAœ‚’a
-JzÊ$ðžê³‹Ÿ†#iË×dpʽ.)_Ä‘b•}°F‹ü4ŽŸ(Iúøó„pÐ=I¥f,Œ¥a¾måínfî;q©©Ĕ綇èú*IÔØ@fJÝRú:HÆ:t¨%õrW`æ
-¹¡kÄ®õm)mikÝ @lTÅoJ¥N1Ê)F9Å`ízG#D 늵âjrŒìßÑå·
-û½·##Ö9LÛ„Ô—ÖS5ù~,ˆ>"†âÔ”ÂMß+‡ª{B’[jœäeŒñ~‰’Š‹w_òÌr #d²bûDôµÒÐCDk:õêLž}Íé]¦£¦ª÷8 ^1]qô>òâ±WéxÛ#—b“ѸAD
-ªvpùŽ2þû‰
+xÚ¥]“£¸ñ}~…q*&€$÷æÌú6{›ÙÌxïjs{Ø`›: >ƒçã~}ºÕ-m6™ª”$Z­V«¿['ü‰V~ R9IRé« T“õþ&˜laíýMÈ83‹4bý}yó·…ž¤~Gñd¹ÐÒ~ u8Yæ¿z·ÿ˜^.¦³Hžô§3ÞüÝÏÓ0 ½ùÝíâ-½»{¤É‹ù4‘ÞòËÃâq*âDÁ®”÷Òãâö¯¼ãëÝüÓ‡[úø÷ýÝâ‘æwLsþe9 µwÿ‰(ZÜÇïï>ܽŸþ¶üéf±t׊" Þñ›_ &9H䧛À©V“gøü0M£ÉþF*á+)„…T77ÿr«fë˜h•Ð¾ÒQ2"Û(“­JýXDÂÈö„!>OÓÈ›?Ì?Áå’È;â‹ucÆœ`ÏeUá,ôê¦#Pv8Ù‘æeMc·+hògSó¬Ü̺¢z5
+C '‰·:1™²#ºö„È[ñζ#
+æaÓðiP;yÝ4ÖëÂG€`faè§JEæ–¿ì
+d0•Ì L˜A˜•-m¹­ÍQ0Ïêüߊ¦ë]VÖç{×ÍþP]‘ÃíD .¶ å °+ùŒoG[±"ùzì6D¬ïÐßWû2NÉc¾´e½Eiƒ ` áÀ¤òU"S؇èÙ©kfyݶŚq‡v£b_Ê0bÜæЕMM´é"œJš ,’ÔÚ€v6
+%£¥Ù¡©ÊõëÁØTš0vÛò¾¨ÁD˜9˜e‰’¥
+‡Á
+²V[‚¿ØËÀ·áÆ5€9àOñòmA‹× '.¼Àò.{*– nê?)|6· ÃG\+\€ 1€ÜÚ¬»¢³p °›ïq3ΞwåzG†ÀÌÁ,£áœ9
+ˆ¡ñ!g'¤|Ør/ ·»æTåî.#B÷ÍS‘sð‘àa…2“‘/’Tqxß6GÂ~:‹!¡½²ñ3D+ª‘b”95uÑ=7Çßé¢$#„#L=q}ß ïƒ†X›*ÛŽ’“ßãÓ ÿc¿²û/⬣Õ‹/#IÅá}]¡Èà:¨¢;ˆl»568&ßÀø-Š¤e焼ÎjZ6æéH%ÆS™ÑŠËø5iËLtʨòä¡ã³ŒÍŸ£] ÙqLN},€ø1È@×Q~˜æVŒÖ–¤èê•cѶ¶êh
+Sq…É6K*h ®CCu9™‡÷)YB7&-§´ôHýa‚% iPŠiIÎip¤É§ˆBï D’ a¢!‚VL)7ùÎ$¤<g¯-V$Zz§ÖÑÍhÑÆÊy»çêDøeÃÔhl×-ŒNüT¦â­}a¨l Éõ‰±SjKF5'ñ]D n”Ó\l5çš½á{7ef¾/ ºÌßÐ* '6éœàÕ=6„:ë0 NAÉ0%½üDz¯ÍɆςiÇÇ@Ê
+âü/#—ƒîIH9`aÀ¨
+æÛTÞödæîÙ]—‘ÚÆâ@H¹V=¿È—I"Ï­äPŒ‰[_‡‰m_=GZP“µ3{ˆybÞW£Á2WÇ
endobj
1466 0 obj <<
/Type /Page
@@ -5621,123 +5618,119 @@ endobj
/D [1466 0 R /XYZ 85.0394 794.5015 null]
>> endobj
234 0 obj <<
-/D [1466 0 R /XYZ 85.0394 769.5949 null]
+/D [1466 0 R /XYZ 85.0394 674.0898 null]
>> endobj
1469 0 obj <<
-/D [1466 0 R /XYZ 85.0394 749.2278 null]
+/D [1466 0 R /XYZ 85.0394 645.9973 null]
>> endobj
238 0 obj <<
-/D [1466 0 R /XYZ 85.0394 398.6362 null]
+/D [1466 0 R /XYZ 85.0394 294.7708 null]
>> endobj
1470 0 obj <<
-/D [1466 0 R /XYZ 85.0394 370.8109 null]
+/D [1466 0 R /XYZ 85.0394 266.8338 null]
>> endobj
242 0 obj <<
-/D [1466 0 R /XYZ 85.0394 321.6035 null]
+/D [1466 0 R /XYZ 85.0394 217.372 null]
>> endobj
1471 0 obj <<
-/D [1466 0 R /XYZ 85.0394 293.6228 null]
->> endobj
-246 0 obj <<
-/D [1466 0 R /XYZ 85.0394 120.47 null]
->> endobj
-1472 0 obj <<
-/D [1466 0 R /XYZ 85.0394 92.4893 null]
+/D [1466 0 R /XYZ 85.0394 189.2795 null]
>> endobj
1465 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F41 1238 0 R >>
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1475 0 obj <<
-/Length 2247
+1474 0 obj <<
+/Length 2552
/Filter /FlateDecode
>>
stream
-xÚ­Y[—Û6~÷¯ð£}NÌ%E]݉›¦{2™Î8»§ÛöAcÉcnlÉÉ3qý¨‹¥I¦§{ü Aø
-¦›ÃDN ïÝD±Ì -ºR?¬'ÿøQGÓD$¡N×ÛŽ®XÈ8VÓuöÛ̉˜ƒ9{{}w·ºz3_x4~½^~xEÿ|¼^ÝqÇòú-ŸÖsÏ>~XÎ#¶v²wïß]¿¿~7×aÌ®~ZÞ¬W·Ôãó<Ë·ÿš+¥@ÓÕŠuÁÔDü¸"mŸnWwó?Ö?OVëf™]W(©q_&¿ý!§xäç‰:‰ƒé34¤PIâM?Ð"ðµvœýänòK£°Ók‡ŽºVIáéÐñ­çù6HD¨=m}›îÊGSï°8íÍviEDQÖDÑ…ù“)OÕþŒ<=»Ïó‚zOUžU—ô­Ì÷Õ»œˆ?Ë"ÇÐèyc½¤öÙì÷Ä»ç¾íiOs’^7—3òËÉl>;£€ Ñ
-ôçüÌ"}ÉÇ}º1ű҂d󯦪n3²¼T^¥‡œF4ŽÓˆÂ춞YúI{1[¶p>Ò]lˆ{È‹:E7" a2íÇ ¯ÞÑH’Ö'­ˆ·µ­ò@Š¬9È.÷vyØuŸÛ%· oœuŽÞò(ñ)qÄCŠ<0`€y$²§XOéÞd¦æ1Çüє̿ ‰"|OÎ~8SG–oÓÓ¾Æh$ˆSÃÈÎý¾DØX}›òpÜçuΦ ¯–¬(=W¬%ÝÖ0h$nÏ;³ÙQhMÝ ±¥î9èUºeÊæ|9 `
-ówLØд˜¢õoOªØ?W¿}{[åµ@ó P¨icß­õ}!7õ7ž/””rv õWß`þ,o—Ø,vOEÍ'“ñéæíržx³õŠ'éV#˜Ã‹E‡c™á
-BŸM >pxJPÄS<±)í—GÒ¼02;éÁlˆ{:fimÓ?гS’µÓønš€¦!Þf—–£‚×<|È‹Üλ -L–a–iÅ™£‚Á
-÷»”:}hh/·Ù R÷<üOš®ÄÍI³eMlÂ(RÇÒÌ<—'$
-çÖ–¦ìèã“¢Õðå”Wœ"Mâ½´ ƒöª,
-æ¾`•‹š)}š#¶jΞÀ­yÄ©hû¡U‘y·f»…0Þ†,DzÃX'£²]ÞÈÑAD¡@uˆql×Hv§Çü+ÖF-â:P€kí¿מ§Xë‹Í–¶Byúâ0kÏÓ®,àì°+Æè@–EI*.’ÞaªrcgÍ
-눔$À‚’`Q—‹o$„R±#‡òXóvÙfSsøÎë¦Ãêñ㎞X úNÏ9¯Fæ‚uú^ƒ7ªB FõÌ*ŽI¸fs;¢ îìQÄ (-4Ôj(ä^ß©ïí­ñxapoèì‹]Íï¡OcOQâô#PäXÒu
-¶áãÍúã§õHz]Àp2D«ö…ïKw<, ¿@hñ#UJ§äØ 9n E)»…ý¼ËcH,4}¾Ù\Œœ,i¯7Ýœ'@ñõƒ;©Æò2z±åg¼X£—ì3xʶmÑ#^KB‘¨¸[êÇ|uKiç³ÖS¨Ù¾¦àÃóêŽ`ðEóY¦ã+±cÂÅ7Ö#‡-`ÒVg€;Ñi}B'h-E¤UØOåƒùJgÙs†öÔËÎPR‹H*ý=wø°?:od%½J*V?9ˆ¸v_à÷H÷ö2°I’M$ƒUYö¥Ú¦ÈÌ“ÉNéžøíU–â#݇Aß—¸©)~ØÖT°ó™©²½%$‰} ¨ˆ‹QÄï}+EÛÊÙ=[ÊVgn àV]%ËÚÕHÙ[ Šº´€®ñéÇÐñÒÿ:øçÄÈ¿²)=û?ö¿#Ž;qìÿ½áE±ðcPÂF¡ý^8°ÜýY24ý>æÄendstream
+xÚ­YÝsã6Ï_á·³gb¿ôõèfÝmz³Ù4ñ¶Ókû Ør¬[[òZr²î_
+O ãRYß[RË~Þ¿[îÉ/¬×Ïåü²Ï矽Q)­SúõQ
+Ø–U•?¬3t’ÃÊçŒ]†ÙÄ!É \PS„eLYvz¶]§ó¼x$–;@6ûšWuÃmF–§Ê+
+ˆ°Z¿;ЋE¶L÷ëw#Aœæ< itbû#ˆò‚~dEé¡b-t˜õ òy•ÏW´µyÝÚb:%yÓ«tÉ”‹-<«š"ãÕsôèߎ`SÃ
+H49 Í1 Õ<T# ìIÛ
+h#EdTØ åMþ•JÙq†Ñêeg(iD$Õ«]s Ç£÷Æ¢¤Ö¡¤”áô“ƒˆëÎnGúÖË™M’l"ÌÈrx΋Eþ”/öéšøÍM²ïC¦ ~}ìùì(›¨ûÛ9‡-ôq¬û¿_ê(6%lºK‡g–û¯¡ç¦ÿJ{è
+endstream
endobj
-1474 0 obj <<
+1473 0 obj <<
/Type /Page
-/Contents 1475 0 R
-/Resources 1473 0 R
+/Contents 1474 0 R
+/Resources 1472 0 R
/MediaBox [0 0 595.2756 841.8898]
/Parent 1462 0 R
>> endobj
+1475 0 obj <<
+/D [1473 0 R /XYZ 56.6929 794.5015 null]
+>> endobj
+246 0 obj <<
+/D [1473 0 R /XYZ 56.6929 728.9641 null]
+>> endobj
1476 0 obj <<
-/D [1474 0 R /XYZ 56.6929 794.5015 null]
+/D [1473 0 R /XYZ 56.6929 701.2097 null]
>> endobj
250 0 obj <<
-/D [1474 0 R /XYZ 56.6929 687.5192 null]
+/D [1473 0 R /XYZ 56.6929 595.7067 null]
>> endobj
1477 0 obj <<
-/D [1474 0 R /XYZ 56.6929 659.2346 null]
+/D [1473 0 R /XYZ 56.6929 570.9172 null]
>> endobj
254 0 obj <<
-/D [1474 0 R /XYZ 56.6929 590.6286 null]
+/D [1473 0 R /XYZ 56.6929 510.2699 null]
>> endobj
1478 0 obj <<
-/D [1474 0 R /XYZ 56.6929 559.3791 null]
+/D [1473 0 R /XYZ 56.6929 482.5155 null]
>> endobj
258 0 obj <<
-/D [1474 0 R /XYZ 56.6929 493.738 null]
+/D [1473 0 R /XYZ 56.6929 424.8331 null]
>> endobj
1479 0 obj <<
-/D [1474 0 R /XYZ 56.6929 462.4885 null]
+/D [1473 0 R /XYZ 56.6929 397.0787 null]
>> endobj
262 0 obj <<
-/D [1474 0 R /XYZ 56.6929 408.8026 null]
+/D [1473 0 R /XYZ 56.6929 351.3515 null]
>> endobj
1480 0 obj <<
-/D [1474 0 R /XYZ 56.6929 377.553 null]
+/D [1473 0 R /XYZ 56.6929 323.5971 null]
>> endobj
266 0 obj <<
-/D [1474 0 R /XYZ 56.6929 258.7201 null]
+/D [1473 0 R /XYZ 56.6929 217.4815 null]
>> endobj
1481 0 obj <<
-/D [1474 0 R /XYZ 56.6929 227.4706 null]
+/D [1473 0 R /XYZ 56.6929 189.7271 null]
>> endobj
270 0 obj <<
-/D [1474 0 R /XYZ 56.6929 161.8295 null]
+/D [1473 0 R /XYZ 56.6929 132.0447 null]
>> endobj
1482 0 obj <<
-/D [1474 0 R /XYZ 56.6929 133.5449 null]
+/D [1473 0 R /XYZ 56.6929 107.2552 null]
>> endobj
-1473 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F48 1258 0 R /F41 1238 0 R >>
+1472 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F42 1238 0 R /F49 1258 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1485 0 obj <<
-/Length 3154
+/Length 3143
/Filter /FlateDecode
>>
stream
-xÚ¥ZÝsã¶÷_¡‡ÎœÜX,@ühŸœ;_âxr—Zºt2¹<Ð"mqN"U‘:Åýë»_
-¬Òv¶Þ]¨ÙŒ}w¡eÎÂMZ g}»ºøË{“̲ ‹Ãx¶zðJ•¦z¶*~¿ýþú§ÕÍýå"´j— «ùõ»Ÿ/µÖóëooÞñлK¹¾L¢ùêÓý Pt&°L+Yùî—×?޾婫ûOËwÓ÷e—¯?\wóã͇Õåo«.nVþ$ÃÓjeðÿ¼øõ75+àÐ?\¨Àd©àC:ËÂÙî"²&°‘1Ž²½X^üÝ3ŒÒÒ)íY“6 “ õ…z¦£ÀDq8ÒŸÍ‚0MBÒ
-
-jP
-Îþ\ç»j-g'Žm'
-¨×›æ
-Èëü©Ü•u‡
-€mÂÁ-©Ù€´ ñÿööÜ€ÕfAÀVÆfóªî—:7Åq]¶<Ü÷ûæÐñÇ#n…3ïß¿e
-ðÓWÐM“yáäD:0Jç$%NÏEJÙy)ánc“Í?µUý$«6•lûXæÝ‘„)ñ0(¾ÖAf-«'ßn›S+ÇÔƒc˜ óqTÊ0 ÞXñ¬®=a§/e¹Ç^Òçë/Ll¹]oòú‰”‚ã²b}¨ºjoù lyyó–g|)Ÿ[¦žªnÓ;þÈëg¯KŒH¬Sèt›’Çš}yÈ;OnH‹8FïJÆzØå_J¾|/~ |DlêÏJ…OGàW55‘²-ÛÀkÏ3d+IƒLÛÞ
--vȾ›o«˜á!³û²m¶_ËôŅqëy­.³pŽrE½\—zî.™è97_yå}€Ä³d¯EhøpäØ–L ›D
-Ú$÷h ír0møßï‚ ¼‰‘M è
- z »€tG¯.ž0ÔcëU•O™kDF9se×(d</§à¿:4¹íòι‘Ñj~[ƒ%í÷œ?Ù‘=_‘Eä2ú vóØë‚» Ÿ3àŒTèP%³8L
-Zµ¼‚Ì^õØ Mè?ºŽç+ £c×nÓj'£¢7^A8aQƒ PÞd
-
-ÇØwˆœ 1:pwCâê<m·ß–pPT[è$Î¥p¹)6cçAf±¾6_„AÊ—L»9N…¸ÙùrÎç·ÛRÖ5 R:äÒL™ª+0í³ ¶,<0‘éM‚[:d$eÞV%¹=8Ø)f*ã Øñ6GÕáXΔCkgŽ*cÖÊÍOÀvÌ‘‘Ke¹Vwù¡“ 8 ÀÂÄA•!¼
-ŒÖŽóð1já¼Î+êºO¨¼qÆ-ù ù,ˆ›óˆ6ÎâvœgRˆgìý_&žÔ‡†{&ƒ¬€G8'Ï) J’;í¤›ðR.vØ^¬ZJ´´ª¯ÞÈ> #÷OÃÊ…ÒòÑ”© ¾Côj@•Þ(U`Í~äìÉPä†ÓF£$…
-{öFç¦5” 
-üB¢‡9#PÊa3@m RæÏÝJæIÜ™• åû}™(q¶È(ïFB
-†O¨´.9·¡Lzâg'ðnºh$õ©P%,£•u™-¡A_6á¸{èENÏL¼8+û’ˆÒÍ¿oN¥PýR_/6"?‡='Šë’å²òp5q¸avèrÃþÁc
+xÚ¥ZÝsã¶÷_¡‡ÎDn, ø¶OÎÙÉ]<ñ¥–.L’Z¤-ÎI¤*R§¸}÷ )Ó“L;~
+b¥ãÙzw¡fÏ0öÝ…ž…cZ ¹¾Y]üí[cgY%a2[= dÙ@Y«g«â—ù»÷×?®n.a¬æQp¹ˆ5¿¾ùéRk=¿¾w{ÃC7÷Kî|{{}™FóÕ§‡[ è4LašV2óæçûë>¼cÖÕç劻 éýGYå‡ëûëïn¸½_]þ¶úþâvåw2Ü­V·ñï‹_~S³6ýý…
+LfãÙ >T ³,œí.¢ØqdŒ£l/–ÿô£4uÊz±±AlÃtÂ|a8e¾8 2ßáRÛy¹n¨-®.F‡ónSBG©yYwsð÷z“W5!ËæuY-S»†ÛÇž«~. æ«ž„ÉÉüøã
+%~ü´b†¶Ë;j„7¯¹­ê¢úRÇ|ˬ÷ËÛw†‡¦—‡ã
+sÑ¡ÁJŸËr½ ´Ïן™H~
+{(Ûfû¥<¼áqq b[]fáõŠz½.õÜ2Ñsn¾ð"0Êë
+ú$÷ˆ†v
+ z`»‚tFoNžùcëM•O¹kDh %§‰¡Q,Èy^4±‰‰™°JÂÈh5ÿPƒ'íçœ?’Û‘?P\‘Gä2ú(~óÔë‚»`Ÿ³©,СJg±ÕAœ&ÑœÏ3î< àßó/†^Ãÿk¹¸£e¹îµO‚0£W
+¡ BŽz•…<שñJª1€p&­µJ€\!Òà ¾ˆu—åá‚#‡IÒy[vÜ9î¹¥„íX>’þÓÔÒcŽ@s*a€½“8Æ)FY©DÏ’ùsY#úˆÔî$Jýªbå'q†.& €ÃN¡t[=׌íÊ:D„ʺ[Þµ2_9 TUFÇŽl4_‚”ѨuÛVŒ®ÜR&™›¸wÿ€®I]^¢k½¨_Ã0Ê×hQì1 ” ¸w½Ý²P }ÕNøiS­7|Ø… nÝHص¤9 8kNáéq1Ö†€®‹Åã ëT4Yà…B3ÑŒ¥×˜FB;¤dŒï3˜Ô‰×  =C¶‚©„•0ñ é°y¸vbËì„'ðÍè t»… ™ê±’&¼…•§jKÅœ§5è-©Ç‰˜Æ62äìÅ_èPÌÈUá€mþUË}ÈÑw·?sÿáBíŠÏ7'„Ùm×øƒa!;î‘RçØõ9fpÿ©ä")˜Š…kó*“eÚïÛ­7%VH=hç7@‚â j
+¬:¶/”‘¯\¡Z0kþÔ±d57ŠÛ"i‰MS <’\—'¦`S‡üFÚÎ+ܬە¯ kfB9gIÂL”Éæ°G%9:þz]BjßwTa*VŽIèŒM„ô6jy¹½Lê±-šÐr/W@%ÁÀ®Ý¢ÕNFÅn<ƒp"F .ÀxS;Ämì;DNÌ¿†¸»!uáò²nvûm E³…Nàp!…LRH¤ÜŒGáb;|i>‹
+;JÆq)§‰•z÷wÞOtVS(¤ÄþD:uæ­DZÜqË%Qž¸%,"ÂÜÖÍIמðuøÂýò÷ñ-¨åxÏr¬@ $nù–*gB_×ͼÇqÝŒNÚ£%“ËG«È•çÞFò0
+†OPuɵ}פg~v‚覃FR_J•Q"f´Š]eKhÐ_›pÜ=ô¢¤¦ ^œ]û҈ʂ8š¿oN¥Pý¬¿/6¢?„=Šë’õŠåájÂ_†Õ¡« ûøÄjp7Þä…{w*ë©’òñåì¦|vOŠ±´pS+qÑSî|N\¶¯ Yt¼É"uYÊ2|oý«a,¯ÜØÙ5CO/Ê.¯¶² {¦òûu…vãÕm×eÃ]mú
+ÿ/ÞLÈÕ¯q’à›G˜9Suv ´gÓ>Üp+ÁÄaÓsyˆD¹/<U‡V¤1pÀÐé
+ W_+njݵIƒÈFѨ¨c¿ƒ¹ÂÞX4k}j˜ZLöç•„Aªõt|öT®[ͯk¡uÕ’69Eô>Ü|%4ÐcÝÑEÌÒ¡15ßR£Y­\ ‘ÈùÅJímõ¹çXë®îÖe )z²—Ç ‹ö[
+J¨Q$g ²(vUKä` nÙQžoçg¯uÕÊçJ–t?ò@—]#Š}àùË6ªX{¦v:µÒöm2?•þ´lÿ&_ð'á·õ*©šcË#LØØsÈbº]ãéj¯«M<ê$ý£gÁ’é„€¾;n»
+ ¿†ÎP•2ÕÉoΧLÔE»|½©j©¶§þW²
+þƒÁÄo:ÊÿóÿCÿ/\ج §2* ,ĤS
+7¦çšûxx­úGçkendstream
endobj
1484 0 obj <<
/Type /Page
@@ -5750,7 +5743,7 @@ endobj
1489 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [408.1244 623.7385 469.3244 635.7981]
+/Rect [408.1244 577.7711 469.3244 589.8308]
/Subtype /Link
/A << /S /GoTo /D (managed-keys) >>
>> endobj
@@ -5758,39 +5751,48 @@ endobj
/D [1484 0 R /XYZ 85.0394 794.5015 null]
>> endobj
274 0 obj <<
-/D [1484 0 R /XYZ 85.0394 769.5949 null]
+/D [1484 0 R /XYZ 85.0394 728.2123 null]
>> endobj
1487 0 obj <<
-/D [1484 0 R /XYZ 85.0394 744.1913 null]
+/D [1484 0 R /XYZ 85.0394 692.3597 null]
>> endobj
278 0 obj <<
-/D [1484 0 R /XYZ 85.0394 684.3648 null]
+/D [1484 0 R /XYZ 85.0394 635.9071 null]
>> endobj
1488 0 obj <<
-/D [1484 0 R /XYZ 85.0394 655.3895 null]
+/D [1484 0 R /XYZ 85.0394 608.4135 null]
>> endobj
282 0 obj <<
-/D [1484 0 R /XYZ 85.0394 606.8822 null]
+/D [1484 0 R /XYZ 85.0394 563.2801 null]
>> endobj
1490 0 obj <<
-/D [1484 0 R /XYZ 85.0394 580.8718 null]
+/D [1484 0 R /XYZ 85.0394 538.7513 null]
>> endobj
1483 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F41 1238 0 R >>
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1494 0 obj <<
-/Length 2887
+/Length 2965
/Filter /FlateDecode
>>
stream
-xÚ¥]oÛ8ò=¿ÂÀPˆQßê=¥iö6Û½6W§w8l÷–i[Yr%9®ûëo†3”hWÉ.PˆÈápÈηÅă?1‰b7Îül’d¡y"šäÛ o²†µ\Æ™¤™õæáâêç ™dnûñäaeÑJ]/MÅäaù»ºB¸S á9÷ïnæÓ™yÎOBÐà³y7§Aâü÷þa*Rçû;€ñêüÓýý½ú0…³#ß¹ùåúþáö#-‡L÷úí¿§BçúýÍí[ZzûžOúùözš„Îç·óé¿^Ü>ô|Ù¼ /@¦¾\üþ‡7Y‚~½ðÜ K£É&ž+²ÌŸl/Â(p£0 ¤¼˜_ü«'h­ê­£²žë±?"L_LDè!,ÚÒŒ2×O¿—æt&<ïyi6Ç]W?ƒÛýnW7rgøÖƒy“™³, 5q¦úLHñ~¿(‹œæïÔ‘t̺‘»†μ“ÕR6øˆËž
-ß&KõÙóüJµ4•ôÙ•²[ÕÍvFÓ¢Zª‚UG€ëû;
-¥¤Î¼.e£Ù2çkãÞP°à`½Ó׃µkxÀÛ{ƒ:í JuÈêLvÌ7jIZá`¹íêF®™‰Vá™ëéà¿U‹BVý­¨ö_/Çn ·>{íÿL£•²>0Ê\5Oæý}Ï \¶*°\CU›U‚G‰›u{«mT£¾ì‹¶€k?c’±ëGqD÷SÀq(àÅiðv‚FâKÕù~ FÈË+ZKàúh`ÖŠ\Ôûάµ,Ë¢Zƒ,Ã(@Ѳ,¾ /Ìx/JOd»ÛÏƤº
-¤3NÁs€»:ÉƘJÿŠ9±"Ùé2ƒy³|RϵÏÓN@<K;£SiòiФ½‘-§~T Nu©.€ú,VGìÞ³N.9½­ˆ‹[´y\ '°eI@6máK ±óô &· >&U7/…ÚÐKÿDÝ,¬ÔÍ`ý©º½tè n燎«›}(©[’8¯Úb]Íêª<¢Z%}I“$F­
-ðÉ·žÑÊ­¢Ò¾½ë%/\îz}‘k±U#`»fÐ~6ìû±pÓ(ˆþR+Zø.DÚp¼ WI7NâÚÚ´ÏZ<4;NI ù†HRW$ÉI¦iõ½bß Oü0uc? ÷|o5¹¢8ˆ(<7
-|¸¹Æø0Å;ü±ïÜžKhz‰ŸL|/tÔ’ÜÉ— ˆ1̲€¬±æu\ÝmýÉÛ8šXLÂ3›²f*ö¬|&K]À‚óýÀ £4œ vŒ)¢"  OS?rH“¹W!­3{±¤!Ú­†˜%Ó8¢—\ “hxƒÖ_ ~Z‹3RµÇÑ@¯5,Ck(t¤CpšP7W…öýY
-àì· QÆœöjxXYkžÔ IÐM¸w#v ¨æ;(Í— IÑš…w¦¡aŒ¿ÏdéĶŽ384í(ƒÔ}6üôcîÀ¶áÄMPäÑôÝ ‰(›yÔ„~c'e™.³(McÉ(+Â3pNŸõ­˜Lpã!ëÉ%w—:‚ ÔˆÉi4Õï€Ëx4,]²Ïì¨Ì©éˆ†œrìJiÚCO§â°ãî4éÛ@yó|«gvÞúK)ÓÏÃ\p¬ôaÑIsñõˆƒYûšÜ,øדßÏMRöÄ‹¡kýnmºn÷úêêp8¸ÊUm[ºu³¾jë}“«+͈¾ÛÉÆ]ÿÅÂ>åök×HÓ‘éÅ»B>Û^ "7 1Vyzóv?üû¬U9'n¦Ï´LÀà!"
+xÚ¥koã6ò{~…~XX«¢Þê}J“ôš>vsuö‡n?Ð2ë"K^IŽ7ýõ7/J²WI ,Däp8Î{h5óàOÍ¢Ø3?›%YèFžŠfùî›=ÀÚ?/”à,,ÒbŒõýýÅ·?é,s³Øg÷›­ÔõÒTÍî׿;¡«”;žs÷óÕr¾ð#ÏùF)|ô"ïê·y8ÿ½»Ÿ«Ôyÿó-Àduùáîî=­ÞÏáìÈw®~¼¼»¿ù—C¡{yýï¹Rʹ|wusÍK×ïä¤n.çIèÜøíf9ÿãþ§‹›ûþ^ã»+/ÀK}ºøýo¶ütá¹A–F³#L<We™?Û]„QàFaXHy±¼øWOp´J['e©<×bB˜¾?%Ì(sãÀH˜·Ý|‘S´ü5Ÿ÷&ïÌšgÝV˺æÏæДªá9K£[Ôþ~ûîšGŽEY
+©õš·µ­=Åž¾§…zUš°UŽu±A„a•0wÔϤ®·0gõÌණ›¢z@%¤`5YùtmÞÿT?âMQ«æ¹åѱè¶<궦hx„ŠJ—<;TSûyp{ý¦uñH¾š©Ð BP ˆ8a–eYoÅó…ò¼—­¸yÞwõc1Xo{Øïë¦êcÝñÀsÃ,Jˆ¸P }¡¤xwX•EÎóŸ‰að1Þo 8ËNWkMW\÷T„ ˜¬ÍGÏó+ÓòTóg_ênS7»O‹jmöþ¡ŽpywË@âcº¹r¶†Çy]u¬ûrJ]hU(€­puÔÖI,&?4E'
+ØÕëCiÚAŽ?.mÂÕD¥ ^Ñn>ˆ€Ä35MÖæ©È «•XË\®D¬±¡ûq‚†îÇ1yN«úX1¨«t¬›G†ˆ‘¬;Ö B6¿à !¶X
+Ťβ.uC×2çsãÞP‰ä`½#ö`í4xsÇc°§½%P™¯ºÐ]§ó-¹`°‹À2ú¥~,[:³ìÑ‚ˆð¯ÍªÐC)ªÃç·S¸×gêþÏ<Âp²®‚²4Í“5
+¯†˜`/ùã…um WuÇ´žìÙÊòY¶÷® ‰Œ0ú†ªˆÀ ëãäÝ Ú¤zL+`†˜ƒ|­qD±¦‚ä`xL×ÂAÏ*N(ÁÁW?é¢Ô TAfÑïxF¢í·ZsF€äÅÿAjÆ
+ ”·}Œˆ„¢œ•1ƒ
+@ꜞw:’|xŠÃØ~=“OÅÚ0feŽ¼²1Ú– -CÚC.„‰@¾»}Ç€® 8ì8¹+o8‡â¢ÂN.¦F)½/ rsf\ïphM3g¯; M0Ì*ň„‰«å Røb–Ë Ÿø~(&@N®Hl¸zƒ( ¤Ð‡“
+D°_ÍŸVdËbÕèæYŽ\¡žÑ 2  !¶'ÎNøzJ³%˜q 6‹e–g-=ð¤@PQu¦ÙèÜ0œ`¶;
+GÉ=QÐCÅ%¼ÿGO%ç'&@M¥þ«'Zœ/N<)'RåFYœø¡¼á$º
+‚DE%6æ#°÷7çÝ Ö›XueÒå±
+¡3ðŠ Èà¢X¼ñ¶c¬¢íÏ’B¬öP“¶Â¨¡J°Eÿ8À`«0¥5 º+’MhÛ:±n%z|áË~oW={,0)ª°}_µÞ¶ã 2–^¯Î5c€•>éNVÑmó7á—h¶SWú“m
+˜à Ü¢ù™m²SIÊ"¡ó‘Ž´˜Z-€ÅŽs€fß7R|]ÙíÜQb­¶À:°j‹'!8Ä;¬ó¼Œ’ò„­]R¯Û÷ú£ºIKô7Ÿõn_ŠiÛw‘¢ˆk$’›yq<Q¨CØ·34êI˜äõZШ&Åo•—‡µE¦÷Ã8“ÒÇÀ(ãÏè›lb6Ý<¢×͘Êx>ùKÚÄëß&ãAcGþ‚5cC@ †œÇÐj¶l¦8ãWÔÀÞÕ=™áÄw<7sSzð åz®'cn—
+0YòYÓ@2~1ùûðgñßú@ù.äÛpúg
+ Os?rUÒÇ*IÀ–†Aä»J KöéºÞþ—$ÑÈ2^HžGÆ®26µÇÉ‚™,Ü‚,ÏÌUD‰8Mø=Wø‡P,ä§øA—(FÃ÷°_k.€ ›AYoù ©É‡V'§—ÇÕ³‘Œho3™3äÊT¼÷/ÛI:¦Ê€
+àv+Ê+0/ÞÙ›yàakMw:òSH‚a
+ÀœsZÙÙŽWìÏYD«æo¥ÑƒïÌBÃ8sý4Kgcïø:‡C׎ ÌÃx_Æ>»i†üê/~Yì†aÄ5ü÷ãÊ,ó \¥}X²¶ŠðŒRØgýSL¦äÝ!ë[©·òºÔ1Ô â—€ØÂö™§¤\Æ£42¥ñ™üË ÂØJ'<¢ºc_jûZ0¼éTœºiÜ–$ýëPÞ¾üÔ³8ú[/Rö= ÂÉGò÷«N[ÎO² ƒöå‡‹È ƒ@MuvÞÌúÝWÿê<ØW˜¸AšúÓæ®ä†)±\áÍüô ÞíïÓÌÿQ1yendstream
endobj
1493 0 obj <<
/Type /Page
@@ -5803,34 +5805,36 @@ endobj
/D [1493 0 R /XYZ 56.6929 794.5015 null]
>> endobj
286 0 obj <<
-/D [1493 0 R /XYZ 56.6929 769.5949 null]
+/D [1493 0 R /XYZ 56.6929 725.6147 null]
>> endobj
1496 0 obj <<
-/D [1493 0 R /XYZ 56.6929 744.3049 null]
+/D [1493 0 R /XYZ 56.6929 688.1348 null]
>> endobj
290 0 obj <<
-/D [1493 0 R /XYZ 56.6929 657.1551 null]
+/D [1493 0 R /XYZ 56.6929 599.5024 null]
>> endobj
1497 0 obj <<
-/D [1493 0 R /XYZ 56.6929 625.9811 null]
+/D [1493 0 R /XYZ 56.6929 567.8271 null]
>> endobj
1492 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F14 980 0 R /F60 1366 0 R /F41 1238 0 R >>
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F14 980 0 R /F61 1366 0 R >>
/XObject << /Im2 1355 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1500 0 obj <<
-/Length 2097
+/Length 1954
/Filter /FlateDecode
>>
stream
-xÚ¥X[oã¶~ϯЬ D oº´Ù$»M·'›³ñž¢èöA–i[ˆ,y-9‰ûëÏCÊ’£´iF¢g8ä ¿¹PÌ£ðc^*RéÅ©$!e¡—¯O¨·Þûfe'ô¥ÞNOÎÞ‰ØKIñÈ›.zºB“„yÓùoþÅç·Ó«O“€‡Ô—d„õÏ/ÿ7aŒùç7W—Ⱥ¼¹CâÝÕù$–þôó§+‰ÓÃ4ÆìÌÛVî;ÆøBCzñi"bÿ×Ûé„%þÇ×0f¹wŸoo?îtòûô§“«igWßvF…6êëÉo¿So.øé„‘&¡÷/”°4åÞúD†‚„R7RžÜü·SØãš©c¾ EB„Ç#ΔlÌ™2&Q£3ÿ5 "Jý6Û"ñÇÓ‰z£ª¦)JR’4ÈòmïÙ;Î{Z©J8ºóͦܣ›Ú•Bb“µù
-ÉÅV{³^I¼½¾±g–âÈ©Reú7®9°d¸¦5Á.£É`Ã,13Ǿ0!µn/f$àG@D†ÜèüefE5OÏàÿÙæ>o;*
-pÍ@ F¢4J_…ÆIš†r`o gE‚(œGA—%ÝŒ¡ªCä…¡ŠFXàX;,¼”’˜AÄE,!·Üô
-ÀdÖjJ":õ–&¿PÊK…üu6Ôß#£ª[$fvR^¯a^1›pê»E»r«X±/œK£_(µk‹²h­ÞºÂgV–«tS€#„
-õa¥j ¡'~³oZµn&,ô!Á Pøë„Iò»më—J©9RmÏ¢jZ½˜yyó ³EbRàÑ‘Ê`&
-‹­ ;SëíQA<¿ºEâƒÚë7´ÛíÏEµ{¯Ä<$RDX§Z™à•æ;ezP;B?3|¬ŠåJn-Ö¨¼3[óîÕ‰¦­·ÙR¡Ô\=¹:Õ)êä®E¨æ€ê¡ Öü‡bnõ­,ô³þ*ùv¿iëå6Û¬Š|ìl³<‡Ž`kŽè*û×z èæò¬ÒdÝl»ÝãX½sÌb#¦Ó&èp­+L)M
-8êÄLKÒB†º×HûuHÚÆ\[µ¨wÕ\„0QêÂdä½¹—rݲn‡90›Ï2N?X™Yý ^ß’òÒ’Þ]œ#F‡ é]]¢ù³–4êµÔ( ¬Ú}£î œ.²Ãî‚ÚRA»[‚i&¨­qkuw¤]6vY›™!›`ôíE˜²¯ÜjiM,+\ûGËw=(¸jæhmÛm†(ík±v5`‘5­êü›Y/f•ÍôÐ"•†î†Ý^³ÊÜgæúCÜmÐßh
+xÚ¥XmoÛ8þî_!ਠD4ßô¶¸ý¦i7ÛEškÜ[,¶ûA–i[ˆ,©’ÇûëoÈ¡dYqvsW­†œá3óÌphæPøcNä*b鄱$>e¾“n'ÔYïÄY¯ò†Roç“Ù{91‰8óÕ@WDh1g¾üݽúéòn~ýyêqŸº’L=? îå»ÿLcîåíÕõ;d½»½Gâýõå4”îüËçk˜ cŸÃ2ÆìÊ»WVîŒ!ñ•úôêóT„îowó)‹ÜOo`Îrï¿ÜÝ}2ÜùôùÏ“ëyo×ÐvF…6êÛä÷?¨³ü<¡DÄ‘ïìa@ ‹cîl'ÒÄ—Bt3ùä~òï^á€k–žó¥/"âG<<ãLÉÏ9S†$Ctæ?§^@©»_«©MÛV?Ìfûýž”•*š&'e½ž5å®NÕÌNy”Ä$jH›Ôdý§öÂì=îEO†20»\?µu’¶è¿v£,‘Ô‹$ÏÀõò/ÖÛSÂ$þ|Z!ñžç²ªòÃè4UÒ¦$Wµz¹I¼½¹µÐŠñcÄT®’F½Þ»&½ŠYbyÎœûÊ„ÔÊ‘P@¼¹±ïcøþ…2‹¬XÆ3øV=¤ c£8y¸ç `õc2ŽÙ«ÐÊ8‰c_žG+¶‚@¾¬ ×QÐeI\!FªŽB†>‰À»5]Àµ“cJB•Á—”ð
+[nðÉ´ £ÄNn$>ã$°p÷zìÐ)MÆï›­o#ü$Ph@[>0³›-wÞ•`‘30ªSì 5£6
+@eÒjJ">õ”E–&¿RÊs…üm2Ô= £([$vQZna]¶˜rêv+öY»év±b_9—F¿&Pj×fyÖZ½e_ÈgVÚá”›³!Y¨ ;kHž0r›CÓªm3e¾ •X€ÂߦLBìß[
+¥–Hµ%~³¢iõffðáö æˆÄÔêQLe 8€³!ž¾¢:ü8ˆïX¿/NQ/@`€úç¥\úœ #íã_7
+‚Àbß]ì²)só¥ñµžøåàþþ— U9p“Tá(kí×,–n‚â,<ðp±LL•["3/Sai÷iJœE,•IwYª¦Óc§²¢UõJaÍDâL3íq:ϼsZÔI¡Z
+U·QûÍ@uñT¶^kàâ0¸sWež—{ë"Pø”l«\5à#N¹»·Ré¦,K·%~{èá ›Ö™…·íjð®©õ9µsù×iÌ]{­ì3c vMw3n²©£Ã¨ ±¡¬dZ:×׻Σ‹ŠØJÈNï% å‡E±9‹é…ଠp—¼Ýe9ZAs/–õèJ¼¼¾Câ£:è7twÚ_²b÷ôÂeLI
+¥–ê1KÕ….1pQîZA€j¾¨žªðÖÌ–VßÆBŸ wIëCÕ–ë:©6Yz.¶IšBOP›°}Í„îÞÚÎ4)4U7©ëΕ»Žy¢Øˆé² z ]ËB#S@‰C€™ÙuÆC~þE²0‰
+n·+F e–ÛúZéÒÒœM’÷à­<Gw]ŒT kô1dý;æÛ.C¢éÖá0Y6VSSžfþv×´'†X+ªãRòzÔž ‰]@fWe±ÊàêS8‘ë€zkU¨:Kµ#ÍÓjÛSúXp¤W<«<¯z`Ì'ÉVýø·¹rªqt\«l•ëò÷c_ÿvQ­VÙÓxï3iéuœ¼pW­ µô-àìçêiäî
+¤MGÿ¼K`T’(òCû`Ú&êÌæÐßÄ4ð­>´Rh5!_Ò.àÌTò¡r³®U
endobj
1499 0 obj <<
/Type /Page
@@ -5843,83 +5847,70 @@ endobj
/D [1499 0 R /XYZ 85.0394 794.5015 null]
>> endobj
294 0 obj <<
-/D [1499 0 R /XYZ 85.0394 491.3865 null]
+/D [1499 0 R /XYZ 85.0394 401.3155 null]
>> endobj
1502 0 obj <<
-/D [1499 0 R /XYZ 85.0394 466.1094 null]
->> endobj
-298 0 obj <<
-/D [1499 0 R /XYZ 85.0394 166.668 null]
->> endobj
-1503 0 obj <<
-/D [1499 0 R /XYZ 85.0394 141.3909 null]
+/D [1499 0 R /XYZ 85.0394 370.8241 null]
>> endobj
1498 0 obj <<
-/Font << /F37 1042 0 R /F41 1238 0 R /F22 977 0 R /F60 1366 0 R /F21 954 0 R >>
+/Font << /F38 1042 0 R /F42 1238 0 R /F22 957 0 R /F61 1366 0 R /F21 954 0 R >>
/XObject << /Im2 1355 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1506 0 obj <<
-/Length 2160
+1505 0 obj <<
+/Length 2051
/Filter /FlateDecode
>>
stream
-xÚ½X{oÛ8ÿ?ŸÂØ[`e ¢ùõ(ÐÒ4¹íî^“­Ým±m9ÖE–|’'÷éo†CÚ’«¤»·À!LÍÃá<~œ¡qø#²0‘É(J¦¹Ð£ÅæŒî€÷·3açøn’ßõfv6¹VÑ(aI(ÃÑlÕ‘3Çb4[~ò&ƒîÝþ|9ûRsï/BÐà3×üòÃXEÞ?ogc{7?¿šåN?ÞÞÞîl {ké]þxq;»ú@ìÀʽxû±»xyõ–XoßÛ®¯.ÆQàÍ>~¸šŽ¿Ì~:»šÎÕ=»à
-õï³O_øh &øéŒ3•Äz´‡ÎD’ÈÑæ,Њé@)G)Φg¿v¸fé -gR…rÀ˜2¦NX¨¤2Æü~쇜{lrY•«ünWgDhª"­ó& üÇ8ü ~ b|*Àc"Á"Ûƒ3­¥‘æûÛ{!ü"Ÿ—é&{=Ù5õ>&a€?ÛûE³›êD²*Ò‡ª~½¨Ÿ¶m始EVduÚVõs«…[]g«üñõ¤Ú¶ÚõÀ¹“k);ñÝX7¢å>׸º:¥%ýyÞÒx¾Ë‹å9wMfcNÊÀ ͶBŠ•Q.ip0F×Ì„¦;FÌ¡c£ÇŪͬ‹ªü̹ßäåݺÇÞ®´gê:YpθV䡘MzŸ œ\FN‘°“PÅI S:
-º‚ÌÖmÖ´"ÅÆv:è‹5b0x
-l9Ò*dW¿«n,‰ãx¸jðý®HSôðRÈ
-=¾‘Ž1ø’0È°ªniº•ßÐ=…ìé*ÿ¢°ÅÚZßñWC–óïˆÿWúù¾»åKg:1Ïdž—N¨3$f•ßV÷HáŽÑU{B
-±~€Õ 9ªÄ+šŒ23Ð#(Ub
-K$„½»p–OíšðHp«6›ü®*^d‰@ܤÝ¡V2ôö͆À¨ÜtÑñ”áãa $¡Â
-œØ„ê8š»
-màHÙ@æ:ò¤Ûw¸”Ũi
-Ÿ³„ÅÍ3a=بy¹{´MŠ¨m»®³tù?ô+'}Z­³óèô-s~³Ùù3íÊïkMÊ`àWAü†!` ]W1ÐÝ<#]  þ±&"élC…/AK÷]¯@¸¡d• +8X§–„qÚÒ°sK×3Š’ñ³F 5“±Š\ƒ´Ý6¢$#+ïòÒnDN8€6+±èY W˜<‡_ë2YH^§Vaz×@©¾R³ÛšËÌ‘(&¹ˆOz†áIAqWm¶9•:JSMo¨5ÁÁ¢…¨Äç óÚØ: fT»vk V5P K¢›2J!º‰+"´nåªÂ2’€ 蔦äDT\fØôX•ÕÆ.ÕGœÈŽzþ´C¥@±Xòè«îÜAO>˜ydK[âÀyÏ\9Ö®”¥°ׂd¯ëÏNsqh÷›úÿ©'ÝkôÝyù#
-¿Ï[DŠ8>"Eül.kèÞeæ.sÚâØæ„ûC™. à„Lï§:´a¢Ñ´ 16…¶pÉn[ú0eÌ;•»¥¯íÀ¾
-ÆîUz>Ð êPÏl"¼w++ÃÊ´74 KÈté~«]WÌ.íoã~wà¦Yí
-›Z€óC¯dŽb S\iS Dˆ Ð…C OÖÏ®_¢Ï/†…uÃÕ€i W}EC¨Ðe2 Ú7 uãœ;
-Üç0TIE'H8¿SŸè®#¦@Á\Â÷‚CcG£›•Ò×~S-s„Tƒ}¡>> áG³ËÛŒVƒ¿¶¹TŠéÈ]ræB&ÓR±Pë /^Ö:ÃëÞsØÐC±Ò, æìôYþí^úùøÚ  âX7ƒ2‚¸ˆAˆU
-Wü+ÍÝkóתÿ
-¢*qendstream
+xÚ¥XmoÛHþî_aì-PˆÆó"ÉR¦Én÷¥ÉÖî‡íb!Ûr¬‹,ù$9Nî×9ä(²«¤×=Gä ‡Cr’£†þÔ0Eëx8}H —ÛÞï‡â9ž›äug½&W&Æ"u8œ¯;²"!£H ç«ßG¾PJŒA„Ýü|1{:£¿)EƒÏ2Çf:úçÍ|¬¢ÑõÏïÆÜÙ§››kËaï@.~<¿™_~$¶ÏrÏßýc¬”¸¸|G¬wx§«ËóñÔÍ?}¼œÿ˜ÿ4¸œ·çêž]Iƒ‡ú÷à÷?äp&øi …‰£`x€)TëávàF¾1Ž’fƒßZ®]ÚkK%…6¡î1¦V}Æ bmžŒ©„{JJ9z»ÏòUVÜÒQ¯wi1›ýBë²¢A³IÙ˜ç4a)Ê‚YežTYö-tG 9ôt(¤‘´ÿÜ
+“V˜ÇrdëXé ƒ]…Þ,ï³UZäÓoQ7Iž§+üT£„É ýÔu“niœg‹*©­oÏ€¤,iw·¬mHéØŒÞ7ÇÂYJS£Ñ>¥–Õã®)™¿\¦yZ% ˜Ââ Œ‡qh{ÈýŽ-Wr˜ñg¶Mk6nJ¶öMØŠIñHƒ‹›Og4ªË'|–Ò$÷Î7õ AÃOxEÚz]E=Ðô•hUD8õ­¦ï '>cÍÒ‡d»ËSÞþÀBë þXÍi؇(<æº#žÿú.ds£ÅŒ3FŠPÇ
+>SÉ
+€N 6Ùrr¤ßÕÏ é ÀÀ\`³
+U?Vô'eÒº±}So=H+B>SöЂãªç¥âáÔ©N„K±ÏmA™3|*Æ_š 7¬¬šÎÁò'zãH!>@å_Ò,]n¸ÔúN¾î°Z|Gü¿ÓÏ÷Ý-_RóÄ<“EV8¡Îx­¼¦¼C(@ŠtŒ:/›
+mŸÒÛ4P3ûÑWš_Ä2tEOƒóŒt£D¤dømDÜÙ†JOƒ–
+S^·D¸¦ËªcªVp°IqÚа“§áËÙÄèèY›„Б™ºi·«'¢$#-n³‚7"§õFA§«H WØ{¿ì1 YHÞ$¬0=ó ‚Tà©Þïlv kÄFh©¢“¦_xŒê®Üî2*vL@E½¥VË&§§ûªçs¥3Ê}³³«j(‡óÑm!e
+ÝÄ5·r]bIÀt¸”¶æDT\¥Øõ´¬’µá¥ÁÎôÜŽÚþ%ô}Å€?‘–Óãë€MùƒÞ6ÃöÍ,tof8pî³I‡ K×ÖãÍeT‚ëë:´ÓËØ»ýuõú¹§O(±ð½²ç¡þÙ‰ÿ÷³èÓû1¨g¢è™ÂOO#áG „•BÕüBs÷~ú¥êÿœßôendstream
endobj
-1505 0 obj <<
+1504 0 obj <<
/Type /Page
-/Contents 1506 0 R
-/Resources 1504 0 R
+/Contents 1505 0 R
+/Resources 1503 0 R
/MediaBox [0 0 595.2756 841.8898]
/Parent 1509 0 R
>> endobj
+1506 0 obj <<
+/D [1504 0 R /XYZ 56.6929 794.5015 null]
+>> endobj
+298 0 obj <<
+/D [1504 0 R /XYZ 56.6929 769.5949 null]
+>> endobj
1507 0 obj <<
-/D [1505 0 R /XYZ 56.6929 794.5015 null]
+/D [1504 0 R /XYZ 56.6929 749.626 null]
>> endobj
302 0 obj <<
-/D [1505 0 R /XYZ 56.6929 655.8524 null]
+/D [1504 0 R /XYZ 56.6929 555.4869 null]
>> endobj
1508 0 obj <<
-/D [1505 0 R /XYZ 56.6929 630.3608 null]
+/D [1504 0 R /XYZ 56.6929 529.6161 null]
>> endobj
-1504 0 obj <<
-/Font << /F37 1042 0 R /F41 1238 0 R /F22 977 0 R /F21 954 0 R >>
+1503 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1512 0 obj <<
-/Length 1877
+/Length 1859
/Filter /FlateDecode
>>
stream
-xÚÝXÝoã6÷_a´}•LŠúâûõ&mº½$]{{-º}e9Vc‰®%'ëÿþf8¤,+Jo¯=ÐÆH ÉùâÌCò1ƒ'¡Ç„ Ʊ ¼ñpœ•#6¾‡±¯GÜÌqí$·;ëÍb4½ñXz2ò£ñbÝá•x,Iøx±úÙ™}sq·¸|?qý97qÈ9o˜p΋›Ùå[z{3§ÎÕåÅ$œÅ‡÷—@‰eèÃ2ÎÍÊ»w33ïKΩó‘…lö~"b移ń'Îí»k ™Ñù‡»»[=º˜ü²øvt¹híêÚΙ@£~ýü ¯Àߎ˜'dŽŸàƒy\J\Ž‚Pxa „¥lGóÑ÷-ÃΨ^:äËP$^˜øñ€3}>;eúgÞ ¥ _hojOø—3Æœ7‡b»*ª{2ôÍõq¥¤æ©h6ÔC§¡»À~âw¶Œa‚N–šý¿6yÌ¥p–-oü"ÞØ“¯€% f“a«²´)”Y¦ÖÔšáÀÉu£JÙ54t»Ë«ùü;³ºXîÓý‘>J˜k¤æõ.ÏŠŒùùŠEjøª
-é÷‡=îxîÛø¹m|‰¤ã:çÍZ/{p­öÔù®¨Ÿú^Õ6bçâòŽ:ïòã.ßÿž›I•ÅDúŽ¢5Û¢zx‘ó@´ï´Áê±X$È“Wv 9"]ÕD gboi˜åUºÜ¢#ñ£¨z¢ž¯#@ûÕçµ<I}½†V=.Œz@j7©ä? 6v¹
-†Œ«4±¨‰–ödDÕl4¤*ÛKÓb L¸cx¥µiiµðÝeÑiYT¨B à†/çzM³žìb’d¦Û`·Æê,$üÂÈ<D)‚GN$mTÝ€û…ð5[&¯ã Ú²ül¹UIZ*‘—G3kE9‡´¾¸¥ð±¥ÑFÑH>س©&aMD«scg!^Æh¶göúÚÞL•eZ­Úà´©ôS‹yA$#½æ«‰AJe+j=o
-°’CìÍTo
-ê¬ P&'Âlöú‹û,£4û Óu)l]p
-n¤~ä‚” «Bœo™ëb*¹
-€¦®·¯§à›éî!«9Ÿê}CO?³–¦÷—N!ºñŸ(^­PÇmU
-bqÙÅÿ`Ï\mÓ}Q¿ˆóÙuÀ,ö·ÃžÿKàµq÷)Ýg›×i¹Š‚Ï‹¿˜{±àƒ!ô_†
-?sQ0vÝ]v­&]÷`eteã(¥¦…Iëf³‰ª´TðˆÆ‹Œ>Ñ)ÉŒcpÌÓõÕÙÑh‰f!Àz`c‰ån›ˆR>œåéRikü¨”¡>©ý$B,ÎQˆ\¦Gb°I ç”áO->kªÑ»hò¬éh•FQ—i“m¼¡H¹mc;ŽŒÔØJ¹•
-½¢Ê”9±2:±€xV² ¢:»Tç’µ'³A
-Ä€²ü‰SÆ<eºù~±nr㼬ëi“âûIâ öÚã¿·}œá­#H@aéC> 
-ó :<)Ðr8&žs„ˆ(ép7
-!M£v…´*4ïUÓäV„2Üò¦'s~{µ09Õ½ ‡Ü÷âˆÃýSßIÿsî¾'“$¾ »-G·Ë’®¹g[À!)O’õ£ÁíÍíD
-6ð?VUÅ„Ô(&<¶‡U^1%bYTE™n‰¦7©xgFB£E™®‚;RÚ䆨q¨°¯ˆDRÌÍ¥Ÿ £Ûfšûï!JžÛI/‘ør¡g“|éÀÜV„¬N•?ÑÞÈÄâÛ@ØP-¦‚‘”ººÄðG*YDmÅ
+xÚÝX[oã6~÷¯0ºû`Í‹¨KyÈx’v:m’»],¦ó Ër,Œ.®%'ãþúžÃC*²£t§ÝbŠ ðá!ynüø‰¤søãH3®bÆ>Ó\èqZŽøøú¾ ;Æsƒ¼þ¨×ËÑìZEã˜Å ÆËMÏVÄx‰ñrýa2ÿöònyõ~êIÍ'>›z:à“Ë7?M…“Ë›ùÕêzs³ áúêrú“åï¯@ÆZÂ4!ìÌ»ws;îBð3×|þ~ªÂÉî–SMnß½í]üxwwkz—ÓËïFWË.¯~î‚+Lê—ч|¼†|7âLÅ‘?Bƒ3Çr\Ž|­˜ö•ršb´ý«3Øë5S‡j©UÄt$Ãbú²WL¡$‹.Æ¡² ©š˜ëîSÚAÜ•%S²ê>¯2’›ÃnWï[jàütܵ5µ“4ÍŠlŸ´õÞ„
+Í®e?ÜG’C¼
+²â#Æq“}n/ ÀQ4ÙO£É¡BÌKé[¢gCs&e@pn²Û5³z—UMSÐ4.Ê”É^;PSA[kè°áC2ËmÞÐÄǼ°¦“¶ÍÊ]K Ìó*oó¤Èµ>Û­,º"‡®H@lS1ÁðŒ1y»±6¬Mp 1Ž=LÇ¡I°XkªS²*2¡ñ ¿kûÛ¸ß,AÓlEq4{â‚ôƾîRiØÎh- î¥TTŸSà„!
+õ¡ÝZ”},ŠÑ¥õž¢N-°×:´`ï hAä‡aèÛ@Êä“õWM›@5ž‡®C€¦êEN·yºµ¢)£‰ÍZ9¾¬×ùÏœËlMí[Àçbñ=5šCÞf4–ñyÉ¥‚}KOþÛíŒ*çKÅ­ýSPÄg‡f?”J ÉëÈÚb]}:°%݈D™‘†#åÔ–÷õ!/ÖyuO@yýöÆ’lì0ÕnIBÀ#ÔŸÇÁqÝx¤åþ÷6‚'b5Yu¶±E¶QŠ¸Ü–E&m^Ûiõ†~m·?IM[—šk©««¹™¯öÉþHÆZïÖx³ËÒnÁPñ'Ön]¡þþ@ÈcƒÜp¯àºW:&lñæ—+¸©÷$|ŸW‡ÏçU%>áòꎄwÙq—íÿ{™—ÓXN,3yõéEËßÁI¸~È×à ¾ n
+"Y7¤ b¢´²Æ²
+™am‰§:sõ,yƒ
+ºl¥ŒÒÐ9èÒƒ¥‘ª-ŽÔUWNrÌ4mm%ý¥ÙJz+æ Zå< |.ãˆøF=ºÉäÉwXw¹öv1[ ^”&O^Pµ­ÃwJ³ØMEÇNÌ<¤ÙÉt$ªŒWR¯ŽvÔš¶êß¼RIËsЋßìi¡[ëp>§> #؃ )]Ì­…6Î6Œcå§|éè‘Öe™Të›ngùgpîþI_›tM¿ŒÍ`ÖñP9íP6ƒp69c¿Tóù«¯îÓ”˜öWVôµà›°mÎ7BQðf¡VgÄëy¸“<{öxeˆºGƧÎÒ·siøùÔ ÿIÚz€t¼.$?`~ Ã>÷È?Ã=‹ºHöyó"G,æ—$@^üoÇ=ÿäuÀûœìÓí«¤\þ—0,TbCrt?„»“¼‹¤_¼\;%ôÓñ¤+³]ĺtZ¨ˆ!Œ”šXCe¶0æÈè®gŸC³€¯3²qÊrW$9²”„Oy²ªñ ‰=Ý‘
+¢“{ž!0w,yÁ‹,<xææw.”:wá0€»°ˆNÈ wèMÝf_Ó“À[sÕ¡hȶ0'
+[8´6$æ•°ÍžæÙGžn|slÚ¬|²d.[’Xu†…P 2.è y_·mæ\ÔÖZÖžù\Ü^/ížê?‘iwñ@|€ÔÅ—¼‘IGQ4üBæu½žEóúuZ(öã¸ókžoo®í½°"•œì¬zÈéR=‘בpw¦¡@¥>Û ¼×ñîâý?¿>=£ú!SQ$‡SW<`‘ŒCf¦žEÞ=#>ý7Üuäendstream
endobj
1511 0 obj <<
/Type /Page
@@ -5932,126 +5923,140 @@ endobj
/D [1511 0 R /XYZ 85.0394 794.5015 null]
>> endobj
306 0 obj <<
-/D [1511 0 R /XYZ 85.0394 769.5949 null]
+/D [1511 0 R /XYZ 85.0394 657.388 null]
>> endobj
1514 0 obj <<
-/D [1511 0 R /XYZ 85.0394 749.1709 null]
+/D [1511 0 R /XYZ 85.0394 628.2267 null]
>> endobj
310 0 obj <<
-/D [1511 0 R /XYZ 85.0394 714.4776 null]
+/D [1511 0 R /XYZ 85.0394 594.0867 null]
>> endobj
1515 0 obj <<
-/D [1511 0 R /XYZ 85.0394 688.8412 null]
+/D [1511 0 R /XYZ 85.0394 568.6933 null]
>> endobj
314 0 obj <<
-/D [1511 0 R /XYZ 85.0394 535.7123 null]
+/D [1511 0 R /XYZ 85.0394 416.4485 null]
>> endobj
1516 0 obj <<
-/D [1511 0 R /XYZ 85.0394 507.2665 null]
+/D [1511 0 R /XYZ 85.0394 388.2457 null]
>> endobj
318 0 obj <<
-/D [1511 0 R /XYZ 85.0394 332.8138 null]
+/D [1511 0 R /XYZ 85.0394 214.8425 null]
>> endobj
1517 0 obj <<
-/D [1511 0 R /XYZ 85.0394 307.1774 null]
->> endobj
-322 0 obj <<
-/D [1511 0 R /XYZ 85.0394 163.8619 null]
->> endobj
-1518 0 obj <<
-/D [1511 0 R /XYZ 85.0394 138.0002 null]
+/D [1511 0 R /XYZ 85.0394 189.4491 null]
>> endobj
1510 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F41 1238 0 R >>
+/Font << /F38 1042 0 R /F42 1238 0 R /F22 957 0 R /F21 954 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1521 0 obj <<
-/Length 2116
+1520 0 obj <<
+/Length 2420
/Filter /FlateDecode
>>
stream
-xÚ­XmoÛHþž_aàXùP)šÑ{€ý6î5›^ëMÜ]m±­q¬‹,ù,Ù©{¸ÿ~ä#˶úìÁÄáÌpHùc1pá'A脉LQâ;+‚Ályæîaîg‚×Øf‘Ý]õ|rvþÒ‹‰“„2LæY±ãƱL²–ïá A„ko^Ü m¸Öß„ ⣸/n‡^d½O†"¶ÞÞ\gïÞÇoõìdgÒzñêr<ÝÒ´Ïr/¯~
-!¬Ë7/FW4uõ†Oz9ºF¾5yw;º~šüz6š´vum®‡FýûìÃ'w ~=s/‰ƒÁ# \G$‰,ÏüÀsßó §8»;û­Ø™Õ[{})\Gz¡ìq¦”}Î 'ô¤§ù˜ÅÐöbaM7yÑ’‰fÁ“«5º´Úæ™ZÇ­€BÍyÛ¦ÌÔGו¥ÊÀ±‘ëYïju$Ñ^Ò·Z5yU2½&‰í"¼g¸à#oûAàD¾Û±èü-$Žã~oÛ­D»+òÔ•~;‘L¢C_Žoßþ~}±z‚,W:®ÆÂ5 ©×¨r›“Ë¥*
-©mºÎÓi¡hÔTô­Wj–ÏwÌ\ðì*m‡ëöSÝËut܃2 ½´ZÌÁVÛN7³O(h ×uá†òòþHð«»²˜®@ŠŒœ(¾–ò2_×Í3ÚðÈ—›šM¬›Õ‘ðõ0†@iò%{=TÛúv¥Ê»»×4HËŒˆ<(òéÜ«jÎÒ’ˆ) *ª4SÙÙç‹Cû<áÄ2Öæý4´Áa–ú¼ªÖ ѯ¯þ|}ýüöòöýŸãËÉ«_Î!†ÏW³ZˆóM½>‡£/~úÏѪÿö{²sÒ …:†˜j6t0L™}9q£v+ºjô{è[yC9ZJ+-´ã€Sª™ªët½£aÃì}Œ…œ“HÕ,¥lÔZ̦¥õQJ™Îy©¤YÌóB±‹|¶Ðià†ÝTúnñ:<OZy9¯ÖK> é´Ò ãyœýÀc35=¯˜ØÔ<;ÝÑ—î7ê»GÖZ‡¢a§Á±>­ëùÑql È,V¶Uº'Z|?r‚0ˆÀb4ôœAÀpÙ TÁ0NȨsB¶ñš”<7gŸÆˆH"G†PSH>'x¡/tívõwBøfô~<ºí ã^õ¾ºdÙd¡ô½$Éi·HWÓÂœ˜ò.H<B¨­¾7˜&(u*àlZîˆhªª %Í"å­à”ÚðX, Ø3¢òrVl2d€ñÀ˜î5Q*Ûjw¯ÊÛC¸[íœ
-Ärì ^ÀâŠl>æÇNEâ‰Â2U7ëjקtL¡/¿'Ï,ÈʺV3´u¾®–E:UEÐ$pD,å*ÉBëü¾üRõFuäCO’øOøõ áöbs#Ø
-î‘rÑsBᇈDý çROÝÓ„F]¬ ÔTK¢ËÍrª˜êh¨®J¬¹ÏöeéÔ j­ÉeºTY%žë$‰ò*‡,à® ŽBÌo'ŽL½&ÒÂ8wMyƒ0/«GæÞ¦ ¯ ZIYBðfMTΛ)m\í
-¿Ï¯ß\•L=Hí`z¸Xb™ QÞ…m]k ºu[Ös×›&/òNúVVé2)=m,vCžÐyŽ“œç0iòÜç<‡I~ó¥Ë6,bÏÑNæiôD¥8§YJ+Óúh+ìÐU£ÚŠÀ ë1 e©ÏZ´SªæI
+xÚ¥ksÛ¸ñ»…fîfŽêD4ðé™~p¥ñ9µU[¾k&ÉÜP"e³¦HU¤¬è:ýïÝÅ.(Šbbgjàbì û$ü‹çÛ~$£A¹¶ço0_ž8ƒ{˜ûÛ‰à5#³hÔ^õzzrúN…ƒÈŽ|馋­ÐvÂP ¦É'˵…°‡@±&—on‡#é9ÖOBðÙñœ77CX'Ó¡­ëË ÀñìíÝdr­g§CàíIëÍûóÉt|CÓ.Ó=ûÛPa_½¿¥©·WÌéÝø|¸Öôîf|;ü2ýõd<môjë.…JýûäÓg€ ~=ql…Þ` ÇQ$Ë×S¶ç*e0ùÉíÉ?‚­Y½µ×–±¥òe1¥€­"Ï“Öô"ÛWRí­©†#á8½öœjC”e^¡²@R¶ÎÇŒ¤oË p5­×Wh-Y~B++æù&I+BÆ„\fE¶ŒsÂUiMØrAˆZ³b§Vé:®SF>¤„}û÷W„".YqÏŠ–„Êñmá¹ )
+¸zœWBŒÓÝ}ZôèãGv)³šøG¬mI‹È*Ò-ŒTàÛŽ 5¦†½Àb8R`ÒUœ­aGYÛ¬~È
+Â’€ÔZ‹-„oðw(wžUuÔž°}_¨–ÔÈB/Ö<ÊÙ¿Òy]z¾Y¯1,Ò¢Îw4?ÅYÏòì©„´â"é Œ#xèHp¸õºÜõH0Kèv¤"ÞËò)%ë¹NhŽïëQˆ³Ä¶^N&B;t%YöL(ýк»ºøç釬Ø|¥ñl“åI….(´o•Þ8€1q߯¯ , m
+\iAöd€"údLb^ŸGÞoˆTBX<Zæ¦(}–ÒGôh(ØV„/WuV{ÍZ>ƒ©ëêz:>C\ëbA߆RCZøRü
+$œ¥ü¥S!MŽcȆ@ž.xÛ¦HR<«"M ­Ž²îª´Cq´¤/
+Ãk¢Ø,BÝAéN®w=Ï\'ø¾Î«/IöÒŽÂ0ìOõ£†à¨E‘Òx;®\"FFAà 9¹¹þíâ-”1*i;ÊO°XBôSzŠ×†>´GÀ·Z¥ól±cäϲ{´Öí§:¾`ë’k’H«¨2² öÕÇåêsWa?$ ùñùºó.[Wõ+Ú°åËMÅ*Rˆ
+V© ŽÉR«ŠÐ÷ZÕŽ·>Û«Âá
+ßkŽä˜ ^”xQ 醶â‰}»ùóá¾æ»ò9zfARTU:G]ër ½hš÷<[„R¾TH&Ze÷ÅŸe¯[.ÐÈýA‚ß>N/4'‚ÝÜ>A0*št¯¯â`ê)}ÐiG×+¨6å’àb³œ¥Œç J†½©'^í+Ó±BÄð•‹x™&=š@PE‘òy5«ØÉÙ^ø‡íøïÃHbK­ïºH€›å–1”põå ÇT.)JÖä›IÆ›)lm
+séöD*­Œ«ÎVØ¡+GC´!ÖwyZéWMÚ.ÒúÙ$pD}õï[OøwP·—¦­jX¿¨O]|Ÿ_cªMN}>8¼uù›T…i
+ŒÐ´…"€ò¥¡fBÅÚêѨ%-%ºõ=öáý,³+7l³ê!zFÌþuG1} šJí¼Ææ¸C?¾š“A€óCÈ;
+ë ÍnmàþT£î7x=£~£ï—åÙøóGÏïNó¬ôÿʲÿ9
+nÌ* ¿ñò&ƒÐ†®@¡P7%$7?Ç‹þ?
endobj
-1520 0 obj <<
+1519 0 obj <<
/Type /Page
-/Contents 1521 0 R
-/Resources 1519 0 R
+/Contents 1520 0 R
+/Resources 1518 0 R
/MediaBox [0 0 595.2756 841.8898]
/Parent 1509 0 R
>> endobj
+1521 0 obj <<
+/D [1519 0 R /XYZ 56.6929 794.5015 null]
+>> endobj
+322 0 obj <<
+/D [1519 0 R /XYZ 56.6929 769.5949 null]
+>> endobj
1522 0 obj <<
-/D [1520 0 R /XYZ 56.6929 794.5015 null]
+/D [1519 0 R /XYZ 56.6929 751.982 null]
>> endobj
326 0 obj <<
-/D [1520 0 R /XYZ 56.6929 725.1329 null]
+/D [1519 0 R /XYZ 56.6929 634.6094 null]
>> endobj
1523 0 obj <<
-/D [1520 0 R /XYZ 56.6929 694.9784 null]
+/D [1519 0 R /XYZ 56.6929 605.969 null]
>> endobj
-1519 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F41 1238 0 R >>
+1518 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1527 0 obj <<
-/Length 2293
+1526 0 obj <<
+/Length 2237
/Filter /FlateDecode
>>
stream
-xÚ¥YmoãÈ þž_a N>¬F¯Áµ@.ët÷ruÒØw@owqåq,¬,yõâÔýõ%‡”,ÙêÞE>˜âp†Î|8þÄ$ô,[Fî$ˆ\˳…7IvWöäÆþv%XÆl…̾ÔË«ë{L"+ò²ÜôÖ
--; Åd¹þ`ܽ»}ZΞ§¦ãÙ†kMMÏ·Û·¿N…Æíünö–†ÞÎDÜÏn§k,yž'ˆ<¦ Á3ŸîXîOBñÑöì»ç© Œ>-§"4ÞG¿<==êÑåôÓò§«Ù²ÛWï–¸©/W>Ù“5¸à§+Û’QèM^áöD9“Ý•ëIËs¥l9ÙÕâêÝ‚½Q=uÌ—ž -/t‚gºbÌ™n`ùA@ÎüóÔômÛXçU¥ó³:¾¨œXê_ñnŸ)+W5nóúÞqz‹ÙSÚ–'<©—YnÓjjJûVÒ©0ÖŠ™™ª˜-M™ÖGü
-zçħßÐx·ø;1À} oàNiÕÔ¼@š'ª“åU“vúJ±TV¼§(Y¤Ù­TY;–¨ o*fl@ö‰;ƒ»yž£wv2؉|CoNÅU‘Wh˜iM#»˜EÐ'òŒ]AÂÄUüøhÛN’ªœç  §U+Ux®öŽ€*¢Ð<Mhƒ‘Hs®·Ì /kaZñKÓ©‚…Ì*}ÉÓüe¸KºÅ^•q¹…î†XÑkú¡ñï"WÝDÍÁƒÑ„vºã´c`ÐÉg™ZÓwÏðÕ·)ëÎÖ ¤‘nHâX4´àkZmyL»•»½Ê«¸nWÓî
-J#ó¢V7ôù~C¢yQÑTäT˜ÅÓmÃä\TìO6ƒ(
-‡0h‹P
-ì«ÌJòÍ%xÇf,=ÇWñª8¨A怃¹LÆuà´¨æ"áš"㺩ÊkÐyÝ×}y‘<IèºFÄc lº.oxÃÊ@í·ÌW$1W])(éËÖ~y¾cèv,Û.UrK‡Óª,ÓõZµü#ýBæÄ/ÅiíǧÙ«ØÙ— 5<t¤?q\pŠ÷Mo\ŽA¿p™Ý‚foEýz5ÄyN`…Π•ÒOó{²V凔ÊY¾£B {9ÄejrÓê:ÂÄÁe:U¤óÖŽÒêYÂ}XèksqÇ*´¡cŸµ<çwè–7TeþB?í
-ÂqgUÑRú-IFÎá©!65Dò¤6_ögQžÔjÚ¢ ”ÑËöÊ”‘§SÖ²LQɪÆ^½Ú4GŠ5`å
-Òë?IQ¡8aX¯Šîí’ðéÙ¨ªÏ^Úbõ¥aë!¦ë°4X¹ëžNÆÓ¥gá øÈÓ·Ýaÿû¡ýô ¸"2 ñ,$m.P´F¡›¥<·¼{‘¿4ý?´z{•endstream
+xÚ¥koã6ò{~…; v±RDQ*¸; Í:ÝmzI.v ´»‹B–éXXYrõpêþú›áŒdÙVÓ-
+ðp8œ9/‰‘?1R¾íÈÈ…‘gûŽðGÉæÂ=ÃÞ·‚i¬–ÈêS}3¿¸¼•jÙQà£ùªÇKÙŽRb4_~ß¼»~œOŸ&–ë;cÏžX~àŒ¯ßþ8BŒ¯ïo¦oiëíýŒ€Ûéõ$ôÆ󞦀 #ß…cBðÉÇ»¦û‡|t|çæi"ÃñOó‰Pㇻ÷€ãÝÙfw>ù4ÿîb:ïìêÛ.‰Fýzñá“3Z‚ ¾»pl)ô ÇQäŽ6ž/mß“²Åd³‹ÿu {»æè/}©l_¹á€3=wÈ™^haHÎüçÄ
+g¼ýœTBXŸõþY焲ô/×cLFÿU¼ÙfÚú½úŒöƒ83ò}·Ïq™W•Nãª,6Y¼ÐÙr1ký›Aع®‘íå­ÛW„HôOj_gµ.ó¸Nw:Û›‹C—³/6ñž€m‰7¨Wº¤u]Ð?ªË¸Ö´Šé/)òÎë´ÈãŒ0En-SÔ`M_XS¥ù3sïà½bÀ™—:¿ÿ%?Ì×i5±¤ŒØÌb—NÄx©™éŠ!Ò”i½Ç•×ë8'<ý«ñ»Ù Ñ3QBt,šš¤y¢;Zæš´Çš©²â…0EÉ$Íf¡ËªØ0º÷›Š+ xF…Ý(ÓÆU‘W¨˜ŽÓšvèž@ÜÈo
+"&¬^áâ£ã¸I
+KHó:®•.w|ÖxwÀ A¨žŒÂ¤9×kF— 1qüµéD#«JŸs|(V[|ƒðÜlt7ä(Ã3Pãß‹\w /Æ
++6[W'È͸€¸'[/›Ä:6ž'ZFñ‘æ‡2@w¿¨ÝV¶ë™£÷øŽ"šìÆ£àŽeã._w¡ %ïû¢ÖW´|¿"Ò¼¨O‚V´Ç!'q(¶Á~¢~nAbw}ЕäðE…Pƒx =;ˆ"Éôœ7RVå%Í8Ë,ØŽ¢W'ðžârÏ:5 ê¡(G¨cÇËå‘'L«á¦+6ˆ­_õz ) Ì·ÌêÝQ¾…a
+b¸xéðqö\@„¬7ÕÕPlÝϦ7òiv={w-ì!%~î„u.ÃFt¦1>Î\·2¯ˆ¸/„Q?Ïî*Åú¿ë¡X÷K3o;ôWê]ñY/‘UçKk±²°w6š
+V%©¤
+ÐMÎÀÔ'
+Ÿ›­¤ l!•{¨׿§&?ôJT;:Xý¦.60$§íX©ûsËëÕcJDܪ#ðçõëA3üPñ'µÌµ•R}Ÿ#ËåèÓ„²"Ƚ "¢ ¢=.>š‘é0°ëã%>^<Õòoÿ[~à/ýÒ—”Pº¬è\šÃÜX“#KAù
+EpŠ»4¦|žWÍv #ÔÎrkó_ €›¦ª ZÇf(NN¨‚óz;³
+û>Èu­ÀÅžþ·YœpA îID´cÜYz(p>¬2;ÉWçÍ;céi/Š>Jp1ç¹Ã…ÀöC·mj.!.)4.›ª¼™—}Ùç {' ÓA7ˆøÜ([žðm†>E‡&¤Ž³"‰¹èJAY_¶úËS‹¢³X¶Sªä‘ïtY¦Ë¥nñ{ú‡,Ì™_Šï‡Çé=±“‹”påJ¾B d¤/ø´èÚÒð‡E«ãhõYš¯†ÇžÚJÀ-tdæìÃý-)¬ó]J%-ßP)svq™Z<·z®âÑ{:T¥ÓéŽRëIÒ:*ãímÍÌË9{ƒCU&Aå:'“ ŸùæUšÓ_»ÍÖP,|8§2ˆOCÄTX«#þ„ûêŽyc χAÂ?–ÒŒžBõ… }§–¾—¾*;]¥ùÛß°ûá¤RîðC“N
endobj
-1526 0 obj <<
+1525 0 obj <<
/Type /Page
-/Contents 1527 0 R
-/Resources 1525 0 R
+/Contents 1526 0 R
+/Resources 1524 0 R
/MediaBox [0 0 595.2756 841.8898]
/Parent 1509 0 R
>> endobj
-1528 0 obj <<
-/D [1526 0 R /XYZ 85.0394 794.5015 null]
+1527 0 obj <<
+/D [1525 0 R /XYZ 85.0394 794.5015 null]
>> endobj
330 0 obj <<
-/D [1526 0 R /XYZ 85.0394 519.9229 null]
+/D [1525 0 R /XYZ 85.0394 449.289 null]
>> endobj
-1529 0 obj <<
-/D [1526 0 R /XYZ 85.0394 488.8874 null]
+1528 0 obj <<
+/D [1525 0 R /XYZ 85.0394 418.7238 null]
>> endobj
334 0 obj <<
-/D [1526 0 R /XYZ 85.0394 326.6298 null]
+/D [1525 0 R /XYZ 85.0394 258.4979 null]
>> endobj
-1530 0 obj <<
-/D [1526 0 R /XYZ 85.0394 298.4037 null]
+1529 0 obj <<
+/D [1525 0 R /XYZ 85.0394 230.7421 null]
>> endobj
-1525 0 obj <<
-/Font << /F37 1042 0 R /F41 1238 0 R /F22 977 0 R /F21 954 0 R /F11 1459 0 R >>
+1524 0 obj <<
+/Font << /F38 1042 0 R /F42 1238 0 R /F22 957 0 R /F21 954 0 R /F11 1459 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1533 0 obj <<
-/Length 2424
+/Length 2604
/Filter /FlateDecode
>>
stream
-xÚ¥Y[Sä¶~çWø!UÇSÅ(ºY¶yc¯!•°`“‡lÌXÎzìٱ̈́üúÓ­–=cÈ©Z¨B-©ÕjõåSˈ€Ã¯"ÃL*Ó N5‹¸ˆ‚Õæ„÷0÷ñDxžeÏ´s½¹=ùñƒŠƒ”¥Fšàv=’•0ž$"¸Íÿ5’-@/®~3‹¥ŒxxóùêêÓõBÅá- \\RûæâòQéb)„à*|ûÓùÕíûkÕ^Ôù»ß0ž_¾}ï¼»¼!âÃûóE¬ÃÛÏ×ïoÞþ|òþv8Êø¸ Ïñíä?yé>áL¥Iì¡Ã™HSlNt¤X¤•êGÊ“›“ÿG³néœùž¥N˜ ãÿÙÌ–¦‘žß–ËD±„ó²,ZÇA–'ûÇ¢Þ5F2Gñà])!XEÝ ³*&ˆ•dIœçÞßÑÂŽ3e‘ÑaMCHpÇq¾X^»¿àe#‹–áÇ©‡`Ë80IÂb°*|+¤Bkå˜Æ´;ýÁ*nàÇ‹
-ÞÕpÆ`tÌ^ðr,ÙÓðQCìWÄ<f&–‘;ÃU™­Šê~±T2 ÛKÄO7¿þg×P÷
-ƒ‰¢¢6óüv¡xøwK½/œËÒ3¶…—±ÉªÊîz×=Qggóne'
-4vÕ³ˆÂ¢õ|Y¾D‹b€ ®ƒ<.dfU›ÝÃRiâ°^SÛ5î\Hfµp,FÔÇ ûÀ."ôR§ûvÿµD=-$ëÎ/„Û“zmMmîÛ;»ÆãÕ;¯Ðª®Ð4÷ý@«£sš|ÚÚêææX“ù°õE[’Ùç!›F—6)“IšãXÿ¾ôÁDRùs€€ïKîãŒäq,)¡™ÒFŽ×HÅbÄ•pÁ„œ#à>ö€Ûm·õ®¥Ž³ÛlYÜ'X^&©rb=3™±Yweù„¤øpÒšÈÊ’Nˆ›$´UKœà}‹N®lîeÔ»MC2\@Âר*ÛX¢\ì ä<'_”UùìÌaÉAHY×_»mÃæÒãÂ[f_8ÝÊʦ&ªk¬¿£kŽv³ µž{“}õìß:»+úéýƒõFß-’°«*Ê:è×~<«¦»¬²mvWziÍSÓÚÍAù˜¥îNù5¤Œ”
-­¹Ïœb9 ø#Ÿb/é=ã)5ÞmÚ Ô•óPçðCtU“\0ßRq^xKÓJETn· ɳg­õ:8°B‚숻¬ýfv‡Ó¹¼'G›4\•„Ó²)rKÍÙÐY;S
-µW
-lÝì페A ²îŒèyÏÉ‘ç0ÀW+»õyæ€y³ƒíÖn;èÑÈ<å;:ôÏMŸN“ð<Jx” XxPn™~ÚÒÔ(UŒœìÊPœ! RLÃ0hŸmQWYI3_¤ÔUqi‹1!ÈÑéÀ$§QÂ(âÁøªt¾*JµA5T±5,Ûm³˜V0ŠÔ3æõ¬DŽ€›)f<âzâwWÊpo]hÅj¡cQ—ù(žLíq^?WWh…m”ŽÔ-àâ®­Ä*Qª#m1â8üä6uû£_À¨ ©çðF½S€JiÂ;ÅYt¬>šþ®¨²Ýñ•Ù-?œYDÌY'òa¾€¥<è›(üZÕûŠH 㥶M»ƒ ĬÄB>%X¸ëZ!Säë­(ô‰%¤$ªæ7x €ÇZ¿÷ªÞlKÛZ¦hŠMQ¸u&ƒÅÈ3Ù‡ðŒöÕ&ü5«œfÛmY€+½‰a„‚q0±‘}ÜSµ&ên‰è*ðRÓz<îÄá`’ Nä!øaß¾-ýä Ñ†òמz“÷ÒÝ}<s,ân»Ð:u—'¶– ó»ÅšÚ{€a 3ƒõ…gÝf»¶XueÖºÂLèå¸"Ó •RCA6ÑTA¸y4„ÜN,5„jHùÇÀÌ…7Å»Á¼@;ó6¯Ô£rBe÷Xؽï­=ê>ØpÉ=n‰Gjq,RVmGv>^ûBtê×Z;­¹UÄ™N ßà ÌŒ†B5K“»{ÿj»=—þåxAÿ #ßT.Zàî³¢/ªÎ™dâÙ
-~È:ûw†€}JÑbâ”%Iœ:µ~øt}ñ?>,c
-­€EâØ¡îÕíµ§ðá„Ãkˆa =ÃqvöNm÷xá€øŸƒ™
-…ÈñÝÿÄ8|pÔ1SXRÍ–:ðÄRGõJ¹†~¦¹
+xÚ¥Y[oÛÊ~÷¯ÐCR…µÙ ¹$¶€“8‰r×VÎyH‚‚)› E*"i÷×wfgHQíS 6à½ÍîÎå›ZM$üªI`…u< c_R“ÅêDNîaîý‰â5³nÑl¸êõüäÕ;Mb[m'óå€W$d©É<ýâùBi1Ò»¼þÍNg:ÞíçëëO7Szs¸¼¢öõåÕ[¢âéL)%÷æÃùõüâ†F}fuþö·)L{çWo.xÃÛ«["Þ]œOCß›¾¹¸~›ÿrr1ïŸ2|.0Çwü8ùòMNRxõ/'R˜8
+&[èH¡âXOV'~`DàÓ'·'ÿêfÝÖQñ))´±zD~¾ÈOI˜UÆN Öhãøe:³Rzëï‹Z©×٢ɫ’ƾáóà ”ˆƒ@»õ×(Kœý5¿þxþæ‚è~îÃÅÍÅ?q÷«wzx…™ŠHËp23R€ Çrþ× Û0ò¶yQ•uÕQEµ%²yȈHËn:ûWUQw$oZ,²º>Øõáö×î˜æ¡jê¸K#‘•ÍæÉ©¬ÀÄ÷UrÞm&ÉGˆŠ“¡ƒHóÍTÁI‹¦ “Ni¼¬"ó„ˆO물½ýÈóNÐòäugÏ,/\ÑôäŸJGýhùÌ”FfÕÖ¼ n¹ðTõœ1ÛÐ-­ú¿¬¼1ŽÜšA>‘‘´öy^´O/&»û¬v D1lŽwF×ka9±Z˜PÙ‰£¤öf~Øf`}åÜC‰ 3•nÅ9²önÜ_4jå]ö´öÞÊ
+N‘¡'VÂÚØÉjò¤+ß7nÑv¯ßIÅ ¼º\™ÉÛ
+Þ8<³c<rvÏ…ì VÁù|<¶äÚ×E²ÈË{0fÍ^€ã_§h1Ôu¶„D^R›ðúlj¤÷GC½¯Rê"Û_Ø8·Ej•”e¶éhÜ÷DM–¶‹ìàà¹-,V—7¼.Igcô8Õ—”Mr¶jC¯ZRÛÖî]H&%µð,AÔk·ÎS”Ǻ,Nwíö!iˆzšjéU-O•;“zÎ[ M¹½Ë–ø¼jÃZT%Šæ¾{Üjï¤Ø™ /P|K=ê¹#Il
+ÐSZ—oc¡£8š mýçÜ ügY~ι÷=RÊ¥j5Q¾0¾ÕÃ0øœava$(%†ñÇ.Œ·ëuµadtb;áǯ!¸d9¶¼X†ï±Y¶ /ÌÃq¯i"qè Ø&áeÙÐJP~†:.‚"j³ª‰‡³Gâ;U&«Œ(g:È9M‰aÍ›’2ÙmÙ1)ªê{»®Å˜w\6‡A€ƒæÝwÒœ–Õû±`•|çå?Úl“wÓÛ‡¬ìBIäµeINýŠÇ“òð”E²Nî
+æV?Õ —þò‘€OšyWÇhmPšÛÄ],¥~2F>@Ö ŒÇÔ°ÚÀ³k¨J§' Îá‡(Ž²ñ­1žKåݼ{CÓÆXCTš­/OšŒï@‘’#ž²ä3ìè §c
+"EÛØ[9˜Ó¬ÎÓŒêÞ²¡³t¢
+„Dz€¸
+H»ƒ}¸H©½mFõéG8¹×^U¤sŽÐ³‡n}|[å+¡Un›CØ?¾¬ÆÇámÑ‹ÂÐûäuç£Z@¦5]ÏÁŒ²N€Ši‚uâ:¼>Jþ./“Í­+’»¬pêpbQ¡a™}Ä…1ßÞ÷²Ú–DVXæÚÔÍl;.ÏwKHÁ§„
+w®‚Ñ0œm^/àX€GâÕø€: ÖdŸ½¨Vë"k2‚¦àšoíD›GpÑåë[ïפt\´—¬×EªdÃÙb/b«;³§\MsQD[‚–ê†á¸:»‡i8‘;Û‡s»¶àÉþF+rßì”EÞqwáxShuÓn0}öc;±ÍÑÐݱ›/©½F3³˜^ðÒu²iòE[$¡ô„Žß~»! R15„ØHbM „›G‘!AÀíØRC †—#Š;„»^¼@;ñ¾„tƒlLeó˜g[î-û:µÇ[RÛ’võ¯ËQMKrÞßûLÔU×Yv˜q›@
+?Š40ÊhLfirsÏ5ÛÍàL¿~6ÜЕ£Cà;ä‹¸í¾º¸ !´8ªÅ}Â>ïÝçèKP¿êOnqÌ o!ûÔ°|v/ c|b(Œ•þî«›â„ýDJ),Üþ#…$ê|®w¡r3 n0ð¥õ3É{  6ðù³Ë‚N{@åQ’DQs%Ô¬1³Dßu® .ãÅvÀ#žö½Q®.»pfÆT[ù÷l‰kèªö~õ:[äèHÙËŽ k̇ö<jÇûõ'!(ù"K7Z•Üy]öG‚€}Ê!ò@!Ãïtùtsù¾ûÄÇÛÀýhuòPÕ࣡†¥`6Îò%}ˆÅng8KÔYz©q£Þá3æ>Æøε!ÎòrF¢Á™Ä
+ÔÒE¹°‘°:ñ¬VŠÔ}6Þå’9PCÏÁ}.ä¹™’Z2!œœ†àT?ìƒYŒÉêØF†ß“v_ó0¢.¥,TÔ}¦rv¶„Ÿ3ƒ«ÚHø +òÅMÒúoJê´¼i ´ÑÂB=‚z !º¢óŠª‡0ãÊå¤üÕ@ÿOAãwW³Iu$}ý‚N»¦6áÉ=÷Áœ'J>é>E2PÐ竱­˜ð@t,î'Çb§ÎÁKžˆäï©ãj½ÿ´Î¬¤ïÏ«õÁÆø"òŽuïCF­bsz‹`
+‘êvw—A㧻 Šp´3?¸-–¨ïR p?d(Áe=”ìKlYá'ü^Ûª-ø ‚Íê cÊs¥/Àb̘t…úFo;Tbä³½ÃáæˆÅÔ~ÈÒy™l ÂÀtÞ&FØaYH½€£RìÿFâN¤Ð*×ÓbO•‡f¡„|éÜñWù>°Š€ê^Ïo˜Â*â¹oÿP¨áŸF’ ÙƒÀOÿ“k÷åÐÁìh4kª³Ó]ÊÕ
+þÑÍ»ÿ†_ýi§‡endstream
endobj
1532 0 obj <<
/Type /Page
@@ -6061,7 +6066,7 @@ endobj
/Parent 1509 0 R
/Annots [ 1536 0 R ]
>> endobj
-1524 0 obj <<
+1530 0 obj <<
/Type /XObject
/Subtype /Form
/FormType 1
@@ -6084,7 +6089,7 @@ endobj
1536 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [349.4919 431.1147 408.4801 441.8991]
+/Rect [349.4919 352.7828 408.4801 363.5672]
/Subtype /Link
/A << /S /GoTo /D (ipv6addresses) >>
>> endobj
@@ -6092,41 +6097,34 @@ endobj
/D [1532 0 R /XYZ 56.6929 794.5015 null]
>> endobj
338 0 obj <<
-/D [1532 0 R /XYZ 56.6929 640.7425 null]
+/D [1532 0 R /XYZ 56.6929 566.089 null]
>> endobj
1535 0 obj <<
-/D [1532 0 R /XYZ 56.6929 609.2714 null]
+/D [1532 0 R /XYZ 56.6929 533.6299 null]
>> endobj
342 0 obj <<
-/D [1532 0 R /XYZ 56.6929 416.9256 null]
+/D [1532 0 R /XYZ 56.6929 337.0165 null]
>> endobj
1537 0 obj <<
-/D [1532 0 R /XYZ 56.6929 388.3459 null]
+/D [1532 0 R /XYZ 56.6929 307.4488 null]
>> endobj
346 0 obj <<
-/D [1532 0 R /XYZ 56.6929 261.2322 null]
+/D [1532 0 R /XYZ 56.6929 176.7401 null]
>> endobj
1538 0 obj <<
-/D [1532 0 R /XYZ 56.6929 232.6525 null]
+/D [1532 0 R /XYZ 56.6929 147.1724 null]
>> endobj
1531 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F60 1366 0 R /F21 954 0 R /F39 1178 0 R /F41 1238 0 R >>
-/XObject << /Im3 1524 0 R >>
+/Font << /F38 1042 0 R /F42 1238 0 R /F22 957 0 R /F61 1366 0 R /F21 954 0 R /F40 1178 0 R >>
+/XObject << /Im3 1530 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1542 0 obj <<
-/Length 1913
+/Length 316
/Filter /FlateDecode
>>
stream
-xÚX_Û8ï§È£h\KòßÇöfoÑÅ]±èÎ>]ïA±•‰P[ÊFöäæÛ)JNœqºE€˜¦(Š"©)³M?¶©‹4M¾©š<-2VlÚá]¶y†±_ß± “"-r!àeet[ˆ:-j^m¶×J>=½ûðOÎ6<KË’›§ý¼VYÕi#òfóÔý'ùÇAGuzØò"KŠ‡ÿ>ýFÓò´ª+†Ó2X¢H«&«ý„§ƒ"áOŸ¿<ÕÐã_úù0žþã«r¶åQ+ËS‘—<h-EZ•™Q¤ìa˲,»è¿¯. ïNòôtóM“6%/ƒj^§eÕ2ø¡É’“ìô¨­‘}ÿ
- 5e"Ç^·™Ž8ù¢ª’R†x½6ßUGôY—Äpã´#êôÀêd6&’y^~<È1LQ¦s×sÚéä4­[&_þ  MꤕÃÍávK›¢à~;£¥ýKzô¶•=‘­lÚ<Ó‹‘Cð£S'´ªÊ“tÖWA@Æ ¾Ï¿¿”[«[Ó*¤ªD›Ñ[g»©ÅÝã¨QglípìÕÿôøJ lid<(bÍî˜Ð½Ä;’ÆV9÷þa 霸©=ÐDéHfoûÞžýý1Ö¤6.ˆšnÍ+_>þûØ/¯£_­v¸Üσá*qz˜úQe'Gzk¿OGµ{âWr¢æ‰ä(Ï꺰C§\
-veÒÖNϬ—ê¼g¸rÞÊ.ÎèŒÈ¢h¡Á¾¨îý<æBh%ÒËÞ:z³á˜èáhÓ»>HÅôÑhÇ L8[Ú,²j¼œ—D>Õ/…T¿—T„ ¬ñØ€0š&îm´Ù­4DÈÞY¢Bž¼è.ÈÜ&ò0§5¤RP¦†³à÷öÆ'çSʯ†í°ÓF^b ®Æû+ìY‰Óò¸ó†_Ž;oDHàJz+ÞI©!úê`Dñ:™Œ¡£ Q’â™ÞR-ÅãT!pº
-M&PÄqíèÙi7jÓŽ4¾§YyŸ"A¦͠ì‚d,"û©ì±‰kkÒ;¥)ÏR^Š:”&JÓ×9*—“²,Jן©IW؃È!6Š‚O
-q¿–D"mX• ‘¹ÈjmËúÿ@CH®2#¶¦È²&RØš8"u£
-:åô³¡&Ä«»Û†ý5é˜âB€û}Ye¡ødÉ °]B楖x¬†Í@”üizT(þ¶Úxe訳vTn3o-òÁa^¨ª1ü8Háã=ô6³¶µ{Ó‘¡š»hW”P·Šj‰v¢æwЮ„Z[Š´»ƒhM 5ƒ© º¡s?‡+ì
-ïp,'èñ+)jä‘jåQúk ©ï¯‘ÙYºÝÕ¡Eâ¦Á§âÛð´â·I-§Ñ;ÀÍÍ$b®»Ö¬Ý‰ÜQµ㩺›{JýÐà4;,ÿ‰f`¨º ‡W$‚7€Úù«1[Ë/¥nÆÏX «Eš Q S£»»·ž;šWïP{“øÄDN)ój=u”ö¬ÊùßC;»òÕ]Û Ñ_;Œ`ÝÄF
-q…7ÉGb†N0bèKNôJ… $ȳÈBÏ"g¥O Øêåýµ G’^—=Ys{}ñJE½Ó6l`‘“TÈ‹«Ã}%­JüŠÆ‹ŸêIÙmS:_Óß Р*çóýÃì(š´ªŠúºWy÷ËÓü-1~!EŠß×¾6F‘íE†>5.NF¸áb¢¸]mþpùv¹ÿ`Vjendstream
+xÚ¥’ASÂ0…ïù9¶‡®›l¶MŽŠÂ¡V\ƒ¨:èèŒþ|…RON'Óv÷íÎûÞDI ’–É™9ŒŠåª(ŸBïZ¨£&9‰’®ªçÅÕ¬tàRJÿØÙe­UÒ¯Qÿ&¯|1‰ÍˆN1ÊóX)åe¿4­A9m>†Eg&ò³I*A…æ”>ŽŽªyÚ§³ªºÄ”E¾)ŒÊæÝ•Ç¥.^ú±(|‹ÒÅ ‹÷¯b±D¹Ôc@βü?Ê9-ka˜€ Ñ©²Sq×.ìt£—âc²ÀVgò3º“!‚&ܱƒ”4|Þ½½Ãæó¡~Ùn`µ«C)bt¬þ¢#†½¥ ^ÂQà˜õÿÉÏ·Âd@ÖêJ‡JÁj—L푈:o#úmý I†endstream
endobj
1541 0 obj <<
/Type /Page
@@ -6138,4107 +6136,4333 @@ endobj
1543 0 obj <<
/D [1541 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-350 0 obj <<
-/D [1541 0 R /XYZ 85.0394 769.5949 null]
+1540 0 obj <<
+/Font << /F38 1042 0 R /F42 1238 0 R /F22 957 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+1546 0 obj <<
+/Length 69
+/Filter /FlateDecode
+>>
+stream
+xÚ3T0
+endobj
+1545 0 obj <<
+/Type /Page
+/Contents 1546 0 R
+/Resources 1544 0 R
+/MediaBox [0 0 595.2756 841.8898]
+/Parent 1548 0 R
+>> endobj
+1547 0 obj <<
+/D [1545 0 R /XYZ 56.6929 794.5015 null]
>> endobj
1544 0 obj <<
-/D [1541 0 R /XYZ 85.0394 576.7004 null]
+/ProcSet [ /PDF ]
+>> endobj
+1551 0 obj <<
+/Length 1914
+/Filter /FlateDecode
+>>
+stream
+xÚXQÛ8~ï¯È£h\K²-û±½Ù[tqW,º³O×{Ple"Ô¶²‘=¹ù÷GŠ’gœn ¦)Š¢Hê#e¶ÉàÇ6U‘f¢Î7²ÎÓ"cŦéße›gûõ 2y!Ò"^VF·…¨Ò¢âr³½Vòéé݇r¶áYZ–¼Ø<íçµJY¥µÈëÍSûŸäuõéaË‹,)þûôMËSYI†Ó2X¢HeU~ÂÓA“ð§Ï_‰ªéñ/ó|Ïÿ‰ñU;Û½€ò¨•å©ÈK´–"•eFf){ز,Ë.úï« Ã»“:½Ý|S§uÉË šWi)kA?ÔYrR­T×½ÂBu™¨ã±3B¦#ÎA½h¤d²Óz ^g†ïº%úlÆ+b¸qÚuz`U2›GÉ</?Ô¦è¡u×sšéä ­[&_þ  Múd´ÃÍávKë¢à~;£¥ý+zt¶Q‘jfx¦—AõÁNŸÐ*™'é¬OB@Æ ¾Ï¿¿”[«Û¡ÑHÉÄ £·Î¶Sƒ»ÇÑAŸi°±ý±Óÿ3ã+ €°¥‘ñ ‰5»cB÷ïHíÜû‡-¤sâ¦æ@•#™½í:{ö{@öÇ`XsPfpAth×¼òøåã¿ýò*úÕúg‹‹qÁý<–‰3ýÔjÐvr4¡³öût¤Q»'x%'jžHŽò¬¶ ;tÚ¥`WÆ!míô| ñÞºq©Î{‰+ç­ì⌎À˜ü@-ÔÛݾŸÇ\­¢Qz9Ð[Ko6Ó­sfש˜>íèõΖY5^ÎKH"ŸêƒBªßK*ÂV{lÀM÷6ÚŒìF D¨ÎY¢Bž¼˜6ÈÜ&ò0§ ¤RP¦†³àwöÆ'çSʯ†m¿3ƒº(Ä@]wWس§åqç5¿w^‹2ÀUôþV¼UÒ諃Å«d:Ê )‰@ žyà ÕR<NÓØ^? ˆnšÄ‚¼qË 1¿!çÓ39Kþ|ü}»SNû=ÔѼÑ6¶ƒ LDCêäçùµ«üüån‘s­§ÐdE7Žž­q£š‘Æ÷4«§1ïS$ÈÔ t « ‹È~êB{lEâÚšôNiʳ”—¢
+¥‰‡ÒôuŽÊå¤,‹Ò#ÅõgjÄö rˆ&‚à€qéR¹q)p
+[G¤ òcT€öž¨Ý4Þ‘ÙOã4÷({ðàã×ôÚ“ÎÒ__=Ã7jH)·âÍ6[ÅÂá˜Ç‘…±f­žÆ:­*Y5¡Ûùòù@ÚèÜ øƹ+@
+endobj
+1550 0 obj <<
+/Type /Page
+/Contents 1551 0 R
+/Resources 1549 0 R
+/MediaBox [0 0 595.2756 841.8898]
+/Parent 1548 0 R
+>> endobj
+1552 0 obj <<
+/D [1550 0 R /XYZ 85.0394 794.5015 null]
+>> endobj
+350 0 obj <<
+/D [1550 0 R /XYZ 85.0394 769.5949 null]
+>> endobj
+1553 0 obj <<
+/D [1550 0 R /XYZ 85.0394 576.7004 null]
>> endobj
354 0 obj <<
-/D [1541 0 R /XYZ 85.0394 576.7004 null]
+/D [1550 0 R /XYZ 85.0394 576.7004 null]
>> endobj
-1545 0 obj <<
-/D [1541 0 R /XYZ 85.0394 544.8207 null]
+1554 0 obj <<
+/D [1550 0 R /XYZ 85.0394 544.8207 null]
>> endobj
358 0 obj <<
-/D [1541 0 R /XYZ 85.0394 403.9445 null]
+/D [1550 0 R /XYZ 85.0394 403.9445 null]
>> endobj
-1546 0 obj <<
-/D [1541 0 R /XYZ 85.0394 368.2811 null]
+1555 0 obj <<
+/D [1550 0 R /XYZ 85.0394 368.2811 null]
>> endobj
-1540 0 obj <<
-/Font << /F21 954 0 R /F22 977 0 R /F41 1238 0 R >>
+1549 0 obj <<
+/Font << /F21 954 0 R /F22 957 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1549 0 obj <<
+1558 0 obj <<
/Length 69
/Filter /FlateDecode
>>
stream
xÚ3T0
endobj
-1548 0 obj <<
+1557 0 obj <<
/Type /Page
-/Contents 1549 0 R
-/Resources 1547 0 R
+/Contents 1558 0 R
+/Resources 1556 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1551 0 R
+/Parent 1548 0 R
>> endobj
-1550 0 obj <<
-/D [1548 0 R /XYZ 56.6929 794.5015 null]
+1559 0 obj <<
+/D [1557 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-1547 0 obj <<
+1556 0 obj <<
/ProcSet [ /PDF ]
>> endobj
-1554 0 obj <<
+1562 0 obj <<
/Length 3198
/Filter /FlateDecode
>>
stream
-xÚÍË’ã¶ñ>_¡K*šªŒ7ÍiýØd}p{o¶«Â‘8#ÖJ¤,R;ž|}ºÑ
-ŸiÇð€ÏͶz¬Ïpª ¹!åTE€O ³êÀí(NoÇjÂxUßkqä9êE.îF¿šØœY¨÷Úm†]Ì¥ÑÖô¡3Τâ*ÐÌ­ƒŽ‘¯f|À8£<e\€Ú¢™'° )Ä
-=XdJdßPÞÙUÕ‰…š‚I zcèåöiBG{ü)ÍGŠvŒéù©šï3bHô!Õ?V/X#
-q@ÏÉÉ
-»[ƒbä]Ža «”ç±|4šÄ­¸0^áZ×ÆJ}Èõû^¸áràj/+ì´næ«Ý¢Â‡bÚ†=ßLdNŸAo4V”3‘SY’Q@÷Å Ô bœQf¢»‡Ê´pû‰“<r[Uœ+üx[-ÈF!âuQç¸RÔ·¬Á5p!‹k rac´ </ÚuY7'‘LyVx[ìa_ËÆÙe.šIHÌ•çöƒ¸e÷L†x&µþ¶» Æa—»~K[•ÚLŸ—u8`€áç:ìíÂ`Ø7†‘¸1©ãღ#h¾ýá'G2ÞÐØ#ÆCìT¿—ëYnË“¶'‘Rg JBº+–Œñ…õU׳ýzñ
-ÖgM± q^Pב"Ü*ïJ¬}9ÊôÅ9u•½Ma®¨«„¬ÖbP„sÉ dKFè±2dw£CF:ñPïBFã!¤C‘Ÿ·(9˜p@Ê@èë‹òˆq6F™‰xT¨âTD_ZÈœW¡¸8öõëýGz<i=Ô°…¼¦BNƒñø¸ˆ=º†s/ÞÎß0^pw$Vóz]®®;¼¿‡ä‚6žq)^i·¥‘ºé«' Ìaüs¹Ú…ÞðøÉþð…`¤1ô¦«6å¶ì ÞÆÚ×åüÜ/Rü‹ý‘êb:ÅÅ#¡.³©k @;“‚®*kÌÌkå7V°
-*3ëÛk
+xÚÍË’ã¶ñ>_¡K*šªŒ7ÍiýØd}p{o¶«Â‘8#ÖJ¤,R;ž|}ºÑ
+^¨4²ºûéîŸÿãW‰¢b^pužúŽ®ØM_¢š%žfÊÁºx燈v œð%SJ™‰æšIÍ‹°|å|u,#!sVù=àI2ïœË3;0ÎÆ(3$B uÀ‰h93@q€E3øˆº¢¸'ðÐC•St±ÉØj!™sÚůËÅb[uݱ(”ÕL ºÜJ áA([0aþi¾<!ÑÌjwKÆ+Djy‰ ? 2XüéjIPRÏ}wG+´¨ÐtôøøðB †vŸœÚhÅ «\r{Qq¦àX!œ8J%À·ÃŽÅg€0 9ßdl<¯³G´|ÅA¼„‰[L5½bâÊÁŠ«Kº-4ä©…V{àW›yÂ8£Ì©a¬‡dfµ[À¢K 3ÞŽÈ„ñ‘N2©
+{Häí¶–Y@ªùîj
+-\Š_J@…eÏûuåãd~# ø.
+Hy‰¨Uc‹\`e*Y;í Þ7hfå*óUÌ8ëÏ;xà ”èÚÞŠçßEž w¨µzÌsÖµƒëðL;s”=—Í⫬ƒWŽi}n‰¥÷ñ<¸u­™†šâõn=aœQf–™CyÇ´,„îvÛ_MQØ=Ø#ïr s`X¥<ïŒå+ Ñè$nÅõ€ñ
+׸6VêC®ÏØ?ð —/P{Ya§u3_í>Ó6ìùf"»p
+ü z£±¢œˆô˜ÊzŒú¸/n ãlŒ2Ý=T¦…ÛOœä‘ÛØ‚¨â\áÇÛjù@6
+¯‹:Ç•¢¾e¥® Y\ d £MàyѮ˺9‰dʳÂÛbûêX–0ÎÆ(sÑLBÊ`Ž¨<·Ä-ã¸g2Ä3©íô·Ý½
+sE]%|`µƒ"œKn [2B•!»2šÐ‰‡z2!¥Šü¼­@ÉÁ„RB__”GŒ³1ÊLÄs B…§"úÒBæ¼
+Åű¯_ï?ÒãI롆-ä5rŒÇÇEìÑ5œsx ôvþn„ñ‚»; ±š×ëruÝáý=$ç´ñŒK ôJ»-ÔM_=a`ãŸËÕ.äøð†ÇOö‡/#¡7]µ)·eOð6îÐ(¸.çç~”â_ìÏЈTÓ). u™M]Ú™t…TYcf^+¸±r€
+¦„° ¶Ž9©^Ÿu gc”™¤ÙA¹ÈÁ5`—ýÔ ).6-½^°‡‘¦Ý,!IÇÝÿE„JŸœ³JÍk 4pêéâ†éÆž7ˆxCƒ¡¼dc¿Ü ´Òh{flàÙµKž=¼Ëyv$Ó £ä\¼]<¸·oa*;C’µpb_…£ù»y»Á(„T•é6…p¤yóAÅ[!Ú`xÛØ[–Ÿ+ì¹i¹~¨ŸvuÿB/pã”@«zKÝ0#ÿóD1íèi½ë"º‡*w#fQw„â¦<ÄM-ES»ÙPÄÝlëï)U4&
+½ßÒ—ätt< ¯6tk~&{½h {®©i¡($ÿ)„dÀ‚Û$Ï뺧;^(oΧzzWG¨—™ÍÓê…FH¶óv nnAì…k5B †‚lAú¡êRà9‰CÅÜ´£AÈ0p£! Ãb54ÚìÖÕ¶žÓp½
+…Yã?¨Ìùø.>ÖµMKm×—Í‚®Î-hd C2äœêÍ
+²>Ÿ2˜ÄáÊG9ü)?³ÁÍ göŽß€û¡íS9œ·
+^ˆFÖm8˜Àê$ØiGã¥ÂçÑRUT¬ÌÒT‡ÛÛ«çò%ÞG£øpp÷l(Ыš2]glªá[KíCºˆ6Ž糡Q–ñÊÄåÜž)
+È ôµÝ' XâÌi€††éìÕ‰PB8aÌ' ÅóÉ1ygÓ èéϻ\ú.,Þ /†S}šº+<17ct@x™QLLã•Ã/`ô`({¸sX g2[¥“\Ë›±9 ¼Ì¦Ò>ÿ2.cÝp­D©÷+÷·´`RZ‡ÖÈ´ÊÿEa–þ[€ç×øW…ü)?‡¬]‚žE ä@ùÒÿö¨Òtÿ)*OÓendstream
endobj
-1553 0 obj <<
+1561 0 obj <<
/Type /Page
-/Contents 1554 0 R
-/Resources 1552 0 R
+/Contents 1562 0 R
+/Resources 1560 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1551 0 R
-/Annots [ 1560 0 R ]
+/Parent 1548 0 R
+/Annots [ 1568 0 R ]
>> endobj
-1560 0 obj <<
+1568 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
/Rect [356.2946 363.7923 412.5133 376.6291]
/Subtype /Link
/A << /S /GoTo /D (address_match_lists) >>
>> endobj
-1555 0 obj <<
-/D [1553 0 R /XYZ 85.0394 794.5015 null]
+1563 0 obj <<
+/D [1561 0 R /XYZ 85.0394 794.5015 null]
>> endobj
362 0 obj <<
-/D [1553 0 R /XYZ 85.0394 769.5949 null]
+/D [1561 0 R /XYZ 85.0394 769.5949 null]
>> endobj
-1556 0 obj <<
-/D [1553 0 R /XYZ 85.0394 576.7004 null]
+1564 0 obj <<
+/D [1561 0 R /XYZ 85.0394 576.7004 null]
>> endobj
366 0 obj <<
-/D [1553 0 R /XYZ 85.0394 479.565 null]
+/D [1561 0 R /XYZ 85.0394 479.565 null]
>> endobj
-1557 0 obj <<
-/D [1553 0 R /XYZ 85.0394 441.8891 null]
+1565 0 obj <<
+/D [1561 0 R /XYZ 85.0394 441.8891 null]
>> endobj
-1558 0 obj <<
-/D [1553 0 R /XYZ 85.0394 424.9629 null]
+1566 0 obj <<
+/D [1561 0 R /XYZ 85.0394 424.9629 null]
>> endobj
-1559 0 obj <<
-/D [1553 0 R /XYZ 85.0394 413.0077 null]
+1567 0 obj <<
+/D [1561 0 R /XYZ 85.0394 413.0077 null]
>> endobj
-1552 0 obj <<
-/Font << /F21 954 0 R /F22 977 0 R /F41 1238 0 R >>
+1560 0 obj <<
+/Font << /F21 954 0 R /F22 957 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1564 0 obj <<
-/Length 4323
+1572 0 obj <<
+/Length 4352
/Filter /FlateDecode
>>
stream
-xÚÍ;Ùrã8’ïõ~[¹£„Â}ìñÐÓëš©Ù™êÙnoìÃôD,-Ñ6£t¸Eª\ž¯ßL$@‘$¹×šˆ GA
-4íÕ4fµP¿dþÅ1µb…dƃ~?¥WlÌ«Ïè•~ÚÅôÊâq½2BïiSß7ß^§Y”âQ³(&«º{^o¾PgûTÏš_8—‘«`4r•ŠÌ{¨+„òÌkõÊ!”Ìã>/F¡â)8A6zD£j>/i3©€qÁVÒ6P\ÁÂÞ¯‹5(‹çH
- j‹H
-¢L»¨ÚǤ¾0|°v,¢Q²?$ÉÖHË@Ò
-Ññi©#³ßž6ˆ¿Z’``ã.uìDqòg°·{¬:j¡?“ûRcièyn‹ ¿›=¦iÕìË´äÉÔ]KgrOJjIoÕê…ÝãÎÆÐŽ¿Í5Øydôo
-Rˆ'ÍU¶rÂ(eÁø›p9ÊôÏF¡Û&uL›²ºIìO»ˆq¶1ÀäOAwä¶ëä¶c÷²™­ëUKýÉ¡!R‚)°à#iªWóduùÀm¨²%P'DhÇœ—’ œÄy=Èü‹£$!~ îtnÍ +h}:!„#t0)zwëÕtU?T]óyÓò‰’Skh´YuõCLOÀ
-çÄÉI渗oçã q:YàdL¯FU“§EA^?—ö œ¡û<]Ÿ~Ãã \€œæ,íU 0 Ô½Ø^{ˆgöª@[íËKgì›6*I-äap‰q\YœAžbV , ¹»g}‚©@Hp¤3'‰™¯Òr4¿@N"CœA–r
-³r·òI¦Ñ†g>¬¹Rý/ØSÌ Æ"ÊÅöÜC<³geaÏΆñžO2Ï |c¢&N?+lT”“'åF;Á¸äör[ï!žÙºot‰~Íqcš,¶ÛSzË-Z{­A*Ö©¾¥Öj² DS »4¥v‹•=ÊÔyyŠ9°h™C5ƒ{»WÞCœA–˜KÈyÚ«5 Ì ºŒ•Üþ¸ò32ÍÎ0emط̨ìJë1Íé2‚åœ.6”*
-œi¥ ÑÕ÷&’:5w q|£°5ºJqEØšsöKZÍìåÚ
-ae9•Bº˜À°wt1!þ`w1_c˜±X“½‚•:é!u3?£<Np}88W ãYÀlë›Õn†8‚,¨]eÁ
-ügIÚ5H=™Õ›“$ð'èÀeÝE²à R¥ Ü¢nÕTàÁGŸŠo}ž_R¬‰ML4Ç’ŠFCƒ‘êè×˺-/Vf .å
-D"è¾lQPœ2&bàGŠƒ‚E“·@ÄédÁꡤàýá~Ú Õ)-H•è³©ê8¯A\)‰+ñÒ&¥Ã_r
-˜ œúîv¹ï¤šæ!åžjú¼]‚§2ÃÛ›vt;oKÆÎõãîJh¼à
-w ¹f‰!
-X1z}¦;g¯®d)±›JÚý&¬Ý¢ìt5ÎÆk'¹Ðb}Ò¯DkoÛmbFA÷#cã.R[ÏU[Ó³­îkš/Ñ“¡ÎŠ_ëMšÝï"±eZ{|Ý’jÉà¼B¾NøÏÓÛY³lÛhztØÕy#Ir_•,Ûs•¦åÂï=y„³šºÓ9õõbèjëÍ×x*8\¥Ìf^}\†èÀ?9U,†so ÿ‘·ä N`
-;§¢N¡¡ Š¸óú^£t¥§Ÿw±+=CˆÇ¯ôŒð#ã5D6
-t…U.†_ñ ‚±ÖVt„àj]
-‰¹gÚ¨lo(kth…gÚÊliÒYìûˆ‚ApzÚRŒï4E£ÑM¼¿íEü€iª@žOEÛàIÑ¢Ðm¶õ‘ëâJ©ƒZË8lgƇŒå}µhTꀗ3åªõ!–ð ÔiÑ̲@¥ðöó ¤ù}ºr”<âÔèNÉ êqPY Ìóþ&¿(O8½>Å[Þ4
-z_ °<^„V—£ÎT‚˜P{ÐQ:÷ôžBò#ºLtèùî™P¥³¯ñsÔƒoFyè?amÕךºbhûºíµâŪãšo S.uOo÷%öÙO»á7Ž»½O»ÿo¿ê“Sàoxf"jˆ¡E~~ði¸À̽Æoq|éûqÞ ý›¿Vß}˯S~p9aÏà{¬DZ#,då¾¥`ž•íg Pÿ_yâüendstream
+xÚÍ<]s㸑ïþz‹¼5ÂàD.÷°ÙóìM.™Íí:uÙT-Ñ63’è©ñ8¿þºÑ
+Æ‹BLnZ&Ø5@àÓï~øôáã÷ùñÛk§§·øt=“†O?|üã µnþxó§›O·?ÁW~úÝ~ûçÛ›iÌF ¿ÿøé?¨ÇÓãÔo>Üüxóé»›ë¿Ýþáêæ¶ßÌpÂ+ÜÉ/WýŸ,`߸âLùÂLžá…3὜¬®´QÌh¥RÏòꧫÿîFÃOsÔZ0+šÌ
+ˤ³æø²´‡ecÓxæœ)öVÙ‚YÁñLxÁ¤Ü‰–ƒ#qšùÂM
+ÇŒò~7íD‘
+7ýR.·UKí»jÙ<c³˜
+.5uv/Oõ¼\._è5¬TµÝ¦ž:"¢ÝÛk1m+jßÅùO„Ú¼j[X1âcT6×ðÃõº^?\ϷӲŧ¡…š¦Šj‡µ¦á¶YU4a^ÄwЖ|Z®Ó»jS·ŸiÆÏÜðÿýæ7ð4<,7%ཉ¯ð³F¤vîpã¦Û7ˆ­€“ðôú´,çÕc³\@†€Ï¶ZVón4wS®ÍŠÚõÃã,ž;Rq‘£r#Û—2í)„vßIìÛt€™P i'3o˜ÕBý
+éÇÔŠ’™B¹“zÅzÏ
+cõ½ÒO»˜^B<®WFè=mªûúëë4‹R<h%ýt]uÏÍæ3u¶OÕ¼þ™s¸
+FW©À¼‡ºB¨‚Z'½rH å+pŸ£Pñ ‰œ`6zD£r±Èi3©€qÁVÒ6P\ÁÂÞ7ËeÊâ9H€Ú"‚(Ó.Ëö1ª/ ï­‹hì÷Q²5Òr 4@è«5uA‹QâÂpsO}wu×R«^÷?ŒÓ«nU¶ŸAﺘÞ^{B\/QAeÄõ$Ë ž¥>˼AñÊë£'* μ×@Wg˜×V¼ùD{ˆ³!ÈÕœRžM?íÔ‰:f¹M'º*_hÇ Ø'°@6ëÔôC³¡îêk¹zZVï" ±'<`ŠIH÷¾È­g™q\ ì!ÂíȵeW{.IÞáª
+üÔ¤ý¢ŒãŸœ!†¦*’!Ž&Óô ’m%èZ‘NXsvÌ›!g ÿ=¢L2Åø{™#‘– nä2ž³D# g&ÝXˆŽH‚¿ ”¯›;?\4‘‡Ÿ&î§ÿ«s+X®è]+R…º(7>ïÿ bn2©Ùû—àOà{‰ý
+õïW¨×_šå—ñ<ªû‹¥_´óæ)x88ˆ¢Ÿ–:ûíiƒð˜¡% 6îbÇN@'{»Ç²£ú3©/6ö†žçz¹Lð»ùcœVÎ?ÏržLÕµt&÷¤¤VôV®_¨Ð=îl íøÛ\ƒ·Aö@ÿ
+É‚ó6L-§Ôioƒk&E$ËçêeÏ1áÌnÞ[Uo8B̸ ÜP™Žð«YWèàû@ãÛœÏÀ™v2i p;Ëz}`d@¨@zÜåvÚC<³Ué
+Ý0©cÚäÕMdÚEˆ³&‚º#·]G·»Wõ¼Y6ë–ú£CB¤S`ÁGÒT­ÑêòÛP&1Š NˆÐŽ9/%A)‰ózéG%HBüæÝéÜš1VÐútB38Fh?`Rôîšõl]=”]ýyÓò©’3kh´^wÕCHOÀ
+!x\ÒØÃJŃ¯Â¹qr’9^È·óq‚8‚Ìp2¦WƒªIÓ‚ 7Ϲ=gè>OקßÆð8 ¥9s{U$Lu/¶×♽*ÐCFÀ–F{ÅòÒÙû¦JFR y\cb$—Dg§˜„U H^ŒÝ³>Á”!$¸FÒ™„ÄÌ@¡Òr4¿@N"Aœ Aær
+³r·òI¦Ñ†'>¬¹fRý/ØSÌ †"ÊÅöÜC<³geaÏÎúñžO2Ï |c‚&Ž?ËlT”“'åF;Á¸äör[ï!žÙºot‰~Íqcš,¶ÛSz«-Z{­A*šØ@ßRk5]R¢)„]šR»ÙÊž
+yŠ9°h˜C5½{»WÞCœ Aæ˜KÈiÚ«5 Ì º •Üþ¸ò32ÍÎ0e­ß·Ì¨ìJë1Íé2‚åœ.6ä*
+œi¥ ÑÕ/L ulîâøF `kt•;Š°5',æì–´šÙ˵×ÂJïS*ßûx1.&`ïèbBøÁîb¾†0Õ{b±
+Du©Šžð|$×H‰÷æ„>äò—”“RF,åâ»]2žåâÓv>Óï‘ÚÑ=U¼·:›'<×ÝåÔpÕúwYœÐûB½%½¶sp˜€ƒB
+ÞïÁñj6¿Íèÿ=ù¯ ±<®ÏäfÞ¡p½kúù £‡ôï`ú¹^6w/]Õæh FEö—ÿtÄVÇ3ûˆ­ª‡2"Bêé“!tÐz’‹„À÷ÀðáÕ>Ôý½'AÌ~fqˆ~Ÿ QÀ È5Cež„‰24¿éß]9Ls¾éÿÉqrŒD@Þ°Z·Ü8í³Ÿô_ø/}Þò¡Z÷:pM*th¯¡›404Ê8¸¯sÃͦü¨p›1Ð1­5B®7ÞÒ‹¤†Q¹¤Š#f ñÚ侶§]àž—óÇꘕ. à*¬Xé¸N¨ëÁòtÙÊãƯSþ}‚wã!Üwr|T4”f¯£ôÔ áTNÅöÎOÅy}q‡p«üë=B:óâ ¦‚$À!„xðóEÝÎrö |º\"MÔxи‹ÈÕ+Œ–ÊuÄï™®¿!¼ª\Ru»©º>ÜkÄú—-ü¶îjt9ÞƆK¥vx;x{Ûn#3
+‘l±
+h=—i¬¡g[ÞW4_¢{C%=¾T›8»ßEd˸öèxcYbˆWìì„+³ÿXcÛÛ£ý®äH’úÊhÓžË8-Õ ïÉ]œWÔÏ©/]CW[m¾„SÁáèÍÒêãŠH>Ê©ºõ0²|c´ú¯,\ ̤Jqº`(ð3«LØù y°¹ÛEý¼‹Ý.B<~»h„Y¯!z°QÆ ¬r1üzˆg e/]Œ\7¹èœL•BàJ`šaÅ™¶2…µñ,öFÁ N>mÍÓvš"ÑèÒ^%/Dø–j¦@žOþàIÑ;DÝf[¹¹®”:(ûŒ3Ì>ay_.Û#ECàåD¹2…„ˆ%üu^@œ'7€¿û±¢Â‹1Õâ]¼ý}áÔèzË 
+QŒ®¾9ûùå+áÌžÊëWg]ͳð6Õý¦j³õ#à`ãÝÞ‡)yÕ¨é3X:Š\Ê%öúQà‡
+ô탱:ÞnÂV{Jzà¥wÙ«À;ÙêrÔ™I3
+a/:J§ñžÞQL~D7ƒ‰ö=ß ªoöµ3~{ðù*÷ý×´í²üRQWˆíB_·½£V¸ãu\ó tÊ¥® î>
+?û•9üÆq·÷•ù?÷«2‚xÏ9¼3œù8÷büæOáwÿQ€vLÅN;ï™ðËz
endobj
-1563 0 obj <<
+1571 0 obj <<
/Type /Page
-/Contents 1564 0 R
-/Resources 1562 0 R
+/Contents 1572 0 R
+/Resources 1570 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1551 0 R
+/Parent 1548 0 R
>> endobj
-1565 0 obj <<
-/D [1563 0 R /XYZ 56.6929 794.5015 null]
+1573 0 obj <<
+/D [1571 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-1562 0 obj <<
-/Font << /F37 1042 0 R /F41 1238 0 R /F22 977 0 R /F21 954 0 R /F48 1258 0 R /F11 1459 0 R >>
+1570 0 obj <<
+/Font << /F38 1042 0 R /F42 1238 0 R /F22 957 0 R /F21 954 0 R /F49 1258 0 R /F11 1459 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1568 0 obj <<
-/Length 3057
+1576 0 obj <<
+/Length 2865
/Filter /FlateDecode
>>
stream
-xÚ¥Z_sÛ6÷§pŸ*_-„ À—¹‡4uZwÒ$—8sM'¥%Øâ˜"’²ã¹»ï~»ØHJ”ÜöF‹]ìb±ø-(yÀOž¦‘T¦O“L‹(Ñéb}œÞBß'’yæŽi>äúþêäÙ+•œf"‹Ãøôêf +AšÊӫ寳—?½xwuñþlFÁ,gó(fß_¾ù(=^¾}óêòÇï_œ%zvuùö ‘ß_¼ºxñæ异h/Y¯.__PëâõÅ/o®>œývõóÉÅ•7fh° Zòåä×ß‚Ó%ØýóI T–F§ð™eáéúDGJDZ)G)O>œüÓ ôÚ¡SŒT*¢4L&<ÊS)EEáÈ…Q&b*ëB´ZžÍe³ËecÚ–lü%ï+j¾.Ú®E[­Ä~M‚Óy‹ I¢¼°U—¥QúȨœ”~^£¾Ï%¨:›Ç0þôØïþlJ³6³=G Þʹ7$ÿú”„çÄ „ ÆoVÖ|G˜<0Íñ<xº¬ó'Ð>>QPl>çν–ñYiªÛnÅ,ÿ!3‘©0›qg‰Ÿ‹¥ã'Ûåç*_›ñ߇ì&úý¤äÄšÎýt"â(KKòÒþ`>AX]QW!yµ¤ÆÇ6¿5,6<¼èig2Q´%j¶æhƒfi£ šá,'&¢ošb7EùH¯ÛÖ,©ÕÕô\šÎ4ë¢2<x±ðâuÕYYuI„›º¡Æ=ˆ¬·¬¯5ͽáŽzcš-l!:T’Í®V°¸JÁx}“¥e[Sk{&g<ÅpVTôìVfÂçi
-{?†Mnå¡ý¦šƒk÷ݨ•²(aNôú¾4™‰(Ñ’yÚºéìÚï SZ„*uÂÚ.ïl<“½ÚK“æ8g=¬
-Z)‰^m»¢ÛvÎx¶2¯nÈ«K› ² t:Þ]@‹œCêÚ¸Ðz¤F}CÏnÅ=7uYÖEuû÷Cy8Š"FizüàrÙ´)õÀK4S5…óýÈdW)Xƒtr\«çÚW;Z@[ÇcµÎ7—ïØ7#GG”i.ßÝköXãØïc·Ý'ݤbÑü”›\GÜ丞vÓ1­7íªvÓPí®›6ä$LZ_{?Ìõû³o©QÕÝðG]é1ÕñS®pq•ãzÚUÇ´\µ«vÚUCµ9™nÏë²Î9´8¢–”ë ç÷ëÇ~N¤È=ZK—{î(aîÎ#ƒ–ªÝ´sÈãÜ%uð„LJ\‡=ôøQ­½Ç÷ÔNz|¤Ö§/:·‡™ÍÅíÞ¶^÷X¬Ï”;+óPt«ck†Z¤‰ŽÜÙ±(§Ö’„]ôG×& „Vú©µpYÇõôÚÓ:X›]µÓk3TË»¡2p/ÿÌZ˜jQÖ­ã2Ëu“¡s¼ŸqŒ H‚ت»èV¥ø䃆=ùTÓ¸Íi@äå…VNÒäK8ûèÅ|]”ù:g@¦ðÄmî¨ SÝïß|‹I ·¶Š¬A…¢êÑ—RÎ&ha|¶$íœÃø°2K©êÊiaGY/òrU·Ô!+W™ì*ÓµøBd¦ð…·t@& Ìì—ºgBo˜s¶ã(÷ì@5 b[°iÝŒk·nN…iÆ6JYšvÑ›öîAÜU¶á·Žð‚úu'dÅ\DÇ,-rÒb—•ã,î¶eâ:_š>—IœˆºŠ–Z-–a‹®XÐ_³Ø¾zm€ÓÑ`pN¬ë¢­€¡Á"Ø
-é¬-ª…™ZíÖ,¶MÑ14‡y[à§9¦Žéj×µßçe±Ì Bêhǯ·½ÐŠßRxìˆÈé‘FÜCh=Ôv# h·“˜[›ÊÙˆaðc J'Ãد,–Œp3<‘(žm.h]@%ÇÆÖ'ŠnEEÉö– ÆÒ²^lq­ldO…Ñ¿V½›’àq[€i÷ŽhÑvŽæ
-ë4Ü…EÐS0Ç¢^ox#.‰b]2ÄŸêR
-Á€ádÇ‘Ä¢­y|—ß¹)!K²þj²ÀÚÐLë¯P
-ÊZåk1‰#¶pŸ (
-s¤\»aMjíòâ붂E§f>•O¬Ïxû 0˜ ›˜Îw
-l˜MôÆ'AŠ¿ÇqÙ„{ûÁZaß P"ÌGÊ–©Di82:—T¡Ëµ>¤[n¤,ÍÆTË–èŽýaeìL-±sòÙ‡@*Z¢\k?’h[ ÑçHrÙ
-ŽÛªÀS
-‰¿Ò
-„€Ø*YjøÓÐÓq½xùz¬Ê• ¹Øjp '!Ø“
-°³cŠ$ØÎçîƒišd;qî®+rw«Q÷å iû½à­Œ+h=óàâCxÇ þª`P‰8KBÿùÙ}|~Y¯û’hø'ƒcß›ù[¦v “ñ •/-‰£K%WÒ
-ÂÛmãn}ãÔ†H‰— *–³«³ Ûa”4ÒΞ8·M65-m¾Á%sßPÛŸÓ÷Þne¯( ›îõ Û^7Àó¶bg˜Xðt(¤€ðòœŸß}wNy©n&¯W¦,ŸmLãoQÑœ_T$ð¯1_Kÿ÷?pŸ1(ÀÒpús‚‚­ž†Yâ&…Ö¨lwæþ¯:ûSÿ,byØendstream
+xÚ¥Z[sÛ:~ϯpŸêìÔ¬x‘DmgzIÏÉ™6í¶éìCÛÉQ,&ÖD–\KÎev÷¿/@ºØ²Óž<‚@€@ð> àOtÈ™¨Iœ(<œÌ—GÁä¾ývÄÌÌ ÍúR¯Îž¿•z’°$Ñäüª§K³@k>9ϾN_ÿþòãùɧ㙃iÄŽgaL_ž½!NB×ÎÞžþöåÓËãXMÏO?œûÓÉÛ“O'g¯OàTÃxî4ìðöôÝ Q'ïNÞŸœ>þ~þÇÑÉy»˜þ‚y q%?Ž¾~&¬û£€ÉD‡“;x O1Y©P²PIé9ÅÑ磶
+{_íÐ1
+ÉYÊÉL*¦#PÑÚ–AÄ´Hbpw˜°H
+Ùº[ð ç, C1ð7WLFÎßè"~<ãAL_fÙÚÔ59ä}ÚÌD¾Ëë¦FÇX]
+³4¥{ÚUÎÚå‚æ¯ixAŒ1"¾[]³-e|Ï4‡ópÓu6Ÿx…öñ-ƒ|u‘z÷ZÁç…)¯›…ù-#f‰z¸Œó@2@\ä™—§µÍ‹‹2]šóßûÖMüÿ¶“â#1µsC&D¤{¡.´oÌ· eÞäUI’–_êôÚ8µ‚Ž™vÌõ”²-–Ó¥Ë6 ›m@ŠiJBÄ_­óeºÎ‹zÝÔ&#ª©è™™Æ¬—yiÜàù¼U?¯ÊÆêª
+b\Uk"nAeµqöj³¾5îCµ2ëWXCvÈ8™ž/ ¥`ŸÞ$ÁhQWDmŽùÔMQLó’žÍÂŒø\k(T«×oʸv×J² c'‰^ßÕÆÆŠ;™ºZ76ö»Ê ¸©½²ºI›Ï´Þ×K“vyî|t·È)R½Z7y³iüâÝ*Óat…‹.m.¨B<Pz¸»(;1æ©K©KãSëˆêŠžÍÂ}¹ªŠ¢ºËËë¿ï+Ú*Á>¤zB¶hrÕóQ¤–&œì·€ÇÛaI0FÅM¶B;6qáÐ*Øô^9ýè¼2pqH5æôã­r¾Z{ñÛÈoôQE lòX?â¡žÔy©Ç}tÈjÏIÛfǽÔ7»í¦9 ËÕ}ç§ÜIýùü)eÕØ­~ÐUJ3>šL=©®òR»êÕž«¶ÍŽ»ªo6¥¥ÛÓźìÍ3—Z.£2ªòÆUöˇnû¨:Jq_un¨TnÏ#ê¥åvÁÙëq3‘€{¼'uÀã^êq²Úóø¶Ùq÷Ͷ…‹Nì~Móy»³­—
+ëjäVdîòfq(6B
+™µKÆ×UødW>¸7r2³2eVß‹ß-Œªe6^¿s"°òš8—Æ:
+ÚåúÙ°‰ò‡z:b(ÔLø‰f›³Pr}·Û:lPzD<.wØ€¹~Z
+‡­PÉ}Á ®Öì•[à ïG€á·qw$À‘?ë` ž¾ìJlĽúV­òë [{Æg¦ÌM;~6¶]P)Öm
+žU*év½úSVônõ?#ºTOÎE\!ƒÄË;nÇn;…â,ˆ”GѸä4ŽùÕX«FÐÅqî]u€
+ã0h[ãIZç£isgVô˜B5®\
+;I3­ÔÖÕæ¨=
+çHY_Ajïê‹ãZÿâ,)ô
+Ú8æápWmV~—+u0ÝB¦å0ú¤lõû.]g]a¦^ÿÅ]^Áí¹È!.Æ{ïÂÍ¢*Æf«b–$QÒÍ E2µ¸YB…
+Cí¾Cþ8pì|Qä¼Óš×Õ±¤WWA¹h‹ÊØú£ŠªºÙ¬ˆI?ýíÌËV.ö4ïjK ÃF7™~©Ç»Dp.µ¯OHºsåLÝ)91Ó‰T½Ízo«3]Ò H×_Œ蓽¨‡'îÛ^Ý_ª†£´šßXÞwŽ)“`;?ó?Ø)¦uœl广²HýÍFÕ50díoô‚73¾§m…{—lß³ þ›ÄÈUoÐþÞÿÿ7Fï®:€­÷Ü·ÿcá&….P;?…R³P‹xdêÿØÃïÑendstream
endobj
-1567 0 obj <<
+1575 0 obj <<
/Type /Page
-/Contents 1568 0 R
-/Resources 1566 0 R
+/Contents 1576 0 R
+/Resources 1574 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1551 0 R
+/Parent 1548 0 R
>> endobj
-1569 0 obj <<
-/D [1567 0 R /XYZ 85.0394 794.5015 null]
+1577 0 obj <<
+/D [1575 0 R /XYZ 85.0394 794.5015 null]
>> endobj
370 0 obj <<
-/D [1567 0 R /XYZ 85.0394 769.5949 null]
+/D [1575 0 R /XYZ 85.0394 737.3289 null]
>> endobj
-1561 0 obj <<
-/D [1567 0 R /XYZ 85.0394 752.0459 null]
+1569 0 obj <<
+/D [1575 0 R /XYZ 85.0394 705.7208 null]
>> endobj
374 0 obj <<
-/D [1567 0 R /XYZ 85.0394 752.0459 null]
+/D [1575 0 R /XYZ 85.0394 705.7208 null]
>> endobj
-1570 0 obj <<
-/D [1567 0 R /XYZ 85.0394 723.5337 null]
+1578 0 obj <<
+/D [1575 0 R /XYZ 85.0394 673.8855 null]
>> endobj
378 0 obj <<
-/D [1567 0 R /XYZ 85.0394 642.6584 null]
->> endobj
-1571 0 obj <<
-/D [1567 0 R /XYZ 85.0394 613.9312 null]
->> endobj
-382 0 obj <<
-/D [1567 0 R /XYZ 85.0394 133.1977 null]
+/D [1575 0 R /XYZ 85.0394 585.4432 null]
>> endobj
-1572 0 obj <<
-/D [1567 0 R /XYZ 85.0394 104.7573 null]
+1579 0 obj <<
+/D [1575 0 R /XYZ 85.0394 553.3928 null]
>> endobj
-1566 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F41 1238 0 R /F22 977 0 R /F14 980 0 R /F39 1178 0 R >>
+1574 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F42 1238 0 R /F22 957 0 R /F14 980 0 R /F40 1178 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1575 0 obj <<
-/Length 1991
+1582 0 obj <<
+/Length 1891
/Filter /FlateDecode
>>
stream
-xÚÅXmsã¶þ®_Á™ûPébÁ
-Dűô›Ñb+ž¶]±íhà±ìVÔÙ­o÷ØPÏrUl‹eg¶- œ¾¦þ_¸æmU´«hk‚ƒ>A\Ö¨Èfˆe¼>¥‹
-æR¦L¨ N#2gYFÕªdl*ƒ ZÎGt 90˜fí¤ Íb+8~Ã4ká|†¤&/+BªÞyØæ@Žñ|èU{#›ÕS;ßwS2x¹,*L‡‰M2˜ã vÁ¦EèôIi›±Ï-âžšÅÒÆxÓ¶ÔR¶Pð¾Œö; EiúVÅ'ÇÛÔŽ¨š‡aÎv¡a3äH´äË¢M±\ ½>»úlBI+L6vK4†hik&KÁ]²D<J–_“„ŽÏþ“Ô2Òb‹ŸÝ«Îˆ)¼ØƒÓZm÷O¨e>™Ú/ªÙ=¬ÜÜnÃm”¼/üBRÛlͧ²ÙµÏ£uä†!—æú=žèÃ@ñ;CsQS:¯jvŽƒªÏG³béßÅmï a¸Žl6œ ˜J §qwj}®L p‘!\y½[ßa³’ˇڭª?ž†NI2æ,‡îƒCQsà³Ænm܇#CøùpaQ´ûgP¼¸³'Ùç¿÷ûWÿ·õ?öúW/pú±ë¶Ì8KE"¾ê¾-$Ës­ÆïÛ°ÐL²4çê8Íã€åH?cjx×9ì°Ôép-—ýA\ ‘,†ÕG2IY,$Uú¿1¡p`„9:·¡ 8ÛÈé­ý¿1½îi9½:´Há)x™”póKsk«è7°B.”Š-SH[í«ØŽÓëu½m@Ç(PÓÏCd«fÂGÏ3\ _ &´¢õ÷™P°ûr
-&Ò¶¸(º…Ñšu¹l*¼&`sÂ?¾û¥•r›pfu”thnã¦â
-¨©/œ<_-Ïkméû4“vm#üˆ‚š]…e\+›ðrVPó_3¡]A†Ý=± O© ÀÄ‘@#œ]Ö÷2põ¥ÑγÑìÍ:œ˜á¦kÕv7(ºhvf>ZêÇ¢H%9“YžE¡Ÿ¾Ìõ1Ètž€ïïV/ ÌýhÒ2•á#—P,V‰ _¹„ÎÀyîŸ ÝëÆùØóÀeéO?WÛb½.¶GªkÆ’4}ôI3÷î
- ùþ†Jow|1÷ßÆg–2ÎÓ(…›™ÔêkB)Î!”˜j<”à` …D
-Ñ+ÕØ«2ï+Ô‹ß°‡ÐUPà²L†up0™Â™/X3ÄBK*þ¬äûÇnÇ,ýw«Ï%¹endstream
+xÚ½Xm“Û¶þ®_Á™~(e[8¼ð5ùdŸuîeÒK{–§É$™)-á$N)R!)Ëê¯ï.àËïÇNG3° ,vÝg‡ŸðˆE©L½8 XÈEè­÷3îm÷f&윅›´Îzµš]\©ÄKYÉÈ[Ý d%Œ'‰ðV›Ÿýˆ 6 Ü¿üáæêúͻۗó8ðW×?ÜÌ2äþÕõ÷Kê-¿_þ}y³z #®Rÿòo/ÿ±ZÞ/²B^]ß¼&JJÍ#Ro—WËÛåÍårþëê»ÙrÕ34Xp…–ü6ûùWîmÀîïfœ©4 ½ 8i*½ý, ¥¥˜½ý³8àš¥“(8“*’'(…'KÃPŽŽ0LY¤¤êŽP΂s0·ÚïuÙ’‘oÏe›}D AŽÜ÷î •¡°ÚiX
+;û?y¹i^ j,Ñgb¯³’Øï5µ§:o[m‰¹U§ÝYîå Û>nD^õ”•ÍNÅÅA×ÝpӞѺa1¾á
+;W4Oß¼ݼT-*«–8ïí ‡„‚+ÿÊlTý1ÃãDlV¡…m ßU˜órKÃÜÊí„~ÈŠ|ãäÓ š
+lÚÓªÁ´»ÝF2"f©’Éø°¾Jæ*J¯«ºÖkÞÆ÷‡n@-zqƒÇLW<`I%Ÿ“ÒT…‰
+‚OZYQ[TåÀv”Z
+RÆL T¬J2®¨…,Ù[ƒ FÖG°kzäÀØA˜5‹0‹cÌàØaÖˆsICJ^fS©òèÄV÷öÑnž©ã†œÃîÜ,¦Ü4_ca¨dd@Y%X2Ÿ‰è@û‘f•ØÐ0[S%Ù44î¡ G¸ñxæ[,P©|FÚ.û`çV¥íÕ¶_ÓÃ. BN˜1—/¨¯³õ®§:tuhB 5s%!†hnr‚¥à,Qå“ ”|¢<ûhYidh‹ícÎÄQ¸mïUk¥>$¿ ‘þ K§TuÜîìÚv,Ã^¤¼ ìv>j‡ZÈ«có0ZVaƒ{‹Eâ0è0NÜE`]H<4¹uúsu´3(ùÜ麥O…mç
+Ãh¸k( XAñÉmÑúЖ&À[—& æåqÿ!ÌìœoK«UWœ0Rq–y|Á®Zè\V»ÚÖ„ýÓGŸ
+,ôF:¹‹`cd4|o¦ ƒI1˜  $3úÿ4ƒ}D›€÷©û&­ôþ N£÷ùº*ð€C„ƒûWB€ ækæp„7´¶²Kñõ=ß
+Ïì~./š9GÌr†ÛP{žK£Û„ïžp£êX`Í''ó,Ëhøß¹m*†½:‘„µA,(&‘3°Wç墽ÄmÝ4zÂó&‚ݦã³íÛ‰ž˜­ž¬U&(ˆR&“4ñ.úeNá¦x}ÿQó‹CRA… ¡4õ”{Ⱦøsl°AÌT’ÈaÀö¾,cÈM Q!Y„ |€Mîí›6PþýÒ»endstream
endobj
-1574 0 obj <<
+1581 0 obj <<
/Type /Page
-/Contents 1575 0 R
-/Resources 1573 0 R
+/Contents 1582 0 R
+/Resources 1580 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1551 0 R
+/Parent 1587 0 R
>> endobj
-1576 0 obj <<
-/D [1574 0 R /XYZ 56.6929 794.5015 null]
+1583 0 obj <<
+/D [1581 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-386 0 obj <<
-/D [1574 0 R /XYZ 56.6929 769.5949 null]
+382 0 obj <<
+/D [1581 0 R /XYZ 56.6929 769.5949 null]
>> endobj
-1577 0 obj <<
-/D [1574 0 R /XYZ 56.6929 749.9737 null]
+1584 0 obj <<
+/D [1581 0 R /XYZ 56.6929 748.4377 null]
>> endobj
-390 0 obj <<
-/D [1574 0 R /XYZ 56.6929 670.1208 null]
+386 0 obj <<
+/D [1581 0 R /XYZ 56.6929 684.6044 null]
>> endobj
-1578 0 obj <<
-/D [1574 0 R /XYZ 56.6929 644.0935 null]
+1585 0 obj <<
+/D [1581 0 R /XYZ 56.6929 656.6714 null]
>> endobj
-394 0 obj <<
-/D [1574 0 R /XYZ 56.6929 176.1924 null]
+390 0 obj <<
+/D [1581 0 R /XYZ 56.6929 565.3529 null]
>> endobj
-1579 0 obj <<
-/D [1574 0 R /XYZ 56.6929 144.3484 null]
+1586 0 obj <<
+/D [1581 0 R /XYZ 56.6929 536.1745 null]
>> endobj
1580 0 obj <<
-/D [1574 0 R /XYZ 56.6929 85.5791 null]
->> endobj
-1581 0 obj <<
-/D [1574 0 R /XYZ 56.6929 73.6239 null]
->> endobj
-1573 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F41 1238 0 R /F22 977 0 R /F60 1366 0 R >>
-/XObject << /Im3 1524 0 R >>
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R /F61 1366 0 R >>
+/XObject << /Im3 1530 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1584 0 obj <<
-/Length 2555
+1590 0 obj <<
+/Length 2593
/Filter /FlateDecode
>>
stream
-xÚÍZ_sã6ϧð[™šÇÿ"Û§t7»—Înº—¤Om§£ØJ¬[YÊYò¦éÍ}÷J–ÙNwf'¦@¢
-Õ$óÔöZÎÈ;ªfž-i¸ª³š=vÃæ.F}¼NËhO#lÒîH¼@dû Û /M¬uû 'Z€ÊºªŠú9Ö›i4 )­¯g"ÌӲ̊8ÝTô{u:ŽŠ¿~ˆó,¾wc£ž3m•‰ï]–³éÀî$ ô>bZ5y‘7ÇBˆñ;öô:¥?¶£<¨à a÷ÙxGN—Ób5Ëö›12F¥ôƒç²Èv(®·£C)®=!Œ\Ö%Ìs¡ö)Ž+¦µ
-êøœ=ì×Y}—MsÔQP$\Šó Mˆ@òª¤™p¼(yœIWàîe“O[n`¢P'«ÉP´Zæv ð …(ˆÃ«Ë³÷Û-ÖWÅ¡BÖßk¬Ï÷å›xf”¤\ST··¨…šM%ãûyÚÐ# ܸΖ_B
-`™ö­ÍagÐÒ°íD¡COʪÉo†r¸L¢;^üæ·oœ¯8]ysoºÀÏâ‚ÒEu‡éóyѧ…³ʽßÕuŠØ*.Q
-8DŒ|ZOº¢î…¢±¬°X¬ÊòRW#âæfü½Í´u¼± N$P-G\±L:¾MÖ}׳öôõ5*­™VÔFÚeVí@ÆZ® ûÌ&P¿¼,«†j}yìÆa==¿=¿¼<}Cc¸C£½­~Å壑œéöe£,ã Ob:/ú?W£! ƒÆ’žö´GÔÐ3Jè™$¨×»†F«;š!8´ÉˆÒÖ„@¼x÷†† ù£Õ†;aÓy›y:›¬ÒŽ>@_C_óÑ
-ŸtåçÖN
-Ö"¶«EÍÊR¦«²·Ãl—Œó.¬mãÎC‹ÇŠv4®Z< áhφëvÖE¶tiɬ·àÒÊ0! 8ÆwãÍ„EÁ97AÞe»¡xe´L‹4OÝÿ^¼mÑÌk¡»+‰%I„!ôôßhÛ¨·ng3(÷ëßÃmÆï¡
- „GÌÔHøß÷C{Ðà96æsü ¹çƒÞÒÉË×0¸»
-Ô›JÙ  ¤l^¡©NA8‡›ù&’I H]¬ê(ã:RÚ˜=#ò}Þ̇
+xÚÍZKsã6¾ûWè¹j‰Åû‘œgÖ©gâqjI*EQ´ÄŠÔŠÔ¸œ­ýïi¼(J¦$;£ÔºtØ
+{µ®ë~‚i$4U
+~W
+)&Ù1Ãq‚¥¦Û·«ºlžc½¬ $l—>Î^0O«*/Cu6ï$ï0ÀOC Ø—þ½[5qÉDx漢f££°1`¡Ѻ-Ê¢}<'„ŒرÐ×¾kGzR;R”&䘩AL*å
+‡Ççüñ8hÍ2Ï
+ ’à ؚíÈ€Ž EÇ.°?‘l ,w/)BMº†õ^µEÖqY†¯¬ÉÁªø£GŽÖMç½î>]¿;`²§:³þg#øi‰9a€”bê)ëÙÌ¢ðB³1LÃ#(yÅ40‡Õç@Š'á8ÆuÉ;V°éçÚz‹˜TÓ¤3ÿݱˆ[6`ÿý&ëcqZ“t— ÁÎÌdÒ aˆg`åÃ*†Ùðõàgžz능䡃'Oõ2Á ¬#rÁñIG0²6ˆ¶¹HYÌæmòÛ?_R—n‘XÉ4 $>Ñç¸(²O„q§þ
+ ŒNRÍÁùâ .ƒÀÈè΂.r`Ýô òš× ̉@÷cë† $5ñ§ó"m€û7/ã–Jx{òŽ[‚$jr–Aúž@‚ÈùÅƳþÑ×7ízTVASS¦_w÷5¼ÿ››ÃĹqÍîŸÐÆM4z½"GpªËN•]ÑIU·Åýƒ5£x×ÖÎù
+)Ý5Öºê8¯uQ¢}²ÎÙþÏòÖb$/¤²•âW ‚ìHºvÛ¬›×³öðzÍ›JhıVÇÌ*A‘þ¦´]­ÁûL`^æU]¼¾:×c×ß?¿¹ùôéêÒ—­Âˆö†úš7
+ðFnô1ïÂF˜ãpy›VÀýŸ‹hnžU=Ez^ênM@ânM”ÅuÙúÒzék| D´Í½$… ¼}{é ÀIh¬6|–Í£çYÀÑÙæˆÜôzÍ[ƒR›Ä8êo¨Dœ´ÃâK‘?¼xKßáúzàî©?¢ÓÞ=ô‘Œ„MuŽpDWïý«ÀÙ¾@ëæT mÒZÿ+{bÄœU«íüÚ“<v§©Q3Í!ý;Aú$QÉFL
+0‹f]Öcèv ]ü¹÷*ÅÆ"²‹E,›ÔÅDfï§Ù fI¼«Ýͺ,ÒÇÈÇÊXʲuäÃpmøÙ³CÝȺ“íÞ.iŠ¤‘°¤`B°Œ©GDBòÑæ,œ¾.¥7uä»YGŽ ,þ.é‘H¯)±4Ä?ý×´ñÔÛ>n§Sˆ÷›ß]>ãw…º›„Æþ&áß M [:‡°º›=2¡7~çÜ¥@~¶÷V{ò«½™î_JDÇ¥´'à[&µcú”lšbVÅgH3>.&uYdþÉ£êršuL†ÿ~ŽˆrésD¾Îëò—z|^5Ëcr´ˆ…î{ô-¶²\°
+BòÓ^æ:Kû£šêm³Æìæö˜ÜÒncfÓ9þoaP/Åu
+ì&QÞ†®..ß7ÝõÏ&±éOÞ›ÚR
+Ë0P$¢ú`Wpg´2l˜y=|±‡ó¿?˜¯å Iiè߃P&Œ8†W}‡‰×Ъúy˜õs*ÌÀ k)^¢2öØ‹™²±?†¶á/6ïdii'ÿØ YEÇ׿p/ò.Ô‹dmNÜØÑyhä+ª¼}¨WŸýƒ·V÷iæ2H¡C5¦ù÷ Þ¢ï…õmLÿ=ÏcqçÍV´9ˆ\½ÙÍ8¦'}õ¢þ’OmÊK’=ÙxjÙ†`¸À¤k»Åcàpô‹.|¤äŠ°"×Ëé滞øÉ€ø–gíæ[î#ƒY~`ñnVÅ×­3¬Œc˽ œ Ø } ‡GGc°ç~w·ù(PdZÓaªß…0j«Ë"ÌÙ0âz¡Uo蚨§'endstream
endobj
-1583 0 obj <<
+1589 0 obj <<
/Type /Page
-/Contents 1584 0 R
-/Resources 1582 0 R
+/Contents 1590 0 R
+/Resources 1588 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1551 0 R
+/Parent 1587 0 R
>> endobj
-1585 0 obj <<
-/D [1583 0 R /XYZ 85.0394 794.5015 null]
+1591 0 obj <<
+/D [1589 0 R /XYZ 85.0394 794.5015 null]
+>> endobj
+394 0 obj <<
+/D [1589 0 R /XYZ 85.0394 769.5949 null]
+>> endobj
+1592 0 obj <<
+/D [1589 0 R /XYZ 85.0394 744.7247 null]
+>> endobj
+1593 0 obj <<
+/D [1589 0 R /XYZ 85.0394 685.9554 null]
+>> endobj
+1594 0 obj <<
+/D [1589 0 R /XYZ 85.0394 674.0003 null]
>> endobj
398 0 obj <<
-/D [1583 0 R /XYZ 85.0394 433.214 null]
+/D [1589 0 R /XYZ 85.0394 347.1835 null]
>> endobj
-1586 0 obj <<
-/D [1583 0 R /XYZ 85.0394 408.8744 null]
+1595 0 obj <<
+/D [1589 0 R /XYZ 85.0394 322.8439 null]
>> endobj
402 0 obj <<
-/D [1583 0 R /XYZ 85.0394 340.1059 null]
+/D [1589 0 R /XYZ 85.0394 254.0754 null]
>> endobj
-1587 0 obj <<
-/D [1583 0 R /XYZ 85.0394 309.992 null]
+1596 0 obj <<
+/D [1589 0 R /XYZ 85.0394 223.9615 null]
>> endobj
-1588 0 obj <<
-/D [1583 0 R /XYZ 85.0394 232.654 null]
+1597 0 obj <<
+/D [1589 0 R /XYZ 85.0394 146.6235 null]
>> endobj
-1589 0 obj <<
-/D [1583 0 R /XYZ 85.0394 220.6988 null]
+1598 0 obj <<
+/D [1589 0 R /XYZ 85.0394 134.6683 null]
>> endobj
-1582 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F41 1238 0 R >>
+1588 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1592 0 obj <<
-/Length 4374
+1601 0 obj <<
+/Length 4071
/Filter /FlateDecode
>>
stream
-xÚ­[Ýsã¶÷_¡·ê:C|Àåéz¹Ki/é3ÓN’ÉÐmqN"]‘Šã~üïÝÅ )A–;¾ñƒH
-nf‹È ü‰FÔMÕÓÓϹÊ}Ûý¯åjµ£—ÿ ¢Ð0ñ‚eZ
-åHüÑw!QXëФ}íg¹ow}¤=¼üâ,¤Î Ï‹)åfÓ>„U,‡_dªêº_·e¿\ÿº©»Þwü×ÑÉÒÎÏÕc”‚ûÿ¾ý÷ë Zg:7ÅeY6ù,OŽß7õï~Ýe¿öOÕnKOÍ~{Syá¶Mx7ßíÚýý¤y4É*Hœàúp•‹¤i§S5‰H“q£UTpùÿ¦ú9ÏyS÷uÛPKÙ¬èáÇ®¼«ü\ü´æ_¯«ÈÐ0ˆƒí*­aðÄ:Ž©I°cp4®˜…¯ªåŒ™yÜ íׂ 톆,×eÓTßÝ·ÔzSÑᆱVÔsóH-Ýc3P[¹ÚÖ lÙ®ìÛ]GýÂt"$MËœÁþdà6õtSZгÒË°ÐóöûÈ54嶢¦®ÚýŠ®5Ù8ʯó}“Iñ³auØíEA]´4|Â¥…ÉŽ7Bä  ¹d^»fµLìq»ö}½©ûG"!Æ?Ჟج<WÐïä"¸Í„dfj'Q›ˆ÷~WW¿UÔÒ´Í⛟ÆÝÝ~Ó{=½%Al½RúOHŒð4cð ÿÖ¸Yß4 I0î®0~ι ‚Á£a|¬·qCxT7|1óº£Æ’^¯ßþ@ï]»üŒž ŸÑ%TMÝÜјÒ7“b@Cw_-k4AØÍ„Éb›
-,߆^!m–çFÌç™IŸ|9¬Ð˜tè]DŠ‹1ÉWGj¥`“­fÃÌÈ¡ 1 íbYnƒr9y¾4|k˜8)©
-GWÛ{÷[wÝÞ÷0Ü9x„Ã4tLr5 WGé›ûo½ 8_Æró8øöDV!%<G‹¢¢AÂkXܼ`0˜ $3EHyû¼:é9u!ƒ©CV¸wщ°`vÅ"N\ÆÛqÈäJP£¸÷DÐ0÷ØÁ= ’-èÁ*BÝSŒ‡×›Ò+-'4‹ÔÓY°sa×}åHƒ ð˜é™|Ä
-€d/Öà@q1&™Ð`®!¿ˆÃMWæ963Ìî¤ø‚LŠg˜”9‡øØy¤+µ$ÌLf ´vˆ6ñz]{ _|²˜wõö~ã7ùê‡`•9†iv°xVFÏ…ÞwƒNÔ¥yŠBîסœò˜BßRBóAéÐ7(uQä oXg\¼}Š‹1ÉúæY!-fvŽw•F"BŒ_Eµq¥/žÖ®´a°÷ܲ3†!`÷/&ƒHñŒ „c‡2H†Æ@Á—c2P<ǤÆÚ0ú1“§ R¯"BÏ‘slp×´ô¾
-q ‚½–JLk*)5KÉã6ºJfÂwóL V¤K*z\R)|IESIEÏüpõwêXµÛ²n¨u¨¯èi}¥ðõŠ zR\p#¨4Œ]œ[‡ï\z„$çó7[€*`5ò°üçb‹)BÒW ,åÓÅâ€hp…;ÿUÊE°Œ"l™+d'q¹Éc…è2AG6‰µW÷>¦" CæöÉ0 ÞC3ÆP¥<𭎹IŒÓ Ézþ¡í½t\ÐtRÚú–ûMÙƒSÞv$2ÄûŸöÍ÷Ÿ¨×s„ÙxT¸‰ô?µ›
-0·‰/vÀâbL2ဠ€zž-{62ÁL  :U
-°€VJ\’„‘£â3¼
-:õÆöº÷üɈAýØ»s£‹´Øõú5¥›_54¤w ì[–]uIð9Ò,7]KãÖî$ÆÈSàIÙŒÊ<ë†1¯aà"BêcÑLóåí7¦Nr~³÷«¶réªoZ—îôžÊ”Ês,({¦( /ŠPrŒ”¦A¦†Ùg Ò=1U4d¯ Ü{®]@â¨åÊ·¬ý2\‹/C*+]”v_n2p9Ü#á<K,¡œt¸4q>Q€+7ãk™Ç‡ñ'ÇMR¬HžuøUÕ'=K1.ËbÞDÎ/­íø­J¢(T¨oCƒÊÝbŽsL¿à°z4îÁe=:?H’ñ’Nf­zò±-tÞìëM~:£Ë:áÀû–¤Ÿ%Eß<(Þ„o:š.ôAbù´”!5Q<¸k—áÈÌ÷Aìf¬k0‡ˆ(‰/P>w¸0¼õµ(S‡ÒXµzêââê¼8>8Hì5l žj?GoŠ¡V} ÛÇD¯Kê=ÈÓŸxSñÃBSWMξáaW6]¸[f,¥…ÐNÕOpdÐåwžÌ¥?É\ãQ…Ë“`ôªöÓ’OçSè2ažq)íÔ?­ê»º§ÃI˜òݸ0ô±¹ö‡™Æûê\6­Ã™ ¼lÁá—wáÃ8¦_ï}“ã›wø@Ï Ož£è¬òüéGn7î<ÂZW=ß–Ÿ‰-\‡w×B-øì©Nß·]W߸2—ðP[h:|ÇwÃD ö†0IAºý¦@»¡Ÿä$ôP?ƒµ§¾Ôîv14ì”èV
-ë/ˆALçœ/ ;ztà~‹çò $‚|„Ç«líî³_jp¼X.eÒØzG \‚¾•©Š½Ë´Y؃ôÔ`k¹.ÆS;‘–Ä¿^Òk7ßâ Ä#µ¹‚ Œ¢Ä‡¤/CEE”c×Â!€3ˆàÿŸo±
- "}9Dˆˆ¬jw>@³zæÛ‡†âëÛ gxß©[ñ>l^€7à&¥èÞvñ¬«^
-µp¬"©â¥€.LðÃÀë”za¨°IšLž¤éïÜ%ó~ضþ딶fÒæÅ8 JrU†ÿ6–(æñÖä‹ÿ;m¨v‡”œŸ¨ij“@)d\Õ/㿱³þ?â`endstream
+xÚ­[_sã¶÷§Ð[éΉ!þÉÓõrII.é3íL’ÉÐm±'‘®Hã¶ùîÝÅ$%AÖ¥¾ñƒÈ¸X,»¿]ÀlVÀ›)kÇÝÌ8™«‚©ÙbsQÌî íë úÌc§ù´×_®/>ûJØ™Ëæzv};áeóÂZ6»^þ”éœç—À¡È^}ÿæ««¯|ûòÒÈìúêû7—s®Šì««o_ÓÓ×o_~÷ÝË·—sfË^ýõåׯßR“<þrõæK¢8ú9Áôíë¯^¿}ýæÕëË_®¿¹x}=Ìe:_VœÈ¿.~ú¥˜-aÚß\¹pVÍà¥È™s|¶¹JäJ
+)ë‹wNZý§)ýI.r[(5›ƒf¸`æô°4DÆGÃr#ØÁ s«s)
+3›k
+ÖÎ+ÂÙdE‡qµår-¸ð+²n庩úuðé" -|ÏïÊ~±ªºË9 ••Í#>èlÕv=‘Ú†(eCïW?|¡eK-@ÑDÚí{"ßR»ÉVõbEýª¢Æî±›£h Äœ±Ü)Ž4}µÅ5&[•>X?.ꦯ¶·å¢+Žg_U¡¥\.·—ÌfU×Uñ#" íÕ’è(’¨yÓ~¨–/€b¥—ŒT5ÕítOiUʼ`.jõå«oAL-³j]mªu©UVwDÜÝ/ËeBbß‘dú¹(DµýI]жX•Í]ÕÁÔµ’Ù»vã…£ ƒ)i7‚nA8Ù¹3ž5mO„{?Nû¡^VD(éç¡|¤ž^ü²…oê&t#Y((ÿ¾XWÍ]¿
+¶·©uõšƒÂDs ‡›ßð쪡¶nçm{áÍeW½H,Ó&7N¹ ø'—HäFz¶Íú‘FØ [@˜h³9ùaÓ«äDÐÿÐDðio"/ˆöÏî |Z×ïS¶ÅD‘kfíTp¿í‚¹“QîüÐÝI[ä…sn6õÏò<\„:›ïœàl m̾ýÿ¾Š‚0ðm…â°Üæ‚ÍÄñ9`Øß¹´„Ö`…#Çýå°†cÓ°
+OàÕè©Ùmnª Üö¡‰SòݶÝÝï‘GEóçÌò€KK}8Ë9ÐÁëè^&f‘ŒSŽM~Œé]{S÷5†~ïÞš%=üØ•wUÂ? –ïGºN†RÛ_ Îw éìx!XèØ í (-Ö!¸£¿6a.>¤­© ÆʦZ‡fŠ®.»©èw×ù¸ -7D¡pI´r –l[öí¶£öÈa d#….rÀ­‹Ò‚•A‡Ú`X„_Ka M¹©ˆÔUÛ`X€mÚhŽ
+ìBÛÞ øÙ8;lq4ÑÔð §;^ À_ a¼m–‹Ä*
+ÜŽ“ôÎåX -ãSÄæ†/Ö<$–ôzýêzïÚÅ{ô\øŒ.¡jêæŽú”L†„î¾ZÔ¸a5ÛHj˜T„™õý!ÒåEaÅL8€/LɉÝfˆ@$ƒçÇù”åq"¬²3l%ô!&a^ "´vûC:
+ìë–ÔöØîÀ¨œ‹¶8—²^D™]
+8“CÌÏ‚©¬šxodHæ £Ådh˜Ð‹écÞAÏöþ¦\¼«<@°|…+¢í¾åûôèXYXÕ2Q&pc9dw9KHùl½!ölÓŠ·ZÉAñ)61—+&‰‘º›„F€“ª
+ŸoªQ¢QS ó„íe ; œÎÁ$$ÌÉçoûã|Ê2<3˜üÐí økj™ãÓŠÎ ¡?
+ šF„¼Á¨5Â^nynìó3šá|Â1…»y®%(9öònw™"L˜B8öºiCØJï
+ Ï;³+ôBÄþ©00|ZB‚¹±¤·„)re|2 #Ã3,£¿˜Hxj?@¶¥Ì9ñi€ îš–Þ—1 </Qâ ’2_Ø!Å°‚¾|™ðÙtºŽb¦uê(†ê(&ûñÍÕ?¨aÙnʺ!êXT1ûEŠ*&Ì^AÁ÷ z06Ev¡¯¦í¿ó):Ž‚g/!ŸŠÐTÀläaÍÏÇ«c¢§G­
+)¢>¾Z¾J¹–s-âšùêu‘Ûb( ¥ÎÉT.yÌ•¨Ø}ÌE@VÌÝ“á܆a"ö¡òx2Ð;3d%C|†Øl²7m´ãƒ¥×Ò&Pî×eÎxÓ‘Êé¿Û5ß¿£Ö æàlÐàöòÇwíºä8‹+
+>^w]þ@Sˆ;†Ù©Âþ]ÃÛ _îï×µ_a*¦£@¬úúš;4,ë-ôíö10èÎM«oÚc°6x®û®Z߆CØÈ ¤Dôôî/(”k—ÝoëMée„—rׯÚmýï¡Îí²M…¹î6T ¦²w¬ìù*ºG©áeØóðâ÷Gèš@˜(º _"Dr†„þ·@$nŸï#Ãù„cÂÿZ
+Üæ’=±@d´D÷ '9ž™0Pn J§>µ à=5œºt4åèK¼ÏD´ô[ýV-v>bÀËä  Þ(Çú‚s
+ؤ܅/Ó„©€¥TÄRj¬L‚(`”’OÔ
+:êFz݇á0Ä¢ìüQQ‰ÅYlúüsNÊ0FWà,ÖêðÝ}óèyàY®»–ú=ø›âä%F¡\δ²uõBÈ!M¯^à$bæãpŸr|OÖ3'™ÝìÂòõ·2¹¢;ˆHZ•þȞʔÍs,%w¦( -°¥)KƒD ¯Ï>ƒ¡¡x=hà>Hí#GÓ(—²
+ÓQ-—ÓLVú0í¿š\_àrzË6/VNŽ8|
+š8˜ÐàË-›øƒ<
+ü¬ê“®EO«±˜6‘÷+ÀêÀ:>T©Ó…2ؤÐ`r·˜âó×f¯¢Å=Ð¥ßâ GÆ‹9]•ný·Ä‘ovõºGGÓxF‰m ²Ï’Âo oOn:Öæ Ô÷´–!1ƒzpÕ^Äã›í¢ÚÝÔÖ` 1À8d>GýÜáÄð¦×¼LCcµN˜}ÏX:q`XlX<ÉþÃÑcú4¶E<°.ÃI÷¨ÐpÊMŤ®Ú;mÙtñB™u”}¸©ŒÄɦ°¼ðd_„3ÌQøL z/ë0,9 x§B7‹œKy°¥–õ]ÝÓ±$ ùî0±nzÑÝg]˜qS#u<+— xüòn¼4úô«] yéD×®á\žïž<?1¹–òü©GáF?î][ˆWá¶þ¦|Obá<‚¿öw|Ý:îÛ®«o|™K°- ¸#Áß*ˆ¾!NR”„æ°(@·ô3Âœƒ„ëgС|â—ÆÿOv Ýi÷§”Â…kaÐ
endobj
-1591 0 obj <<
+1600 0 obj <<
/Type /Page
-/Contents 1592 0 R
-/Resources 1590 0 R
+/Contents 1601 0 R
+/Resources 1599 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1597 0 R
-/Annots [ 1595 0 R 1596 0 R ]
+/Parent 1587 0 R
+/Annots [ 1604 0 R 1605 0 R ]
>> endobj
-1595 0 obj <<
+1604 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [55.6967 314.0348 256.3816 326.0944]
+/Rect [55.6967 182.202 256.3816 194.2616]
/Subtype /Link
/A << /S /GoTo /D (rndc) >>
>> endobj
-1596 0 obj <<
+1605 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [268.5158 314.0348 332.4306 326.0944]
+/Rect [268.5158 182.202 332.4306 194.2616]
/Subtype /Link
/A << /S /GoTo /D (admin_tools) >>
>> endobj
-1593 0 obj <<
-/D [1591 0 R /XYZ 56.6929 794.5015 null]
+1602 0 obj <<
+/D [1600 0 R /XYZ 56.6929 794.5015 null]
>> endobj
406 0 obj <<
-/D [1591 0 R /XYZ 56.6929 769.5949 null]
+/D [1600 0 R /XYZ 56.6929 650.5742 null]
>> endobj
-1594 0 obj <<
-/D [1591 0 R /XYZ 56.6929 752.2372 null]
+1603 0 obj <<
+/D [1600 0 R /XYZ 56.6929 622.5916 null]
>> endobj
410 0 obj <<
-/D [1591 0 R /XYZ 56.6929 610.516 null]
+/D [1600 0 R /XYZ 56.6929 480.1938 null]
>> endobj
1342 0 obj <<
-/D [1591 0 R /XYZ 56.6929 579.8656 null]
+/D [1600 0 R /XYZ 56.6929 449.2463 null]
>> endobj
-1590 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F41 1238 0 R /F22 977 0 R /F48 1258 0 R /F14 980 0 R >>
+1599 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R /F49 1258 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1601 0 obj <<
-/Length 2364
+1609 0 obj <<
+/Length 3000
/Filter /FlateDecode
>>
stream
-xÚµ]sã¶ñÝ¿BòLˆÃAsO—‹}uÚ8©OyºÜÜP$,qÂE¤ìªmþ{Xâ—,·žŽ¸
-à·qî˜ÖeRÊÆ›C.Êg„‡,\xݾ¤H)^ÃŽ"Lj†P-ã$Ë33gø
-§X‰Ó"+³ºÙÇÎ`±zĵ¤*j7‡þ"*»FŒõ¿;½/²¦ÉÊ͈<ʧÝJµGHÐ^‰¡ž÷Ò¹®»*4Î4[X¬qv}hp²¬œ©àÐ} 1ÇWjy çØYý¸Øåú;qŠ|Y¢'ý"pIyŠ+³˜ùÝ>{Dü®×lY·¼ÄnoìlʈE[y0 ¶ÒÇëÜy_UæG„ÖÀx6B`ôO`1-É+=]9O7,¾)ÞXRú–¥ÿËÊƉLÜXœo*¸´m˜`GpE@ÌZ'{ÝLѼ]ÔÜŸçbœ¯ˆA'xxAðÿWx㜟GÎÛÌéSB€#•˜ |–)2fÉ cüÔ[gM©ƒÒìØí²bàÑÚ7
-â¯a@Q0ž—uÚá{ý Sy¦t:ÅJÂOz `¡}ò­vX—¸˜Pkµê2c”¨@Å…„ Á^Êh!Q .æ%ßœÀgb&›Q™Ä%U’öÆn Ã)Äñ¦ÚáL®ŸìÝüÇ’?“á`²+'ÌG*‘,usñŒL9ˆäªê)ÓÏs
-YÐÞX*ÈY<’Ë¿êc'¤ÚsöF öæí#‡-~ gøy=uÊRDø\]ÒxäÓ‰Æk¤Ž*`­ñ qgÀ
-4k¶„á-íNŽÏƒŒ+iUÄ™ÛïÊE€eöÇAÛºF¦Ê&{<bÅ̓ጱ¥uM¾¼kp]€uKϸ6é`‡Œñ¡¿¼ä¨p‰BÒ¶,ru쌗RBŸ{9™8†"‰»Ð€%ÈX·oÁz‚Žõ¸™q§âlÕZ°/Ût &Ü›¹ ժȪ‹…AˆKSä¥vøEÜ$[\@ôÀdÒ~›gÈ2¼„,+a¸ÞàvÜ2 ¼:ªÂ=’±À°¾Ÿ4®­µ.q®`'Lh+I3Ö€e±£ìD Uge‘:ñíØ•C3<£¤[¾èÖ¦PV¢uëÓsaìܸ(ŽyKH¦o÷mGÐëSœqí@©ÞÁç][‚*X÷5ú”u›¾hÆ[õÁÅl§ÞŒ¶YQã\»ACé’5Çwñ<6qˆ%Úª \ªªå=ÜUêöv»ÊôD¦O9/òÁ­(ÞÚ¶ˆ¯HåŒDð–
-9U]°š’„bOvuƒ¥/6CJ
-¢¢P\"ŽHqîÏ n÷pz5_\g‰Éÿ–˜g9ƒ¬te©ó“9 ò刞dü,½6º‡#9xmÉTˆpVúC°³±ºŽ(Ä x–0YÚ‡°Qom¯FŠ®Oaœ!žp͈é»i-`Ú%w±4=¢âP Ry(Ö6À‚­¨å)DgÝóÕ’Ílü‚õÎ{sq%ÑXF®)Y¯2ÃØ7°{M6dFÙÔÇLð±…z!ѶbD‰¶64"ÈÍg¢V
+xÚµZÝsã¶÷_¡Gzæ„à›`ótI|W§Í¥õ94“¡%JâœD*"uŽÛéÿÞv‘}¾æ¦ãBÀr±»Ø–3bæ ãªÐ³¼ÐÌpaf‹ÝŸ­aíí• šy$š©¾¹¿úêr³‚VÚÙýjÀË1Ý/ξýóë¿ÝßÜ]Ï¥á™e×scyöÍí»ïp¦ÀÇ·?¾{sûö§»××¹Îîo|‡Ów7onînÞ}{s=Îx_‡g^xsû×½½{ýï﮹ÿþêæ>é2ÔWpåùíêç_øl jÅ™*œ™=ÂÎDQÈÙîJÅŒV*Îl¯Þ_ý=1¬†W§ìg”cÆÉ|€RNÐÌ*©‚»rWJºÈË'¯¼$/iËŒvòÔÍrA4CÆ¢`<·9Ñ<¶‡ÕyÖ >éD´ËÜ+4`WïöÛ'œ{xBªê÷jqìëf?û I¶hw»²Yâκì,5XMiM[@¾ù¢mVë
+6¶œgórBÞB2¡eÔ©\õÕa,fŽ¯ÍæªÈY! ˜VV#Ãu‡:ÔM×—Ûmµdš•cBJ¤z_7 P@q4Aá‡bh ,aæ$;ûP=MÈk8ƒãJ®ª²?®…ˈ»Ç?ÛÆTq‚õU³ô‡voñ ¢¶'åC¹øðXnK°Ün_öõÖ»rMÃv…O´ÓáX{Ž¶*Ë°cSý“s¹>€kë]Aaf[uÞ 4A‚1a~¤–ŸX¶UXrYÓö8µ)?Òb‰+›z½!êj/W¸âöó _”á¡ÞÖýÓµ"c^x›ýãº
+œ—åJÛ¡Wùˆ˜r+Ë”r"†mÝoÒ®$|ûØà )X¯F’x­Û Œàf3ÜB:)f0Q'+ÅÛ. !Ü;Òd÷“a"„9•ø¬8QVFBt4²Ô6štSv¤IOƒ}uØÕ]J]ÕÓฺY³¤9 ²ÑÉ‚•ªÃäÑš(D0Œ°’Ù\æ,B 'r‡œ4îx™Ž-g…ÔQEïnË C((ÂÅ„ŒéJe‡k—›ó+lQv°·À5p~š\,ªŽ^¨ûp0"»]Ẃhëê«ðÅ^‰™@oUý^SÈšP `)¤!Be-èN*{å;Ê%šiŸ¡G–òyL.Š8Q«³¶pG™°TÀšG RiñéH ŸŽ|áð› ªEž5U(f0÷_$eIž)§µ3ùH–O„an>÷Zϸ¡)äAšºÇ4x{ÜãO’hY>ÄwCMÂÍ`(˜ö±8
+Ê!Ó—sŸ5û²nº8_á
+·HÐS›Ž¹éí¶›Š
+ý,ÏJºžà© ^<û¯§Ü•é‚G5Xb‘âb ×H–€aÄr hÈÓz0k
+áÉ ~
+HäÒ:g"¦262œ†äÑÈQ‚ O°Ìê„%»pÊx¬WBÉP1½Ã ÛW‹ÚKr„²§ð…Ų?£Þ·ud÷è³^Ä:öÇ> WäÒ~¡ä$tÕ,ÚcÓÓ¾„Yç
+’¦tâ,Õ>kH£>GœÜ‡^>!ŽË³U¹ðEæ¼\Î’y`¥\îê¦îú„a1TXÀ¸Ó"AI¤ ž¡œ÷t‹²92­´4$`ë
+5¶Àã¡F'"ú…ãnwÎ nÁÙ‡c“>ú™PÔ<ªÑyž½ñPÐÏV¿—pç©|©‘<Bp3´g²ÀtêWR°øùý¡þJŽÿáñȺ(KIï–äS#ˆŠ©þ¬B@LE$ÃÑtÃa,d÷êð<nÁì3#=§H'ÈøÇóM``‘Ó¯õÇÿºA /üõztbåvÝ¡mvH ~Gôõ”-<Þöïœl>É÷?Ïå8œ+lÒܽ ùÿ+¿IÑ/cYš†Æ@cr5‘!`„%
+æ#IÈ݆ÜiI¿Ó-5ý`¡8ûÞ%üèþýí[yœÛUÕyÇDs°¢!ÔBa
+<²<5:€w×~!ÍØ ¡Û<cS9Ýø†ŒâœI®Ì 6Môóá —ú\òÙ[p
+åð›¹Ò)jB@BßïéÓˆï íŽ;$jŽ»‡ø©¿¹œòsn­-}çÑÙççSIeQ!,¨R„¨ò?— þ+üâY±5›0v‘›½ÉCçŽOX;,OŸ²|ƒ
+ó3)ËB³©<aËâ,_)a™œ,ŒÏ?Æ|qŠ çCŽ—KùN`!Üic,¡!MáÜ83üUDÌVˆQc!,´t´Nð~p6ô*Ö là
endobj
-1600 0 obj <<
+1608 0 obj <<
/Type /Page
-/Contents 1601 0 R
-/Resources 1599 0 R
+/Contents 1609 0 R
+/Resources 1607 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1597 0 R
-/Annots [ 1607 0 R 1608 0 R 1609 0 R ]
+/Parent 1587 0 R
+/Annots [ 1615 0 R 1616 0 R 1617 0 R ]
>> endobj
-1607 0 obj <<
+1615 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [406.6264 463.8552 456.8481 475.9148]
+/Rect [406.6264 308.353 456.8481 320.4127]
/Subtype /Link
/A << /S /GoTo /D (tsig) >>
>> endobj
-1608 0 obj <<
+1616 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [140.5805 452.5676 196.7992 463.9596]
+/Rect [140.5805 297.0654 196.7992 308.4575]
/Subtype /Link
/A << /S /GoTo /D (controls_statement_definition_and_usage) >>
>> endobj
-1609 0 obj <<
+1617 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [103.6195 409.8565 159.8382 421.9162]
+/Rect [103.6195 254.3653 159.8382 266.4249]
/Subtype /Link
/A << /S /GoTo /D (controls_statement_definition_and_usage) >>
>> endobj
-1602 0 obj <<
-/D [1600 0 R /XYZ 85.0394 794.5015 null]
+1610 0 obj <<
+/D [1608 0 R /XYZ 85.0394 794.5015 null]
>> endobj
414 0 obj <<
-/D [1600 0 R /XYZ 85.0394 769.5949 null]
+/D [1608 0 R /XYZ 85.0394 621.2625 null]
>> endobj
-1603 0 obj <<
-/D [1600 0 R /XYZ 85.0394 752.3146 null]
+1611 0 obj <<
+/D [1608 0 R /XYZ 85.0394 596.6446 null]
>> endobj
418 0 obj <<
-/D [1600 0 R /XYZ 85.0394 717.6455 null]
+/D [1608 0 R /XYZ 85.0394 562.0119 null]
>> endobj
-1604 0 obj <<
-/D [1600 0 R /XYZ 85.0394 688.3332 null]
+1612 0 obj <<
+/D [1608 0 R /XYZ 85.0394 532.7155 null]
>> endobj
422 0 obj <<
-/D [1600 0 R /XYZ 85.0394 619.0499 null]
+/D [1608 0 R /XYZ 85.0394 463.4686 null]
>> endobj
-1605 0 obj <<
-/D [1600 0 R /XYZ 85.0394 591.4512 null]
+1613 0 obj <<
+/D [1608 0 R /XYZ 85.0394 435.8858 null]
>> endobj
426 0 obj <<
-/D [1600 0 R /XYZ 85.0394 513.0222 null]
+/D [1608 0 R /XYZ 85.0394 357.4932 null]
>> endobj
-1606 0 obj <<
-/D [1600 0 R /XYZ 85.0394 482.614 null]
+1614 0 obj <<
+/D [1608 0 R /XYZ 85.0394 327.101 null]
>> endobj
430 0 obj <<
-/D [1600 0 R /XYZ 85.0394 275.2452 null]
+/D [1608 0 R /XYZ 85.0394 119.8012 null]
>> endobj
-1610 0 obj <<
-/D [1600 0 R /XYZ 85.0394 247.6465 null]
+1618 0 obj <<
+/D [1608 0 R /XYZ 85.0394 92.2184 null]
>> endobj
-1599 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F41 1238 0 R /F22 977 0 R /F53 1333 0 R >>
+1607 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F49 1258 0 R /F42 1238 0 R /F14 980 0 R /F54 1333 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1613 0 obj <<
-/Length 3170
+1621 0 obj <<
+/Length 2610
/Filter /FlateDecode
>>
stream
-xÚ­]sܶñ]¿â&O§‹Á’Õ““È©2:Êt:qÆûÃéXIõȳ¬vúß»‹]€ä‰g{¦=p±
-‹®Æ«¾»»øö•ÎERXewÛ­<y.w›ß—6QÉ%PËïß¼~uûãoo_^féòîöÍëË+eÄòÕí_núñíËŸ~ùöòJæF.¿ÿóË_înÞÒ”eßݾþ0}Î}{óêæíÍëïo.ÿ¸ûéâæ.Þe|_)4^䟿ÿ!¸öO"ÑEn0‰,
-µ¨/R£“j0û‹_/þ ŽfýÖYùI‘(mÕŒ
-8dßÞßWÍ=©è×¾ì]íšž†?¸wB¨¦ê«¶!LÙlø­+Fâ‚£”I¤ÌRÔÝÎE††EJ$BgãšÀÁsb:’×usZgËuÛ w÷Çå̗®Cl¾,iò±Ú8‚>–‡ÊõO4h·´*^Ú#ð~ ¶í€~çh-éQ;|t4j´üL-oûnæv,E ™1Ûl 3×»JA‡&ËõTûCÙÁ‘Jƒ¼»®]WpïÇrÙû‡cOsµëwí¦{£¯Kž‰7Â-¤2Àv¸¯P8ÚÃhÏK«K æõ4O×F¨ß]¹\—M@9†VŽ¦ŽÛLÍ• ò±òtß3'¬"FQÁEïÛÃÓŒ¬R‘Ø<ˆ4JɶôíÜÞ­Ùnwí#¨üöØÑ`½i: %à·vZ2cK²% ‘¸ {[V$`Ò]Enô¦Ù£,ÓtÙ6sWKUR¤‘çÏXy–h™æÏ­IWÈYjH¾ã/ ˜ 9§#lÉëê²a¦ØîOV€h’qåÂDÇâÕùX6=^ýJ‹|y»%$(pXã9ó’É!ŽZm¦6Ü´3‘:ÉTž~•@laNòb°£¨Ÿ¹†hPÑê±Úï Z¹?ÑA“ØI EV½š c>ÿÛ_RIžûu£;Fkõ 7n[÷}Ø5ƽïž: z=EnÜêp¶OCýô€cþ½Þ¡ŒŽhŽûý”ÈÕ ³'‰á$XkÅ"Ëýš[ž:BÈ2(C@ ÏdŽH4Xü¶Þ;r ÁÕ¾ê<ëˆxôÑ¡HÔ[ã:K1{^°+ùœ•b3Â{(7a#2º™4áfÒ.s¼™V˪§™GO&¦Ü‚&̲k=#Ì|DSh¾Xu|EvJÏ$78â1œ1¹ÆßHp0ßCÀö²˜Óé>3Iª¤™*ßërrè9ï¥ËãÊÀ@@/ÑZÓb:ŠŒ8"åÜS”ØÄEÝSÓ—Ÿv?ÙxKÕЗ3©žQ*ÌF¥|ßòŽv²3Î5ç$æ8:`úž¤…"sM˜È& «íIXy§T:+¤UP¥æA_Ws |ÑOˆ˜zŤ’sM÷àÖÞžs̉A}—&Ö``ÕPÍʼÕn‰äêí.pª ?ø…ò㫳—!<‚â™ÓP_
-i
-v‰ªÙ¶sÁ&OrYÄ`#Œ|AöB¯—é¡©¤à @-³ÁÞpà#-|£%ã œ«Ý¤Iò4$5l6s®,’¢Ð6ÆH×8ˆõŽOî«šO
-Á bòðÔ&¹ÎíÔBÁcØç
-â>o+àf›3YûlýœÇ$xÞrkN-
-C£3Wh UF–Ù/—ÒÄKûò€‚¯¶‰ÑÙIyØõ-ƒ3„v‰4§ù) ô\ˆˆ‚TàSÃlè™YÅ`˜*õ…ø•²§.‹dÇ®ª£«âëaï~01`*Z8À£(¦ÇO0@›~14ãä×B'ÚæjêØ#Q -%9z»ß“¹(~ðUØ=¬Õ*¢WíGÞÁݵòM|÷H
-MK'ÔíøÜMÙ—Üm@”fâ¤&ärTPe_´«ÞWE‚š
-ÿÝñ,y
-üW‘‰>·ÕžÿÛâÞŠÕÕ7„BŽ4}H)Q_ϵ‡ªé¯¨cÅuO®»>÷ÿ+ÐMá?Ìü·‰ˆ? üÏÿÛ2üãOš%:ÏUü·•©b³<Is ÂLá]ÒôçáŸ`ž³þ_€ÖˆÃendstream
+xÚ­]sÛ¸ñÝ¿BòLŒà‹$Ø<åröÕ7½äêóM§“d2”Yl(R©èÜkÿ{w±
+ŠeÒèg)$Í“S…¼èý(Ú'f®>}¶:–XúZØ?ÑA£ :1Æó,Û5Ò틀̙1nÝÀµÇde×Å¡ê®!îu3¯ÆHWâ=ŽÒöiIp¨!¾—›ÐýÞw7c"W'Ìž†“d­ O5Ƹ5· 6P¼ïªÊAçÐÆúdˆ>qÂàLçˆD‡Åoã¢! \TeëXGÄÑe„"]0oœëIÒˆ©ü‚MáÏYX 6¡¼]±o '<#ÉD$éÜ dJÎËŽfŽŽLŒ¹M$ó¶q| 0ÓM¢ûbëÿŒêÆ¥š(npÄ1œ1ão¤8˜ï a;ÝìËÙ>K˜–"{ª³ Ô8dßùº§ç‡ê €Q¢”–E=ÈŒ8"ã<P–XÅEícÝ¿Œm8L6{¿¥¬éë+©š0*ÌF£üÐøÍh§ŽÁ5$>Íùì€å{T:È|žkÂD6iX®OÒÊ)õD®©„«¢ öºš²hà‹–8BÄÔn“
+_kðnT¢ô¾Æœ¸ôwš¥ &V¥Y–ûäD½¾{»\‡.à ~¦úøÍîìuHîÞå8 ýÀM(‹A™MmÇZÞ6>hI_|¨‹oÔ\Œ» v*hBù{E„›ƒ—«ðzÛŸýáA¾Ô Š9Øp;^é`E ³É™HŒgýkˆ!$—f]¦i(³¡†éí¡íh®¬—ÕMDa} !VôË¡í8¸f&}+ضxl ÙÐUV¢Ý·#¸Èõ4b}E×"àSÏÁ
+Á bŠp2£L:Ö@¯xLû>AÔM7Îq}L»ëî#*–E‡$Œé«­À§:LçÞžÎÕ$ËÒPIÆ #Oû„‘£Nte¼+Óˆ$‰Ë¿»+ädLÄ«åÃD†Ø†Îa<Š1H»JrW²‰BÑZÌxhœÛ‹ hqT>^¯ëXˆ'+Ô袵µ¾›U Öÿ iÉ™©‰þïÚˆÉ02I§”­²$*[e¨âjÙµ4I®‰«ï¸ÌÅLær&~@Ÿi‚xÀHS˜®ÜÖ¢¦Ù>Ä
+¯e
+žå›xt,MÓÁ ž¨Æ–5¶v!™¦g‘óórèS%¿•;5Ó™
+™ƒT‰§‘Ov…k§“ðƒ3d#„ÅòóaGó½½p¦Y÷špÓ} @/­—äÙIžÄZ¦2éÆÇe×ígÒ÷Wù+@hX€^Ÿeó—¨mƒ ïÚ Pµk²K`¹i
+;éãIÎ?[» çÐÙ~AS­ˆ†èuä
+5Êú¤íºRØ· íyn†$gYÛQ4¬Îü{—’fþ×ü!´°ë&^Ya\z¼»lÁ—vê&–N3ßA"7ÐÕŸó·€<Ï‚âÑ6®¶¢k&NJ5K²‰säÔ9ô?AûœX
+jL,TØ º?ÉPpŸòs `ìœ@<?ˆ?-\)ä357–Ô¤\¢;'‹w"tþm÷€[ IÄÿ™{þ-šò÷ËÜþ@gRa
endobj
-1612 0 obj <<
+1620 0 obj <<
/Type /Page
-/Contents 1613 0 R
-/Resources 1611 0 R
+/Contents 1621 0 R
+/Resources 1619 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1597 0 R
+/Parent 1587 0 R
>> endobj
-1614 0 obj <<
-/D [1612 0 R /XYZ 56.6929 794.5015 null]
+1622 0 obj <<
+/D [1620 0 R /XYZ 56.6929 794.5015 null]
>> endobj
434 0 obj <<
-/D [1612 0 R /XYZ 56.6929 696.3453 null]
+/D [1620 0 R /XYZ 56.6929 540.0344 null]
>> endobj
-1615 0 obj <<
-/D [1612 0 R /XYZ 56.6929 666.0554 null]
+1623 0 obj <<
+/D [1620 0 R /XYZ 56.6929 509.1847 null]
>> endobj
438 0 obj <<
-/D [1612 0 R /XYZ 56.6929 459.1977 null]
+/D [1620 0 R /XYZ 56.6929 299.9088 null]
>> endobj
-1616 0 obj <<
-/D [1612 0 R /XYZ 56.6929 436.7104 null]
+1624 0 obj <<
+/D [1620 0 R /XYZ 56.6929 276.8618 null]
>> endobj
-1611 0 obj <<
-/Font << /F37 1042 0 R /F41 1238 0 R /F21 954 0 R /F22 977 0 R /F39 1178 0 R >>
+1619 0 obj <<
+/Font << /F38 1042 0 R /F42 1238 0 R /F21 954 0 R /F22 957 0 R /F40 1178 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1619 0 obj <<
-/Length 3660
+1627 0 obj <<
+/Length 3991
/Filter /FlateDecode
>>
stream
-xÚ­Z[sã¶~÷¯ðä%òŒ…Å•7OÛ­lÚlÚÛ>$™ -Q'©”·ÓÿÞsp
-=Û‹.þÞ/8uŸÆäg”eÆÊ4"@-FܲLgéej2–(©œ÷MYuóEÞëºy¼š'œÏ‹ö+dír.Ë‘¹,3FºOþë_ÝJ9ZÃd|S™›s·)ü¤ PšX˜ŒsÚÇv[¯#k)Á’L(?mY´]Yå]YW üLÎÛüÐÔ^–Í•°³bѵÔÑmüÈb“WU±õ½õÉ(ìÝ;j w­’Ù»°JîV]vEÕQOFúï‘vh«Ù*_”ÛòJ̺GêÈ[’žL¦`©é;‹¦¼/–Ws¥³YYѳ‹
-,5,Ñ`P˜dÒ$©Ÿ¶Ëýšû|]0Ti2ûKU}/‘Û•EKïÄkT]Ú°L¥A¿MÙ\
-0záç\G–s%D 4×DËPI*_ºÊ./·1R8Ó=¹g ö·Ì‹]ãH%Ì(i_JL~è6g‰y1Kg•+-#J_ºÎv•¯bÏ24×`¬ÜÀ‹7VÂת8¶1’K3þI† ¡ƒÝ‹}lÉ«íÇV1~¢‰* ,'“楤 ®
-€©ø=ßí·rÌ ì‰¤rÁäxjpRŸ’ãËà ñ #&7uPµën#òR\0Á­üX§9fÅÏÇd¤™Œ¥†ûÙüÚp“øY÷‡Ž¨#_ˆTƒÆæ>É4DyÜLÝì:nU¥6Ë&Œ°cÞTÃô1’:ûPæQÊŒTúeƤlj#ÂÌ‚|€ârt6q
-m\ž@;ùh+gÄ@û‘‚iŠ¦VöäaÛ­ Óš+;;TõØŸ·þI•­×Þs Ìãg{z_€®¯)ßì)ð®ä”
-‡Íëaz
-@ÉF£&…鬌rÖAkQR|­lõH}p*‘ðv.}—[ªäãØ (ݧI$ïÒÝ®ýú“û””ƒ3!
-™ÇÖÆ‚äýÁPUîI^ÕÛm}t—
-ßÚøFp¾†}îòt{áÂM"ÞµC†¨Òx
-Ý´™U=B(«'‹Ããì*ì
-G΄ҒsÐ}Àhù€^.b ¥˜è/Gé$,MiÕ…'Ž D« o삇ޮöªÇ­äi®7J¸]…¢?&ÓÀ6”û\|®XñT  TÛJ—÷NË9XfÓ>ܸÀL €bçÝ5 Tcù¢VÁùë³ÂØbjèà˜3,ìò·0=!XûtëT…¸Ó}6ô ÔïòÇñ&#x €¨%šÙÄœä±TÁD˜\V¤ý•†Ç— _ྰœaÑÏ×Sðe_{tTðµ-«E4LIã"}"*¾ô ëÂl¿ƒ3¯0$Œ†c etR&›•P K•ª¦ÿUÈSj’”‰Ô7®b´N˜–üÄ£xüv€ŒÉåË×{3h!ªS,ë†ß à›+¦fö§‡>òV—úÊ/<Éê¨íL=Ŭ}‹£ ܼ…\ 5\f019(-™}=äðLñŒ-c9ñÕuŸ:UáÎ.e+ˆÓôÄácœ‚·€5Ðt¸/Ä0³—¾x­{ßNß\gÉ™|WªŒ)ÙƈÇ3 /z9Në‰È§ÛRá[Ιˆà„¦h»{Ÿ)_{ÜL Sî~e|D­Blë• ¡f¾=æ-õ:ECŸ#·ðS](¥‚•À(ÅÕxQ˜ìJ Íkª á1@Õ@šÜ›[0 e§‘ £bÏ7ÅP[7¤axºÀö’U$|3š›¸ŠFÔ;Ò¤¨j
-‹Ùzêm¤ß÷sp³œa^só2›(êYUÑä[%x=îkrá­™ÄÜò|Üv7’R¢F'X.84Ô½÷WrTIvú†ÞÅ&2D ÓET¸‚–w
-OìÃŒgK 9˲>}¤z F«ü°íˆ
-Îä)=à”™âÂŽéyòÛÅ~ÒóT<Y‹r®ˆi ô$R?“*x þ.j?’$¼zå3Œñ [¹¹·
-¢Í)åý¯ƒŸ’þ?ïÈendstream
+xÚ­;Ûrã6–ïþ
+W^F]eqq%Áä©'Ûôì¦3ÛÛ»û0™JÑ%±Z"5¢dųµÿ>çà€¤ Ùî”ËE
+W>xÿáßßQë‡Ooúéí§7ýü§›wŸ#.c|¥ÐˆÈßnþòWq»´ÿt#2]:{{†‘ɲT·»cufÖ¡g{óŸ7ÿúOSô³ÚeÖ©"A@%S´e–k¥=êCßtmh•ùìÔn›]s¬—ˆ|®ÆŸ—™1¥ƒ=ñ»cG_´Ý‘þClÚÙqSóàiw_¨Ý­è6JSÌ>pwÅ;Ž–NdXÍ[öÍßë\Jd¹†'uû#¬Nk6ŒUÕ÷Ý¢©-ß¹9nh$BºíÖÔøEµ­ïpŸ[è@Ïòv.eVZ«óMëÛ|vx#ݬn«]Óâ×ÖÒŽ0ÒµÛGj-»¶¦±süŽvµa3¾¯yøz_·Vè®[Ôõ²¿ø°i—Í‚‚IH §VÅìcG3î«Å—ӞڑLj”˜bS$Õ_êý‘Z÷ô\Ö«ê´=~GoUËÝõoMdx>‚I!
+ 6G”paÉbÀP”ph¬.e^P¦ï°I #½:Ó¹SFäKF2¢†5´”¤èÝvKâƒ<iY÷‹Cs»ï»þ¢jC=ÚúL @TÒ²
+T~}jÑ––…J!ŒÃΊE¾ïR’ê# ð
+/Ó[fªTrBð;2mG;ìºñ¾ËêX­4x Sˆ|*O^Þ€ 'ÊÕ-¾x}Âç†GI› qj Ùw;íNÇy·šßÕ cW/6UÛô;z%Èv@Ýž?8ðú‡7–DSØ_Û1ÀBÂLsª6e Ù¼ŠÙ®ú­ÙvÁ€‘q•Â›¨±Yd[Yoª‡AÛ=rŒÐð:†V’$v…u¼Aó-ïÇC$IKùî·
+l*Ï;õÕ:±ÆSi)ó¬P¹zÑ”ÊÒ„IȤIֶЯÒr0dS©ë¿¥‰f<q.‹Ø`ÜO”¶iÉúž_kÂû×Iÿÿz
+)•pMø¹jH8éþ4©ø†º“ošÄl)±û.%#ûCÓçÇfÇóëþbžÍCÁ\w‡Ç‹¹ó$¸ÿ÷]‚†£xø¬“´.qÒcŸpàXJÆ AÂ%5[l+ðˆÔ^6¤s‹cO)©)¾·»…½õŽÚ
+&‚{u‘ Ë
+Lu
+#™(÷Z`ªøþkÀ¼¥«ÌU.!*^»ÎvŸ¤¯ÎžEhn@XÆ:U‡p e0Á,¥x$›Ii‚ÜžN‹}j•åθ—V aÃâdHN©ìkAA^É{Hq½ÄØüv¥ÕqÎB¾v‘m·¨¶"EÁ\¨¯ZGþÿ×±ãuÔïþÖ1¿^öw‚'O­SB–S˜—â“k7^ªxHs•ëÙ¦;ûŒR'QfEa.Ü2W8 ¦ßn©1¶ô~ æðÒŸöûîÀµ9#ç?˜Ü*ÎÀpºw˜¾¢õìÇîœ@P»²åº=çß]ÄBtÜ<örËàí
+÷Å÷ì‡%{rŒö²Zàfs3u³Œ»Oè5»fì|}wKÏ´ó•x_X=A'[tí*““¨äÄãÊ삵” Ý‰Æ ¯©«¢Ž”@û¼i—ÙS'ÏAx¤¡n»Œ]=HðÒ­R^æ.seq‘o?Ã#UDk™§¡b$"XÇŸ9u‡Mý4«¸Bâ\dñªz×-€ó‹°þSöÌ ¯ËKVRqŠÈ{´¡Ò›,NJ=[
+ž/ý<Rß‚” ÔfÛw¡(IOª”áX³¢Ö63¦þP\òì–¹ÉÊÂéËJÔ¡jÖÜ]•Äx¢êQºÀJn|ñ§m<lÐ:õ¼þ“˜ÚeÒ_õù’’žý4ÈlL„*Ç•¤Ñc/?·uÕsÓ§Þ:tDÁà™>e‚æºy¨—¡hçóß¼4)Ïã+ ¬õv$Ø«Prˆ’͹Ùw)- Å ¿>„õ"X @ y6;ÑÞÕ¥çJím°‘%I6"áðå9ܶ¤kp;_«ÏM.Ù,ái#áòASŸw36ÓEtƒúÐúD —W ¸-ëc}Ø5-ãxö
+…­ÍË üý#½ï«-:Y@`¯6>]Ô¨ÀxZc‰9wröÞ¸À0qÝ1öDi}ð
+n…x»Kû–¯Œ”l<0îËúp¸’âU$«’¶ENåEU2Е£ª¤å Â–Ãh_ü±pàüeí /µ¤I"~àoŽ´WµÃ A;@’âÜrŸíÑgröA›P¦|´S3ÂL;»P4u*‚‡m¿¶Ã#<Ø SýþÜÍQ+­ùpò„f?ÛÓûx}Gùf„ Ž§(¼m^ûÐ,ºšõéPÍSåmäÏUQàÔ’‘(²ääØç%ž!õúæçá€W4p‡]¬N‹
+ ïݲöiµâK2”©å…@$Êüëmw_¡8¹œ½4‹Ç9¾\
+ñ´¦v…408«ÒegoI%ʩ⸱KsŽì€ fß¹‘]-CQÈ9²pnÐÎμ’:¦ŒÇ<)1—7\“ñråpxN±ã0Aò…ªÙ'ÛŽûÓ‘•¿'ç*;±&ÔïëE³
+wgF}hšá$šd”ÍI)gw9"[ÿÔé«xæÔ•@h¿ú}~e|ý¹ëªë¾IžùÎc,üIì?{DÊñ¶EÕ>Rc$6:Ÿ†|ägeÐ.lj9Ðl¾7`%]ÂÿúÖ†ÑÂq= ûüäåöÒ+š›"D¼kŽC†¨Ò˜¼Ÿ ŽB;3Y†< WÈÀ W8r%”VB
+èwÕãx“‘y  !£–ºe7½>˜ªé@KÚWVñHƒmÎ]ž¢B€àÂr‰E?®§à˾ôøf¼öM»H†)…Ì„,^‡
+—>a]˜Í;pÔX2ô¿Œ²ä1 2:)[¤ÅJê<+´›²&Þ
+y
+M^à®àFÃQŒ1yf”¸ð(d<þv‚ŒÉçË׳˜á®heÝpß|°°Ã0k}ÄRWpåž$uÔö¢^`Ö¾E£!Ü|¹r&¸Ì`RtÐFeNÆzÑá™â9[!Çt àÛ»˜:µáÌ®È,V§éɆï±ì¼[ƒ÷ðV$kqf¤¾°ñwôøSÖ¾¹)ó+ù®Òe¦U,ŒŽW^£?¾Å@TÓmÃUEÎD'$1EÛÝs¦®+ç„i{q_™dÕߥôÌ…P³Úž«G¾,é }Üpí²áë˜|/4ç¸:Þ¥púo©.„jà/YºAÜ‚Hh7L2*öüXoi6áêfKû ɪö7§‡¹¹¯h$½#MJ²l—Îí‹œú•ª¼äÌ“C¦®ýöÚÍm3¼®Ÿ¸§ÿ í?ý«€á'¦È ôVÃ…ÿi /Ïœ*‹
+endstream
endobj
-1618 0 obj <<
+1626 0 obj <<
/Type /Page
-/Contents 1619 0 R
-/Resources 1617 0 R
+/Contents 1627 0 R
+/Resources 1625 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1597 0 R
-/Annots [ 1621 0 R ]
->> endobj
-1621 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [173.6261 177.8154 242.2981 187.225]
-/Subtype /Link
-/A << /S /GoTo /D (the_category_phrase) >>
+/Parent 1587 0 R
>> endobj
-1620 0 obj <<
-/D [1618 0 R /XYZ 85.0394 794.5015 null]
+1628 0 obj <<
+/D [1626 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-1617 0 obj <<
-/Font << /F37 1042 0 R /F41 1238 0 R /F22 977 0 R /F21 954 0 R >>
+1625 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1625 0 obj <<
-/Length 2078
+1631 0 obj <<
+/Length 2155
/Filter /FlateDecode
>>
stream
-xڥ˒Û6ò>_¡Êe¤* À¸>MœgR±U[IÊÅ‘ ‰ŠTHÊíVþ=ÝèEJôØIJF¿_€šHø©I‹8Õé$ICIM–»+9ÙÀÞ›+Å8s4ïc}½¸zy$“T¤±Ž'‹u–Ò5Y¬~šÆB‹PÓ×ïßÝÝ¿ùñáf–„ÓÅýûw³¹Žäôîþû[Z½y¸yûöæa6W&RÓ×ßÞü°¸} ­˜i|}ÿô÷ ¢·w··ï^ßÎ~Y|wu»ètéë«d€ŠüvõÓ/r²µ¿»’"HM4y‚)TšêÉî*Œ…Aà!ÅÕ®þÝìíº££öSRè Ö# UÏ€FŠX©$JEèÀðåËÙ<–rÚn--[´5­ó†amV·vEOy»=;s=__ÓªÚ·yU
-´ 7WJ¤Q¤§u^0úWe¶³+Qʯ^az™ŠjC‹¬òšÅ[êÚ–Œ³²>Vض2 ¨i`£ÎÛ#Ÿ8‚<ù’D™ë@¤J†C‰þèä¤m²Ýr›•%p`¾ëìP´švek¶ßÿÝ©QŠ^Ç'òmåÍíHŒX†v^éä VeqôF*Ùeû:¯Núæåšea›o¶vœãÀTxôÚ©<Eß:*i Í¸uÚªi¼¨Çv›—›Nµvh3ØôÑÀÜFl„¼YüQ¶$þË;­{iƒÊ¤Â˜$u8 ˆABêç––"„•t(
-çÅAAžq8‰#ÂXÅ_R´H1ãµaî Îû]ÞdS*Aºvh$$æÉ¥ºQ V¥s]ÄÓmÖà"¡<DH³·Ë<ãí}=S*€­1\Òn1sñDÞ„¢³‡½:,mÃ{‡v`ü§­-= Ï‹ TbH|çD“‚]d<t2
-AÃvì*ވšihcRÆÌKfºeC½I¸ªþÕå~¬r§Ž]¶U}œ)¥¦T~çŒE˜$ñ)Ø‘þ]´t]¨›.³ñ‹hdMU6/fx”]€{$
-,~Ö:ÑU…0©R¬Áü0¢¤O3Bq„ÉeµÛ¹2„E^:N÷‚:×Áÿ¡±+'[ä$‘Ã5¶8ú2›':õ Ûy´ÇmÉq}ω„¡K†M´ÐJ‡Ã¸ËÖ-•ÐóÒ …QF÷…K;èó‘ñ&t™¦£ÄåßÆIŽÃ憙–ö‰ ?Þó‚VdK؃‚I.L—aÞØÒÖ¬]„ ‡íùRz°¶Mšü%ñs–ÞÍ ¨fzسùR ©C5¬½$8yÓæØ!pYÏàTYøvVI8X«
-5IâÐUÞ,3·µ¿C =½_ÓÞ±:Т´–ù8kÂÿ2Û·r6Ñ£V‚[d/´¬‘'»CÓöåcrÎ)(?ç+®Ý¬4ÒU»äþDFi%!õ%a¾ùÒ„Šä)s"éƒArvŸ*W–ØbÁ±M[?Sø|u „#å‹KâÄx_.9ñHŸúÂ(µ"pR*9›©9 | ¸¯-`Éý pkÆЄL‹¼28O³¢µ35­é‹ËÐ<äE;wh !lSP}1æ·Ç›ŽØºÀ¶ÞU«|}<«Ý~ nTm6]Õ~dÔ}•—m]BBn`Tó'ã£=YûÌ·ÙÇŽQg Ë–Î[JõîLxe€›„yi±µæ,ØÛ:kì'æ¡P¤¡
-ý<ä“'H¡þœ>Ìt犂OŠÏà š6m8]×!4¶"ˆZ?€Àr êU† ®ÚŠ¶ËØO^"—†§X
-&Á‹pÌ>„Ðœge€´£ã¯
-#˜
-Íx7˜-Š0¦”Ž§ö÷l·/¬3LY¶½nh£ÉŽ„ÉvŽ}^ˆ<Qh9än`D0dWÙ2šÑ'õ ææJæ€EV4Œï™ÅÓ_­Ý3[—ô
-\uß çUééf=î”_ôzÓ´L0ç•a4:FFx‰$8]æð ãR\Ú‚áµy,²@ÿDH$öLø}më9v§~… ×‹^ 8wÈLCN­ç(<ÿÔq×+Š2<µvü 4BèÇ,/²Çæ-† †ÄpS(,¶¦åÊ6Ë:w£*cUëaÃ{{¶G]˜p[çI—N™{U¶Y>þù¶êT¶vÙÑWšÕÊ®†q´>ôî
-QÿŘ \¡m#.ž~d
-ó—L'‰‰¢wÜÏ=ý@׉L>ñ0<´•É.‚«B4ú2,»KÂ?~‡>=Ò‡‰ŒÑ§§¦A
-$n‹Æ>´Ðèa|ñJ'úŸ¾WFéendstream
+xÚÍMsã¶îž_áé%òÌZKR_Ôî)Ý&ÛtÚl_êÞ´ŦmMeÉ•äºn§ÿý(K¶²›7½tr0‚
+ãÀËNÊ[UûšÀ;/ÍÏB¨Ò, ºØdeiŠ†°ÛMÖ^ ¼}ãÐWUÍòÈž<
+î¤R‘‚`(O™mÿRì@øiÄŒuÝÉ¥Yeû¢%Šj½Æ;“ cZÕ¡O
+Bí}]ÜnÌ‘N9aå·|¥Ãt$ý4Š”åÆW
+¡µï fŽà¬O‘êL_6)?ˆàª ‰a2Ò%(¨E"á«t– ’ØÛ`G$ …!BšYäoS‡SíLÞ‚êgðDÞ„œ³‡½Ü/LÃ{ûv·güÃÆ”Ž†ãÅy úUˆ{kC‚^D<´!Ç?ÖqŠÿAÛQVåŸÔ®UØÐHáÝ·n§ÞfŠ‡_.,q.†¿ý`‡™ × 8áš­AɆM_jô{2[.5Žµ]k×½å܃Ø{ãbxoΕÛHåÔ~Q9‘RR Nûa’Äæá®Â†4 .¤MØøE4²¦*›WS<Ê&À=?+ŽÜU†¯S)ù³ýÈ%]Š%dI.ªíÖf!ü(òÒrŠ¸ŒÔš~±ÞYÙ"+ш¶ý£—éº.°E{ܬ[ö¬H躤Øúm©Îz¶jÍhw‡ÔêsÍ9LC‘v*´‘¦¢ÄÆßšzdÍ~˜8×Ð^iùñþ«W´"]ÂäK‚tñ »C0Í>t»«ó¥ô m?Ôiò‰Ÿ³ô¶m`GÕÞ~ÇêK¤
+å05“ààäM›cÀe=…S4…Ùo«•„µªð&I@Ü
+y¿y;ò8Á°Ì(7-
+’0†”Š=óG¶Ýƪº,Ó^7´ÑdGÂd=Ç.®
endobj
-1624 0 obj <<
+1630 0 obj <<
/Type /Page
-/Contents 1625 0 R
-/Resources 1623 0 R
+/Contents 1631 0 R
+/Resources 1629 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1597 0 R
+/Parent 1635 0 R
+/Annots [ 1633 0 R ]
>> endobj
-1626 0 obj <<
-/D [1624 0 R /XYZ 56.6929 794.5015 null]
->> endobj
-442 0 obj <<
-/D [1624 0 R /XYZ 56.6929 424.8255 null]
+1633 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [145.2796 728.3836 213.9516 737.7932]
+/Subtype /Link
+/A << /S /GoTo /D (the_category_phrase) >>
>> endobj
-1622 0 obj <<
-/D [1624 0 R /XYZ 56.6929 400.0436 null]
+1632 0 obj <<
+/D [1630 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-1627 0 obj <<
-/D [1624 0 R /XYZ 56.6929 83.0722 null]
+442 0 obj <<
+/D [1630 0 R /XYZ 56.6929 267.902 null]
>> endobj
-1628 0 obj <<
-/D [1624 0 R /XYZ 56.6929 71.117 null]
+1634 0 obj <<
+/D [1630 0 R /XYZ 56.6929 242.8188 null]
>> endobj
-1623 0 obj <<
-/Font << /F37 1042 0 R /F41 1238 0 R /F22 977 0 R /F21 954 0 R >>
+1629 0 obj <<
+/Font << /F38 1042 0 R /F42 1238 0 R /F22 957 0 R /F21 954 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1631 0 obj <<
-/Length 2918
+1638 0 obj <<
+/Length 2839
/Filter /FlateDecode
>>
stream
-xÚÍ]sã¶ñÝ¿B3}=|
-®ð žüöÍàØ¿œp¦âHáƒ3Çr´< µb:TªéÉOnOþÙ.Øu }ô ¹`Bj5«EÖxŶ*Œ˜åö…m9¬¥a-­_^‹à8¬å› ÄîRc¡, µEþJŬ1QË_):ü¡b‘Rzdµ`Ò
-&ŽY¤M8$
-Bã&DõyZ¤ë$(ˆ8DÞLã$ÏA«e,‚IñD#õø]Q»ª³<§fB¬+~¨ýyRUŽméŒz²¢.ÛÅÇ}²á¥áGâXR̨Âöä»p7l¤ÍØfE¿è¼ÌÝ.Ù¾ûÜUGå®Õ,‰உ #“¢'ur—€Z ±÷cZUÉõMiÅrТS c'òÈý¢$(¶‹{ M…üÄàgº.€%O4r÷Ô¯ï)q¨H–¾U¥ë`ñ¶ô}uÙè>~þ¯,Ò=)˜&Óf)Dé
-cW@p‹ }¾"Õ¤ n$ñ°X+@G”Ÿç•\q¸ñgxÈÒÇžƒJÉ„2±ŸɯáqpF'2dQ¡øÎ ÈšZäYÓª6Ëe‚•üp~“¼*ýÄr>w±†%ª¹ßEÚƒ³°ŠÙ¨¥û‹ª„уnxØn„r
-¬~²®7+0ùaÄ©hÿä¯Tsa ¶ž¦ÇÛÈ ŒhLõËTãV´Ñˆ«AãÚÎÅz'™RRïú»Ô‡+ÒƸú©ÈIÇÛk üØ9DN}JËd(£‚O
-¡viË“üX%k×
-) µ l9“Š%%Ó(²&B_ùHR6We¡îägû§êÈÑOd9•ŠËéÚÎbà –'[ ™€Wt¥VzRp¤„*«Ïöt—¥è™7wFJp’›€e[ Àîö:ÐÙ
-0Ó/i]µ&|×â·Uqh/ËÙ&O«^·bw/ìt—»vç‚ðЕ.•Ž{OtT…±es 0“ ¦°yYÀɧ¯¹¤˜£›+Nn¯><¯¶ÝÍkåc©É¼F°ð ¬ˆb¦,§L1³=&é6U¿:¯tìå½Â¨²˜oT~ Ù–`ã`™U{²ÐMîÌN ÉË’ª(ûÚâ7Á¬QTèiùnãóX¸â!þÒËDlÅôŠVP ’rÆØ.é—<TO”ã mï¹|P6Û¬Û‹‡Ý›çBÓáƱ^Œ½…ÐHÃ8†ÔQàƒI®½mMótîø9.‹|¸”sÑÎÇ´Qˆ*Ðcyå¯å¼¢‘­Ã³ªqxÐZ$)µü£=hÝÓ£ )UËÕ³°šdèúߟ>ž]¹‡¦Ö= Ú4·™¶ãI雪I–níͳƒº±æý‘ ö_1’%=Õ ¶mjÃÔ³! CÞÔ:²bç%8*_ý.×Íû¨ÍÝþÓ¨Y
-4éÜíðþÛä)äœYi@DcδժïE- º“×¾ßÝ>n-SQÔyu°S â†E2¶ˆvˆWHÏÐîD«ˆéHn§uÿ?qÙÇiendstream
+xÚÍ]oãFî=¿ÂÀ=ÔAëYÍ—FÚ>¥ùè¥èf÷ßÃ][,d[‰…•%×’“õúߎdÉ‘­ì%²ÁÂ#Îâ~øÀƒ?>4ód¨&TL{\¦‹#ops?q·fT-5Wý4>zw!ƒAÈB_øƒñmƒVÀ¼ àƒñì·áéßO>ϯGB{CŸ´ï º¼:#HH?§¯..þçõɱQÃñåÇ+_Ÿ_œ_Ÿ_žx 9à GaÂÅå¯ç4úùúäÇ“ëã?Æ¿ë½4÷Ë=‰ùóè·?¼Á ¶ýË‘ÇdèÁ<xŒ‡¡,Ž”–L+)+Hztsôš`cÖ¢vÉOË€é@˜*Ñ ÷ªÐ Œ™/…´\l>ñt½JÊÍçé<ʲ8ý·´Gœ³Pka×ÍâÛh–Ÿ‹M‘æw—ÌâÉÚ­ ÉB”„[HZûËN¾»Mö˜a¡]3>Å0'iÏ’b­Žy0œ JS,⢈îâ‚ž’ÌMÓÏ4*ã»|µ9æœ X±Œ§Éí†Êyìá F×ÌÈÀ
+'¶÷´ª%sØ¿“
+ˆñ}1hÊøyzC ‘/·®øé$+Œý¦
+8t®+û®tÒ¨(¬Úð€#$Éʼ&>êÒ–³5È©QÄØì„ ¸š[/é·2ÚmˆíyªØÕ®zQí‚I -MŸvµÇ ŽzTFðŠ½êýPGn©uåOáAdÁ3Œ@Ô‘ýEKZÕÄÒº@}âè3^e ’ ÍL6]:¥`Ê¢…ñêÔEºuÙFQ¶Çò,Þ±‚i4­H!KM ^RÑÕŽžN²Âدhx©¿OчtÁ ³J{}²\Zqæ÷Qº#ÇYœ%ÐFý:²þ¹Ž‹²8 ØÇÏ“Âë
+VH%ûB¥æ
+òÊê\DéëénèAá!$u–¹ŒVesM‘;]LáôÁä78)¿B
+m÷Àæ †|IªªìLäp±Q€8V4h?íEÈEŒö|·‡û$~èj/
+Æ¥ºE ÛxáðÄõT…¶n'äL¦I5*Ö‹E„m|°þ~£´ÈÝÂüîΦ†¤f;[¢ÜHf‚Zî{’ÐWU«šíWæX÷€cˆ¶ðÇsËœÔNþ°‚Nठó'©8Ä߈&êÌ@¨/»¸œÅ+›ï`/J“`AÝ\²/)»jÅF´)Ûåa·„´ó•ü[{Æû=GóH>ª#–ýƒ€÷9bi8S>9Ž,.òÕ—^·qåÖ‘ †œÙ:œm“—7»$DôPø¢Od Np\ÎÙ.gp2ú+– 8ÎdZõ£ç¼Œ¼áD ÊP(Þx_'•aZÓ×赚Nß47ñrõtˆ·ŒßÖós({¥Í=.¾éËúá?ó=A•lÞ¶Îû¤|Ó¼|k´Øñ±¢A^wž¯ÓYû~¦ŽVÖwÞøœØû Ž?Z•ë%x}ÔW~îj@Vrl:ž¯˜ðyå­÷oPÌ3¼NHliÛ(ëBž`R
+½Ó_v‹0!R?æCŠÓáöÖY
+ÉSƒÂ@*ÞaËà/Ìs3ª
+Lt-B´ñžÝLPnd<2hgõ­‡»±Ø;•@ÈrACº¼3؆/+©{™¯J÷â²B¤„â;¾üD F³™ë¼¸ <“ïGŠËÄÝÅ$ÞF|íN±îU’×<âjH2Ý:—þ!t‹²YÆxIOA(úZv5k w
+ÀãnU5M²éJ6
+¿ë"¦R8¯(x’X
+‰4Êá:Ú8aS}€ã;ðùôl»îtO¿Ø“‰3gI'xfße×ìR t{«ÛÒö6¬uRªË+;Åò¥(“¬êíÂLû4lMZlMš;ñ¬J”mf ¿ÝZ®;Ü;0ìH°ª€ñ£tAüñ¿ùBKŸ‘><<°øk´X¦1›æ ÇûãùüÍûN j#Ñ /¯è÷þÑèû›ó.=7¹|ÿžø3ô¸ËQF'¢“ Çñºƒ´£qÔñmËŽX¬Ó”JÛÊe…õ >,£•ÑW!ÓÀ‘u©8p½ ÉúÆJújƒV;ªÛmW8 ;zGžSÊ°òœvl= œaÙyò•Ò‡óÁʲT[O Ô¡PouwÃtYŠ‘y=)0WªŒ“ÂL4>äp}h}
endobj
-1630 0 obj <<
+1637 0 obj <<
/Type /Page
-/Contents 1631 0 R
-/Resources 1629 0 R
+/Contents 1638 0 R
+/Resources 1636 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1597 0 R
+/Parent 1635 0 R
>> endobj
-1632 0 obj <<
-/D [1630 0 R /XYZ 85.0394 794.5015 null]
+1639 0 obj <<
+/D [1637 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-1629 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F41 1238 0 R >>
+1640 0 obj <<
+/D [1637 0 R /XYZ 85.0394 631.2936 null]
+>> endobj
+1641 0 obj <<
+/D [1637 0 R /XYZ 85.0394 619.3384 null]
+>> endobj
+1636 0 obj <<
+/Font << /F38 1042 0 R /F42 1238 0 R /F22 957 0 R /F21 954 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1635 0 obj <<
-/Length 2915
+1644 0 obj <<
+/Length 3092
/Filter /FlateDecode
>>
stream
-xÚ­YKsÜ6¾ëWLÕ–ÚÒоtS)«T,ge­›ä@‘ ËṙÆÊ¯ß¯Ñ ‡3¢¬x½RIh4^~7(~Å"Ý0ñ“E”(7ðD°È6'Þâc?;g9LZNgýpwòæJF‹ÄMB?\Ü­&{Å®Çbq—ÿæ„®ïžbÏyûþæêú§ß^œFʹ»~sºôϹºþå’¡Ÿn/Þ½»¸=]Š8ÎÛ^üzwyËC¡Ýã‡ë›“pó¦·—W—·—7o/Oÿ¸ûùäòn¼Ëô¾Â“t‘Ï'¿ýá-r\ûçÏ•I,vèx®H±9Qt%å€)O>œükÜp2j–ÎñOyÂ~ K_ œ®½x.Ÿáá\ ú"
-/qþA:ïÆ^BñÅD(ËU-¢ qCéK#Wí2/Úô¾Ô9±‹üÉ"0'
-T„“hö/õ¸ê…Îç^7…n¹Ó­ÓŽ ÀY§šq÷ZW ­êæTÄN†íyvÍsûÖNÝ–iaçþxó¼×D Ž]
-á&¸˜9߬ §+6ºî»º eàÜ­‹–¸zÕ™ó¢­ n\¼Ö ºô¦îì„V7º±;Uu7GÁ½.*âA8·Wo€ö(‚B'«7Û²H«Ž~÷ö1´Ü¥O-Ã|r×7•Ý-t®Þß.d«ywyKšïK|D«œ¶ØeÚ0Ò\
-ÈKf0{Ñ
-|•ÂZòѯWvÝzÖQÑ{
-ÉM1º ¬ÂÉ|m„—‘B lùŒG]Y™.`ãó>›÷KìR@f¿¹7vXÑ® E½ÜÖmÑvÞžûÇÒS]‰UÄÄôiY>Y÷<õé±re„ Æî¹J7³N\†®xÖ®(a`wˆÄ°Ÿ00Ú-C“˜>…Ká{n ½èðêmŸ­IVá蔹—Ú–Ýohý>ZÖ%
-lß KÏîÉ­÷÷tc˜X³OF4³ÂI39F¶uYdO<úg]Yìïžç—ñtFy]St&S’±:Ø–‚°B×$4H‘Z]
-L.e¢|â°úÀSÇÊ@•t¶Èýê¼ÈL×·É´Æ®ª´äÈz‹ÌøSec¾²Ù3!H*Œ2¢‚é‘—¥eRH'妢چûÃðÚcŽ²É’†˜µÌÈw•Ÿ "(à~fØëƒ2¨§ÔÂ2aeO¼-\'Ð(Fâ8Z–® ÷~¨›§SÄ‹Jvò/ÝZJmºk&+lš•}®'<€{IÛ5#ÔLÒ $1ŸlÒ0‚n½á@˜r!†˜{É~Ú¡û$ {¹éœýò¢Cf°:››þ’émÇ™ª5ÎY§™*/اjûáI{²‚3Là7¨@›'»´æö0À~=ÓeB#.´Céîõ”:¤§.™»›™Xeæ#J³!ʦŸÇ¬Ïu™>àǨ:SnLï9ˆäh
-éþ¡“ß”Œ½¶ó ¥=;T£y7šg¨˜à|n̹¡:2Ï0"éZ¦i(S;ýÅQ<µLö´¹vß´Lôˆjë²ïÌg3øª 'ÚÇ'©¡*:²ƒ¿bæ&œRóA€€ñƒÀ¡<˺þd¡â“þ'Ì ‘Š)[éŽü©yxä*Ôl·¡ëCr0_Ä-ïg0ëÈ"i2F® byÎ}*Çíi(Þ´}†ò¹eÄo\ÂO6Ÿ½Ò+¸„´<÷Ï@)•ìçÑÙçæ©…FŸÇgö)ú<8+Q{g}Vh
+xÚµZÛrÛÈ}×W°*RK3 €}“½’£-[ÞÈŒ+•Ý}€@PD-p @\åëszzp£A+Ž«ÊÓÓsïéËéÅÂßXÚÕ±Œaì»'‚Eº»ðh{{!lŸe×i9îõzuñêFE‹ØµÔ‹Õf4WäzQ$«õÏŽv¥{‰<ç͇»›Û·¿¿º }guûáîr)Ϲ¹}wÍÔÛû«÷ï¯î/—"
+„óæ¯W?­®ï¹IÛ9^ßÞýÀœ˜‹3“Þ_ß\ß_ß½¹¾üuõãÅõª?Ëø¼ÂStß/~þÕ[¬qì/<WÅQ°8¢â¹"ŽåbwáÊ |¥:Nqññâoý„£V3tN~¾'\!µXªÈõƒ :¿,/áaYK
+áÆApºêRx±+ðîGòü ìïDŠÑ¸~. vµ’ÊÜɺ¬ë,%Ñ ·õ†PÂÀ±uûáîãÇë7,Ф\3±úxû–©ýáRDNÕTiUL8iV×yùèžÊ›t}Óf†-›”¹
+º*p#_1e7â¼d%zFž|A²~èê0dm/’]¶¬³ÃSv¨_”ï;t¾ÄÆcÇŽ€’k:«mVÛ†ÄH”*Pþ]~)œ:­Ê_<O>¶‡¤É«²æ¶¼äÜW5-…–ähE»Îw—K_jgc2ÔÍ\¯Š…óðÌ%Q1ÇmV2Õžq»–®¸ü½ÍÏÓY Ͷ¢³vtb1•u{0“ͨ«¢¥}AmF÷ñmw<¨ ./’Þ×hb7â¬ÚèPº¸Šàµ”"!4dVdæ:—UY<¿l™}ܤç9fÂ…Z8ïªÇš[èbòÌVšmÒ0µMž2¦²ÌL"œMe."…*̨Ý´Ôs÷>¼¿º%?«µ“ÔÌm¶ö.Û¢áÕ†ù §5}þU•Ùœî`?P.Ëò‹QJW*Yy¼,¿Š…Úö7ÖbfF¡éäG¶´5™†Î6/î›ÐNÝ´Ìé·»Dœ"ö§‚Zgi‘°mžW屎|›Þ ª,¡Y"V_1e7â¬*Ó~…Ö/¨²ÖÊcô§ãg.Kx–ä¡`Eú² ¬ÈxzÐSª°žJ/°zJ<ÖS¢Fzʽ+îÛÖ¶ë¾HrÛ!Œ‰u›Õj¸Í&ßeUÛV*€ÎknàAmÓ˜õÁ¢© ¯l”ê|M‡‘Ç‹²jæ”ü!c?ÎýÍ&
+Ìk8ÃÕ€Í8€ãÔv|ödS›XtFÄ*,%"ÌÄ*ôºÂmÏL sTêÙ–kȱ©ª5$ (L†Ê¹µƒy'3¢=²¢¬)ÞÉPbs›:tº²áå³Æ(8FñPW§£NÁÞ$ya‡V\Z‡·¯Œ`´ÑŠ)°4ƒ‘C¦ŠØP$«òÏ–i ™»ssÞAѾ‡¿Š´®Šœ‚ Šˆ@Xòh¹iR2‘uÅÔƒm2Ú¬´à¢brŸ¤¿eM7a]»sÒ}YC$e•ľ:4¬‚±?"Ú7FÝÀ-á¥YÕÁµªv§ê鼡²|  õ¶j #ëØ‚x¼ö²Éj¾H°Ìý \ãn»¼ÌxÛ*øek鶺 T¡¹ˆ¹õiÓÃÉM Úvn£°²Å3bØa‰³§¬´wj¤€Nuµi6›,h*Û݃±³Ànå·˜-÷U7ùS6ÆP$ýúKºù!o¦MŠ>NŽ}zä»*D~Äî¹BsâJ»"»è{Ì E€ °»DlÄOíž©†·˜9™ð)€ç…6Ũmºe\Ð9å1ÔÐÖýjë÷Q².°ºª$`DÄH©x’r='nØØÁÄ{oºMƒm u7LÒ¨“0†ìlÍl+ËP!«¥;*,˜ @F´yžõǬ6þ`uDÓLL%¶äcû,Y*ùØ ì±IY*lµdzrrôÊw³«cQ#àH:Ff‘Ò>ðž’"_[ Iõã67·u
+ü{›[ÈlØ
+x¹ÂîÈX¹ð£©&î²Þÿ÷ÚEûïóÒGÙí­CW¶áÿW ©Ð!y`ÿkÞFº!gµM@è2Ò/¨›n¬0¹Ï¤É–aó¢Ö*ýÀÙ\,ä ‰Ð?U»wj°owü¤@ <Q/ÝK„˜7[n·!ùÕ3@ˆRÊ>T-íUw܉r.³’v´<Š™ÓèÈ•¾/ìDÕޚрÁ™æ…Õ
+K.áP^±=Ñ­•ñr¾Ç‘…𧯜=_µÎSS•Jû˜U™<
+³ÌÕt¡ôÄi˜ʤ·(ê.¦í¸Þ5OìÓŽèá7*À’æ]ˆf Y¬/ã¸Ïª7ÕŒxa#1ÔÓvªa˜0²gžˆ¡
+f]í8̃.ù­K/ºM½'qØÉû Ãó¸`3ëB³?Òlß0NµfÈuŒS9uÁ<eÝnˆOÚ“æŒ/Áß!ÿ<<Û¡—ÓðúeœË 9Ít‰›ô”*¤§ˆ-©m[Ít
+¬2sƒ¹J3Ê‚ÏSѯ³"y6@FÈ~“lL8†ä`˜¾5Æ !pdçf[ ÅÎË„BMnï)çjîØ°=°ÉÁ«rϤOÄܶ‡Žg¤B¼Áz½ÎzÉÀ½˜Ã«çõ ÉÌTÏŠÝl4PÆ]ܬ¹j} ¨Äx$8 d8‡¼þ¹äyÿbSb%BçÓ%9`x™ÖN—èλÃ`ƒümKgé3·ÐÙýØrÐ5¤àÂDØ“&†èSÌlroîÆ{/ÔXæÄÍËuþ”¯[Ú/Õ;ˆ XPsϼ¶ãíy—}˜˜ø¨“-˜‡ê%€P5û@DnìGÊúª¯sŒ£ë7†ì Ÿ“^ú>EcB/<ù>õßê6"tLûS¨8d$üñw­Ï¾oÉ0B'%AIú²ùÕ}|±äI»„;„5y°U—LnŠ¿õu×ñù½y„q\¡"݇ߙp»‘ìQËKšM§Š
+1ž¾®Eöá–ápOœÅ€šÇªÔôš£ÏO|æAùLž¶Er(ìƒõ6+öVßzß5ÑÙ4iëÿH_7•$]þÕ6Û
+ÙB2<tò›r1æ~Û~1óK ¯ÿÁ7ÿîcøQŒPE£_ L’ªÛÉ=ð>Û9 TZÎlýß—êÿendstream
endobj
-1634 0 obj <<
+1643 0 obj <<
/Type /Page
-/Contents 1635 0 R
-/Resources 1633 0 R
+/Contents 1644 0 R
+/Resources 1642 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1638 0 R
+/Parent 1635 0 R
>> endobj
-1636 0 obj <<
-/D [1634 0 R /XYZ 56.6929 794.5015 null]
+1645 0 obj <<
+/D [1643 0 R /XYZ 56.6929 794.5015 null]
>> endobj
446 0 obj <<
-/D [1634 0 R /XYZ 56.6929 301.3151 null]
+/D [1643 0 R /XYZ 56.6929 210.5485 null]
>> endobj
-1637 0 obj <<
-/D [1634 0 R /XYZ 56.6929 272.1867 null]
+1646 0 obj <<
+/D [1643 0 R /XYZ 56.6929 182.7598 null]
>> endobj
-1633 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F48 1258 0 R /F41 1238 0 R >>
+1642 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F49 1258 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1641 0 obj <<
-/Length 2994
+1649 0 obj <<
+/Length 2944
/Filter /FlateDecode
>>
stream
-xÚÍZ[sÛ6~÷¯ÐÛÒ3Š;Éî““Ø]w§›¸ió@K´Å E:"e×ýõ=àE¢#§qv7žŒ€ààr¾s(fþÄ,1Œ«TÏâT3Ã…™-ÖG|vm? ßg:͇½^^}w¦âYÊR+íìòzÀ+a<IÄìrù[ôê_'?_ž¾;žKÃ#ËŽçÆòèåùÅk¢¤ôóêíÅÙù¿¼;9Žutyþö‚ÈïNÏNß^¼:=ž‹Ä/=‡GœÿtJ¥Þ¼ysòîøÃåG§—Ý^†û\áF>ýöÏ–°í8Sibf÷PáL¤©œ­´QÌh¥¥<zôïŽá Õ :?£fO ShRf•Tî
-ÏNñ0µSR6¥æ¤áȆ"ÀºS3,Œw‹”ªn©àÅ”/{îÞC™ èä ä‘è(¯eÝ8¿Í§mw:X¿Úd‹yÛøV¯ 0¼ia©M[,šÀ
- 
-ÆEJÉȧÍÈø‰z'­ê­¼•^ʩȪ´¡çŽ}·˜9V-µemßy_†’¦”Néмë8’ùaNéëN~W˜êY…i36¶‡„icÚO×!#xš0!¡ê„ e
-½d`Òµ)ª…ï܆Q;‚í(ã62v×]úœÀð‘9øŒ°§ð\Â
-©ú3z<*§">$,(
-ÛW²“ñÄŒ£€sár½Ç5jÕçòeß †„-ƒ“2‡|™JÓRÑ9Tx3¸yšR)-;¥Â²“/ü†d¶Ø©‡‚'PhI%Çj××9FÕd|´¨·UëEìL¥õ« ƒEöáÔ{¯j,9LcSO3«Ÿ Ÿ ÓpÆcýT2ŽÞV!×O1×·éîª×kwI§5
-É´ÕòªÉ#¼(!®ñ²…é¡ò÷(b$ÒñMˆc›Q$rI–Ð~³I×Z·îùÐØAèŒM]—èî&–.]Mx¡0oÔÀÂ_ºNGAî&öQŒ ÿÿØò «1è2‡0Â5㩱nãþSƒ/…H’d’¸¼Úè™VKýŠ¯üÃ=èt½Ç*<îL†§˜ ÆjOä:ÜÞëXí‰÷ìÔ ¼3.ØZëù JþŒàÄßIÃl@0€ç'ä š«t`—Cz•€Ëwï¥Æ}„±-ý´uåt¡´ÊnoÝ#µ1Q1Ì“”õTáA9ø&`ïC =—M쿤ù_¼b ›2K8(3¡c9ü¤gïÓÅ-ì|‚S.žÆI§R£ó Ÿö‘SIè9q7‰ÁY-ó«í ÑÊü.wÏNÖxk#E?îµÈ«âcP€'ÞmǼçÓøËg—#`:ÐP-ó ÛUÝøt›iÂX;\ƒ &·ß»Kב^ßܸDІ¯zpq..žPÏ.yñ9‹š]i÷£FéÍ…Ôµ¥R•ß€y¸óôÐIÍïâ]NÕx6ÿyýöÍÉù…§ö7ÆÇ£j\Ò·=‡ÁÊ'L@¸ô}P`Lü·$¬ÿË–ßLº“°ž–0©ða1töÿš‰Å®ÅÑ-‹êyýþÝèN¾º_>^ʹå#q
+xÚÍZYsÛ8~÷¯ÐÛÊUƒ“½ONbÏzj’Ì&ÞyÉä– ‹ŠTD*Žç×O7à!ÑG6NíÆ•"Ð
+‡K Õ+ahÎ<‹ŒûXmI«DsrÂagðo0’f_xþN ˆó8Ó¾HǽÝQ¾<å|‰\Ã,%΀•¬\P'·S¤àÉ”YAÔN“¨‘6Œ¥Â†Uhò µ
+»Ýf~ÆJz—a|ËHTrxÙž; P£ºÚ¹uͽzአ;¢T,ŸJàC 3‚0z X>ß5rÓÃä&’BÇPJ¢T‚ í0$¥Wç¼Dƒ U@4„È`8¥rÛž“=r{ÈXé2vu2é S›5¶ö­ÃÞ’Nè¯ß~øpþŠh ù™R4_L…5+äÇ?j `ÅR‚)n³;WæÓVõ±áveK*•5wÓø¡À{½i¨ø­³…E¿ ô²¤qÍ*4z@ƒw È@çÓ/;»½£.Ccî8{6hˆ³ÙØ–:J¦§Ç©ºÎ®‹;¢\Ûy¶«-U2´àxV%X$"Õv x©}{° XYT·%•P“ñ»+©=›¯`·#¨6[8€`ÔÇÉWÉR%÷ì$ S;%ÆÌa+i8²¾œ#
+¾f¸[¤”Uã݉ }[àîàmzð6:9(yd5µå¼¨j‡b#Ý¢ñ[Ùµ§ƒõëm6ÿl›Ú·zm€áàš¼nòyô}¾Áˆ (‚šéí¤‘a-ù|Wd[bÌëlì¤Z›«’°k§ÆíòÐ`˜$J Õ[ru#ÆB¢YÚwC]¶Å‚f ›UÁw( zì†Ô¨U¥'{çáJ–[_°£¦TvñO¤˜iî¹éî8ßbÐåÄAfLÄÓ%”£  8T•í‚¼
+ð l? ZÛ¬$•`¢[æU³²ÛŽœS=Œ²êÝzmó¿œÈ5)÷€CßÊ"µ+Ú¬¹L"¥5Ñ
+¬£„òaYJ“FŠ1J,CBð4YB>ÕÊÊy‰À¤&j—sß¹ £öäÚRZ¿­EëA<oØ·Ȫ;„çUHÔŸÑßI®À‘Iþ˜¬b©”)kûDgÇãÎÙqMÎhŽƒ£´Î Éä퀺çí ©»BÀZÖŒÙïq…„ ¢9ñh^“BìÌ’¡OÃ[¿3ˆº0¹ñVË.SwÉMXÖ\Š«ðê´I,ÙÜû:G:•éX”%H.¦×wôÍ0!æ˜"º—ˆ}Ô¥òÃ0iÁîÙ £»$qÝ–ôÅÛÙÝ&p;@|Hÿá®!€ëbá9y¤ÚÙuæ&—Âyݳ×/Ñž¥Ë¼ *Ãö¥he<2ã Þœ»Tïêaõ¹\ÙO!…VÀ<yÌ•I°ÿ W±;º~šRI%Z¥Â²“/|C.[‚ ¬‰ÔAÁ(²¤’cµïê£r6~ú+/bg*cŸ°Æ ác°È>Ú‚zçTuLþRÇ÷©§N¢X=A?MÎO?¥H¦ïÊ꧘êÇéÁ½ðÚÝÑ)
+§ ú!´«wê:\sQ#fA#Þ‚ËýkŽâ<ŽÓ,Mú-—¯ÞüN¥Ã©€Ø»¬ÀêÚÖ£r—™û•¨ÎçR¢Ÿö òVÜ<¢DBé(•&é?•<M‹â¤sMXF-Âï®´ß6Þªc½ovk"¡éów;X*æïqšÁç‡ë4Ì-§—ü¶š„ŠA±„žÂu#É<&½-„.#j‡é¸Pñw‡©ü aj_xÏ•ë«$2蟟Î2Œ¸c<aQ,øc±à,bA8‡åá…ØE–;/ÈySºäÖ)=¾yK‰ä¾ÝÁz°;صçD)6ýpþhLjz¶”nÿé"Þ§AH
+ˆtx‡؎(¹¢ûJh ßl4̯÷z¨ã^èß‹u2]—èö"–î\ux Ð#OÔÀÂß¹Ž>«ÐEì½éþÿ±å31xMõX‚Žo'Á·ú|/@Œ!¹˜¤{¹ÚàV 1ýŸøûÏyÐiyÀ*ë½ìŒ§˜&ò@à*\Ý«D{—ìÔ ]¼3-ØZäëQ(ä”úiÿº‰ßQ³¬A,€æ'd ŠÉ´g•CreÀá»ÇRí~±+ü´Ué^s¡´Ê6÷B­õ4‹Ff&´|ªðìý `í==—Aì~Ìõ¿xšiaÜ2Ó¤¦Æ~TÿýþðOغß÷Á¹HcÄø¯Ó$‹áÔÒ傼P('îI¥ý­›ïÕ[úß}³endstream
endobj
-1640 0 obj <<
+1648 0 obj <<
/Type /Page
-/Contents 1641 0 R
-/Resources 1639 0 R
+/Contents 1649 0 R
+/Resources 1647 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1638 0 R
+/Parent 1635 0 R
>> endobj
-1642 0 obj <<
-/D [1640 0 R /XYZ 85.0394 794.5015 null]
+1650 0 obj <<
+/D [1648 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-1643 0 obj <<
-/D [1640 0 R /XYZ 85.0394 607.3833 null]
+1651 0 obj <<
+/D [1648 0 R /XYZ 85.0394 529.6747 null]
>> endobj
-1644 0 obj <<
-/D [1640 0 R /XYZ 85.0394 595.4281 null]
+1652 0 obj <<
+/D [1648 0 R /XYZ 85.0394 517.7195 null]
>> endobj
-1639 0 obj <<
-/Font << /F37 1042 0 R /F41 1238 0 R /F22 977 0 R >>
+1647 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1647 0 obj <<
-/Length 2069
+1655 0 obj <<
+/Length 2249
/Filter /FlateDecode
>>
stream
-xÚÍËrã¸ñî¯Ð‘®Š0ădN³3ž‰·²ÞÄöžœ©)˜„$Öò¡%){dÿ=h4@‘e+»9¤\eFw£ÑOˆ.BóGQLbÉä"‘‚D!Yu.ÖfíËu8K´c}wñî3O’ȘŋûÕˆVJÂ4¥‹ûü!ˆ #—†B|üñæóõ—Ÿn?\&"¸¿þñærÉ¢0ø|ý×+}¹ýðÃn/—4hðñ/þvu‹K±£ñÝõÍ'„Hüœ z{õùêöêæãÕå×ûï/®î‡³ŒÏKCùåâák¸Èͱ¿¿ —i´x6“P)Ù¢º'‘àÜCÊ‹»‹¿G«vë¬þhHÙŒ›S`$IÌ·
-¼ßÊu¦vƉª_p°«õ¯[õ:Çy{IÓ@w»²wÛ2UûýøÍ‹àü# YfÐØ7nQ?îÖŽ¯Û×oô˜t¶k»¢©=ñNP¶9]PJd18S¸Xòˆ„4Ns Ô\q†AùÜj'Ü]¯z]éÚIñ¥UU¥ZGp¬#C "'´3H¹v4ì¤YíW½”{¢”¦DD"2Ô(ÊuÌ›%„§‰CꦕdwŠ1ƒ„“0ñäkUéœdM½šá3ÂâØ£ÂÝ”úÏ3—,¥„¦|±¤ ‘œ%#É—±Qî¿`Ó‚q"ÁΗÕ¬Ä(‹®×õ®7ØO±ý¦ò¼ÅÉöiû“¯8{o©'”$œÎ?—ŒýBpàÀ¿½÷Sಜ²¡c6O…~Þ¾j'{ÃYá:­Úl39vÞTª¨-‰h¯/¿.ù<÷:ozwIõ®zÔíô´W†Çýíý ç1‘ Ûû{Ó·>i°ªºèçUµ‹?uj­ÏqºY'’$M}ˇLn0æzìDœÑÀøȶ޹à…PëÑ0@ísØ>éÖ-7øUeçG™£§…Ÿ²Xoúg ÿàØ4¥#66É2ãÆ£ðNëÃ<"$#BòEÄá< Äs\j× ÜŽ€Ç^ŽÐÃÿ!MPÐΖh„Ñ4 ¼ /‘JD„
-™š¨‡é"b1¡‚ÊÙää‘–c¬cáŽhwb´c‚9“lµ‰ÒTêÀƒÊd˜b[ÎN˜’D0ñ–åÄ$e±8´œùìM§¨×ÈrrÝ€3½n€àuwˆÿ\ô»Ì¸rG2æi¯€Æ&ð8™^ÁÖ"5[Ýö…îÈàø6,§¯8 M^”þÔC0>>¹à&þÍx ‚Τün…ÇÖÔ È!
-?eqIƒ‘M
-?˜K`Ô¬ÐÓxl%LN­kdà6TØ6²yË°“íV×¹s¾ÛDŒRõϗŽ=m­À=Ž3ìQQ_kbÙ=ÛÕÉTÒ¹¶N¸®2š^¸£àÑ+.ŸÅ™à|â¾Óh û»nÜÔ´öÆ#]y‘¦;vÎ&øÞ4pQ•Ãc„-Çw]T»Ê±ka`œ`I``Øà
-§Ó{FT0\uõ½ð!FC10ìî0˜5¿O9&úW¬ü ÈÆO„–Móón‹àG½jœ5ÎDpLXô†»U½éÒך' úì×î:´J™Š¯=ãýcb@ÑŒcKq b»É¡;=Ùp»n*?9ßÐÉòo«è6â(š*輦þágý‚#3ø:0¤Ó¾ÚtÎûžyFuËA‚ÃWœ¡À3›\zºÉõÔg´qÛHŠQáî*CU–Í3W˜Ã˜5|
-mµ¯oµ+W[ ½+a5~µêŠòe_—ºÕÄ®vP¥`ge]¿{tÒÔ·+Õ“#öϦÖNXŒ/FÍî4Ó»ÑE;ײp£~“e÷UÄ÷õfÓξ¹Áõz-B󾬛¾X½Ì‹¨é¢‰ÆgÝmI™}Öe3n9«i¶`ÿÏŽ^²uéïyòûô(CÉ$ž¦àA±ç½>ª¾WÙf™™.hÙá¹OxжþéÒM¾™âÜÔÌó»'φ›¦ë÷ÑÒÏföÏýv`L ügSÂÁÿðï
-û]¼:§lþY†%Æ„RCÄ g4¡ýPrÿıèÿEM«uendstream
+xÚ½koÛÈñ»…>Ò@µá>øj>ù;õáâ\m§(à%­$"©#)û|íý÷Îì )R¢ç®( ˜ÃÙÙÙyï %'>üÉIŠ0QÉ$JŒ|Læ›3²‚µwg’i¦-Ñ´OõÃýÙ«+O‘„*œÜ/{¼báDZœÜ/¼P(q|ï͇›«ëwo/Î#ãÝ_¸9ŸªÀ÷®®º$èÝíÅû÷·çSÒ{ó·‹Ÿï/oi)d?\ß¼%LBLo/¯.o/oÞ\žºÿñìò¾Ó¥¯¯ô5*òËÙÃ'²
+|›8Ù'—úfr½µVEÖtÙ›\4>b){IÖfQ"âÈÈo%´{ 4,GY¤•ô )P¶ÕŽ«a©6@æ×
+=X=ÚŠ—Kz¦yÝBsæ—2‡”9ÜgÍ“Åÿ„àcÊœ™uŒážÀ&RiHÁÀ¿³ö°54‰&Ñ£A5#]—FkÕjBÀm¯Okɧ}úã6íˆ+ÚèÎΧF"öýƒŒ#?ÊÄxP‡rÆPÙB?ž(^IÊÑ–³%šö©Ž¥;â…§ 06j‰Ä°h¯?”f“>0símà–ɶùhìø±ˆŒ2ß
+žPÄ*4‡ÁSÓ9ûèÉŠ9ð8Ò =ŽòxMôOY³&4ߎKV "Ô¹@†p è0¦ç–:­­š¬÷JóÉœ 0ÙYí®"«n´PJê‘Û'àæÏPw—òq€xdH»
+¬6)s'e
+„q¹œ=¦y‡w‘k’S“ð C-ÿÜÑÅÈ@„P]™þ•mæ¯*—\§æŒ$¡é®¬p~â]7$;_gÙ²–)=ø>¨\R¦éEø¹¯ïj—۷ΰÙv•­›îñe»µÅ¢-síàI9ÏȈq‰=œ²0=¾û¢U²í:©ð’8‘cžá3:ð$xð‡'‘ _t²:qò ÇAÇ÷yº[çñ
+}_õ‚O!æ`(ŽpMÓô×1qƒe7¨žœ½yðÅž fð™’1ÿq¦Á¡# ‚¯¿h¾øbŸ àSw ŽØ0DïÇçÓM; Ž¦]ó ¾pÞ•§çÝ–ûH†¼ ÓëßÝu‡Ãh^>HŸþ¤r‘/qÈݸ>áÚ6¸|g§np“- g–ž6­³ü™`¼‚yõ™¨7;lShÂrˆºÙÍXš‚ië<}df¿•…ea©À€Y›áx¹¶Y5b#¥Áü` ÿÛ&Òû†³¬F¿¿¡[+â?-Ê&[>° $ ŠÁÀââÔï67øcËÈÈëwñõ§ÓÙÿàeðû`|b´ç_jt+Jë0
+hóÔˆèÿ:‹pendstream
endobj
-1646 0 obj <<
+1654 0 obj <<
/Type /Page
-/Contents 1647 0 R
-/Resources 1645 0 R
+/Contents 1655 0 R
+/Resources 1653 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1638 0 R
-/Annots [ 1651 0 R 1652 0 R ]
+/Parent 1635 0 R
+/Annots [ 1659 0 R 1660 0 R ]
>> endobj
-1651 0 obj <<
+1659 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [491.4967 534.2914 511.2325 546.351]
+/Rect [491.4967 436.1356 511.2325 448.1952]
/Subtype /Link
/A << /S /GoTo /D (lwresd) >>
>> endobj
-1652 0 obj <<
+1660 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [55.6967 522.3362 89.457 534.3958]
+/Rect [55.6967 424.1804 89.457 436.24]
/Subtype /Link
/A << /S /GoTo /D (lwresd) >>
>> endobj
-1648 0 obj <<
-/D [1646 0 R /XYZ 56.6929 794.5015 null]
+1656 0 obj <<
+/D [1654 0 R /XYZ 56.6929 794.5015 null]
>> endobj
450 0 obj <<
-/D [1646 0 R /XYZ 56.6929 741.7314 null]
+/D [1654 0 R /XYZ 56.6929 653.0373 null]
>> endobj
-1649 0 obj <<
-/D [1646 0 R /XYZ 56.6929 717.3918 null]
+1657 0 obj <<
+/D [1654 0 R /XYZ 56.6929 627.0363 null]
>> endobj
454 0 obj <<
-/D [1646 0 R /XYZ 56.6929 582.9637 null]
+/D [1654 0 R /XYZ 56.6929 487.6003 null]
>> endobj
-1650 0 obj <<
-/D [1646 0 R /XYZ 56.6929 552.8498 null]
+1658 0 obj <<
+/D [1654 0 R /XYZ 56.6929 455.825 null]
>> endobj
458 0 obj <<
-/D [1646 0 R /XYZ 56.6929 328.9135 null]
+/D [1654 0 R /XYZ 56.6929 223.4878 null]
>> endobj
-1653 0 obj <<
-/D [1646 0 R /XYZ 56.6929 304.5739 null]
+1661 0 obj <<
+/D [1654 0 R /XYZ 56.6929 197.4868 null]
>> endobj
462 0 obj <<
-/D [1646 0 R /XYZ 56.6929 235.8992 null]
+/D [1654 0 R /XYZ 56.6929 124.9352 null]
>> endobj
-1654 0 obj <<
-/D [1646 0 R /XYZ 56.6929 205.7853 null]
->> endobj
-466 0 obj <<
-/D [1646 0 R /XYZ 56.6929 161.3359 null]
->> endobj
-1655 0 obj <<
-/D [1646 0 R /XYZ 56.6929 133.9676 null]
+1662 0 obj <<
+/D [1654 0 R /XYZ 56.6929 93.1599 null]
>> endobj
-1645 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F41 1238 0 R >>
+1653 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1658 0 obj <<
-/Length 1149
+1665 0 obj <<
+/Length 1203
/Filter /FlateDecode
>>
stream
-xÚµX]s£6}÷¯à1~E`l˜>eS'ÍN7Ûzݧ4ã‘‘0š‰•Dât·ÿ}…1; d:$sϽç~IZŽù@+ðmÇ 'Ö,œØ¾}+JGŽµ1ÿÝŒàþP=šO}XŽ~¹öfVh‡Swj-ãV`;A
-"_G÷Ž… í#ÇöÂÀ·žÍÀ±aºV:šøžíO<¯ša£/£¿jÀÆ¿;ÑSþó½ÀöwvÂØp t;œ„3kæ‡öÔs½ïÇ`ê8ŠÈ'"ÅÍáŠâ•Ò’òͯåôCAØhÚ¡ï»ML%‰´/å0C:Yq”’¢äô‡Mñq´!ÞaFñÛ˜Èþ²ºà°Q
-e´°C£uMŒHL¸¦ˆíqL"š!ÖÕ,RDù>4»û>Lpb~ëàìFm:°‰P”SFú{çi6PtM9Þ%BgqØ®ƒH
-¡Õ@íŠ(E/RàÝ
-ò?ŽïœX›Ö”bè‰ Ø¥7qeV_@8Z32 µ•âOˆQŒtóóæšV*ΛO`3!‘Ér€>@UØ
-„¡m fmCyë™#ÍŽ®en2ñ(²¹ƒ«Õ¶mÇêNÙžk³4%A^£p5Š"’i³ŠdfÏôs!Ÿ‘ÄÇÎ,j»¨˜J¥Ïp?ÓíKd³È–ãoå¥Jîl…0Þ{ö>R×óÅà¡íÕض]éÛ]þë´}5ÍÕtèè”/Rê'º¾íÀ\Ï‹·ÆäÁ/e´{ñ³pU–(-uã^¸¹òÂ>ÃZX¥iµkÚ>'yTo 1^i¬~çÚGk¦Z²vžp<rIÞN)DÛ2ºáB’sösF8ÏÌr ‰_ñz§rç ­éöÿR_+{¦ Gu½ö)ôRÞ¬JdcÞCÞÚù:Lñ|»89qôáÔ9þÃ)Ôdf{AàÖg(®Û8Cñœ©¸á¬2ª Y¦`ÓòúDæµé?
+xÚ¥X]s£6}÷¯à1y*À`hŸ²©³ÍN7ÛzݧlÆ#ƒ°5ˆE"qÚô¿÷Ê€ Ž½Åd21HpÏ=÷SB¶Eà϶7[“pŒ=b{V”Žˆµ‚gGvýj^Bí·>ÌG?ݸâÐw|kž´°L‚À¶æñýÅõoW̧³KäxäÂÇ—ÈóÉŇۻ_«™°º\¹»¹ýø×ìêr2¾˜ß~¹«¦gÓ›élzw=½DvàÙ ïÔ'nnŸVwgWŸ?_Í.æŸFÓùΖ¶½6q!ßG÷ÄŠÁìO#‚Ý0ð¬gl‡¡c¥£±çboìºÍŒ}ý¹l=ÝŠóŸçØ œÉ:¶eÛ8ô<§ãA/ľë¸[£m<@¹¹æ2S•_5Õ,e™®M.hšÒ˜ ÀN+2ÄBN€ÇŽlçk^#4W½fÕͪÆØd²ZÚ-PÛHoìºm˜½Õîú8 ö¤~OuIóì@Ǹ-:q1™ŒÃZ4£)‹q$³äˆßÁŽï7l¾âöóHä„{áć;ˆñ¼}䃗ÿ1r–ãâÐäª"Tåó}õÕšFkÁ«f¶· Cñ—jâa Bq§-þÄ
+ê:ƒ…ÒÏV=¤×Ri£¨;ú¡|‡¼bèD<n<îÏ æ‹´,^ªaNõº¯éì'ÞážÒŒ®XŒ
+•é’}J”g<¥Lå°ÁaCª¼šç‚¡ÈÔÅ
+S½‹ùiºÐJåijöl!å#…|`{è=TƒmPl;Ä
+Ùæãm{i’;_Ð8®={ŸËBïæÍà¡Õj0ƾíåß^ÛWh®Ð¡£GT}H©ÿÑÕþ¸w!÷~©¢ÕÚ‹Ÿ„{=uÄázØœK9 »3‡wìφÆì³?ÙèN8iHc=÷ùîœä-õÿ
endobj
-1657 0 obj <<
+1664 0 obj <<
/Type /Page
-/Contents 1658 0 R
-/Resources 1656 0 R
+/Contents 1665 0 R
+/Resources 1663 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1638 0 R
+/Parent 1635 0 R
>> endobj
-1659 0 obj <<
-/D [1657 0 R /XYZ 85.0394 794.5015 null]
+1666 0 obj <<
+/D [1664 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-1656 0 obj <<
-/Font << /F37 1042 0 R /F41 1238 0 R /F22 977 0 R >>
+466 0 obj <<
+/D [1664 0 R /XYZ 85.0394 769.5949 null]
+>> endobj
+1667 0 obj <<
+/D [1664 0 R /XYZ 85.0394 748.4265 null]
+>> endobj
+1663 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1662 0 obj <<
-/Length 1130
+1670 0 obj <<
+/Length 1108
/Filter /FlateDecode
>>
stream
-xÚ½X]sâ6}çWø:#U’-Lž²)I³ÓͶ”>Q†ql<øƒµ ,íö¿WFÆØØ“É KÖ¹ç]_] +Hüa…êP·ˆ¥–)ÂTq‚RÞÄØSgï€ÝK øÖ§aççGÕP,héDW†Ó– ‘ibe莺:$°'P÷áëËãóÓ_ƒûž¡u‡Ï__z€PÔ}|þ­/[Oƒû/_î=€MŠ»¿Þÿ>ìäža|z~ùEöXòçè ÿØô_ú½ñðs§?Ì})ú‹‘š:ò­3#Ånî ¨Z&UÖâAlYD :U!ÕTu×ãwþìü‘F·SkõÃU'5j¸  ‰ Ž”A-¨«DÝ
-8ê¡®3cÎßÚ“}#ŠdkmÇ¡lý?SÛóKÞ[ÅûyøN6Ç©@‚%ÀZ”’ªI¯noÓ{õ½ðMvmŸDñ$Œê§ãšé‹éMÈÚ¾­AÈÖàŸ(d\vþ{ÀZ>þ×.J¼é¦„e»nÌ8ŸvâÌ&¾Ç““ ¸
-úmÉâ‹0ÉL…ëØb)?B‰|}ÚIl‡|Êâ+ÃÆÌYÆÜ»Œ.>{}%– ×N؇€‚i‹/ÙÍsÃôÈeæ˜óy£¤Sb膜3gG1ˆÜJª l/LÄ)á„‘X.ÒN«œ“?s¶IùF¡¿iŸ(3?²]ÃàÇâ•¥Äp¼²¸9žFI$pd»6 Þ‚JÄ·™8 ¡ÉTÈ2kï’ ”•ø&LfBY~µ|õmg>‹üëEõ’3°ÒÀÒ]€E'eªiOÛ¯zyU†úõð2†úõ|Nßfû6Úe;úb²_mér³Â™ÛZ––±SI1û–·Ð&©•]²Iñ°aA•TÀBCSµ-êOr(³SHSÑv `Ý€ªA´Zý÷.<ÏlcQ!¢Ð•¶é1Ûto»¨ÛŒ ¡K­-)j#%Tj¦¦µg#ihÔTK¯¥qž M£(Ⱦãî$5|,tò¸­½ª™e@¢#ÒB3ÉȤPOWë¦Ñ£¿=-–îý%º M£§²l#(%#’wä·¯’Êó‹;À©jŸ€×™•K`Ïkvx»òìˆh™´t©„á¹þ¥4¶h”‹/Qx9¾ÇÂÖk"¾!?sEnqæ¬ÉtRž¾=‡¬Xsó¥ù¸gûÙÑ.ÎÏéæ{ŒŸ¡ZV €%k;}·hâT#ÊÃo?
-/¬Y\:6v¸Éúù{'\gŽoC “s¨òsb+Ÿ»¾†m,Wé°îiPç“#…–aèõ¹qT)ÝƵ9òÔ~vÀ³´ÉžØTÕ¡J
-‰jXGŽÔ h%kípÛ+rÕÎåjA‚)=rª«p}WZB0ÄÒ›K»åaÐ@æáØćºf•ÂôZ¸æ>åõÅ·Ïû«yMê¦Iò‹eB
-ËÄ0EÙ"@2R©c”T˜ï®©«Ôÿ ×N`endstream
+xÚ½X]s£6}÷¯àÑîŒT$“§lê¤Ùéf[×}r3rÌWÂvܦÿ½ÂÂb’€M2BHçž{tuõ4]þF,h¹ØÕlׄDGDóãž®=Êo7=”·ûF Üê˸÷óµáh.t-liãY ˺ã mLúÄp ôþÕ÷»ëÛ›¿F—Ûìo¿ß
+†Ë©|
+Sº*ÅžHiÎìY=Dä­i¥†S±d‰ %ž™Í&U´ 7O*03/Œ*ácÂx µ­GÁj 8õŽü:Ó¸þ†Õø飌¡cc›0
+|ªnKÅ”ñi“ “”>ò0Ýž
+??‹œOôYðõÇÚ¬qS„Q˜<žª’XÎÞ%{‚^± HèüÃ’ýäý÷ɺtPÏ5‡ci8ÛV°²ìD…˜Æ^êϧQ(Ò¶ ?V”Ÿ…‰^Á,ùªÀ÷äÈ}ò™´kÔH¹—ˆÙ>WwÆYæÏaç*¸Ý+±Z^ÚõØ)P0c\NÜ HàçÈ*Q,Ä¢QŽ©¸$BPO1f=^Æe¢—ÿJÂI˜!ÓN«|˜“Ýf|Y°zä0ó‰#v _{yºNVñåÍ]Y4Q2‰£ÊµIðâ-F©œ›©ŸífR–y{—T ¬- ¶I:—ÊŠÎû!òüÅœEÝEµ|ß2ìX¼Ì@º g º6Á*X‚lóZÎjÚÎé5 ƒsZÝáå ­î|ÎZÓCfœ€*ƒ=PWCW˜•Î|®eµ2
+¶âþQî:”Â¥Y:(=ïðíBÛDÂBÛ4ÌêOêSn§ô¡8›
endobj
-1661 0 obj <<
+1669 0 obj <<
/Type /Page
-/Contents 1662 0 R
-/Resources 1660 0 R
+/Contents 1670 0 R
+/Resources 1668 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1638 0 R
+/Parent 1672 0 R
>> endobj
-1663 0 obj <<
-/D [1661 0 R /XYZ 56.6929 794.5015 null]
+1671 0 obj <<
+/D [1669 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-1660 0 obj <<
-/Font << /F37 1042 0 R /F41 1238 0 R /F22 977 0 R >>
+1668 0 obj <<
+/Font << /F38 1042 0 R /F42 1238 0 R /F22 957 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1666 0 obj <<
-/Length 1138
+1675 0 obj <<
+/Length 1178
/Filter /FlateDecode
>>
stream
-xÚ­X[s£6~÷¯à1îŒTÄé“7uÒìt­ë>¹²­+ 7n·ÿ½0Ø8 Î:“$Χï\uÑtø#šgcÝô-Íõ-lëÄÖ‚í@×Ö0w? ‡wPõª¿õa6øñÎt5ûŽáh³U ËúçmÎon}ž§CdØúƒ‡Èvô›“ŸË¿¼Ü>Nîîÿ˜Ž†®u3{xœ”ÃÓñÝx:žÜŽ‡ˆx6yã€pAàîá×qyw?}ú4š³ƒñì¨K]_¢›¹"_ó…®… öÇŽMß³µ¿áAÇÄ÷ m;°lÛ–iV#Ñà÷ÁoGÀÚl!Úf?Ûô°ín‹-R3 Ñ=ì[¾«¹¶Ó0 ·ÈÑõ›L2D#…” ±\1d’‰€•“{&—‰XÆÉOåó"×G„`߶:Pœ(¾Ú£Et_ŽH$q(ˇîuê¶ÎSkIÃP”#_
-˜Š)û®kkµq
-?”Ähg½¶Ö­VúZ^ž _žQâÁQ‚ô[¯ÛNØÁ@ñª Û9(…Üá/|.g˜ØÏ?ÛûÎâªØ]ÇæÄ¿¹O¾›rì%ˆ²}7z2[óð¬u
+xÚµX]s£6}÷¯à1îŒT„ éS6uÒìt³[×}r=ä˜.F¬${ã~ü÷Š/Û8{7™ ¸Gçž{¯t#dÙæY6¦®åS+\ lëɼ» êPš_½› ~¼ÅE!õÏš,X´ƒ
+Ä©Qß1CézõÈe/[±®ˆ¾f‹Úm3ãkªÞ6o(±–!Q)ÎÜ9‹¢:9ò)ÄŽO ô]L
+ ŠWRß÷¬Æx®[i<Í„¬ÜŠ³yþ0+Ÿöøå ±1êÂl¼&Uï˜*õ¡ã™„-©º'¨ºçQul ìÓÖˆ°Dƒ^²6оƒ¬ŽM¡ƒi•µ…ë›Ò:‚È·½ît ¾};ðhtL —BS¯Uïµ2•|Jó-Ws!ç©èP ©Ðñb "ž°m9¢x(ÒHµPz¡S-y>ľãžJPrQ‚"CìÒöÝcùv%½”å÷(zŠ S,õ§åÔÂpeñì–(J¤ràŸ«ÂÕܒ蹨uʃég^A™›”­øγÓ,êÙ^×æ4rqÖþ—ÿöµ<ðboþ{ñóB‚D<ÿÍ{n3¹ý_&aR–4Ìó»¹ÊxØ!¡¼Å²s#¦YOû=qÂÕ¹“+ÍÂÏ—°ÎÒ8}2ÝærÃ’žú/9“ú‘3Ý`?s³3&€‘@ÇJÇ¡:×-2aÒo¿ óªàJÍM‹.牙¡ÊíÙkå¤Lͼ|{””Šk dTw‚Z1räé«o+ô¥POË’˜:Z÷G^‘iÈÂå¹Æ=l÷øªø ˜àÇQ¬·­©P U>̺×Xœ¯LOE•¤"âê³'J~ez-»C¡SPz›ñ³ø¬âH!tßÆ<ïjò»Ç¶·G>“bG­f—üËš+}¦µ–ùBJÀP;êÅ:;QˆÇ&€K ãÕ™0¹~9HÁDËm/tÌ£/Ä‹£¾¡Kÿ™BE¾q/¤X¶ÖËsãqˆU,!ç6f¦] FÄ7q!ÓËyÞ÷ô
+n¹]Ò;X±,㨶‘zÑè“ø¦Ç0Ë!`æˆlÜÃS‡•ªC‡GS/ŸA”šIÃ^‡ùºí„´04<·N²2S;ñs _üˆ!E6>ÑçÄ<­»óØÄ7É7sŽ?‡É:âߌžZ/vâÜ2jU`MÓ¶ã4L`~Örøeþªi.>j{9‡tÍÿšAàìNÑœæ)¶=8Ô¯IåîrÈ|w&wLýSʃÒendstream
endobj
-1665 0 obj <<
+1674 0 obj <<
/Type /Page
-/Contents 1666 0 R
-/Resources 1664 0 R
+/Contents 1675 0 R
+/Resources 1673 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1638 0 R
+/Parent 1672 0 R
>> endobj
-1667 0 obj <<
-/D [1665 0 R /XYZ 85.0394 794.5015 null]
+1676 0 obj <<
+/D [1674 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-1664 0 obj <<
-/Font << /F37 1042 0 R /F41 1238 0 R /F22 977 0 R >>
+1673 0 obj <<
+/Font << /F38 1042 0 R /F42 1238 0 R /F22 957 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1670 0 obj <<
-/Length 1697
+1679 0 obj <<
+/Length 1329
/Filter /FlateDecode
>>
stream
-xÚµËrÛ6ð®¯ÐQž)‚oNNN"§Î´Në(§Äã(H„$‚²¬4ù÷î EJ²-Ëíð€År±Ø÷ C>2 B;LÜd%¾8$¦ùÀ.àßû14VCdu©ÞL¯.¼h˜ØIè†ÃɼÃ+¶8&ÃÉìË(´]û 88£·¯..ß¾>?‹üÑäòãÕ™åÎèâò±†Þ_Ÿÿùçùõ™E‌Þþ~þ×d|­…†Ç›Ë«w“èá¦×ã‹ñõøêíøìfòa0ž´ºtõ%Ž‡Š||¹q†3PûÃÀ±½$†k˜86Iw˜üÀ³ßóL6ø4ø»eØù«–´ql× ÝôIÇ€±c‡°Š‚Ä=×Sürf…Ž3ª„¨­ËØ‚Ö\–(²þcØ}š­fLOþÑCAs–qYëÙ/=Üèáu3 ˜!vnwÏï+Vm2±Ð³ “·¢º-ÄÑëg\ÒiÆ,š-DÅëe. ^ä”=I[’׊ #Û‹À†-é²íÐvúÕ“ÈÚeÑ“Œ¦4]2‹(ß©ê&iÆhÁ‹…Å‹šUw43¶_åSVfÓS'§÷–a%ù# B·²déÑÒ¤gE-­’U–r\WŒ£¹ 0'sÚQK‚9æü?UNM~u§f÷õÏŠ®&GKÆò²ÞX,ÜÑýÌå©(jšÖÇ­'û눂ɆM“[ŽÐí³túÁ*aÂ’‚Zu=C òKÅâ©ÚULŠì®‰«æ9«ú¤Xœ±bcÑB®Í€³d²_54ö¢+]ÞîUºmedemÍ+‘Q_?fªžH§»dùŸˆÑ72­™•ñœ× '¤u=;Ážö€[JQ€¸*«%ƒD˜”Ö›³ª¢Ù)ŒzbFkúb.÷º™¼X/PJT/VŠfÙKY¬y1ë“t€VÝ9<?w¿—Ò’)mJÛ3çåo•üÞÊX±¨—')lÂÓØô¤‘/OZÈî±07M£îÑõæÈf_«ò¿íõÏmѼ8žEË Çé×Ôä¬×åÃ*EÆÓM¯~mûÖSE¨»xÁï˜9þìõÅYYR)ëeµê!›¤ï#U=é¡Òm7í.x¼}¥«J‚l'ÒM¯ª£Cµ^ÛÜõF{ÚV6Þ±ézãÿ“à)¿L+F¿Y³úkz̆€Ppg¢–èÛ -?²c׉v‚PÙäÕ…K†-zŽn•ë‡A{}$!d¡ÜD‰W©¯xŸjh‚9䨞¾c_Ç-8Rh ÅŒÀgIÌìåv®[°•ÙaDj«É’µm‰Hl'I1Ò4ì3óàbéy¾¡“á<o$š
-¡U©ÇE&¦xS@x«Lj£?š2³@bF 4ÝèïÀ¶'Kn–íl˜SCLË’ÑÊì£âIC©ÎV+PlÒ÷ &Š†#ŠC4‚V†¶]¬*ª­‹ÿ“1# ’Ñå\#ë%„‰GL/Dá atÀ°alÇIBž¶l ïZö7ààe½WkDÜpš‰ô›×R08Öjœ¦Õ0¸FÿFÃ#‚×ÒäªÚq$ýd±9]e&èÖ<Ë4¤Ü#ºËÞ{t vDH8$žk'.Xáð#&²ºTê g¶æ£¥B¡h ·š¥9¸ïlNˆk;¤t÷–êÀö]g€„¡ßßÿ<ËÄm‡£¬ÃK<Cà쎳æ‡20ŒrIÛ ‰u!nÐÍ"sAkúŽÙh¬kÆZRµA¤<§0b]t)ozí%á®3 w &:Áp4.Æ
-ÅüýRnžr÷Eÿáïendstream
+xÚµXÝsÚ8ç¯ð#™9¹þÀÆž<¥-é¥sMîRúÔv2 ©,¹’H ×üï·B6Ø„Pzð`y½úíoW«Õ‡ïxð÷(vã4Ha:p#Ïœ¬èyÎ ¾½ëù•ª•PSëõ¸÷ê2LœÔMã vÆÓVâzIâ;ãüs?v÷ ¼þ››ëË«wŸn/Άƒþøêæú ‘׿¼úkd[ïn/>|¸¸=C~ùý7^ü=ÝÚOq…ñúêú­•¤öñèíèrt;º~3:û:~ß7¾4ýõ½Ð8ò½÷ù«çäàöûžç†i9ðâ¹~šNÑD¡ °–°ÞÇÞ?ÀÆ×u×½ñó=7ã`O
+¡QN™aMo¤PíÛ2c‹¼‚ýw;ŒªjDžj+ëGÞßD®˜˜í$[çþ9UxÂÂl&$ÕóBUrQ`Ê[L7*6;ýxè†Ã ÜŠ†nÓ¡§ö$Ø…h1ÃÎænøë^’1‚9å3D¹†‰ƒÙ/Ž¬ÉŽ
+j›¦u§Êz¢w`“1
+©¥PI$Z\“FgCæh¤gnUÒ5'¥žÉHAX§òh*dõ¶Hh²Ô?$~0³¿3)J½z¡Äu)!ëî/TºÎ桨ӯž][D+7­»_òé‘H¸@J`¤5;–Ð Zçô±`’(Áîë DšD,ôQ™˜¾B˜«@ÃyÈŠ¨võ±Ò;È®l~÷¬bn+,d1šJQt¨²çÇ®I‰Q¼Kh/äï§!±&ˆÑ‚êÉèîlüa5 讫lDÏšÖvÝÇìd .r¬ñ(-¿øÒ.J'Ó§„<3vªG”çâá(ë°äïÛ¢vß7”
+© 3rqZÞÙÒ%b„ÏŽ\7
+ªu1o K¬”žËEKXOú¶p]OZ¢l»š6;Ü®:뵶­µ~m—àæhlvíNx-ÀÿÁÏÆåÀu¯AH@(¸¹ÐꀿÍÔ Ý$ð†;I¸ŽÉ«ËÀw6œ¦fX@;ò†áæÃaz€&Js„Rö¢á£†E°€9j_ß’/žpj4¬›lŸž‘ÊVóЦ‚ÈõÃÈšÏɆPãf qÓ4‚²Ñ©< c7ÃA¥§ä°¯ˆ •i-Jûœ111'ÓÞº/Z˜ç ?!Uef„iMVöinb\ÛÏiÕmÇ`+e\–ËÊÎ:Ÿl+³³E‘¡½3éÍD ã¸Íc؇¥ÌÄv¶ØF×|3F€G¥ý«©ê9¤Ÿô‰íhÈ1¤ÑžÀƉ›¤©ÿóÈ¡é%»‘ý°ÓFÙÚÚÑœ0‘}³Íj£A`[keV׶ahìgx# Z½tuF®¹oÚsÑämRøäk­í̃0I‚ÍU+*Á0q €T¤Ll¢øóúþë9õÿ
endobj
-1669 0 obj <<
+1678 0 obj <<
/Type /Page
-/Contents 1670 0 R
-/Resources 1668 0 R
+/Contents 1679 0 R
+/Resources 1677 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1673 0 R
+/Parent 1672 0 R
>> endobj
-1671 0 obj <<
-/D [1669 0 R /XYZ 56.6929 794.5015 null]
+1680 0 obj <<
+/D [1678 0 R /XYZ 56.6929 794.5015 null]
>> endobj
470 0 obj <<
-/D [1669 0 R /XYZ 56.6929 237.9969 null]
+/D [1678 0 R /XYZ 56.6929 122.4687 null]
>> endobj
-1672 0 obj <<
-/D [1669 0 R /XYZ 56.6929 205.1687 null]
+1681 0 obj <<
+/D [1678 0 R /XYZ 56.6929 92.1609 null]
>> endobj
-1668 0 obj <<
-/Font << /F37 1042 0 R /F41 1238 0 R /F21 954 0 R /F22 977 0 R >>
+1677 0 obj <<
+/Font << /F38 1042 0 R /F42 1238 0 R /F21 954 0 R /F22 957 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1676 0 obj <<
-/Length 3186
+1684 0 obj <<
+/Length 2946
/Filter /FlateDecode
>>
stream
-xÚ½]“Û6î}…§/ÑÎÄ
-?õÑ>í¦›v;×ä.Ù»{h;s²-ïjbK®%e³½¹ÿ~
-»**êÔðÛ&ª:†^Ñ9FŽp©ùXuLÞƒªæ…Ýþ¸ùëf„Œxû–×C9©Õ¬^ë ºɉBTõ=¹¤Ól‘–ÂYµ²;êAáA§Ð|¬6jµÕv·yÎ_»Á‰ÍbÃÚYñ„ƒ¶V @5Å{ˆ]JçŽûw5Ñ÷{»mjßö{_t•â²ølv ü¿ylúÍŠš‹r<·ØlšÇФ‹ÿå%ZÐòæRÔËävDr8©Z/wM«jÕÔÜZ°®œ¬ŸÂžq'kb- ¨’£]«ÏCL:ò*›Æ™T>rÌLAŸûM³(x—›é—öžìRìU·/öÌ)oÌ'U,Ñ^^Õ pV¢U»µÕbƒÊR ,T†½„AÔ‚¡ï÷@AÚ~Ñ–µÑbÝÛ2
-O-N­öÔlæA§K2½ix¸ü\€a1"‰ªu˜Ø„n1ìtÔ㮚W/é{Íߢ^Qãõ1 ©ÑiÝœ£‘ëéØA¾¢€óa0ÌÜ> 4ÃÜxS¥3vjR8ÝÄ×ÚiËcBÆÔ͸àp˜9±ðó«°ÂEPÀ¹†Ž|ÑÒ
-oDŒÜ-5ÃK¸—ä÷tqCÁš&i•°N™-\$ÜM(B'²@‘Oâc€i§þhñ’,Æ(k´ø‘ÉÅyÌ–6*Z;H³%ºuMž¤›
-ãd`2j»bß¹ \Hë¼¹L, Ç÷–Žßàà‚ç¹ÃÆ‚M„Ot§³¡
-‚YœALx>T ±Î‡ª€…«~,ŸæçÕ]PÂ<¿|ÀšX®`423@—ãx»+÷às[
-Y"VOà Õ’û$Ê%µ)5€­\ö‡úND4uÙ¾¤hÄUœ8Ù2
-€ÕYÐb¡µ`Î"Blj߶ÄûŽÚs™f±ÉôÑå,[®3+Èwèå, Rc{G×ô‰Û¤ï°™Geá\ãÓ?½&á‘3áW¹ÄÛg}øñ
->Ô†³ÉЋé
-7ÿŒ§úq¼Ôi,ðÝçH'+løš¤baÀ†KÓ몆PNrÍ/ŠÃl´ìÊxúBS¥áfõ¶£”‰Þý?@s”Å/ý‡Ç2PlÈ/aÚGZDòÅãwú¡LA‚©´N†,èóø…
-ÛÛšLÑÿ÷'‹r4ÎDºüûC·›xºÓÚʯáÈ‚‰æájxÀ­Bq?‹ê²\•+tKîÅ9J_/qãŠMånh„<ZôÕ¦cPÝ1σ§:^ËÓ‚“/Juþ™¿$Ïàÿˆ&LR„g¼ÿùïJ‡ÿr¡F³LM'Z@`Vyê™Ba¬=æ<ü¯é”õÿ ¨Èàendstream
+xÚ½]oܸñÝ¿bq/‘ˆ!)RwO¶ÏIsè9­ã¶wT»ÒÆBv¥>ì8Eÿ{g8¤VÚå:I ,j8ç{¨ b‘jÆ£L-’L1Í…^¬¶g|ñæÞœ ‹:¤pŠuywöêu”.2–Å2^Ü­'´RÆÓT,îŠß‚«?]üåîúö<”š1;ũ˷7?$£ÇÕ»›×oßüíöâ<QÁÝÛw7¾½~}}{}su}ŠT X/-… ^¿ýó5ÞÜ^üúëÅíùw¿œ]ßg™žWðòéì·?ø¢€cÿrÆY”¥zñ/œ‰,“‹í™ÒÓ*Šdsöþì¯#ÁɬYê“ŸŽR¦S™x(¥O€:cq$##À¢\çæ§S=V› –%=‡®,ØÑ)9ãÈ„ÉX
+¿V-R8Å"¦„)‡…Lå}Ÿ¯îÃü+7
+D‹øùÝG,ÏöS™¥Y¤d6ßÿb³i»ó0Jã` Ò©v›’ÞªÒMô =»û¼=i`1r ­ênà ‹¼Ï—yW‚%°æfö„itŸ› ’ êíNÍc=%Y„ðÅœT°LkâÛQlË'zZ¿„7™Ë¡'pµ¦çä€ðæÃûüÁû{;èò­5»²Íûª©ó vͦZÙ×MKƒzÄ'uÍfÀEæ Ü1/Iéu6Çé” =àW
+ó}s.<“ä‰cÐj‚M€ðÜBQ°Ò.´:@TœÁ0çCȶÜ6í“]Nl$p ®«– ®¶;³Ió` ~ý@åQ~ç\®ª²FÙÏzrž Ò°¿¯:5;$Æ5É™*3ÔîHóî#À•c®
+$=PÊ :;*þÈqYÊX/bè±€àõ éC²,MSòGŠá”¤‰‚sæbɤ
+fô¹8ÕÁëÆN—Ÿsp #
+K‘õ¸~d^óéKOoöÕ†/éyiŸ¦ÞÁÁÕ! ©ÑgÍšƒ™Kè _‘Àù4RMŒÐ1fÊ™*Mœ°S•@rûŽâFÄ*>,n€º±Ù=6¦æXøøkn(à\‹xÑѱ qËÆGd»¡Eû*„Ç :Š¹Ú­»à¸·ÿéjÖØ…`F,J¸ØWSa õÎ?Ðà_fC'þÙ~¯^
+U•8Ú¯7½Locy1ç“Þâ@¯ŒYGõîöïŸ|¦>áøò9ŽÅW9nQäŠòÆçÅ‹î$ÏòØVœä~úŽc þêÿ)xù¬àÅ„ã'½öó÷s­××eÀ_ÞÓhèà5§Çè8ô†EuÍ`æšÁll³Iïzm©ìó.EnÄË[XÓSœœqB 옛¦i]®zŸHlkˆñ1Š©&‰t¬†–ÎQ#9a·¶1Í…Ë€DŸ†j¬³w4Ö æ ãÛ?b` g7µ]»,GÜ®êzÜÝg‹PŠ Q)lÙC[{þè‰z™dÐй8šX} 1Ztþ˜«,±¸/=Ô4Kã1Ó¯6e^à ê<ŒÑ”d’0§Ù×Hj‹PÔ]W®Â|µ*w}X~ÞU­·4Ï2¦Sý½dŪÈ]}xÅ¡·Iõ3$C%1ÇsÇÙæŸ)0„}ï“@ mÔ3t¤¥±Í@rõ³ôbhÛxü=ôˆ\W}ñ%º8eÐÄïù³eVáks¡Ð‹R·õ—²mº »&?Å*(AKGÚÕgðÇå¬Ò¾izSY(ç‡刲 ð¥¸z@³80#bWaE<tv!¸×zèÈ…Ê\T>U>ÐdÕw4ÓØy‚{QÙP3 PŠ%üÈ–ëÓ"^Q¯÷w|û
+>T‰´u
+—u™ß`o«ÒöR•m‘<¢?è¨ Û,£¤lOh¼„Vwíy þ.Ìö‡ãÅËa'í»ÞYáÂÁ³×ûS¬Ó×û#I¢…üŽ7®‡7`R³,ÓÑó[Xž½gµtÄY–Äñ|s*¤†Ö¾ýH¦ /…­
+ ì€ß>”šEíš<íî” Ìà‡¢HA›jQë¦ó¥¹¶¸»¼¿§Ä ¯ÊhyFëøbBjso³qÝ„
+¦FkòÒ+AF˜L$ÜzÅ<™&âC€i'.³¿xI£$:ZüÌdÈâ”8d+R2XÓG-!¸«w%Ü"9Q*Ì“ ¼¼o{s} U3Ïb~kièÙkœ\Úu&ÁÜè@ž4€ît:T‰
+=ºÞ~&TM°ž U wýX>…§Ã•-H®žß~Äòì? WÂ霺ÇØ]Ù‚Ïm)dñ,(žÀAªM;¨“KSi
+9žíQwÃrãö³õ&˜G¥sÏݵՃa]äç›÷ﯯhü±|¢ÁL^oŽÄ˜»×ÍP““%¦pÂ9_‚4>˜×SoÄt<m°wÏ”ûC‚âÂÄ&SÚzìÏõªÚP¡Æ[&„Òg[™€&Ë}'kàÑÊS‹¶kìS= •Â¾x[H”cœ4ñ¤i1»Áø­0—]žx’¥,Q©ûh³¬êÂ÷ãÌ쬆°çËOÄ2Á:£ÙF³N¦­‹C{¢ôXû/5TŸß„¥ñø±²+;ì
endobj
-1675 0 obj <<
+1683 0 obj <<
/Type /Page
-/Contents 1676 0 R
-/Resources 1674 0 R
+/Contents 1684 0 R
+/Resources 1682 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1673 0 R
+/Parent 1672 0 R
>> endobj
-1677 0 obj <<
-/D [1675 0 R /XYZ 85.0394 794.5015 null]
+1685 0 obj <<
+/D [1683 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-1674 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F53 1333 0 R /F21 954 0 R /F41 1238 0 R /F39 1178 0 R >>
+1682 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F54 1333 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1680 0 obj <<
-/Length 3658
+1688 0 obj <<
+/Length 3839
/Filter /FlateDecode
>>
stream
-xÚ½ZÝsÛ6÷_¡·“ç"Ÿ$ð˜6Nêë5íÙº¹¹iû@‹´Å‰D*"•ÔÿýíbŠ¤(¹½Î4™Dàb,ûñ[€bÆᯘ™„%NºYê43\˜Ùj{ÅgÏÐ÷áJžEdZô¹¾Y^ݼWéÌ1—Èd¶|êÍe·VÌ–ùÏó„Iv 3ðù·?~|÷áß÷o¯S=_Þýøñz! Ÿ¿¿ûç-µ>Ü¿ýᇷ÷× a˜ûÝÛŸ–·÷Ô•„9¾¹ûøŽ(Ž~ÎLzûþöþö㷷׿.ÿqu»ìÞ¥ÿ¾‚+|‘ÏW?ÿÊg9¼ö?®8SΚÙWxàL8'gÛ+m3Z©HÙ\=\ý«›°×ë‡NéOËŒÔ hR1›j9­eÁR!€)Õœ%2U–¥˜ÒräB-·ŸŠ—ÅsÓd»rÍ6{¿¸ÐŠqa“Yö:® !dO¡SæàÏPŠåº¸^(‘Ì¿¿ÿÆP+ãÛ¿p.7£­é÷ÐxB:ª÷Dùðð°X>Ü}ý»<k‹·ŸÛùÝS½.jÕ»¶¬+jGZS´4gVåÕƒ™-’„iÎ5¼ª`Îéš[í¯…yQµe¶KÒÒO*µšWuK XÌÛ7ø`@|ª¨'ÈJ_ËM˜á± J¶ÙÔ_‹œˆ_ËvÈÕ ‘@F¢l³vµ.«g"gDÜíËjUî:±Âš(
-ì ,‡­Çb"f‰Ä0¡jŠ{‘ðàÍO%Έ»lßN¨Y€žµ5QÏŸXZN¥ýðt6%zT/ù¤|~„·Ü-›"hI¥P¯Xá†fDªPq'”
-ZRɱk %` -AGдÎh Vä]ˆÝ®¨·¤–uñ5òò¹£Ð×Ðv梆À3Üÿ§!“¸ù]EÂok Úøf«¬)š7ä×gœh¡ ü¼:*'ha¯Ã‰Å%4ß$Hi¥""‚Òöo ‘bHC>\à ¡@t$yœluÜnz¬êjQüVBÃDÆæðxœÊÍ7å§"ÔGA¼÷Ä”Þä†D
-¹×(yÝüžJZ2g­®£q¾EoÂÓˆï`p’ênÕ¸Ù!6L
-Ø +£]\ÜɈšàõl$wó—ú€ruApÒÃ÷_²}!5¸€‡-J^`ʯŠGBåz¨6EÆv«Æ(JåƒeV&ÉÐð~†ˆÒþ1¨ )PÅe¨Ðç::®££®qÇH[˜6}eíŽkbñ!RP°º­¾$ôšÎß
-ƒõóâ»b³ÙzOŠI
-|¥‰Ä}ù…TÔ *h=Q©· y"
-üì. £L@õ'e‚Ád ¥Iïr1Ž÷ ~Ç9Žã@Zwsãçý
-
-mÜ+†}® ~¹<HÉVëbêÍÑâÎ190µxdšX|œ¸eªÕpõå:–2ñ×>¯4€­Ýù“ŒÞμ«G8åyÝñ„iç^QÝ‘é‚æ“Ï ‡íîŒÞÌ}yåŽété¡Þ°Ó ×^F ¶ËÚu„hÉ)DëŽ
-= 
- Y'
-X—öÂeÀ
-Ž¢øÃ}ô­$êŒ-ê„AM<„©çäI
-SÛDýåàñ‚H¯+ų Ãð+ê {€A úcíã—ì:ÄoÏ\ZÈÔ‚a’ 
-n’S?â`xðf§¢ÿ¥Ä±Èendstream
+xÚ½]sܶñ]¿Bo¥§9
+–³°Ï^ÿôþíå»xõ¨ìêò§÷/V¹æÙÛË^Ðè݇W?þøêË•°Zd¯¿{õóÕÅš*Âß^¾CG?G6ýpñöâÃÅû×/~»úþìâjx—ô}—ø"ŸÏ~ùŸoൿ?ãL:«Ïà3á\~¾;SZ2­¤ŒíÙdz &³~éÿ”¶Lçª8_IÅ,œ¿ÌeÁŒ€d´c…ÌåÀå\,q9b!—weSÞV›Õ§ê±[mê}µîÛýãüåEQ0›.]"#"-‘'d#˜ENèøx_­ë_9Ï«.BÚ¬¿«p`2 ê…°Y ÌÏÕ ý>ÜÕ뻀ÞvX}²‹Ípë-ím
+­GMuS¶ý7ôÔßÕâ/у‡vÿ©nnêÉë !2æåph·ÆŸwyƒÐÙ
+θ¶xˆÒ”; Ÿ°R†ƒèHSØ€…ÔHų¦Hé²uÛ snDdž¦‘Ÿ8{è*|©«‡ÞM9¾ICÓÓyBà¸Úæ.,ïªý—jO³õvKÐëŠ þâ6uØ»$ö+Å”T3öwÀ¿-..L¸Z¯Ëí62A¥L0 ›…Š¬J¥ž]×ÍÛ¬.¬€».
+‘ý/´¨»
+9áLòþpxx…7„Ñu l|Cxðo¿]u_î˾¢Æ2e¥ˆoJf0®—*›µ—¡bxiß#cq€wôº¬*½fÌ0QDhDâè:@‚xÙÇï^ÁïÊ.lÓÞÌÐð°q×@ßM»Ý¶^‹pëÇqM”é䫯}ÕtuÛ,Üܺ¶y¼/¶ó¼]m תõpIs£,cQHf¥;m=¤ãÆ3"
+·úzìŸÛKnaS£N< =9YñT…„£­}å­‹KÕÞ÷ÈA›l€]wí¶ê+¶À1çX>,p첧eG[€¾oDjhƒçÄ9K
+Äøñà-`ì¥~ÉÉ ü@Þ}ü¸ºúxù.Ìßo@\ÐßknÑÓjÒA :ã몞ö,›MÀGöÐ%B¤¤8WSQœ[?\5}]¢V9‰†’ä´q
+sqØë)žòã»ö°Ýи<`pÖ×k´oBQ Žèχªë)F:_YÎŒ)äôÞ¼Û.¸zX3j‚ƒ¥ëÛu»•ÈË^ö´yÓoÃⶡ‘Í~¨ö×­éhNÓOB«WD®Jù¥¬·åõ6Pà•(¡ÉÍY¶ ~1îö²ëædÀÄDšÝM ¡:À"›¸.›°áúó¡² …DѾ‡ÛùúÛüŒßÑé
+\tiÄGƒåŠ¤y/xKæ0C%$’¶iweÝ,ðÙf8x+ÂƃýÛÙÕ —g-Qæ] ¢.}³}¸œi™Ç¡¸F£3åÜQ‚$X(íâ6»Cä¯Üv-®‡h!LÕ7£® <Zîuj¸§é,ù¢t“àNPþŸHÀQ£¯ÀJp«§~ŠuÜèXûFM,½PÌrõÌáÖÂéK/3VÏŽ'EƒÈ-àÇåý=xêªÙø [‡øXÇð£Eˆä:¢tKmÐe »+ÇžC¾ £Ûª©0¢ÝÐ
+OÅKæà’Б`\ýpñßéÉ ¹­îÿJøñ H ¥E¡×S›´ÞÖ`Ñש¯ñÞGÓÊEF0¥¹{† Ǹ)L@ª¾®ïÊæÖ[LáV8oW>Ò ÝÓqÀË)†|ED“ÐMÕÕW=¾¥Y Èhµ©Dº,|$ˆ`òˆUoÿMÈå9g:7zª±tË΄3pä/Ù™qjrÉÎ’£À‰PSp¾¦ðÔf‰B3¡\Ì\â]<hóM;â#$?ýR½ø¬¬Ž|þûÂ0rÒ¤æé¨ jŒ–‰ó1zR=!)2œI+Ü—d¼ L*=—d1NM¸$Mà’Œu áœÈ»‡¸¢Ý[4ØÔ·˜¦-U„Œ>É!Ð ÷ç8¤ ç“W$~×v=½Ùºì|õõz9‹Æ¢¿ª¦ÚH{.ž3ˆâ›Ä
+&¾”û:†Ô<Æ<\¹À6ºü¦ÚàJÈ\ͶêÂÚáÔhE)}°ÌæE1½§ßCDjÿX¨
+Ôª¨VßUÛíÎkRtˆBå9]HW©Š ݀Ÿ€ ©ÑÄYŠrgbä8ä7ºx]“KêO2‡lÖÉ©­9B¹`È6^ýs´áK Ë4VnþPH‚×`ßá½ñ4’iê
+óŒÞ%X'ô.bù ¥\ßU«oÎÇ:õdÁÒáiáð¹ãÎ’ÓÓ¯žtè|Àç™aëpE¾’‘ÜÌ›v–
+ëÜ“ã¯b$–Öû‹§ÚPLÀ¶+ä>±M0ö ÿ*ÝlݦOPvá‰ÚÝ…Æ#ÄýM×ï_Øì°¦¬'Aڴሸh9Zgµ®˜EMûfüRµ¹^Žr]äI†„êz3ÏŠÇâç\g'E¡º[
+SѬgæÝô–¥/z qžà…‹ÜüåàgØq•nI©I}AÀ6ʹñä(l‘aJ0«¤x®I—KØ ]§U%Á:¡*ËW@ª]×—=Džõº;¦3swˆ¡OR1`-1íL&¥2S:‚Ëâ‰Îà“¯bÙ(–Û(7d_S‰Æðrô]„ECTÞ†uã ‡}ÚpXC¿ˆ÷X¦â”Å"E×;5 A%¸²cÅü?!Ï\\*Î,ÜÊR¢e!L²‰†H½™3î¿”b˜Ë÷òêÍ1±ŽþÈÓGG¤…£'Y„ÿ¤§˜}µÜG%»jÆ6ëhW“ÞëhTÍ #¾•Û‡în(ݯ}X€Ë7±Ù‹ ¨É©¹áó3»wYðñ¸áÞCïy¡‹Ï1!Š/C53ÇôÎÍz˜¼Üš—^:è±”‡Ké”J+Û:‡Ê¶Ë~ö/exRÈvÔ–3<ö·a„4Î$Û€CŸáÜC‰©ª‡µéª&¬ïêÛ¦ÜvÃtˆiO+¹Õ™÷XMC¡…U±o 3ißv¥„¢¢nu!l†üÁàî|.¯~³?Yp\àð ãèMÝapÜÑ’@¢
+…jŠëVûtàž«ø<¤0=5ñȧ³¡ûÐëؼÎÁ~
+3ëᣨö•OuòûÁ#UÙ|Í $"yøÆåqwb}ø¥Hz×~É&Jì'ôaÎßéÂZ1eddäÆåày.“/¨<ôø}sæ„ç!1ˆ'¡P‚eÚoRq¸È©&`ÙÄ¿ÊÍø-ÛRá½jÖÛ¶‹ÍÕ˜glÚå<0þ|h}ßú˜ýÌW…)Ö ±|…ÝMLy[aç`áOR0`-0­\ó¬ÑSÈÛjz[ÄZ£Àc%žÆã'RQ´NZ:F¨“ùÏìºïëj˜ðÂh,ÌÀÃzÖÕ:Èià|`Z=TBœ¶2§Ñ®÷¾m¼îo¶If)цZÑaîpUË%JmÒåÿ'Òe§hçZÒ>_!žù^vD:ñ¹l@òAгa$Vx´5'Ïž0­YV@€6¡€¼Wi|
+¡íS]ä,—`¿Ÿ’þ?BŠendstream
endobj
-1679 0 obj <<
+1687 0 obj <<
/Type /Page
-/Contents 1680 0 R
-/Resources 1678 0 R
+/Contents 1688 0 R
+/Resources 1686 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1673 0 R
-/Annots [ 1682 0 R ]
->> endobj
-1682 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [222.5592 173.9063 286.2499 183.3159]
-/Subtype /Link
-/A << /S /GoTo /D (statsfile) >>
+/Parent 1672 0 R
>> endobj
-1681 0 obj <<
-/D [1679 0 R /XYZ 56.6929 794.5015 null]
+1689 0 obj <<
+/D [1687 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-1678 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F41 1238 0 R /F48 1258 0 R >>
+1686 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R /F40 1178 0 R /F49 1258 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1686 0 obj <<
-/Length 3358
+1692 0 obj <<
+/Length 3607
/Filter /FlateDecode
>>
stream
-xÚ¥Z_sÛ6÷§Ðôå䙊‚§On¬äÒ«žít®Óô!‹SŠTEÊŽïæ¾ûíb)ÑÊÃ%“p±X
-]¹]eû²¥Å¥œ6´JÔWKF™ò2WÏÙîj·¯®œ®Ø¤ZóTC©uÉ$ªøEhñ`Oá&`
-Ά©"ï†ùÔ0œ‡DŽóBHµh×,B®Y«ô“I)ñüF‘p.ÆM.Æ ]ŒˆüŒêàb°áv
-–ù†‘ƒÌŒÀ
-½fžW
-oî#8L“Jõ}ìIÙG/u´YùtAÉòÙõ;©†2Ò$•C Ü6FRMaýÚzƒMÚBd»-D†ÛBä´~m!öu[ˆìÞ!¦¿^¦Ë"'Ñç¬ÜÛ†—ô'ëM¶œ5ëL¾FZS›6-JÀtÇ¡DaËœW3ÝàPÇŽ“teŽe´ Ñ‘ ï
-%õlrÉ[H Ã~ŠkÐ
-~M.1
-=
-§÷÷tOªÇÞ.¯F(Rök†àáùÚÚß$°`±ò÷îîöx_–!½xíiiXË‘÷dÔCÞLe–;¿îvÅø/o€û}»ÆKÆW’ìR
-lPµ$ü1Îá%ßÖ~OV¬ˆáŽ‚÷û‡y,:™ji½gÍ,`Ü\£×v½Â0Lý…ŸéÎ:ðx§t¤§×nºÆ˺å@ø“Âôpªy¸{'ZpAã\ 0»åŒ7r˜§å‹JÓwÒ<ýÈNqÒ\ùÜ@»ð·=™Ë;©i˜·\ÛåŸMÇ|@avÓvwLìâÉÑ%~ýk_‡yä
-vË°Êù¥ç.[À"nì\yMøÔx¯Ý ËGŽ]v>Œ
-¡+6E™íœó"¯
-’ 1¸p9%m³Do‹D¶+¼ToÓ e7[ï?Zä~æTUMôÉ9vóµô$Eô1…S-`Õ {‚Œ‡]æÀ(\ ¿3¹õIø½¾ûï9NCê]í`Ϩ7LQ&F}‡lšˆAè6+ ZÉOŒBü"s3ÿB—ü®ÈŸñk¯Ó8æçüŸ×¤Âž¤o??Ì?ß"E•×õ„ÑÄ%—DyNÅIì‘=ùŠpŒÜk€°‚¢1²WåıÓÿ¸é¢$0¡H†“ŽVnP—Ó îñ]n¿ûÉò¹#÷MGnöÝo|ó¿?tßNúK“ŠÔ9V4™4Õ·>tõ„Þ.š¼»B/¼WžuߘšÓ’IÔ<·¾—9]øõ[ TænH¼W÷_ ãÁÇDêá›Q×ÙÓÕõ¹¬!æ:¶¬_¾5#å¢3¥åôJ__mÇ:0Q¨†€Ø–£Öã@F©ä+¤qK™À˜
+xÚ¥Z_sÛ6÷§ðÛÉ3M
+\ú±€“4 ÏPÔ]góeÕ4fnÁ±H
+Š|vþkF€©…Œƒ4IÅTwŒJ@T½4àÐÖ¬Ò"Ù!Ü"¥÷=è±m8B$ŽÐ„áâ׫ü#DüÄ
+ÁÿÎv<¥×<¬¬7Y¾ìÖ™€sUZSCñ¶îÐÕ+™³jfèéØQ’"Í!²Ð›BA-›Bã½JD Ãvòkо8®‚‡c;9
+וÂ58˜ ÀFâĘŠSZÀ&žÅؘë4Æ.œ|Û´ý±D
+þP™tŠøf‹Y
+€¹û³™Ë}Àšg}Ÿþy÷•@ê.sA®ó¹>Ä„¦ƒ“2§Êc„´'øíÊ—Ú2óšÚâýŽÒ)+•ãÜòÀŽíðrÐÎ8wt9ĉœZ0ðÎÔ%ΈÕçâ6W¦­ÜPmHô$'zŠ­NVPm|ìçt(Èk¸éKÄ3/Në¼G8ÚâñíÊ–LØÁ<§u8ƒÍJ.ñ H⯿’Ñí8”×YG­+ðcÖ³ÚoëÌÝ_¢EKh!ÈM¦!9ºªH´]Œl#ð9×NÅÙ[ ~\áû
+iä¢*ù­
+aäÑÕß°ü#\F
+œ‡Ù˜ë4Ì.§óMÓƒÆWöÅéÙ²ÁïèFÇ:¤ì¬׌Ó
+ f$S9ž®0jhkz r×4Ì9ØöšÁ»[¢;Ÿkð¦‚;bɃ<ý|Û;nqßl‰\Ù/¶âî Æ´{Oã³(èáoå O‰ bq˜³9DfSÛ1Üì·¼Ú|Þ¨3ÁàÁ3¸}oé
+ãÆšµÎ£1JýÅŸth|RZéÅ®ó¼n:`Þ;¥(Ýk5wwk¦·'4δ
+“»~¸kbO†®¬ð°Æ“Ïp꜎ÕÎ.}âLæfð–yIXk¼Õ»•e•c“]̺…ÇrSVY댿R^,‚Ä`ÂÅ‚¤AJŽÖ Y[z®Ñ¡AÍn¶Þ
+/
+ߣªº¡ò‘»ñzúÈ=ªp°䲞4Ob™#f“9ÙΊO8Í}Œ}äoîãûŽ™Í»oNfÃ%
+&#5¶è@¦¡0ñ=Pgi¡„Ûdƒ†!>ÍÜÞ}¦Û~× ÅŸñYá×hñÓ#þÏsR†OÜ>=Þ}ú€%J8Á'&.¾¤’§ÔÇl(ß•
endobj
-1685 0 obj <<
+1691 0 obj <<
/Type /Page
-/Contents 1686 0 R
-/Resources 1684 0 R
+/Contents 1692 0 R
+/Resources 1690 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1673 0 R
-/Annots [ 1688 0 R ]
+/Parent 1672 0 R
+/Annots [ 1694 0 R 1695 0 R ]
>> endobj
-1688 0 obj <<
+1694 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [108.9497 731.9163 178.334 743.9759]
+/Rect [250.9056 758.4766 314.5963 767.8862]
+/Subtype /Link
+/A << /S /GoTo /D (statsfile) >>
+>> endobj
+1695 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [108.9497 604.7972 178.334 616.8568]
/Subtype /Link
/A << /S /GoTo /D (dynamic_update_policies) >>
>> endobj
-1687 0 obj <<
-/D [1685 0 R /XYZ 85.0394 794.5015 null]
+1693 0 obj <<
+/D [1691 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-1684 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F41 1238 0 R /F48 1258 0 R >>
+1690 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F42 1238 0 R /F49 1258 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1691 0 obj <<
-/Length 4004
+1699 0 obj <<
+/Length 3811
/Filter /FlateDecode
>>
stream
-xÚ¥ZÝsã¶÷_á·È3  æ:qî|©“œ“úÜv:Ih‰:±¡HE¤¬8þïÝÅ.ø%Êöµöƒ@|.ûñÛä¹€y™À$ar':ˆ„ŒÎ›3qþ Ú¾9“Ügî;Íû½¾¾?»|¯âó$HLhÎïW½¹l ¬•ç÷ËŸf&ƒ ˜AÌÞþpûþ替Ý]]ÄzvóÃíÅ<ŒÄìýÍ÷×TúæîêÇ«»‹¹´‘œ½ýËÕ÷×wÔdxŽ¯onßQMB?'&½»~}w}ûöúâ—ûoÏ®ïÛ½ô÷+…ÂüvöÓ/â| ÛþöL*±Ñù>D “$<ßœéH‘VÊ×gÏþÚNØkuC§ø§#D¡6çs¥ ëOsY±”Ð)Ž’À¨Pµ\å—}/äò²¬ël1/ªê״ΗÙxÛŽEbÏûsQÐöš !ì‘ ´&RiøÇ:+û:œÕYó%R0¢\GA" ³8Iòh+Æ!Øî.¤Uз¦ušuF…Ç´È—iSíèó7k*¥LQZ4Ù®L×_Î6Y³®–<IÕÍ1G"€VÃÂÈ$Q½4:R³w·¿»þ'•MÙ¢r¿Ëš*Ó5ÓMµ¥BµâôóGUf Ù*ž{][•¼¦ ib˜fG¿YQ£–Õ&Íy¢z›-òŸ…³% xrûÕ&™-³l›ÕÍÄÉŒ mÃן\ @š„| óƒz¦%Ò‹nŲÚmÒ‚Ê°ß×o©Ÿg^•Ô¶Nkj(²UCUí¿fOÔ¶/›Ý…íë&[òŠØ‰NTÉ@˜¨=R²M¾ÿ<-kâ)
-OQPéO/Ýn³rILdy‰¼ðA€~eºá*Ú)èçÝ÷I8ûû”ÈL/λ~ÉýÖ‹}×wÊWüËr±
-tj­Öiåä´¤öyÑÌsþZf«t_4ô'¹wÇë¯P°’N
- à8¶0ØÕɹëÊ|cm¥@¤†çÓ)™hå½ãü¾&­…bZTå'ßÏYr¬äîíð‹UOÍXè,Çë0 ¤‰Ìg¹¥HĦw~¸r+gÓç0þÌË©Ó“±`^4ìÄ1a¡.«¦ãcà^ÈaGŸ÷NMP—¼
-Ìã‰q>Œâ@Ãñ¾B”¡cÜšôÊnÖO{u(QOá{EÈvC3ÉþšsP<J3ª?¾MÐâªóc/c á{jýõÜ—¾ë°¾0ïpP°ç£yqõuÓlë¯./‡C׋ Ú}º¬«bf·¾\—còÂ$ " öoHß(þh{5`ÊñlHÕŸ§phk·jà-”6ˆU¤†f‘Ê=Š ©8ÚÈI^¥öáÇC‘mjê’O ‰@’x”˜ eÔ×~˜ÕYr\pUíKt‰†BåP ;‰7´øñiQWÜ·ÚlsR\¤¶¤ÚÖ^ 8
-f-Äü’qA’(3ä§M õH@ï²â)w^<63ãc´¼Î¡Ä9¨!·ö6µÑûÙp¶®p;Œí¹&åù`Üo{¯ÙS{36€ /|ÙqÄZz8`ó;xÒ§9Š›`p;äêv†„<
-°·'¸·?Ü_5±mØOd¢WlÚh¿éª,\,e·¬©¸Èv …”ðц” úv’íJC6T £¶àõõà+4(6Uñ*çAdœtŒƒŒ§©Ä±& µ·Q
-Ö·l ~˜fÓ]„Œ, ½iÀ©g»©üE:qìˆ#=¯šKLÌO™N hÂzßLVo¼ÈÀšÈ[×MZ¦ŸNÏ^@’ï 1@“on8.œô>Q:ú_#iæUÏ”¦‹&ÌNCÀ#Úõ‚1ìõzÆú^LºÑGd;Ráó«úN«6Di3\õ~M$ˆ½>ˆ¼ã
-ŒPfhJ;›c$Úø<5ÖŒ²í¨‰:œÝ4Ôê@%ôÏËÆçk¡¶áYxVvÏØ¿¤–EUþk_.|ºYz`¥”zÜÒõø+Zñ:4¹LŒð%hœ'ŒÚXfh;Jò˜D0È;´ „k§Àœ®È
-Žþ1ʇ}ÑäÛâù¾YÝb—¡¶yJ¦sŸoû‚}ð³ƒT˜Ó“¯ÓGîWdå§fÍÕtÿ!f*d;¢…/X.D† žvN¦‹YÂë¥<ÙÖC¦»÷oyˆˆÂI⯖ËÏ<Á§(-᣼]Í)›Mpu÷#¢ñ+êB ÛÈ¡bé“$  (yÚåTì€;ÜTÑoïB‹º¦Tº—S’e˜˜Ìxƒ/ 5¨ý5)áu½AX‹·U¹¤•p’ÛùÕ»ww§'Ú×mßú©„éêü·o˜üííÕ‡k‚­#¥Ñì”àåî1ÛMyˆCU=ãÑO:€—ÚD}-›ƒ7à-¦fÔѱìçbBÎÅà¯7 Š„ü¹ ýk&¾Ü¡Üа‰7ãÊ$¬.—D¹‚<†Í^1Æ£ )Æþ>Þ¨½ìGuÖ4i«…i3
-$óì@¥KV¹­KËxe|ÌŠhšáJU9HÄoɚχâíÌ xûzR O˜ÍÀмl5­náÈ~»­v §]~Mù­RœÈñ›@Å¡·¹ À†eSO#h Û¯Þ~ïµk,³&Ûmò2ãµ9Á&?+ÑäYŠ-é
-?VÙ¢µOÔâR"|é¬
-͘RÓ…p/žÂ*2ÃXb•„öê€æ ëÈScÕŽ*6mâ¿£êh $ßà}€{.PgSŽöè•ZF
-„#Û}EùÖgăjF­v~|ÿ¤5OÂñ-˜ñ&æû0Ó·WXíÔªéÔø)8 wî«vi^5þ- T·a+”9l5kMM8^FÉìë'Nì‰À˜ñ“…î„LØ:¸"ÓöVÁ29ájÁlF€•}rû«³ch7¤õv£]VbˆÐ,Ö´}ÙÆbkHÆ£4Âô‰ç ’?à vÛ×¼‡‡öé¸;NœÿAð¯ú¬g2"no˜v˜y«ÓÌ]nr2ý‹ö™KŒÐËB,Èé[,eÚãç“®ÅxßEœƒ‰[Ÿ$Û؆—d3 ”Eź50¬—KmÀ'}P`Ûàv†íTË <M¹Ól«’P9~Ý1ñ
-B`Û IV(4¸v¡ñï‹G¬7ÆŸÔÃ.KS2oêœ$Àò¸ÿFú·0Rœ8&@´k_Ê  Ž çóÆ×èŽ ?ÙõHáÇ¥“¡Œ÷·ˆÀò;RtS±Ü¯Ñc@Ù÷hÓþ\¨ö…‡n!œÞX \â"ÝSö öYŸ¹VÝ-y`ø^áêRéæ¯VÔB×£îaƶëOuññ«Ñ%gˆyÌøY©Ðµ±ç)^{°áhßáE‡{ÀáM*4½û¡O‡õtÄ3O`Ó†qŒWy¹¨6-xEMh¡à ·ÓeÒ»»7ßÔÃ(´u¸Îg/º0u
- ôŸQõÅfð­uÈ$?ÁÄE¦Ž¢Ó„X4Ñ:!@´€ Œ€•W ™HKÿ¦).í.Bt"½”ÆWÄXq)CþþÏ›SÕÑ«É|³h=Æÿý½{åÛTÖ†Ó™kÏ0êSž(dAd3ô˜Ç1áéÿYÄ@Úendstream
+xÚ¥ZÝsã¶÷_áÉK䙈 Þu:ãÜùR'9ßÕç¶ÓIò@K°Å†"‘²âtú¿w»à—(Û×Ú°
+*ÝúÁ6›"ÇÁŽ Y”´ëi눞1&r[RÖµ]Ì‹ªú5«ó¥=¯H‰HÍ“Ó·D‡ó¤ u*倬l  ÂYm›o&ŽPÅA*à´ÅQ~Ç(&þ
+¿{][–¼¦i`fK¿^÷º^Ëjå<ÐP ¡ûí£[Ÿêkm:[Z»± æ‡'>C¨V“^pr xT©Sî𠌟x“‘ˆnƲڮ³‚Ê­Ñ>Op Ô¶Êjj(ì]CUí¿ÚGjÛ•ÍöÌÌvuc—<#щF2:–£•3ý<++ÚÓ°Õçõ9B}¶å’6‘å%öÂb
+€½âeB¢ƒ4”q_ùaTgÇq»jW¢?ì*‡Zä$ÝÐâûgE]1mµÞ䤷ÈmIµ­¹l(XµÐòs¶UiéávªÃr=ÔÛk[<æÎ…'zæ |‚†×ù“$&¿5ä´ àÞzí`6ú>ÎV?Ø-æɸ&ãŽù ßo;¯ØSkÓ&€€/|Þo$Júp ÆwؤÏï(.‚‘IâP«[ Ør¶Â„#m¡Ê¾ué^í¢ƒ¦éY¬`
+´ ¥|p.Ã&¨ó>Ë`Ù[ÜÕ‡±ÃÈ¢EOíñÖ#ÌZ#ÛnÊúhÞ(B8•†ÉÓ‰£>ÕñÌQKÕ2k …oíÊ»íaþ(Nƒ†yš–j‚±\ÄIùŒ"v‡r&³Un·”¤[@±¦Êý*_¬¨ˆìRÉí>üºÅ–Œ‡ óéQ¸¥ùã}|z_ºSƒo(øÐv‰ªÇÆ΄Aš˜¡­ó!Å
+kFÙuÔ>Î.ju@èó²ñùY¨mx”[•]2Ò—Ô²¨ÊíÊ…O/Kæ ”Å]Ï‚¢/2p:0K'Y’NèI~Æñxȸ=¥E{Q’WÀ¼Æí¹Â2„M`LWä¨{ÿθÄÝ¥mŠ§imÝâ•¡†yN&soî‚M½õƒƒPèãc¯²¦+ly߬¸š®;Ä,
+Ùt(á † ±æ‚gsçb–ò|¶ñ(éúý[î"âpŠ÷óå2ÇÓÛÿÈùÊCø¸n[sÎãò“ί?!þ>'‚‘ØF.K·œYP„Ô@¹Ò.‰b›ÃMýö®¯ˆ4£zÔ¼œ²*ÃdÀd~¼ß˜iA׫5)½wÔ =¬Ã›ª\ÒL8ÈÕüüÝ»ëãíê–¶~,a¸:ÿí{uþá‚€êH%F7N%
+r»§Ò+Ö8ÿú‚tñÁÏLІ0Ùªrwß-ŸÅÛðïõ”±™!âþP?o2jñÇn³©¶ § ]>-ò+h8‘Ò×A”„Þà.
+îˆéþľ° ?¯.¡ž@cf‚°±Ó aÈ’Ž1á»ã…ÎÙhØÌÁ9çã ЄÆêóÞæ³âðÅÒÆ1D&}‰4D£,j’bê5HÕ ß
+ºSþ†“ñI
+é:|»B@äkž”ãÃ×6ÎÆ1F
endobj
-1690 0 obj <<
+1698 0 obj <<
/Type /Page
-/Contents 1691 0 R
-/Resources 1689 0 R
+/Contents 1699 0 R
+/Resources 1697 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1673 0 R
-/Annots [ 1693 0 R ]
+/Parent 1702 0 R
+/Annots [ 1701 0 R ]
>> endobj
-1693 0 obj <<
+1701 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [88.352 595.5062 293.5824 605.668]
+/Rect [88.352 473.8291 293.5824 483.9909]
/Subtype/Link/A<</Type/Action/S/URI/URI(https://www.isc.org/solutions/dlv/)>>
>> endobj
-1692 0 obj <<
-/D [1690 0 R /XYZ 56.6929 794.5015 null]
+1700 0 obj <<
+/D [1698 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-1689 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F48 1258 0 R /F41 1238 0 R /F11 1459 0 R >>
+1697 0 obj <<
+/Font << /F38 1042 0 R /F42 1238 0 R /F21 954 0 R /F22 957 0 R /F49 1258 0 R /F11 1459 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1696 0 obj <<
-/Length 3656
+1705 0 obj <<
+/Length 3325
/Filter /FlateDecode
>>
stream
-xÚ¥ZÝsÛ¸÷_á><sÂ_$˜<9‰ú¦ç´Ž;×™»>Ðd±¡HHÙQ;ýß»‹ R¢ìdšLBX‹Å~üv!~žÀ_~n4Kd®Î³\1p}>[%ç0öñŒ{ši šö©ÞÝŸýt-³óœå©HÏï½¹ KŒáç÷óß&ïÿ|ù×û«»‹©ÐÉ$eS&“w7·¨'§ÇûO·×7ÿ~wy‘©Éýͧ[ê¾»º¾º»º}u1åFsø^øN|p}ó—+j}¼»üå—Ë»‹Þÿ|vu÷Òß/O$nä³ßþ™œÏaÛ?Ÿ%LæFŸ?ÃKÂxž‹óÕ™Ò’i%eè©Î>Ÿý-NØuŸŽÉOKôÙˆ
-âU)œà¨Ž{¢iŸÊ‘à#:©ü µv6Ý®çEg§«¶ÀÏrP·ô"Õ¢¯'Fe\Ü,.¦RêI·,[j5ë®ljj‡¾Övž¬ñ™ÛE±­üèSQm­Ÿe»9TU²ç<ÆIoʺƒD9`VsƵñt¥ç¦ Ç¿›z¿qµ[Û‘å@0©Î÷«µÝŒ¬5•¹`YÆÅP%ž—ål ó'9‰!1“·Ÿ?_½Ÿ¶åcúŽCE=§±YSÿž$âq»¹àf†¼¬ªšg"œïêbUΨŸNßOÿ{¢“Ö©’)ãhשÒLs…ÇKc›ÇsjÜõô!’O{ôÇêp4+îù³ùÃÞÐo
-ÃÔ!?:‘àµtÞççØ{¢—¹8š ¹
-NN2¥àˆ'òù´&èòpbO'Ålf[×öú }ÝÒRc½)Ÿà„h¾¬iä‹Ý¹Cn©gÑlü,ákTUÜ Ï±¯Ù‚ЕTx¦¾õ粪<ïÛ®Y]9Ûí™$O'EÊ2™ ]mŸŠ<ŸÔö™È5>gË¢~DÅÅÒâYãžó–:Ýi`#Z®{ËÎ+¾']„Y,°áÍ\ñî¿Æ£­í¶€rÅÞ»»Ï7Ç™qñÏ Vûd7¿a±µ $¹¯šØ•žÌ~]—¸$j:¾£ ²8;¨|–æ{ï¨?PhDçmçàåæ(›1¿'$ËyüYÝL76Ó¡AHH(¨êŽÑ'u'“IøëªØÇ U8u ¸VºœJ¸mnF¶vpž·‡mGÚ&g™Ñ¶ØΖv¾­œZ¤âغ¨g–:Ð…ãóH‡ ¯ôÏyÙ0Åèýz¡1Á!ó\M,´P°SóÜI¯µÔq  x?–& (À‹¯‰S°\˜¡8qjâü_à@é=zvÇBC=âv‘u -j4õ9­sl{¿ãäŒxOsy gðF­w™Ä ¾(xô'KCîX¡w[OEY¡Pi híP :e¹‰ñó¤@–çàeˆ
-‘¶ä.”]ÒÜ모)\âBË’Ô‡!súqÔd8“@⧵_!v×E5²~Às{‹Q"¨9¬è•‡ÖCM'×Bä2=ôÁ›‚Þ™ž»Fyß½>”c“ΑÚpÚQâacσõÓlVe×Yÿ=@㧤:zl=•¾+b$#Mz‹¾SNñƒÁVꦣÆÎúF¹ZWv  ÈŪ@WA–¡€³nŸê4ÐTÈîoÚv ×DÛ¡\•3‘€Ë{‘H5ÂÁ
-zfÍj GðPVe·£®g‘±e‹MUZÿ-„¯vÚÒ›«§À“*­ØÊQÏRsÒu‚ðDvÂAz
-È5OƒšÄ\
-9.|#œ<ˆ.M˜RumxÝøM€¡¯‚BíìØú"aàcÎ`XˤZÅLmd–ÀN$Á±¹,žìYµäD1õ¤(íñhúX à0mëd§° hfÌþÐ9L”c0‘ßL²|¸!Ÿ‰­­Ë
-Yî”bÞ!MÓ‰Q/3©F8¨ h»¯8da‰rÐtáʸîò d+L¿0À©0
-Í!žÂub‚s˜%ìoê ‘ v7Ô´5•ã\v·´³/¤ ðFWx¶vÕP*È'
-Á¸Ý§ÎO¥}«7iÆ£+W‡›22¢óÓ·2:W¿îV/^\ÚÆ“ÈkŠÀ¾Š¸‘ŽžÍ“¿ µÖ§†aSΰãcÕ<Düì fÈTö ç!S3<vê—§R3,Œķ$ævÿ÷¯R÷?ÙU“æT’ “’ ,lSȾÎ~%~¾zÌúÿ
+xÚ¥Z_sÛ¸÷§Pßä™!þ‘`òä$vꛞÓ:î´3w÷@K͆"u¢dG×éwï.€H‰²Ói2 A` ,v»¿]ˆORøË'F³Tj’Šé”ëÉly–N`ìó÷4I JúTîÎÞ^I3)X‘‰lr·èÍeXj ŸÜÍ™~üóÅ_ï.oÏ¡ÓiÆÎ¥Ó×7Ÿ¨§ ÇÇ/7Wןÿ~{qž«éÝõ—ê¾½¼º¼½¼ùxyžp£9|/ü '>¸ºþË%µ>ß^üüóÅíùow?]ÞŽô÷ËS‰ùýì—ßÒɶýÓYÊdaôä^RÆ‹BL–gJK¦•”¡§>ûzö·8aoÔ}:&?- ÓFä#¢'@žB[e“\,“B:þa×çÜL[†[ù^0!Eá¯Ø ÓðÁ4,Ís´H²¶³íº«žlÒ6õΓ÷WÍ ËÓ¬ðäUwžH%¦Ý`ƒO7íÈ°!‘ñܳ³ÝȼÜ0©2éi6–&þtó5S4u·k » K>WuMŽS×÷X®Vç|jz]´kj8™øá8õþ¾µëÊvh#FOï`I”YÂ¥å€<ÎY¡µpÍí¢ÜÖ2—ªÙ¥’Lñ,ó;hÚ±Mr­°IÒQ¢ÁÈhèuUè³,hê~mËoɼé:;ÓgFå=5 ž’š°1®&Ť0æe5åp"ô@M8ŸW“[c¯&|%5a •ƒšÁ¶}r­´˜V ÏQ˜ŠtÕ¬ß`‡‰Oe]ÍËûþçv[ϽÊh*ÏõPe³rÛ¡ªE>-ñaͯ—©ËOWµ ½/ʪÞÒâh` 7²yt6ß·«==õåÞôapT¦",+Dþ¢U(fLdúkªS2˜Ü[ôñ7h´ù4}úÒçÃ>òi`p Zä98” r´U3k—Uó@öŒ'awÎ9Ÿ¾¡Ž²™S&!™øþþËíí×ëϵqQOï)W«ºš•÷µ÷G°uÏy÷&’ûûf££Ù@«iý¡#ûa$@Õ Ê™i6I$g<„’rd)¬¼˜ñ‚zù7=xúÖ¼÷ÍB0ž™·< 9v¼å¿ÿç}ð¥B²ÀóM‡™zwuU|x÷îm‘…Uð b+?0ʺ²Í¦pS6»£µúß,qçóÁ'ò»zÿÚ $ û}Voçv0EŸmÿñ»w øó.…?î¿ýÈ8cÝv±¨¾‡o‰$Ý6}?ˆ­w4èJ‹œ #Õ8–ðDIŸŠB!Á‘Êk\c²]¡ÓH–íܲÀóÂzö
+‘j„‰aS
+¦yÊ_7È4ÍÐt€SÇ€k•¡Ë™„ÛæzdkÇ@ y»ßn<˜SœåFœÅnöhçÛÚzÔæ Ç6e3óè ¹CY‡6DÉ ©§ê®ÍGUôsA ”Ì 5µ•Ã…®SóÂIÑ6vA4CCÞGÒM‚‚ìü5q
+Vìs'NMœÿ |(½GÿîXh©³¤ÇA4Á.:Hûì'ö9«sl{¿C)…ÐÌåœÁuÞe$,…‚
+½Û¦|‚¤‚00Œf\g¬01ŠžHÊŠBæ1uL´ä. ]ÐÜ«ºl(hâB™1BÇéÍè‘áL‰ŸÖ~‡Þ”õÈúÕíOÌ>‡½ñÐzhéäAˆ\fùЙDo
+vgzî^å}ôú€ŽÍµa´]%*{î­Ÿf{¿¬6뿇Ðú)©ƒT­§ÊwE¤€ddIïÑwJBk#€7œ•˜”ìl( ,Wµ]´‡äbÕ ¸+!1/ ¸žánŸê4ÜT®òûKº ȵÑvGXWÁiNöE"Õ»Ñ
+2­BYE UôH<ÃIöv³ØÖcÆ«h\BËJJp'kzdÌ %àÁºvn@h1û.ý¨·hQô>"C
+ª£&žŸmS;\âVZÙYuŽç*>Ö;N¶ë†\«DwkAö ‰µTY6´Ê¿3ª9èéŠèÄf¸/©ˆ…͹…;ï}Ž<Àç"–èí&‚sÛÙÉò2~Ú®G=2ËÀ#¾4{ƒ¼L°RKÙÏ"DêÇQ4MUÑ[eÌ3RcA.lâ“ʆ°>8ð$xÞð°;Tà„îœÅÓ+Ö‹uC«Ì€õ<D¡SÒ¦M Bh–E>õ€ç©š{§e¦Ëª©–Îòà¥/;|wögòhv†òªÁŒ<NnŸZÞ*Ø®)Æ4›På‚tAi~úíº*C­d»¼sËU¨ã l:,*õTìεfí¶A,GÂÿwÉù`’ À;¸÷ô](‚açl±{Ü,0¹6Š÷4Ns'ˆ‰;æ, g™ÊÅÞ¤ÝôÛnüð(p©{êu3Ÿí·1VàT.P½8'ò˜ªÂw>äAk¾]®|˜Sšé\š¡b`ÃK/èö 8†þ%ÆjØpÀmU¯Š6vP3E,ö„åçÁ¹€-²˜ç3d<… 4Ôèê®=Œ€X6/
+pn¯äÂ<éÓÇ‹£Y™0]ö€àÙQØ„0ǤÉø€Ÿ£°©^cãh¶^@
+ñêå;‘2ðƇ1g0 ¬e2­^¹+qìô0A"•ƒŸìÁ±êȉbêIQÚã°ô±À%`Ú4VËNa°Ì˜ý¡s™¨À`"$˜äÅpC>[Y—?ÔT„g£EŽ)‘Â*wÎT–SÄÏàÜ$<…œÿCÛÖ¶ôGê‹Ó|w
+‰b±Påòe Ú#:C‘/|´Ï ¤¸ ¼Cš ¦S£^\=/?°0tq°þ(å`ã<•“7[…¦_àþ~Bê,„o i0"M©>Ëùœ²whnè¹>7ÿmª¥¥ÏŸV–cN½À
+0
endobj
-1695 0 obj <<
+1704 0 obj <<
/Type /Page
-/Contents 1696 0 R
-/Resources 1694 0 R
+/Contents 1705 0 R
+/Resources 1703 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1673 0 R
-/Annots [ 1698 0 R 1699 0 R ]
+/Parent 1702 0 R
+/Annots [ 1707 0 R 1708 0 R ]
>> endobj
-1698 0 obj <<
+1707 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [435.136 641.7083 504.3921 653.768]
+/Rect [435.136 511.5226 504.3921 523.5822]
/Subtype /Link
/A << /S /GoTo /D (dynamic_update_policies) >>
>> endobj
-1699 0 obj <<
+1708 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [331.6917 426.9688 395.3824 436.3983]
+/Rect [331.6917 293.7591 395.3824 303.1886]
/Subtype /Link
/A << /S /GoTo /D (statsfile) >>
>> endobj
-1697 0 obj <<
-/D [1695 0 R /XYZ 85.0394 794.5015 null]
+1706 0 obj <<
+/D [1704 0 R /XYZ 85.0394 794.5015 null]
>> endobj
474 0 obj <<
-/D [1695 0 R /XYZ 85.0394 378.4414 null]
+/D [1704 0 R /XYZ 85.0394 242.7029 null]
>> endobj
1375 0 obj <<
-/D [1695 0 R /XYZ 85.0394 352.9397 null]
+/D [1704 0 R /XYZ 85.0394 216.0907 null]
>> endobj
-1694 0 obj <<
-/Font << /F37 1042 0 R /F41 1238 0 R /F21 954 0 R /F22 977 0 R /F48 1258 0 R >>
+1703 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F42 1238 0 R /F49 1258 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1702 0 obj <<
-/Length 3294
+1711 0 obj <<
+/Length 3515
/Filter /FlateDecode
>>
stream
-xÚÍ]sã¶ñÝ¿Bo•fŽ >Iàñr±¯ÎôœÄq¦“&y %Êb#‘ŠHÙçþú.° ~H”tIo¦7WàXì÷.À' þøD'qb…¤VÅšq=™o®Øä Þ½¿â„¤¨õõÃÕW72ØØ&"™<,{s™˜Ã'‹_¦I,âÌÀ¦ï¾»»¹}ÿÓýÛYª¦·ßÝÍ"¡Ùôæö×½¿ûáÃÛûYÄæÓwûýÃõ=¾JhŽ¯oï¾Á‹“Þ_ß\ß_ß½»žýöðíÕõC»—þ~9“n#\ýò›,`Ûß^±XZ£'/ðƒÅÜZ1Ù\)-c­¤ #뫯~h'ì½õŸŽò³XÈDŒ0Pˆ µµz’j'RHÏÀÛå,’FO›UŽÀª’ ¢Æg†MV7ù®Cz3‹·îÃò`Š:ß=Ì—b½£å¡jß f¾ûîáöæg„w3n¦ùû¼&œ¦"Ü0O·Ì:{Îk'àCÄylµ~S¿2Íù2Û¯
-#ÕŸu³ì¾zã@M8˜3 ƒÑ
-Ÿ‹¬Éá‚Šãј/iÍir’NÁ¼wE^ãÇ~Tåú¡m¾[V» þ
-UÐÃÀ-R¯wvÔCsÅ:¤â eÁónÎ÷Д[YIjÔTMÛNé2’.Óé‡éy¿â¥äwé–ù¼9ÛîP A½ÄM9×±V€dMšÚƒ¦%SÎHšMl•=ÕdD¤¨u¬¶¡Úbù@ö{®¶8JÑ8Ú„”ço±FVä>ü¦’áò·®l‡´‡º»FM+2¬qyÖ»–ä–Ê{x›—®0Xà‹ºØì×Yƒ²
-ÝG‡U=ÖÕ:÷‚‡áoî~D
-bÄP7²ò•B'µ[O3vE“ׇ'Tõ¶J5Òàw-QÞšìY±zn@°½nêXN[¸t%3±Ré¿ÜÇ:£fË·ã2ØÅzÍ×E^6Gi2N$Wç h±F(lV
-kRa€0ý¥
-ªÛ¡†››HÓç¢Â®{}áÖ `ÓQ¸{a`eÍá- Mñà-øš |É eë—ìµsì
-¬ÁÜ›¼\VÔSªVí¶Ä÷b¦û6s|¬šÕ0 H Õ¶hQÛ¦Íâ8[Ì)VmÝ5³:>uÇVêØ]ŒQ"6¹x´õ©÷o»ËÉÊ&˜w @®®e(Qþj2;6@º¨{LúÓ‡ü©endstream
+xÚÍ]sã¶ñÝ¿Bo‘gŽ,ñAx¼$¾«3Í¥qœÉ¤Ih‰²ØH¤"Rö¹¿¾»Ø¿DINz3½ñx¸Àb±ß€˜Eð'fq&VÚYjuG"ž-¶WÑìúÞ_ Æ <RÐÇúòþêoï”™ÙÐ&2™Ý¯zs™02FÌî—¿Ì“P†×0C4ÿê»ïnßÿx÷ö:ÕóûÛï>\2ŽæïnÿqCÐû»·ß~ûöî:&ó¯þþöŸ÷7wÔ•ð_Þ~øšZ,}NLzwóîæîæÃW7׿Ýsusß_)ÜÈW¿üÍ–°ío®¢PYÏžáG
+kål{¥cÆZ)ß²¹úáêûvÂ^¯:Å?›0–:™J‡ÖŸæ²S!
+x¬t$™æ—¼žÚWZ%SÆ tŽ;¼Ô\”þÖé÷X¸â²È6‡ÝxY“„q¥ç—õHËöwhE'+†ËÞ®&J„ÐëÙõ¸/ÜÂ!áÃŒà¸óýS¾çFŒ¬©©/Ûl¨ã?U™û¶ššŠý†‰^¨%£ÑÔ¼¬Šò±̸û¬¬Wùž§ÈnDUû©©Te°Ì”ÁÖ@þƒ:µCñç T£þ›TFzùÃÖEVðã7™?Њ‡ÇuC~<è¾û‰+DAXИj_<%è<nqV4É–G¬QsbV‚ ‡c
+ï{~.œmq­Î|TšÁ̾»¿}÷3Á¤‚òšqœAD\?O·Ì&{bM§_£8b5P ÙÖQk¶-¯Ã‰IP‹ÇGGmÂç€
+6ó ÅM¬ÒÉ][p$Àê™Í[Odx1×VѸ_¬Pý´íð:{¢»É‚¿²ÇTø¨Ð‡´=åcUçÍÐÒ‘×-Þ¯?úħè49ºd:Ú(„©6½NõB-•¶gY5Ȇ -l,I.Ú
+§>?@#œœOÛPÆ:Y[ «hc¼¾™Vßdâ½
+jøñ§â
+F‘—„üã®`ji‚×Ë–Ë‚uW¯è‹ õ‘;Áò†
+}_Ò{¦­[Nõdãä\h]¤í‹<7¸
+c Ýk]ð†â°ãí\öw$ì1ØæICøˆ4ldg³€1œªE´k7#ñèäàV1ñÇ3g•Ñ uSÚ„±iƒ¿W©[Ðlº§xoØïx£<`n‡ÆX•ž*¥Ò¡à´ÿ>Ôìe–E=l|
+ øÆ*Uz¢¼a)šÔI
+¸UƒÞ¥?ÕÒEl:>Ïf ER À©J°:{Ö?ÊЂ ïÓÿ¿±™¯Eª;cõ ¹ jœ¤Étíªå2¨€ˆõùB¡^ôG‘0„ì"g,-&‚üf0%â©&¹×£ëÓrï“Ê(x®DH}{ZátgêkV‡iʵìé8ÆÃ&9Õ£á3æ”LÃ$NåN)J­ÌùpaÈ­ ±:Ç­Ÿ±VŠ8„ŒB\àd Ò˜ô‚Ë¿(\g´°GÇg,[‘
+SØ ÜŠRtÏñ'~‚[¯1Y=2>_f)ÈVS+ÒóÌR6†œÖ¨~äü×yvFûä|*¦u÷šÿ`HX3ƒå·ÐF‰èßáÝå`¶±8KY¤IÅt´cÀZ_x«}–W5m=¥ IºP§ŸŽãó~ Ž—£ßö¦àl½CB2 ïŪ .uã“wlJ¨“¿³Wl=¤Ó7lÉåÿÙïyP`fq A¸©ÔÙ•[¤ã¥åèRÁD:¬}‹;<|õoôܼ¡ûXºÞÁ¾¶h ½y‰9Á’:êb{Øðýô…GĪêj“»#‡æ¯?ü@
+e4JŠÊœŠ8˜¬T>QéÍGe3&’˼SÇ*!û‘MÏŸkëôÁ¶Xîdóf±7‡üø`e˜ÈH_»ÅšX|p´à/’¨¿º· ‚™éN+6¾Ï+—‰"A€ff<@f²Pѵ6mâØÛ`DщÒx+«°Èµ“ Xƒëki¯ g¸zdæYÓäÛ]Ó/)Z‘ JO5º%ZðŠ3¢êà€Å Õß*ÖÃ[‰e±,¿`xMÅE€¸ª†÷UY7ûk3?,Xê­ß
+•òÛÁX‹7ÆÌï¯-È% žNÃH(1<*®wÕO¸[üeεÔî5ý®VS’ÜѺÐ&Nf$_‰£/ôŸ|IºT_½ŒHnž+_ùÝeø^„iu‡2©K¬Â ovhÖAùqYá†Él‰#;ºõ˜&[F¡–J¿âÖÍ+æ~µ*2†SbŠY`ÿZ^y5ç Æø·<[žÖHX>…øí‚Fö°Îh¤Çrç^ÕMpá‘¥²ö<-ÖG,Á¼ IpP,zÞх±ð¡0@þ²ƒü=ÏwlsßóŠácL@Z¹«IúDÁ/€¸Ùa6$z/d2z<#º˜`wc-ø<Ð2Œ$d¢Ãûã¢Y³©ÿàó¤½è?VìÅ
+ H¨0æH~í*HðA›xvzï9õš\AÊ¡&ŸUG³‹E§×¾4ïžák¬‰œŠ!ÃüGy¢Ü#|y¬@Q(U"'Hÿ/w¾Pendstream
endobj
-1701 0 obj <<
+1710 0 obj <<
/Type /Page
-/Contents 1702 0 R
-/Resources 1700 0 R
+/Contents 1711 0 R
+/Resources 1709 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1706 0 R
+/Parent 1702 0 R
>> endobj
-1703 0 obj <<
-/D [1701 0 R /XYZ 56.6929 794.5015 null]
+1712 0 obj <<
+/D [1710 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-1704 0 obj <<
-/D [1701 0 R /XYZ 56.6929 625.316 null]
+1713 0 obj <<
+/D [1710 0 R /XYZ 56.6929 487.8316 null]
>> endobj
-1705 0 obj <<
-/D [1701 0 R /XYZ 56.6929 613.3608 null]
+1714 0 obj <<
+/D [1710 0 R /XYZ 56.6929 475.8764 null]
>> endobj
-1700 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F48 1258 0 R /F39 1178 0 R >>
+1709 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F49 1258 0 R /F40 1178 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1709 0 obj <<
-/Length 3730
+1717 0 obj <<
+/Length 3658
/Filter /FlateDecode
>>
stream
-xÚ­ksÛ6ò»…¾Už‰¼ Î}J'§›‹sg»3½iû‘h‹YTI*®ï×ß.€ø’œ\;ž1ñXì»Ø],Äg þøÌê„ÉLÍÒL%šq=[=^°ÙÌ}¸àf€]¨ï.^¿—é,K2#ÌìË&ÌZ>»[ÿ2û÷7ÿº»º¹\Íæ&¹\hÃæ?.¯ßÑHFŸ·Ÿ®ß/?ütóæ2Uó»å§k¾¹zusuýöêrÁ­æ°^x '¼_þóŠZnÞ|üøææò·»\\ÝEYºòr&Qß/~ùÍÖ ö?.X"3«gOÐa Ï21{¼PZ&ZIF¶·ÿŽ;³néÔþ)m-”™-¤J¬“»Ì¦aשÎ#…Œ»,øÔ.(Üå]Õ–÷ÏCa9Iʵœu1ŽèF¨ ¢C˜ó41™1}ÊË{¤úú½²]P–f€Až‹†`zèO4×ÖÃüÊ4k7ÅåB‚r×Å}~ض0Æ_ÁˆMçï®o¡¡³ùõ§»åûÿØcÑ4ù w3y}ÉíÜchŠ]K­§M±ó
-29_mò0ƒ s (‹‘6¬L gÙ,U°‘iÊq›i²~˜Q㦫—
-–~—7ùå¨Pòè<a oqQ»±/¸ûAÛØ>4åîaBÏÎ]ªSí¹<¯g•WVA¢;±K
-Ô!wÕ²`^q{M€ôßã6a?nvp›¼y f ôˆ`^ÕݤAÃ5‚«ÈÑ %0Æ{¦ rf¬ä™¸GÔú\зÙ«ã)Î4-˜˜>[ìW@ÀôD\<™o:ÑRNˆ#Å#¥¤ˆž6åjCÍUÞx~Ê–¾ØF >¦9ÇÍ"R”X‰ŽÛo³ÓÛeRÐóEôÚÂÌ—--~ªÛ55ɬ…µnëæb…>½~¦.º/œnõÎ/¹GÍßûéMé9
-šAàÒÏ–žà*?4Îîa®Ùæ_‹&"wFCL÷ü۪ΛM2Êõ|BeàìYpbg“®Ðéœ+
-Æžr§Ç4ØPÚÛîÒv*
-í/ .¦õÎÁ >;ÁºÐîLà ÏÄIϤ%Y®øy×Ô…:í›"
-U«CÝ ‹:&y:‰³¤#Ôížk’²6 ~"?Ô–™³¾ Ü[&…íd\xKpÌ„3ëŒÓMû¿
-v IÙ 4mCP>ë§=x/;‚'-e"&ó¸ä‰¬)µñ€ÃÎ `pí¿d8<UõŸ-c… Ü*s%5PF‰¾€ëI¾kžL?©¼hœs<ô"s©¬›è‰EÜÙ†©c eÊoZ¸áH”ÚëÊY;L{Ç ¶„:_?ÓÌ—]õ4àʳê —sJ›‡çÉž[Ÿ @?ïßCn“÷
-½j_PlóѶ9@?%š1iÁ ²^{S!¤ª¾ö¿ŠÝE>M5yñ€äÈŠ°ßíj³xئ®3*ì=ÿ W‰“AHaɆgçcPèt
-@t@œ?^ìšr=ÎŽE„–gIG 1í~vœBFkLø©¢¤V™ý¾¤„òCÂ$÷_ x„Cs óGF#Î^ß.ßQ '®]ª‡½ÛP:‚öòX:ª+ã…¯C }}Uobe»ñ|€‰Sº¬±ø<H—1|”èlxFY~ûõL7DI(¶b^ƒõ¡vÇŠgx'sÖ'eÁWWÛ•‰\ÄøäˆmŠÔŽEVœ>F†f*£t§4e~#±ϵðK>‰õÂÇ«èò†P˜™?Ö­H¤x ÈQ±O߶AX`3Þ™kÜ”j¢‘%p/€+ÈX*—¯ ñÖÓϺ ’BˆÕ—rw?Y±‰å™ˆÍ™ÜÛa¥é›Ã]ÈI¡T³éPjdiJ{Ýç¤S‘ÐPRÉó^¥ uÚ­D(·å÷+!™]´Ïû‚‹N¤éyòj‚~OTÈç¤п W²Ô4\«šÚN•¤†é—.ä™Í‚Pò„]$P)(âÅÚ3t_ºâ`‹*Þé¨âí–æÛ*0íÝÈqê«Ô
-»‘³îþþ9•I‹/ž RããîŸ3(ˆ– NÂ9
-Õ_+‡¯Bê¦õà—E»âi º˜ú[ï6ºÂŸëW¡
-¶¥©ûpù°«ü£prêwêR'øãò ÆbÑèOÿ†ýø•&ÒZq:Y‘¥)Ü3ªÁâO´éëÿÖm­Íendstream
+xÚ­ZÝsÛ¸÷_¡·“gN< @`ú”KœÔÆimw¦ë=0eqB‘
+IÅçþõÝÅ¿$_zÏX °À.€ýøí’lÃ[hÅÂ$‹Ô$‘Œ™\¬÷Wñâ Æ>\1G³òD«>ÕÏW?½za"£¸Z<n{ké(Öš-7¿,ßþùÍßoî¯W\ÆK]¯¤Š—?ßÞ½£C?o?ݽ¿ýðû7×i²|¼ýtGÝ÷7ïoîoîÞÞ\¯˜– æs·Â™ ïoÿzC­÷o>~|sýëã_®nÃ^úûe±À|½úå×x±mÿå*Ž„Ñrñ qÄŒá‹ýU"E$!|Oyõpõ÷°`oÔN;?)t$5OgóÞ²Ú‰Z¤ÒDJpað¥>ÒŽª<ßP««éwS´Ùç2§‡úØ=ÕEõDOEµn®™^æû¼ê²’:ÿSWŽ¸k²ªÝæMû#=ÛO
+äa=y¸2‘V‰†] $‡¦þVlòUñÛ¶!êÄô¨eqHG\ÕnÁÁYd¤äŽ$š\NÅô&å&±óÊèˆV}*:K6§Œž
+9ØgåªÉÛC]µy;–€¥ !ãú²jF†ÁvSi“°¡·Û™Ã3gZ¹ƒy!Á&«EFpöâÒe·Ë+lÉåsh=åUÞdÓµ$Eð;¶$0mÞ|Ë·BQ–4£®ÊêË6jÐ"ëÚþnZ¢#Eì-—W(ùbz#á¬Ü•£ÌÝ®nŠW|™U¸²`Ȣ芺²Z
+›¬Ëh¤Í×8ÐR¿Û ô;¿‰EÝÔþz,¨±!’Ç2Σ'ð"N–›¼ÌŸ2»*ž `Vøü-'êÁYÁTf•ÎÜm„œÚã®hÉpöÙ‹3¸ýÁέ¿yÛ¹Æ!o¶u³Ïªµ·ÔíˆÂ]x2”’Å°¾ÙäÛìXvŽE;£8ìAÄ2ù?˜JÁfRuÙêzDçÎY›ù‹C™¯ÖU¶Ÿ±8ÅÀqry‘{ š²ìS©H¤“úüÝ]¹¬xïÔ~Îl§BÏ·¡®Â ¹à-M$VËá1+ËúÙ5égSï3š¦–¸;êõô»ì›ëñg@”oïÞ|¼!3‘*Jxª‡f255.H:ΗߊºÌÜ> Ûêt“.AÇ»»êi;°°Ì­aµŸù­Á(ø·@õœ eåsöÒú5šbÝY_
+ó8Òp¢¯èpê‚{*²«®Ø¾L”—ñ(eR\æ¨fÍ4”QjÈy6\°8ïo.Æ Î"ɤèíu Ü
+ú7ð‚B§¤6BšåݧÇÛ÷ÿ"20×6{ÂÁ‘àkq¨XA-rË–€:e`‹øÁˆ2ØYøåŽÈùZk&’<C BåËõ.«@˜aàÊ'·¡E¤
+c‰ZŸsúmùúdÆkáÀ¼q1P`Ó1±e&¾ÉH
+á%¸ÓÙdN*<pxÞë5×Yëä):ú°Þ4àdÚKÒ¬ $Eq¢ØÐäiëxþÚœ?.•ÂEED·ÍÕò¶£ÉÏõ±ÜPÓ%^ZÛ£³+çktêÍ =Zl Ãݱ©Ü”-^ýÖ ØÅnv¸p£…c¸Îê…±¶”چŭÖÐCZ7Y»; »Í¡!øeØÕ§:»ÕI W]½jëlïá^˜Œõeöj†ÿÀÞ1t f­WÃñv|Á¦ƒoÛà¥ÅwCõ._Á¦q1;
+:,D†ß@a‘=üÞß·yG³³'È?ÚnDhc"6lLŒÜlÌAKŠpÅ
+â3çÃKÎÕ{ˆm‡(è¡p°Ÿö‚&
+€¢í¨^] n%§;sâlÚ/afe9*† í`¦}Ú¨­M`¥m⼊EdbóJi£OuÁ?y*›ÞæëcÓ¢£û&pÄEÖj†÷À7 à&1?¥Ž¿³h“{ƒ†Siƒ¹:<=æ6ø
+lyÛµDåÀ?Á!¯¨ˆžnÉðS•¦¸*#rê b.€ÝT4áä+q¨Øi‘çºùâ@3Vâç«&ƒê_LxŸC–’Uí³• N¼ŸLÜÖchôÜXDkÛ¢¬mÃÐ)ÜƉ;4Ÿ!aOØ)Ök«í0ì?L(iélóB#_*[RêKåDuŽ†‰%¡ç±ksçȵ“Ö!xÎúÝ[@8Ù€Š›]UaìTi„‡ÙJ#y$dúªQ†xWwŽ‰óGœGÞuóˆ[34Gá–hz·Àõ<R–Ó”…`KÕ)n¡A•YpßUç’)#Æå(ü­Ë(¬/•Ë-Us÷ôôäÄ…å Ô"ç;OEu¸ÂZš³Î æÿÉÁ±ŽÈ؃VO@Ǿʟ/3ûœ;y$­½!ò¬ó½YEµîœ”7_wý (ÝΩïë‚WÞ9 Õò-,O¼€’êÝÐðÞWYÃQ/…:éªCy
+ã#˜@ˆqo°X›SlsѶ=ŒŸ1ƒÌE‰
+¥LŒþ¾@”ðÄ…éHæ~1H`j ¦sa QdL¸GïnßQ î,àç_G‚öí©ŽÔœf†äS£–~]‰³²kÕVPtÍ_õŽ¼‘]3„ðwXÜ´]E±Ð >lŽ5.f0?³:öG“Œ÷Øuy¤š‘ „¥,³]~†Û©âŠÃ§øÐÎZ‹±;Hl…Ü1uˆ É3Ń òcp|c*ÄçÞ›õË)ãÓ¹«Óêó™7lÄ ùsƒ»š©J˜²O¸ÜúT[Ô‚Ì;Çük9Ã%…XJ1Eµ-ÆhPw3xƒ¶Àfª¡:|Ç«;Å«ýžæìµ7wìRáþ/º–>Õyרì‘o×\ÄzÕ½r6õ-2Š§—Ùªþƒ­ªɈÿƒ»"N]qöê¹ãL¢TÅòµ´Ühãõ„ .h+"žKNq/¢‰¡ý¥D[TþN§/ëpjVÖ^hçFN §®d«Ñ\_9G¥JÍP«l-–> o«íK2„Ší÷¿5fÒD) 5Œÿå­±ÿX…cJ’ù{>¥Ž_éùOiÀ/¥,R_ήEóbXË5i†-µòÒ­0u 7}¥ '‹›” m`þÌÄt"¸Ù»ÞqH•0ÐDp1Ÿ®WŠ-á?_ÞL_ ‚Ês©ÁB˜8Ø/0_|]
+ØŸ!kº«]–ÿrÍãeîŠý¡´eÉ|T=po‹¡e&·Ÿ,·+±èŸï»2¡ñõg äô)ÕS(ˆ–‚çå¥ï‰PcÒHÃ.{Ç@…ç >cUlV‡º.'* R,"šEÙ©oôTSîI<À]€Ïhì€ýé+”°ÉÞ©ï3D˼›­ph‰TzøžbòM^ø€Ê45FU÷èkм}çúzé Npß¾ÀÑœÿÌ+ ea¯|åu"ºð‘—#
+—â¾P%(ƒÄòÛ@4á;¼P(5`L×!Ò°L°Ä¾ó×(G0Õ{m¤LjAžÐ1•ëpúü[6Áoøünÿùþ~8œÑÏ!kºb},³†„8Ç–ƒš4Dæ@)‚pÆìÛuZÌÕU­‚ÂŽ^Î#\jöÙIûê^n&·ÇÏrŒ9û=á0­·ßªÑ›&W¿l7p!1…þ‘½òâ?P¯Nä3¯ÜGk^úÓ׬<bz,Š äHº'ÉDË<ÉEö£uz–:É_쟧ôï;‰@}Y”Ñš““
+®&§¾ žŠþ_Wù+îendstream
endobj
-1708 0 obj <<
+1716 0 obj <<
/Type /Page
-/Contents 1709 0 R
-/Resources 1707 0 R
+/Contents 1717 0 R
+/Resources 1715 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1706 0 R
-/Annots [ 1711 0 R 1712 0 R 1713 0 R 1714 0 R 1715 0 R ]
+/Parent 1702 0 R
+/Annots [ 1719 0 R 1720 0 R 1721 0 R ]
>> endobj
-1711 0 obj <<
+1719 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [182.6146 743.8714 231.8861 755.9311]
+/Rect [182.6146 605.0819 231.8861 617.1415]
/Subtype /Link
/A << /S /GoTo /D (notify) >>
>> endobj
-1712 0 obj <<
+1720 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [293.8042 191.3384 355.0043 203.3981]
+/Rect [293.8042 61.5153 355.0043 73.5749]
/Subtype /Link
/A << /S /GoTo /D (server_statement_definition_and_usage) >>
>> endobj
-1713 0 obj <<
+1721 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [395.8905 191.3384 444.6373 203.3981]
+/Rect [395.8905 61.5153 444.6373 73.5749]
/Subtype /Link
/A << /S /GoTo /D (incremental_zone_transfers) >>
>> endobj
-1714 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [309.3157 160.0192 370.5157 172.0789]
-/Subtype /Link
-/A << /S /GoTo /D (server_statement_definition_and_usage) >>
+1718 0 obj <<
+/D [1716 0 R /XYZ 85.0394 794.5015 null]
>> endobj
1715 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [305.9683 128.7 367.1684 140.7596]
-/Subtype /Link
-/A << /S /GoTo /D (server_statement_definition_and_usage) >>
->> endobj
-1710 0 obj <<
-/D [1708 0 R /XYZ 85.0394 794.5015 null]
->> endobj
-1707 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F48 1258 0 R /F60 1366 0 R /F39 1178 0 R /F14 980 0 R >>
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F49 1258 0 R /F61 1366 0 R /F40 1178 0 R >>
/XObject << /Im2 1355 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1719 0 obj <<
-/Length 3808
+1725 0 obj <<
+/Length 3951
/Filter /FlateDecode
>>
stream
-xÚ¥ZKsã6¾ûWø(WE ðytf<‰S›IvƩݪ$Z‚,–)R)9Þ_¿ýR´w·Ö>l€@£Ñ¯R×1ü«ë4‹²R—×y™Di¬ÒëÕî*¾~‚¾ï¯”ŒYºAËpÔwWß~2ùu•™Î®6Á\E…º~Xÿ¶È"ÝÀ ñâÃÏŸ?Ýÿë—Û›<Y<Üÿüùf©ÓxñéþowÜúþËíO?Ý~¹Yª"U‹?Üþòp÷…»2™ã»ûÏ™RòãI¿Ü}ºûr÷ùÃÝÍ?^Ý=ø½„ûU±ÁüyõÛñõ¶ýãU™²H¯_à%ŽTYêëÝU’š(MŒq”æêëÕßý„A/}:'¿$-¢T'HÒDƨr^Ê*Ê•‚Ay¢"••™—²VsRv£PÊÕz]u×VÍrsèvËê8l¿aQL»VÕjk§bÑÀa–›â:\û‚C?j†E°¨3eiªÆ<>lmoo–¦LÝ9êùeÕµÃáF‹®A‚Y [öh·Õ©îòцŸU+OØcw¨‡j¨O´¡kPÅišBKEešjZ¸·‡“…I/^¶¶Å–‚iú{¨Û'îøó/¶w£êÕ–›À•¼ ¹g] È8ÉÌ¢›Ì/6]Ót/~öŸoºs뮉ÙØ1Évò‘Gà‰­¶UÝö‘UDI¦sõZÀ(½xì†-·H.ðD¾JòzEµüÒÛAFw8ÿ·Ÿ’"88•Ç‘U¦µ^A4d|¶*ŠMYʘßã4æã‚)×vS›hJV†­rƒÙB¿2¥æ-ɈGã¯òÙ†Õb'ýÇ¥œr©"ÇèŒCUXꤤÓaq"ÿÕµVdܵ¿Ç±~:ú±¿nA,ÔO›B+îé›IO¨Ø!+Ò7+ì`2ù; ðŠûæ•é/u#<Ú±bhq¬›†8,‘C|‹cOrC’¬ ij¼
-‚ZcS¡^E/½­L~_Ã@&8IÓÅ}Ë´¾ÛIo_ÇJÔ?«{ᵟSôc»¶}}¨ 5±YôG46]ÂÓ—Fì)´V_ìà©5ßÊdLwâ}Ç2öø³Õ
-Àr¤Îó›ƒÉâó¹ˆ)ª„õžý
-¹Tx¾Ø¦A9
-VÚnN’H'­ðuÝcÐéyqu0ûe"]|³“z>µLóî 9l)‚5t®š­;F®:ĉfeH €y=#v-g¸R‹cŒÔó‹ ׳®Ç¡mc4/g4hÁ¶¤*øF|cãØû~|Ž¡ö (Ë’7]'1Š¦E‘Êš1ðð_™Å©¶/ ôþvìn?àuÊN]g [‰°µ;ßu©*N¢Ü˜÷µÂDE®oC¨ð2{TÜÛU½y}YšÎìêxèðÁ$³‹Bæ”ÃÁ ¯*6.ÉÇ4¯e
-Ž9¹ßÌ&¤qúnq°@it¤ u(4p*ŒÏû_N‰ì %2&sHp9RÉâq½2íbx0¨©9—ah )å4oç”<vq”Ì0CÉj<äÂ}ø¢‚ãã 4ïl…‘XV%ÄÚUÐ×Ç+lé­ò¥;<ópVwNϱ§âdz=´¶q†[óh©4¦¾ÒGK#öÇšo
-¡gÅzš×u‡ëìªehA¥b\£bÌEÅ)»zÛ?º©Îz}†
-4wÇÏ­mö“ÕÈÏÔgv«‘Ä9îÒU!àXe#So‡a)θ°ç2€ðTŸØ‹BÛ Ëdž;‰Gx~üü•Ç¬š"ôÛ†Ct`BËõ:xákKøW'3ò^Gëß“ùÚa¶2#®.•Ë»ÔaâTûŠénçÊI@t¼a»z$œDi}i"Uï&2•±›À^¹Hô‹]j¢QI”$Ù»ea‡K\zH _s~Çð/|fšFZéd®øâЀ€U)-w òöW 3µ&SDy‘;ÁÂÙœaA*wઇDßîDKÐËÊÊxQv ìd„Nžšî‘Ë Óµ“<Šã,ûŸ“§Q©’rdÖ®Ú]d
-eÆù“$¹Iß’Î » S¢“1»|KŽœmøéù?cÆ^(ëÎ
-ûl{èÊÛUs\»j`ZF±žú!Ã×»xƒ–/qTƒ8PÜŸ.3±¡»â˽œî6¸uqBã|ê/kÛX¾©„—ÀS›\ö壽 sÖÚ…5èt²c—ˆÓï÷͸ç«Üµy8ó´â铺sÍkz>a¿¡ŸyéëÈ[=/×-xîÕœE
-mÁzÐâ_aK€
-˜D˜¢ËêË4‘—éÖÿ p5’gendstream
+xÚ­Ërã6òî¯ðQS5Bˆ_GgÆ“8µãÉÚNmª’h ²XC‘
+IYãýúíF7 R¢ì¤6ö`£ t7ú ÉËþåeœˆ$WùešG2¾\l.¢Ë'˜ûáB2ÎÜ#͇Xß?\|÷Ig—¹È•\>¬ke"Ê2yù°üm–%ÞÁ
+Ñì×ÛO7?ürwõ.5³‡›/·ïæ*ŽfŸnþuM£î®>¾º{7—Y,g~¼úùáúŽ¦^ãû›ÛÉéqfÑ»ëO×w×·®ßýñðÓÅõCàeȯŒ42òçÅoD—K`û§‹Hè<‹/÷ð ™çêrsab-b£µ‡T÷ÿ fݧSò3q&be¤ZË|ZÊR¤RRj¤Iž)+9%e…RÞ¶Ís¹´óòÛª=fYJ)L–d—ÃuOvXÛ«Áö@¡0I¦Æûß[K‚ï×<XÚnÑ–Û¾lj4+$숙<‘20ÅÅÑÖq*TR$ä²>fTepãxÄ(M¶O—4¸°ðß`ùt]byq`µ\fÇiÄO‡g5%ù€õ§«!âDÃYR‰4–éº6ÀzE×<îØÚ?w¶ë§u-ÊE&µz}÷€5±ýX׌
+½=LYûpØO2]ë¢-sü´*KD”fDDÇŠŽÎ¶(œ4a>ÓtÖK }ñB'@˜*è•Î× ›–fúâ‘
+à ð¿MÍÓ¿G‘ª,oíI¡Ç/·7¿2¹/]o7ŽÅ舷50béLèíÉÖ¶"œ.Ä´2€ ~Þ>ÐÓ±Ï_îi°)벶äè(›Ý0ºW¡d–¿§çcÓ¯iÄTÂèÜùKŒ–yöWÏ¿ž88Õ,Uƒó÷ì,=?ß1 ñ92ÒXèTæS Çœ µðâé­QZ@X7þl)a­í¾‚³èÈÙáxñ¥½õ‹…ÝÂI¿çW'“aPjñ¨äʧº¡—ç})=0ëø _:ÀzÅ—z,d¬X.K$©¨æ«¶ÙÌ‹]¿öÔM-@Oܬ‚,6I!ã•Â€5Aâ(Ð%NørLãÃÚv ?–_G/‹¦&ÇØTÐ$fœy´ëâ¹D‹r­è‰çžÀcÓ¢c(Ÿ-ºÌì‡YßТ½ 6*ší׶Ƒ„e:0pçHp2†¶DÍ ¬r±¦!P`ùƒ HšY}26‰vF?\=š­šªjöaõ·WŸ¯ý¾Ë±Û!ÕüHxbà ˺+ƒ¤\Q”þÛ@KÅîGN.ðìY¾Rä ð æøÒÙž±2&“ãc å­í¤qjoJŠHçÞè1HÑqÁ’K»*vUOÄ팆ãDÊø… %÷hŒ»ó—?[‘Zlx~Ç!IæR€<Ž¼öAÀgåîtHœHcA@Ž(ã¦Æ@ñ´ â|Y» L@¤<ÈÓû£™¡>¸L•vtß,FùªçA;n«‚ïËŠx´SŠáâYå(ÌsJAò ’
+yà€y!Ä%0167‹¢èx¶æŇßgL0€Ç€øeâ˜âÀºfó]Ùï
+V7úÌyD¤µ›Š¯»Rú²-+ûc¢žu;46•+ÊÀ!ÄñÀ^&hi…Ç·°-ã4”`yÏAó-}¶èM^Õ­ÉXÈÑð%/Jç~ ‡©˜`¨«œ‹PÉA¨Iaÿ…`<êâ1ñئY–x¾–ß_a‡¹÷3 UG¯°-Ú¼&I2»ªºµr§â¹)9;Jü&¨‘䜠á}Õ´SºÆg—©±rgÒ+Ì°¾¬ÛZG
+^z*ok†æÕ5Õ3ÛÛž:5»ŠC¹3Ž}ÙÙ`zî¹% ÀN#–õQì?6{6öIwý µJ‚)ØoÅfë^E`+„fèq’Ý"‹îkG£}š¹p‡€Ï¿Ò“õºñê€8+¿Ïºézöë#§­µH³<e¯½jÁ‰E³™ðòY.’Dû“Évj‹»8Yྦྷ´ á;Ç`®!3±6ã;d•#ZG2DÑLFôÜeH¯m?AºÔRÄQ’ RBG¿šA~¶)ªÊ‰:òL¸eé0æŠE®øâ/š]ÁE;|c›:½‚
+y“3b€¥]çê8Ub‹ç¦( é/<ô Î¥Âso«
+
+ ÷¶ïÑ39¦=#GAÜe0*Q‡ rÉ«ŒòàT …d¥n¦TÁ¨gcFY–Ž6`W«²L„³oÖ®–¸–`Á½!…µ‹à:t®Š¬'F®&؉&š›N—s(®5!r-‡t¥ì})‚9W>\OºŸmk=Èáå j$£·µS|stã`×…y|ŽSíw ,sb§8Nb)Š"”>ÔãÄ#|¥gÏ¥Ý2ÜÞ_õP—o{dQÅäÔUBi«¬í&L*…ŒŒHµ~]+°è”&Ø*<¯^@ å ·vQ®^X_'vaÚ‹]ÛQ‹Ln
+•S
+?6\@^Nظ%;À‚– p¨.ƒØ°§GéðÁ|†õkÕ<1„ãaÑÖ”+ÀËü_ñd'•éþ5i˜Ld2ñÁt¹ ™®:s22 þ±X@6YQn¬†&k¼€DfçÖƒ™Ñn=#Õ~92LÆ ŠL¶IEE‹ü¸ÏE«]óu·EŠ!MC}A(é Ž(cÅIĤšÀ˜!j¤Ä0v¹À+&:çæ#N•¼ú®c 0|è’æP!‡â8¡4…ÖŸ2ª)3¤Ü…5Í¥IvØ Nè4•öEÍ ¿BƒÞHz%ÝξRغHC¡§¦~¢4"%çÿ.Õs¦
+MïÙ:Ž
+’éŠ58‡ û™Ž
+‡#Ùê û“0oìÿÜÜ­K¶šöÈå…Bswhö0I p”g›ÀÊ@EDo\Þ±Î7Õýb=ßÛ­]αª*¨Vݨa⬳øu:Ö!£ð¦BC)8¦äf5Ñ\„4[Á¯5!ȵJe'¥:.4P)ŒÏ›ŸŸ ó‰€ £ ‹9ø)'ñø…^v‚>@ªJª¥ñzQAIy\¿‚·óJù€‚y¯0CÕ„” ùMOÇ™lÞÛÊáê!ã+ÊØõ-Iñ–»)l¬rß´_ ÔÊsœ)èñÕ¶µ­¼á–„ÍÆ8túÜÖ˜ûcO‡Èù‰ð"`Óí¦.qŒùáÃÏÞg×5µP\‘Kö#Îõw„L…‹-DÍ9G>WÄñ|uCÐfB4ë ŽºfÌ|uÝðDûvªvuŸÓ«)Çs8$×z3YìÓ·(#¦—4©•Ž‚î᪂9ÝSí?¢ò+ʽ"ò¬nª(+šó· Óðc³·Ïþêt"”ä©HL(‰ ü.'#£X®]*„žûiA×}^7ðÀ¾[Öƒ6¹GJ‰9®–Ö¢ì”}¿í?ú¥¦®Ô ý_4»ª’óWjÒhÇùWjC¬óÞ4`…¾{oùç ðyóüÙœ¸S ¨aÔ넬 JƵi,"ü©Ùˆ¶~­RÒt…¢´ôõ @ŠgÐÊKð•»è0âÛfåô_¦mI— øEj­|¾täÁUš “'¾tžÏm»ÍW%
+Êÿ`@+‘çñ‘"¡
+c–Ž= M:áùñöžpU ‘‡gwuE¡ &° ¥~¼Ðµ%¢ ü+ãñŠÄëhÿg¾¶Sî]]Ì—w±Ï‰c:¦›o'ÐÓ†ãâÑåI®Ls_ZL‘Š6¸‰D&ä&p–/Ãf§š¨¥&ü\ðLc"âŸ7…-N=¤ÂFè9¿bø'>3Ž…’ÊL5_|6ðâ_Ð5㻆Aæ®&zM:i–zÁÆÙ”aC*õÉU‡?–Ù°– —åñ¢¬uÕÉ(;yªšGjƒïmREIò·“Æ"—&™µ8üžHë$ç7“ cŽ7ò/$Œƒ{
+ÔªäÀ‹9›ÁÙ òjºŽÒZRn
endobj
-1718 0 obj <<
+1724 0 obj <<
/Type /Page
-/Contents 1719 0 R
-/Resources 1717 0 R
+/Contents 1725 0 R
+/Resources 1723 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1706 0 R
+/Parent 1702 0 R
+/Annots [ 1727 0 R 1728 0 R ]
>> endobj
-1720 0 obj <<
-/D [1718 0 R /XYZ 56.6929 794.5015 null]
+1727 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [280.9692 737.3639 342.1692 749.4235]
+/Subtype /Link
+/A << /S /GoTo /D (server_statement_definition_and_usage) >>
>> endobj
-1717 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F48 1258 0 R /F41 1238 0 R >>
-/ProcSet [ /PDF /Text ]
+1728 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [277.6219 706.9461 338.8219 719.0057]
+/Subtype /Link
+/A << /S /GoTo /D (server_statement_definition_and_usage) >>
+>> endobj
+1726 0 obj <<
+/D [1724 0 R /XYZ 56.6929 794.5015 null]
>> endobj
1723 0 obj <<
-/Length 3813
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F14 980 0 R /F49 1258 0 R /F42 1238 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+1731 0 obj <<
+/Length 3668
/Filter /FlateDecode
>>
stream
-xÚ­]sÛ6òÝ¿Âo'ÏD,ñè:NÏ‹“sܻδ} %Êâ…"U‘²ãþúÛÅ.ø%JNÚ&3!°X‹Å~ç!üç‰Be£sc£@‡BŸ/6gáù#Œýp&gî‘æ}¬ïïϾ{§Ì¹ l,ãóûUo®$“Dœß/™]ýóòãýõÝÅ\êps‡³ïonßÄÒçêÃí»›~º»¼0ÑìþæÃ-ï®ß]ß]ß^]_ÌE¢ü^ò G~ðîæ_×ÔúáîòýûË»‹ßî<»¾o÷Ò߯nä÷³_~ Ï—°íÏÂ@ÙDŸ?C' „µò|sièH))Î>ý»°7ê~:Å?­’@'ÒL0PÊEí(>7Ú±’Ê1°¬ÚQZÕs¶¤NSÑw±ÎŸ©¹ªvÔ¸¤ÏîB$³lQ¹ï²@Ï\˜ÀZcÝ䟪MØÂÌ.ᶒñïh8%(a<æOYIpG€n>>EYyV65sF{,öÙäìpœÒÚc?oÖi3±~íž²S¶HK Dù=ŠÀj-ݳûmUfÕ¾.^˜™eýœíúŒú}ŸÕnÝ+‰+‡Ü
-%èf±Øiãáô©³†°¢o'§nJ”U° Q –ݯ6Âsv;d\«¨³%µó²%²qÿ¨§lÅÿªý®LaRÙ–é2
-gõ~±¦Û$wó!h±NËG$¡d
-Œ‘LÊ° ¦Ô`–oOLŒ® Oýö›ÇhWCÄ.©À¶;_œøêÑÒ’³°˜¡37ðÏ]îOF`cóú£$ò\ìwþ8¼#Z§5kæý:h_«§‡'„éN_¼š:!B9ªÊ‘‘pP&>­Ê}¬ãªÜb9,Aps2 ‡ºl)’èôò-ÖÄúƒ­êë@fHÀuÉAK"goo?}º¾¢v½ßB,ÐP'/§Ì/œmZùÚÙ†àÍUÜrxAŠöSÉ’•øè,ñš::Äܳ¶ê¯«™IìëR˜„R3ÖC¶æXHKù›¯øË$/+ºHvFwÕÐÌtÌY%.ÔùqŽ€ßI‚| +ŽË3œ
-œ]ôŠ<÷°NȳÇêÉóSZäËÔåc™†ƒ`O“ÐbMÐ0ÜnÈÄc@„—i¥L+ÓØîQåúÓb­â VÆ~«Xk#f·U“ML‰˜1ÞU¨ühæØZ1a‘ZŒ×kj6 zàMRa‚D|ri ”GªWÀÐ0îÇy2!×.Ñ«’·tS@ ãÍŠÆH¡1Iƒá|D"¿Þ»4[u6 fîŸö—‚ï2¯]üùm˜Ça›)ì›)’¤
-¬h‘N“DÚ¯LZ•Œ‚m<7k}œ óD*æÔÝRUF[€fw‘Ìöu3OËÅÚ•å
-~£åuûbþpÔ%Až¤ EŒ#"¾”U³‡}Cà”>ž% ô|ö¦…:@HZî!ÿx¡Þ¢*±&ö¸§¸bIÐ}íªG´Â„Öj þ²]š,’-石—)NÄ`4c­Nå+óD9NÄ€ÒôñļÐê6}©ÈƱÂõ'¢!XTj¡þ÷¡´©Íi÷ÑÇ:î>Z¬žm¤l}ž}Ùæ;²¾ÃòÄx}’Œk‚Žaùß‚
-s¾d $·
-^”'ßTË|ò¦™ÞÐYÑ4ÐDçÔ \2eßÇé‰ @ÞÚÇ.ÛmA¶ÃDdq¿s@õ\:+0o _rÃ÷ò ÑË%„ÑÐûŸ pø+N„»«A,®”à;2“92ÜÑ{’‡l¶!ªòÄaÓƒXiõìî-=ÜÃ. ä\<|o?½¡Æ§—Üzÿ37èqìîBëÙ¨s¸•hº{ÂßÐ奉q?àŠhKØwñïëTMÄÇ{|Ðé‰Wa
+xÚ­Mwã6îž_‘Û:ïÕªHŠ’xL§™îôm§Ý™ôí¡íA‘åX;²”Jr<é¯_€
+D ˆZuÑ›öuò¦®ÅÈIô»¬§Öï8Ù‚Á–o8+íô LÏŒx²’&”“% Z³C WÏeF ¦ZÇÒ…VíMQ—ÇéÐÇé [å–{bŽa‘oJErJ»ŠHnœ==U–>ìàQãàÂBY<Æ?°°šë¦^Ÿ|#–›DG‘êÕ-}ãv„mÚ‰G„˜±F»ã…–ݾq’l"´ÃÍѲØè©Ð55Hw qª;
+a¿púféâÆ ÚD¢g3ƒ+ Fébo’ïŠü5·MËòâ–ÅA'vòÍ ‰£PO©‡áÁŽ#†Û4À-
+?°çd‘(=¶=mw,Ú)£@ÿ;§7#+/« àÇÆ£ÜÁIÔ¡†€JÇݪñGiŒ´žbQ!<QÚ€…{-?o-MëmÛì×0ÐÙmQçE·¤FÀJ‘ “Ëä XzfA…rNÏøLˆ4Aj¤ A^ˆ´Å|R‘Q†q¬aW:!ÍQ:4U“Ù€ÀAêâH}«Óm¶3¤}OñÈ ›=Á­-E°E°Á†qF@ìLÌ~ CYá!¸Sœ4Œ§òÑÑHFDôGò
+Á\&aÀòÐ0ßnÈÄcF„“i¥’A¦±=¡Êöýb­â V‰ùR±Ö‰X½oúÂ3%`Iâ\ʼnÊ/fŽ“@«DÌBX¤ãõŽš=ƒx“T˜ SÁÁ+‹ A.Í„òLõ
+ÆÓ8O¦äÚ%zUò–6b
+(a|·¥1RchxiaD"•ÞÛ4[6 fžžö­—‚ßMÙ¹«¶/ Ä<‡LáÐûH’*0b@ºLi¿J‚ШtÎj{û`Œ‹“ažHÅœºªêÁè`°Ó·7éêÐõë¬Îw¶,ˆ[jp¢‡  …†(=nøk®°A‹–Nm…ø“èÄòA$5Æøù£âTð -¯Ýó‡£. ò$Å<X˜)b‘ð;òâÍÕá'pF?Ž% t|ö~€Z@HV ÿx¡^ÞÔX{<P\±!(_(Ñ
+­Õüå»ôí¯mןŠ'b0š±V—ò•u ¢ŒåW 4{¼0/$´zH_º²q¬pýÑ,*µP‹û
+ùA„2DÁñVKåfLÚ'µ~0,íPç?—_‹\ I¡xýìT:øL;±MÞ ìw‰ôÜΦA•ž)+ÃòJK'…%_2PŒ[
endobj
-1722 0 obj <<
+1730 0 obj <<
/Type /Page
-/Contents 1723 0 R
-/Resources 1721 0 R
+/Contents 1731 0 R
+/Resources 1729 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1706 0 R
+/Parent 1702 0 R
>> endobj
-1724 0 obj <<
-/D [1722 0 R /XYZ 85.0394 794.5015 null]
+1732 0 obj <<
+/D [1730 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-1721 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F48 1258 0 R >>
+1729 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F49 1258 0 R /F21 954 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1727 0 obj <<
-/Length 3259
+1735 0 obj <<
+/Length 3592
/Filter /FlateDecode
>>
stream
-xÚÅMwÛ6òî_áÛÊïEX‚
-Ží膶B:M,iò¡ÒIè"ª¶Ý–ôx,65ˆZìÅ öL8¸øÈQ÷ ©»¯§êÝ·ª»ò´û´ï¿F¨Èßßì?ôßHÄY¢† |(7 [kUÑä­_NVM1'ZA=—–IJÞÒõ{x:ÂqgB¨5Ž@ÑÏ[\aßýJOö 9¹¹>3fòováL$Y²ãÂä]³Æ;²R’‘ kÅ*¶†„èb>g‡e:4Þs­aÁóþÈqæèê–;ˆq„îWhI8coÑ%ʯUËSɤaæ¼\•÷EWÎǼÙ;"HçÒÌ,!qe)‹ N\»·1R4õꉆ«zÊ:ô4^ë²å}Ì‚1«*¿a%¶pû7ÛnÚ,ü2i°Ìà¤)Œ×ûB¦"’RsÀÉó©ÝÑ®º42X1ŠM4ú¿f©DrruƒÏÝá Ÿ†ÝqyW®šGÂv‰pA>@½P"Fz¡àÄ@(Öl¡Ê¥Ú BnwõñˆŒ¡YS·` e={b„s€É eþœ •Œ8ÎÃF}œ·ÁrdÓT
-ÉoòÓ‰Ò1l¡+CZŽLj_sœ|H°‹¿{lƒqª •a¢Ä|Jð‡fUÍXÇ—Ãc³áUG-•wûëí
-ÈÓ›Ž20¼=BöeµCþòöa!3yR-2øá’óDÁV n£É]C«ù`u†œiúñySÿ¥ã”Íþ—³MÓVK£;-×Uב‚{™>Æ/*¯ÀOm·.”í%:žÅHîEªµsiJm ¥ãÐ
-µ?0Ž±´k xSh«GÓnHu8ízªž·õ×é ýe/ë*H9Ø÷Ñý=Õü›
- —Ž!o#Ìᮥù Jƒ•Ñ Mê¤Xq¤oKTlfPÛ5¡°}Efƒ•qæÕ}ÝôaßprIÆÓû'©Ö4„~}uþîâ†Ý]ªDd&SCë9gì‰7`/ \=è¤ö û∕ˆuœ>kT‘ÁrB?cTÕ£rTÁo¾µªãû;¢‘ýGlJ 8`SJg/1)Т M*Éؤ’Ü™ œI¥Ê™ ­IÁs`R0­/O`pß®
-¼JAù›]OtÄê˜hÄ観ÂÚžéÿ¤‚å1<Ñ>ƒÓ!(äC.Èî$”฿õ~™Û†1âz÷ÐĈ Õ„#Ln ñhhO„³f†€Õ;Z3³ž(9Î%)ñNÉÖò@Gä° 5ªù\$ÒßðëfLïR
-•
-÷J0ÏõG>PAaß0Óé3-‹êp å©÷ƒ¦¨¢l¤ß­¤-"•?ƧácàI.¢Xùàk›TLð‹“ÄZÎH…
-QÒÿa¬Üý6¦„Œ}û³c&Qìö–“1·O”È ü¯Ï‚Ì¡|
-… ¤͟Ír‘ít;9u§&¨Oà*Fõ DÁ€€s{ʵ”“R®ýÓçv;Ú)ŽóN )U‚v¥„T÷«ú´0¥u;^t;»s ˆùÈw,Î]A†PP¹äAõ…/´EÎÕtÀ<¨¾h’= Žó> ßµì:`¸*ûQñgÇœùÒP!6rî¶ÝN´ð屜­tÛ 䂈{ö‰4¸¼'Ò?±çJL¤0súuÌ À<ÓÜ}!þ†ü‰I_Diœ óè šI,Læ?¹Kj—´ýä!5~‡L^äöq’ªð«‡qbðé`àçÊ`sI½¬@<˜¼šûl ý€vÆ_Ž„ØÈoù§ÜØÿòS§BeÙVGœB™Á"Ì”ýݧÞÏR‘€€°þ?è²endstream
+xÚÅZ_sã6ϧȣ3³æ‰")Qwsi6Ù¦ífsŽïÚk¯Š-'šµ%×’7M?ý¨?¶lo¦7s›™ ‚Hþ
+•[ÀÙs6û<.ÒUVád KØé…BÅ2=(›®×ËäÆ
+V£.ñ©FõsFŒò¥È6ģሻ çå;jº„ÄI‹9±>þDŒÍ…´£lVºç¼‚=‰¬ÝÖ$•.«’;¶f(6C;3Àþó±7y,¥HŒ åór•æl^l¼qHz–›“÷´Óøß%±pø¼{xGÄçK¦>þÄ„›Šk›\3úýØŸ²ÆÍÇõqó ãçs!G4%ü]—_eÎ6èOó~Š€Ö{ª‰ùòœŸ~Òð@ðÆ!‰kCT^ÌóYZgs/œÖÜàŸ<jÚÕø%ÛT<À²,?o׬aÑ“}.«ºÕôŸÀ;¶ô¦FŽÎòà|Yá&”Û>xÞÞ/ß¿ŸˆËÉýE:¨9ö}´Ë*7mÓíÝTK±çÃRÄRFçQ¢„•*>às$4îJí»œTëróíz¼Á-šW»Hˆ8‰ìq©º>,µqlþWhºŽ­Òª&ϵ£?Ê‚<ËŽ¥ã%û`ÂVR©•cÓŽkeùy¾À–C°àίô|÷ðp}EúÁ¶5Ñ~prmª±ú˜¯²UZÔ€ÕåÆ
+C3Ê~Û¦K$#B°ÖËÔ“ IPãÔXól‘n—5ýp¸R<ìîg(­ˆâØÄ—tS DÍP‰P‡1 ¡ßáèSýì¼ ­)«*\²ö/ér›±ÒÎtw4KÐ@ÀãAi¾Ð,c«ÈkÆ°40R"¤”^&*ÊM64‰D(•´“8ä%@$1'¼¤#uÄK¼Të%«ßw'‰°&°Ç{¡Žå
+´°
+léif×ÂÉÛfø¤C,|öƒx̳tSq²+¸hbvJÛ{þ9Ÿ“`åÎ
+™0B¡©E(üÈÛÑ÷wW™
+Ú¡ÎÓ`ã…²Z÷]­ƒ[ˆ¡ n>Œ[k„ÖVŸ„mbC}
+¶Ê4øÿÓ°  K«°íH­—jaû’/ç³t3ß‹ìa$t «÷Bê{‹¦$ì¤q=ýÓg™×ºÎË‚hÏÛVî@WŒAàÌì@º€DQc8Vyáâ(px>m"h' ÊÇú Z:pÙþéÞŒabη‚TiÈú–/é+œ ÿô"ô`Çá(®È߬î¶Mòòôá¹-æ²Ô”À…ÞÇèΘ8«´ž=çÅ“7í©ÜäõóŠ`3¹¹JÊ ДhŒµ±¼A*€dÓ>Ú#ü™ò9«qjIÒžËÐèÎåf„ŒÚ¨
+RyÑzZ"’°ÇžŽÁ!²ß󊻤¡ç<[fO.ƒ¨CG„Õ¹qÓF´\6æåF[w¿‰²pé*4çŘ÷ؾ4ªxÀ&fA›Û*¿¡Wláõ—Ûz\.šaâÎ0 ãõÀù‹@JcçùØit£î ‹Sh:AÓêDóª*f|ì6òü¡ÙO˜Ù²|!n]®YpA žPí¢²³(ÐÒ.
+vì,ŠƒmbE"ÕNòÚMÐÆ#R³²¨
+…N ŒÕßH ÐOob¡ãD÷-¸] ¬`"Lôׯ—파ÁÎÄ>’å| Vnªu÷š±0ëG‡’«ƒé¬ä3ÓUÍéjø †OkÎŒ¬é•ò–ïj}uwùñú£ªT‘°Æª¾Ã çç¡b>¼D¡z[-
+XR±ò¦ƒ<{‚nmû¸Šü-jÛL¸B%±÷peäníüÿÆUhEš7)]©#¸òR\åtŽî¢JZ!°÷¨úFj@W0×ÀœzüH»®£ÑšŠ2ÊctÜ«¼4'æÕ;jã÷:@ùrY7ñ˜~>ŽÍ‰&°éHvÕ™/ðÛ†?%°Âö-õýÁ !AŽãðÄNv¥ïd#µw$öv1p¯5ã㪩ÝýÛ\¨»m_õ`l°A~}tEÜ^½£gi©): AÑ)Þqb¦m³
+øÓwOéá²$|>‡´Ïçîäsøs'É¡¸Ä²ÊÆç/î] †‚^ªçójJõú¹V7Ë›‚‰ž\ g`3Þ^×(c¾êuKtÞ€MiyÞ©#ðöRîJ Û”ã¢We:®ëåþæ?SŽÐH XÐU1dKmöLàP%}=Vo!µ†RÇà¦Ûú¯+¡Pú‚‹»Pàÿòݪ5Ô».a–;‚@ðáÓ%1~ÛfzI \:¥/Äp[§?Ç‹ÒgèÀÀèâȈ$Œå±‹£.pMÚ_ì¤ý~J\˜WÙŒ¯» _XÂó‚mùvà…PŇÆþOÂ*Ê!ˆã®#uw^j
+`¦Pn¹–Z^ hy
+üÛ˜÷Fÿ1°ã¦gF³rµjn2—yÁA‚0±&º6†M‚2íçÈ%žá¨nô0„dÉyd¢7k+»õŽ¾Úºwp ð1£gÊz—Yê›ê—’Ûf”M`»Q†ßÞ¾òJ­wôØB*×c™bñÊi`m±ââ•ÕtdX á]içÚ½üÒ­&ž·H·HP¨´þ£×nÓϾiíÞ’ÚŽÙ
endobj
-1726 0 obj <<
+1734 0 obj <<
/Type /Page
-/Contents 1727 0 R
-/Resources 1725 0 R
+/Contents 1735 0 R
+/Resources 1733 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1706 0 R
+/Parent 1737 0 R
>> endobj
-1728 0 obj <<
-/D [1726 0 R /XYZ 56.6929 794.5015 null]
+1736 0 obj <<
+/D [1734 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-1725 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F41 1238 0 R >>
+1733 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1731 0 obj <<
-/Length 3449
+1740 0 obj <<
+/Length 3580
/Filter /FlateDecode
>>
stream
-xÚ¥ZÝoãFÏ_á·:ÀZÕ|é}Jw³{é]Ó½lŠCÑöA‘Ʊ°²äZr²¹¿þÈ!G–d9)p(¶Qœ‡?Ò‹þ‹Ä¡Jõ"Nu`Baùö"\<·O‚yVži5äúñþâû*^¤AÉhq¿¬•a’ˆÅ}ñûòý?®>ß_ß]®¤ —Qp¹2Q¸üñæöQRz¼ÿåöãͧ_ï®.c½¼¿ùå–Èwׯï®oß__®DbÌ—¼Â™ oþuM£OwW?ÿ|uwùçýO×÷ýY†ç¡ÂƒüuñûŸá¢€cÿt*MÌâ^Â@¤©\l/´QÑJyJuñåâßý‚ƒ¯nêœþ´I#u´X)$¬1«å0 hm›4ˆ”T½–¥˜Ó²çB-uÛÚ|U5YñÕ¾´«²îìþ)«¦Çp5:Vb1ÜãD’žkF9E†*ÐF›±,ÿÙØúr¥³Ìèñߦ¶4*[zæMýGÊÇÃþR$K[õ¹ì6(ðäÀ„ a“€l¸|vèš—¦m38-üûç%¡ ´Ncž[v,
-xI)X9˜»AjŒtS·‡¶ËÒzù`ñ©–ùÆæ_Qv$îì¾lŠ2Ϫê…(]Cl­µD(×ôÌêúRÛg¢à•Ñh“=Y¿‹½Ëš§…ߨÙOV±ßʶ+ëÇãRß±
-¤Q%ñH¢Ûî¹ÞD¡«
-¡Ç’duq²­˜hÂøï*¢çK€“uªhm×kÏêB«0Hc%_×EÏõ†(§«¡(¸/Dc-Íò~cgW‚¥0 gCû8wñÆ(%aøšªBi¢/Ú캲Áh^ :iiÔm, ÖäÞl¿©YÓÃÈ6ëJ ""žÆÇâ¼}/
-Bï>uèl‹iHhwpG.ì:;T½@˜s‚ë¡6T Y1%K…3‡[iQ vä¯xÍœ1—›æ°GÅ¿Ã׈NŠt«Ü¶ø"æ÷B±Žüuˆ™í“ ‚Ûe†Á¦tæÁ¶èî ï/ óû‡gö׸À€üþZÏi@ÂùCdúxòeøÃ’à
-€Ö«ô\3Œ"ÄWö5’àþ2 ÕƼ¥z°XôÑÙ; 8§ß¡uɉ÷ï?Ó
-àNYÓø$‡"RƯ‹ÒsÍÈ2†s€¯Ã‰,WUÕ<cXKœ“á²x©³-ÅÍÔÛŒœÝÀçnŸÕE9,§ƒ›-}uçp&5˜O>¡ÿœèûe`#pØÇÚEÜ¢! HA^3I‡š8]Vˆ/ÔÃ]YJH F—Ÿ4€ðáöË?¯£1 ”7îY`ԥ䨟ø¨8­£÷Y‹S þ$I|à«›9‹ŒToqn››5 ‰Elæ :’¢O+Ç ßaÒ–Äqý’÷é=KÅq š%ßòz‘R-ïîœP8ÌÜSr*
-GËÃ7º fi!\8 Ïg[UgWÐ"Lëð>é€çjAжDC±žO;…ÖD-;~¶ÄŸUmC”Úæ¶m³ý ¯ÍdRÔh?Ck¾Låò
-ª[úèo†ƒóžH9:9y
-ÞÎh
-˜Æ]eyµâ(ÏàP4$׈*ΘÉ9<³~V³çŒ±kꂼ-¢ËTÃ5†.éÔyûMG$‹†Êf®esW‰ ¡Ûd—ˆÓûä6=Þ+YRÈñ|©d.0zàë¶ÖG\æ`¶¨Ù è±>t}8:B„Êf­ <âžÈmƒW¦Bã% #r®jáЛ \Ù…$*»4SÃ÷3e± %”Å©š-‹ÃcY<[‡A†}Eí“ÚÒ–»}ù”ù³PuŠdV*/
-qêÐÍZe9ZtùPá|r6Œ‘@Å7 & »Oòš=g4‹5#¶Q¾K¤ô`žÊo$õù¯ô1sB
-©ýN¼rž-æêÀÇz¤äÒvÙ¾c09Ywe’@¥!
-.'D\ôœí ®ß'[†¨y@aDèÍßÚÚMrnEŽ—·ÎrBPŽ#ÏØÒx
-¸¸¿û†YèRøö#²[³¬háG¦ÂÙÕsY°‰äYî…hꑽ¯±Çáf@Ag÷®šép³ †5Ñò9׆¸ŽXQ‡Ëª¬¿¶4tR«BŒµ‹J@Å»¢ïŠÕZœ.]€*©†qôÀ0æ‰e1Xݱ‚áÈâ¤ÚwáIäú0*xzÝ0Áuwf"qÁá*G>³ј`•‡'@¸ÁÚ¸¶j¢ûá#†çÒô~J¼¬šæ+;âqj*æ*ª‰wbê9#D]iÉ80&àjr€h<£©§Á¢M=w]ݦi9tö:sqÕ5°0"oÊ|CCJUÆ_WÞÝÓiÏ欹/;ðó'Ÿ²kÞEc§ìÜJ.Àô¹_žÃ½k âÀÙðY¬ïú2Ö¯cý!×y¬ßs¡žÈiOºJòŠ‰EúúÆ=×ÌΣ€eµ1J·¾§¬p¢o£¤bÙÓ育µY 6°>TôÅ¥´Ôƒ@r U%öK‡ ’
-a Pó¾kªV¾‡‡>=¹ÍÁæÔŠæ›Ò0ŠÆÀ|šÌ¤4pÀµ˜4\IÎáp¤6žŸ;KÄ´@Ö–q¤bÐÐïFZ“Þ½`ðX5YÕ=‘br˳š97wòb.²/‹Ây50'VeôxÊ ý:u÷fMDH÷‹
-•ÃMôµt0nMÚ¡ú+Ò×s6¢ß²"}q)vºäL$,úÀ⓪›ŽÁâ{‚gšÞ2€Ô÷O,ƒ Šw<?Aƒ³0®ð¥ªÞy sÒ«SQ‚?ƒ›ƒ‰
-‘ÆoýNäùWà 3¿¬ëœÀ¤Kéô³» éL#’NgñH Ó߈<×bœ®Ö÷N§‚à ¡f+ ÅЇCV­ ŒÊ¿Ò¾0Æ~³NtCœˆ9¢¥÷¬o2ª¾þ ’µvâ5ÔÞ
-®±–FÔDŽWC Œòsy'ÍŠn€HYxP'=òÂïôÇHuu2P2jïÄ I§½gTOþÆyý~©û­Üá‘޸ˆÓsvÞѤ&*<7N‡1udß{†«™ù[z¢)áH-=1È {,ýþÓK©J|j˜·Èi614·ƒ¸M°ø¡§åT–óYu…÷Oí4"IÍ$ ²…8mF=Ê¡~\ÅÛú§­}êlñ¦Š3~ž7Ûm_CW¥ï„#³Áã\ð–IDqèÿ †ºbnÒJϨC‹ NÔà'eœû‹,eü3ªÞ(þï¿Ö:þ)
+xÚ¥]sã6î=¿ÂoufÖªHêsú”îf÷Ò^Ó½l:7½¶ŠDǚȒ+ÉÉú~ýHK²œ´s“É‚@ñM‹…b‘„ž¯Ò`§ú"\äÛ ñß>]¦YY¢Õêûû‹o?ªd‘zi$£Åýz0WâùI"÷ÅoË÷ÿ¸ú|}w¹’¡¿Œ¼ËUùËïon?&¥ÇûŸo?Þ|úåîê2–÷7?ßúîúãõÝõíûëË•HBã%ÏpfÀÇ›^ôéî꧟®î.ÿ¸ÿáâúÞíe¸_á+ÜÈŸ¿ýá/
+Øö¾§Ò$\¼À‹ï‰4•‹íE*/ ”²˜êâËÅ¿Ü„ƒ¯fèœüB•xa"ãJ9 ð¢E¦^¤¤2̪Ǧ-ûÍ–öµnZ^6e¾!°ß”Aí¥H–úÏ}IÀV×=}°uÈ­îßMG7»¾ljž¾¬*‚4OñX74m1a¥ßd<«cÖ;¼ïù!èD,/*W4&Z ©HNbNÑ,Ê©¨»Nç+x<éÃê©{jêê0åB¤ÒSIôŽj†Ñy¥±§¢xÂÈ¿7e¨"+Y% ج.­Éž`ª0–°>N±ßY¯WùFçO¸¦®(OÈPð€Œ†xhú -Ûéž9ihŠ`8E¤¼D& OqÐÝÌ2"öRšK4¨1*]ÉšPÔ(FY?âàÅJ©S®„ðÒ0”f¡âpù»ú¬,`¶e‡ó%b@ðRÖê7š€¿üHäeOØL$죧øì;£ 8GÀC¢q³~¸ýòãõ¯ßÝ‘œà{ÖOVÿoS3”íôW£Õ Þy¸ÿ
+ôkÄÁýe
+2@­…‰[ÊÉ„-Ø¢Fßà˜tûÎDÞ¿ÿL
+™
+Yôz‘xi —¯žÓ=ŽT¾¡ªW4ÂRœ|¾oõ
+Ò²&ø$û“NñUVÕ /ãt.ò¤?á媪štk©Iç$”‡:Û’ßL­
+ž¼Cû(ÑöKO{ÆÿF¦¤3‰¢´Yýb•¿a2Ö€}M”T0B _>˜T]t¥)QBl†U$& $6h
+ÄŸ$Éß«p™›51aªÃb3§Ð‰—D.¬ü…~‡A[’ÇùK^ÇY–ŠcO $Kšà*]©\‹
+â%€Êf¦¥sS‰ ‚Zeć÷ÉžÎö{OÛ·ºÂúˆËŒ\ÏgÜÌÝ÷ÎS„JgölÆ=UÛLù¡åÔȸ|ª…}«2ˆ0e¢¨ìBÔLY ßÏ”ÅÒ—P§j¶,öeñlUì{±ï»ŠÚ8Ÿ»|¸ä®-Ÿ3»ªN}ì¡ÙÞ‘ìOR«,G.*¤”9Û–"¨ø`’t» °åŒF±ä
+$kà@™€ªÉ!Eãtç“6õÜqõ›¦c×édvþ¾NÛ¾mkNyö†Œ|ƒ—i`çÏ6dÛævÑè)9·Ò†ÓCbú⦷íÛž>›ëˈ›¯æúCªó¹¾£B9‘Ñžt•„^‹ôõ…ÕÌÊ#‡þ*>5^š®(¤®’Š¥ÃÑf«3¼ËYï+úbBZj‹A@ ™àªû¥Ã É
+cÛàÆ ;X›Ñã9ƒ lÄ ßÌÕ7–{Ù“#Lƒź²ÙžÄ„T\f m™ïéÞiÃQ‘C47ñüµ4ÉÜš¤CUXL иۈn´¢`&;âz‚CüÉ”3½Ø‹ñæÎ…Vº²—ñ­uÄ3­oéAj»(˜Á< J¾üµi‹Ë/{áìÂýæ§zgÓ™“ŽŠüy”4V
+F*ߺ-²ô«á€™Û¢“yÑCJé.ª±Ä€Ð3½)’Ffñˆ¡Ó›"Kõ§³¹ê´ Rà¢c5Ì\¤¸ú°ÏªSùíá gÚoEæ}ˆ1Rtôî~ „/\A&’ur¢ ©ÉÈ*3)²·Æ]Óöô…ÊpùÒ´OÃù›½)­á;„‚ºxË«˜¢TÙºòÏìÁk0Y±göÎt®*'cͨoûÝÎð4J´uÙolÖ{óù9ë3`"k!“t2xûã8à­¬g²cŽrp‚ø“¿ÍñÝO)þï_v f®’äœ%ø‘—È4¶L­:Q{÷ÄSÖÿ"¯‘endstream
endobj
-1730 0 obj <<
+1739 0 obj <<
/Type /Page
-/Contents 1731 0 R
-/Resources 1729 0 R
+/Contents 1740 0 R
+/Resources 1738 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1706 0 R
-/Annots [ 1733 0 R 1734 0 R 1736 0 R ]
+/Parent 1737 0 R
+/Annots [ 1742 0 R 1743 0 R 1745 0 R ]
>> endobj
-1733 0 obj <<
+1742 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [254.5198 731.9163 332.9349 743.9759]
+/Rect [254.5198 615.8509 332.9349 627.9105]
/Subtype /Link
/A << /S /GoTo /D (man.dnssec-keygen) >>
>> endobj
-1734 0 obj <<
+1743 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [353.5545 731.9163 431.9695 743.9759]
+/Rect [353.5545 615.8509 431.9695 627.9105]
/Subtype /Link
/A << /S /GoTo /D (man.dnssec-settime) >>
>> endobj
-1736 0 obj <<
+1745 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [367.5469 220.4734 428.747 232.3736]
+/Rect [367.5469 135.687 428.747 147.5872]
/Subtype /Link
/A << /S /GoTo /D (zone_statement_grammar) >>
>> endobj
-1732 0 obj <<
-/D [1730 0 R /XYZ 85.0394 794.5015 null]
+1741 0 obj <<
+/D [1739 0 R /XYZ 85.0394 794.5015 null]
>> endobj
478 0 obj <<
-/D [1730 0 R /XYZ 85.0394 471.141 null]
+/D [1739 0 R /XYZ 85.0394 371.8748 null]
>> endobj
-1735 0 obj <<
-/D [1730 0 R /XYZ 85.0394 438.6197 null]
+1744 0 obj <<
+/D [1739 0 R /XYZ 85.0394 343.2428 null]
>> endobj
482 0 obj <<
-/D [1730 0 R /XYZ 85.0394 198.1284 null]
+/D [1739 0 R /XYZ 85.0394 119.5506 null]
>> endobj
-1737 0 obj <<
-/D [1730 0 R /XYZ 85.0394 170.5486 null]
+1746 0 obj <<
+/D [1739 0 R /XYZ 85.0394 95.8601 null]
>> endobj
-1729 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F41 1238 0 R >>
+1738 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1741 0 obj <<
-/Length 2746
+1750 0 obj <<
+/Length 2806
/Filter /FlateDecode
>>
stream
-xÚÍZßsÛ6~÷_¡·£g"¿ALŸÜÄɹÓ:=Ç÷Ôö–h›‰tD:>ß_ ,
--ûR?]Ÿüð^˜…%Vs½¸¾íéÊ Ís¶¸^ÿžiÂÉ)h ÙÛ—ï/>üóêìÔÈìúâãåé’+š½¿øå[®Î~ýõìêtÉrŲ·?ûíúü
-‡tÐñÓÅå;ì±ø8¢ôêüýùÕùåÛóÓ?¯>9¿Nk鯗Qáòåä÷?éb Ëþù„asµx‚J˜µ|±=‘J%…ˆ=›“O'ÿH
-{£þÓIÿ1J¸Ð|ÂœM9PY¢ÉL n¡”fg«UÙ¶añMÝíš[#hâ=Mt$WV{é#ɳ®qO–u÷%v´åîk¹Ãöª¨qô& îNYž•m·«V]¹Æ¾›¢Å&Ëš:(Ê.~Ãb½Ÿ†i›Û$ š¿<‚òª¾ ¦<·]¹…½ÔdŸÊr¼{<D½‡„ Æpãüˆƒ»»6®zŽOòËþèø¾»õ:¯}*W]W¨ #ì šâÆöÕÏmÿ¬iû9#93¸u·Í7{]vEµ ;ï­‚ç}ó„ ¿«ðlÊUuûŒ/~3à9Ü èØTm×’ÃÕØ^hˈ RY
--ûRÇC9I¹µ›M󴬛ÎY8šœ1A˜¤f~ö$51}ß•Œå„AÏ`úOÎ7PÊKçβ§ûjuïš ÁÞ}…ýÞdí0â Ï°/ÐÝWá»pŽ
-
-qI,‡eÌ£POj…¢Ô>ì!ñì&@BSH;?y’š˜}B†P¦Åpú!
-íc˜ç6¡;f … BîT5¡³ýŒ]Wu±{Æ¡w—ŸpÓ+îp«×9ÀAòË89å„3ÍúhÀ#à©Ë[(cðó<¶y€®ÃC<§1"ç KÚ B@åÁsšôGïBÓ#Nî‚݈>·…å”.Å Üó>ÿ2øï‚á*C‡¹ãŽY/£ÿ×›†Mg_Oéèln6‘ILQ‚œe•¶@—Ò¿‚/»@
-MüBŽT-£uKi ‘b¡w“S!š áâ\)àÄÆäÞÑ—½ SZ2¿Õ”(™7ì#
- *_ô÷îÛÂAÀ>k EÝr_‹}[°.¹%y„ J
-‡Âôkˆ(ˆÅ¢Àxè°=JFЃÉTô’x:»Fê,cý•VAÏCÓ.'웦zDgª›#Õ@y’t¼0¶^Å~O‘¥Hèš Ý‹+¢Ü³ª ,wu±YÞ+_†þrQþæ±Ãƺj{:!Ø·C…å¿:Ôæ@‡<4΀Œ©l¨?UÝ}ó°¼.Ý™*vU$TŸëæ)}•ðßX›øQ÷Ôì>GŠ5Ø0’,ɉR›Î×â
-4ÝDæ“ÂetsÈB¨ŽâË1fAYK@w`…RC©S®>ãÍ
-u-4öÉ D¼!¾{Ïàå¡Üm«.\@èìæyŠÍ0E¨aêulF!#êùp̳3Tž>A@¡R2ôö± ÛtSöR­7Îu†-»iº{l½ý%îr,æ«.îzÌ¿Q.ûÖîgK[h^½'2í ²6&C çZ~Z6æg,ð3&Žq" 5Ê M
-Y±q­†{h%re†{øªX6Z¡nqtpœþræ/}g;<âSÜMCX(R¾w“ß‘»q •¾±/q7Á”[e¿'wƒ5>³ßŸ»õ5Ïp7@‰ïÉÝþbºÖß®ÿwº&æé—2/]`F¡1j «Æ| „¹Ü4ÉÖ‚Ìáô®&¡6àœþüª&DºÀtÍpuàš)uú—˜›„@„qweFëö©Ü…ïö•¡{ËEhø•ºß_”pw¿Àå ›j9Áâ&3ºHgœH*ó^X …×[¾Ñ–¡ÖÖhã~aÉÆìÊÕã®­¦‘^BÌX;šO‘kU·i^Ï+ÁC0óî©j'SÀPF½öN%WT¼fj×Ùc½q‡÷pZ ”P*G—Äûuƒ€þ8uÏ+áH h›“Å9¡á¯ZÅXƒ®xÕ:¾\¦€ÐAM Œ`j28¡qµ?™[²s®¶=çúŒB˜>eL×ûUtòfÚ¹ˆÚ}õ¬¸ý¾²ßÝ9™2 Œç<]÷ ?ªL
-öik_¸ãèKÍ„k”:‚ÁÃKÈéFªy’Ô„ÃKw«ªF& 3§Þÿp͘9uïÒÝ¿¤Ì©‘*¹§»©ÀŠú5} ]ûÛ÷Å=ÆðãÝ}ì¨ÂÐþ—B÷ŽVÓiÕù\*-¦*—ÍÓ/gH Y8&&$×s,:œc¹üX¾Ë•e£ù" Å,æz0rcæ( &è«”€ú|vêôÛDN)‚w0Èå}Ò9^¦K: ŠOÈIÇÿÔ>—t¼Yš’NfÓ‹q•‘fóǵ'4ó÷&Ah"¾¦2‹„Ær9k@:´`Hs ±Öš ÃÃÊSZ<¥×;J+nÔ§?n$]çø rª#µ’â/¨<d7<,Ü…ÔñÞa§Èé8^›IF–|k·O@E&&kš*éoþ;§ýÁ–Áy:ò›'T‘D:
-ŒòÁ¤þÝÌ¡éÿ­ïwbendstream
+xÚÕZßsÛ6~÷_¡·£g"¿Ó'×qrî´NÎñ=µ} %ÊâD"‘Žëûëo P$EÙ¾K:s—̘K
+±Ñ„
+²§‚Ð`<ø3ÔáÓ}±(ç\Íé\é4Y×M‹’Iª| ë=óårw*lR4 U™¤^QÕ6_¬Ë*~ðX¶kªÏ hM¥mMe·5Õ¦Éåǯ:t]-©Š Úa67’¥B[˜¡`.MÉ5Û]^5÷õ®mÀ»Œƒö¨@f“ÎëšSaÙPéCS,ߜεI»udsªß>øYCémA%ùí&´óZCI˜y½ù+Ö¡mÇ)OERÝÑ[]mžH¦8''#‡“ `eR†ç:ÇÉižùÉa‰
+…`æо¡':J*ñÞä§*ǯªý÷0þÈ+aÓ1§¬µŽûãÈlÊd*â'ëükÐ¥ªéY¬ÐL«bæòPmpýý‚*e˜°N=!
+„€^Kzþò
+Q>ÕÔžeýVÇcY×Êoâͦ~œWu‹Ž£˜PL
+•Uu¹,½ë"ÂN–RBã Ô%JÛvÑ®™Â0‡Ë\
+²÷~7Ôû Ó9?ÈÀýšœ¼×ƒÒ&”¯è£í N£Î MÉEq¯G!Ïä (Ôkõ
+ÅV{·‡À³›
+Aù…,QM_Ø|¦‚Ú7]–U¾{¢ª·WŸ¨ŠÂ+8î$‹q@ÓLÇìFv'ˤ0¢2¢í: ØÂ…ºç°ÌŒÀuðœÆ+¡/í^€
+Vù&~Ô>ֻϑb Œuš8¤$Ž°n}.žBy;ù´Âˆžòƒàª#ÿBÆŒ1¢‡%x,H¬PHu
+<w¢bÊkAØ'hâñÅ{þ/÷Ån[¶á
+ªwYvp~ŹïçíïP«úÇ©Ã^ ûjÀÝ°- ‚?or} Šâyëø„™3íX-˜ ¶)'pí®_ÁOzÆ¥+aï…0|6±ïç&—A¶*öîS ÆÍð•SôŽûdJ1P^ÊîÌ/êè£2 -4  ­v\mê3ÃøõâïöžùY@h4‰CSÉ#\á¤}V…®Ñ¡(2
endobj
-1740 0 obj <<
+1749 0 obj <<
/Type /Page
-/Contents 1741 0 R
-/Resources 1739 0 R
+/Contents 1750 0 R
+/Resources 1748 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1745 0 R
-/Annots [ 1744 0 R ]
+/Parent 1737 0 R
+/Annots [ 1753 0 R ]
>> endobj
-1744 0 obj <<
+1753 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [455.0966 729.9671 511.2325 742.0267]
+/Rect [455.0966 637.6661 511.2325 649.7258]
/Subtype /Link
/A << /S /GoTo /D (address_match_lists) >>
>> endobj
-1742 0 obj <<
-/D [1740 0 R /XYZ 56.6929 794.5015 null]
+1751 0 obj <<
+/D [1749 0 R /XYZ 56.6929 794.5015 null]
>> endobj
486 0 obj <<
-/D [1740 0 R /XYZ 56.6929 769.5949 null]
+/D [1749 0 R /XYZ 56.6929 684.2131 null]
>> endobj
-1743 0 obj <<
-/D [1740 0 R /XYZ 56.6929 752.1513 null]
+1752 0 obj <<
+/D [1749 0 R /XYZ 56.6929 660.3094 null]
>> endobj
-1739 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F61 1369 0 R /F60 1366 0 R >>
+1748 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F62 1369 0 R /F61 1366 0 R >>
/XObject << /Im2 1355 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1748 0 obj <<
-/Length 3401
+1756 0 obj <<
+/Length 3668
/Filter /FlateDecode
>>
stream
-xÚ­Ërã6òî¯ÐžV®2ăP9M&vâ­ÍdâñÖ’(‰±"‘‘²£ÝÚߺ>DÉ“JìƒÀf£Ñhôd³þÙL§q"Œœ)#ã4aél¹»IfŸàÝw7Œp"õ±¾yºùê^¨™‰MƳÙÓºGKljÖlö´úyþîû·žîo#ž&ó,¾Ò,™óðþ[„üy÷ãûû‡ïþõøöVÉùÓÃïüxw÷x÷þÝÝmÄtÊ`>'
-&Ü?üóGß=¾ýᇷ·¿>ýãæî)쥿_–»‘Ï7?ÿšÌV°íÜ$±0:½ÀC3cølw#S§RÙÞ|¼ù)ì½uS§ä'S§\f³(å±ášOK9‰“¤)ÉâT ¤ÌÙ””=–•r¾ÝÖ/Ñq¿ÊÛb¼e&ÓX¤ÜÌútÏVXËóÞò,…
-ɇëÜËò—$áEâOôüeS.7v¨æ›ºi šn™žô`y.VˆÔÖlŽ‹]ÙâøÛS•ïÊ%"|ûþ#Bq“ B×õ¡»¼i ÿ§®Šô„›lþ´qò€3
-<¯Šê„nI
-cÇ5¨Á‡ ëj‚u& 8)®þØ+›ëx>à˜&èrp7rD¶·½)ª –d4¥¤-›#Èó„ËúX6ï1­ŽKRÁ@2Â&}ËiËçâ=t0²²ZÚ³5Þ2@(fìëª)å¶lOˆ€Þ‚F
-ÄÝvÈÍÔ¾pµ-*² N>Hö£8B p¿gßgö?°ÔªMÕ;­”Ò‹Ô¶ùò·ærn Œk…75*Ö)F–+¹AÀúÎCÑ9Ý/É $䫆±ö‰ŸgÞë¤Ô±L ™ðrƒ]Ýùk™Bš x5Sèc]ÎVçLŸ³¨9U ¾ ªA®¯’˜Kó
-k‚‰A®¯Ò˜‹$rñ´ÁL9×{:"¿ä˜Š¶Á%9„—(H ÙàÙÕµóx€(XzRÙ ÃNçoáðj‚dø›W«Ñç
-e…¿¹G<2. L>3v8_ŒbŒš´xWT­ËAYXÁçÓ0\æËZA™[„Ô ¨C¹rUÃen”Ž¹@”Ä9«jüV{âƒ
-’Aõ82Ç«â3PöŽ7à-qí-L²'Ä7œ7!æ„¥3ݺ-êh„jS\°W™ï°±ëÛǺl³Ën}±…ÜbSoÏ›SÜjä++{¤‰•F+$D)>Zz`¶‚s—¶Á϶´Y©ÕkzÑ¥P—’G7*pr<Ω²#w†ŽäZ{>‡Ò“êlÙ­IŽ.3äXÏZ
-C3DÑ8S‹ÚrWÔÇöL)Lb›Cê*#霓Á–畱+N®¶c“ïlÙcç·à×2E#Öó"„«J\¨¶É©£ÖB@‚hçJ];¿Æc:!‹Ø' hSú>\š°aHD¿äØ‹bÝO
-œ”N°žë”ûœJ†xLža°+«rw¤V{Ð"6hËñ8“ÂkK¦”lL„.\ Þúµwùï´
-Þœ¯bÀ+¥Æ{%1¹m?ô£D¦¡ˆmÛÐó/é& ½eózbZJ ¯ëSkhð¡)ä¯6`íL$£¬ŽÎ°3ÂêZJ±(BV!i5•WÚd’,ýµW^ †W{%Dz8½X’@Nc{Rë|Y4üCÃmÛ9ÓRsc3¹0Éõ„ðˆàž>¸ž3 ©?j¸o±‰í˜â—›Ü¼xhÀö¡]ßé„à5¢†,¼86(·øTÚ(¡6`VÜx Ö;¸Ï‰Gw`'˜iN&ñ
-2R™~i)b-„Çlóß\Â!m Š¿¸Hn­_¦N¤þý* žk#X&¼¶Ù@c{HãžLc% Îq0©°œzíB•ÇFk=}ŠQŸ¤s“þ„Ô±âN4¬PZ z&T|I&þB&=ÅטÔ`N}À¤ ã—RÙëhröºÖbæ}9ŒP1èœ+<áÜûÁY ö:Ò¹±ùâÁ'v‹ÓÈIœµQÂ!•2”¨ ’ » kœ9ãdÔç Á'Ú¼?€+÷ÛIëLb™/± kŠÜP¥yùô[$,Úõ½ï¿ç;àâÍ„Eœ%$ ¶;nÜ
-çèß„¾ÁÇgé¥ãýGú­JÙGz[~šî³ðGòl³Ñs6u–Å”Gƒž õv¨5sÄ I5ïB­OÜø^Pßã ¯Q >Ï´séÊ'ÈÓœ«ëÓ
-B&ܯö„
-Ð5ÞÎ"¨—2¥ôØû.ë]Hµ>÷Ëõ¦¨ZïíÈ=›Ò©Û†ñ¹·"}ÑUãpJIÖ ³!ûµ½©Ð`]¥â, µá…dÁ~s@œÕ<:
-{zQày æãD –½˜'p¡ã45!ƒžà+Ú/©¤/% P„«Ì—;ôù“º ‚;‡Úˆ}±½A¬öf]
-ËHû­Vxí…XÕþ#,ô
+xÚ¥ZÝoã6Ï_á·s€µ*~ˆ¢Ú§4Ͷ9t·m6‡hû ÛJ,¬-¹–7=Üÿ~3œ¡LɲsÅmQ˜ŽÈáè7ŸŒ˜ÄðŸ˜Ø$ŠU¦'i¦£$Éd±¹Š'Ï0÷í•`ž™gš…\_?^}ñ^ÙIeFšÉãS°–bkÅäqùëôö»›ï®g2‰§&ºž%&ž~}ÿñ¢dôsûÃÇ÷÷ßþëáæ:ÕÓÇû>ùáîýÝÃÝÇۻ뙰‰€÷%¯pæ…÷÷ßßÑèÛ‡›n®üçÕÝcw–ð¼"Vx?®~ý=ž,áØÿ¼Š#•Ùdr€‡8Y&'›+¨(ÑJyÊúêÓÕOÝ‚Á¬{uL:±Q"µ™ÌY“Šq-ÇQœ€Öf©‘QZwZ–bLËž µœ¯×õa¶+û]SÖÕðÔ"1‘†U•Oö÷L#ûË`aD¤c©ú|Ú‹ò·8–Es=SÆN«r±¢áªnZ¦æ»ka§? ÐÅ’Úš~7ùgž&Vw¢&ý±/v¥ß¡]9Žzÿ¼ò„’§šb÷Rì
+š"
+èüÖýî`ñ èqØyY5ˆg7ǯ)N°"„¤T'#qQéÒšÜ=Ohð ¦ãŸ…/œ¢æt]‡šbÑ–Þ”ÒHHcâÈJ›ö¤9AnÇõ– FEJ å„2‚\iór}Þv!pFY–%—m7ä:o»×Ðvg Î!ß-(CeÄ6jc/ ÒqHÒSFœDB†Ç:5c£:3†¡7cÍ:3†²u4cÍœà °©àµuþÂöš|VŠ>ºeãçâW9ôLŠC¹–N˜"å“åesJ¤Î;¸™ .(4—
+­ ‡ÿËzT5ŒÏÞÑò^§(P‘W Kžˆ‹ÍÞÜÍ"Jáh3ÒL³È
+
+GËý‚Á¡hFa‚£…<3¤Œ¬¬øm3o€ŽÛºjÊy¹.ÛWb ï "€ˆ)› /0^€û†…„X­YÕûõ’ƼpK«Êv5ع ÜøbWm±¨T
+1ûH´sþ‚\¶›JÁ•¥ÖMQ VÚ²e)q
+!×ùT¡ã:zÓ3k^+€oC‘ª_òÅ‘ÔÙ2t\#Bô‹¾$’*NúR<®(UN¦õ–?Œ¹#€hÛù$*ïV$ ÈîaÐlêÚ9$î –~)ÓK±“é üc¾š)†~ój9x*?ÚêAtüMJ]•s
+qðÊ:Ÿë©ôLk§ÓyYå»×c¥Í¦ßA–sôNÒ)pÎù,†e3^¶±i|(:H¥†Z<ŽYl¹ú§Uíˆw þ”s Û£ÐpEiS{ †k¹¤Æ ü­|Ñ[>W svì®ÑÔ›Âﲫ:¯´¯’?_(xµ
+jåÓd§€ÓÝ)K…ï 6- zST®/¨E·ƒO®a¸È]—P°[¢Ô ¨]¹t%ÄyiRIŒFœÑ9 küQõA9)R‘ö“×ËêË À[å“·F6Ï~kë|³óB+
+?ë²iiT?ñÄ°géK44èò=)¹Ü·'eÐÜ”Á•<mÙíÉ+ì]–(©¸EKP¯_
+/.Np¶Ìè>ô¨õ.„˜2¤~
+;–AL%(ùúà ä÷=B:4΋°1Š…ÂÒG‰¶æýÏáó´$R` :}MT7y¼[ó5Þ9 J(°¬|#Ý
+¹.
+"8 `ê2ö~Ó©„Þæð˜€ôè™úõ:„R×#O|aìôæö{êu»;!¤8g¿û®/~¿‰
+ 6y»XùöÜ èXÖ›¼äR÷¶]è"Ó§ÓuñÔâÈL÷)°•Ëc4_Ñ9&÷呇DCd8èXZf" iðg¦½ùòzf šžê w ë®ç‘"Š4g6 Rœ–„ù}[l\¨T÷ÅÀœk›Ð•eœqÊ3Üqàºz1Þ3±zˆì
+G¤ãǸÓUÁ|9ÍÓòï8Qp_g)ÛEÎCb²#œëvŽåøZ¨…á‡ãÞw¢è—:úÉ©÷pM¤ªí"ßæŽù£ bß v Ú_ 7E`¢dz³.ŸW­³?Mø6®›x|…äù›Ò_8À\Nü! M`w NËÛSÆ dn aË ø3£/"Ðw4Uü#vòßþð1ŸÏì˜ýZ{ŠKiÑAQG橹R85ZË"KS€ìÌãJH¸–€uØÁÇåâ3ö"ª]+Àr 7òéA2î56Ôœht¥™ú^Nê+­ÔPð9NNJA úf)ûœ¢éÚ o.Y*÷‰yɦÏFâ¶û]U,ÏwVdË?…€p˜Ó퀂nܨs‡L/hÀ²ÁÈmN V'bQqJ墙àb5|j~)$e` ä""Œ<®àÁYLºÒ® wòÖ6Ö$r‘ÛÊV–NDCÚ\Ù nxGårWC“ÂßA¼ZuîVM}wH…AS!Ú˜êE)+Ð «¨%38U*6Š£IŒ€2k£Þãv$,ʳb—‹Æa¤Ñ
+½ú±erÈ_›±¬"Ž’Ôø˜s\”¿ùåý_˜T<uÏ$Ùÿ||ÛA´g¾~Xó •¤îödU8”RìI¤>Z;ƒEè]¹K×Y˜sÀ>Y‡@4zsò¸ê:“J-,|X
endobj
-1747 0 obj <<
+1755 0 obj <<
/Type /Page
-/Contents 1748 0 R
-/Resources 1746 0 R
+/Contents 1756 0 R
+/Resources 1754 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1745 0 R
-/Annots [ 1750 0 R 1751 0 R ]
+/Parent 1737 0 R
+/Annots [ 1758 0 R 1759 0 R ]
>> endobj
-1750 0 obj <<
+1758 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [213.0783 715.1325 261.825 725.9169]
+/Rect [213.0783 619.4221 261.825 630.2065]
/Subtype /Link
/A << /S /GoTo /D (dynamic_update_security) >>
>> endobj
-1751 0 obj <<
+1759 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [398.1622 594.0531 446.9089 606.1127]
+/Rect [398.1622 498.4649 446.9089 510.5246]
/Subtype /Link
/A << /S /GoTo /D (dynamic_update_security) >>
>> endobj
-1749 0 obj <<
-/D [1747 0 R /XYZ 85.0394 794.5015 null]
+1757 0 obj <<
+/D [1755 0 R /XYZ 85.0394 794.5015 null]
+>> endobj
+1754 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F49 1258 0 R /F40 1178 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+1763 0 obj <<
+/Length 2829
+/Filter /FlateDecode
+>>
+stream
+xÚ­]sÛ¸ñÝ¿B}“g"_$äÉ—Úw¾¹øRÇvæz´DYœH¤O¤ì¸þ÷îb)ÑŽ;¹ÑÁÅb±»ØOPj"á§&I*R¯ý$óV$R%“ùæDNî`îÇÅ8³ˆ4ëcýpsòö¸‰>ÕéäfÙ£å„tNMn¿MS¡Å)PÓ¿^]\þø÷ë³ÓÌNo.½:éDN/.9§Ñ×g?ž]ŸÎ”KÔôÃOgŸnίi*e?\^ý• žÏ½>¿8¿>¿úp~úûÍÏ'ç7,}y•4(È'¿ý.' ûç)ŒwÉä^¤PÞëÉæÄ&F$Ö˜YŸ|>ù[G°7–ŽêOI¡MªG¨uON‰Äûd’%^¤F› Àí©rÓ¢¹¯«¦h@:g¦Ëz‹=mWyK *ß{,×k‚íš‚íª@=¼½°²·›JÖ;à÷ù—”zÛ´„8`Ky¡¬e´‡bÛ”uE„ëeä£8dcÏÚcÞtü,h²¬öŒÀ¿ëŠ) ëŽÛJ7½Y• 24“Р}“ÁH Ÿ$:0³.7e›·ÄOb¦›ü‰·=óÅ‚õG{(ìØiN¯Ë]»#z§ñºÈdÂ(?ý©~,@j4°7´tQoò’·D‰6÷żDþ‡[E1#ñEÞæDÔ‡ÂÉ¡PÌpMlÍq©|Ík";Z ÊJd)
+|Y;†ÃgÏöéžI]}~CË?þó A>\}<çqÑά" 6&
+ftveB â¹éç¢%åÊ-mמªi=² Dÿ,ƒPGÆöp`A2e„p á,ìéFã )¼ˆ¢RÏóö*‡—Û‚ø„!ÆkÁ»÷Ýœ\x™‚;/Œ´¦Kô* ¤o)åô²j‹í2ŸÍÿt&Ò„k2êÔkÝ"xOèˆpâ¾Þ¶ )±Ð¨ ´i¶dó†Q^5M‚–SXÔz 9·‘Z?ŒãÄ®!¿à-bA!™S1E®Ë¦-ªŸIœœ $¬ËI„Îl´àúóÚ˜þM&\jÕp·QŠÖ
+ ÞŘmþ…T‚nèI›äkrBÔrœ_tˆÇªŒàG‘SL²Ï¡1éž$Î ÍEÏ·Š--¼sn¼Ôšug}’!tø3 ¡l«ÃB.CN9â1u`´ ¡?ÇHñ[<fJ¨$I†LâaŽœ#8K’¸Î2–t6—Ÿ,ŸR¯Ìi 䤉µ`¤d†Æb94ÃÁ:Œøà51FãKyWqÌ^@u`Œ÷jW8—„L
+Œóm…!ê‡DjölE.
+á.ø#¼²—âú`¾4®ù™ÇÉA<  (Æx·Û'¢Å>yXdôdë4ÄMe¸Ë%rz „0É˪š½¸ðæ91ôäz)Äу øƒÈî4éþ#„Üò~=O¤€‘ƒká21¨…‹ TQÌz¾/leÔ‹}Z
+ÇÊ$2‡†–R®ìzú>¿ðs*‰c"öN!ìç)÷uÄ€D§J
+G9˜ÄK¼'pÈ€¹Ã“˜MørAZºfN¦XIFFá›fƒ;c~@ï8ÝZW#
+%•OX}ʇO0B¼áè€7D¢
+§kü£àó¦s —ªüo8HUWÅ«ì×ì;U«žíT3™¼>F¤Z»£æMQîµG«Ÿ@¥Ó Œ÷=é@.»nM±.m§K«JB˜âof#µ±²ÂÉXîÎÆäú=õ‰íwßÈh/1ÐUµJR‡FõصjC…fÂó‡ÅÈÎÆ
+$YogÊøõ—Zkð܎ɧV˜Ì¿(”I*ýéaס*cÚÛLeîUì>´„]ºKKØ D@Ý]ž$D@€ÄºÎÔ± ô.6a²=µÖ % Ïý™Á$ÿ0òµQvŸ£¾ûûXHsÎéñÏ–:sÂ: ÂL!ÿ™<þjËÿˆ8fý8­¼endstream
+endobj
+1762 0 obj <<
+/Type /Page
+/Contents 1763 0 R
+/Resources 1761 0 R
+/MediaBox [0 0 595.2756 841.8898]
+/Parent 1737 0 R
+>> endobj
+1764 0 obj <<
+/D [1762 0 R /XYZ 56.6929 794.5015 null]
>> endobj
490 0 obj <<
-/D [1747 0 R /XYZ 85.0394 345.8108 null]
+/D [1762 0 R /XYZ 56.6929 645.7875 null]
>> endobj
-1752 0 obj <<
-/D [1747 0 R /XYZ 85.0394 323.3141 null]
+1765 0 obj <<
+/D [1762 0 R /XYZ 56.6929 620.7596 null]
>> endobj
-1746 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F48 1258 0 R /F41 1238 0 R >>
+1761 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F40 1178 0 R /F21 954 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1756 0 obj <<
-/Length 3218
+1768 0 obj <<
+/Length 2991
/Filter /FlateDecode
>>
stream
-xÚµZYsÇ~ç¯@ž ¦„õα—ôDK”B—EË ]•”í‡0 ¶ìÂØ &•ÿžîéž½0¤h§R|ØaÏÕÓÓýõ1“þÄ$Šƒ8“Ù$Ét…"š,¶áäú>\3sƒfýQßÝ_|û^%“,ÈbOîW½µÒ LS1¹_þ2\Â
-áôí·ïo>ü|wu™èéýÍ·—3…Ó÷7?\SëÃÝÕÇWw—3‘FbúöoWŸî¯ï¨+æ5¾»¹}G”Œ>O,zwýþúîúöíõåo÷ß_\ß·géŸW„
-òûÅ/¿…“%ûû‹0PYMNðOˆ,““í…ŽTi¥esñ÷‹ŸÚ{½vªW~" ¤Š¥G€RúeA¬¤²Ì—Ëý¥H§¦®A*˦7+8d’M›µFNëǺ1["Vå摨ë¼&RQ.ªínc~õé†:êÃnWí¢®ª=Qo>ãWHK¦ëêdŽf²eJ»çܬó㥘vŠš¾4WÏ·<k
-ØOèbÂ…S±ÙÀYÃhjÊ|¾A} 5+&Kk}HjU¨V+Fœ!%RD±Š‡`‚lJÐ76%èü5ŒÂSѬy
-â [#Þp vL)+G(ékÅ„=;šŒæõ…ºC¤î°8¥5eÛG§â}¬‘JÖ‹­mÞ,Ö`@ƒŠ3dG±ø€ïþ2“ÓŠTy›6cä»Å¶=$6Høko•!6~
-FÀ~<f¾Ð>ʪ4/W_ëÄ´€Y„ö‹^Ž±”é
-'(ÔŠR³(F¢Ô­(õÀ×Pס´ |~2%t† 3;ó‚…8‹4¡3ˆ@=™éVO34@úÒ'Ð$ÈÄ.´&bÃÒ³³ÒŒ¢¤·39ÂcõÙ+Ä9xoçËÇ:PIöì¡D
-¼†ª5¨Žâáù“J¦’@§¢Aç+eA¢£ˆGüÕÇZêÈq†4+Üõgëê@‰ÕÔÆhðµƒwßMCMâÂÎa Ãn>QÏu€»øÀ/Œ!skõæöêÝ»»qbç… ¯ÁBÌôKRCdišúÃY»â¬¿$e}ƒ;I·
-vd˜2JG΀ÚY„ì ×½ÚY¨N;°æãáH æ¬Ï¨
-8´0kCx¿®¨,N‹Q+²”´ÒÝN+lZG{0ëjKv†R ÿ”‡íÜð
-+«nÏäˆo¶¨J‡C—Á X÷Á ÷ßá-‰vØñZ%XÄ@š¾Š\-x¡ÁMâXžèx‰Kð€D`*àp`º:RÓû5³ÀÙ9Œ¶|¡~×l>-ƒ‰K¤2LqHé†oT
-—ÆÎ0€ÉÙQÏËÝ 7öCR¦žU¯ÜuaîîxK¬€<qB„I¤úûÅ3› ƒ4‹íV@ΡÔј%……bbEIérFÔ•A>¸Ø–¨P'ù ˜c\q–ªðh#pã©ã$?VÅòkrÌ ÆÓ­ý„q– —mÅF•º CgåF&¤&Òƒú»)Žf㔑vâyô¤«!Ø`gToðË p.‰„x™ãWÂôY‰,PQ¢=ë=é,£;•r/浯H
-`8%˜</ˆš‘{‡^AÇîÃ,L8ÃØÞ ocŸW°eCSɒ݇bˆ€Î=.ŠÝVµ,‘i÷þHs^ª©*"Ô[[ÃAE§` @Úö»ŠlM*äED‹¸ã­Ç
-–•‰üC1D'ñ×CòqþòòEÍó¢ ´cÔ|Ò=j¥#ÂE§$8% à“I2´'žÙ§€Ïè`9xûÑ^WøŽÄ‹’°ËºìÃd—K÷ Ÿ®¸0|(¬ºWG«b‹ÜÝÞ'^†ô6ä˜úSÈŒmˆÐ]|Ne~$žÚr›GÒ8à&¾¦¶CX’‘Õ´º5}lp¸´.æEC’BH'ÄðŠ¾uµeŠ h  b"û’¯A"#d8Š×~¾½ùš¸dŒ¬é
- E_³7ÕÉò¦pö6Ë|Æde'ƒ³—ÁØýšuup;чá¶ßí‹#àœÕ1@T´Q$SÌ‚ýìV É/Ó6“¶·ÐÂÀzAoBx` ø(Ì4PEb¨ì¼ ’Q§ÇJjü¤ö„çìîE£¬^['G%ŒVH~ÍÒ• 𙯡.ûS ¸š·ä(
-Zuë{BÀÑ´¼{Ü5Þ_C¸ç\: l}Eõ^ŸÒír!ÿ,£êª627“!±&Š‹_–f“÷‚IH‹ËñÀ¶d³ ¢Š-5/y´Å_øŽñ·p%,9Ü}ÅAŽCǧrö–_ç+ãÀ¨–¢á@ª½7Æ›>^ØîòH?q¨JèMÆ÷s øÏwÂ6'þŸ*ÔýŽ
-k*i*ý¿’Ièa¦ìKQzƹûMÑ9ëÿ>Þλendstream
+xÚµZßsã¶~÷_¡·È#‹ß{ONâKiœäêÌ´“ä’ ›sɈ”œk§ÿ{w±
+úüeïÚ®¬«7ð™éyy.7›^Å.5 F©ŠíÈŽ6 KúüJ¡sX .Á”´õ~·t Nzõ„ó4×Zø^mã–åOŒ ׄƄU=/Àw×ÜÎѾ¥¨VôÒÔ»Žtö­ ²u½£—v¿|¢F4¨t`zbt6‚8h»* U“»Av÷ÝÁ ¿r=÷AH§Œ–ÄÎM±+:7áWÉÏ|“Ì„{2š,³Á—uƒ›–Ò@lœO $°ˆ¾/^Œ3™¥ÊB4“^ÙN •§™ÒQãOS¶¥Lé,(üÄ4+Ú|Ø~€wnä‹Oô0j^oË®s«7øåý…u«eáº"µ»ï¨e´×(ÀY&LÌ@†÷ÆÞÝß|ùå€h–C.ól–6daöin­¤1yŽš‹TgLgF+oîÿ9áT!R“«W9*Í¥Y*„¶ã4¡„EHY8zbèû¬ôPÂSÆŠP2µÇFY&óù3aO³\^ŠÎR–›üb¨È<ã1Š1(rKA‘烠Ü#6î ­ë-)4×€B˜ÛøQí· FXûèˆj¡gC!“,ë
+äqOß+R‚qÝxþ¦\~ f;ß7a¬*‚‡A´pa'lšKmÆAˆãm¢åesW â ˆÀ”Ãâ u¡ìÌž‚ MXVFvax·!{z3€›¢#ÉÃleU¦àF
+ýFpA!
+=Wn]ì7]K_õšžÓŽ²*Í4篫üp…Ù‹ây*u¦&Æ{±ZjeÆ {©¼¸¿P'5b BñT¡ÇYŸ pƒj:ã¦
+­ø|±Ç˜
+Ð`ƒf£˜Ö½¬·[ç¹)h”¡0Ý®ðL><U„ƃ㉸‘VÑkØ+T@FŃxQ’4§­à0ÂŽæ#2-<s2ã÷$L³ikzóìt"g)qx„1 €çAŽ@Sdã ~r —æ¸ï©q†êêší¶ð™ÃÃeÝ“Ç5û]SS² ¸<ïy47GÛ„É "_ÕO;±qË'ìäÇT`v¹q/ %ù§Ñ‡‹lX€`ÈÝ5œCª
+ÑCôÖªy垃J4ÛC„æ†>Š}Wo¡‚,CÜ€ê"ô-šfS­vÕäyè?Ó¿Ïh ÏM]¬âù3QL¦||ì½».Pî–ž®Z)#÷µž'Ç·©z/aX‘‰ßD"ŒȨ́Iùéæõƒº_ÁÍ˒ЖцåPìÑÛÙ‰„G~JŽ“(ŸÈ²q>Má‚žy¦ë£ýHy‡ü¿hë
+0,t,+Â.×…‚Áq:Þ#ú¾ÁÎx½.Â(ázÐψ!¶,<íž¼ƒÞsŽ§â<`؆Ç÷b>÷7nq`MÊ¡L|*l±¶ôô’¬¥Ñ}êãKàKOå±%äƨ@{ƒ×ôlëmDFçºOD¡ûµØ6™ rHvBØ~¸¿û¦¸ÙÒG`ðVÕ½@>×Ï“œ×ÂÚûû…”Ìd£µWDaü|ÝS½3у§ovåpÎÇ *æ(Š‰´`{(+ðº¡Ë:˜.*zCà+÷ŒÏ/ñ8J}‚a@)ô1Ž¥
+âµ·4ï”<Ž?ÁOºìc8ÜIE ×ëH:€·¾¡+‡0”DZËÀ"BS½ÙS"Äž[’Dþ²r›b@^!-û[k¬˜GUnq©E´=þÂó‡„+ žÃÙ×äDt<­–¡è<,‹j|WÙkÁè,eu‚?
+M´Ëû–›EFj­ÿEE‚áµ S-Å"£†6ª, YIz3à±ÈÏï+œñîEº™`¼I‡?ã:°(â~øq°g‡ê‘$®e{d‡¨â·Uèס_A¦ØóÝ#òÃÞB !º$Þ¦hñêkKùt•(¥ \­¹|k÷ºûË·ˆZ÷üÒZÙâ©´=ÁL
+ÄQì©5Àhpþ¨ëP!Â6úÁòG[>äH@Öô?¥d¨õòïã½ÖËY<4ï>™?^´¡×š0bè]žYÀÁ<[ñ@Ùé+KÈNts”…¤|Ù;pFñOxg uÁ;Q«–Þ3ÇÚ0òLÙ\^¶¢×š0cä°#˘Ûñý“ÛTä0þE÷ ”^öNTšpξY󗄇â,Š„ÀÝ€#Ý%[z¥scÆ?Ï橲þCk~¯‹Â¤NñßP&¬býuýþo—ã¿áÏ=ÖŠéõIfR+ò,…ËËøÙOéñßbÎMÿ/-¥mendstream
endobj
-1755 0 obj <<
+1767 0 obj <<
/Type /Page
-/Contents 1756 0 R
-/Resources 1754 0 R
+/Contents 1768 0 R
+/Resources 1766 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1745 0 R
+/Parent 1737 0 R
>> endobj
-1757 0 obj <<
-/D [1755 0 R /XYZ 56.6929 794.5015 null]
+1769 0 obj <<
+/D [1767 0 R /XYZ 85.0394 794.5015 null]
>> endobj
494 0 obj <<
-/D [1755 0 R /XYZ 56.6929 503.9183 null]
+/D [1767 0 R /XYZ 85.0394 769.5949 null]
>> endobj
-1758 0 obj <<
-/D [1755 0 R /XYZ 56.6929 475.3477 null]
+1770 0 obj <<
+/D [1767 0 R /XYZ 85.0394 748.5275 null]
>> endobj
-1754 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F41 1238 0 R >>
+1766 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1761 0 obj <<
-/Length 2403
+1773 0 obj <<
+/Length 2533
/Filter /FlateDecode
>>
stream
-xÚÍ]sã¶ñÝ¿Bo¥gN¾I6O—;ûêLã»ú”‡6Í-Aç(R'’v}þ÷îbAš”)%©ýÐñŒ±‹Åb¿%fþÄ,1Œ«TÏâT3Ã…™-·g|vkÎDÀ™wHó!Ö‹³ï.U<KYj¥-ÖZ ãI"f‹Õ/Ñ»¿¼ý´¸¸9ŸKÃ#ËÎçÆò臫ë÷4“ÒðîãõåÕ‡ŸoÞžÇ:Z\}¼¦é›‹Ë‹›‹ëwçs‘ûe pdÃåÕ_/úpóö§ŸÞÞœÿºøñìbÑßex_Á^äëÙ/¿òÙ
-®ýãg*MÌì>8i*gÛ3m3Z©n¦8û|ö·žà`Õo’ŸQ 3‰Œ'(å”
-›•`ZÄ´ùºj€µ¹L{eåi”2x
-×8Z¾uË ®IKôÊm—w4ÑlZmNxópDÀ²Ý¥
-öOòÐcM01”®ˆ!¤Bôs± ëDQuÖ‰bîæ‚Q•ŽÁ8ÆÉié ±ŽK§Çêµ¥—ÌSlɈ“Tæ¢Çš`c$à#Ž¹óñRùXËlDOËg€uB>Ö„|ÚÝ*kD·¿Ïž)’”˜2ušk‚Ÿ¡ $èNÀŒú_Õ]bG‚>ã÷dSB²45z:›Ç ¡ßj•§Eû8Ð
-`·cLê)kÕ†3O<”HïÜ|°>·äu%”u]\œ± ’qf”ìÒŸMˆhÿetq( ©°¦c Ï¢}ž9û:Œë´Ù# `×'ø‰ï®¶rö¾‚Í—êχ”ý¥,ÚƒŒ50‚_æV>¥’Zê([­ö®®ñCQ<Â؉þW1ãØG;Êg”†(’¦ƒÙ9(<œKu±gÄ‘™TZ¤4þ¸ÀøÔÀÀú\q Oþã¶j6ýüþa†ì´ž –@ö=V‹w€'Ýñ 0”'6 “-†¤K4
-Ô›¿žAU¸êšÇ­cøÀ/Ó™×·Ž±riõéœ\r¸”m6l-
-ËbÌe8þQ•¡
-]œ !"ÿBPjNwŽ@ökµ‹”µÑ&« غå&+óz¾1ÁÂqWdÞ§ˆy…²q´Î–ù¹
-LvN6ó¬h…ÜW¦úôÉ=Òó£G%«J™ŒÍøì÷ñÒ‡I™`þ§dÝÕ-†~ªÈë† ÿ†°zõ) CXô]«ºîöw(¥ïkáL 5&) oN{igø@ŸåjW„ë‹«Ë¿¼…²;W‡\Lú†Wº{÷­ïO*ðàëÀÞ†f—Õî‘ ÒFÑ©*ïUžjP\BEu«7æ“`?>È©ŽÀ/2¡•§»ÂÊÍ­£Û?:ïOá¤ëÏSf@¬/+?®@%!™P7+c¢+vô|ÀèʺíÅŠó$m€àæ¾@ØßÝ„:ä%¬=äEAÐ×6_~AS¡í%Š(ß…=^0³Ë%ÿA×gS…ÅGo…¾}‰ÞÍ÷8 5#uß|Ô¡å
-€ï´Â8ªqâ!ÇãrÙr3ÑP”œ³4Öª Wcã:° ¡"1ý O
-MGPU£Z†ãCçV‡¸îôs´) êj$³&ÇÏÛµÁd€äž@x°²ƒá7˜€º¦Ñ(ôyJEoz¤K_‹ÏWúâ Xv„ÉÔº 'Œ% AÂ&! Ó¶‘dÁjJi»6¼7õ
+xÚÝZësÛ¸ÿî¿BßJÍD8<Hœ~Ê%Nꛞ:ºé´w÷–(›>‘²Ï÷×w» H™²Ó&>&3ÁZì ¿],˜¨™„?jYaSÎâ4‘TÑlUÉÙ-üöþL1ÏÂ3-†\ß/Ͼ{g’Y*R«íl¹ÈJ„L5[®¬ÐbdðæêòÝÅûŸ®_Ïã0X^\]Î:’Á»‹?Ÿõþúõ?¾¾ž/T©àÍŸ^Xž_ÓO–e|qù–VRN½>w~}~ùæ|þëò‡³óeïËÐ_% :òùìç_ål nÿp&…I“hö
+¥eÅt_¼pÒ—
+œ`Ò²ˆêAÛ¬0ã?á_yÇYz*C†‡üu¸ùïÏ%ಠÿOyÇ© !x±±/ݳQòll¿e†„©Òûí3d(ùt†D¢í{ÃyN%9+Ûfâ øgbö¯Ûeu»ÁŸ»ûóù‹4†N+´–÷òUx|G§Â$^<$[±yévã¥ñ·óéìð×aæÛgdž:ø…j¢™„Z‡aßÌ++bìd¤ þÞÔ9õÛ˹R*p”ïÚT½8ÊÉÔ„Æ ¢>ÞXÜe-U¾ºËꢭxŽíŽÛ2s% Hì*ŒƒM¶*æ
+Jf—u9-ýîLqL½nJ…¨˜D”EUtükÃJ¨‚"{Õìkfl6¼¡ÉÖ¤¥»Ëº©Ò9ЉÑ`“‘D8RÿDûØvy…í
+4d·yËm8”uáwyß»»Þ·èñ ›wG««fûHARy¼Ê÷’š ø Ñš¯_áUŸp¹f  §Î(R¾Âã–¯‰Ãïéûkºü8ÕŒ“é«ÆkÀ%\ ÝÙEÁ]^n™tvÀ˜×í¾+®S´Ï݃
+#÷âÝc¨#ªÊ‰¸Éi=qá¡@uHåÙêŽKä0É4´˜ieÓë(' qá‘â¯þ I…+hE^³z*@@°H²Úãs´)c¸FZØ(Çñ`—#È*¹#¬öTNÄ:ßdûÒ³nhŒ >c‚×ÌÞpti¶üxñž¨Où#+/˜R ©Ö0Ž0,p„r¦m£È ÍhW>-Ú¥:} €
+Yo˜³-në|ýG˜ tÁldû€tlö%ј÷¼Έ*?+u>©ª –ŶdA÷Eþ0 ׋úé´¡1ÿ žê«¢ã[eX_ùËÊoÙÑX5>-q†µq=\è£k<p« ’k² 0Ø•§¾}Â:ÃWŸ²ä³•î#‡ð0Œ…V:?AR,ÙOtJâ7ŽIƒð+¥þÒD‚T l"Áîa¼-îÝAáÙ„J¸š€‹qUù©.m¼}œZì^*¸70úJîd$Š›š4P˜vÅ:'Íý§¦‘ne°EKÌ裛ÿ¼óIŒEÇqäMb„Œ=N•¿pÓé8À«¾,q›¬§Ã/biÃc h—;]ë†D×L¨L4†^÷mü„°( ¼¥¯ˆ Ûçϸ-p8W¼Ü`LB*Th£/´ÑqAÒéã€ñ!Ä >«Òqšû<¡¶)ßv¸´=T+×[î|šu‡þñ¸lj&Fmk^m;nBÙ\ ~‘‘¬¹%õ—+\ÄVõ~ð«“}ªÖR$±NžïS‡\§ûÔž‹êÑo ß&ãñ.º¢ÊEý¤ià9<oóL˜1‚ :²ÊŒí¸¨oàmá>û„¾ojø^I ´OøᲦo;ðsÙÔ·ôe(äk–(ú¦„GýH;«¢Þw9/sC”PCâ¶ä»ªX¨b¶ª£›½†Ü[*”– 4¯Ò£Ayè–N{,΢¨öMî³rŸ%ë„Õf©¡4GŸE’Š-¼µyIC®ÓHê¹&‘T¬ËI$…±Hàuó¼%=ׄ)c4i§*Ûr@“êѤÆhRˆŽO„$…[g{s{è‹pÕuúªG–ê‘¥" :ÜH .ÕwÛŠÁ¥ŽÀ¥„JµþWÁeOaK°õŸƒ–1ž/©!×3Ðò\§‹T³ïžV) »Rõ¼)=ׄ-#lY8,‰Hsµï\žy|‹ã{qð™¦ÃR…sl[¸Z9nz8ªà-„)GõÇ ¾÷€ºñª†€J¡“éÿiµJR¡z¡X ˜NÊ3.U“x2Ø”?oGÏôÔq¥J„1rlÉLFz0)G•JªC¥ÚU*'*lt•JzTÑ^W©$¡jŽèá_¸RI–ÛÅñ`hYCýC „üW+ÿ¹.ø¿&NTöÿÞðÕÿbð=žwI¢§±,& „Â@ÇúiRÀSÆX=aú?
endobj
-1760 0 obj <<
+1772 0 obj <<
/Type /Page
-/Contents 1761 0 R
-/Resources 1759 0 R
+/Contents 1773 0 R
+/Resources 1771 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1745 0 R
+/Parent 1775 0 R
>> endobj
-1762 0 obj <<
-/D [1760 0 R /XYZ 85.0394 794.5015 null]
+1774 0 obj <<
+/D [1772 0 R /XYZ 56.6929 794.5015 null]
>> endobj
498 0 obj <<
-/D [1760 0 R /XYZ 85.0394 223.2735 null]
+/D [1772 0 R /XYZ 56.6929 456.3937 null]
>> endobj
1376 0 obj <<
-/D [1760 0 R /XYZ 85.0394 199.7072 null]
+/D [1772 0 R /XYZ 56.6929 432.081 null]
>> endobj
-1759 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F41 1238 0 R /F60 1366 0 R /F61 1369 0 R >>
+1771 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F61 1366 0 R /F62 1369 0 R /F21 954 0 R >>
/XObject << /Im2 1355 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1765 0 obj <<
-/Length 3588
+1778 0 obj <<
+/Length 3614
/Filter /FlateDecode
>>
stream
-xÚÝZÝsã¶÷_¡·Ê3'I<^.¾Ô™æîzçL¦Mò@I´Í‰Dº"eÇý뻋]P Eɾ¶3ítô X‹Åo?A5“ðS3›ŠÔi7Ë\"¬Tv¶Ú^ÈÙŒ}w¡˜fˆ1Õ77|o²™.Õéìæ6š+2ÏÕìfýó<Z\ rþîã‡÷×ßýøùíe–Ìo®?~¸\h+çï¯ÿ|E­ï>¿ýᇷŸ/*·jþîOo?Ý\}¦¡”çøæú÷ÔãèïĤŸ¯Þ_}¾úðîêò×›ï/®nú½ÄûUÒàFþ~ñó¯r¶†m!…q¹=ÁƒÊ9=Û^$Ö›z6_.þÒOúW'姤Ð&ÕÔ:`®„uÎÎ2ëDj´ñ¼¾…-I3/jÜ ¼¡¢7´Âé4,ƒ¤Å¦muÓU·ÏLÏn•ÐYh7UÛÑÄUKÿwÕcYsÿK¦¹ÈµÍxš4u9±–6"U°"j»¢+·eݽi•žW~ådþTm.Õ|CÍc¹ÛUë’Vîîˉµ•Aê<ÌÛ<tUS3ûç7ŸgÈP:fH élar#¤…yJ g­öT?Ý{y¸i9˜L(›Äbð¤§Åopi2æ€Þòg
- pÎcª§9)¢9m•š}wl–R¡”Sç˜èiŽ¸
-ìß µ KÅ r¶I÷¯‚èÜ6Ù\
-‰Û; ¤˜ê4”zªÓæiLF˜Ä½ÀJO5ÁËÐBåÂ9bæ
-ÑqºM¿"íòrÙÿx¶ºìžšÝoô°,êõSµîî)Ó“C¸¹tzŽ¢'¿©¶>/…€‚¾ž h{.0(3-ìbi­V¡84.š²ÍéaE³órO÷èöŠ'D U^2HB&‚ZŸ°BÒ”³¾5©ØÄÖ<»RŸH¤u*¬S!Bý®Y&tjy·OæÕÜ»DX¨ª»=%œPaAñÖ¥ŽŒƒ ¸"ŠÀìaïR…ŒOż®US¯eª7´3ض„ÀÑZ7Då¤YÓò€P;™gn"Ö3Ì‹+Näà‰”&ŸÃšYì͆Bô›‚Ÿ'´¾||Ë]þÐnÙ¼ßSçao0åá\a¤jÛ}¹fº©ÓrVä¹Ê¾î¼R-M”£ÓüÑ^ÚvFFmŸ óî 2j@«‡êÙLü°¿AêN"iØ=,›î>x ¶[øª·Oøk9gñíIw VÉ$çÝALuÚôT#AãÉ} (}au¦™X|à °\–€/¬îA©]0+:Ÿç¨XæTq,µB¢m–'x-š&B'I2PiZŠP°¡
-®º£Š™ ÁõLä+È™ei⸣¿uCëå¾åÉÙøeïy½°k‡],.œGd¯Y
-á€W!l,™2V!$=¡BüÙŒPY:òþ”dø3 V*I~
-HÓÚ® €à/.~_ùKþ·ãóç²,Vž¨™|.´a(}öVcxq¬ÁÆH°ûÈêU*|…*קì (Œ©N£°§¢0x²ú¸$¥s‘$F碧š`c˜C‘@æ3äƒKÏñU<ª¹\Rò`Îñ/Ôà‚Ì?Ò·:’±ˆ]K¦<ÂÞàýM/Ö\ƒ“¨Öè(€¿ð› ØÙ6¾ÈÏ9Q‹]:Xh‘áxË.•;€Ê
-¿ x‡hIÅÞ‰šzÄM|ˆ8@‡èY‰ñX†£ÒÝk….ÖFá±ÿ(Ió×Gf€bÃÿ Pÿ* ¾ÉŸ8q
-1c>”ÉàݸÒϼAX&Л©ê<_+¥\‹ãësxæ¹³ùß~¢ÌÅß ‹tYø¶´§O'nù 3*|§‡5áåPó­ŸÁVU+ß?¬Ag0c7:§/¾„¿Œú|ÝXßœOÀWöÊ¿ýiûá»ÿ$à<N|o¥3'r,[S(íLë>Ìú?ÓNÀendstream
+xÚ­]sÛ6òÝ¿Bo•f"Ÿ$ñ˜&NÏ«“Kܹ¹kû@I´Í‰Dª"e×ýõ·‹]~Š²éfÄ%°
+x¶3.ìbó@­•ß›²ÍD‹fçåï󅚯yBäP8ƒ(‡…JæŒ_eE ¬Õ>™ßÐlnþnÙpkd4¹R‡u¡{¤:ÎKƒÎŠþH^ãXèÈ)Qîë¼,pßJÍÓ‚–Ê‹:»ƒÃ€³àž·!o^¢€þ™ïŽ;z!É"Œ†Ün÷R… Só¾Á«²uYllàBK0C"qÑðp7ÙmzÜÖdË%ðԲ؜Õ6à^áL<O7›wFo¤5É–¬ÃA”Ûm^ÜqgØ
+ÑsÉýô`‰I9Ô¾Vê1ž0M°Ÿó껲Ë-bVñmð:-®ÁÌW!EDâxPY„¬ ê¸ß—‡:Û°+€´7ñnÄ”za%™ Û´oŒ‰iÚ#ur˜@ÊYau£-gØA6Q¶ø€ÓzrèKÄŸŒŒŽ®Ï
+/5–Åcʧi*¤ˆÓªn¼[a}ŸÅ|þMÏ„RL±ß€ýMZÑjõ¦ŠžKÓãjè@þá“ŨM‡~Î×HWå-7ý{áÈЦ|¬hª""~öÒ¥€ÛeFDÄÄîá8ãÈÛ—w¯_Ú=D¿±Œû&w´–.öê[mªm‡ìÒ'N'8º(aχ|³É
+~çgJ=ÏÞÙSšVM†¸zze¢ÁÜ™Ö;ñl BEQ¨ÔœìB"&ò°q™›Ÿ<úXç#«ÏÚj™'!S$!Á|võkbùAÈaµpàòËéCµnó|i#jM|æŪ<%†*J!Ô TÂë}ö
+! +Æ<,’ù±((+@„AbH)5ÇTÀ讆`´ˆL|¦„`dSj `£3v$”‰±¤+9! ÍÜ2
+r³!Aƒ¬êeâøÒh †CÃ6 UßH…ê©¢“
+aGP!VŒÙW!D=£B¤9@l\?%á “Nõ¤0$jU]5AÏìÏ5D<|þ·ãóçê,ÖŸ¨Þ3ø\nÃ8Z—¿iÆ Š€¬Á\<Õ`ã ¤ØJ‹
+Ÿ‘B¦Ï¿T‘ê!—Ái(‚+N«R÷Ɖž%¡E:¥axI¡DK? ‚kϲW‚—®˜Ë!%;CŽ/|» d_
+Ãë=ÅC,…Ø´bÌ©Œ?°¹„ L¯Ç$½Z£'ç®!HÓîÊPà€w ˜b_¶9Üdx޲ïÄÉŸ'm-QmÕVOYkáã8êù#_å€[þÄ eb2YpoI<ˆ™p«Á/°KðÚñ(® ÞBq ß(=á-•ï±³åUç-tÌÞ/jÂ#¿€-ä¡”ù…Þ’Šý"¡_PÓ?Dì C ¤ôñ”‡£‹ ×2œ«ëEÅHz¢)îHÌ ðÄö’Ÿ)uÏ0”Ï
+—¥e¦…¾Æv7‚ÔÕs×FBÖÜÔ_mö´lƒlÒ'X m¾páÀï¦5Dv]nA’Ïá_VÀ9††ÆwîOéµñÀ9á@M— §ñÌ>„(Û#_6Bs:)V8ý­QBêÈŽÝg#tØdÜ>æõ}^<Wž²±ˆñZŸ& ;>]YCT¨ã†Úò0Uk†Ø:r q?“óÈØ7ì
+Ö×ar×&r`zPô´¹ ‘¡î¼ÍNÂ%ñh¦ðæ*Šõk>53Iør.™þÔ Œ Ö¤b úì\4NÂ\ 6#†S-êÂ×'¡^Õž2ÐQL òèºÇEA ˜€Ý°úãb©ù üëùå k`Ržo¦4*R{\|öÇ $ÉúðÉvÛq!4|µÓ³÷%ìiÖßV3ó²?uØW¤N¾W@Aø"/‰è¶r‹†U…D‘~®…Š@ªÌ1Î6q0´ð<@ty®…CNÒÃ-Y]“öEü5Xh%µ¢À擽‡—ÛÄ9lZG¾“ ‰õBËùWüC[Dˆ¡…Ð.Âx»ÐOv ‘—f¶ì¾yü{’ qªÀNÐ'ñìב ©B^ú·‘ŒtÆŠ-¢Óï##Hwa²ÞüŸG2Ò)ƒÂ˜ÄØš!mQ§¢L>˜È#¡ôôÂY ª™$mñöMW‘Ú×ÝHÃzÖÔ‡ àFðÒbâ3ˆP#qîSZㄾ旭%ùÛŸÙvß ƒk
endobj
-1764 0 obj <<
+1777 0 obj <<
/Type /Page
-/Contents 1765 0 R
-/Resources 1763 0 R
+/Contents 1778 0 R
+/Resources 1776 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1745 0 R
+/Parent 1775 0 R
>> endobj
-1766 0 obj <<
-/D [1764 0 R /XYZ 56.6929 794.5015 null]
+1779 0 obj <<
+/D [1777 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-1763 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F41 1238 0 R >>
+1776 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R /F61 1366 0 R >>
+/XObject << /Im2 1355 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1769 0 obj <<
-/Length 2747
+1782 0 obj <<
+/Length 2919
/Filter /FlateDecode
>>
stream
-xÚÕZKsÛH¾ûWè¶rUÄé÷ãèIœ¬§2NÖQ[“9Ðe³"‰ŠHÙãüúÝ)QŠSÉÔîVªB°D£Ñhà,>`ðœÎ˜ôj`½Ê4ãz0Yœ±Á̽9ã‘g”˜Fm®_Çg¿¼–và3o„Œg-Y.cÎñÁxúÇðå?/Þ/oÎGB³¡ÉÎGÚ°á¯WׯhÄÓãå»ë×Wo>Þ\œ[5_½»¦á›Ë×—7—×//ÏGÜiß‹(áȯ¯Þ^õææâ÷ß/nÎÿÿvv9Þ_Î$näËÙ²Á¶ýÛˤwzð/,ãÞ‹ÁâLi™i%e™Ÿ}8û×V`k6|Úg?-]¦°=¢e@΀Vf`µÏŒ2°.š°%á†eƒO1œ³|3ojzk*zæô¨Ÿê¦X=©–Íúœ»a5ŸS{È盂ÈÇûrrÉr>'jSoòùü‰^n#gs‰|: ‹:®^Íð)‡Í9“–˦XÏòIüæ“j2¯êždÄyæµawE ›’( B>¤ãr8Hk-ª¦ ‰b9Åó[ŒïËšx:*!Ób“dæ«U‘¯i´\Æu®l‰²ÿQ£Šp(¼u(’›LsãAsTŒS=Žšu¾¬gÅ:ò·ÑØL18;b¯VMYÅ¥gUàŒ¤“™çàJS‘¥~­À˜Ëør[”Ë;$Á,qQÒ|Š^!Í°œcE_ÀNk¨WŤüĘ(Ðh’©h´0×äà%Ų¡OÀÇâ*Ñc&2#tÜÓvó Æ¨®6ëIÑcË2Á¸ˆßàÞÃyp4Xó+(\¿ˆ±"sÂl B¡ãvƒçÈõp’£¹ þˆÕX¡œN‹e|ó9½®¢neñÖÄf¾káÌm^OBò‰˜Êåd¾™³ãpÞëpÅ÷Z„gL¿ÙAô qÄù®O<–Í=z.F´þ£Q6³š%3‡®,ŸMÚVë9°ª3:)ìÓ+‡Yo"Óí¼š|&ÝÚ:BºÞÝfÓÀA™Ù~LNaÏ8F<#(KrŒëÊd¬ÉŒ­Ê¢ïÈŠdú¢+j”´&3§lÇîíY¡5YÙ ¼3ÁF×-+j£8…ùLK‘Lýî|døp ÿ‹áåi@¨Ú Œ7*ìgðe
-¯§ï‰#EÓÐ탊×8J׊V€˜Oñ^fç’EŸÞeŠ ã—ïÁó¬ƒ'ç‚ ?ãë@©7TÞBÖ…ómôùŽt ÒƒÍF;tðcž=>ÃI¡BÀâ5–1<YmÁé”m¡ Þ׶\G"ÙèÁ¸¥1™5 ­½Â[®E:°£UrO“q
-%u¾ˆTÞ—ŸµÉ¸ðü»"1ÜPçàªÒ7/HzñפX5DS~-
-£
-”|é² äµE€Vðº©)UyõþÁ8 M¼ÓÞœ8;´Y‹ëÄá%.Â&Í舺§Ûÿ8©GbêÑ£{v¹%DŸŽ"˜­E…Šõ2ËšÝá„ITµ —ÞÈà“n<°SŽ†‘y ˜v¹–=> 8Ü3cÝ÷¦c#Ó'³¼œ×Qi_=yW)hoêb„ÖŽ¹P½óRïá¹çÂ$i·y·Œn!ðhšÔÌd
-vüSÒ$ Q£¤ÿŽP—¾8–&•™µpßH“ÊCÚñ\ýÔ4©À ™¶êoH“mÑ'Ò¤2`qí)M^¡K36|¼SmèeZá“Ç e}O¹>áâ + ãíÁIð$˜ŸÂ„nHÙ¦Eä¨èyßÁK±JÌt5¨ï«Í|é¢!Û›¶·ïåÑäîäÒ¨,ƒ[#‘\»k.2¡u
-³P­«UD °+,2• ûêÈýkŸ M$5‘ÆBbZ¬Šeܬª%ÝÀíRx—€B
-²¯:WâDØWóò‰)A PÌíOãš6× J\‡áç4¶Á“7xò§”ÙrõhÓñ#Þ¦ ”ë¨ó±Fp)@8ßq)ß¹”ó-—ªiºŠÓ2 d:ä œÁò½Ž"·@Æ[­šm¨“S­f ŽW=2‚;cÐOXV=‡Î¸lò¥
-ö·†äÑn±qkEÍúW„ ’YáSÃᩨûÖ²€þÄó‰iFM"Ýî»ÔNX¬ò¦¼-çeó¬ü¸Â¬îNØâ:ᄉ‹ìÕ”³§cn§à¶`‡ìäò[®o¬Ï5qØô´ûEÌÀMS!4-À%å2ÔÛL¥f¯dPŽW“|N£ S­f*îb1¬ÔɤÞ0¾|õž¾ê½‰ÌÔFÆÙÛ"&fô-÷ÚZL°x§\‹Ïº ¦^¿_½þ7.@ü®¨áš#SÓ&ºM_䤦/N¥¦/СékRIËÌó‡Dë¼¢V ûû¾ÆCa¹ÅŸ‹ÂýºÏ±¹/¤Øëœa
- (ôbë7
-É»MÜQB£vµwÜÔðŒy3Ð [¤ºfÙty±…EíÀB‘ž Í Ï„Æ „˜àu°ñ×
-Üd
-YL^Níé{Zº¸ãYÊw¡J
-Ç+ß‚ñU:Rš~©
+xÚÅZ_sÛ8ϧðÛ)3•–ÿE]ŸºmÚËN7í¥éÃÍî>(–œhêX^KŽ/{sßý
+0¤¿Ëad
+T "\)™JóÊYëG&üÜG&üêG&‘r™Õ½'w‘ ;!2a:21›p°Ðã‘É+b$½…°Ê•F''øtt°LYÚ‹NäŠÁõŠT}ãD¦0C'’eâÑ)˜ˆµ§VšÓvÔ§:nGÕ!NqðêAó§…é¨&¤’ƒc04çsƒ&`RØl`R8¾7)˜Ü›TCÓµŸ
+2»¦Á‚[ŠÒHZ¯Ûª^åK ßøýùÍGZ³®7­'ÞUKÏø¶ôí@C4çÈÕPÌŶqÁ]š4ºúpsùö_4ú
+HaDöã+Ø>ç,VBXÊq>ÕËÜ×lb³H$:áÔ¥ 
+õæõGò¦¦ö¥üƒ€B¯Êú·ü}†ó¯Ê$3™ìÉ<¦£:@­©Z jV (Ñg=ñHHD R<©+á ÞW_Êɧ<ȱ-.¸‚n¡¶óÔ/}\DÁ¤`”ûÕµ>nº~È-BY³j‡´—A3ÄjŸl`*2ÓÜðDh¨bˆ•6Ô›øôÍM ,gŒQ„ü>BÂD½÷PB6Á¬TÆî^U¼-Ö1¦WSiG
+ɳ±Ywü‰ÂÀÞ†¼$¬«âk<Á˜”žÏåé¤4ß$e,dv¤ŽÅøeÕHÞÓÜ-¤;½øŠE’»^i\J
+Ì.Óô€ŠHeƒj¦ñ—ÛĦ2ýFüí±»§vÆ ™`ÇHc8²&‡{Ä[?” ƒôLwÁâè5CQÅX¨O:³qûÌïëº!?„ÝÄÂhåüàB ²0¬­XÂD6º°+Bcêa@Q¶7à#
+B¤+Ç•ñ‡C95ƒw" 9q¦;³ûxê­2£¿è§ûH´jv®j€þÎÿ0‹¨l€±»²ís5û•cE·bO5†hMøèÀ»‡©E·/ ßÓËöî -iÌÑåwyµÂW(®¢«º-4^"˜/ʦ"‰<7¨Øun|ÙÔD~ë§h‰w
+„°¼^-ýÎî*&A ºgä‹–AÝÝ9ב ]¤ߑ޹§wüØ«†‰ pfÊÍáxPf‡ç ÷úØß.lã‡WûvUäÎŽyJ@ÏCŽ†# Û¦|é¯÷¾|ò!
+ü”‰¼ŠuÏßý§.û¿RiE¬˜NР‡ô ˜x¡P©:šŠþ?‚©óšendstream
endobj
-1768 0 obj <<
+1781 0 obj <<
/Type /Page
-/Contents 1769 0 R
-/Resources 1767 0 R
+/Contents 1782 0 R
+/Resources 1780 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1745 0 R
-/Annots [ 1772 0 R ]
+/Parent 1775 0 R
+/Annots [ 1785 0 R ]
>> endobj
-1772 0 obj <<
+1785 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [471.1233 61.5153 539.579 73.5749]
+/Rect [442.7768 242.6802 511.2325 254.7398]
/Subtype /Link
/A << /S /GoTo /D (query_address) >>
>> endobj
-1770 0 obj <<
-/D [1768 0 R /XYZ 85.0394 794.5015 null]
+1783 0 obj <<
+/D [1781 0 R /XYZ 56.6929 794.5015 null]
>> endobj
502 0 obj <<
-/D [1768 0 R /XYZ 85.0394 117.3409 null]
+/D [1781 0 R /XYZ 56.6929 304.9374 null]
>> endobj
-1771 0 obj <<
-/D [1768 0 R /XYZ 85.0394 95.0296 null]
+1784 0 obj <<
+/D [1781 0 R /XYZ 56.6929 278.7995 null]
>> endobj
-1767 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F60 1366 0 R /F61 1369 0 R >>
+1780 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F61 1366 0 R /F62 1369 0 R /F42 1238 0 R >>
/XObject << /Im2 1355 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1775 0 obj <<
-/Length 3273
+1788 0 obj <<
+/Length 3429
/Filter /FlateDecode
>>
stream
-xÚ¥ZKsãF¾ûWè¹*bØO6wN“Ä3;©d&k;µ‡l”DÛÜP¤"Rö(©ýï 4ÐIQò&ë©)öl Ñhà(1‹áŸ˜ÙT¦³$Õ‘‰…™­6WñìæÞ_ ¦Y¢EŸêëû«¯Þ©d–F©•vvÿÐ[ËE±sbv¿þyn#]Ã
-ñü›Oß}xÿÓíÛëDÏï?|úx½&ž¿ûðý µÞß¾ýᇷ·× ጘó÷·?ÞßÜÒ”å5¾þðñ[IéqfÑÛ›w7·7¿¹¹þåþ»«›ûn/ýýŠXáF~»úù—x¶†mwG*ufö8i*g›+mTd´Ra¤¼º»úG·`oÖ¿:©?GRY9¡@)§hÒÈ*©¼³e½oiWOõ 5Ú§œÙsV”Ù²äî¶Þµ Ïì®…›óø:oóݦ¨ò5èQ Pz½£™üs¶Ù–ù—Ô{)Ú§‡‡º,ë—¢z¤îª®þÇòq¿ËÚ¢®P½_½Ó¢·‰x"%ãÅß7ùâÙ.öëí‚¥³q<ÿƒ»¬zÌ© /XGMkŒ2o¨ýŸ7È"J!£Êžëb}~YÃß›‡™E‚XŒŽb´‹Ÿ¾ý'; +)æõ }øñÙÒÈ&ošì1oh¼É«–ÆüYÔæÓ×–Hà‚¸TCäSe›|=!ŽkuV1ÕKQ–Äc™‡¢¢~]åCáü9zŽçˆã^-Íß®®ëÉÚšæU
-_zÝ/$˜¯NL2<T²`c©é©é%²¿jÍW÷”Îp4¡ <æ4RI0}:fÝ;æSÕ¸4ÒÚÕ Û -»È%à«âsÖóÚ²« ,cá.c‰f½¦¿)ÙÒ…{ÆS?• M#i\úÚ1«´e˜ª3ÏgõT× ÝCà–54Zøûp k²0°\G±L»“~¹¦ÞûW¸zS¦V†×hŸ2n =—e½úÕo—<àŠ¾…>öÿ’¡mâ˜w1@Ù®ÎÚì-]ƒáòÚÙv[+ïnš7üÞCOðtþÛ>ߦüÄ ]AmæÞ‡*mÙÅáPF¾Z€äÄ™nϾsè½eG›W6åˆDUó‚âcû¥Þ—kz©ªyåǼí¯joŽI«­Tƒ]ÊΚ€
-_
-t…áõº*™³?Ši'ÐÛ ¯¸€8²²»\Ó.@â•°ÁœD¥ÓE“$Ò¶[OXi>
-‘„£1Ñ2rš}?3uÍa{Z„¥ë­7mZ· ÛØaµï«uæ톼£‡QºC8ºmò7|¼Oùa¸9prÁVwƒŽ¦~.Öù:„zËlõë ­°a³…¸,Ê¢=Œ|ðêÛºiŠeÉÓM¸¢x8Œà{$Øæ«Í®ö™p ’(UJuPRØŸ
-bI‡'(D&ad€)âý„6"™d1‘×’y’ÇVQ¾2î€:'ØÅP@.’ˆ!xkᤞ`‹¶-ãp™¼ƒƒeY+ÔÉz»¦­zx„Ü+–î±xÌ–‡6Ÿ2C Бձ9¦ŠqB(D HÍBÑ!€Ïm|´V¦÷.uÀ•£  #ta ±É>›ý†:}¸ÝM½¯Ú)‘¥‘³: ‰uþíËvX¦Î™£[lFüYi4–që%c²¢bÄ¡!¯±j„8СÀÙÙlß„«æ§3N]š6Ûµ]ªr—磗 "­v…÷š40iC0•„­5Åïù8TÒ
-sÓÉà¢[qÑ_’2½¾pJºÈH@z™—Œv⌤Œtl‚…“ÊÛ°à…VƒmÐäîqFÛ^:ÚÑO9°“u‘ÿ]¾:jÞFb,Žl[§Òœ¤ÄÕ+2œ®†2Dlup÷EbLÈdÏ+5H]¡ÛÅY ¼ÉÛ0zŒ"Ðí|9´O}'¾I¾3pØQ£ < ‹6måX á ñ_Ïïê@w`Ú‘8ˆ  ±ºúý— ·ß2N…ñƯ…-ïÉáéCÒy?çšs=ÏŸÄfþ©âö«'n?pFà`Fƒ
-ÊúËÃTì˜<\ˆlO¡ üÆ•zX¥ØwöN ­á–‚õ^¼S}ªówª£
-ѤøL_°eý¸˜º_XUÔJëËbtTr n˜‚´J€Ý!ä«RuÄH)c$[6u™·X?×V{äÑŸÎV«|K_.°ç‹ÿ8ýXÕÇO")×°A¿O@GÃÂ9»Ò\ï=£"üq…cβžÞ(ü(Ë~Ìþ7\°¤³QÛEÎtn˜±g3È)¸eÆ&õ°¯zõ‚Ÿ½ß]œ·¥XàGjóŠ-õ¨.ØR :·Ë±¡'¸(@ š`lD1Ä®¡w¹÷:¦Ï=wB’Ø";€FžùŠ
-´XpêPhm7ùiMR;ÈCA)}9/óý+;]wPÌC‰4ºåÓržŠ¤6æ²v;ªW¤8]0˜Çõ¸xþO_#Fiø“è´ NJYmÒQ
-»åjbY4ô$  ht<ŠÆ8;„ËNq }Ìí¿V—ë¼iyp—UM¶
-X4¡oròNbìpv ­%Ogû¶Þ€SXyÿ?á÷É·lêg_—iÂáâxIå‘Äw²Åö´TPƒ®ÿzD¤>ƒ!IÝð…£.Ù¯=ˆs£°‹ê~—ð:–“ǯ¦Rsi>ck“ƒÃ×iéF?0‘äpúr’ •Âæð¢†~C3À§jà궔H/~÷~è[gS4ѹŸ‰)áo»&Lþó‰ýß?!;þ¾N'‘rîLùP‚+‡¼@¡PG‰<õÆü[³SÑÿ Ú¾4endstream
+xÚ¥ZÝsÛ6÷_¡·Ò3Î=¥i’K§Mz¶oî¡×Š¢m^$R);î_»X€%JnæÆãá\bÀâ·Xpø «WyºÈò”i.ô¢Ü^ñżûp%<Ï20-c®î®þö^ÙEÎr#Íâî>Ë2n­XÜ­KÞþãͯwïn®—RóÄ°ë¥6<ùá㧩'§ÇÛÏŸÞüð¯›7×YšÜ}üü‰ºoÞ½wóîÓÛw×Kaµ€ï¥áÌï?þüŽ¨7o~ùåÍÍõïw?]½»æÏWp…ùãê·ßùb ÓþéŠ3•[½x†g"Ïåb{•jÅtªTèÙ\Ý^ýs0zë>[?­,ÓVf3 (ÅÜêœ%•[@œ³0 JpΓϻj_ôuó@Ó¼}éújëW«êÚþ¬¨õs½­ûçRd$…/–Ò0ÃEêÆ¿{ĤMºjÿTí¯—° ßuÔuèŠÿ¶½Çgžl‹æÅóÑ@﯅Mœx$ÊÊ_ +?Ê•ªÖ°‰Š«ä¶,6ÕšÞ<›Cø¬ á|c³iŸ‰+OžAY‘4ÔèvUYß¿àZÀ,q^B°\k2¼c•P¤$:Ÿ“¼o÷Ø+’êk±ÝmªïýjÅ{"”bBÃ^p7ªø0³¢°=ÒfÅMe­¼ÌC‡ê#U7°d…oÀŠÎˆã’©,Ï‚8ž©,V¦3bµdVrëYû–†õ«B"š5M÷ÑIo¼võC±zé+6£ 0¤Ì¤\„¥•NÔ¡ñû8£Tš± ´öJÑ&ü;ÛãÞ*}KÍV(0°=õôÎØ_ëíaK⩨7ÅjãßÛöÐôs*K#˜5iêXW÷ÅaÓÏ(ªR–[k<èÑÉ÷‹F}…§ž ÏV7Îè–*…mT6]¡ûv°:<‹`¶ Q4:á´¹×nPì싽?ÎvU}´®ºr_ïúºõÃÍÚ¼`ZeÚO­«ÿ¬ŽaPjÙÌÊ…É3@þ ”¸`v—ÈËxÈSŒSÚÀþd£`§"ØìÌIÉR®ƒÓŠOf‘s–žMfA/÷ "n"øgtœ˜Æɸ(ÿ¶*Ç…7Lk“ªŒI‘æmN|ÁÀõŠ§£¡Ì}‘i F—3nÀ³ŒH®Xb&ùh¶Î`œÝ¦`w}è 44ú:ñK‚Î aODd6Ŷ
+¼eCïÎЂCèæ§ÉmøF&èMˆÔiÊÊdÝ6ß!|Y‘t‡Ý®Ý÷Ôß¹±r@OçœÏÁt8ý€?ã:ùÜø壧H`Q*R›Ðù\ì·@®Qo64öÊYwÝÁ!;Ò‘¼™é¯¸Ã=°Ÿ
+gpÄÂHpCY:oSis/.ç­Ú}5‡B
+À5ùŠäkFôÄCBÄQґ컀k#Ô#¢6Ýܳ GÙqbáa»ó@y7â#¡}XW)éRƦæU÷‚I•ð|g÷EçpµÑ—÷%æ:¿/—Ó¬è‹ù}&ˆ.K¸fDO÷%c<‡xt"›Ö3Ѿ@ƒ|.Ñngrî´ô¬Õ¶Ý¿݇ï(pcù·`ç)9Ê÷ ³û¦ ƒ°èÛ÷ )äÙ08ºÉ2käô˜º¹èä‘Ð5µÂQÒ¡?<Çy¥ÑÄ5ÅË(3ÕÉÇ{êó‹ñKh³ƒPÖ*rµþ wYôþ“xìÚË®¾"šz}~^G1°Sý{Þ,èa‚reÐ&`Cêb,Çm!b©±×oœñ˜¤?ì=µ©Š'?ê0ü8M°çC6dhé ¨ÞcK?ÝŽ_Õ%¡Çà fBßGU1‚‹¦Y/•‘ÞÃúö>‹Ø¼PÌîþ€nTRxž‚Ï…çq^ÃxgAÈo‚AvbÖ°E^Äš¬`k_ˆ<ãü2A²åâß<YІ•öOÊŸ Útùt¤Ür›}Qwþ%1›©gבg7á¼åQ6ŽsÍçrJù¶­çßÎL€\½Ð;c7hï3øÒ€™CæVwhO`ZNsè r±Ëô Ã}Æ }Ã!à6ÌzW/GŸNTdÈ;²ÌDÉŠg*HP·,‹ò±ZÔ=– â^%rÏ^4ë¹ìͲ<MC"¸¯Êþ«Ÿª¥Ç !²Ðjj妮šÙD]A*¨mÈdÆ(}%’gÝRjs./º¥˜ë¼[¸P‹ÿp.7Uwâ•8L-µÙeÁ׌ä‰Wâ–Y5ìƒÛ,N ³¤9lWkfd/ð *ºF>£ÒÌ#äœ_øñÎeh@•mÛFØÑô€BˆÄÙ¸•ŒRÃÁõY™‚4B…üåR֬ѻAòôJ´‘j˔ͳW¶5⺰­Ë¡Q_”_æà ÍòL›Ë¢®Ù“U ßäSáóaà
+
+ÁØ£’¼€ÓA,î=°¥ð2†B
+©š¡*²¦×uÓWûüÊ µÓg<åì{ 4È;®®´Ó*)¹À³ÇJiYÉåcs?VWp*õ×{7ëå¦}XÎ1# åùe5®=¦µHÃ2]E(
+ Aå}ä±ÔQ¶ÛlǪÞÔý
+Ï/àlÕ>µ=Y†¥5‚[l5ÞYna¬PTþ?%òœq›ÙË;sßÑkšõF™íd?uÎ2iõe®¦Ž
+ÒxžçS%æR
+1nRœRÀëM_4U{舋PÇOÂWëÛöËa×M‚L1½Â#t££åë[ÀÒú[B Ju„Ыê±Ø þ¾Bîû5Ã"W~6NX왩P9äBÇœÏݨ)ˆ ¹Šª£\&?TeAÅœ<6RÑ:¸8zÐŽ^ûS 
+zy_Ô{êXÕ}<«¡8ŒŸs2vXaäYÂNŸ|žp—ÂXˆÅUV‚vKNí/õ¦u˜ˆÁpw‹/<ü»!î©k¾
+$¬e©àæ¤ds¾,“eKÊ|R–!QˆQÕ°ËÝÊ òyÊM¥¤u-¨Vˆ“òK!!ä’Fé©‘ ˆtÁÆúÇèö(œúhqÏŸv%™ä¯]Å\N{àr;UîΞsàãZf—…\3Ò§öø#éw¡è]T˜ñ˜Mrs|Ì¡g°e ïÞþê;Û¦©†˜&*¢c;›¸ÇÚ9%Iþ~oUŽÝø7ŒdÚ¦ÑQžûÍIÆr%³×*F6gR‰W²‘ˆéü¶&:&nÖË®-¿T3[o8ƒEÑÅL§ò§
+­@È<ùžš]¿®[¤u–T} `i¹ña—]UkOâ)Ç窢!WõƒÇ}Í”G–P5íáOrš’óO1C&›Â.g(@ v ïCŸ+™ÜeÕÍ‚™dyž…¢^ÉÏŦJA”)B±qIå̆o›¹ß@AXjÌà5ŽŽüqf“³4~”TøqŸ+wNR5ôÐÄÓð §z]µÛ­‰œ9þ
+g˜éc͇@žªþ?ÍÓ—²endstream
endobj
-1774 0 obj <<
+1787 0 obj <<
/Type /Page
-/Contents 1775 0 R
-/Resources 1773 0 R
+/Contents 1788 0 R
+/Resources 1786 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1781 0 R
-/Annots [ 1778 0 R 1780 0 R ]
+/Parent 1775 0 R
+/Annots [ 1791 0 R 1793 0 R ]
>> endobj
-1778 0 obj <<
+1791 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [361.118 489.2586 409.8647 501.3182]
+/Rect [389.4645 693.3598 438.2112 705.4194]
/Subtype /Link
/A << /S /GoTo /D (configuration_file_elements) >>
>> endobj
-1780 0 obj <<
+1793 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [347.1258 97.3808 404.2417 109.4404]
+/Rect [375.4723 305.1386 432.5882 317.1983]
/Subtype /Link
/A << /S /GoTo /D (journal) >>
>> endobj
-1776 0 obj <<
-/D [1774 0 R /XYZ 56.6929 794.5015 null]
+1789 0 obj <<
+/D [1787 0 R /XYZ 85.0394 794.5015 null]
>> endobj
506 0 obj <<
-/D [1774 0 R /XYZ 56.6929 572.5486 null]
+/D [1787 0 R /XYZ 85.0394 769.5949 null]
>> endobj
-1777 0 obj <<
-/D [1774 0 R /XYZ 56.6929 545.652 null]
+1790 0 obj <<
+/D [1787 0 R /XYZ 85.0394 749.4437 null]
>> endobj
510 0 obj <<
-/D [1774 0 R /XYZ 56.6929 231.3705 null]
+/D [1787 0 R /XYZ 85.0394 437.7451 null]
>> endobj
-1779 0 obj <<
-/D [1774 0 R /XYZ 56.6929 206.9447 null]
+1792 0 obj <<
+/D [1787 0 R /XYZ 85.0394 413.774 null]
>> endobj
-1773 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F41 1238 0 R /F21 954 0 R >>
+1786 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1784 0 obj <<
-/Length 3512
+1796 0 obj <<
+/Length 3194
/Filter /FlateDecode
>>
stream
-xÚ¥]sÛ6òÝ¿Âo'ÏT,>œ{JrIÏ&͹îô¡í$B2Ç©ŠTõ×ß.
-q»»I•LT*eÀÔ7¿Üü'2ͺWçô—*(‘f·K•&¢`é¼–YÂhm™§,œó¨eÁç´¨PËOm×/»ÞôU×Wën¹3_Ïwγ"áBŠÛ1ûWBDª)ÄH
-ž£þ`K1îP~¦ÃùfùBÏ\,º½]W0&lG$ý“%
-ñè 0xa<$˜p‡Ï¦ëÞ4¶=vDu¸ãpB~DT·íóqßÑ€
-™¨Më$å,ó™5Þ3æy¢•(üí¾¯`3n©9ÑZOæ‹_1+?.íšôj:ôZ·)¯
-‘A–Ȥš ‘.ØXÿäí±ÚUÑëGʽìí¢H2™ëoxûˆêŠ·*wRëýE?—øŠüúâ‘jfõ‰ŸË–?[ü£ÈFnƒèæ
-”<B0>ÍîÈ„„#?öÛ–’” Î À_Gë«,˜¦$ jÖí.ÿÝ6– þ`šnc˜{¥;b?1ø+¾=ç¯@ÂS¿]ÅÅE‡ÕCê•L ‹€D>€ÁÀg/!óùõ–óx–Š©Eq¡çR>Ô÷Z„c#5¤!œ¥ãЙ+§êB•Á ,d·ÿeÅÚv]XÒ4qÍ6Üø¦ØòøËZœü §B~¥×N¬¼ìäÆ»Öy1"ªfد/XN~VymŽý‘Þ¥€Í`º@wà>®T>åÆÕ~2]Ⱦ}_û`n7Èf9ÿà‰»S Â¦l_º‹±9Õy’i-®Çæ1ÕåØ©P~Pïr uœ]vÕßöuý-V@|uýH5#ÀĬ¡Ed¹âS œ]ËtÔ$É´X˜]{Ä”‹®,Cª^ܼ+–
-Á–2ð±ßžl3pqV‘jè >5Š È„oáÄ¢4½!ÈY<}û'hY}Ec×Òq rS®RÚ7S뱂
-Sx#•¹`CSTPc†()–®YCøØtÕ¶qª
-,1¶öàb€f_)Ö]ÿƒAË%‘ƒÆ*ì%IŽ1jÂF}b£¾oÒ¾ÉF ƒò… q¨Å1†c|2z¸&LcÇ¿~ªà¨ÛVÆ¿Ñ÷ûöà»6ù÷¥ 'èÅ3pÊÒlUÈjÕœtÎœôiÎ6÷mWõ5‚’” yêS"BÐÐqç†8ßð‚òcXÀuŽàÛÆK\ÇPÃöžUKhà’æ¾!Œ¡aˆ:ˆ¢V±ØUû:HYÙj¦YŒ–gÛŠþ'°ß×T`áEŠÝ õÉ_“´“ëæèòÅ_6
-qÀÓ ÙB Sþ“ê*3
-ˆ´tÎûÚôx9ÚÑD(“0xôê!ôQÄ¢#½îU<²Í6Ü‹…˜c|H:Áû»eiÑöšp_6 )nÉL· mDR°,W…·ÈÈñ;ÏÎï–xúø f[Vkböè.áL÷LÃ{ìÒaîR´iŽÞýË™1Õåh©PÌuM%Ó²ò"¼¾†šiy]„H5#Ã4\åIª‹l*Ä£÷c±ˆRÐÈc‡|IÒUY€lW][[4Ê®Ùâ3yΗª=vu¼Cv÷-T# õ4Â/í±. ºC¿`,ÑÊXƒ¨Tž}Uñiµ¥RÑ9;˜êëò£òQ…€P>hA®ÓÜM®‘¦áyö¼Î”¬yÂÒŒ‡b¯jŽ¾Å‘¹ÿàƒ ôh\tDß3ÙÚn,ÝP*0åó(8@ëJ(g5Ä0X»rŸ´Œ»ˆök5î`š2 Ë–V×Ô ºt'®4Õmƒú4~@ñ>ådöª lOSa’¹€ý VÛ›]ò¸d®ŸwÕ9ò‚ó¤ÍoÚë-~,lÎzRD᧰Ø~ä½X¬p%R]wÿ1Õe÷T®Œ¶æЯ¬é¯ø†äúº ‘jFˆéÕOd¦øT
-ºeCÏž²¿“!š®á½3(scšµ¥©âiGstGË°0ðLð½Žp;sxv—¹€6s÷¢R扔±]*¡;îg úäJŸÝaÿg)Ìä:)y1n€bŒóÍ"Tb¹Ub0ogŒÆ#†w¬éÚƬjÿjÌù
+xÚ¥Ërã6òî¯Ðm媈Áƒà£öäL<Y§gÖ£TÙ( ²XC‘‘²FùúíF7ø(Mª¦\e4Fè'(9ð''&
+¢T¥“8 #¤™,·wbò
+c?ÝI¦™y¢YŸê‡ùÝ÷ïu2Iƒ4RÑd¾îñJ‘$r2_ý9Ü1}÷Ûóû§Ÿ~y¸Ãéüé·çû™2búþé—G‚~zyøõׇ—û™LŒœ¾ûÏÇùã EÌ㇧ç “Rs…éËãûÇ—Ççw÷;{œ·{éïW
+ù|÷ç_b²‚mÿ|'&fr„ŽdšªÉö.4:0¡ÖSÜ}¼ûoË°7ꦎžŸÒ‘9ÀPõ0‘IS3‰MDZiw€R%¸‰ïß«>©‚å Ž&+W°ï0š6KÀ6û’o[ê¼eÅÁáÍ4¯‰Ù`])Ó Ž´çöOV,l]û%³²]³®–ŸlÃ#ÿFÌ>ÂÐâóMÎCծɫvÚ‰€˾¿—ÉÔn«7Ë»ÊËnw Ød&#'
+K°]#›µ]6<‰ÿ¸7p„åª:ÖÁ…fÉ –2šD ý©‰£+š@D³>•SòÒ’Z*”Žw¶Ì–;«ó¿íùòR…AÆúöú-Õˆ
+€ÅcE$äž4ùiM²@…îj_Ú‚lA5´!Õ„˜¸ö9[.A&4—ü‡PEã{J…\9t®Nˆ !
+žeÆ„–UÙ£.xlS Øf剠ù»-u >2·Ú³ÌX
+
+·9»J:Àá Èh|»{çÅÁè9d`Û“\‡3 ¨¶<N¹B »î<ë·óvY]S(’œþH>5Ž!ÏUù·¥­ÓhëE
+¤„ÒS€ßÿ`÷yµÊ—Äl~/%\_ý‰ºO?÷°@}Í[…Z· o{«>ÕuoÕR¡˜Ë‚ò¥YÎ"\º+(j#™Ü¡¥‘aè®Ò@†Z…˜³«i+õÛsˆ.Ådµ¨«Â¢Ph¦ÈrÞòêPž0&Òø¡Ë§>V‡bE`Wò‚m~¶j(È£¡¥pX­(™vƪz™[²—;_£
+±j÷Ûäˬqþ‹Ö*Ý5À0E@®*Z=¡’ ;Kw〮ÊÁñ%Ó]kSNf>Ïö4&sv1Õ^ŸÜ,JAÆêy—š#Î9Êü²º]â·‰ÍYMŠ¨……<6¾€»š¬h¨˜c­¾Rÿ÷©®›Kårh›í›…ÍšöŸ
+æÛ2´T#B ì?ÔI4”Â¥ ¡èjöPøø‹X¸f „þ»*™x›¡ÌeV.- 5àOksAq™g‚ójÂm³ý'ÔDDgõˆÍiZ·µÒ
+Š±ÃnÄÐh³&IÏ"(–ÜLœø$%NûÎ ðq¶™úL †ºL :~v$¨ß³g˜ób³º*³EÁSÛ˜pWÐÂtØ
+ÛŽ‘‚âÒƒC{ý–iìõ»?õ[Òo„zúÝãë_¬7ê7Ž8ýF
+.bÏãE’ -ÿƒ6X•£!ÃÓ.ñìJø]Ì(åêÜKÕMµóßp¥6{ñùFßäö²Æ§,oìÿ^Éyâ
+ÇŒ’å«NOAÉ®cù§×§ºîôZ*ÜvÝÀv15¬oÖQ’~Eˆ–jDŠóú#ŠÅ™ÏôlØK@Ü
+‡ýöA
+:Ø }ôß2•pÛ¡ù'_ZÑÞDqnôK+øŸX‘ˆnð¢yx1èg Yͼt3T24°½¸Û8Pq¨4BÒE=÷”ÀDøŠš¡Q«•à7È÷ätÿÕôâ tiœ†it
+64éï‰ÏúœÝ¦¢’+D:Ôüˆª#¸·)÷erÍÓ½‚âˆ;ùvWØ­-]1è%µü ôâæÃ( Œ$“ÞÙ~ÛmA I@ÅÒ}dÿ6]ê+@^&5·=¡*Hb0Ùþs‘âç"z ªv˜ÂiÄCôt°1IÔƒ+sp}F
+%>ôA`¨ Í¶ŸîcYhüg*"¶DÙ–`€\nªª¶Ì"£¦t¾G;JzD†ë¡º'v¶âŒÐ º&Œã7’
+w÷…?0a1Ô}Á\Ó·¦Hó[
+ÛTò<Ò ÐšˆM²¹~=a•¦=§ïTž×ƒü.ûdYº¬Y”3Ä$žŠ±š]ûÍ dûøC‘‘˜(Z§óÍ¿Gé~¬Baœ$j<¸‚é¡´
+E£Ë¤‚¸r)úÿÁo%/endstream
endobj
-1783 0 obj <<
+1795 0 obj <<
/Type /Page
-/Contents 1784 0 R
-/Resources 1782 0 R
+/Contents 1796 0 R
+/Resources 1794 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1781 0 R
+/Parent 1775 0 R
>> endobj
-1785 0 obj <<
-/D [1783 0 R /XYZ 85.0394 794.5015 null]
+1797 0 obj <<
+/D [1795 0 R /XYZ 56.6929 794.5015 null]
>> endobj
514 0 obj <<
-/D [1783 0 R /XYZ 85.0394 303.32 null]
+/D [1795 0 R /XYZ 56.6929 518.0649 null]
>> endobj
-1786 0 obj <<
-/D [1783 0 R /XYZ 85.0394 278.8224 null]
+1798 0 obj <<
+/D [1795 0 R /XYZ 56.6929 495.0935 null]
>> endobj
-1782 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F41 1238 0 R /F48 1258 0 R >>
+518 0 obj <<
+/D [1795 0 R /XYZ 56.6929 117.459 null]
+>> endobj
+1799 0 obj <<
+/D [1795 0 R /XYZ 56.6929 93.0083 null]
+>> endobj
+1794 0 obj <<
+/Font << /F38 1042 0 R /F42 1238 0 R /F22 957 0 R /F21 954 0 R /F49 1258 0 R /F61 1366 0 R >>
+/XObject << /Im2 1355 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1789 0 obj <<
-/Length 2713
+1802 0 obj <<
+/Length 3377
/Filter /FlateDecode
>>
stream
-xÚ­]oÛ8ò=¿B÷t
-P«üE¢OÙ6ífq›î¦9ÜÃî>(¶’•¥Ô’/ ÷ßo†CÊ´¥¸-ZˆÈáÌp8ΗyÂà'¹Î´6)¬ÊrÆód¹>aɬ½;ág1ÖO×'/ßÊ"±™ÕB'×·/“1cxr½ú#Õ™ÈNK_¿¿|{ñîßWg§…J¯/Þ_ž.DÎÒ·ÿ:§Ñ»«³_=»:]p“óôõÏg¿]Ÿ_Ñ’ö<~º¸|CKŸg˜^¿=¿:¿|}~ú×õ/'ç×ãYâór&ñ ŸNþø‹%+8ö/',“ÖäÉ#LXÆ­ÉúDå2Ë•”Òœ|8ù}d­:Ò9ý©Üd¹P4)3ÅÄ3ZæYÁ9 ŠgÌÚQÉ‚Ï)Ù#¡Žû¡ê~¨—ý¢n‡jóß²9<7—*ÓÆê$b>‘`DšŠ "¸´™.ؾ —åº:]HfÒ¨6~<J†ó"}¬›†Vn<vÓÝÝU+W@÷„’œ™Û”+ Hyä¸RMËÜÓ¬ëv;T=˜‘22½¾÷»¯ªÛrÛ Hž,$?EŠà™Ísá(ëÞ› bÉ#d]~®×Û5M@ˆ­‡
-aè»*Ÿ<äO–3Ť`ž Pîy_ÜÒJ_ 4:ú²ômý<V,ÎI±8ºñRb³CC
-®ÆªCK(Lút*XZùI½~hªuÖ¿ò€–¾ÞAÂÈN®^i› cM+÷ûîKÂEh ú_ìÜß÷YÓ¾ ˆ<×Çý`Ü,¼é1Øpq1„1xª§œó´{èà1<Íø0]ØÄIº>Ã7¤b¸G¦¸H‡ûº½ë |SÁ˜ÀÕ§mÙÀ›T©ï«6 W„| —÷]×WžEIŸÖyK\Ýar÷Øöi‹~Ðn7§Ü¤Ý:¢i/ß zKÇ ΋¢/qïAPiyZ•ÓpL«[XA€$¹q¥k«
-úøXyéÊvf0N¥‹ÊÕ‚ü¼‚gÈóBíûùÕ¦êûoÉ I$‚+õ5ö-2{ÔºÃEÌqjÝèÖŠÝ®.‚•Ãò~ֹȤ”æÇ 8rü‚„œCL0ÞÒYæô"y‘Rðp-Æ{Y¤.z{czÂ~5š<Nû‡jY— MË'÷°1),xz^‚bÜØÒ¢,¢!Zz'¸P5Árµßªìûú®­¼0~£Дí²ÊÈV
-IÍ;©\ví¢­îJç}á\=ò'}‡^Á%ÍKÞ”} ëZB€çWoôÐõõP‡§€Òû
-·4÷A'Âù
-'‡ë$¨?ˆ3ßð<7[äÇ Ú¨* ³õ+ØäypD› ȱè6žñÉä ª#.¦5,²¯ÛÃW•”Æ6O¸Âns=ZÜÜyçtµlGüEL0íÙNù¢8ª¥w# Lxj"“É3Ë@ñ“æñˆõ%I&ܼúÑŠ„ÕÞŠ@ eSš
-Û5áj·òxPzl›UŒWn6e{Ý¡ 9QN¾C0p.åºF¨Ú(yè65Üæ…ö \¯{*ÒmOÏ
-i\
-Œƒ]6_y~ä¦C2ØiØV©GŠrEüºJÄwž™Ïè·Â4ê‘Ÿ!3ô¥É‹¹çK!*–Ò=EÄŠí ´tÏ+ÜÔÕ*µ_rY<’‡2Çáw>ÉZîI;Pû'cânë³/Ùô?®SæçñŠ•cð j XfT˜ŠkÂA6/zq$œyÛt SPo¾Õ½"%ÑÔkF‡t»8ØlÒí¸Öy^#2áŸ=Í¢[A¯(0ÎÔ} uú1ÁL?mkë9Z# Ä»L;|â ÃG%Ý0污L«Bí†böÏf·s?»€ËPÁÍQrêãðwnôLŸŽÑoΟâ䦂ÚŇ& —çxŒÍ7ð¸4™ÁfpèàÍ6éУ ø«€æßÝ."ŽÓ$V€ôl—N‚[UF™&àÈð¸€nP¬Ä>ߢ“Zî·è›¶è6Ðí§i ²îƶÌ\¯ ™ZÅär œDIsÐu¢‚æÏZ¼~e‹¯èË BÊ\”Þ«Î=0¨Ð§—A®ˆ¿%aCóËñÖc/vèsÑvŸç~¬‘v?TLlYÀ•A*½c?i=Îq8EQVBLMS§úî¾sŠŠ:Ð`}ô–¸Û±cirÜQp©Æßd·}àï~3x¶¼Í3ü}Fl¬#¿ûwü]e§1F<£ÕŠTL¼PxŽb’1åpÿP$ˆÑÿ-w&yendstream
+xÚ­]sÛ6òÝ¿B÷tôŒÅà“&Oiê´î´NëøæÚ>Ðms"‘ŽHÅñtúßo EÙ½I&ãp,‹Åb¿ ¾`ð/ŒN™´j‘[•jÆõbµ=a‹;ûá„{œe@ZÆXß]Ÿ¼z'ͦ6Ùâú6¢eRf _\¯OÞþøæ×ëó«Ó¥Ð,ÉÒÓ¥ÎXòÝÅå÷Ôcéóöý廋þsõæ4WÉõÅûKê¾:w~u~ùöütÉæ0_x
+G&¼»øùœ ®ÞüòË›«Ó?¯:9¿î÷ï—3‰ùtòûŸl±†mÿtÂRi^<Bƒ¥ÜZ±Øž(-S­¤ =›“'¿õ£Q7uN~ZšT‘ÏPð9j›fRH'Àõ®lÛé68³©y> þƒˆÔcæ·±ì).c’‡<r.RÅ3=fr[t«û&K3ÃÄ7d2P|‰I%Ó,³|Ìä¦j;äEŒœ§¹¸"õút)ežTuWîv§Ü$e×ú¾.Œá7K
+j¶åª*6Ôx,žN9ç *jΓóãºæa¹)?—šë¸qå¦Ü–u í—*Ú¶º«KÏŒ_h sŠzU¦¸ B–ÊŒ O­ÖÂm಩—uyWtn®à<Ò,¹+;ê.¨HRçMцiMMÝ}Yí¨ë¡i«®
+NÐ Ô;:CFmòx_’äz„»Ú4m¹›t’ò8°ršG1ÚR× Uãg
+NbÐY¬×4§õØ~0äÉ’nFŠ4s€÷Êí2.‹ßÛýÎ1äÝ}QTÔOÔ±cÝ„¼BŸ…!èÖ1‚11O$$9xÆO+¿Û‡MyFVBÅVwdÓÜ0éUò¡Ù4w@;c,ùËmZÈÔ¢O+g¯Ìë9™ü‹ƒ3“¯„šý‹Î+ž½¦†DJú›æ,gW¤Á‰‘›°OÇ( Üi:ß['9h“úà!ál
+壈÷ ž\Ãÿ"9ŸJh*¬) a!³—^|Zð”)k%!E°Ûë ×ñêb+ß7°£E´©@xSv›ÊFÑ‘ÈS†'¢2 üÛ^‡Ü®²Ql Ô~S½b^L„h$ˆM¸Z9¹UüÖMç;ТñuV;<¦O
+
+w÷
+šAŽ¥jÃT'ÔôÓ¾ò¸žR/5’@¼Š³¡³Ø¥g!‰ëúÈ5$feÈÖÍvÏŠq,2.êØ4ËTˆ°z·xhÔ¤J57úШIð«hIÅÆM ÙŠ÷E¯øˆ{Ç‘¢žã@šÔX›…RÑz¶6'¹Lunò…0
+ïõWW½z‚ˈâaX!ÁNê,×ýºG s’Â5ñí8 _àPå©Œ8<^•ƒxo\•cì°*‡}˜ššz¶M_逖+Ï¡&¯œW'›k`'Ï MT6Èø׊ç¡èl<<⽚àbƯíuãn¤¨Œ>VZþ¨O. Ô•ö%7ð—ñ„O{@wìl3Þ;[q¨Ò <£±4ãm é>hEþôÈLÝ4øª)Jl"ÊêÙãâ oÒöiÉó&ƒËÞ¶l÷m ßµåæ–TF1 Æ”« Úp™ ÜIpƒå—‡Mµªºv2•*@}Þzp¸VJ¹ÄfÖä__4—1É™¢¹ÉS+@,=ÚQ"PKŒ¶ßŽÉžâ L
+ð<G-Ž™<fC ä¹&\W*áY5uI‡…ñvt ¡Vº–”b?DDë±sõú)ŒhæK<8æÒ&nüLÒ ‘\üJZÄ5¨=W“XoðÒXßï¦i‹ÓÜ×›<äãËåÍÛŸ  ¼!·/M¥Y5鶣"ÓTš«Z¿àЇ„•ƒÌ•I¥’úø Oq“œs
+ì(ÓÃÊÇ}š£ä7d2P|‰É\§"—|Ìä1•T˜ò[/p
+=܉ÝÒ·¤ç"€œõC ¼!ˆ©£SCí øð]Ý—«¾†þN¥ƒe¬_wEU‡B7T¢ƒ´¸Ø×û¡>
+Ǫ¬׎Èð|nÌ0Ë9™x±I ‰ààÃA>ap°+ßÊgDï¼¥*pô4Húñ¤ˆ‡Å⾤üä;néÛן]‘jãGÁ¬Õà
endobj
-1788 0 obj <<
+1801 0 obj <<
/Type /Page
-/Contents 1789 0 R
-/Resources 1787 0 R
+/Contents 1802 0 R
+/Resources 1800 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1781 0 R
-/Annots [ 1793 0 R 1794 0 R ]
+/Parent 1775 0 R
+/Annots [ 1805 0 R 1806 0 R ]
>> endobj
-1793 0 obj <<
+1805 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [213.6732 139.8244 286.8984 151.884]
+/Rect [242.0197 348.0043 315.2448 360.0639]
/Subtype /Link
/A << /S /GoTo /D (rrset_ordering) >>
>> endobj
-1794 0 obj <<
+1806 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [209.702 61.5153 283.4678 73.5749]
+/Rect [238.0484 268.4482 311.8142 280.5078]
/Subtype /Link
/A << /S /GoTo /D (topology) >>
>> endobj
-1790 0 obj <<
-/D [1788 0 R /XYZ 56.6929 794.5015 null]
->> endobj
-518 0 obj <<
-/D [1788 0 R /XYZ 56.6929 603.6807 null]
->> endobj
-1791 0 obj <<
-/D [1788 0 R /XYZ 56.6929 579.008 null]
+1803 0 obj <<
+/D [1801 0 R /XYZ 85.0394 794.5015 null]
>> endobj
522 0 obj <<
-/D [1788 0 R /XYZ 56.6929 208.0964 null]
+/D [1801 0 R /XYZ 85.0394 419.3551 null]
>> endobj
-1792 0 obj <<
-/D [1788 0 R /XYZ 56.6929 185.8944 null]
+1804 0 obj <<
+/D [1801 0 R /XYZ 85.0394 395.3213 null]
>> endobj
-1787 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F60 1366 0 R /F41 1238 0 R /F61 1369 0 R >>
+1800 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R /F61 1366 0 R /F62 1369 0 R >>
/XObject << /Im2 1355 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1797 0 obj <<
-/Length 2468
+1809 0 obj <<
+/Length 2188
/Filter /FlateDecode
>>
stream
-xÚÅZ_oä6ϧ˜GØQ¬¶Œ}J÷’mŠ6Ûfs¸‡^œ'1ê±SÛ“ìbÑï~¤(yd' ºA Š¢(ê'Š¢äá‹þøÂhËL-ÒL1s½XmŽâÅ´}<âNfé…–¡Ô×G'ç2]d,KD²¸¾ tÃ×ëߣ?žþz}vu¼:Žv¼ÔIýpqù/âdT|øty~ññßW§Ç©Š®/>]ûêìüìêìòÃÙñ’Í¡¿pt8¿øùŒ¨W§¿ürzuüÇõOGg×Ã\ÂùòXâDþ:úýx±†iÿt3™½x‚JÌx–‰ÅæHiÉ´’Òsª£ÏG¿
-ƒVÛu?- ÓF¤3
-1 ÎX"…´
-~@Ê‘Í‘JŒÍA‹QØÙƒÂ÷¹º)Šš(kO±ÆÝ’¨¨w_àx|Ñ„>ïýކꪩ{Î _Wn0Œ~NÊ..à€"qq€gÕos€sØÆå¦ìËÇ‚ª»HÂå¼'¶³œ*ƒž>Ð0ÆÖ!@pÛ }*;h5 s°=ž92-¾È"'üÐÔã z,7Íã„3tº)îʺ.ë;ªZ
-ÛC¥te,£‹©L°*XµÎ%lpÃÂn´±ò'g…æ°"B*TXïTÏ,`WÀŠ[èL¸4Æ!k¢žÌÍ{8õ`š¨£Ø TîeiŒ½CÖ°TAfó|Ä3&Àk‰@©óýÁÌk\†*g‚‡ '
-àè6ÀÀh`(<ËŒéÔ¨ÙÀ¾™¸Ø™Àöìºò®FGCnNÅf™ÛÐi™õšdi«$ÓŽÚj*Ÿîbh¢¼h$´)ër³ÝÌY:ŸçýèÍḇ@æ•q˜9+.pÕŒq› ˆÛ¦ªš'«QšRî|óP°Ë•
-~HÝÙW ¤Ü¥¸kêüÆËÝ÷ùcis0«Ñ½Ã)HÒa”»Ï«#ÒžŽPNŽDàìŽÄÃI¦\R˜è¾}%îa*ºrSVyKLûh¡½qzd<ÔèÂ4OÞÉ{Ä’^{ÝŽÿ‚’DŠe싳â*Èõ±Ýù †+ ê2›™é¹ä/ó8"éSÄ!C‘å6½&Ýp¤{j”ÙNÇZäÙVÃü5MÂi`+MÃjl¨Üݼ ¦³dÅLlpɧ0rX{#hí•S1q³"Ø%öPqž
-RarfÕMr0`ÑHÂß2€C:V¼,Åã5„ÆéÝWŒ¦ãžLKŸê9›0kz;ö±-ÌãÙ|.9˜Ï%š¥Zª—²¦ij4MåQ£P9;àd&Ö+Ãâ8QV?⧈¢<…WW]áøÔ® {éTzÂÅÔ*ù=ä%paÝV}9'ç-׉쮬ƒD¿mÝÊv$ô5ÅŠ×Ý“];lsqÉ~ÔAÆSGáí¶"žÝ»‰½cã×™»m8ž‹w:r6.Ú˜’è]<œš>ãTU¾²V+ VÛa•r€µ÷’jlDŸy‚”œA°ñobm +°lüäuÌt*ö»hȇ¢Ý”v³‚!»ùç}i÷HØyB9X9à@Ç ôÛ™ƒv
+xÚÍYÝsÛ6÷_¡é}SÁøäGûäæìÔÖißÜܤy %Êæ”"‘Žãvî¿ @
+’œ87w“q‚‹Åîoû± …l¢bg<›$™$Š25™¯Nèä¾½>a–fꈦ>Õ7'g—"d$‹y<¹Yz¼RBÓ”Mnpr
+hôêÍõåÕëÌÎOÝ\½¹>rE£Ë«Ÿ/pôzvþË/ç³Ó)K‹^ýxþëÍÅ ?Å–ÇW×Ç™ {˜Î../fׯ.NßßütrqÓëâë˨Њ|8y÷žN öO'”ˆ,U“Gx¡„eŸ¬N¤DI!ÜLuòöä·ž¡÷Õ, âÇ(á"æ
+â“jvHYÆ ‹SÂθüþÀ¶ŽŽºÁ”ØNý{÷©YNeBRNãÃP;`æUÞ¶8|5܉ñ}h-†„}k™l콋ÅFÊmAaÅ>‹šÿßÇ÷ÇÇÀ±ÃÀðŠÏƒâ¹Ôìk
+GwåG;·9eiTämS緎Ï?–$ähÛÃæ=49ÅŒòz±jq¨U?%n3ïª'œ™7u ¯Å"„ÀýØlþh!ïƒ~Ñ•ÞAÅQ©¹ª$jËUYåœìû4©ððÖ,GŸóÅei[œÐ)ù–5θ:#Ž$ÉÈ'+Ŭh×MÝnYQw¾Iôáá”EŦ,¬˜K³O³
+yŽGˆÌA©‡¥¡„H£eþQk¢'óú Z%ýìy ÑÕ3[tÍ«‡§Jb_ý51|~x°jè—^^Š€> £OEoþ”£ùa*ÇÇÈ €À“SX9ñÅ:+P­qÙÒíà™Ð` Sn§L`N­~ióU1` úK:´¤^Ó„|Ðiõd‡~±bÁ¨n:ÜøÔžT,Vyà°†ªºX‘D u¬vHÁ˜²¯šÌц£PÆÒKEh"D_Ô³˜0ˆ¥ŒÃÙ¬-,o6 €
+bO0^q8N’!“Þ&6¨hõPue¢¬‡4æ¹h‘$ÇYŸ¢{ØÔÆmàsY»dÉëöÑØN³Ñi•?áÄ­e qùPáœ9Á:(÷4õï”ò»KøTdÅ*l@4ÁE¯¿ß#}À*ë*ŸÁ¥
+(Œžðì¥ìqÀ<ëvHBP@oÇ KgÉŒ»Ô„ xxoC>þÜ$F£·…¥Ï«¶ÁQÆ-M e“ÊaáŽâ.hB
+#̾7•‚Ƕš@,CÁ2ÝÞáÇÍÝ3¯ìé§þÓ·ßá«åx áíbc<‰bG¦ ¢Mš‰L;iOuL’nZ‚&ü0‹å0Â×!ècB—E´÷U_pØ)NÓd§Špš±ç´è„KÓpƒ>u §>GTq ¥$NµÝØ}]ÌŽÁ9‘T¹ÓTÚÄ°(ôÁÁ ¤ýÐNc=Ö~gƒ.Ø4£Ê•ï°Ž7)éoSf7ê©|À$1(€yvx)b=Ç©ÏÒ@6Ž9®!sd¦tÓ97
+”8î““¬/¯lµúÝNТað” b,}ÆÙ2% ”ÞÃÓûe«œ ÔÝ3¸ÇuxÙ¡[1Ž›N©)‹auÊŞˑp¾YaŽKt"í?Ÿð
+`„(daS"¢³AC ©×H6nà³)(¥sI ñëvœÚa4Ìà°hÄ…F6u*éõªª c{K•(–@g™—¡­í
+Y*Ýîÿ|–nÅ~sÉvÄ€ŠÊV.›¼^àÇgØOù°÷Õ|o?Eû† mVŽ7¥‘DFP÷ÔyD[ÔÝ%ãóYâŠä
endobj
-1796 0 obj <<
+1808 0 obj <<
/Type /Page
-/Contents 1797 0 R
-/Resources 1795 0 R
+/Contents 1809 0 R
+/Resources 1807 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1781 0 R
-/Annots [ 1799 0 R ]
+/Parent 1814 0 R
+/Annots [ 1811 0 R ]
>> endobj
-1799 0 obj <<
+1811 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [353.6787 61.5153 427.332 73.5749]
+/Rect [325.3322 279.3362 398.9856 291.3959]
/Subtype /Link
/A << /S /GoTo /D (the_sortlist_statement) >>
>> endobj
-1798 0 obj <<
-/D [1796 0 R /XYZ 85.0394 794.5015 null]
+1810 0 obj <<
+/D [1808 0 R /XYZ 56.6929 794.5015 null]
>> endobj
526 0 obj <<
-/D [1796 0 R /XYZ 85.0394 134.2704 null]
+/D [1808 0 R /XYZ 56.6929 349.9264 null]
>> endobj
1324 0 obj <<
-/D [1796 0 R /XYZ 85.0394 105.3909 null]
+/D [1808 0 R /XYZ 56.6929 322.335 null]
>> endobj
-1795 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F41 1238 0 R >>
+1812 0 obj <<
+/D [1808 0 R /XYZ 56.6929 196.6463 null]
+>> endobj
+1813 0 obj <<
+/D [1808 0 R /XYZ 56.6929 184.6911 null]
+>> endobj
+1807 0 obj <<
+/Font << /F38 1042 0 R /F42 1238 0 R /F22 957 0 R /F21 954 0 R /F54 1333 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1802 0 obj <<
-/Length 2962
+1817 0 obj <<
+/Length 2766
/Filter /FlateDecode
>>
stream
-xÚÅZÝsÛ6÷_¡ÉuS¡øÑ<¹©Ýs'uîÝÍܤ}`$:æ”"U‘ŠãÞÜÿ~ ,À‰²“¸77† ¸Xì.v» ™Í(üÇfJm¹+‰¢LÍV›3:û
-3³Äj®gËÛ¯”Ð4e³åú]¢ 'sà@“Wo®/¯~üÇÍùÜÈdyõæz¾àŠ&—W¯/pôãÍùÏ?ŸßÌ,U,yõ×ó¿-/nð“<¾¿ºþg,>N0½¹¸¼¸¹¸~u1ÿuùÓÙŲÓe¨/£Â)òûÙ»_él jÿtF‰°©šÝà %ÌZ>ÛœI%ˆ’BÄ™òìíÙß;†ƒ¯~é¤ý%\h>a@Χ ¨,Ñ‚ oÀóÊé
-»2¡þ<Å;ŽO(.¨$šB`)þbJsK êìXóz7gi¢þ='ÜÅé
-DÂÌ»yþÝhQKü3'"†©ôsbWH ¥æ ݪ(-"2”
-vu«z³-JÇT@T»º`“»ä%¤Û«
-ó~W‰¹*ÚÂ' 1ÐÓ%
-‘#Ì°g=ê]9dX™
-în weF>Þ»*©ˆ2Aí²Þ¡•óOÙf[b"ÿöRãÒ&TRbì]qíBSšüÛŸy,AF'JSGuuOßâøÑ9>°
-s£wuÓ’ ~óƒ½_NyÙ€
-Ãùe¨’Æ‚axüçå¤PoðÔZ„žàÙZ'«lßä8̪` 7Ûºj|e¥¯¬ü7ÔÑ·ÄCˆ‚IïóŽ;É ‘§ö.kqæ.ûXõUåèt¸åà,,Vn‡&œPâEKvPe:Õ‚>šý­“Ö#CÃ’¶ŽerJ(ãf|
-pya¿ EÄ)¢»håVBgŽåQÄÚ. :ñA©g YZ‰Wl×Ï
-\7gz–*w›¶¼‹Ùä£HaÌxLØ×o–S·³’*ð,9Ɔ˜%7
-#¡îhj‹´Ø‹—þÐTô) Ú@§Þâ}JFL„Ñ×oß^¼Â1èX¬³Ø6«ä6+ÊÐ7W?&Ñ×Ác–®í¿qrõŠÅÐvö­C5 Ò{}W˜Åó©Cýœ…‰ ®E+ñ·¸=*ù:ã ®¢±M0†°hâʬš‹œB)&±%£Ôê4JuTÞPÙ§Eå5Â*Æ
-×°Bø´±á÷‰é$¹¬d4{ŽD§Ñ(E3ŸÆ"0‘µZ<ºwGt¼ù‰ÀÊÆèÑî¡nR:"»¦jC ¦1Ä`pW¬îFkè⾇Ô}2ѱ /ªl÷€3Î)·uSøËây,t?Ðú\ˆÞš0)‡c_Ú¤!OÂï R•Üçùo8å638tî
+xÚ­Y_sÛ8ϧðì“=S©ü+’·Oi›ô²ÓMwß½l÷A‘™D³¶äZr“ÜÍ}÷ R’mÙm§ÛN+šA
+ÎãÌòìöì÷Žáà­_:f?Éu*5S#dlÌ€Ò¤gÜð²Þ Fö9_­—öN¥×—b¸LjRÎ9Ú|³il›Ô›……¥!Óÿº5ªRÔ¦FJæi‹eÞ4HuuÏöemqtŽ*_…‰Ÿë¦Mƒ$iQ¯~ÂùÁ^›¼ZÔ«ŸýŽ$î…r ¨Š—bYH•Œ
+ö¿ŸQQ¶§(§)ÓižÊ匓eÓ"ß6‡yõ‚ƒÍŒê©mÖuÕØÆM©é½7&¼CÝè|H\Ôþ¹hp²¬w4’:#9NícÞâÌcþ%°úĘ9fXÊñBï›pDM#ÓLt <[T-‘ã£ÙÞ;i?ž_Á”¢Ó¶F“r 1HÛŽMóåSþÒ ;ÝY|¢âívSÙÎx­e<I»ÀñA¼A r
+Þáï^¶v3ä64#Læ8ûµýÐ'F÷‹Î4pò«{¤\m—m ¦ f¤3
+“ÒLè`ÆaTš\9ˆ=¤mÚ¼µ+[µQƒõÚæ^–W8¿Œ(WÕmÐ¥^Ý•†p‚ª[‡ð¨@ZW¶ÛdYÚµMŒI5?
+J{±Þ„=ö>µƒ,y<‡1þ‰Ã>¡Rƒ„‚ÒoÂPÊRc¤ÇP8YÍÁã¹9Î ×à†qÅ.«>WI’¡bC¨íbBŒ¤ŠBŽ’*K3J´·ïõÀ1$D #¤$•œEÇøðE§søŸM/ö-<Ñ€>*ÓnëÉç M‰0†#Ñ`ìuímà'^_­Øä] MJEÆɳW*ú;e*%
+|
+J€à±îUQWnÉÃvc{JlqŽ?–€Oîì\X˜ñÉ0„~,*]üKN“ôeÒaÆ0Ðe
+%§êŽÔT"Ë›³¯«#)è&á„ T#óefº­Âqì x»œ ª z¼@DÉê„,‘Êɲ„â*iÛåþÆ”AÐ 8…“;wT#[ïD-“©`*ÛÝûÖú'XðÁ§Õvuç“9L:hpÏrJåó @…á'‹¼À5Ì—#ðféËD\°ù™”Õ¢,ò¶¬+iDO Î/Ê&¿[ÚÀÕqƒTD§ê‘dîË3iFÒ;‡dhÍ×ç#y D¦ÞO†3å
+Pha)ìF±¨™ÇrlÈ’ÍH]G¹Hîö‡²vdw>ŒG§%¡p)«mkÜÚgêj±W$¬òçrµ YùK¾ÜÚSâ(•2¨£ÃVTË“¥‚Ð8üPœPphCènÑõ!:+œŠ€Â£©qþÑz›ÖKb2:­ê­Cz7F‡aôîúööâ-ŽAÁrá=YÜçårŠøÀ««eÜžÎÁ]æ®íß•qrÝÊd¬#éŒ[‡j2Z£wù®0‹‡S‡ú91\‹V(mXUÞ”|ñð ÃNí.cˆ‰&®Ì«Q±Òc(Å]7J =RCªã(ÕQyCåÏIå5Å*Wo0cNïßQ°ãÈ|”Bû³#Á|f
+ILg)‡fê4$ ©ŽCRG-}‘d}¨uNoßQì¿‹HP 2AwÕ“Ì"ÄgÄ-c¬Á4Æ žËâqgÍ
+T†ÔÅØ©­;ª‘½÷«ifÝÝ<díK¸Y¦oR¤•[°wXjBP5ø*ÜÕ‹®hòÏÛ2Tø6„©F¤ë©lÓî„à5;»ê½]k$¹ AÈ`Í~æEa×-–±_ï>ÌÐ^Ðœk©â= »ÓLRñÒåÀq(J‘Aß Üe×7õäþZYk}ôOÑdúžƒ¸b¯½ÒÁ
endobj
-1801 0 obj <<
+1816 0 obj <<
/Type /Page
-/Contents 1802 0 R
-/Resources 1800 0 R
+/Contents 1817 0 R
+/Resources 1815 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1781 0 R
+/Parent 1814 0 R
+/Annots [ 1820 0 R ]
>> endobj
-1803 0 obj <<
-/D [1801 0 R /XYZ 56.6929 794.5015 null]
->> endobj
-1804 0 obj <<
-/D [1801 0 R /XYZ 56.6929 691.0694 null]
+1820 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [315.1789 61.5153 363.5077 73.5749]
+/Subtype /Link
+/A << /S /GoTo /D (dynamic_update) >>
>> endobj
-1805 0 obj <<
-/D [1801 0 R /XYZ 56.6929 679.1143 null]
+1818 0 obj <<
+/D [1816 0 R /XYZ 85.0394 794.5015 null]
>> endobj
530 0 obj <<
-/D [1801 0 R /XYZ 56.6929 271.143 null]
+/D [1816 0 R /XYZ 85.0394 482.3483 null]
>> endobj
-1806 0 obj <<
-/D [1801 0 R /XYZ 56.6929 246.0455 null]
+1819 0 obj <<
+/D [1816 0 R /XYZ 85.0394 456.68 null]
>> endobj
-1800 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F53 1333 0 R /F41 1238 0 R /F60 1366 0 R /F61 1369 0 R >>
+1815 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F42 1238 0 R /F21 954 0 R /F61 1366 0 R /F62 1369 0 R /F49 1258 0 R >>
/XObject << /Im2 1355 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1809 0 obj <<
-/Length 3361
+1823 0 obj <<
+/Length 3645
/Filter /FlateDecode
>>
stream
-xÚ½]sã¶ñÝ¿Bo•gB>Iâѹó¥N_j;é$y %ÈbO"u"iŸó뻋(~É×ifz7c
-þ½»¢þñ’gK»ª\»®a/hB³µ ̺ڵMQ•(z8Äyl´î0‡R­l]ÇÕ°˜i°š”§±âJΛ¢GŠúX$I>gŠ ‰ï‹2:VeD™ K.²·IwX3´Z”*Fñ!ñ’ÐrQìÛ=̲l÷öH¨JlIDUCµ=>ÛcMSÍ6o¨WÔ4M"ÿÒÔYÓì¦ò{æC,[7#„†Ø2ªÙˆjE(Ö©4*–
-uÐ×l¾ZÙCc×p?%gá¸l¹¶›¼Ý54(œèß}TÙÀê“8Ó©)ãF‚P"Õ±IÓÄ#L '\›$•qÆxòß\j™9•Í_j†:Ž'~~/ZÇ`/ߥã­¢À]”0 !w¿“ ˆë8*]$ ƒ8™ÍmO:£r‹µÊ‹ãÓe”ðåüËë‰h`S :\$<‰•LÉ.¾,xÌ”1’°z}wÚ“àÝÍ^,>Tp¦EÿXa稿µ;WÂúÚÕpÄŒBÆJ+²–[gh)Øñþ°³{ Þkí%µ>D@ÏL®L
-þ1‘‹¾Hÿœ–d[ÑÉÿ9ŠÀ]à$^‘ŽÏ»3ˆi
-:ì7½Y‡…"¬‹§è9ßë¢yœû‡ÑDÿ©ŽÓ,‹>©g X3| <°›&F¹?ØUñcc’HïSÒôäÝ
-è,[>ÙÒs2:bDt-5~gr[Ì{fhׯe¾/V4hkØÀ/Ä
-NŒF~Á Žs îÅÙ
-L¥Ôœ6¯`×ãKÑmØ ·0K©ÝVí±ÆÌ%Ó>s:§Ì%p9§­Ï&;å7}ï­ÒXð4óáZ²™ü†«Ø2 Øï©x.ÐX±¾É¤^ÚC75dÂy+hSZÀß ã¶hZú3lŸõÉ( `‡ÖzÊywGaÀmõjócM—î?—&ßEÍ$¤/>ózèâNnY,¤q§tXˆ¡]¨(1•$gæ؇‰šÚ¶D«,ÈQ8—.$˜jãñ+j«Ò/CíR¯ájàbÕ ^6c¢a; „Iá&3FžÓ¹wž Èƒ|_µ¥Ï~)ÁgËÕ®Z}¦nýÙ¾\±<+#²•¾9q -¹·•³YÀÈÂŒ„lM…º‘ìÖ!«W# ¤Î}ű³yÝxXm¡ p†{¸ ¤ku¿^1¡„È–÷Ÿ®ròù4&¾.ù2ì*
-’©3(ÎÁ»§éÈ¢|¼Ùç5hüqçK ·mÂ
-zõ[º²;Áí“ÑBL?[š*Hz7úíÒ´u>™ë°‚ý•ŽÊjm§%j’Ä2“ÉÛ,tX3< ü dÁ2QfÈ„Kä6(r2Þw¼—ÑAßéˆ_ZTètí—Û¯2•î:
-ÕófÔÇ:oFÖØŒ‚c±¥,‰Á­§oóÑaÍ028³áPß ù8Y’ÐN ¾Ï]¶•s=
-
-1dádZFQN¤@ùÅ3Y î>Л0þ¹"c•zè Œvù2ŽÛÚy&èyíCÏgÏ>»RËÏÖSëå\jü*Š‰•’!dCù%œb`i߶%ÁÕ%!JC­#ÕŒ¸‡…î½,ö/x¦ô0ƒ¸Ab\QâÄ5F:(É«p­\/`òc¾·”kÃÄ>¥ŽÇÞWÏ´‰O¡9©šAÓøŠHñ&+HìAÛÇ"êÝ&u±™2PO5x.GrÙ¾˜h„.ÿÊÕ
-Â
-0y¦Þ¤Ý!M‰J5¨w¸1é€ú½ûý‰`á:ù|lSPÕãëø#ìýòágê<¶¼ç˜xdÝ͸R1^ýw7ÿ8 íЗ÷)ž–ÓW<ðtùê38\¾¬iì<[<ã×g¹Jáëè-òŸè½ë’½Ð¦XϽÁ„æ‚:Ž9˜U`!A“èÖÁ¸j›ºX[BóEþŽÓ
+xÚ½Z[“Û¶~ß_±oÕÎD4n¼=:ö:uÚØ©wÓ™N’J¢V¬)r#’+¯}Ï IQët:Óуà
+T`÷–pllÆó²‡Á9ÀRXã"ß v¤$SØÐ4lGÖ2¡Ì³¦Z“?")¹a—¡x, !¡À ȼ‡@¸ûøš)¤Fý.CåºÑ ?m)|yK OZ› Œãx¼£¸Ñ´O¢8ðU™3†ÍÖ ¬òö˜çR± úPÔ]#T8V2«äˆ¼Ög̶yœYEÄZG×ì½MU|ÁŠ1ÓrÈÅFLÏx=—?F¹Ñ˪ÞäÍTmÁg°±yY„žkF†±º±/b,ÄjÇ-n„»côPC
+®O¥‘Ÿ¹xü
+c‹ãódZÖ4õºTƒ¶" ¶HþJ8øìµá³×v¬K°a˸Ýû!df^)õ|ö=ˆý5˜ìü$,ó@H‡»˜.–kˆtsHˆ¸P }±y••õÖ¶ç¾à–b³0à#JÀA€WsGž“Š93‘ÜñÈRÈäo¦ÔXêÞ¥g÷‹OZD/OG ü™ï¸Ø5sà¢@ƒÚ_¥©s´ô«ÁËrf+µÒ°!©ûïnÕÇÆB—¼ìØ ¹.;6=ήäòoÁ]Þ-1@”Èg–LÜíáùœ×§+
+‚µ ²åÖ_Þ­÷ë–½2øˆv²Ž²BüÿÑå‡gár‚Hàã¬Ö»¬zÈ)c$†µ}g»ØfEI·Ê`Q«f›súìÊ/MG™²á–9sÂÓ¦é é•ŠP©èB¤È*Ò¡ë²ë@ÖT/V]Ë´–`:æ(‘Æ9ª”< ߉ û¬AŸ ÎBÆ=¥þàÒ—Ù“ðùC£¡7³ d
+ѹžôTpjŽÈìge½"tI gUâ7ì7+§³‡
+¥é¸È8ƒ‚?Xä¥t”C‹Û­˜„B52½4Ã5)³ýãe ÎNòpê|·Fi¯Ánù̘O’Õ“Ú8oN95øåÄ.xR°H„;ªÏ¦7ܘ=>ö[8“â„ØÏ%ÚÛÑ©~ž1!ཅÆé>Ç®x~¾€=<Ÿ#L¯¼ešêú¹)4DèÆO“¥f2 ëP†A즉T‚NRyþ™ÔÜœX‚ åÜhåC³2*Jç¿Q¡’Ô{¿îþÈÏgŠa&׿9œ°ÉL±
+”Š¼£ªJ£Él\Á…šÉB/št‚ËžXó²Ir]6é=ÝñMÕ,»Í#K_ÏFAl¦Ó—§ï¹fæ9}&ôCëH€»¡n”c€B¶MÛuBýöí‡;.ýòög.¬º-ÞÊ-©'…ɇ¯Ò™¢läxns?pÍß±FÎxêN>& øág/™89DyI"8‡ ñX³üÕ h/;°nN 44„Úp$ƒV a
+¢¢ïõºk›b“3›$€|@€‰ÇÌ8¹ÈNqòÁ¢_‚U"ÓŽ“oþÝA,§á´et9ȩ̈l‹5ûÜJ©M²b«üëк¦£'‹D ¸Î*
+`ÅÚù0³£¡³>awÉéUŽ‚4ç 4Çýøj\-OË/‡Š~¾ËC.<Œ*¤jŽ¹¸3&Ui&.Ùd«
+QyWŽ`û^üØ ìüÈ…Åí!{Øùñ±:+ œ^‘g0îCŸ1Óð3¶ïCP;ãc²c™äv¡øTôìßyfbÇ5{!lmŸ-Ät‚gZ–+NñàKuÍÔNÒÒ@b ðAY.2Ðü“¸®æ„†Lž­óCáykÿ|Zºî<_;zSǤJÑþÁ êzßî%ˆN„’‹Û%Ëaƒþ²ÀO…úQÌ*z
+·z3~ÖË«uÝÁ™Ëó_Sð<ÄΗþùÎtŠ(”×Æ‹»=GÊÀ JŒmü«\N!ô‘q#©Ö”•§<UÎ9„_èåà)?EÄ£÷Úû7?ßh“^ŽLµ…ÑRû”ûë²ë¹¼U¾hÅ
+àH6túXh»iÕ(m¿•sAœ3ºg4jNN?ª?¦â¢\êe¬ôÐf!¿Ø rMàâ8¼ B0t ;b£Pb'– KCK†õÞ’;Y2$‹%âHqÙNfŒC$4c½ ‹üÿ3°­WúX¥Ež&«5ƒiA‡Þ†aqhðN6 /Ø0ƒ”Ä/ñ%æ‚0ŒÃ ÃÑ3þŒlür$ý_ß…4 S8ˆØ°Y+þû@
+gJ!Yµ¡ C÷ghÃŒrç6 ™äUÙåPÚ0ì9p¤loÃF}œwëì˜ù4üÉjóÐjÍFw—lì¾;Mÿ¬$ÿŽØäpKòé¿Oú¨näö!¹ƒ2ÁÐ×~.Ñ­TÂ…ú³~Ž tïçœþ„p´‰âÉóŽ@SD/&!ªÿËM}¦þ¥¶” ÇÈáºý_‡Nê=d´`DÅúB(ŒŠJr0±›±>¿¬µsYõï¸ÿó+O<u1DÉ…
endobj
-1808 0 obj <<
+1822 0 obj <<
/Type /Page
-/Contents 1809 0 R
-/Resources 1807 0 R
+/Contents 1823 0 R
+/Resources 1821 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1781 0 R
-/Annots [ 1811 0 R ]
->> endobj
-1811 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [315.1789 561.778 363.5077 573.8376]
-/Subtype /Link
-/A << /S /GoTo /D (dynamic_update) >>
+/Parent 1814 0 R
>> endobj
-1810 0 obj <<
-/D [1808 0 R /XYZ 85.0394 794.5015 null]
+1824 0 obj <<
+/D [1822 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-1807 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F48 1258 0 R /F60 1366 0 R /F41 1238 0 R >>
-/XObject << /Im2 1355 0 R >>
+1821 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F42 1238 0 R /F21 954 0 R /F64 1385 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1814 0 obj <<
-/Length 3690
+1827 0 obj <<
+/Length 3867
/Filter /FlateDecode
>>
stream
-xÚ¥]oã6ò=¿Â°Vù!‰p8`»Í¶{¸îö’ô€CÛÅbbÝÊ’×’’MýÍp†´dËɇ VäpL‡óMÊ…€r‘¤Qš«|aò8J„Lëí…X<ÀØ’qVi5Æúþöâ»÷Ú,ò(OUº¸½Í•E"Ëäâ¶üm™F*º„Äòݧï?üøëõÛK/o?|úx¹R‰X¾ÿðÏ+jýxýöçŸß^_®d–È廟Þþr{uMC)Ïñý‡?$§Ï™I¯¯Þ_]_}|wuùÇí?.®nÃ^Æû•BãF¾\üö‡X”°í\ˆHçY²x‚Žˆdž«Åö"Nt”ÄZ{H}qsñ¯0áhÔýt–RDJ§j†J˜É(Éóda’<JµÒŽ}{¹ÒZ,wE×Q«ßì/e¶l‡‡ î¨ÿÙ6Ôÿ]å@ö©¨ëð«¢gôº]¦æý¾xØÚ¦·¥_dýÙöü‹¢)¿k÷'¿ùõ‡_fÝôÀlØñJÊ(OåÈ/ˆ:–ê½Ý
-¸#GÜÁ‰ó(‘’«)¶@5¡™¨ud´É±žªº†yM²¼Vܸ eRÇU„]Õ<ˆ(
-wy¼¸”Y$%èï‹«¬™åÇ (‘Èu:]ÿ†4/$Z:“HR¢µ¶Ô§3ARYhl›îô±ãI?Ú®`³…Ô¬Agõ,b
-ü1pcÁ³!1:ÊsùŠGc÷‹4LÅ)¬í
-xKÑÄ1è$RÆÄ/°f¨˜8†ÂÊ,À„Œ›]WH…3ƒÀ3ò̼šÛLŸk£øá÷϶™`v¾“ˆÎž89­’x`&{¡ÁýÂ×£]üWvu:/ Ûƒ(J#†NèÉD”iÄ_ämÀzŠ“Ù:R{+žü
-*I)¶ô½cäÛØ}ÁÃ\£mÎÅfI¦a›­ØHCj º“Lƒu»ÝCœjÏ|¥Bé´õöHìWÊa»óN(;%(3Q‹øµXÜF°þ (009fÅzêU>¶=Ús­¼7†ÖÓÆEÐ*èC–JilB«)RYM2¡†'ó–—˜
-nXIÈ°]Å F×.†Ójø¶﫲¤Ì
-ÌôÙ‘}\±MÅì Ñ<Vö‰§,:Çl>Ó·jÖõPrŠºXy’§ ü c $ú*X¹o↌„I¼eŸƒK) iÁ¬¡€XÁ3óŒCT1¬‘{GÕîçònÒÄ{<Ç›ÙyRÒmŸxºÜï(k9•½DÙ;“ÂÄ.öPæåfŒu>… XNê
-8Ú­üÉìþ™C,0ÌŽS©4ØÒ \Ø‹d¬:§œŒ£8…ˆgB(Dß®(RÔ@lø« +ÕWE(e ™- n‡-ò4^4%bõÌ•Î°Ó Û;ÎöW2UpâÇ¥Wr¾¾ ¹ö\¥ÔXøÜBÐ[4¶:‚¬/å’XG}RehÍ35à× 5‰©®yHëåÄÈip¯FzñúÛŒ
-F×,7úú¦‘ă;ò“¾rg}ÑäáÁ–¡€ÄÐM…r
-—\&w,R0°)=@ê£H›}šLÝÐì6B›f[¤!}!ÐÆUs$j‹“\h¡¸ÒˆL0Ýà‰œ¡ƒ/‰º¤øxA‡fS#“
-C¼r_|¶L®;Œ@_×ÖöL]ÎñJº…3ÕòÃ=ØþJ¯é£:œm :˜ S
-$GU.Dz¹xu3Ë‚éAêâ\É#©§ÜuÃÖúÕ
->ìŠ7R1M¥-jV éÃ,Wr#)3
-,ežß5+æØ®m¼µJC.eXb
- ‚ÓšR” ¼ŽùÖ¹IÃC;™Âßå
-"~±ü~¨ê~åë !#s5ª±„réØ©2Œ%#52xôÀƒ¦ÂwtÔ>V¥å×(TžÆÖÆÖ»û¡&IJ*šâ®5 Nh W,ãGm™+O!ÜÇ r•Þ~û­a-"€?<¾£—œ Xz²´ëìP¶«¾Ý­\ÙqU¶–ÍÞ©(MŒ±îª¦œ¿R&¼•q$¯Mâ}‡7Fï~zûéffBÈ‘ó,dÙ.YÇG¸æóû-cÅ48î®Ø÷Ôr¬ÂaêŽ8=*èi}ön×›&ðø´qƺˆ…—Ôÿûåáyil"eêL!ÈdQœÁ$L²Çd§šŸZž’þ?ªòíendstream
+xÚ¥Zmoã¸þž_‘°ÖñE¥¶(°·M®9Üí¶Ù´@q½²¥$ÂÉ’×’“ÍýúÎp†´$ËΊ ÖÔ"‡Ãyyf(y)àŸ¼LM$t_Ú,ŽŒær½¹—Ð÷Ã…ä1K?h9õýýÅw7:½Ì¢,QÉåýÃ`®4i*/ï‹_þþþ÷×wWKeÄ"‰®–&‹ïo?þ(ý|øôñæö‡ݽ¿²ñâþöÓG"ß]ß\ß]üp}µ”©‘ð¾âN¼psûÓ5µ~¸{ÿóÏïï®~½ÿñâú>ìe¸_)4näËÅ/¿ŠË¶ýã…ˆt–šËx‘Ì2u¹¹ˆŽL¬µ§ÔŸ/þ&ôºWçä›42*N.—FE™Iõ¼”E$ Hmic‰Sª e%ç¤ìG¡”7y×—»ÿ
+¡êrùÐî6y?ݹLt”(8°áôGL„Q3\¨2I£D5fãó¶\WÈEÙ]-µLýSI bÚÌŸk·ôû{ÛŒFvþÁˆ®,§{Ñ&Ž”MÔh/Ô¹{¼¤ÆÝ`Waü»:ž×íª\÷UÛGI¤#;å'Y$mfÏË6Œzƒ‹ãÙ …Då— ï^ªEùïkås^ï™^uÈáw7ñèÈ„Ž@¶À N×—_{4Z[é(C» Aïp0®’H¢úJ êkˆŸ—§jýËÅ1.ç~é´c³èú¼)òݲÈ]°Ü>¯éÁu”[úéʦÏQ¾ï 3Â×u¹íi h
+5º:.©‰šÒñت!Ú€æ!È"Ùàf„ß¹§’ŠLšÂ.™”´Q¦UÊcà`/n*ÒÜس
+ í¨Izïú-ð™7sKk¥*“oœ’´M,"A—´Hÿº­Öy]¿ÒcùL²/ îléwŃ˦ÜåÜm+~ eH‹Id2ëÅÒ䛲X’‚€?Š´2 Y·›-Ä™öñDyMëÛ¶~GžÏ‹ýf‹œa8;f(µQ‹xÈÏÌ:ZDY¦“pPŽa0¯HéDC cUæú>¶=ÈEi…‡ÓSëå©l¨•Ó9*¥upiH­ÆƒŠê䡤“ix2ïøx‰¹óW*‹R‘Ú7Ρ
+ʇæ‡SÖm^”Å»IŶcaß’”Ž´H¼êmòWš¶ÝTÌs×nx¿è¶i%k
+Nç6¬…\ÜòôÛ|×Wë} ÖcNªøJa¼»½.Q¶Ý¼¶§ è™Ê…m'‹b“˜±ä
+´TcM‹Ì$‹|»u6 4òŠÆž@f¢$Uê¬÷R2ŠS“N÷ŸhÁŹs˜~SæMÇ«…£4B<ªsu'Ù‘VCðÐœfbß±V¼ÜÁi‘ü@l.¨ÝúKÕ£®iF JÛE—“ò¦$}"ÖåsY5ïü d¢ðF@3u‘•ÛSþQÆQ¢Uö V–¿ÕuÛà
+û]N×!á:}4|H†¨Ú—ö&ðXöÝ9~–*¶èúìX³N@Å —© öp °l¨…•”‹Õ¾§ÞuÞPÃY5ü¶ÏånW…ó¡ðVËý9ýlÉ?.Ù§â ;è{ž«ò…§Ì;'l¾ÒoÕ¬ë}Q5¤žåÑnóÁØ(¶*x¹o’†Œ„5Þ3ÏbêšÓ hÏŸ8
+€
+^˜'â¡ŠaÌÇ)Äñ<°±41>à9ÙÌΓ¨¥WuëtxòèǺD¯{Ó¼‰“
+ò×ð[·eG
+Ê2÷™>¸µ:j癉…Ll
+OQH¹(›ã™LÛÐìžB›&?¤!s!ÒSûB ).´P[+Lj4˜iðDÎÉÁ/iºtȼžC³É§ƒI°Q….^¹Ï+™]w¿®­Ÿ'%I•ÕÒH·“¥ZÜ>‰}¯ôVN w¶˜Sö#ÃI³ôç°(šfšŽ“³y¥‹3%'J¹ëö›Ò¯–óYW¼‘Šy*ʼf‹bታ’»ÔÁFâhÚfÉÛ¶÷TIÈ£,+ ˜ yû#úÈöt8z‡­æÓÉÛÑÑëp^¸º_ñ¡'/‘L-:yöw³Õ„¢YÆœÆB
+„,3pÕˆk†ÂX«˜q¥A±þ€t¥ˆ2T€¦gPÏ´%b¬g D«”D+ëDŒ„ˆ{ÅSéPÄøè'hZz¿urBҪݣx°É¥-z?ohhµÙ¶]É#fË6 EÑHM¢ÑÎ#¿é9$
+–9s
+yˆeÙU¿—'<pvž0j†¬ÆŒÐ!gÃ"<Ü}~ »ðü™D%
+nâŸ[wé S?ÖíÊ}¶Tˆ·þ{¼JÍ Š8\¦i¥í–s0­ÔàREMî?sø–§®Û—“ec"xŨÙ0ä‡þÌ”/*ÂÒþ{E6ì¤L)N„+x
+w‹#Øg©a¼€‡ºõ_Á˜ÃîŸæD!JÛÔp³î"±&~g6õ€Ôäf?¤esºNZ„‚òà§F5¶,ÒÆꑸ›òeyÊ÷[LȲ£O­›½ä¯+ŒÜ(„ ÍÆhJë$ܵszÈŠ4úLIiYኃÒ×]þµÝóeBéáÕR1Êtùª}º±„f¸¶‡ö¾+G—â ®H]• V|&D*Oâ&—+HÔ¼_GŸéá;­3ŽB*;ºÜ¦É_ýåÚWòQÐ2xצ“Œ”C9ಒWiųù»–Ó.C
+0G™~ƒW¯>^ @ùú)`{݇—…sÑrü‚xÆ™‹ ÿ÷‡Ê‡àÛH§é©O`A
endobj
-1813 0 obj <<
+1826 0 obj <<
/Type /Page
-/Contents 1814 0 R
-/Resources 1812 0 R
+/Contents 1827 0 R
+/Resources 1825 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1818 0 R
-/Annots [ 1816 0 R ]
+/Parent 1814 0 R
+/Annots [ 1829 0 R 1831 0 R ]
>> endobj
-1816 0 obj <<
+1829 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [324.9335 570.1857 381.8296 582.2453]
+/Rect [353.2799 737.7376 410.176 749.7972]
/Subtype /Link
/A << /S /GoTo /D (zonefile_format) >>
>> endobj
-1815 0 obj <<
-/D [1813 0 R /XYZ 56.6929 794.5015 null]
+1831 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [84.0431 115.4698 145.9475 127.5295]
+/Subtype /Link
+/A << /S /GoTo /D (view_statement_grammar) >>
+>> endobj
+1828 0 obj <<
+/D [1826 0 R /XYZ 85.0394 794.5015 null]
>> endobj
534 0 obj <<
-/D [1813 0 R /XYZ 56.6929 123.8878 null]
+/D [1826 0 R /XYZ 85.0394 186.2865 null]
>> endobj
-1817 0 obj <<
-/D [1813 0 R /XYZ 56.6929 96.608 null]
+1830 0 obj <<
+/D [1826 0 R /XYZ 85.0394 161.0956 null]
>> endobj
-1812 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F41 1238 0 R /F11 1459 0 R >>
+1825 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R /F11 1459 0 R /F49 1258 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1822 0 obj <<
-/Length 3028
+1836 0 obj <<
+/Length 2597
/Filter /FlateDecode
>>
stream
-xÚ­Zßsã¶~÷_¡·Ê3'?LŸœ³/U¦çKmµ“išZ¢mNdR©sÜ¿¾»X€iˆ<M;~
-M•uÛã–™*ß¾æo µ›¢¥,¶Qk_ ì›Lt·(!?´?’G)CBáÀÌR'äÇhŠÏßê5ª¢ØtÖÍȦlò‡mA£Æ6 ÊÔ>4Ç÷ôuç®8úPÀÒX'Á~½§çs¹é¢— ­Ü¶‹²
-¬¸”:Òq·-#DÁEê¤(Èò7 ©ÀøªÊêÉÅ †oSÝw¼"(Å»m¹.í¦8mÌP>OQgŽ\«qž9/jŸskè%o×°ÚÎ?¶ÎXYTm½Ëi b"!Je¦s'´ð¥ˆÍy §tRf‹.Tzy¼I3û *£TCAÑ3½2Αên¦ÓºÑ¦Øà Û~®Û µ)¾võ¾µ_—95샘Ñ4ÍVú:«Ø‹‚¯GI@ÖJJ·¥v>ÑCÙñC/Þ±PbÊ%¬²}¶VÞvE( bdgŽîV?¯B¡ M©|ªrIÄãA9™ÇbH©˜ðI ”*:ÏÅLÁk¶Ç
-“2a,4hÙM¢ƒ^·eØ©/¸SØ6 7ë2 ´ì>B-S™ÌïwÅ(߆é
-˜Š2¶ÂÚj
- Z
-d™õ-ø`·/_rãØ9ìwµ),bËÐ0Ø°êǃ4\Ú§)Zà%•)ͨ=+X=… R=¼„y<QìvÔ56á™Woë«xìк 9¦É,J¬Û•µ$ß¼ÂÜ {@j«=µ:ÚXˆlŠÞÀ·„jàã¤ùí/¡„ÙSusÇkTãd2b1¤‰ÿ Û)8ý1G˜Q¶ó¥N³]'…³³>3\”›÷”§à\«Å¸ùN*`¿Oz,2Sý cêt¾¼¦gë:ºÃ¶£;= ;®WTþ›uQ~¥•†¡œ·´±Ðº÷´. c¡êF0†nï—×6Ž`„È“sn*ë,¥ÊÚh¦¢@!Cõ"Ö2.ÏèÔË3»Õ8p‚q‘Bwθ¼Žîoîþys>V&YÒ¯yPñ©šGFp"JÏ©yŒº“åMŠNþm,›YU®h Ø‘„p´#!|CËÅ- áˆ#!Zígœ BÌp7ÄÖð<RöÜ5³<szxdÔ{ëÈ;Åöy$#’ïÈ»DFØ:’QœLÑ€-ûa Ì’žf$&ÅÞ1’ùfÈ=8FUaêªÉÔ›eªÄø,gêrg`’ŽDCÍÀoEÖ¹­¹ú€OÖ9mƒe‚Œ ŒàýÐBí¡*ªŒÇ·'d1š—ÚØOà0œ74jS,aŠÅ!û… §XóÑ1Ŧ1sÅ{Ü·p*‹ƒ 8·Æ—™ ¢² Þ»@©ø‘€„½´–çB
-Γ(‰œŠ¶B’16ÿÞݘäuó²kߨù¯÷2àÞ%X%ê»5›¸JΟͨØÝfÁÐC§{iGºõ1£¸÷_®h<¯¬²Û{zÚDP›çƨ«ínlW"Ìv5Öàñú :Hðkte`fI‰(PàTõþÅ(Py<ô$n0ê74Ò]ωLÑÌqÔÕOYâU]™WçC»ªÛ¾òhŽZ¦(Ël•‰˪-öUÑþÉê!"p
-,©!1AÁ†Ž
-/ÁF¾ÙØY7ôNx×â(p÷é# CZÓÖº“ó˜g²?&æ*•©Õm¼ÃêìP¢2m0÷Ð\´@0l›šZeµÞÌõ_»{—x
-u|Æñ¿çä|Oj¾“š†?fÕƒ?4†ï›çU}ZFRe¾ï ï„&±™<BÚ "÷mŠóê½DERðqÜG™Ó°­Ì$ê{GЃAÌžAq^'U„ÿ ˜ëþyëþ§ÔãêÅi$µ>AÜ’%pHËR7)„“fÙ+©#¥E˜úªTŒendstream
+xÚ­Z]sÛ¸}÷¯ð[噋’ Û'ol§ÚiœÔV;;Ýì-Ñ1'2¥©¸î¯ï½¸
+!Pzd¦gÛ½ólv\r&³áugåVdÂì³Èì>cǹEýŒ…SÐÅ»¿¾û'äÌoÏ_Ã&&ý”Ky ©Í´>%å1îŽf7OøIlÒI,º\ÒðN°·U üBË%¬aS Zí$b2ʉ˜n.Iª¡ìt [V—°jÄÊœ
+O‰z_a£U"ãØ–‘}«DØ$%ÂZ§DQ2¡D©ìÇ$ÈŠ>.GƒC+†rdÆ …û()Ô.™ÔÞ,u,Çg)¦öâ LÒ)hh¢ðîHdÖÛ͆†¬òC}$GP rÑ_ôÊ?T¹3lNBÍÐ5Š²cù·7tç5õÚû»ð~Å.;B…ïW3¨»_uÄ]îµ¹{ྉ$¼Ð²(¸€o9Eð°U™ ¢2ð2,
+dkxpéŒÁÛqUš§&O}5L;aÍf«í÷âBÌöÔjìÒrzä×»|UØ1´Ía_Qûö׫O/·þ×z·­j7€4½çÓ“Õ4¦d°£]œ‡¨4åê°ÉÍ»÷]ûú1Io"ÍÜÍ“J¹7‘;@HÕù<ÐÀœ¬äëµuMßäì‘û™ înÞS7\k©E·}j‰Lõûä,ÖJ[ßætX#—ÄYj^/
+÷ÐüÎÁ°©·T+«Õæ°.¨av‰ÔtÜQ£ïÄ *‹Ïߪ™#KÆ]ú†Øić»ækU¬1ÔZÊ}Oeõ‘ÏÐ+Á_Ðwƒ$Ùz‚Úf»Ý=ä«oÔêO ;ÌÒ…‡ªoÕö¥z3’µÓIñå›øR%¥²wÖò¦AY¢†‰=(ׄܳyúa³Ä_F&•¾¨a µÅºÚØsÖ¯ÔQü»¬ñí‰u³è˶!ï(¿Û¸ðtt¸Hº¼<PØË
+‹õå/´ÞžMû8Yýís¼Ül&ì/©]¨‘"AeeI4…³¥²è®KjîÞ U5Ãóº®þÒíÞê°'ˆÊÙ”uÓI °ìA(ë?ûáX%œeQ’ŽÿPî[™7 \Ž^ö%X¢ÏÎú ‡›r
+^¬ð¿ýIçþWpÝÚEš©4=rn¥Æ¦
endobj
-1821 0 obj <<
+1835 0 obj <<
/Type /Page
-/Contents 1822 0 R
-/Resources 1820 0 R
+/Contents 1836 0 R
+/Resources 1834 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1818 0 R
-/Annots [ 1824 0 R ]
->> endobj
-1824 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [84.0431 755.8266 145.9475 767.8862]
-/Subtype /Link
-/A << /S /GoTo /D (view_statement_grammar) >>
+/Parent 1814 0 R
>> endobj
-1823 0 obj <<
-/D [1821 0 R /XYZ 85.0394 794.5015 null]
+1837 0 obj <<
+/D [1835 0 R /XYZ 56.6929 794.5015 null]
>> endobj
538 0 obj <<
-/D [1821 0 R /XYZ 85.0394 468.6268 null]
+/D [1835 0 R /XYZ 56.6929 532.1453 null]
>> endobj
-1825 0 obj <<
-/D [1821 0 R /XYZ 85.0394 441.0592 null]
+1838 0 obj <<
+/D [1835 0 R /XYZ 56.6929 503.9343 null]
>> endobj
-1820 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F48 1258 0 R /F41 1238 0 R /F14 980 0 R >>
+1834 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R /F14 980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1829 0 obj <<
-/Length 1328
+1841 0 obj <<
+/Length 1323
/Filter /FlateDecode
>>
stream
-xÚ¥šMs9@ïþs´îÕ·ÔG“8YS‹cNÀi©å‡=íß_G£¶¬éFEQ)’øežß”<î™±žTþ§'  Á)¢¯´Ÿþþ±RÓ·üØóJ¿0Ûm)õê¼úãÉÆ ƒ Óù²­*%=¿~Z0°É[P뇷ǧÃóÇÓnÝú|x{ÜlWë§Ã_ûëwϧݛ7»Óf«“×ë‡?wïÎûÓõ¡ð²W‡ããõ7xýoa£§ýÓþ´?>ì7_ίWûóÜB{µ²—WŸ¾¨ékÎ~½R`1ùé¿üƒh¦+ç-xgmùÍ÷Õ‡ÕûyƒäÑŸÚÛ3³µRö {Ù#kì¼—µ#{9êü`È…ºìåÏJÇ65æíéd&º¹;iî¥ÆiÒàý­Ô èhàpÜîO°;½Û Yïw¹Ó`ƒB!žPL|¡ÄxNZã[i?žJ­‹76¿&0ñ„bâ %ÆsÒßJûñTjõX¼ÊËþââã ÅÄJŒç¤5¾•öã©T‡”¿^Rȯþ ¬{J-×Ï”TÏJçú;i·þF.ÇMõëñyg™è…÷J1ñ…ã9io¥ýx* ~,Þ+PÊ ëžRL|¡ÄxNZã[i?žJC‹Ï‰hMâ ÅÄJŒç¤5¾•öã©4ıxmÁiœ¢_(1ž“ÖøVÚ§ÒËo Þc~™ Ò|<¥–ãgJŠg¥sü´# 8Ÿ]¨“°ì)ÅÄJŒç¤5¾•öã©4ª±xŸ ¸è„xB1ñ…ã9io¥ýx*ÍÏd(ÞåS€¤eO(&¾Pb<'­ñ­´O¥y¼Š7ÞE!žPL|¡ÄxNZã[i?žJ£‹W’µÒ²'_(1ž“ÖøVÚ§Ò86á¹äÁaÆ!Ðrz¤rÎ8‡·Æn75ƱÙÎå‰À <¥˜ðB‰åœ´¦·Ò~;•Æ±ÙÎ9¥Ñ
-ñ„bâ %ÆsÒßJûñTÇf;—Oý£Þà Ĥ¿@b9c¬á±ßMŒqlªsÚ€‹A¸‚A)&¼Pb9'­é­´ßN¥qlª³èÀ(/,xJ-ÇÏ”ÏJçø;i7þFšÆ¦:›h­pƒRL|¡ÄxNZã[i?žJÓØTg}„pÙO(&¾Pb<'­ñ­´O¥ilªËû ,jáÍRL|¡ÄxNZã[i?žJÓØTgM^)¥eO(&¾Pb<'­ñ­´O¥ilª³Ê@rI¸€A)&¾Pb<'­ñ­´O¥il¶3ygù…eO©åø™’âYé'íÆßHÓØlgB
-Ò²'_(1ž“ÖøVÚ§R›ð´ÉÇ+¼ÓˆIÄrÆXÃc¿›ql¶ÓJC
-VZð„b %–sÒšÞJûíTŠc³]>òh„«ZN/TÎçðÖØí¦F¼ë!Ÿ Iwá Ã݃ÿÉÈwàuäþûnáîû¬Ã4xÑ.7ë<ƒü¥½7¿ÿÉ7rÑ/‚MKŸ¡11£’5åI]/@Ý=s­ÀØ`:OýÓUdendstream
+xÚ¥šKsGF÷üŠY‚N¿K,!W,Û¯l¯âJ6ñ"«üý4F=|4wîuWÊ¥2–s8ãÖÌe3éúÇL9(튟Rñ*h¦?¾¯ôôWýÙóʼ2Ûm‘zsZýòäòTT‰6N§?a[YéœÍtúöyýðëîÃiÜlmÐë¨6ÛõúÍáåñòrùëáýËÓáùÓq·I~}:¼¹|û¸Ú÷/ûÍÖä`êóíëžðtømyô|ܽ{·;n¾žÞ®ö§¹{vçVŸ¿êé[Í~»ÒÊ•¦ë?´2¥Øéûʧ‚w®}çïÕï«óá§?žJí¿™Ù:¯r¬Ûà÷r(*:ëæ½l<ìåRfW uÞË_´I}ªÑ¾>ɧ ·wg©{­µ 5º>öñVkb®ûĪÃËv÷øxT»ã‡M±ëÝâ^÷F¹¨‹ÐÓß(¹Ÿ³B¯¥ûQÏ‹Hÿ|¾uõ£D!(&¿Qr>g…ü^Kç£6†±üêÊ&K«(&¿Qr>g…ü^Kç£6Æ¡ü˜c=
+Dañ#µœ?Sb>k½æßiÉümLcùõXaSÎ0H1ù’ó9+ä÷Z:µçCßH~ÐJk/,~¤˜üFÉùœò{-ÚXÆòQÉÙ,äÅä7JÎç¬ßké|Ô&=–oœòQ¯bò%çsVÈïµt>j“Ê¥ž)Š6|>RËù3%æ³Ökþ–Ì¿Ñ&;–Ÿ¢*& ‹)&¿Qr>g…ü^Kç£6¹±üUUy!(&¿Qr>g…ü^Kç£6M}Á×·)J‹(&¿Qr>g…ü^Kç£6M}ÁžYª‹ÏŠÉo”œÏY!¿×Òù¨McS_ÐNeç¤Å“ß(9Ÿ³B~¯¥óQ›Æ¦>_„(L=
+—8bÒ%·sVˆïµt=jóؤW¿”ÕAXöH-çÏ”˜ÏZ¯ùwZ2ÿF›Ç&=Wgƒâœp‰)&¿Qr>g…ü^Kç£6Mz.$ÏÛãóbò%çsVÈïµt>jóؤW÷šrÅ'{¤˜üFÉùœò{-Ú<6é9[•¦H‹(&¿Qr>g…ü^Kç£6MzN[•}.q Åä7JÎç¬ßké|Ôæ±yÏÖcEHIXüH-çÏ”˜ÏZ¯ùwZ2ÿF›Çæ=£r:RL~£ä|Î
+ù½–ÎGm›÷¬Ïõ?RL~£ä|Î
+ù½–ÎGm›ú¬-*E'\â@ŠÉo”œÏY!¿×Òù¨-cSŸ5Fùb¤Å“ß(9Ÿ³B~¯¥óQ[Ʀ¾úIY«…KH-çÏ”˜ÏZ¯ùwZ2ÿF[Ʀ>“ª«î;!(&¿Qr>g…ü^K磶ŒM}&DS.t Åä7JÎç¬ßké|Ô–±©Ï¸¬¼ŽÒâŠÉo”œÏY!¿×Òù¨-cSŸ±õDé„ó@Lü+$·3JHïœt98Ëؼg´Q9:iÙŤ7Jnç¬ßkézÔ–±y/;Š®s
endobj
-1828 0 obj <<
+1840 0 obj <<
/Type /Page
-/Contents 1829 0 R
-/Resources 1827 0 R
+/Contents 1841 0 R
+/Resources 1839 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1818 0 R
+/Parent 1814 0 R
>> endobj
-1830 0 obj <<
-/D [1828 0 R /XYZ 56.6929 794.5015 null]
+1842 0 obj <<
+/D [1840 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-1827 0 obj <<
-/Font << /F37 1042 0 R /F14 980 0 R /F22 977 0 R >>
+1839 0 obj <<
+/Font << /F38 1042 0 R /F14 980 0 R /F22 957 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1833 0 obj <<
-/Length 1373
+1845 0 obj <<
+/Length 1378
/Filter /FlateDecode
>>
stream
-xÚ½šMsÛ6†ïú<Z¡X|ã(Û²ëLã8ªzJsj¦½4‡žú÷ Ú†ô
-w…ÉLÇ£1-½äÃg ‘K hÒ処䕶ÙM1;å5ùéï+=ýU>{\Ñ{fSCLÝV?=Ø8e•ƒ ÓáO8VR:%šß¾ÜÜý¼}9ìöëñú&¨õÆ}sûô|ÿöN~ûu÷éùáéñ·ývÝÍáéÓóÛÛûÝÃn¿{¾Û­7”<•ýÍûvxxúe÷¶õ¸ß~ü¸Ý¯¿>¬v‡£ ú’¶³È?«/_õô­hXiesòÓ¿å­(g3}_9o•wÖÖwþ^ýºú|< |úºk¯~ÇÌÆ:•B9_eŸU°Æ«LªœËf²Å ¦æ*ÿ®)¶ª¤]ÙÉÅ wA=¦.±Æ
-þ-¶ïXÒqÈßç2^²&ÞSËþÇ”èÏROþØ®ÿ–tóAeJÂøÇã_S²?GÿÛ÷Gìüæ¿Oª°œà)Æ¿¦dŽ
-þ-¶ïX¢±þÏ»òƒ4þ!Åø×”ìÏQÁ¿ÅöýK4Öÿy3÷KÆûCŠñ¯)ÙŸ£‚‹íû#–h¬ÿó¥_JÖJãRŒMÉþü[lß±DcýŸ+>í„–íkH”ç'÷–ÙUG&ÑXççBT&kaäcŠq¯)Yž£‚}‹íë#–h¬ós.+MÙ
-þbükJöç¨àßbûþˆ%ëüœÕ*:áÆ!Æþ=$Ë3Hpo˜}u`õ|®\#] Âœ¦÷š’å9*طؾ>b‰Æz¾òRF{aäcjÙÿ˜ýYêÉÿÛõ?Ãõ|6z•­æ<0Åø×”ìÏQÁ¿ÅöýKf¬ç³>ª0÷‡ã_S²?GÿÛ÷G,™±ž¯ÔMÙLÂMSŒMÉþü[lß±dÆz>;׋²4þ!Åø×”ìÏQÁ¿ÅöýKf¬ç³Ú¨ä’0ç)Æ¿¦dŽ
-þ-¶ïX2cŸINù…ñ©eÿcJôg©'ÿ l×ÿ Kf¬ó3!(«½Ðú`Šñ¯)ÙŸ£‚‹íû#–ÌXçg\*Nÿ˜bükJöç¨àßbûþˆ%3Öÿ“U V˜óÀã_S²?GÿÛ÷Gì€9‘r™¤‘)Ƽ¦dsŽ
-æ-¶oŽØù?­{yNRÆha¦SËîÇ”èÎROîØ®ûÖørÕùzÿX`¥r‚?¤ÿš’ý9*ø·Ø¾?bš?˜ëý}P!Fa¾SŒMÉþü[lß±óÏ—.(§ëK`“r:H_H1%¨)¹JÐbû%@ì<Ù§Ës ½¾ó£’î|büßC²>ƒû†Ù—¦ñ^áëê
-hR)Xék
+xÚ½š=s7@{þŠ+É‚,¾QR¥ÐË2ÃTŽ«x’&.Råï' ‡%î㙌FcYz¾Ç·àùpRù'çÁ'¦,8…núãûJMåŸ=­ðÙhK©»Óê§G§Ék?þ$ÇŠ bÄéôíËÚƒ†M>‚Zßz~<<ývÜm‚]ŸŸž7[íÔúñðËþí«§ãîãÇÝq³Åèp}ÿóîå´?¾ýÈ¿ãîðüðöôöÇ•ƒ÷ûãþù~¿ùzú°ÚŸ–Ú‹ÊÌ!ÿ¬¾|UÓ·œýa¥À¤è¦ó_`Jzú¾²Î€³Æ”ïü½úuõy9 ùéë?íÍoa¶ÆBÌ~aÊ.7Ú,SFK¦0ÿÐç‚BÍSþ]ahSC>F=ÑÃ]H t)ÕšH#‚KÉKQé<C‡çíîáá»ãË&éõîêÌ-‚ñ* õ„bê %ÖsÒZßJûõTšWÏX½6ùY‘¼PO(¦¾Pb='­õ­´_O¥¨ìX}æã,ãë ÅÔJ¬ç¤µ¾•öë©•ª÷Ñç€V>¥®×/”TÏJ—ú i·þLŠÊÕû:8áµ…RL}¡ÄzNZë[i¿žJQ…±z§@)+¬|J1õ…ë9i­o¥ýz*EÇê B0:
+õ„bê %ÖsÒZßJûõTŠ*Õ£ë¥]¥˜úB‰õœ´Ö·Ò~=•"ª¡z—òY2)äë)u½~¡¤zVºÔ_H»õgRD«Ï²„QXù”bê %ÖsÒZßJûõTŠ8¶×s.‚·Á
+õ„bê %ÖsÒZßJûõTŠ8¶×s6¿^Zù„bê %ÖsÒZßJûõTŠ8¶×sz^+6õ„bê %ÖsÒZßJûõTŠ8¶×sù}A4FZù„bê %ÖsÒZßJûõTŠ8¶×³ÑóÂf‡@×Û $¥sÆ¥¼5véql—g}
+œ´N¡•ö§@¥
+~ìãðâ剙VyéyC(fb…'ÆIëÄZibTŠÿÇÄæKFx•%3¯wHc¬ÓjŒýac„;x˜_f^Ëõmí
+!z#=¿ÅÔJÌ礵¿•ö@¥ð8×ÞTM>€® èzw¤lθT·Æn45FØT{ù-˜t;@a¸›^ùV€«:r#À™îÊm
endobj
-1832 0 obj <<
+1844 0 obj <<
/Type /Page
-/Contents 1833 0 R
-/Resources 1831 0 R
+/Contents 1845 0 R
+/Resources 1843 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1818 0 R
+/Parent 1847 0 R
>> endobj
-1834 0 obj <<
-/D [1832 0 R /XYZ 85.0394 794.5015 null]
+1846 0 obj <<
+/D [1844 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-1831 0 obj <<
-/Font << /F37 1042 0 R /F14 980 0 R /F22 977 0 R >>
+1843 0 obj <<
+/Font << /F38 1042 0 R /F14 980 0 R /F22 957 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1837 0 obj <<
-/Length 2962
+1850 0 obj <<
+/Length 3016
/Filter /FlateDecode
>>
stream
-xÚ¥]sÛ6òÝ¿BÓ—£f"„ øÞ=9ÝsçêôßÜCÓš‚lÎH¤"RvÝ_»Ø J”Ü\&3°X
-œfQ6‹S)”ÎR¼zöu&Eç¹"$olyd`ïo6ÑìcÍ<¦ÜÁ ÿdËTzþ Š7À‚û5ÈMæÚR|oŸ:ÓÁÎnæÁ¶Ø™º#(¼2z¥àyA˜"…ÕÁj ²œ|0ü9·ÑÛ0ZïÀ
-FÔ` 2¹£_·cü¥1['èªNƒ1=}¾6Çi." Zä[Ò÷'º$‡œx1”Üßç:¾j å9Ô9y¢åtÂa_‚‰Ãý¡Ð‘_3ɉ&H…/D©ùÂC Á™"N!)÷Ï=º½Çš¸ÞÏNd$ECî>ºÿ3æˆ+Œš*^lÄÁdÇÙxÝ*Ž(XÓŸ)4À¼<èP¡!Ÿ?]úKecyцP°jãЦ ØÙ ‚ Ê–*œÛØ‚ë>¬8ÿô²Þw}4ªâžÿ7Þ@üáˆF.BBú²<ŽPüÞ*Õç…ê¼RøX§•¢Ç”¢lê“C­ˆàù´ÌÎ_ßcMÜ?ÖŠDèTïï•])úG³Ô
-[ ë×gSvD 6ø‹ò »ãB² pk¡ä´Û¦¨*N°PíSq QŽÃÅŽ³%tŠ¹eÛJ º ¬3 u,$x$NÜ »}‚–¢&7„ÆçÛš ªé–ªîÌŽÉbJhÁV©
-sÑ(ãpÿ­£H{ÄÂ"F2JüaB%< P@ÈEݾ†ÞÝ Ü6q—Ý„J€u@Å
-Ö*¡@ÉcéTšÌ´yL%ƒXaic°6¯Ú 'Da6„Ù©/ ×uó>ˆ±Ã¥þ¨k×Q#%ZÝa/ O˜>Þ~v:GP_Ãs`_[ …ˆíø&Ô÷-/Ë=ËóUGÁ+/Û¶0õ~pý »_4&½ÏòC½G‚ó@Aí»âüK˜„æÒl»ƒ­ww­éøÎ9¸É¥Øpûéf× Wª÷!Ö碖?˜uóH»ûŽØ­˜4®pWöФB&í,[»ha55…Šº[¿Î¥”7poø®ŠÁPævU¹_;À›(¡¼ƒWÈɳqYŸáŽõ`9§e×r¾çÊÕšçûl´ê
-wN2h,“¡!ׯ\mǮե±-Égsg @K³6…ë0k×ðÃ%‹4ñHë=ë-¼õ¤BÚndïOSëoüУ°Þ IT›ý†&£'A€÷žÒA
+xÚ¥]sÛ6òÝ¿BÓ—£f" ~Ü=9ÝsçêôßÜCÓˆ¢lÎP¤"RvÜ_»Ø ʔӹLf¢Åbì.ö´\ø'™…ÊãEšÇ¡R/ŠÝ…X<ÀÜÏ’iVŽhåS½¿¿øñZe‹<Ì“(YÜo½½²Pd™\Üo~~úçåo÷WwËU¤E„Ë•NDðþæöarúùéãíõÍÏÿ¹»\¦qpóñ–ÐwW×WwW·?]-W2ÓÖG¼Ã™×7ÿº"èç»Ë_½¼[þqÿËÅÕý ‹/¯
+ùrñûb±±¹¡Ê3½x†ežG‹ÝE¬U¨c¥¦¾øtñïaCoÖ.Óß@³Rq˜%°ÇÛZÖy˜¨H Z–±§åÀLŽ
+µüYÈôTT)bX§ ¿W§T¯"ïX)
+ÔU×3zK¿¯0² ¾#ø¥=P˜fBKƒá
+Ô‰Žt¨”È-Ë÷ö®Ó,8”dœy°7‡²é ׌a)xZF¤Èb³`»¹N>úIü¹´¹»d²!‚•ÄËÃ:Mšº&À¥> rëiâØlÊgÜ|à4ÓþÚŒâöB£©HˆŽœÄÁõ Hæ’*
+„(e½Ú›`rÊR‚Hä~I¶ b2q¬ê~eD6&z㎚ Í÷´3(à¹ÔÕLõ\ïjÝM¢«‚—CØ ƒ:`)ÁëënJ¿)˽StÕŒ
+'àP–¾9Çy
+ås¢¾+}ŸwbÐy’/Vc ò}±cÅk&¡]“OãøL»"B¡3ÛÝÄà€I49ÓTxCTXP0|U¸ÇÐ#I¨µý}_îŽjæøIáCýë|zþ'¬·˜6U<Û”ƒ3daLm<o!ÊÖã•ã/åf
+nyÓÚW@ÓÓÎ?âãÁd÷i~j÷h@°¨½WZ”_‹rߟ,½»ëÊžႃ߸;.?Ó0NìJ 1ÄÆ\´²’Ðë²nŸi'Ò`}ìi‚Ãê‰Kã ¿Èžº4bÈ¥Çâ³.zØCCoB¦éë—¥”2àÇÛ>«âG`hrûª8Öæ
+úaáR3G”\ÛˆBdÄDDú¤–ÌäÓ…9)B:¿©k#âÌ;è$~º×WÓ›YãüØð·™výTµÇnüܳyg7nzNIR‰0#õ²P¤Däg!•8OÄ/QüKwõåXqX"ìîhs%BíX]bŠ‚1†"WÉø­ÉËm0²œñg©Q+™¨P¦§—sÿxÄ/F
+ŠüF¦á>¼Ê05õÎdH+Ú¥@Á­õÖïN8ëøG$$”î¸Û³Q&”7-‘Þî1o@ì« b|7“úá&·•„:—Ñ_¸¬DK¦Ë
endobj
-1836 0 obj <<
+1849 0 obj <<
/Type /Page
-/Contents 1837 0 R
-/Resources 1835 0 R
+/Contents 1850 0 R
+/Resources 1848 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1818 0 R
+/Parent 1847 0 R
>> endobj
-1838 0 obj <<
-/D [1836 0 R /XYZ 56.6929 794.5015 null]
+1851 0 obj <<
+/D [1849 0 R /XYZ 85.0394 794.5015 null]
>> endobj
542 0 obj <<
-/D [1836 0 R /XYZ 56.6929 267.0417 null]
+/D [1849 0 R /XYZ 85.0394 300.7202 null]
>> endobj
1301 0 obj <<
-/D [1836 0 R /XYZ 56.6929 242.1896 null]
+/D [1849 0 R /XYZ 85.0394 273.2443 null]
>> endobj
-1835 0 obj <<
-/Font << /F37 1042 0 R /F14 980 0 R /F22 977 0 R /F41 1238 0 R /F60 1366 0 R /F21 954 0 R >>
+1848 0 obj <<
+/Font << /F38 1042 0 R /F14 980 0 R /F22 957 0 R /F42 1238 0 R /F61 1366 0 R /F21 954 0 R >>
/XObject << /Im2 1355 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1841 0 obj <<
-/Length 3901
+1854 0 obj <<
+/Length 3831
/Filter /FlateDecode
>>
stream
-xÚ­Z[wÛ6~÷¯ÐéKås,
-ë¢n·ØÎÚ¦ÛÕ›¾lìXµ4‘ȶ—4z×MK5Ђi)CwhéÂ$Û•LÉ5’ 6:òÁ½ ia"a/Æûî2ÏKÃ]Z RÁÑfĬÔs³†áȾ!B÷:í¨ Ÿë²±»‚žbu.âù
-ˆà+¤¤¬@mÇÍ (öÁ›[¿DIëÒhX`ÄvÜ™#æzþó¹Öó²_/ìþøøŒÚ]?©Ÿ,Šdü># G‘v1AH³H„ ȳªÌ¦è€•Ã>h˜ß°a?±ši~2+ï ì²ZbV¦1”„yöçd_¥}QUãœ/@ÝšnïN›œ»~ÝnËþÑÓDQ.bÁâD$c‰šõ:#ú@οi÷Å=ÐW{at7•*’*¼ù•óà¡èð†i¼Ú¯ šŽ†3·] Yœ‹y‡ÖsÁ§`ÐE¶6XÄ0y¤-ÂïÍržxÎ/Pɬ°L7Iä¼K뻎x†ž}Y•%yWlzlYí6ôwYVy ¼»i–NÑm@ÀEG cß]ŠkTE×Ñ¢«?Ê{c÷öTYLc»…)‹vk4ñTgUÌ„Šãƒ7Õ ·¨GáÈÀ¥ˆ,7¦¿_[u†žnÝîª{—4 =*‹”r¾©éÏ—HÀœ¤™D'išeƒ¯zÇÆÈàù`fÔã†ôØíe´ý2K«Êª<°ß¸xê>-›ŸRüéê-*š7»z‰D›†_à¿rÍɪ"d~ë´q´Ó® ‘F•?da8Ъp«
-Ò@Tî*í-´0ÌNÅþ
-?ÐB«Û{7ªO-â•|î€'ôM¿-mÄ À/ÁuäøÂw`T…ßïn~ÂɃ1iugÀú¾@g›pÐê47ÿ8yÜ,æJó„IÁžè@Àâ@¸™Yv}a`IP˜
- TâUSè 9>ç\¯ð-Â>ZìàF,2ªhŸó—m8ÏŽr¼âÞ…LŒjŽ÷N§a|_–íl´{ZgP†@¿GeƒžÑXôD¦0ÒS ¾=Òϯî.?:—rŽ×GØÀ¥a¤¬w5>¤u»kzlc(•>i2mŒq =†MiÏÄüî:"HY:„,½€”?§Y¸u8g&óŸ-œtSì©/‚«q
-Õ#iÝZiàm"#ò©ª Ǹè/æѤäÂÕüºÁî|Àg¿ÆÞ ¬ÜX¯O÷e±·ŽÆÐÅpÉt³©J”‹!¸I·üqšôû‰©iwcÄL‘V>O‚ù³áÇÅ5®-&/á÷S'b‰ FàâÈòÀDÄZæ/!:+Ž©µ)M‰‰ä|!8çóW
-?!“Žâû˜´•$ÐFLVe×Oe š%t Äª5Ô$ô ¹w:yÑ<.HÉáÄtX“p1‹è¨Ôµ!«PàelÝ3æ¤û±pu»˜­
-›Vá÷«CשÆC§ÕøØå–ÐøRZ•igØÕ`}–6VU²‚Y³Œ“ Û¹CÄiøB·Ñí–]_ö;LC>ÿ}WØ3ôK†bžÛ$#äRBÚÙqÈQɬM…n0ëIC
-5ÀÔÄ% f™'@s¦„C & b‘N’§ÀHdòøRè×ðE³(9®r¸–ŽM!ÍÁ)C{dV xd¦«ÄÑac 4èdLÅ+%BiûàLò¶N-`“èÎíoS ;¢ƒÆ‚Ð<–雿’`¬ZG`‚‘ˆ?Úü=ÅÅä©ù+¨[©ð°òsæ±@'Îü‹ª¨!Ðwöb*¶ Æ@°p0Hc'­Øå<cA%pðqøAZ˜¨Èñ9…W&P9vX wª—81å•Ý@ÂM¿XmL¬¤X ½.Ú"Þ„Ë°‹­[ Ú…tkzI¥ å-Ò<’Q(hbÖ–à`ú’ä°M}(OnÏ ¿Ö9¨`ºzª´LEiƒé8 #óDµT{ÁÏ¿+ßû²+.pNy<×9/h’‚–ÅÖ0*%Š9¬ïb8 óÁ£ƒ äðX”a"TO¸@àõ•‘?çR_9Èœ"e$¡KBñ/M;¢ê:¼-ÒÒ
-€‡>.B&µVC°0<”c° B-ÿ´(x á5Œ<^ H¨¯N5
-еÖr|ø6EzJ´¾®ØäSi¤ñÓ»Œ%3Rød»$zïÙe²(<RñͶX•SŸq€=îYJøñ A.R]dÕÊÕ®zé¼Ì”DŠ2u
-ð®x<1¯(fÂ|DhÀ<Aüñ€ÌS\ INX,¸à°²=½|úZC)íøÔEveø¬"[Þ5Tf#Ÿ ‚ã –j,Œ‹mMÌü «&ØSƒ!¦wô`±—fr. ¾bÊPLÃÖg(ß± ~áœÀL•‡Cð
-Ø-=†j­¼ì2<n1ƒô°âËâ xa‹m¹»þiòÑeÞÛ«óÅ¿^›úõåõwt僨¥}2 Æ7,ò î%³ª„}MÅ©[¼MG2Á|ÈÁÓpŸ!É~±6f0HOó!jbÅ*t pYRƼOû>ÍÞu” ™üÅV;/m†ƒ÷ÖqâG©ƒg &OIÜ!a
-íÍ ÒN߀w)}\²k¼*MT¨Øúp¨/
-ó)”¿üæî*À|*âÔÃ>Yu‡ß;{¯Ä•f6 ¼´LpeµK¬¦·is"‰•$/4è©ÚÌs§b)bùŸ“
-1û›ÄèÚÅ3Ÿ²üå8>ż¦B™ ɬ½Ò·ïf®õCøqçÑç„®Y}jc´©Úà ƒâ˜å£[8?ê”Ï‘|N©Fÿ6}™Äþ½˜ÃáÊIË,z8Ò_¥K %ƒ+&Hû2Œ;rèU§\ûküT0¦&k^a/(:6Ð9( Cðì“h‰n1Çæ0I{ $I¹0†iÅ‘ÉO3£wXg—tã-Wž‡wSìgkS¶#@78ƒÿ/E1wa¾¤)ïÖtãsøÀt>¤ÙžÇó]Ut_L`³±™À °ÉèðgÈ×Kìú/þ K;ß $ù™›òrjÏ£Õ)Ûþ0JSŸ^ƒ™ï¥'ôžÏܪýYöá›u1ÇÁô=¶ä!‹°bÊì6–Çœûï·OYÿ±#÷yendstream
+xÚ­]sÛ6òÝ¿Âs/¥g,_Éæ>ÆMÖ½$í9îõ¡í-QÏ©Š”e÷æþûíb)QqÚÄÁ%°X,ö§~ò4²¡MUz§&Œ„ŒN§Ëqzß¾9‘Ügâ;Mú½¾º9yñZ'§i˜ZeOoæ=\I(’DžÞÌ~l¨Â3À ‚Wß¿{}õÍ×g± n®¾w6Q‘^_½¹¤Ö7×oß^\ŸMdÉàÕ·?Ü\^Ó'Ë8¾ºz÷5ARzAz}ùúòúòݫ˳_o¾;¹¼éÖÒ_¯òÛÉÏ¿ŠÓ,û»ê4‰N·ð"B™¦êtyb"FFk)OÞŸü«CØûꆎòOŠPi«F¨Ô£4´ZiÇÀ‹Ù¬h‹ºÊJXš6A“Oñ_¢`šMEuG_²²© ¼ÈÑû²¨ê5Aòù™L‚9 ¡O„Éí"'Àõu“·ƒ1Ðw–¯»)
+ž—{Ãê"Ol—QðÓYE»˜à6
+©ñ‹ˆkULÄÂs™UwÖäÜEùc&† -s?  —çCäÛE1]ŒI2ÎE^Š¥^¨–f5韪º¥Æ2kÛ|ÍíÍtvÈÑݦ„üÆ£œ×eYo;|cËèÑl–ËlýijÏù¹r„^H¸Ë¬ÍgLl="·
+̵:þcæ:<ðÊŒµ´§V§al“#N”úLzÈ…Êê;í¨šäUv[æûSKŽ[ùÁ¹»N‡“÷W)U‚a0ƒÙ¯Æô= ¥,³ã ¶úeÒ„©Ñ;GÛ7°á¢oÃE߆ï6œV= ÉÉtâ1ËçÙ¦dÉzÈÊMÞ Ùe ÞFïL«zŒ\BK?»Ã8£ôs[Üëõ=ö½z›<-ó¬&LŠ
+”v°ß6u«SÒõ!e°êX…ZCØ7 …¸¬Ð_¯œÊB›´Hµ–õƒïÕf¥ §»LÍ«v]8_£ÀúނјÑ·Ý*%
+Ï7×?Òà^Ÿ¬¼Ã°a±<'3›Š‚ª½p üÓèv‡‰0Ñ@§Ç{ *L”ô#Á§lÚ•²ƒRà v¢žÀ‰)
+èl]‚š+g[àí¡È·Îœ@^ ìO™­VeA|A„«l Ο֠Hñ
+½¼bz^eKÙጰRpõ2&y¤¢Ƶ)=VNê‡bæ´ÚCôx[””α5Ã'fM¥‹í°/æÅüõ»÷Ô$šÓK’?Âhµ{ãH*xG±.@À1Ó|ÖÓÊÉAlI¿âØëWL‘>>Iâ¸K\ØKÿ“4x¿Ê§.ŽâyØLÇ$šòEè?Í-ñ?T–@¤³™×$ê€üÓÄ“]ÀÞ4‚ºO9”æQÅ|XøNGKÈâ…PBW?<j¹ b©Õ£Ï±
+@Ÿ;^½ qf ‘kðY¡ˆ”¨®tÏh B–X{jt *=W®Raš`r8V¬št'}”ÎY èñŽ¢ÝÌä¯ZJiDB
+g­”Ÿ‘Hñ9"Á÷Zm@dY4íX…©Ò>4qbÍ5
+•5£*ìÓž!—RØõÄ~”¦&ötP9ÂCï%ó\
+–íjÓ´O‘^gŒ/Eji8g@À.4Â7.¤ºÓ…$xSÜçÛ¢ÉÏiL±?Ö[.h²ù– ¬¡WÆwú±›ß;pèÖÅ ]h06üê„DXsÄžFÚš?eOTW6ëñ,"§#Öç–"ø§—ØŽ¹´_óÇl 9
+îf>2B&šX}Fás$Z+’!‰Çœ† u ÆþÖìÇ ÆF&`”àí"aã.dà¨@K'‡rEXK÷ƤXä`5”L>£tŸá¯NÁÑ
+ mÀ_—*=Ç_<›IÿSpí29ºT¼0êsJ{‡ñ™¥š(pÒî-uµÎçÅãÈb!
endobj
-1840 0 obj <<
+1853 0 obj <<
/Type /Page
-/Contents 1841 0 R
-/Resources 1839 0 R
+/Contents 1854 0 R
+/Resources 1852 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1818 0 R
-/Annots [ 1844 0 R ]
+/Parent 1847 0 R
+/Annots [ 1857 0 R ]
>> endobj
-1844 0 obj <<
+1857 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [91.7919 146.7594 410.5963 157.5737]
+/Rect [63.4454 176.8036 382.2499 187.6179]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://portal.acm.org/citation.cfm?id=1315245.1315298)>>
>> endobj
-1842 0 obj <<
-/D [1840 0 R /XYZ 85.0394 794.5015 null]
+1855 0 obj <<
+/D [1853 0 R /XYZ 56.6929 794.5015 null]
>> endobj
546 0 obj <<
-/D [1840 0 R /XYZ 85.0394 474.1483 null]
+/D [1853 0 R /XYZ 56.6929 504.1925 null]
>> endobj
-1843 0 obj <<
-/D [1840 0 R /XYZ 85.0394 446.4867 null]
+1856 0 obj <<
+/D [1853 0 R /XYZ 56.6929 476.5309 null]
>> endobj
-1839 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F41 1238 0 R /F11 1459 0 R >>
+1852 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F42 1238 0 R /F11 1459 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1847 0 obj <<
-/Length 3701
+1860 0 obj <<
+/Length 3749
/Filter /FlateDecode
>>
stream
-xÚ¥]sÛ8î=¿"o§ÌĪ(R_»ON“ìeg›fÓÜäf?d›¶5‘%¯%ÇIý(Q¶r{3×N+$Aß ,Îø+Σس0;O2åGˆÎ盳à|c? ž3±“&§³O·29Ïü,ãó§¥C+õƒ4çO‹ß½Øý  xŸ¿ÞßÞýô¯ÇéE¢¼§»¯÷“0
-¼Û»_núéqúåËôñb"ÒHxŸÿ9}xºy¤¡˜i\ÝÝ_&£ÇDonooî?ß\üùôóÙÍSw÷¼"x¿Î~ÿ38_À±> |™¥Ñù^_dYx¾9S‘ô#%¥Å”gßÎ~í:£fé¨üDà‡2G†cŒ2?–¡4¼[‚@²ÀË+zê·V謁dlÛæó½£·R· ãéqÐ3f» ‘zõ¡±S &÷^ïíâzn©Vº=Ô»‹¯Úo‡¬Ü=¼*Æ,fÝðþ5sýGªŽGP‘¯ßòͶÔþ¼ÞàØ%*¤4ÂÏ¢(4GnךÔØŸ–þ£!äõý7à,¯8†ð¡Þ— ‰‘v¿«˜ˆ‹n¶uÕ0õ²xa¨]ÍÈɧ[%… _¨t‚|YvÜC€aÆAàMé!²Ð]û‚ˆ ´{D  “˜‹@^5<ž·E]!ñ4õ¾Õ\Í6ÇYämN¯(o/g‚ž×4‘pQÐQ í™öO_¯i`’@|âmòv¾ÖÍÑÎÍVÏ‹?‚ ÔLuK[!êmLV(Á'Ôw'ðÔr(Ê’ cŠUEÇÐ ¿ÛÀåWÔt˜°Ý
-Sà 211zœÈTø‰ ÔPŸ‡£f|_·]<ÊQ\*sÅ<SÕ­«õ¼,ßi ¯Ü Ip]Y2Ú ž€ÙÚÈÙhЩÍyî2Ÿ·›jÚå„…ug–r"óŠ«k¦kÙ!Ñ·å ,ŠÒª„ †+“Ⱦoòí–âLÄcŠSBHÏz")çÝ=Ðè )!¢ÞÑ„E½É)üªnëÈ[ÒA6ÌÈš90Ãñm [1¡%=_ MˆqZywí˜oŠÕU§`êížgä
- Ê'è‰P>HV³¢ZÀ>lÌ0Çz3NÛì&¼ÝÁ¶»- _gL‡ƒçÍŒh΄•Äæ…Dxp¬²˜çXlØ;gß¼ÙÄ:¢nI+T]ÁH™›­Wš°MÑ’uFÞº>èWGï1ë=
-²ï¾¥ñM^ñÌ#/Rß«W°Rc¿–meߨúPFƒ@•kå¤xéÒ7µ©ö¢ÌÖ}
-}ƒ²Cù¦¦rЙµ*ëY^ò¼-÷‚!ôI -öðŠ‹ã¨L(ÈtÐlI®2ài2ª:‹=”Y×eÉîƒ
-—l]’í@Z‹TGj4CFy+ÆÈ´egrh¦†St›Ô“z…t¦c©{±Í)}Ž¼”÷ú¦‹RNßî0otüÐÇ«×t¡g.´ ‰ï!ùðºïT*Ö#Û¸¹^XHe>§Â'¢æâÔÀeœ¦TWŠÿî•ë‰/”MŠÎ½‡¹e¨YåYâArdð‹zONL_ÖnÇÿÃüi_ÐÏ?Ì׿¡G½Ö#Τ`™Íq•y”/ðG6_
-ºbŠ½ÅÂK_=¦Š>ÂÓ©ó,åSV!þ:I:•¤ÅÝðÇÖS#WÞ׈J¿0àî!°ù&°mJЗ~£¤|ª¦LûHKúÂ9¬ h'f;ýºĄ́˜ ê
-ÌþýÇÄò?ð?ÖdìÜ·¥‰-«M×!)}²3ˆµž¿ YážÚ™=Žt>éIÉ ª>zê6ë8ÛÑzâj=¶¿JMûñÁïä ±àÛF~ÕÿXÏÿ÷oèúªÄ—iŽÿ<.LR_¥@„™By§ê„sûc»SÖÿBÈÊÒendstream
+xÚ¥ZYsÛ8~÷¯ð#]eq@<fžäÄžõÔÆÉ8ÞòÖ”K¬P¤V¤¬$¿~»Ñ =»µ›TÂfh
+ø]¦&*Ó—I¦C#"s¹Ü^ˆË5´ý|qŸ™ï4öºyºøáN¥—Y˜Å2¾|zÈJC‘¦ÑåÓê÷àÝß柞n¯fÒˆ ¯f&ÁÍýÃ{âdôx÷ñáîþç<ί<Ý| öãíÝíãíû۫Y”šÆK–ðÆ€»û¿ßõóãüÇùãÕŸO¿\Ü>u{î7
+7ò¯‹ßÿ—+Øö/"TYj.ð"Â(ËäåöB­”生/~íZÝÐ)ý•†&•É„µœR ÉÂXI嘷m¾üb÷¡ýšow¥ —õ” Ìée2 ™7ûÊ—³(  ó °¢ºš©$Ú%"¯š£ÝÝØe[Ô
+OÓàsQ-íIïýU”«¼Íéµ~ñíE3è`—5u$ÞˆNÂý§WÍ3¯VÔ»i G„Ì$Øæírc›“i›]!-‹ÜÑHd}ÅM»mFaf mÓkDü õ5áÖˆϺ««ÆçX”%Q æëŠö`Wa7Á@AR&´D$j öHÆÁ&¯V8©’AñrÒmá„ÖÇÆw.ëúKCm‡=sz”v]´(„‡Uk÷U^Ò¸£]$½’°$øCJ}<¯2th©l‹l]­úôF‡õ¥.ËúXTë·45Öa{ØWh§ßÚë™»žq^©Ã¨þ ŒÂ†«ŸÆºü/°Þâ^•·.PκðÌ—K»kÝÊ¥ :6°X¨"¥ª Ê·ÌüêU=z½,Zc4X£’&” ¸MáÖh¿âJf/ûz;±!‡ÚÄÆ÷-íÖV-BK¦n1¸ˆ™³ãL¥Q˜(ph£s0Xá$ŒêÖz³å¨. Š{§ªÛ¡Õó²üF yE|rQDוÃ’ß?|&ÎÎiÔlª"Üsß—|ÙvÇÔÒ,gKØt°<Ò!r¯8ºf¹~9¤:-Î8H'«*\•|ßæ»ùÃm:øVöD¡<ÉðØïþµ|1ê=uXÕÛœ|¯î¦6Á mdË Ùð
+œÆ°}WÃT,è…ž¯…%
+‰z"ùÒÕ¢¨V0#úø£ŒÝ¶‡†ïö0í¾@áë‚å°Upß`– ³9Ÿ’ø Dl«,–9¦¾Å÷94¤ïAoZ:²îÈ*ÂÁZÊÜM½¶ÄmŠ– i‚M}´¯»Çlw:ýFĂů <ƒÌ"–‡+ÚŸ,*†ÛãÉ] b¦öÜo‘žóY¬!θS¡À7âì%ø>
+–*\¾ëÀtêEn‘gî!ñðñ=ÝÖàón"ð#ø0“Ýù_ÏÖM–·ù¤Çíñª„„¸MxEú;àÕYVõþ
+ùxîWDR.%ß(å"(¹ÒHi.Ïö<ÓŒ'9‡z¢AÃ"áþÞ-ã Bé³6Ey¾cù¦|[SB8èµ.ëE^r¿—‚ÊÆ$ÖÑŽÞª„ˆJGµ–â<ž. ªñañ›r㺀¢øø AbP¡(àXnPù¿¢Ê] W|H‘`à 9ò‹0êñ±±m3X—3Á‡(ã
+ 8ÒûÂ"x©êý–ƒ¼9M@ׯ=ðªg¦U„Eµ6ô<4¾„rRnvç1ënIÚ}±ô-›ÚyHèN“³ Œ°Da˜ñ-ô*‹/vÚ"-®r†]‘^$aª¤G×Ë„¸$Ô‰äö²^æ%,R¾sQÚ„)Üu=!
+ Ðç?M`]†:ë N'ö’†‰pÀœÐ;ª­MÚŸNpÚëµÝ7ÔÒPhwT»[Ü…'ÀŒZOâ+¸•šàׇù‡Ûkêî$’YpM>ß]¾ˆÝ>¿ÇA!±€~ª Ø•Ð~t“HgvñšÈŽŽD—Ã\½N£‘æ…¡L_û´ì¾hŒÞñ…ž^ µ.!uŽ/­¦'eõTZê·î‡.ïpž|¨ðWf@úÔ©œQ³]N€ë³ìþÊxxÍØÅ!VÖX8§~˼ßß¼‡„‰&#UÃ:ÅkïÚéè/Q )U{`áMé^\I®—â»»
+_ü¸bé¢vä‘ M+ðL-17ökÞC Õa»°ÜïL5|ÍQLÏEA‰…àEyG("Ò5CÞΠ'èRŒ.Å8P‘úÄŒ®É©iãQA[uxTc<ºNÓeR/ê™]M­HOà}›sú<l‚”ÇáíMç¥uû`ñ¾@Çï|<zC÷yî> ‚ø‚ûN©b=1Í0à +©Ì—”ø*.ήâ ,¥»Tüû÷p*]OÂHû 8¸÷p· 5›<KB!’À¯ê}:q|Y+þä/û'úºþä
endobj
-1846 0 obj <<
+1859 0 obj <<
/Type /Page
-/Contents 1847 0 R
-/Resources 1845 0 R
+/Contents 1860 0 R
+/Resources 1858 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1850 0 R
+/Parent 1847 0 R
>> endobj
-1848 0 obj <<
-/D [1846 0 R /XYZ 56.6929 794.5015 null]
+1861 0 obj <<
+/D [1859 0 R /XYZ 85.0394 794.5015 null]
>> endobj
550 0 obj <<
-/D [1846 0 R /XYZ 56.6929 424.6308 null]
+/D [1859 0 R /XYZ 85.0394 451.7192 null]
>> endobj
-1849 0 obj <<
-/D [1846 0 R /XYZ 56.6929 397.9389 null]
+1862 0 obj <<
+/D [1859 0 R /XYZ 85.0394 424.3056 null]
>> endobj
-1845 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F41 1238 0 R /F21 954 0 R /F14 980 0 R /F48 1258 0 R >>
+1858 0 obj <<
+/Font << /F38 1042 0 R /F42 1238 0 R /F22 957 0 R /F21 954 0 R /F14 980 0 R /F49 1258 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1853 0 obj <<
-/Length 3719
+1865 0 obj <<
+/Length 3767
/Filter /FlateDecode
>>
stream
-xÚ¥[_sÛ8ϧÈÛ9;–Ô?J7³n’ö²³M»iöîæ¶û Èr¬©-y-9iöÓ@€eSron:­)"H
-–x¹¨ÛƱÊHy~šU"®TŠÙê !‹b™í×,ñ9[ï™n´;,%hWÁ„ÿwÙeCãJúikúC¯÷‹Â·fåÏÅšçG&÷Hu~{2 bPøšŠióéÅA8ûs_ì^©I¶i¶uÕp'Î ¢ÞRHÌžpô–ÖkjÜúOóšQ4kj"µ/Ü@ƒâ0›Ú˜©Ûz]æÑ9õ/"æYEG~ƒ}Ióòd_ièL/V ýÃ^1N ¾y¶×˃èp}÷Á€±! W,¼ãyÙ•m[pW–›—Õq¡‘ðY6µÖ”Bg©Ýº»AÍ( ¿PÀ°Ä×À ëb¸.i­Ë¼…F‡í_å5MÃàä‘šåmYWDû""Q·«bG]í
-˜þ'þ|ã¯×·Ÿço¹¹v9käÅqh6Ij@ˆ¤ñ7û¦%ÁQòUÝî&Ø縉õ±ØênbŽœ‚§Ý²cû§b%‡6×z0›cUl8>tqhÔ.«Ž•Ëz½®_X‘bÆ‹ÝßÇòE¬B/Ž 1™m.Þeh©2…fXcáJ¾©…JÂK!&¥v\Çb”Úa<{µªë¦8ÐÊÁÎCÒ±:´ù—öz"™m·E¶ãØöE×´#¯ÛûòÒìm–-z›7jŒ÷Iœ°‰Å5aÃuÚ&SR-›ŠuÛÄû‰±¤½+f¿rʵ²‚ηÖsŸ—ÄŽÍÚz½â3úáÈÓYp\ÏТüz¶¸&ôl¸NëyJª¥çC±n=Ûbç›Zo|[ú“Q§­7„U¶¶9°[û+¼d¶ SµÇy“µAæ!fH“HžEÃ<vˆ¾¯4DÜ ™êóÍ•+t
-l6n'{©ŠO˜©gš°36Ò„HËF2Ý&²d Y_ïÆœû =nvÏQTÓ=˜ìú× «0Á‰GÁ€õmTÑQ’
-óÄ|‡|TCC-kÒ"£µuwõJöu[ôé³Å˜„î¬Ãv‹õy±¾‰ö44e|É [”Lh»{íÄá§Â
-|ßK|%G}¼ž_@žzÀæîJš©Æ>:c(•è#e¾¢„(¶
-”k_c¢h&ŽKÀg„õPüg>ÄMó»«¿Ý=ü$ÇãAy* NàG›k¡ ×i‡š’j9Ô¡X·CÙbG¢ä‡TDl”_ê<[ܸÎÚÌeÄÔSQèŒH/” ý’=í4E¥³v`ˆÀߌ~tÞÅFWMÊvÌ¡ÓH?–•îm de*|Ø7FÚ_wWÍ‹AOvôh/ |ìWbÁ
-¯ ÃL†4Î|ØÔX!0[„'R •çbŠxÂ@ol ýÔ#âœGýˆ6áIm¨¥¡—@°ž›ÎL·ÊÆ…}°3ìÁ49 `Ó(AÈÈ-Tæ¥a8AJ³ÏWÌÒÐ+?xÅ·l³]^^o°ð‘å¶%ž’yÈFý[гd E§-ì­ˆàŽto¢£/[}¨Q&4 ­ÜÖ|¥å8ÈÁ#¡=h0ÈSÆÔÛu–묦ºã‘=&—Ž±‰˜ ­¥L™\ÉÙv¿Û¦£H Ïõô
-^h6ÜQÓ/£’‘Mër¦þÝÂÓäÑ¢_ª©¤3šJ@:#ˆ²“©ÄæO%×ÉT2)µO%Gb‡8™SÉ@ìûÛÞ¸NÐAì%¢û¸ É^ͽ„°+³2§\Þ)œÆ÷¦òZìz4ÐeùþjSìα‹(OÇÍ1ƒD8ºÊ ׄA ×iƒLIµ r(Öm[ìôÅm bc“ÿ ætùÛ÷cÇí+0hÿ‡Nm:xÆ}Iˆd0 <#Ê ¯|©y\³Q¸Êž 3^¥ñ£ð9þúÑ0Ýê€c&>ˆ7zJ ×gý$aD¨}MD•á·ËÍØ}p‘¯‡«¹K×øppšPunÎBŽ5¦§¥U€#uÅD “Ï'(±ÁÔ¹p¦ækïþ4ÔþÌ7âͪޯ™…îV©ÍW«oèéÑ|øÀWì<+&
- Á&oÈ°»¹G¼mfÇ-Š~V`NóIŸtóâÒH‹*w]¼|¿¬÷Õbp+<=%ì´PÈ÷Ž6×øfí¸NnÖI©ýf=ëܬ±§@6B‚ã ).¼G‰åÊõÝûs„®Þò«ÜAöL:Ÿ° Hïê—#›{³Ä‰F&E_¥â%ïa^Ë°`ÿh®›<Ò×T&„—».Ù§1Nú.ëÕ¾¢«Û"oOVÆ–ÄËYå±èŽ“žx?:}/N¼$>uÅgsMøžá:í{SR-ß;ëö=[ìw—¿{¿Æ£ÏAà’ÎÏK¶R'°GæS—2žŸ'³Í5¡oÃuZßSR-}ŠuëÛû=Åa%„ѺÁDÍè-µ«¶ÛÃy§Jáð ¤R'TjqM¨ÔpVé”TK¥‡bÝ*µÅZW,\ÌwœcRO"6ú_¶¿4šôëÌšÌ|HÓ-~ߦ{s>úv³¥ã¼CŸ³P7"Ô&±Î©o_©@È_£â·—Jrí5ŒûÓ+òt÷SºÎX1GEÏzÙºÔØ×cDëÒ¼BçêêhMÝvâÐ`ªe~¥~*A„]ÎØïÖ‘„‡ûëŸ$Ä°çacb}jë+>YUÃøåPM½üÙ°¾ƒÇŸî#&hßJÓÆõé*]³i³ûݵOš±Fx.‹êà]§»\·?°½ƒîKÈ­ö¹¸4ß4ã=ºÃ%é…±JGx ‚Ð
-¿«¸ à0=;£`Gí©„mº9h˜NÎ^ÿ"Q— ^ʆ_ÈëªÍÈßO <µ?ÞæñêÊŒË/ßÚbW›¼’˜gÄúM©¡
->ëmìX’wlÚ• Þ—–#/t9yðÿû$XwuÊ ’däÓ8°”—ø©2“ÂE%ÑáÌ»ÿºp<õÿîàaYendstream
+xÚ¥]sã6î=¿"oçtj©oÝL¼Iv/nv›Mïn®íƒ"Ó±fmɵädÓ_
+ƒÀ@6_.~¶^=tP~Rx~ûôý!F™~ ø¸VWó gÔþšû+™ÎT³««†;Ë£Y±VÅWµ$`þœ—UÓòÇfC‡Ïÿm¾‡fÍšš@í+7ê=‘ÙÖÄ‚ »zS=Öõ/yE'ÑîËçgE¸<™§7"£J@.s)½,Š|½HwA ê8U«"?èåfoî¿`#è!6"æ 3·8¯û²mwå…™qY=V[ÓoÞʶ֒H]1W»nKÔPù…È^D7j|]fÚf8SUQÓ4|PN¡yÑ–uE°ßD$êv òÓ]í€8X‹t¬EÆ)˜0Ьnî¾,Þýt{Ø=»Š¼83F$N 0‘D{À•#c” BŠuݨ
+F8{¼ÊÄŒôÙZm'¦pb<íVËdîû—ĉ4²!Ï å h¿¥-µrcxøAó vYYTj¬êͦ~eAŠ3WûŒîyyIš†>ÎÁÒ[T†Ž( ;3vháJ~29fš
+?0? f29lôâñs¥7+’Õ{ HO 0ÓwÝÐ3°Ö…9ŠU¬ZÑ×)L)ø2ðQ µœHŒªÖÝÕ5Ú·:êÓYÄõ­P»–ÈÚÅú¼Xßxw"M§21,r¦¸Ú›Hsšþ¡Ù]É’òX‘égN.ָײXS~ë,Së¹N˜ú®SLj2š 0“§ÜÿçæÓÇÅÝý@B^&³”ûÛZGJ,\R½Oo½ðéº ¼^×]$Mæõ¬Ú>¥~¨[×ܽ¬·¹ Ë0kótV5¦Bá{2'4Ø!Q #Mêï ÇN}G‡µçp\àqÑ PH+@q$@èÒF€ÏïͲÈíΔ¶ÞÍ7êEmÁʺP¦ßyœªâ²SE‰G»rÈžRàû^ê'&5¾ÿt³¸‚êÿY ØS˜x¾ˆ£^‚Œ>T¢m”ÅšN¢ ž‚dhOcµA5gÒ¢£g„+ügÑ÷ן~¹üAŽú‚0ñ=?ò'Šu.Ö¸)Y¬)[:ËÔÓ ÓAkê1ñ) Š˜UòS]äŠ2nò6Raæ%Qè÷THʆ~Iä4ªÒ‡v cÀßœ~ôq‹ [1Ê÷Œ¡Ž–sÊ»ñsFáÇ¡1ŒPûº»j^MÐäú}Ì:½ Ó¾…ýL(:A'36ŽÏ0„ñ™‡M"fãaƒÂˆÌ‰Ês1…:allõ­Ô#à‚©áNDð¤¶ÔÒ—À¼0KT˜n&†"è »
+šìN°éº“ ä€-LÌ ¾3AHs(ÖŒÒÐï<õ-ßî6Ê+ê-Á¯Üµ„S2é¨=+æ ¬´°·"üžiôÖD¥
+“a³iò7s§®kÉB¬LFË;„遼©ªª}س½»´G»rì’ÉÓþrD°c¼$ô'2dk\kJg™Zeœ0ÔFéù Ù ‰MýÂœzàiì©íûñÀ­* h«‡N­8øÆÝHÛ€¤.€BHFW*UùÚ?3]³=¸Î±ªIô*3
+Ÿ½®õYífhâG°žRÊ¥X?M9Šˆ ‘ú†€Úï=‘±ûè‚^“«¹KWôpt¹™êB*Ä´$±4˜ž–R²¥C
+ÝšR›/M¿§¯'ó ¯Î™ &
+MèMÞŽ¡½‘ÇÛÌSÍŠ~Ö NóT€³ÛBÍݧªŠ¡+Ó¯êCµìÝ÷ŽúL?Hñ²gâNÑÅ:³U ÖäV=Ç´ÛªÇL‡·ªËt*°Æ0 NŽ·k”p…=JËH†^C°5Ghè-åÒfj-ÂM9në”#„Í}XêƆ'yÞD…sÞÁ¼–~
+þd.’9`Œ(“g÷]îíkLƤ˜R§˜oîÕ[ݪ¢¬„­—O”'eH žy7ZžHA1ÑD!ÜÅ:cykÒòÎ1í,ï˜é°å¹L'‹ÜÙ‰Õ cu‚õ“GG’>™W¬#Ë°‹ÅÏ];ÈLxYšœ¶ƒ4.kƒ4%ês­¤9
+ÚåøWJÀ‰FÚ&
+jF*¸]à>(Ê$ð„˜ªÿ»Xg„i°&¥yŽi'Îc¦Ãòt™:×'\°ÈW2O†~ú—,Ø}5tÖšsã\ró,¦sT<Þu æœâÚÙRÚ>ÀŒó))BO„YØ¿¢|÷FeÀ¥Zå‡ ìA"¹ÂÆ]–Š8öîIW+ƨè[/[»êbŒ±Ã¦4CêjÃÜtõºÿ°uàÐD5T±üJýTjí9qØ7::Gn~˜pV9PLÍâð#á  :_vÏÔKED__°ã}’íÌ´r}º'×hZí¾½öI2…—R½Rï9Ý5tÃOjí›Æ=­öEÍIl8¬ªLl9Œ“´—ªë°7
+ ÎÀOú¡àJåí¡+sñXĘ㮂q¹'ÖLz‡ Ì#„j3D½¸C†Z*Ap\Sñ=Á4: C(׫âY}h](Þ_@f2¥V±©<„Ç&œî¨žQ°¡ÁQTóÁ6Ý4ŒÀF'g¯ñ"P—^ˆuÕæd ž´^òÍA1½º2ty°úÖª}fòFl^J,Y—:<Áo½–ÀåâÞ=š6%ðöƒ |û
+Á%ÐÌÙÓa²Lð²Äìiĵ»UØÝ
+hdvn™.=YÎLý6oÓ2#¶TIµ=¨cÿÐÞðè–äÈ ³­jsºgÁênö›O?s©À/v¬ê*.ÛU5A컆dàm7"vIÖ_òrÓ•W†noªnI1¤ ž„]…²†Ô£¬ðvÁüò4¡Wϸö,Œìãèù7AÜ7ÚH‹œ~A®7´î°.Íy/Ø÷âÖ¥ám`óx!ä«°UòÀœ~ÈWa‹¯Ìt×€¯Ê/I­ÓyÚ«üë|Y5*FKR‘‡S0phÃÿ¬÷ÿûOÜ«b/HÓ‘Çg~’za
+DxR¸†4=™¹ù‡Ó©ÿ¼0s×endstream
endobj
-1852 0 obj <<
+1864 0 obj <<
/Type /Page
-/Contents 1853 0 R
-/Resources 1851 0 R
+/Contents 1865 0 R
+/Resources 1863 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1850 0 R
+/Parent 1847 0 R
>> endobj
-1854 0 obj <<
-/D [1852 0 R /XYZ 85.0394 794.5015 null]
+1866 0 obj <<
+/D [1864 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-1851 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F48 1258 0 R /F21 954 0 R /F14 980 0 R >>
+1863 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F14 980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1857 0 obj <<
-/Length 2379
+1869 0 obj <<
+/Length 2366
/Filter /FlateDecode
>>
stream
-xÚ¥YmoÛ8þž_a,î
-½¼eînËpUA"d ‹$¨s8 %ÅÈ·7ÂpöÅ–›Âå!ôë5ÊünÍp#}žsF#gˆk7­m³2«Z²=úJi‘à‰{°ô–wH¯‹i‡Ç¿éCû-¶¾»µi‘7íw¯©ÿûëßzG ·€­Òc…yÿ_ÔQ‰Un7<RڦͶ¬é*/º Dyd
-ìÝõƒÇѶ3¾‚5^ÿþg,%ÝhgÎTLç"±ó qIŠKËwcéôw¨Î´á›ëñ½¿>›½w}³ÔÇ5õÊ»­`8‰%B‡ðÜ”,}ÍßÇ´ŸRC­]1€kË@‹ :Â2+R.LÛsÇMî 7ûñ§«Ù‡ j‘¶Å&mK„$ßr¸l×ÀêÃMƒ¶ÆJ£3DPÍâ˜W-–F‘Ï[?6ꇪ£¡GqèM²¥ú’Ö¥Í+Áç)íÃœ3RX¢«A½ilËÕ?ϯ?Ì.¯Ì UUcu :P½hçßD
-eT óDèÐMûÞ …"‰ãh2 ƒ&hq}>[ÌžèàÉ$*ràè¨?P$B{f¬TÇøœ˜ýÛ,Í!>-û•Ã`éó
-ª–0
-ùMÇÝï€EfÛ]ï„€ŸbżØ¾ƒB—ŸUÝ=¥-9œ 'õ&wÕµ›@À ÔÞ—úÒ(Ǿby^VájÞv;ö
-ºƒÖã×Ç0‚Bj½ƒÄe ‡„²ì¡]äø@ô̯
+xÚ¥ksÛ6ò»…¦Ó›‘;!B
+þXKiöœ‘ÀM âÅc].ÿ}~õavqy Îˆ«Ê*19 í©Ž´µo,…²—¾¡§}»í'»ä‹8 ƒÉ
+§ sŒzMî9åa©}¾?4ÂÅõ³GC›Õf,
+ yPÖ鎑×ç½Táˈ†é×Uºm:0ÇûH„D‚“0²íEÚa$ݵòéV÷ïGØA\\Þœ÷G¦½D úW¦;ƒêa¬ ó²N¨ô–ÑßÑÊ‹Ä·oð¤ÂÌåý¨×à l>º'”vEò+…ªW¨  ~¦YcAµ¶áó:ÝÝã¡c8ïÁ‘…)WXª8žÎÍjêïÓ»=U© A¹°·õ Óh UóUÜá}Ùg¼ T  a«Ó^˜1Y²ZQŽj,¾+ËBL’dX›™œæxÜššñóªú¼ßÖ´é6]WíËn¥×%ˆa†°ÛÅÆ<
+Vš]vw ̤mµð‚!ॊ§/Ñ&@7×\^€óåŘ‹Fiûâ€OS5踆I>
+ugÁL9ÂÂ÷…Ò‘îÜÇ~ñ°yÇþ¡_¨cù”·‚ºÝ Û¾pµSLw(÷Yú0NGûq4HMÛËÁZD»œ$Zyp»`s-«ñm¡  HÓ-¯˜}³© ñ!©ïSZ¥¬ÀŘ
endobj
-1856 0 obj <<
+1868 0 obj <<
/Type /Page
-/Contents 1857 0 R
-/Resources 1855 0 R
+/Contents 1869 0 R
+/Resources 1867 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1850 0 R
+/Parent 1847 0 R
>> endobj
-1858 0 obj <<
-/D [1856 0 R /XYZ 56.6929 794.5015 null]
+1870 0 obj <<
+/D [1868 0 R /XYZ 85.0394 794.5015 null]
>> endobj
554 0 obj <<
-/D [1856 0 R /XYZ 56.6929 118.8789 null]
+/D [1868 0 R /XYZ 85.0394 150.6437 null]
>> endobj
-1859 0 obj <<
-/D [1856 0 R /XYZ 56.6929 93.1819 null]
+1871 0 obj <<
+/D [1868 0 R /XYZ 85.0394 124.4157 null]
>> endobj
-1855 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F41 1238 0 R /F48 1258 0 R >>
+1867 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R /F49 1258 0 R /F40 1178 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1862 0 obj <<
-/Length 4313
+1874 0 obj <<
+/Length 4292
/Filter /FlateDecode
>>
stream
-xÚµksÛ6ò»…¿<ñð øèÍ}H§u§yœíÞÝLÛ”ÛS¤*RvÜ_»Ø JT“Nç&ãX
-†Ü¼¿ýÄmÃ$PAÑØUM5^’­°K âoJ*| bçñŒ¼ÊxžíŠ*+âŠçn‚¥(úpš­-úYá±e=áŒßö¶ó|÷À¼Ó.•-¬¿qz@ŠÅlCðm nUÛWT]×m7ð×/JÅíÖ6ø gÄt‚JÅß•í{PNà 0Öë‘Á…vêJNÐô©ώJ}pkZBYõ¼*€;þãö¾}t[ƒêjòtëÖ þP›ÅeáŽ^ ]ݬª¦`U‹èîèÚx\f(™3çAÇ/S>q*?8Æ‚·µÍÚnû½C
-õb½n÷¾3=”l±s<Š=h<Êm…6Þò,Í~³²;*“’ìqx°…£y¡bgaîÏ_ˆÅk‚±¦ö:á´FŽ+KÀ­f\H‚}@…¼н R¼ˆáÀ}oÂÊø&Ê
- ý˜X5YÍh^HÿC3‚ÈïAëâŒÁØëi÷G†O[£E´«ðòÐÁ:""ïëzÆ2±ÅQ›Ñ|ÎÛ2/ ±ëvýÈmÃä
-Vqع¡ï]Àvº#Ø~Æ++A7(sÁÅ l§cð(Ö&öÏ©±ŒÃAØZtô ®1v]vÛ‚««ȇFULŽr{¬_Ô<˜ˆ`àæW»Ks-@û5þ^v±r{¦¸”cþŒÂPõše£XfyxŸÎ§©‰ŒeoÚ) "¯Ù ‰
-f#PEéW+OŸVžÌ¿ÞU•:¤Ó‰h™Xš‰´n˜xHalÂEˆ»ãòëÀX7ÔGnž«º\³²ò1žÂð]géA†tG(GiœC-‘¿í •žmˆŠ,
-ð-AÕ
-|E„£×Ãħø?Ôƒ€˜DþåâÛF6Üc2¯Î„÷Þݬ }§ÌÀ!æp Ǹ¡TMǪæ0°ùgÜ|6^{ïÂ\/§ìF¾ùK C;Š÷¾
-³ûºœwgØ÷)Øiz¨U'hÜÕZ8˜3:fãýkp¶Ò÷(™œ*†]… »Ž^tê$oX@2IšÇiàœ±{› 9rÞ=8ÄIj7=2ièƒa{AŸ!Çž9N˜Æ­”ãŒé•ÇâäxR¾ÃxÌƳÚÌL/nlßs¶þÐsIt§‰W
-]]mçTGeép;p S)?•G+DgØéÑ‘6&™Òk]pZ 4ˆÏî`Þ—Md˜ >N º€TŸç ¦iゕֆ¹êƒÙëÁë°4k€ª«~?BƒË
-ã)÷kË€»a3Íš2×è³{{Ž=º–¾è”SÉYdøºGx;¦Ü/ô­šÅÃÛÚ’¢´ãü£Ü
-ôÒ¡yNæÆ%=~ဠ(¨#½…khz{χ
-#}}6¿Ç/«¼gŸËÚ‚{ÿ¢I>røèà>¿£nÝIçNæ:"ý²Õ:KCçæ¯F;A'ŽoÃ(R/ƒ7·¶ Ÿy¹mvÔrvÔr1cI•„ÆÉQº{ð9P2}|xõEwðrÌR´–5œ(œ£Á6†8Ñ x#âÉ#VìÂ~Îà䄈cÓ:°Plù‘Òg¾$ QXÄ‹±+øWXÞ =íçµµŸóHg‰{"îÃ…¿m»e·.j;÷#‰D’ªƒ8@k—ãÅŸ20©GN™ÿg¨óÕ܃ìȨ$ý+Ñ„/bõÙ’¯
-¥$‘R™u4Ÿ)[
-w&Ñù2Þ$âlÈè{ÇÊ%ËÆŒa<½W¨œÐç±ãX§jOýtA›o0óCøããúË?kó+d™šÿÅ‚Jf
-|~^î;KW>üþáxéÿÊÉ€¯endstream
+xÚ¥]sÜ6îÝ¿Âo'ÏØ*I‰úhçÜØnÓiœœíÞÝLÛ튶5ÑJ›•Öýõ Díjëô:‡$H‚$ˆ/Zy,àŸ<ÖI˜ä*?Nó8ÔBêãåêH?@ßG’Çœ¹Agþ¨ï¹Š²ã<Ì•ßÝ{¸²Pd™<¾+ ’P…'€Aï>^_½ÿá—›ó“4îÞ¼>9SZWᄂÚ7ç>œßœœÉLËàÝçŸî.o¨+aß¿¿¾ HNŤ7—W—7—×ï.O~¿ûéèòn8‹^)"<È—£_Ç%û§#Fy¦Ÿ¡!B™çêxuë(Ôq9H}t{ô¯¡×k§ÎÒOŠPE‰š! RsÔy˜D*²ÜœÈ,0¿ ™e_µ 0‰‚Ò4UQc=Ú{*;³y:‘Aµ4ÔþMhqÑÞB! PôÐÝËÏ3ß>¶›žúúÍIl›eÑ›’–Àéwïþ)Çù´•nÝ6éhвh¨oaЙÆal ²¶ÓÚ§ªä}m`3¼ Î™”a®µ²G­«UEËK½·˜dŒÐU›‡ª¯V€†Ú˺‚UyÐsÕ?V uÚ͵´‚ò¾µøLy
+
+Y¼ú=ýæµj‚'§Ú/Ÿ¦ˆÇ®»wŸ¦˜‘«žLýz"¥ Âá°bF§¸{¬¶™
+VfùX4U·¢¦WMošÒn9“–´\l{௪/p]\ßRyÕl¤±H‚÷=A‰›
+Úk][>¥1M‰:ëxIµbt°aä4¬–æ¾ØÖ=/ŠÆK©©¤ ê@£(#µ†`«"±²`„0jÖ˜"s<l™`hê¬
+”‡l;sèCp§Ì»ú‹Œ Ø$v6x<l
+Uœy‹&{Q’´2¯¯0M³lÊÜ–Iàu |Ôœ™ÕºG]­Ô.Ïàˆ{ÒhÙºÕ9jÈ’ZäC2®‚´*=¿`“N˜‹†g°¿Hê‘aýëÚÐ0;›nfä[â‰fûšrŽ£ «jsÚ4…SÐ
+\ÏýÛMb¨J'BM[}ñöÍfI˜ùÜ¿×cž†:‰ò¿Î=y¦‰JÇE$Ûæzα ,úYá·&@¬
+(Òƒ_ÿ÷âã‡ó÷×Ô2òþ6èϪ(ç G¾ã ߪ¸§Üço’¸oF ±¼–¡©± š{,‹1Ô„=³\"Á#Kòá›:õר
+ ¢ú²J2e:pÕѱ`fϯ“ŽNÝ¡ïKî †ù`vdÉÁìàÞÛô¤‰3  •Ös0ªvû*I9Ø‚@z•ÀHû*
+¬k‰
+fCPEéW+OVžÌ¿¾U•šòïÁ D2Ô±Ôi!<ÜÁR´P6Hܘ ‡_À¸¡.xó\Õå’•• ó †bt¥»éÓ¡¨±µDþ6¯T{6>*²
+v½èÔJÞ°ÄOÒ~Š©{› 9rÎÝÃIv7Ý3©ïƒaAÅfÏ'LãÀVÊqÆÖdÏÒxz=)¿afíXmf·¦· 9ã¹$Q§‰S
+]]­çTGféð:° K)·”G+DkØé‰ÂHëdÊË‚3c A\‚S¿l"ýtð~fÐìä šø~8g0ͬ´VôÆœMWï|3°“À¼C«z¨ºêÃY4x¬0žr»4 ¸Ó,)y>»³ç8¢k©D§œjÖ"C‰.‹Qú—'º^ Íâå­MIQÚqýQn
+hçGÄ»(£=Sæ­é{ÐiÏ»àžÚŸ²Oú-÷P½¡Ïü¶K ù%öµ\ÇÄÕ¢ îÝå·ø)øU“Lw²ŸÖJßÚ%š6Xî|\“è1J
+‚ïð%†rZê)8ä4ý´Ä›ƒþ'K> '“(öd•ŒìpbEÞ,ù€ñÍ~º!—Úc¢œ½:pÞ¡|ªà1@@’T²QÇüÜCC5 zµ¡êmco6UÓ¦€ƒ}{ùŽÀô …
+½òS5=¹[ñÄj;^T ‹Ú‡;OŠ¯{@1{e|xô½•ä4°ý"^“Š^XX’À ÷%ÿù
+ô¥C;ó9…Ÿ—ôý Õð‚ÚÓ[¸‡¦7|©0ÓåÑwÃþJ.<Ï>—Ú‚÷Qt’|ä6ðÑÁ{~CúƒÎÌ£Pˆôm«+¢,õ;XCžŽv‚n?£H=™¬³1
+”‹ýÜ6;j9;j¹˜±¤JÂãdçI[Œ^ J¦ßî‚F}Ñí|<f(ZKß5œ(œ£Þ1†8Ñ x#âÉw¬8„ýœÁÉÝ 7Æ"¦}`¥XówJ/üH@ '¢°Šc[q_i`}3Œ4/Kc0>çÎ:“,Ô™ráÂ/ëî¬[µ™û# E’ª8@G6Æ›?d`RŽœÒ1Ô©þJ¨ótfYj•¤'šð&V—-ùªPJ*•¹¯Žæ3å`KáÍä" :oãMÒ0ΆŒ¾s¬l²lÌÆÓw…Ê#úZ-ÝG0–uªÖE‹u˜H•N¯‚¼A–+çÛ͌ŞÑ+%?õP@J"Z9duþ”ñ4hš8ógÝU9%ÈjÑoGßÖ}<†ËW½Õóèñš{ãœaP`9)68J'"VÁ&A¼+fN©“0ÓxªvÖôi¦…´b
+)÷Ï ¦* @/|‡¤W‡#r4†ÍðS&AæÚã';º ¢o{¯O‡ä5Vù»›”2ÛXJ_¤¹a•é¾ñ—fËœY-~à'‘ñw3?€?fŸ¿ýóƒñ·1h‰,Só¿,€­‚4
endobj
-1861 0 obj <<
+1873 0 obj <<
/Type /Page
-/Contents 1862 0 R
-/Resources 1860 0 R
+/Contents 1874 0 R
+/Resources 1872 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1850 0 R
+/Parent 1876 0 R
>> endobj
-1863 0 obj <<
-/D [1861 0 R /XYZ 85.0394 794.5015 null]
+1875 0 obj <<
+/D [1873 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-1860 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F39 1178 0 R /F21 954 0 R >>
+1872 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1866 0 obj <<
-/Length 3536
+1879 0 obj <<
+/Length 3386
/Filter /FlateDecode
>>
stream
-xÚµkoÛFò»…¿]XÌ>¸| ‡ÜÄÉ¥¨ÓÔQpR£ ¥•Ì Eª$eÇ÷øï7³3K‘2ÝØÎþÀåîììÌì¼Ey,à_›8Œ3•'Y!Íñbs$Ž×°öæH2ÌÌ͆P?Ì^¼ÖÉqf±Šç«®4i*çËOAªð0ˆàåÏï^¿}óñòì$‰‚ùÛŸßÌ”Áë·?ÓèÍåÙÅÅÙåÉL¦F/ÿ~ö~~~IK1ãøáí»W4“Ñ㤗ç¯Ï/Ïß½<?¹šÿxt>ïyò+…FFþ8út%Ž—ÀöG"ÔYjŽïàE„2ËÔñæ(2:4‘Ö~¦<úpôKp°ê¶NÊOŠPéXMP©)š,ŒµÒN€õêd¦…º‹,vMs"ÓÀV­4yÇK]½‡Æ½ —R†™T …ˆÿض³v‘—tHIdB¡£”!oórgá¢X󛢥ÃV6ïvD ºÈ+>¾Xßt¶"°¥]Ùªµ---wMQ­iœw]¾øÜ:Ä*x]74m¿ä›Òt<“ ‘,J Œ€tc”#g[ÚS¸æÔwEw3Áh¤B!eü€Ï™JÒ
-R¯!<Î(Êp¥š´ 1;SÏrI¨âÞ÷q
-éNè9€cóò.¿g¢–dÊÛ­]bj±ö‘4Wi“ùØSÛ)퇘ezXûÐ17îþàl—2ÁÄ>Fƒ¸{6)…IªÓ ¼!¡Ï é«ò1*ÛŒäwÙÞÔ»o%6äÎñ~;z/mÞ2XD3 ,¶ê%
-nd+ÁÜÒ*3fŒ–*ëâ/Œòå²À£°‚Æwbgþ <¼ø•ó_çØúá7úþ5 JÂfã“ÔÃûñì¸Üλ^Ä9¿x?aß) û|æ‚t _7pÃÖ+ÂÈô=ÿhF÷"ûÇI¦{Mû¯IKîZ&ÄôQ³çjkÁ–åýp®­Ë[{@8G vNFïVóŽ»,Ð%ÉAšÜ{Û4‡31U°ò÷ùÅOĦ;=ì5ŞϿN%2a¥Þ+¾½x3E‰P§Ú»º¿M¦*àBO²º|ÝYD^ìÌ^·`µáT–†2K}@8{JxJD(÷Þ¼àóZp†è>Ý¡.‰Iº€4ñé,Œé,
-uÅýç29™áo‚£„ãÃà‡üv
-ÙLÓ”ûo’þ?þ§endstream
+xÚµkoÛFò»…¾\˜Ì>¸| ‡ÜÄNSÔi꨸iPÐ%óB‘,IÙQïî¿ßÌÎ,EÊtâ4¸äwggggfç¹–œ ø/g±ñ…N‚Y”¾ÒÌ–Û1ÛÀÚËÉ8žCò†Xß-Nž]êx–øI¨ÂÙb= û"Žål±z7þýù›ÅÅõ©§Œ˜‡þ©gB1ÿîÕëIèóü§×—¯^þr}~óÅ«Ÿ^øúâòâúâõó‹SOÆFÂ~ÅÙpùêÇ ½¼>¿º:¿>}¿øáäbÑË2”W
+‚üqò­@ìN„¯“ØÌîa"|™$j¶= ŒöM µƒ'oO~î VíÖ)ýû&VÑ„•šR IüP+møÇ.kò¬=õt`æëæTÆój‹³pž_¼~Ke‘geÇÈy¹,v«¼ÜÐô.O iñüÍ©TÉüŒàÝmVÒŒ”­ñ˜u¶ìò;Ùƒ³¶®Ê6kŸµÙ²*W´«È·yGHË۴ܯ@­Båƒ<)ýÄeÅùM÷óL
+!`,¿QÐE0¯ú¸á ’ókw[‹F$ PèyJÌ´¬Ïò•­hr³cèwYíJFÑÈ/·õ®c R ðö4¬³fJ2§´¾&í2¿GŠýP„!¹CµÝîʼ³7ªàª5}íâ ¿B;IKÜdôÝÀ…0XË&rÏ°:mÒmÖe£ÎeE_ä‹FV;Ö6,ù=ïßuœƒmÊmRøI  „r !nžp‡vìõȬ
+m›¶,¸m^NœJnŸO¹Ë³û ú*ðã0Šé!Ù¶ËÒM¬z#¾GlŠê&-&–òcLµª»¼*'×ÊeV«c5?Ÿ  Þ‡8ž ¹ÀøZ‹’õú²ß”>N93O‡¡ŸD&Û#z]¤Ë¬WW2³o34 ƒF¬m‰dÞî꺰çÀÕ3f:¥¡0ñÑÉ“ |¸!5!n+kx"á{Ø6Í™Ò|
+UIÈ~!†~Ø÷ywKæ3v_i)ÇÒ§äˆVIvD®ëJðÍ>fÛÚz?ΑÕù/¬€-ñT!ÛŠóã@8¢<ÇøC%…±iÒ)iY¤»–£†§âД ÇÑã—oðz‚q4&µtøÚ¤€ƒy¹â5’Vv9ˆ8a±dð˜XJ‚‚#'àa<Žy¢…~'.ZÔ·MŠ¢ÁÆóÅmÎl±–?`æÖwe‘ÈF¬¡f"?Qa2Ž-DJCR:Ðóš®õ._Ù0ëê&LnNË>¸9Í~^Î$ò£P9‡=›
+h¾ úX•5MÕ<lž&¥ìÉ‚‹ƒOö¨£Û ý
+^ÁTk¿· ¸Ë—Ý©œç[·“ÉчOlö¿ ¡±4©JÆêºtùÁ§äüKYdmKè=ùuewn¬ÅÃœè@JoÉ/S¹=?tY#Ô|21ZÈ»¼Þ„—À"³ Xä–Œ= Ƨ[Ô£ó0¶ƒ6@Ä-†ã0>ƒŠÊ·k£4bΖB–¥¾žËVþX`rŸA±¥ öâ#DQ€+å¤÷hHÚ}†{Z€ˆ|JÍ[¸†´'ôÀ±iqŸî™©¹r]g«oÉv:\I°\¥{»n‹¼ž²~HÊAâbÚ]Zì2:æÖÞœmk&
+[¹8·ë·,³¼îˆ&ÑÖ6ª`GáD€1„Ì‚A]mºa0åMѧ‘­#õx
+aÄ •‚džÑ*Ëf‚>5Ø=Vt”™Í¿0JW«J š“È08w_øÇë_y°øu>ÏHxè›K<Ô„!ËÆ/¨Çb9qlmçB/Ò\\½™ðï†}=sEæØ— \ò„÷
+?0}Y
+U¡PÍB¥'44JG$Bú=$4ãPòFØ×U:T 
+ž‡Y¶’_í–¼›C6z¥­¤ñ˜.m:Z%6ƒù†S3róPDöTèÙtg¶ëÌ&/?c6‘oLàr>“„TñÜÐs9MøY8bËU®A„œÃn†Pw×±õ8k
+j~QZðÃZàcEðľ8L»K@ÝTdÁñ¼¨6~ZŽ]&€¬CƒtüH¹­Ê¼«÷"W§P”qŒtÃhãäaêžÚ!V ?Û-o«|ébÔÚ‘í·çøðžGi|ilÒ ½Âµ“mg‚dN! ¯*©hó}6õüg ,Á'>®j*æ £àýà’û?òó³dµãMé²ãŒˆ³¾gî7§åþ±ÈíE‘¯M¢Æüzœñ]8—%\S𠜭èÉôA@róòP~LØ"˜Q}ƒ~ Ô_4tìdÈÊô½÷ô;”¿¡vo?7ûOƒ~54Éàñ:‡âiÙr…uqk¯@„XÔØö)ÆÚ^ÊÓ5§ñ|W.ÓþÉùfÿ©ÇæCen-×iŽf8o"û×dTØÛ"DB0½DÅñ'­Mä^ Ð §RÂE;!&´hh˜ú,Ñ^=kPZd_~Bù: ÈÊð/»2:õðÏ‚£šãíàOøg]0ýmÚå`x68©2~¢¥{^ !ÐËëß¡ëlÞ=«›l,²ò=-üÛÞ£Ò 8qô<ñŽ0nªÍ®¥!8ñïUó;> áô[ú¼ŸJ ¼¹nìó—\7_@Ci4ä¢_JCMÑÀ†÷¯ÒÈVeûWeÀ½ÞnUSê³ W<ñt,º¾Š
+ ¿N¡‘öµù<ŸWæáfþl&²ªŠ&ïÝþ c¤K^@í~ƮɡÈ=þ9SF"œ0§™I[pì‰è$œŽø½„#`V Ô¾‰‚):™'5øþØì æ”&˜de¨©þF¿\Y:ÁßI_Ìé´²ä×+ëé÷u¤,As«IeíÚ̳
+ÃýºªŠ£\÷„Ð9Þïáh”mžgŽHìê?y ¥þ]Z<FkêçmÚøø›´‰£‰^i_ýÓ·Ãï[q¬¦Õ¦EèÇ*‰S(o"9ï#÷õÿÀšendstream
endobj
-1865 0 obj <<
+1878 0 obj <<
/Type /Page
-/Contents 1866 0 R
-/Resources 1864 0 R
+/Contents 1879 0 R
+/Resources 1877 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1850 0 R
+/Parent 1876 0 R
>> endobj
-1867 0 obj <<
-/D [1865 0 R /XYZ 56.6929 794.5015 null]
+1880 0 obj <<
+/D [1878 0 R /XYZ 85.0394 794.5015 null]
>> endobj
558 0 obj <<
-/D [1865 0 R /XYZ 56.6929 336.1901 null]
+/D [1878 0 R /XYZ 85.0394 360.1004 null]
>> endobj
-1868 0 obj <<
-/D [1865 0 R /XYZ 56.6929 310.8606 null]
+1881 0 obj <<
+/D [1878 0 R /XYZ 85.0394 334.771 null]
>> endobj
-1864 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F11 1459 0 R /F41 1238 0 R >>
+1877 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F11 1459 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1871 0 obj <<
-/Length 4025
+1884 0 obj <<
+/Length 3970
/Filter /FlateDecode
>>
stream
-xÚ¥:Ms㸱wÿ
-åªC
-€#IÌâÝeibþ–Ë“™x¶}‹j¦léuöêš–·GYІ@,ÖNI³ÈZh\xRsZÓ “(:Xá¦ÊÐx‹¥R>›×Ñj_7ƒÖf&õ7à§Ñ„Ç
-¬ nm8£n–øc O«¿?¹³r‰?J:n29Û|/‘%Òfò?Ýk`w¶ n‰›
-,P1ºm¹+úC×&Ñðx­×~г0Ó«KÓSc[µd}¯{@EUYîy €±õÇ~°…ØFóŠÿû걪÷Ônz^_lyƒ¢+s¹[‹óç8³êè¿`,÷;çæSu8P‹]È£×D»ëÏ wç©M¥scÈ@æ ) )T¯½"õæÎC˜=Ô`¢–x·¨Rˤ†ï‡h\¼E‘çaVÕ.`¿-¢ý‰â)'"“@KÍl·ƒ  ÔÓ[\¶Ý2M²,Š÷éÜ<‚M\W_vK‚§á`¹»·†vn[vè-WÇŠô@O¥çºïx½WÆ®Íc1„ ¡
-ƒW™
-„N@afQäGMµáö ]ùû(óÐ*ÉŠ[ÅÁ&κo|Q `l±}›dÞõÐL8IuäÍ’Š‚ÁšŽû})Ž7+¦ˆl•U‘D¾Æ¹ª RŽéÿß÷ûýeVÞÜœ‹ö!äWÁÎlšóùÆ®úSǘî±]£ãC‹™3ÂÖú·Å6Á•Ûº}¡ª’EyŒ/¯ qfðC:#,'
-A0æ‚Zì|ÐèÈ´`âHº²X
-$-„j‘œq@¼Bøˆ|yy{|(ßÌà¯L,!K,jÓðSÂÁÁ½lª®œ‡{Ñ‚c„ãÂIÑ~‚È¿^̬ð+oF»`EŽÅ—¯ê7?ýÍô;uA¿Ej0袿TÇþH`HSVv/[ÿ¶Fë‡ §å™ˆL›×õ95QëYî=Uµ/3[;UÆ4(#W\ÁÈY9ÏãÅJI**%¿´€T!¬¢«(EÅA’\‡.
-¼_Þ#Ø¥…„:®š¾WzcÊÎâv1]ÇfúÛ632Im|ö¡Kê¨Â‚^hú9„’Ù µó‹ÿbçÑFDJQðÖÏ÷3
-4;Ë&~~ñ‰Ì$ÊEþÞ¼q ïÛøý"…¨ÜÌÞxîËYÚ8#b–DõÖçtd`3•´c4i¨öÚ
-âÄ4Ká‡yXs¿ ܧ8Œ21šJ ôW4ÊüÅvÅõ‘g‰}G‚:
-(ÌEÎ;9üYúÆ[i|ŽY²iüìù¿þþ{ø8>ƒxÎZ¹lN0¡¶Ò™@ʺ9åñCñç¤ÿ?ÿ4mPendstream
+xÚ¥:[sÛºÑïþ~”g"‚¦Oé9É©;_sÚħ—iû@K”Ì/©Š”u¦ÿ½»Øx18íèAà\ì.öÊk?ym²$sÊ]ç.MŒæzs¸×{˜ûéJòšuX´¯úÍÝÕ¯Þk{í—©ìún7Âea­¼¾Ûþm•%*¹ bõÃÏÞßþôËÇ·7yºº»ýùÃÍZ±zûïhôÓÇ·¿ÿýÛ7ki\ýðÛ·¸{÷‘¦2Æñ›Û?ÄÑß H?¾{ÿîã»?¼»ùÇÝï®ÞÝE^ÆüJ¡‘‘^ýíâz lÿîJ$ÚYsý"‘ΩëÃUjtbR­¤¾útõLjp4ë_]”Ÿ‰Ò™Z`ª–h\’i¥½
+øÊA„¼lD›«-ÑVvô¸y(NŦ/OU×Wö-ýß—ô_t]»©
+ß-·obVýC‰"×Êo
+œ nƒØpEÓ.É'ÏÁwB€ù¶|2gÕ’|´Ì‰7ÜdÂÛ|/™&ʦê¿ÝkAàv¶ îHšøO9Uºm¹+Îuß%Ñïx«7~Ò‹05«K{¦Á¶êÈ;ú§þ U§™—1
+þÔ[¯ÞÝy‹‡‹úñnѤlbÀ®ù|ˆÆÅS”YVUÝ&Û2úŸ¨žj¢2 ŒôÌw;X
+!(x¶¼¼_ήr“iÜ+M•ÑÁžÛ#§@€½j†]ˆ
+Á–óøß×í=Zƒ‡ùW;z¸³ýÌhä# IFkðdn–ÆìT‹‰]Œ//f•©Õ!ÊÈ\^dÛ$nЉ˜o[Ež‰Ý’²rpK8ɲÁ-!lbÀÊ n ×y®,Õ¸–ZY”Ǫ±yÓ[‹VÇš
+g¦R#¤òlªÇfµ#k;ð$i³ ŽaSÅ63>˜fX7xT´L›±ef¬­þÍþÍX>0´fÛÝ@ÂgLU Zß>6›™gÚ
+Ø+vßsBNäôTLD—2A‡UF: ¨Ã‹: A‡%!8OÙB
+†ôµ\°ZÝö=^Uw-#e:È«©Œ¬L™@aˆ*3 ç}C`µ›!ðʉ'ùf©¬8aeÃùDu ¦0!c‰b r‘ι±UѳNÃÃ.ÌS"‡#$zfª”DÜþå=¶†t:‹aàÈÕĄ̂šNN˜Þò4©®;í‰gÄÌÀŠsß ˆÓ¤Â;]íÈÏÃè¾ðÂíûP$4¼ BܵA˜
+~(g¤åB
+þ=çÇž_kéŸ7ÉWï~üð‰ß "Cb/çp87àô¼‡¦ ˜BAif1{®c§?IŒ˜öZ_.hkO™å‰P2ýŽ#”Ÿ¨Ì<¹¯*?U4I<¤õy{\wÕ¿–zâ@’ÍÒûÛŒ¡FË£lôËàUˆÖ¸g‰FGb ¢ê+ê—Àóýe‰\8 Å^©o«.•ö¨U1壜Øm¸p‰(p"::O]𤰔nz˜
+<I6J>”cŠ/Åà?%γšô øÜ´OsUû~þïÕ”,TÎ Ç5¸6±áþâñ‹Ä9M£œY¢ÓÜ>7(ª‡¶’’1T` ÑSK`î7Z=î7bº‰F»#[ç!d#Ø˦ëß,ò! ‡]\À»„O‹—F%&Wf螥Ò7s:Ú%ÒDåÉ vGn£ƒƒ×‰Ìg·Ü‘mÏ~°ñ¹r¸äÜð¥%ÂDä8ÞÕ,x‡#LôÍ…™ZJD2›¤±ª€Ê°£­}YÛèn)óug/3ìåP@Öˆ›ä³ÄÂZ:¼Eõx¾Í
+Tõ€/ã <)(kñÁ_6W`Í6R¨ˆñÓK*\Ê-±! §>å'<Ÿ›-ÐÑ·í–á‚ó'
+¦Nûk|}·V¯GËIÞc.ç8‘€Oe ÚæQÍœ©³$Ï23&äÙg“qÑ×÷†‹% iw.Ùm¶ê‹š¿àÀÛÇ–ÿ)­Í§m›M=W®ÄêÏŒ(÷!<¾Á×kš¯$éÕ¦ÿú.ø©@Ï ñý˜?S GšCš?-Ó`±q³= ”û¦èϱÏbbÓÏ°jÁÿ¾lÊ}%‰çŽÄ`B^B &„“
+€¡PÂ'ŸhùÁñUgXÔ#G”nHH×™ÎWo—®‘¦7”¾5[í«¦]
+ æƉû¦ 3|æPq–?õà÷±!±oÂÜý%ì¡|°c²xõ¶†Ì'$.L$ö§âp€ªÐ?`Ì ³KAΛì^Û$B>»]F¬P¥¶O½ûÀÁá\÷Õ±æ%ˆË,æÕp^„ûò§Q'FKi€ñŠfY¾8®¸Ÿ ³4ÉGÄ‘¢ŽŠš¥Èu'§?KŸckƒ×1K^@įžÿçOµ‡ïØSÈç¬UËþDå/üu
+™rêåá›îç¤ÿ°Tóendstream
endobj
-1870 0 obj <<
+1883 0 obj <<
/Type /Page
-/Contents 1871 0 R
-/Resources 1869 0 R
+/Contents 1884 0 R
+/Resources 1882 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1850 0 R
-/Annots [ 1873 0 R ]
+/Parent 1876 0 R
+/Annots [ 1886 0 R ]
>> endobj
-1873 0 obj <<
+1886 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [116.0003 115.3513 166.1092 127.411]
+/Rect [87.6538 116.0624 137.7628 128.122]
/Subtype /Link
/A << /S /GoTo /D (tsig) >>
>> endobj
-1872 0 obj <<
-/D [1870 0 R /XYZ 85.0394 794.5015 null]
+1885 0 obj <<
+/D [1883 0 R /XYZ 56.6929 794.5015 null]
>> endobj
562 0 obj <<
-/D [1870 0 R /XYZ 85.0394 720.448 null]
+/D [1883 0 R /XYZ 56.6929 730.7358 null]
>> endobj
-1716 0 obj <<
-/D [1870 0 R /XYZ 85.0394 690.2786 null]
+1722 0 obj <<
+/D [1883 0 R /XYZ 56.6929 699.5219 null]
>> endobj
-1869 0 obj <<
-/Font << /F37 1042 0 R /F41 1238 0 R /F21 954 0 R /F22 977 0 R >>
+1882 0 obj <<
+/Font << /F38 1042 0 R /F42 1238 0 R /F21 954 0 R /F22 957 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1876 0 obj <<
-/Length 3738
+1889 0 obj <<
+/Length 3896
/Filter /FlateDecode
>>
stream
-xÚÅksÛÆñ»~¿•ê˜ð½v§3Žc;Nǵ•ig’L"! Ò(Gmóß»{{(Éqf:úÀ{îíîíû >aðÇ'ÚdÆ ?±^ešq=™¯ÏØäæ^ñ¸f–ͺ«¾¸8{üRډϼfrqÕå2æŸ\,~˜šLdç
-²åð==›yÜqÀÅŽälL (P|VP\a\›Á‚‚Y
-Ê;ÞfF›ª¡³WáÓe`Ç›`0§îÅó·Ô¯7ó_‚öC=AQ•Õ5­Éã0q:¾{,PP&Ómh[nI·òc@´T:3bÖ”$!Æ`´ 9k!κ )îÅg®È[~81 ¶bÈTÁ3æ“ÕÆâá,€ôŸ¹6²@³ƒäÑýq,h!ÞÃ¥mƱ}„(eœ2ij(jÉéÇe9_¦•ÃE+×}ŠôÀžëãü4õc‚
-#!8¥C­N¾€õD¡Ohƒê!é=ÉX R€MJ A£rŸÍØ⬠rÈXŽÌq®'ßÅX JœM¥´^d
-,5Ç8QâÄãH;³“Î*Œ?sPà]YÿB$r˜Ì£uG>¯ˆVØ_\@X•îÊ¡É[Ì)ZYÄû<ÜÕSp„ ò¸äº«*^!¯ÔÑzJ°”êŽm—Á?Òl0ÂaàŠ~cªcó§šÖ¥Œ´W¼)P€€ÿÓ‹s/¦š'ƒF»è”ДÅê>­#½sLÌ• kÍüP\ ˆ„µ§-!—`)­ðÉ Æ´J}¶´¶g]CiåÒCòÉíá以UC8t´
-e“›zòdÌIEÁº%HZ£½<*™¼Žd#ÏÍaÌY²ÇGÇk믅»nV½;´R “鋺&¢ÞB¨ª%$sÊ0?L掟¹2o!Óïfv‘0
-úé%+Ð?Ä@°¡ŒƒQ™›]9'Sc˜Oá/™Â
-{Þµ‘áØÍáøö¹üõQêÖ#Ï»HÞ9Ÿ®¨ÓKêl‹ÝºlˆBéSNÒå…50Ôœ¨Q²ÌŠÖMÅjÁÀåzVNÂCh¡ÐS~¶ËMg]#.×CpŒív¢Šƒ˜S@x$Œúãl!Þƒ¤„Û‡°@ô‘ µ–•Pøæ[•€°N’5„Kk8"‚ ª}?).SÜùž’U
-x±6†Vcí?¿ý4Ä”*yØF¨ÄzÎûôá™Xÿ—a$«3¦§¡‰a†^­iú—Ijý­©Æ³î–`?û‘å
- ½Úl®W±ý|™ï‚‡ö³·¯ãÊ Ä„E±£þ"orj‘ÄáÚÔèZPôòë]¾]FH ©XÜÓð_ùMN_xF>I2)K=–űböv»ŠNOg>½S@kQ€›^P;¸AFåhø†Ãïñy,ôƒÌa#Éœà,V™ï†A#&Vxü°¬-l¬Ô
-Pp^ Ói£ïµ±íŽYwËÐÆ!ßicÇ8LdG6ëFãm !TŽO ÅøµÉ˜NkfECó{ é¤?c$ô)U=mµ;‚~(bÕ)¤ÕG¯†:Þ(N¤Å]£.Ò[`ƒã'}¤Ãc¥ûŒ¸ËE¦ ®ô=ä1Ü»/ïF«û"cܸ;o¨]t÷ `ýÎ;¢â
-ÓÅÉ£O…exf4ñÚôPfuW½(’5‡K{®¤%—·é]²ˆ{z˜8žÂYßîÚÊðá³ÞnªE|– ï|°‚ü°_œÜÕìwU|U¥a,²mãËÿ±Eks†«Í¾ZÊqÃwº±é!(Å/àG.–µŸ5|ö‡ö‡ÿB€0I:'Æ¿ñ˜œ;
+xÚÅksÛÆñ»~¿•ê˜ð½v¦3Ž_Qš8®­L;“d2 IhH€! ;j›ÿÞÝÛ; @I®3ÓÑÞsoß»·ñƒ?>s:cÒ«™õ*ÓŒëÙrsÂfW0÷ú„Ç5‹´hÑ_õåùÉãWÒÍ|æ0³óË,—1çøì|õÃüùWÏÞž¿|wºšÍMvºÐ†Í¿<{ó‚F<ý<ÿîÍ«³×ß¿{vjÕüüì»74üîå«—ï^¾yþòtÁæ°_DG6¼:ûæ%µ^¿{öí·ÏÞþtþõÉËóŽ–>½œI$äד~b³ýõ ˤwzö:,ãÞ‹ÙæDi™i%eYŸ¼?ù[°7¶NñOK—i'ì…˜b ö™‘Bž_H,å½¥Üg\ÀfÖ´»¼j.‹Ý)wóESßì–iO¼…wqO^­¦áJÎÍq¸‹f´n›@/×ùMS4 ¥çͶX–—·Ø1óˆ £go?(B<Ò‰[à$<rYÄ%«UèM„ÙÖ4q¡Ái˜Ù‚{‘yÉAW9ϼÖ" tYïN’©ù¿êªÀ–Þ“Æ?–íu¿.hˆNÜÔmÜл°Ôí À\D ÈkËÅúö”s>õTVÎ_Ѩ#hD/Ž áª1ܺXcÉHУù$‘/º]~,-!"á7éGÆD±Ê-1_nÊu¾‹djBrâ#®§ý6É Fúdˆ}²pﲄV€—П¬q2ó61ãô¼"Ôí|Sª¤/LÓ °ÛÈrZ«¢ÍËuóˆ\ISÔ í…ƪh–»rÛ–uEõå”-Iðèd>ÕH­V÷©¶ò0RÁe]V‡¾Q1– 'íÌ
+™Ycz)šÜ]ͨñ®çÖºõ‹þ†±[ÃÅóߣÝ$þ¡cç&³#”Œ0R Pù×nÕ}ˆŒ !"YÔ
+  A¨É Ĉû¼/O¨êÜq‘‡Yq¿ßen
+â´0­É ÓâÓ=®N×õ¸ú7´Ð'ëµ6sL˜‘KÁ+n
+ç
+ÐiËâ·òb]ôçÆÍ–,;››u[nÓ’FãÐ6H¢nëe½nÒ©` N¼¼i)™)0
+ÃMK3K_ „øK;ªv2MQ4´¾:?K­ŽÑÐ.ãoğ¹ƒKK¸!ìãBÙé®n¯ƒÇ…V,(BËÓO`üÕÛrî*У2¶ÖåÅo›µ
+Ÿ=}g ¥%¹C¸Ã  TÝG5ÐeŠ;wXìô1/
+*¦u b˜Ö6–1¶».ÔݳÆÄ5³^§*úàÑÔ§•º@Áu§\Í°$—¸s~y‘ÙîžqL½$„[§Rê¯â6••‹®îw›87¬÷ b>e¯Ro¾x&¹$ë‡ÊåX/ ¸H¥ r¬ä*ÖŠV´5fSŠí€ ÌÁ]&cðÇi8¦1ÐÏãQÑp¨îÁfïï]ªÝŲbWMe³ÿøö|¸s*âa­‘øÎùðc cäûã4䔟q Ùœñë/šþe–Zí§©qÇ¢¿%øÎaZ9‚Œ\·íöÉãÇçž «îSað»C¬¾™èV1°` 1ùËtž+´LJšÒ·06f»§§/ÆÕd0ÍÎÏnÇ=üC>ÎÏß6ëQÍšL`9ÿN–v«îaéÚ1–Bú¤œÝEÃõüéîó÷ï©f·N)“w™Wbè»ÑDC¿\ߟŒ=ªe„f¨Z`#Ù¶ƒÁa#X 6ú–GðмÃÚ,®Ip‹ ¿è4‹‚8š'`·°åº(ÚÅ2ßâþ©°sAžýcÓ½èiÏæGH¥bÙW*‰e_üAZqbìŽp6~å-¸…˜¢ÂcUñ) äÆ"~¸ Â‡;„DÎFšåu±É‡ÇÄ·È4çvzÄ€)*Þ'2^Šp{G@Ba«ŒÉv˜‰ß)ÂLŸëaOøÜ@„³Ó à›
+Û6¾ùŸîÂpYßT«}-nüD7õOî;rR°¬«r~ö?TìÿÛDÙLº~ua ¯Ìdîï )¤Î”²ûÏ‹1êÿ__Æ>endstream
endobj
-1875 0 obj <<
+1888 0 obj <<
/Type /Page
-/Contents 1876 0 R
-/Resources 1874 0 R
+/Contents 1889 0 R
+/Resources 1887 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1886 0 R
-/Annots [ 1878 0 R 1881 0 R 1882 0 R 1883 0 R 1884 0 R 1885 0 R ]
+/Parent 1876 0 R
+/Annots [ 1891 0 R 1894 0 R 1895 0 R 1896 0 R 1897 0 R 1898 0 R ]
>> endobj
-1878 0 obj <<
+1891 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [370.941 719.9611 439.613 732.0207]
+/Rect [399.2874 719.9611 467.9594 732.0207]
/Subtype /Link
/A << /S /GoTo /D (zone_transfers) >>
>> endobj
-1881 0 obj <<
+1894 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [134.0621 178.6003 267.5615 189.4146]
+/Rect [162.4086 176.9621 295.908 187.7764]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://127.0.0.1:8888/)>>
>> endobj
-1882 0 obj <<
+1895 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [297.4503 178.6003 448.8825 189.4146]
+/Rect [325.7968 176.9621 477.2289 187.7764]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://127.0.0.1:8888/xml)>>
>> endobj
-1883 0 obj <<
+1896 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [353.8228 97.3808 511.2325 109.4404]
+/Rect [382.1693 97.3808 539.579 109.4404]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://127.0.0.1:8888/xml/v2)>>
>> endobj
-1884 0 obj <<
+1897 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [55.6967 86.671 69.6444 97.4853]
+/Rect [84.0431 86.671 97.9908 97.4853]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://127.0.0.1:8888/xml/v2)>>
>> endobj
-1885 0 obj <<
+1898 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [283.6482 86.671 453.0131 97.4853]
+/Rect [311.9947 86.671 481.3595 97.4853]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://127.0.0.1:8888/xml/v3)>>
>> endobj
-1877 0 obj <<
-/D [1875 0 R /XYZ 56.6929 794.5015 null]
+1890 0 obj <<
+/D [1888 0 R /XYZ 85.0394 794.5015 null]
>> endobj
566 0 obj <<
-/D [1875 0 R /XYZ 56.6929 612.2421 null]
+/D [1888 0 R /XYZ 85.0394 588.8445 null]
>> endobj
-1879 0 obj <<
-/D [1875 0 R /XYZ 56.6929 584.5745 null]
+1892 0 obj <<
+/D [1888 0 R /XYZ 85.0394 563.5833 null]
>> endobj
570 0 obj <<
-/D [1875 0 R /XYZ 56.6929 484.3174 null]
+/D [1888 0 R /XYZ 85.0394 468.8058 null]
>> endobj
-1880 0 obj <<
-/D [1875 0 R /XYZ 56.6929 450.8755 null]
+1893 0 obj <<
+/D [1888 0 R /XYZ 85.0394 437.7703 null]
>> endobj
-1874 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F41 1238 0 R /F11 1459 0 R >>
+1887 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F42 1238 0 R /F11 1459 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1889 0 obj <<
-/Length 2896
+1901 0 obj <<
+/Length 2888
/Filter /FlateDecode
>>
stream
-xÚ½ZÝsÜ6÷_±o'ÏdU‰%ñòä$vϽ6¹³Ý›¹IòÀ]Ñ»šèc»ÒÚunú¿@€úØUjw:wã‚‚ øÀu¸à/\dÒ"/Rû2åb]‹ |ûþ,dž¥cZŽ¹ÞÜ}w¥ å«D$‹»û‘¬Ì²,\Üå½·»øÇÝåÍùRÈÀKüó¥LïÍõûw4¢¨yûáýÕõ÷?ß\œ§±wwýá= ß\^]Þ\¾{y¾ 3Â|Á¾1áêúÇK¢¾¿¹ø駋›óÏw?œ]Þõ{ï7 "ÜÈ/g?‹¶ýÃYàG*“‹Gè~¨”XTg±Œ|G‘)ÏnÏþÙ }µSçì'£Ì—™Hg (ÂEúJJ1± T~‰ÈZ7-B°@^·?´É—_ÌSK½ítg*Sw¼ï½®*½Ç}w‡£ã K‘øq(+v*)ÙÿÁI ù
--³ìõæ¶Ûõ†ØêCµ2ûߧÇü¯­ØÀ $·øxÊ÷ÇåÚæ£ïûŸ?Û5–³ºÿöšŒ155è#_¦áÈÈâ¥F~g>¨‹®hjÑuNÄÏ­Þ^P|Ûúw[Ók50…Ê“4æ“:•>"x\À'4h˜^Nš–ºïÞßÞ^¾%º5ëþ螨·?3¯iº.V„΢uÂÚõ¾X™œ‡ëã['îFœ-ø"T
-XSÞ…³ç’¼/±/•L=½7vöƦž5/´î¬Ð¼Qà=nMM:pK쫲X Þ@Ä}³'BSS7õRºmëé®xà¹_›Ú`·Þ—ºy¬_!-½Õ•YëºvŠ­xªõTÙ”OÓKL7«Yuº°zGaÚÒö›- €+½"Ê°•=Ñ+³Ö‡ÖP§è°•V5’aú¹D &Ãm©f^ËÙiÒ»>™çV:Ôm±Ýý¹}¨×ÈŽ÷6:ö·º¥‘•ÁS¡uSãùmØT9Od>MÝnžyö:S†aè¡R¶ƒ¤#ÂYÉÒÝT0܃›°Õ¹Óç<ôH¥Ð{Ðe‘&×Ì´#k>˜z“‡ãöÑF) j4Ú6垢ŻÐf×1<ö 4¯Ý#ceÙ3\š¨‚yÚÃ*o*ð)–ÛÜó\þ< —k8ÁÌWYÙ½\ØÕ¢Ôc êS ‚i講=oj×Ô¹)8Œ~ÒcHݲ CšPï°¥Ÿª4y!bgÀ¬Rff%é¹ð敺†Zó+,O$±nhJ^š–÷d íãV3çÈó)$JÈ8Tzí>aBœx­&OÄ3”w[TE©÷å}%‚Ž6(P½u€ž·N
-‰ È^lœ,Ë37µÓ
-‚O­W˜èDø®ÒP;” vtk«ïþÉ)]?Q6õÆì_£íß0èw/;`_fGße ÔÜ^ÞœKéýë
-½ðâúÇñ,,A[^pÝäX}KÃvúÐ:sY'äõE}putÊ—_Û³GI” ÜôÓcà¿RÑ‹+ˆ6S™ðÝ>Ò´¶¹Äèi„ïªP¥jzY¯ï%„ð¶Í£Á½Yy„$†Ò½|õhúüz}ÝŠO5µsn&!¤™Qòâ€ñÜs¬]–Ôù !/;£+_v$×ä_V¿<)
-VP%¦YxTS ÃÊu¾\=!}TâÑÃB6”nîmPy®jÓùƒ†áÏVó‘ª4gÝ3v
-¢÷Ö¾rô\ŒþHÐuHâ1>CÌò®;­©Ë¶ïmÝ@üùjxY÷‹¥ŠáÅb
-‹}EL.RW'Œò0ÂO}ͶÐM†¢|mtË¢-E?˜Êár¨¸éu FàkËê.iËR+Hb«â+‹éëöÒ†Šó¿c(ʈQ< ´G¥µ»\˜Œ4³Ï3s— ô£¨œy ߌû'­qäJ÷&ÓROSSÚ?¤ì“E»A‚²e;ÔP»â/¬Ú.KÁk¶Ä¡,RE ùLå^Dp½¦VÖ/²ÀO3ü-flN€ULC¦}Qˆ™OaØ:nÊŽ-—à91Ð âXf¸{û²‰£EeŸ›³Ð¥°‘{üKsOðµ2æô2b÷6禴˜Æí;30í0š1ÈÈÂâ£qDù©Ðë/~(Ú™‚¢d..ŽŠ­¹ó—~*#WCà¯F™taäWF׬Ë|ÀMS ãøÅñGE2q6_¬_Á¢ýS k7¶{êmB9T ý@eÙ X9:z”S”‚‡v¾:t‡áÙËS‰8ÑÒ?V!‚•ÖßH¥R=K{~°³!bÒKV¢õ û L (Rë®×Ò¦xßL›9D Ý|ëßøïHúø“ÿÌïŠA_ÿéÿ,þí"†²2ËÄü/”„»L¨Ô)…ûQ'š÷ÿ‚pªúìñî‹endstream
+xÚµZKs䶾ëWÌ-TÕ ‚OÄ'y-9rìu"É©J­÷€B3¬åcLr$kSùïéF7ø˜áz•r¹t@FãëÇ(X ø Vqâ'JªUª"?A¼ÚVbµƒoß]<gí&­§³¾y¸øê&ÌVÊW‰LV^™/²,X=äï½Ä—þ%pÞÛŸÞÝÜ~÷óÝÕey·?½»\ËXx7·?\õÝÝÕ?^Ý]®ƒ,¼·»úÇÃõ}J˜Ç7·ï¾¥EÍg˜Þ]ß\ß]¿{{}ùááû‹ë‡á,Óó"ăüzñþƒXåpìï/„ª,^=CGøRrU]DqèÇQº‘òâþâŸÃÉW»tQðe˜ÈÊ`¾Šc9Ó`¬ü$”á A€V„^ß»Þäë楣£Þ÷º7•©{Vb««J·xî¯n"9¹±ZËÄ2¡,Û9§xÿ­dè«@D«õ Lîú¶¨w4­>VÓþ>=ÿµe+C2‹÷çóþ¾¶yïûþ‡võ¢ìÿýš”1W5È ?Nƒ‰’åk•ü­ùEY}ÑÔ4¢ëœˆŸ;½3¼áïhÿao©ÆIò£$Í`òÙ s‘,Nð fÂËIBÓQ÷Ûw÷÷×o‰îÌöØý õÚË óš¦ïà…E"˜Í,:Ǭ۶ÅÆä<\Ÿ¾*°?‹²p•H´ô0Eû¦ínEÄÝäA ó×Óô ¦G<ç‹G½7[V<ùÙ™4™ð•ñLš³G9Ìú’ gÜP«-á]9•®É
+ó|©¤Ç¯ÿö‘† –ÖOSñi¹ò6M¿§‘CÉd³7/Œ4‘ÕÕÜ`&&=çFlE qNÎBÃ(d•I§2éT&G•É9碆À«`˜–Þæ…•<OM"‡ ñ™ý%ŸY’ÊhñÙž!a÷B|Á8mÁ’ÕoíY³}Ž7°œ²…™Ÿ‰S¶S¶J×ðôþX^œ±µN9æÅ'NíŽ&˜ êrmß-<–
+¯n˜®Â³ã ·MŽÙuGð¢<´ÏRT q{Q]òõÏÁöìUÒå‚€[~~m2üW*|uæ¡
+Z‘¦Yp’3IÁÎu¾Þ¼ }’ÂQá S3WûSžËÊtþ¤Áeø‹Ùzè*M§Qõ‚ÀHBLæh?dÝõÍXÑòÃÌsÂ:'ìøaÜU=' !vÙµ.Ç…¤‘@à ÆL5~eM 2³äÂ_ª,ùò!''‡îÖóAK`ƒ”UzWÝjH”ÙÁxW÷ÞÛ*Æ0‹Ñ zI4ÅgðYÞmOÓ=uÙ5Ó³mð?Ÿ oËî~µV¼£HÎaqÈx ÁeêRß„QF¸”9äЬ;
+ß\
+Ï£¢3ÉÝœ‹þ?áåÓendstream
endobj
-1888 0 obj <<
+1900 0 obj <<
/Type /Page
-/Contents 1889 0 R
-/Resources 1887 0 R
+/Contents 1901 0 R
+/Resources 1899 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1886 0 R
-/Annots [ 1893 0 R ]
+/Parent 1876 0 R
+/Annots [ 1905 0 R ]
>> endobj
-1893 0 obj <<
+1905 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [461.1985 616.4281 510.2452 628.4877]
+/Rect [432.8521 616.4281 481.8988 628.4877]
/Subtype /Link
/A << /S /GoTo /D (DNSSEC) >>
>> endobj
-1890 0 obj <<
-/D [1888 0 R /XYZ 85.0394 794.5015 null]
+1902 0 obj <<
+/D [1900 0 R /XYZ 56.6929 794.5015 null]
>> endobj
574 0 obj <<
-/D [1888 0 R /XYZ 85.0394 769.5949 null]
+/D [1900 0 R /XYZ 56.6929 769.5949 null]
>> endobj
-1891 0 obj <<
-/D [1888 0 R /XYZ 85.0394 748.9522 null]
+1903 0 obj <<
+/D [1900 0 R /XYZ 56.6929 748.9522 null]
>> endobj
578 0 obj <<
-/D [1888 0 R /XYZ 85.0394 667.6879 null]
+/D [1900 0 R /XYZ 56.6929 667.6879 null]
>> endobj
-1892 0 obj <<
-/D [1888 0 R /XYZ 85.0394 636.0345 null]
+1904 0 obj <<
+/D [1900 0 R /XYZ 56.6929 636.0345 null]
>> endobj
582 0 obj <<
-/D [1888 0 R /XYZ 85.0394 425.9376 null]
+/D [1900 0 R /XYZ 56.6929 425.9376 null]
>> endobj
-1894 0 obj <<
-/D [1888 0 R /XYZ 85.0394 394.4436 null]
+1906 0 obj <<
+/D [1900 0 R /XYZ 56.6929 394.4436 null]
>> endobj
586 0 obj <<
-/D [1888 0 R /XYZ 85.0394 313.1793 null]
+/D [1900 0 R /XYZ 56.6929 313.1793 null]
>> endobj
1491 0 obj <<
-/D [1888 0 R /XYZ 85.0394 281.526 null]
+/D [1900 0 R /XYZ 56.6929 281.526 null]
>> endobj
-1887 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F41 1238 0 R /F22 977 0 R >>
+1899 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F42 1238 0 R /F22 957 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1897 0 obj <<
-/Length 3792
+1909 0 obj <<
+/Length 3795
/Filter /FlateDecode
>>
stream
-xÚ­Zmsܶþ®_¡o=ÍäX
-Øž“aÐ_ÈÌ6 ÷~‚W­[ÏÜ%÷TLW_|.¹ËË>ªÛ‚Yãõ¼szx+3t NOõt]ôÅuÑ•ä΋fM àǾ§&O ¾þÍ+j€cÔúì•
+xÚ­Zmsܶþ®_¡o=ÍäX @ þäز«¤qRY™NÇõx¨;žÅ˜G^Ž<)J§ÿ½»Ø¤!Kyæ@ûúìâ4…?qju’*—æ.Kt*ôéj{’ž~„w¯OY†AËñ¨¯¯NþúJÙS—8#ÍéÕf4—MRkÅéÕúÝâÅߟÿpu~y¶”:]˜äl©MºøúâÍKêqôóâû7¯.^ÿxùü,ÏWß¿¡îËóWç—ço^œŸ-…Õ¾—<üºøÇ9µ^_>ÿî»ç—gﯾ99¿ö2Þ¯Hnäç“wïÓÓ5lû›“4QÎêÓ;xHáœ<ÝždZ%:S*ôÔ'oOþ9L8zë?ñO+›h+ó¥Œ1P»Ä(©ˆmÓ•?ʦ¯ïÏ„‹¯Î–*Ën &£ ò,‘J¢øá¶hŠåzù©¼ïxìx1ã!m΃»¾èË-,“K»(v»²ØwôÐUÛª.öø/ú–GD–¸O—úý¡ë&@›$S¹ãÁ¼«uµ9v±)÷Uó‘VªúíoJjìö8¤ìÊfU⼧K +kíéRˆÄi-ý”íƧáÃ4_tåªmÖÔùŸ4•e½Æe¥\@_T ­yüÄ.€ö»Ö¯·¦-dã-—'Òf–÷
+Øž“aÐßÈÌ6 ÷~‚W­[ÏÜ%÷TLW_|*¹ËË>ªÛ‚Yãõ¼szx+3t NOõt]ôÅuÑ•äÌ‹fM àǾ§&O AâÕ j€cÔúä•
[0ê¾l
-oNØA¾£]•]—øõSXœ¸.¿®·G²Gÿ°ïzzè«m,¨“6F5/Â\%—šÀ\/¯¦£yïªþ†Zý ,¬~¾ÚŒä|:YðkP¹ˆG²"ÉþmÖ ÓÌ‹gß”ýê¦d:ûÀ•×oßýýüßÔ¾¼ìÊžíCB4 xSVDïª'mÍVìŸH‚Ðø¥m¸UìÊŸ‘«XæÐw 6 êà ½Îô'd§ã‰HîÐèvåªò.ž'ñöÉC
-RI †6¶‰j58òÁDÁ£+“-.6̈ ƈ™ÿ´6pÒk°ç¤o’…§´éšµ¸«>5%†*Öû†Çξ9t%›IÑÍlL)Œ"³ÆAôÓ”wÁVóL9¦`+XbÔ\Þ U—+zjíÚªáfÛ ŸU9°¦¼… à€D¦Ÿ²$в|À7lI<{ÅËueÙjb¢¶*‘àŸ‘R-å\Ò¼$ØÇêsX¬¥ß-xB&„­•µAdÀ5m¦Úà]—Ê».•±Ñc×ÄuaÇü0¤¨¬yèu‰*¯††rÄW^ÚØ ´
-BG|ããè¡}Acº>tx|'Ô#ò&Ĭž=]ž_[15MÛSƒ,Ä/ÖÒop.ôT4Ý]¹ï^àNÉb/1^ |ÆMv„Æ–ÄÀdù ÀbÁœ®ïg9D¨`GƒëúvðóÞ¼›Ù·¿ÎPÝ1®âƒ¹ÿÜSë‘ fÐ@ò'ƒšÂ åAPÃy‹M_î¹ÉkÂ$Ôò¬”à%=+#pEŠDáÊFh€ÜR4Œc‹~D™²4ÉÒgŽ©š‰¿4ÕÀNVížÈ\¬¨ÀK=Ð…d°ìð uWÕ5µ®¹g
-}­ŏX£Ø<h´‚ ™¹æ(
-ý„’ Á(Ɇhi»
-„L´pæ·e»4 É¿'ï¤SYš'V;Å#+IÀÓR•<8š&À‰ ®tsHÝ·;–2ìš¿ßÄà¦N!ñÎ~ÚDðÑòÒˆ„ƒ£c`r[2œ™°‹E—“ =U– ëL0GãÍÑçL· \•[Pnè)úÊÃiÓãGC‚6$h2œ…{'Î=÷a®®çÀ
-yžÈݱº`@…ÿå±¢
-¢UZp… zò¡~W7ص/‹X¾JyÇbqØaØ\óB/ùsJh”OÙîi`ÛßæƒM"§iÂ=èMµB£~¡¯(Æ)õ“ŸÄÖuÉ=ûªïýöà\@K­‚~~lû¦àOˆé_ÅjÚ&Rèð÷œN~lê·%¤ôÒÉQ-ÇøZÎ=j*–¶Ûr™ØLO#÷±æW;)u¹ O¾3¨Ž¯¾…Ò\Û642ôìÚ®«®‡q‹ïˆœ5::c¹žæŽõ´i´|Ål\j;ºNéXuä$ƨ GW],TplË1W;€®ßÓC»¥æ`õÐV)ýR‘®CžJ½x‡ðS:û¥ìA*Ò0O#–Üdb ‰2
-ÊÐ,=„¨5):æùˆ{ZpÃmW†*›N”KÅ,Ë»k)Ä’Ì:
-©+_iB½[”?îC ÷•ß[aÝ»<o¬;ý»vÿy@ÇüºÝSÈÂÔ¡“Ñé-KÇÏʇ-“Ql© ¯¼‘vŒx57¬6‘­˜åö¸6…“›öP¯§!¦¨ïŠ€OCná5”‘qôç6Is#žiš8§B¤K`Û‚¥!"µ.Ÿb`ÈÌá}Êlœ‚®›qÉéDÈò`Í*w!øµ;?̯à9.,GXá«æä|òiAX§Ác£öŃ¹iöØ2°ÙÓÊ/Ž%H6L kÐy6O¤}H!yþŒ£¤°lÐ œwä)†é,ÉœžAXì]æ<Ú7äXïèla¹RísOéñB`±ÆØ©¤ê¶ý\tÕ:VÞÌAOô‚J¼ `%tÄ•'&Ï”ú"¾ÓJ?#¯rÒÎtÍ4Ň 
-‚å®U—¾»»aZqm¨èÎy¨ýôå®ØCx9P0ö=àp‰96âpŸN—xÜËËu»ºâ¹hGØWö‡]J\€—}LÁoŠ[šFS©–È•ÎCÝW»z¨W ;»h}ó¼XÝÄArú щÌDäÄU ¬õºLumÊ.¡—T[>c!€
-I,ÀTƒnW¬¸Ÿã™!•œÊBOÇueéëÄ£uºÃµG&ã•ØÃùúº^¼d Á #f¦!41½%Gä‘œ $6· ídÃðà1¼«zÔµd >FÂóÅ÷ü18@ºÑ…üh4õ
-µõÁäz:ã[søÉ Öå¦8Ô¼Ÿ )Eó„R €vdxpb«…Ï%ñöÎѪJŒ#xúqÑ ïÜÆ—yàןtWáöóyb[…èkó!'~’{*ÉÔpy0Î=¼¢–iýk¸—ã'rpDEØhݵÇËK‘¥üŽÍëY‡.
+oNØA¾£]•]—øõSXœ¸.¿®·G²Gÿ°ïzzè«m,¨“6F5/Â\%—šÀ\/¯¦£yïªþ†Zý ,¬~¾ÚŒä|<YðkP¹ˆGÊEbþ}Ö ÓÌ‹gß”ýê¦d:ûÀ•—oÞ~{þoj_^veÏö!!š
+åf2¬ˆÞUOÚjVìŸH‚Ðøµm¸UìÊ_\±Ì¡ïlÔÁ+<z3èOÈNÇ‘Ü¡ÑíÊUå]<Oâ퓇~.H%1æöÉ&ªÕàÈ®L¶¸Ø0O 6#fþwÐÚÀI¯Áž“¾IžÒ¦kÖâ®úØ”ªXï;ûæЕl&E7³0¥0ŠÌÑOSÞ[Ì3嘂­`‰Qsy5TI\®è©µk«†›mƒ~VY `My A,À‰L?fI evÀ7lI<{ÅËueÙjb¢ÎU"Á!>#¥Zʹ¤yI°Õ§°XK¿[ð„L[+kƒÈ€kÚLµÁ».•)v]*c£Ç®‰ëÂŽøaHQ3XóÐëU_ 1 刯¼´±Ah†LL߬[\
+÷d YŸiCo»–ßxcGµÝÕ÷ƒ2ŒvƒáI
+„ŽøÆ9Æ7ÐCû‚Æt}èðøN¨ä%L
+ˆY==z:›_[15MÛSƒ,Ä/ÖÒop.ôT4Ý]¹ïžáNÉb/1^ |ÆMv„Æ–ÄÀdv†`±`N×÷3ƒ"T°Æ£Áu};øyoÞÍìÛßf¨î×@ñÁÜé©õ@P3h öÑ ¦0Cù,¨á¼Å¦/÷Üä5ajyVJð’ž•¸"E"Žpe #4@:(ƱE? LYšdé“ßbªf"Æ/M@5°“U»'2—+*ðRŸéÂ2
+Xùð uWÕ5µ®¹g
+}s7ÞXb4ŽZÛ Ð
+Z€dZÍQú %AƒQR¢eîØÕ
+5pjš,N¡µ+ƒ ëó<[b²RWŸ¢ AÈD g~_¶A“‰qù<y'ÊR›äBäSQ<°’<-ÅQɃ£iœâ@G1‡Ô}»c)CÀ®ùûM nêïì÷¡M-/H88:&· À™ »Xt9V該\x\g‚9‚lŽ>g¸áªÜ‚rCOÑWŽÈ<=~q4$x`C‚Ö(ÁY¸wâœÑÃqæêz `Û‚i
+ó¸:òSÉuÕÄŒC¤ç ëŽÕ*ü/U­Ò‚ãð(\Г•ð»º)À®}Y$7á«”7p(‡†Í5/ôœ?§„Fù”ힶý a>ØT rš&܃ÞT+4JáúŠb,‘ÒQ?ùIl]—ܳ¯úÞoÀ´Ô*èç§ö°o
+þ„˜þU¬v óD
+þžÓÉOM㶄”^:9ªå_˹g"B-C¥ÀÒvBƒ•IžéidØâ6Ö\âj'¥.ôÉwÕñÕ·PškÛ†F†ž]ÛuÕõ0cñ‘³FGgr®§¹c=mEZ
+ëØåy“»cпk÷Ÿq̯Û=…,LA:¾ò8géøYBù°e2Š-tà•7ÒŽ1¯æ†Õ&²³ÜצprÓêõ4Äõ]ðièCÃ-¼†22Ž€~›'©5â1‘¦‰s*Dº¶-X*"ÒÜÙ)†ÌÞä`C™SÐuÓ".9=€¨Y¬YY‚_»óÃü
+žã"ç+|Õœœ›„u<6j_<˜;‘f_€  ƒ<{\ùűɆ t :Ï扴)$ÁŸq”9Û4çyŠa:K2§gAÖ{—y'ö 9Ö[:[A®TûÜSº‡@¼X¬1ùTRuÛ~*ºj+oZÐ=d…ƒ €/(X‰qAÙĤâ)‚R_ÄwZé'äUNæ3A]sAÍ#Añ!ˆ€,ÔÔP1æ£Â¢Ê€^ª@9|èñ>‚óÐŦÖõmRu«¤Ý|ÊA‡Éµj¸Òuë,…a]N–Ê°þˆ4®%A—GÐÃÉ{Nç þÍHUé›Ñ,„8ð€Ø>TW…§%µëCU‡*[3È}¢™AL#ŸäªÌýemŠ # Ùß~_­×¡Ô7=þ˜ÕÎ ©Í\0D-_– "âIÑ%êA<aÊCLbÁoæàãtæ‡âé«Ôg
+öLdïVuÑuïiüc ¬cu³\ÕPÒ…qþ§X¯÷ Ù~ćÚGWìÿß³hËϳ.»¾j¼çÿã“íK@<]u[.) Ãñ÷e÷¡ÝÀtŸÅ¶ônÄòZϨ'I’÷±åø4âCÁbþÍ2Ê`¢®0š¥ú¨æ1 xY¢î¡m¶ÍLÑìÀ Etr¦WqÇï)]ðA~ùˆÎ K´6v~ÆYœ¦l ~ví]¹ß|‚ ±¬‰Íp }ˆqd¸°`è‚êRä~:+W»4†ÿý-ÕH —'_¾yKŸ%(3;é?Æ–|–6Q¡‚€`¹+GÕ¥€ïîn…V\*:„s$ªÅE?}¹+ö^Œ}8\bNq¸O§K<îååº]]ñ\´#ì+ûî %.Àˇ>¦à7Å-M£©‚Ž¿TKäJç¡î«]=Ô+]´¾y^¬nâ N9ýˆÆèDf"r⪄Öz]¦º6e—ÐKª-Ÿ1‰@…$`ªA·+VÜÏñLÈÊ
+Ne¡§ãº²ôuâÑ:ÝáÚ#“ñJìá|}]/ž³†à…3Ó‰˜>'GäK›[Ðv²axð˜ ÞU=êZ²#áùâþ Ý¿èB~4šz€lŸ¥ÙB€}èünŽ²`»)IL¯SgìSnçÈÄysÝÍY3.ÇSú‹7úäÚÉì¸òà¼çDf>µ°âÏ#r˜ñ"3)’Ô€'DúQj“乚ßnŽÒñ Tà¿tñ#íܤÇz†/V1)­éXG²Àù@„2€æГ°¤kØE[ê@eóCÇʆƒ²áÃÊ„Z=¬ü ²)@8JB´ƒÜ(æOP6žq9ž2¦l€©Ìhá/èšIl–çÃŒÐþ0±(½ ‘éZŽÉ¶éZŽo<¨k
endobj
-1896 0 obj <<
+1908 0 obj <<
/Type /Page
-/Contents 1897 0 R
-/Resources 1895 0 R
+/Contents 1909 0 R
+/Resources 1907 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1886 0 R
+/Parent 1876 0 R
>> endobj
-1898 0 obj <<
-/D [1896 0 R /XYZ 56.6929 794.5015 null]
+1910 0 obj <<
+/D [1908 0 R /XYZ 85.0394 794.5015 null]
>> endobj
590 0 obj <<
-/D [1896 0 R /XYZ 56.6929 379.8023 null]
+/D [1908 0 R /XYZ 85.0394 379.8023 null]
>> endobj
-1826 0 obj <<
-/D [1896 0 R /XYZ 56.6929 354.9028 null]
+1833 0 obj <<
+/D [1908 0 R /XYZ 85.0394 354.9028 null]
>> endobj
594 0 obj <<
-/D [1896 0 R /XYZ 56.6929 225.0837 null]
+/D [1908 0 R /XYZ 85.0394 225.0837 null]
>> endobj
-1899 0 obj <<
-/D [1896 0 R /XYZ 56.6929 194.41 null]
+1911 0 obj <<
+/D [1908 0 R /XYZ 85.0394 194.41 null]
>> endobj
-1895 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F41 1238 0 R /F39 1178 0 R /F48 1258 0 R >>
+1907 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F42 1238 0 R /F40 1178 0 R /F49 1258 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1902 0 obj <<
-/Length 2085
+1914 0 obj <<
+/Length 2083
/Filter /FlateDecode
>>
stream
-xÚ­ksÛ¸ñ»~…&Ÿä™ÀwýÉÉ99ß4º«ã¶3Íe24Ùœ£HHÉQ;÷ß»‹]ð!ѱ}íè pß/Pj*᧦q ¤—øÓ(ñE U0ÍÖ9½ƒ½ÅgæîмêíÍäÍ{/š&" u8½YõhÅBƱšÞ,?ÏÞýxñËÍåõÙ\rŠ³yÊÙÛ«Å„IèñîçÅû«¿¾8‹üÙÍÕÏ B__¾¿¼¾\¼»<›«8Pð¾f
-¼ðþꯗ}¸¾øøñâúìËÍO“Ë›V—¾¾Jz¨Èï“Ï_ät jÿ4‘ÂKâ`ú
-zÁ¬Úž©x¶4[^®èÙÀ>è ”U2x$†]§%I‡úìµ/ü(â3u“6fmʦ&º9?ëü®Ì•RgiÙêW­#„üYJˆ¬ÈÛ´Ršßw¦fÄC^Ýšþ‘º*öfÉÌÊNK8«ÊÆ|kZUAøé\iOxR
-ƒpe(ц}>j¶L›”ˆ@Üê–ùÜå{Ã(´£==FN:óZžÉlŒªJ§"Ló-]ƒŒ¯9ˆµösˆým™6-—Ý6äÅÑvçFŒ×’ß¡G½)\ÿ°øÄ8Óì6¢¦ÁÓýxT_àÉéˆM“WeM ¶‚yÙ l?*ð]î9"§Á9{€9m m}€@ZÔA·,Ö®¶9ôr ω@ÐÆ‘~º ±:–úÇwŽ°Ú–¸a(|Oîfc“0I\:ôpoPW1,
-Jæ6·åO‚.Å.+×k ~ÍþÙ+«îÀ¼Þ˜Œê5#ÓbgÌ™¸u¥â<:>Wã´«³#F Eä·9þ÷FB®Äg±|çI€RƤôXšU
-™Œzûzv!ðšz#¥+é‚-
-h8¾½¼õ*Ö¦oÜ™…ËÆ,èj0×6‡ fûC.ÓE*(‹á1zWó½ãø^÷f˜­þœž¡³þ XàV/dì©MÅ.„È{å†ýW´þ5–Àí28ºè¾yCGnlò!TßW»bI0ß٬С8Ú´*MóPm뵎^ÎÛ×çíE‚D±%…ý½‰Ï ñǹ#
-C¥adç& >+ô=oqh
-xaLǃ&TR3+vK;í[~Ëå®ä¦Òz f¹¦Uµ£ûª'É÷bˆKûac\¼ÔÀê|Œø*/ŽˆÏ\byûêœóy,FÿßTýÍ£Àéå‚»Ù>­‡³ïÇ.êí<w,eÕôòÃp²Ü:w~Ç{›­ÙçÕ®î¢aÔçô“G’fŠ×fµ«_3ÎP…Ÿ“eõ─0m¶yÖ8Ûý?“‚'ë6+hN¶¦ßÝBv«þ÷«ÇC=71t"â8JŽn·21œ'z‰qD_}/1úYc{Q‹^!snÍ!ÆoáøÝUÉÖ„ØÊ>õ¿”ÈÙ‡mº^§Û‘V„.„ÔQtd(„¾ÒÇ3\~¶£ð—Å8T^n±ÏmnVsüÂqæUÁ¯6ƒ¾yÝ´ÙbŸ_Æ\|JsîÂû%dÇþ%
-¸×‹c=þç€'áâ­aÌd¡PõÄ;–¼ý«áTôÿ,ßÈ¥endstream
+xÚ­ksÛ¸ñ»~…&Ÿä™ÀwýÉÉ99ß4º«ã¶3Íe24Ùœ£HHÉQ;÷ß»‹]ð!ѱ}íè pß/Pj*᧦A(ÂD'Ó(ñE U0ÍÖ9½ƒ½ÅgæîмêíÍäÍ{/ž&" u8½YõhÅBƱšÞ,?ÏB¡ÅP³w?/Þ_}øûõÅYäÏn®~^œÍu gï¯þzIЇë‹/®Ïæ*ÔìÝ¿Ü\^ÓVÈ4Þ^-~ LBGˆ^_¾¿¼¾\¼»<ûróÓäò¦Õ¥¯¯’*òûäó9]‚Ú?M¤ð’8˜>ÀB
+•$zºžø'ßó¦˜|šü­%ØÛµ¯ŽÚOI¡½PPë1‰=íYîsóp–èXÀ“ÁìæÞ€Š^0«¶g*ž-Í–—+z6°:eÕ£ ‰aÄiIÒ¡>{í ?ŠøLݤY›²©‰nÎÏ:¿+ó_¥ÔYZ6„úUë!–"+rã6­”æ÷©ñA·¦¤®Š½Y2³²SÆΪ²1ßšVU~:WÚž”@J$A ­àôÄ
+¹®§Öð (=/|Ò¡ŽœÉšû´!²9?×i“Ý›Z,¡q¨À×*IÆ—þU•Í&}ðŠSZ¥Fhî­’v*¡’|á©'ETaè{ŒÈ²YUÂY‹#Ë,3u߆N4áÉq,2« ÛVU‡ /íÇ"
+ýè qµP^˜ð!ˆg³·âÁÊË;2¨—DWÖ¢=çB€y¡šý ‹´aëuêtÍ[%CʆbÖ»¢É7cQÊú5À1¤Q¾Â \ŠE´aŸš-Ó&%"÷„ºe>wùÞ0
+íhO‘“μ–g2[A£ªÒ©HÓ|K× ãkb­ýb[¦„MËe· yq´Ý¹ãµäwèQo
+Á?,>1Î4»h…éEðÇ´DÿÕxrzbÓäUYÓ‚m€`^vGÛ…
+|—{ŽÈi°@ŽÆ`Nch[ uEÐ-‹µ«mŽ½Ãsc¢´q¤Ÿ.A¬Žå°îñ#¬¶%n
+ßÓÇ»ÙØ$L—Ž
+h8¾½¼õ*Ö¦oÜ™…ËÆ,èj0×6‡ fûC.ÓE*(‹á1zWó½ãø^÷f˜­þœž¡³~ÿ,hí ûGjS± !ò^¹aÿ­ÿcåp» Ž.ºoÞБ›|Õ÷Õ®XÌw6+t(Ž6­JÓ<TÛßz­£—óöõy{‘ QìCIaoâsBüqî€n ”Ãt¿l«=F‘]l WïyY›í>Ïx9:rD*Gt 6S1ÖŒ™B<w0õ‘¤Þ㒦̨ÂPiÙ¹ ƒÏ
+}Ï[š^Åñ  •ÔÌŠÝÒNû–ßr¹…+¹©‡ô‡ƒY®©GUíè¾êIò½âÒ~Ø/5°:#¾Ê‹#âs'—XÞ¾:ç|‹Ñ?Æ7Uó(pz¹àn¶Oëáìû±‹z;ÏKY5½ü0œ,·‡ÎßñÞfköyµ«»huÆã¹ý䑤†âµYíêäŒ3Ô@áçäDY½8% L›mž5ÎvÿϤàɺÍ
+š“­éw·Ð€Ýªÿýê±ÄPÏM ˆ8Ž’£ÛíŸL ç‰^bÑWßKŒ~ÖØ^Ô¢WÈ܇[sÈß…ñÃ:~wU²5!¶²Oý/%röa›®×év¤¡Ë!u
+¡¯ôñ —Ÿí(üe`1•—[ìs››Õÿp†ùAUð«Í ¯E^7m¶Øç—1ŸÒœ»ð~ Ù± À;øi䛾l=ó?ÿƒÐý½îõâXÿ9 #˜Eb ÂB¡êIx"¹û«áTôÿ}ÜȽendstream
endobj
-1901 0 obj <<
+1913 0 obj <<
/Type /Page
-/Contents 1902 0 R
-/Resources 1900 0 R
+/Contents 1914 0 R
+/Resources 1912 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1886 0 R
+/Parent 1916 0 R
>> endobj
-1903 0 obj <<
-/D [1901 0 R /XYZ 85.0394 794.5015 null]
+1915 0 obj <<
+/D [1913 0 R /XYZ 56.6929 794.5015 null]
>> endobj
598 0 obj <<
-/D [1901 0 R /XYZ 85.0394 146.1982 null]
+/D [1913 0 R /XYZ 56.6929 146.1982 null]
>> endobj
-1738 0 obj <<
-/D [1901 0 R /XYZ 85.0394 118.9629 null]
+1747 0 obj <<
+/D [1913 0 R /XYZ 56.6929 118.9629 null]
>> endobj
-1900 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F41 1238 0 R >>
+1912 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1906 0 obj <<
+1919 0 obj <<
/Length 1241
/Filter /FlateDecode
>>
stream
-xÚ­X[s£6~÷¯ðcÜ©ˆ›aò”MmvºÙ­ë>¥á¨Áˆ•äØN½ÿ½l’€ãñx
-Æl€IhIH*0{=›.˜µ—'£  K˜mMoúÝ™~wÆ–I¡Ö{áôM¢úwá¤TxSƒ'ÙL}™3£LìÆÕC±ÃeŽìYÐõ\Ô(R[œü"©—Œ
-8 º[e¶|¥Ã±š^»ïh²;.£P¸OÉìŠËos
-QçD¢>‚¦gÕùBS ¸„¬WIXI¼Lê‰WZaéÖÛRÀ·øZœÌ,I$soc1YH¢¦­mTáÊ*-G}Q=;ºeE]±dg€› Ÿpd!tI*õ¸'C0ñà1V'ÏS@Ð1Á6åñ!ÕE„áPPV„£,3UZ·é'–2
-X<Ò¨$2¼À©Ø.S²Vʮӂ>2ì:¹Ÿ—å^zZ÷Ý*”ìƒJ®ç»Ã$à|Zjji#ìÞox<ãËw»ð†v¯cŽŽAeEÄ6g>.È1AÙ-œ ö‡èµÃ P”Ø;»=íâx¡´C¸›ÀÒ¿’ ʇš[¿¦ã*ËꌩápIþ b>ÊÚŸóÙ²Òð<swJeš•S*sèAÛ“ )¥ß>b^žySÿáôi©endstream
+xÚ­X[s£6~÷¯à1îŒ(âÎä)›:Ûìt³[×}J=ÂQˆ•Dl§Þÿ^‰‹ 6IÀñx<€>}çp®‚Š&~Pq-U3<Sq<Sµ4h)A2Ò”¥x÷y«9 žš³>ÍF¿Þ®â©ž­ÛÊ,j`¹ªæºP™…÷׿_}ŸM¦c [Ú…­ŽekŸnï~+G¼òrýíîæöóßÓ«±c^Ìn¿Ý•ÃÓÉÍd:¹»žŒt-(ÖëÂ+ nnÿ˜”wŸ§W_¿^MÇóÙ—Ñd¶“¥)/Ô )ÈÑý\SB!ö—‘¦žk)+ñ ©Ðót%™–¡Z¦aÔ#ñè¯ÑŸ;ÀÆÛbi—þ,ÃU-Ww:hê BÍU=ÓsÇòTÛÐBƒ÷c`kÚ…Çd8õS!ZŽýW½
+CŠ[$>1f¼ÿyY^çR ‚
+€Põ,K?†Í³Ðçèl %QðžØS9ºAlAè"%Ý°‰¦Œ¡
+ïp “áN&­«
+Ë5^XGÏnÙD‘WŸçô P|“¡“Ž¨{ý!I¥÷D¦(<Áêäày
+<fÂéæ£<>!ÛžSpB«p”ùüq!+é>íC.`Ùý4ú¼mí¶$Šú¤è4ÆÒÁJËL_•MŒŒÄ€óøÔÍEkÕ¤‚ñGÖŠ”òmžâµTv;xè†êÉ6¿Eîçe½WýZŽÊP²*…ž+ïbŸ±y]¨É¥°{¿a±ÿŒ.ßmº;º»M7<Ýœùt Àu·p6ØsœeÀ×Î2@Ubïìö ´«Ó„ÚEà>ìùjÿ:H6"HênýºŽ§ K•gJ‡Iâ_ûðÑÕþ\Ï•†ëê»S)½y*eh¶êêžS“’
+ñœCæ»3®cêÿ¾—e¦endstream
endobj
-1905 0 obj <<
+1918 0 obj <<
/Type /Page
-/Contents 1906 0 R
-/Resources 1904 0 R
+/Contents 1919 0 R
+/Resources 1917 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1886 0 R
+/Parent 1916 0 R
>> endobj
-1907 0 obj <<
-/D [1905 0 R /XYZ 56.6929 794.5015 null]
+1920 0 obj <<
+/D [1918 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-1904 0 obj <<
-/Font << /F37 1042 0 R /F41 1238 0 R /F22 977 0 R >>
+1917 0 obj <<
+/Font << /F38 1042 0 R /F42 1238 0 R /F22 957 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1910 0 obj <<
-/Length 1212
+1923 0 obj <<
+/Length 1209
/Filter /FlateDecode
>>
stream
-xÚåX[s£6~÷¯à1îŒT„¸iö)›:Ûìt³­ë>¹‘¨Á@%±‰S÷¿W °±ƒ°gŸ: ƒ.œO盄 S=Èðhbb±¡c"ÇW#Ó¸WsŸF¨þ4?ö_g£¯±gH\Ë5fq ˇ¦ï#cÍ/®~¾üu6™Žå˜.Ç5/>ÞÜþ¤Gˆþ\}½½¾ùôÇôrìÙ³›¯·zx:¹žL'·W“1@¾ƒ½U#!¸¾ùe¢[Ÿ¦—_¾\NÇ‹ÙçÑd¶•¥-/2q)ÈߣùÂ4"%öç‘ 1ñãIuLˆ±ŒÕÈv0tlŒ›‘dôûè·-`k¶"íÒŸƒ}èø–ס@µˆL›x†çèb WœkšE’‚ð†àQ<êÑ5ËŒ/Óìƒî/JÕª
-xº‰–lØ}šqúj±77—I‘·ÛË,—,K{ïfÌ’Ú„ä,½ïM¨·¢$qÆW܉$é³Üðài(eOëÌË3¨é`/@ªµ9 û¨!ãj#¢ ¥ÏnbÆ…$E£ltÏ‚çûVú¶Õ×Ë(kÖë°´n1ØsÌÁ] NÛÒŠ:æÙ
-D,Ž)§iØXê;þ^ÁÈUΰ-ìÔ ä¬ê€ñÿŠ3¥;TšK²û–?è”ÑÛ”KɃT(K
-AÁQqµÚS{y‚ëAìYö18çy‚‡!¶ y+žôõƒS}ÛBA«:üu¨ó%K)2*Ÿ³°˜q‘${A¹Lùto$Ut=vK°{ Nf,brÝyN«%ÑEïx]âª7UQT˜¢¦˜¢Ú(å7êôw>”\ç§ê|œ\£®TUXŸ<«Ä}rq
-zÍIu>³ Ê+†ˆqʌש9äò<eö"(T1 ¯š(œdO›¦
+xÚåX[sâ6~çWø:#Õ’ï³OÙ”l³ÓͶ”>Q†ql9Qc,W›Òÿ^Ù²Á€Il˜}ê0$ËútÎÑw.2LõC†ãB7Àá6tLäÑr`jìÓ
+G·$ÒÝrI¾2Ê' 'Ɀba*Ș¤Ie•YθÔMš/ŠÎ\÷þÑšŽ©[ËP(#ˆEJE5a³Æ1/WEŽmäás´,Ò&£²µþJ5æÛõÑžyfÂjìß=…ÁáÚ{ŠkNeá’ˆbÏ!Ï6IHÓ }È'G‹½¹¹4LWy³½`¹¤,ë¼› M+&ÉiöÐy¢ÞŠb:H_†r§’$/rÃÃç^ªüÅV<«ÙÝ[–PÍ‚¾Ö
+©ÖBä$êbÆÕFÄ;
+ŸÝ$” ÙK‹
+GqtÁ³}–¾Íújűz½¦µ«A_îCqÞ––³Ζ ¦IB8É¢š©ïø7:‚‘Ë\À-ìÔô鬪€ñÿŠ3…;”–KÙCÃtÊèLåEò0Š €ÆÊÏiÖ¿ ÄVòr$I—}DBo+R3г¢ yÉSÑ}i‚]eÐy)“4¬&©DβXtV»BPE€`aÿįmšéT»§×o7D¨P‘OÒÜnÄÍv>/€ö…=Û²K Ê!žç÷;Çz/èÖîå;ÐR“Z­x 'øæ6EuE <ˆU½Y‰êœÕ9OTlZªæõ‚¥–½ÌÚ@û.²«ÐÕUÖwM‹1‚È3Ýî,(åð<虾û~àn£†@Û
+ÜVV‚€“6ïãj•§vò׃–‡íS6p.óÏ‚–oÅ“®~°sªïÀ- ˆ}쵚ó•eJ•ÏiTÌd•¦{A¹HùdïM¦æuØ-A€:™Ñ˜Êuë9­ÒDwæãu«žLEQu`Šëb¬gŠj¢ÿ¡T§¿Ë¡ä:?¯°Pçëðìu©ªÂêäY&î³ëˆs@б$åiø29.‚(®bÊI$¯RsÊÇEqÊì D¸RÅ€¾"¨£pÊž7u¾aIÒåॴp0ÍŒþÑn¹J%º&êQéïiòJxq«PT6@Êô}€- 2-7$RuvµF=\¼-âÇ.’”Æ­\:JC!¶Çˆ2'µÁîœåQYöéÛ2KUõ–Õv·¥ž
+îâ›´Ý5£­2‡ïãí%n^’aχ¶¯@*¡
+5ÿHòúÊíXôÿ
endobj
-1909 0 obj <<
+1922 0 obj <<
/Type /Page
-/Contents 1910 0 R
-/Resources 1908 0 R
+/Contents 1923 0 R
+/Resources 1921 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1886 0 R
+/Parent 1916 0 R
>> endobj
-1911 0 obj <<
-/D [1909 0 R /XYZ 85.0394 794.5015 null]
+1924 0 obj <<
+/D [1922 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-1908 0 obj <<
-/Font << /F37 1042 0 R /F41 1238 0 R /F22 977 0 R >>
+1921 0 obj <<
+/Font << /F38 1042 0 R /F42 1238 0 R /F22 957 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1914 0 obj <<
-/Length 1007
+1927 0 obj <<
+/Length 1009
/Filter /FlateDecode
>>
stream
-xÚÍX]sÚ8}çWxú;#E–lOŸÒ,ÉÒÙÒ-eŸX†q°H<56•DӴ俯ü1Ä ÙéÃX–¬sÏ=÷ʺ¶ùa‹qÈ=âYŽgC†0³¦ó²îÌØM Ï€õC úÔ»aëâš:–=N¸5œU°\ˆ\[Ã`ÔæÀŽA@í«ýëÞÍ߃ˎc·‡½ý µ¯{vóÖÍàòÇËA`—áöÕ— »ƒ|ˆïzýßó/¿ìt¯»ƒnÿªÛß·ºÃÒ—ª¿ÑÔ‘¯­ÑYqû} Aê¹Ìz07bÏ#Ö¼e3
-™Méº'j}n}*+£ÙÔZý0‚„rR# +ºrd æAN Íœ…‘è
-ïâD
-Ó‡w³ËÅE~í':oôæ‹HÌE¬E
+xÚÍXmsÚ8þίðôÜŒ½X¶5ý”æHŽÎ•^)÷‰c‹ÄScSI4MKþûÉ/CLÀ›Þ0Œå•õìî³»ÖZØBæ‡-AD¹m¹Ü† afMç-dÝ™¹›.žë‡@õ©wÃÖÅ5õ,¹Ck8«`yy¶†Á¨}õÇå_Ãî Cmv
+¦‰È9°ø5ôBæ„~´\TÇ“d‘&Òñ'çÞ–kû’þ þ¹¯´ér0K¤auÃŒßõJú1 †Ñ`ƒ’zµš…RéC8¸GHµþb6\LÒD(d‹DêRžÞŒ·Ô@·JíéhZÔ?7nn-«äåjÛàT#f ÚØ%;Šk”ÔÑóEIbãRÿ6±#ãr­³`îµõß–~¬fB‚00)‰/ç·B6Hª
+çM€¶²`±¼-ý­.Ý7n˜ü¥*YÊ©ØD3\Ø•[åas9¤Äe º6eÐoÙƒÜu«"ß„äPv®cvZjc'øæTMuž›Ê]Hœìžšdï1ÕÞ˜šÙàºÐEž³‰#í' 2Âéž÷¹¸&ˆBB]þßpM‡ÄT±¶ä› ±‹œ†|{:žCNãÛ¦Ðvêëx©ØKy¹·Qió
+R=¦ ÈáîÚ¨ÔrÎw-/=ž›þ/$¿Ÿendstream
endobj
-1913 0 obj <<
+1926 0 obj <<
/Type /Page
-/Contents 1914 0 R
-/Resources 1912 0 R
+/Contents 1927 0 R
+/Resources 1925 0 R
/MediaBox [0 0 595.2756 841.8898]
/Parent 1916 0 R
>> endobj
-1915 0 obj <<
-/D [1913 0 R /XYZ 56.6929 794.5015 null]
+1928 0 obj <<
+/D [1926 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-1912 0 obj <<
-/Font << /F37 1042 0 R /F41 1238 0 R /F22 977 0 R >>
+1925 0 obj <<
+/Font << /F38 1042 0 R /F42 1238 0 R /F22 957 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1919 0 obj <<
-/Length 2891
+1931 0 obj <<
+/Length 2888
/Filter /FlateDecode
>>
stream
-xÚ¥]sÛ¸ñÝ¿BôLÄ
-=»_~ŽÞÿåíÏ÷Ww—ó$S‘/ç™UÑ»›ÛSòçýO·×7~¹{{™§ÑýÍO·Œ¾»º¾º»º}u9×E¦a}"^Xp}ó×+†>ܽýøñíÝå—û/®îÃ]Æ÷ÕÊàEþ}ñù‹š-áÚ?^¨Ø”E6;À@ź,“Ùæ"ÍLœ¥ÆxLsñéâoáh––NÉ/3EœI>!ÀTO 0Íc›ç,Àߺ¶ºœ[¥úgë62ü¼h\ßáÁïxÑYbâo5×:.³,!Ãq++–US=º¡îÚy×6Ç7´fþdïúš|}èYൂÛ̳2V Ó 6’T£äp,ùOƒªMÕ<ü¡ú‡RI[㶌qí’_z÷X…}Nr€m’4.SŽö‰µìô÷°Óýe©"¸]ÿTËZ«XicgVçq^óÿEÏ
-4Yfçjþ¿ùc¨“p_ÜŸ×)`% _qÎj®01xW1mC:5 ¬¢˜YUÆi P„×ÕNDŒÈó4ÎuYÀHv¿FÉ‚Pûj÷è ^»€¢Œ…Á‹n{d¨[1ÑàY,Ý VP‡91äI¶
-ÁÅ°AÅ×oÂQ¡ºŸ[&j\gœ$JälMž"˜“sàHÎ
-Ã}Å
-r£gÖ¹Cî!;„aoÞôSõP­/þÁxŽ õMwh®Wü=v{é#öâíØ]*Å0kK¢ëÒäGñíȲ–À7t°†“çN7ãÊýûºQƒa öùŸáé—¼ØbhØÕæ™~©Å(ãÄÂæ‹bAš«¡aÿ0íe9£ÃäL õúeœƒ0—¦Iô†Û
-sjMd!S‚=/ªíÀ¾‘ßÀ„£”ÎiÂ`Ч$Ç줌n?á·i¾¬a’"r¾ Cß J`ë°ny¾"ðÇ‚*Tƒ² ›ÔFŸDŽO[â?¦ÂP9'òÛN2«ã1dÏvÉ’9·Žªf%éOù8
-ˆn?½ ¨#ãFÜÓUå†ýj«Å¤;ŸLÅONo~54lE¨œŒ§V“@,iÈyI&ud"u u-C±0T!´Ô8z-
-‰!~aNÄø&ßYØ>UzºW6òyn¤¨ã4ò~£¼2a¯T6zÓ<+sLyvFjS˜y陌3Ëø]úT€†Ü×KüUÁÉwÊT¸S¦žÝé²£*BvT…dG
-¥^ì©ìÃ1å0\€G#ºó×}¦!eNÊèšó¼õà+~,“Š
-'i2õ‹¯šy‰÷ï˧ßSèõ‹" Ùùï"
-k´2Ÿ™,NQž(Æ2&ÿK´'þ¿6N4ñendstream
+xÚ¥]sÛ¸ñÝ¿BôLÄ
+þô$5¡)¢b’I˜*Næ› 5YÁܧ -4SG4R½¼x{ç“",Ld&˯<Ty®'‹/ £ð8¨àÃÏw7·Ÿ~½¿ºÌ’àñöç»Ëi”ªàæö¯× }º¿úüùêþrªóTþrõËãõ=Oáñþöî#c
+þ¼ÂôþúæúþúîÃõå×ÇŸ.®ý]†÷Õ*Æ‹üûâËW5YÀµºPa\äéä
+£ØD#L¢1&Yh²Œø{Û”—S£AÿlìF†_æµíº¯<ø/:‰â°Ð*™Lµ‹4ˆAÜÊŠEY—+ÛWm3m›úøŽÖLŸ-â]ÿC“oo"=ñ¼–p›iZ„*:©6ÊA]JDzèm_nʦçáÇòJEM…Û2Æ6 ~íìªôûœä
+ò$K
+
+°³réí çèÀ8Á:BI0h‚Äoh‚ ÃØ°ÑmôvLhÛ’ÖM}$O“`f;€vÙ;¬XP"f¶'èò
+"+XxºËá‰Øé`ù)Ç<? É=Ö†M 2. ÖA®ˆ˜CÕ¯z~tÄ=>Ü~bè·òˆÇJUÜ.…-óB¯…Þ¿¤rýÅ›Qǃ{¥»gq-NcIM85’d™Þ/lÚ \ ”|á&UªºQ‘±e¢ÆuÊY2V‘œ­nÁSsrÉ
+„óâ'Õaƒ”å7Ú#³©&L¦i¹ª£Z­{Þe[ÛyéòG)uE¤Â$…ÒúL âÉ—!¹÷œ_qT5
+¶€¡¡¡Î‰Ðk°`
+Ê$ˆZÕ{aÚNžizL”ÙuÆ%§A©Ò|êBôワµ‚á
+ç3€—g÷ò³Ã €¯
+‡ ’&ýva›;CÄlªoè‚ö-ÜxÍ{+E¼¼¨b$öª#<T40\–§c Úç
+E—#Îëñ¦``À±BoVrlÄ•ç<üH<¨àYÄa†…Zp&(Ÿ(â7æHŒoô¡…íS%§{¥ŸçNŠZÎXp”S&¬q5ƒJ:€ge)ÏΨ|q
+3¯½“qf¾LŸ*PŸû:‰¿Ê""ùN©òwJÕ‹;}/;ªÜgG•Kv@žY
+Š%?HË[î[3•ˆÔ È©îxÚ·Õn³ó‚æåo9ƒgöÁo9§·¶±×Ùö3?Ø#%øcd†q®Âd=ò›¯š8™ÿð/̧Ÿßh÷ó<ò-Ùy÷ž¥!,†3 ”(+[½øÜýíè§ÿ/’ˆ6endstream
endobj
-1918 0 obj <<
+1930 0 obj <<
/Type /Page
-/Contents 1919 0 R
-/Resources 1917 0 R
+/Contents 1931 0 R
+/Resources 1929 0 R
/MediaBox [0 0 595.2756 841.8898]
/Parent 1916 0 R
>> endobj
-1920 0 obj <<
-/D [1918 0 R /XYZ 85.0394 794.5015 null]
+1932 0 obj <<
+/D [1930 0 R /XYZ 56.6929 794.5015 null]
>> endobj
602 0 obj <<
-/D [1918 0 R /XYZ 85.0394 684.6711 null]
+/D [1930 0 R /XYZ 56.6929 684.6711 null]
>> endobj
-1921 0 obj <<
-/D [1918 0 R /XYZ 85.0394 654.5572 null]
+1933 0 obj <<
+/D [1930 0 R /XYZ 56.6929 654.5572 null]
>> endobj
606 0 obj <<
-/D [1918 0 R /XYZ 85.0394 654.5572 null]
+/D [1930 0 R /XYZ 56.6929 654.5572 null]
>> endobj
-1922 0 obj <<
-/D [1918 0 R /XYZ 85.0394 630.1458 null]
+1934 0 obj <<
+/D [1930 0 R /XYZ 56.6929 630.1458 null]
>> endobj
-1923 0 obj <<
-/D [1918 0 R /XYZ 85.0394 630.1458 null]
+1935 0 obj <<
+/D [1930 0 R /XYZ 56.6929 630.1458 null]
>> endobj
-1924 0 obj <<
-/D [1918 0 R /XYZ 85.0394 618.1906 null]
+1936 0 obj <<
+/D [1930 0 R /XYZ 56.6929 618.1906 null]
>> endobj
-1917 0 obj <<
-/Font << /F37 1042 0 R /F41 1238 0 R /F21 954 0 R /F22 977 0 R >>
+1929 0 obj <<
+/Font << /F38 1042 0 R /F42 1238 0 R /F21 954 0 R /F22 957 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1927 0 obj <<
-/Length 2502
+1939 0 obj <<
+/Length 2498
/Filter /FlateDecode
>>
stream
-xÚ¥]sÛÆñ]¿‚ÐŒ ã>p
-Òv¾+Wó¶;,QAïï´±¤@éÀ²ÑÞ€FS{ÂüÑÔ/•-cÚr[V~ÏÈ®a¤ïÙ™Ï|&x)»oµnªªy)ë'Æ¿Ïñ|p’¹RaÇšŽ´*v]ÙÔí_®ç&Ízîl¹ïpã,’Ãer~_U¯<_5õ·(ÒO‡ýµJƒ"‡äY°÷ mϬÝÆ×LÜí}ÝNe]ìEÀ5˜9Ö4k¶8³xyDn}Û¡P„Ûbÿ\ìÿ
-î¬tð²)j¦d!«Ã¾…‹1%žǺXmë÷¯L¹nD’?=?·ßÅ^nÇïÚúnµ)Z¾•ëc°'+O”À
-Úª]«€”ós¥”=¡›oQÕ~[ð•V™€æ ú:gà©:‚Ês–ܶE ìŠÑdCê¬^ü«pÚBØ‹gT"Ñ­yÌËõ[Æ"éuÇQºM³/QÏ£Êô ú"+¢åqåA…y8¥ó‘ÛÅ&·‹uFlˆ¹Ô®>—ž—QÓü
-"åL=["±µÂ„Ú½”¬u¨(X ¦{ÁEÓÐFYzª6¶Ùå†F…©Žb&TÕðëd]Í{ª‘èa&ê£B¬;„Pw8n}Ywð‡Z#|ÍcÙó£µjÖ<>|á‘Ü tÃR‡·DÎ5aKöEïì‡8À×FSøǘŢeœ®Ø×R”R<c!ªmÊÕ†)W?rY0¢-Šóʘü°Ýa¸›ðVVë j–­NSུl
-‰Å¤½1öu¾^Ø _2<‡³N9Ž #ízVÈ´)¼5²2]z0bI V%g4ÛZ%$º3[ƒ€¶Ì‹cÈ
-ÑzÒxÊApÊÁÿ}pfÐÆ iRä;Žìµ©ˆe-Í° 2Ù©¿?fc“‘Å)W&ç<ÊшⲊÖÀ”hçDáëXÕ LèäUª¶ ßµ¼os2Q ¸t|2®)]Fí®M÷`YêÔõÝ”´4S¯rÄ çÁó±°p1ч~³5oöÚxñVÇGÄ@G+®/O'Êž•9›¾¥ø3×)%÷{/†í*ÉO=n#äËbãŸË> ö̼Lé4ß,}5õàL6>w¨)}dÐLDÙ ·!@ÙÐ&™=u)ø-ßòÁÂ*pB¬¿¬½L;¸ŠYdßvœy¹kˆÜˆ£’¼)Ʀ®^qA„“"
-[0¨M@ÄF€‹@Ôa·<ñm Oj»’Š1äÔ•@£m88L7»bE•â™9É–ŸúøfÉ3®$¾³:9–<‰‚¤ªþ„Hax³Ü¨œDö­rGGabfrä\F*Ú`­yé­. «ûøN=¯†V¾¬Ë®äU±¹àü/dÓ¶&c3¡›DÈH¶AåÖW»ðçMäƒ.Iç£Y_TM–ßÿdWý7:
+xÚ¥koÛFò»…>Ò@ÄpŸ$ï>¹‰º¸:wŠƒ®é‡•DY¼£HU¤ìº¿þæEêE-’ÀØÙÙ™ÙÝ™ÙyPj’À5É\œ˜ÜNÒÜÆ.Qn²Ø\%“'Xût¥„fÚM©~x¼zg²Iç^ûÉãêHV'Y¦&Ë_¢?Þüóñvv=Õ.‰||=u>‰~¸øȘœ‡Ÿîî?}Ý\§6z¼ÿüÀèÙíÝíìöáÃíõTeN¿ o0ÜÝÿã–¡O³›Ÿ¾™]ÿúøÓÕíãp—ãûªÄàE~»úå×d²„kÿt•Ä&ÏÜä&I¬ò\O6WÖ™ØYczLuõåê_ƒÀ£UbÓŸÕYì|NÓØ9òæ¾¼Gû
+¨Š‹§ûN•JâD?™:åãÜj3XÅê#«(ØÜX›MR—ÇÞ
+ÔY½„WáÞ·…°ϨD¢[ñ¸,Wo‹¤×G‰°ïÖÍ®DM<Œ*kÐ/苬@ˆ–ÇE
+*÷R°Ö±¢hu.˜®÷Ìb›äé©ÖØd—g:q"LÞhªáÇɪšöT'"ÑÁLÒ„Xu¡êpÜ„²îà•FøšÇ|²çGc1Ô¬x|øÂ#yè…¥,O‰|kĔ슞٠.ÂÇFSøǘ٬eœ®ØÕô8”R¼c!¨­ËÅš)>r^0¢-Šóʘå~³Åh7⬬ ÖAÕÌZ¦À{iÙ 2‹ÉzcìêåBxaƒåœá)œuÌqLœhß;dØ žY™.±¤«Ò(0šm­Ò2ÍÏ¢58C¹,!ت¢
+ƒ‡ úWÈmØ×~éµg‡° k–‘j?¯Êè¤Ñ×ù€2ÑÇ!_»1Š¢e‰zÅur”¸ˆÑNÃ6M+dœ¨†"#¢f1/;F€ÿø-"mx!ðTâ혥%ë!7bæ½Ò„îŽSŒýô–sͺ„Cb‘¯६*†æB.‘uÛÔËb ¢ Ðìvôhw_¿Ü~Uë—²^ `c$]À%ë‰Øí%
+D¯§IÄžŸæ;Àã^1†¨™VbUô{Øl+Ê„:=hžyèZ@GçÅýÀ}š%¸àȱÄb¢uôŸ$B×›m‡.¦‡•E(`tÚl¨úÁYÝtåê•)6·ž
+^`Û"z.Þå¿ÅaÄZbhÌy’׈cÑ,û ½âñáó#ÖÔ7_ŒÇnu8ºFg},—ä‡ãeì@¬¼&¤«1–÷A”POE]Àcïi!š‚NÛÇv„Oc;¡¤°
+Fà‚V¸ ïÆ<i¾§çæÅnQØ‚qO-"Ö´^¢öºåIh{¤HxªPÛ•T+ˆ!÷@ .¨ü9Ú†ƒÃxó°-T%ž™“lIð©ÿÇo”;ÇEÄwV&‡r'URÕ_) o—:pØ4±o–:&=ll 'Þ礡5–™—Îê³8µºïÔïjhã˺ìJîM[ NÿÒC6`k²5Š­I„ŒdtXîzx ÙA1è‘t>šõ5ÕhåýoöoÕžàðaÊñ]×2¼ßRû⢲D[´g¼Ç7ÉIG=EÃ#œ¿Ðå|ÚsºýH¯1œÊ{©Ôx"MBXä
+nì!æ}ÀÓÑ÷ äåO$ò'„î„+Ð7Ͻ+Žó}Yux¸ÊQ%çÈŽoÄ£ù]&Qiâ1_d˜GM?ÑÛwÿvsøa˦±É2=•Ó¤–Øؘ\aMŒ²P?*Qê€ÒÞe:íÉŽÎþêTÝendstream
endobj
-1926 0 obj <<
+1938 0 obj <<
/Type /Page
-/Contents 1927 0 R
-/Resources 1925 0 R
+/Contents 1939 0 R
+/Resources 1937 0 R
/MediaBox [0 0 595.2756 841.8898]
/Parent 1916 0 R
>> endobj
-1928 0 obj <<
-/D [1926 0 R /XYZ 56.6929 794.5015 null]
+1940 0 obj <<
+/D [1938 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-1925 0 obj <<
-/Font << /F37 1042 0 R /F41 1238 0 R /F22 977 0 R /F21 954 0 R >>
+1937 0 obj <<
+/Font << /F38 1042 0 R /F42 1238 0 R /F22 957 0 R /F21 954 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1931 0 obj <<
-/Length 3024
+1943 0 obj <<
+/Length 3021
/Filter /FlateDecode
>>
stream
-xÚ­]sÛ6òÝ¿Bӗ҈ſrsªã$î4vÏöÍtÚô&)‹-Eª$eW÷ëo P˽K‰¹\,€Å~/h>cðÏâÀg2Q³(Q~Àx0ËÖglöcθ¡™[¢ù˜ê»û³oßËh–øI(ÂÙýr´Vì³8æ³ûüïâãâÇûËÛó¹˜úçó dÞwW×ï“ÐãâæúýÕ‡ß.Î#åÝ_Ý\úöòýåíåõÅåùœÇ‡ù¬ð„÷W?\ôávñéÓâöü×ûïÏ.ŒÏ˙ăüqö˯l–ñ¿?c¾Lâ`ö /ÌçI"fë3H?PRZLuvwö¯aÁѨžê’Ÿ±„ @’K_ ½¼/íÁ`_Š8ô¡&ÛÎ9g>ã2„Õcî³(Œ¥(>R
-—‘/9³(HüP
-©µÒyÙYâùö½c-2?L"» á-žóØCâ¹Hï?M]t†^J#„ßvENè¾!ÌF7OenHÒº{.ÚîêmÑ–vÅçUQºnôì9r¼Àyý$„fjV@$öïšjÛ—MM¸çf[åÃÛª§÷Ò\ÿôîæÓâêšÞŠ²~Oè·m]ä`h’I瑩v.@
-hhÒÌ9R ´”h¼ìèÙm7›¦íµ€`S´„*‹çóDx¾ÑÅò¢Äd`t‘VUó<Gyíz "?CCš¥5­þPÐvZ;xŒ¹
-ÌÑá)3J!¼‡mO€1|!lt
-XlbY[ç™)æìÀrÛ¢jR·C9ZGr¯íx(Ôˆ«˜„$¶ðÔÌI[~éµõ{Š媀%éE×Ð÷±y.ž
-]¡ dlë|‰…)fæã#Ï¡«1›d,}ò¹TâàŒ‡¬C‚iXGå7:tÂœnSdårG¥€ÒÕ‰TCÝ öö.ŸPb𠘥«¼!%᎜>cgD^­§U£û Óz$°ç–@ck“Æ5€Î4nö¾¬TLÂx]}ø¡âòXÒÎx±'•ÐgC¶^èIyèË8 g*~Äb’X^TÅcŠeô¼1M×4£3µIbT{¿¢]xöiZÐÀ¸<‹zIa03ÝÕj02ÝM#»>í·f1Ì”zñzÙB¬hÏco›õ¶ºu„TÛ3®ó†ÿÑÇnVa¦{CC×—÷Ö Þ¹¹ý€éϧ±E½#45R„4¥'3ýêÕ¢|‚-ô‰ ÝRk´ØÈ+þÜTe¦sŽ‚¾¼%l¹c÷b1£æI9Ò-ìÓ–ýŽð¸†!ŽMãƒè‡ÂÅHOœ§:—q¨7°íã‰ÚŸÐ¤Y„ò¦0$:”ê9› ª AÔ2ŽiæAžLTÅŸZöœVsè«[í«
-Ó×YÓ!K»+,FUÞH¹ŽúÂPÇ n/ñ =vä@éÇ*²•&ônÇÍBä'LØR惘b·.\÷½*% 5!f£7'ä%°ôà0PØK18ÁvM·¤œ ¹xiíÇøF”é d¯Ðx‚´JÐ:ýÍä] -m¨éŠQ4JÀ"¿¡šGV4«¢+W(Áqi«£9¼$,ÍÓÞ:¨™¦+ECƒÅÚ&H@tEûTfæšqváíÓÕý×fÉià7ÓL+o‰)öÞÐ]õ‡ P£/0ºøìVé¨ð˜±Ÿ$øAæ@3cÖÐFÓ]ùb|J۲ѕ äZŸuG#y
-­
-ë^¨#º­¾îÅ醸ii”ytŽíÆ’oÚMˬLÍ(Ìéz65QINŽ‰˜ß‹Ý³éL_OŸï\ |¥Û öhncwuSïÖ“#[°W@f¾±(ÚiQÛ
-<Pq(H‡OPºoÖú¢Gônð¼X¥Mþ„ HJØ×4Ï|ù蛬©h(—>z¥šHÉ
+xÚ­]sÛ6òÝ¿BÓ—ÒÅ 07÷à:NâNc÷lßL§4EÙl%R)»¾_»X€¢$Xé]ëLÌåb,ö{A‹ ‡b’f,Ëe>1¹f)é¤\žðÉŒ}8žfˆ¦cªoîN¾~¯ì$gy&³ÉÝ|´–eÜZ1¹›ý”dL²SX'ç×Wï/?üûæìÔèäîòúêt*Sž¼¿üî‚ 7gŸ>ÝœN…MErþñìû»‹Êüß\^½#LNW½¹xqsqu~qúËÝ·'wÃYÆç\áA~?ùé>™Á±¿=áLå6<à g"Ïådy¢SÅR­TÀ,NnOþ5,8uScòÓÒ²4ËRB1-µy}_ڃþ”6c¹Ô{ÛN­`Yfpq€¸Éì -G:Ü š4g™’Ê)e]ÍêuUö(¯ßËñËA@FÃ&Hxƒ„§Â&H<•yšü§mªÁ,)h„𛮚ºo ³rÃíS=ó$EÓ=Wën—ê÷Mµ®ÃŠÏUCè¦u³§È!ð2‚åi*SËbD2Ohÿ®]lúºm÷Ün³áÍ¢§÷Ú“\ýðîúÓÙå½ÝWuó0žÐoÖM5ƒS\%×Íâ%ÆH-Mù9;RJµ“×=»ÍjÕ®{'$ XUkÂ?ÕÕói.æu!ÆÊ393*õº(‹öyŠòz‰è-5Ìf™ð´eÑÐò÷íçÔƒç˜JeXÆ…ç!7uê
+Qï®no/ÎNýpIÆ1ós~æ)wýOOA˜¢™ímvõCÔ”CØ}Õ6á8u8jýÐâÜi‚/²nsßõulEV/µe¹YchÚ ý«Î#v”å9꜆·6‹è1« qHpˆþ¿¤!”Fäì’sñvŽ+~"Þî¬øâ°ÊÉü!òwC°l›Ÿ9—›´•IAcýËÊO88g„3ò•‹¤)–Î ržü,¥fø XÐbEÝ?Ò)¨Ã< F |õEÝ8/Ç1Ðά¤Ø5#Š}«Š¨ª,Ð2™¬Úºq  §”c
+å—[Û½øбX‘^\&Ûçê©r…
+JÙPé+¬L13;iù^Ær'Ÿ*-wθË:$ˆ,UžuT~ëB'ÌéVUYÏ_¨Ю:Qz¨ôÖ>³4æZ>³\•7¤$Üq‡ÓûjìŒÈkpàbѺŽÃÅ´ÞÉìyM ·µ½ÎU[ ¾Ê&ã†ï¯õš+ÏÒÉ4OY¦…ú– 3^kK•M¤û4Þ–Z˸Vr¢d†[’جZT–ÑÓÖ·]ûÃòÂæ^·wT¡Ë$<}šz‚gÕÌ)–¾!£b Fö·sÈ®/ú_ S¥[¼™¯!X¬Om²)ûPÞFbjè¹p‰c{`ØÐjLuohèêâ.8<×70ÿ1;k^M!}íÉ}C‡‚µªŸ` wb.KÅÔMÖ$Õ«E]º¤£¡5_¶^Ž±[±øQÿ¤$ÅöY×ý á;ð Ol}çƒèû*ÆHOœ.™ (8°ï¹úFhÒ,B³¶ò$.–º9«ª AÔ2Ž9æA®LTÕNö‚V‹è«{Ü–©~‹»Ôû9wQó}'Ý3í½Þ¨spÂT…2•:aß^ªÔ *¦VŒ‚ œ´·í6½lmÂ¥aÀÌéfI“æã•iØt‡×g_H¶ð$¯ÛÐò—‹p
+uÓVAzT©qq×n¸šU
+>$äíÕ4!ã›QîÂP¸H#à r+AËâWŸX\E4Á¦«Fñ(‹ô‡jŽ@žé=V]ÝÆÊD®›«PQ{ÍáUaíŸáî @Ç4],z¬*–!K¢«ÖOué/GÞ>]Þ}é—üž~õ-µNÎð:±Àš£Ë~—*fÜ5fKןÝc1ª>¦©eyžë=ÍŒYC-î]ý‹‰ð©X×­+oÐ _ Zv42+ aBAcõ ÅD·q—¾8ÝS
+ä«u¦åW¦–æt-=ÛŽ¨• ÇDÌoÕ˳ïO?ŸC?ÞÆ<@3­Ó ¿ÁýìKÓ6/Ë=“#[A~¾·(Úé¬ u¸MQqhHˆOPÀ¯–îºGÜnð<,Úü ª‚°ß]Ñ<ÿ¤oËvACå¸þq+5DJÞ
+=ûmGu!¨¶Íæùdz똔dÐ gcŠ}Ę
+™2k³ â¿aJñ|Ø•ì?W?×.&wî3b¢†®'£*=ÑtLõz¦¨¶ŸW@ÿÐ îo. Ü
+ ÑñèîUdûÝ{I ]¸ÜÝþvô9…€YÕ•ëzµý¬
+i”Ø9ç±Â-ÐæćëÒ‘ËíáÐ ñëƒÊ-Eƒ–ŸQü@õFW‹VnÁŽ ÎÑ™UÇmmDôº©¢È‡¼]C“Œ+Ýy :Üz×Ì gã½ÿN3;ö)R 5GÌÊã™0ãC52O~ü¸«þyÓ93ZÈ£BˆŽsq°ÖQûÊR¦^éEóÚÒ¼n]žfO5Ð ØTɹ±öØÎÍÁÖ»(xRÆÅxï¿Ý¸ü ö¶Æ;#“e¯Ú—ÿÈ5ÔE[þ˜×@}ô¸ûkþyã29Ëäq‰4ÇYØ[)nY¡‰ÂŽ3jÉ|ø.ö—ÿöeû‡AÐ=(kå+žiR¨SöL!ã‚ËC§àL*è*yÿ/¯«÷endstream
endobj
-1930 0 obj <<
+1942 0 obj <<
/Type /Page
-/Contents 1931 0 R
-/Resources 1929 0 R
+/Contents 1943 0 R
+/Resources 1941 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1916 0 R
-/Annots [ 1933 0 R 1936 0 R 1937 0 R 1938 0 R ]
+/Parent 1951 0 R
+/Annots [ 1945 0 R 1948 0 R 1949 0 R 1950 0 R ]
>> endobj
-1933 0 obj <<
+1945 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [280.2146 384.4392 375.7455 397.1764]
+/Rect [251.8681 384.4392 347.399 397.1764]
/Subtype /Link
/A << /S /GoTo /D (root_delegation_only) >>
>> endobj
-1936 0 obj <<
+1948 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [312.6233 123.81 381.2953 135.8697]
+/Rect [284.2769 123.81 352.9489 135.8697]
/Subtype /Link
/A << /S /GoTo /D (access_control) >>
>> endobj
-1937 0 obj <<
+1949 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [310.4119 92.6626 379.0839 104.7223]
+/Rect [282.0654 92.6626 350.7374 104.7223]
/Subtype /Link
/A << /S /GoTo /D (access_control) >>
>> endobj
-1938 0 obj <<
+1950 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [340.2996 61.5153 408.9716 73.5749]
+/Rect [311.9531 61.5153 380.6251 73.5749]
/Subtype /Link
/A << /S /GoTo /D (access_control) >>
>> endobj
-1932 0 obj <<
-/D [1930 0 R /XYZ 85.0394 794.5015 null]
+1944 0 obj <<
+/D [1942 0 R /XYZ 56.6929 794.5015 null]
>> endobj
610 0 obj <<
-/D [1930 0 R /XYZ 85.0394 335.882 null]
+/D [1942 0 R /XYZ 56.6929 335.882 null]
>> endobj
-1934 0 obj <<
-/D [1930 0 R /XYZ 85.0394 308.9113 null]
+1946 0 obj <<
+/D [1942 0 R /XYZ 56.6929 308.9113 null]
>> endobj
614 0 obj <<
-/D [1930 0 R /XYZ 85.0394 182.7451 null]
+/D [1942 0 R /XYZ 56.6929 182.7451 null]
>> endobj
-1935 0 obj <<
-/D [1930 0 R /XYZ 85.0394 156.1927 null]
+1947 0 obj <<
+/D [1942 0 R /XYZ 56.6929 156.1927 null]
>> endobj
-1929 0 obj <<
-/Font << /F37 1042 0 R /F41 1238 0 R /F22 977 0 R /F21 954 0 R /F63 1385 0 R >>
+1941 0 obj <<
+/Font << /F38 1042 0 R /F42 1238 0 R /F22 957 0 R /F21 954 0 R /F64 1385 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1942 0 obj <<
-/Length 3198
+1955 0 obj <<
+/Length 3204
/Filter /FlateDecode
>>
stream
-xÚµ[[sÛ6~÷¯ðôeå™
-Å•
-¾`KxÁkN‹‘}•ïÒêh}í¬w¾ÚóÚ.5H"ð§Î(Xœun@Õ~{¨m)-Ž¶pó««X¯í8ÔuVÛ÷j¿„®-æ%ož&(Fa×EEr: ¦ÇxÃ\:¬9%*¹xçÌ+«Æ–v©3ï!ÙrE`ŽíèAÌù§?ö­‘KÊù"æM˜ËÂZ‹WY a"Ѹ‹¹½>²šÒü
-ÔbíjÚy
-4ŒMB¡ºa3VŸ?V3 þñ¤®-<Bˆ(N®ØMY8„ ó­€¾vˆµ¤É)òÙ°B ·Øh®»à B/<Ûà…º9<Ø’™uµÛ2ÞŸ¶Ý ÂC^6Ùnßmѳ+›`°Àæ>¾²õQçW62þ­ž²ÕóÒ«:ܳ rF¹GMhîÙ¡•²‘ú{y9DU·‹b®›L°omk gL›ŒM•¯×bcžOÒ
-V¯6²šaÉ[Ÿk[¨E“þe[Ûn^ʪ&ÍÚu¹³enÃwí¬)|,–0‡3ÍÆb
-ĸ›…_\*´PióSæ·h²jo3˜öâ U‹Ô5¦öǤµm©í#
-é_J!>ÿ Qtp#›Ü}·û®zh¾›¾~¦”¿~ö½‘Ǻ¿ÉúWdQÛr‘º;iFc±Üe»²:ÚGÛ ëåÃ6…³Pc;Kgí}é®ÐÁ$maeÖééÒ­mWîÔ4é³ë¤Á€NöÖgwËñÅ×t{°)yv¢ŠiØ—µù"•Ù¦|ckÓõ:7±=ÝÚú~@á‹u•»«dÐôdRØmõCfîȘºm^<Û{Ü𤴵.`qwÍüN{€,îÊ]6u' NO÷¥½Ò“ïYGºÕö°î(è®a È•›Xõp8­VP¶…¢ qÈÎ>§Žƒ«4èÜ 1Ì_ùLøçœûÛLtúK+.Sê\rL
-¤M¢Óe:BS¸dbDYB'lÿ ŽÜendstream
+xÚµ[[sÛ6~÷¯Ðôeå™
+%nð˜¦NÖmҵ݇¦´DÙK¤JRq½¿~ˆ‹’©w2ÀÇs>0^$ð/$G Ul!C<Á|±Þ_$‹hûx-få@«>êÇ»‹>P¹PH¥$]Üm{²$J¤Ä‹»ÍïË÷ÿ|÷ëÝÕÍåŠðd™¢ËO“åן~25Êü¼ÿüéÃõÇßnÞ]
+¶¼»þüÉTß\}¸º¹úôþêr…%Çð>±μðáú_W¦ôñæÝ/¿¼»¹üãîç‹«;ïKß_œPíÈŸ¿ÿ‘,6àöÏ ¢JòÅ3<$+Eû Æ)âŒRW³»¸½ø·Økí^ê?Æ%â„¥‹€q
+…É^NP¡×V‚aDiª|/<ÕË¥{9ÛíªçU[ge³Íë¡Ó˜)Dˆ\ôÔ;ЄzÒS9C$Q4Ô›ç¦ÛÛG[Øäͺ.mQ•¦¢Új³Î(Â$X0íÅ@yš¢T€n/Ê¡£”(ULOMcý°0…›žÏ?ãôX®qz}rOS§ˆLR ™Ìt¾GÍ2’¦ A#–[* Œa&¦l†o=T„ou©ãa“µù˜mQNT\»GM¨ù‹2êK¾¼² ™€æólƒ1à8ìæ(Û,~Æå±Ü׳MBè¥Iï{š3d$-ʶ
+’rg[užm¥5šZª]±~ÓM"L‹«÷¨ ý!ݨ^DhÀí!__’„äéÿÌü|‰·Åþ°³$„1:Ö—X.íóoáež­cèÅÅIGäᦰÐP¦‡b´rø×Ær'iEä˜VŒ¤HbFã}ìQ3†Œ¥Åi€K>Äú¨­j8ýWÛª~ÎêMQ> í ôKeÜš°¤ï<I8±ïÖÿ'ž Ò Ä•Ägc£ RTªÀé =~Æý±ÜWÇ6ΦX²ø8xÔœ!#iq’nš‹m=T„„eƬ©VeÕÛqd£j)6£Ü£&´CN!¿| þs¹{n'j¹Ï³Ȳ=îÌs1Å7pF[ڜ̒Š\(Ç®ÆHÌ`¿æ¦ ì4…öÑ5ÿ·*sº¼{´°&oMØo¬ÌÖE™7îå̶?;k·‰¿ëÜ«ÊŒ,00åˆ éÖöŸ>Ýj°'H$@Xðç¤kýôùîúÃ&ܤAǧVÈ>ošì!×XÿtÁøGÙùgêLvfckŽó«ÝÔØL{c^·ˆ]Ñ´ùÆ”Ëlok›¼þš×VÁ—„'¼à5gå@È¡.öYýb|uÖ[_ÍvmŸš$axƒëŒ FPuØSÊÊS¸þÕVl6fš&oÌ{_C7ó\´#vžžbZ0?F³°LX¬ÞJ±|gÍ«êÖ”ö™5ï>Ør‰—`ŽéèHºx8ö‘+ÂØ2æM˜ il¢•µ£T%.èöúÈhh+ýËaPË­éæTY‘]¥åYcZÌK¬ËHàÑ8­+,ŒÍ„m2X^¶ÙqךÚnrA%ä>†IïL—¨6* {äîöú#À]>å/¦Ðõ/¤sßTéžÖ¿Á¨ëŠÎ^€®³cc1Ú¨ñÅ°Õ°ìx›„\º-a;T_<”F3 þËI]Wx€Qž\1YÙx„1å:%$¯b%?E>Vˆæåá\!fÅ B/<›à…¦=Þ›’žuÍïN9‚Dx(šA‘ïí‹)êàqviã°$àÏ|”è£Î/m¥ý[?æ맕VÍ8i§(•jF¹GMh¨É}ªÃv þÎD^QÕ¦QÔv“®ömL挮±“±­‹uk[LÌSàIVÃêÕEV=,9Ä ‹ÉÊÁ4/e›ýe*»0®ßËë6+¬æMµ7ef"xc *}80 ÃÉfÂ1
+eÞ>WõS÷yMŠéjO1ýð5« oÀz]u’º ÓȪ:O’л^èΗƒ^àÓT-?TõÄLÝäan=5¾OÌx†0öS¾›VAg5ˆ?Y-; ‡‰3ÑóÜҽ͊ÝT– I‚½Õå¼éD Á‰‹Í.û:õE6>
+Ö«7´RürJE„‘å×'±.,õ(‚uI…á©Û×îó²K;\Xš´ñ„¸E ’³vÊŒ‚ñ:ŒX
+ƒ«ÈL0ê£Î#:£ý_£Hû] ¬‹kö¨ Õa’M€Ýo³»ë{0Lƒ8J™OËÇ»9"…î8ÙÍyüŒ»c¹çvsxô•’ ÷»GÍ2–ÝÍ1&ÙFœd'P„ct æ°â˜`<®×ƒÆŠ‡ $ 5ÿ=‚©€`Öþ!Ã`UÊ" ƒ ByÚw1J0 ;;’ú ôbHB2ëq‡‰Û0”'V‹:wŒæ™ÕCE¨åP§±]îfÕ›ÁÀFÁë÷¨ ÂeOŤ -xË Ö÷c \èåMÊóÝ™þΖÀÕØ×Q‡Ÿqz,÷Õ\c‰þž©D¼÷=jƱ´(㨠ˆ1'\tžot&XËó‡ºhÇ_¦ ܦL‹i÷ ±úm¼S"ýoI¶À‹!Û0líH„mTÀ¤‡\³çBŒlwy$õ¨ÆPJ„ˆv¼Å­ÉŠó öbX%3‘­Š0Í¡z«Nq¿›øöŽaÝa ò©¨zšÐR #F”
+ xÓÅóäÆð0‘"©”Š&ê{$ô4z˜hñ3>å¾~ U " ,Ú÷4gÆPVœl˜À™¡šÇDˆf0ݶ#¯õg›USe«¶Ý#ZãƒeLµÇŒt‡$ãH
+ŠûÊ߆b. I&tp$šà¿T='£ÁÌ¢£îe~»ô
+Éb=î1q’¢Ô"’èoJ3q¬:O/êR›8ðÔ<–/p:cGM˜°L$H(1°ám–Í)Oê%E$ç·TÄ}óæΰ-~Æí±Ü×/°¿R<Uñþ÷¨CÆÒâ¬ã0KèÌéaáœiu›²iòµ;ðÝW›ñ]¡§F7ÀƒÆ”“ %R„&¼ ã¦èW)â<Æ9Ø,JÛ›ž1Ê9xÜë‘Ô3„ÑI”¤»c=ïAqF²â\#`”s®‡Š°Í¡z£?Où‹ •><2NDe:c†GMØ Du  y›åô¬;C…$äÈçïJèïÄXS¤çK쮄ÃÏ8?–ûú`Q)=dthÎŒ¡¬(û°ÂúŠ@œ|=Ðyî9Pw®W¿¬ÚõaUçÛ:o§²7
+»ª¨v«æov­}õoC¸ '†ù›@"ò—R ¦Ávµç@4³ð¸Ã#©ßÂÁ>V°X·{ÐŒCYq–¥V]1ãú¨Ïª
+Y›ÝgÍx!% ²z%ãš=jBuÀ1!%Å$ÔÝÝ2ÜvW܉UÝ©™©2§ŠÉÉFÓ^™Ú{‹²›Ì#kHÓVµ9¥ó‚Yâæ ] ìîN$îàO¿sze[é‹e„1×ax‘Âœ„§ýþ]ƒ¬#q)
+
+q4¸›Mqâ8¿«ïÛï¦ï¡Iéï¡}¯åQ÷Ç' Yýã/S.3{9Mk,Wû|_Õ/æÑôÂfu¿Ë`CÔšGg©õ¬»8#ìLÒVåN;tíÎqåàrM›=ÙN
+t²·>Û«^”-¿f»£9˜§'ªè†CÕèOR¹i*¶¦6Ûl
+ݳ©ï¶ÜÔ…½SMú »«¾Ïõe]·+Ê's›€ižT¦Ö,fï¤é¿Ëé.àåmµÏ§n4Ùéæ´Wzò=w¤[ïŽGA{+ W¡cÕýñ´^AÙÊ.ÄD:úœ¾ îÔ s8D!'£t*úÃëÜßþ£¢Ó_\1È¥<w4•0ÈhvFéNÅ šÎ»+RDLØþ?6šöendstream
endobj
-1941 0 obj <<
+1954 0 obj <<
/Type /Page
-/Contents 1942 0 R
-/Resources 1940 0 R
+/Contents 1955 0 R
+/Resources 1953 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1916 0 R
-/Annots [ 1944 0 R 1945 0 R 1946 0 R 1947 0 R 1948 0 R 1949 0 R 1950 0 R 1951 0 R 1952 0 R 1953 0 R 1954 0 R 1955 0 R 1956 0 R 1957 0 R ]
+/Parent 1951 0 R
+/Annots [ 1957 0 R 1958 0 R 1959 0 R 1960 0 R 1961 0 R 1962 0 R 1963 0 R 1964 0 R 1965 0 R 1966 0 R 1967 0 R 1968 0 R 1969 0 R 1970 0 R ]
>> endobj
-1944 0 obj <<
+1957 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [299.7586 737.5313 368.4306 749.5909]
+/Rect [328.1051 737.5313 396.7771 749.5909]
/Subtype /Link
/A << /S /GoTo /D (access_control) >>
>> endobj
-1945 0 obj <<
+1958 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [292.0084 707.2808 360.6804 719.3404]
+/Rect [320.3548 707.2808 389.0268 719.3404]
/Subtype /Link
/A << /S /GoTo /D (access_control) >>
>> endobj
-1946 0 obj <<
+1959 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [330.7921 677.0302 399.4641 689.0899]
+/Rect [359.1386 677.0302 427.8106 689.0899]
/Subtype /Link
/A << /S /GoTo /D (dynamic_update_policies) >>
>> endobj
-1947 0 obj <<
+1960 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [401.5962 646.7797 470.2682 658.8394]
+/Rect [429.9426 646.7797 498.6146 658.8394]
/Subtype /Link
/A << /S /GoTo /D (access_control) >>
>> endobj
-1948 0 obj <<
+1961 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [257.6971 460.3869 326.3691 472.4465]
+/Rect [286.0435 460.3869 354.7155 472.4465]
/Subtype /Link
/A << /S /GoTo /D (boolean_options) >>
>> endobj
-1949 0 obj <<
+1962 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [258.7928 430.1364 327.4648 442.196]
+/Rect [287.1393 430.1364 355.8113 442.196]
/Subtype /Link
/A << /S /GoTo /D (boolean_options) >>
>> endobj
-1950 0 obj <<
+1963 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [310.7975 399.8859 379.4695 411.9455]
+/Rect [339.144 399.8859 407.816 411.9455]
/Subtype /Link
/A << /S /GoTo /D (boolean_options) >>
>> endobj
-1951 0 obj <<
+1964 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [308.6055 369.6354 377.2775 381.695]
+/Rect [336.952 369.6354 405.624 381.695]
/Subtype /Link
/A << /S /GoTo /D (boolean_options) >>
>> endobj
-1952 0 obj <<
+1965 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [294.1999 339.3849 362.8719 351.4445]
+/Rect [322.5463 339.3849 391.2183 351.4445]
/Subtype /Link
/A << /S /GoTo /D (boolean_options) >>
>> endobj
-1953 0 obj <<
+1966 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [303.0862 309.1343 371.7582 321.194]
+/Rect [331.4327 309.1343 400.1047 321.194]
/Subtype /Link
/A << /S /GoTo /D (boolean_options) >>
>> endobj
-1954 0 obj <<
+1967 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [332.9347 278.8838 401.6067 290.9435]
+/Rect [361.2812 278.8838 429.9532 290.9435]
/Subtype /Link
/A << /S /GoTo /D (boolean_options) >>
>> endobj
-1955 0 obj <<
+1968 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [359.5147 248.6333 420.7148 260.693]
+/Rect [387.8612 248.6333 449.0612 260.693]
/Subtype /Link
/A << /S /GoTo /D (options) >>
>> endobj
-1956 0 obj <<
+1969 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [386.0748 218.3828 454.7468 230.4425]
+/Rect [414.4213 218.3828 483.0933 230.4425]
/Subtype /Link
/A << /S /GoTo /D (boolean_options) >>
>> endobj
-1957 0 obj <<
+1970 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [301.97 188.1323 370.642 200.192]
+/Rect [330.3165 188.1323 398.9885 200.192]
/Subtype /Link
/A << /S /GoTo /D (boolean_options) >>
>> endobj
-1943 0 obj <<
-/D [1941 0 R /XYZ 56.6929 794.5015 null]
+1956 0 obj <<
+/D [1954 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-1940 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F41 1238 0 R /F48 1258 0 R >>
+1953 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R /F49 1258 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1960 0 obj <<
-/Length 3103
+1973 0 obj <<
+/Length 3101
/Filter /FlateDecode
>>
stream
-xÚµ[[sÛ6~÷¯ÐÛÊ3–¸nêtÝÙM»Ž;»3m‰²ÙФ*JqÝ_¿Wñ
-¶Û4™ !ð#Îß9¸¯2ø‹WŠ£Œj¶’š!ža¾Ú>_e«Gx÷õö˜M
-¯v?¬ßüã滇Ûûë áÙZ ë ÙúË»w_¹ío¾}÷öîëïïo®%[?Ü}ûÎUßß¾½½¿}÷æözƒÇð=ñ-Ì|ðö®ôõýÍ¿þusýÓÃ7W·Ñ–®½8£Æ_®~ø)[íÀìo®2Dµâ«ø‘!¬5Y=_1Ng”†šêêýÕ¿cƒ·öÓ)ÿ1®'L¬6
-“^ÎPÆÁkÉ0¢Tèèe‚§¼PÆË»2¯Î‡¡±3¤±$«n‹#¹5!˜tc¬‘2&ö$¿/
-çðÓ“/ìŠv{,§²©]E³7Š ÌÐe„iP¡¯ÿ@(%ˆ
-é`e=4‘ˆ 1©eÏD÷òø¸r…ûŽ±¿`ì¸]gìöb–!#U¢D"Ìõ‚×#jA‘qkF4âµ'ÄbO°†uP †”í¡¢*scý¦©«×Õ¸@Zé´ü
-âÆŒÅiJ”Ç|q½¡™4ÁQ{Õ‚F¼“õRV•7¢j½æ
-Ó4Ð$Ó(ÓJ™0Ešsb[=¯±Zù©Ø9.æ­{–{ÿ<ù§¯÷ ›RÒ~wº~=ø6ÊYŽz¨Iûá¾Í?ü v—XB¦cŠ®NQ¾—¿é~0ææ¸]£Õ±iN›†!PBö4Q4¢&ôèç‡akÉ°<C\ñ…°ì¢æÃ2¢ŒÄ}s|É»‘û F\bQ’{”&qc\Oô·–7”òõs‘×eý¸?Wæ7³,4õ–ë¦à¸n^=¦šªÜ=œþ†Í»âØ:LU¶';Ì3ôã±(‡dÎw1z{ØE),±}‚Æk³ÍÏmáeE«¦ù#Ó»q/÷yY¹0$#L1î‡a¾?Gˆ
-Ž¨ ÉýäD!0=ñsâHûöù¹:¹Z¯ÛßZ÷ÓñÀó°–ÒÊÎHìÓ»»¢6빌ûÅ"¼éµjGóyxkè>'ã¥<=ù$&H­û18Æ°ÀÅaV†¦\¢1,o‡ê…­,kžÂHWqf»Í?TEŒìñpŽ™DB°ÐüsÞšIêäΊ¾Œú& N´¥dß`N[ÁšoÊIš”_Vϱ™€v^p»¨›ÊÙùëƳfÓ–¿“†Àˆe„¥5ˆ¨ ú[QEU_‡?·¦b-ˆ—
-&­TÎîŠQNãé›X}Gü‚ÙãvgwŲ¡N h‚ñhAQ[ÉÅ7ÿRŽß]Ô<ç"*ô”þì ?f•ÏÅfj3D™XciM"jB•÷äLª¾.Ÿ{s Ô€…•2ÁA¥ÓŠôŒNq0àÌ·;ÇA9¢ 7C=èœì‡ˆZPdÜZš…BBTd ™¯‹J°0 &û¬ÜUÓ,„°äB§5‰¨ Uú,4;"¦ºº|žÓ€”ECRH
-{PØß´'è¶öTnÇW`ÑN̶EJzÅ÷ˆÌÍ ¡yOþÝ~âúš†à¦êÿº¼nÇ?Ù /P¾\ZûX‡p·ÎœûWe½7wJ<y¡Â1Û^ƒ+ÛË=8+H™Ë.Û'W»ÍëxÎ>wççC±st—©,\9èsNÜ—‘ˆ)&—žé1§1¿ØXð"Ë¢k.—f)§ _)^¦; yʵÉi`Vˆùnw,Ú¶ó†8l®ú¦Tˆ ±ý#næ$¼§„»FTÿNQ¡çá…õývãïaªÎ=L,™ÀÜSØŒ ?ý ¨°ùjî¾sOc¬ |{©Ë@Üñ |‚ª_Îi|VÙ˜[NxŸ?í“¿Ť#<ÛÂÞeÂu8Ô8QÛó±-?ݪ¶©ÎžçLzkYˆ&üJsŸs}ã^Õ\<N¯®èÍd¢Û‚u”âÀe~LÚ‘Çœ¹;pÔ¹mjCÜÇs÷nLdm~(~u¥wïý{Sßž~ú«¥m³-/WMí=:Sºñt÷´¿?¡‘ ò‡íŽÌmù âÁ?ßúRþå,0‰¨Rdf¾“1D©ÆA)ã0œ&Yœ*Ä‘ºÿŒ7t’endstream
+xÚµ[[sÛ6~÷¯ÐÛ*3÷Ë£›:]w¶i×qgw¦í-Q6šTE)®ûë÷àFñ
+¶Ó´™†ðç‚ï
+ÊFìx/ë¥(KÛÑjÃ8G\ ðøÂ@
+Ëi_ª÷øXÖÎÛP×'
+pŸš0!Ac^t‰ U*šC¾-ìÈGŠÊ#2ÿ3L/­Lå³û˜L»¢’’tÊpy¾bPŒ›£LðˆðÁ„U…¹¦c™'{gFÚ…éÏ¡«ÊßÛ¶0mwÚZÏÙŦ[xÆ)Îωþ‡w ؼËÌ/;¨/#Ê­]Û;m6Y“r³DL0“–AÒ{ÄÄv¡nï‰ÿïCÝ’€á<`KÜ1ÄÖø]•-iß`ék:Ní_ýçqÛZeϹ¯²Lê4Aá9+ ëd‹-ëGßòø—ú|¬²Š$VbZ†^ݨÛÊÝ+(¶AÙÃ5žZxÉ„d]GIÖ·ÿ{w‡|1ì¥ß%BEñÙ̱¡ñž=22ÆW¶]mC°¢Òëóö4|Áo«\]šÈ:˜çqÑ4Ûððy˜?¢”‡Eew9¥H
+ãŸ
+µ½4ûKU.®83õ v‚1~›6rÞ’ù˜ÁasJ:f:¨DÌDT/fNχMpç0©ƒ/4 J´¨ -úI]"Må@6v|ú Y¤ÚÕÛós^µ ç-ÂóòµBÛmÁëÛ–ˆ»9¨™õ4—–ºJ¤=ÝEÍ{ºE9â?
+œèËÀÜ£¢¦M ;½){¤g†Íô•)h‡ÉÂDÛE%¨QÞÎß65›¦ø}œ1ƒÐ^P ‚&è¨Ð3ðKOƒÏóMlÊŽx¥‘LÍ~c0 À/Õ³5±ãnñ fûý:†G:Á2FI.ÒþoQKšŒzK˜ ²°çî¢æI×¢â`¹•Ï>3Vñœo&¾¸ sZ€™P£G=!„õõø|Ô›³f˜ÕaQªT‚‚#"Hßä#~Áüq¿sTC•ìþD3BӣТ÷–f Tx!íuQ FÔ䘻r’0+h‚EZ“5¡JŸ…)c‡¡«ËßÄÂŽEC2~MçY[!I¨êbaÄ/˜?î÷O° j ·ä8´¨Eƽ¥Yw-ðRì ,Œ¨ùÌQŸOãD“1$­J‹šÐ¥GCI¬Õ¢¯Ìß™ ƒI{oC`ÿ0KDãÄpßì#~Áã~ÿ8ì±Y E‹ZPdÜ[šˆök›1zˆT‚ˆ5Ÿ<&‰ÈãfA•5¡K?jÄ(ó׈h’ùpšˆÆ Há,1- p霕=|ÁúQ¯‚„Ö6€S£Ð¢ô÷–$!UÒ.K“°‹š'a‹ò=OöÛÙpSÍ홶N‹  ±]KµÝ—AØ÷Ä~º]”Ž2¬¼¤LœÉÃR\QØéwUOÉGü‚­ã~ÿÄ™<Gk“öy‹ZRdÔ[š^\"lôBŽë¢ôŠ¨ËÙCÎl| O(0Ÿê´ô5!¾ÿ]L!¡8éËÿ<óëЊh›P –ólƒH!Jñž¡)¶Eü‚Éã~gÙ&ÆËM{X&ߢ4÷–¦8×KÙ¬ƒJÐ-¢:uª7Mùfá9K‹oQòû|3Hi¡ú
+|V¾]ÌȆ¥Ä”$§
+5í'~(¿d¡²¨Nîk­ý%ÂÑ%T‡“³p¤Ïý¡:·¶•öhË–Ã ¼eÍuUíëŸò£;ËÝf‘îˆÐMñXe›ðMš#Ùî‰Î—³.êOùìó«÷>ܼõeÛ‡Ó™z=ôÅßJ¢î&Ä«/]ŽQ©=ÎËvñ=:S?û_»¢ùh¿Xãöø *Mh«£
+—þ æö{ÿ´Æú¸w×·,ÄŸŠ–OPõëMH*˜Þˆ ¢ÏŸæ)Ü‚âÊ“žMréj¼¨íùØŸònUS—çÀs®‚µ<Æ—áâ$Ðܬ¯}SÁùóáôê‹ÁL.»=8W@©w¸ŠáÇ•›xìñ¿í6̘ۺ²Ä}<w/Á´¬Íùo¾ôþC¸0.Ú»ãÎpƒ´©·ÅåF飻1gK×îö×ð_ìd‚üñûŒ@ö–üñàÿ0ù2þå_*p…˜Ötf±¥‚—eTÊ:Œ`>Ž[ ‡ÅX÷ÿcãtendstream
endobj
-1959 0 obj <<
+1972 0 obj <<
/Type /Page
-/Contents 1960 0 R
-/Resources 1958 0 R
+/Contents 1973 0 R
+/Resources 1971 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1916 0 R
-/Annots [ 1962 0 R 1963 0 R 1964 0 R 1965 0 R 1966 0 R 1967 0 R 1968 0 R 1969 0 R 1970 0 R 1971 0 R ]
+/Parent 1951 0 R
+/Annots [ 1975 0 R 1976 0 R 1977 0 R 1978 0 R 1979 0 R 1980 0 R 1981 0 R 1982 0 R 1983 0 R 1984 0 R ]
>> endobj
-1962 0 obj <<
+1975 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [259.4835 737.5313 328.1555 749.5909]
+/Rect [231.137 737.5313 299.809 749.5909]
/Subtype /Link
/A << /S /GoTo /D (boolean_options) >>
>> endobj
-1963 0 obj <<
+1976 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [172.152 677.1897 267.6829 688.9903]
+/Rect [143.8055 677.1897 239.3365 688.9903]
/Subtype /Link
/A << /S /GoTo /D (root_delegation_only) >>
>> endobj
-1964 0 obj <<
+1977 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [352.4539 423.7962 426.1073 435.8558]
+/Rect [324.1075 423.7962 397.7608 435.8558]
/Subtype /Link
/A << /S /GoTo /D (server_resource_limits) >>
>> endobj
-1965 0 obj <<
+1978 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [387.5019 393.5457 456.1739 405.6053]
+/Rect [359.1555 393.5457 427.8275 405.6053]
/Subtype /Link
/A << /S /GoTo /D (zone_transfers) >>
>> endobj
-1966 0 obj <<
+1979 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [381.9629 363.2952 450.6349 375.3548]
+/Rect [353.6164 363.2952 422.2884 375.3548]
/Subtype /Link
/A << /S /GoTo /D (zone_transfers) >>
>> endobj
-1967 0 obj <<
+1980 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [398.5803 333.0447 467.2523 345.1043]
+/Rect [370.2338 333.0447 438.9058 345.1043]
/Subtype /Link
/A << /S /GoTo /D (zone_transfers) >>
>> endobj
-1968 0 obj <<
+1981 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [393.0412 302.7942 461.7132 314.8538]
+/Rect [364.6948 302.7942 433.3668 314.8538]
/Subtype /Link
/A << /S /GoTo /D (zone_transfers) >>
>> endobj
-1969 0 obj <<
+1982 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [255.0796 272.5437 323.7516 284.6033]
+/Rect [226.7331 272.5437 295.4051 284.6033]
/Subtype /Link
/A << /S /GoTo /D (boolean_options) >>
>> endobj
-1970 0 obj <<
+1983 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [311.5276 242.2932 385.1809 254.3528]
+/Rect [283.1811 242.2932 356.8344 254.3528]
/Subtype /Link
/A << /S /GoTo /D (tuning) >>
>> endobj
-1971 0 obj <<
+1984 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [315.9507 212.0427 384.6227 224.1023]
+/Rect [287.6042 212.0427 356.2762 224.1023]
/Subtype /Link
/A << /S /GoTo /D (boolean_options) >>
>> endobj
-1961 0 obj <<
-/D [1959 0 R /XYZ 85.0394 794.5015 null]
+1974 0 obj <<
+/D [1972 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-1958 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F48 1258 0 R /F41 1238 0 R >>
+1971 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F49 1258 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1974 0 obj <<
-/Length 2798
+1987 0 obj <<
+/Length 2796
/Filter /FlateDecode
>>
stream
-xÚÅ[[sÛ6~÷¯Ð£<¡¸“È[š:Ýt¶I×ñ>5} %*æ®.®HÙqýžƒ EèLÙv:
-"ëòðPZ²‹bµ:”u]Öþ¥îdeQ&ܽ´¿oªýî•£¹+]e½ßlöÕî‹WÅuí*Õfãj·Yíšò°+6›'÷<œ5âÈ.í…qó\‚£1¹–Ig1@´šÒù‡O®ìõŒLQüæWœf½÷;÷üãjñ² &‘ö¹ßÜ•5LˆÈÄÜù½ÜÛrU»Æµº‡î”áó±Fqa­ÙwmÔû̓eWlKoê¸[Á";øí–V… Â*¨ÛP…èWfÜNp#r·Ä­ ©Ä­02›ÎªdAO¶î½*«ËZ
-Wüy,O®ºÞ{0î¥ÇÇÇKÃç$ÚbpûBHzìú'WÞV«XQ
--Çù8!b­ÚUMU4å˜+žõñPW^¯íÔQ÷~kánÄJ]†ºU•^õ¸,Xv6±ítë}Á(z2’1¦gZ`ÇØ™hç@‹.Ê;6rZ´¨ÁÞwZ
-]õ3ÎHÎrÞçðqg §Í¶,v<ÖG\#”6\¶*…Ti2…•¼¹ÃЋ­®¤VcPlªºqûµkYí·Fl {š]·o²3b'bj'œåÙPè…ÕZ>/–¡bÅÍ‹cs·?TÈÖnAè
-öìƒJ¯Ílàô„íGE 5p…jPpnC)Úèìú•7¿wåûß<½ÕbLæ+ÿfmËõüñ®ÜšÁiš ù‘Ëj$´Á’r)[TY®¼U»  ô»j§]Òénœ»œ«0g0‚òù Úÿ-¼òêã=DŠm¹kŠklV»”Șöby}\.Á J[††9ÇêöˆB²{_¹õ¨Âõñ6h q±t#6ª/¡ ÷a=`ƒWTPø!«úÕØ*ÚEòýÔdW6>nbÀFíPåe Ž­¯]Y¸¢¯HêÓ6Ç ‚YE£»:„çÓ6"›¶E GfˆQq`YàÄhãæTÖ¹/—f¨gì°3§Ý¶Éf(%*ã"NgÚ6ªæ$ç”E© u·ÇÆÙwô4ŸÈƒìÞslõINǧÃÿ”Ë&xrûäÔÈ´€ô•Ë¾Û<ê” §ãæ¾8Ô~VÛiìä‚pf@¡çýlï›'Wu{mDÅ&¿} É¹ïZ½ Ìôó3ågäøBoq_~uM˜{aËõµ{vG¶Ñ¿Õ_^îwÚh†æ3¼“‹KFm..²l<G¸<”q.Ž­…ï-œ•¾â³Ü'âXó GtÏb=XC»ÕX¦èÞá#² p"?§œp­Ô7)Z ©ÿŸÉ9Ó’Hgž›fó™úém½çÚžD®»¹6ÏXœkcc›kãCoàÙåÚX³ÇUkÃçÚØÎ D»\ÛÂï|w?Æg,Äx̯­ÌÝ°m¢ÍA™¨ó`dD_!±å&$ÚÜäîdÊB¢U·ùM–N´ñ]¿kêO°Ì&ÚXÚD1.ѦæéòiÓk‹í'Ôg3îpbÛ ^®3R$6!t†´ZH~~ç!ÐeGÂgGð⪓ù¡Ýq&í]içj6}¡>šò¦ŠÚ(‚!Ùßî[‰aë@¬Ý£µoî±9{!Îh ’‚.êü… EYMU_ŦZUÍÓÂîxŠn2#R²,M£EðèÝ
-'ŽïOe9_«²^ªûÓy¸_„N“Êeûiãœ7
-rWÞ¿Uí† %Hžµ®'®óðeæ*××[ü„ë±]çûòä%~σëSCN’+¢Ä„h‚Gd iœDúŒj=!¾*!¾€
-Ëÿáp±Û¯F®£"'Td<M¡Epè O
-BY®ú$þžòòŽò"W†ŸañE«ÕÕ E€ëy›R]ÀOøÛýÕQM2ÈdÓ+Т&˜ÄÖÒ€Òù„îN „ì<h¸TXÍñ0"=Yö)-(fѤkFÝ£ñòºë;3ä@ÉÔyíe’äF‹®»)éxÚñÈê7Oj¢TÆ’óß‚Ò4"[iÕQ Íš]•Ð]@ תyº/ãhGI.%O3hQ#z »>çp©èqxyÕO†>€,ì8%:‡ëC׋”â~ÂíØîó57t"$5éhQSL"kIÙq»W
-b»Ï£ù0‘^Š
+xÚÅ[ÛräD}÷Wôc;‚.ê~ám
+ÿ²…U„
+'ÆI¢(S‹õîŠ.>À³ï®XĬhÕE}}wõå[aŽ8Íõâî¡cËj-[Üm~Y~ó7?ÝÝÜ^¯¸¢KM®WJÓå×ïÞz\¸|óãû·ï¾û÷í›k#—wï~|ºooÞÞÜÞ¼ÿææzŬb0žG ¼}÷Ï›ÐúîöÍ?¼¹½þíîû«›»Ö—®¿Œ
+tä÷«_~£‹ ¸ýý%ÂYµx†J˜s|±»’J%…H=Û«Ÿ¯þÕì<õC§â§„%Êr3@Î;dÚR/ŒrD .|
+3y÷ˆ©{+slaඪ›Ðqx=›Ã®À܈}iy@wx»|P|, x™5C­^nvY¬SÃëÛ,‹Sóx8VHدBx”ìùÿ"¸Fyšoð$­@*Úü
+Î(áj ÝSóš!âSŸW±+.è
+î‡Þèsý*ª´
+|áiñTþº°ÞÛÛp6îðÆ8ª?½<®´É:-Ö!¶S‘KF}E.Œ™®Èî×qEŽ½E|Z+}ÅËqlŲÃ$ݳ±¼¡ýfª^ cø„†|œ©Ò)'\+õIŠÖÎ3ÿǶwâ ¨ym>ˆæ+ëôóh>=®¸9Ü «»77l\qcg[qãM/p*nlù«µ+nìHû¢CÅíáñq?Ç–r<VÙ^æáµm¹ÍA™¨óddB_©¼åÎ ÊmîlØ™L*·±¿3ùrÇÆU иƒ_nãÕ—Ûˆ å6ugH—O[d{l¿¬¾Xw§Û×ñzp¨‘"³áa*®…ä—WC$b7Z(¾:lgÒŸ˜ö¡å+˜ ê“…ÿ¯TQŸEð&•ü»C+1ì}
+˜pÎLÏãððøa·ß[üŒïc»Á÷õÙKüÇ4ajÈ ¿‡AxU~ZÔ “±5drY€í ÕzF€TF€ •f þÃÓàjØLLµ&Â
+§Ð¢&8ôÄg„ë“økâsñ\¼ßBÔE;bBxP(JÆûÞæ„—ð3~í~‚ðLœ2?-j†ÉØZ^xPÚÎèî ÊÈ.‚†S…×¢9'¤g!&Κ,‰4fÑžƒƒµí‘ø|)oÚ•Ñ7pAÌå”')žéyÏÙŒðZxÞí‘ÕOÁS¨lô[Ð ¡­¼æ¨„£S3¢ë 2ªK¨á\5/OåHpÊæ¨Î3hQz ŒÞ§ðùE—þAöÂ2™N:°¨û¾æ2]ÂÏx=¶û ’ã”hkd>þ-j†ÉØZVu4juyÕuQ—U×¢üg†c±¯≲>œŽë áq⸜!Ñ¢&Xô¿þ‰ªÏ£¼ Î ÅG‰0J^ŸÐD:È]GrâKøÏÇv/‰ÏLå_fD~h†ÆÈV^x’£âbFxTFx ua®VõTg4ŸáÑ¢&ˆ <#Å€Éߦ½èÏ°Ê“„3‘‘ff<u}ÉVy?ãüØîëå'(±P˜f'!fhŒlååÇ@;LÌ”x]TF~ …o,¶Íê5¹Ob•ÍóH  }õq¨ïèù<ê˸3”Ÿ"‚:‘‘–4=—³ò‹øïÇv?A~‚PIM~ZÔ ‘±µ¬ÊÇÌ}]é¢.+°Ee¦l* ZF´Óy* 4A¥ÿJ/é¿ÇåoáttP§J“Ñ¡“´.Ñ&üL
+=OsÉ/ág|Û}µÞ„µ°m:›~‹š#2²–Õ›S„«¹o.Ðeµ%Ðh–¦ö]å§Te_ß‚Æï}o±Ìöü b›Þlñ{‹b6ÿ½EjÑõtîs Âó>¬¾>¹Aif¸²ÙÈ· <‹‘­¬Ò4$>÷ »“ù}]Àà»vÕ~u,Žeý¸jª]ÿ¿+þ˜ìöèæø2ƦÎñÒtx”²9ò-fÄ~X9!y—¾)K?`ÂFO¤Ø1±aÂëµ¼C)·]&t–ÜÐfOMHãâ§;¥ñWApöȨÅd9 -Mk)}ÞU¢>ñ6ø/þÕø/ÿþü¿ HCþ‰uzf¡Ä±D
+‰3:ŽTúÍü˜ûÿ
endobj
-1973 0 obj <<
+1986 0 obj <<
/Type /Page
-/Contents 1974 0 R
-/Resources 1972 0 R
+/Contents 1987 0 R
+/Resources 1985 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1988 0 R
-/Annots [ 1976 0 R 1977 0 R 1978 0 R 1979 0 R 1980 0 R 1981 0 R 1982 0 R 1983 0 R 1984 0 R 1985 0 R 1986 0 R 1987 0 R ]
+/Parent 1951 0 R
+/Annots [ 1989 0 R 1990 0 R 1991 0 R 1992 0 R 1993 0 R 1994 0 R 1995 0 R 1996 0 R 1997 0 R 1998 0 R 1999 0 R 2000 0 R ]
>> endobj
-1976 0 obj <<
+1989 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [352.879 390.8395 426.5323 402.8991]
+/Rect [381.2254 390.8395 454.8788 402.8991]
/Subtype /Link
/A << /S /GoTo /D (tuning) >>
>> endobj
-1977 0 obj <<
+1990 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [334.0699 360.9009 407.7232 372.9605]
+/Rect [362.4163 360.9009 436.0696 372.9605]
/Subtype /Link
/A << /S /GoTo /D (tuning) >>
>> endobj
-1978 0 obj <<
+1991 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [373.9 330.9624 447.5533 343.022]
+/Rect [402.2465 330.9624 475.8998 343.022]
/Subtype /Link
/A << /S /GoTo /D (tuning) >>
>> endobj
-1979 0 obj <<
+1992 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [319.6839 301.0238 393.3372 313.0834]
+/Rect [348.0303 301.0238 421.6837 313.0834]
/Subtype /Link
/A << /S /GoTo /D (tuning) >>
>> endobj
-1980 0 obj <<
+1993 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [307.1508 271.0852 375.8228 283.1449]
+/Rect [335.4973 271.0852 404.1693 283.1449]
/Subtype /Link
/A << /S /GoTo /D (zone_transfers) >>
>> endobj
-1981 0 obj <<
+1994 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [334.8268 241.1467 403.4988 253.2063]
+/Rect [363.1733 241.1467 431.8453 253.2063]
/Subtype /Link
/A << /S /GoTo /D (zone_transfers) >>
>> endobj
-1982 0 obj <<
+1995 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [337.0185 211.2081 405.6905 223.2677]
+/Rect [365.365 211.2081 434.037 223.2677]
/Subtype /Link
/A << /S /GoTo /D (zone_transfers) >>
>> endobj
-1983 0 obj <<
+1996 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [364.6945 181.2695 433.3665 193.3292]
+/Rect [393.041 181.2695 461.713 193.3292]
/Subtype /Link
/A << /S /GoTo /D (zone_transfers) >>
>> endobj
-1984 0 obj <<
+1997 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [374.6372 151.331 443.3092 163.3906]
+/Rect [402.9837 151.331 471.6557 163.3906]
/Subtype /Link
/A << /S /GoTo /D (zone_transfers) >>
>> endobj
-1985 0 obj <<
+1998 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [292.0276 121.3924 360.6996 133.4521]
+/Rect [320.374 121.3924 389.046 133.4521]
/Subtype /Link
/A << /S /GoTo /D (zone_transfers) >>
>> endobj
-1986 0 obj <<
+1999 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [319.7036 91.4538 388.3756 103.5135]
+/Rect [348.05 91.4538 416.722 103.5135]
/Subtype /Link
/A << /S /GoTo /D (zone_transfers) >>
>> endobj
-1987 0 obj <<
+2000 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [460.1655 61.5153 533.2211 73.5749]
+/Rect [488.512 61.5153 561.5676 73.5749]
/Subtype /Link
/A << /S /GoTo /D (tuning) >>
>> endobj
-1975 0 obj <<
-/D [1973 0 R /XYZ 56.6929 794.5015 null]
+1988 0 obj <<
+/D [1986 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-1972 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F41 1238 0 R >>
+1985 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1991 0 obj <<
-/Length 3618
+2003 0 obj <<
+/Length 3628
/Filter /FlateDecode
>>
stream
-xÚ­Ûrã¶õÝ_¡·È3+w‚éÓfãÝ:Ó8©×™všä–h‹]‰tDÊŽóõ=€x“ä™d<À!pî7Ïüñ™Õ “™š¥™J4ãz¶Ü^°Ù#¬}ºàf€]¨oî.þöQ¦³,ÉŒ0³»‡Î^6aÖòÙÝêçù‡¼ÿñîêör!4››är¡ ›s}ó-Ídôóᇛן~º}™ªùÝõ74}{õñêöêæÃÕå‚[Íá}áw8òÂÇë^ÑèÓíûï¿{ùëÝwWw‘–.½œI$ä·‹Ÿe³ýÝKdfõìX³L̶JËD+)ÃÌæâóÅ¿â†U÷êÿ”¶‰ÊÌZ$™°bšË,a¸¶HOt*eä²àS\PÈåò÷‡Ý%·óÅîÞ.Vå><»¢ZÍNR‚¥³îA#t"Ô>¢ƒ&QLôñù\— iô¼]»š¯Šf¹+ŸÚ²®h¥~@¼Äq›d
-‘xY\²,a\Éðv5¤$”HÅtrZÜ=ÎhpÛáA„?Ãñ¾Ä„å\T]n>DI˜4BžF„:ƒÈx7DlÆh5ÿ…ivS·Q2yK¢AE±pæÎä<É´o‰²]‘¤‰M…—È6oÚb7!8 üÓ&€åÕjb'žL„Ûlòçbj'‘ÈÔµ\×%âå\Bî/衪[?ûœ—›ü~ãçs?íÔ•mŠçb“
-o¾¬‹
-8½£§ø:ÈoG<ÈõƒRÓ샗jYo·1’ô¼jbš°«V^VˆCÔëU•XÁ?к©Ø£ ÖaÆÄv; ªÜ*°l£‹FúQV-üOIS$Ãø!ÉYnö+G<¼HÄ Ð ûú¹x‡ãt~¿oi•ìÁ‚’æNîÕÿöMÛ߇;j¿ò“Q•#Ep‰øô$âܦóf¹.VûM@%_.k'õ•³-„hëÞ‘Âmý•Ÿ+·n[´9¨XNO˜Ë4E1òÇiŽ\Cà>‹s"À/º/LxæѾH$‰l?bd§’%ÁÇk{83¼
-èÓi/ïº;Ô²ù~ÓöRêˆ÷Dþ !“½ýì„=‘)&g‰0™í&ˆS…J!‘dgº„ ãe]
-±SûÄÙt´fZ +Ó½Vn@c¯uR=ÜVPbì\±:YŽ(ÈŒ£ß@×%c.Ÿz¢:ž €MdÌ{¶Âì}q8êƒåZ+U6¢Óq"dwçE¾\{î‚/?*šèä¨täôºprÊH‘p
-Úû¨7œA‰dÎœ¡&è÷†U’êt€Áµ÷.ª““H½2¿N^×pRt|‡´:vèÒ9$­÷Ê,íü!Ôý~ûDK”¤Ú¤ZP~ ‚H`ˆ[Æœ 'szDà{9tÞ:
-s‡ª WVeó…æ)£‡©œž#*0õ\ì§Ä‰*ÃÂ%ˆÒ]÷.¤JÅÊÑj}Y†Ë¾‰óMi38mÂh<Žªª=ÕR5ÍÌ`9÷$çe½ß ’À²AɬLJ¯ãÄ@s„:ÓîîB° 
-U=×jÔ0'‘ˆPXˆAïÄ00æÍmÞb†· <a©>¡xªƒLöÈ=Ù±%ð3tv=ªxzÔ8…êYësˆPgïvZó ÛÌÈ3š×:¡yª× ]îwÅ*Ö²¢ñÁx" ?J„šÀ¥K¾`Àg6Àå¯qx')5Ðñª£J¨¤LXÆlèSÍò
-מY*͵D]õÔ&ÑIe çès_Ü—›œnïY:©w_RÎ ƒûú´êîýa{—|33""0õ+>öO.†_ÔÈ„†×-ý:µò`À€Š†A¹èJZ& @5Ѽ÷íÝmÙ4ÑÞ©?ô¡Ü}õ:Õûé÷{#»É˜n"ýJÐAãˆTð.]˜·+ 3v(že$O4p Û:”S¸BÍÞp±¬¨Ã—¡´Tùlh¢v÷ýøò‹k·á\4=·wKwvk"“ó÷ô¢oó¹f†ûÝ]B·)"Öÿh
-çpÒÔoŽÜ<µÝÍa¶Û²,Qñ3ż[ð·ziÇ#ÂCTZ؈¶ùm_4--šMþ6nè7¯ø^ ‡Û?„@cõ[Ò´û)<EÞ‹“>÷îóõ'o!¾¾„ <‚¹¶ÿ„=áü»Åx¼öm-.;ôíM^õ;À«¢E¡VÓ½Ã[§ aÒÎE'< /õʆ†¬Ø¤Çb‡¨ôíVš*Î;Ÿ´ùÁ©§¾Ã0@ Biåº\%™cïäa¿¡gRU\ òÒãÞNk §>)uS ÑIÛ±7œºØÅjX½²Lêà­š€·Ô°†ÔͦÁÕ7°ðŽl¤@äôxÓ¹ÏÅ`Ò7oµðHdÛc’
-òq–eoŽjÜÁÞÙ5œs_û^]j¼ØšJáß3úOË~øÐ_¥‰´öØÇ0L%Rf< …q&ÇßzØD[(Ƹÿš$‡endstream
+xÚ­]sã6î=¿ÂoufÖ:’â‡Ô{Ún³{é´i/›ÎÝ\ÛÅRbÝÚR*ÉIÓ_
+ŒÙd‚žðÞ€Fæ)Ý÷ÒùƒÞ; 'ûciâÓ;°Î°1¥F¾{ÌÖ æ¨$5gl­‡uÂÖ<–õ¾}W¯òªm‹õÔÒà”Ó<>½xÀšY}`k\ÀB—ÿø8l k]W¿2&÷ä¸9Aê†ùk•íÊ5=|{ó
+bÌ+A²m[Óhß4è6¥#]ûƒ¡µa[¿Ðð9k^Ëê‘(n/ù]¿¥G²tÐkÁñÈ}xäaóvY‡\¡Ý
+vº¡§ð:诡=÷Ì ¤¶ÝûÔºÞíÂ92 JðªIBSåNWÈ¡kÙ?Re”î÷%«›;y$œt‚‡Í©<‘àÙZW죬:øŸÓæGšñCŠ³Þîs+<¼H ° ûú¹x‡c³¼ßw4Kþ`GÞH3« ûFþß}Û ép+íWLY02«ÀÏ@#6l
+±l×›"ßo=+Ùz][­çÖ·£«K
+Kú++woWt˜XFO˜É´E1‰Ç1‹D
+\ÁÁû,Î¥wÕa&2O袤²0üXTÈQ2—H¦##„ð4Íï<ÖN$K¢4#pâì|°¬
+Ê˜× éæ˜MÛ9(°w>[,†âÅOÜr‡—ÒZ:ŒîCjFöj!ˆåĦ&›¬zô $Xe»£Å~GpZ呈äÛ¢mCE+nŠnj鱊ª®”Oœ¡Ã K/Œx‡ÒË­Þ»X§*’’¥s±4p ²®¿
+®Ì ïº;Ô²Ù~Û RêÀ÷Lþ !‹ýö³7RvDæ69„N“~‚8WØI‰$;Ó#ì!/ë<’uB°³l»¢D}éԦΧAHO!ÌâÀãL96¡„ÅÞQŸWÙñ”ÍTvµ‚ƒPÙჭìp`+;ØzTÏáÈ×sZÓ/¨Ò£9|’ÞQ [°X°
+®Í8
+áç`µÿº„”XȨ]Ú¬{6 Ѓ ÃÌ|›•k°EéxÖ8,)(0[ªÎ#Ê1n¼«bäŠC*oœT–·ÀNØ€»}è}qXŽÊƒã&P~ #0òÓ‹!äv~Ó‹l½qÛ ¡ü¨nBŒ£Êuv«7…UTJ–„0­éf*)±”§÷^ÞWåÈÓüVÆ _ª{[©ýV«Î@ÒžI¥=“Jƒ‰¦ÎD‡<Ó¯'ÖÏ73xš`U<:¸Á«Z¡à§ÓWøž> ~¾¹þ7Ž$ž‡ë ž›R‚œt\ P=ã8ö à‹¥C̶¤ø,%À£{îÓ6¬+ÕRü¾÷$m*#\W{&c_¼ºß˦ô¦²ÎZoÝÐ>Úr÷´}õ/:ë<b€GCz¬ã(‘陘ÞÇ:ÔÕÿÛ²¢
+:ü8ž Rzfý€5ÃÀ°5l“„!×.ºÈa“"*:[~½ªáRt‘ì=NTèÏ™%¤¬÷[Ê+“å¯PßïwO4E)jâSÔlŸ´‚h„â÷ÃNcÆ„ÀŒ1¸å^}·¾
+-)
+«ÍøÌárÇJUuGO5#—¡•éç¾€Ô¼¬÷Í(,[ÔìÈyÜñuÜXŽgšÝ}¬ä±ìQ«–«Ã½Ô°ÛmûÓòôêkfù¡û°(·®ÿ×ܬŒ¥'ž<â’ñã+ dkF« §.V<þ‘§t\¬L¯EñòþOo½G:ÃÆ„ÖÉô[ÀâL6µ>ÖqS X‡ËOL{·Å
+ÒÆT‹‹U$Œ‘§™X3\ s
+†)3dã/²¸yaÆw <bF7<,U•é rªaëñÏH>¥{ÔðÔ´aË#ÁL|Zë 'Sj§O¦Q’êøŒñõ°NŸÇth×û¦XAÉZV4ž˜ o‰·N²°fxžòPþ)£‡Ìü5&xR¤Ik
+v±¬¨É—¢tTül PÛ |ùÅvÜ<ÏÒï“´‹a¿f%Òxùž^t>Ûΰ¿Í%ÔqÛâ !hÉø«$¡–í~Þ±.‘Wª–Àdz•!⸞R*=a.m ÞNxKAxí`yQ•…ƒì ¥Ij"¶mIÄ{ˆPT·£am@÷n}ÿÕÅÌ%…7Æ8â8@â&éh ,ve\¢á§ëy;á®õL/ ÂC0Z Dd~ßmG“Àf›=zÂ-ýúúßÀ{aý‡aIcúß2ÀSØ[xq6äÞ}¾þä<Ä•˜
+cÇ
+'à´¦Á6 3¼ÿn“endstream
endobj
-1990 0 obj <<
+2002 0 obj <<
/Type /Page
-/Contents 1991 0 R
-/Resources 1989 0 R
+/Contents 2003 0 R
+/Resources 2001 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1988 0 R
-/Annots [ 1993 0 R 1994 0 R 1995 0 R 1996 0 R 1997 0 R 1998 0 R 1999 0 R ]
+/Parent 1951 0 R
+/Annots [ 2005 0 R 2006 0 R 2007 0 R 2008 0 R 2009 0 R 2010 0 R 2011 0 R ]
>> endobj
-1993 0 obj <<
+2005 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [397.3443 737.7676 467.1586 749.8272]
+/Rect [368.9978 737.7676 438.8121 749.8272]
/Subtype /Link
/A << /S /GoTo /D (boolean_options) >>
>> endobj
-1994 0 obj <<
+2006 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [321.49 695.7982 382.69 707.8579]
+/Rect [293.1435 695.7982 354.3435 707.8579]
/Subtype /Link
/A << /S /GoTo /D (options) >>
>> endobj
-1995 0 obj <<
+2007 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [357.6499 593.8005 436.0651 605.8602]
+/Rect [329.3035 593.8005 407.7186 605.8602]
/Subtype /Link
/A << /S /GoTo /D (man.dnssec-keygen) >>
>> endobj
-1996 0 obj <<
+2008 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [455.3558 593.8005 533.7708 605.8602]
+/Rect [427.0093 593.8005 505.4243 605.8602]
/Subtype /Link
/A << /S /GoTo /D (man.dnssec-settime) >>
>> endobj
-1997 0 obj <<
+2009 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [317.0267 306.119 385.6987 318.1786]
+/Rect [288.6803 306.119 357.3523 318.1786]
/Subtype /Link
/A << /S /GoTo /D (boolean_options) >>
>> endobj
-1998 0 obj <<
+2010 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [356.8967 276.1048 430.5501 288.1644]
+/Rect [328.5503 276.1048 402.2036 288.1644]
/Subtype /Link
/A << /S /GoTo /D (tuning) >>
>> endobj
-1999 0 obj <<
+2011 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [432.0945 246.0906 500.7665 258.1503]
+/Rect [403.748 246.0906 472.42 258.1503]
/Subtype /Link
/A << /S /GoTo /D (boolean_options) >>
>> endobj
-1992 0 obj <<
-/D [1990 0 R /XYZ 85.0394 794.5015 null]
+2004 0 obj <<
+/D [2002 0 R /XYZ 56.6929 794.5015 null]
>> endobj
618 0 obj <<
-/D [1990 0 R /XYZ 85.0394 231.6054 null]
+/D [2002 0 R /XYZ 56.6929 231.6054 null]
>> endobj
1377 0 obj <<
-/D [1990 0 R /XYZ 85.0394 206.638 null]
+/D [2002 0 R /XYZ 56.6929 206.638 null]
>> endobj
-1989 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F48 1258 0 R /F63 1385 0 R /F41 1238 0 R >>
+2001 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F49 1258 0 R /F64 1385 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2002 0 obj <<
-/Length 3395
+2014 0 obj <<
+/Length 3402
/Filter /FlateDecode
>>
stream
-xÚµZÝsÛ6÷_á¹—“g,†ø$x}97uÒ´×ä.ñMç¦í-Ñ6/©ˆTœÜÇÿ~»ØJ”í6½É8ÁÅb±Xüö§)ü§Æ&6—ùi–ëĤœ.V'éé-|{y"˜fˆæ1Õ×W'Ï^¨ì4Or+íéÕMÄË%©sâôjùÓÌ&29éìù›×/^½üûÛ‹³LÏ®^½y}6—&½xõ—Kj½|{ñÃoÏæÂ1{þíÅ_¯.ßÒ'Ë<¾~õúêÉéq„éÛË—o/_?¿<ûå껓˫a-ñzEªp!N~ú%=]²¿;I•;sz/i"ò\ž®N´Q‰ÑJ…žúäÝÉ߆ÑW?tR"M¤²rBRN)Ðä‰URy®7gÂÍÊ®lzP‚ʲÙÕ]‰Ë‚Á"ì™
-ÃÚ®—E_Î×m]->3u<•5I–g9Sw=¯`Ð^&gmSÆ–š•ŸŠUÕ”õ÷0±ïîªÛ¦Ü0ñ õôº*»®¸-¿‚7§£íÖ¯cQY±\òº:"¨xŽ¦íQÜÓ¹*ÉQßs!’Üé%¥Auù±@u a
-Y’+é<(‡hP€”س +s¾,NSÙ”Ë Eæyâ´OW¤Ë¤fêÍ™›mkžûþ®ZÜQsQ4Ô¸æoÝ}Õ/î`~ÿÖòWèä¤8Ù®VE3%§”:É´rÇ=«<M´+gÒ‰¬ÛEQ5±à—ÚÜ0?06™ç³w^Ъ¹…WP—Tä Ÿ×,ôì– /UCÏ‚ÿjþ°(¶˜Ñá*Df©u°Ä¦X ›˦T"¬Í˜ªo‰ëm f«MzõîÕKjÁŒ]$~_~f²fIu],‚Üý¤üh$uyNÚ”J&Ú 16Hâxåe‚gQ×í=wÝ=µhr#*Ú­@Æ Tžq¡`f“~ý™º—åM±­ûsæ¨I8jW¬Z=2,O”Á@ž},6Ï6Ûæ™×ñ3VN‚¢ê[“h‘I{¾“ÔëB+°=5Ö„_£©ßCly±|ÏÏ`«ÞìæËeÓáõ{åaÃ/
-G LŠú¶ÝÀqXÑkàôíÏçᄑƂLJÚÙõ¶xt%5?õ¶äE€d¿hTÛívS\×å€Ñéà#hÒ°Ø={Uy’š€²¬Ã9HÍ»1 ¾Õƒ"Yê$wb‚¥×ã!C—&N ÓOcƒ€7™>ä j’1OvG°]÷@Ü“¥×墯>–5¬Óˆ„H⬶c
-H×/Öó®¬o¦ Q$JŠLó’™@bûVe–%³K¢¼kïË´ŽÇQ^H‹›eÁN2ZPvL²‚xÄc'~}FN2QwŸBê%J ;Þ<F‘Ó
-"ôç4ŽÝ:Š1>.£Inö>qò͈ù©‡ôc1ÆW¼-©…NÅ¢èÌ÷ø-E"öžØŽ¼'€ËOð[Á1Û÷—ÿ Vù)DRøæa§¸Æ0Ïé¾ð\pø¦d¶Ý]±;(hÉ„ýùÑS®tlø†ÊÃçðyÄVÇlyxÇ@æa %kÐ*º=vÌFŠ×ò5EžÕ¨`ì‚òXcЯ·(ËŠ— )Ò(w»v”ËYSÞ¶}žÆ²¿k—Ô&©°u͹÷Ëwïæh_œH‡ò 4Á ¬:ÆM9+˜a|èéRzuà4Ån«Dnfß—›kªDµõ€§oÕ|E}âsA
-—z÷~GÝEHí]Œs.Klž†Ôþ°ØÍŸ1ÜK–íª¨š?L¥ô)d¢¹Õw$›|äQ5¤†*$§ƒ:¹]fu °ÇXÃu)h§³½J
-:p»4Žü"ªXù: Q4€jºþ'd¦Dçc_èüæõ»iV¬l]4ˆ¸žŒç!>ı›ËBÝ€òÙa–Õ¶î«u eÍTÆMX÷Õ¤n!Šv(Â> \“&JˆåŽ¸“¾¾¼ ‡ç¶E=òød$»LÃz,d¾â¹ùÄ
-‚ÆžL•š2På¹÷›ksÔïª$Û%Bç¼l1 e‚UwŒ‘‰ÓJ<•É´½æ¥O”U ár6*x©Üìª+ãšMrŠHÄøf&QÙ°ÉÓ‡ ô­­vO0„™Ý3.ÉfMæƆ7öóq<ñã™óÔ,Û{þÒrî6F®]šYÔœ-z§³ZX!æ—ë²n›Û! —˜lPë OcPökRrÌØŠžT
-œÊ+N¤âÎ#Å6¼„À{¢ãV†:ƒ>ddùOfÅà5U ×Yâdš=Y¨éDKÓ¿† –G~ËI<`„‹ûò…=Ž3i{®3 ‘íEå_‚8£Jî¯FœGø=†3"Éž.ÜiÖS6!âô`’õ“X…
-ÜãªjZà¬!ÕrAüòS_nš¢>ºN;„C{7Å"ï ÿJg­Só”»b¥]’¥ÙÞ]ñoÁ:£ÐQ h\
-¼¸FŒY͇EÍ¥‰Q©n¢GJÄœ\ƒe–%i&BHpý¹TÁŠ/?‹~Îù«Â‹ßrU`&€å-ë þ÷i!~B-|ªøBe•ñý1v…É÷«ër¨\Rj·—É—ÒíBTíwÛ¦/›P==Û¡’0±Ü¹écÂŽÁ‰Åizl\Ú€Ç9(8Ú†/ÛZ4"•:÷ÿ±ù>b-oi…}ÔŽmæŠ/
+xÚµZÝsÛ6÷_á¹—“g,†ø"Áë˹©“¦½&w‰o:7mh‰¶y¥HE¤âä>þ÷ÛÅ. P¢l§éÇC\,‹Åo? qšÂŸ8µ&IU¡OóB'&æt±:IOoáÛËÁ4sO4©¾¾:yöBÙÓ")2™^ÝD¼l’Z+N¯–?Íž{ñ׫˷gsiÒY–œÍM–ξ~õúê)èñüÍë¯^þýíÅY®gW¯Þ¼¦î·—/.ß^¾~~y6Ö/™Ã‘/^ýå’Z/ß^üðÃÅÛ³_®¾;¹¼
+k‰×+R… yòÓ/éé–ýÝIš¨ÂšÓ{xIQòtu¢JŒVÊ÷4'ïNþF_ÝÐ)ýece>¡@)§hŠ$SR9®7gÂΪ¾jX»ÊóÙÕ]…Ë‚Á"ll"Sr¸QÛõ²ªùºkêÅ'¦Ž§ÊL’yÁÔý
+Ô÷\ˆ¤0F:IiPS}(QH˜AžJZG
+ÏizvK†—º¥gIu-X”ÛÌèp"7‰ÔÚ[b[®Â¦Ä²)•ˆ,Ë™jèˆëmf«MzõîÕKjÁŒ}í%þµúÄdí’ë¦\x¹‡IùÑHšêœ´)•L´blÄ °ÉÉϲiº{îº+jÑäF*Ú-OÆ Tžq¡`f“~ý‰º—ÕM¹m†sæà©I8j׬Z=ÚϼH”Þ@ž}(7Ï6Ûö™Óñ3VN‚¢ê[“h‘K{¾“ÔéB+°=5Ö„[£©ÛCl9±\ÏÏ`«ÎìæËeÛãõ;åaÃ-
+G&esÛmà8¬èÕsúö‡‹çówß^H“LJf³ëíxô5?”Ͷ⥇d¿èZTÛívS^7UÀètð4©_ìž½ª"IGYÖá¤æݘ
+§yúi¶}µ“lÂ8èkCÇžè©´ÎxÎ31{V8ôx¤Ó¹mGŠÇüýþ0XA·kß×MC­kfÚWÃxn4:, Z.îÊö–'(ÛO±€‹Î=—ã•Êp ï‹ ð)]ôývES0Îy À–óf
+Îý`O «Þok8ÎdKHÝýiêö‚€±/œgi:û7=n7%rÂæNzÇÕõÛkzU}E­ÿN¹J˜OB˜`!‚â ƒ¤;î­!N(¬‡Ó¶ßá:›73@X™eÖ„Ü.Y!ñHÚG²2¯zºÅÝuýÀJf7•:‹íî­˜g¸•;çÉû*
+Ž^w›U‰@„>âœÆ±[G1ÆÇe4ÉÍÞ'NÞ¢ù¡1?u~,&Ãø
+‚·%µÐ ¢X¹·¥HÄÞÛ‘÷DàpùÑá ~+9fûþòÔª>úH
+ß ã×æ¹A"Ý—
+3û¾Ú\S%ªë©<}»¨×˜èà+êŸaeL(\êÜûu—>µ/bœ³y’©Oíÿ
+1¿\WM×Þ†tt2t<rlbò Ö OcPÙ!֤䘱!=©8•WZHâÎ#Å6¼„À{¢ãV†:Á 2²ü'³bðš*†ë<±2ÍŸ,Ôô¢¥éÏá‚å‘ßráâ¾|aãÌCÚžë\Bä{Qù— Ψ’ûÙˆó¿ÇpF$ùÓ…{ ÍzÊ&DœL²ž`ò+_{\õ¡¦5ÎR-ëů>Õ¦-›£ëÌB8´wS, gÓXC—Ö$Z§æ)wÅJÛ$Oó½»âß6Ê ‚u&F¡£иxqÓ³š‡EÍe&£Rn¢GJZANà(ó<IsùD‚ï/¤òf|ù±\ sN`ÞüV«S¬oe
+DlbæÙ–ôpͧ‹ƒ>înÎÇñÐ k“T‡ß ü>&íÍïeBÞ7=¥qÔ„ØF¡Tþ˜ É"½Rx„)ÒYtó€/¾³¯Wu‰ ¼ÐE½ëôæ ûi„Ä
+Dµè]¨!uÍ=Þ§îÊ­|e|nZæXê-½ãÜK¥+
+aµ1÷êê-Xtð<Ý)&L× °Ê×3”•G®®iþ
+é‰?lÉ[„{ëèB8äÃU¹AHÏSë!ú»ëõÜÿ~,=/ö.18Œ—¾Ê*±Šã"igÜÓÕŸGDôKìbÕâÇûz…¥øê;«oö{upKBÐ5¯6\~4Tã4ãzï¡þÀf¹4Oÿa‘zêVÚðÍ€‰‹|1Ì%<¢pÇfïÇ ÝÖ‰»¥Ëì®
+†M?8œ
+ÿ¬Í/þeêîg»°SÊF¶:þe]Š à4ˆ¼P‹"Í÷~ÃÊd‘ìÿ7MG=endstream
endobj
-2001 0 obj <<
+2013 0 obj <<
/Type /Page
-/Contents 2002 0 R
-/Resources 2000 0 R
+/Contents 2014 0 R
+/Resources 2012 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1988 0 R
+/Parent 1951 0 R
>> endobj
-2003 0 obj <<
-/D [2001 0 R /XYZ 56.6929 794.5015 null]
+2015 0 obj <<
+/D [2013 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-2004 0 obj <<
-/D [2001 0 R /XYZ 56.6929 297.7942 null]
+2016 0 obj <<
+/D [2013 0 R /XYZ 85.0394 297.7942 null]
>> endobj
-2005 0 obj <<
-/D [2001 0 R /XYZ 56.6929 285.8391 null]
+2017 0 obj <<
+/D [2013 0 R /XYZ 85.0394 285.8391 null]
>> endobj
-2000 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F41 1238 0 R /F53 1333 0 R /F48 1258 0 R >>
+2012 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F42 1238 0 R /F54 1333 0 R /F49 1258 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2008 0 obj <<
-/Length 2363
+2020 0 obj <<
+/Length 2360
/Filter /FlateDecode
>>
stream
-xÚÕZMsã6½ûWè°i+Âààm{ÖIÆãU¼µ‡l”DX#‘ŠHã¿Ýh¢dʲ˚ªl¹ÊßÀ{¯ Ä€ÃŸxøJôÀ%š.Ì`¶:ãƒ/÷ñLÄ2ã¦Ð¸[êÇÛ³w—Ê –Xi·w¶<ãÞ‹Áíü·áûžßÜ^LFciøвÑØX>üñêúYz¼ÿ|}yõñß“ó‘ÓÃÛ«Ï×dž\\^L.®ß_ŒÆÂõelá@…Ë«_.(õqrþéÓùdôûíOg·í\ºó\áDþ8ûíw>˜Ã´:ãL%Þ à…3‘$r°:ÓF1£•j,˳_ÏþÕ6ØÉ UûÖOsÁ„4j0ñÖî—úàÐoLzŬ·ûÝŽ…rL›b½fJh×nŠMZ1¯”8“0«¤
-»ReË;\šw—Rv
-;Ω°{,t»È+XøÄ 7#?¼_føb‡«´ž-²˜ó°È
-JÕ‹˜_¤«ŒLÓ,/¾ñ~=OëlNö°Œú„Õa‰12t>+‹:+j(¤¤–wôŒ…ß]Âbn‡m&…pqØùêåõcÏüŒ`\'*ü/ç2[ÎQJÂlûšÖ°Ê^75ÂÔž6+*Ùm•Æ›Çñç_Šr3~˜Í³…©kæ±åYOïk¨`Í°Z”÷¡HO3|Òä)3¬0¦ÒŠžýë"4gÆ
-œŒ[±DpýŠ&©†zF™-gškuD™­3,ÑV´Lªî§/g ®°gXùac¬òU¾L7d´÷l(tª¼|žÀÒ2ØF@²?gÙº¦êEZSë0Úy¹Jó"v]Þõô&„Çõ­^D_Ð"gY•”
-„gô+Ï@¥³oÛ×}¨¨“BEáJëcH1À{e|»†9úePQ\n¡‚/±…
-¾ôCâ9côQ¨$0×=¨„6T0UËÇØi4!§4c!5KœÙs’Ï`•‹Ø ™—e»§Â (¡sæ5Á^Sã NŒ³Ì  í H'Éôª¿"ÞóNmqâl_ú5‹ö”ÿš=/**²Jg‹¼È(w½É‹Y¾N—ôŠÊ¿Jǽ1VúÛ?&ç¿|"g`
-w)ABm[E+º4†ÂdJ‹9ÙÚ{‘¨~Ë6!’‰!EÛ8#Ÿ.W”Ý 2 ùy0·CÁ—è·1I¨jʞ䶌6~}¬”o棔£ D9Š÷T&Ïé%°ž;ÞÀ… µ{#…½Á<)(!žÄƇèÒâÛÀ½Ï—ä¤| KZsÁÆÂÀÓµ|iäéÿ4J
-"’¼ƒT°lÀ³$W° p¥¡–¬éIú¿ÏŸ²H›tÈ‚o,˜h‡¬%=¦`º#þ=ijž4þi§ǃZ(g…ÉЋqQíý–:h¤˜Òïº&P§§ÿg)‹ µ/Š¸_Å£@OË£“úø kŽñˆ{fœ¢˜ÿëfj^ãyà¸Ú QÂ[¤QH§ñùs¶™ÒA­l²ZÄ…·-—z ŒÌZÀIó]¬Ó%’—Šˆ„‰-=ñü’_P2¢‹ —z
+xÚÕZKsã6¾ûWð°i+ÂàMð¶ÎŒ=ë$ãñ*ÞÚC6J¢G¬‘HE¤Çñ¿ßn4HÁ2åGYS•-W@£ñþ¾î(‘pø‰±Ìf2KÒL3Ã…Iæëž|º'"èL:¥I¬õãõÉ»så’ŒeVÚäú&êË1îœH®¿,“l =ðÑûÏ—çÿ==§zt}ñùr<‘†Î/~9£ÜÇéé§O§ÓñD8#Fïÿyzu}6¥*úøñâòI2Jt:=;?›ž]¾?ÿ~ýÓÉÙu¿–x½‚+\È'¿ýΓ,û§ÎTæLrÎD–Éd}¢bF+ÕIV'¿žü«ï0ªõM‡öOsÁ„4*™8ëKcp7dbÖÙýa'‚g zƒC±N3%tÚŠ–Ñ¡a˜vi’šŒY%•?”¦XÝàμ;—±nÊY&ŽŽJ×˲³ÈÒÑvìF·« v´ÎÛù²5wË¢¢\» õU¾.H4+Êê o7‹¼-$жƒ™À˜°9,3FúÁçuÕU JJêQ}CiP~wnt4m›1)D¦]. ]ÙÞ¬ÏÆu¦‚â9—ÅjÈRV;ÔµNaót×Â/íq·2eBe{¥ù–aþå—ªÞŽ…‹üjaéš9ìùÁªg·-4°fÔ,ë[ß äg¦´xªô;Œ¹¼¡tx_„æÌ€ÕK6Fãö7ƽۘ°Ò€>žv‹>€§‰Ô|a»UŠ~Ûû ®A Ú#-GëºiIrÛ7·+’ÀPš¯Võ鄬ÕUèékqO’M±Â!S9ØÊS`ùÃx¢…Ç2QÐY† u ÚK¿ÝqU8 ¨Ûõ+œ„TvԎŨ¦ì,ˆn7 óLÍWÜ@¥ ,w/8X0"¶cÆaÊã„1›M1/ý‘û:ªÇçYæ¸Åƒd©VÚ÷÷÷Á#;ÃÖh¡ˆ–)ÃóŠls޴Ŷl¾‚L¤ 5­·8˜›çMÁöm·6ÀF°IlñÞfE•vL¯‚y+– ®_Ñ%µPOfË™æZ=m˜mjX¦­è‰ÔÜÎ^h›%xÄÞ6ÃÆ:aS®ËU¾%!€}à<aPåäÓü•–éÌvö£øs^lZ ]æ-õ³]Ô뼬ÂÐõÍÀhB8Üþך‹à
+zଚšrž/·òR¢#xÛ±î#E)
+wZ?¬WÆõ[xW_†Åå)Xè„=R°0Œæ ˜Ÿç’ÁR÷âûôHÁ\]­îàf|Íf&Bj–¥fÏE>U.Âø=b^Ž“Ý &`ÓÔ¼&ÒëZ„‰I-K°öiœH‡Ñ&Ùèu3yE°çRµƒ‰Káôò¯Eç”ügl ìE}×Ê:Ÿ/˪ ÚͶ¬æå&_QÍþ:Ÿ xØèoÿ˜žþò‰<$Ü@˜µë %x«Š²^ŸtójA²>AãÞXdU¿[I
+ˆÄŒ¢ïŸ‘ÇÏWkªŽ‚ P"?â~6X~³„«Nçð:wÃ`´™
+ï×'J¹n=J¥”¨”â=Õ…É *x¾BúÀ[cè;}ëÁHao2OG
+JˆG±ñ!ÂÄP|¼÷“•1 “–ϸ`ca
+àézÆtöéÿ6J
+¢’<*H=4 í0YOTªt¬@Í–Rr
+ÉïO!ѽýæHPBæH) ¦r0rÃêÈɹÉxqÁ ¬îÁÍD¦ááÑòÉhâ8Pè}lˆã$=ê`¹ãÓÀpÝsÇžoâÏð)E¤(}t>Å@=Ÿ„ʘäƾ¢ÏÐÄf¸o† žf”rãR¨Úùæeîè„oÓ]Ôâª]¸È¢x™+(7+èù¢ 8’}+sÊ\¿¿¢Œw ¨ä¹’»e9_RöÀ3aÓB«ÜÃÍ?Ë!’7Â7nˆ¿k*Ú!8*«²-ó¶W»¸¢4_,¹MC‚²ò\صÝËAŸrúáÔN¯Æ™†w˜* ôâÊÆU:ó¯›Í&ŸØû;(ûLxEÑ`¸ùÜ¥]8¸« .8ñ’/øˆ#¥Æ—|1üf
+ÇÃá&:ÑÌ8™Áj>2Åæh¦3Â1ZìÓ–LsÂl[ëW™beDˆ‡ñK0´&цLzµ?ƒRM:ÞóB¹žüìžêòêž5˜p£*æ-
endobj
-2007 0 obj <<
+2019 0 obj <<
/Type /Page
-/Contents 2008 0 R
-/Resources 2006 0 R
+/Contents 2020 0 R
+/Resources 2018 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1988 0 R
+/Parent 2022 0 R
>> endobj
-2009 0 obj <<
-/D [2007 0 R /XYZ 85.0394 794.5015 null]
+2021 0 obj <<
+/D [2019 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-2006 0 obj <<
-/Font << /F37 1042 0 R /F41 1238 0 R /F22 977 0 R /F53 1333 0 R /F60 1366 0 R >>
+2018 0 obj <<
+/Font << /F38 1042 0 R /F42 1238 0 R /F22 957 0 R /F54 1333 0 R /F61 1366 0 R >>
/XObject << /Im2 1355 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2012 0 obj <<
-/Length 2887
+2025 0 obj <<
+/Length 2896
/Filter /FlateDecode
>>
stream
-xÚÅZKsä6¾ûWôQ®šføÒ+{š8vâlÊ“mwj7¯ƒ,ÑnUôèHj{¼¿~‚TK¶lÏd[S5AüÀ¶Xqø'VaÄ¢T¦«8Õ,ä"\åõ _ÝAßw'Âɬ½Ðz*õÍöä« ¯R–F2Zmo's%Œ'‰Xm‹ß‚ˆ)v
-3ðà×Wç§kòàâòG „Ò¡ ξÿÓö|C‘ýæòê[â¤ô9ûpuqùÝÏ›÷§±¶—®ˆ½9¿8ßœ_Ÿþ±ýáä|;ª<Ý–à
-õýëä·?øª€Ýýp™J“põ
-sk:š~ØÏË˾ljµ·Ôý°3 цÃ
-d•j ”`iÓãäVQŠ‰Œ>wå½iˆ<ì‹l0D£VÊõ²­"3uÛ0»Ÿ¯°E]u˜5(Õ@Cœ¢¦ÈËÛº>4ež esG¬‡rØ‘ÐàGÒìD£¹±³ß›|=_ÎMù;ç̺Ž¥
-ʆ¾8•µ3ÙÑÎ9)×Þeaš¡†ŒK)œ ] *Þ®-HK\ã¶íêl ÷‡ß‡]™ï”¨8ùA$@ñÜH¿K©iÝYlbÜ
-å–­Ú<«¾^؆
-Y…¡Ûg`¿ç[°WÁµß¬ú‡©À`éNE,H‡,¹|cf<gQä­þ ÅVíÁ†hè ƒÜŒš?_]þgíì¢R–ÀÉŸÙ¥hë }¨uômþ§ Ñ¥\B~vèHóf¨O…lI§±Ýµ–5«lþS@´ Œ¡yû}Û tŸFSmò]Ö”}Í`E±ßó×ÁôÎ/´=&ök×âxN°5F2Й3»mô° ¤Â ½Ç“;›ãh%¾l<‚dwH{,‡ì®Ëjפ£eOóÎëÛ€=|ÔÄþz!1âhnœŸºvhóöq€Þ”Š°ÑêÜÒè+MäÍã`úwäðùŒ´¡Æ m÷çQ˜¨¶+L÷Žè¼N·MaýbIç‰%CU¦¹Ã½/«C¿²ôsß“®Ë»fºËæPUkðw]6”íè‡ì{Tó
-²þ’ŽŸ<Áöì'×Ѻ|q®¬(:Ó÷Ÿ©ÙãeiŸÃãÞ|æ\ÿ4_¶ÉžÿBÔÐþi\T97¾0ïßqêâZ Àù;ƒ§­ðÇT†ß}†χȓä(”t2æ]{F¡A‡ŽòÀ¾*MOtN#{'»Üèf™íùÜC×´1
-Å–.ðJÇí`sØáµH”!oïñ¢FÆ5p¸×´nØce€PA=ã0Èb®”æ«ÛT—¹¬XúoÏžÂ^ÆL‹4^M±âP¥¦
-Ø€û6ß×C†›/c>æf?{³¹¾üîÑW׎¸þð~dŸ¹‰š‚F#K-óÓ”n™ày†šëÆc~F±ã‘:Ðd° âxÖòêPP€Ä[ï¯~!Øe6Aã;MR·SàGÆÛm%›âÈRï–N¾ƒÙÛqèXZ ¤gw,J2¦j†úGÁU;¸>—&@
-?´%Na*㧣í©Ä%÷Ü¥ÛÞõö€ÖJºüì’Ì°gÉSÎà3àæbÈ%¹c(â¡Û¸‘Šѹ‚-Ëw¾t+ûa„|sÝ*à6V¯B3¥#‰‘c±YA%þâ
-K„_ÛÆ­~QVæ8ÔïÂUœE±‡2áO#1¤‹Õ>Rp\ t,ü~§é¿w¾XõêϽ
-*<yXñ ¿14Åfã–Úe÷núã¢ÚÛ%›%<ëý]ÖûÊÔ ìãÛçññ`|{uÍÆ
-š…pˆŠ=ïRú,Šö2@âÆIcþ£›-%`‹k•nq ìâZ,-®ùtq›fDlSF´=ôÙgÝPæ<“¶íì¦ .âœy[ïÛÞOà×ï Œ´Ð[„øR
-–Üî §#,†m§Î„© ^ ÈmtR÷¶¦[¿³"ÑCih ’cÙ ¶BÆOÄÉÎi°wö2ݽ•tíZY)˜©:,¶­ÛôhájÂk½þÀ/ìÍiñ%ÉÝ£"2Ü Ö÷éî%‚ˆ¡äìÜÕ1Yª¡ÜWn¸µ•t6AÆß©I7*·ʺü¯‹+yèÐ…½[l”43<÷‹w¿Ïû3üwý NÃÇÂ>“u7N˜ÌIôîìJŸaЉ]OèkcžÀX"À°°sEöÕœ:»»› Äå×ÓÏ!öóy훃ÉÁ컿d"bB=Ó) 
-…\º6ùêÍtÿ©#pü; PH%‰\Žw5ƒ#üÁç²o¾<zö' ‚3©"éÅ&ºÿŸéj2endstream
+xÚÅZIsÛF¾ëWðU‰HoØ<'E‘%)ÙCÑ5“í
+?”BíëO½në´Dý|w%Æ "æ'B"8q½-ºÓ¥±×žÆÞ¾ÔØI¼´,›ÇήæãÕˆšØÅuZé|æ©|¡r}§[Ú¾ßjGËŠ®hjê5w4ü¸Õ0£%",‡@!,-‚ìKÎý$€íqsÃ(ùCJŸûâA×ÔÜïò´×ÔF.Ì,;6hÈôòTWM훓Øô„5òª‚Ä«€©&‡6x!rŠ´¬©ª}]di_Ô÷Dz,ú-MêÝJÚÚ¨nìv:[NÏ£À)þ`L€Z—‘^QÓ·2zÔHÏà: SÎE®ë¾èŸf @XÁíDs@™Ÿ.cʼnK<ã®i«´§6ʇßÇm‘m±)q²Á¢©’þBѹçDÇåÒ[6YZ¾™C~¶KAÏE +F4Îþƒ„£³´§<öæ¤?‰†E/íœøœ‡¡Ó"Ø'°‡†0l÷ÆE«¤¦ÔýpsýߥՋLüB¢—¼©R´¡R±×5ÙGÝCK˜ìbßçu_>rÎ=I%‘‘Îh˨Õ,6n_ò)h45¬¡}÷»]Óö‰ÇÞTél›ÖEWùp"Ÿóï•þk¯»÷çÊ„‰ùšs qˆì ž íÔªÝt:[×<`äNö8h‰Í«CÔcƒ´saÙ§÷mZÙ.…–‰æ­ 뻀 >ꢿ™qEô„(œ*ç}ÛôMÖ€l!cðM©;õ¾Ú ØF[)jnžzÝ‘Á§;’@µî›öãa2µš6×íµ3°:YÜt¹±‹iZKÌ)ªÔõ=Ê>Ïqü™£ŸÛžp[Ü×c)ë}Y.ÁÞUQ§èPf ë[ÐïÍÈús<~ñë‹÷v Ù·Ùì^iž·ºë¾’³úËœœýÓNå^?ë§oòçË_©Õ7µõ*kÆöý'F=kF¸«1ÚrgpLeøÝ¥xÎEŽ’#—à S\@>$‚‚ŽòÀ®,tGƒ§¡¹“mn´»Ld¾óãÒ% Ê{H˽mR^`ÇÍ \ŠÂ
+iF" Q’É1UûÈèÝ4½³if ¶[ÐV±—Bî© c’
+$Viî–6DÉu©Ýv$žŒmrÏlºíìhh­ ËÏIÀ Gæ,e>nÖ‡l’;¸"ÝVÔˆÎli¶u¥[Ñõä›2hO›øCõÊ•/äFD†Õ:dIÁúò
+Kp„ßšÚž~U”ú°ÔIa–J懖úÜ.{b@«yÅÐàØð˜;ykË鶮Xuê‡Î.€»¶šÉ%À‡€¸z\ÀCe 븗a©‚·^IZ½×Ó8cÓPÁÑ<¢ve{wÔ¯h|uuAd(´”Ý$×]ÖÝÑUî¦ò­ÉÙ‘j
+š¸P‹šŠ=ëïB¸,Šƒæ2ÀÆÆÎÆüG5¶?—€ ®•ŠÛáaW|îpÅƇӴqFÄ>eD3BŸ]ÚöE¶Ç˜4}«7Ep÷Ìšj×tnw~§a¥–Ø'ÄwPÐäz;[8`1ˆX&Öy¡Af£HåÌéšnüÌŠJCcL¸,É8±™¤u~4ôœx;«/Ý>˜9œ®]3×z
+fª‹mc65h¸ÑÇ¿ð3r¢: ¾ ä#˜}TD‚ ý™îáP"ðJÎÖ^£•Õ¾ì‹]i—] «$ ðºt#!s»¾¨Š¿­˜™ûMØÙÆ™úSŠq?{÷»¼?ÁÐo‘àØ} ìÓi»±“IÔÞ¸çζpØvøð„Ö¸Õú¸xJø<äÑ‚G
+JŒÏªb˜õ
+'ÏwCNl¡„ðEgRB¬ÝÕd2T Yþè¤c¼ãÒäp±Œp™½ÆÞ‹8üØÁÔ±Sÿ¯Zs›_^@»¼ôâ/8.â˜/XdøÇ,`<¡DþX»˜¦Ä ¥Dt0Åq hH‡·ð)¦X­ÜËÕû:ùaÌï·éàð†@ï÷_õ˘}ñY­,¡ß?^Q«|¥Âhü¨ÂÀ;Gõ%¡§ë °ˆ©Ñ‡Ëyg÷M›a¡ªìÜ›c¶Æ9&.ÆCdz%ù×ä:;œiQóKTðmj=XJESYø[ÒŠÏü„
+ŸÅêUÿgÜdhëšõ/ø„˜0ë󨳨ô®Kî-ËâÁ®#§ë(
+t÷¶6–2AAD2õÎ öQqQÕÀiMMB†påZ}ɨ£»[ó‹iȼ²1H(4 •6qûÖÔØè9ÈbŽÍà¸kÆ9Ç=RvÛf_æSP’]–Z€ú§yË·9 bÌDˆÙ'ôÃ
endobj
-2011 0 obj <<
+2024 0 obj <<
/Type /Page
-/Contents 2012 0 R
-/Resources 2010 0 R
+/Contents 2025 0 R
+/Resources 2023 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1988 0 R
-/Annots [ 2016 0 R 2017 0 R ]
+/Parent 2022 0 R
+/Annots [ 2029 0 R 2030 0 R ]
>> endobj
-2016 0 obj <<
+2029 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [312.8189 175.0606 386.4723 187.1202]
+/Rect [341.1654 175.0606 414.8187 187.1202]
/Subtype /Link
/A << /S /GoTo /D (the_sortlist_statement) >>
>> endobj
-2017 0 obj <<
+2030 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [406.3277 175.0606 479.981 187.1202]
+/Rect [434.6742 175.0606 508.3275 187.1202]
/Subtype /Link
/A << /S /GoTo /D (rrset_ordering) >>
>> endobj
-2013 0 obj <<
-/D [2011 0 R /XYZ 56.6929 794.5015 null]
+2026 0 obj <<
+/D [2024 0 R /XYZ 85.0394 794.5015 null]
>> endobj
622 0 obj <<
-/D [2011 0 R /XYZ 56.6929 385.3709 null]
+/D [2024 0 R /XYZ 85.0394 385.3709 null]
>> endobj
-2014 0 obj <<
-/D [2011 0 R /XYZ 56.6929 353.2653 null]
+2027 0 obj <<
+/D [2024 0 R /XYZ 85.0394 353.2653 null]
>> endobj
626 0 obj <<
-/D [2011 0 R /XYZ 56.6929 353.2653 null]
+/D [2024 0 R /XYZ 85.0394 353.2653 null]
>> endobj
1270 0 obj <<
-/D [2011 0 R /XYZ 56.6929 323.4096 null]
+/D [2024 0 R /XYZ 85.0394 323.4096 null]
>> endobj
630 0 obj <<
-/D [2011 0 R /XYZ 56.6929 266.7517 null]
+/D [2024 0 R /XYZ 85.0394 266.7517 null]
>> endobj
-2015 0 obj <<
-/D [2011 0 R /XYZ 56.6929 244.4404 null]
+2028 0 obj <<
+/D [2024 0 R /XYZ 85.0394 244.4404 null]
>> endobj
-2018 0 obj <<
-/D [2011 0 R /XYZ 56.6929 158.1241 null]
+2031 0 obj <<
+/D [2024 0 R /XYZ 85.0394 158.1241 null]
>> endobj
-2019 0 obj <<
-/D [2011 0 R /XYZ 56.6929 146.1689 null]
+2032 0 obj <<
+/D [2024 0 R /XYZ 85.0394 146.1689 null]
>> endobj
-2010 0 obj <<
-/Font << /F37 1042 0 R /F41 1238 0 R /F22 977 0 R /F21 954 0 R /F53 1333 0 R >>
+2023 0 obj <<
+/Font << /F38 1042 0 R /F42 1238 0 R /F22 957 0 R /F21 954 0 R /F54 1333 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2022 0 obj <<
+2035 0 obj <<
/Length 2923
/Filter /FlateDecode
>>
stream
-xÚÍZÝsÛ¸÷_¡Gz&Âá`ûäØrâkNv%g¦íÝ=Ðms"‹®HÛqÿúîbA‰R,1©•©ã™` øÛïDßèyøJuÏ¥š.LorwÀ{7ðîÈcúÍ ~{Ôû˃_N•ë¥,µÒö.¯[kyƽ½ËéïÉñÇ£‹ËÁè°/ O,;ìË“÷gÃêI©9>žž}ø<::t:¹<;R÷hp: †ÇƒÃ¾PÚHX@Å%þu>РӳOƒÃ?/=\.·Üþ,Áî÷ß¿ÿÉ{Søº_8S©7½'xàL¤©ìÝh£˜ÑJ5=³ƒñÁß— ¶Þ†©/Á¤¹`BÕëδÛ•~ïFR*–â>×>Ú1m"¯5ã)_!/e y¡óJ™ž3)³Jª
-?àˆ·æGœa3c+~Æ;æU]ø vO‘\dV‚ìoGO€ù*Ç‘E䮂AË [ÔE6ûfÜSt5×ø
-ÍוBßEËÍ_RòaÅ|Zк“º(Q!²¬ËØ}bžÝEêé6æÅjDÜ[MOÁ϶XÛ=vàîñ-nŒ¯k%>yûk
-™Š‹fùt|ò”[zž|*'q"õèé4Ž  Ž®²*§î*_<æ‹ ½R|ƒ8t­ßjp¿5"«í\X}Þ¶°ð’qÁ»,¬1†™ÔE {ñ \ŸQ"9Z×k¾&þÔ3+ª:šÜMØWVøP$[ ±rÊ­ýïË7&fŸ0kθ1]1$¦ÌjIòv ɶrB`öÀ“ålZ­%YÓ⦨;É”àVä>ànÐUñ;Ðmm{_èþ„
-=-ï²
-uþ§œ¯ìM»…ê0E\íÈ Z(ì׋ìÕ«ÔB°©º2Èð™P&š¢1f­Ò¬1J¤QGDj’Û¬º%
-µÛŒF4<Ä®ÀÃðnÍkèÈÃå,³ä!ÒÈí¦i¯¯a^–ýf{ u!
-Aâøâ3TpÅAN`aH(Á#CµÞ†¯tÛŸú†]ŽÂ ו6+ÈN•Imøð³‹ñà8xé”N.èˆì"ÛjÍÝåõm-KŒÁÜ€Y‹±¯•ª|e°–Ýw`®¡æ†OÈŒhœ^QEÖ\îâV †·Ì-ð)w&Iz¦!Z'nO†‡}ÃÃÐ6º,]PÍÉH*¬ÛÓP¹V)Ì1ÂϲGèÛâáåwxøÝU§ö§î‹#?¡0-ƒ@«ëDUqÍŒòdЂæ
-yS̃G¢u@½ÿJ´½M©'ØPF&€oM½*ð°H*Ÿ\=Ô/åU]Ì¢û‹¶¨[5>û€uiŽUçÎx£ZVÌZ½ºRµ#—mñm¿•å½úKø,ˆ EW
-$šÚA½qË"‚Z/
-Á]’µJ½¤â;˜ÑúÌ7\b–Z0álWî%!‘ÄC 
-B‰bFT#ìôD²Þœvã„eÅ:£1’ªYfy/ èèC¯w8¾x:G—Š¼X^eòt`8+Ÿ‚ÎyŠ{Ø}•×óă6x¦ÛAðí3µ´Y˜FçøØ‹3@¡r²Ì:"@5H|g2—:ýä[ŒÜ—mý Ú,R!­éŠ|$«©–d[‡G—#¬ñ*ž xt9ç.Šú¹IéŠ9ð/LýÀñE*v ÚÞë~‡ö ©LsÞå®$«©w$ŸÃñÑ ê|¸£êÕyýT.¾ÄCõ|ñX4wó²Édu@‡(oà xn 6ßq ¢½ñý¦Ï{ ÿ…*å]¥má㪣ëã=-å–Òša™º¢ ŠŽ—‰&©|4!ª)€ßcÖ„Zm Äz°Ûn´?ï 0ž2kÓN)×)R¸È†Áq¨ ù&&ײÐ.Ãfz ÷> …Ô˜îUR©?L˜x*Ç…K±HFqjL
-€ÊvÅûOsä±–÷Ðàþp3Ø“Qƒ§°õÉå(‘Ëöˆ©‚.3®RÖDä_‹ªÞ\ï…
-an<Œ7^ºfXkïÿdûá endstream
+xÚÍZÝsÛ¸÷_¡Gz&Âá`ûäØrâkNq%g¦íÝ=Ðms"‹®HÛqÿúîbA‰’-1©•©“c øÛïDÃÑ3–ÙT¦=—jf¸0½Éíï]û"Žé7ƒúíQï/~9U¾—²ÔJÛ»¸j­å÷^ô.¦¿'–)v+ðä_Ÿ‡ƒÃ¾4<9=û”PÚÈäøãÑùÅ`D/lúþlxB=)5ÇŸ‡§g¾ŒŽN.Î>©{48ŒÃãÁ៿ .–[n–à
+÷ûïƒßÿä½)|ݯœ©Ô›Þ#<p&ÒTön´QÌh¥šžÙÁøàïË[oÃÔ—`Ò\0!À8ÓBlÿUú¿I©XŠû\ÿѾà)ðךñ”¯—²…¼†iïzΤÌ*©ò“YVU‡}«´NŽæ
+Ù‚âuð*í™Iíõ›û䘄‘žËŽ)Ãœi
+ö VU[ä£1`Öiæ×þÀaDúªœÍÊÇb~Õ‡dAÿåTóÖ2·ìaça>rº¢Qk?)lÕ(%˜„bíì¨úË&K—’nÑèp§ÿ_ àúê}ª¯Å´ °;µ×Á¤DÜ@c[[0ÁÉMYÕDeÓiTÞ
+ý›L“³9½!­âlHmШw@kTÙ ¡ÐK­F3‰J’ÝÏ_ø Ô_›çVø$¯&‹â2Ÿ6Æ8²÷ô˜@Äl×Ý$ûRÝfsß¿d3c;ãàG¾ƒs ¬JzÒ«#øæV x>بTk\S‚w£ç½Ý^k_¯ûÖ|ÀoÍxÂfÆVøŒwÌ;«:àƒV9ERuˆY ’¿<¶«h¼F» ÖL,½¶¨‹löl|Sô3÷Wø
+=Í·•÷AÇEËÍ_R
+‘ƒ,ó^ꢺÅÕSH°ãñ¦˜Ü Kœ5™0,Έ‹Aô]N
+P‰iœXÔ7Û£‰zÓ §¿3JÔŽ‹í¬ka²/Îiðí’ÿˆR63¶sNkØ®îÐ Ès!F°äN¢øQ~7Ë&TSrI ö%(ÐÓò6 ˆµ¨ea*WŽØ(P¸c´ÒmÕŒ¨T*“YY~ÅUª’û»w!JHòZ^axøÏžhdÐÖ LáiNsPÆ–Á!ôW÷—5=ç4 „…)……kIÏò[¹jvÎ!ð¸ËBu :Yü4Ž&&‹C³8ö3kRD[†vJﳊÞÑ/46
+:&㼇6iݢͣüŸÑ%ÜÒ:¹C¸[bó:Qü¹vIrˆ u‡p+Ë8|Yîñßÿn«”'㺌A†Þi`4w÷—³bBô×ü)ºæ–½ÁQ°W³ªâzÞ  ¿Bÿ)ç+kÓßnŸ: W;R‚ûu!{uå*µgªŽ”
+’ReR¾ûì|<8ÞD:¥“s:{€˜¶Z3F·y}SF³#_°5`ÓbÔk`¥*_Y«e÷-تE(´áò"Z¦WŽ5—»˜ÕBá-3 ÜDÊ]—=’žiÓ‰Yã“áaßpã0¨î Th2’Šƒ+õ4T®UsL…€Às£Øú¶8wùÎ}w©©ý¥ûbÈO¨EKç Æê8AU\3£<Y³ 7€Ðz¦TÐlŽtpáá]Ë…ã3¹ðÖ¬y!ó<cMò¥j†óí\u¼.æÁÑ: Ü¥Ú^È„¦Ô ( #@‹·¦^x:$•O.ïë—’Šª.fÑõEà TŒ*Ÿ}ÀR4ÇBsg¨Q-k>f­Ä]©Ú‘öضßbò^}%|…¢#t”Ö3 v˜¤ë:ÂœMG Újl¾ ì¯ß&±]‡ôÍÄÒMÉÀÇhÞ¸eí@­—‚`È.ÁZ¥\Rñ¼h}å®*K-˜p¶#ç’?â)~?„k ‡¶$§[0—Kç'e
+‘â˜z‹ùUIÔ¼0$ˆºôJèÞÙ8tÝoE—¶mÞø™žä†)ÑJ%™çŽìèo é&Ï$½6
+¢ˆbFT#êôD’Þœmã„e:£%’ªYfy èè?¯v8½xGˆ¼X^[òt@8+ƒÆy*zØ}™×îă5x¦«Aðíµ´Y˜F§öØK2@¡^²L7"@5H|g—:ýî‡à[|Ü—aý º,RѬéˆy䨩–dX‡Gç#¬ë*ž wt7÷á.Šú©IåŠ9°/GýÀE*Ày‰d;¨ííî÷Dh¿¨zÁ4çîJ@žšzG:¨Î‡;)¡L×åâk<FÏEs/›LV‡rôÄ
+B¾ Èu@,´Ë˜™Ã=h!+¦K”T঄Æqá,R£Qœ3 ²]ÁþãY¬eã=4¸?Ü ödÔàÁkF}r9J$Á´=`ž ƒËŒ«”5ù·¢ª7×{!üÇ"²XŠÕ‘h}<=Ò·5QK—tË{„¡¿•ÍRGZZšÚ°©þK¾qy3ñGÎÅv–4Û¢ñ:qcÄ„õx§šIE.6ïiò^§ ÿÞ›ã«Ûó°!åý–tV:Ã`²E—k…˜àÏ.¶ Ž›–Í°ÖÞÿ `´Üendstream
endobj
-2021 0 obj <<
+2034 0 obj <<
/Type /Page
-/Contents 2022 0 R
-/Resources 2020 0 R
+/Contents 2035 0 R
+/Resources 2033 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 1988 0 R
+/Parent 2022 0 R
>> endobj
-2023 0 obj <<
-/D [2021 0 R /XYZ 85.0394 794.5015 null]
+2036 0 obj <<
+/D [2034 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-2024 0 obj <<
-/D [2021 0 R /XYZ 85.0394 671.961 null]
+2037 0 obj <<
+/D [2034 0 R /XYZ 56.6929 671.961 null]
>> endobj
-2025 0 obj <<
-/D [2021 0 R /XYZ 85.0394 660.0058 null]
+2038 0 obj <<
+/D [2034 0 R /XYZ 56.6929 660.0058 null]
>> endobj
-2020 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F39 1178 0 R >>
+2033 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F40 1178 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2028 0 obj <<
-/Length 2982
+2041 0 obj <<
+/Length 2985
/Filter /FlateDecode
>>
stream
-xÚíZKs㸾ûWè¶TÕ‹ 09y=öŽ÷áqdm2•Ý=Ðl1+‘ŠHÙãüút£A‰ÒH”gÇSñ!å*³ÑxèFèn@ô8ü‰^œ°$•iϤšÅ\Ľñü„÷î¡îûÚ šFƒv«ïF'ß^(ÓKYšÈ¤7ºke·VôF“_£„)Ö‡xôÏ÷WçýŒytqùPBéXFgïN¯GçCªHBÓï.¯Þ'¥ÏÙû«‹ËïžöŽF—﯈=<¿8ž_÷ýpr>ZO¹½,ÁÎ÷ß'¿þÎ{XÝ'œ©ÔƽG(p&ÒTöæ':V,ÖJ5œÙÉÍÉßÖ¶j}×}bÒ\0!cÕƒØÄþ]ú ¿H«Xb“ÝŸž2 dŸXÍ”Ðf-{)[²"fÚšž‰S–(©¼ì¯nÎÏT •¶Ñ/•›ôHå}ß^Ý@ým^Q±.é[¹ñjÙ6r³§¦Ã$gµ í¦YMÔpº>æõ”¨¬@MôŒfiK8›ò±pK˜Q‘ÍRÒO9}ÆnYgÄ“ëVZÕnù͈?)Ã(eM„û˜Wõîx8¾=ƒÿ”."N`ž"ZkƒÒ#­ ¨á¾õÓÂá*ce$â/¨P¹"t¸+—ÍÐôõ“lOƒL"/îq’Ü/v¼²Q“üǾsËŠwþ·Ê9”Dê[ŸÖʃF<'|Ãì`vU‡ À–\±šƒV@`u^Ä»]ÕDø­aT4/×K/VµoŸÍü&îãÂUþàöýœ”r[ú}â§ìˆU^qW MJ"Ôòh<ËIÀž™…aPŒ¼uÕx™ßºÐ1/öÉ{xqFp‹8f»P¡cÃ@®¦×6°/3Z°¦
-Æ^½6/_xÈòYv; Eœ ~WÚ‹[ŠÇ
-\ƒ?ž©ê– ¿L/Uðä7=«šs–HQu,W0Žî‡¡Z¨ `mS Û(˜x(Qün£=µnÑ·#lÊ£=„öHýퟋö2Õ Úk-ƒné7nª"0§û¼À5#—4õW*Ðo/fÙ¸étûD_:
-Â0{$°¶èg ø.]FÓÚ_¶ÃwñQ½$>Æ&aFXÙm4q*™ŒÓÔËéz4D¿S¥Ñ)º1:Z”~R# ª†ã«a.²eMTyšytbRÎ3ò±tØÔHU к· ì·npØpºUKïPQ{í/…k_ქ2Ë=¢¢¦ Ó„TôŽ-ØŸÑ59Cù-UZͳÅŒ,”n]ýè\AVJ"< ñ
-hZ.ÿUÛ89°an,Ï»>Ývü /1Ƕ̿L_wk(NErÄ5&V$oŒ±MÓ–1 lƒ¯ŽôŽ%"«±D¤É™4!!`À^;“‡²ÆÁT"Þq0!ö&Ö°@–÷h€µF‰7PV"$  AUç>P„6+œÑž-@Û´ £þÆcÎáŸ8Š×ÕÆ9 Áaã,:6MK/µi¾‚3¤R:>â i©™µ†ðäæý)y€—°¼ü7Î¥÷†ŒØœŸUí]T ßÑ7£&mU„€þ©/„ˆü™»…ðØ&gy'Âw»§í¥¾âSUY¹Š¸@à>²ÔZ÷Íõš±j›±æ6ªû"B… }㊉‰¾.gùø‰è‹% e9¦cZN2¼Õ ‘ö}îó,ÆÛ4#rãB=Ã!¸·‡U×–É+Ž,T"ÀÕ¡tª<JÆ“„¢›a?Ž£¿c
-‡ónXpÌn~]÷…L£7!YO
-¶hCDW«Å¢\ÖnßåU ŽÇƒ‡ƒl‰æš„C€n‚ÇÊ”åÆ‹òƒŒÑiˆM4t­ ssøXE¹Eø~`Ø©Íq…Ý€Ìðt' ûÓ¹¬îx¬µÖ—ÒÈæ^ýØE=ö1Üì\Ôÿ¹^ÍD˜ÊH…jdÜl_ðrÑ0hSHATL
-øšGRI¦eH–¦áN뮜ÍÊG ùAÊß^€47= “´~ »Œg*˜Úmý‚ª}P;ïͯa´*é@»½àºçÒ N@*µ?*õÍò-R7 €Hð/»;dm‘*IÄÿJ¡­ÈóÏ:Éc¦ÄïRò;D\^õ ^­õ~‰7 `ÆÖµù•—:±¾B²MFëcQ’H–Bðê…qöï?
+xÚíZÝsã¶÷_¡·P3'_$ÀöÉñÙwNî|®¬´7Mò@I°ÅF"U‘²Ïý뻋%Jч/öMýÐñŒ¹X|ØÅþ°»€èpø3®RÝ1©f1qg4;á;¨{w"B›^Ó¨×nõÃàäû e;)K™t·­±,ãÖŠÎ`üKtöþôzpÞïödÌ£„u{q£.¯Þ'¥ÏÙ§«‹Ëw?÷O»FGƒËOWÄîŸ_œ÷ϯÎλ=¡t,a
+·€ÙHÙÌ!%ýd“ÑgäuF<¹j% Uí÷Ù”øã2ŒRÖD¸/yUo‡óà›3øOYà"âæ9&¢µ6(=ÐÚ€ê÷é[?ή26QFR!þœ
+•+B‡ÛrÑ M_?©Þæ4È&òâ'Éýa?[ U9Îoqì[·¨ˆqë«œQéª+"hLZ.Jñœð ¼‡ VdöæŠåÌ- ?ȹ,ˆ7\ÖDøÝaT4+W«͗uVCûlê· 4q_殨ò{·ëçüÀ —aé·ŠŸ²#VªÅ4éˆPË£Ñ4'{f†Aq1jðÖU£E>t¡c^ìyÿâŒÐ"q̶áB^˜¬¯mdÏ3\0¦
+\ƒ?5ž¨ë–Ÿ§˜µ®|‰¿÷›ûuÍ9K¤é:–päÁ@^ºŸpJj¡‚†µM )l£aâ¡Hñ» ùÔºEߎÐ(ùHä#õÈ*äËT7¯µ ºA¦ß¹©ŠÀžîò׌\ÒÔ_©@¿=Ÿf£¦Óð‘¾W^a˜X™ô­<˜CVÓÚŽÏÛâÛ©^!c“0#¬<b5q*™ŒÓÔ êzÐGßR¥Ñ):3:š—~RÜ# º†¬aγEMTyšy|b\Î2ò´tØÕHUsP º° í·®·ßrëÖ~@GíÅ¿²}ƒS –Ê,7ö˜Ž˜ƒNÒÑg8¹`‡F×äÝçc´UiM4Ëæs0³PºúÁ¹‚
+$7 ¬”Dx0@â3œ<ðÆã`á•«Ø~Õ5 ‘¨Êi­úe•ó²$-³©9vìÄZ3­RLÿÚ+GF—@ãÌ»‡ #£æ;Ÿ¶ô‡=‚°çÀÈ锦ÇT Þ¤7$ä!!xƒéûí4€µ3@èlúD¸ÂÒVK ¯Y[aÍQ¸“œÁŠîúý›ËwpâEgeQ“¦­h;ÚʨÊ^6G!²ÆY|çq[ÀXE~†ôÞkBš+}@è­Õ¼”Ð/m›{…®“â}q,"èb‰°„_ý®2Ñ
+»±#*8?è¦iˆUPËÅï¡j*{¶1͵íYcW'Ü–3ôƒl ýyŠü¶{C)p,’c©!1±"±xsŒmš¶ÌÑ`€<v¤·lY-"M.¥ ‰Nñʥܜ5n¦ñ–› ¡°w3±&À²¼[¬N¼²!i
+Ñàˆƒç Üóop IÊÌ™Cf€0$W†-{s SµÄá¼3ܳ›ƒë®iô&dî)^Áí£ˆèj9Ÿ—‹ºQîû¼ªÁûa ±W…-Ù¼bL“p®€pDƒà¸2e¹ñ²ü,côbõ]+ÝÜ@VQž¾Ÿ6Ej}ä@a;03<Ý
+ÌþtZëp\ÖZìK©d}Õ~ìîûn¶îîÿ\¯f"Me¤B=2n6ïüÿp÷¯x¬LMEÅÔ¾À¯y— •dZ†´Ù`n¸nËé´|ÀФüý…æ­ž‰†IZ ¿†]FÓ Lí6~aUÁ<¨÷éW@Z•t¦ÜNxÝq‡ ‹ÚŸ–ÀºÏ¦ùÖ©›@@ø—í²²‰P•$â¥ÐV
+÷‡S| î3ÁaY—£rJœQÈOÕ²Ð9¯©âãå€~ƒ6—ÖHÌòqO¤†Jï÷³–{(e0€jrÓÀÊ}&ˆÉê´¢ò|¹˜—•Ã%HNùdÓ€;‡PßU»ò#Ãe>­{«C2ܬ“Õµ“ëÀÀ¾
+G­cwìM€ ÙÐ+À3ÁŒUAw†™ÆbàxU"´Ý¿'ÛÚ~Å©8¡;šR&qbÀ÷àF%öÏ{b£h­ö—¼kmÉ߬Â<*ŒÝ½›–sJ”Xº¤5~Kú Èªü 3®{7á)lÙÓz±´Ñ¥þ"é-Žlv$rü¥$pªÉú¦Ú߈·ÃV¨oÂV¨»Ïy¹ #UÕÎ mífá8Àìâ0«VìÞÌfÑÔÞ…Tö¼aøðÇ?dÚÈÖUá-ìÁýÛk¥·—Ú\¯Æ¡HF?Ñ¡Ü0‘hqØ£°xî µv(ðiTx~¡ÂS3¢hAåmíŠÀšÍ§ù(¯}×F‹,ÜpÓòз”¿–ÀBÃDíÞ-þ°®Ãýà¼Àì‡çZeÙ}Éàg]øÍYV<îÚ‰4o´?ÂÀÝû]Þža%NŽ¨š ÁQ;´ÀdàCd l´5Iôj5@è? ][¿Œ—öoè‰F¸8Öôl‰ZúG1È+éáŠrì]p-´×ÈŽ§4Œ…è¾G ÿEjéEYkí‘é&¥ æ¾x˜Ö—ùl"UÄŸ°à„µ"W1ЃÁL,Q»b÷<üÒ¯b«Ú?pÁ2 d>ùá§×ŒE‚Ðþ6A\ñµö<ÅU˜2Tb×ËYÞ9š‡xê;Ýõ[em ¬Ú÷
endobj
-2027 0 obj <<
+2040 0 obj <<
/Type /Page
-/Contents 2028 0 R
-/Resources 2026 0 R
+/Contents 2041 0 R
+/Resources 2039 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2032 0 R
+/Parent 2022 0 R
>> endobj
-2029 0 obj <<
-/D [2027 0 R /XYZ 56.6929 794.5015 null]
+2042 0 obj <<
+/D [2040 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-2030 0 obj <<
-/D [2027 0 R /XYZ 56.6929 229.6198 null]
+2043 0 obj <<
+/D [2040 0 R /XYZ 85.0394 229.6198 null]
>> endobj
-2031 0 obj <<
-/D [2027 0 R /XYZ 56.6929 217.6646 null]
+2044 0 obj <<
+/D [2040 0 R /XYZ 85.0394 217.6646 null]
>> endobj
-2026 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F39 1178 0 R /F41 1238 0 R >>
+2039 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F40 1178 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2035 0 obj <<
-/Length 3019
+2047 0 obj <<
+/Length 3016
/Filter /FlateDecode
>>
stream
-xÚÍ]sÛ6òÝ¿BôŒÍ#
-D4Ë×gÁl }ß sé]ŽG½¾?ûËJfÚ×±Œg÷#Z©¤©˜Ý¿xWõÓýõüüRFûç—Qx¯oïÞFÓÏÕÛ»›Ûï~ž¿:OBïþöí¡ç×7×ó뻫ëóK¡ÂHÅ$þýöîšÝÜþp}þÛý÷g×÷Ëãm‰@!¿¿Ÿýò[0+`wߟ¾Òi4ÛA#ð…Ör¶> #åG¡RS½;ûÇ@pÔk§N‰)R©¥2™“”SrŠ´+©¬œ6Ù¶£ýüDÁü Iÿ½„ ®n• ƒÙµ[P—eÁ¸æá¨o{.R¯l›Þ9c¥©—e›oÍ¢,|&ìèR$¾V2µìÝ#ܬˬ¶sTÙUÙQoäÝßÿ@䯬
-j˜–z3mÖ<¼2kÓ²©éwÕ츯¡UB/« 3ŸS;Ïxì‚É|(7LÅÔ+åY¾*Á`âTÁ´ªÛ¤ðuI»É¢)íáÕ%xÙfS=®kÕw«fkº¬3%uY—D Þ§¦.Û¿_†
-p÷1ñ¬j™J¢ dÓw0<Þ¢çµna’®Óá«rÅjÞ¦©LnïÍöpsäˆDE‡–5I
-Ö*àHošU¥•—µ­YÖ–9ÀZNt¸§‘kS›¶Ûf¬fQ¨Ã…Ú­Jbú€Œrrtiê¬+[Ëšôþµ2U9¥¤„N
-äº%ÈšhøÛ·È;B¨6üE†×æSé&ä(¿ li°0œÑÏ'b·–!`CØ•Y˜®¢CÞhÚmV™ÎªQÖ#á÷¶îÊm]Nà¦Ü‚×Yþ©¤ôÚ~¹,ÛŽäý•-@jyðªé­Ë¼ànëV4ƒ–µ¢Üró~‹ì‰©ÇSº§É³Š«¦í0ËØ»å¹ý䫬^–S¦G+5s…òîÀ`7 î$§ÂÔ-¦Ùx6‰dZô¹µJ@l¶†xÕä›rD†™uê‘`ËÔyS·`Ãe?ªè·äS’T9¡!¢{A!“̆¢lMPeÝ“bŒÍò<¬áA.r£²Q?fU_:tU5»!21œ?ŠÏÉ>>KÈ‹äRa(’1‡D$BµeÞ™¦¦†µP7oi¦i ‘gÛ­±ÛFÆH^%oÖ t\¦"*ˆÝ>ñ2
-ÖM¬™RѬ3Çd­Ñõ'$~ïv? ÇL—Y«·Jp‘ÅJŽ¿÷eÝaÜF\?h"ã)¿JnƒŽØ"|¨¦[9°0#æXoîÞYv!·‹Qnæ•ò…àêëáK(_‚
-†¾¾úv]=½È¤ecÂVf¹²Scí»6£vüCnÜ‘ ®íÔ6ŒÏèM‡¦´åöÑj° ÿº2©Âðu*N hÓö%àâc¶ÞTÖcí„ðhŠãEç7W4ªÐðb*8bô xwOUÉ D©*ÛRï`þKmˆ³Åü®3ˆb< /Ë6v%0Û<Ïç‚a)ydçe– TBœì˜šMð ò ãØʇ&˜vJ6«a#eä­Ìh–& zd)ðƒë×Z¿¤;ì(R•„ªLmã°„j¤‚Š¬_®¨y5uïBLá-£…@m ¸Þ¢âeû–".vð°Ú&ÚötE,cš£Ò@Š}Ê™‰²+#$½%‹íQ/l“ìobæ|îpË=ÑqäE¨˜˜äÎt«Ñ0謲úŠ”ÃÙéÄʆI@Å×c5:U:6î´p[ò¥QhÝŸPž@ØÛMÓ·.Êù¼Fn tº:ŽìÍC7ʱU_¸ në•ý '+²…ºëÉÆÚIÍÝìÓ+ú69
-ö×há¸Ô*ñÓ(Ò°ywB‘ðöÝ­ýæg¼ôQiàýøþü2Q‰„ú 0PƒÿóúîzþʆI4ZI¨@¢£µÿÜ~Pr`ƒ{3ûšJ"?J"5-!j_†õT¢} m%ô\$¯Þ9-ÑJß°<båÇ2Ÿ³˜8ñe“ZVë`7­2’©¯}`Iž– ­)¿qÉDü7úœ¡D‘/#[Á 2€5@Ñ "Øÿ†% ´Ÿ
-R‘Éi©Œü†Å"?‰Âøs– Ü“‡–á¼C‘O¾¢öO0ÿT' ªPë
-?Hß‚ž½ © öS©„ÐX’äå7!™J êÑ£‹T6d+RÑ€ˆUöÈ]tKú¬Ô®¡ÔÂÆneò å{O&E7ÀŠnqCOÄ— û`¨º_/è¢Xñ$]½òƒ€›¤†«9ìÂû•—/ò²¢àB¬=ª…ì©gTÿÀѺ.¨äéö§4è†áð&o²£’JIÚßP ãUü1ɪ߈OW•ß¾ÊcnZóqØš+ 鈎ì횣};ÆË,_Ÿž‰§Sw “Üwtä.@§
-Ò²|^LÊØפоŠ…ü2ÓÈÃô—“_#ιM]Ê ñà >ý•¯0úKë@Žàû÷þWïüo﹤G¦#–Màeq$l"À¿0|cˆGKÿÙ¨¿vä#tä‡Qp"=ÊH¢Æô ˆA¤JB~Ü‹Bx{I!òFpR&ãå¾’Pþ—¼ðõ­V@º¼ 0ôeyA@-š0½ó‚€<CÊåHdÚ—ãÏbFA­ÜGJz[8ô€DúB‚ƒ ÓŸx‹H¡èMcÁÃ/NÅ/Žº…y@.Jw¯:Ü8p°µÏ(C¶x
-WT…žSÜcÊÓæýÄÓ æJ\˼Ù§žQ@¬qBqý•½…“û °©†;4¥÷añôjÀs†·ê35¥!ʺПñ¸l˜KÏô1_¢îù]
-ö6çKµÖò!X¾ãÙ”Ö§*)÷Ù«)z×Vöª­3yolÛ”öòFñ³~¬0Þ‚ºhðƒ©GÅÝÇ
-@ø ×–$3á^€ð~é‚®ÇDš?¸°ËÙ µ“/%BÙhü$ŸtÂEà[cï½°vøôñDhûª!ìÓÞ1#Ê
-OHGÐ~WMûíƒP¤4AÅ°ÏßÖ&
-ô’H‰‚8„ç(Q5@«œøv ?8šøÒ(˜}6þéwMûo»BˆZi*§Ã
-BˆiZ8¦P"ÐǬ_@=çý¿ Pfúendstream
+xÚÍ]sÛ6òÝ¿BôŒÍ
+÷ïï®Ï/ex7·o*Œ¤wõÝ«Ÿî¯çÔóÐ×·wo£éçêÇ»›Ûož¿:OBïþöÇ;Bϯo®ç×wW×ç¿Ýv}?°<Þ–òûûÙ/¿³v÷ýYà+F³4_h-gë³0R~*å0ÕÙ»³ G½vꤘDàKË 9I9%§Hû±’ÊÊi“m;ÚÔ¯AÌßÐNñß+@êêVÙ0(]ë°%uYŒkŽú¶ç"õʶé-3vQšzI`Q¶ùÖ,ÊÂGaÂŽ.Eâk%SËÞ=ÒQÀͺÌj;G%‘]‘õFÞýý[ eUPôԛñh³æá•Y›ŽMM¿«fÇ} ­zYM˜ùœÚyÆcLæC¹a*¦>X)ÏòU 6§
+vàØ UÝ&…¯£HÚMMi‡¯n,ÁÀË6›ê‰p]è¾[5[Óey,©«ÈºŒ b ðþhê²ýûùe¨
+B6}wÃá-z^{á&é:>°*W¬ámšÊäÆñþÐl7GŽHTthY™$¡`­Žô¦YUZyYÛšem™¬åD‡{Y±6µi»mÖÁjõ@€:\ˆ Ýª$¦È('7@@—¦Îº²µ¬Iï_+S•SJjAøè©@®[‚¬I €&¿}‹¼#„jÃ_dxmþ(Ý„åw- ƃ3úùƒØm†eØve¦k§è·šv›U¦³jA”õHø½­»r[—“¸)· ÆuV£*)½¶_.˶£y?AeË#ЄZ¼jzër
+b·O¼L‡‚uk¦T4ëÌ1Ygktý ‰ß»ÝÃ1ÓeÖê­\d±’£Æï}Yw·×šÈxʯR†›Æ #¶j§éVN',̈…9ÖÅ›»w–]Èíb”Ûy¥|!FÕð%;A€ä…^ù±ëÑ›Jùq³-!Ô6õaÚFqyH\†¾Eh‰“ž´‰
+jÆgôƒ¦CSÚrûh5 ؆]™Taø „:'´i
+ûpñ1[o*kƒ±vBx4Åñ¢ó›+š Uhx11z¼»§ªd¢T•m©aƒW0ÿÀ¥6ÄÙb~×D1…—å »Œ˜mžŽçsÁ°”À<²s‹2K*!NvLÍ& øù„qlåCL;¥@›Õ°À‘2òÖ f4 K“ =²øÁõk­_Òö@©JBU¦¶qXB5RAEÖ/WÔ¼šºw! ¦áЖÀÑB ¶\oQñ²}K;xXmm{º"–±ÍQé Å>åÌDÙ•’ÞŠÅö¨¶Iö71s>÷ ¸åžŒè8Š
+ò"TLLrgºÕhtVYýÅÊáìtbeÃ$ âë±*wZ8
+‚-ùÒ(´îO(ÏN ìí¦é[å|^#·:]Göæ¡åت/\P·õÊþ„“ÙÂ@Ýõdcí¤ænöé}›Œ
+8=Æ1{;ÆWÆV`ã¡P¥\0êiSòx÷—W L¦ùp4Óî«ý a"#¨oË£‰ëº\7µÉÛ) %ú}=äèEóh#vÑ8ve,C"æ4¾½$s@?4ƒÜÇÕñ†Ÿíp¡ ÐˆyLìð†ÐÙccWP),{TÍA}ÎÖr &ŠËLDÚ†
+pÜ‹Ä6÷ö´ÿÁdUêŽ
+Ç£xë­•ì¡]#@»-†­ˆdˆÔª­œÆ°4VAÈÁÆÝÞ¹>¹/0_R+?á œ`»Á(û¬]I1d¦©ºÅV=”亣»àq{ÂqŠÌpê2°®ô 9›†Ï+Îp\q†õœ¸qÂœ~÷û††Nžàb4€êfW•Å²<Aj8µìÕ”¦3Õ‘Äp[“â¸qCYä|*Øñ¼5- )£P¥Ô‹ë‘º¸ê„"·Í–CˆýÛñ5¾PJÍ”Ö~˜Fñç\t©8ðãXF‡]n–cdŽNr@ó Å û!©ËaS—*MüHûk´p\ ‹@ûQ Cؼ€Š;¡HxûîÖ¿~ó3^ú¨4ð~x~™¨DBý¨Áÿy}w=åÃŽ$Æ
+N@¢£µÿÚ~Pr`ƒ{3û’J"?J"5-!)?Õ1l&Ѿˆ…¶z.’WÇh¥¯XÀn,ñ)‹‰_1¹ñ¡E`µvÑ*Ñ(#™úÚ–äiÉКò+—L$À£OJù2±Ì XD½ ‚=ñ¯XJûI ÓOÙF¨|©c:b¸ycË
+?Hß‚ž½ A0Älå ±$ÉËoB2•@=Ô£G©lÈV2¤¢«ì‘»è–ôY©…]C©…ÝÊä+Ê÷žLŠn€Ý↞ˆ/öÁPu¿^ÐE±â;Iºzå7I WsØ…÷+/_äeEÁ…X{T ÙSϨþ£u]P-ÈÒíO'hÐ ÃáMÞdG%•’´¿¡Æ«øc’/T¿Ÿ®*¿}•ÇÜ´æã°5WÒÙÛ5GûvŒ—Y¾:>=O§î@'¸ïèÉ]€N¤eù¬˜Ô©+ΤоŠ…ü<ÓÊÁôçÔ’_ ̹=]Ê ñà >û#?t[| Féïý{ÿíÕ;ÿ‡Û{.(¥Nè@‡EøX ›ð/ ŸGÀ"gòÜ/ýW þÂY`БFAz* „¾°2Ðò•Pn¼ún, áí…XÊà¤HÆË}!™ü/IáËÛ¬€;uIA)`èó’‚
+wà”pÏ*
+fŸŒÿŸûUÓþË®ÂVšÊé8$¡äµi‘™Buñì8Èß?© Þÿ é<f endstream
endobj
-2034 0 obj <<
+2046 0 obj <<
/Type /Page
-/Contents 2035 0 R
-/Resources 2033 0 R
+/Contents 2047 0 R
+/Resources 2045 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2032 0 R
+/Parent 2022 0 R
>> endobj
-2036 0 obj <<
-/D [2034 0 R /XYZ 85.0394 794.5015 null]
+2048 0 obj <<
+/D [2046 0 R /XYZ 56.6929 794.5015 null]
>> endobj
634 0 obj <<
-/D [2034 0 R /XYZ 85.0394 622.0858 null]
+/D [2046 0 R /XYZ 56.6929 622.0858 null]
>> endobj
-2037 0 obj <<
-/D [2034 0 R /XYZ 85.0394 597.3835 null]
+2049 0 obj <<
+/D [2046 0 R /XYZ 56.6929 597.3835 null]
>> endobj
-2038 0 obj <<
-/D [2034 0 R /XYZ 85.0394 411.8393 null]
+2050 0 obj <<
+/D [2046 0 R /XYZ 56.6929 411.8393 null]
>> endobj
-2039 0 obj <<
-/D [2034 0 R /XYZ 85.0394 399.8842 null]
+2051 0 obj <<
+/D [2046 0 R /XYZ 56.6929 399.8842 null]
>> endobj
-2040 0 obj <<
-/D [2034 0 R /XYZ 85.0394 231.7148 null]
+2052 0 obj <<
+/D [2046 0 R /XYZ 56.6929 231.7148 null]
>> endobj
-2041 0 obj <<
-/D [2034 0 R /XYZ 85.0394 219.7596 null]
+2053 0 obj <<
+/D [2046 0 R /XYZ 56.6929 219.7596 null]
>> endobj
638 0 obj <<
-/D [2034 0 R /XYZ 85.0394 131.5008 null]
+/D [2046 0 R /XYZ 56.6929 131.5008 null]
>> endobj
-2042 0 obj <<
-/D [2034 0 R /XYZ 85.0394 107.0349 null]
+2054 0 obj <<
+/D [2046 0 R /XYZ 56.6929 107.0349 null]
>> endobj
-2033 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F41 1238 0 R >>
+2045 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2045 0 obj <<
-/Length 3197
+2057 0 obj <<
+/Length 3210
/Filter /FlateDecode
>>
stream
-xÚÍ]sÛ6òÝ¿B} g*¾H‚}s[§çNãä\ÝLç’>ÐdqŽ"u"Ç÷ëo» H™v’‹;­ý
-ù*ÑÑbÃØ€¶õÚÝ9À,Ë÷B¨°CYóN||<
-§¤f·/›}Ùñæþ½hvD&’‰UgÂ=LÕÅÖÁéR!øt06ÀeÒá=[šï Èíé“p¦ðNårCCþöÔa[‚-:xî]çVÀi:“ÌP£]ªæÞµÝÔ{ׇí-n®´€ûžy®E]­q4ºû†¦ùN¥ké»\üð[!x Ô€÷ð\ïI‹³­Û ]râ,[nšÖ3#ô÷@íf[=œK)£Ñþ6ªFìq„½;n©¹²ÔÖS~â²Ç[ÍÑîšzUÖwxÞ\ñ5¬‰ˆè×Áá
-î‚WØZ†Ù@"OˆÞ·)ˆÀ`““Ôž°tÛ6˲è¼5} –ƒßd¤ÀŠÇÞ‹D\P×ÓÚ øƒaÉ
-ç<Þ“' upq7¬£š‡;Í›ƒøªÞŸ4r ûYsÆÎ’\?iSOL&S¼l¶¨]48mWà5k%è c#)Îç™`M–œP×äYl™Ï'ùº»!e¦ÕB®,‹AÚiz bÀlà."N­6ž`§ÔÉu´§ŽúLò v~YúÈ—¤OšÄÒ
-“Ì€$±ÈÆ †G‰•ÙØX<u"uœ%F?Ÿh0y[%É0¼&—
-k^A͛څS(öS `A¡I‘Ï´5qfäçhkƒ†™þ2m=½jàâÐbJ|‰#VœX p%ðÒ8Wâ UòŸƒáÕÈl¦Hþ~}Ó€ f¢ªðI!ðÉ‚¦™Î&ˆ£¦¥Š“8Ð µ»+8“Ÿ1 xþ h± ëÆÉIœCnF^WÏ‹ÑHž˜Ã“¤Ïï@÷˜›Á ª-é… ºu3»™‡\ Ž¡Ž¿þíÇ7¯/®®Cî!äåZ×NñüšN»%>{hñ”Ü÷R°->–ÛC£ž ±–áH.1$×1ã¡©iÜ·Ç ŠÞࡻʼ¹Ìá¥ìðu†¼¬…µ ¼5àþ"”aÅ“L þ‡Ï³¬²1Ÿò9ßx%a0'I 8°Á4¦Uúˆ3DQœÄœžVœ!F˜®ÙшÏ﫦†ÒØ#íAÓH롆!1 ÖÁQÌ-µ¼ëÓ¼rëâPu'*¯çw4ü¡‚õæÐ4]ŸKYž j]÷ OôÔþºç;åó‚¡0?çéó<!Lœ7"ÐÉ;àÛf:º,0—ªTB“*a žN<)¡!ÒáwK-©2•° @ý£:„²>¼¹ñþ`_9Á±à'£BÓ“|AF®Tœ8ª81Tq‚ïÂêÂä¼ÊgÞHÛ—â€Ï{þK*sp»3¥¿4îñþ,<Øóq2¼ÞœâÏ ŸÏ¹0HÕôßqˆXWX~b ÷@ A°‡‰C´^<LãÕPs¸Ûœ
-‹ æ´6 QÆ¡Ã<Š GW5².³çëb·;Z8æã«·̧ÅÇxt.B¥ÅæG×ú@eiœE¥Mõ„(‰Æ Ó*._ãÌј㪫·4:ªbhNkãnÊú>'ûìÁÁfÃÑV4Š?Žb•‹—Óƒ‹Pô>©Ïœ<EYÏýþ™‰âb¿+&è‚ž< ±j_²—m½]ÜPç¤æþW¦Dt
-ÉWRq-NÙªù“#øéÑ>½5„‰m±rcL•7ºmÃußy8óÈ—jË»š¬÷¬T¤¹¬‘‡êy±"ˆÊ­»aSEûònƒuc#²àYÂ(µ}PïvM[v\€”¾q2àbhÏŠA®ÀvÀŽQ*º
-¢’CQU\0½ß—Ý|Ê1ì\í+.ÖZ.·¡ØÂuAª·ø’ò—Iè '쩘¿pB‚ŠŒFäGo0Á6/ïw~ CAæôás}¿ÑÄ•4ì‰Iœøt¹ObªÞÙ·ÄË}l™ôãÇ[b^ü¢}ð¥£éÇ5Å ì.çR,ÿ4!Œísl(‡‡¡
+xÚÍZKsãF¾ûWè]1ý$›¹9‰'ëÔŽgÖÑV¥6É–(‹µ©©ñxý 4EÊ´=³ãTbØô  ?
+ûýÏÙ¯¿‹Ù
+N÷Ó™ˆuæìì*"–Y¦fÛ3culÖ¡¥:ûùìý„ƒ^?tŠMV»Ø:•NðI©)>Ù,N´ÒžOûs颢*>äuç2&ZåÝaû5–m”×+jl»†(¹~_vîi¶•òÕªìʦÎ+¬ë¨{ØqOY¯›ý6ÇNjèúnŠjÇÓ<´]±my EWì·eÍÃï7E·)åpî¹”qf­ò‡¸á{.[ú÷Ò8ÓÊùo9Ÿk-™pIg[µÔ˜S+U-K¸g­E´lêÎS4u¬ŠªüPì¨Ö¬é[ló²B¡±:Zlx6àmN³´»bYþ&„
+Ó—5/hÇ{c¢°Eúìöe³/;^Ù_õŽxD
+±j`C¸†I£:ß°µDÞ´ æ2Éð-õw7Tì©Js&pIårCMþèTði[¢Í;¸ë]W¬@Ìt*YšF«TÍ}ÑvS—]¶·¸¸Ò.Bî[¸ã¹ItµÆÖ,êîêæ3•EKõþf±â—Bò¸q.#/òžµØÛû´JFbmËMÓzI„ò¸Ýl«‡s)e4ZßEuÃû9ÂÚésl©‰¬çüÄa;vš%¢Ý5õª¬ïp¿™âc8Ó‘®ƒÍÕ¾£j~WxÝv¨¶Ó¬s*™è6_þ›Ç5ü SÖÅGž£¢Üáø®~Ó|~#Eô¾!B÷Ôùª™’ɺÁÙ”‹6ù\Re ÄԔ߶Muè
+ªm‹¼†3ÍoJ¥Ô ; ä=£€àĨAwSWL˜X,»2,êŽT0ßžŠh!ŽS ,v‚5 ëûk:V¯)yeeSŠ•Íš£2Bû©Ä2E¯)Ö°>X¼ÝåÆDßÚÐ7èܘÐëž —¥Û°,i#rÞÓ•W²oÞ1x*à™ˆ…Iñ‰Á#l-SD"K˜ˆî—ɉ ð Û$=é¶m–eÞù§Œ5<|'#ë}4|Øö›°â‚Šž÷ð½€?h–L@2oúõÅÛËñ{@r…ö°ÆIÑl,ËâÑãú ¾ñ+$¤ªÉQU¡H÷†š—ª¨\S£>¨úEá{Ûø'2IÃ<ac‰{|D\­î ôõ"øˆ˜'}’j¸²ÑX/ödÓ÷wüDÚ/;!µl)2á…¿å]ÝEÇ€Ì_ÕðfçÞˆÃKÂV# ††<žd$ÔDV'ãñÐЛÞìä™ô»¨yXì0À³ ›hÛ5eÝ –š°B·$´ A1£¼ nÅÇ|»«ŠoO!_–ÆBÓ!ARõI˜Oe±Me:Æ|ÿߨ°Áý=¹'`..†ã©æáLsë2Ð`ÕãI3T
+`µVdðtô W¤8Ÿ§‚-V<vÂb«Ø®3³Áv¾ì€ÈJ™jõ‡ð,…R–¸i¦ÁÛFËà,"Nœ6žiÌ¡Œ€)˜;ÚsG}"{+¿.äkò'±±4 Æ/ð'qq
+8â þ¨!bÄ0‡]ÜìïžáÎ`Ý¿°ô€Ã']b_R9›ÄiªÉ€=V p†z/§v^¨bü—Oóh°ú_˜GFÆJKýŒ‰L³žG'jÏß3LRO3i°ük1éèÞÿo(T성3`I,ÒqœáQ¼\Ø© `•:N­ÑÏÇLf^Òóð–À
+𱫪¹ïE¢ÛÐÜ‹±Åv¬t<”Å~7PYÈç[«X#(¤çýÚGÐç¿M]wS(PöÓ'@J?›š™v&Nü{­3°‘"ÕŸg¯§G °¾;¦Ä瀙0âä êϘ!‰3%ž°æRI
+z›*ÒÁŸßÁ³iÀ”„‹3Q•û@³²iæµ *©i¨âX6ta†º¸Ë98cIÖX ¼ ÇD´Ø„qãX%ö¡D£¼âóÂ6Ò)–rkûp¡:PÎ`Þl¯PP¬›9˜ÙÍ<„n° íüõ/?¼{{quBv¦k‹vJî×´Û-ÉÚCsˆ§t¿×„mþ±Ü˜m]P}xŽìCv š> ‘ûöPÑÜôcÄ,\¬’D͆ñeB†â¬…s`ÀuœÉÏš2ŒxZn…ù’Ô*ÿ)Âó•·£”’ƒ§˜Ú´JÁ,q ˜ŠåÓŠcÆHÓ5;jñá~×Ð@FKdD¨Ù=4”£É@Hz°£M-¯ú´¯Šu~¨ºË׋Dq|ÿCncìÍ¡¼>º²<™¨-ºgÄ¢ç÷—Ýà©P˜×
+…¡‚,K^ aâ$
+§:ºÌ1Àª”¥Neù-„BˆY[ÏMø÷°ÞÒ— š² ¨|4ŠP)ëÊ› ût
+¶hlG©§'Eƒžs8F0tâhèÄÐÐ >  ¶å37?dêkÝý§{>ÄK*3ÀÝ©ÒŸëùx@ ÷ô¼ç£ŒØ›‘zá£ñg)sƒ
+Ï-SÿFþ‹ëƒì¥ 7C¨{ü딞í¯EsoZ DÑïeøg¾UG[0þå®ât(<ÎDgœƒì
+þHÉë
endobj
-2044 0 obj <<
+2056 0 obj <<
/Type /Page
-/Contents 2045 0 R
-/Resources 2043 0 R
+/Contents 2057 0 R
+/Resources 2055 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2032 0 R
+/Parent 2022 0 R
>> endobj
-2046 0 obj <<
-/D [2044 0 R /XYZ 56.6929 794.5015 null]
+2058 0 obj <<
+/D [2056 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-2047 0 obj <<
-/D [2044 0 R /XYZ 56.6929 613.3608 null]
+2059 0 obj <<
+/D [2056 0 R /XYZ 85.0394 613.3608 null]
>> endobj
-2048 0 obj <<
-/D [2044 0 R /XYZ 56.6929 601.4057 null]
+2060 0 obj <<
+/D [2056 0 R /XYZ 85.0394 601.4057 null]
>> endobj
642 0 obj <<
-/D [2044 0 R /XYZ 56.6929 465.8716 null]
+/D [2056 0 R /XYZ 85.0394 465.8716 null]
>> endobj
-2049 0 obj <<
-/D [2044 0 R /XYZ 56.6929 438.5672 null]
+2061 0 obj <<
+/D [2056 0 R /XYZ 85.0394 438.5672 null]
>> endobj
-2050 0 obj <<
-/D [2044 0 R /XYZ 56.6929 397.0946 null]
+2062 0 obj <<
+/D [2056 0 R /XYZ 85.0394 397.0946 null]
>> endobj
-2051 0 obj <<
-/D [2044 0 R /XYZ 56.6929 385.1395 null]
+2063 0 obj <<
+/D [2056 0 R /XYZ 85.0394 385.1395 null]
>> endobj
646 0 obj <<
-/D [2044 0 R /XYZ 56.6929 216.4249 null]
+/D [2056 0 R /XYZ 85.0394 216.4249 null]
>> endobj
-2052 0 obj <<
-/D [2044 0 R /XYZ 56.6929 186.4354 null]
+2064 0 obj <<
+/D [2056 0 R /XYZ 85.0394 186.4354 null]
>> endobj
-2053 0 obj <<
-/D [2044 0 R /XYZ 56.6929 97.1422 null]
+2065 0 obj <<
+/D [2056 0 R /XYZ 85.0394 97.1422 null]
>> endobj
-2054 0 obj <<
-/D [2044 0 R /XYZ 56.6929 85.1871 null]
+2066 0 obj <<
+/D [2056 0 R /XYZ 85.0394 85.1871 null]
>> endobj
-2043 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F39 1178 0 R /F41 1238 0 R /F21 954 0 R >>
+2055 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F40 1178 0 R /F42 1238 0 R /F21 954 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2057 0 obj <<
-/Length 2118
+2069 0 obj <<
+/Length 2117
/Filter /FlateDecode
>>
stream
-xÚµXÝoÛ8Ï_¡‡{—Ÿy86›:=/šd/õ^ÛöA±•D€,¹–Ü4û×ßCÊ’£4ÝëD49Îço†d…?iE¨02ÊŒ$Š2­6'4ºƒµ×'ÌÓ$(Rý¼<ùñ\d‘!&åi´¼ðÒ„jÍ¢åú}|öÓ_—óëYÂS2KTJ㟗¯pÆàçìêò|ñú·ëÓY&ãåâꧯççóëùåÙ|–0!³øýêrŽDç‹7óÙÇå/'óe/òP-F…•÷ÓÉû4Zƒv¿œP"ŒVÑü „ã͉T‚()D˜©NÞžü³g8Xu[§ÌÄ#™Q"$Ñ)°=%æ@l¨¥„“~“ŒŒc”œ–‘‚§œ ––î£ÀËÃŽ1«ƒËSɉLeÚ»œóˆ1b”âÖ熒ŒÁöŒ 04—Îç—ÖŽÒ•Jf %JÀ:uW³$eñþóø‰ó€§d Zšjˆ--íÑѧˆ*H4;]6p?.6<zÕ€FÑ@©À8rvJ¥tÇŒg„fÐÉdÊÈËûÕJÙ€¼H jýåêzñzáÕñ”Š¦ž®*ë¢%Âи¬ñÛ{7(f‚Æ_òͶ
-$ùÎ/ÝÚ¥f‡?¶»fÆTü¹\—õN­šºÃígÚ|9H ¦PÄP0IïS¯©«G g4þÀy†#Ë‚ÓØϯüÖMçŪhÛd™Ê°=ßn ;'CEYÅ.®º}^áxßæw…U²[JêŒ}8
-„ÂQ^{š{deâvÓŸöEÝn7EQã¨øÒõºXÛ˜…ywo¥šˆIŒлWad^—][T·~ÜâwUå­B,[{fíéAIìf Z5î»îÉ=Õ׎ßì[ÏìÆÏ4^€^î6ßYH¯$xMz÷O3O£`èm/ÕªÚ¯=˜ò!˜2(…:KÙšŽbÄ¢)‡6é~˜`%‰ÑLF‹Ë³7¿½šOpRD?pB{Õë –\!tx.—oÐ O¡¶
- $ ¤ª”‡| ÌgÄ2Øò'ü| Šæ]Ò–w5 ÙËyðîÞ…à}0è_˜AGÁ ÊoŠ
-×ì‘ìt þs§øÊ‹jmu*ìqÞn‹&
-:•Nyº¿!‰’Ø. w¼;ìÞy&ˆ4ZDBªì[°Xký ÷ “G‡Ä#Áx–ŒõçZ­·'ôä‚Û
-£Ÿˆ8hѸ…u¤°ž¾mªªypáfñáÑÛq——•k:ì¯uÓÙx M®‚ÌÈdÈ 5È ~œ!ÝÇ%âåÌxûXwù—¿Nœ/àt–N6gЦÀ"#‚qîéÖÍ&/ëä`ÆÑáÐ9r)C´¼Ÿà&€YeÕl66Þ'0Œ-E`ôqÊ|Ì@h
-¸tŒö+°zpµ-\*…yÕìA!,cùañC‰õ„ùZÀ]gkœ§lð›×8Øן ‡+¤¬qÇQ%"¶_¾,GÜr–ùôd.wwm‡˜T²ÎÝAÊW7‡`¸à§[üæn9KhìÊUÙMÕ–¤˜
-QîXiRÁ¿ "4T
-÷e©*´ø`Dà˜ YN€´kÒ@ëÉ^D y„ÏjJ¦J*ÉÏ ˆò(¢F(¢(’žLP£’1á¿ŒB¿ñû…DRM2ÎŽâ)†aSäƒòrÈ(CÛb5÷CÕ—±„Ú€5Ò—%CPÛoúF¯¼®iîæt¸i›jßd"8¡ØÂVj‹Ã̧I“¤
-ãÉû!&añ¤öµÉdÏ\C{a820y@¶‡²»Ÿ,šàEÁÿ,¤A7r ¯áÒ X°={c«ùCÙGüR!
-¤9ºàÀJ_9`ìû-!Íçbç©œE|4¤Ež0ùˆ³÷¹?o»+ÝõìhëÞ¤Œd}òí x#eˆ«¦^#¶ö±)µ€iÆ5 $|1q¯E=|“È×ä¹×y@û¤>ñ–Nûç¦ï~¹?¼jYçk͇/ÙÃÔ²×{ÂPV?õcÑ•ÐDiÀ°§²ÿöÕ†endstream
+xÚµXÝsÛ6×_Á‡{ fJßnn:u9§N,÷µ¾i’Z¢mÎP¤"RqÜ¿þ_)ÓqziÇ3æ
+X,v±»¿]€DþH$$’šê(Õ LD´ÞNpts¯'Äó$)ésý´š|ÁT¤‘–TF«Ûž,…°R$ZmÞÅ14 8þýj1›&Tàøbþ(¸ ñù¿Ï~YÍ–nBzÖŸæ‹WnD»ÏùÕâbþú×åÙ4åñj~µpÃËÙÅl9[œÏ¦V?Of«Nå¾Y3£ïÇÉ»8Ú€u?O0bZ‰è~`D´¦ÑvÂC‚3FÊÉÛÉ:½Y»tì˜(#(,JG
+¶ï3=e¦À¬±áfˆj-¿JGB‘ւ눣D1ØNþYYnYž +†¢Ž.—œ".¹ì\NiDÒBPãsIK‰ŒRÂà )·>_wXN„äÄ0Œƒyl9®¦‰$ñ
+þÓø‰ó@&NiI© ¶7[G#‚0ך9¦mm=žø~¾¥Ñ«,ŠzFÁI_²5J’^Cøì¯R”rI­Æ«ûÜY%iœˆ Výãj9=÷ÖDrˆ¥ç+‹*o¦ Ó8.*÷mA¼%ò)Ãñçl»+K¶÷S·fªÞ»»}=%"þTlŠêÎ ­ëªuË[/´þ’pÐNB i”t.õêª|~‚ã÷”¦Ž2"(Žýø¦vߪn=‘¯ó¦É@7Щ˳Ý.7cŒg( º˜Éu{ÈJGšì.7æ@þsŽíaws
+­kûÝtìžëKÛovãGj¯@§w“móž.¨3¼Æ½ûÇ…ƒ§bÎÛ^«uyØx0¥}$P U*ÉšbÄ )….Äñ}7"Š#­ ‚æ‹ó7¿¾šHD)=JrçUmFDRŽSi¹Z½q‘P ¥McH ¦!U9?æ">#Vá,tŸ÷Xà¬Mšâ®’¼œ×÷6ìuÐsþ…ç( Êì&/ÝœÙÀ ’®Àv?ƒi^nŒ­L„µ,Κ]¾w
+WOˆ¯Ôvp¦ÆyÎÚ}³êчê#ôp……”[qR‰é×X€/#Ñ­ 9K|z›»û¦u˜L€‚Ù„¯nÁÜ„nÜ7³Ó2. ±+ÖE;VoH
+>àl,@¹c´‘Œ~D¸ˆŠ”E R•)ö`D˜ôEŽ€„H$ ªvl/¢;A rj©ò h¬¤¢”Qö Š"b€"âˆ" £2`‚”Œÿ¥ú…”¾Ø/$›+ÁÓ~<…ÂÐr샼W^ŽYeh—¯{á~챺â2ÔPi8 É^îh”Y£ïÛ®Ñ+nÇkš½€Ynšº<´9 N(¶)Ü—•Áab€S ´I$Àpîn@
+x?åV§`¼¹Qù»KSh¹°ƨ®‚g,핇(àúä‚3]å
+¦Áb”2öŸ¨n/I’Žèþ?œ¥endstream
endobj
-2056 0 obj <<
+2068 0 obj <<
/Type /Page
-/Contents 2057 0 R
-/Resources 2055 0 R
+/Contents 2069 0 R
+/Resources 2067 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2032 0 R
+/Parent 2075 0 R
>> endobj
-2058 0 obj <<
-/D [2056 0 R /XYZ 85.0394 794.5015 null]
+2070 0 obj <<
+/D [2068 0 R /XYZ 56.6929 794.5015 null]
>> endobj
650 0 obj <<
-/D [2056 0 R /XYZ 85.0394 617.17 null]
+/D [2068 0 R /XYZ 56.6929 617.17 null]
>> endobj
-2059 0 obj <<
-/D [2056 0 R /XYZ 85.0394 591.42 null]
+2071 0 obj <<
+/D [2068 0 R /XYZ 56.6929 591.42 null]
>> endobj
654 0 obj <<
-/D [2056 0 R /XYZ 85.0394 518.3317 null]
+/D [2068 0 R /XYZ 56.6929 518.3317 null]
>> endobj
-2060 0 obj <<
-/D [2056 0 R /XYZ 85.0394 489.3118 null]
+2072 0 obj <<
+/D [2068 0 R /XYZ 56.6929 489.3118 null]
>> endobj
658 0 obj <<
-/D [2056 0 R /XYZ 85.0394 437.3327 null]
+/D [2068 0 R /XYZ 56.6929 437.3327 null]
>> endobj
-2061 0 obj <<
-/D [2056 0 R /XYZ 85.0394 411.1024 null]
+2073 0 obj <<
+/D [2068 0 R /XYZ 56.6929 411.1024 null]
>> endobj
662 0 obj <<
-/D [2056 0 R /XYZ 85.0394 208.889 null]
+/D [2068 0 R /XYZ 56.6929 208.889 null]
>> endobj
-2062 0 obj <<
-/D [2056 0 R /XYZ 85.0394 179.8493 null]
+2074 0 obj <<
+/D [2068 0 R /XYZ 56.6929 179.8493 null]
>> endobj
-2055 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F60 1366 0 R /F61 1369 0 R /F21 954 0 R /F11 1459 0 R /F41 1238 0 R /F53 1333 0 R >>
+2067 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F61 1366 0 R /F62 1369 0 R /F21 954 0 R /F11 1459 0 R /F42 1238 0 R /F54 1333 0 R >>
/XObject << /Im2 1355 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2065 0 obj <<
-/Length 1844
+2078 0 obj <<
+/Length 1852
/Filter /FlateDecode
>>
stream
-xÚµXmoã6þî_!N*._$Rì§s'M‘uö·(n»›ŽØr"É»ÝCiËÅç»E ‘ÃgÞ‡¤YDáE™$Rs)’Œ²,šo4z‚µ›ó<I`Jº\?Ïï®…Š4Ñ’Ëh¶ì`å„æ9‹f‹±$‚ Æÿ¾ŸŒ‡ Ïh|}{iÆãË_Ffã).HÏúóíä
-g4—÷“ëۛߦ£¡JãÙíý§§ãëñt<¹?Í~Œg{•»f1*¬¾/ƒŸh´
-Ð4W<ÝŸ
-I!”R—Á~~1›Ý!uUÖfÞ–ŸM§ïDO‰Nb=|­Ú⯟<ãQ)ZLf¡’,¸cÊD‡‰K’§šy¦…Y»u›´íºG²Ì OÓÀû±M@b« q¾Ýll¼_ä©@Ÿ°*`#Q
-N+ ˆ<Gó ×ËÏ^Gü˜ 3(á _šÇ[¤ï¬÷õ'Í(É¥Ë> šÝcc^v®˜íw=dylæ[7.œüRÚR³Ô®ZÛ+[7NÞ쮚K!÷¢‹uÙY±‹ Åi[¬Á˜£Òò= ¨ž|.Є³T¥¹©Â™« é‰4=öÙ!ÔG^?µm¶k|Ú^æî®¢àŽ–½ÌÎA™¼1*÷©-}bî1ï‹Æµ}wýF‹Ôø¯ÖT ´“Ÿ ï°b[7ãÉn;àÒÙø靖#)¯“Y
-B©|'6ëUÓ£EÆINù¹ÅÑ_a!Š¡0œ¸>,MÏT(´uÑôiÄ5És¥»eö L*çAçöë³7°î50…xCýÿ-åÿM A5\ÃtÈkõVÀŽû'*“¢›àN¹Æå6P­m \Æs,É¢58_àИº4~“+T‘³Ùî17ðºOXtwYr›«õW¤åÒ²,]îÃ÷Òíp§&À˜b¾ò;ðšaÉG¿µ¨p,¡p
-8ùíÕ¿¯ö“`õÑ!ý_]ÉBæV˜/ RyŸÙë3;š.H_‘~2•ÕÉ󺪵Ói¤Ü–^ùÉ.âäË®DâHŽ‚–üü¼­[¸{DâO»›?›ºñw©`È‘õ ³6O…½¨ì›\3¯ËÇMŽ)ß„.m1­MãwÂýstu5%£éëÌQÀ |HÒÞvìÓö~z{s o6 =‘{›à¤ƒ;"}×,AÛÿì>–p$þ‰ÃäLJñô÷ñô‚Œÿ½ÿp7>Šq…ä—“Ñ{¿xAh‡íZÎÅÏÞ›í7ñ„7ðp²èsAUì «Øÿ
-ÄOº‡ê¸ùÎ ?”ŸŠ&Òo
-oË•°ÚC6åÂóºD<(󲸲Ã#§¬žœ˜Ì_±‡‡ÿR®×}î|ô§ Ex~=Þ‚¾kì¯)µWH¯œÝ…ÊÙ.ã«ä›þzŠ}ÞõVH×ÏGýâÿ«ë_îf‰/îQÈ^W³‹¾´:ÇÒŽ?PɧEþ›Œ“Ýi ËÑÆ÷æ°>·ôo êíßÜÉO‹ä}ìßx¶HqZ¤8ãi‘'»º ÄR¾v8dÆù{û´é>ôsx3ª#¥ˆT"?çQ.௨zãwJ[GšåðÞçðT¥yß•tÿˆùîŸE¿¤Šˆ<çÝß;÷pû3†ÞËõlÆ_ýjË(áBòÀÖÑý?…CWÅendstream
+xÚµXYoã6~÷¯Š
+õ}ê}øȃX÷¶Ç™ÊR|†ÎD–É`ÕÓF1£•jf–½»ÞÏ;ÀÖªÛÚ妨Å7â$±B²,3º[,¢L1)ãìu,ÚÇË“ÍŽC¨}ãÄ@̲}¥ „`™1Øq–ˆ^b-¦0ŽÐÃŽ3c&ÖgFIÐÜqÜö£X„ø/Ãñ
+™à*( $ÓàmÔx|yÞt’…!¨”‡Õ£p.mEKõ"¯ÊÏt[–víg7%¤¦ ‹‡bMÕb³]ΈóÞÒ\i«zSZ?›Ïk[ÒB¾&·Æ²¥«c£¥÷ëÙõ(B® Ú-D»haÝür1ô0m“•fJáQ¾Ú„÷}ÉÃ-ê®ã°¨i²¨h¬Š%ÙôfM<Ÿ /i’\
+Ï6%5ÜÛL­«šâ¶µ3ÂÎ={NÃÌö?9¹žº¼.Ð=2IÃy¹Yå’ L¦ïˆÌ=bÙ¼Þ–¶2ý"fŽh{^/:KX¬b´kõëʨ Ú·°¯kN‡Å$bßPDDZ
+ëä%ø"ÕªúHUY’ÀqË”LÉ< …&3N凄ב>&}%¼²ÍW&à Ñ7è=GýÁ ãa41wÙDµ½¯ìÓÖ3~—}‘†vºq㬢ÉÏ–RÛõÌb{\cÝ8y“›
+jNC†ÿŠ¢óeÑZAJ„9Ò4kcÌAiù¯|.ðH
+èTÅ:¡™
+[Ï*Öi~è³}¨¼N¡n¼Ž-aÛ&Á'ö2wùp „Tp¶ìd¶NʨÁ‹ Ñ„àñ.µcŸØû‹Î»¼rmßÝX Ñ5ü³¶ë
+ÚÉ÷ÐwDb,„«áh×!pédøŸWD“Ÿ‡R^&s¬窩ŸVl–‹ªC #YÊå©ÅÑ]aM›Âp⺰2&¤IšB[æU—F2cišdí2{c@å´Ñ¹þòè ,; Ôo¨ÿÿ¥üŸ*R<c
+T÷y¼°Ãþ$YbbÕNp §\år¨[ƒŒÃ)•d^[šÏi¨lYX¿É*ŒÄYm¶Ž˜ZxÙ'Ý]–Üæõò Q³bŽ,s—ûð=w;Ü© 06Ÿ.üºf yï·æk (œN~|tÕ~ÔX}pHÿ­«àeïîGS¦â˜. qâ}†3è3m¤/D?Ø5êäy]ÕâteëŠ(w'¥~ÂEš|ÚDÈI %?>nÊÚ#nï‰x#u{ó'[Vþ.Õr`ýÌ.íCŽ•]“«¦eq¤É‰Ä7¡s,¦¥­üN¸..Æl0~Î4x
+$ºGj¹†øN Ÿ<TžJ&3Öm
+oË…°ØAVÅÌóºDÜ+󴸱Ã#§X?81Æ_±ÿ¹X.»ÜyïOADx|lz¼}×Ø]SJ¯^9ÜEÊa—ñUòHM
+=ŸwÒöóA¿øwuýÓíÝ$òÅ=h²WÂÕì¬+­NÃÁ@âø §‘}s¬Q¤_Ñ(¨É8Ù­‰”¬rgŽèrK÷ÆFýFûWwÊã"e—»7ž,R©Nßx\äÑ.Bnƒ±‡Œ_:2ãô½]Ú´úBÀµÝ$:HàÁŸ¨ô”W¹‚~“W~©ÄBÊD
+~ oUžvýTÉw¯˜¯þatÿ#€N˜JSÙþU±u/æš)O%x€ –kÚÂ<w‡Q)3)¤¿gkéþ×­Wâendstream
endobj
-2064 0 obj <<
+2077 0 obj <<
/Type /Page
-/Contents 2065 0 R
-/Resources 2063 0 R
+/Contents 2078 0 R
+/Resources 2076 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2032 0 R
+/Parent 2075 0 R
>> endobj
-2066 0 obj <<
-/D [2064 0 R /XYZ 56.6929 794.5015 null]
+2079 0 obj <<
+/D [2077 0 R /XYZ 85.0394 794.5015 null]
>> endobj
666 0 obj <<
-/D [2064 0 R /XYZ 56.6929 655.4043 null]
+/D [2077 0 R /XYZ 85.0394 655.4043 null]
>> endobj
-2067 0 obj <<
-/D [2064 0 R /XYZ 56.6929 633.1281 null]
+2080 0 obj <<
+/D [2077 0 R /XYZ 85.0394 633.1281 null]
>> endobj
670 0 obj <<
-/D [2064 0 R /XYZ 56.6929 552.1893 null]
+/D [2077 0 R /XYZ 85.0394 552.1893 null]
>> endobj
-2068 0 obj <<
-/D [2064 0 R /XYZ 56.6929 525.0283 null]
+2081 0 obj <<
+/D [2077 0 R /XYZ 85.0394 525.0283 null]
>> endobj
-2069 0 obj <<
-/D [2064 0 R /XYZ 56.6929 90.0274 null]
+2082 0 obj <<
+/D [2077 0 R /XYZ 85.0394 90.0274 null]
>> endobj
-2070 0 obj <<
-/D [2064 0 R /XYZ 56.6929 78.0723 null]
+2083 0 obj <<
+/D [2077 0 R /XYZ 85.0394 78.0723 null]
>> endobj
-2063 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F60 1366 0 R /F61 1369 0 R /F21 954 0 R /F53 1333 0 R /F41 1238 0 R >>
+2076 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F61 1366 0 R /F62 1369 0 R /F21 954 0 R /F54 1333 0 R /F42 1238 0 R >>
/XObject << /Im2 1355 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2073 0 obj <<
-/Length 3608
+2086 0 obj <<
+/Length 3652
/Filter /FlateDecode
>>
stream
-xÚÝËrÛÈñ®¯àÁUªDì¼ðÊMëÈŽ¶våÄVªRñú
-„úçó ÞÏ×7£™„š×ïnÞ\¿ý×ûËóÈx·×ïnhúýÕ›«÷W7¯¯ÎçR›@
-ôl®‡
-¤¹~@þØÙ ácä˜ ›:+о细òpW,ï° z{gÝ“&Õ6Ö,ƒX®¬ýÆñÊŠi½¡-ݲN!ô@RGÚº‘¼Ìø˜"k廓¦|Â\/ÒÅ6‚`ä7@ò\z=žI4P•$¡m l¿´÷†¨ø-`¯Œ„/Bé„e5IòDËp`#Ê|ÕÄÅT’MTl6yV€Á*ùD ÿœi˜ähDs`ŽleÔ M1‰Èà)‰ˆ|Á -H›)S$}¸¡ÃQa$¡«S2îôŒÿxa¹÷ñYôéÓäÎg‚×/Ð-"ï5Y@”üKºÙ–ùÅJaàKÝÙΓ·2/½øç }‘M™€Ä×ú‰Œ8ÐìÌrƒu72³¼‘iQrãØS‚ÚæÄNs ³ÜïH´«–&¬2Jy[ðN·ƒ½í¾ä )/H©Éòe±IKX÷e¿M¨ÜלPšoÓ,³ör‚NmU(9ÌN}±‹¹ƒ6Ò»DßrŸeº(s^m]-³ñ(u;ÕÅ5vtV ¦ ¤M8ŒÓÆl‚!$G‘êÕU^;´À Ji`½l-AttòÈ$8qbTOœøNÆ'BZ‘xw ½=Éu|ê„õ3töeÒiÓ)0èÆ„Ž+?Òžý{*Ö
-¨¡ À£#5|tmkyë—Áò„ «Ôêz߈ãs—‰¡Æ:ùn;ëdM\ˆi{$!û–ò›ljBÉÜeÚÏhÝD?­ªX9Ùü àUuKDIM]îÛœõMiØ)åØ®P, Ž|hÛ&wÂÐòÝûë·×7S×Ë+•" S`mEF+ ¬Â¶îdLV(Ÿ˜c!%j,×Õ±àÇÈV2µšm1Í=%›lûÔ…>XC Š‹–Æô!²Úw± íŒÑˆÌ§²Ÿe±é°K„ÍMh6Om
-â$'··¿Žö¥Õ’WíÎco_æÿ|š½„|yÊ®+f0q1'aǬ8ˆœ˜f 0ÍíÌ1U(WSO.7ÏÆRžƒ"[ÏŠ‚N$Ï{“0)ïC9úQõ¹?CÜMìGIô\uÎDàY?É¥§>PNl4ï·sV҇߆bób.#Wd†å\G…•›´]ÞÑ$SÞW,9OØìaÝm[ny~ 8OÊ­ü¿“Û@ü(¹u´9H·ã´ÜêÐ „zÏÈ­¾øšh{Ø>ÿ€ak¶H/Ÿ
-¡ÁÆ'(6@åû®wL1ùC)ÂÇQøÅTŒ%iR”DÙóPÄÂö&²>]#û*¥•³¾Ò'!XãÙ?öuçJ(|‚ LAûW»ÿí=îû^ñ0Ô‚”_£ÜB"Ëáóá£gD-@ DxsCÐDb@,S¯­`=
-l^!šæ^½:
-&2*·ð®¯ôbÈQ{É},Τ-çG1Daä‘s¥°BAÖ¸Ç'¦&«]Œß!Ò@z];\ú –e÷(¤éîñú×ËF‰Ä ªé<Œu˜ F\#BøhÏ¥»̲bxÈ›Â]ì½Ø”šá#0’zÿZ ŠFöqJ —ÿÔ~þì©Ôãèh AŽ…8ðf¢Os3íÒ›Á‰œJò!T¶¢ï7Ûñ:â'öˆŸ“¨-úA¢R“çÂ.aŠÎ?ÐA/áf$áBøÂtO*»ôaÊK”–¾üP9+âìhóÓC$N}™p˜G¥Œf:`g+£z}>¥fQTéî0\Ï à§dt”íóÓN³.ü‰â/.œÁH “­,mÓÎäb¾l÷]=¿wª=6Ö–ôøaqp!<Ž6éî3P‚çŠ áTß?N Ê:ÍúÙ•3ÄXO©†V(¥f»ƒì £Lòw÷y÷$#ºEl ×èÛ€'<QŒ…#Ò?Éèiá~¬»XÍI‡ÞP›øAzKrdxZM킱¯0ì‹æx!Æ¿ÓÁÉËpbn|…Õ±‘X^€ÄLWÇðÀto XAÊæX‘
- ô0~ä÷U¹ïÛºiŠ ™1G`\ PØ ÃËekØßö·Ðî÷¥€¬#Ëû¿)X”û§/‹~÷ÿ«ãRPs
-ÃkúÏaGêþö‡Ó€ŒMp.¥)iaÂ4œµ1l˜œ°-~ å³
-óHb
+xÚÝZKsÛȾëWðàª@U"v^À
+ç`~ ¢ø<Îy€[LŠMýB”#—Ó¬^îóEfšœpˆýÕS‰,ž2ÙºÎÕh”á}VWSYfô™z—•)S»bË…´¤QI“¥þÚ¯Ë#T^—ë nÿð ÜJ«ÐéÕÄ¡#Лp14
+r»1¦Ñt“hCd`¹2¶Û+ÓjKSÚa-Á§AVkiLXV¤v›<m6TE?a*I°Õ ²ÿD‚EêèŒuOTâÍ
+‘‘–æÜ0
+»#ðny®a™p4à9\Ž¶Pℤ¨ØxpÚ—è…Ò€¤žREL…Ã5\ tu
+ãn@wñ¯Ìí}¼Â+úôibåömg®_ èvÜ•Lɾ$Û]‘]M>—­î<y*õÒSq¾’Wé”
+ˆ})Ïœ`põaa¯\€‰Ž×Ã+o
+’ª` ¾–­œýkÊ×
+(ª °ÏîŒÁ
+ÅsÌà`ûȸ+ÇÀðþ­ª•VSßS^X²°›.t¡FÇ|Eí¼¡ö}ÐFCCAóÁ·¡™*‘ùTôÓÓ,+u¡3± õf‰qà o¨ŠàSš¯ ð-±‘]b—Êv 8l6~ž€ *Ýú¬c[á,@зÐÈËeqH³zij¢ Ài+ò 'c<ãHxËj»Kš|‘ycœ\åÎ ³d_ä&…nd8Ãõ”ÏÀµö£¸U毦ü).} ÿ;LáuCw,T»®Ëü+yÖ±ʼLsçðçÃâP ϳ„3‡qjùadË‘WŽu#¦‘ý<¬è'~0±Ðe+~~NNE
+Œ©Tgs ‘>ÇØÏ(Œ¦øf®âÃm WÛ,ÖÆ& š|›Í›j^`Êô·E±nÈ:+1>1êB=ËLX”t'wº„¤Ý2u[’Mx.E1ÌGåå&ÛçÓO6´ª(ð"Þæ%åÒŽÚ_FÞ¡ÈjÿÛö"å).(ÀØùÐ6üË x¿v"3}pcJIwK—`sG%OÆ6K‡øÎ@„]^β<ë”Á$ÒûúYi¹ÿÐUäëXŸOÊ) 5VÑÙ+:õ@8ÌH;ßôŒ÷¿õ1ýçÚåµa¸K¦
+o›4Ë ub"Ø­÷ÝÚº¥CgJ›uƹ'8gqËÿïpÛCÄÏ­ãýË—t3NâV†~¤ÀÇ;‹[Å|n51ö¸ûö›‰IÕ"³ÀkÊcÏ°«GÈmÌ.þ3Ù@Œ"žg—ˆ0 M"²Ïz²ˆ™ÚD¤¨U¼ËL„uÙ=šíýãPµF„Ü¿3ÜìÑù³¸Ù=þw?ödˆî„ù! ÁgÄûo•ÏÞ,…†+ˆ@Ðç2G‰0@&&žvAoÀšV1OgjA»ðP·!Ê››û›÷&ïñp3•“{K§‹ÒÜjà†Ü’žz´>a÷2œ}i²ýÙÑ›Xû̵kßÀªÕȨÁYH)Åbg}¥J멶Ž ™¤±1QΗ†Øq.f%HwôDT¤•óë[Bj©+GKç¸Z쎜™ö¯ß^ø0zþLk[ŒaÀ PƒCíÞÛõåœ3Ƽë4Íû›Üæî`·æ`Sb†/Î
+N*²YX%JÑò2讆ù"æ3Õ>£ì“§)CÌ-]ÊVµ‘ˆzq>=N@°Ô¥û±SbÉLz×ÙÑjI½-ŸP±ÈËdì·AÐ'¸Eøö9Í&K²Öïý#ãOΑA ÅVš4I«rÑÿ^6‡6‡‰ß[Ñ*kÃzü°8:ç[Ûdÿ8aûò-ÑT=> Š*I»ÞÜ¥0ØPN)oZ(¡b·‡ˆ#b ì÷Yû ÃÚAV)@­U
+P7®NÜ{–‚CKðœ¸>æG2Gè0‹×Tf_ÀyàÞ’ îVQ¹°Tô=Whv‰r<¥¿•ÁÉÃØ`\ù3b˜»
+5ȪrØž±}'â6=‰Vž(˜r»1Õ /ÔðvƒœzÄz+†Pǧûšª
+Ìè"_—6)Ÿ 9ÊÿnÍ$|Ù®+÷ìŸØžÜ•5ýÙ.©©½=Ð@ ýGû¦
+-÷}WÕu¾ )5ZÆù
+ÃkúcËê0&ÿº2`_B]Ö¥…§Ð°×ø°a|0 [ü€óo"&dêb`Qã_Ã&Ûäs6 ¥ã7vâ_Ž;{žUGéhåYzݯ6%  }Žÿâh6—†Ûn'ž«¬¬$¼µ=ÿçá^§h[³çõ¥æŸúO± |ü#ðÄ?€Ùì›y§—þ߸ûϵ2¢Óq¹Ðþy&tD!÷8Ÿ‘Î(…PLÐþ4Wußendstream
endobj
-2072 0 obj <<
+2085 0 obj <<
/Type /Page
-/Contents 2073 0 R
-/Resources 2071 0 R
+/Contents 2086 0 R
+/Resources 2084 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2032 0 R
+/Parent 2075 0 R
>> endobj
-2074 0 obj <<
-/D [2072 0 R /XYZ 85.0394 794.5015 null]
+2087 0 obj <<
+/D [2085 0 R /XYZ 56.6929 794.5015 null]
>> endobj
674 0 obj <<
-/D [2072 0 R /XYZ 85.0394 306.3415 null]
+/D [2085 0 R /XYZ 56.6929 306.3415 null]
>> endobj
-1819 0 obj <<
-/D [2072 0 R /XYZ 85.0394 275.1221 null]
+1832 0 obj <<
+/D [2085 0 R /XYZ 56.6929 275.1221 null]
>> endobj
-2071 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F14 980 0 R /F41 1238 0 R >>
+2084 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F14 980 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2077 0 obj <<
+2090 0 obj <<
/Length 2797
/Filter /FlateDecode
>>
stream
-xÚÝZÝoÛ8Ï_á{sÐZå‡DJwOmšì¥À&»I8Üî>È6 •¥Ô’“¦ýÍpH™²§»5pEQ¤¦†Ãápø›áðƒüã£DE*ÙHgq”0žŒfË#6ºƒºŸŽ¸ã™x¦IÈõîæè͙ԣ,Ê”P£›Û@V±4壛ùïcÅÑ1H`ãwçï³ã‰HØøúæXÇã·øßÍùõÍùÉõñ$ËR1>ù÷Û_nN¯ˆK ‰âšŸ\^œÿôÛ•pyAä«Ó³Ó«Ó‹“Óã?o>ÞtÉ™Dí?ýþ'Ía¬ŽX$³4=‹x–‰Ñò(Nd”ÄRzJyt}ôk'0¨µMÆY$¤V|ÄãHÆPš-É@h’x³O8c}³µy[4m1kp„ GÖg£‰H#¥3i8£)n¦Äx™U  Q˺m¨¢¾%J³‘néEu[¯–@«+bÈ«9ÕܯŽy:®Š¹qÒó`Vyé¶fu›Ï|%ˆ¡ŠucVŽÖÖDº3­>~×3TÂøpDœGY’;¢va Zf¢
-5Ú:¢|½¿¸¦j§ ­ÂÐ1à-&Ÿ-È—¿œ\¾?ÝKaL? 9,`’d4Ùýÿ#*ãC¢R$‘ŠYú*cñi;¨üumV…ÙÊ ƒƒr¯ÒP†Z[PJ-;PbA‰¿Pâ×'7$ûaW0,Xà
-8$Snê’:L±£¡^~vù¤_îï}2òP˜ÇãLŒŸ÷ƒÃÍÀw”™*
-–>Gm¥;LÂù<+s‡„e¾úH¥?XÂþÿqjZ4ƒ®»BçDïJý-rú±ZøÅ=<¦é¸h‰„G•«¥cF(Ýç+ˆ,ƒKܺÌíîY» ‰tAH±¦§bÑPÕǪ~¬M¤©¡okçÁ@á/ ¾]Xq‚Ž'ñ7/”&x× …Õ6"¾øÏÕÕõé Ñr‡ÞóÎ~àSf*⌿p<Ô¨XÒ9ãu=ûhÜY÷ù›Ë¯^•Ã®•ZîW™zú‡«r¦–q¦»U**Ó>ÖÖÁN!¥ÌчÎGÀö䆇ü÷FΕjÏDèˆ#”‚¹›9¡Ó(N¥„ Si”dľ;aþbN&°K5Ú¼„1ÉùÔF.,ÛSmÆýþ(ÝþËá
-|îwV—¥™Q
-6 º]䮟®6_·‹zU´OCôqa*w©È 9uœ
-os¥»¹EV{s+ƒ›ÛM¥ƒ¤ì]*c®‹ñeåjŠÆËw]û&÷eN4c>»NèÒq(ÖÍ×Ë{k)•º[e—\!áÆDéÊͽ™H îl<}r­(ÿÚ‚>÷×\yìo2qBwqšd‘’™o1«+ä¼[¯º;tH|†íÝ‘&þ*¬Ó(¶¬[S>Ù¹˜R×ƸŠd¢ú~üPäA'ú®äÙ"¯*SR¥uz—È š N¢ Ï@vLàÄ 9k
-i·*hc–67Ã~ìèP­Þ\¤„¬ ™CEw¬µÝt¦y1ϽõZD´ÁÐNu«»®†ž¶„üÏ/—]ºéúÚ?V°2mkùµ`ÜSggAê¸^ÐbWš‡6Ñß½ ÀQØ¥YʈoÞ•D°„º·%Ý-ÿõV=+ŽI_ `ÓIÿ‘
-ÌåÃ0³…Ÿòë×¾øÑüs`h[AîÕ«WÃÃxßõر l2-u–fqXN</žn ™ÞÜ2Ma‹¥¸ñq1×£ÆUºßœ~ÀÕÜR«ßªâ3¬¤O¥“Ü°´ùòþ5íQ`Õ¬»}#¶ÈÈÆ€gÌýGaO±ø!¯Öùꉘùë¡HÉ3ÍÜ‹™³à!FÌ‚.h|÷œÅ½~ɉ…qø¶ÙÎö³™Ø= Í2íHqãM–È뿉Ýé&TÌM3[SãËLëÑàNwnº(Ú5¡TÄþâ­ŠÃ×Ë8:¥W \zsE/sèÅTYóÂ/*Ü ÆBúç@^ÜÒÄÁ7…K®û³Á»mU>äåÚñÑ kcà²+ P ß;:òھ゚ûá“9¿Š¡Yì*Ò ˆÆ¢öO¾TïTppîšžy¶)aý³SÈßÇ8pÍÃDNiR`_ä†h9ü•3 ˜cèÒ* UuKTŸ*E+Ò~ Üvší FKÐs¹zoÚk#…vk ¹.СH£ÄGhç{Hz ²¶£ @"u0wsˆ=Å̱
-JÜzezmÀ?«žÌ”ÜÆ"j`ô¨Ò¿¶²PóâTI.4´òBBO#:øs²¿ùæfáÆ<<}nÅ:Áp啲aÇ;ªû·š»ºÿ‡Û_þendstream
+xÚÝZÝsÛ6÷_¡{“§ƒ ïžòa÷œ™Ú­íÎÜ\ÛJ‚-N(R);Î_»X€%ZNÍ\&“q-‹Åâ·‹Å1øÇGi1™Å#ÅQÂx2š-OØèê~<áŽgâ™&!×ÛÛ“×ç2eQ¦„ÝÞ²Òˆ¥)Ýοû÷›ŸoÏ®O'"acNÅÆo/.ß%£Ï»«Ëó‹½~sªãñíÅÕ%‘¯ÏÎÏ®Ï.ßN²,Ð>$¸¶7·Øȵ¼¹½xwsúÇ퇓³Ûn
+Ne¬jè;««æ‹4p`> Ã¨ÓGG™À¢>dRàéYg¨«®ƒ¼5÷õºøì¥ j¯vW—eýãt²Í å4Ñ€ÃfI:RZF©ú2wå‘fªï­«‘WÝIFÙÁpAíˆrEߢ/jâ†3Q1¸kœém 8‘”1)•DqÆc;Õ¬^v»6nLÓ6»ö’zà<…=|ÎÈ´–±ˆDšöµ&ôèl\m–S RRœÑÖ ýà×û˪&dºñÙ*Œ®bòÙ‚Ìqõó»«÷g{èI¤Ž„JÔ­P‘L«Ñdñÿ˜ŒˆI‘D*fé ˜ŒyÄS¤íaò—Yæ
+©¥Dð)þÚO)&
+>&CûïfG3ø7üTF*UeD¾Å3À‹bÎ’ÃÀ+FZøÓ[È4]ôyÿÖA\7æÀ DØÉש½EþaÅ=ò{ŠSŽ%Û;S”cÍ ÁÒVT™Øä¿”<cž´ EoÈŸÀ«lj­³ÎÒT†g‰uw†UèH·Î„™5è
+6 º]䮟®6ß´‹z]´OCáóqa*wÈ 9uœ
+ ¿3&JWnVfV ¸³ñôɵ¢ìkúöýš+ýí@&Nè>N“,R2ó-fu…œ÷›uw_iÏ
+ËaØWÑ•hâ¯mÁ:òW_˺5å1‘‹)u ¡Ž«HB0ïùñC‘Yœè»g‹¼ªLI•Öé]7h‚6<úØ33ä¬5µ*hc–63Ã~ìèP­Þ\¤„¬ ™CE÷¬µÝt&y1ϽëZD´ÁÐNuëû®‡ž±„üÏ/—]ºéªÚ?c°2íjÃã8±Êzêì-H× ZìK³ñЦùû³78
+¦LP"¾}CÁêÞ‘t7ú7;ô¼8¦|1€M'ýä§.V-ý3ƒÝ°ŒžJ¥©¹/üé–ÃÌB>%dׯ|ñ£ùçÀÐv‚Ü?ü0<Œ÷] Â&ÓRgigåÄóâéšéí5!Ó¶XŠÛCq=j\¥ûæôCTsw*H­~­ŠO°’>•Nr[À:ÐæËÕ+Ú¡À«Ùt»Fl‘;‘Ϙû…=4Ä⇼Úäë'b毆"%Ï4s¯c΃G1 ^³ ñÝÓ÷Ò%'ZÄá·ÍvvŸÈÄîÈ)¨ný'0Þf)¼þ›ØjBÅÜ4³u15þaÌ´~0 îlïr‹¢]zàÑAEì/Þ¤8|½Œ£3z¤Àu 7Wô
+‡8@•5/|Qá5Ò¿n
endobj
-2076 0 obj <<
+2089 0 obj <<
/Type /Page
-/Contents 2077 0 R
-/Resources 2075 0 R
+/Contents 2090 0 R
+/Resources 2088 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2083 0 R
-/Annots [ 2082 0 R ]
+/Parent 2075 0 R
+/Annots [ 2095 0 R ]
>> endobj
-2082 0 obj <<
+2095 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [55.6967 269.7901 116.8967 281.1822]
+/Rect [84.0431 269.7901 145.2431 281.1822]
/Subtype /Link
/A << /S /GoTo /D (statschannels) >>
>> endobj
-2078 0 obj <<
-/D [2076 0 R /XYZ 56.6929 794.5015 null]
+2091 0 obj <<
+/D [2089 0 R /XYZ 85.0394 794.5015 null]
>> endobj
678 0 obj <<
-/D [2076 0 R /XYZ 56.6929 769.5949 null]
+/D [2089 0 R /XYZ 85.0394 769.5949 null]
>> endobj
-2079 0 obj <<
-/D [2076 0 R /XYZ 56.6929 748.5408 null]
+2092 0 obj <<
+/D [2089 0 R /XYZ 85.0394 748.5408 null]
>> endobj
-2080 0 obj <<
-/D [2076 0 R /XYZ 56.6929 686.2137 null]
+2093 0 obj <<
+/D [2089 0 R /XYZ 85.0394 686.2137 null]
>> endobj
-2081 0 obj <<
-/D [2076 0 R /XYZ 56.6929 674.2585 null]
+2094 0 obj <<
+/D [2089 0 R /XYZ 85.0394 674.2585 null]
>> endobj
682 0 obj <<
-/D [2076 0 R /XYZ 56.6929 255.5751 null]
+/D [2089 0 R /XYZ 85.0394 255.5751 null]
>> endobj
-1683 0 obj <<
-/D [2076 0 R /XYZ 56.6929 232.5802 null]
+1696 0 obj <<
+/D [2089 0 R /XYZ 85.0394 232.5802 null]
>> endobj
-2075 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F48 1258 0 R >>
+2088 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F49 1258 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2086 0 obj <<
-/Length 2914
+2098 0 obj <<
+/Length 2916
/Filter /FlateDecode
>>
stream
-xÚÍ[Ksã6¾ûWèHU°xÄÞœ±=q*ñÌÈšlj39Ð"=fJ"‘²ãýõÛ@ƒ%S¦e+S*5€FãC£
-#ÚH¢(Sƒéü„¾A݇æÛŒêF£v«&'ÿºz`ˆ y8˜Ü¶xE„FL’߃÷?ž~šœ‡#®h’áH…4øáòê )?ï?^]\~ø2>jL.?^!y|~q>>¿z>qè/[|ßë‰íä{^O.ß_ÿ˜ütr>i&О$£ÂJÿ×ÉïÐAsýé„a"5x€”0cø`~"• J
-QSf'×'Ÿ†­Z×µ 4%"¢"®;P㬠5eH(¸p¨}å\ûÙUq••U6-ñ÷Ùj¾ÀÒºÍWª¨Ñp7ÒÀfpÃ0FŒRÜŽC#¡cT»,”l8b”>ã}±Ê«tYz6¼%-pá’ɤã2¹K‡#!xp[̆,˜Yþ )U|3KK[fA¹šÏãeö?߸lg«§õxØñ.®Žjbi ‹åEAqŸ%iiA©à¢Xb“4žÞa+lô€äâ‰U-)ÊõÎÎÍÎB]Å6Œ³ô¶š¥ƒYñf«yŽ5Y‰_ß”ñÍ/½Ïâ* ¤—óÀÄ5Îã¹gì¤a¬ž#PüÜ­öÂŒ¤aÓÒ7G&¥ Çñ5wÅC-R^óL7'ÅݤÊÅ5Ðü¶XÎV@?[)žNÓ²L¬†i`!öÕ?N&Ÿ²Á j¦wqž§3bqPl³eöíΣçZ9Íp
-"C¾éÄ^Õ©–¡…ÕÎñ±V¾X÷Ød5Âù€;„ )×A…iái
-CqõÚÛÖPî–Ñ/YM\òà ŠÛR[@*»BR„ƒöÐo›‹†À´–˜gƒŒ',ë;à†À„XwôÐÀ£$‰B9|Æé_«´¬î%8-d0þÜáÉA‡ *Àƒº>—Ÿ°¹ôVÆq(O™¦°°&bÁ˜GZEÞVØvha,·K,ç¸
-†NEaÏbQM¨ô8Àb'yIû—hÜ,Š͇P:?»º¶uqz ÑzÅv"Ú’öP¶êЦÂWÀ@Èç•RS£ôCœXL~2ˆaÁ%¾ÙU^®‹bYa(‹Pc \m‰qä‹ánOåháÖ
-E“!œ®ª»ÏËÇqú'ä!‘TÁøË :Û«Xf6¼Oלoù¬¸±ût­¹6,ËÒ ØÿL§Õ³°·¦t´ZÌ Ñš÷…0
-UÇÓt©Ð_FkD_fKÒ£E؈é¾(˜H*0Jøívé° Ädã/¿]ŒûÁüo‘{«eœ—·õéÆ.ûÐ mKìc…V@$…=È
-cˆ”¸[”¾,’¸JQQC.
-øìaA–(çQ{wHE µˆÏc© y´VÎæ;\ç=
-/âíwQ_Þ«r㬰Ül×z±²[åÛêô6ýüçRZHý Y¥=Ö—kC"ÔoÓÓ…RŸŸ¦PµÆã¿B}šî¶µ}'¾-ÙÕ8óPBVªzŒ3µ}DÕ
-[>N!Q]Ƴ}Œ¹”[P[Š3æMgê(v\Q[A)ŸXÁ.‹^ø¤ºÛ&BîAXŠ".wOœ1ØïÐ7ü¦°µ‡ºÿ6eÝ˺Ö=vh •DiÓg
-'T‡¢Ùª/—eZí³7¹ÞÞ›@Éü㘵ï]7k"0 yçkß²ø2ýǤKWP±˜yªXŽhUÉ};U  Ç=ŽÒç;§ K,µbÛªd9[±ßMU²ûØHøÄkÄ@#k½F¼Z×Zëø6ÅøçÜ3ÒÙã8£[¸>[»ñë…=–?½ü ˆ(x‡‹8›Ì9ØA€= bŸÑ^þ¼èö$ŽÕÿ²ˆ’°ï̈EÌ¡j¼ÀÅÇñ/° -¡xϗ˃Áëy?ƒêZâcõ­L…2ž%¦9”ªÆRþvöñ—ÓË«¡í°Âï}Ü,Ûn–y7 55o‚?½Ke¢#±`ÎòíH–:ì Ę·6f0)æq–w.#"yÄ¿›Km/±ºTÆ)ä ¢ÏÌtÂP¶ÂÜ=Œ{ûjmÇÉç=UÅg¹NâU‰ú"êwÚ"(ýƒKG,ð»H—ö-t[×jA:ÔÅ©ž0ö2Z&Ž™¤È Èöožx>6÷D éV ¨ë„Þ¶{ªµÈyÇ#õ>­]¶ç±­¶Š0Jå÷SÛ–JÊ;+{릢=XÖ=ºÕ6d„1Ý2Ɖâ²qg+÷ØÞÄ.T0Â>ZËCӜ̈́ÍkxÓhª-ÇU•ÎèSl›¿k]õ}nV’¬ì|F?-|†‡O¡{Þo¿îm¶{;mÙc£! ñ†ž¶ä„³…Ò½`¶¥ËOžQ’xÕíþ§
-û"Ë=æ–Í¡7Á噣áÿFøêêq‘bml7’­Îâ²ô´YýüýënR|ò-j…-ºgîþ¹Á>`7Í”îÚqñußî=f+ Cí2iÖ¿c“ÁvÔMËf“YÞ°y0¶¯à¤›ÒtëµÔúmÛDÂÌ…ÀF$a$E×<ÑAïYÕKÿ¿jýgRµ_¸md"øƒõ´—x¡¾1¦žâÿ«n×’þÿ›ãvendstream
+xÚÍ[ÝsÛ6÷_¡Gj&Âá“ îÍíÔÖId¥×¹¦´HÇìH¤JRv}ý-° EÉ’iÙjFã\‹Å‹ý
+Šû,I+«JE‰UÒxz‡µ°Ò’‹[$Ö°(Ú;;<;  Õë0ÌÒÛz^TV fÅ›-ç9~É*|úª,ˆon\é}×)Œ4Azõ8¿X\å<ž{ÆNÆš1ÅÝ*3ŒHfa­|udRùž°ÿå®xhDÊžéú ¸Tµ6¿ªßåh´ã°Ââé4­ª4ÁÏ0 ,Äþó“É'¤¬q‚/Ó»8ÏÓ±¸F¨ ¶Z™}»óè¹ZN9€öõ[vŸzI†–³9-³Åh›ø^NÍv\sßL³.tï,Ew™UûÑN”­Ϫ)2÷1ß`µ64xÿJ)Ÿ¥XÉ.°›eíº;M3_7)¦Ëyš×^†EQUÙÍì?>dõ6¨f—mj7/’Ìv8õ“"”€%Ubá&­í] Nâ›l–Õv±ø!3Ái’d¶q<ÚyQ»åÅyüˆDyâ³³œ¤d¾{-¡òÛn8 þs—ú
+ñ¶¹šgIâPãº]4¶œþ ØVX†ñ<¤©ûZü+_¿~(º +‹&¬Ö¬Fj£6ب©Y""Õ¢Èg{Œjá^péÙ’SÛQÓÜY—-£ˆÐ®Tâ²[|Æ‹Å,›Z+BZS»f#…
+Uä§-Óª¾—àV´Áøó—zቑÐmsù «Kok‡Ê1ð”i
++1{`"\™ù÷p¤Uä-†­‡vÆòp+±ÂrŽS°iû ƒòg®Û#Ù=] Þ†íætÉCNSD2¡{¦KP‹„Z›®p¿é
+¿ÓtñWNWˆCMW£?4? žŠÂžé¢šPé‘€é:OòŠöOÒ¸ › t~vumc ê‚ö¦ÍœíÄ´#í¡,ÖáM:„²€‚Ïc*"Ô48ý'•_‡ âYp¯Æv™WËÅ¢(k kl,Û­0¦|1àÝ¡1à ‘ï<‚èDÈÖEL®/?¼g×z$;2ÉCšj¢Œèq¶RC`£j
+ÕÄÓv©Ø_VL_gGÒ#Æڈ龈ØH*0bøí¶th†
+"´ñ—ß.Æýpþ·È=’uçÕm³ï±ËJô‚ÛûxÁÙFa¶Â"%„ò§/‹$®STÖ €(ýðž=æñ<›úÀ×ñx¾^ò#)²††=!…ˆ4‘F4!…Ý)´;Ž` Dp}šW/1ØÈCX¥yý t¡Ž:m+°žˆ@hE ¨EaâÒ²r™Oc›Wõ‡CcU.
+šÜÓŽ´GŒ)ĮƄªÓP ÖbjóRº·>»‰Ðƒ&ÊyäžTBí9ãóh*FB­ô…ÙÂ,WÙA„áŽBÚ!¡î`øÒ,v†OÓØ,;R
+KÈd"N÷±M‹]Xò(‚äHõ-n®‰f9„×Kw²Úæç&À„p ±Ë™³˜’ú^øã£B¶·Ë™'çÕC{€l÷v'¸· -çiŒ.îÉ©*ÖŠÕ†®hO÷2@œWø-ÆÇÕÇóñøã_º†Üsðj
+ìísÑòËjm±Z¯×¹®²[é»êô6 ý'Ó\H!¥=6˜kC"¿ :oSÖ…UŸŸ&UÎãÖ?l}šwõ}'ÂÙ×DóPB¦ªzL4µ½s5_±yÄ%¬šë«øˆ·» ¯…¾3¨ã=Oå’Bâ%{²®1QØZôq
+ÉkÏö1éRn€m)Τ·_<SGY³æʈÆJùÄn³ë…O´·[FÈ…"QQÄr÷`À)ƒ}Åï`;³q¨SBa“ؽllÓb§Î€¸J›>ƒ(8¡:írý»,«´Þg}r½¹>’ùË4+¼ªÖÆb@òNØÞ}ñ7j’¸ŽÉ6mAÕbæ©j9¢U&÷ܪL
+ÇÜ9»3k7tÇÉç=•Åg½N âe…#šûÝ"¨üEMG,ð¹HK{‡º«m [Æ)Ÿ0öÈj&Ž™¤È Èöæožx^R÷D éFH¨›ßÖ{ª·ÈyÇåö>½-»ãØT\“@å÷SÜŽJÊK+{*§¢=X6-v).Ó=!!cœ(.[×q¶t7ˆí9àBc 죷<4ínMØÞ£7­®Úr\×é|žÅÖ)ð¹ÒVßæfYc!ɪ­ð§…Åp;*t? °Ow«Ûݺ¶ov#iÈ‚G|à Ԗœp¶P¹»Ï¶tùÉ3J¯¼ÛŽaïo¹kà²Ý¦â&¸<s4üU…ÿ\?.RüÛ¥d¿NgqUyÚ¬¹8ÿˆßnR¼,.•-¶Üý,Â^}7í–”Þ¶æ4âëžÛW®0 µŸÈ¤ÿ-Ë ¤Ÿ¤^–7,Œ†í9û¤5iºø:jý¶…"¥]
endobj
-2085 0 obj <<
+2097 0 obj <<
/Type /Page
-/Contents 2086 0 R
-/Resources 2084 0 R
+/Contents 2098 0 R
+/Resources 2096 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2083 0 R
+/Parent 2075 0 R
>> endobj
-2087 0 obj <<
-/D [2085 0 R /XYZ 85.0394 794.5015 null]
+2099 0 obj <<
+/D [2097 0 R /XYZ 56.6929 794.5015 null]
>> endobj
686 0 obj <<
-/D [2085 0 R /XYZ 85.0394 741.8766 null]
+/D [2097 0 R /XYZ 56.6929 741.8766 null]
>> endobj
-2088 0 obj <<
-/D [2085 0 R /XYZ 85.0394 717.2979 null]
+2100 0 obj <<
+/D [2097 0 R /XYZ 56.6929 717.2979 null]
>> endobj
690 0 obj <<
-/D [2085 0 R /XYZ 85.0394 609.8545 null]
+/D [2097 0 R /XYZ 56.6929 609.8545 null]
>> endobj
-2089 0 obj <<
-/D [2085 0 R /XYZ 85.0394 587.5432 null]
+2101 0 obj <<
+/D [2097 0 R /XYZ 56.6929 587.5432 null]
>> endobj
-2090 0 obj <<
-/D [2085 0 R /XYZ 85.0394 587.5432 null]
+2102 0 obj <<
+/D [2097 0 R /XYZ 56.6929 587.5432 null]
>> endobj
-2091 0 obj <<
-/D [2085 0 R /XYZ 85.0394 575.5881 null]
+2103 0 obj <<
+/D [2097 0 R /XYZ 56.6929 575.5881 null]
>> endobj
-2084 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F39 1178 0 R >>
+2096 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F40 1178 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2094 0 obj <<
-/Length 2508
+2106 0 obj <<
+/Length 2511
/Filter /FlateDecode
>>
stream
-xÚÍ›Ysã6€ßý+ôHW…XÜǾy|dªµgd¥*5Ih‰3‘H™¤ìñþúm$”lO…5Uâh|ht `øGB"i¨(ÑÀD Ƴ<øï~>!u™°)ú¥>NþuÅÔÀ #©Œ¼¶4ÂZ“Áhò{ G§Ð>]ß\˜Ó
-ÜNÎìŸÑõÝèúüî44FÓàü?gŸG—CWJz]N]ýüöæêúç_‡u·7.{xyu9¼¼9¿<ýsôËÉ娀?H‚™•þéä÷?ñ`cýå#f´¼ÀFÄ:˜pÁàŒ59Ó“»“/mƒÞÛªê6hœk`dBB)"œîîÖu¡Û:i’œ°µ^CIb Z”Š"&Ìr(ñæAj¥Q% ’Œ²j¾ä¯y6ŸÇKjP¯Ñd5º±e‡ñx‘És|2…ƒ§Eœ'qá²Ü&Hðò˜Œ]^ùX—,âü9Î]z’ãÌ>@§U(µC/!!ÈA«îâï㸨»c4H³ûªF‚ìÁåÅß“¢LÒoîɵ¹”
-.e„÷NFHXÁ¶tXD3¨&¨ RHýI#‚òu^gFéÄ%ÆÓ¨(Öò^깧bq_ÄÐwZN_W{rÚ?©
-WØA™ £ÇĶ „šß
-ŸM4#·i;rûëµ`3–#Ý2®É"¶+efÝø« 'sTd©{ŸO£$µmÚ×/Iù¸¬áôÃ×("bVÓñ4áܱ­H¯[Ô*lë­ˆiYnöA ҔȺ‹Yô=<´‚9‚åMëªÙ¼L²Ør£‚?°ÀEÛípØÜI\ŒódVaZ$RëÕ©³
-è£ýÆÇ ´Í:Î*൑$Zzô>E“ÏyœÇOïAèìå_ñ¸uîu´×Ñ’öüظ©¤HZ‹°<ñìžox=žMV²ÃáƒIEÒžý«=Ñç¯Ãø%Oʸ8då\RM4›&ã×õ½”éZ܃ӓ´Ç<¥AĆ­öóT)¬ÓZ“zx(vÅůDmÆ}M7o½×4™%å>®NbÕs®B!"e‡ûç#%i¹ÞM“7q-óS,ÒqT¾¬'òG]Þ/t^X@.éê}Å›*5b€V#ÅrHÕ^å‡7ŠTi؉1ÒS…°0;öÍ] ki8¡í%Aô4$ãàkk)þÁi<N£t\gÜ•QioÆõ¼71‰µIí@þ ˜â0n£Aȸ†q*vÃíµAð.ŽvP!“°íåÜ»‡3+±S¡LJpHÄ­Ž»×Ù}6= %74¸pñï*ĽFÎj1'ÆÖ^öñ>¹-!†µþ1(†ÁîÒ¶…ààL„ÛÕÞdeòðz»(ŸùCa`9 ÞD£®?C¡JÕR¨eCeÉ(â´D»éybõ™ƒ½*㤃§à2°Z£'¡'ßDÏëcé‘¥G%ìôM<ÍI!=x×é»4¯¾þŒ“ç-g‚%Ã¥p}V@;MÊtC¢%˜¯2|þÈГ®Ï1…íº–±D´ ;ˆÛ#èk S8¿WWï»9ºcÕŽž€=^ÏÔÀv’0±Ÿ#> ãÚ­ÞžëH ŠK´ß,tD_²+¢Ý*¡;œ1ÕÔ^ýà1kùM
-ãr…Þ1úw<½¥X}Ö=ØåiC»èq8¬)ã\ñõtïúhzž\}Æû<ÃT‡¦Œ##ZÁwŒòÏ“«ÏK¶xFÓ.ßKíg†4»w‹±ýv°“ß׋Ü]W’…m1žì%ê‰Úg…Ä
-aªºœ1ÁHf¢;®*ÞŠsÇÍÅ’¥'äG±<<hö#">DÄeG…Í(Lœ’ÈPLö‡Ígàˆý¨«£føȦÏÍL(k®„rD%þ‡BøG„í'H ¶=HÖ„í:І˜Í ™ý2L×4ë|–{_ð¬û}÷7Èzƒ˜À÷™3p Òí6¿ØÏ
-űTÁpxŒþmùjfo$¨…é Ú_š’Ûa:î"á«úÞ¥¥)£)ßIÓô½4í¨`;m-îvÝÉâA'êCÿãÏò¿BqGpÿÃkŸUAe9`°ÉbîËyBäØ{QN±.æÉþ®¿òendstream
+xÚÍ›Ysã6€ßý+ôHW…XÜǾÍagªµgd§*5IhŠ3‘H IÙãýõÛ H:)Ùš
+ËAn A“†?2ÒaføHŽ&bÏÎðè+¼ûùŒ4e¶Pè—zwö¯K¦GIåèîÁkK#¬5ÝM~>üçݧ»‹ñyH$:…ÄÁû«ë.ǸŸ7×—W?ÿ:~w®xpwusí²Ç—ã‹ëç¡1šB}îµÐÔ½½³•šš·wWnÏÿ¼ûåìân9
+¶¥Ã2šA5AeAê'HT/ó&3Ê&.O£²\Ë{nFäžÊÅ}™@ßY5}YíÉéþ¤.\cµ%Ü=¦¶M ÔþÖøl¢¹MÛ‘Û_¯›Ñt˸&‹Ä.T¹ýuã¯3œÌQ™gîEò}>Ò̶i_?§ÕcWÃ釯QD2Ä$kÔ#ž¦0à2œ;¡•èe‹V…mµ!-ÉÍ(AšÙô0‹¾‡‡öB0G†Ö«ÇVÍçUšg@–ü.“Ä>hÃæN’2.ÒyX#„I‘H »ªü‰³
+–åC¿ÂæÒÝlw/p_$NÀ&`£WDÚ´Im©-‚øT7[³‚
+Fלxp€£Ý×ô³üø'¾4väXb“ííåéÉ:XÝ$NûL&ÅFc<ž‡™Ì-00’žlƒåg–Z‘~X#¡˜òõñµÊX¨|N0:dxÜ@ˬçtžI¢¥Çî}4ùT$Eòí-
+¿“· n1¬õa!0lûw©[ÇBpp%Âíf¯ó*}x¹YTO|‹©0pL¼=]}‚Bµ²ePËÆZ£Q&Y…vãóä2>»TÆI>NÁg`µ†O‚O¾
+Ÿ'×iñ‘“â£6ù¦ƒö¤½«ìMº×\u&éÓ–ó@±“nÈ*H`§I™îƒH4¢óUˆoÑÀ!zâ ™"¦°_ײ"øiÚÅí1ó5ˆœÝë‹öÝ Ý±jHOÂ/i
+[PE˜èIøq®7ïŽõ&PÅ%–Ÿ(ôE_´«"U°%ºÏ%SMíe¯ñ ³œ_EÐmÈaç¦aëÖGPA'Ú8¯üî·Ëñ8ùv”Ú:Áø}kØlÈkv{š÷y*4âŒË|Çhàñø:¹†¬}°ÙÓ†öâãpnSÆ9ä«WhßÕÑø<Á†Ì¶{†©>WLG†´Âïõ;žŸ'ØW/ìôŒ¦½˜Úï iïto±ý`°à—;Ü]÷‘¥m1™ìEêÉ:d•Ä
+aªz]2ÁHfZ¤;.,^ËsÇýEÓ“òT0¡ýˆø‘±ú¿ã‚hDId(&ûƒhõ¼a?†ÆšÚ8)óéS;‡†Í\ð•PŽ¨ÄÿPØŸ>˜LêÛ.kƒÉ„p.ÄlFËì÷`º!Ùä3°Ûû¢hMTXŽü¾O–?€†ª÷ÜgÌÀyH·Ùül?ý³~\)ƒÛËçÉçþ {çùûwì@O¸¡ÔÚ~cöó3Є&ÂÃ'Æ'ÆW‹&† ,‡ªûái(K%_¹»±ÊıTÁx|ŒîmùVfo h‰Òt¨,%·ŸÀôÜEJ°jn^–,åq,åYz‚¾•¥FÃ&Ú:X,Ü=ìºcÅ£^ЇþƒO÷/O\ÁÙÛÿÌÚ'Æ0GŒÁÞ” dÛ²Ø1›<4šª¶˜'ûÿc_ˆendstream
endobj
-2093 0 obj <<
+2105 0 obj <<
/Type /Page
-/Contents 2094 0 R
-/Resources 2092 0 R
+/Contents 2106 0 R
+/Resources 2104 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2083 0 R
-/Annots [ 2096 0 R ]
+/Parent 2075 0 R
+/Annots [ 2108 0 R ]
>> endobj
-2096 0 obj <<
+2108 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [305.1296 684.0956 384.9596 696.1552]
+/Rect [333.4761 684.0956 413.3061 696.1552]
/Subtype /Link
/A << /S /GoTo /D (clients-per-query) >>
>> endobj
-2095 0 obj <<
-/D [2093 0 R /XYZ 56.6929 794.5015 null]
+2107 0 obj <<
+/D [2105 0 R /XYZ 85.0394 794.5015 null]
>> endobj
694 0 obj <<
-/D [2093 0 R /XYZ 56.6929 411.8739 null]
+/D [2105 0 R /XYZ 85.0394 411.8739 null]
>> endobj
-2097 0 obj <<
-/D [2093 0 R /XYZ 56.6929 386.7533 null]
+2109 0 obj <<
+/D [2105 0 R /XYZ 85.0394 386.7533 null]
>> endobj
-2098 0 obj <<
-/D [2093 0 R /XYZ 56.6929 386.7533 null]
+2110 0 obj <<
+/D [2105 0 R /XYZ 85.0394 386.7533 null]
>> endobj
-2099 0 obj <<
-/D [2093 0 R /XYZ 56.6929 374.7982 null]
+2111 0 obj <<
+/D [2105 0 R /XYZ 85.0394 374.7982 null]
>> endobj
698 0 obj <<
-/D [2093 0 R /XYZ 56.6929 161.7348 null]
+/D [2105 0 R /XYZ 85.0394 161.7348 null]
>> endobj
-2100 0 obj <<
-/D [2093 0 R /XYZ 56.6929 136.6141 null]
+2112 0 obj <<
+/D [2105 0 R /XYZ 85.0394 136.6141 null]
>> endobj
-2101 0 obj <<
-/D [2093 0 R /XYZ 56.6929 136.6141 null]
+2113 0 obj <<
+/D [2105 0 R /XYZ 85.0394 136.6141 null]
>> endobj
-2102 0 obj <<
-/D [2093 0 R /XYZ 56.6929 124.659 null]
+2114 0 obj <<
+/D [2105 0 R /XYZ 85.0394 124.659 null]
>> endobj
-2092 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F39 1178 0 R >>
+2104 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F40 1178 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2106 0 obj <<
-/Length 3540
+2118 0 obj <<
+/Length 3536
/Filter /FlateDecode
>>
stream
-xÚÍ\ëoã6ÿž¿ÂßNÁ¹|?p‡¶yôR´I7q‹;´ý ØJ#¬-y-{ÓýïoF¤,Ú‘-§qAZ¢ÈáÌo†ó ™e
-ÿ±U„
-'ÆI¢(Sƒñì„~‡oßž°ÐgØtƽ¾¼»fàˆÓ\F-K¨µl0šü’œýçý£‹ÛÓ!W4Ñät¨4M¾¹º>÷-ÎÿœÝ\_^}ûÓíûS#“ÑÕ͵o¾½¸¼¸½¸>»8:g9Œ—…0ön„ƒÂÈ»ÑÕÙÝéo£ïN.Fkb!Èý§“_~£ƒ ÈúÝ %ÂY5x‚J˜s|0;‘J%…hZ¦'w'Ö£¯õÐ.Ф´€7ƒ¡°D*ewO맠0mxdŒ8¥¶g:
-¸‚”&T*³Ög‘€¤4åˆ\ÔZ¸þïùÍï¯
-# Á’t2 ƒ*¤!T’“w§,Á¥…–¡çíºm›Ú¼\,ýӤ̶æçõüE‰´N±áñé1 Oiå²?æÙxéEV6A“ób÷0 ÒXUáé¾þf%ü{¹èš¼¦îh2É~¥”Ù_YrÿÅ7£¨^c±¶ƒ%oYPX=ùsµrF ƒdÃw*ç˼,ˆ_#Ð=æ•Ÿk–†ÉjŽá7-ü‡¼˜äãtX³=d”G©ÜÔõ ­|ð¿©ÿ§ãxœ—yUyñ{è°\f³ùr÷bŒ-ýuKç¯óhZÀ‚s²g1JìL½G2
-‹U1NÁˆú—áèÔáR³I3"Š ír<8LD ¿Õ(¡9”2ÂÚP¹%Œ+ïá¾Og`d†b¸­Ÿ{aõ#·I6Í~OÑ€_dÄåq‘dÇC’q¢¬è)G4Ó„êË‘Ûl‰!³†òŇ~(?´QÖC·\äQγÅC¹˜í2bòÍš$8=0¸žÌESI8 ±Fåý}·Oî@p YŠcšu>Y+]–MJS.×ZKŸ)N÷ q~,t¡Z°Z½„d3¢]ÈS î©Q”ã„+çZpïÊñÇÃRÃË(ùì(†4ÿ[γ‘h›.RÌƳ%dŠ
-§¤qÛ|XX9ÔrÛˆ½¨F¿YT!ÃqÖ°T©%Ê@F·e¶£ªˆªçøMo‹I”EÏŽŽ„ͬ/"®‹ÈtúÞ×Ðý ž_ßÝ]œyÈ>§Ó|…ÿPˆïC1âðÍ‚h¡F÷zð¦Dk!7P¼ùø:
-ýÇ´Ù
-×ûlù”eE—ˇ&­Ù®$œK°.<¹2ûJƒÁ ‡1É.p „LTkÓ 9D¿ŸüÚŸÛôí¬žŠUÇÔtŠñtUA¶‚‡ÀC»I—BX””íö8ŠOC98
-¦äú±ašVËp4¬æflج¨O”„IõX®¦|–ž´ùE>©tÎB‡´êÄ–^wºð…är¶
-Ê^ÖÖ‡1ɧB1\Ëvæ]q$˜
-À6ó<‹ú•ç:õÜƢ₠B^×7ôà{:úíb®G· ú|Nói#5ø ¨t „Çôõ&¸§H£©ÃZÿg¸•ûÇ8›G·„¢¹(^lnläa?mù¸u’žÇÇìÙôùVƒ°"Ø !™;(Ü ¤F¼,tj¡G<ï\ 5dV£´[¸”Ô#„á! ÷ev_N1ßt<9pÜNú Ô Ñ-žãu|#B‚‚Ù‡mvùúã
-͉R-›+r„±„:e÷/LógæÎå}3Ϻö x4Ç]óG­7c‘7 !Uõ°šN×[ƒ’ŠæŽ©]_?4$üÅ[xHçói>ìºN3{¬ÑM¨î+±
-Õœâ£!•k$ò>f§Uµêzl•8ªQ HdtÙo‡U)HÀ¬R_ÛªvœPlZÖæE-A]Ø6¢í(llogÁÁº°ÓÚº°S(ÔÖ…_ߪuEz;–yíd*2/®‰¶ÑÈæ© 7Á%ó:›b‘{¸×»“8d²G)‘´Ç
-$ELe2eÑIðÀ¿¦J¾É‹ÉŸXññÜçáÔ©Íʪ=
-‹8®ÂŽ»Š(‡ÚÀò>…A‰-´üª¡ÿ¬,ŠWªl $²ñòZ‹àxÃZƒ”ÔFWɺuæ$‘Ô鯭²^u¥¬+—¬Âb0¯›’¥#mÛ¥°‰c©ëh—É[uA†ã”é‹T–CwùUó ÷c¬!ÿÄ"SBÖ‹L ‘¤5‘zas^ŒËÙúm¼V¶_ÖWËí{a_ǧæLÖÉÓ)K|vïM»ÏΙðùS“*Á‡:U‚öîT‰)MœÓ²ÝŸêÞ’áZ4ðtoº@ìª-úr.¼ÂO¸’[~]Ãï6èÈV^y…f7\£rDqÙùOÐA¯w:ô:hÿéiˆ°QHÙ@EPI„Àã50UáÿƇ1ó|oÛe¹iºE¼ÿºl"Iendstream
+xÚÍ\ëoã6ÿž¿ÂßNÁ¹|?p‡¶yôR´I7q‹;´ý ØJ#¬-y-{ÓýïoF¤,Ú‘-§qÁk‰"‡3¿΃ä.PøÃJí¸'‰¢L Ƴ:ø¾}{ÂBŸaÓi÷úftòîRØ#Ns==D´,¡Ö²ÁhòK¢‰$§@&ß\]Ÿ»Ó!W4¹™¼Ç¿FWw£«³»Ó¡s–'gÿyÿãèâÖ÷ÒÑ@߆ŸÝ\_^}ûÓm psí›o/./n/®Ï.N}wr1Z  ɨ@î?üòL@ÖïN(ΪÁ¼PÂœãƒÙ‰T‚()DÓ2=¹;ù°&}­‡v&¥¬
+1ݧU¶øâ€ÆÊcYí±eðX(‚Ï7æEÁ¦± E LJ×c–Ú9b•–56?äÕ,]ŽÁ(2Éíùj~Ûh;Š ±š—E•¡mšmÛ
+ÓÑcæ¿6ü¸«ó<'ð·
+§‡y‚•y^•^Ec¤!X’N&aP…4„JÒbòî”%¸¼°Ãò1ôÜ¢]·mS›—‹¥š”ÙÖü¼ž¿(±ƒÖI#6<>=¦¡ñ)­üCöÇ</½ÈÊ&ht^lø&A«*<Ý×ßL¢„/]“×ÔM&Ù¯”ò"›à+Kî¿øfÕk,Ö¶q°ì-
+«'®V–à íðÊù2/ âW‰4Fyå皥a²šcøM ÿ!/&ù8Öl¥ÄQ*7u‡DýR+üoêÆé¸çe^•E^ü:,—Ùl¾Ü½cKÝâù+½šS;Ù³%…œz¯6:e«bœ‚õ/ÄÑ©ÃÅf“fDÚyp°ˆ~»±Bs(m„µ=°rxàÊ{¹ïÓš¡vëç^`ýDn’M³ßS4â—Aqy\,Ù1±dœ(+zÊÍ4a†úòä6[bè¬Á¼ƒpñ¡Ìm´õà-yc˜ólñP.f{¡Œ˜|Ãf ÎŒ®'‡Ñ gÁ3Ö¸¼¿ïöÍ®AKqL³Ú'«`©Ë²InÊeãbËbé³Æé|#Î…/ÔV«—lFìÂ2Ȧ{jå8áʹÞ»rüñ°4ñ2J=ŠÁÍÿ–ó,Ä&Ú¦ŽóˆñÇl Y#„B™Ü™o—³Y†zz)·®Èþ€é
+s"©V˜U0Ç7ÒQÿ-¯ü—Ô¿F|;FUü°æ2ê\dOþݳêÑ`:r¬Æ|‚éLóY¾L£à~1™®}c5^äó%Ô$»Í+RÜëLá¯\½ðXjz‚ŠR¦²5¯n䳬\-_ä—~Ì>Ø"ŽÞ®×S½XÒîÇMJ"…óFÿít•]fF–X™ÜÝ}©#W?âD¯® ÐTÛ2 sH·ñ’yñ¹ü¸/°ÄÌ¿Ý­ “±Îô%8‘V²-ˆõ‹!ÖÇ…8bþ [1$8Nò¾àÂ)yܶ^µÞvWb/®ÇoW`×YÃzp¥–(ùݖ錫>"®žã7¾]&Ð=û<Òi¢™õ…åÏua™NßûʺÖóë»»‹3ÚçtšO¢T ”çûpŒ8|Ã0ZF¨Ñ=A¼*ÑZÈ o>¾BHøÆY6Ù aÄݱ0䂸½çjÏH6#vb¨ aZ÷D'i81Ôò ¯³ß_£‘nF’Rl/êýsæ[óKʨ =ìJy{U ÷:¼þR3–
+jJÖ½ð”„r*8ÌÅî3ä>‡3w4O@ QîEjYÙ¢¼¥ìóB+¹U_ê“ÂѨ((/}L‚ò±×›©"Y¦÷u%…Å[á‹H_¬¯ŠIèÕUx‚‚¡ò¸­|{* LŒÛU8Ö@*žÊ'¿Y@ºlþ"…Xø|¿˜C†®×[ÁÝ)"¤Ö¡K5ÏÆ9ƒÈ–
+˜!]Â2°Iíniº[r<iŠ}ÒBvå(u›âÎ:ĵxÚf6ÅõkEjt§«}&­Ø—á;À$Á íŽÀšb
+7PÆ$»À«£Y÷BÑïçÃ>F¸4nÓ·³:txn(\oTPÓ)ÆÓUSô&]aQR¶{BZqÄ;Ê9{ý
+l(c’]þ†AĆçu·]¨ ã‘ôÙϤŸåÓi^ecˆX¸¡+¨L.ýa2m“sDSi¶Sú-MûóMü"Ÿ³"Ñ
+žÂos‚Ûåé$(T½ÛaN­
+¦ä/`Ã4­–áàX+ÌÎØ&°YQŸ4 +’ê±\M'ø,==hók|R 蜅iÕ‰¯$¼ ;]ø‚”†«
+ž0ÇÝ „d–¥Eð¯ÌHtã]þ•+»ö¯àÀñ¼mý+6ÿŠí›þ?®ý+~†¼,úv„`ý- üýœ-:t±•‘>×76Cï«‚²×Gµ5ÅaLò¹.¸dǶóî
+êÀ?ÄìÆš6Ç®R(.1^Y¶´µP{¯µ÷¢,Œ ?5h­&¡]BYE–÷&¾^ûìš-7¢­ ”Šš‡Í` ®]­/'3"OñŽ MîÂi WïnÂUe<­ª–ù8ìúAµÌU‡öÀ
+§Z²ú%dõ.²àŠ <Æn:œÑY7ÛÊnc"úÐq?Û†pÕÄpè¬_BUDõ§"ÿ£‹*XŠ¶1ØoÈ!Òœ—³4/<ñº
+Ì~2<ß­Ïüñyµ¬òIæ_ÚºY@žÇ¨Ý¾;×,•ÌÊÉjZg=˜ãp]×Þ\é&0¨ä¡œN˧pK‡-ŠšW¶NÑŸªu^ø¯®hàlƒÛè?^tá€kÙ¸Ñw§®
+œÚÃì4ªV[¯3€m›Gµ)逌.
+îópÜÔ&dÕ}E@W_Ç]C”CY`y¾¨&B˯öÏÊ¢x¥ÆÆ@"/_ ´7¬4ÈFmt¬SeNIþÚëÕÖYÐɺdÉ*¬ó걩U:2¶]új8–¶Žv³¼Õd7N™ž(e9‘J~ÕèýkÇ?±Ä”õSB$iM¤^aØœãr¶~¯uíß×GôÕrûö@ØÏñI9“uÞtÊŸ—Ã{Óîór&|êÔdIð¡Î’ ½;KbJç´l÷¥º·b¸ÍžB÷f .çdº…—ù Wr«²¯k÷Ýö™Ê+/³Ãì†kt?Ž(.;ÿk:èõM‡þGí ! 6Š'[[h
+àÃC50UáÿÅãôÙž6nËàéBèñþ¨o)˜endstream
endobj
-2105 0 obj <<
+2117 0 obj <<
/Type /Page
-/Contents 2106 0 R
-/Resources 2104 0 R
+/Contents 2118 0 R
+/Resources 2116 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2083 0 R
+/Parent 2123 0 R
>> endobj
-2107 0 obj <<
-/D [2105 0 R /XYZ 85.0394 794.5015 null]
+2119 0 obj <<
+/D [2117 0 R /XYZ 56.6929 794.5015 null]
>> endobj
702 0 obj <<
-/D [2105 0 R /XYZ 85.0394 292.3223 null]
+/D [2117 0 R /XYZ 56.6929 292.3223 null]
>> endobj
-2108 0 obj <<
-/D [2105 0 R /XYZ 85.0394 267.2016 null]
+2120 0 obj <<
+/D [2117 0 R /XYZ 56.6929 267.2016 null]
>> endobj
-2109 0 obj <<
-/D [2105 0 R /XYZ 85.0394 210.7732 null]
+2121 0 obj <<
+/D [2117 0 R /XYZ 56.6929 210.7732 null]
>> endobj
-2110 0 obj <<
-/D [2105 0 R /XYZ 85.0394 198.818 null]
+2122 0 obj <<
+/D [2117 0 R /XYZ 56.6929 198.818 null]
>> endobj
-2104 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F11 1459 0 R /F39 1178 0 R >>
+2116 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F11 1459 0 R /F40 1178 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2113 0 obj <<
-/Length 1514
+2126 0 obj <<
+/Length 1522
/Filter /FlateDecode
>>
stream
-xÚ½XmoÛ6þî_¡20³|†iê´.Ð4M\`C׊Ì4Âɵäý÷;Š”,Ù²½¬E "©‡wÇ»çŽ'“É„DÒP)ÑÀDDéÓG_àÝë ˜IštQ/ç£WLEIe4èÈÒkM¢ùâS,Gc€ã—³ëWf<¡Çwó±âñ…û7ŸÝÍg—wã‰1šÆ—o.næÓ[’~%l¿|}5{ýñ6xí—o§WÓÛéõåtüyþv4·è’`æ¬ÿ:úôG 8ëÛFÌhma‚1†FO#.œ±fe9º}hvÞÖ[‡œÆ1A„
-M$ELJz\­WAm2´bOë„`ƒüƒ@0Š¬ !@"×*R É(«ñ»óÊ‹+Ú*¤×€ù_7Sé £ Kr@œ“r‘¦vUí²ƒ!å‚àa³<-ž²üËx"™ŠÓ"ÏmZeE^º—S–co–Ëï~1©EÛЂpEãùcV:E rB2BÐZvZlòʮǮL ú™•$«Õ2K“û¥õóªÏG;p6"RX7f|u3p4*‘ÁRL’/Q¡Ð:`®^m“*}5¡#
-ä꟩ú¾²%Ú'6
-qb Ò>üÇ׈Aö‚! ™“Ùr ²Ùqœ¶X#JÅÖ‚%¥þ•¬½³ùbº^Ÿ¥­Ãk`S,Îr÷äqY¤ÿØʯ• ËŠ•]'5«²RcÏØúUËQ·;-¼X;¢s¹*òEéKõð$ÎJëHÔG>¥ÀÑœ·Uï„CB-Òðµ.ÁB¡¾àÖ‰ú?wÿ1.íèÙð÷'VU© R s†ŸÒ¤…ä¿’Ÿ·6ýö\~RìùI1mùéÖ<ÕR›}³þe¦Ôð@S¿?]n6ÌìNz§þ¦Tà?²#Ø¿)rÿLü#T}Ю¶z±0†²ý1µ‹¡Ô¸ÿîœäþ9»|wãG­©~ú—IòÅ'h7ô?«€îšƒs݆ۣ°Úë6þß®Æ" bPK¡+„U¿K9èV¨Ò@nF! 8GZwŠt•M+%! ʸéñp-c ÝYñ´‚¨ßgˬ
-ñÙfU¸ëd·a$`™cÏAéeŠF€M  ¯_åÐJÀF ]Š#É·ñ]QºúL!*°®¬²Ô•bJšZXú·Õcp[ë3Å£’oI¶ô]ƒ{ ‰5`*vE³mŽM±¤tw'.é©Z–E0u³Zë:CŽ*%ÜÏ}†R””Å6o5/ÔÍPä®'Ý®îç]r_ÔÅÃÝHÎ'®p0‚ã7­Ëê¬ìN ‘m¸Ä`÷¦
-W(
-)º C-¶ƒ-ŠV@ؾZÙ$lÊònË=ƒö¿€¯„ÈH
-¦÷6M6å`ëk(n|ŽX
-LZEœ,ŠU0Àq«y™¹+Á›„™®œ ̹ÒŠµo&ÔÐ#»+»ËÊm²^¸OŠ#%ÀYSC’rè´àZ#ɳú@Ðlqœm˜A_½ìi¶uP'ØÖ j¶]üyuÀ3î"ÌœÖÚ€´vj2ÛÓƒ]¶†,l»þhËê"¹—á~n¿úÜìÃÆ®³¦(”þûï¨'¹bˆr}&o»¨ãžlQµ'göu*w`rZgÐÙõ£v†”íéü¹~¼µ_7¶¬þ«#9sý?î@'Ü@µ߯ªr_¥ªOªl0‡*{lÄÀFNz*Ï8±½/:ÏMO<蘄&ê95À4—”ÝW›ö®¿Î7 -*Ħ5±kz×eزZ&éaóÚÄQ÷[Ô€wqÔÔÇþÉk÷# û2„q8PT¹ºã`”ó!úŒQ&é€íÿVоendstream
+xÚ½XmoÛ6þî_¡60±|§ ÒÔn] iê¸À†®™i„9’jÉ5úïw)Y²e{Y‹"@ôv¼;Þ=÷ÜÑ$ÀðG‚H Ì4”æH`"‚äi„ƒ/ðíõˆx™°
+»R/—£3iIe°|è芎",WŸÆ×o®n—ÓÅ$¤%š„BâñËùÍ+÷F»Ëõû›ÙüõÇÅÕDññrþþƽ^LgÓÅôæz: µŽ(¬ç ~íÝÒ.ò+ï–óë»ÉçåÛÑtÙn »I‚™õþëèÓg¬`¯oG1‰`­ið4â‚!ÁkÞ¬Gw£­ÂÎ×zéPÐ8&ˆPÁ‚PRĤ¤§Í:Ìú[&P$…8°¦Ê&‚QD˜`m"é$‚p†"ÆD „F’QVgâw–3Ú•THñHv+°üëvêdzÚ¨@\ræ…þ8¥%òWIbŠÊKÑŽÄLiª½Ø<Kò§4û2 %Sã$Ï2“Tiž•öE4.· ¦,&d¼]¯¿»—q­Ú¬
+gáˆ;ýcjVCµqÿÝA8ÎÜu~ýîÖݵ®ºÇ'h'ñs¡ÝÜÿ,
+ÝÏ—»Fau0pü¿U#DjÄ€Lʪ?¨ , KQ­ 
+8GQÔ¡é*›iJBˆÖi°“A3Æ0ÎåOdý>]§•ÏÏ.­|·“Ý™‘€g=G$Ó«” B›öù‘ÑX9ÔB‰K&aãiNœïòÒ4…Z¨À»²JËÅ”4dXº¯ÕcìåvÆUŠ“Š¿ÅéÚÍ ö#Ö€«Ø²¦çY“A.)ÝïǪ‹{¦Öeî]ÝE¾©+ä¤Q™ãœÑgÕÞ¨@ù˜ï²Ö‚B=¶?;¤߫»ø>¯Éö$KŒàñ›6duUv ïb°z[ùÞ†|‰îÓP«­Ó`ïVy«À//
+ûEiÖˆ›òÀ¡Ãc
endobj
-2112 0 obj <<
+2125 0 obj <<
/Type /Page
-/Contents 2113 0 R
-/Resources 2111 0 R
+/Contents 2126 0 R
+/Resources 2124 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2083 0 R
+/Parent 2123 0 R
>> endobj
-2114 0 obj <<
-/D [2112 0 R /XYZ 56.6929 794.5015 null]
+2127 0 obj <<
+/D [2125 0 R /XYZ 85.0394 794.5015 null]
>> endobj
706 0 obj <<
-/D [2112 0 R /XYZ 56.6929 629.6971 null]
+/D [2125 0 R /XYZ 85.0394 629.6971 null]
>> endobj
-2118 0 obj <<
-/D [2112 0 R /XYZ 56.6929 602.1058 null]
+2131 0 obj <<
+/D [2125 0 R /XYZ 85.0394 602.1058 null]
>> endobj
-2111 0 obj <<
-/Font << /F37 1042 0 R /F11 1459 0 R /F21 954 0 R /F22 977 0 R /F67 2117 0 R /F39 1178 0 R >>
+2124 0 obj <<
+/Font << /F38 1042 0 R /F11 1459 0 R /F21 954 0 R /F22 957 0 R /F68 2130 0 R /F40 1178 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2121 0 obj <<
-/Length 1242
+2134 0 obj <<
+/Length 69
/Filter /FlateDecode
>>
stream
-xÚ•WÝoÛ6Ï_aäÉ*Z¤¨¯å©M×-C1 kö´î‘iKˆ,j•Ôú¿Ç#e)V³†ÁÓéø»ï#EW¡ùÑU“0Êù*Í9‰C¯ŠÃE¸Ú›w?]P'ÃãˆÄ<ŠÌÃÂÛ Ž2g,]Sww›Œ®XH’„Å«»Ý¨+IÂ(g«»íŸë›R´ZvW‹Ãuzõ×Ý/¸“4K)l
-£\Øðîö×÷(ãòICWé#>ݨ¦¯¶²º2ÔˆG9‰xÂ^’žÑÄ⥄^4 ÃõÛ¢}?ÂèNÕøð±êµ‡b«œä KRĈqÇùíQ”àö+š­aÈxý9ŒÃ·7{³R|)¬¨tÛ->z¬ƒÐE‰d}BÑ¥ÐÈ<ª‰B4HôÒ½ZÍMU<4âàTíTçˆAS†^‚»à ¥$cÌUÕŒñ<Á„eFDD]«§ QºÚ"›Àó4uÂoà8Éâdö÷ »E¬Ø¤”½*PÍZ–ÅùÀˆ×AéõÕ2 %ÔØkìñ–m̱˜ÿOÈûZ¥ªå7‚Œ¾.¶"™š^œU†îDÓïLŸ«ŠbÂirRe;Jê‚ žÀ ˆ#n¥þè«fo$Ó”¦S²V8ÚÖ<ZáZŠG‰Ôç0d( ]&Žt}jEà©G|®ŸJ·ÛvŽÕáG
-³ñÖøÙihâ.NÀ9E\ ÍÍ4=TÚ–žoŽÎ7[úþˆEgz“&œúüPëI#œÐVtºòÉÀò€\ÈÚ%±Åp?ÊF#£o•²¥ç²i}b+›JÔó´MU!}Þãð½ú„Çݪµé\§[ìEÕôúyéLC²íŸ¥ç \y,ç†ü"m-ç6•ê ÛR£‹ª•]íÎVѶž„ìþ€EÁéù‘fx&n6&a!œÑ hXÁX Ðc[$/ïÕ~è©ûKdàYÔSU×HÝתxXj3¯ò÷74§>ô­€p£f§¦WÇê¤ çv"ûÆé++8{¬ú—´êpP DÇzÙ{°ªñ JílÅZ0ÃdŽˆe(
-ï¡>þc…yjw˜Î‰ým²ks“aF–æÌ0ÌÃø5ngfn£Tt½ä‚Àš2Ó$–E™çåÀË™\»anzñmTÂ"’Ó¿²
-3í} MÑâ+Ûz̦.«Þ—†.=O.Ö+ï¤p†éiko8ÜËîy:Ø<Þ
-Ÿ »|!öw
-óÈ Žñm1ÚªÅëé$³þõÌfBú{z_šZéMÿŽItñFó
-€:]C¦ˆcq¿h“‡ ž‡-ÖXd¹_UãT]º9GLs^¾jw…9¶nßAôæ_ôqWy?.›)ü !=χhŽs·_òïâÇ»ñ[ËAÁ¥É|-}y‘à$ƒŸb³;Yh>‡¢œz ;
+xÚ3T0
endobj
-2120 0 obj <<
+2133 0 obj <<
/Type /Page
-/Contents 2121 0 R
-/Resources 2119 0 R
+/Contents 2134 0 R
+/Resources 2132 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2083 0 R
+/Parent 2123 0 R
>> endobj
-2122 0 obj <<
-/D [2120 0 R /XYZ 85.0394 794.5015 null]
+2135 0 obj <<
+/D [2133 0 R /XYZ 56.6929 794.5015 null]
+>> endobj
+2132 0 obj <<
+/ProcSet [ /PDF ]
+>> endobj
+2138 0 obj <<
+/Length 1240
+/Filter /FlateDecode
+>>
+stream
+xÚ•WÝoÛ6Ï_aäÉ*š¤¾—§6]· Å0¬ÙÓºF¦-!²¨ITRwèÿ>”¥DõO§ãï¾[Qóc«,&4Ì£UšG$¦,^‡ ºÚ›w?]0'Å!‰£04 oƒ8ÌHœñtLAÞÝ]l>p¶â”$ Ww»QW’&„³ˆ¯î¶®oJÑjÙ]<¦ëô꯻_p[DÒ,e°F3¸°áÝí¯ïQ:Çå“,†®ÒG|ºQM_me'te¨E$Œîð’„DK,^JØUÀ(¥ë·E!û~„ѪñácÕkÅW9Éž8¤ãŽòÛÃ0ÁíW,[0Âñú3éÛ›½Y¾VTº‡í=ÖAè¢D²>¡èRhdÕ€D!$zé^ -
+‹f‹Œ¦*qpªvªsÄ ‡© C/Á]p1’Ç1æªjÆxž‚`hȸ‘Q×ê)h”®vÇ…ˆÅ&ðQš:á7 pÉâdö÷ »E¬Ø¤”¿*PÍZJ Ïâü?àFÄë ôúj‘jì5öxË6f yýOÈûZ¥ªåRd9{]lEtfjzqVºM¿3müRU“ˆ%'U¶£¤.âù× Š8Œ¬Ô}ÕìdbšÒt
+RÖ
+GÛšB+\Kñ(‘úL)oì@Iغ0qdëS+O=â[º~*ÝnÛ9V‡¨ÃÉaÇ
+¦Àjp€Û"yy¯öCßHÝ_"Ï: žªºFê¾VÅÃR›y•¿¸a9Ëð¡o„5;5½:8V'm8·Ù7N_YÁÙ dÕŸÓV¨ÃA5ëeïÁªÆƒ*µ³kmÀ “9"–¡(¼‡>
+øøŽR3¸i:7‚ûÛd×æ&Ã,˹a˜ÿ†G׸›¹Ráõ’#l
+XÊM“Xãž—/CfríN„¹IèÅ·Q IÎhôÊr(Ì´÷14E@ˆK¬lë1›º¬z_ºô<¹X¯¼“ÂE¦§­½áp/»çéàótx+|6ìò…Øß)Ì#ƒ9Æ·Åh«¯§“Ìú×3› Y4ê;ìé}ij¥7ý;&±ÅÍ+
+endobj
+2137 0 obj <<
+/Type /Page
+/Contents 2138 0 R
+/Resources 2136 0 R
+/MediaBox [0 0 595.2756 841.8898]
+/Parent 2123 0 R
+>> endobj
+2139 0 obj <<
+/D [2137 0 R /XYZ 85.0394 794.5015 null]
>> endobj
710 0 obj <<
-/D [2120 0 R /XYZ 85.0394 769.5949 null]
+/D [2137 0 R /XYZ 85.0394 769.5949 null]
>> endobj
-2123 0 obj <<
-/D [2120 0 R /XYZ 85.0394 571.259 null]
+2140 0 obj <<
+/D [2137 0 R /XYZ 85.0394 571.259 null]
>> endobj
714 0 obj <<
-/D [2120 0 R /XYZ 85.0394 571.259 null]
+/D [2137 0 R /XYZ 85.0394 571.259 null]
>> endobj
-2124 0 obj <<
-/D [2120 0 R /XYZ 85.0394 538.9404 null]
+2141 0 obj <<
+/D [2137 0 R /XYZ 85.0394 538.9404 null]
>> endobj
-2119 0 obj <<
-/Font << /F21 954 0 R /F22 977 0 R /F39 1178 0 R /F41 1238 0 R >>
+2136 0 obj <<
+/Font << /F21 954 0 R /F22 957 0 R /F40 1178 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2127 0 obj <<
-/Length 3285
+2144 0 obj <<
+/Length 3284
/Filter /FlateDecode
>>
stream
xÚ¥ZKsÛF¾ëWð¶`•axíM‰åD9Ø^›ªÝT’@$Ö @ æ×o÷tÏ •«R)‡ƒF£g¦§_÷H,øO,ÂÈR™.âTûa ÂE¾¿
-[x÷Ó•`ž•eZ¹~X_ݼWñ"õÓHF‹õãHVâI"ëâ7/ö¥¿ücýËÍû(ñÊÀ¥ñÈóãÏŸ?~\×D¢N|-Él·ÞÍIŠ|©„fž/wë‡ûw3¢„€Ei¹)o?­ï>/W2 `KØcàýp3JJ?_î~|ø|¿þ•ž~üøáËý»»Ï·ËX{ë{xÂy®îÖNScmŠ@¡š¾]ýöG°(@©¿\¾J“pq‚‡Ài*û+*?ÔJYJ}õåê_Nàè­ùtötD
-”zXïª~¹RByY]·'wK‘xe~ìúê©$Ò·cÙU%¿oñW{ÃŽßöe÷Tv4~4_·{zr,íqè«‚ŽM]ö/'k"í2~·)ˆ¦:ÛSÕ—Âëë3‘‹ª_á)€*VBøiJ³¯lS—ž ¡}¥AE `ÔÂOTììs¹A
-Rf<6ù
-£yÙ>ÛÚqÛð¨zdç¡Ì«ž~óÖîs_õì Æu!ЊÖvÛ´0~¨ïØ—G\‰Þc™ G
-ôÒ8¼ u½H83„ sšøŒ 9Ø«€b–¤í¦€mªÚ(ÙP[úu9ž¦Èʽœ±˜ŒŸÍ¡«žªºÜ’e<L°!Ö :ÌŒùJˆH*­ù‰%TcóÕ¾Ö¡õ'#ñ¥ B^ÔÎ Ð×|Œ˜÷ïe*=>±þ¸Ý–=Ÿ.mµ!ßÇcìm,¤ßÉΈâörÚ•–«w惇ŒC?MD2 s>$|K›×Ggïs°
-3_í2UM^‹’s iã<ì8«&£¬Š3öÓ)ÉLr×Þ{ zÍÎí^&nƒÂþ15MþUf-`|&3é©*OšçT ¸(NRñ=¡ ’~Æ6lV<a¦ ð,>$²›2 ~ ÈÜ`Ø™ïW\¾ç#
-»üf6àà‰]2ásFøÃ1\U¿r(¡ ßÇ
-jYW ôC6ŒWÞ´wðŠvâuFÏÑ.£¨…+Œ1‰oºŒªT™ `1ß'h¶'¢XG@T”&ÞÏí +{TmC?”MA`ø Þ q–‰ÑÖN¥RÀ€ýšê&: î³3q³-gp¡ `&]œõ4Ûþ¹L+È Â¦Û›¢|ºù«ìÚ9| ü8u}”¹£“鱨\…âÙóB„Qú-aj,¬n·s®‰0ˆ/°Å–Þ3¨XØc™å8ªýœ—&
-½Tºl€M)_ÄQ°
-wܤ¹%`ƒÁ+.L.ùat‚aaÁ´ üP¹êð#€0á­áÿÒ»{®Ä2†‚>ÍVßÂtš*âÍF/
-0„›û½\¼ka;‹ÑŽ¬ÜÕH°ÙPŒ8 Ãì $GD´£v0øH[$
-#ìž…Í:š iõE˜LàD`¯gXzO¿`©"tq)¦Õ(ÌðŒe¾aºÔú†Œ–¶wM]„ŠWm¡6` 6%cž
+[x÷Ó•`ž•eZ¹~X_ݼWÉ"õÓHF‹õãHVâI"ëâ7/ö¥¿ücýËÍû8ñÊÀ¥ñÈóãÏŸ?~\×D¢N|-Él·ÞÍIŠ|©„fž/wë‡ûw3¢„€Ei¹)o?­ï>/W2 `KØcàýp3JJ?_î~|ø|¿þ•ž~üøáËý»»Ï·ËX{ë{xÂy®îÖNScmŠ@¡š¾]ýöG°(@©¿\¾J“pq‚‡Ài*û+*?ÔJYJ}õåê_Nàè­ùtötD
+”zXïª~¹RByY]·'wK‘xe~ìúê©$Ò·cÙU%¿oñW{ÃŽßöe÷Tv4~4_·{zr,íqè«‚ŽM]ö/'k"í2~·)ˆ¦:ÛSÕ—Âëë3‘‹ª_á)€*VBøiJ³¯lS—ž ¡}¥AE `ÔÂOTììs¹A
+ÎXLÆÏÇæÐUOU]nÉ2ž&ØëfÆ|%D$‡Ö|Äê±ùj_ëÐú“‘øÒ!/jçèk>FÌÀû÷2•ŸXÜnËžO—¶Úïã1ö6ÒïdgDq{9íJËÕ;óÁCÆ¡Ÿ&"™9¾Œ¥Í룳÷9X€¥’hj<?—Ö@”H=Êm©Ùþ–fûCÍ/Á÷&ÎãC]5LÆ“7”6ãwì[ ¶b9Ùܾ¤ÕT«ïØW¦ö|Ù ¯gjå2°ònž²îæµx‡+“ز‚7+ynovGl˳A-Lõ<¨A¢”àG? ȯåD{q c–c\hb%2ÿd‹OGŸ­ìw|’´ßcßÝÔmžÕ7ý¦jxëHô ó â˜0Ðï  é)cCŒíp©àÌ¿¶q-A€;LœçÓxQ÷`ZB1ÖWà†µŒL1ô9ƒ‰b?‘B¼i/`ÊåÚI¥£¦qºSÛ}%
+ÙCÙ!PÂwUcWB Y7Tù±Îx¥EÅ0lh»3±`|r`Ϲž X
+Œ$qÄœµåGa¨§©ç54•$q:
+XhDZô΀øLF£œ„£¦D[À‘±mL—å@ƒ#'ÔŒÓà …™¯vª&¯Eɉ¹„´qvœU“QVÅûé”äN&¹kï½½fçv/·AaÿÀ˜š¦
+
+be}¶òàœfª «O…]~3pðÄ.™ð9#üaH„®ª_9”P†o‚cµ¬«ú!Æ+oÚ΂;xE»ÀÀ ñ: £g‰h—QÔÂƘÄ7]FUªL°˜@ŒoÈÀ4ÛQ¬# *Jïçö„Ε=ª6‰!ˆʦ 0üï
+k§R)`À~Mu P÷Ù™¸Y‰–3¸Ð0“.ÎzšmÿÜ ¦•daÓíMQ>ÝüUví>P~œº>Ê\„шÉôXT®Bñìy„ !Â(ý–05V·Û9×Ä ÄØbKïT¬ ì±ÌrÈ  Õ~ÎK…^*]6À¦”/â(aX R‡ lGàaŠe¹ª1àÇŒßs%û6>øÔUm7v#9…Û\]¼t©4ð!FßãR©u<*OL„Pˆ¾h¾yù1”R^âÙ
+À™Ü 6†W( ƒì–ò]ÖlKK7ÔÐ!<šn©—Lgˆû¶¨)ÏW¥áiö¶‰
+bø<4[Y|[?Ðiªˆg46½(Ànî÷rñ®…í,F;²rW#ÁfCÑÄ
+”ãÀw¢‡®ì^T>”Ìy0µ xEOϦý„v,Üøª º”¡GH !DlDbÏ-¨±¹h8M™@0êß³}ô2 ƒñ_ÚøÏ3Ç·ƒr;MºÝ–O`‡*Œ8Ç)ÎpïÎ`JUNaåáPdCiûÞÜr|³ó}ËÁÝ4ûÛIÓ_z…•ošþ,ß\d9]s}°kua[þô)œ8vͦ ‰§µO5å6RXÆ.`ùrE¡,Xž^E4õyƒ XK—4Ú+Z~ÞQ!önºb@Úd=@Šb{ªm¥¼ûODÈŠ‚ðiÏQ½¥,§öv-ULöäK )Çl¤¹kö/^d]9VMMºW¦žìTŒr(zÙ@MBQº¸ (ö—”¿ÿ$ºi³†É«—±¯ãÔb-s´â£ž-O“Äű¿¸wœpõ‡`\…Ü)Gò¾vmÁË`hœ¶ €iyyY£áî[b±/¦g3>^ä*‚ªeb
+,'qF‹ã‡w¨Ý»'ùW‰[V™õ•)bBº;€¹¶Æ`!z·uß²ÆÛÁ-5³"'‹é§‹.y£_jÀ&d
+¯žŒJ•/¥ƒ…oœÌʱϔå0é!™f =Ðba0Õ,Œ•ã úéëì‰YÝ•
+ì­ì@iûž0<QiÇØHª )ø@»1—lJ\–´Ï ëæ ?§n6…‚ÓbO›ËO gÀg[ÐË S{W †ÖÍC52 ÍÐ̺,Ì®¯iìðr÷*z¼GzE·,3¢x7ü½i„x£ØÏÅ0¼^'°MÏêùì8Sç\&½àÎì0º¤2w°·Eà¦G~ †Î<s¹ó¾59Ù˜Oo0PÌ¡/ë!vcˆÃ´_f}ÓºÛš<àx±u_šö¶‘DÊY=lXzÞC»í²ÃÎöðuv„4ØzJ´á9öeÖÌëM æ
endobj
-2126 0 obj <<
+2143 0 obj <<
/Type /Page
-/Contents 2127 0 R
-/Resources 2125 0 R
+/Contents 2144 0 R
+/Resources 2142 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2135 0 R
+/Parent 2123 0 R
>> endobj
-2128 0 obj <<
-/D [2126 0 R /XYZ 56.6929 794.5015 null]
+2145 0 obj <<
+/D [2143 0 R /XYZ 56.6929 794.5015 null]
>> endobj
718 0 obj <<
-/D [2126 0 R /XYZ 56.6929 730.0613 null]
+/D [2143 0 R /XYZ 56.6929 730.0613 null]
>> endobj
-2132 0 obj <<
-/D [2126 0 R /XYZ 56.6929 694.6148 null]
+2149 0 obj <<
+/D [2143 0 R /XYZ 56.6929 694.6148 null]
>> endobj
722 0 obj <<
-/D [2126 0 R /XYZ 56.6929 556.3845 null]
+/D [2143 0 R /XYZ 56.6929 556.3845 null]
>> endobj
-2133 0 obj <<
-/D [2126 0 R /XYZ 56.6929 529.3116 null]
+2150 0 obj <<
+/D [2143 0 R /XYZ 56.6929 529.3116 null]
>> endobj
726 0 obj <<
-/D [2126 0 R /XYZ 56.6929 413.847 null]
+/D [2143 0 R /XYZ 56.6929 413.847 null]
>> endobj
-2134 0 obj <<
-/D [2126 0 R /XYZ 56.6929 385.8516 null]
+2151 0 obj <<
+/D [2143 0 R /XYZ 56.6929 385.8516 null]
>> endobj
730 0 obj <<
-/D [2126 0 R /XYZ 56.6929 226.4875 null]
+/D [2143 0 R /XYZ 56.6929 226.4875 null]
>> endobj
-1753 0 obj <<
-/D [2126 0 R /XYZ 56.6929 193.9525 null]
+1760 0 obj <<
+/D [2143 0 R /XYZ 56.6929 193.9525 null]
>> endobj
-2125 0 obj <<
-/Font << /F37 1042 0 R /F69 2131 0 R /F22 977 0 R /F21 954 0 R /F39 1178 0 R /F41 1238 0 R /F53 1333 0 R /F48 1258 0 R /F60 1366 0 R /F61 1369 0 R >>
+2142 0 obj <<
+/Font << /F38 1042 0 R /F70 2148 0 R /F22 957 0 R /F21 954 0 R /F40 1178 0 R /F42 1238 0 R /F54 1333 0 R /F49 1258 0 R /F61 1366 0 R /F62 1369 0 R >>
/XObject << /Im2 1355 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2138 0 obj <<
-/Length 534
+2154 0 obj <<
+/Length 533
/Filter /FlateDecode
>>
stream
-xÚ¥TM›0½ó+|©¸6ÆÄ>fmY©iš°‡Õj¼ *Ái e}MÆùЖ=­¢ˆyã7o><@1?ŠÇ„Édˆ9¡‡ •9ûîPËñÏ$ÿ–u—9_¿±’XFA„²—-‰eå“;ù1žeÉÜóNÜö|÷.Æà‘ðX$“‡yš=šüš.Ò8™½Qèf©Až
+xÚ¥TM›0½ó+|©¸6ÆÄ>fÚ²RÓ4a«ÕxT‚Ó@6ÊþúÆùЖ=­¢ˆyã7o><@1?ŠÇ„Édˆ9¡å[‡ µ9ûîPËñÏ$ÿ–u—:_¿1$–Q¡ôåFK`"EiñäN~Œçi¼ðü€w„=ŸGĽKfSðHx,ãÉÃ"IM~Í–É4^Œ½Q覉Až
"L<³
-ñãtü3
-Wµ­²ý2Ôàv¿¬«öî –`Ø‘¾ý¬Ví^Õ®Ð(e îlH]ë˜öâ
+ÓÇÙøg2þÃ|
+ÔøÚszïÄ饑Ûf)a]§g‚
+Óó½C0“‚££S)´uBÎ0;{*géü¾Þœö¡CÃãL`.‚ÑÀô‚`hz\∬ŸÞRoU×Sä6e«0óÖu·º{r÷R;ðdUFqª³m™|ò»"kUÓnž=#k3°Êd,l«Bo3ðÉÚFªRk#dso²ö†ïwã6=û”bÉyÐ7`E˜€J™ìSب]¶)ƒÞt­ÌÍ2¹é¦l€yÌN¥Ôýb`HL:þVïüJ½ªê V®ëÖä+ëµÅû²í
endobj
-2137 0 obj <<
+2153 0 obj <<
/Type /Page
-/Contents 2138 0 R
-/Resources 2136 0 R
+/Contents 2154 0 R
+/Resources 2152 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2135 0 R
+/Parent 2123 0 R
>> endobj
-2139 0 obj <<
-/D [2137 0 R /XYZ 85.0394 794.5015 null]
+2155 0 obj <<
+/D [2153 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-2136 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R >>
+2152 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2142 0 obj <<
+2158 0 obj <<
/Length 69
/Filter /FlateDecode
>>
stream
xÚ3T0
endobj
-2141 0 obj <<
+2157 0 obj <<
/Type /Page
-/Contents 2142 0 R
-/Resources 2140 0 R
+/Contents 2158 0 R
+/Resources 2156 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2135 0 R
+/Parent 2160 0 R
>> endobj
-2143 0 obj <<
-/D [2141 0 R /XYZ 56.6929 794.5015 null]
+2159 0 obj <<
+/D [2157 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-2140 0 obj <<
+2156 0 obj <<
/ProcSet [ /PDF ]
>> endobj
-2146 0 obj <<
+2163 0 obj <<
/Length 1965
/Filter /FlateDecode
>>
@@ -10250,86 +10474,90 @@ i ·¥Ý3éÀ–yíˆùðŠ&Â8K<æcø¡›‚hïCû™<»úÐŒ­êhüýÔï Æס\@•‰ó÷w= vV
ýf3GÕ51b‘æi‘diNŒ‘Œâ±ˆ±0·"ð0àâÄßZÕ7’\sÂw"ó‡&0ÍåþF—?$cRÍZº”í(õåŠ:éH^04g¢°û(½À ÙWáÓ7˜¿S,[>°úŒ¹…;î3`ô¦'bÕÀ¤Ö^ ïöEy˜]¹œ­Þv‹íçÞa¯Úák@n@þzh|ÇütÓOÓ0J¿mºã—¿ÞeÚâš(°ÁiÇEðá êÍâÀz҃ѣm§žæˆ§çOŒ$
­è×ØÚ:‰óÎÐÃBYn?z·XdÌqâd¾©Üä¤ÚNí:ørðï»QÕaáƒL·CÕMucVìâªV.Wª4 Û8Hü»Uoy)”@»Zìo+B)ˆ×­©ôD9ƒ©;B.ÊõTyåvÂ)Î6™îZds§¡ÁÓÏMí­µ°r=¶öä&vÓž®é^/yr€¡¶¯ÓP;«y Â1{9B€FãŸà{ËוÂM>p\×-ž‘7>å èWˆÌ¨W
¥Ìrcø-Š¼ûãËü
-“¤%œ¡i±Iæ² —â~ÚøÑŸ/¯6³Âv¡ámÒ¥ß;»è½‡CÀê/aïoãã<,EQ^Çsór4 ÝÅpµö;[ÃïVÎy7G)JΑOü©5­¿|hW°hpk·IQ„"é5¶ÏÍŽûª‡]Ù)C™‹_Ú‘Âõ%KÄQXDñ¯oʬ±]ªÜïʽe×SX{üâññ|>‡¼+¾,}w¸ÉÀdñ:Æ›š¥îãºÊǽµÿ¶Uø]5èTíŠË°ç§ð6hÿ˜ÈŸ%×"ö"Û‹ ½H.ƒH"h<H# a("NnÝÍœ÷þþùå
+“¤%œ¡i±Iæ² —â~ÚøÑŸ/¯6³Âv¡ámÒåÑyg½÷pXýÅ"ìým<pœ‡¥(Êëxn^Žf¡»®Ö~g cøÝÊ9/àæ(EÉ9ò‰?µ¦µó—í
+ ní6)ŠPä"½Æö¹ÙqßCu€à°+»"e(sñK{"R¸¾d ƒ8
+‹(þõM™5¶K•û]¹·ìz
+k_<>žÏçwåÑ—å#£ïñ7Y¸‚,^Çx³Q³Ô}\Wù¸·ö߶
+ߣ«ª]qöü´Þíâ³äZÄ^d{‘¡É+pGÐx$FÂPDœßº›8ïýýÿUendstream
endobj
-2145 0 obj <<
+2162 0 obj <<
/Type /Page
-/Contents 2146 0 R
-/Resources 2144 0 R
+/Contents 2163 0 R
+/Resources 2161 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2135 0 R
-/Annots [ 2153 0 R 2154 0 R ]
+/Parent 2160 0 R
+/Annots [ 2170 0 R 2171 0 R ]
>> endobj
-2153 0 obj <<
+2170 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
/Rect [348.3486 128.9523 463.9152 141.0119]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:info@isc.org)>>
>> endobj
-2154 0 obj <<
+2171 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
/Rect [147.3629 116.9971 364.5484 129.0567]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.isc.org/services/support/)>>
>> endobj
-2147 0 obj <<
-/D [2145 0 R /XYZ 85.0394 794.5015 null]
+2164 0 obj <<
+/D [2162 0 R /XYZ 85.0394 794.5015 null]
>> endobj
734 0 obj <<
-/D [2145 0 R /XYZ 85.0394 769.5949 null]
+/D [2162 0 R /XYZ 85.0394 769.5949 null]
>> endobj
-2148 0 obj <<
-/D [2145 0 R /XYZ 85.0394 576.7004 null]
+2165 0 obj <<
+/D [2162 0 R /XYZ 85.0394 576.7004 null]
>> endobj
738 0 obj <<
-/D [2145 0 R /XYZ 85.0394 576.7004 null]
+/D [2162 0 R /XYZ 85.0394 576.7004 null]
>> endobj
-2149 0 obj <<
-/D [2145 0 R /XYZ 85.0394 548.3785 null]
+2166 0 obj <<
+/D [2162 0 R /XYZ 85.0394 548.3785 null]
>> endobj
742 0 obj <<
-/D [2145 0 R /XYZ 85.0394 548.3785 null]
+/D [2162 0 R /XYZ 85.0394 548.3785 null]
>> endobj
-2150 0 obj <<
-/D [2145 0 R /XYZ 85.0394 518.5228 null]
+2167 0 obj <<
+/D [2162 0 R /XYZ 85.0394 518.5228 null]
>> endobj
746 0 obj <<
-/D [2145 0 R /XYZ 85.0394 460.6968 null]
+/D [2162 0 R /XYZ 85.0394 460.6968 null]
>> endobj
-2151 0 obj <<
-/D [2145 0 R /XYZ 85.0394 425.0333 null]
+2168 0 obj <<
+/D [2162 0 R /XYZ 85.0394 425.0333 null]
>> endobj
750 0 obj <<
-/D [2145 0 R /XYZ 85.0394 260.2468 null]
+/D [2162 0 R /XYZ 85.0394 260.2468 null]
>> endobj
-2152 0 obj <<
-/D [2145 0 R /XYZ 85.0394 224.698 null]
+2169 0 obj <<
+/D [2162 0 R /XYZ 85.0394 224.698 null]
>> endobj
-2144 0 obj <<
-/Font << /F21 954 0 R /F22 977 0 R /F11 1459 0 R /F41 1238 0 R >>
+2161 0 obj <<
+/Font << /F21 954 0 R /F22 957 0 R /F11 1459 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2157 0 obj <<
+2174 0 obj <<
/Length 69
/Filter /FlateDecode
>>
stream
xÚ3T0
endobj
-2156 0 obj <<
+2173 0 obj <<
/Type /Page
-/Contents 2157 0 R
-/Resources 2155 0 R
+/Contents 2174 0 R
+/Resources 2172 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2135 0 R
+/Parent 2160 0 R
>> endobj
-2158 0 obj <<
-/D [2156 0 R /XYZ 56.6929 794.5015 null]
+2175 0 obj <<
+/D [2173 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-2155 0 obj <<
+2172 0 obj <<
/ProcSet [ /PDF ]
>> endobj
-2161 0 obj <<
+2178 0 obj <<
/Length 2544
/Filter /FlateDecode
>>
@@ -10341,3290 +10569,3319 @@ FXЭ‚dƒ\#åS¯ÐyOpBŒšÈª†¨n4\Tòi¹^¿È=õvÂÀ3v·Ù”¹<ƒZˆLPO–`š8I9³€øQ &ŽÀ6 CÆg”ñ
¼
–a“p¯Gkଯ ëÃá5³îǪÿêÄ- ÜȽ¬Í|µ/^ÄwxÒH‚
D¤<ÐÎÿ—yÇ‘sU@E…ÎqÌ*Š‘×8P”Ì Ë¿/@f4áRÊ}^º¦ÖÒRº#›Úv°/×ˈÖFtÅŒ‚þ[åSr Òéú@Øèªé)ŽL½"Ÿûæ¢@ù<ñpJµÙ>~æÜpËLtGY­Fgá±[A —(-̃ÅÙ¶Ä ˜Þ°)Ëx™AaíF¼¨‚ÕáPâ¥V)§8·º>@ÌÔ4ûôÜÄP‰BÍÞ(dv P&máªëæßFD3zœ`·“¢ÂEàÛ=ÃBj{ †rh®ÔÐq½ ‘®³«zß&Å(uùJ¸8…B×ò5ø?Š²9Òp#ªf'Ë’•ú&_æ ùM_—¢±J6iðU£ª#E}ïãÏ^5X*‰eÃÏÖJ©>KF\¢P¯SSŒo&Œ>Ï! ·LÝ–è@±¸ˆ¤ægH@Ä9³ZI( Ž:ž()6Sq
-UŸiQc¢õFêƆEiX*×5ÔÏ]OÕ-ãÖXXE p³Í‚¥¢o¹‡šMÔºõÁùˆ4òs®øbðج–×
+UŸiQc¢õFêƆEiX*×5ÔÏ]OÕ-ãÖXXE p³Í‚¥¢o¹‡šMÔºõÁùˆ4òs®øbðج–×
endobj
-2160 0 obj <<
+2177 0 obj <<
/Type /Page
-/Contents 2161 0 R
-/Resources 2159 0 R
+/Contents 2178 0 R
+/Resources 2176 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2135 0 R
+/Parent 2160 0 R
>> endobj
-2162 0 obj <<
-/D [2160 0 R /XYZ 85.0394 794.5015 null]
+2179 0 obj <<
+/D [2177 0 R /XYZ 85.0394 794.5015 null]
>> endobj
754 0 obj <<
-/D [2160 0 R /XYZ 85.0394 769.5949 null]
+/D [2177 0 R /XYZ 85.0394 769.5949 null]
>> endobj
-2163 0 obj <<
-/D [2160 0 R /XYZ 85.0394 573.5449 null]
+2180 0 obj <<
+/D [2177 0 R /XYZ 85.0394 573.5449 null]
>> endobj
758 0 obj <<
-/D [2160 0 R /XYZ 85.0394 573.5449 null]
+/D [2177 0 R /XYZ 85.0394 573.5449 null]
>> endobj
-2164 0 obj <<
-/D [2160 0 R /XYZ 85.0394 539.0037 null]
+2181 0 obj <<
+/D [2177 0 R /XYZ 85.0394 539.0037 null]
>> endobj
762 0 obj <<
-/D [2160 0 R /XYZ 85.0394 539.0037 null]
+/D [2177 0 R /XYZ 85.0394 539.0037 null]
>> endobj
-2165 0 obj <<
-/D [2160 0 R /XYZ 85.0394 510.2426 null]
+2182 0 obj <<
+/D [2177 0 R /XYZ 85.0394 510.2426 null]
>> endobj
-2159 0 obj <<
-/Font << /F21 954 0 R /F22 977 0 R >>
+2176 0 obj <<
+/Font << /F21 954 0 R /F22 957 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2168 0 obj <<
+2185 0 obj <<
/Length 2811
/Filter /FlateDecode
>>
stream
-xÚ­koã¸ñ{~…¿ÕbEõ̲»É6w½\š¸hÛ*K´­®,ùD9Ùܯï g¨‡­ì-Ð&L‡Ãyq”˜¹ð/fA脉—Ì¢ÄwW³lwæÎ6°öéL0ÎÂ"-†Xï—g—·2š%Nzál¹Њ7ŽÅl™ÿ2¿v<ç(¸óO7÷7×;_x;ÿxÿDƒÇ›Û›Ç›û74½»¿ýùñ§ëóÈŸ/ï~¾?_ÄQ̯nî?Þý‹p®‘ ëZ臛§ó_—?œÝ,;Ž‡R W"»¿ýò«;ËA¸Î\G&q0{‰ëˆ$ñf»3?NàKi!åÙÓÙß;‚ƒU³uRKÂu<zjò¼)5‰JO5½¿»ÿÒyñüY5º¨+œ$ó„`/©¦As.â¹*UªUNEE+OjߪÝJ54õ\×%„´Ê T0”à»ô?u3¤úÒ­¢µzM •J›ò•·•%Ô{•µLÌb¶[Þz¨reè-Ð( ™…Nž³|-ª Y‘%†Qjð³-ŸµbƱ»=×q£h¨#ØÁ:Ò4óáÇ·‚Â<’U4>aòÙu½¬
-dþU‘¥º0¡N$;<¼q*¦cÈ2d¬‚ÊYÈ(†b|M VK_Ì5ˆ‰z¾Û›äÝ—±çÈXz|øuõú“ðü“2”†I<mÌ$BŒëàá–4P}#¦ô;
-h»zxXÑGWø ŸøxûpdGS—é³çùŸ˜Œ3;¦`²ƒ€[sƒ›&²K¼C*Ç!@þ®Û(Nê'¨u|6çfÀéà&€S2Z÷ë„c€‹»ÞÐ1Þ<Ós l³ˆú°¢àYcè>§'„)ŽN°ÕEZME‡È ¡äå-W}×q‘t¼@Ú½”î¾ç;~ 7eh˜%¥ç¤×ŸŒô‹#ýU1¯Ô0Mˆ†ÊÒ‰Müñü°×ÈUº’3›‚˜<¸wOçJ¾ sêOLŽc®6ÛòÕ¤:³êö (/rÍG×= …8£?¡prmRXÖ”aÄwâ ´QCɵµÇ¥«°¥«7¾µhÒjƒ—VBF_Z¬Î‘`|΢‰(%[
-KÌÄ­tg¹Ñä äh&ÆZéI¥”»
-À¡ìLLÑâÏ©®ÄA Ý]
-ûLµ³òa¹lIëÈ
-»õ.µÔ»h &î>>b¹`:&Ðô‡ù¶”ôçËÇ)IH£5xrÚv €‰°*V e“ œ’1/ã
-ItdöW9€°;˜
-#";"2ôoÆG‰Fõ
-EЙ­OƭܨŒÚ›-—e]s÷Z_ÔU×.Ê‘zE)míë¹®¸ÊWñ•¿ÉUêº0¢Æ÷j­bqå­¤7‘Љ’-9ŽÂÐákq¢ŒuB«×­‰§ fe°¹{ º ©-žC
-â”mÖöÑëC½Ã
-cåàföí÷¹àRõvùÀw²½šÈöëvuyùòò‚*p
-]8*?\ÕÂXé[}ãú&?kÚþù+üM\O:‰p-’Ó~å‡1ÎCN("ÛÿùøÓ‰øN”±iÙE˜øô­ƒ–¿ÌìèÇþ»G·c1Üb¾{øÃO)Ô1T~ß!¯½<æÏGþã8:âïè[L‡uÊÓH§Ô§¿Lå]ÀĈ90&ºÒK÷ðxj7ˆ†žÄ˜-t|×âÚv ª{ô^Ù¶Ä>±t‹à-Ö‹i¦'¾}¤¥¶Ÿ4žÓÂ>©]¶£÷OtJµùï‘ÊøÙJ„b¤‡7
-}Ç÷èUHÇÁ{‘Ý°î8u¢º¦Nh{'RíÚ©›Íe³ÎN|Çs#'qå1WG¾Óa²2RÄ)µ·|'r"?Ž†<ÇéÜ4†`“6MKÎü=B¿õ…S~–œÃíóÿüõ³ÿ
+xÚ­koã¸ñ{~…¿ÕbEõ̲»É6w½\š¸hÛ*K´­®,ùD9Ùܯï g¨‡­ì-Ð&L‡Ãyq”˜¹ð/fA脉—Ì¢ÄwW³lwæÎ6°öéL0ÎÂ"-†Xï—g—·2ž%Nzál¹Њ7ŽÅl™ÿ2¿v<ç(¸óO7÷7×;_x;ÿxÿDƒÇ›Û›Ç›û74½»¿ýùñ§ëóÈŸ/ï~¾?_ÄQ̯nî?Þý‹p®‘ ëZ臛§ó_—?œÝ,;Ž‡R W"»¿ýò«;ËA¸Î\G&q0{‰ëˆ$ñf»3?NàKi!åÙÓÙß;‚ƒU³uRKÂu<zjò¼)5‰JO5½¿»ÿÒyñüY5º¨+œ$ó„`/©¦As.â¹*UªUNEE+OjߪÝJ54õ\×%„´Ê T0”à»ô?u3¤úÒ­¢µzM •J›ò•·•%Ô{•µLÌb¶[Þz¨reè-Ð( ™…Nž³|-ª Y‘%†Qjð³-ŸµbƱ»=×q£h¨#ØÁ:Ò4óáÇ·‚Â<’U4>aòÙu½¬
+c­C˜ÉÀ›Sg[µS|Æ­áÐvõð°¢6(®ðA>ññöáÈ Ž.¦.ÓgÏó?1;g:vLÁ4d·æ 7Md—>x†TŽC€2ü…]·Q:2<ÔOPëølÎÍ€ÓÁM&
+pFBáäÚD&¬4°¬)&ˆïÄAh¢†“kkKWaKWo|kФÕ/­„Œ¾´X#Áø(œ#DQJ¶
+ J¥ôT9NJ ¢±Y`ž¥ût…5 ^³ äu–µt®€£ºï[B¬à¤úÊE{uŒ™QK£Uÿ
+ÌèÉ Fx×JY@Ó&
+ C;Ù™˜¢ÅŸS]‰ƒº»ö™j?fåÃsÙ"’Ö‘ôbº ˜&~?”©Ö\øÃÔvë]j©=vÑ &L>Ü}|Ä(rÁtL éóm)éÏ–S’F90jðä´í,<
+Èì9®r
+ÚB§?ùZ´í:Ó®w5Ò¬ù)6ïД:)
+,¯ä50ÎêÒ\tâEÿ÷ÕÕŸèJCûc¾üèŽ P Ê”µ0x!žo´2n’;¥X2)oͨV< Ñ—•™M8+zâ3©ÐÜ3êjʪ«F}óûB$¿T¼ÙŠzÓ¤ûík;¶žT…eåQ¥9È?x½øö‹ˆì^DÄ)Û*¬í£×‡z‡bð8­Žþ¾Ç‘§±c èó:;XŠÐjÑA
+ט‡}ÚðiÆaBÿ­‘NEÒ ¸¡…A¯"œTd ZaB¦±iÇá.߶¢†ÓªnMƒÈ€“ îkSLæÈÎÛñ2iU>[rt8ÉMGQ™Ä
endobj
-2167 0 obj <<
+2184 0 obj <<
/Type /Page
-/Contents 2168 0 R
-/Resources 2166 0 R
+/Contents 2185 0 R
+/Resources 2183 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2176 0 R
-/Annots [ 2172 0 R 2173 0 R ]
+/Parent 2160 0 R
+/Annots [ 2189 0 R 2190 0 R ]
>> endobj
-2172 0 obj <<
+2189 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
/Rect [253.7995 149.3637 417.685 161.4234]
/Subtype/Link/A<</Type/Action/S/URI/URI(ftp://www.isi.edu/in-notes/)>>
>> endobj
-2173 0 obj <<
+2190 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
/Rect [63.4454 110.455 208.8999 120.6168]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.ietf.org/rfc/)>>
>> endobj
-2169 0 obj <<
-/D [2167 0 R /XYZ 56.6929 794.5015 null]
+2186 0 obj <<
+/D [2184 0 R /XYZ 56.6929 794.5015 null]
>> endobj
766 0 obj <<
-/D [2167 0 R /XYZ 56.6929 662.0717 null]
+/D [2184 0 R /XYZ 56.6929 662.0717 null]
>> endobj
-2170 0 obj <<
-/D [2167 0 R /XYZ 56.6929 624.1661 null]
+2187 0 obj <<
+/D [2184 0 R /XYZ 56.6929 624.1661 null]
>> endobj
770 0 obj <<
-/D [2167 0 R /XYZ 56.6929 624.1661 null]
+/D [2184 0 R /XYZ 56.6929 624.1661 null]
>> endobj
1539 0 obj <<
-/D [2167 0 R /XYZ 56.6929 593.0972 null]
+/D [2184 0 R /XYZ 56.6929 593.0972 null]
>> endobj
774 0 obj <<
-/D [2167 0 R /XYZ 56.6929 294.2701 null]
+/D [2184 0 R /XYZ 56.6929 294.2701 null]
>> endobj
-2171 0 obj <<
-/D [2167 0 R /XYZ 56.6929 255.4568 null]
+2188 0 obj <<
+/D [2184 0 R /XYZ 56.6929 255.4568 null]
>> endobj
778 0 obj <<
-/D [2167 0 R /XYZ 56.6929 255.4568 null]
+/D [2184 0 R /XYZ 56.6929 255.4568 null]
>> endobj
1271 0 obj <<
-/D [2167 0 R /XYZ 56.6929 226.1045 null]
+/D [2184 0 R /XYZ 56.6929 226.1045 null]
>> endobj
-2174 0 obj <<
-/D [2167 0 R /XYZ 56.6929 53.5688 null]
+2191 0 obj <<
+/D [2184 0 R /XYZ 56.6929 53.5688 null]
>> endobj
-2175 0 obj <<
-/D [2167 0 R /XYZ 56.6929 53.5688 null]
+2192 0 obj <<
+/D [2184 0 R /XYZ 56.6929 53.5688 null]
>> endobj
-2166 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F39 1178 0 R /F53 1333 0 R /F11 1459 0 R /F41 1238 0 R >>
+2183 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F40 1178 0 R /F54 1333 0 R /F11 1459 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2179 0 obj <<
+2195 0 obj <<
/Length 2825
/Filter /FlateDecode
>>
stream
-xÚµZ]{£6¾Ï¯È¥ý<-’ KÇö¤É4™4v·Ûα›glH ÎLúë÷} 0’;Ûî“‹€tЋÏ{>%ðe
-’_.×G“ÇÇùÃìößã+‚ѯXèÑé|1¾Š#.&¨˜Š‚Ñõíõ·nž&?ü*ú-`Áäa&o?ßÜÌ˹º}šOf·7 ‚ÇŸ–wó¥ymû§á€Šwþýâã§àr ¿ðî"@”'ìò+ÜsN.÷!£ˆ…”ê‘ÝÅââ'³ 5Û<:¤*FÄèŠàKŒgŒt”Å8Š(¡²uZ¬Óúrþ"ÊØ9š,) M†hÒRùãÓ»)()üÔGÆ,@ ‡w÷B©SlÊ-lÌJbʺà³rŸæ…$ô!Ýg•âX^MËb•½Ôjt$/Þ¥«|—×yÖè«÷3q Å ¼ Àø‡|äqŒ ¡Érì¾\}I_²úWJê¡|ÍöÏÙAÞažÄÈÉŽÀVÂsŒXRF´”Åó0⃶éc;±ÁÏ2r»Ùeû¬¨Ó:/‹/‹—l•ÿd%gOÉ!˜
-´”EñPàƒ¶(èc;(°ÁÊâJ]ÙaŸº"3— ¦‰Ù:—¼r††HÌè°LéWÁ(¬°Ö=wê>^ˆ|~ÝÛRnÝ)£û$ôÔÂ^èV÷'Øúï€/2U P6zŸ½É‹¶
-NWªþ¢h rBQç¦&Ié"p! ƒ á"ËÅíÃC¡(H¶8‚‡Zðp”ñH9 å£jêæ¸ÞCú®dQ@h2š©™yZÕW2ïˆNÞߥ_´ËÑŽ˜¾íZÊ/cNFÙn1¸–8M°Té‰P69í$ŠQ”€êývbIyìDK;á4ð؉Ú²“>¶ÃNlðŽ€
-¤ˆô]Õéó.¯¶¢™òÅÌåû¹ÚQ|zr…΄£G½M£™âDÐëdp‘½ÔÖŽ„Ÿ¡#FÈ9†,)CZÊbȓȼÐC}lC6¸QöSöû1Ó!ÍXö€? µå›"­’Úª%K:oÐä¸ÊåÆÔ”ðÿ7[#áslYR¶´”f‹AìaËm±ÕÇv°eƒƒ?)­ŸîµùN5T†à¸!C>¢Û5q#ÛµÁ`‹ãQ—$o˜ëîíù¹Á@r†KÊÖ2ÜDޜ胶¸éc;¸±Áo²êk¡Ø8–D嵈vqw‡×|•É©ÉnSÂÔv/çdØ“´±îe¬‰Ëôsª½–ôj¸ôß,2¿:¯ÉS_®e(da¯Z(úßM‹¡úôFvÝ—éá|'·hÞšß¡fÔ_åÏå«=s×±²
-~ez’pu?øCºÛ©¹«º´Íïoòš§þþfÛ¨¶´5[KßµíIÃ
-¼þ’
-Zî–ÁÅ“ž„N(ËEHq¤;#UO«E;õ4:É$£ÇgöHm)7™FJ“>2½Ð-™'ØÃdvÀ›
-’†ñüD> ]OÂ0&FïÕèéAuGìŽÄËܧU•éÈ-7Gd‡Óöé®*Þ-ú™›þ£8ÀgöKm)ýZÊ¢ßsîç…¶èïc;è·ÁEÌ”u›(ÀÃadUŠTÒÜ4i›BK*½™ªü-.Z{wf×iðà‹OB«?¦ŒK'¥=[h'ËÄè½7¶ gj[Ü t¨ïXHïLù/”¾L´ã~c°¤<Æ ¥,cð$T/´e }l‡1ØàêÀª.W¥Ø²‚
-ÜI£ã‘Ë.HŒ’ÛÅDz‚‚E»1ÂLØQ]ŒÞ+qm*¼«•;ö Óùßc'\ º§Âíî(é`>r€‚$Õ»
-À´jP'Ïå±îí0ô¾ˆpØ!f
-ã3­¤%ä¶B-dU™Ï}¸­ ö‡MÐFžŒ¯ -3wÊ,Ÿw¢^ [ÖŒ*…ÅÈ´<Øû©ÍØ/cŒ ­±ïÖÙN­>Ë^vå›~¾Ñó
-åçú«d>C¶K¡`Œidå7ÆÁâU<2³û»I_å Cæœ:& ôÚäLcjKy¨ÖRמZ/´EvÛÁ¶ >-÷{¹ëŠõfëÀ·@09—¬–‡JÊH…‰Åq³N¬é„`ü]þmøèœÆ(æØ>F¢aóù XäýqŸêSW±ïÚôy°Úc +ïÔàT >d mâŒ^·Ãs§÷œ¥ÅùÆgîóÝÎœø~ŸIð‘0Šüa ¹ B µT$žƒnk}àak°‘Ù!×G%ǶÚ4[Y¯†ªLÆ,<=5G±Žö\×~ïGI ¶àÏÔÿ–[áZ¨Íø¾Ï¾|¸­ÂûÀÃ
-·‘÷AŸWÏÙ6}ÍE5#P}m kkôÓÒ9áBŸÔ6"²€ÑÛÇ×H^MÖêD2ì #FEÐ|X|Ö~ѼJyÈ«m^§DRãKá%Jæ./öY®P¯ÙÙC²7Ü…¤jñ î€j“Ûÿò—¾ÖÎaŒh’8Ó(4Ÿ”r¬_Jü
-Lâþ«›o‚Oßý¿$÷b–endstream
+xÚµZ]{£6¾Ï¯È¥ý<-’ KÇö¤É4™4v·Ûα›glH ÎLúë÷} 0’;Ûî“‹€tЋÏ{>%ðe
+’_.×G“ÇÇùÃìößã+‚ѯXèÑé|1¾Š#.&¨˜Š‚Ñõíõ·nž&?ü*ú-`Áäa&o?ßÜÌ˹º}šOf·7 ‚ÇŸ–wó¥ymû§á€Šwþýâã§àr ¿ðî"@”'ìò+ÜsN.÷!£ˆ…”ê‘ÝÅââ'³ 5Û<:¤*FÄèŠàKŒgŒt”Å8Š(¡²uZ¬Óúrþ"ÊØ9š,) M†hÒRùãÓ»)()üÔGÆ,@ ‡w÷B©Sì0°°1c(‰)ë‚ÏÊ}š’ЇtŸUŠwBby5-‹UöR«qБ¼x—®ò]^çY£¯ÞÏÄq€X'ð‚ãò‘Ç1&|„þ%ÿɱûrõ%}ÉêC^)©‡ò5Û?gy‡y#'#8[ Ï1bIyÑR#ÌÈÚb¤í`Ä?ËÈíþe—í³¢Në¼,z¼,^²Uþ[•œ=%‡`ôñ 9òæï£(ñˆÒ3ÙRnŠŒ”¦ˆÇŸñ"· @3ÔÁ¾Oó
+å±Î‹Mƒz›É ›ÊÅ[Ugû!ga#Cλ|L•öÓh~½ÉÔø]ZÓÛQ}„Ô’wEHˆxª¥â„¤YúñP¾”U¦-å\À‹h„’„œãÎ’òp§¥Œ{qîq//´E^ÛAž ~[¬cœŒ¤)ÿSŠ²åc<:¤EõY¸fpö°¢/ÄG ê}÷Š¾Û:UC“ãæXÕš8¹}'(&çê[Ê£w-eé=òèÝmé½íл >QŠÉVÛ´È«½¼ý\*%?6¤”û—ZǘÚcÍXù¹ÏÖÖÚ ¦ BŠbâ rŒòoyöÝü"»çø±¤<üh)ÍÁÔÇÚâ§íàÇŸ½é>_¯h~~Y§µÈ<4JûƒMX:¬‰k‘¡¤˜;ÀAìŒ1ŽZ.([.Ä*6br¡Æ—Ûr_•…ýµñM5õ”}ÙÖà¢q¨Wl⯘ºk¨…hà+ÿº<kÍùËA‡r ÜÆ4aR?嶔›r#ÕRž`7å^è–òìaÊ;àÓ]z°œLuÙÏb÷þdmY„‚*êŽÛ=!s!ÿ_«­¼šïþЉí¸{û3L0‚HBÉ&,)ZÊ0AƒÄÄÚb¢í`ÂÈ6 ÒWÕÒÕÖT:è~:fGÙM9Â$"éhR¬eâûªë¸û´XmÞ·Þ¡iÀTÏèÝ’òè]K½G±Ï|ЖÞûؽÛàóouVT&Á˜äTõ²“Q¾è‡çpè®÷¤óÁ(0ÿsÞñ˜>f€ƒÏQ`Iy(ÐRÄCÚ¢ í À(‹+Yte‡}^èŠÌh\&˜&zdë\ZðÊ~"1£Ã0=¤_£°ÂzX÷Ü©ûxI òùuoK¹uo¤Œî“ÐS {¡[ÝŸ`ë¾¾ÈT-,T@Ùè}ö&/Ú*8]©ú‹F -È E›š $¥‹À…$ .„‹,·7!„¢ aØâj=nÀCÂQ>Æ#å$”>¨©›ãzé»’E¡Éh¦fæiU_ɼo :y—~Ñ.G;F`ú¶ke(¿Œ9e»ÄàZâ4ÁR¥'@Ùä´“(FQBù;±¤<v¢¥ŒpxìÄmÙIÛa'6xÇN@ÒNDú®êôy—W[ÑLùbæòý\í(>=¹BgÂQÈ£Þ¦ÑLq"èu2¸È^jkGÂÏPÈ#äC–”‡!-e1äId^h‹¡>¶ƒ!Ü(û)ûý˜éf,{ÀŸ…ÚòM‘ÖGImÕ’%7hr\årã
+²Ãi{ŒˆôW• ïýÌM„Qà3û¥¶”‡~-eÑï9÷óB[ô÷±ôÛà"fʺMàá0²*E*inš´M¡%•ÞLUþ­½ˆ;³ë4xpÅ'¡ÕSÆ¥“Òž-´‰e bô^‰[ƒ3µ-n:Ôw,¤w¦üJ_&Úq¿1XRcÐR–1xªÚ2†>¶Ãlpu`U—«RlYA
endobj
-2178 0 obj <<
+2194 0 obj <<
/Type /Page
-/Contents 2179 0 R
-/Resources 2177 0 R
+/Contents 2195 0 R
+/Resources 2193 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2176 0 R
->> endobj
-2180 0 obj <<
-/D [2178 0 R /XYZ 85.0394 794.5015 null]
->> endobj
-2181 0 obj <<
-/D [2178 0 R /XYZ 85.0394 752.3015 null]
->> endobj
-2182 0 obj <<
-/D [2178 0 R /XYZ 85.0394 752.3015 null]
->> endobj
-2183 0 obj <<
-/D [2178 0 R /XYZ 85.0394 752.3015 null]
->> endobj
-2184 0 obj <<
-/D [2178 0 R /XYZ 85.0394 746.3107 null]
->> endobj
-2185 0 obj <<
-/D [2178 0 R /XYZ 85.0394 731.5461 null]
->> endobj
-2186 0 obj <<
-/D [2178 0 R /XYZ 85.0394 728.1497 null]
->> endobj
-2187 0 obj <<
-/D [2178 0 R /XYZ 85.0394 713.3851 null]
->> endobj
-2188 0 obj <<
-/D [2178 0 R /XYZ 85.0394 709.9887 null]
->> endobj
-2189 0 obj <<
-/D [2178 0 R /XYZ 85.0394 651.9592 null]
->> endobj
-1390 0 obj <<
-/D [2178 0 R /XYZ 85.0394 651.9592 null]
->> endobj
-2190 0 obj <<
-/D [2178 0 R /XYZ 85.0394 651.9592 null]
->> endobj
-2191 0 obj <<
-/D [2178 0 R /XYZ 85.0394 648.8377 null]
->> endobj
-2192 0 obj <<
-/D [2178 0 R /XYZ 85.0394 634.0731 null]
->> endobj
-2193 0 obj <<
-/D [2178 0 R /XYZ 85.0394 630.6767 null]
->> endobj
-2194 0 obj <<
-/D [2178 0 R /XYZ 85.0394 615.9121 null]
->> endobj
-2195 0 obj <<
-/D [2178 0 R /XYZ 85.0394 612.5156 null]
+/Parent 2160 0 R
>> endobj
2196 0 obj <<
-/D [2178 0 R /XYZ 85.0394 585.7959 null]
+/D [2194 0 R /XYZ 85.0394 794.5015 null]
>> endobj
2197 0 obj <<
-/D [2178 0 R /XYZ 85.0394 582.3994 null]
+/D [2194 0 R /XYZ 85.0394 752.3015 null]
>> endobj
2198 0 obj <<
-/D [2178 0 R /XYZ 85.0394 567.6349 null]
+/D [2194 0 R /XYZ 85.0394 752.3015 null]
>> endobj
2199 0 obj <<
-/D [2178 0 R /XYZ 85.0394 564.2384 null]
+/D [2194 0 R /XYZ 85.0394 752.3015 null]
>> endobj
2200 0 obj <<
-/D [2178 0 R /XYZ 85.0394 549.5337 null]
+/D [2194 0 R /XYZ 85.0394 746.3107 null]
>> endobj
2201 0 obj <<
-/D [2178 0 R /XYZ 85.0394 546.0774 null]
+/D [2194 0 R /XYZ 85.0394 731.5461 null]
>> endobj
2202 0 obj <<
-/D [2178 0 R /XYZ 85.0394 531.3128 null]
+/D [2194 0 R /XYZ 85.0394 728.1497 null]
>> endobj
2203 0 obj <<
-/D [2178 0 R /XYZ 85.0394 527.9163 null]
+/D [2194 0 R /XYZ 85.0394 713.3851 null]
>> endobj
2204 0 obj <<
-/D [2178 0 R /XYZ 85.0394 513.1518 null]
+/D [2194 0 R /XYZ 85.0394 709.9887 null]
>> endobj
2205 0 obj <<
-/D [2178 0 R /XYZ 85.0394 509.7553 null]
+/D [2194 0 R /XYZ 85.0394 651.9592 null]
+>> endobj
+1390 0 obj <<
+/D [2194 0 R /XYZ 85.0394 651.9592 null]
>> endobj
2206 0 obj <<
-/D [2178 0 R /XYZ 85.0394 483.0356 null]
+/D [2194 0 R /XYZ 85.0394 651.9592 null]
>> endobj
2207 0 obj <<
-/D [2178 0 R /XYZ 85.0394 479.6391 null]
+/D [2194 0 R /XYZ 85.0394 648.8377 null]
>> endobj
2208 0 obj <<
-/D [2178 0 R /XYZ 85.0394 464.8745 null]
+/D [2194 0 R /XYZ 85.0394 634.0731 null]
>> endobj
2209 0 obj <<
-/D [2178 0 R /XYZ 85.0394 461.4781 null]
+/D [2194 0 R /XYZ 85.0394 630.6767 null]
>> endobj
2210 0 obj <<
-/D [2178 0 R /XYZ 85.0394 446.7135 null]
+/D [2194 0 R /XYZ 85.0394 615.9121 null]
>> endobj
2211 0 obj <<
-/D [2178 0 R /XYZ 85.0394 443.3171 null]
+/D [2194 0 R /XYZ 85.0394 612.5156 null]
>> endobj
2212 0 obj <<
-/D [2178 0 R /XYZ 85.0394 428.5525 null]
+/D [2194 0 R /XYZ 85.0394 585.7959 null]
>> endobj
2213 0 obj <<
-/D [2178 0 R /XYZ 85.0394 425.156 null]
+/D [2194 0 R /XYZ 85.0394 582.3994 null]
>> endobj
2214 0 obj <<
-/D [2178 0 R /XYZ 85.0394 355.0758 null]
+/D [2194 0 R /XYZ 85.0394 567.6349 null]
>> endobj
2215 0 obj <<
-/D [2178 0 R /XYZ 85.0394 355.0758 null]
+/D [2194 0 R /XYZ 85.0394 564.2384 null]
>> endobj
2216 0 obj <<
-/D [2178 0 R /XYZ 85.0394 355.0758 null]
+/D [2194 0 R /XYZ 85.0394 549.5337 null]
>> endobj
2217 0 obj <<
-/D [2178 0 R /XYZ 85.0394 352.0499 null]
+/D [2194 0 R /XYZ 85.0394 546.0774 null]
>> endobj
2218 0 obj <<
-/D [2178 0 R /XYZ 85.0394 337.3452 null]
+/D [2194 0 R /XYZ 85.0394 531.3128 null]
>> endobj
2219 0 obj <<
-/D [2178 0 R /XYZ 85.0394 333.8889 null]
+/D [2194 0 R /XYZ 85.0394 527.9163 null]
>> endobj
2220 0 obj <<
-/D [2178 0 R /XYZ 85.0394 309.8192 null]
+/D [2194 0 R /XYZ 85.0394 513.1518 null]
>> endobj
2221 0 obj <<
-/D [2178 0 R /XYZ 85.0394 303.7727 null]
+/D [2194 0 R /XYZ 85.0394 509.7553 null]
>> endobj
2222 0 obj <<
-/D [2178 0 R /XYZ 85.0394 278.3282 null]
+/D [2194 0 R /XYZ 85.0394 483.0356 null]
>> endobj
2223 0 obj <<
-/D [2178 0 R /XYZ 85.0394 273.6565 null]
+/D [2194 0 R /XYZ 85.0394 479.6391 null]
>> endobj
2224 0 obj <<
-/D [2178 0 R /XYZ 85.0394 246.9367 null]
+/D [2194 0 R /XYZ 85.0394 464.8745 null]
>> endobj
2225 0 obj <<
-/D [2178 0 R /XYZ 85.0394 243.5403 null]
+/D [2194 0 R /XYZ 85.0394 461.4781 null]
>> endobj
2226 0 obj <<
-/D [2178 0 R /XYZ 85.0394 173.5556 null]
+/D [2194 0 R /XYZ 85.0394 446.7135 null]
>> endobj
2227 0 obj <<
-/D [2178 0 R /XYZ 85.0394 173.5556 null]
+/D [2194 0 R /XYZ 85.0394 443.3171 null]
>> endobj
2228 0 obj <<
-/D [2178 0 R /XYZ 85.0394 173.5556 null]
+/D [2194 0 R /XYZ 85.0394 428.5525 null]
>> endobj
2229 0 obj <<
-/D [2178 0 R /XYZ 85.0394 170.4341 null]
+/D [2194 0 R /XYZ 85.0394 425.156 null]
>> endobj
2230 0 obj <<
-/D [2178 0 R /XYZ 85.0394 144.9896 null]
+/D [2194 0 R /XYZ 85.0394 355.0758 null]
>> endobj
2231 0 obj <<
-/D [2178 0 R /XYZ 85.0394 140.3179 null]
+/D [2194 0 R /XYZ 85.0394 355.0758 null]
>> endobj
2232 0 obj <<
-/D [2178 0 R /XYZ 85.0394 113.5982 null]
+/D [2194 0 R /XYZ 85.0394 355.0758 null]
>> endobj
2233 0 obj <<
-/D [2178 0 R /XYZ 85.0394 110.2017 null]
+/D [2194 0 R /XYZ 85.0394 352.0499 null]
>> endobj
2234 0 obj <<
-/D [2178 0 R /XYZ 85.0394 95.4372 null]
+/D [2194 0 R /XYZ 85.0394 337.3452 null]
>> endobj
2235 0 obj <<
-/D [2178 0 R /XYZ 85.0394 92.0407 null]
+/D [2194 0 R /XYZ 85.0394 333.8889 null]
>> endobj
-2177 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F39 1178 0 R >>
-/ProcSet [ /PDF /Text ]
+2236 0 obj <<
+/D [2194 0 R /XYZ 85.0394 309.8192 null]
>> endobj
-2238 0 obj <<
-/Length 2889
-/Filter /FlateDecode
->>
-stream
-xÚµšMsÛ8†ïþ:JU1†
-<
-}w„°i5LX[iÂã¶J7„O´{ ·´Xøé«M|§–=w¦í½˜A;ˆ‚ÈÀ öHü¿HiþM|˜øh²÷²ÈX–%òž.w˜C
-†•…‚²Ò`¯·P°IºÚýLíù&?ýã⯲s¬Ø,¯dSšwç]ù?ý
-?â7?Òù1Щsàží’º(
-ü6¡¹$´HÊ*K^˜l¦µ£ïÞ©s±ðûgM,&†af0 †•…˜²2ˆb6iƒXW»Ÿ˜©½ÞÄÜÎ=ØYEXž(E_q@ü¿Ø&ÁFQã‚Z}ƒ¤Æ¯G¨ù
-\'4v¹@`ã£Ø\ÇÄÆ?5ØÄaFÔÊ'­0ÝÐA>Lº¦i5 S[0-»Uºy¢Ý ³¥½©ŠC½KáˆN/ÙAlapød%osk†¼¯fÈCÞ(ò+Å[Œ0$aH;†ü~Îßkºžã)†Â¦^aüâ“4¾:îöG8ÔÊùŴ‰´ÿÄs]8Ç4 #° + leeÀŽ,°mÒì®v?lS›ÃNÄ>ŠsÁÙô©>µœ_³º2#zas,E*[dè ÐéС7[
-id„ý4¦Õ0m¥Ñ¡¥
-°I+ «Ý¿Lí{Ôu]î‹5e×¥ÓøX=ö[½‰®»"ååÑÇ¡®â»ûµðOÞ_3æ}í¬“wÉä¤?ÈúžÛð†hÁSÃú.•®‘Wä‘ÊïlEÕ {…ø¡Ó;G
-ÛðÈ‘·±±06Š ÅØ^-¢¿¶j?½F•t7×ñ90d6BäQ—Â-D‹L^àJj±ªÞ£z‹uõ7®G¶Ëx8›c°ˆ¿¤uæåE\#þò‚tò&™ª1ZP"¦}Ä Ç‘…£4j@KÝΦkì÷£4„ã&]ÉøZ?$üÑ`'¿¿IËJ¦ž"ö:íbo¸ùáé+‡²w7Jcðì··T#ôB^UlŸOj4V`qÅ‘˜a4 Li`^d) Øt`]á^`¦°¨¡†p"üU±¼¬ŸTÂ숚*ü/¯¯Å¡FË;ÑøƒJQ6‡F¿¯2`äø‘±ºÄ›n¸ãþ¹Ø‹|·^ÊÖëc
-¾šÈÖϺ`]Ë4OòJv‰šU N«µƒiqLË2í«ÿ
-ŒÛÏiueK×±ôƒƒæÏBŽãŒÄaÓj˜¹¶jÞLpð0s«tÃüD»—yK[ÏÇ"ß»ø+Vý,/MÓ­ ~‚é;üd'DÄñCK˜ýl~h½u Äë!ÍTò'/Ø‹PˆÇª¦•…’²j(ÙöK«´A©«ÝOÉÔ^³ïÇTìq{–«íPo‘Í#/þéºÐ湚»×,Ý…ô¦¬+#wŸ[<¹ÂùÅ!Ù±r¹
-…º#õ:ÓÊEYi(^ds›´¥«ÝÅÔOï7ÕḭD˜d™7žmôl‘‡ü€ºíÉÿ ã
-.Wçñ|¾FñZD—øw¦~TЙìkUUIw9SAèJ6î$Í«z꾅щlÍ£ü~dÃÏu1dwGÛ›VdÊJ# ‰å4i•6uµû‘™ÚËøBm¼DÁ¶Ï9„§L½Î´ç1NîC݇MyúýȺ‡ лéz~ÐÛ–±DÇÊŽ§^I§‚ö;•“~f8ö–…a4LK5eb©TÛtV]á^T¦°Žqn¨bœñ7ƒ´ºsnÔ©b‚å2^Åâêr…tÇÉÐû¼¤é“ÖÓ?±N©áv3¥†f#¥æÒè¢.lå¹x òüßµ·eYšìÕ‹Z¤uö×ÎÚyÍnð i©³xˆ¿OÛ3ùŽ>“þϯíUñ
-endobj
2237 0 obj <<
-/Type /Page
-/Contents 2238 0 R
-/Resources 2236 0 R
-/MediaBox [0 0 595.2756 841.8898]
-/Parent 2176 0 R
+/D [2194 0 R /XYZ 85.0394 303.7727 null]
+>> endobj
+2238 0 obj <<
+/D [2194 0 R /XYZ 85.0394 278.3282 null]
>> endobj
2239 0 obj <<
-/D [2237 0 R /XYZ 56.6929 794.5015 null]
+/D [2194 0 R /XYZ 85.0394 273.6565 null]
>> endobj
2240 0 obj <<
-/D [2237 0 R /XYZ 56.6929 748.5056 null]
+/D [2194 0 R /XYZ 85.0394 246.9367 null]
>> endobj
2241 0 obj <<
-/D [2237 0 R /XYZ 56.6929 748.5056 null]
+/D [2194 0 R /XYZ 85.0394 243.5403 null]
>> endobj
2242 0 obj <<
-/D [2237 0 R /XYZ 56.6929 748.5056 null]
+/D [2194 0 R /XYZ 85.0394 173.5556 null]
>> endobj
2243 0 obj <<
-/D [2237 0 R /XYZ 56.6929 743.7078 null]
+/D [2194 0 R /XYZ 85.0394 173.5556 null]
>> endobj
2244 0 obj <<
-/D [2237 0 R /XYZ 56.6929 719.6381 null]
+/D [2194 0 R /XYZ 85.0394 173.5556 null]
>> endobj
2245 0 obj <<
-/D [2237 0 R /XYZ 56.6929 711.8197 null]
+/D [2194 0 R /XYZ 85.0394 170.4341 null]
>> endobj
2246 0 obj <<
-/D [2237 0 R /XYZ 56.6929 697.0552 null]
+/D [2194 0 R /XYZ 85.0394 144.9896 null]
>> endobj
2247 0 obj <<
-/D [2237 0 R /XYZ 56.6929 691.8868 null]
+/D [2194 0 R /XYZ 85.0394 140.3179 null]
>> endobj
2248 0 obj <<
-/D [2237 0 R /XYZ 56.6929 665.1671 null]
+/D [2194 0 R /XYZ 85.0394 113.5982 null]
>> endobj
2249 0 obj <<
-/D [2237 0 R /XYZ 56.6929 659.9987 null]
+/D [2194 0 R /XYZ 85.0394 110.2017 null]
>> endobj
2250 0 obj <<
-/D [2237 0 R /XYZ 56.6929 635.929 null]
+/D [2194 0 R /XYZ 85.0394 95.4372 null]
>> endobj
2251 0 obj <<
-/D [2237 0 R /XYZ 56.6929 628.1106 null]
+/D [2194 0 R /XYZ 85.0394 92.0407 null]
>> endobj
-2252 0 obj <<
-/D [2237 0 R /XYZ 56.6929 601.3909 null]
->> endobj
-2253 0 obj <<
-/D [2237 0 R /XYZ 56.6929 596.2225 null]
+2193 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F40 1178 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
2254 0 obj <<
-/D [2237 0 R /XYZ 56.6929 569.5028 null]
+/Length 2889
+/Filter /FlateDecode
+>>
+stream
+xÚµšMsÛ8†ïþ:JU1†
+<
+=Hdhû`¥ŽNqÕÚ#»g' Jëúc + e¥)À^o¡`“6(tµû)˜ÚóM,~úÇÅ_eçX±Y^ɦ4ïλò#~ú~Äo~¤óc SçÀ=Û%uQømBsIh‘”U–¼0ÙLkGß½Sçbá÷ÏšX4L ÃÌ`: + 1ee ,ÄlÒ±®v?1S{½‰ÿ¸{°³Š °<QŠ¿â€ø±M‚¢ÆµúI_Pó#¸NhìrÀÆG7°¹Ž‰j°‰ÃŒ©•OZaº¡ƒ|˜t;LÓj¦¶2`Zv;«tóD»fK{S‡z—Â^²ƒØÂàðÉJÞæÖ y_Í7(†¼Q0äWŠ!·aH(Âv6 ùýœ!¿×t=ÇS …M½ÂøÅ'i|uÜíp¨•‡=r‹iiÿ‰çºpŽh@F`VØÊÊ€Y`Û¤ Ø]í~ئ6‡ˆ}.ç/‚³éS}j9¿fueFôÂæXŠþT¶ÈС7Ò¡74Bo4¶
+µ0QhJBžQº‘†‹2U±V ØÊ.‹3Œ±Z$ïÙãaN›l’8Îp‰–úrHˆGV€aeYÊJ¯€{–`“6V@W»˜Ú÷¨ëºÜkÊ®K§ñ±z†m·z]wEÊË¢C]Åw÷k៼¿fÌûÚY'ï’ÉIõ=·á Ñ‚§†õ]* \#1®È#ß5Q•ßÙŠªö
+ñC§)vŽ¶á‘#occa(lAŠ±%¼ZD ~mÕ~z*?èn®ãs,`Èl„È£.!„[ˆ™¼À•(ÔbU½%Fõëê-n2\l—!ðp(6Æ`IëÌË‹¸FüåéäM2Uc´ E<Lúˆ7Ž# GiÔ€$–ºM× ÙîGiÇMº.’ñµ~4Hø£ÁN~“–•L=EìuÚÅ8Þp'>òÃÓ/Veïn”ÆàØ
+no©Fè…¼ªØ>ŸÔh¬À â Š#;0Ãh˜2ÒÀ¼ÈR°é6ÀºÂ½ÀLaQC áDø«byY?©„-Ø5Uø___‹C%Œ–w¢ñ;”¢l~_e&ÀÈñ#c#t‰7Ý qÇýs±ùo½”­×Ç|5‘­ŸuÁº>–ižä•ì)04«œVkÓ☖eÚWÿÂt˜0/ÞRg ±aea¬¬ È–j‚UÚ ÜÕîÇlj_äeú9£r¶‡ü%/~æ]§x¸Ùøžt¹–k—½åŒÜ êx`,ïêXVÉSÙdŽ§ÛUÏ`Zï%@\"°‚)áy:·ŸÓêÊ–®céÌ!Ÿ…ljæÕ0smÕ¼™ààaæVé†ù‰v/󖶞E¾-v'ðW¬úY^š¦[üÓwø ÈNˆˆã‡–0ûÙüÐzë@,ˆ×Cš©ä%N^°¡U L+ %eÕP²í—ViƒRW»Ÿ’©½fß©Øãö,WÛ¡Þ"›G^üÓu¡7Ìs5w¯Yº5
+éMYWFî>· yr;…ó‹C²cår
+?&tGêu¦•Š²ÒP¼Èæ:6iJW»Š©=žÞoªÃq[‰0É:3o<ÛèÙ#ùuÛ“ÿA:Ç
+鎒¡÷yIÓ'­§0bRÃífJ ÍFJÍ;¥ÑE]ØÊsñäù¿ko˲4Ù«7µHë쯵óšÝàAÓRgñŸ¶gò}&ýŸ_Û5ªâ¢a8px!d´\Ë/UWâ)9ùêêßÓïþŽNnendstream
+endobj
+2253 0 obj <<
+/Type /Page
+/Contents 2254 0 R
+/Resources 2252 0 R
+/MediaBox [0 0 595.2756 841.8898]
+/Parent 2308 0 R
>> endobj
2255 0 obj <<
-/D [2237 0 R /XYZ 56.6929 564.3344 null]
+/D [2253 0 R /XYZ 56.6929 794.5015 null]
>> endobj
2256 0 obj <<
-/D [2237 0 R /XYZ 56.6929 549.6297 null]
+/D [2253 0 R /XYZ 56.6929 748.5056 null]
>> endobj
2257 0 obj <<
-/D [2237 0 R /XYZ 56.6929 544.4015 null]
+/D [2253 0 R /XYZ 56.6929 748.5056 null]
>> endobj
2258 0 obj <<
-/D [2237 0 R /XYZ 56.6929 529.6968 null]
+/D [2253 0 R /XYZ 56.6929 748.5056 null]
>> endobj
2259 0 obj <<
-/D [2237 0 R /XYZ 56.6929 524.4686 null]
+/D [2253 0 R /XYZ 56.6929 743.7078 null]
>> endobj
2260 0 obj <<
-/D [2237 0 R /XYZ 56.6929 500.3989 null]
+/D [2253 0 R /XYZ 56.6929 719.6381 null]
>> endobj
2261 0 obj <<
-/D [2237 0 R /XYZ 56.6929 492.5805 null]
+/D [2253 0 R /XYZ 56.6929 711.8197 null]
>> endobj
2262 0 obj <<
-/D [2237 0 R /XYZ 56.6929 467.136 null]
+/D [2253 0 R /XYZ 56.6929 697.0552 null]
>> endobj
2263 0 obj <<
-/D [2237 0 R /XYZ 56.6929 460.6924 null]
+/D [2253 0 R /XYZ 56.6929 691.8868 null]
>> endobj
2264 0 obj <<
-/D [2237 0 R /XYZ 56.6929 436.6227 null]
+/D [2253 0 R /XYZ 56.6929 665.1671 null]
>> endobj
2265 0 obj <<
-/D [2237 0 R /XYZ 56.6929 428.8043 null]
+/D [2253 0 R /XYZ 56.6929 659.9987 null]
>> endobj
2266 0 obj <<
-/D [2237 0 R /XYZ 56.6929 414.0996 null]
+/D [2253 0 R /XYZ 56.6929 635.929 null]
>> endobj
2267 0 obj <<
-/D [2237 0 R /XYZ 56.6929 408.8714 null]
+/D [2253 0 R /XYZ 56.6929 628.1106 null]
>> endobj
2268 0 obj <<
-/D [2237 0 R /XYZ 56.6929 382.1516 null]
+/D [2253 0 R /XYZ 56.6929 601.3909 null]
>> endobj
2269 0 obj <<
-/D [2237 0 R /XYZ 56.6929 376.9833 null]
+/D [2253 0 R /XYZ 56.6929 596.2225 null]
>> endobj
2270 0 obj <<
-/D [2237 0 R /XYZ 56.6929 350.2636 null]
+/D [2253 0 R /XYZ 56.6929 569.5028 null]
>> endobj
2271 0 obj <<
-/D [2237 0 R /XYZ 56.6929 345.0952 null]
+/D [2253 0 R /XYZ 56.6929 564.3344 null]
>> endobj
2272 0 obj <<
-/D [2237 0 R /XYZ 56.6929 321.0255 null]
+/D [2253 0 R /XYZ 56.6929 549.6297 null]
>> endobj
2273 0 obj <<
-/D [2237 0 R /XYZ 56.6929 313.2071 null]
+/D [2253 0 R /XYZ 56.6929 544.4015 null]
>> endobj
2274 0 obj <<
-/D [2237 0 R /XYZ 56.6929 298.5024 null]
+/D [2253 0 R /XYZ 56.6929 529.6968 null]
>> endobj
2275 0 obj <<
-/D [2237 0 R /XYZ 56.6929 293.2742 null]
+/D [2253 0 R /XYZ 56.6929 524.4686 null]
>> endobj
2276 0 obj <<
-/D [2237 0 R /XYZ 56.6929 267.8297 null]
+/D [2253 0 R /XYZ 56.6929 500.3989 null]
>> endobj
2277 0 obj <<
-/D [2237 0 R /XYZ 56.6929 261.3861 null]
+/D [2253 0 R /XYZ 56.6929 492.5805 null]
>> endobj
2278 0 obj <<
-/D [2237 0 R /XYZ 56.6929 199.468 null]
+/D [2253 0 R /XYZ 56.6929 467.136 null]
>> endobj
2279 0 obj <<
-/D [2237 0 R /XYZ 56.6929 199.468 null]
+/D [2253 0 R /XYZ 56.6929 460.6924 null]
>> endobj
2280 0 obj <<
-/D [2237 0 R /XYZ 56.6929 199.468 null]
+/D [2253 0 R /XYZ 56.6929 436.6227 null]
>> endobj
2281 0 obj <<
-/D [2237 0 R /XYZ 56.6929 191.7053 null]
+/D [2253 0 R /XYZ 56.6929 428.8043 null]
>> endobj
2282 0 obj <<
-/D [2237 0 R /XYZ 56.6929 176.9408 null]
+/D [2253 0 R /XYZ 56.6929 414.0996 null]
>> endobj
2283 0 obj <<
-/D [2237 0 R /XYZ 56.6929 171.7724 null]
+/D [2253 0 R /XYZ 56.6929 408.8714 null]
>> endobj
2284 0 obj <<
-/D [2237 0 R /XYZ 56.6929 157.0677 null]
+/D [2253 0 R /XYZ 56.6929 382.1516 null]
>> endobj
2285 0 obj <<
-/D [2237 0 R /XYZ 56.6929 151.8395 null]
+/D [2253 0 R /XYZ 56.6929 376.9833 null]
>> endobj
2286 0 obj <<
-/D [2237 0 R /XYZ 56.6929 137.1348 null]
+/D [2253 0 R /XYZ 56.6929 350.2636 null]
>> endobj
2287 0 obj <<
-/D [2237 0 R /XYZ 56.6929 131.9066 null]
+/D [2253 0 R /XYZ 56.6929 345.0952 null]
>> endobj
2288 0 obj <<
-/D [2237 0 R /XYZ 56.6929 117.2018 null]
+/D [2253 0 R /XYZ 56.6929 321.0255 null]
>> endobj
2289 0 obj <<
-/D [2237 0 R /XYZ 56.6929 111.9736 null]
+/D [2253 0 R /XYZ 56.6929 313.2071 null]
>> endobj
2290 0 obj <<
-/D [2237 0 R /XYZ 56.6929 97.2091 null]
+/D [2253 0 R /XYZ 56.6929 298.5024 null]
>> endobj
2291 0 obj <<
-/D [2237 0 R /XYZ 56.6929 92.0407 null]
+/D [2253 0 R /XYZ 56.6929 293.2742 null]
>> endobj
-2236 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F39 1178 0 R >>
-/ProcSet [ /PDF /Text ]
+2292 0 obj <<
+/D [2253 0 R /XYZ 56.6929 267.8297 null]
>> endobj
-2294 0 obj <<
-/Length 2542
-/Filter /FlateDecode
->>
-stream
-xÚ¥Z[w£º~ϯð£½Ö˜Jqé›'Og’ÔÎô´kÎy ¶â°ŠÁœ9s~}·Ð‘<=]yH>Øß¾c<Að‡'1õI‚I”E˜N¶‡+4ÙÃÞý–2s%47¥®Ÿ¯þrG¢Iâ%¡Nž_{ÅŠc<yÞ}›.žžn–«Îæ>EÓ…7›S„ÔêÍíf6„o¾¢éõêúóêñ~½xúø/qѯˆ¢ÅÃRœl¾Þßßnžoåéúv±\=܃žýöüéêöY?¶ùjþÌÿ¹úöšìà ?]!$1|‡äá$ñ'‡«€„¨•üjsõw}Cc·½tLU”ÄýhDW>ž`ì%”ú=eÑÄ ‰OZe-6⵬J›¬,jë[ Oq.-#À#KÈpôoë»Pùmˆ‰)òâžßªe†¨pØ¡bJ½8"Ô„]–‡4+Ä{§»CVdu/_VµX+;]´çûS¶cÆÁ+ázAÆð@ü¾„øOüÿ\6pÏY¨‡ò^X%ÎpGžUÙ@œ/mÈ¡nCÊ¡p%¥UNIäP¹ ÚPúÛ¢vü¦<J©xmyË´IÅÑ]–3qtS¿"äïO‚±x[U3O9M#T€2ƒ0 }*žfØO¦’kƪ†R¹÷¸mJƒŒ„XÉ èB¨2¥ìdh)MF‚};N莌3ìq2zà£dè0æÒ?ŠÝŸ¥ÄÇÔ ãØïS²Tl¤•éw쥚ÅÓSZýÐŒ„vF"xsŠâ ŒRF””bÄG9qAŒ ±-Œ˜àgÊ¿©²†U™t×Rëº,QÒƒô˜ «ÞYUF©(ŒÃ>×’‡/iQdÅ~ÀvÏqþ1£tšýž1‹ç8x}„¾@S'ä`I
-i’|œ8Hrà €-È_k©îòuà8‹<KkV˜z`Í÷²úwGQ¶eã…±ùA0žI>¦‡,o”Ói’ÖrûîGU¶k,E
-²WÌ}’x”B]1|DXáª
-)ÒI8² ×à|
-D}`k°ùzH‹v;–<óç‘<k˜¹mP7,ÏKÍt ²}Ó|Û«"
-éÿBp7¥Œ+)ƒrì Ümp>Ķn‚sF…‹±#ø4¥ w}vÓT`j¯K‚^ñÒ•‹µ±ŸïÄQ¾¯Ì‡‹è8:4‰8Œmúp€ÂŽq~ƒqq¯–p¾óE®nÒ#ü:O‹íkþáAL ƒº”ÍM);áZÊ ÜQ;¡;ÂÏ°Ç ï?ŠÛrÇx
-ÈLíª¯ÝƒïüÂÙ)óWy~„{¹ÿý_ýò£ Šòr,4æ0[ÄV>ýˆzQx)]˜Rv>µTÇ'uNèŽÏ3ìq>{à =}gE7½S.%«‚ó©êÏrjÇtå¬Q„Gõ1þYoÓm»›x1xé„´H!]Ò£ÈÑùp RÀN ä5ƒnŒ°­Q3+ZÄpEdôºP•:¢ þ0yCA»/ÁóêÁЯ%k”"J¼8 õ÷'IQ猣o(À±&B½
-endobj
2293 0 obj <<
-/Type /Page
-/Contents 2294 0 R
-/Resources 2292 0 R
-/MediaBox [0 0 595.2756 841.8898]
-/Parent 2176 0 R
+/D [2253 0 R /XYZ 56.6929 261.3861 null]
+>> endobj
+2294 0 obj <<
+/D [2253 0 R /XYZ 56.6929 199.468 null]
>> endobj
2295 0 obj <<
-/D [2293 0 R /XYZ 85.0394 794.5015 null]
+/D [2253 0 R /XYZ 56.6929 199.468 null]
>> endobj
2296 0 obj <<
-/D [2293 0 R /XYZ 85.0394 748.4854 null]
+/D [2253 0 R /XYZ 56.6929 199.468 null]
>> endobj
2297 0 obj <<
-/D [2293 0 R /XYZ 85.0394 748.4854 null]
+/D [2253 0 R /XYZ 56.6929 191.7053 null]
>> endobj
2298 0 obj <<
-/D [2293 0 R /XYZ 85.0394 748.4854 null]
+/D [2253 0 R /XYZ 56.6929 176.9408 null]
>> endobj
2299 0 obj <<
-/D [2293 0 R /XYZ 85.0394 743.3452 null]
+/D [2253 0 R /XYZ 56.6929 171.7724 null]
>> endobj
2300 0 obj <<
-/D [2293 0 R /XYZ 85.0394 728.6405 null]
+/D [2253 0 R /XYZ 56.6929 157.0677 null]
>> endobj
2301 0 obj <<
-/D [2293 0 R /XYZ 85.0394 723.1655 null]
+/D [2253 0 R /XYZ 56.6929 151.8395 null]
>> endobj
2302 0 obj <<
-/D [2293 0 R /XYZ 85.0394 708.4607 null]
+/D [2253 0 R /XYZ 56.6929 137.1348 null]
>> endobj
2303 0 obj <<
-/D [2293 0 R /XYZ 85.0394 702.9857 null]
+/D [2253 0 R /XYZ 56.6929 131.9066 null]
>> endobj
2304 0 obj <<
-/D [2293 0 R /XYZ 85.0394 688.2211 null]
+/D [2253 0 R /XYZ 56.6929 117.2018 null]
>> endobj
2305 0 obj <<
-/D [2293 0 R /XYZ 85.0394 682.8059 null]
+/D [2253 0 R /XYZ 56.6929 111.9736 null]
>> endobj
2306 0 obj <<
-/D [2293 0 R /XYZ 85.0394 668.0414 null]
+/D [2253 0 R /XYZ 56.6929 97.2091 null]
>> endobj
2307 0 obj <<
-/D [2293 0 R /XYZ 85.0394 662.6262 null]
->> endobj
-2308 0 obj <<
-/D [2293 0 R /XYZ 85.0394 599.7666 null]
+/D [2253 0 R /XYZ 56.6929 92.0407 null]
>> endobj
-2309 0 obj <<
-/D [2293 0 R /XYZ 85.0394 599.7666 null]
->> endobj
-2310 0 obj <<
-/D [2293 0 R /XYZ 85.0394 599.7666 null]
+2252 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F40 1178 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
2311 0 obj <<
-/D [2293 0 R /XYZ 85.0394 591.7571 null]
+/Length 2542
+/Filter /FlateDecode
+>>
+stream
+xÚ¥Z[w£º~ϯð£½Ö˜Jqé›'Og’ÔÎô´kÎy ¶â°ŠÁœ9s~}·Ð‘<=]yH>Øß¾c<Að‡'1õI‚I”E˜N¶‡+4ÙÃÞý–2s%47¥®Ÿ¯þrGâIâ%¡Nž_{ÅŠc<yÞ}›.žžn–«Îæ>EÓ…7›S„ÔêÍíf6„o¾¢éõêúóêñ~½xúø/qѯˆ¢ÅÃRœl¾Þßßnžoåéúv±\=܃žýöüéêöY?¶ùjþÌÿ¹úöšìà ?]!$1|‡äá$ñ'‡«€„¨•üjsõw}Cc·½tLU”ÄýhDW>ž`ì%”ú=eÑÄ ‰OZe-6⵬J›¬,jë[ Oq.-#À#KÈpôoë»Pùmˆ‰)òâžßªe†¨2P1¥^jÂ.ËCšâ½ÓÝ!+²º—/«Z¬•.Úóý)Û1?ãà•pH½ cx ~ßBü‹'þ.¸ç,
+ÔÆCùÎ/¬g8‰#Ϫl Η6äP·!åP¸’Ò*§$r¨Üm(}ˆmQ» ~S¥T¼¶¼eÚ¤âè.Ë™8º)‹_ò÷'ÁƒX¼­ªŽ§œ¦*@™A>O3ì'SÉÇ5cUéÜ{Ü6¥AFB¬d„ †t!T™Rv2´”&#Á¾ 'tGÆö8=ðQ2tHséÅîÏRâcê…qì÷)Y*6ÒÊô;öRÍâé)­~hFB;#¼9EñF )#JJ1â#ŒŒ¸  F†ØFLð3åßTYêLºÇk)u]–Œ(éAz̆UשׁG£Tƒ ÆaŸ‡kÉ×´(²b?`»ç8ÿ˜Q:Í~ϘÅs<>Â_ ©r°$…4I>N$9p ŽÀŠ 䯵Twù:pœEž¥5«L=°æ{Yý»£(Û²qŽÂØ‹ü Ï$ÓC–7Êé4Ik¹ý ÷£*Û¿5‚"Ù+æ>I<J¡®˜¾"¬pU€ÍÒ³?˜3“&7;k@£Ä‹¾P)˜RvÖµ”¦=ö©v'tÇûö8ñ=ð¼yNŸgc``Ÿ·z #P¾¦ì寳9 ü骮O­ÀNk#pÍ
+ÇÄ¡V"l·Jäë‘¢š7&vᨒ׷„°FœEÄmÊm™E]â'B‰™`µ¸÷ÕHëÖ&&s-?¦! }™fðŠÊ S“}„Õ×iya] ½r°.…é$HÙ…kp>
+‘gDDvXýZdüR±(’>¬Ž%PØ×q#êâ,«%7æ-y¨^ôB0WD¡õˈ…§JøŸrö³:û ¸ÊY'ˆŒ¨2”¨‚æËÓF @¨µ> ‡ÐÈ¿P˜R3RRº›‚ÐaF.hÃŒ†Ø32Á¿Ö­uˆ]Vçê(•:_Ýü
+”vйQ`Å­cCÊ¡d%Õi9q¸ŠÚPóÛ¢g\ëss:˪¨ûs™îÔˆ€'+‹¾Ià…1Ì{žy'¤ UVo•ÒÇ*˵Ʃ]ã~ì¡(¾0ê1¥WR]Ï8êX'´¡ñ!¶Eã&øBj–íÕdá:­³3;txª±ÍKQÎŽŽÓ> zløÓô´Eé˜éÛ EðÂñ…v”r¡¤4$pt‘Nhƒˆ!¶…\g„P×
+9±ôIŒ»©Òï¯bF²SÁà´?Õæ!±ò
+endobj
+2310 0 obj <<
+/Type /Page
+/Contents 2311 0 R
+/Resources 2309 0 R
+/MediaBox [0 0 595.2756 841.8898]
+/Parent 2308 0 R
>> endobj
2312 0 obj <<
-/D [2293 0 R /XYZ 85.0394 565.0374 null]
+/D [2310 0 R /XYZ 85.0394 794.5015 null]
>> endobj
2313 0 obj <<
-/D [2293 0 R /XYZ 85.0394 559.6222 null]
+/D [2310 0 R /XYZ 85.0394 748.4854 null]
>> endobj
2314 0 obj <<
-/D [2293 0 R /XYZ 85.0394 534.1777 null]
+/D [2310 0 R /XYZ 85.0394 748.4854 null]
>> endobj
2315 0 obj <<
-/D [2293 0 R /XYZ 85.0394 527.4872 null]
+/D [2310 0 R /XYZ 85.0394 748.4854 null]
>> endobj
2316 0 obj <<
-/D [2293 0 R /XYZ 85.0394 502.0427 null]
+/D [2310 0 R /XYZ 85.0394 743.3452 null]
>> endobj
2317 0 obj <<
-/D [2293 0 R /XYZ 85.0394 495.3523 null]
+/D [2310 0 R /XYZ 85.0394 728.6405 null]
>> endobj
2318 0 obj <<
-/D [2293 0 R /XYZ 85.0394 420.5376 null]
+/D [2310 0 R /XYZ 85.0394 723.1655 null]
>> endobj
2319 0 obj <<
-/D [2293 0 R /XYZ 85.0394 420.5376 null]
+/D [2310 0 R /XYZ 85.0394 708.4607 null]
>> endobj
2320 0 obj <<
-/D [2293 0 R /XYZ 85.0394 420.5376 null]
+/D [2310 0 R /XYZ 85.0394 702.9857 null]
>> endobj
2321 0 obj <<
-/D [2293 0 R /XYZ 85.0394 412.5281 null]
+/D [2310 0 R /XYZ 85.0394 688.2211 null]
>> endobj
2322 0 obj <<
-/D [2293 0 R /XYZ 85.0394 388.4584 null]
+/D [2310 0 R /XYZ 85.0394 682.8059 null]
>> endobj
2323 0 obj <<
-/D [2293 0 R /XYZ 85.0394 380.3932 null]
+/D [2310 0 R /XYZ 85.0394 668.0414 null]
>> endobj
2324 0 obj <<
-/D [2293 0 R /XYZ 85.0394 365.6884 null]
+/D [2310 0 R /XYZ 85.0394 662.6262 null]
>> endobj
2325 0 obj <<
-/D [2293 0 R /XYZ 85.0394 360.2134 null]
+/D [2310 0 R /XYZ 85.0394 599.7666 null]
>> endobj
2326 0 obj <<
-/D [2293 0 R /XYZ 85.0394 345.4488 null]
+/D [2310 0 R /XYZ 85.0394 599.7666 null]
>> endobj
2327 0 obj <<
-/D [2293 0 R /XYZ 85.0394 340.0336 null]
+/D [2310 0 R /XYZ 85.0394 599.7666 null]
>> endobj
2328 0 obj <<
-/D [2293 0 R /XYZ 85.0394 325.269 null]
+/D [2310 0 R /XYZ 85.0394 591.7571 null]
>> endobj
2329 0 obj <<
-/D [2293 0 R /XYZ 85.0394 319.8539 null]
+/D [2310 0 R /XYZ 85.0394 565.0374 null]
>> endobj
2330 0 obj <<
-/D [2293 0 R /XYZ 85.0394 295.7842 null]
+/D [2310 0 R /XYZ 85.0394 559.6222 null]
>> endobj
2331 0 obj <<
-/D [2293 0 R /XYZ 85.0394 287.7189 null]
+/D [2310 0 R /XYZ 85.0394 534.1777 null]
>> endobj
2332 0 obj <<
-/D [2293 0 R /XYZ 85.0394 272.9543 null]
+/D [2310 0 R /XYZ 85.0394 527.4872 null]
>> endobj
2333 0 obj <<
-/D [2293 0 R /XYZ 85.0394 267.5392 null]
+/D [2310 0 R /XYZ 85.0394 502.0427 null]
>> endobj
2334 0 obj <<
-/D [2293 0 R /XYZ 85.0394 252.7746 null]
+/D [2310 0 R /XYZ 85.0394 495.3523 null]
>> endobj
2335 0 obj <<
-/D [2293 0 R /XYZ 85.0394 247.3594 null]
+/D [2310 0 R /XYZ 85.0394 420.5376 null]
>> endobj
2336 0 obj <<
-/D [2293 0 R /XYZ 85.0394 223.2897 null]
+/D [2310 0 R /XYZ 85.0394 420.5376 null]
>> endobj
2337 0 obj <<
-/D [2293 0 R /XYZ 85.0394 215.2245 null]
+/D [2310 0 R /XYZ 85.0394 420.5376 null]
>> endobj
2338 0 obj <<
-/D [2293 0 R /XYZ 85.0394 149.4956 null]
+/D [2310 0 R /XYZ 85.0394 412.5281 null]
>> endobj
2339 0 obj <<
-/D [2293 0 R /XYZ 85.0394 149.4956 null]
+/D [2310 0 R /XYZ 85.0394 388.4584 null]
>> endobj
2340 0 obj <<
-/D [2293 0 R /XYZ 85.0394 149.4956 null]
+/D [2310 0 R /XYZ 85.0394 380.3932 null]
>> endobj
2341 0 obj <<
-/D [2293 0 R /XYZ 85.0394 144.3554 null]
+/D [2310 0 R /XYZ 85.0394 365.6884 null]
>> endobj
2342 0 obj <<
-/D [2293 0 R /XYZ 85.0394 120.2857 null]
+/D [2310 0 R /XYZ 85.0394 360.2134 null]
>> endobj
2343 0 obj <<
-/D [2293 0 R /XYZ 85.0394 112.2205 null]
+/D [2310 0 R /XYZ 85.0394 345.4488 null]
>> endobj
2344 0 obj <<
-/D [2293 0 R /XYZ 85.0394 97.4559 null]
+/D [2310 0 R /XYZ 85.0394 340.0336 null]
>> endobj
2345 0 obj <<
-/D [2293 0 R /XYZ 85.0394 92.0407 null]
+/D [2310 0 R /XYZ 85.0394 325.269 null]
>> endobj
-2292 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F39 1178 0 R >>
-/ProcSet [ /PDF /Text ]
+2346 0 obj <<
+/D [2310 0 R /XYZ 85.0394 319.8539 null]
>> endobj
-2348 0 obj <<
-/Length 2928
-/Filter /FlateDecode
->>
-stream
-xÚ¥ZKs㸾ûWèºjÅ
-/ágP´¸hmÞŠ† —ö´z, ¾j枧Dãª;®cÝ"±ts/r/êë¾®Ö2//§¾Çœ;¹Î°Åù®i³5Q÷„#7?Ú¬lòªTÇt°;37Š£Ö…²‚)¡p®]=U6m!_³KN#¾#êK; Ò#KݸÒüŸåöe-K-å“,·²Þ¡VزQ4%Øi/`W‘{=§Ä}ï z×z†«C‹h½1Õz‡º‡Ñ³u+lð 3mÕMlšÊÄ5šŠcWÊužRç·ÍB¶Ù w}/±€Ts]ú 5Y£¨{³MÔÅ#Œ…ÂÆÇñ°¹NãÑquxbÄ›FUïñ8Ò=ˆGO÷ùóqoŠ„›$Áÿ€Á¯RuÓU‡Cr‡Ðw!žFgp°¸Fp0\ÁX<‚Øj ‡CÝÃ8غ "Ž5Ø28¨v‡ƒˆ#ç d„ùÍ´¸æÈ—e^.©3Û¶«Jñãä…’Vb=Ïs>¸4ñŸ—^³¢
-þU6M¶#šªÔ’\­£j0
-p¹ë,µ]ÌÈœve"ù˜wÒ ö]Á‚3õ‚ÍuÒŽ«ƒ4 F U½‡ôH÷ ¤=ÝÙ"Cç)srq¾ÊÿDÄT¬ËÊ6ÃjYÉVR ¡›]ë( ýç¼ÂÅnÁ"÷1‘qŠ‰0§‰FXBã^3ý²]¬·å¢i0jˆFhÄ.–/§!…K†ŸÐueR‹kRÃeA:’êFU[ê†ÔÖ}ÙÒŠ…˜¶Ìi¨´6'°Ôí¦ç•D!¯4Ü'½’Ç¡ëû1ïÇÍ{7{`Qbüï/À"|¸¦±3• Í5‹áê`‰F=mLµË¡îaXlÝ_
-*Ñ"§¬Z­ºêoƒP¡™Ki^Ü<0À‚R}…cn<ù›,Жb"UÿYUÛBS•Vl<gôýc[Ñ+0ª¬´4×$_ÒXja/hõm|¡»- 8fÍŸ¦Õz:„ÏF–¹’Ιó¼£/Y4y“2_«ªdÛ±hæ½Bç›çùhs uÕráK(VKbmùhˆ+ù¦…HúùKÖÀò¨§¬¾MþƒëªlWz.Ø»Yâû*‡+çÀFõŠ{ÅÐYdÖ«vwdØV{zàYO!¹®'¤zÒhƒ;
-B…{aª / ;ÏÕVÇ
-õkD'. ~ØÉõ\°«H_G^²ýèä›»y.‹#<›Ø\ÇÙ„sæ›Ø Sé„ŸN$£Z÷‰äHí`"éi¥DÂíW,´Ê^tÙ'Vȇ9r[ФY÷®?$]Y8yúª ô¿ä[œÈ}(97»:_®Tv™ð(† ø1þÖÂô-"¥%
-اÅ÷ñ`èv
-`+•Z1†^ž@¼lÐÛeg˜sŠ÷Ó¬[M”›M‘ÓëY3gÖU^
-â§.|Rƒ¶Im 3ìê\ñ–/²ƒI/UQTïT`7“­.›ŸO@6á™Ë±Í¥"QÏ‘#÷ÒÐ’¥=9:T<{ãJ Ó±ÒžÓÄÜ ð׋žÒ'uIâ”Ù»:_h¦t4  ñ‹âh‘£e=A]-¶…ªÙ‚H{"’ÍWÒgÁNe)hXXQ̺€–…–Qj‘è˜/2Õ+.«Jº>
-® ,¸è«ª íEšN¡hKÂsÚZ–LµYÃÈ{Þ®¨%éƒÞš§ÛBÖÔo²úm_á óAÖ¢û9Ø(ããûÃ÷VSì¡Á ø9-]@ v´tŸa€¢Á†ÂbC=¹x“¯Á§D°ØLÀ'sŬ(žCW$¢Ae™/¤y}æÝσ€ug¹ÄÚ7JÙÁà„ð“ÿìW¦*œªÕ/õÍ®LWkYm›ƒ»­¹ÙÉ+mœ¸p¼gž -¦Óh˜Î9à˜ÆÎÿ5ºŸ­QyŸz5Яnçä^Š€W´Rå# >f-„·7ÌQØ¥‡ý ýBgQιƒÿ9ÁÕ¥¥¡¾w!Ej™–wa#»š ëÆÌjÁ_+Ê jUq²7â7ZHZ•/4‚Þh3"Ñf€Ä}–Þ6ë…ú}ÎW¹¤Ùd)ýÐD, {ËmmNæ@´zÄC"-|¿¤–zꢗ0Ê{¡d#ÓW¸î_ šì0À)¦u¾Ù¿v‡{–²Ñ['1´>å p½|§{ÂÎEàâ¿à ë.ÿ÷úXo@‘+âøÄO'^¸094‹Ru¥`GK7ÿt¼öÿÓž Gendstream
-endobj
2347 0 obj <<
-/Type /Page
-/Contents 2348 0 R
-/Resources 2346 0 R
-/MediaBox [0 0 595.2756 841.8898]
-/Parent 2176 0 R
+/D [2310 0 R /XYZ 85.0394 295.7842 null]
+>> endobj
+2348 0 obj <<
+/D [2310 0 R /XYZ 85.0394 287.7189 null]
>> endobj
2349 0 obj <<
-/D [2347 0 R /XYZ 56.6929 794.5015 null]
+/D [2310 0 R /XYZ 85.0394 272.9543 null]
>> endobj
2350 0 obj <<
-/D [2347 0 R /XYZ 56.6929 749.0089 null]
+/D [2310 0 R /XYZ 85.0394 267.5392 null]
>> endobj
2351 0 obj <<
-/D [2347 0 R /XYZ 56.6929 749.0089 null]
+/D [2310 0 R /XYZ 85.0394 252.7746 null]
>> endobj
2352 0 obj <<
-/D [2347 0 R /XYZ 56.6929 749.0089 null]
+/D [2310 0 R /XYZ 85.0394 247.3594 null]
>> endobj
2353 0 obj <<
-/D [2347 0 R /XYZ 56.6929 745.2843 null]
+/D [2310 0 R /XYZ 85.0394 223.2897 null]
>> endobj
2354 0 obj <<
-/D [2347 0 R /XYZ 56.6929 721.2146 null]
+/D [2310 0 R /XYZ 85.0394 215.2245 null]
>> endobj
2355 0 obj <<
-/D [2347 0 R /XYZ 56.6929 714.4694 null]
+/D [2310 0 R /XYZ 85.0394 149.4956 null]
>> endobj
2356 0 obj <<
-/D [2347 0 R /XYZ 56.6929 699.7048 null]
+/D [2310 0 R /XYZ 85.0394 149.4956 null]
>> endobj
2357 0 obj <<
-/D [2347 0 R /XYZ 56.6929 695.6096 null]
+/D [2310 0 R /XYZ 85.0394 149.4956 null]
>> endobj
2358 0 obj <<
-/D [2347 0 R /XYZ 56.6929 680.9049 null]
+/D [2310 0 R /XYZ 85.0394 144.3554 null]
>> endobj
2359 0 obj <<
-/D [2347 0 R /XYZ 56.6929 676.7499 null]
+/D [2310 0 R /XYZ 85.0394 120.2857 null]
>> endobj
2360 0 obj <<
-/D [2347 0 R /XYZ 56.6929 652.6802 null]
+/D [2310 0 R /XYZ 85.0394 112.2205 null]
>> endobj
2361 0 obj <<
-/D [2347 0 R /XYZ 56.6929 645.935 null]
+/D [2310 0 R /XYZ 85.0394 97.4559 null]
>> endobj
2362 0 obj <<
-/D [2347 0 R /XYZ 56.6929 631.2303 null]
+/D [2310 0 R /XYZ 85.0394 92.0407 null]
>> endobj
-2363 0 obj <<
-/D [2347 0 R /XYZ 56.6929 627.0752 null]
->> endobj
-2364 0 obj <<
-/D [2347 0 R /XYZ 56.6929 603.0055 null]
+2309 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F40 1178 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
2365 0 obj <<
-/D [2347 0 R /XYZ 56.6929 596.2603 null]
+/Length 2928
+/Filter /FlateDecode
+>>
+stream
+xÚ¥ZKs㸾ûWèºjÅ
+/ágP´¸hmÞŠ† —ö´z, ¾j枧Dãª;®cÝ>³ts/r/êë¾®Ö2//§¾Çœ;¹Î°Åù®i³5Q÷„#7?Ú¬lòªTÇt°;37Š£Ö…²‚)¡p®]=U6m!_³KN#¾#êK; Ò#KݸÒüŸåöe-K-å“,·²Þ¡VزQ4%Øi/`W‘{=§Ä}ï z×z†«C‹h½1Õz‡º‡Ñ³u+lð 3mÕMlšÊÄ5šŠcWÊužRç·ÍB¶Ù w}/±€Ts]ú 5Y£¨{³MÔÅ#Œ…ÂÆÇñ°¹NãÑquxbÄ›FUïñ8Ò=ˆGO÷ùóqoŠ„›$Áÿ€Á¯RuÓU‡Cr‡Ðw!žFgp°¸Fp0\ÁX<‚Øj ‡CÝÃ8غ "Ž5Ø28¨v‡ƒˆ#ç d„ùÍ´¸æÈ—e^.©3Û¶«Jñãä…’Vb=Ïs>¸4ñŸ—^³¢
+þU6M¶#šªÔ’\­£j0
+p¹ë,µ]ÌÈœve"ù˜wÒ ö]Á‚3õ‚ÍuÒŽ«ƒ4 F U½‡ôH÷ ¤=ÝÙ"Cç)srq¾ÊÿDÄT¬ËÊ6ÃjYÉVR ¡›]ë( ýç¼ÂÅnÁ"÷1‘qŠ‰0§‰FXBã^3ý²]¬·å¢i0jˆFhÄ.–/§!…K†ŸÐueR‹kRÃeA:’êFU[ê†ÔÖ}ÙÒŠ…˜¶Ìi¨´6'°Ôí¦ç•D!¯4Ü'½’Ç¡ëû1ïÇÍ{7{`Qbüï/À"|¸¦±3• Í5‹áê`‰F=mLµË¡îaXlÝ_
+*Ñ"§¬Z­ºêoƒP¡™Ki^Ü<0À‚R}…cn<ù›,Жb"UÿYUÛBS•Vl<gôýc[Ñ+0ª¬´4×$_ÒXja/hõm|¡»- 8fÍŸ¦Õz:„ÏF–¹’Ιó¼£/Y4y“2_«ªdÛ±hæ½Bç›çùhs uÕráK(VKbmùhˆ+ù¦…HúùKÖÀò¨§¬¾MþƒëªlWz.Ø»Yâû*‡+çÀFõŠ{ÅÐYdÖ«vwdØV{zàYO!¹®'¤zÒhƒ;
+B…{aª / ;ÏÕVÇ
+õkD'. ~ØÉõ\°«H_G^²ýèä›»y.‹#<›Ø\ÇÙ„sæ›Ø Sé„ŸN$£Z÷‰äHí`"éi¥DÂíW,´Ê^tÙ'Vȇ9r[ФY÷®?$]Y8yúª ô¿ä[œÈ}(97»:_®Tv™ð(† ø1þÖÂô-"¥%
+اÅ÷ñ`èv
+`+•Z1†^ž@¼lÐÛeg˜sŠ÷Ó¬[M”›M‘ÓëY3gÖU^
+â§.|Rƒ¶Im 3ìê\ñ–/²ƒI/UQTïT`7“­.›ŸO@6á™Ë±Í¥"QÏ‘#÷ÒÐ’¥=9:T<{ãJ Ó±ÒžÓÄÜ ð׋žÒ'uIâ”Ù»:_h¦t4  ñ‹âh‘£e=A]-¶…ªÙ‚H{"’ÍWÒgÁNe)hXXQ̺€–…–Qj‘è˜/2Õ+.«Jº>
+® ,¸è«ª íEšN¡hKÂsÚZ–LµYÃÈ{Þ®¨%éƒÞš§ÛBÖÔo²úm_á óAÖ¢û9Ø(ããûÃ÷VSì¡Á ø9-]@ v´tŸa€¢Á†ÂbC=¹x“¯Á§D°ØLÀ'sŬ(žCW$¢Ae™/¤y}æÝσ€ug¹ÄÚ7JÙÁà„ð“ÿìW¦*œªÕ/õÍ®LWkYm›ƒ»­¹ÙÉ+mœ¸p¼gž -¦Óh˜Î9à˜ÆÎÿ5ºŸ­QyŸz5Яnçä^Š€W´Rå# >f-„·7ÌQØ¥‡ý ýBgQιƒÿ9ÁÕ¥¥¡¾w!Ej™–wa#»š ëÆÌjÁ_+Ê jUq²7â7ZHZ•/4‚Þh3"Ñf€Ä}–Þ6ë…ú}ÎW¹¤Ùd)ýÐD, {ËmmNæ@´zÄC"-|¿¤–zꢗ0Ê{¡d#ÓW¸î_ šì0À)¦u¾Ù¿v‡{–²Ñ['1´>å p½|§{ÂÎEàâ¿à ë.ÿ÷úXo@‘+âøÄO'^¸094‹Ru¥ð–nþ'èxíÿs¨ ìendstream
+endobj
+2364 0 obj <<
+/Type /Page
+/Contents 2365 0 R
+/Resources 2363 0 R
+/MediaBox [0 0 595.2756 841.8898]
+/Parent 2308 0 R
>> endobj
2366 0 obj <<
-/D [2347 0 R /XYZ 56.6929 572.1906 null]
+/D [2364 0 R /XYZ 56.6929 794.5015 null]
>> endobj
2367 0 obj <<
-/D [2347 0 R /XYZ 56.6929 565.4454 null]
+/D [2364 0 R /XYZ 56.6929 749.0089 null]
>> endobj
2368 0 obj <<
-/D [2347 0 R /XYZ 56.6929 550.7407 null]
+/D [2364 0 R /XYZ 56.6929 749.0089 null]
>> endobj
2369 0 obj <<
-/D [2347 0 R /XYZ 56.6929 546.5857 null]
+/D [2364 0 R /XYZ 56.6929 749.0089 null]
>> endobj
2370 0 obj <<
-/D [2347 0 R /XYZ 56.6929 531.8211 null]
+/D [2364 0 R /XYZ 56.6929 745.2843 null]
>> endobj
2371 0 obj <<
-/D [2347 0 R /XYZ 56.6929 527.7259 null]
+/D [2364 0 R /XYZ 56.6929 721.2146 null]
>> endobj
2372 0 obj <<
-/D [2347 0 R /XYZ 56.6929 501.0062 null]
+/D [2364 0 R /XYZ 56.6929 714.4694 null]
>> endobj
2373 0 obj <<
-/D [2347 0 R /XYZ 56.6929 496.911 null]
->> endobj
-782 0 obj <<
-/D [2347 0 R /XYZ 56.6929 464.7873 null]
+/D [2364 0 R /XYZ 56.6929 699.7048 null]
>> endobj
2374 0 obj <<
-/D [2347 0 R /XYZ 56.6929 439.0859 null]
->> endobj
-786 0 obj <<
-/D [2347 0 R /XYZ 56.6929 352.4521 null]
+/D [2364 0 R /XYZ 56.6929 695.6096 null]
>> endobj
2375 0 obj <<
-/D [2347 0 R /XYZ 56.6929 326.7507 null]
+/D [2364 0 R /XYZ 56.6929 680.9049 null]
>> endobj
2376 0 obj <<
-/D [2347 0 R /XYZ 56.6929 290.6891 null]
+/D [2364 0 R /XYZ 56.6929 676.7499 null]
>> endobj
2377 0 obj <<
-/D [2347 0 R /XYZ 56.6929 290.6891 null]
+/D [2364 0 R /XYZ 56.6929 652.6802 null]
>> endobj
2378 0 obj <<
-/D [2347 0 R /XYZ 56.6929 290.6891 null]
+/D [2364 0 R /XYZ 56.6929 645.935 null]
>> endobj
2379 0 obj <<
-/D [2347 0 R /XYZ 56.6929 290.6891 null]
+/D [2364 0 R /XYZ 56.6929 631.2303 null]
+>> endobj
+2380 0 obj <<
+/D [2364 0 R /XYZ 56.6929 627.0752 null]
+>> endobj
+2381 0 obj <<
+/D [2364 0 R /XYZ 56.6929 603.0055 null]
+>> endobj
+2382 0 obj <<
+/D [2364 0 R /XYZ 56.6929 596.2603 null]
+>> endobj
+2383 0 obj <<
+/D [2364 0 R /XYZ 56.6929 572.1906 null]
+>> endobj
+2384 0 obj <<
+/D [2364 0 R /XYZ 56.6929 565.4454 null]
+>> endobj
+2385 0 obj <<
+/D [2364 0 R /XYZ 56.6929 550.7407 null]
+>> endobj
+2386 0 obj <<
+/D [2364 0 R /XYZ 56.6929 546.5857 null]
+>> endobj
+2387 0 obj <<
+/D [2364 0 R /XYZ 56.6929 531.8211 null]
+>> endobj
+2388 0 obj <<
+/D [2364 0 R /XYZ 56.6929 527.7259 null]
+>> endobj
+2389 0 obj <<
+/D [2364 0 R /XYZ 56.6929 501.0062 null]
+>> endobj
+2390 0 obj <<
+/D [2364 0 R /XYZ 56.6929 496.911 null]
+>> endobj
+782 0 obj <<
+/D [2364 0 R /XYZ 56.6929 464.7873 null]
+>> endobj
+2391 0 obj <<
+/D [2364 0 R /XYZ 56.6929 439.0859 null]
+>> endobj
+786 0 obj <<
+/D [2364 0 R /XYZ 56.6929 352.4521 null]
+>> endobj
+2392 0 obj <<
+/D [2364 0 R /XYZ 56.6929 326.7507 null]
+>> endobj
+2393 0 obj <<
+/D [2364 0 R /XYZ 56.6929 290.6891 null]
+>> endobj
+2394 0 obj <<
+/D [2364 0 R /XYZ 56.6929 290.6891 null]
+>> endobj
+2395 0 obj <<
+/D [2364 0 R /XYZ 56.6929 290.6891 null]
+>> endobj
+2396 0 obj <<
+/D [2364 0 R /XYZ 56.6929 290.6891 null]
>> endobj
790 0 obj <<
-/D [2347 0 R /XYZ 56.6929 241.4457 null]
+/D [2364 0 R /XYZ 56.6929 241.4457 null]
>> endobj
-2380 0 obj <<
-/D [2347 0 R /XYZ 56.6929 201.7704 null]
+2397 0 obj <<
+/D [2364 0 R /XYZ 56.6929 201.7704 null]
>> endobj
-2346 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F39 1178 0 R /F14 980 0 R >>
+2363 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F40 1178 0 R /F14 980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2383 0 obj <<
+2400 0 obj <<
/Length 2293
/Filter /FlateDecode
>>
stream
-xÚ¥]sã6î=¿Â9yf­"õÕ·ìn¶“¶—Ë9éLov÷A–¨˜]Yrõa×ÿþ
+xÚ¥]sã6î=¿Â9yf­"õÕ·ìn¶“¶—Ë9éLov÷A–¨˜]Yrõa×ÿþ
S ÃH:t Eô[óRít¦2pRîú´VZìKE–
NP˜d»¤L•%ÎUÒvVž%Íi¯93"(èŠéA·¨û M—®iKb1i’®AÐÆ„žº >y¨OøÆ&™sgg$rjñÍØ°r?„Z.ÒªL»šø”-úbQæ~­Jz#aÿÈÏìi’î÷h+¾+'¯¤ÙªTaÌSjã¾”~‚X¸’ þz"S½œª7Á«R‰àBìd"8{ƒF |GýµUµÆ8N
Âä5DÒ¾ª¿ákà´¡›n»­0iàKï¡È`{ »î\'VˆuJ€â4hHuÙ˘À®¤ù6åuÍ¡iÕÆÜè6ê/1Ÿ-<0 ÈÖÓ†PˆÀ;9ƒ2õP«ZýÙéF·Êr[Dy¾x>íüéþ78‹' U}Có<ò"ÀŸ'2ÂÁsÕiÌ°œp``2Àc ºsoIX¥œŒ‰jxZ»iLˆÔX€¦ÕEAK+un÷ïµ 5ädØOø}{Øâ1¼( 
-
-(„bzØŽàr^CWbøà5sr
-|4
-bsب–
-7™06— z[_ÚT(c›¹$³­4;E+X& ›%‡"óÀÐ 5Ô H²RÏu‡l»‘ ù© èj$5.’û4-È¡ƒì1á<k´“Žˆôã;%Lטn ©Íyåi_„xr0\HŠ¦"he%ØÌj8ÑÝöœ&RÐÈþ9eCñzzÇ…®Û(E/+UTû¡ùŽ 6¨ïJ輋ÿ1ªÓŒž¯ûå8X ¤IÖ÷F®çÖ°õ›ÍK©æ¥Zýv!˜œÌlö{s#žÊ
-²y<ChR µJH%âWÇ«jØb€;WP§ªbu8›ZÎURC—iÑÁ„&L^š
-P#¢ &6æ0wV}-±b]íO«–í%9µ2¶žTû¾Ò“žAäíEÑѣ̀~ãÊ»Ì^¹¾'åe ±)ìúŸ`ÖnqaSx¿áÄ«¶´¥$ÓÕå„á#áQàY1Ó½|Os‘ï¤Íw¿”Æ
-惒ÊáNšë¥jÚZÓ‡„—8@Ääܘêån zs€{Uêq€»;9Àˆýp2ßh0á–ÂCP˜XÃg‰±ˆ€âLî€×Û Èwƒã´‚ðYÝ26iàÞ.‘ØO|)Úˆ8ñKD˜‰••@Åt"'%M_ñX¨Ù«9÷}WúL¾qŸ#ªWzû>_“:ºÏs±Ó÷9K^"áÐtÀ¼¿TF¹ ‘Ë¥é:$ã˜b¯¦m‹ì›ýpG'ßNìWšèäúÍÖ’žm/zèᢋÛYìÜå´dF+ö‰™Ú¡¾™ 8¢oX/dîpŠ³:áØ8Ò WÐBi:–Ž™ .Ó>÷7ŠCßfœÈ²‰œ#„‰¸§Ú¯ua‡H;B£x“kéƒÞqàõÁûxÁÏD‚…¶êÚ³IÙªJ¹’Ì Exêìc…±dÐż³@©ß•%±3Hqøñ….oÔ~½9»åη¨ks“ÓÛ;‚W%0þ5=ÿ}Ï ÷Âòÿ?]¾}¾‘Ž_§œòÕVx*åW1ùQž %ìoÿ{☻dèŠ(ò¦sˆ€\Sï…
-qÁÏî (Ô‘Nœý¿Ii»áendstream
+
+gYU-±ÙÖz§ õl¹¢_ೄR Þp þç}•;Z¦°öÁqt=‰éOØ,F¾Šõ²¯úËýØn°Õ6˜~Ãgý$ŒdûbìZ·ÆÅêl„=Ufh̹ YV€}l0±1‡¹³êk‰-ëjZµl/É©•±õ¤Ú÷•nœô "o/ŠŽeôCïPÞeŽð¢Èõ=)/KˆMa×ÿ³æp‹ ›Âû '^µ­ -%™®.'  7ˆÏŠ™îå{š‹|'m¾û¥4V0”TwÒ\/UÓÖš>$¼4Àq
endobj
-2382 0 obj <<
+2399 0 obj <<
/Type /Page
-/Contents 2383 0 R
-/Resources 2381 0 R
+/Contents 2400 0 R
+/Resources 2398 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2176 0 R
+/Parent 2308 0 R
>> endobj
-2384 0 obj <<
-/D [2382 0 R /XYZ 85.0394 794.5015 null]
+2401 0 obj <<
+/D [2399 0 R /XYZ 85.0394 794.5015 null]
>> endobj
794 0 obj <<
-/D [2382 0 R /XYZ 85.0394 662.3711 null]
+/D [2399 0 R /XYZ 85.0394 662.3711 null]
>> endobj
-2385 0 obj <<
-/D [2382 0 R /XYZ 85.0394 634.4781 null]
+2402 0 obj <<
+/D [2399 0 R /XYZ 85.0394 634.4781 null]
>> endobj
798 0 obj <<
-/D [2382 0 R /XYZ 85.0394 566.8617 null]
+/D [2399 0 R /XYZ 85.0394 566.8617 null]
>> endobj
-2386 0 obj <<
-/D [2382 0 R /XYZ 85.0394 536.3186 null]
+2403 0 obj <<
+/D [2399 0 R /XYZ 85.0394 536.3186 null]
>> endobj
802 0 obj <<
-/D [2382 0 R /XYZ 85.0394 411.7882 null]
+/D [2399 0 R /XYZ 85.0394 411.7882 null]
>> endobj
-2387 0 obj <<
-/D [2382 0 R /XYZ 85.0394 386.7645 null]
+2404 0 obj <<
+/D [2399 0 R /XYZ 85.0394 386.7645 null]
>> endobj
806 0 obj <<
-/D [2382 0 R /XYZ 85.0394 230.2565 null]
+/D [2399 0 R /XYZ 85.0394 230.2565 null]
>> endobj
-2388 0 obj <<
-/D [2382 0 R /XYZ 85.0394 203.9874 null]
+2405 0 obj <<
+/D [2399 0 R /XYZ 85.0394 203.9874 null]
>> endobj
-2381 0 obj <<
-/Font << /F37 1042 0 R /F14 980 0 R /F22 977 0 R /F21 954 0 R /F41 1238 0 R >>
+2398 0 obj <<
+/Font << /F38 1042 0 R /F14 980 0 R /F22 957 0 R /F21 954 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2391 0 obj <<
-/Length 2527
+2408 0 obj <<
+/Length 2524
/Filter /FlateDecode
>>
stream
-xÚ¥koÛ8ò{~…±8àd bùгßÒ6=d»Èöììí.Ú~-Ù*K^INâýõ7Ã!eÉ–®*r8œçI‹ ‡?1ñÄ2ž„±Ç|.üÉr{Ã'kXû×08®ErûXïoÞ~Rá$fq ƒÉãªG+b<ŠÄä1ýêÜ2MwÞß?|œºÒçNLŸsürÿ~v;›ªÐù“
-íp_¦Y]ô>œÓš,“’8Naväí,ö- €Á ˜Ýee–÷e²èv—mV¯’¥™¶'ë¡t²­²¤ÝeY°KFÄ!SxòU«êc]6«ë5»ºÊ´3¬3¦£–5`:û·+Eà€÷ ù¤Q€h‹@€±ˆ,%x^˜4
-¦Â¡[
-Žù¡FÏ -iÇ(Êš¤OU²Ôœ Vσ¢D;3 NŠ„® uú‚…Ö
-A! zBΪª zÊaÄwIl3H’ ²R7IK#«pˆ1‚¾‡JʤM.“]²È‹¼=Ð<QÊF,\zÔya`,öºu1ƒâA\R ²¾ræ»l™#d ^Eæ
-ÑPùB‡w䟛a
-‡P€bPœÆD”µO†mÇhJS¾N°ò,§&§Í“íÎ64·ý*íÕ„6¯Ð
-×–¡ià¸WéÀDÆ5·† ¶ûã]ÈÒï ÷†€u½Þf «)AôÑq@h+ÓÑA‚Ę$M˜EQ=w¬ˆ‘À"§‹:ÏVcy-ÍšeïŽ×lm¡±¾ÑSñt © S’Ü?ê› £qÒÖ;2éÄøO~¼S€Ã¨>ö?Ø·”+_½˜{ôBJ7È^ ‘ ôáí)
-)‚Mþ//€’ÅQ¿ÿ¹E·Oò<8Â
-ävXíÐð0Išõ›  ±ÕFM-‡ÇJ ðk¿ãètw«é¬÷˜Øšwg=§
-
-H¨ã
-e0ì>Ùr${ÑÁãÍðÍtÜŠzéÙüDñùîÏ¡9rP#nßÔ“±ÏOè(µ”GµMo£g~ÿÑèþ¾–Ž¥4úøôyyyI´î KyÅK¶˜¦C7c§±¯ë)ÆãØ£‘8hyøíÎ,|¦ïO ðOcŸõ;²2ˆm–h CnÚwš‡i3ÁE HèówUfÿ4ûðU‚ð`¡É×%Ý(í6O!•î‰%[VÏ¥!Ø£Ò``Û.X»+ÛÚÐÝUù‡ž×]DÎïa38îÈË­-Õ6oé+ª&i6‰ ‰yÊÄ_ì E\áê⃣òþR5âѼ«ÃÿïÄŽ/—T•Ñ¥^A†Ð±Ä06B¡„’ç‘Ôütv.û<-endstream
+xÚ¥koÛ8ò{~…±8àd bùгßÒ6=d»Èöììí.Ú~-Ù*K^INâýõ7Ã!eÉ–®*r8œçI‹ ‡?1ñÄ2ž„±Ç|.üÉr{Ã'kXû×08®ErûXïoÞ~RÑ$fq ƒÉãªG+b<ŠÄä1ýêÜ2MwÞß?|œºÒçNLŸsürÿ~v;›ªÐù“
+³#oßÐ`±oi
+àPb€Á®†ØÞŒÝÅ(Ú–EgK©
+b
+e0ì>Ùr${ÑÁãÍðÍtÜŠzéÙüDñùîÏ¡9rP#nßÔ“±ÏOè(µ”GµMo£g~ÿÑèþ¾–Ž¥4úøôyyyI´î KyÅK¶˜¦C7c§±¯ë)ÆãØ£‘8hyøíÎ,|¦ïO ðOcŸõ;²2ˆm–h CnÚwš‡i3ÁE HèówUfÿ4ûðU‚ð`¡É×%Ý(í6O!•î‰%[VÏ¥!Ø£Ò``Û.X»+ÛÚÐÝUù‡ž×]DÎïa38îÈË­-Õ6oé+ª&i6‰ ‰yÊÄ_ì E\áê⃣òþR5âѼ«ÃÿïÄŽ/—T•Ñ¥^A†Ð±Ä06B¡„
+Î#©ùéì\öÿ¾J-©endstream
endobj
-2390 0 obj <<
+2407 0 obj <<
/Type /Page
-/Contents 2391 0 R
-/Resources 2389 0 R
+/Contents 2408 0 R
+/Resources 2406 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2397 0 R
-/Annots [ 2394 0 R ]
+/Parent 2308 0 R
+/Annots [ 2411 0 R ]
>> endobj
-2394 0 obj <<
+2411 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
/Rect [344.9397 501.3201 406.1397 512.7122]
/Subtype /Link
/A << /S /GoTo /D (trusted-keys) >>
>> endobj
-2392 0 obj <<
-/D [2390 0 R /XYZ 56.6929 794.5015 null]
+2409 0 obj <<
+/D [2407 0 R /XYZ 56.6929 794.5015 null]
>> endobj
810 0 obj <<
-/D [2390 0 R /XYZ 56.6929 609.3932 null]
+/D [2407 0 R /XYZ 56.6929 609.3932 null]
>> endobj
-2393 0 obj <<
-/D [2390 0 R /XYZ 56.6929 583.208 null]
+2410 0 obj <<
+/D [2407 0 R /XYZ 56.6929 583.208 null]
>> endobj
814 0 obj <<
-/D [2390 0 R /XYZ 56.6929 484.1849 null]
+/D [2407 0 R /XYZ 56.6929 484.1849 null]
>> endobj
-2395 0 obj <<
-/D [2390 0 R /XYZ 56.6929 454.463 null]
+2412 0 obj <<
+/D [2407 0 R /XYZ 56.6929 454.463 null]
>> endobj
818 0 obj <<
-/D [2390 0 R /XYZ 56.6929 405.4622 null]
+/D [2407 0 R /XYZ 56.6929 405.4622 null]
>> endobj
-2396 0 obj <<
-/D [2390 0 R /XYZ 56.6929 378.8348 null]
+2413 0 obj <<
+/D [2407 0 R /XYZ 56.6929 378.8348 null]
>> endobj
-2389 0 obj <<
-/Font << /F37 1042 0 R /F41 1238 0 R /F14 980 0 R /F22 977 0 R /F21 954 0 R >>
+2406 0 obj <<
+/Font << /F38 1042 0 R /F42 1238 0 R /F14 980 0 R /F22 957 0 R /F21 954 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2400 0 obj <<
-/Length 2458
+2416 0 obj <<
+/Length 2455
/Filter /FlateDecode
>>
stream
-xÚÍZ[oÛ:~ϯðÛq€c–w‰yKÛì"»9Ù&vÑöA±åD¨,¹’œË¿ß!‡TD[¶Hv±(ZÓähøif8ó k6¡ð‡MRE¨0r’Iej2_ÐÉ=¬ýõ„y™Yš ¥>Þž|ø‹H&†Íõäv9Еš¦lr»ø6=¿¾¾¸ú|ùÏÓWtzNNgŠÒ0ûéâætÆdb8¬H»¦éôãåÕg”6øñùê»üøåüË©H¦ÿ‰›¯×׺‰ÛÓ·œ\Üö ‡/ƨ°ˆ|ûA' x¿?N(&U“'øB 3†OV'R ¢¤a¦<¹9ùG¯p°ê3”T)Q\êÉ „ÁNlÜœ”Pæ™%’™jÙ›“³1s)kÎY‹o¾¨WYQee·ýâLJ’JÀ0Ô~ìÕ91išŽ¿ø¬×x08’¤B¨q›7y³ƒ2Ñà–„½#Ê ñÊÄj”‰Qf‹E“·í6LÎ1JšæŽC{©‘­ù`kÎRb„[Zçóbù~fšÁ‡¤`´uÖd]Ž“Í)K§ù|Ó´Å£ŸòVu»“h[\\Ö º‡Üë³{|§”Ïqá;çCÈŽàà šL/žgöýÁ”p843ÆàÅG­Öe~¢Œöa˜?»Y2¯WgœRv¶¸KÏÎrç<ú ×Æ)ð@î?C©ý'£—:gàÁD´íÛÂÌ+<‘1MeiŒqO”A¢ LÓô°qz©‘­‡QÆ SñÖzìòú;UôQ~xÔ0`8GLÔKüÄ
+xÚÍZ[oÛ:~ϯðÛq€c–w‰yKÛì"»9Ù&vÑöA±åD¨,¹’œË¿ß!‡TD[¶Hv±(ZÓähøif8ó k6¡ð‡MRE¨0r’Iej2_ÐÉ=¬ýõ„y™Yš ¥>Þž|ø‹H'†Íõäv9Еš¦lr»ø6=¿¾¾¸ú|ùÏÓWtzNNgŠÒ0ûéâætÆdb8¬H»¦éôãåÕg”6øñùê»üøåüË©H¦ÿ‰›¯×׺‰ÛÓ·œ\Üö ‡/ƨ°ˆ|ûA' x¿?N(&U“'øB 3†OV'R ¢¤a¦<¹9ùG¯p°ê3”T)Q\êÉ „ÁNlÜœ”Pæ™%’™jÙ›“³1s)kÎY‹o¾¨WYQee·ýâLJ’JÀ0Ô~ìÕ91išŽ¿ø¬×x08’¤B¨q›7y³ƒ2Ñà–„½#Ê ñÊÄj”‰Qf‹E“·í6LÎ1JšæŽC{©‘­ù`kÎRb„[Zçóbù~fšÁ‡¤`´uÖd]Ž“Í)K§ù|Ó´Å£ŸòVu»“h[\\Ö º‡Üë³{|§”Ïqá;çCÈŽàà šL/žgöýÁ”p843ÆàÅG­Öe~¢Œöa˜?»Y2¯WgœRv¶¸KÏÎrç<ú ×Æ)ð@î?C©ý'£—:gàÁD´íÛÂÌ+<‘1MeiŒqO”A¢ LÓô°qz©‘­‡QÆ SñÖzìòú;UôQ~xÔ0`8GLÔKüÄ
‡P¡‹¾¶Ù}ÈœC¡‰¿…d:žÁ8gD =QüL¾=}³Â‘RU˜Œé· é˧‰{‡ƒ/_vpJ©Ìû
- 7‚$B¦òîe{ÈEµÞì&!ç“wÛ+< VHM4$ì¬QWŠ¹o%š‡€2NâÏuWÔUÈ­.Œ-¹vι߬ ¿¶gû¬Œ¤F¡¦C©ý ¶—RÓ=…˜[ú,U´ÿÛ*qÐx,ãˆ{„v_){ Ãåa3õR#[Gõ@ H IŠ·¶9Kj(ÅGqý• f=XðNïÔ_©0ÁL s¡þÂðµþÚ úúë´õ(ŸqY`è¹tÁÄBò$‰aUûÐnÖëºéòE8g¡ª>0\²Á™Ùèuy|OŒÊÔ@3æpŒ¥öÇh/åbtoºbÔÀù‚`j}[|G€2Æ ‰Ž‘ÚŒµƒQpB5OÛ§—Ù7&+ ¡R²xß×ndÈHÀ^8aQ3DoËÜmÏyòe¶)½ÙC$ôõ{ù ¤<Hçé±PH… e_t´0Fm®ÐѶoì¼Æ#m_¡ êÆ _KAœKbh*§—Ù9ŽNÒÔ¤ñΞ5z"6pø6‰mãà.j§Zø˜È³Ð”EåÅæPÆ`‹­¶£§¬Õ}¹‡;{Ͼ-uÌTFl,ŽË p ÅÜûôôDMë³[=; ¨ò.@UKžŸŸƒš1ž.4I5³'P‘$õi‰ºˆ‰z“ùi»ýT½¿üꚬj³¹MÞte¹ô8%¿td6í/œ9îÃ|Ÿá†è¾~¥¿/ÀlÎC±I$v ,°>]7E…þcá\³àý5x7G±§¢{ÀµUQ«¬Ä/kdÐs(9àlçTÕ#^Ôy[ýæ¿À«{ˆã|ÜòuŽ­v7ðm„]3s£§E‡ËmW¯[zÂÏ·
-¤px—í¾¾ã bzéQ×Nñˆk¡!µíïÛŒbÓeÑùbq¥‘Gåþ`…¸Þ=·,M‰N(
-É)´ ½ n»v—?dEÈ€Ò‰£~v›.û™±)8±sY©F)á ¨
+ 7‚$B¦òîe{ÈEµÞì&!ç“wÛ+< VHM4$ì¬QWŠ¹o%š‡€2NâÏuWÔUÈ­.Œ-¹vι߬ ¿¶gû¬Œ¤F¡¦C©ý ¶—RÓ=…˜[ú,U´ÿÛ*qÐx,ãˆ{„v_){ Ãåa3õR#[Gõ@ HD²µµÍYRC)~”8Šë¯L0ëÁ‚'pz§þJ= € fZ˜ õ†¯õ×nÐ×_÷ ­¿@ùŒËª
+ ÎÌF¯Ëã{bT¦
+œ1‡ct(µ?F{)£{Ó£ÎÛPëÛâ3h<”1N˜HtŒÔf¬Œ‚ªyzØ>½ÔȾ1YI•’Åû¾v#CFö ‹jœ!úx#Xæn{Γ/³MéÍ"¡è<¨ßË!åA:O…Â@ê@()û¢£u€1js…Ž¶}c¿à5Áhû
+U7ùZ
+â\šCSyØ8½ÔÈÎqp’¦&wö¬Ñ±Ã·Ilw
+˜™=-:\n»zÝâÐ3~¾çêjîWÓ÷9v,ìðí^f–¨jµµClJž@ÕÎa±A}Å)˜ñ· |¨z™7 ˜m$ ñ¾‡"³`ª²p]LÙ
+ÿéêüïø%DLùVJØ„œu8zª7åep×_›¢'°¾Ü4«öøÂGL‚i‚ÒW ÿƒÃ»<€lŸðõ ÓKºvŠG\ ©E°hߦ›®(‹ÎW+@‰Û(<ú(÷+Äõî¹eiJtB9
+ݽàÊÈ‚•µ%ØK”t
+¹°ºº¹øôõËÅçskž[û§Ðk¸Є‚‘W}?
+Ïxbíí:Rk•–ìû)†PÄþ~b$kÃ_o±7ÿLãõÇ*2!"M÷üO ’aX
endobj
-2399 0 obj <<
+2415 0 obj <<
/Type /Page
-/Contents 2400 0 R
-/Resources 2398 0 R
+/Contents 2416 0 R
+/Resources 2414 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2397 0 R
+/Parent 2308 0 R
>> endobj
-2401 0 obj <<
-/D [2399 0 R /XYZ 85.0394 794.5015 null]
+2417 0 obj <<
+/D [2415 0 R /XYZ 85.0394 794.5015 null]
>> endobj
822 0 obj <<
-/D [2399 0 R /XYZ 85.0394 650.8348 null]
+/D [2415 0 R /XYZ 85.0394 650.8348 null]
>> endobj
-2402 0 obj <<
-/D [2399 0 R /XYZ 85.0394 625.7398 null]
+2418 0 obj <<
+/D [2415 0 R /XYZ 85.0394 625.7398 null]
>> endobj
826 0 obj <<
-/D [2399 0 R /XYZ 85.0394 378.0874 null]
+/D [2415 0 R /XYZ 85.0394 378.0874 null]
>> endobj
-2403 0 obj <<
-/D [2399 0 R /XYZ 85.0394 350.2627 null]
+2419 0 obj <<
+/D [2415 0 R /XYZ 85.0394 350.2627 null]
>> endobj
830 0 obj <<
-/D [2399 0 R /XYZ 85.0394 153.7325 null]
+/D [2415 0 R /XYZ 85.0394 153.7325 null]
>> endobj
-2404 0 obj <<
-/D [2399 0 R /XYZ 85.0394 128.6375 null]
+2420 0 obj <<
+/D [2415 0 R /XYZ 85.0394 128.6375 null]
>> endobj
-2398 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F41 1238 0 R >>
+2414 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2407 0 obj <<
-/Length 2393
+2423 0 obj <<
+/Length 2392
/Filter /FlateDecode
>>
stream
-xÚÅY_sÛ8ϧðtîAž]sùWsOé5·“Ý6—xgî¦ÛÅV]m˵”¦î§?€ eÊ–Îv(Aø€ÅˆÃ12)K­´£Ìjf¸0£ÙòŒ`îç3áy&is½žžýôw•,³©LGÓûHVÎxž‹Ñtþ>¹`šAO^_½}3žHÃK7ooiðÛÕ뛋›±Ê’áö÷ëëwŽ0O„άL.®¯/ß¾¹ú'1\ LÎõo—·ãÓ_Î.§ÒñÆW¨ñ§³÷øhûûåŒ3es3z†΄µr´<ÓF1£•
-”ÅÙíÙ?:ѬûtÐP‚3©R9`))‡,e,K•TÎR¿7ÅCy>ž(Á“¦X®å䡨h¿uÓ®Še‰»Y"’ÅG¥™ÍyÚÙ;eÌÆy'çi=/Ú » ‘M…S4žoAx5£b¦ñlQ•«–ÆëMý°)–^ÙWA›¡\á©NŠÙ¬\· ¾(·*КjõàV…q·ŒgõrY¬æž·ñzs“EµòÜÅf,òäái Êýˆ¤,iÊÕ<|¶"1±|÷Aùé©l¼r˲A{ÓK[ã®pB0kŒtûhaZ©4)žÚÇzSµE[}ö¤¦Ü|.7ãL'°¾2Yâ”w3õsCÃN
-ùÔi߽3¬XÂu…xìœxyiu¿ï´û Îî‚£é¾1vâž«Ù㞬ØýûeTDP~µÇãA@6¯sõB<D\'â!p¹xøJ«còÊã~ú @™eö´×€
-=GƒjÁ‘žÓ`§y½„´ÏŸV‡;äf‘9}¢Øƒ"Ÿ26Ç ¨rÅR®ÒÓŒ¹Ž°ãBåW`’CØ+¹W€‰o(À΀3+2qz×À.úg`XŽÖÛÆ-Þ(AÐn×{‡»r½.7…OQ0£¸¬¨Äå#˜ÅUŒÄMø­vs˧ !V£ îhL(£˜0ù ÙdÌuâH—;Ò¥o?ÕàPÀʜԤãP¥Ÿj(ØSÓ×¥;%C“¨‘'Õô¼ó3¤÷K È.<Óv]ÍŠ½”_
-j[á ëÉϾh’Y²¨¡ò«?ú—ê£çE›Ì€ÈWL+¸½zØ;þF6¼¹ÙùÒÍ› ¬¦øç…°c­GÈ\™Jõ7ÝÁZÀ-l¾…¡pqÇeÑwdùaøbïBïš¹Òõì²^ u»¿Ám¤2ðAiS&”²Î"o£FŒIáÎuU3J xõ«À¶m*“Ë}Ë€LžÉlW ìÖ:_} @S,ìS4v{ÝÙÀ~ºZÊÑ›v4Š6ObÉnS);9.X?ã€"¾ïãZl<wy'fƒm5+Çp{c{MdIéqY°ƒÏzCuÉÄÓ—ø¥ƒ¤:ojÀÃÒäŠjh–
-çˆzcÅâ¯èŸÚ;5ПVór3ªÈ[j2¤
-üúŽÔw%[ßõ¬!G¡¦©‚ªl<mU¥ïȺ;˜¢©ž½X¯7õÚÓõQ2Eòy,MâàYCãÖ¬“¯hÀ:¬ìoCÝ•Ójœ¾Íò
-¿êzD»Êó˜EóÿžE)õùSFý’-ëÏe0%•T‘-›ÿµ1³ÿ¯1_Í- ä+j°=ÄGV¿û7Ï”aë%?VËÌ
-m&”>Ì}ýÏ£Úÿº¥}iendstream
+xÚÅY_sÛ8ϧðtîAž]sùWsOé5·“ݶ×xgî¦ÛÅV]mɵ”¦î§?€ eÊ‘Îv(Aø€Å„Ã11)K­´“Ìjf¸0“ÅúŒOî`îç3áyfis½œŸýôw•O,³©L'óÛHVÎxž‹É|ù>¹`šMAO^^½~5IÃKW¯¯iðÛÕËwï¦*KþE„ëßß¾}ãóéLèÌÊäâíÛËׯ®þI (“ó@ýÛåõôÃü—³Ëy¯t¼1Ájüéìý>YÂþ~9ãLÙÜLá…3a­œ¬Ï´QÌh¥euv}ö^`4ë>5”àLªTŽXJÊ1KËR%•³ÔïmqWžOgJð¤-Ö›U9»+*Úï}Óvu±.q— KD²ød¦4³9O{{§Ì€Ù8ïå<l–Ed$²­pŠÆ˯ôBÌ4^¬ª²îh¼Ù6wÛbíUC¤a°ÚÈ~ê¤X,ÊM×â‹r«­­ê;·*Œû…`¼hÖë¢^zÞÖ ÌÍVUí¹‹íTäÉÝÔûIYÒ–õ2|V“˜X¾û üôP¶^¹uÙ¢½é¥kpW¸!˜5Fº}t÷0­TšÝ}³­º¢«>{R[n?—Ûi¦X_™,qÊ»™ûæ±¥a/€Vo7MÝzÊ­#5ëƽX4yrUÓD,[>6îÛeëVÎáãʯž…†'\ýÁ¹,—ãŽï¶n½½žž¯–Œ pÇÈœ­f89Ó¹5Ç|8v§÷ͦ«Àèõnx±ôº ­(R͸RÂ/ùï¥$ËÒL{†e¹*»ä /YJ/ £i¤ºHS–sn‚î9oH7ú€|‘&rµöü Ê– ‘NRž1cryˆis(ˆPè¹P©™VtÁÃÅóø
+Þ
+àf<° eoDë.í¦F ÂB½“âB Ë'´›ráÓ¼±f+9¹NJ"
+öÔ uéÏEÉÐä€jäI =oü é½Ä2‚ Ï´ÛT‹bE/å—‚ÚVø‚ÇzDò£/šd–¬¨üšþ¥úèyÑ&3 òÓ
+n¯öÎç¿‘ ß½ÛûÒ»WX%ÌñÏ
+aÇZ¹2•êoºƒµ€[Ø=~ CáâÜ=MË¢ï8ÈòÃðÅÁ…Þ7s¥ëÙeƒ@ëw;ÛHeàƒÒ¦L(eE^G“Âëª
+f” @ðêWmÛT&—‡–™<“Ù®@Ø­u¾4ù4€¦XØ;¦hìöº·#ütµ–“W ìhm*žÅ’ݦÒAç"gÀëgPÄ÷}\‹ç.ïÄl°«ånol¯‰,)=. vcðÙl©.™yú¿t0€TçÍ@À
+m&Tþ4÷õ?Žhÿé¯}rendstream
endobj
-2406 0 obj <<
+2422 0 obj <<
/Type /Page
-/Contents 2407 0 R
-/Resources 2405 0 R
+/Contents 2423 0 R
+/Resources 2421 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2397 0 R
+/Parent 2426 0 R
>> endobj
-2408 0 obj <<
-/D [2406 0 R /XYZ 56.6929 794.5015 null]
+2424 0 obj <<
+/D [2422 0 R /XYZ 56.6929 794.5015 null]
>> endobj
834 0 obj <<
-/D [2406 0 R /XYZ 56.6929 740.3318 null]
+/D [2422 0 R /XYZ 56.6929 740.3318 null]
>> endobj
-2409 0 obj <<
-/D [2406 0 R /XYZ 56.6929 714.7319 null]
+2425 0 obj <<
+/D [2422 0 R /XYZ 56.6929 714.7319 null]
>> endobj
-2405 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F14 980 0 R /F60 1366 0 R /F41 1238 0 R >>
+2421 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F14 980 0 R /F61 1366 0 R /F42 1238 0 R >>
/XObject << /Im2 1355 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2412 0 obj <<
-/Length 1890
+2429 0 obj <<
+/Length 1891
/Filter /FlateDecode
>>
stream
-xÚ­ÉnÛ8ôî¯ðQj–›¶™SÚ¦ƒE›IR`i²DÇBµ¸’'óõóÈGÊ’­$t’ƒžÉÇ·o$›SøgóÈ'TÄrÆ’ø”ùó´œÑù=ìý1cgé–C¬w7³·E8Ið`~³Њ"6¿Én½³ËËó/.þZ,¹O½3²Xú”ºÕ÷ç׋%“aÌaGê½€zï.¾|@ì?¾\#ðùâÝÕÙÕB„Þ߸pýíòò«Y¸YÜÝ|šßôBcTh‰Înïè<ý>Í(qäÏ÷ðƒÇ|^Τ/ˆ/…p+ÅìzögOp°kŽNÊñ#NXŠó)Kù1 ÆRÍ‚Ež*ëÕ¢vIQ pueWÖu〚dOURæ)QI¹-Ië7wm^Ý#Øm÷ùƒªü¡žŒ1h“`l /… Œ9çS€(8­j·M½R¿-–‚Q/«Ë$¯Þ‚ –E«šeåK7*ýá~ä–q§šÒ*R¯­fß# i(­<|,—$–Ly.:àøH¾E8Ñ Üíž&­¿(ŸEêj‡¥ìÂÆ(¿†Pþ•oDn¥6ɃÝHë=—vÅÖ
-›Ã¨ðP*­0¨©cŒÄ¾ÏbZ}Kïf“ë3Œ{øe@.-v™ÊÜ/ÜEÉ`5‡ÃC/˜x@xkd«ï›¤´T)4Ö¦Þ#dIõ¸­KµÈWMÒ<áFšT¬îîÚc¹’)ý …—h¥"éô ßÛm‘§I—×é…$@úз6¹wѦcÏh²²Ñv»Ìîôp
-Ÿ8k…“,C#µ­Ó-¯¶»îXnÁ Êþ?¹{Š¯È-xL"Åc¹¿SÊ ug|ù*IƾóedP¾nµ›Û“*M õ¡Ø:Xh<Ý},Îr€„’±‰’ê4Óev̪²”òe~ç”ßÐqL$÷ÇüšEäíª£¢ç*ðwÎe¦V»{ àRYgŠ` îónãä®H›!|ÿûÜu‡lWnRP¿žŽZFÞá×Ö(} %Ϲz¡œ±—ý0ÄzÞ=–ñÄÉ'‰âà–i‚åȉÂðˆ%TMÔ9i­ÉÀ:«ºÍ»§qªÁE¶SUuS&Ö¬Em{h é…¨µžºéýcŠ¡œOÚ­Js ®Â•»¢ËM-6žÍÔ³¦÷9aBðWL?ÀzÁô˘þ¥
-È8%aàÙÿR%é)¾"+ã‚„þ‘¬º
-`4‰i_õÞÛ‡XxŸª|.ò9ºõ €2°ÅÖZUe¦„¦óÁ–­Å°ós§šÜ¤,›á&èZ…û‡«.¬c±Ö¤ëÒîŽæBËMdghR½‹é7M»*s“T?öj‡þ~4¥IQàÄ{̲þɺç0%ýÜκÛv´f'Ìì$28z¯ñ=PW…O È†ýCGhŸ9>» ¯™£ÕZ5ªJQá—_'δ·1ýµY# 5y
-jm¥ -·Çª¿k7„ÂA­k™T»¤°ZÈ[xC[úê1UÛ 8tIMw%D­EÚ¨%\±nÝŸšH˜p°™µ}k²Iò
+xÚ­ÉrÛ6ô®¯Ð‘š‰l\Оœ&í¸ÓI\Çi'ñ"!‹.*Iyé×÷ H‰¶;“Ú>oß
+‰ÖRíŠ%®š{Ý¡viY"p}íV¶Më†äOuZÑiµ/5Éš
+7]Qß!Øï4wŽ®ü¦ŸVŒ±€“`l$]®… ŒyçS"(8­îöm³Ñ?¬Ö‚Ñ oª´¨ß‚ ŽE§Û{íäËv:ûæŽq¯ÛÊ)Òlf?ÿ„€¤±tòð©<\%™´ò\öÀ;
+‘|‡pj>¸»=CÚ|Q>‡Ô7K»…P~¡ü"z*Þ„ÜFïÒ{·‘5-z.ëË'<l¶‡Qá±TFaPÓ(ÆQaÈ­bF}©dp³+ÌÆü2 —•‡\çþî¢d°€šÃŠåal< ¼·²5wmZ9ªÖk×< ä€Iý¸oZGµ,6mÚ>áF–Öl4îºS¹Ò9ý …×h¥2íÍ ßû}Ydi_45ÅD H sè.½óÑfbÏj²qÑöeßzèþØÀ&äö}Yg. Sˆ™ÓÁÈP‰eysÿ—*Á‰J’d¾F¬Šë1ÉóÀa—Š9…Ó<G#u×­¨÷‡þTnÁ#’Êþ?¹Š¯È-¸" KÔTòRßZB¾JÇ*ô¾L,ʧ½qswV¥)¡!›È UóÝÇá¬GH(›)©É0]ç§ü *K)_æçqÎù-¡‘<œòkWIp¨OŠž¯À_9—¹Þî €KU“k‚úPô; ðEÒÚ á³ø(|wÈÕ! õëé¤e=~]ÒÐ:òœ wÊ{Ùc¬ç1`YOÜŸyBDE¯°ôH3,'¾HHÇ',¡j¢ÎiçLÖÙ4]Ñ?M{P.rªnÚ*uf-×C+HG(DóÔÍà[ à}ÒíuV˜dð®:”}ak±õl¤ž5}È ‚¿búÖ ¦÷XÖô/U@Æ)‰£pÊþ»*É@ñY$Od5¬}&e˜ˆ‰—mä‘føŽc…E0Æ))¦Œ­ç¶¶É©Àö8NƒË+÷ûX–qÃ6Zø¦¸ïRëÐv…
+`ç+ ©18 b
+‰ù<Û¡#ÓD¾lœk†ó$“'I¢’)g“Ty,ì}5¨©{ˆ/{=1;¹,º!‘ð=Æ!æÒ?M­]"9‚‚6äá»q¼†4ÊM€%Ið°3÷K»*z;{Ús;'RקõÚM.à 7Úi$¦–¢-è‘s¾}Ž\ùLÎBzÆ0õlR™õ²¨¶œÈzÞb< G¤ÃÍ?æbWº£ÞDö—0À8x®©;jÆ sE\Oó ›¤»7+6 .-I5¤Ö-öB9Ì$rÄU \%ô¹®Çµö'4.¤{ýˆKGt4ƒºÆ¯¸+¾Œ£qɸýP—Å7÷Ûõæ™ba¤ß5VÅ08ÜŒ¥¨7lXƒÀ×ì=<<¬Æwg³lBÌÄà'—9îh‘ Ô¡\×ýÑC°
+`5Qt¨‡f ïíc,¼ÏU>ùÝú@¹b k®sÛb[ŽùhËÕbØùû Û¦,Ûá6è:ûÇ«.¬c±6¤›Êí[ŽöBËmdçhR³‹é7M‡:÷“Ô0ö‡þx2eiYâÄwÌóáɹç8%[ýüζßwŒfgÌÜ$28oñ=FPWEH ÈÆÃCGìž9~ó^;Gë­nu¡Â/¿N\o ,bæë²F@j‹4ÚJ82 ZáŽÕ ~·~…ƒF×*­ié´žwð†þvôõc¦÷=ð2˜’š*ˆZ‡´Ó):KøbÝù!µ‘0ã`?2k÷Öä’ä‚e¼ {?eç*~ébý¸/ÓÚ^ù;“loN\ìŸ.Nž&¼ì[yî½¼jéfÂà»ß/¢2&"Iž™5•ÐóB2¡NE^ Ïeÿ@îHÒendstream
endobj
-2411 0 obj <<
+2428 0 obj <<
/Type /Page
-/Contents 2412 0 R
-/Resources 2410 0 R
+/Contents 2429 0 R
+/Resources 2427 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2397 0 R
+/Parent 2426 0 R
>> endobj
-2413 0 obj <<
-/D [2411 0 R /XYZ 85.0394 794.5015 null]
+2430 0 obj <<
+/D [2428 0 R /XYZ 85.0394 794.5015 null]
>> endobj
838 0 obj <<
-/D [2411 0 R /XYZ 85.0394 741.6375 null]
+/D [2428 0 R /XYZ 85.0394 741.6375 null]
>> endobj
-2414 0 obj <<
-/D [2411 0 R /XYZ 85.0394 716.9352 null]
+2431 0 obj <<
+/D [2428 0 R /XYZ 85.0394 716.9352 null]
>> endobj
842 0 obj <<
-/D [2411 0 R /XYZ 85.0394 420.5643 null]
+/D [2428 0 R /XYZ 85.0394 420.5643 null]
>> endobj
-2415 0 obj <<
-/D [2411 0 R /XYZ 85.0394 393.2598 null]
+2432 0 obj <<
+/D [2428 0 R /XYZ 85.0394 393.2598 null]
>> endobj
-2410 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R >>
+2427 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2418 0 obj <<
+2435 0 obj <<
/Length 69
/Filter /FlateDecode
>>
stream
xÚ3T0
endobj
-2417 0 obj <<
+2434 0 obj <<
/Type /Page
-/Contents 2418 0 R
-/Resources 2416 0 R
+/Contents 2435 0 R
+/Resources 2433 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2397 0 R
+/Parent 2426 0 R
>> endobj
-2419 0 obj <<
-/D [2417 0 R /XYZ 56.6929 794.5015 null]
+2436 0 obj <<
+/D [2434 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-2416 0 obj <<
+2433 0 obj <<
/ProcSet [ /PDF ]
>> endobj
-2422 0 obj <<
-/Length 2012
+2439 0 obj <<
+/Length 2026
/Filter /FlateDecode
>>
stream
-xÚµÛŽÛ¸õ=_a }ð
-›™ÓD‰Œ¨Œ§‹dLäíý«×ålÁ)Ñš«Åýfà¥Ó”Ð|q¿þº|Ó¶¦^—?o®èòíÍÃýoxK’4K™»ECJ´PÚßøTÔ‡¢Bü¶Ø;Üa’©y¸£ÑTeþÎ[ÂnF)]®Ë­Ãw"%Bkã®Ø›@‡/r’k®ÁˆÈ@f‡å.{¾ß8Oqõþî .ª¦ù~hq}è˪ì'ÁÉ•Š‚IFxÆP™/Ǻiméuxõá~°©¦„ °¨dš0•‹9»3“+yÁ)% =sìN$¼O$i]2` zj°Ö׿XÓ=™î!l“GÔI‰ FS¢r­€¯»\¬×±Á+^ x& xÍÕ M¡H¦U$¹ªŠY‚<'Y–æç7W nÊÊԃ˧B¦$ã4=§ùýÿ@s?¬Úê‰pQ¯²l‘ ñ·Û¦ëÿtÉÙ9‹Wž 2$gTœÓë¯Òëíÿ@ïçUz.œæèIÂõ ϯ’ûºÛ«_œÖ¿~7ÇÊ9%2§úœ´VúÁWD
-Ü~£T˜ŸåceÜ7M…'@+’íM‡”¶@¼Þ"&ö"8÷9íAX¾-¹IM—·=B½“Ë"¶»æ:ê2‰gìk€*ˆX¯aÁ]µmU¸ßµ}vZôáš—5ààº?tµYãñUÙŸC-µpƵh6w|",#}ع
-'…?n6ø[öá4F  ×ò8ÈÀ
-Åù@„zï¡£%F¥h»lçˆùÆ]ö¿‡¾=ô.~]~ßt/Ç¡6,‹âï®x2ኛ
-üjs¨W.'ŠjàÞ¬g .\5Q*ý}ƒK’K{‰ÕY’,Ï蘓4M1ãßTý®9lw3¬¤‚‰Sˆk®åP)ŽK\!ø²v9^UG·óæ^#ü¹ìw[5û=X?©ÊÚà¦Äö°7uoëç"vQÙ±v… Ü?ý*Ü7ë@ÊûÙýBZc©ñÐJ(•Ó°JfL±Æâ!G…ú€‡H¶5┢nwªT¼2¾¶èå„=Bîmpi twÄM€>€©I<Õ±IÈG“»Þ:ÅìP0g2ºí\YtøZ.Ÿw¦Æ•+'/›|šÆ´ ŽLvóQ¥2ç
-a
-—Š<$ —Ô«ïî‹Ðª´–NËz&™R„q'Ôצ_½†TS=ÅR–ÁÉq1÷USofäžÚ¡p߆j^Wlñ}lå×~Øv¹o­ Þz·wws¨×s&e‡Ç´T×L*Å€Lê%šF  èìQø gU³Šïÿt÷`$Š§4ÓûÖž¡ê<…&
-©Š%ðÏÿþøùÓ‡ÿ¼&@°[ÍÌÑ™f£¤Ðby¿‹ºb#ëŸ 10b
-=—ç’HÆÏš®¯mç©T´-4‰u,­Î^§ÃË…tL)Dëlm½÷S4ôåÛ;üÅÑï>â/~TñïW8-B¨UÑâ& 0°ê¯’뛉UæÉTçP ì™€éeš-?”8I:8Ž§ÇÌ·x°©,‹¾‹_ &îM¤‰Ýü{:PüóaZLV—Z?“Öz>&‚ÀÞ³9žf \¸þ<ŒD3‡æïU½<”°ª†ÊU\m`<Gœ ÃSÖÎüAŒ&Œ&Aá Èí],!p2¼`Ú…Y#UÓaÁ!¾ûñ!ø&œ)]›i‡p¶1²›6¾|˜¸erþµáô€¸Ï³ŸJrÂÁïÎc›Á [°k@r*0‘ž³>c¿ä÷_¾ Ú«endstream
+xÚµÛŽÛ¸õ=_a }Ð
+)£`‚¦)*óåØ´­¼¯>Ü6U¡,*¨"T|ÎîädR\pŠÎhO» ï1Ö0ºdÀôT`­¯±fÿdöa›>¢NÀõD‚f9‘…’À×].W«½±Á+^ ¸œ¼ær†&—D+I.ër– +ˆÖyqNp}•àºªM3¸|*dN4Ëòsšßÿ4wꛡžrõRëE:ÄÜîÚ}ÿ§K¶Ðç,~\û‚ÈŒ“‚füœ^•^ìþzOÃêç eHá\òq`ÍQ„)ý"ŽW%ýºÝ•Ë_œ~ýnŽ3¤‹Œˆâ¥ßă/!)ù4Õlê ¯©Š˜Žt\;»Äµç¸ùq0ûcÛõ„‡Ke€çŒˆœþ‘20&q¹ XÓ2n/‹&QÏÿˆh#¿#ZÄšŠ¶©ÛDzN'VL),Íz¥¿ÿðåÝ?nÿ~ûùnÀžôæ’‘žúÀËfA¡Ÿð,â·Lf«vWV ô‘%U³n÷»²¯ZàE²ÙßP´Ù* HÏJÜ~Ë2n~VµAp߶5ž
+ì\±Ý5ÚQ—Idc‹TNAÄf æ:ªíêòÀýÖ ¸lì3°‹Ð²×¼¬×ýaߘ¯Q•Ý1ÔÂP g\‹fsÇ'òÀ2Ò‡ €Ê¬@e »O­ícï«åmÅ…³«šê†&¶ß—}ë…ðÁš™ @BCó¹0q Hß"Á•<€_í¶mè*;‰Ñá1œî,=šeé¤ðÇí«>œÆ(Á™äJ~ V(Ïï"™÷:šg„ÁÔMBcÃÝ;b~šq—ýï¡ï½‹š%ŸÁ7û—“‹P–ÆEñw[>™pÅ ~µ>4K—e=ðo63箚H™ÿ¾Á)m„:ÍÑE!AÇ‚äyŽÿ¦î·ía³a% ïhί¹–A¥ 8.q9gIãr¼®nçͽBøsÕo¶lw;°~ZWÁ3L‰ÍagšÞ:×IÎE첶-bmK@¸,ûe ¹kW”÷³û…´ÆRã  ”ÐLLÃ~(!˜1å
+‹‡9êB"Ù>ÔˆSŠºÝ©R±ÚøÚ¢’7{„Ü[ãÒ@éý7m
+÷m¨æMpåÁ–Ñ×ÁV~í§m—ûÖšàý¡w{w·‡f5gRˆá]-ä5“
+>à“z †¦(:{~ÃYÝ.㧀-t÷`$ŠçYÁ§!ö/¬L£ê,…&
+§Eh µ .;Ü„Va(Ï9uN[.ÕæÉÔ¸ŒO¡‡Ê¡÷¨pt883_Qà½&µŽ®‹ß"&ÞM¤‰Ùø{9Pû‹aXL——:?ã“ÎZ>æÇÖ³>žF \¸Ï þ<Ä‹@+‡ÞïU½<“Њ†,U\m`<‡Ÿ ÃKÖÎüAŒ6L&AîëÇí]¬ p2<`Ø…Q#—ÓYÁ!¾ûñ!ô)]—é†h¶1°Û.>|”¸%Š‰a<þØpú@ÜgèÙ¯ %=áàè±Í`†w-Ø5 9¨ çì†Ú/ùý(–Ý endstream
endobj
-2421 0 obj <<
+2438 0 obj <<
/Type /Page
-/Contents 2422 0 R
-/Resources 2420 0 R
+/Contents 2439 0 R
+/Resources 2437 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2397 0 R
+/Parent 2426 0 R
>> endobj
-2423 0 obj <<
-/D [2421 0 R /XYZ 85.0394 794.5015 null]
+2440 0 obj <<
+/D [2438 0 R /XYZ 85.0394 794.5015 null]
>> endobj
846 0 obj <<
-/D [2421 0 R /XYZ 85.0394 769.5949 null]
+/D [2438 0 R /XYZ 85.0394 769.5949 null]
>> endobj
-2424 0 obj <<
-/D [2421 0 R /XYZ 85.0394 573.0107 null]
+2441 0 obj <<
+/D [2438 0 R /XYZ 85.0394 573.0107 null]
>> endobj
850 0 obj <<
-/D [2421 0 R /XYZ 85.0394 573.0107 null]
+/D [2438 0 R /XYZ 85.0394 573.0107 null]
>> endobj
-2425 0 obj <<
-/D [2421 0 R /XYZ 85.0394 538.4209 null]
+2442 0 obj <<
+/D [2438 0 R /XYZ 85.0394 538.4209 null]
>> endobj
-2426 0 obj <<
-/D [2421 0 R /XYZ 85.0394 504.6118 null]
+2443 0 obj <<
+/D [2438 0 R /XYZ 85.0394 504.6118 null]
>> endobj
-2427 0 obj <<
-/D [2421 0 R /XYZ 85.0394 432.7569 null]
+2444 0 obj <<
+/D [2438 0 R /XYZ 85.0394 432.7569 null]
>> endobj
-2428 0 obj <<
-/D [2421 0 R /XYZ 85.0394 303.3232 null]
+2445 0 obj <<
+/D [2438 0 R /XYZ 85.0394 303.3232 null]
>> endobj
-2420 0 obj <<
-/Font << /F21 954 0 R /F22 977 0 R /F41 1238 0 R /F53 1333 0 R >>
+2437 0 obj <<
+/Font << /F21 954 0 R /F22 957 0 R /F42 1238 0 R /F54 1333 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2431 0 obj <<
-/Length 3818
+2448 0 obj <<
+/Length 3702
/Filter /FlateDecode
>>
stream
-xÚÍZYoãF~÷¯0‡h€ÓÙdöÀz’ÉÄAâÌŽl‚$´DÛÄH¤"RãL~ýVuU7µìû²0`5«ïê:¾ªny.àOž§Y’ª8·…IR!ÓóÕöLœßCÝ›3Ém–¾ÑrÜêÕÍÙg_i{^$E¦²ó›»ÑXy"ò\žß¬^¼JdòF‹//ß¼Xª,jqñöíë«//„ïT@h Ä⻋«.¾%ÚÛ4{óúúů7ßœ½¾ ‹/X
-+ùíìç_ÅùÖýÍ™Ht‘§çð!Yê|{fR¤FkOÙœ]Ÿý; 8ªu]£ "Q:S(y.eR¤©š° -’L+íXp}ùÝÛo_Ó¾~¸†Máž §ñNœCu¢Uf]— jÝÜÕ«rCuó¡]•}Ý6ôÝÞñ8r4°$&nœu}™LÚÄh“r›MÛ¾ïhÈMý¾úœ:˜ñ¨K)MbRàÝRæÀÄ4 ¾ÌààþÕUûÕž>šr[Q V_Ef_¦Iam6êñºË|A³OÎ[&VÊì<Ëlb³Ôœ8j´·rÇcòˆ€†V85¯}6m¡’4ÍÍÓÓúFÇÓN6\Ø$Õ…N[#Ës`ÒpKÙ‚ù†¤vO¿—o©¦\¯‰9÷“?ÕןRû–h¿ªýÇRÊ(š.ŠÅ̓Ÿ}U6Ôö–û»o7÷sböš›¬Û¾¯ÖKäœ%ª(^P@ªU½EñÕÈEÛ³ðê¼p{DjÉß0_Æ”ñ|H¨¹ÉªÝ´Ír]mêm OG…YU,þóPqkÇlÑv»M í$¦zt0ÐZ©XI˜Klh8Ù^éÖyØVMÏ*ÊzTÒÏCÛõx4/cŠ
-&%•&û ŠÊli7*ž§(yf–
-p'\M ßm¸û©ñv6ȑᙦ¿»©Y]×ÝnS~DÆž@ )â.côÓ(aÜê4J­enѳIs‘d€ã““úFÇ“NN*O@ÙtÒº;É:§¨ã*ï®°šPWäÖsN‡ñ[ï:ü1·ï+n}Øf¶{^€j?ÍìQ«'˜í[9 ÈÀ1Êì§&˜=Ÿ4Îìñ¤5¨7Àk§……Dê¸%·WrL‡_¯"P¬¹91ú·CM…5QQÊb B™«Ÿ{IüûÝ\¸¾|Ã%ð?IÌÃY˜Á;ÏØZeI.ƒ&tW°U‚ß²áe(7õz¼¶˜YRˆ4›ZLœŠ5ý’¥.Š D}²ÐÏ.Ð_{@yг|]æ&—8 önWíÁÆo'( ¥ý°c“Õ²9*9ȺˆéQV5
-ý–
-0p&
-àž0œçnêïßÞ\~uýTÄ—¹†7Q+ ˆ;¥õ®ò6î*Sœuì*qј×Þ±Óz+¤‰}°b
-ò@öeÔ3¸… ÍED>ÁÓäYê—Šâ`Çë5ŽOûãCÁR!" ·‡®§inyæ’*¼È¯Ö.üŽÛ¦"IV9BM!§~7¥uʱΜû´#bSõíþ=UÔM’R®*®tá
-ÐA¡HÜÇ•©«üüsüï2vqÑpw(.‚16 }[~¤Â-¯§ÛAÄô Äï.¼ÁŠTQîvÁÜž˜n gü„8-'Š‚% „£&÷ ܲŽ BíaÆ?ŸÅqÅ1‰°“‚p‚?^Ý•
-ù\Ôš‡Q«=¸t¶æáoËØJ3µk®$Eó~¼$¤„03ÖõD #"ƒÛz$w}G„TøË¡ìŠÂ@ PL‘68*™gú(D0 4›*&u
-¤Î ç]½©<>[›äJØ‘±Í×Ã0¼“5ˆuû²~QJG„’~šÃ¬nÑ}:¿
-Áf¥hq¹ŽK<o¹ýŽ½ ,ÖéT ‚p¤H©Êƒiõ>‘©õöàÐQ`9^óªÝnËf½D.úm±Oâ,”LdNefƒ½ÛÆí1i~#†«l8¶Õ¶õá!ı÷1¬«ÛÃý=ì¯ ÂN©ƒù—CI8ÉÒÂ
-=UñdRðÿc‹›8tGº˜%oÇÙ³aã᜵•~©Ëþ.=÷¬ðážõÙK;äòlÈbXß
-J‚8 Z;s¥4«ó¡°ªj–h¿ZûK€àãS¾7Äa>eyýýÅé„ôcÙE¯ ÒýQÄ8Ê <CIè3`s!ÔŸ³¶Nx“·ü-®¾Ú¤s\ˆW>lmß°¬­ò攵@pÈÃÆÁÛ±µÖ#(ùðóî°¡ÏuË¿
-Ùԉ½‹hú˜k…žxý¯8¦ºY¢`%å~WFmoš¤ÆÚwÝ4ly¥·¼bÈ!C‘CŸVü$
-êÞÞ¼#Bhä’Ír¸}®V}ý¡ÚøwSä.  Èf˜óÎœçjºk<ë•'·GWüÐtô†Á·­PáX4ŸRSßÒk ãyуħkzµ‘ûÇ 8i–\¼£·“¼(8õ_G@S7XÑrw‡!ó4™+d»¡áÓbñî«/ÀQdô±­úJ-a•iá½~á–pyuC4;•=Ícyy—© iãúÄu—™toÖØÅ+÷R§ê÷aa›ò¶ÚtTF4 ›N¾B
-û”¦öî Ä”ã7W`l™
-†x»ë9u4ÃqÀ’ëûfr˜çTòbüð'ÇÌMOäÛ±§QNiij¦!—áN‡¶@Oæj–¨á ËìpØØÁh¹bk‹‚Õ—='P¸=2ûæúò rú%o2ˆ
-ÔȢ뾫6wD$Veƒ®r‚—¨œå ›;ñèYcÀ}g"ÂUôÿü zxîml¢ó\ÅQ( ð»€2/ÊYw?á§ÓÇkÿ/À(ÅWendstream
+xÚÍZYoãF~÷¯0‡h€Ó›ÍÎXO2™8HœÙ±ƒÍ"ÙZ¢-b$R#Rv&¿~«ºªyH-{û²0`5«ïê:¾ªny.àOž›,ÉœrçÖ¥‰Òœ/6gâüêÞœIn3æãV¯nξúNçç.q™ÊÎoîFcå‰Èsy~³ümö*‘É A̾½|ób®2#ÔìâíÛ×Wß^þ
+ßF@h Ä짋«_.~$ÚÛš½y}ýâ?7?œ½¾é3^°Wòáì·ÿˆó%¬û‡3‘h—›óGø‰tNoÎR£“j(ë³ë³öŽj}×(¤H”ÎT„JžK™8cÔ„Æ%™VÚ³àúò§·?¾¦}ýr ›Â=AO5â8Ö$ÒHç»\Pëîã¶Zkú¨ê‡fQtUSÓwsÇãÈÑ8À’D˜Xøq–Õ}d2i“T§†Û¬›æ}KC®«÷å×Ô!w˜K™&©ÞÍežX“Ù~ôy'÷¶Ü=”;ú¨‹MI%X~™~ngm6ëqýe>£ù''.+evže&QæÔQ›ù¨‘?žÔE44Âyyås:•“§OÎÚÍ9Ù¬³‰ÑÎNæ¬Ý9ðgŒRÖ1ËÔìè÷ò-ÕË%±¥å>pê§ú†C@j×íþÜ}|!¥œ’içf7«0û¢¨©í-÷÷ß~î‡ôÄì7Y6]W.çÈ68F8ÏT lE@Ù(ÕEW;‰¦cÁÕ¹ó{DjÁß0_Æ”ñ|H¨¸É¢Y7õ|Y®«MOG…YåfÿZ•ÜÚó[´ûív]A{/„&‹†ã³V*V‚A …µoÈÛ#³VøuÞï7eݱz²ô³jÚæeLIÁœ™fŸ¡¤Ì–fýPò<ݪà™Y t[Þ5Ô’¾ýéWõýé¼o›‚|Ða* §édÐÎÜO R§3dy„•Ê€¹Ïžc¤v`ATà÷”84ò·¾¦y¨–å2Ê<‘&Jèg˜—ƒÖ‰À¼ES·ûu×F,¬*{Î ¿*»ÅW;Ïæ:ÝEFv&ÉR™r‡¿¼˜§ÒÌ*f—èìPŽG›»köõ’­ÈUt"W]0ƒ/á|PðÄråO²òG¤ûPº¯݇rÑ…f¡4Z(K*2 XSV~F_nî†á9¥r L„ÏÓÛSØ’ Ülv‘a¤JdÞ‹õ<{~”-ê8ï¼è¥>È©Ù¾ ÜêÐ0wSÏÈ©QjêõGh™Ê1G<Wtçm/ˆ½PX4;n´mê%éÖïŠ(;dn*fÕzM·eh
+Yæ}0i.’L
+Þaï ‹ uAayÈé~ü&øŽpÌÍû’[ï·§™ V_90ûO3{Ôê f‡VÞ2hŒ2û©IfNgöxÒ
+Ô°µ×B'Œz.AɯƗ<Óá7¨+nNŒþ°¯¨°$êïJY,AsõoÁ^RÅÿþô+®/ßp üOó°b)‚ó<«!€Èeo  Þ9¶Jð[Ô¼ì‡b]-Ç›a‹™%N˜lj-p*ÖôK–º(H!ä“N?»À´÷µ§T@m1Ë¡ežæò3Ó`ï¶ålüfÓPÚ÷[6Y ›£‚#¬‹˜%ýªFqß\΄îi›äæŸßÞ\þ|uý|¼wu¹ÒAÔ)mð•·q_ipÚ±¯ÄUg`_;ÏOÌ&ÂRô)̘QÏÞ/dh/"
+®&ÏLX*ˆƒ¯7•p~:œJ–êc˜p³o;šæ–g.¨"Èìñjí,츩Ke•#Ör
+­pSZŽtæ½Ø—-ë²{lvï©¢ª;•bQr¥X€ŠÄÿaq\i|å×_ãŸï°³‹šøCñ¡ŒA¸é›â#ny=íb¦ß!z÷V|¤Šb»- àöÄTCqÆ/ˆÓr¢)X
+ò×ÈQØĦyhà—u<àhê€3þþÜ(ž+þÒ4váR°àÉË»à8&ƒ\/Y@_¬ ¤Pü]qyEeRKhê
+*%UUܼ$±«–˲¦odö8d­HœìÑÓ|׫,US½ŠYf 03y°¹~‘ØG%Æš`™ÃªÉ Ã2ƒp 3°ìàbŶÙh°ÿÒNO¾`{ùýõýú¾l«f3^Ü#4üæûƒžß¬Š¦Gû&½øœjÔr9›w0Ró!}<,—Öã}ÙFl¦U8ù\à:š÷£–;ðê4lÅÃßð•fj–\Iª\yA` þ`f¬íˆ@fDöžcè¢Üv-QUá/G³ ŠÐãbŠ¶ÁWÉ<ÓN—4%¡1X—1±S‰ëCî»j]ˆzhnÁ)aGæ6Oƒ"öÃ{aƒp·+ª¨´D(è§ÞoÀ>áý§÷ ð {E"„¤(¬¹ôÆ××l)•Ëê’g|] Ç‘ΞÔÝPø$Þ­-'µ«f¿^ý–Í:
+ÃçP j~ÊÞk™‡­Í·ñÝ;'ä¡5êgN1Ë°Œy
+œÑÃV° þ‹öÇP¯‡ET:È`‘Ý<kÿ`]Ùjò¦¦ÞðÓ «à5oË’åLšžûý¾âb´ü¡eï'^¡7­'!űXûàƒø‚õÄ—>åú©Õº!m–ƪ°ÊŠ°Ô3N
+/â^ÀÍŸM§ŠLíð:ÃR6 KpXT «,1®ÓR ù2Ì=ú+ˆè­B_åžÌ þl1c‡I»|*‡ãÚ°ñÏ9hmeXë¼;…Mc>+BÌgCÓ=Ûç2¬ˆÇp€ˆ€:Ï%Àéà½ë€(`äËŽfà+%N&Ùs
+9Éé¶!0`"%Ä:“Pà“”‡gÔE±o£. ¿ü¬W0îmwUÈG÷bŒæ¶†Æ_„ ´òŠü<W‰¤ç#á{L6"2Ù¨š2å[$oŠí– +|\ "‰0IêˆICçþÞ[´ÕüIŸI”l¿qŒ(ÛÁ0$Bõ¹˜¸Cè•™çb`s5NÇM¬ÛïÆ»X¾‘”EdGÜâNÀV34ÐáUJÿôýcx$ò’^´x
+kŸd–hp%pLU=GÁJŠÝ¶ˆZ8“˜ÔÚwý4ìmd0LbHžC‘ѬC‡Oü êÞÞ¼#BßÈgÙåpñ^.ºê¡\‡7c„œ
endobj
-2430 0 obj <<
+2447 0 obj <<
/Type /Page
-/Contents 2431 0 R
-/Resources 2429 0 R
+/Contents 2448 0 R
+/Resources 2446 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2435 0 R
+/Parent 2426 0 R
>> endobj
-2432 0 obj <<
-/D [2430 0 R /XYZ 56.6929 794.5015 null]
->> endobj
-2433 0 obj <<
-/D [2430 0 R /XYZ 56.6929 752.2855 null]
->> endobj
-2434 0 obj <<
-/D [2430 0 R /XYZ 56.6929 474.2043 null]
->> endobj
-2429 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F41 1238 0 R /F48 1258 0 R /F53 1333 0 R /F11 1459 0 R >>
-/ProcSet [ /PDF /Text ]
->> endobj
-2438 0 obj <<
-/Length 3270
-/Filter /FlateDecode
->>
-stream
-xÚ¥ZßsÛ6~÷_¡·“§üÞMœ8͹Ó$níÌõ&õ-Â'©Š”}úïo € EJ½¹ÉLKìbñáÛ]Ð|ÆàŸÉ8`"‹fi1ãñl¹¹`³gûxÁÌÂ
--|©w÷oé, ²$Lf÷OÞ\2`RòÙ}ñm~u{ûáóõÍï—‹0fówÁå"flþéêó׫_¨ïö2 çW?ÜÁc³„8Š%l~}óñòáþç‹÷Îß`ÎZòçÅ·6+ÀîŸ/X 2Ï^á<ËÂÙæ"ŠEGBØžõÅÝůnBoT¿:æ€XÈ –a:â0ó@œ‰…ö@»R¸ˆ·?EÜå)šÃü(³8Ho6aĤ©·mYWÿ ¹Xxr"
-ÀðÐÈ­6ùrd²ôeqf„Êær!Ó¶Qã°ÅV˜Íë§ÁÐýÝÍÇ7Ô,ÔS¾_·$øÏOWã7#&…, XfM¯òúßMÒoM›D­ïJ{nri 9‚”ó ‹Á8i^#Öñ,
-–Ì﵌é×Âöíœ~óF-’ˆÆTµ¬ UÐHÓîÊêù ŽpÜ’r™¯×f’gU©]Þ^ò¹–†žÇ½UTM£– P2°˜IøŽù% â$¸å}¾G0¡½é¼YÕûuAíGE¿mþ]™áוmí0ÎŒcZF”,9jÆïšæ´¿@X¹Ø7jgì;4­Ú4ô7º¡Œn_æU /eS>®ÍCY‘;€
-1!ä–v»Q¸NN
-]Õ~ó¨É):`Âð`º4­˜W^W%ære&xÂ)ŸÔ²¥g‚$t½ææe} ±cUÚ—Öuý}¿µ&h£Ì[›¼P¦[#™K;c6'¹è¬1äc×_Q6Ûu~ DÝÕ?$-Lh®kLW£Z3¶£1£ÃvÈü™Ú¥‡HiEÂZ&:WÁØJÁ
-v—À8o(ª4N¡ZµÛ”•y´þ€— ÜX;;¥
-ÃÓ•WÍ+‘±–p¬ªVoÌi#`óæØHûêcf¹åFÕûvð&9¢ÕË‚Gˆ¤p@žKÕÎ&ÈδMrÚÚ´CtÁ»5u@ H‰[Œ<éœáÜ¿ÖZ¹Ù~¬Zªbâízo&oÊg£cËÈ<2‘–µ;¸A–¦–(îÃAÍ,Œ¸ô-lHÁ…ñ>ŠÐP,%ƒäܤÕĘìhl²Ž®“Å:
-
-“'’¥§-pRÇ&ô÷lH x÷L¸Ã„N$6U€F£È=ÈÇ"Á4¤±"5ý·9nvÿ=ؼµiÓºÆ.ý8$£Yd‹Hák#ˆB¡»€ÃËÅŒÑÕÌ_>‘mÍV-]æ­ŒUùHq¹xÑ)Ï ¸òlíWÓ7KÜ•‰IUÛRgW /¨ã(PØRý­j—owª©×/Seu»‚yB·Pi*E\¸‡.¨@_g¸·3†"—¢‰Þa´ï+ÞÝÇ î9e
-]QehnpÇß4ïp“Á¯Á2ÍÓ,¢9´cû™Á€ÕTw£{>dHi"Æ»2“!ò(_<˜ª³‡{.ˆ ¼ÄŽh2<ñ¶ò×ü?/(‹“˜§g
-endobj
-2437 0 obj <<
-/Type /Page
-/Contents 2438 0 R
-/Resources 2436 0 R
-/MediaBox [0 0 595.2756 841.8898]
-/Parent 2435 0 R
+2449 0 obj <<
+/D [2447 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-2439 0 obj <<
-/D [2437 0 R /XYZ 85.0394 794.5015 null]
+2450 0 obj <<
+/D [2447 0 R /XYZ 56.6929 752.0221 null]
>> endobj
-2440 0 obj <<
-/D [2437 0 R /XYZ 85.0394 654.1216 null]
+2451 0 obj <<
+/D [2447 0 R /XYZ 56.6929 467.8664 null]
>> endobj
-2436 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F41 1238 0 R /F53 1333 0 R /F21 954 0 R /F48 1258 0 R >>
+2446 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R /F49 1258 0 R /F54 1333 0 R /F11 1459 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2443 0 obj <<
-/Length 2877
+2454 0 obj <<
+/Length 3181
/Filter /FlateDecode
>>
stream
-xÚ¥Z[sÛ¸~÷¯Ð£<‰Q€A²3}H&i&Û6u×(‰¶8¡HE¤âõþúààÊ›ÒÝÉLqÎý@f+
-ÿØ*DäQ¾JsNÊ’ÕöpEWO°öáŠiÌÝø¨·÷Wúkœ®r’‹H¬î½½2B³Œ­îw_Öo #×°]¿ûøáú& Öonoßz÷ñ?ðžP€
-&΢uWöý5[+‰É÷ö1
-ÚS&#ŽÍ˜ýë ³e4',J“e»Í %e}_Ž½Þ¶oñù ¥Q³3Œ”8
-Ýò·¶‘êæùzÛ6}Q5ƒ˜ HAŽ6¥]­Ûö+xš>ñYH~½4€³vŸ»¾™
-òUèR*2„ñh¸¾/T´
-¢šâD,‚ÄTöŽËÕl’2ƒ‘ÙTE Þ”¦ƒXaLf®’s^´/ŒlJc¯ÅñXW²ºƒØDum/ç0<CV5¸y LuÖèxšŒçò«š7:‹²FqçÔÏæ×EÚ.¿ŽˆOç×€ú-úáw°…ÀÁ±;3ƒñNy¤ï”{éšè ¤<ˆ~謚€ ˜Ü¦5$!ãæ5Á’$
-u´  ²j01[¦/ÑvUúøt‘îS¿Û«<®÷Eàvò.BN¨»9!sÓÎa.ƒÁÇ[\+v;A:\P¥«\9J÷My2f×3ºN°17šÂö7%iÇaÄ\'|®'„ÃqaÛ8kàÃÜÂÈ3 ¡iK`[UÐÀS4`{"bë8‹û©¡4!Óú;ÛúÉClézYAw¯­2NbgÆ>Y»<^‹RÈ8ÉãtPÞuJowíYQ3é3P :=¨•ø´jTÔ{n8YKãl)…‚Ì¡}Ž’e'òQó^dQ.…bÔífÝh‘¼ó£ýiG
-ð†°ñoúŒƒüPW)Oªfð5æÍß
-‘³ª•ƒç±Tv}3l©åš=„ú\]ñ¹ý¨-mäX^bÛÈò×âp¬KåöÙz>Í ú´ÈIgŸFÒÅN†ì¾–/ØT 6¦Á„•bÓžu#ñîÓÝßÞÿ×oF ÷¼ Ô}Ìý^÷@.è
+xÚ¥Ùrã¸ñÝ_¡·Èµ# Lj<cgâ­ccOŽšJ„,–)R+RãÕ~}ºÑ
+zÌ‹NÏÒ„öt³hK]ÒN×oÁžÐÿŽj©E]ÛCžt£·EÇ–´2ßÓ[eÓuz1J
+ÇÞÕç Lb= À­š^—o¬·Q`ÓÎØZ“ÑKæb ªµnwýÑ›$ˆÞ°SȤà OPˆGž&ð³­ hº+HµÙÁj”OF¸lB¬åAÆÀmìÌ-tASðû—Ö ·ê'›Õ ]žycSïìá¶à™)¿Gì!R©rQû‡1Çò,sQò>8jî̈«ÂŽ°‘¹pkE|hEH¨M–‚Ç‘JÒd¨O_}ǹÄzÇØ&KÀO&MÆ…#IàΞvH—°@ÏX) Dšv,VˆB± o&ÛÀÙ~€mŽ·x€6]4ÛaÕØ«¡ÂäX Ddùú„†H`ù¹ÄLqœ•›é¤6ý^Ô; Y‚ C®ù „‹uõ¬i™*8»Æ}ôŽ-œ‚MNž¡˜÷´±*¾¿¸l·ë1ãái”©Ü•?冶q*¥*}
+pˆ /ù‰-X”drÔ,¬ïÚù—“¶ŸEL*èÖsIÅã÷hB™.=ÉGºte¸üڴߊbYOǸ¹dQ–Çê2ruŠý¨Ž•1>Dc£Ï¾i›ýš& ž‘6$…Ê@úÜlÉn›z¬ŠH•ôíbtV¨)¤WËW„@]ªƒ¡n\¨—B=Æ~F¨!úíªŸ~ã¤(ð¿»¼G¥Ð˜L—š´s¢2Je’½"º
+,à™PrV«þ¬Ö°ñ’«ËZ ¡ÎkÍCZ»E."?ü öqƒ ÀDÌ! máÀh £¿ÑÈh
+7·ôÄÂw´T}A+Π ¤zÈàˆÐC ýÅ <Tn‘n ë»£·\WhÛ¼ßmm ‘ÈHÅŠSÅËJÛôãMZXlËÈØ™ î¸ÂÑŒK‚B±QÜÓzP‰ÂŒ’££Sñ6À´Ù0‚¼W@L-ÓMB ;_Ñãúba³= HQK '®ëŽáKÔm íFµØ‡\©WVjPpG ¿9mUM‰ý¾îÜ+¦> ed+ª œp}†Y2 Äüªƒd_+ßsNÞ O
+0îHrfÂ,B ˆ áìÓ—GZØÍ^{$ÂpËìa–[šYfs߀ÀÚ¦ØZ<FŠÊn…T½;1Pæ+­íBˆ|x)¡*8³f;ÆWL6± ë\æ{מ˜°v>8AyÊ•H^ NÔ…àä Á©>Í%ªõ”½‚ÙC¢>*®3¨ýùî''ÊE­ ;$#EÉø„ã3swVL"%dzYL!Ôy1y¨ƒ˜ÈLÎÅð‹È1üûx  ¿ …@Y7´¼ 놥JØ+2.Ê{iÂn7̸ÆzõÀ4‡Ü·#Ú¹\a;JT–¿¢˜
endobj
-2442 0 obj <<
+2453 0 obj <<
/Type /Page
-/Contents 2443 0 R
-/Resources 2441 0 R
+/Contents 2454 0 R
+/Resources 2452 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2435 0 R
+/Parent 2426 0 R
>> endobj
-2444 0 obj <<
-/D [2442 0 R /XYZ 56.6929 794.5015 null]
->> endobj
-2441 0 obj <<
-/Font << /F37 1042 0 R /F48 1258 0 R /F22 977 0 R /F21 954 0 R /F53 1333 0 R >>
-/ProcSet [ /PDF /Text ]
->> endobj
-2447 0 obj <<
-/Length 3119
-/Filter /FlateDecode
->>
-stream
-xÚ¥ZKsÛF¾ëW°*¨Ž1oààƒÉ^'YÛ)©l9>€äPD…h´£üúíž„R»Tó@cº§ç›~t–Â:Ë$Iy.f:D¦TΖ»«töÏÞ\QO3Dó.Õ«‡«¯¹žå$WLÍÖµ2’f=¬>&7>ܽ»}ûÛõœÉ4yE®ç2M“ß¼ûåæ'7÷á:gÉÍ›»{*™2 ¢H¦Òäöí›ëO?\Ý=DaºÓ”£$Ÿ¯>~Jg+û‡«”ð<“³¯0H Ís6Û] ɉœ‡™íÕýÕ₧öÕ1™É„šÍ¥ \r1®¦”¤¶=×8 è5‰lLM
-ÕôíǪþTl·çÛ¥œ‘L¥tÖ]sÀ9R Y3ÖaM¹&™ g¼ïMëN¢>¸v¹5…ï¢H¶³*›ý¶xrƒßÓ” Ž×€N3Ù3jêPM¨)PY5µåμ|h‰)’eLN3ŽTCÎgZ¢ MžõYƒ–ؽ`I»1¾Â\Ó¤>¶n¼¶
-„NášÏGsxò¤5Êüâµä=F‚h©ˆ‡IO–ŒðL‚Æ,ëjjŸóT'AŒ•YÇm{’É D“ÒK,]Óÿ¦ò¶­ÙíÛ(§'mGžS§¢(ƒ%¹”tBp¡2î·«n¶¦i\¯Ý•ëQ×|-Ò×4KLãvãÒ® JÅEâ^¼ëÞzn¯®¿0eõèÙï·¥Y]D®‚ r*ž¹à]ªËÈT¹‡Ò4#Ð Ww’óé‚X_ðoÝ\yèB§:îæàúVsøÔèjßZUCç—Û®ƒê/ÏÉsøVE:#›SpSHÏ™Ì<AY5­)Vgòá=à¿s8æ€g!²äízìŠ1¸Ëòïóm >¼&)—çÌ>ƒo°™æó±ð
-|©ƒwmÊ•³ph’ì~M½=¶†8#Ê2E£´S¶p©Oa ¾Û£ŸG\bë5g)!àd•eÃcSâíx dþ½Ê+ºM[@LÖÓ¯è+hWe™ °å7ü´ËøB`oë1I¢å§{Ä3aí?ò ž@‚­¸ÎDò,`ò¢²\ZQa7^Zœ)ý“ýµµ[:AŒ4ðØú9‘¼+¼›–4µì‰dm¾:,“°¶@`áéøe«ÖöÞZ'‚~!7½-Úò‹qOª—¢òÔ>Fƒ©…!h¢w´q—›à¤ÖÁ=† .“U½+À0ú¸°lÚðJ—rxjîbFµˆqqXnÆlÎ2Î ÅÈRåË°’“çâJáj­J§ª¥×”x¸¸d„*®þ_p]¶© 5c©~Ʀv¨&lj ²6uq\7å_æå«UTG<É;R ™÷­ªÈ‰Î•ìs÷)¨øÐÞEC`Ø~„Dõ¯]ø$ÆžJŠøì¶lŒ¬‘p1¿Nînßݧ~ùQw®4Ö+X^ºsÉcž¶xjM¢À{?ywÅŸåî¸s¼1îúSI„–yÿžìÀ“:ZÛ-4®kch½o†^o¿0>Ýh€OçÒÏÛ+
-Ô5>‡Ú;œnƒ£žó\'¿b½ÍmàzlÑ’÷Xgp ?jyÁ¨Ç¸‹öÌ€³n!2 wU­böåÞÝJ°Ð¹hÚ— _,ÎÃíSŸ'Ëâؘ^žˆ§>Ìë†,Íê…»&$NšÒé»Ö¥º|×"•½kfU5/¿¹XŘd|ªb 8W1z¬ïåÚj# —-‹ºÊ¸DMYWþyíÚ¨ÀÌz }Ϋ\ù7ãÑe´À í/”_
-Är[,o„`Žuo(BœŠB«òqä†QM|ÕþxÓ@H¨¦ÏÔ»T—1©"¦ë
-"¸b
-endobj
-2446 0 obj <<
-/Type /Page
-/Contents 2447 0 R
-/Resources 2445 0 R
-/MediaBox [0 0 595.2756 841.8898]
-/Parent 2435 0 R
+2455 0 obj <<
+/D [2453 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-2448 0 obj <<
-/D [2446 0 R /XYZ 85.0394 794.5015 null]
+2456 0 obj <<
+/D [2453 0 R /XYZ 85.0394 626.0593 null]
>> endobj
-2445 0 obj <<
-/Font << /F37 1042 0 R /F48 1258 0 R /F22 977 0 R /F53 1333 0 R /F41 1238 0 R /F21 954 0 R >>
+2452 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F42 1238 0 R /F54 1333 0 R /F49 1258 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2451 0 obj <<
-/Length 2727
+2459 0 obj <<
+/Length 3091
/Filter /FlateDecode
>>
stream
-xÚ¥]sÛ6òÝ¿B7sò$B
-#i©G±V,ä"eë>º…µ'ÂáL<Ò¤õöúäÍû i¦#®½³Æ“DŒ®ó¯ã·L°S8ÏgN'2
-¹Ÿ]]M/Ïgÿ†yÈ8<»ürvA°«S h¦óÓo׿œL¯;fú  'ßO¾~ã£øþ儳@'áè&œ ­åh}¢Â€…*<du2?ù­;°·j· @… ¥ŠF“@±è‹I°X@ŠCÍ¢@˜T2$&…bzõµ¬¾µÕ&¯ÊÃ+ ™0%ƒÞŽ!êÖ1y){äE0ÅC¹Oÿ_KS‚äE2ΖiS”·8ÑãóËù|úŽšâ¶LÛm}
-cÓáeCã©U½¦IJÛáB{# ¼OWEž¶EU‚Â¥ÖãÏæû¶ óÚ·x{+Ë„‡1\K0·Èä!ãȪõ¦X™œfE»¤ÑämìPzZ0Éc¸¯ŠYÇ⯘Œd:I’aƒ™t'NúGHMTGbG/1Ÿ}x÷óÙ|ÊŽ,Û™O,b&%úŒõ°ž±1ÕÙXÙù‘ˆgJ ù<éë˜öþµEÈT,Ã}â³2[ms§À´¤ïì‹Feºvk©ïMMãÙ9}ÉF¾oMÓ:“¹Zô2'sÅséˆõã©bü¤£$bqü’ûXO ¹Ãê„|g̦ژcO†ð¡0~>K¾Ã:¦àÉš‰LöøhŸN¡ÆíÒà _¿»"HSew¦¥±åÏ.ߘöÁÐDYÙèŽ8IËœPHÛƼpgÔ)Ш ¥]¦îˆŒ°ÁÓQ/öú”æÁywÌâBîžw[.­J—8†B“fÎËWUu·Ý0<’¯—Îlr³H·+·«h¨KôÅ•$LàÎœUV}5È6
-YÊá2‡®â^Œ&2Ö,Äø0 "¦5-îÇ/§±_Ï®.¦ÄÍo_¦Ÿg”ɨp8ENut•ŒßÎ.Ñò•këÍʬMÙÚðIKÕ¢ãªo©")ã.žNÌ”èÑl7›ªn¢ÔlLV,É¥€Ê„Z
-Ik4¯]ÒEuº1jÛÞ”p¡g{]vçòIẓý+‘ÃxY*år@ès€êç€Ðæ
-]øT‰žŶ^V>M‚1ÚR
-"ž¥½ŠDGܛЫAÕPrÑñL‡¹œ€"—ë*‚Útul̉da¼PV'Ž<Žó:ÓР(‹¶°7çÉ.ê&ÔOÁwæ“tÅ×÷à¨ë{T¢¨UxlSD¹$•:ÐÁ@@—ûv¸Lm¡g­?«*£\»³ø@u"·ã!‘ {Õ`×I J«@±óŸ¡Á)MZ:>ž7X4†—b¸§/EŠ•»HYµ4ØÔEÙz2†®ì°Âl½hª;Ç$¸œ•©T1 ã Ú—ië[Pÿ–qäM¾‘=v'0+¥¸ü¿½i¨…LȤíªûíèìü’˜¹ºúôù4„²ååNt6Ô[j&äËñ<H´W9Y›‚2 š+ûÂ`'ÛÂöépÝÓ
-²l™ÖiÖÚ'X4eVå]_LEá1‡¾]TþéçþÝŒ‚…äyž[1FDúàñ-Ò”[£dLw
-á>˽YÙNZú ³2·òt2·›…aì7åº ¨(¾µ‡PMD\O©{ìÛ/µm,È)P— ùbüRò«O“ñ¶lž· A®âƒpû~vá_ú+÷~|}cÚìMmšjuÏÀÅC¯3ÿøßÏŸ>NÿxÀÕ:â{Ú´a>uŽgóOÏÅx
-ÎUÓb°F_ï^ás&=`^6É&wæñÖ”½EK Ð}éEPŠ©N|Ÿß¿<‡*ƒ„Åa‡÷Äë*ÄPltö®øöˇù‹7»Æ7i÷'ögý‰ ²7`>þi¤rëg^?ØSC!Ãÿžñyw›¿ýåîX…ù5‘ÃÿÈ8IÁØ1…²JÿÝpÉÞÿ¯<+endstream
+xÚ¥Ùrã6òÝ_¡ª}¡kc„¸x<äa&ž¤œcÆ;ÙTMæ–`‹5©ˆÔx½_¿Ýh
+RQ»58ÑáXVmY=Ñtý8XVQY•myÉ£bGïëz¿7UëÏÕ§öpò‹€+_î
+ã,×ZØE" 6÷çÉ_hXZ`¢¡—v[´4Ú_ìƒ1ŠÃaWš Ø°äqt¿-ÝW0àÅOZšÃáˆmÌcqÚµldêΞRž0-Áb–®µ`tª3:â³Y˜ºB__$ Æô‡ú9“™È† t–ç%훲9ì
+¯ŒÇ ‰îÊÊ8¡–ÕÙ×diA#f æ¡BÚº§˜™fVI¦a/Yº¬>Ô¼>TаY{3R‡È˜2_¦ ÆäÏÔ!Amà
+z4/U]½ìéå±>’3jÕ§› ïŒv—)Žëí¬„µbB)ýŠ„{P öP„«¦1ë±€S*‘ËÄÔ˜úPÀ"E@¨ÿÅ@ŒiÀ×®x®£ë÷wwï¾¥±“{mŸð`èÙX«·3/~¦¥¸Œ/ÖîÏ~øÑ}QºOÿˆu|ýþszG¯áyµÀ A}¸½ŸbÇÅN JÌø0xŽ|¯ØlJŒöL@ó0ë–âyÏ“ÏB.ç<š÷6 Ç•æ¯ØBjÁ<”µ…M½/ÊꛦwŸò8-˜”J.s Æ, B§Lr y¸3 ™’Ð1Pèàð.!Î5¤¦çº®Úå>üÌaçÆ´± G\³<W™óÄþÎÏØU)(;N „™“ç#þò‘xkf]þÇCƒ]p\Çö•„#@KTV߀ú¼8É’< §¼3ɶübwÉ#ÿ•êÞ&3©ÜW_›výõÑ4õî ±=NÉ5KTHp£Ynó»ÏÃÎÑj†÷4CQ³^›¦±N‰«CYq«¨‰È©²Èó»°xÆ&°•°4—Azd?”§/=½=œªY§Òàq'ËNÕ‡šwª
+!!Í ‘8D`=î¹ÜíÈ$×Å©1Î i†ö„Ž}Ú ‹6á'‚Ç,V÷†WÕ¨´©@ Y*BÄXïÀ@Gʆ E²Ø›ýƒ³À 8Âí‰Ñ¶Q@i
+ŠìÛ«¨ËÍÓ“´øË›¡Re±|ÍÆ; w@Á‹r7²n©Ê¹X¤€F„‡¶ Z¥B(_£nUUuKƒÖj]eN¸dþåÖs©ÓØÆ x¾Ô'‚w±ÔP,…•‚wï~¹ ýí»ËTEon~b4}ïч‘ š,3l¥ž­ŒØ²º‡¼3K±•ÐW½çÕF±m‰v£ûlØFc2Ã|¢ªûp´§‡>8üÁ@WBVÛ›5n ö»éCÍN€
+–ã+ßÙظH¾‹#úÓ±qÀÀݶ~¦“ûc¦ö¦¦ RL4
+Ô•ê3ÿ°z¸BSŸ(éÒîN5v¢rå©Æz‰SÍd&Þ÷Á®áá2›/`µ›óDŸt·èI±`Y&^IÝûP žä¡:Oz·7³eÜ"ñ®ŒQŸ.ãäo²O
+zõ½ œÂ½@$S2h‹5h³-Z²ÜN¹ °/ :q×ðŒ÷#@
+Òì×n”TÆ·•glZ$œ%"Ë–mº5oÓŠ<nS·Í7׳wC‹”»»¡é黡mjPIŸËà $x2±Æ9äσîº+±s5=‹ÃÁàmÑ‘^§;TÀE’)lfºSp*‹$ñùåNçõ­ï«\O5~˜„"ßØpi™jû<'TGÃûÎmH‚ºú÷ó
+ÉYHì©U– ¼ž¼c³G‚öz€Aå„Ã}ƒ®F,ƩƘ€ÌRÄ2ÿK18ýŽDƒ;R6QN uå]š³LÁÖáű*°q ¬Ân·8Sº•Ã¥i„6Bm‹+¥TôLÀPD9dãæÙ&«0éq÷rq‹¶jÍÑ]gÐÕB8D4½+¨™ˆ+UG…2g˜£æ‹ FüD°é‚>9§î¨-NmÎÆß]5á6¥9qö¦ËxêÍt¶=(3jð^ã/a†¨8Ëí1-µ]Ÿn»:†'Ú®‚ñD&ÿ¯qÍÆTž+–ðü•
+¢5STÈÐ¥g»8‹¤»6Έötg@ü¦ZïN›PGѳëÙ 7*Ên®û] [dúŽ‰¿Š¯Ù„Ó¯ø¯oX8…©zå~¹µ dÕòô]_ÈÖÉw9ýˆþtN?`àŸÔ>à6mœ…Q¨þ¹‹½›eP=S<¡|%GȽç-âCëÐÚCž6œo<#†Å©ÝÖGLk¨ S¤xbïÐÐáä¾µa–gšÅü¼ƒúïÓ@¡rElÂ,8ÓRØ «XØpÓ§=Cû »‰‡Ù€Çf¬5vÙAùö+>„û6½-ša`åÝi<Ÿ¸µyûñÒ;~¥˜èC-د‡
+ö ”›º˜m3,ïÚ #êÓm†ù[ÿ›L˜w/~dE"ì}.œ¦G¬éV—bÆi7~â#÷…¾3î‚ÞüþÝ/Œ€]…Èû"w=YîZòÂ¥üSíRåCÝnÏ;MŽé³>U?v͘×ÂO2 {­ÏÔÁ,ýXÀÂåÿy<§˜gLËE‚âœÞY²-!)OeŸàm÷”›Ú7¶ÛÞïS>MÞž~”Q¶çw(•ÿ!ÌÛáµÉWóÈüÇCêS]¡ÐÉajº˜ŽW>Býåêu?CT)þfEL‹â5ƒÏŠ–+5¶œ˜ )Ó˜÷ÿ
endobj
-2450 0 obj <<
+2458 0 obj <<
/Type /Page
-/Contents 2451 0 R
-/Resources 2449 0 R
+/Contents 2459 0 R
+/Resources 2457 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2435 0 R
->> endobj
-2452 0 obj <<
-/D [2450 0 R /XYZ 56.6929 794.5015 null]
->> endobj
-2453 0 obj <<
-/D [2450 0 R /XYZ 56.6929 628.3593 null]
+/Parent 2461 0 R
>> endobj
-2454 0 obj <<
-/D [2450 0 R /XYZ 56.6929 338.1896 null]
->> endobj
-2455 0 obj <<
-/D [2450 0 R /XYZ 56.6929 227.6111 null]
->> endobj
-2456 0 obj <<
-/D [2450 0 R /XYZ 56.6929 146.3585 null]
+2460 0 obj <<
+/D [2458 0 R /XYZ 56.6929 794.5015 null]
>> endobj
2457 0 obj <<
-/D [2450 0 R /XYZ 56.6929 83.6007 null]
->> endobj
-2449 0 obj <<
-/Font << /F37 1042 0 R /F48 1258 0 R /F22 977 0 R /F41 1238 0 R /F21 954 0 R /F53 1333 0 R /F39 1178 0 R >>
+/Font << /F38 1042 0 R /F49 1258 0 R /F22 957 0 R /F21 954 0 R /F54 1333 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2460 0 obj <<
-/Length 3447
+2464 0 obj <<
+/Length 3164
/Filter /FlateDecode
>>
stream
-xÚ¥Ërã6òî¯ðQ®qðàóèÌL§²Ž×v6ٚ̒ ‹ŠÔˆ¤¼Î×o7º‘%û€fl4ý†äµ€yFÐYxda ]/·WâúÞ}w%yÎÜMš÷g}ó|õþ[\gA«øúyÝ£•"MåõóêóìöááÓýÇ»_oæ*³o‚›y$Äì_·÷?ßþH¸‡›LÍn¿ûô„±ÂI
-§ÅböýOOÏ7_ž¸úôì¹és,…FV¾^}þ"®WÀøW"ÐY]¿Âƒd–©ëíUé
-µv˜òêéêßž`ï­ýtJ‘Nƒ(UÉ„”¼–a ÃX deJee
--‡pÙÌþË”ÖϨ,’CåÿøééÃãÝÃóÝO÷þ£¡ñ@tªŽ:yj¢J‚í»ó;šƒ‡™å44ÅvW„So’öźÞ°3{€·EõBÏÖš knÀªLÏîZ"âèWðM^–L­kÌŠ ¶¦qYW þ%Ô ßß=0Ÿ«ÕþF¦3Ó4¦¡“äýð9’ßÉ+ ¯âtv(–†!³oràNÇzöËÆT„­jsKõ¥Ûš
-ŒÆ¢pÇvܵE]5ýy–d2{)¦z7qFNå΄G¹“Øí ¿tNC³©Q$ì¶Û|ÿFëÖkBnþ²†·°e’G‚ÁLª¡f—EeÈÕŽ·Š(+.
-õ–Yu<³ŒÁêЄ½ƒ2Ù§Vá,ïZ÷E›·UÊyŸèhÕˆ&þ`Ç î+Pˆ1Ïþ‰Ó×äÖŽôÂ!=òž.~BUŽ!Eì*üfz8o,T®û.ŸCºÏ6XC×uçÌeí–÷f´Gì¯ø‘ÌÇW`õT…ÙXMµ´^uî ­É]à28Ää„°é-hy7röFOV¢0öŠ¶¡
-I$xÜ'µÝP‡µ`¤`»se3\fah¤¼¹Ï°Ø€ûÞ4E½b÷.„‚@ŠQ2øa“×Meøˆˆ; r8¬; ,Më“hÈ‹žÝÁù4cDÌùæ»{n€#¿«Z³‡•Ñ›Oö¬ 3ûEÝXòtí®k &’y›ÊìsŽm ªêD
-éEy9ïx3•zoC…A”œóŽ:ˆ!^8­[M‡ŠHÆNë¦êe< Åâ ‘'ñæ(T…€Îšx~­Yd¾d‡ž&½8ÉQBÃq–Hb˜ “Ù&Go¤Â”ÐÊp;rv‡be
-«{Ä ;QD‹8nqÒž2wqpwÿL®b{Züù1ÿâü=ˆR µ«à²ãñÛ2cú³Pì⯫&:çP“ÛGºÅø—ȼYºô8åÒIt’s… 1ÌjB—OŠÊi*ÀÙž5O³É-à(YÆLÄ•µ£ >
-B_gœOൟC95Òky©šž¼4”à Ä;:ò½ËP)w­Í¼3é¤1T^ÞCˆ;;ÄàO>³Ç(Ιê%â8¡kÈwØ9†
-6š3¹{Iâovçû3ÚšºGi:{rRZ `vŽ!Œ³÷ÄøÖy€Ç„ û}Äô6éj*E‹ ã“€Ø>ž*!Ýo„˜-0 #Êz=áÎIH¯¾
-¼R‰;åèâ]xù¾4„D¦×#G¢Ûb[,Y&V)XÈ j]—Zù±<© *’ÞÅ6Ê CÊ¢‘ŠÚh’¡~q$x•}jÈ€Æ%+†›GèTÌÌÿv©Ý·–iªaÜèd›á¬vc{
+xÚ¥ZK“Û6¾Ï¯ÐQ®XXâÅÇVå0±¯³»®Ù̸’-ÇJÂÌ°L‘ŠHÍdòë· EQÞJé@h¢ý‚ø"‚_¤šE2S‹$SLG\/6»«hñ
+è¤Oa³Vœ³Lk’~kîócÙœì,ðlkzîÝÒ°Ë
+@xxë…‡—Ü}žÓcSïv¦jÙ Ý^ÇYÌ-“y@„TçÑQu€8˜ÍñИ<h L"5Ͻ£:e?B‡Qž ùßᩬJP™L9éN¦´Õ¾‚×¢z wÜ퀀/~KÏß"ÑVâ"¬‚‘~kš‚º·@Á‰v]´Ô(ª;Bç| P€Õ
+´j?/Í@‰ ËDœ9šª>ìò²|¡ySmQB°{>ž â ÓÀêÀÊ,”90Q~lë]Þš‡¶E“¯K³¥•r³8£ƒáΛƒ¾•ÖÑK­$SI¬ÔßUMcò¨ãt}€%‘¦~}õab2`œÆš¾kùÆLÌ$S° ±pdÞ8€ˆõO¡?~¤)z96hÎ@Å™Š¿pª™è©ì
+¦=¼|wrú¤€…F8wT§¬‡À‘ Kñ¾5-*Bºƒ€ê¸[[K mkaq°ØOWÓÓO«Txýôö†fCâÆžüœÐwº§ü]œ(¿ïwû™2‘øñ¢jZ“oGBúôOH½hÚá<kR•Å×)|ö#ÐN&‡'°…K™À–Fz<¿öÐ÷.a[×"߆ޢڔǭù‡¢*Ú"/;gÑY 3ÔñDY<Áê<;ªÞ œjN ˜(–Dò‚
+t§‚
+lÒBZ†Ü™m‘·N·tˆط漊eÌdz!× ˆfìˆzý›Ç|"ÕsYýë.ó³žNüCÞo,Ï•)ú¿Ûwo°,Aš*‡ÜÇàÕ¯±1›€,å÷£3{ cVdkCS€kÛ¥5'Ðû\´ÔZ½(ê¨T0ˆòT¸ÌKUÁ²4M§k:«nÂy(Ø Ü~xÿæ×·ïÎà R,SÉ%T3@ðT Pí÷¿œÍ8f9÷Ç ëéŒcÀûYc±%^–µÍíU²|4¬¨ÏÆbð\^bµ¢0ªÅíE:ô¤¦´I.ÐØÈz| ͨ Jtá•ÿÊM0¼y<V_]o}?‘À
+ ³“z‚«d¼Ê Ó”ÕòÞ~ò$Çjë]ëq?ô¨œÅ2Ö?«ŒÂ¾}é†kçæ9ù‰<㌣íôé|mñ4•ÍÃâQ|1›WžÄ!3º8×&‡­¼GÅÀZS¢ » 4“æìÂÚG-„GkÐý³,¿ÉÕêØÕîºmw™`í|¬RczïË%5à–U@5o!¢óÂõž¢Í'AíÌ1îC¢1çéˆ(dMU7!Ó®bMªØP»µ)¢£q)JÑy]¤¿§'.‚ÐbÓüj
+K¨= |3yWô·äŽœyöÿøè‹ßÞ{ t4ˆèQ¨†ÓíD¹2¦R‰¼ÅKõÍt@˜é. ìòÊÒg!öÏ Ã¬ÔÝ©òŽŽÌ ½6àÞÝ* ä±]…³ÌfúXðDsÎÿ"œêl±ûŒ‘K&’øÂ5|@4óÇ(GÔ_õÎ\ÂϱíS–1ßéŒ%dì¢?o_°ÑÝÀ;#gÝ <6k÷´Ñ
+4è²Ô7u÷ŽU*®gƒÅLèôäò=”Ï üëBA‰7QéòÃTy pÕúÛù:{£à3°£cS;úÜ‚ÉîÑû'Õßê×ãÚ˜×}øµ=p»Ó
endobj
-2459 0 obj <<
+2463 0 obj <<
/Type /Page
-/Contents 2460 0 R
-/Resources 2458 0 R
+/Contents 2464 0 R
+/Resources 2462 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2435 0 R
->> endobj
-2461 0 obj <<
-/D [2459 0 R /XYZ 85.0394 794.5015 null]
->> endobj
-854 0 obj <<
-/D [2459 0 R /XYZ 85.0394 769.5949 null]
->> endobj
-2462 0 obj <<
-/D [2459 0 R /XYZ 85.0394 747.9963 null]
->> endobj
-2463 0 obj <<
-/D [2459 0 R /XYZ 85.0394 712.4426 null]
->> endobj
-2464 0 obj <<
-/D [2459 0 R /XYZ 85.0394 646.5299 null]
+/Parent 2461 0 R
>> endobj
2465 0 obj <<
-/D [2459 0 R /XYZ 85.0394 574.5487 null]
+/D [2463 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-2458 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F41 1238 0 R /F53 1333 0 R >>
+2462 0 obj <<
+/Font << /F38 1042 0 R /F49 1258 0 R /F22 957 0 R /F21 954 0 R /F54 1333 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
2468 0 obj <<
-/Length 2714
+/Length 2879
/Filter /FlateDecode
>>
stream
-xÚíYAwÛ8¾çWø6Î{1+’"%í{{HwÖ3iš­3îëô X²£Yr-9™Ì¯€ Yf’ÎÎe›L‚À€â£
-HÕ–gAM#c?ø]€‚Ó2 äØ´é¶-ª•}I­~Õn}“oÉ:Z
-9aRE]§½MÞ
-9aqìLǺÐéÜ
-ðViÐOŸÎÏf3ºë蔀±æ±–<%×—îW:€t´¥½)‚„
-þ@ë}¼?ŸÎÏ>ή®g.=9§CåÐâ‡pAö~ú]®b®Ll àÖÞ·]+Á¬¹†Éód"}^¬*Ó˜ÂÂÿùœ*góŽ¥;ÈEÚE]ߥM‘Ùµ>á‡d¨Ã3i çÔÜ+ì äþdKó^s¹³#ûÔîª{pIgÙ¸k
-{mñÌm3{î7¸ ~íðDiÐëßþøýô•Xâ]™÷»¶ˆƒ—µS
-íÅÃð@u÷™üP÷?¦ù#½endstream
+xÚ¥YmoÛ8þž_aà8­Y¾émû6i×»išmRàÝ~P$:*K®%ÇÍî¿ß ‡”%[nö°-Z‘Ã!9œ—g†´˜pø+&AÈÂD&“(Ñ,à"˜dË>¹‡±w'ÂñÌ<Ó¬ÏõúöäÕ[O–„2œÜ.zkŌDZ˜Ü柧¯™`§°ŸžÏßÎdp9=»¾¾¸:Ÿÿ ú`à|úþìêÓÙ%Ñ®O`{wqsúåö—“‹ÛN˜¾À‚+”äÛÉç/|’ƒÜ¿œp¦’8˜l¡Ã™H9Yžè@±@+å)åÉÍÉoÝ‚½Q;uL:ˆY uªPLr=®%Á"!€'Ò‚É$ÚiI'cZò\¨¥ízÓ´&Ÿ}5OÿüüÙ?¶
+§M§Ôü¥;‰è$L¨0t'É‹û‘ÓŠˆ…q$϶(KÚ£¬ë¯´Ér¨Ð bR^Ÿ¯L›½ê¹ƒc›I ¸I탩ÆL%™
+¿òó‹&’i Ç_T$?,Nâgk‡™³X¬@'<³Xå,”΂m½~:BL÷¬ÙIÍ·ãlüÄû¡³z¹*Jã|Àº¦mÍίö¢Pê„©(Ö“0æìQøgàG²$Žãqð™u+ÎúKF¬ @å!8AÇf#vþîÍÏg7ì
+¦!å w?/šU™>‘¥>ç55(欑íðê‘›AãöÖ%—-zµm­ÖEÕZ0páá¸v%U=«Ý×´ë¹:í>fûûB^ Ô3Û:žÃ]‡jåôD¤†Û~°)íTŠ «Rl
+‹Ù(@ED
+O €-– [¢b*¦Ö<à…:ÍóÂå€ÀB ­OçS\ÙBEqíå#?FúƒI}‚ ûøÜ7[ŒÌ%^7wi‹… nuÀ©˜â)±[¯P
+Kd WÂàæ tËÒ>Ô6(ÔééYꤿ3;éË=©”Çnk»â¶rœ¦íö sÌùƒ„ ²ªô¾yé*+ªófÒ=4làÆ‹"4ŠB"`+ƒºWVáÔà™c>wå>âiŸCE+¨UxìM{¿YR™
+tœ~çúXN7y³ró¬›Io^P”7o/”z^Ð>­ÌždeÚìû=ݸùLœº\Þ<Ô›2Öl©wuËZïO¡EGŠBòÆ3ò»û²¾#ÃGHDmã·ó„ÐËe½5¤W áì$/0YÉ໓ u^;¢-ØݪÁn©ŒÜÇ›šføe|0cŠáâucˆÃI=°‚ì[AqÑs¸kÓµÉ.2“"§€Ä¥5±u³*PHZ§A‡šÌéÚhmÛ zZžïA\’Ë£"ÂqgcGòºÔÚå
+Ž’t¹}r>}ñmMívËŠ&cõÚØxÆÆì;}…ŒÜ»™ î€•o—«êoëñZ7ÚÂl‹æ‚RZ#¥H ç<~ö
+)«Í\àÂ’Öð¥× l-¨,\RÏÝQûþ—p¼¦ï2ýê)f®‹¨ºY5?òƒ˜2PÏ®~§†7n<z‰‡Yà
+qäoÿ z_Ô&,T{ï^чЂÅZùT‰‘FèRJû4‰¥º! mM
+¨U]¹[© Y øÞëìæÍ|N—3/„/¿6v ç
+ž{WÚ›´ô
+”gunõétn;6 Ã(ø NÊuAT§P0L@5µ‡¸~'÷+P³Wjo»G†9ê2!ŸÅ/­´·˜ý ­jŽÀ-h먃[m§¼_ú‡>}ü¡Ïþæ³6M]>2ˆðÅØuøïÿùùÃû‹ÿ¾b é:‘þæÂ=7ž]Þ|xâê¦E°£î5 á"GbÜ#æUÓ˜ Eº7UoÉ÷~¾Œt§¾oß®‚±Ê fQÐñ±c¿%«€áÀ#Ïé¼ÓÃ_þy÷+ºÆäË#?ôDƒÉ¡
+:<ü ®H*”#²ÿ\endstream
endobj
2467 0 obj <<
/Type /Page
/Contents 2468 0 R
/Resources 2466 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2477 0 R
+/Parent 2461 0 R
>> endobj
2469 0 obj <<
/D [2467 0 R /XYZ 56.6929 794.5015 null]
>> endobj
2470 0 obj <<
-/D [2467 0 R /XYZ 56.6929 523.9144 null]
+/D [2467 0 R /XYZ 56.6929 562.3301 null]
>> endobj
2471 0 obj <<
-/D [2467 0 R /XYZ 56.6929 414.7474 null]
+/D [2467 0 R /XYZ 56.6929 273.571 null]
>> endobj
2472 0 obj <<
-/D [2467 0 R /XYZ 56.6929 353.4012 null]
->> endobj
-858 0 obj <<
-/D [2467 0 R /XYZ 56.6929 315.6213 null]
+/D [2467 0 R /XYZ 56.6929 163.7629 null]
>> endobj
2473 0 obj <<
-/D [2467 0 R /XYZ 56.6929 283.1208 null]
->> endobj
-2474 0 obj <<
-/D [2467 0 R /XYZ 56.6929 248.0689 null]
->> endobj
-2475 0 obj <<
-/D [2467 0 R /XYZ 56.6929 183.8008 null]
->> endobj
-2476 0 obj <<
-/D [2467 0 R /XYZ 56.6929 95.2626 null]
+/D [2467 0 R /XYZ 56.6929 83.4407 null]
>> endobj
2466 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F41 1238 0 R /F21 954 0 R /F53 1333 0 R /F39 1178 0 R >>
+/Font << /F38 1042 0 R /F49 1258 0 R /F22 957 0 R /F42 1238 0 R /F21 954 0 R /F54 1333 0 R /F40 1178 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2480 0 obj <<
-/Length 2274
+2476 0 obj <<
+/Length 3207
/Filter /FlateDecode
>>
stream
-xÚ­YÛrÛ8}÷Wèm骈ƒ+/óæqœYÏdíl¤ÌÌV’˜¤,V(R+Rv”¯ß @Š–«v·R&pЗƒnšÎü£³D†„§b§"”„ÊY¶¹ ³G˜ûõ‚Z¹SšûZ¿,/~zÇãY¦‹fË•·V’$¡³eþ9¸úðáæîíí_—s&IðKx9—„ÿ¸ºûtõe.S\ýz³¸œÓD0­$´ZD‚·w‹ÅÍõüúþ› qùuùÛÅͲ惧„kTÿ¾øü•Ìr8Ão$äi"gÏð@Bš¦l¶¹’‡Rpî$ÕÅââŸý‚Þ¬yuÊ’'¡LX<a Fg”†©”l`™†gܘãþÃòöþnqr ‹ ’i7X¥¹¯å6žpƒÓÒûÎWzËŸÞEÜÓ\ —°¸ÖX•U1†EiÐÁgqõZÀ˜·e<Œ¨ˆ†ÈnW)þQhŠ$IFG˲(LXY¥²ÅåÚm‘•_aEþærÎ ºuQãŒô€?šº@‘{mwI“ P9>­Ìc³Aín­:”ëu+ûf×ଖÕù`®ø÷›ùKgùÍ[qÁ{|ÔM÷F,ÓDh³ÚP‚SYì-¸´$Ç¥a<Z…+x¾b #…oàCÕ4ߊÇû-þ–Û…/Em'!9?µ¾ÖËQÛk™¨­&£–2[wçÍFÖqÜrØ”“è<²^kÚ n9`£4b»^Ù7ˆ,ð±´(üyû^SÚø0ô Ê´u¹‰¨^´¢@ûDµençñ˜È‚%AyIƒºíL”r¬f…J™FTÖ/€Z`x18L$Óa|€ä‚„_ >kq¼µTw†ª“àÙŽÇAñ]m¶U¡“NÆ&;´~f­Cƒ£™àá$„ª_vá0k6úw3¶ÀáíâÐé3w8¼‚ú}\¼±±Þ?[>ñ#1ÒF„ °ºm‹lnð»Ì‚°4¿yõtI) ²ÍÂf÷ˆRç‹ L(¥ˆ_IOëLÂ8-“0ùD€-’Trw pFpoU·>I!ÂV;°×š€8H‘†1â!ÆEëÖœ
- $ÆMœz'IC¸¥#ï0§7‚¾6¸pÛCY«Ý‘BIð©utwäÈ¢í u^¤8™²0‘8ï1_ëeõZÆco§<¦ë™žâÚÕ®Ù|+gÜ–°0áðîY˜½ÖÎù’8L(O‡@ÿ¯nä:žìÔ‡`,¡K°ÿÒ‡ãblÎâ8Œu™0×õãX|,nnðÝ«÷‹û À$P^Aø7€ý ‘$ÿ¨e«3EýÂd[>Öšˆ¼é ÌdˆõêÓòï÷_y[wÅ®.:Üqq€›bc]vÝÔm³ëÊý渟¹ˆÜ~*´Óªp(È éAgÍS±S…£X…TJÄv§6Å42¸ciœ°—º… &àòG†c]ñ²ïö~âW;Ã÷{÷+¯ÈyÝš‹CÝlÛ²§Rx9T÷ ’ “……2©/ˆ³dà­`rLLqSš4N÷Ïóßñ4rHé)*í)¢ÜY×ì5´aÄ$µš_ݪ«‰U¡ÎI")OÊíÁz@å©n¶Fë寮ç\¨õ—Ë÷SPÓ02/½yuéú~n]Q@Y2^w7±.Ä %Ù „(uN=©jjq KFN@g¯‚†ú` &Æ¢ÜgöÑ©¦b´~íë4ÓÝ•`Ãx{³¸þxkºÏ zžæ9?ãG™G!©;
-¨¯!]§$lñ¨EØÊ£¸±Å&/L+|~,ŸL£Û¬€p¤Ójƒg]÷jÖ´¯Õ“}©+7¦ÖÒMÑ©\u
- `}P
-Ã׸ ËNúpè¿åáävW6»ÑFk5•uc)~­lç
-“6%í¶Ö¤Hòºò=’<úÆãÞg³X´ìÁΩZU‡E®™ Àhz¾kº’X@/×H‘\_ùë&Ç1&&ëO»ëðÆb6&µJ]PIiN@†Ñó+»­Ãa3Ÿ¹C£Ì\{Œcù1‘_Ö^A`›WïôÁåùdízð¡¶ÿÛ*¸ºàµmø„…m¨/–—þTÖÓŸCI_DþÏF9þÁŠcž$lú;‡B•ó”:PÚRTÈ1ôþ.§ØÿJ¤¨oendstream
+xÚ¥]s£FòÝ¿BrÕŠ/`xtv7‰SwŽÏV’»Úì’Fµ´ÉåüúëžžBQR±hš¡§§¿»Ÿ0øçGLfj’f*Š'Ëí ›¼À³n¸[3ó‹fÝUßÍoÞ/õ$‹²D$“ùºCKGLk>™¯>Oï?=|¼ÿïíLÄlú]t;‹›þûîá—»îñ6Ó»>=ãm"p‘Àe ›þøóóüöËü§›OóÀM—cÎ$²òíæó6Yã?Ý°Hf:ž¼Â ‹x–‰ÉöFÅ2Š•”SÞ<ßü'ì<µ¯ŽI –:ŠµHGD ø„ó(‹cÑ“AœE‰ÒÊà»_~xÆcÀbÑ‘›À£4ᮚoÌþ–ë©!±äÝ›½©ù¢|#L[×lóÊ¡¾ÌÞõ®-ꪉܮÀ¢Š¤J„ÛV‰ˆKs‘¸qJÙÔM‹/à
+G*MR»â!ßš ìg‘Ê2R´}Ûnþ»)Až (ëúëaGð¡-Ê¢};±v’nœDYš*Kòù­ªwMÑ M =JPFœ¨ˆ 8ÕˆÊ80*bð¨E³ˆÅÛ!aթĈE‡U§ƒ& °Ï³üê¬öÍüõøÅ£–t0ØúD‡Ë4RZ!7HaYæMCËzÛ8µN3·*P|¡úÑI»¥Õªn/ÔCzO×é¶ 0Æs‚ !Rl¯RlßvfŒAeèÄz¿]¥÷šíEz*ÐCkžÉ Ä€¹Ï‚©ÁÃϳíÈ.}†Öeþ2¶‹çÐbȵ
+P “]üê 
+½‰pÙÍþ˘'ÌR‰,æÞ!(|üôüáéþq~ÿóCxéb<ñî<p[Á!x›
+É¢ðÄöJ¡´»Î’L§/ÅÑTïFi,b*öfxI‚Kì5±Ûaëœ.ͦF‘Xð°Ýæ6¸Ã¾õš…_¿¬á)™ä‘böp¡è\U/¯œŽŠ(+®³´Ñs 0.®!Ú³Œ"ÄxNppwŒKpHUCÀªÞæJžsçô8o
+/Ô´fáV m¡Å |ØYK­‰!b™Wäe3x/÷Û¶­YÍVfY€îþñ¨hqǤè‘Uüéíe]ÖÕÌÉ–Ž×“ìʔŶh‘?É$œ w ¿Œ”S<;>yÝË -_æ± žŠH‰ìªÅ\„ˆX”%Ñ\¼Ñ6+³ÎeKHç¸t“Ób=ÃÞ§i„­Ë#@úœhÌDÀCU”)>´åFø—YÄyÊ;Ö"ð†B©³EÔ—Åv¬–0^ˆ°Ô¿jŠk(‹³F‡H24„j÷ƒ‰¥ÙÕ¼]°¾ø®;„{œ·#:“T ñÍ”„²bô@F›úP®Îʸ¢jZ“{ç\»Êoã<Ùódî»8ç×eÑX»$R£é2‰R™ùLöÞ´Ë÷{ÓÔå1‚ˆ¼áΘ(îóc䬑ÔÖ1lˆÐ¾žÙê2ž„g–쵪R!0þÎb©.¼¤Ü©ÜIÍ·CqÌKkT{q´­ÍU^p# %P©³p¤Ùñ*G]BèÌ›¯¸Ñ¹Yh¬µ¹¸âÊ<Òqê7hCiÿÕíó
+ß[Vº{øß-‡€æ•4•é¾R(õI./HC% I(­0>Œ Ì<åj $iý®˜ßÇò"Hš )®F5(•ù ªÉiA|»kó5^ÅtU4»2;ÈÏ?ß@íuå¸sMNÿ¨+3V‚àÀĽ .eºÎ’ú³¬©?Û:V=ÏNÆàõ hÂÙû^ïýS
+5Í-¤û¢Í[¨*å£O|òjDÿ
+ÑŒÎà‰uJ‹q$ ¹Ã7]C;*š©ä6ªîo¡Â]b$%… |B‡˜œ¶¼E
+'ˆöm^‹v¹¡#Àq*—6A)3¨aWfqxy9Uû|i:ÍÓ9kY
+–
+ø¿PT˜*_”¾X;ž€9púâ\àä*ígõÙX/ 6ÝÖ+Cµ¸6¦4Kra]Å^/ÔB|Á·}K1+ÇÙ<é×BV£>tY6 6cÅPÅo¦®úd"´—]h\nN›¹éû¼jÖ¶
+Þý‚‘9:°`É•ÔÞ"ù³Ýf Ýf”ÓÁ@t’$}K¡|néxȶöd;šm0 ¬|xF+‡þ8" U•rØœ⬢A$FÖ»÷wðGqÕ"ï×tÿ[6«ãØüfÌ“R4F‘\)ËEú[ã\äÈ–mäOZG ŽÕ{fæÚ Œd=ï¹øäXÅ£ ?ɆÕ:N–šYXå„ù’-TðQ¯F„hÑ &|šCaw˜þ$Š¨»&θiµŒÀýcÝ?ÌéÆOBìL˽~ª¿\ýÅZ¦}¹®íxúþ×àL–Š}þõÝÄÁääî‰>»ü É ±,¸¥ŸJK.™Æg5—’؈aU£|= (7d¶H[PÎαÝ2[ÜŽRÅaN páˆø¶vPÁÇ‘
+}Æå^†5TS#½ÖmUÓýÂm ípùŽT¾¢gù:åCk+ïŒ{©AN“`÷Ã9‘× Èrðµ¯Y5ÊÕÌ
+q\ph(vØ5†
+ç,!<9|ë#ÀÓGBÐ7Äté{*M W‰öTMò©`Üÿn€±éÓ0¢lÔc^OŒó>
+ü3¥ù¥0é’±Óô4ðJ-îX KRtêú÷R…LgFŽD·Å¶X:™X£`a f,lªaô¹ÔÊÏÉ“¦ ,í|˜û}þFʱ_°ð¡þÿöèôÓ*å¨Ö§ß¡ô#SP¬fÜ3…
endobj
-2479 0 obj <<
+2475 0 obj <<
/Type /Page
-/Contents 2480 0 R
-/Resources 2478 0 R
+/Contents 2476 0 R
+/Resources 2474 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2477 0 R
+/Parent 2461 0 R
>> endobj
-2481 0 obj <<
-/D [2479 0 R /XYZ 85.0394 794.5015 null]
->> endobj
-2482 0 obj <<
-/D [2479 0 R /XYZ 85.0394 751.93 null]
->> endobj
-2483 0 obj <<
-/D [2479 0 R /XYZ 85.0394 546.4203 null]
+2477 0 obj <<
+/D [2475 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-2484 0 obj <<
-/D [2479 0 R /XYZ 85.0394 481.4562 null]
+2478 0 obj <<
+/D [2475 0 R /XYZ 85.0394 752.1468 null]
>> endobj
-862 0 obj <<
-/D [2479 0 R /XYZ 85.0394 441.1625 null]
+854 0 obj <<
+/D [2475 0 R /XYZ 85.0394 713.3996 null]
>> endobj
-2485 0 obj <<
-/D [2479 0 R /XYZ 85.0394 404.0002 null]
+2479 0 obj <<
+/D [2475 0 R /XYZ 85.0394 680.4742 null]
>> endobj
-2486 0 obj <<
-/D [2479 0 R /XYZ 85.0394 371.4021 null]
+2480 0 obj <<
+/D [2475 0 R /XYZ 85.0394 644.9975 null]
>> endobj
-2487 0 obj <<
-/D [2479 0 R /XYZ 85.0394 303.5162 null]
+2481 0 obj <<
+/D [2475 0 R /XYZ 85.0394 579.3371 null]
>> endobj
-2488 0 obj <<
-/D [2479 0 R /XYZ 85.0394 229.5618 null]
+2482 0 obj <<
+/D [2475 0 R /XYZ 85.0394 507.6082 null]
>> endobj
-2478 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F63 1385 0 R /F22 977 0 R /F41 1238 0 R /F53 1333 0 R >>
+2474 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R /F54 1333 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2491 0 obj <<
-/Length 2682
+2485 0 obj <<
+/Length 2852
/Filter /FlateDecode
>>
stream
-xÚíZÍ—Û6¿Ï_á[4ïŬHJ¤´=¥í´M›M²™é~¼¶Ù–Çz‘¥©%gêþõ  -Ù²»_‡=ôÍÁ
-+¥™Yi…ÍlvA3 ͇R^ñ„¼ê¯Qåg_=»2m`r”XWuyjVKÍLvÝ,/4a–*K…2p(Ff½^ƒ‹•‰
-².®C!MšŸ˜w2«rBŠ…ªŽ¦ëžÊeõS«rõ(ZFý¦lgqDB¿µ è5íne•ÅŠ¨k÷Øné©ß=Iá¼uù9Λg« 'þXv=Þ|Ѭü, ‘ðýÝ?ˆ‹b°,ðn*ò<·³9!Šš_Ó&Z•}¹ÛVM¹â犸˾>e`²NYŸ+ÅWŠ¾p;’³YšÌ:ß}¥ ˆmœñÎη›/¡ã°ù8á„s¡¤ Ó¬~wšö©¯Ú¦c{[úmÚž%­VǬ/màsÚPeS‘å™ßPE³7”Sho`°l·[Ú
-x¨asÅ¥Ø4&FI}=6‡R—c3H¹Mù~"6%d¢pøÁÓàåvw8µMªDÄi¬®¤&¬9Bå"ÖÐFæÝ—=x²%mšÌ³ÁÉC›¯jˆõ¼©–"},üâ²`î¢$ºÝ7+Hõ*×ÑWåºØפ#snéZîw¤¬é‰óÜî>VÍ#=Œ-‘RF—ý§¬Ð˜+®ûo uÅ^jcÿ%˜Ä;p[üZm÷—j‡üÈÚ
-0^]72HMX9(%â\¥c3É*ñ‰!1ѧ¢Þ—LkéwÁ¬}ç (Åé[a1H¥4ƒu»#6Ë¥>í
-zW2ïªGoˆÅÓ´âBâq&_•Å²¯>½+IZçCcµRÑv•C+é\€”²i÷¢õÕ–©nŸiÃŽ€Öý®ˆ†á8"g é¹ê7Dc¦Œê¶¡Â…TçQ÷nK„Mñ©/‰¼RþúÄчJ1ªCùÁ'bumý Ý“ÀÁ_Ë ú¹‹r݆å»xÇúª)mxñÆËÒïÓžkì¤>·|Ï—W$~øЕ=8Ñ‚cl ß©šXϲmV•?1ÔwVaDÕÅÓSMYæ%èç¹Øùƒ
-½LnÀ);zÞ7•K 0$¥ŠÏRú-V+ZŽI¨Û¯q,¸¿þ öÚšèŶzA2èÚ‰€¸Ý÷eÇ{÷bó‚”9`°i÷»À]rWÅ!0ŸO™Ïeù1p·í){Û6ý&ð§ìCYìºiçT KpLxi
-*HÞ7uÙ1kTI“ ™B§@ù8y#jI<`Ú<á¢,Y;ef§¤%Šƒ>ë ¢q¼ð*Æ
-/ ¶ôëpÍ<@…xP×­:ÁÚê#Ž°jŒ#¼UÚ/\Ó‰âÒ6îŒbDvÝŸvë~¬ž–K63à!Ô+zö+”Š¹±(Hç€â@ño
-‹ •Ïr£bÍP Ù
-d]Ðéic®VíDXè‡U'$@áÔP«g Gª=
-$Dãnή–/ÙÇ»‘ÔŠšy¢Qž³ƒK.i fè“K™gW%bEG¶Ê÷(±º°n¼ÚILÀQo¦—§™+°2‘ã*krégY5œô9ýHxædBcp”¥!$&õxÊ]VTLÐì–iý¦íJ"¹ôƒ¤Ýmíqÿ´L
-!= LuP‰ …æŠ+
-i•Eäðžw %Tí| ÿCŒÄþÇ©øsÇû/Á'­ðÖ\þÎÅöPê2|
-RÎ÷»ß»ØÞ•˜¼ =U
-€€ZþÿñÒTñPÒŠ :Ò«µc t¹tx!W9–S·KؾÈ/ÛíSU—”=±~<pJNk`°rÒU3ƒÐ¹ãÊaEšX92ô>ÜŸt£&ÁCÒzÆy2Ê„bè‚p>\×y,怜¤NøEÕáÓ
-@–8ú¡ó1ü‡
-{%ô¾ƒC×
-¥ð³Eb„¶–?GÜÝÑ»¯ÞÜ¿›°qs.²,×CtßòãªCØ•ùv&qWo©Û’!|w‰w%°§û…e¯~xøö݇k+ ¿Æ4Ò”œÉî]_nÙ¡_¶M×îúj¿½ô/:ø G+¦ý×ÿþpüGÄ
-e>/á‡UxÙx£pq21çÑËÿ(qnû?Ò¤Uendstream
+xÚÍZÁrÛ8½û+t©ÊB€
+Àhãwg×ÏÞRßÍ$a¿^Î&_n;¹¼íô:Ö•úvòùK0Ê` ¿L&±ÝÀñ$£ÍI¨$S¡”®§<™ü»xôÖ|굘ZxŒ!„Ï*aZ
+iŒ1˜Le”Œ7é×¢ZQ»ª«énÂãq¾Øïšâ.§îoû|Wä ýH« q0οoóEÛ}ÛÖô´ßçÝ×iÕÜ绦?ª]×Oz»N[Ÿ’ êÞ7û´,Ðê°ô)ç,QJ˜uаe¾Û¥eC»„“à³n×ùŽšUºÉ©Õä»;P‡u²b¢"r°‰HÂq–/Ó}Ùžâ°%?¶%‡ý¸ø¬¢µƒŽ .1nоÁÕ¡Ü7Ô¸_ç¶dg~ìµ–
+7¸¶šÑh`ƈŠ¨ÕÛÔþÜìqë‚ÄZ»Èò“(ã
+ㄦÂ1÷EYÒ˜¹ý*Ý·õ&m‹…Ùvûy êä XÖ;ê>¸™Õ¸OàÜðÛ¾èÜ^°¥S)Âq³_¬©+µ_þ]Wyß½3ÚøïÒ¹Ñ_
+Î>½ù
+¬S@×ÕÍ]H]f{©ÓØd[ïZ†Ñ)žñÔ
+ÍÇ㢡'(›a‹{(¨m‚ NUì{ØæŒæRáñ\‘fA(gæ3žfQÌ;h‘Zuævž´z m,Ú׫ªø›4|¤Ä?Ï£ñùõÙ»ËS꾞Z$‘"Jú17{fŠñìêWÛúýò?ÎùØüäc Bû&oˆ'ÿI¨
+}UMÏNA 5ß’MŸüUü"Ï|H®Á@Yý¢—ñ(tp<€-3‹Ù§†¦N­~évk,WowEÚæÖ‰d¡‰ßû¢Ènéòeª(>d*k1–uýµ¡'±Ï˜Ÿðï”Þ™TŽ}ï>ÑÓí¦yf•:ß·4¾XZ=¼~¸
+^¬:L;÷;zÄcþ(Þ£ñ}j^q¨ìÌÛ)8eBŒ¨g›:¤¦ÔÏMšÙåh€CaCy(•µŽƒú&`a¨\À˜|æñpdÕ…0º
+Lé‘Õ-$®iþ¶I­º„¬fP–‘^MCZ:µu „,ËËbSPâ£ï,Zñ$bQ d?xŽ¤ù¼Œ%ÑËС‹~kb0ë‹Ø$ÛBãæö5¶Å˜„Tµ¤·é# تí˜+jjûÁs4±Âvè…7mº³¼‹¤V¿j¿™Cª6ÖÑÀÁ‚E!SD3 <@€}a4¯2bføÓ~‰çÂæ².Ëú~ø!1Jî”´¤³pZ%;>‘³#2m©íðO.d¨t#Õx2Û
+Ï—6K¬¡îr¢‘ ÍX;†›ß0°fLJ¿±ŠÄñ”'6êazGŒp(Ú4Rzc¢Ä~ã´Œ,¥Ófc p&¾6pWWRwøvŒbˆß„rÆé‡ÉãO€ãšŠûìÞù¿Øo6é÷b³ßÐp}î°v×Çaô­•›0¹j‹Ö™é‡‰¹˜»,7m|˜ ˜‚X`r†6/K&@„%>Ò}IdèÄVµ·&Ð,£è¨|Ái!fVqª£Û¦¯î½ƒâ;ÿÞRÒ[€›ßÈåˆû<8ɇ—ÁÝÄžû¢]Û,ùÀÆd÷Ýdvùa¢Ôø7XåŸ]½=®‘ÉýN©ë~]`nö²xGMÞ÷¯ªÞm\mÚý¼'½.ïœCÌóuzWÔö¨¡çúùBë¨ó‡?G
+Bƒ°E,ôRtÁàt±È·¶“̈Ҋf[¦V”IÖ¡<W”Ðg³ó«+:ë销¶Dæ±–ÈÅsçK@*úÒ•AB—0å?þ‚Ä—.Zãð3¯µ­1ðdjéW‘ZóÜñúÝØòÄ‚1ð:ÎÕ „‘:9>¡¤ã¿:ÆKêpÐíÚ>­}A>^QWO•ðsIËÞXÙ&tÜ?ì•:2… ¾x¨÷¿d4¸,¾æÇ*Ás¿«hXMä©'5±~†*“Ëø.¨2`¢Úœ< aUN›¤„ÕåXôUæØFú9&¦¸ êØ2Î=¸õÔ Ô32R€<aø#÷> Bì¿õ™v§Ç"͕΀»
+ž;/ñ„IA¢‰Æ367ö´67? Ÿ‡·à'øQf{—Ôk ŠgŠé᪛©Ÿÿ»Té.†è•@ªñÏ õn÷UóÜrFÁ
+Á”#Lž.±2ì<
+Ðœ!ÔBÚÍBÆ–Qèn<'S€3àUô|ºX狯YãâH‚Ò‘¢kÿÁªT/!¥úRˆªمу.W­)óUz”‡M Èg)ÕÑž¶®Kö#¶|¨ê-¤4¹i ÏþKS`‰PÈUü7ª,âÜõ àqì¹ëT;Æg ÿ<-}\‰K¦¢înЂ½ç4µGß¾8‘¾¢¾?tY”Þb꼘ÈË^”~Hƒ·)dûÇ‚C -€FCÁ/ n–»zó5xV| 1Ö¢/Þ]Öùnàa<$öìnÐ9Ôÿ|;øo°|‰G Þ‹wà k§.‡ñ#ÕÝ=þcÝÿ \‡dBendstream
endobj
-2490 0 obj <<
+2484 0 obj <<
/Type /Page
-/Contents 2491 0 R
-/Resources 2489 0 R
+/Contents 2485 0 R
+/Resources 2483 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2477 0 R
->> endobj
-2492 0 obj <<
-/D [2490 0 R /XYZ 56.6929 794.5015 null]
+/Parent 2461 0 R
>> endobj
-2493 0 obj <<
-/D [2490 0 R /XYZ 56.6929 750.8289 null]
+2486 0 obj <<
+/D [2484 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-2494 0 obj <<
-/D [2490 0 R /XYZ 56.6929 162.6734 null]
+2487 0 obj <<
+/D [2484 0 R /XYZ 56.6929 429.6475 null]
>> endobj
-2495 0 obj <<
-/D [2490 0 R /XYZ 56.6929 86.4068 null]
+2488 0 obj <<
+/D [2484 0 R /XYZ 56.6929 318.7904 null]
>> endobj
2489 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F63 1385 0 R /F22 977 0 R /F41 1238 0 R >>
+/D [2484 0 R /XYZ 56.6929 255.7541 null]
+>> endobj
+858 0 obj <<
+/D [2484 0 R /XYZ 56.6929 216.7999 null]
+>> endobj
+2490 0 obj <<
+/D [2484 0 R /XYZ 56.6929 183.7836 null]
+>> endobj
+2491 0 obj <<
+/D [2484 0 R /XYZ 56.6929 148.216 null]
+>> endobj
+2492 0 obj <<
+/D [2484 0 R /XYZ 56.6929 82.2578 null]
+>> endobj
+2483 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F42 1238 0 R /F54 1333 0 R /F40 1178 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2498 0 obj <<
-/Length 2389
+2495 0 obj <<
+/Length 1974
/Filter /FlateDecode
>>
stream
-xÚµZÝsÛ6÷_¡éËÉ3&äÍœëÔÉYjï®I‰²9‘DÕ¤Kçþø[|Š@ºiï&3.v¿]ì2ÁðL$G˜©|R¨qLød±9Á“;x÷ú„8šÌe}ªïç'}ÅŠ‰BJP1™¯z¼$ÂR’É|ù~zþîÝåÍÅÕ?O3Êñô{tšqŒ§?žßütþÆν;Utzþúrvš‘BbD\“ <½¸™Í._f³W·o¼¾ü×éÇù'—ó Y_{‚™Vëד÷ñd ›øá#¦$Ÿ|ŒˆRt²9É9C<gÌϬOf' {oÍÒœIÄ%-pP2!9b¹ \!* jð€ÍÁ>1`°Ü¶mµÈ–íê¡Ù|®¾êÍ„Œq$a†ú¦ÜTzXÓÒ@Eà×T=N§DN-7ƒíJ ;²PºñÌþÞÞÚß»j[=”]Ýlís×4k'6Dâœ:±¬
-+vöuÛìÚº=´Š
-T —+ETHaTHÅ÷©Ò9ÈrüNÐâíUB½>˜DçI Uz¤ß "Ú`bLYìÀ.;=ÙÃ.ã…˜Î=ÑS¹~¬,M³Jf¤*sšÜåj¼@¤ >ôn½ìONT³Ý 2¿îèwú<Á#±áÓÄ@*Ἢ‚ĉ8r·Ê_¿ÍíÈÇF½†É<ZÏö¬eŒ` ‡÷GˆsÃÒÆyû°(=I½m«m[wi‡]1×Y²Ý¸+ö¨F\ÑSWœ§\‘"èâh\[DNH8?Hó£zª„b‘RŒr,D¬ÙlW-jêªÃS¬²Y¼ñ]YœPÛaXAC"ŸIA=¢P‘Áô:…)tÅ\¥*×XN!j(F4 DǪÅg’1ÔÞ}ÕÞ4ÍçƒT¿otëµ[û5PùôÌ{i o+B7Ͳ:KrQ ‚(ï@vI–8ã9túp^SÀUKVf¢Ï¡•=@A*”ôMã P 1ˆ|Ü úTÃn¨Œ¬~`îëìølI$
-aG"¥‹½;Ôþ!ßÙ†ô8·¾P\RìóÏ]®R°£Y4›Mè'|%m¶uv8÷ÂÙGöo>¨N)ÉcÑ’}o.–ª—›ÝºB ¬žøO I]C­ÜïñâO` rÁÆ#|Ÿj8Â*áÏ:†xT¤'JˆŒì Ân"‘WÛÅúq©í%ï/³ë¿´vøź5ŒüUôöÎ>›¢ˆ©ã¢Ž{1ýÇ)‡¨ÜÝ7ÆLÁ_;–ÍN_j˜cC Ü^µÓ:{™&ªêá}ùTùõÆ—ñôzvmg ³Ò8ÜD·lEìÕᘩ×k×Ûú¹Ù>U]µŒ{à*ï Þ=Ô[©Ì„qõèØ»­ôŠ
-Ä ²ôäQ
-¬ÊÅ}Êc—
-1ÚnÒµ…Ç’tE^¶õÒ½úYcY®ëeï[’¹D´ ïkcÿáÉ_-«vñPªÔØßòålø*Hq$
-YÓQyžæX^t $•HÞõAkòÂÂî¡ðµlªqìײðèkÙ>ÉA-Û¿›ëÙÕÃײŽW,µ<ðAûŽÀ=þ™'Ð [ÇÑã,ÒwPÊe_ø¯Q˜¡\WtrL§@s¤Tb0"9&}­†›þ€­Õ*ŒäméÕ»Ñã¡¿oßK:ðý?Gú›w ®Èÿô§õýÿ"È¡µ—C7¤ ë¶Z¯”–äÅ¡êá#ü±îÿƒ¹æendstream
+xÚÅYÝoÛ6÷_á·É@ÍòS¢ö–&n—6K²Úí6´yP%Ù*Kž%§Íþú?$‹²l뀡@MÇï‹w cøGÆR ÌB>BŽ&b¯Gx¼‚¹7#by¦ Ó´Ëõj1zùšÉqˆBŸúãŲ#K",%/’OÞÅýýìöêúÉ”
+ì½B“©ÀØûõâöÃÅ¡ÝOBê]¼™Í'S"9UL\±ùØ»ºÏg—ÓË»³÷À1yX¼Í-°.x‚™Bõ×èÓ'p†·#ŒX(Åø|`DÂŽ×#.œ±†’æ£ßZY½tH<ˆ‹ñ”q$}0ÀC@'Tpj#,@;Ó@„Èg”µÚätH› —ÒfRTUO“j¹-×_ÓçÉÔm~šæJ5/_Þ{„
+$h‡1KËu”†ÏÙˆ 8ˆ–í¡¹é².³<G
+•5zò’³ò’le˜7Qý8 ˜HRô_ìªëˆxÉ/}ÚŠ°r*ÇSBP(Õ“—…=9k7Ëñ”rb߇u1)Ñ®fóË÷×÷‹ë»ÛvÑ~[ «ÀÔ>s,?¦ñפ²ü]˜G”úÒÂ|J·ÙgŒiZMV¯~LÕ@zq¹ÝNˆôÒ¸.ÒÊΖK3y•æé*ª³²0ôy¶*Ò­™ûŒ¾šÃÿÄ®±t‹†vS–_£*Kì^UGy–‘Zq LGoZöâþh6Pño`VåNâ´K…S¨_P„&.5
+ÅüÓÝåÒíXº‰è–KíÛÄ™ßu_ˆxÉúaÖ…Eˆ„¤
+v¬üq‡sÁO#l¹ :ÃC0?p1Î[_¯œ;Uã1I§l&­#C(‹™ß9Ìá ® Æ›‹íKVDÛgc(ð‚½U“îö92­j£)Žp)Øi‹u¹Ž[¬åÒ»²˜j4‚Óe¥c6 *ƒµ'a¶\8õI¨€ ] ÿ©ÙúýÅ¡ AY\õFÿÒ†‡%3œ% ýšy>›™µ7ó»ÃU³Âm
+À®ŠM©ÊL›U,̬ÒâÈd…°JDéó¥ãŇÅ/wïσ¼.êt[¤µÙqþ 7ÅÚšì²,ªr[g»õ~?Ž÷›ý8†Æ”˜ úch•1nQÇ%´Ñ*mr,´¦A
+IÏ©!2TOQ~ô½à
+´oQ®;vM+,«&Íb–9Žwö‰®ˆS½õ~×/iÛ g%ï­k;ªÔ;XQQñÜÔ":òZ¹G=qܸÍV?ü’¾ÿ›da}µV´ 2"c!i@)+@sÒ‡.Àÿ„„»ÿû?\J Œendstream
endobj
-2497 0 obj <<
+2494 0 obj <<
/Type /Page
-/Contents 2498 0 R
-/Resources 2496 0 R
+/Contents 2495 0 R
+/Resources 2493 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2477 0 R
+/Parent 2461 0 R
>> endobj
-2499 0 obj <<
-/D [2497 0 R /XYZ 85.0394 794.5015 null]
+2496 0 obj <<
+/D [2494 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-866 0 obj <<
-/D [2497 0 R /XYZ 85.0394 769.5949 null]
+2497 0 obj <<
+/D [2494 0 R /XYZ 85.0394 705.0262 null]
+>> endobj
+2498 0 obj <<
+/D [2494 0 R /XYZ 85.0394 632.6194 null]
+>> endobj
+2499 0 obj <<
+/D [2494 0 R /XYZ 85.0394 434.4344 null]
>> endobj
2500 0 obj <<
-/D [2497 0 R /XYZ 85.0394 744.4041 null]
+/D [2494 0 R /XYZ 85.0394 373.9828 null]
+>> endobj
+862 0 obj <<
+/D [2494 0 R /XYZ 85.0394 336.8246 null]
>> endobj
2501 0 obj <<
-/D [2497 0 R /XYZ 85.0394 712.3006 null]
+/D [2494 0 R /XYZ 85.0394 301.0392 null]
>> endobj
2502 0 obj <<
-/D [2497 0 R /XYZ 85.0394 646.0353 null]
+/D [2494 0 R /XYZ 85.0394 269.8182 null]
>> endobj
2503 0 obj <<
-/D [2497 0 R /XYZ 85.0394 555.085 null]
+/D [2494 0 R /XYZ 85.0394 206.4448 null]
>> endobj
2504 0 obj <<
-/D [2497 0 R /XYZ 85.0394 479.7864 null]
+/D [2494 0 R /XYZ 85.0394 137.0029 null]
>> endobj
-2496 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F41 1238 0 R /F53 1333 0 R /F63 1385 0 R /F48 1258 0 R >>
+2493 0 obj <<
+/Font << /F38 1042 0 R /F42 1238 0 R /F54 1333 0 R /F21 954 0 R /F22 957 0 R /F64 1385 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
2507 0 obj <<
-/Length 1585
+/Length 3150
/Filter /FlateDecode
>>
stream
-xÚµX[s›F~ׯУ4›½³Û7dˉÛq-¥“Ž“,!‡ W 'î¯ïYvA m#wÚ83a³ß~ç~bøG†B"©©†š#‰.Ö<|€woÄÉPЕšÌ¯ÏY8ÔHK*‡óUK!¬Ηw£ ’h xtv=›MOƒwÓ?Îoß_]F“éå8 B)9Šnn¦×gǶÀŒGWÑõ‡èÒ>»k:ŠÞLgãÏó_ÓyK®«
-9`0Hc6J|fk¤ŒÙ‚'£èësÉ:’„ ÆCèF$Kž’lß:Dš*:ìy@¬ò£Ýã0EkÑg6KªÒú¤ú’ØÅ2¹ß><¤ùƒ½­‰!Ë4ÖZj.%LÂ4
-a5âôctus9uº ð0 éËZpn‚ 0‡Ñý6Í–fId4{ÁUÚ§g3ûðöÖÞ¯6c¢FÅÚ>5{êó¸êj,Rüj-ü.ù¯³-Š5:Á˜PI$ö% VZ»_“çOÓÌñÊãuòªÇèYV|s6##8!0¸`¬³­á
-‘
-UØ;ßF?'!’a¨úfßqCFÏC~J"Jå
-i…,¾·ƒf·0­*iËâµ?ßF!VûáÚB Øä\hWöçA›Á½
-nÚ˜M´¢È^’PÏyñXB)Þ›Ž¡ï…
-Fj3Ù†{‡û»~8Ów!êÑ™ûfúVjß­êÌé$zÃ>ƒÔ1®qÓ~ã„ì¤hZù]À>[Ì» ö€ö›Gœ=›´ú²öà‚¤†Ìu’-häíSXBÃ}]¬V¦OÂB› ãû° lÀŒ ~v¸,³A·Èâ²ô 5"YíŸý¾Ó£°I?ˆ’£kWGWYìkì”C…UtïM»ºð ÷Õúw&°¿R´0¿ñy¿Þ_Ûcß ¿½)§~æAöµº<j¥ªòe L•šÑƒèÈ™‘¦z~ô9’CtR|!7ÿKÄÄÇ£7C€ƒ roZ~ÜU±(²äîƒßþœ,©Ž{ËoZ
-Ň༧£xí7_qõ>à³[5ƒ«ïÃ`¾yšn;Ðþè´ûÄbJQÿ
-›eCÊ(C¸: N0¢ zü!÷¿ô;Ðèendstream
+xÚíZÍ—Û6¿Ï_á[4ïŪHŠ”ÔžÒvÚm›M²é~¼¶Ù¢Çz‘%×’3™þõ  -yäÉ~öÐçƒ(
+­£MwÀ‡Õ/…ˆ ­¥[ŠýXîö} RÕxÊŒ–&j»•Óˆ3÷ÇUS÷[·z$H´\õK´÷ö±§Ö¦ãÞ%=îA¦åÍ}w¨‡íŽ8•[E·çŽnƒàù»%:kègóš–aBjÔýÜ*+ÛØÁ)œ¨hCâ´‰·Ml­¡ëˆ×wn›TnÈL ™ x­} wšuO¾ã: XhË3¯ËõÖkFä‘úú¾õÔÅZÉh¨»ÃÙDÛòl‘ä£m7§mËŠC½³Üêèi?îk:-ô~Ú |ãsÔ5p±Hq÷q˜.sQh7Ýw¤~öM:vàE¢(ávÔÉL\JšX(-XwMJÅÚË4ê÷v]ÿ’$Òퟔ9nFK¼²¹QCm:cصnéé6YD¡í»¾ºÓê†GXY¢ôë²mÃlÎZ4YC|\OåŽ32Ù%yZÞRÜ¥¥Òq¢Ò|z
+ÈG9hþ¬Z^hF­±‡:–2÷D-ðW8®fÜV€K]œ©7ã·vzì·æÜ]•îšy‡4[±EÝ2> .Pu†àÎJá¸ýÇMO£5thîm? fƒ¶òC°,À•nþA\s.ªu\`˜šwQ€0à¤íj—Ý;GÍõ€~„”‘ÊJó|*¬»@€w;R°ZŠÔzºûuàÔ&9ïìr7³ù"U6œ±bKaÂ0Õ'‡éö$zÖ·£'blXZ½¦ì”/mdsÚP™iüù4uí™W¯»ÝŽ¶^ØÜø’ojÀŽèOøæXê²o)·)?Ìø¦
+õÇ Žƒ÷ãçXÚ›èÅ®~A2
+{pÜã`{Þ¼Û\ðu\Ùm»ã!p«snU>æÃ9óÁÚ÷»ëÎÙ»®¶ÿxÎ~´å¡¿`W®š ¶ 1" ¡CIIÉǶ±=³æa•0E,t¢<ÚÌá!Ä-©‡LXX»WÖòì›Ý$QøÙ<±${<±¢@´Åêm¶Ly‰ÿ©jThæ°w©(¦v?ÃãÕì\~[•J_ƒ Oœý×sù§ucuu^²ùüæL}ô(¯>Ç€¼?¾„›*C»ý<xK]AjŒˆ§àAÀ6kH|<»„
+ñTl%„€\Òë;
+À–$ú©÷®¬G +¦xî38”:–¿]Œ?‡ßÞÜPßW¯oßÎh'YšX¦é Aõ·~_õˆ¼r_Óâù$nÕûú‘JÞ9‚x˜˜WqSûÒÔŽñ]3¶NÂÒÿëÿþ!—f±Êó Ÿ|ðc't6^)Ü.¡“§.Åÿ0{ªû?n€ :endstream
endobj
2506 0 obj <<
/Type /Page
/Contents 2507 0 R
/Resources 2505 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2477 0 R
+/Parent 2511 0 R
>> endobj
2508 0 obj <<
/D [2506 0 R /XYZ 56.6929 794.5015 null]
>> endobj
2509 0 obj <<
-/D [2506 0 R /XYZ 56.6929 692.8049 null]
+/D [2506 0 R /XYZ 56.6929 635.3205 null]
>> endobj
2510 0 obj <<
-/D [2506 0 R /XYZ 56.6929 544.1607 null]
->> endobj
-2511 0 obj <<
-/D [2506 0 R /XYZ 56.6929 446.1895 null]
->> endobj
-2512 0 obj <<
-/D [2506 0 R /XYZ 56.6929 379.4876 null]
->> endobj
-2513 0 obj <<
-/D [2506 0 R /XYZ 56.6929 300.8306 null]
->> endobj
-870 0 obj <<
-/D [2506 0 R /XYZ 56.6929 259.3294 null]
->> endobj
-2514 0 obj <<
-/D [2506 0 R /XYZ 56.6929 221.6367 null]
->> endobj
-2515 0 obj <<
-/D [2506 0 R /XYZ 56.6929 188.5084 null]
->> endobj
-2516 0 obj <<
-/D [2506 0 R /XYZ 56.6929 118.8847 null]
+/D [2506 0 R /XYZ 56.6929 83.9254 null]
>> endobj
2505 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F63 1385 0 R /F22 977 0 R /F48 1258 0 R /F41 1238 0 R /F39 1178 0 R /F53 1333 0 R >>
+/Font << /F38 1042 0 R /F22 957 0 R /F42 1238 0 R /F21 954 0 R /F64 1385 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2519 0 obj <<
-/Length 2924
+2514 0 obj <<
+/Length 2079
/Filter /FlateDecode
>>
stream
-xÚ¥]sÛ¸ñÝ¿B3}¨<áðÉôɱu‰Ï‰íFNÛôîh‰–9¡HU¤âú~}X€(Ji§ãs ,€Å~ïRlBáME¨Hå$N%Q”©ÉrsF'k˜{Æ,ÎÌ!Í|¬wg?ý,âIJÒˆG“‡'o¯„Ð$a“‡Õ¯Ó‹ûûùíÕõ?Îg\Ñé;r>S”N?]Ü~¹øˆc÷ç)Ÿ^¼Ÿ/ÎgL%IH‘F‹èôêv±˜_Înæ_þ|÷éãÅ»ùÇóß~9›?tÄù`ThÊþuöëït²‚{ürF‰H5yJXšòÉæL*A””g‹³¿vz³féC”HˆJx<ÂÎ&Œ‘T)°D¥$\–\Í—Ÿ¯ï®ïnõmÌšž‹t\!qœDyU5M¾œ}Ë_Ÿvõ¦ÌóÒ.âÞ"àx”P ‹õšuÞ6ç3¡Ø–Yè¥hŸjŸsÖÅ÷¼Ò Ÿê}ÏÙ´Ä·§Ý9K¦õÑ2|,w¯Û¶Fø93«|Úý²j…Àã¾(W=üF)/óÆžPïô-&3Gø¬cšf;jÇoTÑE¾Ü»ƒôÌÃ0{ƒoYƒÏU®¨ò¾>?ÿlwâJ(»¢Z æ$’Š€ý „K9²ÿ˜eØ-}±”0!Ëî*Ûä#2á‘éŸà #ó¹Œ/z¤hðÙlóe¡o`.
-"DÂOéFŽd‚AÈ Žü‚þŒ­†Ü g¶Ì¶Ùc ~)ÇÑ@E9Šž.ðÛ-·Ïë¸ÉcSãbctŠz=æ2
-„I(€vÍX €™Gk@0‡u%
-;Öþ*Û ÓÜKi±Ÿ³ïy€Ç‡}{œ0*›`Y cUm‰2ض!Æõ÷'ÉBC :AÈT^߆Mv]^U%$’éÁÇ:®–Q„§Ñ""‚ÊÈêÁS™­Ô€ÁBˆÓtuX#„…U„ “QHÙBû#A¥Ëþe(A•mÞà¤q­>v?i¹îp”v¡)>|ä>AÂ÷P±ti WZÈi]éNƒ·®Š?Bªl‹ÁÕ"ˆ•J}æ›ÅMÿaìÆ}zYëªûè£6 ¾uÍÿvw3?®2<sŽ~¤2Ö •qXFeÞä‰T'tH#G†Y¥‰Ã#ß{ͧ®zòÓ][í]µnës4Q
+xÚµY[sÛ¶~ׯÐôåÈ3&.ôÍÔuj§¦r.MüÀH”͉Dº"åwÎïâ*R‚ä¦9g<c‚àbw±ûa/cø#cÉf*g*E>ž­Fx|ßÞŒˆ£I<QÒ§úa:úûk&Ç
+)AÅxºèñ’KIÆÓù‡ÉÙ»w×ç—ÿ:I(Ç“ÐIÂ1žü|výþì­{w¢èäìÍE~’LbD\“ <9¿Îó‹WÉyþúöæç«‹ŸÜM]Lƒf}í fZ­ßFîðx›øi„S’¿À FD):^RÎOó3ËQ>ú%0ì}5KcÖàL".i1%cBâœìÁŒ2k÷ÓonõF€œö¬‡Ç (#™!»¬»r]—5QþÜv媵/¯šºmÖ]µY9. 4E,Ô±Iá [6`J°*‹Ïë¶-gɼ]¬›ÕçòY¯ÕÄL ”Qn¨¯‹U׌a”rKÔctBäÄ23Š}¤4³#ë77ÎíóöÖ>ï˺\]ÕÔö½kšåv#[ëi©
+°¶›?×Íc[µ»àGÎàœ#™*s½PžÂ8ŠnŒ0—Ú±=Æ) ;PíÃB€­?$OvG sË€PŽ8U€-³tY>•nã9T!)3å¨î<GF4ŒŠˆÅ‘H‰R,ï#"
+FæJRŸÊMû@
+TZnBvE*†“ô¸HOÙÇT«Œ(>ù¾uæÊ<KˆíŽ)çÕ}Ùº "v³®º‡•«…À®[ºrQl–Ž°ò\ûÜxIŸšîa_f=ßÎQ.‚«¢€0&#/8 GuÄžÊ8€tÀ1‘[쉌: /rà
+TÆ@.§‹AÁ‡Q&ߦtåàNÐìíUD½A&ÓùCë2Ð/‡€631¦¬íÀ/Ávz²g»„gb2õDOÅrSZšfÍœP@Äv¹£Ïɨ¯4V/û“ÕÔ[AæéÎþ¦Ï¼=M¤R¡Ti‹„ˆ¥wÚ‡‹[åÎ ‰onò©ùب×0™ÖÀ»=k
+k¬¡§öZ:ºßÒmQ—¤ þåÂʲ9¿Û$í^õœ¶ž D­ûDu=ÑG¢˜d_£±GªE8+T•µ*žƒYŒ—ú†ˆ-ܬª®+çÈ_ BWHRb‹‡ËXÞ×m|IE-õáÂ@$U“f Ž^@é—|áK2¤t[¶®ÙÚ­o“LYgèѼèŠ^ù 3[tè·€Ž!ƒ¶ƒú»=ÌT5´‹¡(ðÌVÅçÒ +·¹Ç¦m«OKÇÈnÂŽDJ6´}è
endobj
-2518 0 obj <<
+2513 0 obj <<
/Type /Page
-/Contents 2519 0 R
-/Resources 2517 0 R
+/Contents 2514 0 R
+/Resources 2512 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2477 0 R
+/Parent 2511 0 R
>> endobj
-2520 0 obj <<
-/D [2518 0 R /XYZ 85.0394 794.5015 null]
+2515 0 obj <<
+/D [2513 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-2521 0 obj <<
-/D [2518 0 R /XYZ 85.0394 752.1413 null]
+2516 0 obj <<
+/D [2513 0 R /XYZ 85.0394 751.8417 null]
>> endobj
-2522 0 obj <<
-/D [2518 0 R /XYZ 85.0394 646.9327 null]
+866 0 obj <<
+/D [2513 0 R /XYZ 85.0394 710.9179 null]
>> endobj
2517 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F41 1238 0 R /F63 1385 0 R >>
+/D [2513 0 R /XYZ 85.0394 673.4789 null]
+>> endobj
+2518 0 obj <<
+/D [2513 0 R /XYZ 85.0394 640.6042 null]
+>> endobj
+2519 0 obj <<
+/D [2513 0 R /XYZ 85.0394 571.8115 null]
+>> endobj
+2520 0 obj <<
+/D [2513 0 R /XYZ 85.0394 458.6673 null]
+>> endobj
+2521 0 obj <<
+/D [2513 0 R /XYZ 85.0394 380.8413 null]
+>> endobj
+2512 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R /F54 1333 0 R /F64 1385 0 R /F49 1258 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2525 0 obj <<
-/Length 3027
+2524 0 obj <<
+/Length 1738
/Filter /FlateDecode
>>
stream
-xÚ­ZYsÛ8~÷¯Ð›åŠÅà x<:ñÏÄvÖÖÔìÔd(‰²X¡H­HÙãýõÛnP¤DÉ©ÝÍT  F£Ñ
-†ß¾]Ý_Þþól¤Œ€)0AˆáÝÅýo_‰öí,VË›«§³¿Æ¿œ\åÚB£fÿ:ùó/1˜Á>~9žŽ#3x…“q¬ËßhÏøZ;J~òtòF`kÔNí;ßDžQ~
-\ ÿ.‹ôº‘âX®ŠxìJH°û'JRé5ËsêMRƒ3áUì¡ )«­l9ÜyZm¥
-YPÂô$'r2{£‘„è|¸CáöFNìñ±J­:1lŒÚÕ™æÉ”ö4ä×E6]PwšT)õx{°äßYUgÅ3‘y³0©Üä3fM~0ïŠ-(¥Å4Å«‰CÄ›9±ñB©pÖ
-Ùڳ싔¤€…”rÞ-töx¥<ùÑÎŽö]Š†y–›ª&Á^ýPgé‹ßÆ_>?Ü_cîxN¤û‡=¢d"sǃû¤X®ƒ„û7×Cö€Œ ;[' ?l`ƒ¶½˜·%aÏ°Sœ§kf¶S¹hd’åYýÖM60^Ôöðyå¤NPy- ÈH³‹vL†I²Áoec
-WR ‘fý¶ªéŠ= wx1Bð8Ü[\Gàî¸,Ü_ú´öCpòô%ÝóÐq2"u\1ÇÔ£XÇ?  Nlºš‘¦Œ—q–N6ÏÏá§Uìð‘‰À µx'®µ¹Ž™ã²Gö¶W+(aâw–tL=Kvjá-v–¼Èóò]°Ð\×a_q¦ÄïB¨Üúm Ú¤ˆh¨Ø>s¥1£a8µ‚²9OX0g#ïö’F8UB³<›¥LÏê‘)sDZ9'JÂÒ›ì í %‚(èZ‡sQhMFQRg¤»oi5­©k} 𤙫„$i‹Iʘlä/åt†¡Nú6þ)6‰­¼"çÉU2çåÈ,ûT dsjßÊ 4ÁÎNÜ´1„#+NkbŸ¤}>aS5¶±;PåKûú,’¯E·QL%~˲ü´
-9ÝŒ…êp!UßÍðºÅ O?œR­BkatÊ•OVs)T5Xºæm5eYƒ ïîÆç\ÝÃ9eŠË½»ÓiT®³¥-I ò¹vªØZ³È°ZáBÏÂF }Z_7ëM»æ%º«» †´r˜‚HM T+}Ïßö®að,zhÏê×ÓeI]=<}mz³¦·p=»'œ½Ì©¶E6.Ãë…Ý]H>zh§årµ¡3®Œ§½¥Éš•B0KQϸz.žî)êÀPGù£E¹YÓYòVÙ#†[~.ÊuSæi²¢ž] ­Šù–eQ/XhwuKjÖ–k‰‚êà‡[¾¥ ò»>çP;›ZfœŠåiˆªU:­3›M墥þ~f`k5ˆtn‡šöŸïx•Îe oaÓº ëqXR
-p=ò,ÅŽ§BýN°nsÖ — ÖßÞ-B!ñJ?–s»•Ý:Tû Éð¸~ W‚<j7­tWANsbw´PÍ(ÕRYPëž9°Þ"
-Å>,¡Üì’Ú Ym&P-ìE´†›Eð®ßWñðb^Ûàa‡­Ïe%Î1»9¼¨MÖM•Œöw½'½)öóЧùfF çð*çæ”U'Xà…º%£(ë®0÷ Eù ¶X#‹®ÉàØÈý·fÃ¥ž³ÍNùŽ£jËU•,qA&ª­¤_9±5;Bõ:ßKT]qÒ²Œïà‹ò›ƒv
-òsŒá0ˆ²ìá­hã;;èpQÎjèuÓŽ”ÔN˜!A‡é/`$€¨Äp'!6yåµî‘ì‘L¨d™d
-¥ç°žpòßcZÈýÕ;µk›ë¦—Åôc?¦…êg@m<ßÍqý®wAí«(êjÈ ŽØ5`‡A‘sÇÖºÍEЋ?æ‘ÿFpN˜¡[ç„६#çÅÝjp­¾T{²¥ƒu$¶°Ž¼Hź{ñþuòüìBzRµŠm¥%†·µ«K¬7ŒlЂVRиK¶Þ™’Áþ¿õ|Âþÿø󶌕KåG_›ë0ú.‹¾Ûއ ‚ÀþàSžTq|\½†«G¿nbzΩ®‚ >í<t|šÁ¾6:™›_Ò¤ 3p•“Q;³~J7
-ñc{Î%4÷XÕ¨èe‰±¥3”½ ÷ܸ͓ܟld3ü–€õ4ábÊ[7O‚ór}4Í#oÛ§-\<n^y½C³ƒ©ŒîýCÑ ëþ{ží_/ù!äȇŠ
+xÚ¥XKsÛ8¾ëWèHUV
+âûûÅÝüæÉ”r ô@qð1¾ûßÚ½û‰¢Aü~±œüµú}´XµÈºè  ¬ÿŽþü S¸Äï#ŒB%ùø,0"JÑñvÄxˆ8 C¿“–£· ;_›£CÚ`\"N™
+1ÂI_äýj.½-Sý«U¾WÈsž¬®¯ìšê»~5®—»¥ñˆ‘$­Ÿö[]Ô}Ôë:“Xÿlyõ¥&­Ì®~ÞJ‚ .%}ÃJª VòT•Ö)‡`DCÈö6ˆÖyRØR $ e—y¢`ý„PaÔG¶lÓÁY-[dm ¤z“ìó#ÛÜÜ™ÀAvñ¹Ò›}îŒQä¯ý€éÚ»ÿ) ݵÐÁ¹ÎÛŠ6iS¾a«Õ[yªÆV/C¶"(ds¶Êõ‹ÎOl!EA«y¢`}[Qø
+y±‡l©ëc#¥úqÿô”OvÙ
+8³©}ñGüñþv1PññxJœ`ª!\™bi
+<'Áã>Ë›¢H½_’`ù[ £°»M7›¶¢Ò`Ó¤ørkwÍÛˆ¨n‰$f¾Åø ÿN¶Ïº×å½Ã8|Gx
+¯YxŒ‡Žò¸‘­ê‰­S šjÊù ®1à†¡ÇÑÆò0èÃcÒ;hõ`í>Oð6æ×…Pa$àP/‚®â ¡*ø²ˆMÞ_½Kñ`¿¯wVÿ®ë³e¼#{ѽžý+¥¬gÔÒ°Ü©ùê¾h_=¹gU]¡ŸHËʼno—Ÿ.\“w“ø‘ûG™ÿhR…io;Ÿ­ùpÏçLÑ
+½g7wsÃÊqºÍ
+¸„xxwê¶ÏãbíbÿcRì!à“|¨,B—Á""ﬧ ’(}Ö‚œPp9ìIøÐÿ<;óJ~“`AIzìl’
+ôk
+.IÙ®ˆq¬†t
endobj
-2524 0 obj <<
+2523 0 obj <<
/Type /Page
-/Contents 2525 0 R
-/Resources 2523 0 R
+/Contents 2524 0 R
+/Resources 2522 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2529 0 R
+/Parent 2511 0 R
+>> endobj
+2525 0 obj <<
+/D [2523 0 R /XYZ 56.6929 794.5015 null]
>> endobj
2526 0 obj <<
-/D [2524 0 R /XYZ 56.6929 794.5015 null]
+/D [2523 0 R /XYZ 56.6929 510.6452 null]
>> endobj
2527 0 obj <<
-/D [2524 0 R /XYZ 56.6929 439.3142 null]
+/D [2523 0 R /XYZ 56.6929 350.9672 null]
>> endobj
2528 0 obj <<
-/D [2524 0 R /XYZ 56.6929 95.301 null]
+/D [2523 0 R /XYZ 56.6929 244.7863 null]
>> endobj
-2523 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F63 1385 0 R /F41 1238 0 R >>
+2529 0 obj <<
+/D [2523 0 R /XYZ 56.6929 171.2868 null]
+>> endobj
+2530 0 obj <<
+/D [2523 0 R /XYZ 56.6929 85.8321 null]
+>> endobj
+2522 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F64 1385 0 R /F22 957 0 R /F42 1238 0 R /F49 1258 0 R /F40 1178 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2532 0 obj <<
-/Length 2297
+2533 0 obj <<
+/Length 2586
/Filter /FlateDecode
>>
stream
-xÚµYKsÛ8¾ûWè°º&Bð"GÅ’“ÄöZJÕn99Ðe³F"="í”óë§ñ¢I ²<»5ÉA  ÙÝøÐh|€É
-îª|Zç›bî›c¢’üÑýÔyÙdMQ•n¬Zn}™­î«MÑ<¬÷L!)%•
-wópÄú½ 59’Ù@S±ƒöC+]\Èÿ ÷â J†ônžÃIñž<ÿ|8EŠ p jóGBДôáç„ÁÍY©þ™~;üqmž'œ¦‰EN$ÒŒªíÈÿh¥ëîǃÐ<nª¦šWî?[éæŸ z«V°(åT÷7ÄîÕz‘?ïYXœîTÚé{Šwl «w΂ú 9 FPK€n¿áæ Í=A?[{Ïí­òç|µ¯(ï¤í//•¯¤d‹^q†€*ð>iO¦'7׳‹«ËÈ¥ü-öa>ÀIS™ö+eæÀÜÍé뤥eþ òcdCv§†ü[‚ÚŽ{vlZ™ÿ|‘ê_Ú›4‹ÒýZj
-g¡ÿ¢\lv
-÷Áur.
-.æ^»ËžL‡Ô•“Âl\ËOFr?èzªý˜¿Å4›^œ9ÉÌnv¬±Ùu6wÔÎ LëÓ$~âµ™°÷]»ßî|¡Yø/Ýœ@ Š§
-áKš
-;¬}vî‡~Ùq 8999»šÎŽ¡\}) l]Ã÷Ί봨¶ƒLq4o°Y!¨Ó0lªêG[áÂó¦ ´ ÈAô›Vº7;*e2>…gªâ¸Xšúë*É@‰<ÏW+¨áyÓäüëèdèÑ Í
+xÚµYÝsÛ¸÷_¡™¾È3ƒO~äͱu‰/‰í‹”¶i’Š¢,Ö©i»î_ ,
+"i|;{®êmS4CŸ„`XÖ A½(äÂgC
+û`R
+ §zîÚWa™¶ù›zµjòÖ#6”à%.†b3X@ZÄDÛyædeÚ4É
+qq” %_þ)
+Ë¡ØéQ±yuWTùQ9‰«£WezçÛ¸D³¡¼÷ŽºòHîûá¿òYáõY"UˆÖgx‹ªÍw©¿|ÌH4~ï¨Çµ/vyÖÖ»gŒE2I‡â?5vÛú´¥QpÅUGÅU)ÛçmþŸ[àöO>i*|O‰N€¡w¤¾O¶žÅD
+"x߉Õ>÷RãâCB°Ÿ!/§³‹/W·ó«›k7©ŸÀC¨Z}5q½Ìú ä«PØÜb2wÞ@âfÉ8Å;Û´Ø!U¯°ýA+-{»N[¤tɯrl«¬¨îüëÅ?!
+ Ý@4ÐüKèsñ§7'Û=oÛún—n×E†6µÊ÷LºNµ”嶹šeEf:›ú”Ž—¥éþ ’|˜}††82_›OÛ]ñöPÐj™]#¥ 3ðÐè
+«fÑu»PP»„zGÃÁÈÐÞg  t–}÷ƒ#Ï°ìL«¥©?õªj$kRSÃî-¢8Ò{ b ·ešånj8@8b¦Bž¯}
+QÊEÜI #Á1å¡åÑÖ6ÂÂLk@Ûló¬P˜Óæ
+ØVl‹åzkž»˜ „p5âdÖ ·?AB]ÀA0‘H“hXEu±aØô¾µ0<¸oÎ7´y
+QhÆR—WÞs«pDîRaâjKµ³îJó¦Ý{Tuñå
+‰¯·äWŒgL£šIŽÀ™dé6]”—ríA”¡‹¡µU€¼ûGE¦KJéX‡Øƒ¢š… P.šÀD;f¢šVÊ:ŠöôPîXÀÞ†¡Æx5ÿ׶,²¢íø ÷®iݾ/¿ £Ê¯³ÎÚß{4­®#0´&¿Š‡2<Œž.×ëèq\=S_µC(vø‹÷±^©ÃYCh:¬šãòèÆo¨QLe_¹™‹ ¦km}E`ñª(UXô>a%„ôË{¡Uÿf›W³Ù'ÀÚ» üMçR- âeQ*w©†JEÝ~¼˜ý…R{+ b.j¶ÛzgàS´=?ÛR»·u±½ÏJõ:bFét¸€Àri”À¥†Éhø¨Ýƒ
+¥¹nÁ{ÝÂ9þëÝ×™ýèþm‹"q­æ¶bóB?[hzaVýÇÍõGT¸Ãú :©­7#³ ë£Ò%á„Ù7€„š= )A§ßÞ
+xüÚ“'ÊÊ„Z¥”úT¾¨Pݯß/uÿ†Ôð÷endstream
endobj
-2531 0 obj <<
+2532 0 obj <<
/Type /Page
-/Contents 2532 0 R
-/Resources 2530 0 R
+/Contents 2533 0 R
+/Resources 2531 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2529 0 R
->> endobj
-2533 0 obj <<
-/D [2531 0 R /XYZ 85.0394 794.5015 null]
+/Parent 2511 0 R
>> endobj
2534 0 obj <<
-/D [2531 0 R /XYZ 85.0394 590.9135 null]
->> endobj
-2535 0 obj <<
-/D [2531 0 R /XYZ 85.0394 530.3944 null]
+/D [2532 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-874 0 obj <<
-/D [2531 0 R /XYZ 85.0394 493.1893 null]
+870 0 obj <<
+/D [2532 0 R /XYZ 85.0394 769.5949 null]
>> endobj
-1463 0 obj <<
-/D [2531 0 R /XYZ 85.0394 457.3833 null]
+2535 0 obj <<
+/D [2532 0 R /XYZ 85.0394 744.3535 null]
>> endobj
2536 0 obj <<
-/D [2531 0 R /XYZ 85.0394 426.1417 null]
+/D [2532 0 R /XYZ 85.0394 712.0918 null]
>> endobj
2537 0 obj <<
-/D [2531 0 R /XYZ 85.0394 362.7008 null]
+/D [2532 0 R /XYZ 85.0394 645.3077 null]
>> endobj
2538 0 obj <<
-/D [2531 0 R /XYZ 85.0394 257.3259 null]
+/D [2532 0 R /XYZ 85.0394 536.5897 null]
>> endobj
2539 0 obj <<
-/D [2531 0 R /XYZ 85.0394 142.9115 null]
+/D [2532 0 R /XYZ 85.0394 406.1825 null]
>> endobj
-2530 0 obj <<
-/Font << /F37 1042 0 R /F14 980 0 R /F41 1238 0 R /F22 977 0 R /F21 954 0 R /F39 1178 0 R /F53 1333 0 R /F63 1385 0 R >>
+2531 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R /F54 1333 0 R /F64 1385 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
2542 0 obj <<
-/Length 3322
+/Length 3101
/Filter /FlateDecode
>>
stream
-xÚ¥ËrÛ8òî¯PÕF®Š8x|Ìœ<¶âx<ãx#gwçu %Øb…"µ"óõÛnP¤Dɇ­”ƒÐ@7€~Sr$àŸ™(ˆR•Žâ4 Œf4_‰Ñ3Ì]ŸIÆ™x¤I맇³ïßëx”i¤¢ÑÃSg¯$I"G‹?Æ?qp;ˆñÕÝl6½œÜN»žÞOdš˜t|q?½»ºùÏùDÈ€*Äø׋»Ï¿ÐØýyªÆ×ÓÙù_?ŸMZ¶º¬K¡‘§ÿžýñ—-à?Ÿ‰@…Ñ tD ÓTVg¡Ñ µö#ÅÙììŸí†Y·tð*¤”ŽÔÀ](Õ¹‹D&MÍ(6ii¥Ý]Ü<Á‘âd\Vئã¬x®6y³\Ñp^Óp½¶óüO!Ô¹ÛÅ;L¢q³´%¡}š]Ì>\HÂ}É‹‚†-µÛÚ.hîñ•Fö)Û o´- [×4›â­~ÿ>”Þu˜± œ¹žhÂéO†A¬’˜Qªu“Wåá)&¸r4ÑQ„Z˜ÑDÊ 5F¹Eîˆî|¡ˆÆ9,×±¿,óù’ÀyV[‚î@pt{n‡æÎÐ#ãйuÂVuc³ÈR”˜ñŸÂ¸øÃcûAläÉS12
-ž¬KÉŒ³²¸Ý½(va]€ÐAÊ°í;Ó#ƒ¬7ˬ!¨+ÐågÈ=3´ó¥q/ §jãÕj5ùc^äÍ«_Ú, r·À}HÇ•
-n%„7½úðŽüžØ5šeAkgI´féx¯¶ÏËÎ:˜7RÑ‚lÛT+xµyV¯„SÛƯ¶„4y蜬+S:
-i`p`#eK¢PZÈ#&p&$2hrÀ¸{$§3¤3‘îêŒ ’ÔhÖ™/öµÎ¿Ù}¾$˜ÑPK}’±鳞’‚–†RÅ=Öf­nÕ$t‘
-·QçàÁAðb ZmkT'ŽÑa0h›ë<`8IC€ô
-=xÌŸÈÉ›ö íapÇ!´î}žÁ«/;* Bü­*- ÕùséØ —vRnÄï³ÛïjçÝ$Yp
-+'Œ,HÍÝâ½uþ<4\7-^PŸ<Eg¯7ùWÞ.ê^™ÖÒÇïf\‘—F”…»÷¡Ô-s±"ûqhI»uÜ8Á‘×Ô¾X§¹šüüzû¶‰ƒHŸ.„hzÞ “CS¶™³ßÒ"ßrFøRPoï—†óºÝ##¨Ëø€S†õ,Œ…Ý/
-’±´ß¦`ó—}ÆÒ(H¤
-O3æ‘ëÝ“€¤:îsvS.P®Üõ„Ú †ƒ,à$PmMÔµ šœWe“å”—öVQ8@ f¥`ìeöÕöðÔ^Ž‡;â=äÏÜ £"n†Ø\åWøQ%Ü+]õÊÛt¥¼¹ë—bOæJ*N©å!S븴XN ¦oæJ¶|~) rOv’µk€·¾$¤A¨A{Ì}v:¢… è<Ëúºvá -Éã.^ZÏ‹£h™>®m9›ýBKˆ{.qZØ€±¬V„ÔVD…«U¡5•¦»ÇPm«Mcý Š½x$Úì}Öé†À°<ÿ›rù0v_'ò‚+öv)LÆ÷·—³HIÃL:9·‹]0=ŒÃºõ—y-åÔa ŽÇvµvN@Lñb³ci‹7p
->Ê/¹¥ë;.—
-ÞW†árÙÁ:!—kWþÙ“Ë4ˆ±X>Ùóqû•DÉi¶<Ò
-hüy×ÀIEûêÿþÙî×raè$9b~UlXy¦ðÒ¤Q‡²Ã¿7;äý0M½7endstream
+xÚ¥Ërã6òî¯ðÍtíˆÁƒÉÝ“gì™8?ÖvR›Jr %Èb E*"eæë·nP„DIµµö`£n4úMñSÿü4V¡ÊDvšdQ3ŸŽç'ìô澜pÂ9¤QëãóÉOŸezš…™êôyÚÛ+ YšòÓçÉÁÇP…ç° .ïžž®>n®~ÿüxûõâãÕ×óÓTWw—×ÿ9‰˜ÁXÀXp{q÷ëÅW„=œg"¸ørõtþ×ó/'WÏsýp& gŸüñ;À9~9a¡ÌÒøô^XȳLœÎO¢X†q$¥ƒ”'O'ÿî6ìÍÚ¥C‰â4ŒE¤@4"Leœ‹‡ 瀔D<T*N:± >$6‡eÄ6ú´}P•„‚Éè´¿ÙI‡4@RôH&"äi”ú$?ÕóEÞ/EY´k¸™Œóz¢ÿ ²àUWz™·ºÁ™¼Âg]NFM».5¾~ÓësÎyð1¼í¬^µn‰ÛU·ù$os¸f¯ <ÑÓ|U¶ÌÁ·D$QJ‡4œNª¦Ñã›.ëy™¿è’õ9’p"KAœ‡Y »ø½(Ëó‘äqPTãr5ÑøÒÎì@™#œ5/ÏyhJ]!ØÖnñÖ:w*7m‹'øn$á-ˆƒÅ²x£íT_pRr­«}‰(+}8'HN„&6ÏA‚B¦Á‹Æg£[3H»Øpð¼Áç»6"0£?YÌ«—²Ó! Ð2Á[ÃäДnÇ°šÃ%J¦‚½¦ÍÛYNÔ;ù"¸hº=rõ÷Î…7ëI%z/€R4#Ð;#3|ÓËlhbJNäúîò_84·êõÕC°8L³X’N¡Ám©Â(Š3B©$سY-(ZPŦ£3wü9•
+S.¢ÃŒ9¤Æ<918@&Ÿ³ëjbôÊŠ'’N1ìHã
+›×S„U51e±GVÁwAdˆ¸of¸Ó¼k©^ßá³ ÷U£'ûÕ@F!c<9¢=¬jà°¬LÔ U*iÁ´Ì_w”
+Jb~˜+Â`Ê3g‚x¥Ï*±.ÜÀ
+F|y~þJÓ5>! ÃÁÔ \XÐVŸÍà}¦+´Cì
+‹Ö¦\¹}s|tyŒC˜¤Òc±#TP&§d"ݪsæ‹)‰$&J"QÖóàG]Ùš+®ˆ2X â ‰Àž!6ÍNbªtÍÈ%Ì™Ô!V(T´vo¬*0ìÍ®m›r‚ç%UÄ“5Îä'a ÔpXŒ&:x. ‡+ó1žIu`çw`8Î#:ü^4-¦R
+>
+lÃFÐ
+Ì®ïÃ];ÃAÉ88y»·ú›ùx4’<²Ù¾k] jWsújaFM>%rèŸ
+@; öT:Éßð›²5›·º|ÉØ(®kÜñ6#À%)['„BHtIÏ×·×w_p‹û‡çëû»§°Épu†W{IA;‰ƒ±M¬!}¡>dãÝ7ß Na÷"Þôaоqòwø»½½¼Äì¸l ?ÿ|{ûôâ¤ý™D›}üò ›8àJ‹,’§ëÇÄÁÙ?ΰ1ƒ40:£6­%
+ÁØnÒK:V׃Êi2§ÓÁÕÀü”Z9*˜bY<ß:»“NÇr[Ìm曪à³cÅ6֪´f¨«eµf ¼™¦[ f´ÓÚxË;‡¼Þ˜O(Ýᔜs—œ YÙmëùnï&ÏÀ +#¨•Îæ5epöÞ&ÝhæFöLfõ¼p Öv ¢—ø§à$zxšïN+”9OP“
endobj
2541 0 obj <<
/Type /Page
/Contents 2542 0 R
/Resources 2540 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2529 0 R
+/Parent 2511 0 R
>> endobj
2543 0 obj <<
/D [2541 0 R /XYZ 56.6929 794.5015 null]
>> endobj
+2544 0 obj <<
+/D [2541 0 R /XYZ 56.6929 106.9827 null]
+>> endobj
2540 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F41 1238 0 R /F21 954 0 R /F63 1385 0 R >>
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R /F64 1385 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2546 0 obj <<
-/Length 3245
+2547 0 obj <<
+/Length 2981
/Filter /FlateDecode
>>
stream
-xÚ¥Évã6òî¯ðÍôŒÅÆBp™99í^œ‰ÝKy3yI”Ù|M‘j.vœ¯Ÿª@‘%Ï{Ó}
-…Úa~Îà??•ÏdœGIà+ÆÕùjsÆÎaíÓ'œ™Cš ±~Xœ½û(£óÄOBž/ÖZ±Ï☟/²ß¼ë¯_?ÜßÜþçr&ó~ð/gŠ1ïîúþ—ëŸöõ2Þõ§óËOb•
-z >%0‡e6û¶P8_ü|Hì`K‡4±¥l™$~`G[Þèm}ÉcO¯ÒVgx+y‰ã:}®jœVkg áZ.9çžp3tüˆÁn¡”oÈh€uBFËÊè'³å»¡`rîlj‚Û³(m[ì³ÅyàÇa¤NóÕcM0&FÛ%~Äñ˜³¹n›Ë™×>iœdzvE‹?‹Ÿh¹Â±kmmÄŒæDâ›~ÅÉË“.q–‡²ªÊg]Û[³àÒÑMq
-Å€òÖÒæ^WºÙQE½%B)ÁÓÁiöŠ+)ÂIæ„l|¶‡‡F[vT|·—Ü+Òž)ìÁ/Oùê §«´Ñ8£ãÁ–æM›—¦ÃÂGUWd„š~#\gs:ÓåJ›«I"£?îûØ‘Mv*4¢
-`­ ÚK0t¿ QFšƒºÆÎN@À‡DŒ)…ॄ› #B?`œpð,›êY7ä?Ú£n! „¯¤ŠN»…!Öq·ÐcY·°}Ó-l몭VÕ¡o?R*8Í\5ÁÝÈ7‰É0³G¾'Îðé
-ÌR{´Çn£ËvÑøEæg}‡a£Äñáã{œ¸ ú†Î·g,yKÊÛt«x™ªnŽ*±Š#_½Û†XÇ•¸Ç²JüýXü?¹eÿ·œŠÿ£-îrãý@O½M•é€: éÍ»-¹¨¦17b–»²ÔF2im†
-½ªk·ñÍ26ÑgUt™u_fÔðÑAy™ågäU ªJæýûRA hŸ€bP
-™Ð±›6Óu=! á"ˆpèòl„R.ðÁäð®EÈzfz4<:LHf¨RÆÞ5Â/ü œÐNÚ
-‚3拈'cÝpNNÜ{²©A`¼.´®º2C ‹é
-?0Ùª?”¯8ˆeI·MˆR1_r.ÇáÉÕ 4Г îûÛŽ›'*ÏÃFsæãnG˜´8Šßp;¬nÇaY·3³€1>ñX_ã$_»¾Æ!c“}gï©¢n­N`
-¾•î Ÿ?ßÝÍç>.š~Yìé콤ØçWE3åýÉ×»—TEÍÎ(¤=0» Zq"²!|(Ö5«=Ni1¥ÓÉÃúšaCoí¥ÍÞÙtz–Û|cK‘8ô>:Vì“x™›GUzÎ׸%çÓé}óÉŽåº*ŠêÅòÎCoi¬ŽGä¯
-'"˜=™¤Íþ0’1ÜòcYÕýÃu¡Ó-Îìf&pÞ¦*Û'":ÞÝ‚úýØ‘í¤ õÿæ¶pbðÝœ‚ÁÞ¡Lñ6Hõ ©dªöy§/KLy;zš¶ª|µçSF—1èr.cP64í–ÙDér}åÓ/~¬÷Oÿ÷>íþÀ+ˆ ŽÇG¼*$–&ÇçŽ)#K®ä>ë
-J‹h‚÷ÿU„mendstream
+xÚ­Z_sÛ6÷§ðÃÍXžV ñ—àôÉi”ŒÛ4ÍÅîô:Mh‰²9•HŸHÅu?ýíb(Qræî’@Àb±Øýíb´8Oá¿8w&IU®Ï³\'&æ|¾>KÏïaîÝ™`ši šÆT¯oÏ^½Uî<Or+íùí2âå’Ô9q~»ø}rõñãìÛë]N¥I'¯“Ë©IÓÉOW~¹zOc/s9¹z7»¹œ
+ãœ"‹d6¼ùps3û~úãì··Ÿ~þéýÕëÙûË?n8›ÝöÂÅ©BÉþ}öûéùÎñÃYš¨Ü™ó'ø‘&"ÏåùúL•­TYÝœý³gÍú¥c
+1Ê%ÆÉlD#RŽiÄä‰URy-œ;se u¤ž>4Û ýXÏí·ÐufRÝ×ͦªïibUÔ{.‹Mû95‚éÖMÝ=0SNåç4•u¹ ¡~¿ôÈv«§²ü3lI‚ô¡ßlР‡©InŒô‡ZWõ¶+‘F¥n²¹nR¶å¼«¾”«çK!Älªu>ùõÒÀÑ:`ÙÃ<›ØØI»]â*ý/fÓ=”4×ø©e[ò’ª¥ñy³~„mô«ªi¶-çM½hy¿[„WCå_«j^u ‘§|$A¿”uG/Š®;åÒÓ7kî]IÆ.Hö-õ¶mI‹º©Ë ê7›0{A?Ó“‹ä
+?ÔÔÔ>=Tóš,häÏò™~WauCí3yÜÞ­ªö€²›î7ùL…p‘ùäjÙ¡…hºèvBxL†5¼)Bdj²$“Ê ‘òT­Vèa’d€¶ªç«í‚œRV¡%vÐAxwŒLE<ê¦2”1#h[ˆ̺ƒ£¨ÌN®—{«¥ê ÇrOŽé;j›Ç®j˜ã…å9 Ü‚bü]YÖ=úìÄ:‹rYlWýð‚ö³”ºnž°9êÖ¤Iž+}ÚbªãŽÐSyG¸sû&ÿ?Љ2¯§‘oèy¢”CÉJ¯Eì`­¢Œ~0 òž€*¬o¨½c‚#2°Z
+êØ0ÇT9G
+ö3 òîRLJêòÞüéA€ˆv!€‡ Á¢ZÈö" Ú¥;D»ÄÉ\  ™‰*îï}àklõ¡J¤“kÆÇoÃ÷"ewø_{‘’ï
+ÈøS!˜A‡ñ§0ðS@ S…õ -ºc2}WQ»ð!Jõ
+*¬o¨õ¦€E‹rUÒ-­RÑ'¥ž…OJy'4²t#|ÙÊs6jWM}_nú;(îgq_¤8Ða±‚ݺxŽãẠŒ=åcÓV]³¡‘AûÐ<ùB ꤫ÓcÈÓ`håiäÅTÇ‘×SyäU£AMHWÕ`’/Åê
+/]Õ^ôwIÏd£š»ò¹–‘Ï·tŸŒ™è™Ï?$†œ
+.žõývíŸìpŠ’3 ±mµ‚kcA£wÏ4Êe¦ç혓¼7–ÌãâùÂol'ë¦ï>]°4‹~ì!ôÆŸC/ÖÕ…÷wèÿf”5© Ú5D·-§’Žfüƒ/³£Ç^þÑ?×ÚÝÃ1tûçZ?ñMô@‹GhGâÀ𹽄3Ãásíà†ÒÞù¢Ô °õw.Üν*—çx“<µî›8λÞÍ>Ì>]áÃîíì ñøqöuÞ^¿ŸÝ0§ø*…sI“d)¿¢UÂv;" w|*û×кѦàlËM³^wåj„qž°}±ƒOÒ˜ºñ£;;ór»ÚÅR&:šÜ€²<-½fâ’n÷èß,©åç9‡7øšdб R¥‰Ó6û?Öð/ù¦(Šo*ü7"5^ø X¹ ›=S¶\ïätl4
+Ž¨N(8P½¬àS»F
+Þßv\Áñ¶ÇŠ’‰Êœ}»À’-,#C,X6Mçc"–}ÉH„ÆÏ-@å0«øêH)*¸]Zæe…šâÉG¿,„­9ÎT
+¼„Å1)á°_øƒéAùj@`™½ ¯ÈÃg—¹
+l2ü úíó ìjæM¸qŒßù ÞØñ 0
+{(¾”qª±Š/†‚ó Çr³®Ú6TˆûykÊ +«õfƸzóó‹Ùé.œ
endobj
-2545 0 obj <<
+2546 0 obj <<
/Type /Page
-/Contents 2546 0 R
-/Resources 2544 0 R
+/Contents 2547 0 R
+/Resources 2545 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2529 0 R
->> endobj
-2547 0 obj <<
-/D [2545 0 R /XYZ 85.0394 794.5015 null]
+/Parent 2511 0 R
>> endobj
2548 0 obj <<
-/D [2545 0 R /XYZ 85.0394 143.9886 null]
+/D [2546 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-2544 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F63 1385 0 R /F41 1238 0 R >>
+2549 0 obj <<
+/D [2546 0 R /XYZ 85.0394 304.665 null]
+>> endobj
+2550 0 obj <<
+/D [2546 0 R /XYZ 85.0394 83.5598 null]
+>> endobj
+2545 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F64 1385 0 R /F42 1238 0 R /F14 980 0 R /F40 1178 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2551 0 obj <<
-/Length 2985
+2553 0 obj <<
+/Length 2607
/Filter /FlateDecode
>>
stream
-xÚ¥Z_sÛ6÷§ÐÃÍXžF$Ø>9µšK“ørµ;×^ÓJ¢,N%Ñ);꧿]ì"%JÎ\“@Àb±Xüöh9ˆà¿˜D$™Êi I3˜®.¢Á̽½L3òD£6Õ›û‹×?èt‰,QÉà~ÞâeEd­ÜÏ~¾©¸Ñðæöînüýèýø×·ãÛ«‘̬Ɇן>ooÞýr5R&b ¢áÇëÛŸ¯?Ðا«L ¯ßŽï®~¿ÿñb|Äj‹.#2ýyñÛïÑ`'øñ"v<ÃHÈ,SƒÕEl´0±Ö~dyqwñïÀ°5ë–ö©"6V'ƒ‘Ž……ýû&E*%¥&‰V:(LÉ>…y*TØèôõ‰nQJ)lf@2G2Ë›âu5Ÿ×Es¨ béX¦ƒöÎGòªU{[ œìxW45\M ›E›9h¨ZSû¼(§ šÌiäbG¿K¿º¢vÂL·“eY/ŠYw:lòWµ.
-õ¡
-ãÖJ¶[ ©fÂîÁ±pâÂÇàØ46)ð‚¼Š6Œn†\ÇwxÃr8­Ö£¾z̯.–Á*µ2”_KŸ Á¸;D9ãè*9kƒ¶£XpŠÅN[,üí×Ê @Ü–ØGÏqSrPƽŠ†€ÂzÅêCwEêC¿Dêü‹½,t[7$£TdqB9­Ã—õа±~  &E¹~ ¡)Ý ãæ\öùš~_a7 a´ÞN§E];S…IwõŽ¸‚Ý6ûí¼¿Ì´ÇX[ =|l¯wèÑNËW´ªq Ÿïêï¨ëy.뢛Yøn»ê@sÖmríÒ),'—rÅ!ƒ
-wŽë0˜×¯¸œÓ çL :Çúa»*Ö MQ~ƒo[.!lÌht²£Q.7o7ÀœPÍn7æ—‚y\î.ÝÆÉðrU…îó%Ks9 c ß«6}®àrU^:û·Çöo:N9&µA»ï¶ålÒÓÑÌ®È75³[Uëfá<ž÷ÃÝEµeútHÜd¹Þ‚;f
-Ú-,Ê›¹èÅ®ð`É·œsfØRßákO?Î×J ê¼Ð¬sQ`>
-B»4¡dY× Ñlì!P·Y&™HcÿX:­V˜ª¹×±Ìï|»ÜûNeS²(27 ¦Íi¨n6ä*`¨šÓ?Åe±W$BÜXGÐÏ$ ñ~ ÿÄ7yžSâ¿¡3 ¥yxá¢Ã,<sŒ lÊè¤ ãºàN&ÇW0xÜ6œÿÝwêÛÜ'}3°OçôC˜3­“BŸR‘Þ¼Ðû“…¯²áŠ =^x¤×2V}þûB›ÊåZ2ni(•’%-^T÷ËôpÓøI«Îoꉎ7í\¤…²"ËLwS¼Íž+Ä0òWî5~¬¾uŽiÐ E)Àµö…1mªÓŠ
-T/)êì¦AQG›ö*ª³)
-Ú E­!xlÊi§a mÁÕc{e¾|¨6à W§ÕkÁ.ñËÇyõ¶¨Î¨×S½¨Þs›îÕ{¸i¿zÛ›žò%Z ÚäE$ϫ°bô†?¯ªÆ¹C¬ðDWƯ*½¨nêõ’wN#X”yáö¹‡øæ¹¢øb- ŸhìÓ4ÎQ&9?MÇüTdèQ‡3'¼' ß&ú|u¢E
-ÕÏ _-ø#ÒÁ1ðiZd~Dk‡c” ”Ö‡*§Ìn¯þV-åÙ±PƒâI‘àdø± G,F¥!úõ‹Ãë;òPze¥°‰J»iáý¢è“"­Jýf'4n1K"ÙèZ±
-LZÒᯛ¿ÓoH¨C™V>Îá¿#ŒiØq50
+xÚµYÝsÛ6÷_¡·Ê3B|‘`ßTÛ±Ý4Ž/R;w—ä’ ›ŠTEÊ®ó×ß P¤E¹»éd&\
+<õ™„g<ò‚$¡46^½aP°€3·\ëÇ`ØO£ ¯#Eg7"ÓX‘f_V<V›¼yroÖ?ˆ“T$±ãüâ¥ÎRÁ@*–^(hQçßt@¤ D N÷E–'E–àÍë:(3!ŠEɾLÞRã€ô3©Àxÿ¨}jcƬÑoªå²?<)–$‘\îŸtÙRóÀI¸I¸Mó"«ë€h–¥’t_ôÕIÃüˆÆb_ìõI±º|Ì˵ûl­ÄåI‰Ë"{ ]\@hA {y&Œx*MžýÇù4ºiÏ{ œþ
+ ž;Q.¼«Mȳ!/Cøì_â©¥îN>äÿd÷ü¤•r“_Ÿ³âÇýüÝiÉ7z†x [r2í›_P•A)o~êÌÿ[à(IÂÔ8Ð4!ÍiBRÎÔ¾æ_[êáï1÷ú¤iÖ›ª©æÕaî?[êãߣô&”­à1
+EàM–¨´ƒ¡Äb")ó™¢ZÂI16 Ј—ÈŽ1Ök=Ïšl¸À9{©î®yµZY_0ƒ ¸
+œFk+S¸6{Å™…^fÛ¢q‚¶e¡ëWš`Åà"%ID=(ñ@`PAÖâ¢jíjÚÞ-F®•‹¡Áã»hAÈÛû™êë«KɆDê¾Ú›{j¦[ °@l
+F 96¨„’—ž]®ã`£å²a3 J
+(׋TUAYÒ×nÒFX¾æ¢Ü®fzƒ´©Òæ;ËÇf“¸„épb`t“‘Hme@ÞùS•Ïu_’ņ°·ÔB¯ÁIüÊË÷BzÄÀ*¢(ß²&턉<xvî»;C¹²ËÅpJkGêæEÛºÖß Q‹„BÊ\ÝÉî×d³èjò±9æ$ûíG™B%Ìq×…¼cm‡ÔíâžúcÖâ ê*í¼ð¹ÜA‡4bb')·Èl¢6ú/èÃ\AmÌ!-áÈB6`Œ-J0œqÊê@2NÃNrÞißÞ•.Y£Æ2jï ï]9DðÜeñíæYïÕßVåOî°Rûôï& ÖÙÆüHž Æ bë·Œ)×ç
+]â¤pc>Ôý?¢rÏhendstream
endobj
-2550 0 obj <<
+2552 0 obj <<
/Type /Page
-/Contents 2551 0 R
-/Resources 2549 0 R
+/Contents 2553 0 R
+/Resources 2551 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2529 0 R
+/Parent 2560 0 R
>> endobj
-2552 0 obj <<
-/D [2550 0 R /XYZ 56.6929 794.5015 null]
+2554 0 obj <<
+/D [2552 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-2553 0 obj <<
-/D [2550 0 R /XYZ 56.6929 364.4689 null]
+2555 0 obj <<
+/D [2552 0 R /XYZ 56.6929 752.3578 null]
>> endobj
-2554 0 obj <<
-/D [2550 0 R /XYZ 56.6929 119.0358 null]
+874 0 obj <<
+/D [2552 0 R /XYZ 56.6929 715.1156 null]
>> endobj
-2549 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F63 1385 0 R /F22 977 0 R /F41 1238 0 R /F14 980 0 R /F48 1258 0 R >>
-/ProcSet [ /PDF /Text ]
+1463 0 obj <<
+/D [2552 0 R /XYZ 56.6929 679.2933 null]
>> endobj
-2557 0 obj <<
-/Length 1716
-/Filter /FlateDecode
->>
-stream
-xÚ¥X[sÚF~çW0Ó< ›½kÕ>96N'¶kœ¶3IX@(8î¯ïÙ‹„$/0m'3aWþöœ£s¾sY‘>†¤¯Â,æý(æH`"ú“U÷çð·w=â1Ã
-4l¢Þ>öÞ\±¨£XRÙœ5d)„•"ýÇéçÁùýýèöòúϳ!xð ƃ緟Î?¸g÷g1œ¿φ$Ž920‰—·ãñèbø0úýîftöõñ}oôX›Õ4`flú«÷ù+îOá Þ÷0b±ý'Ø`‚iÕã‚!Á«ž,{ãÞoµÀÆ_íÑ+SH(|ÁUÈ"F’Qf}q£$«õR£I¾B¯0f¯¨$›{sEiã8î‰B‘ Î‰×ÙÙa1(iaV|à%½ögIãlÄÇÌXlŽN³¢Ð“áwý<×Y@“„e ïãГÍQ”º¨4j§ð Æt O­ÞÒG&±ð¼#Ú‰c©Šýá$›XbwdÈâE\@hA±Ô½G[ùz“îàB0Q”Ê Gµ?ki3\†,BJn±ãÑÈøüÃø.C*ᢇ"gç™þ‚Vðñdq“<
-©XT6½½¾½tŠb¯oºJ³´(7I™oÜ£=Ó.tÙD»G“l›,ƒ>WˆJ)½øÅŠ0x¸ºp©`q@'ˆš
-]ú#Ží²ÉvàØ.=Û›0/ /`ªäLOÝ6õ\! Äj¥U?ë«—h7©f³mdX¦ŸÜb¤¾¾ç³}¹4öíØn&yV&вy'¡³ü©Q
-Ù6-Ärým;Ÿ×1±–ö\1¹ì„Ϩ#>«PÖg£°ÏàÁ^ -§1ŠDú¸i5*`[ÛiŠŒ-ã>ÚÜí¥s‰£Á<ÝÁmÔ>»[ël<þà6ÎF¸ýÓ˜ þXT¸Î­a™ºÝSZ.œ˜û›‹ñO„¸ÇÅv½†iÛmÒÒ!¦z–l—&hVîž®¿O
-B~q½™B¿c¢Ó›ëðêÕºôu)3cw³þÔd¨:GUŸ2ÿ[½Î!6Œ¢˜ªlh Ž°¡BY6ÌÕ¨£*ëõRe¨FµT^åÖ)öö‰É
-ÍÆÔ*ý3ì•\$Û¢úzвŸàqUÏÔ'§A‰"Q_þ¬¿A›Õä–.p˜úšO\_…§`¥-ûÌ*9tⶮæ¹u²¬†MÚ~a#ëURN&é-…ˆ4=À¡d9‡2[.V9¢îx×—í1¯>y|x q
-.÷„áYt˜QÈêá¡ ÷sèOÇôU˜—úZ5c$¡-…÷›4+ e2?à¯âjDàvÛ¹ÜÖÝîÛÖ/¦u—Ý”…cá=w#ó91à\ÏÜÿû«åþë,‡±L)ö28Ö\AHe”q2¢kzý}ó¥íÿ
-endobj
2556 0 obj <<
-/Type /Page
-/Contents 2557 0 R
-/Resources 2555 0 R
-/MediaBox [0 0 595.2756 841.8898]
-/Parent 2529 0 R
+/D [2552 0 R /XYZ 56.6929 648.0354 null]
+>> endobj
+2557 0 obj <<
+/D [2552 0 R /XYZ 56.6929 584.5411 null]
>> endobj
2558 0 obj <<
-/D [2556 0 R /XYZ 85.0394 794.5015 null]
+/D [2552 0 R /XYZ 56.6929 479.1127 null]
>> endobj
2559 0 obj <<
-/D [2556 0 R /XYZ 85.0394 683.4656 null]
->> endobj
-2560 0 obj <<
-/D [2556 0 R /XYZ 85.0394 619.4692 null]
->> endobj
-878 0 obj <<
-/D [2556 0 R /XYZ 85.0394 579.8478 null]
+/D [2552 0 R /XYZ 56.6929 364.6338 null]
>> endobj
-2561 0 obj <<
-/D [2556 0 R /XYZ 85.0394 546.5386 null]
->> endobj
-2562 0 obj <<
-/D [2556 0 R /XYZ 85.0394 510.6781 null]
+2551 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R /F54 1333 0 R /F64 1385 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
2563 0 obj <<
-/D [2556 0 R /XYZ 85.0394 443.7598 null]
+/Length 3276
+/Filter /FlateDecode
+>>
+stream
+xÚ¥]sÛ6òÝ¿B3÷z.b
+¢Ñ졳Vâ‹$‘£ÙâWïâövróáê?çã@ ï;ÿ|¬…ð~¼¸ùzñ™`·çià]|œLÏÇ2Mt
+H1¢EÂûp3N.Çד_>NnΟýp6™µluY—B!Oœýú»-`?œ _Áj£è_¦i0Zž…Zù:TÊAŠ³éÙOí‚Q;uè(Bø:£Ñã@Ÿ—ð…†ýãPøq"¶çÎËaáyKÜç»ï£°ƒ)¥Ÿ¤³(e¶4ÍëÊìˆ C?Öº³às-Ö
+q¹©ZÖäÀÄšÚ÷Lõ¿_n&ùMhñPñp†ËŽÆJÄ~¨ALÆpþ©Ö]‘dAjÿªJ\)•v_„ ¼¾4ø@Oâß[Âúôe:#4K
+¾“›ÙÕìÝò
+¢íPZª‘t˜›Ú¬wèÑ€[ñËìS—ÒöX|‚Ô†šVj&¼>—pgÔ™g%/kSŽû";SçMþlP¬$Ø ómŠ¦&ÓTôåÛ†íW[ìPûÑ€
+ü¶vœµk€·¾ Äàõ˜ûjõCA~kcò¬êëʆN
+ïöúrú) ÌÔ¨“ów± Á¡gCp˜·ú6¯¥|O–àØ3Ë•õ¿ÐÄÄŽZlr -‘àÂÁÅö%éøËe¨|ð¼Ñ ¹ì`‘K‡eåòa@.S?‚Óf±|(²Ç=¡”‰)¥ŽóÕb 0ÖÊ@ù‘ £>gSôJ„ì¡Ñ3JhTyÌÙAëì»ØÛA‹œKÏ<=Py›ùR¿oð0ü‰%ý8Z•¤wñËü¯>W€búQ”DGâ×ëé55l:jm't¦ù#›VD1¯œ jÁ34î&ÿþr=9,2:òDÄÛÅ:"2ËŠÌǽˆ7ò#­ãã$Ò
+ïÓž™ÁP?<AÒ! ìÕ—R? ôÉÛu^ºâˆa×Ë'–ËlýÚÏa(h D½£õ$V›¥);U½ý´9S© þ›ysÁ}%ÎC¼› !P'uønZ,{7×C†EùZ§nùÚÌA ^÷íJà«4ŠŽ3×b p×·,±¯â¤ÏÝÔ4õÎí
+díÏfÝ8ö®ê{]CûîΧ†óÔ-‹-¡œÃ\ئ’ÚÐ’r9ªè¥ Ž¬e
+c_øš.ª¥^ûøê
+1Vß Ð)¨¯²|íÞUÃK–Ê9D˜ºÂ†—å²y³Æó%' 8V;ET
+Ò ?}]ÞWEMAOa ” ðëfaÖëÓQà.B÷ã.*YÎñAcÿ®ƒH´Ì´hˆ§;µ^•xã¿¡FÞyÍ°+Øp!âD.ueh*Ê á±Lû®Ï¹ ”Þ“ B´vTR–`\66« ·)@WYMÁG(ù&1Λ<+Xç†^>À*™ºixO·÷æŸo¼4YÉÔ2‚ rÒ£äÖ. sè÷eJûø£°å#'ÿ÷o϶¿± !K’i„¡¯T*SxÞ»í²®Axtið>ïÿ¶´»endstream
+endobj
+2562 0 obj <<
+/Type /Page
+/Contents 2563 0 R
+/Resources 2561 0 R
+/MediaBox [0 0 595.2756 841.8898]
+/Parent 2560 0 R
>> endobj
2564 0 obj <<
-/D [2556 0 R /XYZ 85.0394 382.7282 null]
->> endobj
-2565 0 obj <<
-/D [2556 0 R /XYZ 85.0394 306.7766 null]
+/D [2562 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-2555 0 obj <<
-/Font << /F37 1042 0 R /F48 1258 0 R /F22 977 0 R /F21 954 0 R /F41 1238 0 R /F39 1178 0 R /F53 1333 0 R /F63 1385 0 R >>
+2561 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F64 1385 0 R /F22 957 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2568 0 obj <<
-/Length 2420
+2567 0 obj <<
+/Length 3190
/Filter /FlateDecode
>>
stream
-xÚµY[sÛ¶~÷¯ÐÛ‘§Š n¬ô¸qI¶“ä–(‹SŠÔ)»î¯? ,À‹D+™éI:S‹Åb±—o0Qø¤"Js=ŠuD$er´Ü^ÐÑ#Ìý|Á<Ï$0Mº\?-.~|'â‘&Zq5Z¬;²B“„«O㟈&— Ž¯ïæóéÛÉ|ºXÜ|˜^N˜N_ÝßOï®o~¿œpIx)¸ºûõêi÷—Ø~žÎ/¿,~¹˜.½ºº3*¬Rÿ½øô…ŽVp„_.(:‘£gø „iÍGÛ‹H
-"#!%¿˜_ü§Ø™uKmÁ(áBñcp6bŒh)yÏR%¸pÖ˜O§x¨«ÛùG{XÅ;&¤#˜%"BîUQUérògúò˜Ÿ©¤ ü½ÁuBwÖ%ŒD(m~swÛh¿Ûj›YUïM]î‘4K×éþ’%ã´X¦Hú`ŠƒÉ´b*!\)åÅ)ðfäfïÞ¢D01Â#É<7ñ=ëM¸–$Ññh"¡\:Ϋ_ÿþ8ûªÙnŠ:Ýi:Ì_ª:ÝVøñ¶,ªr_g‡m»i ÷b@5'<„.D)…pôŽ¨ÒºÎ¶©]jy…$T&¨ÚAú€b’ê®Cƒ§ÒgÎc¯iP¹Þø9ð¼§dàÀGoÓÚ¬Lmðkê¿1ËÚ嶥=£Î_ŠrWeÕqv FâD‰‘¤
-^ÆCÙÀà¤\B¾¼’*$fLÁ #ÂeJÄ`£á²”/|š¬¿„Ñ{<ìÝ ÓHëI «U¶O—îÞý-#¢x€ÐÛ¡àäDIéYë:Çb¢OŽÅÝU¸1ý±\¯á˜b•$±ѱث±ØžHC¾ £Ù7Ë—ÇògßGí›ï#öúûˆÝ|qY>1%ŠQìŠÈðiò4°-D3DåéS:,€Iëã §_=GZ<fE: ±Ïæ%B<ÄV&)‰„Ô=¸žÎßÎnî7ïšE_)L<<Â=°X" ¬3f ,`dð' •`ñx·ÏžÀM8áPÏ>SÊsO4Å
-°i…‹Lö˜´ã&-¯ñ{W»t™Y¹©÷–n†L; é¹?dv¿Hz†^ì£à‹=CHã$cöqó 2
-ÛFGã…ó!Hï¸ ¾–¦°nÝR éÁ3*ç:˜{xTè* ë$¿Ôì±ø»,CÀ›ÒF»=îRÂÆ{ÜÆ®µQ…x
-ŸUý…~ÅîðgÕ&]½i$ jn‘oªMyÈWý…h§^‹NÒUÀZÅ‹Në% ½ ƒŽ* ÷›5 ¥°„XÇS@“*ЭHÏü¯…\œ-šHX–Û-¦4PóÌé ˜@Ÿz•C“ ¤PG^}  N­²í.Á½
-  „×Æ{ÁQ@ÐÕú‘<Üsu¿û2yÀ6ïÆÊ6Ø–âmŸ-cl|diþ†×>.xÆ,Ù!WnÔ~µË)1L„?@
-QÃ%S@Mþl^üDÕ\ŒŽÀ1+Ìr™‚ gœ.‡)^Ê
+xÚ­]sã¶ñÝ¿Bo–[‹G€ NŸœûtRû®±Ó6“Ë%Q6ç$R);ίï~%JÎLzž9€‹Åb±Ø/,¤F!ü©‘I‚$ÓÙ(ÍâÀ„ÊŒf«³pô
+9n2_òœÞ¶¥R&0
+±,åæ¢4àp•rVVór–·…øöcâH¼s$߃ç(,=ÖÛ¥€§Â&îù¨×I “%¡>íu|¬ã^§Ã"¯s7àu@¨63ÑNûlÙ$0@û$W‚3À”/Í BOöÚcê-‰­
+rÍ€UÞ⾉¢›¿Ûƒ£æö 31€ƒé‚k˺âï9 iC>A÷!g†G|ƙ𠟱Ûtʪ·0¤²p, ûÈÞNp¸*z s×Ûé­Nˆe1ô^gÊc©·)öB,sUVÛξÆѨèsBF®œÌ%Š‚bW¼“#Ts…2š¿4G­ß€-©$;müÒqÛwHdúÍécÆy"›~ÓnŠê¡}<H8T ÁuŠ³éµ¾çÍ‚T>o{éFèSˆ,‘ä‰-‚°K§.Û7ƒ$t¦<D¥”…rnºì3D3lŸ‹¢âPÐ(/†Ž2èTDÎ4l 4ì£g"³íFVl—’jRR‹ªv‚;®
+ ëíf]7…Ó+nù^r\Sâ8Ðx›9­*Ö ]qX¤,÷CÊ¢¸†¸˜¹ÙwÛW•Ð᫬uX¼õ”%„þs}mÑbâØa™÷r°:«»,K[ñÌ4¹ævÛ`AaÃ'Û»%ìeRÇØÄÉT3L;Ù­¶Mˤ§²DÑ¥uáÐá"Ê|ÖѲ0 2›í©¢‰¾ë,rn?Ú¥¤øA— hYÅਊŠ¡ÛF‚HD·$Æø0cÛ:¢ÒÎr¡3•¥ë§b³)çsGŸcXL¬¸]¶äCâCËV\èÝõǯ!\¹á?t“Ó KÄ&ÿ$¼ã ¯3»‡Yr¼ó'’útsõvò7þv ¿û„ô¹¿¨Eq:ÿïnõzçô3ßIÿˆyÆ)XŒ=V¸pæéc7ϋ̳¼<ÂUÎ]a†lÓ¢çµÙi¶Ò
+•íÊ>XM“r–«·À`î¯à»t³k¯¸p*á4ż?Ü-ò °Švµ º7ç펉K¯ìà¥üÐ@øÔQ¼ïß©F•j‰Dà2«Ùr;g³Ô„´sÄšX diäÑ ŸØ¶q„h/Ð6à/„4UÇÁõr€òf‹’¢W¨‹=>&¹íî>Ðç*p„”kƒEµ+p_äF.ö羂ӮêglŽÚ²äcûJAÜÇ:nÙÁÕD1ÙŸ1H\B0˜“ìuXüõÌ ኟ¤}Ù"㜌;ÀžJdâ®0îcqÕ]¬›_s;©‡â3Ä$¸)êÎDè}VÖBu·j€2k¥Ðd
endobj
-2567 0 obj <<
+2566 0 obj <<
/Type /Page
-/Contents 2568 0 R
-/Resources 2566 0 R
+/Contents 2567 0 R
+/Resources 2565 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2576 0 R
->> endobj
-2569 0 obj <<
-/D [2567 0 R /XYZ 56.6929 794.5015 null]
->> endobj
-2570 0 obj <<
-/D [2567 0 R /XYZ 56.6929 752.2803 null]
->> endobj
-2571 0 obj <<
-/D [2567 0 R /XYZ 56.6929 690.9123 null]
->> endobj
-882 0 obj <<
-/D [2567 0 R /XYZ 56.6929 653.1174 null]
->> endobj
-1464 0 obj <<
-/D [2567 0 R /XYZ 56.6929 620.6102 null]
->> endobj
-2572 0 obj <<
-/D [2567 0 R /XYZ 56.6929 585.5517 null]
+/Parent 2560 0 R
>> endobj
-2573 0 obj <<
-/D [2567 0 R /XYZ 56.6929 521.2619 null]
->> endobj
-2574 0 obj <<
-/D [2567 0 R /XYZ 56.6929 438.9484 null]
+2568 0 obj <<
+/D [2566 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-2575 0 obj <<
-/D [2567 0 R /XYZ 56.6929 269.4372 null]
+2569 0 obj <<
+/D [2566 0 R /XYZ 56.6929 346.2413 null]
>> endobj
-2566 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F39 1178 0 R /F41 1238 0 R /F53 1333 0 R /F63 1385 0 R >>
+2565 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F21 954 0 R /F64 1385 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2579 0 obj <<
-/Length 2823
+2572 0 obj <<
+/Length 2572
/Filter /FlateDecode
>>
stream
-xÚµZÝsã6Ï_á™{°3·ÖŠ¢¨Ù§´›mÓk²¹Ú;½›¶²MÇšµ%×’“õþõ -Ù²mç’Q €ÀO
-&)¼T©À˜ì«WëzGÍ"[1qs-’®P›EÉœü´Ó1¡ : sPz© ¥òD‘ZøÊï~ ÁÇwF<¸éeŸFG*1ƒÞgµFCb5˜f6ÂÁDAY³±º»ò‚ºhŠÐ˜—›UVSçáïþþý{ê)7mê?ÞßFuÞÍ©ÓÉÉŒ¦§íJ5Q&æ_7ûÖ¿”)†f=úÿìc#b@öß@+ä]èÉy’yQë O«¦YîÌxvåûç#<7üåê`îÖ;Îä:_!þd >XS¦epÍu1ÕƤ`Ï©§ÚNçõæÓ§8ÏËå²|1¶‹h0A€‰xPšåœd¦@l±¿Ã'øÅÄ:û»k10>
-ÂAURSú/®5s­…m™9áèUnIµùÎP ë‹Û³ìzAâ–|\9ÛélÃFýî+¦Ñθ:fNqJ2RÔÂá¢Ünèe–í*ãbˆòSQn(­BÇRgkje F0ߪ,ê mk7$§Ï?¡®!êEëÏV}Ãä·mp_šWy^1<ûì°ÖÓÒÜÂ$Ä
-¦VƒHN=š~sPaZÁÀlÃY§ ¤,I\gëãÚ‚³Ñ¶p"Xë 2kÛV¬­_
-Jq ÕaÞ].)Îmq3]ng‡(ràûJI XÈîeeݶ­¬ [
-+øŽm‘< ª
-?!ú/ oÏt|Ìd°w×½*dîW@Ï÷†ž³Í1׆žòBÇ-ëyÒ¦h0ò$#(yM.‚4r;¾¤Afàå{NO ¼RÒAO:è±FLRªK>CZUíš…ÊSBÄíè+ ôæ âåÿ·Ê'ñ@)ˆ/T¾&×iX9.ƒ«÷]9 ωâ×U¾$M“óæ9®û+,¼DÛ@^SÑþƒ¼¦Â]
-z.ÜšªÉE«*häv|IO
-4ÓKMuOúÂ-œŒ³pbMf÷“tÈå(C«`É˲xÒWS€bSßž8ÅáVŦ¹U¶kfÂUf 纬òºÜЃA»€}å3 ;s÷6'‘§`=Ūi“ë ò,—AÞèâZ~½Ñ3=ÕU…»ÑÈw‹Ö“ÈSxyÖPÇÕai ƒ©ðTŒˆnš:¤LMBÚ)ëáOEˆb1¨ìQ4˜ WF|òÂFt–ãþ¢¯\²àÃÅg𮿬—ù4gÅÕvÊ®À:`±6^pK„I™´Ñ†Qí¶·Ë'Ø%׋•y!é|u]¦F`õnDŠÎ";hðñÇ>H¤ÉAcµ­j¨¿À‚V”˽¯²ÚøÄÈ*+–v$ž%Y7uì†û˜ÀØdx?°ë×ÜTß&ìA5ø¤b
-d@~ã±oî"{¢ CTpPmØ@ÇÌœ›4#cÏÄAQãÏ?¤=%ìF@ñ:Ûdtä„ä=3f[êŒFàÄMu⊎HÃýѪŸÒLBkux`[h7Á(ÉÊÁó´}~EíÛº%¤=õL³ÌWE¿æŒi]èÒ–<taØÉŸ)Òè³ ²ù*Œc.PxÚHËW<x¢1Àˆeód;2”zÞa„ž=w¦(ñ•=[ÄÅq Ì¡4.-(M J7·ÝTÆYMðžž-Ç"Á8­Œ(ܦSç@TKìâçü+xÕºLþf;Ð!v.‰¶6ý°ûpKÇ+9h6"ä9A1|)}ˆ/ð÷'ƒ˜kB@pBn$‘Q]Q½c½Æwª××t„fÁiŒË`W°ÐL´ß.zÉ|ÆK{›¢=‚plG‚èˆz#]4‚›¹øŸ£!/¹=ÔÍŽŽ¿jºétÞÙ²)¾£‘2t{¾æõFõ†ÏŸæÔÃ[³ðà»h6n=:ÙÕlÙY¶!°$utëý]ß(Žì•‡i¾ôÙºò0´…muŸÙÛ (9Nª•—Cr.ˆ ÁmyÉdù¨ÇÜJ°8º‘àw§ío7 éî QÒWÍ[à8q‹ÐñÕü•;…n ̯ëVáÕW™¿Ü=ŒO\fŠÓ—™³¢]C
+xÚ¥MwÛ6òî_¡Ã¾gú%B
+7ø錳¨ ^à…3‘¦á`y&UÄ”Œ"YœÝý«!ØÚµGûT!UÂT(õ`¨B–Æ<íWg\†±LE\7
+ EŸÂ<*lx…}óN˦À+Æ@1¦YmÞ”³Yeê]-Y’¦É ÍxO¼«G¾°ÍU§ ì(ºÞ™ºË…QPÏ -P"Z•>ÃàežOæ;X¿™ -r¾¤çƒ¡CS³0µ™‚ñ#.‚Ѭ6+O"«·œ^ã2é¡û’/´*åEY<Ð .)¼¾`©Räž–58a^Lë©™ú7z XüQÅ<øÆ¿® ¼Ì6´X]ˆ$0ËÌÜ#@26˜Oe•×åjs!„^Óμ|1Ï l,LÄž¿;§ÒiÊ”Hâãž×Æ:ìy –õ¼¼ÇóR&Bå=//À$ÏÙbÏíÀ? bâã²5X=ÂuÜNjXÇ¢+s;­Rµ
+žœ2׋|’Õ¹u>@hÄ´X³rEàŒÞѨv´§Šƒë!šÐ±5ZA0ÇI{,²bJ(٤Ο[è 9\3ŠÆáB{åºBç‘Š\Oj`ü”­àÔÔ7ôÌÚÂdt/n#€Ëµ.XÕùÒz&Oé&ÒK-wdƒw¦@ÉÓ©žÌ$ÿÆyØp_×"Ý«ãµx7€MQ]œ[ê¸Q¡ô*ŒvU([']Ü"Ì̲õ¢&°M–„ îÚƒkìÁ ÑÜ)b(w,C©ã´°&e1ì^†ŒáW™E•Q¨‚|FaoÉF
+Âè*ˆ†’â³£XXÅâ¢-¾û³¢Q ²%öᓲ,IÇë€%
+ë¹”S¦+Ræ%R¬2—eaÙ²k%Px%~ë_‰wDº¤Ë
+EæÃgÄé9Í6Õ´´‚¼ä•/u÷ÄƲ+{57B¯ˆØ®žãÊ;?ÂÊžÃb^¡í•s¹È] ‘3Kúq½4EM[ÖÍ`gV.P6¦ÅÔP(V m p”PÍ–:æwãhœoÎ-cœ/Ëfùrî¤9Ÿ6°¹_•«>G;_æç6þ“ýøW¤,Imð\Bv[“¡¦v6&[UŽÜ²,ê¹y1æ7¿Fû¸å¼\;ü8 Œi2/ÖŽ±ÁÈ„ˆòaÎúnòï 4C $•3z´Õ÷z§Â÷;ÒÎýZ­Ae M+F5ªs#Àl
+’2Ë
+´ãp3UõŠr€ÊÁH—
+7´Ûn÷«R$…ï`ŽX¨†B&»ê•¢­^ÙJÃfÚ›ž þ6wC•„Á;{k€—Ïy¹vÇ!ž×p|C[.b«²°ÁiYÛå;r^„iiÜyHa1È›è[óìÙ´ûˆE;÷g®¯y2«e^U‡¾·0óô)R2˜6Õ ™–©Oý!bUkÐãQªÉn.‡båf#TN¬·-íÙn Õf¹4µ-€øjŠÉjóäFj8ÖÒѬìœl©;È7£K瞘Gö”ÿ¼¹R.û˜gÓ|ü+×ó#y‹>"õeÚn>k Ùß×€³
endobj
-2578 0 obj <<
+2571 0 obj <<
/Type /Page
-/Contents 2579 0 R
-/Resources 2577 0 R
+/Contents 2572 0 R
+/Resources 2570 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2576 0 R
+/Parent 2560 0 R
>> endobj
-2580 0 obj <<
-/D [2578 0 R /XYZ 85.0394 794.5015 null]
+2573 0 obj <<
+/D [2571 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-2581 0 obj <<
-/D [2578 0 R /XYZ 85.0394 657.4255 null]
+2574 0 obj <<
+/D [2571 0 R /XYZ 85.0394 536.6509 null]
>> endobj
-2582 0 obj <<
-/D [2578 0 R /XYZ 85.0394 112.9597 null]
+2575 0 obj <<
+/D [2571 0 R /XYZ 85.0394 289.3885 null]
+>> endobj
+2576 0 obj <<
+/D [2571 0 R /XYZ 85.0394 144.0724 null]
>> endobj
2577 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F63 1385 0 R /F22 977 0 R >>
+/D [2571 0 R /XYZ 85.0394 83.2075 null]
+>> endobj
+2570 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F64 1385 0 R /F22 957 0 R /F42 1238 0 R /F14 980 0 R /F49 1258 0 R /F40 1178 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2585 0 obj <<
-/Length 2239
+2580 0 obj <<
+/Length 1632
/Filter /FlateDecode
>>
stream
-xÚ¥YÝsâ8Ï_Á#©}Y–ö-“d²ìÍ’°W[736‰wÀæ°Élö¯¿–õmdï*U±ÚÝ­ŸZýe2ÀðG‘@BQ5ˆG&Ñ`±¾ÀƒgX»¿ –fäˆFmªó‹«O,(¤ƒù²ÅK",%ÌÓ/È`t ,ððv2›ÝÝŒfãûÉ¿&w—#")‰‡×w“Ûñï—#a bŒ‡¿^O~»þlæ/^ßßÍ.¿Í¹¸›{ÍÚÚÌ´Zÿ¹øò RØÄ/1%£ÁøQŠÖ<b(⌹™ÕÅì⟞akµy5„$Š(€ Cã8ŒA1!@sŒÆÒcFI3G¥1môF¯> Ö¢$If ÉÍÕãÕõÕôj|u{•¬V}`èH#:h ?PÑT¤mÁ‚!Ê
-›ÝÀÄD3»¼4ÏúÅ’.yñlæWY]gÛÊ•æ™i¾HjûÆ—|ñbxšñ¶5Õy7úL~
-à!co<˜$’1§–` RD8‰â<rˆ˜;m6‹áÂl9±˜Â _ö! A¬¦04üƒ
-Ä4ŠZ
-4ü¼¨Íîi¥Á±’¢£’V`®1±œ®‰âGE%‹:}—$
-æBœiMÿþ¦ |¯åûö¡ˆw†ã€´§ Q¤H߀·Æ¹0È‹ÎaÆHm†æìûÒ3Þ‚nƒ{åBÒÎ^Û2Ó l¾#O_m‚‡síÝK3½±^†Ú«}–=NÎMX}wUÐ508Ç|ïFેÖWöTg’Ÿ²dàQl°Á×À–Å(–”5´³»;£ÅõçÙC€3Œ¨@„@¸ÐäiQUÙbô={{Ί¯8Âþ»»XåÏÅ_à^ZË _¦ÚçcD•r¶÷q<¹5L”U']çE^ÕÛ¤v'1Í–™1¸ba‘ü5)vI" 4áîkHŽ”ôÖ8ýtc8Bv@ü8A”Gä$ÀLr+*»
-²*Nøÿü÷³úƒC -¿‘7!ÏîskÍ¡ÝÐYeÛÜ9È÷ãê¼Ý•ë$/ÞÏ1?Ë1מï5¨å{¿ƒgcåvÔ¡l¼;8¦?βý#×Yohó’t~Àq<)}JHÙ;©2™Ó:®6Á "¼Eyþ~lóç¿sjï¾qG!·Žåí>úÑƦ~´ áE¥
-´¾$ÃFq‰¦›ÒL»m^ÃÚ›¨“z×´l[ætåölϼYX%×fÙÊ{y…ÕeLý’Ôf>¯>èª ¼dðâÖÐx5/ù*5sšCefÛY± xÛ5p}—ÈvcàY”µ.l¹[¹Œê¢FIøÝôrÚ•¥A?«ö’ã—<µ'mEš[RA¯ö‰‰nsJN‰X$\¹¬Ûf+ËÝ—ÎYÒô`ä`±‘úI·#í¨ÍÅ8ìœÚ|ži8󷈎w0QSm'}y€ŠÒ­’SòÍ¡¼6p°¦tòÑ–÷¯K&ÑùÖk¸«™î‹*0p{Ìè(*p:‚+~–Õ \UÌ"ÔÙ…Rž‘¨_é´SÚUB ?©˜#
-(F{ñ%V,îj6sÝÛ¬ê]
-(O­6š…{2Þ,ƒpâXK—gàlQ€ÓQ5pÞØYŒ(†Rå¤HGÙ‰ÉeWäM¹Þ€/|ÊWy ÆÆ„îü¦ÙO—£ˆ‘á½57³òº®mš mÿ0
-„]Nä>ÉÖøáf
+xÚ¥XÛnã6}÷Wè‹Ô,o¢Èö)›x·ÙK’ÆÙmÝ<hmÚÖ–\Kvš¿ïˆE²)¹@ &¥Ã™ááÌpFdˆá #„¢j+Ž"L¢ál3ÀÃ%¼{7 3ö qõæqðË[&‡
+)AÅðqÑ%–’ ç_GoD ®o§ÓÉÕøaòåîÃäbL”â|ty?¹½¾ùëbL# `€b<útyûùò£}v¡èèòÝdzñôø~0y¬ÍjšN0«lú{ðõ ç°ƒ÷Œ˜’Ñð&2:Ü xÄPÄóOÖƒéàZ`ã­Y¤‚`D™ .(Ž‡—M2"…¨Œ©'6Ža‡ó¬(ôl¼Ó‡ü‡®vâÇ,F K ½M6æ9È¥ Ž+AŒaaP^Ì‘#+ÊpöÒØŽ¦º´ƒråÞYþ¯íä{ê^ç™ýMì=+;þ¡_œ!°A‚TQg 'ˆðXK¦/Y¾-Òâø”ÀÚX
+6–b"•Àöh´w0ŽbBÄpÜ`øæ4à{Ô$Ç#€ö¯ãÕîÉv[oÈ!œ¡ê±‘°Ö½¶¨–6ª”Òjy_êч€d¡8bÜ-š§;=+óÝK@zÄ‘ 9? e’"ŠTgË4Ó‰mX-qQžŒŽÇÎB½>iX
+°ŠÏ¨ô €Ê¦KÅáX©œl|2ÜÉÒ¸ÑÅë¤:M3Ðÿ¤%ê䄈6)ÏpÒ@õpâQ†—VD+aÁ©PViÚF Lq„i¿q5*`]“>ù3¸úZæMm„5Ýì1Îgm2RwÑ<¯ÒÙêvîÄÊpØÜþÚgE:×çÀd„H|Æ5 îSð s»ÇdpD²WŸÇœêke: lƤ¥ïrQj—žwiqŸ,€½Âßö--W›ü –æ».Œdݹ¾›[(•¸dì ¹ T»eè=„|*óãK¹i˜Š¡†€Ò©×0
+ÖroLáNSQÛ²{ëïûå²>cX7eP™Ä
+Gg(k z(ó(CÙ—ŒQ,ëWéA•­TIQÌ©h«¼ß¥™gã wEêËÇ4[ä»MRƒN"¨ÂU’>“›¨n"j”!bö©LqÙ®ZÙsÅ¿ì7­Flk»BœAýÖ2îs¡«žGXï!*-ÓƒÎì³»­Î¦Óvbm„Nˆ*6úså1³|³…"lngÏi¹²bî?\M"Ä>.öÛm¾+í$--b®É~]—ÑŸÛ§Û³‚ßlyõ˜dP ¶Ê“ÚÏõf[ºÌœUmI3×Qá/OŸ¡3÷ë·Óå \ ÎÕ9oh z¼Á£Œ7,ºu¯Ê:SŸª ¥ê–Ê·¹!eV1„Éî®ÊÙúW˜K1ºJö….1Á1䙺ë8[ è$ˆO‡†oÐf4Ù¡=8LÝÝ
+WQÂHï«Fé¢;µ¹ßŽ“µ¯·Ýz¨|
+sâ0†8Ÿ­ªìg\ˆý0¸N؇’õ®›rµ9*¥ê;ÿæº]éÖ+ûë× OA—˜¨3>Õ@õø”GŸz¤ZŠ¡«ëUéA•G©–H.Û*Mªíª“ÊdÙAZ ±‰"ðàè@}õß»Á¼äòø Ê:Š1‰W°›ö炉3àòãô.üÃöˆq3$@ÑRgß F•ðš,ÛêâÆBIÇÌÄonn[)§n¾>©(w ”¤Ž½ÐvkÙÌmèS’í“uÀ,qO…ðÍhÈ
endobj
-2584 0 obj <<
+2579 0 obj <<
/Type /Page
-/Contents 2585 0 R
-/Resources 2583 0 R
+/Contents 2580 0 R
+/Resources 2578 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2576 0 R
+/Parent 2560 0 R
>> endobj
-2586 0 obj <<
-/D [2584 0 R /XYZ 56.6929 794.5015 null]
+2581 0 obj <<
+/D [2579 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-2587 0 obj <<
-/D [2584 0 R /XYZ 56.6929 659.6547 null]
+878 0 obj <<
+/D [2579 0 R /XYZ 56.6929 769.5949 null]
>> endobj
-2588 0 obj <<
-/D [2584 0 R /XYZ 56.6929 595.7578 null]
+2582 0 obj <<
+/D [2579 0 R /XYZ 56.6929 747.4361 null]
>> endobj
-886 0 obj <<
-/D [2584 0 R /XYZ 56.6929 556.2057 null]
+2583 0 obj <<
+/D [2579 0 R /XYZ 56.6929 710.1279 null]
>> endobj
-2589 0 obj <<
-/D [2584 0 R /XYZ 56.6929 519.369 null]
+2584 0 obj <<
+/D [2579 0 R /XYZ 56.6929 638.4656 null]
>> endobj
-2590 0 obj <<
-/D [2584 0 R /XYZ 56.6929 487.0966 null]
+2585 0 obj <<
+/D [2579 0 R /XYZ 56.6929 560.7349 null]
>> endobj
-2591 0 obj <<
-/D [2584 0 R /XYZ 56.6929 420.2778 null]
+2586 0 obj <<
+/D [2579 0 R /XYZ 56.6929 480.0392 null]
>> endobj
-2592 0 obj <<
-/D [2584 0 R /XYZ 56.6929 287.6148 null]
+2587 0 obj <<
+/D [2579 0 R /XYZ 56.6929 153.5839 null]
>> endobj
-2593 0 obj <<
-/D [2584 0 R /XYZ 56.6929 199.8075 null]
+2588 0 obj <<
+/D [2579 0 R /XYZ 56.6929 84.8435 null]
>> endobj
-2583 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F63 1385 0 R /F22 977 0 R /F41 1238 0 R /F39 1178 0 R /F53 1333 0 R >>
+2578 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R /F54 1333 0 R /F64 1385 0 R /F40 1178 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2596 0 obj <<
-/Length 3585
+2591 0 obj <<
+/Length 2554
/Filter /FlateDecode
>>
stream
-xÚÅZM{㶾ûWèi{Ÿ¬P|’@rrÖn²Ù]ïvåm’&9ÐeñY‰TEj÷×wP¤DÉÛôPû@h0ÀÌ; qø#kWNR§™áÂŒfë >z€¾ï.Dà™D¦I—ëÛ»‹¿þM¥#Ç\"“ÑÝ¢3–eÜZ1º›ÿ2¾zÿþæöúÕO—iøø[v91œß^Ý~¼zC´÷—NŽ¯¾»™^N„•"&Á‘/áãëÛéôæådúê»Û¾»½¹üí›»V²®ô‚+ë_¿üÆGsXÄœ)gÍè~p&œ“£õ…6Š­T¤¬.¦oìôúW‡vCËŒÔÉhÌJ 7¼gœq{0Iµ`"qI»gR íYäÂ=›\.Ô%,1&u;š22 L);S
-.X¢Òþ”ïvÍf×\N”MÇU¹z–7˪Ή¸½vœÏ*ÿœ­yÚä5qf»¦ZgM1ËVôr:^geöÖû'\ÒÁâeÊYÊAîe˜—uÏ&uñPþ»*óðBWôT³Ä9ø_\N´”ã‚å -)´>|
-“7‚‡#ï¬À’óóEžãùºš ‘“MÓþ|ßå%ªYNŽözJÏc¸§ç5 {gËb5§&"kpÒ­º ÀÈ—ÙºbðÄÍd©K%¸Ò©†RL*ý*ëðPÚ€ó‡µF?‡°ï¹ßü^ÔÁËÀªÎ,Ù‚²®VÔºve“ ×}¤—×Õgtl'ôŤ–‰Q_«/¦Óú™¼¾¼Mˆ3MÜÆy±Íg`œOG° þK¹$9+YËt,Z4MÊTj{¢½FhÜ…ÝÙTub| DëÆÓM>+#£ˆJ§àÅõ$o”P/'l-‰N°
-â©ê
-Õ2KÕ(³¢¼®Xw—.m†`.E÷
-ßJ€´lÙ<²„•$Æ=côûÈ¡Zt¥o§´Ášé¼:t¸ÎèCäò
-Q™?Ù&n› jë±€!u’ž¯å¯§ ¬Cv‹³w`>.4æ¤*\…“ľb:}äØáW㇠^קâÔ<rÛH¼Â:¼ú9[sïL
-‡•qŸ…¸.×iˆk¹<Äå×BˆÓ–æÃ
-¨â6é–~îQhTqÑo9ŠâZ 5÷‹r-껎÷
-ï Q_(é©pšiktCB¦Ç†,#TIÈ/X gJˆ˜S­wõAÝN/–P›eVLeÁ„,·ÿ½ žÄ\‰7fÖ>Vv¹NcnËå1÷§!Ì•LÕnÕï EÒ¾ò|d'X¨>+jË5 kw[ `cÜAZÖöÿ‚ÀÞkö×%”=j&tr>~øÐæ@TWÂVÉ•IbŒŠ‰RÝMè꟤üûT*0‘ªÓ82ÏøZ̃â=¶1¥ÎšPÁ ¯”yfJÆÀ¡|[^Çá÷ª*òízUžt`äd\…¾*„ÑÉÑElSØöÀpSÑ. ‰ H÷õiüÕäª$ Ä)Dn™_O_S£B|Ê7Mc“b}
-’¢*~ND³µçtk²"~)A :ÐyÄô9„ÿT*ÝOt˜èc„pYĪé`ôœB Ó^³±,JÉãÄñås>þ>ÁÚx~J®â—
-ìÖ
-MºÅÃr¬¿cvƒCßFÀI.‡Oö°"cA3¥ë¦-0‘Ó¼Õ°BFÅÿÓäOCö¾ZÉŽX¬®=®Û¯TT+Çã¶hšö*Þì+˜_%'"ü`žÅ©|ÕÚïÀ‹Î%T
-7Xñà÷¬m]h5ýÂ÷¯ã-v«>O›1OYâž)u˜Îq`ò6¼<º‡TOëóóEžãùzãŽiiúó½ßeüB lU½¬¶aCêÝzmŸN\ ÐUS|¹ ç@‡ò°[çeçë…×´ƒ\ºU°/ýpM?¯iÊdšˆg>(Ü3ùž00ùs)ž»’‚}Ì·Wç@-~wxF°–éX²~m.v*z¢ýØfy=6|}.ª]½zšDãÃ.2>l!ÃÛdu{³@ó`„–ÄåpZè/±qŸw“Gš)Ôêî–ùªÀ©;©õÀ¦¬u¢,,Vï?î¡ÕÆûÍ~I¹>¬s?ÍV±°§ð¿²À™…!(YZPÊzP7‡\ é†KçÔ¬({UxŒc}óëêouäáǧ>ÌUàJ•R>ŠØø?´»ÿ>ÂAeí ¿
+xÚµYKsã6¾ûW¨j+WF|Ôžœ%åÌŒÇk)ÉnMæ@S”ĉԊ”ï¯ßn4@$§6‰} Øl4ú…¯ðÏG‰bLÃQœ†L\òíU0ZÁ·®¸á™X¦Éë»ùÕ·ßËd”²4Ñh¾ÈJX$|4_|ßÜßOïÞÝþëz"T0þŽ]OTŒ?ÞÜýtóh÷שßü0]OxšpL)²EÁøÝÝl6};™MçóÛÓë/ó¯¦óN¯¡î<¨Ô®> F 0áÇ«€É4Q£gx OS1Ú^…J2Ji)›«ÙÕ?;ƒ¯zªÏJ&L%"ö8Cð™ #áxC¥L$±ÐÞ
+v—;&[2ùX”òØ0Ø-ý‡d<ü 2n‡ €®#àIhÜK©M?»5]iŠqÕeh½k˺j°wáx®cÒá‚·<«p 0,‘ ã¡Ñ¡ƒo/žL…æ„ñ˜L-WÕëÊ›ª
+=”ag⣙±;<nÊf],ÞtH5=Éô ͺ>lîDò“Ó)XK†
+ WŒè¢Í™mq Â ä=Zw»G
+5 žH c0¡¦NÙm²Å6ƺM1¾/+OgÇ9{=ý ¥‡HM^ˆ!Œ!Y#×ßúŒƒ—|U+J)ÇÀ$€@ÔÌÀÀé™G«ì²roWPo›Ç‹nð¾‚?öM–eß”øÇúŽÓÙùv‹ ì,?‚€x¨\Éš¬(Žw³ VµeórCoÙ
+}Y3‚6…Yã†hëì‚ YÛ©ìXkó+{Ô•0Rš|_êíFÚ¡Mçpˆ¥ðF›1„\mj©ñn“åZgüj„à†,ÌÎè©H³CÂÞŠ0½Ú
+â‰åïFÔ®Ð&Lº|n¦²i5ôfh¶yÎ^̇¦;cYey^€ íœ!GV½Ôtë0Ûuv¼!ëçÊ~ÅÜßÖ ó!€F
+ó†]<JÑÆý¤§ÙÉÙל„¤‚9üž?. ¹ìQõôÀÔqéz»<^2L@wwyIËäYr¸‰Ò˜ :K~O9Ÿ£—pC ?Óx|Ø-t M£ Ðè¼o(BÛ¬¥w‚`x.5J©ª‰2€»4éö¦›’ã_®•‚šÅÎj׺lÂ<*?o<¥CÆ! eÿÞÒ§{ tòÎ>|.7HhŽ—Y©GÊTs¤em[lAÝ|ÂLC¤[¯ -#Ò¦Xeù ‘úb0Q‘¶¶Þ5&#FÛ‡³¬}±ÈìJ3_¶Ú)j“€B{)7ðÑêíŸËÊ·i3ÄѸ*žq Æ.,& 4ZÚßðÙÄ+VýŒz_ÂÁ$Û™" dC ‘m5V&1Ár;²ušjX3"
+úFÖ!íÑP€ ÷{Ùö½7Œ¢¶#© òI,ð…Ö"Ðm ’têÅa@zÊ6]2aÜ£ð Žè›85 ªMVÉÞªº·kìg­]!d´ä¼EÔ4¤6ØÌÓ{ì! Bà 6vÀæÚNwI;Q"æP†Óô2D ¹ÎCTÇ¥!Ê\ÛDεdJ¥¾[›¡n\ &Ó(º¬\ÇåÑÎ=†ÄLB3áh7Ó§IÇo í­’ÓÅ=¯Ë|}o´Žk™ H¹¸†œ<௄aÀu! –K‡áƒ/ О¥Jº]NxÈ’(V—õê¸<Š¹ÇÊ”%a’¸šQ¤°Ý†Àg™6-½ÌçÌçšž‡Æ°-é´Zœ¶OÁf•FŽeÉëê©Ø""¹²r3z¼»›½Ÿþ›ÆŒú 4T±[ˆîO¡¦Â1Rµªpî¨i%-Z ÑÊ@£={%ÂV2äjzDÓm?Qt
+ÃW–´Lž%2e!þNà,9ÝÚk‹C“­
+ûÛFÓ¿P…ĉß.ù$xÓó
+T¹.øÄriŸü|ⓈÁé,¾¼¤eò,éžL9øSwÉ{s+F85ÔèÊCÎ;r õÊébÈuÁ–K;âÉ_3dŸÜs;UoNâ0º¬YÇåQÍq˜äL¨ÈUÍW·‹ÇÃjÕÝoiÍÎú Ÿ‰R—]6`:ï1ˤ6}µÈö÷øŽÇ¤` ôõê˜Nsý³8áÊÑì'Ä]žš²Â6WåVH¤}ÚÕlö^HA†Ç*i.¤œ×Û]¹Á"ƒot@1÷ïßÎþÆ9‘›Ã ½”-q$nÌú5Qw_ó†óPí1K¤R¾C ¢
endobj
-2595 0 obj <<
+2590 0 obj <<
/Type /Page
-/Contents 2596 0 R
-/Resources 2594 0 R
+/Contents 2591 0 R
+/Resources 2589 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2576 0 R
+/Parent 2560 0 R
>> endobj
-2597 0 obj <<
-/D [2595 0 R /XYZ 85.0394 794.5015 null]
+2592 0 obj <<
+/D [2590 0 R /XYZ 85.0394 794.5015 null]
+>> endobj
+882 0 obj <<
+/D [2590 0 R /XYZ 85.0394 769.5949 null]
+>> endobj
+1464 0 obj <<
+/D [2590 0 R /XYZ 85.0394 747.7424 null]
+>> endobj
+2593 0 obj <<
+/D [2590 0 R /XYZ 85.0394 711.3934 null]
>> endobj
2594 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F41 1238 0 R /F63 1385 0 R >>
-/ProcSet [ /PDF /Text ]
+/D [2590 0 R /XYZ 85.0394 642.8746 null]
>> endobj
-2600 0 obj <<
-/Length 3487
-/Filter /FlateDecode
->>
-stream
-xڥ˒ã6îÞ_á[ÔU±">ôànía’™¤&ÉöÌNwj·6ÉAmÉmelÉ1åéq¾~”%Yr'µåƒ)!OBbÁO,â$LŒ4‹Ôè0ŽD¼Xín¢ÅÌ}w#gé‘–}¬¯n¾úV¥ šD&‹‡uVFY&ÅÏÁסˆÂ[ ¯ïîïß|³¼ûÝÝßݽ¹]ŠLŠ4xõþý›»×oÿs»”qø€EÁ?_ÝýôêG‚½¿52xõÝ›ûÛ_¾¿yóÐqÖç^D
-Ùúýæç_£E/ñýM*“Å‹gxˆBaŒ\ìnt¬ÂX+å!Û›û›u{³né¤4à…¤Jä„8¤ì‰#alL¼Hc&J*'Žòó¾:ÜŠ,(-¼[&‚|Ý–¶›’«ÓjËê†éOùöK|Ì‚ªe0¯&Rm^Õe‚Ó‘
-Þ™ÃseË™%«¦¶UQÒÊ‚wnèÿ‘wu\Võ=Ù¦©1äug
-š8–î­ÜpPÏÕvK#G þi›ý6_!ƒ~iÒ¥•øΨ (×ùqÛâƒô@¸
-¢~õ­}›‰C“ œvÔÅ©â@›â(ÔZgŒØLÑBLfÅ1:G-‘¡ß3÷ï‹ Û}¹ª~‰"Y_ò²þ 0‘jÁ+‹ÚÚrµD±ýr¹Mš† ø1ã?•uyÈ[§ùÉHÜ–ÕnòÖ t©@I d‚=3«Ò
-ˆàŒK~p©e
-=²Ú‡ >&š}[55=l¨vù¡Úž &Y.2Á“S|“ŽÂóÑú2y§:ßU+z@§â1Pü¼‡m˜ú1Åâ¸ÛÓŠ$ðnlìÏéøÐÚS29MÎë¦^âAÐ“× C ÅÀL~
-ƒG&Û1˜Ûøª¡!çƒ ) "ƒhà<¬hIÂñ†qÑøíê¦ò/»ü#Ûþî¸ÚÐÈ–µe ‰ø’g1À‰vÖGÄ& ³Ø¤×}DkÞGtXÎGü6é#„ŒSVÃߪ¶¥@;ð‘
-hÀÅVÅÁó¡¢ÊJA"̇
-M”eý‹…¾@`HðÞAi™T“Jà‘–}¬KMõwôÖ”X*(è¶×wï°&¶¨ ^rfÑhÿׯº»„¡¨Öã„Áéçµ€1'68¡@ƒ®‹­‡uElkV_†wt`p™I®³ÐaMð0¼£3O#3dâm?±ÿ ãHÙEÁß~Ca2É餛äð+;+\™eàJ²ë²í!Í‹Ö#ÍÙÌP°2Œ£L_ݾCºÜ V:`à¾ü˲ôYH·¢?Ù¬ýbȸ _¦U®?ãš}³Ú̆( ^Gë(»¢úXó!ªÃr!ª™N>”N»ÒøP=Uõe¬ÀeÅÙuÖ:¬ Þ†ùGf˜v ˜{ð‚ä«£c†S÷ë‘×ôrFgÑþ$ÚKêÝ¥g/ÓÌ­=îæÍŽ†çkîüdFF%/œ_ëÊùy,w~ï^J1 â½ÒCÐZH|Ák‚ÃÁ)Æ
- )²H=„4:÷RAIcê¯{`@lÒØ"ú+eÈ;\ ”Šóš®
-J#Ÿn$0ßk6t»ZZz%ÝH1ãŽÔeºq½ç T2×t˜È6¢0–ƒ^Ãú¸ÝÎOÂøÜý@}ND𼩨¶ÎXAMÀWñ
-¦º[z
-endobj
-2599 0 obj <<
-/Type /Page
-/Contents 2600 0 R
-/Resources 2598 0 R
-/MediaBox [0 0 595.2756 841.8898]
-/Parent 2576 0 R
+2595 0 obj <<
+/D [2590 0 R /XYZ 85.0394 556.3322 null]
>> endobj
-2601 0 obj <<
-/D [2599 0 R /XYZ 56.6929 794.5015 null]
+2596 0 obj <<
+/D [2590 0 R /XYZ 85.0394 380.835 null]
>> endobj
-2598 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F41 1238 0 R /F21 954 0 R /F63 1385 0 R >>
+2589 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R /F54 1333 0 R /F64 1385 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2604 0 obj <<
-/Length 3126
+2599 0 obj <<
+/Length 3032
/Filter /FlateDecode
>>
stream
-xÚ½ÙrÛFò]_Á·@U"<'Ž¼9±œrÅ1•ÊnŽ„$”I€!@ÉÞ¯ßîéž!@‚Lìlm©JÌôtÏôÝ Ê™€?9Ël,tnfinb+¤•ë 1{€µo.$ÃÌ=Ð|õÕíÅ‹×:åqž¨dv{?À•Å"Ëäìvù[ôòíÛë›Woþu9WVD_Å—s+DôÃË›Ÿ_~Oso/s½üæzq9—™’)
-Çúóâ·?Äl —øöBÄ:Ïìì^D,ó\ÍÖÆêØ­ýÌêbqñS@8Xu[§¸auÛL¥ìPjÀ)`l’Yjó8ÑJ;vü§m*ºv±½”YÄ/]ýÐTKß}¤gÿè!Wí¶î×À-EtûXw´ÒnúºmÅûzÓ…ïí«®ïâ#¾‰XXPªòXeVNKæC(º¦œ’º‡ÂkÎ:$™'qbmzž¤š 9欎¦c’ïªuû4`gÑïˆÃÌ”{÷Ö®éí}õ10«è'$Ò´ô\µÍCµe€²¯Ÿ*ÇÍYk‘Ï@cAQ”;ÀM»]«ÕÇK)et;Ò,z~¬P<©Š
-zlˆÆSÝîºÕÇy{ª½j
-L8lÛËÔxòE³Qsúîúß´‹R¶î¹twpçÖÒ…M0λÊÝ"÷›ÑKZ"
-0 •Íª(ýÒ3¨,í*h¢©ži
-aÒü¬²FÈa«>”Õ¦gr=Í5ßÔÄ©ÒŸd¾I ꛻СƒOG>ñ|Æû²?O‡þ<A>“ §:Ö)$e#÷Ü×bÄý¹±9óW‚Áâ‹3Xlž{ƒÅEr¦ˆõØ`qz`°øŠ‹O2X@Å«¥þkƒUcƒ}ÕÂEXËCÒÔ¯!‡ÄEò0ŸeÑÖd±Tž·é!Ôi«PN+·¤‰@BœiËú±…Ä¡]/«§Ã³½ÄVáž=\€š8Ý8ZA>/”o±©Êúw!i„ô²†Ü¡Ý±EЂ‹¬ð¤ã6Uסj%6zs?Ú ›j[ô¬=€èc×WkZZ¶žNÓö´Ì:õT/y{1aêÚB¬ÍC@|ÜzA¦
-mŠµŸ>hyìÛ$õ=£Ú°ÏÜlkPÑ8ØÌ>µú…ŠmåÌSmb¼SÞnàâ»ÆMåuÕCÎEYº‰ÖPÝ‘%ãŠßV}(Ö5ÕéŠìW—8œ§éÇö™‰õ´ìB‘/À'ÚÓ/J_{ϧƒÀPϺÀ›{ ïÏaÝ)ä6ì)®‹’3ünWBb×Õ>åe@ÆV¼÷f Åö'œ :
-2~}þ\jâ`#mS"6"IÆ'µ"”¦o%ð¸½ýžNðt¤öÕ$Ž(cÑþ»ŠÞwûq<þ¼ÃÈëõ¦ÝöAÝxä$a¾WèÑW˜!
+xÚµZÝsÛ6÷_¡7És$¯On´î\\_ìÎÝMÛZ¢,N$Ò©8Î_»ØDJ”œ\çì‚Àbw±øq?
+JýyöÛb4‡%ü|&"¥fô /"’Y¦Fë³ØèÈÄZûžÕÙÝÙ?ÃΨ›:h )"¥­0†’#)£ÌÕ³†É"«•vÖ€•_ßüHëúåöþú—·*˜«:†£©²  VnÒUÞ ÌIÌd–W؈'uŸŸ6ç2MSÌi¨¬h¨]2Í¢Þ¬ó–ÿïß_]ÑH½é÷þôÓû÷ww ^/h0ðɤÇíº¨Zêy(˪Á Îañ ósÙ.y=ÆcòL蘎ß@+•“²¥‘’YVm±áeµ´*`Ã9¯®^àø¢)xòÂÑ×ë½µ{ë•Ûr]Àuj'ï¼*³ºúTTeQÍ
+§’š” i¶³åi¹åÞò õ‹zµªŸîÒN^ð™LꪠŽzA¤&t4[Çöw!Ôg·×08~ŸË *¤âÉx];s)=?‡Ö<´–¾åÖ„³×¥ï)‰ayI’MÏY½~ڒͪäi/E¾a¥~FÌ Ô³ª§}J'Új¨xº¬·z™ç/31ìòcUoÊê‘VEþD-' ÄH¦[×U»d¦}é®+ÈGÄuX=ÅG/¾£ Òû6˜o`Q벫8£& ©§bÖ–ŸŠÕ˹”r‚˜SýëÜÀÒZ`ÙqNî;6š7Æz›ïn3àÙÙ ì­˜Sp7,ïcM#Û*°`©sð,mÛ°´q0³äÍxÇUñ©
+v±ÔY„®»§à]Ñâe‚w0ÍœBÔUWô|^–ÎsÀ`N=‹z/ýìšžÌäiû°*›¥ÛïÎpòö v=VÙärÑâÑ°sí¬l¶~ Åžš$J”Ž÷ôjE±Èé
+â½É¾U6ðwJ·@t¨\S±ˆ²Ô&=íSÚpäÂa
+[ˆ)mb©•C6J?¿¦çä褀Õ c!0tˆ BÇËBè@0>äL;Ì< LðU¤‰ìƒé«¡“Wó¿„X6Z%§Ò¥:Ž@å òa"BHõ51Q'æ´~j@Á}”Ä*Mû2LR¶+6&)¹|z˜t©h3¡Qúù5m÷PLûTt@IÀ‡x ¤ÞÇxi
+Ä@?>ú½wÜìk ¥˜\¸˜ovSk‡<þWôÉ8Jub^A_‡êú<•Cßõ
+T]WC¾ ëæäëÂìH|Z½@5 _ßµIðhqÒW³*åóbhpV…E ZN©Uu©(¯‚Féç×ôt[“æŪ ø§… ©“cáR'–䊥t€/ï2´*漪«ÇbbaPìgÐßà§Ø×aeãýÝ:éºÄuî'0 åSÝ”m½¡‚„A»„2³yHæ#,…Ž"Oe˜^ÞŽèî˜ÈÁîîÕdþiSÌ‹YÑ4X¹BNäsÖ
+äõVCjzR·@5 \Ï«È4²JؾvÒ¬?w³fx€ ¨é¨Èç@wNïˆdÆd:˜…n@~ã‰ð'|Ö|ÂÔìL600wÇËÎÍ@Þ'”Ü füùÇTSªØ‚à§|“ÓÉv¿Ð3g²U‘Ó \¸‹Ê馓Ôxw+2ZI쵎÷t‹}Œœ<<vÛùW”¾m{LúKú2‰§ÅŒ¡·ì1½ ƒÛÒû&Œ;3ù3Å>ú,¨Û}Ž…SzxÙØ˦¾‡7qÀ³¼Ÿìï ¹žïp‡%Qºí?‚ĤXwv)¹)Éî·_
+ö±W“\³gXìp†ÅFÏ#ÊPrJ ˆbÉ€Côì%'ü(Ëù_é*hÀæÃThëÝ›k:Îà ÙÙ¡(0J£$3Çñ¥PDsLP'ìàÀ]¤R×~ŒÞ1^ã;Çës¬G\G7àtæåP , îôß.ZÉ}ÎJ;ìA8wÀA ìzÇ]1ñÆêúâï¨éy.›¢_¸ø_
+º54Þ¥«Ö _åh‡r¯{ Ò¼áó§pIïÝá•qçr{^¨×ÕìÌÛu0'sp9‚ƒã—±lý͈k>Yºq}Kß>Ú÷÷$6=t¦ç—c2&Dàග2y:q—ÌŽ..ø%\=ØÝ%4ÃÕx rú¦{Ù
+Cá.¥3ÉWeŽTs šEÿ
+¼ññ¦Ó՛ώáïvÁ!xÌ”Fiûk‚Çši,M”űé[„`'3Z²OùË'Q‡$dæÊŸß*(c:
+8~AT?™MÌQIRd
+à"=´>|û¢üÁ×­ËDFK¿‡×Ò¦±L&÷̱9›ýÚ[ìnÚçûÒ³´AWƒkmªzkíÊtǘ=y|t¸û @/´åþlÚ}J]NÞM¼ rÈ5hűˆw®Áα¯ÜS]›(µaŸ¢c?Ô»/­‡|©‰Ä_þ×î×jqé4=R²TÀ+ë•BÅ¥U‡±Šîu¨û-ÍË endstream
endobj
-2603 0 obj <<
+2598 0 obj <<
/Type /Page
-/Contents 2604 0 R
-/Resources 2602 0 R
+/Contents 2599 0 R
+/Resources 2597 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2576 0 R
+/Parent 2603 0 R
>> endobj
-2605 0 obj <<
-/D [2603 0 R /XYZ 85.0394 794.5015 null]
+2600 0 obj <<
+/D [2598 0 R /XYZ 56.6929 794.5015 null]
+>> endobj
+2601 0 obj <<
+/D [2598 0 R /XYZ 56.6929 752.0089 null]
>> endobj
2602 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F41 1238 0 R /F63 1385 0 R >>
+/D [2598 0 R /XYZ 56.6929 184.0458 null]
+>> endobj
+2597 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F64 1385 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2608 0 obj <<
-/Length 2663
+2606 0 obj <<
+/Length 2457
/Filter /FlateDecode
>>
stream
-xÚ­Z[wÛ6~÷¯ÐKÏʧ–
-Žb²
-NA¶ywñOþ\ç ½w±“wù³w07qΧùsý
-~I>ÍÊMW»¢é¸dÍžœ³¦ýní¯jG8£MaG{è> ŒÅ/‘Š®m¬âÑùg]ìŠmöàιêÎû0ˆSÅ" ¦Ä0<P»»ú®²&ÂåÏyý·@Ls‘2£…rØÈ·ô”7œ\e€³Vp$ÜgÒ*°¿Œà|¥Ï ôåG]3VLðä…hîSpMOe]ó÷£®yŠeçš,ƒ®Ùgy¹.+òô&9}·x‡ƒ<’Ùš&Ѽø„³¢—”
-i
-°ô ‚AÒÕC–ÎÖ©Ú:½ÌÍ{[Ôo`Ö"9_ÃËŸ®±*}ürM/|‰Åw•[…Åm¼é¨¦9B„}øvUÑÕ¸NL[’& ˆ2ÃZÐsÃaò¶zðh
-0ÚÞ£òƒm¾ö.‚ÛG°uhR,ný¥vÆi,í4œ}*–Öܦ¸,Ë™kúb>À{D׶ÍæóP„EŠdé,›ýCY{9r ­õ¬Ï§u¯ô‚ô‡;‹3!@Ìàr¯)D×íÞ­±yÎæTx jÙèöõ ñ –Lhã!ÀlRJ}¬¼ú} ìóﮂÎüùtjðy¹XnhxOú>Õ¾ö¨|“¹ü=0#æ~LGÒ@kL^/äç>Õñ4ÐRy@ç'¶ù*€¹Lzšµ'
-° ÃtœŠ!ë6':þdǪÄ[…ÃRÖµ)㊈x6_7Vú$}Ét=ª¦óT(?bøO#™Œ¢xz¢
-…lðÏÅ}¾$7Ôºu4ÊÇQ½©öÛ­…àé0ƒv8©l`g6Ž ŒÕJ%ÓË[š*«ñîY›Ãp/_aQ4ö´ì¶f¸­×Þ9¹0žÁÜŒ‚9ÿšAdÅ•>ˆ´k-d(ÕRÒû‹lý_Ýç_Q±(&Å`
-¨jG×ió·Õ¾t¬3?
-’t”x<Žnp¿Íl@'zt¡ýM2o¼PosØŽ¾¨¯ˆòæ9Ðûq¼HÒtxÇ[¬ó2 Ï ¤a*‰Óá¡c]~×Ó„} …ò[nDl°Àb'/ôôun;x¼WåGú_žF€X}ýZït˜î µ¯_Rˆ)]
- 58¸É醸¡£àÝWì¼_£5ÿâÖ¸»íl·OËݾå@bð‰dÑ(žwY X¸Å ”çíØ·eƒR­
-5ÖDrt;ófqw.=@ñ¡ØÝWM›Ú L—Jv¾û3zŸÑÌå 2[‡¦œÃ¡eàB –ˆxu¿Î4Œ°“ÀŒž=ûî@«†.bç~á2%á#±8$Ïc1B„ß„d_¿ËaÂçÓì¦zÄ‹gúåø„>פ)ãøQå|­á©ðÇ°$߀T7þ|Ð¾Ñ iÅÀ$&~=#$8Vè—üݶ¼mŽð] O@s ìHo’O‹¤o¿ƒ-½÷úú™qaÝ€ª»¶ŠvtÇË™Tn²AÇò6Tltm±!]˜ M蚤–rxÞ^ñöhñ‡èàr¯3zqØ$p‡iiì5¾¾Á\ïA ¿ âŠkïi‘X2‡âq׉Bï]×û]عÇHû.¡DÀò>ÒÞíBшñ“Éä¿L"F> ¬ÈC+ú"¼¸¸ kÍß/>¾ °èst‚ Öå ™¿?ÇímåëË«7Ä&uÜVøu¡n
+xÚ¥YÛrã¸}÷W¨*y«F®$<ylí¬w<²cy6›ÌÎ-R6w$R)Ïz¿>«H ’œ¤\e‚@³Ñht7ÎÈ
+7Ø”OÕuUt†^Ž;zIŠU*… ´Þ÷ד+«D9sòeY•M»ÎÚzm»î‹y±>'rXT³Âv}ʪM¶ˆ˜M‰h’$N}ÌX•$Ì Üÿpi5‚ÿHD'ˆrAœ4r=÷Ž˜ä(Uz#G<Q‰ ¸Ï?ÞÞŸöìuÕëªh­Óצ-–}¹¬«¦^·åf¹—#Æêô0ØP
+OBäAäb¼·úc#ÍQ"e¤'Ù²8`›DIªXw׃"cÕ¯0£mÙ¬°íí¸–.«'ûÒÖõ"æ4ÜwÖôµªWMÙì&VÙÁ`‚P¤H, O‡v´b`„…Ôɘá4R/œLtá ¸õË(ûê[3»(˜¸{\!Δ½Ù"kÝé¨BR¦ÊIyD#H&B8Ѽ\3Ȋ׈R{KCœ¥W¡5Ž¨OJãz*«"¢»oEÐXD4¦&H0 5:l¶QÚrSÎS$)Nw•ÏOz£Þ´«M;š—‹˜ÚþÒ‚Ú§Ðz­‘©”@‰NÐÿÙñßNÚ¥4¢ŽH°;„PPwõ5ÌÍ¡Þ×6t›b]úÒø–m\œŽ»z™•ÕÛ5–'5–ºæ½D­<×oÐi¡^/³6¢7%(e{ÛôÛIµ¿•-Ø[|‚(å{'Ñ‚CO%Rö³¢©³‘Ý­ÃfLPBä^µ¨OçǺ|úovíöÍwÐÅ)J±Ü‹Ý»ÐZ…Ö}h­cþ¢2ª¾SDÖY‘˜/²ïgá4´šƒåϯ®i³u{¨JrJS!wõ?œôYÛÆ‚œ¤H1º§® ­Mh½¬NÂ,Š—bñösæçÐú%^TàKˆê•â÷jx‘ÛO”óCñú{hýZìäÒšl 4ÊàœÆ{ÅýÇÓ5R9kK€Uoßã ×Ò8À6à&’ I¶n²!úŠ:Bèk&jЇ“”x5ž^Þ_ß=\ßNÂG§@x×íà7HAF¹¯žZPCÉ„3ý`f@i˜ ÃëÖvž×N)œàÄ":€t³]÷÷À{lŸ…á³Ú<s¯Û
+²áÊt×ùfVô§Õ†NÛK±n`ì@=·îôv÷‚®}ÖˆR)°úœ á\$Ãß ¾Ø¬ËÆ^]G›µ=³’Z³éË‹EñäöÜ Ì­‘K;ìæ[Í|•ëÕT¦}ÎZÛ_6@x!ÃïÏ|¸¶2ÁÌÙs¹ÈmŸÖÐØÞÌú̃ðÞ `G Xö„§ª[MŸìKéÈ@^@ð72FÂûã«CØÏîkëý¢Ù²$¯/{ìvÎ]g,±Ž(à-DiŠ6fÀ<™
+ÂÜm6:è‘À‘ÈÒ¾éHñ—2¾qÔ'éQ õŒˆ]æÓ5ŒPˆ
+áu(MPJÄ)‡v¤Ž8ÔK‡^î›@‚+u|J/™² c d@zs^ÖËÅÇrQ¶o,!Ãe=ìðƒ‹8;+šê*(½B1Šœ¿œ ÉîÖ®â7‚ N‚ó%EÏ ÖÚ‘çekN–è‹…ˆY’"©”?Âóæ€Q}PpÒ(_ç êWö¸âˆ€î3¯îÅG¶ ©w;¥qÓý^/ò¹Óq¡û €(‚œB~•§A€c¥x÷+àDr$Sz¢šv¥x2žÇ*†,Æ°{UC`àmì¸q^(b\/h
+Ôn%éè”^(2åó`iÊ[CY¡bÈtXW ]ê¤FlµNAÝÙ´¶¯}]i‡kÉlÓÖ@v˜Ưvt™UÙSáD_# Jí§8\â¼5AY¸³qJ‡%Ò€7…–Áßïì„ž¿s„¥+µCA´
+™ž°í} q°dV³ˆ”YÁ0w4›EkW ]áôö,ÓÃG×QVV³ÏÖ«³×.ÙÂ~d™Ä®Îïeû‰
endobj
-2607 0 obj <<
+2605 0 obj <<
/Type /Page
-/Contents 2608 0 R
-/Resources 2606 0 R
+/Contents 2606 0 R
+/Resources 2604 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2612 0 R
+/Parent 2603 0 R
+>> endobj
+2607 0 obj <<
+/D [2605 0 R /XYZ 85.0394 794.5015 null]
+>> endobj
+2608 0 obj <<
+/D [2605 0 R /XYZ 85.0394 752.4085 null]
>> endobj
2609 0 obj <<
-/D [2607 0 R /XYZ 56.6929 794.5015 null]
+/D [2605 0 R /XYZ 85.0394 692.9976 null]
+>> endobj
+886 0 obj <<
+/D [2605 0 R /XYZ 85.0394 656.7581 null]
>> endobj
2610 0 obj <<
-/D [2607 0 R /XYZ 56.6929 349.1664 null]
+/D [2605 0 R /XYZ 85.0394 621.0947 null]
>> endobj
2611 0 obj <<
-/D [2607 0 R /XYZ 56.6929 83.3187 null]
+/D [2605 0 R /XYZ 85.0394 589.9956 null]
>> endobj
-2606 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F63 1385 0 R /F53 1333 0 R /F41 1238 0 R /F48 1258 0 R /F39 1178 0 R >>
+2612 0 obj <<
+/D [2605 0 R /XYZ 85.0394 527.6628 null]
+>> endobj
+2613 0 obj <<
+/D [2605 0 R /XYZ 85.0394 399.4857 null]
+>> endobj
+2614 0 obj <<
+/D [2605 0 R /XYZ 85.0394 316.1644 null]
+>> endobj
+2604 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F40 1178 0 R /F42 1238 0 R /F54 1333 0 R /F64 1385 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2615 0 obj <<
-/Length 2289
+2617 0 obj <<
+/Length 3375
/Filter /FlateDecode
>>
stream
-xÚ­YÝsÛ6÷_¡Gz&d‰/’˜>¥‰Ûss縖z½N’Z‚dN(R);Ê_ ,
-²öô˜Œ@GÇxpʶ|9wHMGá4J+8Í "32D‹Ù“A2)¢vc{iÑ ž›mµ.·•A8½ =Q³0o}«ŸYô¨ð}×¹/T@,öM¹®æøâñQ"Ú3ºÖŠCŒ’Öcfûn½ÁºÌöLxbM¨<9C Í©AkxmÚ&Ö®ÀEú˼mz€¸ªYá·ÝfQöF!ý±l0ƒ¯¾,,Ü1 µÑ†hz° !L³<Ç8Ô`
-ÜjRz43PÖ̃›ØRÕ:ThZ‹Öëò«MýõÎÔ :Õtvíl64ñÁÖ)ºóPí*ͳWâÀt(,“Á‰v x  _ÎN‘D0
-"ø’^žéT±!îæ€ô€L¡f³@-¶M´ßHÝ.ìÞyœ^¼9ÂàF÷èçáÙöã.(®\!íºÝZ¹‚ÜâóQÉpzñ-`ÐÊÅ+U3ä:ï;Ïeœ÷üªó|«7¬š˜Z´‹šy®Õ†Þ#àäl¨ÚTõÇÕr¡w«¦/¼ÍÎÛ ºÈ4çì›\l渌;)¡c
-[o´ÖÎ%þh¡»hp Øbim×ôc7ñGA9}ñ0Ö\cÛÜÇa3Ú'^Ä-øK¦‹Ýó
-ßýŠÃÞ\X€¥‰^®´XÝ€BUÿÚUþׇÜ[.wÖÜyðóŠ•ÄŠþlmÔ£]q²jUv½;ß~;  p†õUKÏopE¬pv\ÔJöz½½&ÑIŒ6 0Ú(;äÐ]c‰Æ n1ù åؼ¥ÔÇ’^¶yAm^РNêµ=>˱08º8€"XåŒÙõŠ¯Ôé†õRøäFñª™×»…êŽ7,ˆý¨/ë‡vî`N C‘%ÕØìŽGmo‡§Ín»i;ÕÙÆßÕÉt¬Nºôñ:I MdQä®N~¯“œ‹bX'q,«ˆœ&üÿ^3ÈK–¾ò»PÀt¾:&÷3£sNF’¤ÖK{¦Ó“ö£"‘@%<Úsá˜5éǧ²ã¡ËU¯3ÿÔb"Ñÿ‰Ñ>õ?{þÏÿð:ügç +Š3ƒ\šIœRÚ $cǪûêþ_°÷endstream
+xÚÅZOwã6¿çSäõä¼ÖªøWd÷4íL§ítÒÙIÚmwÛƒˉÞØ’kÉ“¦Ÿ~”%Yv²ía“ƒ("Aø -ÎSøçÆ&ÖKžy˜T˜óÛõYz~}¯ÏóÌ#Ó¼ÏõåõÙç_+wîo¥=¿^öÆrIêœ8¿^ügöe"Òä†Hg//¯®^}5¿úöõ忸|u1NŠlöâÝ»W—/¿ýùb.M
+üÀœ¦³·/.|ñ=ÑÞ]x9{ñúÕÕÅo×ß½ºî$ëK/R…bý~öŸßÒó,⻳4QÞ™óxIá½<_Ÿi££•Š”ÕÙÕÙ?»{½áÓ)mhã#µ½èDa§u&’L@ß<Ói"µ÷Τ˜ÒYäBÍïÆ µÄòö¼?ØÁ”‘ibJÙ›2K£ÒÑ”¯‹ªØæmq1WÎÍ^^Ñs{!ܬ¸­ÃsÑ 1›-á5ôÞÞ—«5ÿ¬«¢¡æ20×k\Âç_ëþÌ«Ä™¸8ç¢iŠvN| •O2é³ÁtC©D*/˜åCñxd(m’,Í óýš¦rU€…eRÏ^ýQ6mYÝѪN,ÙÍÊÕŠZ7Nr>—N$Ò¦æ|.Dâ!c§×õÇb‘Ø*„õ>ÈÔi«és·šŽ+XÍZ¿ÕC=ã£ÂËmqÛÖÛDZlBê$5©<-\Ç5!Ý`o¤OR(1ïMñÞœzVÒ¦nJå :?»Ú·å’9rz€¸´Aä@jk|ºYSä¡ïöžèÁ&±ACm´
+ØkéíìÛ%‘ªº¥Fƒó¡9‹Ï€0´(–ùnÕ6´¿:K´>n¯ K³µ÷5nw[±j‰0Y1;n
+o A¥í=DX¥tQX@2O\C-!;)a /¥VQ%ŽUâ‚J:}8Ö‡›}z‰]z0›2¤½O.éÑ€9T ¦uùjx# ƒÆ0´cOÜ?EÙªz"3Gƒøç'mä!V&©v–Y£ƒÔ$Ø¢Ê2Èâ2;Â¥£Yë
+Zë²Ú5Ôô¸¯w[j!ŽFlËW«úš”Já°«úö5›Åƒ-¼•<â®9‘æj—%^Š'^Ÿë8Âu\áŠi„Ë ¿aM¢Oãl ìŸ8-\Ç5!Ý0ÍXuZÅëðMxŽ Ø |ÃVÀ·Ð6 [„oþ¾á+ã›ðé!¾!±øcÉg
+Ò1•RÏ"dž½QŒ°Úð)i0Ђ¾ÂŠø$êË™’“¹
+¯í E(„+¾dÊA,”KàÑO/R^!b]µÞ5 Á7 À`™Å6&‰y51•Or.ŸáŠ‘õ8ô¦.É,
+h‚¡O61²ÕÜWs*m³±2! •h!¹Ku3Ñ-ÀÆd³Í¶üÈõe6ƒì~SW„€8Å’Èó›«7Ô(YˆŦe1–8)ž”s£mLe 1ߢÑ0-ê/o˜ÅÄêfP.Y÷ú ?Ë«ä^½£¢0«O”“tl†‘ÈŽErH=œ6%C°ð²ë‡l˜ŒC´Jž¾Ã+=B¶sý­e¢[’ü 7MGX<ª ÙÚ>A?"ôcA¿!@®~P3&5h…ȹ÷ŒÜa๑­wŒ™˜ÜÒä¸[sPl¨d"qÂFù‰ÎÈ2t4Nh ¸¶QûšÍŸ=íÃ+ç%:ëB6¶CUhv" Ôà©óOÂôÁᎆÚÝé~sŒŽOy9T¬X•s¦†ÎU÷.˜”D›°c ©RÏ
+¸Vú~Fc2üA+g
+©]”‡8B‡GSM
+ ±2ÏÈht–8™f}/JÙ`ÒݶbRwœL5=1Ï B…<G:ÑÏûRïë`Ð.ÄAíåd1 5ÙÄfƒ2…Te¯EêíßNf²ÿŽŽ&32Ó‰2ÙÉLŸëx2Óq…df9ytjŠ
+¨wíf×Ηåê0 õ÷§Åë¸&äž”e 
+ŸÇ2@”'ú\'œ7rç½?¸!·Iê³'¦ŒLSnÈƼєï¶eÕ6…5÷õ–ÕÒìÖë<ÜRN] ÐUSü¸âÝ ­¹Û­‹nàhe Hí¡ŠÞ_›W d,s´—`'‡&(b½×OA«p‰eÂÞ>×ñÝé¸Âîüt°;˜óA™|rÊÈ41å`u¡´Ã)û»ó±€2%”˜Wd½!!=¦X…Vú‰+ù>× ED® ˆò©ë9ºØBrtxT‰ ‰W§eë¸&„!d2µCéþÕ¼9=6”‡~,ë]³zœGDÂ.B$l•\ìnò¦‰½9ÓB#¼¤rºB÷¬Ø¸)úu4ÍÄg—×÷ÅÔ‚x©õ„ÞF‹+g¯Íãuïðˆ½û?Þ®â=Cœ"¼åÌ™óT7.©z]#@µs¡µ öäMµ0-«Á¥¦tášAv× 9/¹äøG*SÅêþóÌ|I¹›‹'£Ðˆ‹u¢[ìgTÕ-“ùk
+SŠ°M‚ÐX¿?”MqäXMS.
+úrÁ3×ô¼áYƒ”!IÁ·¦®Cöìüa ÎG˜m ]á¨ä ¾Þ¬ò[¾“×Ñ×t$£öQNx5€ôýv‡·†ØìÕì÷ä²Å–^à±·í-Éx¹Õ-ÓoŠö¡ /ëqÎ TÐy”ŒSÝY16÷¿,+ä*΀¸KºÖ®ø†òÐŒI¼úY–Öúô¯@ïž{ÅçÌ»sx|É5BS BdZ<?âe‰’*fŽñØ®á¹N¡ðø<çòJl”£Ëµ½°*£+clZ¾Z¨ä€€•\(»„
+ˆ9ñDÿR¶&*£¨Ybˆ€£¯Ç³>6"@%yxÁ”üYø ~Vt?aCr•MÜ‚1®i.»bxnµÇF¹,š¦W†­HÖ¥>œ =Ô»Õâ gúM§2 þs"ì¥çq§þöï=÷?m…º^9w$!”x‡6 …*VæøC +'dÿ/˜\½ßendstream
endobj
-2614 0 obj <<
+2616 0 obj <<
/Type /Page
-/Contents 2615 0 R
-/Resources 2613 0 R
+/Contents 2617 0 R
+/Resources 2615 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2612 0 R
->> endobj
-2616 0 obj <<
-/D [2614 0 R /XYZ 85.0394 794.5015 null]
->> endobj
-2617 0 obj <<
-/D [2614 0 R /XYZ 85.0394 752.3087 null]
->> endobj
-890 0 obj <<
-/D [2614 0 R /XYZ 85.0394 714.7159 null]
+/Parent 2603 0 R
>> endobj
2618 0 obj <<
-/D [2614 0 R /XYZ 85.0394 678.7396 null]
+/D [2616 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-2619 0 obj <<
-/D [2614 0 R /XYZ 85.0394 647.3277 null]
->> endobj
-2620 0 obj <<
-/D [2614 0 R /XYZ 85.0394 583.3288 null]
+2615 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R /F64 1385 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
2621 0 obj <<
-/D [2614 0 R /XYZ 85.0394 513.2613 null]
+/Length 3410
+/Filter /FlateDecode
+>>
+stream
+xÚ¥]sã6î=¿ÂoUfÖ*)’ú¸›{Øv·m{év“Î}´}m%f×–|–¼Ùô×@€åHÎunò`
+A
+½È
+!Íb½¿‹˜ûöJ2ÎÒ#-C¬¯î®¾üFå‹".Ò$]ÜÝ´òXä¹\Üm~‰^¿ÿöæÍ»^/#¢¯âë¥"úû뛟_ÿ@°÷×E½þöííõRæ‰Ì
+ÄKEôææööí×ËÛwßÞüûÇ›·×¿Ý}wõö®ç,ä^
+…lýçê—ßÄb‡øîJĪÈÍâ>D,‹"Y쯴Q±ÑJyÈîêö꧞`0ë–NIC›<6‰NK“Ĺ)¦E&ba@ËLË8ÕÉ ²DN‰Ìc¡È–ïðœ_~“ê
+5‡Î65=ìp´ûòhwO ®»ªÞTúêüM£UEߧÖÏ€äh°yªË½]ÓGkj
+à=Ú†ÉmQs4bŠ›Óþ@+RRDø$,BT àè øÃß4*é³nê%ª‚¾¼màxÝÔ]ik[?ЂÓaSvŽ!œ,k¬˜lÏ8`n,º¡H)AºK%
+2AD)Ð
+Ô[œI¹ñ£­7Í#ɽ"â£uÒ˜;6ü’çvX á!5{ûGåó`|œq‚7È 8öèüƒÈ)ùK‚Ãí©ewÆ&SnÈŽ8·<Æ;»xæLQäTÚ|ªŽÃ~q¯˜,.ò"sŒÝžÑÒE‰éËË/ÑhV.8´ã߶ñxW€E¯€TE×Ò÷§rg! 4Ç–éÔ^^EÆZ=1ðL
+~Ég
+écUfŠs¥cS5ýðjb@ª˜‡•?fI.CšÙÂä±Ê{íM¿'È"V&SÕSm?cˆ›#*âBäEø¨0ºçBªÎJ5Pžš¾çk¢=7T)`¬ÓØ”`GÛƒ”„6é Û{¬‰íGnFg±HÒb¼ÿ›Æ—Ü}¾°±÷çù‚3ÏKñbVpp=L2óæ.@» 85k3ãG:¬–ÓX`¤ ÆOt"Îe¦Ç,¼ û?!1”}üðÍ×4Ežpö™Çv)üº®®L>å²pC´yáöXsWg,[‡Ñù ,x¬ FÒ%%$cn«?-SŸŒô+ÂÉæÞ/†Ä{ãË50!Æ­Íz;©”qªdv9R…Xó‘ªÇr‘ª™ÎA”îYs´¶žJ…¡I.³ÖcMðvž
+'J™1sw^üž‚btÌp†øîþÌ{ æ«s]ô5‡×D÷œzÿò$œeÛžösùfOÃó5§? ÇÊÓüýXô籜þ~|)Ó€Â÷B+!ƒ$òõ‹üy¤ þF:Ì%Þ#5f ™ ™¤Ä1ó>0 &iì•€ˆüªŒe‰+„29¬éK¡Lø´#…ù ãÐïÚÒÒ iG†i7¤ÏÒŽË©R3Óx˜È:Ðyú ÷§ÝnŽx›¡‚ÖœÊèqk©ÀÎÙ<‹ˆ_ãâeˆP÷loè!¦ú‡z
+rŒ¢¯OÂ0Qþ-]¶@|y£$˜p~uÀÌàô4ÃVe|·ÿB/ –Ü–å»ÃŽL'ܳò-%˜]ùÝúÒAŸZÖOÜ«ããŒtàŸâÂÄM±9ªþ”Nþ:~F»Çy™Â ³öop«Ñ«lÉágõBwUé{WÀJ,|$¢ß­}ØŽÞSúhÊ^ꌭÙØ•(¬–àÒ^Œ]!Ö|ìê±\ì:œoYèXký–ibËP'EëÄœmù3
+ ‰muÚ4Kz”G‰6eWÒä#=Áqƒ•nmá_¾¸ÕŠE®VÜìUÜàE¬û²íúNŠVpÙ]` z{EHù½œqèñ§81G|Ö=½çJ çu±g?ÉÇ>j:Ë|:SCöå œmÁä©­îOàËwôI§F„ –ŒÞ¼Ë·™aÆYüú…þ1@P‘P<9ðžá[#bÚvê ~g÷¶«6³¦(30ó™t¿·Ä
+ìà<4®<$\ËäN-ï4$ðÓ2MO)¬Â\ÝÔS= î~6©¯+áÚìЧ¦Éðÿ
+˜žnâ)H ðÔ¨zÒþ2èצ†{P©œßfÔ£¦ô'»íd‡s¨CÊ°1ן5
+°M‰ÿ‡&X´cº ;Bôÿõ^bøh;פG dÁÖSÈÚ#]R×ô´MUt
+endobj
+2620 0 obj <<
+/Type /Page
+/Contents 2621 0 R
+/Resources 2619 0 R
+/MediaBox [0 0 595.2756 841.8898]
+/Parent 2603 0 R
>> endobj
2622 0 obj <<
-/D [2614 0 R /XYZ 85.0394 440.229 null]
+/D [2620 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-2613 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F41 1238 0 R /F53 1333 0 R /F63 1385 0 R >>
+2619 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F64 1385 0 R /F22 957 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
2625 0 obj <<
-/Length 2210
+/Length 3013
/Filter /FlateDecode
>>
stream
-xÚ¥Y[sÛ¶~÷¯Ð[å™Á…ÁórÆuœÖmcûÄêœÎ$y )Èb"‘ªHú’_ß]\(R‚dg:™‰p±»ØË· ˆ(üc£X™òt”¤‰)‹Gùê„ŽîáÛ/'ÌÑL<ѤOõóôäí{‘ŒR’J.GÓy—"T)6šÎ>&Œ“S`AÇWg.ÞMν8ÿýüúêýé„%LDã³››‹«w—NxLˆ)8»úóì»vsšòñÙ/·§_¦¿\L;ÍúÚ3*P­¿O>}¡£â·JDªâÑ#L(aiÊG«“($Ž„ð+Ë“Û“ÿu {_ÍÖ 5%\H0g#ÆHÇ|`8%Rpaìq{qauöÇí5žvñžé¾ÁÒÈÏʺÖù¤.îËïU©?Ó˜*ø½±[EÚÛªQi¬€…1üåÕ;+)ug«¢,êf“5ÕÆ.}Ôs½9ej¬Ë\Û¥YÙfË€bL*Â¥”Ž}Hˆ¤Š Gðñý¹åQ!ü"Fx3GMÅÀ€AJ)Å$M7´gN½þø²í.ËFoJÝX5nŸëF¯j;9¯ÊºÚ4E»Úʈˆ$w|@;Æ£¨ aV
-QYf+=›ä Ë«rŽ›‘´£"J õÐ-%4Nìv­>sžØ‘ùl‡ðù3¥ü¾¿Ué(aeé<V?—Mö䈑aQÞÛYSUË]©·§ Éç²Z×E½›]‚‘DI1Š©$1W²Á yŒ>§
-I“0è±0™±
--þgmðøw¦çY»lˆæwN˜‚ªia®jôàœBõmA,eM ZJhÄ^ŽÆ©WÐ+æ¥ý[kpvÖh;3Žwž…c7ú©1ŽÄ`nó…%Êê€i™JHu:mÊYN¾éç€Z1…ˆK| cx¸Á0žæ®(gȬq$Ñ•Q£kfkÕż´>f
-IÀœ”³×ÛŽÃäYúǬ¶¼!"s]×óvIB) = â…x¥òÌàÛ‚D¸óÙµÊýuÁÏGp]?­—E^4OŒ1ÛÛa÷fKx2„ÚEõÖÚœÂ6òŠæâÚÔ¹ýÎÝuZhÊ ömúT¾ÑÞo:*”;Y슔’Ð4yA¤'
-ˆä;¾JÔŽÈ›MQºfÓTT´uvïû´vµÊ6_M‘Â~*,Ê­ƒýƒL’¬Ó£:bOe¬ã0Zö¥Ð7NBmR_7P'™L+×Q´Ü* œÇ©âCõÎQLƒBSÌÙ@mŒI¬ºûÈN[7„\ITÒ]ŒêÊ1ÅJeF®ŽÛ 02hš7ŃA,$€†¡ô»Ý~+‹]‰‡ñÓa²¶Âô·X&‚DrÜ]U.æ¾:»,îÕæÌÅS±*–Ùfùì[o3s°ÍÀÁØâ0‰x!¶zTGbËS™ØzØË<ð4DÇEz¢€H>l$b0èPd(ó
-I!&Æð…âÕ§:âAOe<ø´çAì@˜:.ÒD ÃD°¡Èÿ/°ƒp_š7¹|Âå}¼‹zæGŠÂ1è™iÐüØæJèCîê¼í`¾Õ ‡’3»µÖ¹7µ%0—*ø`W×Ë,wš™[«y½ÁæNÔÞݸJÆuºG+i
+xÚ­]sÛFîÝ¿Bo•g¬Í~ðcÙ·4q2iZ7Üé]›>Ð"es"‘ªHÙIý ,µ”(år¹ÉLbÁß YM$üS“8I¦³IšE"–*ž,Örrk¯/ÓÌ<Ñ,¤úáöâÙ+c'™ÈLn—Á^VHkÕä¶øsúƒPR\Ârúòf>¿~1›¿y}óÇ/7×—3eµJ§Ïß½»¾yùæ_—3K b)§??¿ùíùO„{w™ééó××óË¿n¼¸¾í% ¥WÒ X_üù—œpˆ/¤0™'Oð"…Ê2=Y_D±qdŒÇ¬.æ¿ö«îÓQmÀ´Iôˆ:´Ôa•ˆ³,ž¤q&£SG³¼œ<íJ¢i³*Úy{ýoB¾ß–*ÂÈé-P±Ÿ½ŠÂÍU #“DÂmg¿Í@
+j쪦v“ÃEB %yøËZGïˆÏìÝînUµ´ø¶üLÀ{–)á %ŽâA‰T©d’ÊHÈDp_¢™Dä¼j,–™È9ÙûC~I*´4ÑY~žæ˜ßÀ¡@6²~ïÙ•ð臮„¸½+á¹BΕ´wxqNÏÞi
+¦4”Ñ4JÏJÖ‹6 õ*N¢Í7å¢ú ¥&WPÞÈzÚ6;Zp…ž$j]¶-úTOß,_å¦Üæ» lô¹íÊ5-çS7-³3=VžÄ¸‰AôLûRû 4õŒb
+O‰Ã°˜rKOÜpŸESwyU³‘W¸[+òŽ7u} <ï˜û®¥äÁáÁ)òb(JGØaF`½c硨]£Š…‡ÌWôÖÛ¶qУŪOÂl…bD•1t¤Jy«ê¢Zä]yTñ†vDŒ³#‹ôÐìVŒ¾c1ñÌ'ó ´aBÇir>á„T§3NOåRÎQ+MŸÌÒ/°ôD#,…M ™Ú–óu¾E=ØÔÕ8pïÁbØz{i§»E7VU±~­ì×”U`œ…uy–d•6uÖr“ ]
+q*±œV ’LÌ·øo°Ãzª^w+:3½ç¦^Yäõ—qf éIþ²ˆŽœ¿_äõfd<àÁÔ¼O¨7XÇ+UŽ{.û+×Ü!i³ >aëžô\”/Fæ
+…„½6Œ¦»D¦¼Å·«û€Ðæî þ²(W%x¬ðBA5‚ý`wt!ì°¨mÄTõSö‡H§§IñŽš7½ùåö´%ò¢/çÿµ±®BóäÜÏwiµï"àkæá‹ðÉû€N3aqN|ö>R¾ôTî>p;2‚PZD±éTÝêP,›bŸoÏ‹å‰FÄ
+]-ÓB&RÅŒ´1®[…ÇííO8[ÀÓ5Æß ¢6Åèi]>Æø&ëø®’7¯Ö›fÛù ªÚoNæ€ûNÑâýþp—˜ñe@Š(‘éAßêîØ9ACš(•Äš‡
+©…¾¢A„ÿÆ`¯©¸•µÊ‰`ýP¡ÓìÌ(?‰ü\cV#aÊÂB‹ëØb«ÛÐÓï 3¨€Ôz^r‘p?b
+~ñ·ú=Ñ™ßê™È…æãXC­„‰Rÿñ
+þQKávÀÍîœTžæXªáïÞ @‰ÿˆ5/»öàÎR”w»ûû^•N*qê}L,ð¯sF¤’ýèßüG@û¿wŠRa¬ÕãÔi,àãÄ …çSIrlgþs¡cÙÿüRnendstream
endobj
2624 0 obj <<
/Type /Page
/Contents 2625 0 R
/Resources 2623 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2612 0 R
+/Parent 2603 0 R
>> endobj
2626 0 obj <<
/D [2624 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-2627 0 obj <<
-/D [2624 0 R /XYZ 56.6929 752.2879 null]
->> endobj
-2628 0 obj <<
-/D [2624 0 R /XYZ 56.6929 690.9973 null]
->> endobj
-894 0 obj <<
-/D [2624 0 R /XYZ 56.6929 653.2561 null]
+2623 0 obj <<
+/Font << /F38 1042 0 R /F22 957 0 R /F42 1238 0 R /F21 954 0 R /F64 1385 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
2629 0 obj <<
-/D [2624 0 R /XYZ 56.6929 620.7725 null]
+/Length 2532
+/Filter /FlateDecode
+>>
+stream
+xÚ­Y[wÛ¸~÷¯ÐËžÒgM .$NŸ”Ø›õ&±SË9Ývwh‘’ØH¤kJq¼¿¾3¸P$ÉݶÇ„À!03øfæ˜M(ü±I& åZLR-ˆ¤LNæ›3:Y»wgÌÉÄ^(îK½¹?ûó<›h¢U¢&÷‹ÞZ¡YÆ&÷Å/ÑôÓ§«›ËëŸÏãDÒè 9%¥ÑÇéÍçé;÷é\'ÑôÝÕì<fYÂRbå.of³«·ñìúÝÍ?no®Î»ÿéìê¾Ó¬¯=£Õú×Ù/¿ÑIFütF ×™œ<ÃJ˜ÖÉds&$'RpîgÖg³³¿v öÞšOCÞ2#2jsA2k}F •àƒ8•š(žðÎg ùÌK¡ÏâocC5'œgɤ¿ØÁ–^(°eÒÛN‡3-‡[ÞÖë—ó˜3µÕ²Æ‘ˆ¶«ÒNÁ)¼¿ú»ßݵåÖ¾®¶+;ù¥|‰ñ»ª^ú‰s½´ð‹³(¯ ;Ýlªí~—|»{:gYT¶v½…ùÕl¬ÄïM]Ž}i zfÂcä$†–21&üJ%½_U­E•¶Õ¦ZçOöǶqO° Ö…†³Pà*j–+ê¶-ç1<к/í—Ƹ?)Û¿¸ïûŽe‰&©J¤[
+Œ‘D˨n@§$SÑ?w­™øÃ?›ø]Ó}ÄÃÿÜ#×hökâ.Qœ(Å´ƒÔî±È·e<_•ó/ˆxûiÝÁN)ISÁ‡`ñì¨Rì1W‚®’¡[þ¨W*!2éiÔ÷¥Ž£¾“2¨çV1% i¦}´·ùz;Ö‹1H
+ÄIÅ:©€fÃô"HšP9Tí]Y—Opj
+ÂXª‘gFæ$œh¬ÙÔ'of{J»D¡ÓÀŒQs ‡D©¨ª‹jn<aS<9Žj—ôƒÚàËÁƒûÆî„#›=p´´þ5É×3p.Æ¡q19ŠÊ —¯ ²'u•^Ê òÇ*‘ ¥Î«ÕÖèÞÔí4Äèä¤vT@½4!h
+A:ÐïoG˜×a^tçàíj“×®øîm"H 0c;é¢\ä»ñ#•<r02ÓD$é+Ó—:~0”9˜éA‘Tx*éé-½P`ËaæePõpKçk͇¾f»yïk˜r)g ™ÃÅ5¼¼ýt…éöó½}á«,¾kÜWXßÆ‹ŽÊšDæ‡o‹ÆNØ2·WÓT¥IF2™£¹ÕarÑ<yB4mç ‚ÅÁº\zˆàò–ΈT›¥?·Î9Àt£áìs57Þ`&ÅUÀeII.l´‰aNNAuå h<†JeJ4OÒA¦3ÛìžêÖëQÚÁÐû´ç}5 |µ°/¬ý0pgqà&äÀ½a¹ÈÉ"o,Øbç>3©Î¤U&$V4åÂÒ¯];È}‡>œ$*eÞ» à é½Ô§Ã>oš¢Z¼œÎ>5Wó•>Z“¿VÍ®õÜ|•»>ð$¦¤MÇ2T¬$£¯tr}©™ÀKyZG˜¬Ëƒœ@3àO'÷q„†ìÞeF§‚ueSosdžm߯Œë"Û²8ê=¦«L¼â½¾ÔqïuR¨?’ù±Û ù) >'÷ôB=‡‰T=ÏøpÓÙc9·PTª -ßÇQ»jvëÂŽ‹à騃rŒ¥L7`fVN=ŒEKfÑõÂNÕÍxõ¼Ke¸*ƒ§WXSs\fÙt¸¬S·2ÉÀê…1 mKG™µü–C7dÔå>$zßdðPÆç¸ ï
+Òu<Ï¡åꮩÂ+£”ˆTÛ;—«Ÿ§?}¸
+äK0 :cªÇJÀfëuól½¡$„òfc¨lÛÚá>Oë>Ü%$jš —…ë’À" tâ™]e(烛o½R—³©˜Þ¾¶Vòá%Ð2hu¦õð¶–X–u@Ÿ´!2ƒî|Þ÷,!ßC½üž¥‰H±ÎbOŸ¨èMizy
+ÝU¦K%_ˆý™ Ñ—*hí»Ž9^†‰f:8‡CÏÏ•&‰2Þï Ë]a¦°“°™}6öÙ‡ƒýj3÷+ã"”„ÄâP4 XŽü.œ ­}™½"&|åÍW ¾î—Ûç"tç« c]N;èpã4%Lw\~n±©®Uœ=é’\’ïç„
+c*«.y†Õ: èþo‹,ÈÂendstream
+endobj
+2628 0 obj <<
+/Type /Page
+/Contents 2629 0 R
+/Resources 2627 0 R
+/MediaBox [0 0 595.2756 841.8898]
+/Parent 2603 0 R
>> endobj
2630 0 obj <<
-/D [2624 0 R /XYZ 56.6929 585.7377 null]
+/D [2628 0 R /XYZ 85.0394 794.5015 null]
>> endobj
2631 0 obj <<
-/D [2624 0 R /XYZ 56.6929 521.5252 null]
+/D [2628 0 R /XYZ 85.0394 416.8284 null]
>> endobj
2632 0 obj <<
-/D [2624 0 R /XYZ 56.6929 463.1995 null]
+/D [2628 0 R /XYZ 85.0394 147.2076 null]
>> endobj
2633 0 obj <<
-/D [2624 0 R /XYZ 56.6929 323.943 null]
+/D [2628 0 R /XYZ 85.0394 83.7467 null]
>> endobj
-2623 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F39 1178 0 R /F41 1238 0 R /F53 1333 0 R /F63 1385 0 R >>
+2627 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F64 1385 0 R /F54 1333 0 R /F42 1238 0 R /F49 1258 0 R /F40 1178 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
2636 0 obj <<
-/Length 1904
+/Length 2298
/Filter /FlateDecode
>>
stream
-xÚÕYKsÛ6¾ëWèHÍTž$xTl¥u›Ø©­´&9Ð"d³¡H•¤âª¿¾‹)’¢ìÄÑtÚÑŒ‹}|XìK2Æð#c)f!!G1^®Gx|c߈£™ÖDÓ6ÕËÅèÅ+ŒCúÔ/V-^a)Éx¿÷foßÎ/Ï/~›L©ÀÞK4™
-Œ½7³Ëw³×¶ïí$¤ÞìûùÍdJB ¦é|ì]ÎÞÌϧg?ÌÏ~úýêr>ù¸øq4_4šµµ'˜iµþ½ÿˆÇ1ñã#J1~€ŒHÒñzÄC‚3V÷¤£›ÑÏ ÃÖ¨™:„ Êýñˆ™†!à €`p‚ç{È(‚¬¦Ò}À˜¦*‹Öªo/¡1FÂq›ëì†j@8m '4DŒ0Ú•¾¸W°.,ðŒÐ’^¾²=Õ½ëXæ™Vòn[DU’gvÔªm ªÜöÝÖîÕò“ŠaUÞÅÊöfyeÉÊZ&z¾Š¿ƒŽ½¤²$±ZEÛ´*¹FäÅ+ÞÆqX3âkóµþ/Tµ|¡ui@<ž2Ÿ")aM§„ PjÈÀ„•eÖÁ„2Ì/ä(
-@"Iͦ–Ýõ|ñîúÒ:ô/@Ö›½~.]ÏßKÀc Bð3Ñh:5øQIRPðT«R1!ÒSÕ¶ÈJ+-ÊìSýe0ƒVYEÕÖš¥ƒ'±Ä½ªÂðÉ Gö ,_û«J-+×\;–àÅCRªatju;ðÜÌçvòìõÍÕ€C |ÀKø#ßÙ©-¤þÎ3Õ6üXØvmð Øõ:¾¼¸<·LB§F¼N²¤¬ÀóÂv]«•![:ÞDÙ6JÔ%¾DÔ÷ýGÝ„Á‹eˆÙ»ÅW×O#p‘UªÈ”[Ñ›]Y©µ[«³<+ó¢J¶ë½XØðܧŽ§ˆPðac9ÄRˆ«àg6P3x@­v—.æ è"ò—ÕŒºË“¯7IªŒ
-0»×šóùÍÙõÅÛÅÅÕåW•êK_¿¼À§AscДæ¢É\¹Gp¯ÜeUô—ítÕ
-L½_M
+xÚ­YÝrÛ¶¾÷Sè’ž Qâ$æ\¥ÛqÓ:n䦧“ä‚– ™‰TEÊŽóô]`”(93çŒgÌ%°À.v±ßîRt’ÁȜ䊩I¡‘•“Ùú"›,aî— êxRÏ”Æ\?Þ]üð3/'Š¨œå“»E´WI²²¤“»ùÇäGB)¹„-²äÍÍtzõSúáêýõÏ_¦,˲"y}{{uóæú¿ð.3àÖ,K~}óçëßpìöR±äõ/WÓËÏw¿^\ݽbÝiÆRÿ\|üœMæp„_/2ÂU)'O𒪛¬/„äD
+ÎýÈêbzñGØ0šµKGmA3ÂxÎFŒÁè„
+ÂLÆÖŠ°²`Á—)…“'ó¦ëô,}ÔÛzñlŽû§¼ ™È”彩ÖÚŒÃÆ,²²á¢$ËAMÃ5ÜÆìcRhq¤¿µFÊð~Ê26«úºmp¬oÛ•§ DIÉœ4‘Éê?}nÚMWw‡®
+C¾²"LìãI,å â&ÀÆûŽä졪›Îí±½¤eâÍÚõf¥{M¾HÞYCºCaÆ‹óPsy>†ŠÀeäzXȇ°
+ˆùsS­ë¾pTˆ¢NF׺ퟔó—]¾[opEŽsõS uè>à)8¢hÁ,TÃkÓ6©qú›affmÓ¼ÕÍçv›yÕ[…ÌdÕ a³!'̽˜¹ÞC4=X†R
+†š®À[h8À¸Ô0 ôhf œ™'AWÌ[ Mëz]}q¿ÞÙ$T§›Î ¢í‚&ÝÛÚáDw(¸db7?1×i \(Ú1Ü¥P-â¨&`DƉÊdy^µÀ5¢ÛzKS…Сrw1ˆ:|µÊïÑ,¹^X¿ X=u€Ã©ÚOC´«ÐýÕºö©´ëvkíSr‹Ï{}°‡×ë”ÿ5õMù‚ÿ"®3þó\Ö/ú/~ƒ¼Y@ÑxsV1Ï4¢ØÐy œ 9ÐlªûÄ9×÷»åc^­b'MÆJ(LO5¾ÞbÓiƒy&k¯‡òòRågåyžcyƒ¢Ÿ‘ { ïv Ü…þ® ]Ý ¼ÁÀiÈJE¨ÖÏÛ â:cÏe­ðõÈ
+‚(EËó"=ÓˆÈA}¤é~"ß5Xr‹$´Ä‚Gź«£ETGó¸ŽÆÚG»Hž 2Gê‹~NÍ Þ-`ƒÎ DV&]JH„ýC» ¢üfï¼Z¾rý@’o€"
+'‡ðÊsÊ|½ÂƒòfÐ)oȧzµBêÞ1úcرg|Vž©šõõ£ctªHþzЗWwHá Æ1Ø[÷p$Î
+{$3²—o¡2V¤Ílzkk'ÌV*©øt‘¬öNʳà$Ã×áÓ²Ú{ èûg|¸œ#ÞY¼ôÕ ÎZÔAw›¶™»AÄ_囩Ã&¹”„™\Yt˪Qhv
+Ïåö”+[T+¾0Ð}ÏìúUs$_ó"ƒ€ T"®îÆâª
+0—Ö®¼³ŽÃ¢¼'a;E¤”Xsú»`jº
+ßháÌ]DߘܞÑ]1ÓÎf@Ý»¿×JW]ï廹£ 4êûø:±µL_ô
+Gp‹%vÐó•6Ÿ78ÃîÈÌãU¯ãû 
endobj
2635 0 obj <<
/Type /Page
/Contents 2636 0 R
/Resources 2634 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2612 0 R
+/Parent 2643 0 R
>> endobj
2637 0 obj <<
-/D [2635 0 R /XYZ 85.0394 794.5015 null]
+/D [2635 0 R /XYZ 56.6929 794.5015 null]
+>> endobj
+890 0 obj <<
+/D [2635 0 R /XYZ 56.6929 769.5949 null]
>> endobj
2638 0 obj <<
-/D [2635 0 R /XYZ 85.0394 684.7381 null]
+/D [2635 0 R /XYZ 56.6929 743.9636 null]
>> endobj
2639 0 obj <<
-/D [2635 0 R /XYZ 85.0394 622.0142 null]
+/D [2635 0 R /XYZ 56.6929 710.4805 null]
>> endobj
2640 0 obj <<
-/D [2635 0 R /XYZ 85.0394 559.2902 null]
->> endobj
-898 0 obj <<
-/D [2635 0 R /XYZ 85.0394 520.5531 null]
+/D [2635 0 R /XYZ 56.6929 639.6941 null]
>> endobj
2641 0 obj <<
-/D [2635 0 R /XYZ 85.0394 487.6322 null]
+/D [2635 0 R /XYZ 56.6929 562.8392 null]
>> endobj
2642 0 obj <<
-/D [2635 0 R /XYZ 85.0394 452.16 null]
->> endobj
-2643 0 obj <<
-/D [2635 0 R /XYZ 85.0394 386.5142 null]
->> endobj
-2644 0 obj <<
-/D [2635 0 R /XYZ 85.0394 236.5364 null]
->> endobj
-2645 0 obj <<
-/D [2635 0 R /XYZ 85.0394 95.5488 null]
+/D [2635 0 R /XYZ 56.6929 483.0195 null]
>> endobj
2634 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F41 1238 0 R /F39 1178 0 R /F53 1333 0 R >>
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R /F54 1333 0 R /F64 1385 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2648 0 obj <<
-/Length 2943
+2646 0 obj <<
+/Length 2217
/Filter /FlateDecode
>>
stream
-xÚÝZ[sÛÆ~ׯà[¨s»÷K;}P9u©J­¶ž&y€HPDB2AZq}ÏÞpã¤Ï´SkÆX,vÏžó+H&þÈDH$ 5e8˜ˆÉ|s'ðìë hf‘hÖ¦úòþâo˜šd$•“ûek-°Ödr¿øaú%" ]Âxz{usýÕìõ_®_û¯¿Þ^_Έ"”L¯îî®o¿zûþrFz Æxzsuû÷«ïüÜÝ¥¡Ó«¯¯ß]þtÿÍÅõ}ÍY›{‚™eëÃÅ?áÉñÍFÌh1y†Œˆ1t²¹à‚!Á‹3ë‹wß× ¶žºWSÒàB#A¹¹0¤ Ói™¤"Å1RX©Zf”¤d©¬Ìf«þA¥DØ(9i/v´e$JlI[[*‚°Ò½-ïvÅv諒_å~p¨²Ç0¬›M¶ûäo²íÂò_‹=:ÒI8¸ÂizJ8 шl‘͇AÑŒì×H¦¿_R0­ý¾?y˦\iÌšãûѼ~Tnן. !ÓA¹H¥‘áš ¦M5,™šÊ‰æã‘h€ÙœØ2%¶ì#ÁpoËj>滪(·AËæ)0×;˜,âK`Ä®¶Í6ùb6_åó_þ]nã m&4³d$Ð?í.‰ž–»ló`JîIw£€Õˆ"•SÀÏG
-`ˆQeÆ·ŒD‰-Ûg—üYwË®ò éu™-ŠícONŽnô#ÆtÆNny¶èÿ\vÛlíoŠ ¹qiµ¯†…J"ZŸ0÷6ÕˆP#•êÜã@²pe†<æ묪úŒ‰4¡|œ±H”`Œv¶#ÖÑ«.gïžòy±üÔ¢gæüµ6 ¼1‚§oómä[ÙÕ¬’òÅ« 1JùÛ[ûÐDXÖ?€¡ ªBhi‘BÆUѦVEMåTQ$Ta¡BM8ÙcK¤¨6ãlE¢[mE@˜W6ÎwغËwËr.€q6}*«ýÌÚ‚¿õøgœOÁQå»bÿÉ?p^¦²¹†6Ó»²ªŠ‡u ´‡¨<Uæ-%Ẩ’ÈÃÃÁ­––‡õÚiëØoQ*ñú#x‘/³ÃzCò*±<çA±wWŸY.ÁÈv‘†*zÇÔ²3N%"6u!@+­—_—ólˆ{F BÔÖ–dMÚܺåN±kg&²k}w"BÄ„j¯¼ñI‘*ªÄÙT(½´G†ÀE¹÷›7¨}­š…¢ç+µ€Ç“E
-±n.¦ Üá¸îYÝîó_÷c¸%éZªéïi/Ô`m3ßeÏC{€pˆ¦íR" .AèX€J‹j*‘ÊAåMªëAãµ1a…!ƒ…g­¦JðÖE ¤‰Â`‡¹-Œˆ£E;¶hé<„LãéÆN”·º®ï/¦o ˜%N@
-fÎï‚Ä´©YgŒÙŒ¡¨ü¾‹2#×€±ƒyv¨BÌdL! µi×fÛ` ùÒy ~- û°]ç±éûe‹Ãæ©´™y¹ÝçÛÐOëÇ¿V;B³Æ†ìÍ° šâô<bÒ=ɇlÈí”´!iý¶0gÙlbXÍQR­„!b°î.÷çÛ9A\Ô ‚N9‘1s²,Wû2S{ëÁ§ë&Œ\biç/ÅÖ~Ôp:§ŠA¦
-9L @ÚglÚ7Š¼6Õ0òj*‡¼M
-yIÉÍXpˆJ¨òGùŠD ¾º¨ÃPÙÞe¬)q0±Ý.Û—±7ÔÒÁ©Æ%LV«ò`Û[vlb_pn%“%–0OmVá¬ò°[Ýr7M¿Ôö±g\vB,àC‚oõAxã¦_µ Æ "Ï‹àÍ íf/ùü÷¼õË«÷3|*?åS ÅPèŸøTÞ"Áu r°¾IÁœšªk$¬!ÅWœŒ2iŽ™êÿ`|ïpõÚÑ×v¨ã¾‚‹ÿLI_YÓŽŸÄýgÊúÕ×öG}È¿ÞþŒÎÎüŒnL¿‰|‰¦Ä™HÍQl‹`>TϘˆcźéùç¤Rª«˜lüp.9LnW>ÆT†1•ÊÂÛL5}GÆœ›½$Sçií½û`ÂX⃠£µ§µ¡7^{Z×;/azè®~c4xÚ£Ö{ßÓÚš®ÕÌdÑÓvÞLµâÒóchŒáZÙÈó2ØÏ•y›øraþSïØ›ÇÃ’?ŸÄ“l÷o›ŸYs…˜Ö4mGT /ËÈ”eœHyìMìoä$MðþBòÈendstream
+xÚ¥YYsÛ8~÷¯ÐÛÈU‚“Ǽl9Ž3ãÙ‰í‰5µ[•ä¦ ‹‰DjDÒG~ývã H ’ÚJU €îF_7 6¢ðE¨Hå(N%Q”©Q¾:¡£{øöÛ s4O4éS½›ž¼ý ’QJÒˆG£é¼Ç+!4IØh:û<>»¹¹¸zùßÓ WtüŽœN¥ãgWŸýi×nNS>>ûíâötÂb&$1Žt_}¼x?9ÿýâüßç×WN¿Nÿ8¹˜všõµgT Zÿœ|þJG38Ä'”ˆ4Q£G˜PÂÒ”V'R ¢¤~eyr{òWÇ°÷Õl YC‰„¨„Çsp6bŒ¤Jñ=TJ"Á…±ÇíÅ…=öÙŸ·×xØÅ{F¤#øJƒ}H>+ëZ瓺¸/T¥þBMà?öÆn•´oÿ„$©J€î|wyõÞJJÀÙª(‹ºÙdMµ±KŸô\oNY2Öe®íÒǬl³e@1%„GQä؇$M˜pŸ>œ[Ž’
+à'áR1GMÅÀ€AI’ÀH‘4f܆ÔßÓ߯?½l»Ë²Ñ›R7VÛçºÑ«ÚNΫ²®6MÑ®¶r%2âŽhǸ´|0!6)Äm™­ôl’/tþ=¯Ê9nFjž–©¡¾’º¥„ªØža—‘Ñê ç±™ÏvŸ¿PÊï[ð[Q•ŽV–ÎcõsÙdOŽå½5Uµ Ù•z{º|.«u]Ô»ÙAŠˆsE#¢¸* NÈ•„q8(œ8Áœé±0™"y
+e§zcð¯Ú˜#óxœ-+LÜóX4 K•-—vɪTÛIQæËvæ%Ü=»ÕÎ!Óh|9·›Ëª¿×9õZç~г7x”\Hu¡ûV7ù[k‡îˤ‹7ïr N"Žø­¯Â!¡…ÿÌ ÿÎô<k— ±ÂüÎ K hZ”«ý+œS$}›H¥¬ K @ ÙË¡Â8õ
+zÅ㢴k ÎÎmgÆñγpìF?5Æ‘Ëm¾°DY0-KbËN§M9ËÉwýPKQˆ¸ØÇ9†W€ SáiîŠr†Ìê7A ?]5ºfö°V]LKëc‘KäÀÇYÛT+HŸ‚CŽ'=âìî9à
+á<µž‚u@•ZÛá6D`²ÊœÚyÖÖ:„,Ðþü©W -USY¦ó¬Xú‰‰L)šéx,Áfɸ-ßà$ë]ÚåbP(ÌI9{½í8 Až¥ÌjË"2×u=o—$”" j%?)Ä+•gî
+ÛÈ+z‹kSæn÷w×pè )ãéñî¡Oåûìýî¡£B¹“Å®Hø*1ߊôD‘}Û§)‘Øõ DÞlŠÒõš¦ â ­³{ߦµ«U¶qøjŠôSaQ6hl¢8~Á:=ª#ÖñTÆ:££~Ÿ”úª8Ô%õuc2†pC:ª\GÐn€›
+¢X, Ô;_XD1ý M1gµQÁ-,ŠÃ]Ýr#’ÄÝÉêÊ1ÅJeF®ŽÛ 02hš7ŃA,$€Ž¡ô»Ý~+‹]‰‡ñÓa²¶Âô·X†&RDF»àîªr1÷ÕÙeq¯6g.žŠU±Ì6Ëgßù{›ù‹ƒmÆg$ŽbñBlõ¨ŽÄ–§2±õ°—yàÚ4zA¤'
+ˆdÜqãxGd(ó
+I!1á Å«OuăžÊxð)BB€ÝŽŠôD‘;)·K5ùŸv@B2gð¥yBÒå.ïãì™)
+Ç g~¤Aóc›ArWçm‹ð­^8”œÙ­µÎí¼©-¹TÁ»º^f¹ÓÌ\ZÍã 6p25R{wƒ›ç¸nà@÷èá$²@
+uù{m?àÛ/ÿúŸØðÇéx
+à¿(Üg蹫G7¶PÛÍÅ£lÜr5„=Ob’ô•AÍ>ðµ&XfßAì6öQ™Ê5m2".æíNÛÖ|`o˜Û'Ùû±@ÌÊVë¥FÉtüh÷¶w«¢qó»Ö œkªMSï2E'<ÀI^­R®ŠºcÑö`os {–5ñoj}oNþºZ­·`hæ ÃÇ®áòÐà….k*»÷·j‹—»‰“Þ{ A@Š5<âÇ Gt
+\ÚðwÀ™h— ÿ÷Ï+Û_’à~ °ÚGP ¡œ2¯ˆEé®êÝ1ûºÿ?ó…Jendstream
endobj
-2647 0 obj <<
+2645 0 obj <<
/Type /Page
-/Contents 2648 0 R
-/Resources 2646 0 R
+/Contents 2646 0 R
+/Resources 2644 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2612 0 R
+/Parent 2643 0 R
+>> endobj
+2647 0 obj <<
+/D [2645 0 R /XYZ 85.0394 794.5015 null]
+>> endobj
+2648 0 obj <<
+/D [2645 0 R /XYZ 85.0394 752.2879 null]
>> endobj
2649 0 obj <<
-/D [2647 0 R /XYZ 56.6929 794.5015 null]
+/D [2645 0 R /XYZ 85.0394 690.9973 null]
>> endobj
-2646 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F63 1385 0 R >>
-/ProcSet [ /PDF /Text ]
+894 0 obj <<
+/D [2645 0 R /XYZ 85.0394 653.2561 null]
+>> endobj
+2650 0 obj <<
+/D [2645 0 R /XYZ 85.0394 620.7725 null]
>> endobj
-2652 0 obj <<
-/Length 2564
-/Filter /FlateDecode
->>
-stream
-xÚÕZKsã6¾ûWè°UKUEÞŽ[N&;㙵4Ij“h‰±V"’Šãüúm¼(R†¨Éf/[>
-f2la¨Â =úgæ'ËŸ²:kýdͪ.žlpJEò¡tƒmP°‚–elØ•ß‚Kí¶`´¯@F Œ=[:¹‘ã®HÂÞ¾
-ÜfF·඙§ÎuØ£sèÁgíöÐøèz
-fÆwž6 ó‰‹kå¿6‹‚fUŸ¾\WåßÛžœÉ´J®=R ºfê$t:;†Ç
-
-Rö¨~ˆñˆ
-Éõ»OóEü*ŽÂ‘
-@ï_Å1Í‚k87mu×ã
-Q)×ê¯ìÊ .RÄÀ¿oØëOËo?<\¶èÛâ`™{„,^ IÞû³¿©Ê¦ªÛâ°?÷ï@êæ"N‰;ÿò¿&ÿ SŠÆ½›aÚ¥ÌæˆLOUL!¡hÑý?à±7endstream
-endobj
2651 0 obj <<
-/Type /Page
-/Contents 2652 0 R
-/Resources 2650 0 R
-/MediaBox [0 0 595.2756 841.8898]
-/Parent 2612 0 R
+/D [2645 0 R /XYZ 85.0394 585.7377 null]
+>> endobj
+2652 0 obj <<
+/D [2645 0 R /XYZ 85.0394 521.5252 null]
>> endobj
2653 0 obj <<
-/D [2651 0 R /XYZ 85.0394 794.5015 null]
+/D [2645 0 R /XYZ 85.0394 463.1995 null]
>> endobj
2654 0 obj <<
-/D [2651 0 R /XYZ 85.0394 225.6507 null]
->> endobj
-2655 0 obj <<
-/D [2651 0 R /XYZ 85.0394 155.4035 null]
->> endobj
-2656 0 obj <<
-/D [2651 0 R /XYZ 85.0394 85.1564 null]
+/D [2645 0 R /XYZ 85.0394 323.943 null]
>> endobj
-2650 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F63 1385 0 R /F22 977 0 R /F41 1238 0 R /F39 1178 0 R >>
+2644 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F40 1178 0 R /F42 1238 0 R /F54 1333 0 R /F64 1385 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2659 0 obj <<
-/Length 2707
+2657 0 obj <<
+/Length 1905
/Filter /FlateDecode
>>
stream
-xÚÝZ[oÛÊ~÷¯‡Ê€¹á^¹Š‰í>çÄq#§=@’š¢$©Ë÷×wöF“ÔRJÑÓ—&\ígfgg¿¹ÐxÂ<㉘ij(fˆ‡˜ÏÒÝY8[ÃÚû3liGô©ÞÞŸ½~G£YŒbAÄì~Õã%Q(%žÝ/¿Ìß"ÌÐ9°ç·o>\_„ÆTÌßÜÝ]ß^Ýü¿yT@†óon?¿ùÍÌÝÇdþæýõâüÛý/g×÷>}qH•2œ}ùΖ ú/g!¢±ä³ïð#D8ŽÉlwÆ8EœQêf¶g‹³¿w {«úU¯ pˆÄc‚g°GÊ`±o#"#ÒYá<À!l±HvÙRm øTÀ$Ó4·° æ!éYUQÖ4”šÊ¼® ô•ÈŒnŠ&«Š¬1¿–å.É 3VäfTgÕSVY 1F1çÄIˆai ‹ç¢Ü×y=6;Å(’‚Α`‰˜ùÌ„AoÂÁ6DÆbôYh2ìñ£Žª·oü°on$ºQj¶Â_8aЇsxÅ#-‹U¾VùÖz VpqÊ,mÇwéáK9’‚sKºÌÚu°Íž²íϳ½>É6+Öy‘Eç¶|ÌvõM»8E‚
-6 ºƒ²/Áº£Üy€{
-žÏB‡&€€þ<1+‹ºj¬¡\Ïp ;3þòðêvl&,$Gl~Q8ß'àÐz©\™g³±ŒÞÞÜ^™QlK8à*h›¼´RWÕ9–óÒJ»Y\"3zWVf°+5Ef!Âîf€y±*«]b˜ª°ážZ5€\¸ˆb§>½»¬Í®½è†Ì“bÙÍqäb–+lTûç&ÓrbPà©|4Nοçͦl³’hå×í.+šúÂsŠÀ•‘°ç3yŠì£Ð9Ñ÷|»5üm+Úî7t_%íÖê
-©HäQMÆHê.æ…›!'£ƒêk«,üly‘7y²µ‰@Ò$ã#0¸`Æ+åjðG›UyV££Ù9©úæd6´3“ðãñ¿OåR¨ÃøßQ)¹‹ Å1–ÇE:"Ⱦá #Š‡"?×Ö¿o» [khˆöÖŠùjtC6em3±€ÄpKgïHšì“‡­,W|ÐÊ9Šeä₱ÂHy¬.rçê¤=®#Ê#²˜dãîEb¡Âì£mÚdÛmýGºmëü)CS^@Á‘CŸð‚>Õ´tT/Šû¼à¨ÈÎ Eú¼` ²ïâïìÿÈ ¸D8¢§¼ GuÄ •VÜæúbë«ú sªßWS‚DÅÇõë¨<
-ìE#$8”” •ÓxR´XJ9UŒ}QHî²ìDå1·é@Ì‘ZµHóp^…E­³‰þë6¨]ø|  ƒ–«,¤ë” ÃÑD@¦âHÁæ÷ª°/ÏF99uë|Lýn6I£F̸m™,óbí-ÕÁîÕ¤Û½zš¼h³Ú¾h¥}/«GC¬ bqµé˜o’Úl×í`§›¤X«$…RÈXšÚ w­«ú¹¾Þ€É÷ÍT›™R§ÿLÌc_ÖuþàÍ$ Q†Â_H LIŽºŒ½Ü[÷PŠÚ§ñêÉfÔ¤1ã…Ç}"%
-#þˆC ϘC®Ò¹­ÍD2—šØçC]nÛÆÎî“f£Ün]HŒ!¹"ÇÁ¥G4-ŽHCËÒ-ɘS¹?„ÕÂÑQå:¢Cí†À`Mè@»…nñÄöÕ`™d»²øKm)ÕÌÐèP(»ÀÍ<­Æ¡àÁS-ŒáZp‹æWꕵöw­Q•¤êº)]!âÉÑ1A8ôtŽ‘Ø!åC¸z˜£¦GþçZ\]}£Á]~(]ðNêQxv¦R)±1•IŸS›X×6öº“êYyÂ÷zTGœÏQiï»>é}£®ßûŽé×s¿½þ×WP'C0«!‹
-gF4í!€~¡l\ÔÖMR¤Š½tu^Pçë 5Ì©BÓŒöUþ”4–ô1{®Í¨W[Ç¡Þ=LÖYÚ/Knë‰pW"ÙòV­€³î(—±Àñî×ËÅ+Œ»Ú¸lìV}ͨwq̦ú…GpØÆw)J‹¹iñÅè¦d»}ó<î&›íÕ™c‘7CV…}¥&oŽ)’
-X•éˆ<"GÆ”"ÂC‘ŸÚq«Ä%YF‹+ë"kãY­+ÐÕ…É‘òŠU/ßÙÓ5÷5àçÿÒ7hÚ®¤ÅTž²kêˆ]•¶ëúÀ®qŸéˆ<"ûvBÄi8ù'Ùµë€X‚ÔE†­Åþm鉙£2 £ð¥Z7ˬª|ÑkÐ4>$(1BANRêÈ!9*}H;_aHzû}½bŽˆø¸^ŽÈ£× z„PŽ1À¦bù‡ó¶ÒýJ:7}K6ßGëæÚ:Ygf¸|I0ä¥4Y×êC¡ÂK—+kR»f~$/MÎqýEÇTtÝl%ËS´ ¾Gø2a0ëØèÌgŠüY.ЗÕò¤3äS4LblÔY$êU1 –]ç`˜.:»´ùñ3ÕžB°ûMæ’0Ø¡ûÒÝF0ºû{³¸;&QGbpr( qýÔ_
-D`y¨âÕõÛÏï‡.¤Øëaß:­ò÷9/|}"F•rΧþš×ék¸¥hó·Éêà$ÚÉXõgèq°ëMc#ÒPWœÌ˜»ÏŽ¬“ˆE‚ÕÊÑj5D:Š âµ.mÑø`H}HÇ,:ü*:.Bºê-¨સæ¿B<ÌLA-$™™I–OIÑ(…Ýÿçr¾|¿µD—wŸkûw7–@§j­Þgi®ZÙÒ÷©…b ;í¦Ê8Hmá1:êØo.€ÕÂ}=P0ÀTcªÉªé–2[¨AÑîtÈgf7ŠVéofö.-3a‚=SµDwúò…sï Šbá¸WdhoVf&·Ls+­-lç–1›'ŒSöþ.úØÖí¢×óU»pilz1Ïu†Ý¹6Ã>îÓÕK+åe·K4õW3OÔŸºx>ì>ûü×Qóò'CL}““=q/ §”²òBìßÞêþo21Îtendstream
+xÚÕYKsÛ6¾ëWèHÍD^$À£b+©ÛÄNm¥í4É!› Eª$Wýõ]
+BŽEÈ‘‰?^®Gx|c¯FÄÒLÑ´Mõb1zþ’ÉqˆÂ€ãŪÅK",%/â÷Þ Dš
+äç/yÛ ÆaÅH ­×ú?WÕò¹Ö¤ñxÊŠ¤„‚Bߧ5˜°2Ì:˜P†B‚¹å…,7SW°üI"4c˜& »ëùâÝõ¥qÖ_&„†Þìõ;㮽Çc BÂÜõÄZÓiÏ•$E‚‚Ÿ•Š ‘žª¶EViQfžê¯3h•UTmíh½tð$æ‘ØWUÔ|òÂ’=(Ã׼ŪRËJÅN€m`ËÜ xHJ5ŒŽS·ÏÍ|n&Ï^ß\ Ø8Êìc ä™™ÚBêï<S­aã¸íÚàŒ·Ž/..Ï “Ъ¯“,)+ðß¼0]×jeAÈ–‡7Q¶ÒuI  ‚àQ7að⇲ ÄìÝ⇫맸È*UdÊ®èÍ®¬ÔÚ®ÕYž•yQ%Ûõ^,GŒÔòá
+>ì‚/„YŒð«7P3qAv—6â è"ò—ÕŒºË“¯7Iªju÷J…iµú\¤€öç(Mâ¤Ú™·ši’ÝYO³K㳋]•çéä¸çt»,ß”IÙ¡ "³ ؘ ‚(øP %`=õ! <ÛÛ,ê
+²†ãËÓq¬c9'q¦3o;–¿Ÿ&CXtBù:Õ5ëëýéI½¿Žßúûøñ>¿7'Ö/;±~¯ŸäWª"q±õK<)à±K" %ÎÌs•ìÏN=æ\ I±è3/N gù´ùÕ.UÇv¦ìó»9±~Õ“ü⤀#@^ì˜úÔ'}¦‹+ù0¸â{Ù©
+íŒBx³8Nté5JÓÝ„¢Íb$¬­©™l6i¢Ý£fUɲ‚µ«‡j¨Ì@ª>«´4Ý·;ó´WÍêÕ¨«az FBÏÒè¸êQÛ¡òmµÑ¨2»*ISÓÒ%`ýïŽM+*í3³Ïe¥ËluÛ ¬[ 4ÄìL7ûv7à2D
+ÿ‰`À0
+C¶/ÛM}L½_ë
+å²—,Îzë8œu{½-mU/ªÜhäºní^‹JWÊÕ+×í«îóÒmɶŠfû6z¥ D˜ˆà)”ìcÞ$„ƒZSÁ;R÷ÄT"ê%­«:_~¿±×HÑ¿éìiŽF±4Zâ4î ƒe¡xT˜#9ÖHÀMGÈŽ°yݦMùüv{wÁûZ¥k®Œ )€(¿ûKÖþ£ˆII‡¡´`rà”ÒÖ
+#Ê: û?ætendstream
endobj
-2658 0 obj <<
+2656 0 obj <<
/Type /Page
-/Contents 2659 0 R
-/Resources 2657 0 R
+/Contents 2657 0 R
+/Resources 2655 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2666 0 R
+/Parent 2643 0 R
>> endobj
-2660 0 obj <<
-/D [2658 0 R /XYZ 56.6929 794.5015 null]
+2658 0 obj <<
+/D [2656 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-902 0 obj <<
-/D [2658 0 R /XYZ 56.6929 769.5949 null]
+2659 0 obj <<
+/D [2656 0 R /XYZ 56.6929 684.7381 null]
+>> endobj
+2660 0 obj <<
+/D [2656 0 R /XYZ 56.6929 622.0142 null]
>> endobj
2661 0 obj <<
-/D [2658 0 R /XYZ 56.6929 747.8192 null]
+/D [2656 0 R /XYZ 56.6929 559.2902 null]
+>> endobj
+898 0 obj <<
+/D [2656 0 R /XYZ 56.6929 520.5531 null]
>> endobj
2662 0 obj <<
-/D [2658 0 R /XYZ 56.6929 711.7108 null]
+/D [2656 0 R /XYZ 56.6929 487.6322 null]
>> endobj
2663 0 obj <<
-/D [2658 0 R /XYZ 56.6929 643.9803 null]
+/D [2656 0 R /XYZ 56.6929 452.16 null]
>> endobj
2664 0 obj <<
-/D [2658 0 R /XYZ 56.6929 558.2262 null]
+/D [2656 0 R /XYZ 56.6929 386.5142 null]
>> endobj
2665 0 obj <<
-/D [2658 0 R /XYZ 56.6929 450.5864 null]
+/D [2656 0 R /XYZ 56.6929 236.5364 null]
>> endobj
-2657 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F41 1238 0 R /F53 1333 0 R /F63 1385 0 R >>
+2666 0 obj <<
+/D [2656 0 R /XYZ 56.6929 95.5488 null]
+>> endobj
+2655 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R /F40 1178 0 R /F54 1333 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
2669 0 obj <<
-/Length 2542
+/Length 2940
/Filter /FlateDecode
>>
stream
-xÚÅYÝoã6Ï_! '5—ŸúÀ=e»HѦ¹Û,ŠÍÄÚ•%¯%mvÿû›áŠdËÞÒ¢SäœÎüf8‡?e†q•ë(Í53\˜hµ½àÑŒ½½žfˆ–cª—·/Þ¨4ÊYžÈ$º½­•1že"º]ÿ_Þܼ¾~uõßÅR¿d‹¥á<þùòúýåOÔw³Èe|ùöõ;øT¹J€Hh¤Kx|}ùóëW‹ßo¼x};ð3æYp…Ì|ºøõw­õ/8Syf¢GøàL乌¶Ú(f´R¡§ºxwñ¯aÁѨ›:§m2f¤N¢%4r#’yMqÆ H¾L•%ó|Дsš
-T¨©å}ñ&Q#J!X–àÌ‘ìš}w¨ !9Ë´‰Æ;ñˆfø’ãݤa™Lû©l;[ÓaÝ7{j|êí¾´-}4~4ð÷â™
-¡™\Hq°¹T,Çã$"0
-“·ýTe×U³NäŽÕ"Ÿ¸*.)Š:´,5&ª Šà`t–z‚óPØää)À)`ïqL›à’ÂD/¤äŒYÂòÝÖóÑl=GÁ„°=6!r½¥ä)¤¹Yz`>ξ\25À&Z]2®Î’MaWÿ­,kTž¨þæ4Kiˆß¹TçӬʥYÝLš•3¸”‡Ó^—{»êð>wu
-3”ŠÆÛ'Yj†»I’e$Äxòö~Ø
-4ƒ:°YW„×Æá¡1)—]R0–t( +»¨¡ìòXV-N…hPÆ}}ŠŽíÆó²¶äΗá뇛÷-¾ð ™©dg‚‰,éƲžáPVå&l²ÂÒwÖi¥¶^|wÚ8_†ŸMù° ì}vWYÂàr·ÜÈ)ûûÀøÝb_Rü{
-ôô¾Qω1.8Bp•C‘´H¶…¸óƒÕx#£8]…@™¦=t·Â–“Ñ3GY–{ yš¤:>ùÚ"Àƒ!0|ãmLu.Õ$xž®SbiäÔ ÚY¾†´c¾f_Ð&Œ½³]_ºLAžH›%Kñ˜<| K GÉSfX|WÙŽü¾w{œü–x¿w¹kë²¼§;€!ÊTì n `ÔXû€»>-§\©¯¦§õ–
+xÚÝZY“ÛÆ~ß_Á7c«ÄÉÜGRyX˲#Ç»‘£M¢Šã, .a“ÄŠ %+¿>=' ·¤ª¤bU™ƒAc¦§ûës–Ì0ü#3-f†Ï”áH`"f‹íž=»ï®H ™G¢y›êëû«ß}ËôÌ #©œÝ¯Zki„µ&³ûåOÙÍ›7¯î¾yýîzNξF×sqv{s÷·›üÜ›kC³›ï^½½žE("Â,ÄÙÝÍí«oæ/ÿôêåŸÿù—»W×?ßõê>qÖæž`fÙzõÓÏx¶„C|…3ZÌ>ÂFÄ:Û^qÁàŒÅ™ÍÕÛ«Ó‚­·îÓ!ip¡‘ \Îæ@¬ ˆ`Pfa2˜+Ž‘ÂJ%™Q2$³Hee6_÷
+ç㜓Y{±“-#ÑÀ–´µ¥1ˆSÑÛò;ܼ>ëÂŽuþ†õq»Í÷ŸüC¾[úAñ[y@': WØ MÏ §!šM r¢y?*š‰ýÉô÷Lk¿eä²­–Aóæø~´H¯ªÝæÓ5!$•‹T®Ù´`ÚTã’ITN4NDÃ6òÌ–‘h`ËŽp4ÒJõ¶B͇b_—Õ.ˆcÕ¼æzÇ
+hQM( R9ür¢
+d˜™È åÞyÞ¬öµ
+€Š^®Tã¸= ,lØ|~ðXº}çg<Ž•û]ÖíÉU±÷´‡ÊOßøÇjá¿¡E<•ÅÒCuX{Šr7ˆ>$º•Ž‡yµšÇÀ
+VfIXk°†k‹Éà¨FÄäb1dIø2ô
+Ó§‹ø¹ö©%“eáPà SXt]B à€œ`ƒ–½>øwù¦®ü(ÙŒƒÀèqs «äË¥g¶D§V“å.®à>£YÃÆ6?X ø·U–…ÚãPÖ… " ˆ¬Nò´u¹YžÁ·@Š+ò,|“I|{ah‡d3Ò¸AFYm‹ˆzƒ”2´«Z¿Éûcé¡ðzjrþýeËÄn,>’L;ÅþCä;’–0o‰¾G}]!KäX=3)âˆjÎÏeDsòüô…Ê”ý.Ë:w)$e, Ú…ÊXƒ˜}8üdÌ1Ý,Øk±ÿXÖá/\» ×SäõP^G µ‡ÝœæuÓn |„~fv¹›†µÍ¡üP´›#PŠP[þó‹}1¹4„¢ŽkÒUJ}bþ>ù©¡˜‚Bs“5T›j¼†JT®†Z ÖPR³˜[ÛBl­_EA
+•*Ÿæ,Q °Ö-hÒ¨.oÃmàg¼¢mw‚Cmª©f…X½Ž×SPñpÜ1îCñÛa¹f¸žjB§Û@æ uX;ÁßçÇ6é¥q´p‰¨uKÓhiQM %R9´|;Ôþ ˆqÅÎÀ…"*à,“¬%ªÞºpQ\è2—àˆˆaZ$¸Ø±…Kç%$OÇð2¶¤ì¸ÕüpW"ûâÙ
+pj~ósìóœöeE<yžkåç\«Í$9sqÞ"š€w rè¾B7ø6…§Ñ %øÀI®Ñ)[]lƒ¼01¾^Z<úKn>î+" ÍÙÀm#kZÓá~Ü_Y†OYöÒþÍòË´ïÔÙ…wê¶)È´|Ù%‚p".Ä¢D2õïO«a>V ϙˆcźyú—Š÷J!(³Î€²E4ñ—tÈr÷Y ùS)?aj0osÕt sÞöšdÎáÚgwyÂØÀå £ÉáZ‚‡Ð'O×õÑ«@X„~º«ä ÷¤ ßw¸¶ºkµ5Yt¸/‡ÚòpLù)6¦p­l
endobj
2668 0 obj <<
/Type /Page
/Contents 2669 0 R
/Resources 2667 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2666 0 R
+/Parent 2643 0 R
>> endobj
2670 0 obj <<
/D [2668 0 R /XYZ 85.0394 794.5015 null]
>> endobj
2667 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F63 1385 0 R /F22 977 0 R /F53 1333 0 R /F41 1238 0 R /F60 1366 0 R /F61 1369 0 R >>
-/XObject << /Im2 1355 0 R /Im3 1524 0 R >>
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F64 1385 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
2673 0 obj <<
-/Length 2389
+/Length 2558
/Filter /FlateDecode
>>
stream
-xÚµYÝsÛ¸÷_Á·R3ƒ æžœÆIu“8i¢\;sw´Ùl$R'’þøﻋiR¢ä^ÓŽgL\ì7v€xÀà‰Š”&Ð&ŽÆ“`µ½`Á-|{Á=ͼ#š©Þ,/^¿“:0‘QBËõ€W±4åÁ2ÿ5|ñ8š ^_~¼z;› i¤
-/?¾º~»ø'¼' ¨€„±ðãåõ·Ë4÷yfDxùþêëì÷åÏWË^Ÿ¡ÎœITæ‹_gAªÿ|Á"iÒ$x€qcD°½ˆ%±”ÝÌæâëÅß{†ƒ¯né”b‘FJ*€n‘d ÿOÄÊÔy"Ë‚9ç*’é9f´3?ì—Œ™ÍS%Æ$Á\%"J9—}.ŠL’ŒRª#¡Sè$È)ŠÒ5úØQš(Q1GB΢DŠ¸#ŧÙ\ñp ÿExu‘TE¢(£¢Ø$E<b±1’ˆcgì³ÜÄëÅVo+°(åχœQŠ 2 Á‰e %Ø.µ"•ËÙ\Æ*üP”3ÎÂöñY 6?/,P©·²Ì¶6÷TC2‰’DkOÕÖ¶&ÖÍ¥Á÷™`¡Ýc憥Ýüe ìiVÙ.»)6EóDï[»ºËÊ¢Þâ«›Š¦ó}µ£Q¶ÙÐ`_U *~q‚ ã jì@OÂâ¾ØØ[§‘JC;“,|\Ù]C嵐2á³8[‘‘ñÐ\BjÈXx+oŠ2ÿ%LÀ?>á“|Ây—Î àœÑc¬[N*ì*˜YèUËÊœµmºUÕœ æ`±Ž5¶xek03†ò±·uÕîWßt¸)¶ESÏ@ Ô‘”›ð[¹F?tòÚ2kìæ ²€…¯`J'à—¢¦Å[›•žks—5ÝÈNxH(Ø,UÞæy;áÜžLpOR횢*‰gU‚
-Î:¡!ë8Óu´ 0K+rÜw §0áÃ-'²J`ÌMürÖÊTt¹]x–$ ÅÍ!Ò°*iö 飈DÄS"@Åpn®Ücz¿Â$ýü ddÌ|··’,7<J”™QX ÆǬ™ë¢Äƒ;!3\bßU[ñ<?›9-(«†f`7U˜ôz¼i`Ò%/,º±ô¾·MV”.m‘ÃÕ:Î6¶²¸-Îîh3Ð¥GtXEce"‘š4Vðì
-ʽ2Ð$çϽíǺÖ\˜(MµqJr: x¤A'(ÜJ8®Û‚O †ŽÈmªûC¿((4±QÁ€Õ‘¼ŽæXžÈÓØÒØXÞ e©!ÈáŠ%îí¾vû_Êv{C‰Æ¨fáÀ>ÍQ;«®ÚrÞ5CªÓ¾é©œs~9rŽŽ´‚T9+²#š9rÖ\¡Æ"ÿKÿÜ´ÅÆ©Ö¯þ”MàîŒTg<ØQ9>ú)‡5›E:ìDs•­îì| âP;. C&°ƒÏª×SMè'Fýê«4j¬à‡*óʳ&£Ñz?ãPª·¤z"Ç)­t¬&U?§@œR•E‰UoU·ÚÇl}ð-·ë¬Ýø<¸/ì¢ó£ðu 4‘ 9Hÿ_€d­¢™?Q ý‚S
-×-á p8Çó[
-&ûO=„<4Zû/%4SK¼5^˜}³¸~K#CœÚý š»ÝT;(7?´\ª%: ·’?Ñ ê…ϽݺÎO\<%b |"¿í&‹’ž=ÖmÓî{&›Õ–°å©†=̨ÊÑÿC»¤= 
-ÚÍ í»jsG5;]¼¿¾üðu¢˜0D±°Q.Ѓp¹+Tmè‰&0v¦–ÉÓÝ–¢5üXßU­ë§NÞø•˜V4r…
-ž«ªlHÀ†ÖPu‚/ˆ€k»‡¶ô“×uØ$hªEÚÁå}™¯&,Ðý >z¢gÕŽ5Â,®›å'Û—„„
+xÚÍZKsã6¾ûWè°©*Bð$£Ç–“ÉÎx¼–&Im&Z¢F¬•HG¤âxývãA‘$y79lù@
+l ’n©‘DQ¦óÍ|…wß]1и‹z7»úöNè!&áÉ`¶ìÌ¥ Õš f‹_†ïdSÐáýõÇÉíøæûÉÍßÿùé~2³”q6¼~x˜Üß¾ÿy4æŠÀ”?^ß¾þàÆF†¯¿›LG¿Î~¸šÌZɺÒ3*P¬ß®~ù•°‰®(F«Á t(aÆðÁæJ*A”"Œ¬¯¦Wÿh'ì¼µŸÆ´!•&ŠËô"‰aFÇuÆHÊ€RaˆÒ,muÆYLg…:W¸ÑoïÙA2F„L%ÌŽe±ÎËl“j„1EtB;Æ„kQéxwMN‰–\ôÅûi”Êá¶hòÑX6üwUÚV»æy׸ÑÆïAvç3 Ñ)¬p¼‡ƒ…eJ4§©¢I(>|¿ŒLÉRb”‘—§„m3,êØ\”H–*G&1„§Ìx@³ÊK·Ù—  Šû¶Cu“•‹l;bz¸p# ¿‘Ù
+–·h'Æ`ÌSv` ìGq»À§hªí«sƒeµõ"u-(IˆÔ4ì 7¿Ï«Í3hžLdœHÎu«ÜC§ò–›EN/˜wuÚ¼[”Uì6bÞ†$Z$^¦Mµ8²lC ׉>/V
+Z–­aW~ .­[Ò¾ŒbL=Y:¹‘ý®Ø0„¼M¨ GW; ¶±gÎEØ£óçÞgÍjWûȺ›Ùëƒ}Ða¾(¯æwM­¤>îÞE(펠 NÄO-!VQÞf("OÍpQå¾UVHã©γ]»±¬|uÜGƒyãÑ»¬Þ· ÿ!ºr.•¶n­yU6GjØ—0Éð}ã—X×UGk€AØþ­|
+•ó{Ôg›<+­±S,ÝÓÉ ö)žÏGìéZ íÌMþGs’A¸°BgÐ.ê4ƒ¶(Ë Óxæ¬çr mF_+€"rõr‹”ÈÔÈås Fˆ*ÅgæÓÇ‘RÃ]§ŸnàXHA y¨Æ&˜ûïo°ª"®½êØóQÝbO“©Ne<ù«¢zB¸òQ=ƒn 󈚭àQj‹ê3&Òå7Æwq)¾+žb™’\°ÎêŒu”µÎ&šø2®‚Åx3þ£ºd–˜óµ¨ˆtýºêx£y_¼›•‹'è‚šx '‚I“÷°àÂbO…2™ÉNj“glå|½[ä®9ÛÇàQ{
+×ngìtd¾ð‰1l@&¬o9Yݧ»íH+»ö“çÅÌ=êbS¬³íÚÎ[ÙdãÇIÛ’ZÃN”å­muQ§m«EYۚŘ(K ~Žù¡
+¾9+W
+¡‹:cíe­ý%fíx x™I÷®EE¤ë3©qeBO¼ù
+ù ’y‚Dñš‚¿…CÁ¥¸äµsZÅV?åÆÇ…HB5({9€/6YÝäÛ.ȵÿöþþæÃçÛ‰ëð°§ÌoUœÕ[³»Ïê:gIŸ
+VIä~‘önk¾ö™2NRFTÆ)œn{uèH‚Á2¦4¨ú÷ç¤q
+£ˆÑ—Êø.ê´q¶(kœ·‡K&ÜňóKPdÉîîRA VNúKÞB¹à”ç‹h…Cö*ujÎʪ´I þä)fë—ìÕ·Á¤€¯çn"¡n!Bñ×_EŠ"Š–ìÂQuPgŽ* ìQýãöÓm4j&D¤0ÅY¹("×á…‹PJök/\°¾{Y嶷›ÿÃsîK
+“úÆàpÇà䛢ĶŸëÅÜ_Cc¹˜J=¼?rCû<
+ÈÖö.±x—ïê'PÁR$÷n.C¼®!긾½#’6$ãëŒ]{Í)]eƒÏ¦öþü`®˜n¬w¾rÕ*N¼þZm‹fµq] {w7®Ã¨üÐØ©ÞàÈÝÆ›Â1þBÁ¨ü?¼¿¼•aÿ„&‚rtÆ—<—Cþ"E!oÑZž]¶¯Û÷M ¼I{ ÏÚ°Rm²@tVwcqx…±gȧ¼½è°Þt&oç)ÔÉ ç•ÖEÖZ‹rÖâõÉ ¿/œ]:€"K÷G¡¤ýµ[ͽI[áî6˜iëÿP»»O÷„éRÿÇÉìóã½ûøÇdJÃëŸ'Óø‡U\¾ý
+N˜öV×9i³Û–Ám½@qà“q “fW÷÷ÈúE_¾u¥ÜÖÃ^ò–œÐ¸òò•
+,` í…Âͱ”sþ”yü±ìÿ‡Z5úendstream
endobj
2672 0 obj <<
/Type /Page
/Contents 2673 0 R
/Resources 2671 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2666 0 R
+/Parent 2643 0 R
>> endobj
2674 0 obj <<
/D [2672 0 R /XYZ 56.6929 794.5015 null]
>> endobj
2675 0 obj <<
-/D [2672 0 R /XYZ 56.6929 404.0791 null]
+/D [2672 0 R /XYZ 56.6929 225.6507 null]
>> endobj
2676 0 obj <<
-/D [2672 0 R /XYZ 56.6929 253.9299 null]
+/D [2672 0 R /XYZ 56.6929 155.4035 null]
>> endobj
2677 0 obj <<
-/D [2672 0 R /XYZ 56.6929 130.862 null]
+/D [2672 0 R /XYZ 56.6929 85.1564 null]
>> endobj
2671 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F60 1366 0 R /F61 1369 0 R /F41 1238 0 R /F21 954 0 R /F63 1385 0 R /F53 1333 0 R /F39 1178 0 R /F48 1258 0 R >>
-/XObject << /Im2 1355 0 R /Im3 1524 0 R >>
+/Font << /F38 1042 0 R /F21 954 0 R /F64 1385 0 R /F22 957 0 R /F42 1238 0 R /F40 1178 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
2680 0 obj <<
-/Length 1417
+/Length 2700
/Filter /FlateDecode
>>
stream
-xÚÅW[oÛ6~÷¯Ð£ T/¢.Nãv Z'‹]`@ÛÆ¢cu2•Ir3ï×ïð&K±Òۀ€EžëÇC`ø‘ å³,
-’,Blö<ÀÚÛ q<¡g
-û\ëÉ/oXd(‹i¬·=Y)ÂiJ‚uþq:¿½],/¯~Ÿ…”ãéš…ãéûùòÃü¥ÝÎ2:¿]¬f!áỈpÍãérþ~q^ß|¸[ÎßÝÞ]-׳ÏëëÉbÝ)×7€`¦5ûsòñ3r°ãz‚ËR<Á#’e4ØO"Îó”r²šüÖ ì­š­cá,E<¥ÉˆG( Açtàž¡˜Qf\²Z,¬åów«mø1ëù!Q”ÑÌ°ß½y žÉðÌc–Ò{„QÅ)lÓܯFjq }qÑÿ+Žÿ€¸b:Ub/óp³“›?6•Ú~§ðGΗÿ®”|¾\«|óœV>Õ3’Ne“
-CþnWÎ
- Ã(‹âF>~ ðÅÕòÒ+s1Ë÷…*š¶mU[ÒÜJ{ºÚHKz/ÔA”#î qŠh §X Ç2Hš°c
-!ÏâˆÅ¶’>¬½¹‘ù,_®T+k%[«ÉêØ´rßØÉëJ5U݇ýéܱ(¦NNÄP’ʼn5ÊB‹¡\m@¾T‡Z‰ò±.T«÷ë ,F§‘Ù°®qõÀµ”a«Þˆ,£Û'J;êuøíÈm°“BÙïî°*´¾¹¸/ó¶ª÷cžÅÞ£ÜâQUMÑ<Ç”€AuG)$oÂÙ0òÆ£ˆ‰怀a_„Á‡ˆŒ fÇõ‚ƒŒ)°ÜË#(•D¾
-½wF³É³²ér±z}wu»¾ºYv»^L©—TÄ9£(ÎHâ42\.íÚ‹ Ta+;rµµ_ñÍX˜ú¸ú¸‹ï‡ßTVz¥B’¢,M­9×^>‹2'¿±a…éI:‡¶Ú‹¶Øˆ²<Úõ;¬•¹%ÜG¼GR¸
-#Ïe><Í ŠÌÝIB¹eíÝB…°&¤»”¼-½[ë‚NÔ¾N§ûi/šÖ¶„aÿúêyú{Éùá[-ŸIÀAã [=÷èçm/ÁJX¹´ü)í.MÂðtûÙÝnì»ÝÞ ø/{\/áYg{é¯k3Y®ì Ï{h‹²h/½rGúi:ÒrâÎ¥ÿù|zïG biJOÛAÿ©÷ ñJiÃIBž«Þ½•Ïuÿ$Ö)Æendstream
+xÚÝZ[oÛÊ~÷¯‡Ê€¹Ù+¹Š‰íøôÄq#§=@’Z¢d©Ë÷×wö*’ZIzúÒ—ËáÌìììÌ7C‘ †?2‘a–òI’r$0“ùæ OVðì—3bi"Gõ©Þߟ½ýÀä$EiLãÉý²ÇK",%™Ü/¾NßÝÝ]ß^Ýü~Q§ïÑy$0ž~|wûåÝofîî<¥Ów¿\Ïà–¥,"Â]Œ§·ï>^_¿ÿõìúÞëÓ×™`¦”ùãìëw<Y€ê¿žaÄR)&?à#’¦t²9ã‚!Ás3ë³ÙÙ?<ÃÞSýjÈ‚I$$MF d
+3ÓDŠ¨L¨¶‚ZÒyD0,½Ì6ùB- øF,†H®inᚆ´gUEZ3,5•y]ݔm^—ykîÕ&+J3VäfÔäõs^[ 1A©ÔIˆ‘h ³—²Ú6E36{¬´
+ïÛ]$v¿D™U»½{³.š6/óúðö Þ\@׸2öï±{ö£úÑÏ€ˆT ˜§ø<›?懎èØò`1ІpÎ]P3aóêzvùùæîþæÓ­kci ±Ÿöcì~(fàù»h2‚ ?ÍÌåÊF]5Ö¡\f/° 3þ†¾ºÁ…˜ ’>½€‰O·8´~T-͵}´ŒÞßÜ^™Qj. ØàºxèÚ¢²R—õ9‘ÓÊJ»™]"3úPÕf°©4EnC„]Í B岪7™aªÒ†»jEÔ
+©LPM¦(Ž™óï ´IGÕ×VYøÅ Š²h‹lm@Öfã-0qÁŒ—Ê1Ôà.¯‹¼AGÑÙ©Oú Íö0™MíÜ
+…V!P*—ŒFÊu}TT;pÅ1‘8OŒâÓll¨0ëèÚ.[û¥ÿœ¯»¦xÎÑ!/`àȘ§'¼ OuØ <ÕNñé½`_dÈ "û^ÿï½€ÿyˆ$ì”ô¨Žx£ÒŠ[¬°>†bˆ0Ôï«Gbˆ§”³ãúyª€‚{Å1ÂJ§†Êi £8‘«‘ßR„l÷AaTX8òýD¤žÚD¤ÇE q^¥E­ÑDÿu›Ô.B¾FbÄEšì'-WYP€ëlTYHhCP
+xDÆ|z¯
+þê<âL@‘ÓtÎÇÔ}û˜µjÄm‚[WÙ¢(Wî¡¥Ú[½št«W/A[”]ÞØ­´Uýd²%TÌ#®ŽéñcÖ˜åº øü1+W
+¤0ˆ¥mÌ@q׺ªÀúz.7¥Nÿš™Ë¶jšâ!ˆ$(Ã(Å8“"‰GìÕÖº‡RÔ^°
+§ö„ržh_»a`I
+l ,t¢˜Èƒ>Ój››øÔê¢5óM·U  FÕÎœj&ÚG
endobj
2679 0 obj <<
/Type /Page
/Contents 2680 0 R
/Resources 2678 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2666 0 R
+/Parent 2643 0 R
>> endobj
2681 0 obj <<
/D [2679 0 R /XYZ 85.0394 794.5015 null]
>> endobj
+902 0 obj <<
+/D [2679 0 R /XYZ 85.0394 769.5949 null]
+>> endobj
2682 0 obj <<
-/D [2679 0 R /XYZ 85.0394 751.9132 null]
+/D [2679 0 R /XYZ 85.0394 747.8192 null]
>> endobj
2683 0 obj <<
-/D [2679 0 R /XYZ 85.0394 674.8216 null]
->> endobj
-906 0 obj <<
-/D [2679 0 R /XYZ 85.0394 634.4081 null]
+/D [2679 0 R /XYZ 85.0394 711.7108 null]
>> endobj
2684 0 obj <<
-/D [2679 0 R /XYZ 85.0394 597.1931 null]
+/D [2679 0 R /XYZ 85.0394 643.9803 null]
>> endobj
2685 0 obj <<
-/D [2679 0 R /XYZ 85.0394 564.5425 null]
+/D [2679 0 R /XYZ 85.0394 558.2262 null]
>> endobj
2686 0 obj <<
-/D [2679 0 R /XYZ 85.0394 496.4842 null]
->> endobj
-2687 0 obj <<
-/D [2679 0 R /XYZ 85.0394 434.3126 null]
+/D [2679 0 R /XYZ 85.0394 450.5864 null]
>> endobj
-2688 0 obj <<
-/D [2679 0 R /XYZ 85.0394 259.4673 null]
+2678 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R /F54 1333 0 R /F64 1385 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
2689 0 obj <<
-/D [2679 0 R /XYZ 85.0394 194.3308 null]
->> endobj
-910 0 obj <<
-/D [2679 0 R /XYZ 85.0394 153.9173 null]
+/Length 2620
+/Filter /FlateDecode
+>>
+stream
+xÚÅYÝoÛ8Ï_a`Nj–Ÿ’x÷”n?Ån6wMqìîƒb3±ZYr-¹iþû›áŠd+ÎÚÃ"@L ‡äp8ó›áPÌ8ü‰™IYj¥eV3Ã…™-7g|v}ïÎDàYD¦ÅëÕõÙË·*ŸYfS™Î®osåŒç¹˜]¯~K^1¡Ù¦àÉåù/o^ÏRY•&çWWo.__ü¾ .`á<ùåüòÃùÏD»š[™œ¿{ó~þÇõOgo®{y†2 ®P˜Ïg¿ýÁg+ý§3ΔÍÍì>8ÖÊÙæLÅŒV*Rª³÷gÿì'ôú¡S:Ð&gFêÔkv“NkJ°L`ÊTƬæ¶×”SšŠ\¨©Å7úòmªœB°Ü̳l›]w¨ +™¶y:®x$WdšKV³Ó™=ëç²í\MgrÛì¨ñyïv¥ké£ ½Q¼—oÍxšIÁåÁ&Ö–ŠYÁu`{P‚'·4sÝtÔh·nYþιt«DéÖŽ+w[ì«ÀW¶‘| ÎøÈÂie´Ú<s¤®G¹ü‘¶‡K¦š¡å§—ŒLK5–Z¦…ã%ÿ=Ït²+» ”Û4»jïÛâ.Û®èàXËePS×ЉèáüB–êxlm·jöS§r¦LÙ¢-¸¯ew¤ð\0c­™¥ º4Jþ×U¹G“|Úu9()cišž€Ça®ÐŒ#ÆS-¢t c¡•§#'G´ÆHÜpž1™år–™s)ÉK.š1©^œÁ&£Iÿ:_¤"¹†ÿ2ys¤™”YÀ³YŠŸç~éÙç™`\[«ˆiÐö{}Ô'¼¼ØÈÙëv4n*L¼Îì7•ÍW€û¥J«Y*5ø!`!Š|½&?Ê’fÛ•t´Yð­4Ùe]=„þÛÐWwnçÚŽ¾À¬üï«‹Ë×4ÆaåæŠ'_æÒ$®j¶n–)ê562<РGÄó\˜0n…:DèÍñ)˓庨ïÜŠ>Êš~ ú¹Ýwû£öÎU®hÎzd­­4·ùlhßfb
+l'µ³¡æÛ`!-kÁYâ’¹= b&…P'ì3 Ösy{ÿl\úaS|]´ÍòÓÞ è€î0\øH¼žkB¾")Å”†à2𼪚ûà~ÃÝ€f2Ô ÉX2™CøRLç:î„,±2 å~;FÈQd3š)e̤ÁZ2™¦‘¹\×> ¢³\}€
+E8ôçÍ·òDªÜ2ÎÍsi„a<ëCÓD„™Ì‚ZÎ=8þËÿ¿ôpyÑ·eòî)ÐÔA7€&
+(êØrÔ©B‚*¢€Ñ9¢D硨;Š™bBeùqHá’ÒídcŽð…|· r4› Q4!lMˆ\o!yÆr áel>Þ¾|6ÕÃfZ]S®Î‘½M!iÿ\šbJþâÔ_žg©"Êõé<«çòyV7‘gY& ó G¹*wnÙá}î0Ë–¥"L8™eE® éFVW
+hÂ|å‰'‡\A´“j‘jyÇ»zb+
+6’fy¬²E
+endobj
+2688 0 obj <<
+/Type /Page
+/Contents 2689 0 R
+/Resources 2687 0 R
+/MediaBox [0 0 595.2756 841.8898]
+/Parent 2691 0 R
>> endobj
2690 0 obj <<
-/D [2679 0 R /XYZ 85.0394 116.8171 null]
->> endobj
-2691 0 obj <<
-/D [2679 0 R /XYZ 85.0394 84.0518 null]
+/D [2688 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-2678 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F39 1178 0 R /F22 977 0 R /F41 1238 0 R /F53 1333 0 R >>
+2687 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F64 1385 0 R /F22 957 0 R /F54 1333 0 R /F42 1238 0 R /F61 1366 0 R /F62 1369 0 R >>
+/XObject << /Im2 1355 0 R /Im3 1530 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
2694 0 obj <<
-/Length 3962
+/Length 2383
/Filter /FlateDecode
>>
stream
-xÚ¥]sÛ6òÝ¿Âo¥§C|$úæÆi›k“æbwzwi(‘¶8‘HU¤ìª½þ÷ÛÅ.øeÊñÌgL`,‹ý†Äyâ<6¡±Òž'V‡q$âóÕö,:¿ƒ±ïÏÏYøI‹á¬ooÎ^~§’sZ#ÍùÍí
-kåùöLÇ*ŒµR²9»>ûg‡p0ê–βBD¡TFÎðBŠs!BÇrČ؆FIå˜q}¬ê]S6Ó£(&©Qç‰Ò¡FÏm-€Ñ2âNÐ&B k€Â‘¥ÅÜùYHUÕvyÖ ¼ÿ¸È?ùÖU׺£Æ鳨ÇÝ͸{Äó½üˆíw–2 …N%‹{~\o³Õ7Ÿ>Ç*Ûß4Åj_´´lD°
-å·\ÑÀÕ»k‚þÂú„Àý…Hƒâ÷CÑ´ fŒ9/~‹"Yú$(+þðÝ+H¡Ìx猺È&¥Øß{4©! 2Ÿa$Ç7kwa‚l³©¸M„5õÁ5VźªÝ7ç©nø.ݤ8ÈòÜQ ˜8X·­ïýÀ­ƒÔ[Þ˜>ÖïóP¶k”p×ÙfÕH;R¯È˶¬îxëu1XŠgŒÆƒ<Ü!NŠ‚Kò ,åwmoÛ°=¸ ¬²ŠuÕfeõhZCd
-z²z8D_”9 -Ñ` Ÿp¥ G» Þ¾»|ûššnž“%˜PߎȞŒ‘A"k{ýóå3”:éäd&èÁ¦òŠ¸ÈgîG 
-
-ï…kj¼ (ûì]üèî‚Ð/IŸuõJ¥=êbO¾ p—¼G^,w¼]ã}ÆÚz7À™›{`8CÚ}¶"›îÐÜÖûmÆ4Kø%¹œ¸fñZãõ˜¹'¬yÓÙ[Öõlh†·Y^LÔ›î±C²Û”Þð­¥S&„ôžl´’¼°s7/üÜK&ñ¶¸š»djÝÅzþ’éD'.YB*ô,ýC ¥GÍL¨÷mçæJÜÌÛWwßwîþ°;º?¶‹sT
-Óllx£O[(D «-n­¼VÞü>öüiðê°'â«èB¨GZ÷‹‰p·ø°C»W0ú¢ZíÞD@?ÛÜÕ{0[êÞÖmcDÁ…
-~x{ùjÁI“>:êÛ«ØQ‘ër…v\&-N‡© v]"¢YP°!Dnx8ü\¹¤€uKæš™ŒoL=BÎgHÝ^Ù<àêÔÞð¡ÜlhfUùœœºà,µÀµæÐí˜::ÒHSl
-§#b#ÛÁN#ìö%9t„˜Ý†¾…£#M;H‡é3íƒ<-*^Õ&²¶H_æžzž‘¨hH ¿«÷s–¦¬š6F¿À´2!)[4«xš6Å+tÜg:
- ÖŽ
- ."SÝf‡MKã”m`Ëéat§>ËÁâVC><ƒÎöÐRñ{Æi¬6àœî‹Ù|îW
-z¸,5#ÄšV<):T¦KÀ»ä¸+šI§}/F_Ž3Æñdc\^TN ÷qî1 †é’s÷(8CåèiïÓÜ£T¨D÷oƒGE®2pŽÊ„6IõàÝgÀRÐ^…¯Å°dœ¹KK­Ä—¡1pÖ2±.ðyL1¸ {U>ŽhSi§Ñˆ4ر…ðyÍ»/³¦0š6†ä¥vJ„C…ÃÁ^á#IüÒ0½t
-ý†/MþqŠŸ"€ãØÒ˜/ –î)kê3»½Á€"°¯Øy6kH°æ Œó³ÎSJuÚû?é6 ÚJÒqóÅ\ô§Â8±òYÁŸìßÀ}¤×ôTºÆHlä83Áñ߇˘—5VÄ&Lµ–s¿0“7zøwöG@äw$ÌL&‰4œø
-³ÍÚæŒÅ¤“ #ú§Ohwba„àä$ªÅÜ- ï4¦ ¿ŸŠ…Ç¿CXPAxîRãÐ(#z¦Í ˆ eԕ»úWi¹\b¼ÎªKâwèoŒ+JÖX—fžÉX„25“€ŸÒ°®º<ÎQœ„Bybò¼Âµº…f(74)ϯìö„Ü]ˆ vYÉ
-_®± ~d…o³+Våí±^Ø´6`}©aÁ¤H/Á®ë¸Ú¼èƒ]lƒ]¬U@ïMÅh×åì‹ç
-b/Cõô.xˆîÍ5Žº§
-JÕÝ£}}ðÜ# zÉ|ù™™úí“W’!ÁFW`•  +ù›ÑgSƒ¡X€v¶Ôç’1´8ù†×°y*x`&¥÷‹Í¼{Œ’äQ~-mê£ ¡ü{’ðŽJt¥¢yX)s³êÁ)Ü!È"š(Œ¤JÇ÷‡EGœ Ž3}CNA¡»¨Õ0µFaÜ?5£œJ÷8ëËwêŽ`§G
+xÚµYÝsÛ¸÷_Á·R3ƒ/‚ÄÜ“Ó8©n'M”kgîî!›DêDÒÿ}w± MJ”ÜkÚñŒ ‚‹ýÆîüñ #&
+£¢˜ñ8Xm/Xp ßÞ_pO3ïˆæCª7Ë‹×ïd˜Èh¡ƒåzÀ+Xšò`™ÿ^~þ|uývñÏÙ\Ä,|Íæ1cáÇËëo—hîó̈ðòýÕWx•Fj â
+é4 ¯/?^½ý¾üùâjÙë3Ô™3‰Êüqñëï,ÈAõŸ/X$MðÂ"nŒ¶*–Q¬¤ìf6_/þÞ3|uK§| Di©“
+ì‘âÓl®y¸„ÿ"¼: 2•"Nmt¤Lœ ðà€GL#‰j0væ>ûÁM¼^lE𶛂¡Yçùµ³ TN>ƒ‰)KƒD‚ù2Ѥt9›K¥ÃE9ã,l_‘Z –* têí,³­Í=ÕP€Œ£8NOÕÖ¶&ÖÍ¥Á÷™`¡ÝcR‡¥Ýüe¹íiVÙ.»)6EóDï[»ºËÊ¢Þâk6MçûjG£l³¡Á¾ªT6¡€œP1zÄÇÔØ8‡Å}±±·N#†v&Yø¸²»†ÞICmÂgp¶"#ÕÐ\&‘Jx+oŠ2ÿÅLÀ?>á>á¼ËgpÎè1Ö-'vÌ*zÕ²2§Am›nU5'ƒ9Xœ¨X-^ÙÌTP&ö¶®ÚýÊâ[nŠmÑÔ3¥#å&üV®Ñ¼¶Ì»y‚,`á+˜JbðKQÓâ­ÍJϵ¹Ëšnd'<$4ì
+–joó¼p îP&¸'©vMQ•Ä³*AgH ë8K:ëh>`–Vä¸ïNa‡;[Ndm »õrÖÊTt¹]x–$ ÅÍ!Ò°*iö 飈DÄS"@Åpn®Ücz¿Â$ýü ddÌ|··’,7<JšQX ÆǬYÖE‰wBf¸Ä¾/ª¶&ây~6/rZPV ÍÀnª03èõxÓÀ¤K^Xtcé}o›¬(]Ú"‡5ªuœ lldq[œÝ1Ði =Jè°Ž*“`—‘Á°ˆÿ`c)ð4Ð'çÏííÇ×\˜?b+„ŠœNƒ1W¶…Ž ®Ú‚O@†ŽÈm©ûC¯¥Ü8`u$®£9–7Œ “4IÆò¾X(J aW*qpo÷µÛµøR¶ÛJ3F ö±hŽâGFó 6à¨,g<ƒ!ÕißôTÎ9¿9G‚¾tVdG4!rTþ4éÔŒEþ—þ¹i‹R¬_ý)j( ¡»3Pñ`Gå<øè·¥%©‰ý¶\e«;;_Cy8Â9€™4ðtV½žjB¿‘»±—@+é÷¡Ê¼ò¬Éh´ÞÏ8Ôé-i5OX¤•Lj~ NC-׺3²(±ä‚êVû­¾åvµŸ÷…}@Ô~½„Æ’CÂôÿHNÀgæOTB¿à@F¸/´/ä˜cáè®Ldʼnè À¥ƒÆ_Üÿk–ýX„ïOBf•Àé꽇Ì
+ì=G5Ÿ€Ìòd²>™Uª! Aæ¥CE2Nzà‚ã­ƒÏuCoÔYaàº%<çxdKÁhÿ©ç‚‡Fkÿ¥„fj‰—¦Æ ³o×oidè‘S»ŸAs·›jÇᇃ–KÕ$IÃm†äOô‚záso·®óO‰XŸˆÁo»É¢¤gFuÛ´ûžÉÆfµ%lyªa“ê‡ÒôÿЮ™¨B«QÃd~W/pVƒ‰þºx}ùáëD=aˆb#‘0"\ àrW«ÚÐM`ì2L%l
+¶q ξ8Û¡Óë¾#wN¯m™åm‡´žüWãñÙóæCéÕ´n\x¢¶ÌíoŒ‰ÒR²V (
+³Ü‚*þõÓõ»Åûo_.ÑéËŧë—+Dz;iâ vkc&®eF¬¤Š×Ý…”Tõ¶¥‚ƒ‡7âÌÆëu%˜kªŠ«j»ÛØGúÚøÉÜÖ«}qÓ­)»Y8nhŒþÄDx•À°÷#%1kìËîY®ð
+~ÄkPCœ¸p–¥¸êTh·Yý}Š/ÞŽõ
endobj
2693 0 obj <<
/Type /Page
/Contents 2694 0 R
/Resources 2692 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2666 0 R
+/Parent 2691 0 R
>> endobj
2695 0 obj <<
-/D [2693 0 R /XYZ 56.6929 794.5015 null]
+/D [2693 0 R /XYZ 85.0394 794.5015 null]
>> endobj
2696 0 obj <<
-/D [2693 0 R /XYZ 56.6929 749.2922 null]
+/D [2693 0 R /XYZ 85.0394 404.0791 null]
>> endobj
2697 0 obj <<
-/D [2693 0 R /XYZ 56.6929 666.7399 null]
+/D [2693 0 R /XYZ 85.0394 253.9299 null]
+>> endobj
+2698 0 obj <<
+/D [2693 0 R /XYZ 85.0394 130.862 null]
>> endobj
2692 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F41 1238 0 R /F53 1333 0 R /F22 977 0 R >>
+/Font << /F38 1042 0 R /F22 957 0 R /F61 1366 0 R /F62 1369 0 R /F42 1238 0 R /F21 954 0 R /F64 1385 0 R /F54 1333 0 R /F40 1178 0 R /F49 1258 0 R >>
+/XObject << /Im2 1355 0 R /Im3 1530 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2700 0 obj <<
-/Length 3285
+2701 0 obj <<
+/Length 1412
/Filter /FlateDecode
>>
stream
-xÚ¥ZÝsÛ6÷_á·“gj–ø$qoîÅí¤sqs±3½¹¶”HE¼ˆ¤*RIœ¿þØJ”âÎ.–Àb?~»X™]§ðÇ®s•¤ÂÈëÌÈD¥L]¯š«ôúÌýtňçÖ3ÝÆ\?<]}ÿ£È®Mb4××Oëh­<Ióœ]?•¿-îÞ¾½xõúß7·\¥‹’›[•¦‹7wïïþ‰´·7†/î~º„W.…&¦-ŸNïß¾º»Éäâéþ槟¯îŸ‚X±è,V¦?¯~û#½.á?_¥‰0¹ºþ /iÂŒá×Í•T"QROÙ^=^ý+,ͺOçT¡Dž¨œg3ºà|NÊ$ZpátñÃ31Õ‹²Z‡íð=|Ç¢ï¤eOívöƒ¶?ìÊb¨ˆ1Þ@ÚCAŒ‡¾êqí÷¯ÞÚA¶:$ôU["…ÖrÔý ËÕŸ‡ªú)ÿ°©ÐMå—تö´H»­ú>°>#µÀõˆÜuHÝ"ùC ãó÷4åƒ=Òõ­Iæ<‹±Ä(ÅÝaêÖz‚Yð)Þ#™‘à?oêÕ™WE_!ñéôÙçz»ÅѲB&ÐV &R±xÚrel.t’1““vo?̀Ʉ‹`€n7Ô‰ÓÁ§¶Õ,ÑFˆÙVÙv¢p°U׶ÕÊî› 6…Ò‰ÉólªÎ§MÝc¤5Å3œ"à¹C•®«}±Üíó¦jqTs18í°[ã3xŒ< (ãve…’¥ ‘ ²ÇsÍ)8˜ÎŒ×ùn^çR*o–¾ò;¢Ï€"‹N×íiÔš¥s`ËÛÑzúfÝÑ̨Ï~ÊJŠ €€À’u#–º
-à¸B‰f"{¡6Ržs¯a^"ÕìØ…öš>šaÐ_êæеnˆ\ÐÁ¢BÅVžk
-Uë
-—<åS½ª¬ ïwŽêý>™(ÞR€iT
-Òkz~¬ž—Ö[%rBuÄ;¹£ ™4ˆyÉœ·Â˜$“
-Š„SHëq›ª¯p:^Ò}X©¬©ÖÇ5ŠXP¡Ìün§ýøù b`• È5'Э%QWX/;·ÖßS•¾{ëÁ€!É«Õ¿ÔxŸ‚ï;¢Õôi±ì1“À\T‰Á •0Â+B¨Ô+ÂRã3Û÷æÐÓ2KâhªöZãÄ€õ±aÿ:”ÿFŒ5‹G5‹!¹áé°žýaµªfIaïݧÄBå Œ–“Õþ ÷2A†D3þ°v@WOâ].žœw4;icæ„ë¢ÞÎÖ ÷póƒ°ÙxiY6=µ„å{´¡v®
-Ï¯Õ UuMìñÙ„ë”ýxNjZÉá‹åùZ®£'ëø–lJn‘í¶ûÜϹra ”:ÔÜ›ÜAÁã O0¹MX%2ŒgçÇgGKÛ ª¸¬µ‘P¯‘b,ã“\-Çýà$†,ëJa¯
-CÃ~ÒíçìÚÔ}5EžÇÑoè30ð0`x‡”å¶h?âÐ盜ÐÚl4;×£eN³ç<Rëлhçj[–ÉÐT"@'„€¥W5úbi‹Õê
-–smx&óDÚæþ·{µ*<õ’bþB!NÃèàœ}HFT š¢‚°‘àXꙑ°@zçÌ6Ï9ÓÀöØ%}×ÍèÅ›‡»7÷xCpHën@we‹Qþòûõßz¤>þr‡Ä)öâ¤OÔz*„Ì°~öKÑžþ\–B
-û8’ÃÊ[ßUWÇ¿Ì2‰@ÊÄ74ç‰dæE0ʲlŠ¢° ¡(Š2éf‡E‹óVX
-ŸØ¯²#L©Âýzˆ£Ó´»Â²æÆÊÕ­í+|·"Ú\ Kj»qŠ(çv\ûšÑâLÃïIƶkèO»Â«¯?´¡–< ,SI¾y&b®ó0¸|&ÄííÈ#ù”J4“ò² kFˆ 4輊–‰“F©yîÖZ¾m_ÆêÕ2wñý\¹¾~<ã³ °¸ãÎà…`P „_GbU‡`–ä<Í"ÀP”„´KB3k›>0ÑÒó¡d`ë1„°œ’¹™†–K/p_ý¸(0®³ý nD¨<ÉGaƒb
-u9@7¡’9ƒu
-¬ÇÙgìOê۪؟9•[&QEϽ=’sÿõ&TbÿUmÆip¢ÿû?âÆÿüƒä òœÏÛJ“NÀ¼PVv–‰cÑÃÿÎÊþ?Qje¤endstream
+xÚÅWYoÛ8~÷¯Ð£ T,nâv´N6vš>0m«+SYInêýõ;¼d)VÚbw€E‡Ã9?‰‡áG¼0BQJS/NbzÙ~‚½-¬½›Ëã;&¿Ïõf=yý–%^ŠÒˆFÞzÓ“• œ$Ä[矦o Ñ Dàérþaqé_ß|¼[ÎßßÞ]-×3Ÿ„qNç··‹ååÕ3Ÿ†¶
+Iá¦ÒhºÞ å جÕÍ*ýÍ MðlgF<Ï‹¶¨¤™)üTß\”¢GÝXÞ¾À"¦
+_ÏQVÒXg‡Z|($¯­>*x«  eY=rk–TVêqf ÜÐEBç¢ÜMCˆ¶0ss¼ÏËBeBÇuÉžº|’‰íi¨¿ŠÚ0M_jÓòºuBù¦u\ÜnÜÚ¼z²òô߬æÍ‚ÁX:}s4´\lø¡l_9¨6Ö™®Ìè‰NN5²Õ”néT…0éª8µ¾@S¾ÕŠÂøáhÖÀ%BæÚÇaâ~£‚l®Þ~ZÑDµn1swâ9vsÒu%¥}};3ȹ$Ö±h6›·&î º8LàÜAàO0dlFãðØÇ“ŸƒG†Rœ¸‹â¯Å&õàj¦K!6¥
+J¦ðFÏ TÀv“-¥ä U4'olaä¹È‡§iD¹=‰K»¬¼[HXÆă°—’³¥wkCЉÚ×ét?íyÓš–Ðï__=Oÿ¨39"|¯åÓ 8h|a«òý¼í%8@1‹›–¿¤Ý¥1Cžn¿ºÛ\·Û»ÿeë$<ël/Ýu­'Ë•ôymQíñ¥W. ‘zšŽ´œ¸sé~ŸÞûAŒX’ÐÓãv
+c«”2œÄÑ™êî­|®û?žV)Ùendstream
endobj
+2700 0 obj <<
+/Type /Page
+/Contents 2701 0 R
+/Resources 2699 0 R
+/MediaBox [0 0 595.2756 841.8898]
+/Parent 2691 0 R
+>> endobj
+2702 0 obj <<
+/D [2700 0 R /XYZ 56.6929 794.5015 null]
+>> endobj
+2703 0 obj <<
+/D [2700 0 R /XYZ 56.6929 751.9132 null]
+>> endobj
+2704 0 obj <<
+/D [2700 0 R /XYZ 56.6929 674.8216 null]
+>> endobj
+906 0 obj <<
+/D [2700 0 R /XYZ 56.6929 634.4081 null]
+>> endobj
+2705 0 obj <<
+/D [2700 0 R /XYZ 56.6929 597.1931 null]
+>> endobj
+2706 0 obj <<
+/D [2700 0 R /XYZ 56.6929 564.5425 null]
+>> endobj
+2707 0 obj <<
+/D [2700 0 R /XYZ 56.6929 496.4842 null]
+>> endobj
+2708 0 obj <<
+/D [2700 0 R /XYZ 56.6929 434.3126 null]
+>> endobj
+2709 0 obj <<
+/D [2700 0 R /XYZ 56.6929 259.4673 null]
+>> endobj
+2710 0 obj <<
+/D [2700 0 R /XYZ 56.6929 194.3308 null]
+>> endobj
+910 0 obj <<
+/D [2700 0 R /XYZ 56.6929 153.9173 null]
+>> endobj
+2711 0 obj <<
+/D [2700 0 R /XYZ 56.6929 116.8171 null]
+>> endobj
+2712 0 obj <<
+/D [2700 0 R /XYZ 56.6929 84.0518 null]
+>> endobj
2699 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F40 1178 0 R /F22 957 0 R /F42 1238 0 R /F54 1333 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+2715 0 obj <<
+/Length 4017
+/Filter /FlateDecode
+>>
+stream
+xÚ­ÙrÛÈñ]_¡·PÆœ
+Ò”€HÍ¡^(|¨Êö$ÔtõǯB=äuÑìŠò>TG66rô¾oý‰©¯tB<fê“âø„üCáøL°§Ïk)u”ÅÖÂn o™¶\½½~óã»7ï~øÐïð‰a°YÀ='RO+'¬3‘Ú2æð\—ð8Ƕ,°•.º†FÚãjWu4v…‚\­iâêÃ5þÄ "]”ÿ8–m×Òl΋òïq,kŸ,ªš¦üö H¡ìô䜺HF¥<Ü—T”‹4ßa"Ñ7waùvÛ<p›k›£k¬Ëñèºq¿/uçÃïÊ-2‹¼(Ö0 GûvͽŸ¸u#ÍŽ¦ŸŸ›šÏy¨º ʺëìòú¨=R¯,ª®ªïøèM9ÚŠwŒ§ƒ4Ü–.Š—d[ZØZÀµ½’Ãöˆ4°Îkn4u—Wõ“e- ð.N ¼ö°¯MýŽ{ÝÆÃw÷6Œ©>ŒzªGý=ÓHÜ¿'8lG­ÜŸ†c]”jƒXÒ݈[¸¯òÀC)˜,a½ü?ÿP¤Ž½ŽkøÌœ~®~÷æ#µX8© ÌÞÔ®Æ~ň#ÃKž\=Ò/PŽé°”`µRc“)ßß;™!ò!€Ö3ÒÃ<áPÕš™"G­ž<ƒ€ðv8ÕK<|^wùT V<³mÚ.Ȭ'µ& =²~tüÈ`¹
+­«Ða\ùyظ|0çHßÃóÜUŸ²XÅ༤V¿ˆÅVfÞàlò{ÆÆiø]qß)-‡<´¨›H¿› 5e>c|¬q²øqxbZ—–Z€èÔ ;’ãÀ¯xÏ.o;”0lU¡OZ§èW,ªÀV¨0N8ƒÒ†3 ].Þ¸|ÿ–šn“%XÐÜNЉB"m{ýÃå uÒËIÀûÁ¦òqYø#ð
+opä„ ”ñÆ~Â{«"›%é‹X¯T:€.dË
+:²Üw¤Œ`Äiøý¹$‘àÑmÞTw¿·-LB‹äÛÆ“:ü‚pÛ¶¼/·¨³Œ\¼›ð
+»i¿•ÈdÍl6}KoQµùj[žÐ6YŒ¾{›¯ùíe j«»:ïŽl¨h̹EØpj~Ù †–3
+Xü=6q ÿÄ飞? ]H£ø
+Ë5.c—Œð𻼲(Xå·4€öw´p…VóI$Ãä•„d•¨áR(OC> êó ¬11e1¤¦vì'6Áí-9K²?®¶ÎìA›dN4w‡|¿!UÄ€n0ýÝô &Y’§‡ 8ÖcJ©ÞIžI­G
+Z9ªÀä§PY-Î"`ŽGÀ•hº"_’ËwóU¤Db†2ਾÌ°À2 >dÅi_^£B-ºñ6Ò2–SâL§ñUh¡ÚÂß~jl®Sá\Ÿ§ a#Yê¸*çÏ;“²Ôø¬UÞ–VS¢—†“óûý‹‹BØØ4Ê’LâCâÒç—žàò’pZXRExú0½Sø"Ù}¾­oqþ¢…¦ZS*qˆmB*,‰ÒLÉÑ–»Â„,,”½v€e£8éKÐS@%Y_à~1()u
+¥ bÙ—k.
+à{5¾æ¨Ì å±SµÁ
+>]ÇÕÊÄ|b{|¢×
+ÌÚ¥‹#Uü›Ó϶E±„×ÙQŸK8Ðâd´8‹Í°u”±
+endobj
+2714 0 obj <<
/Type /Page
-/Contents 2700 0 R
-/Resources 2698 0 R
+/Contents 2715 0 R
+/Resources 2713 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2666 0 R
+/Parent 2691 0 R
>> endobj
-2701 0 obj <<
-/D [2699 0 R /XYZ 85.0394 794.5015 null]
+2716 0 obj <<
+/D [2714 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-2702 0 obj <<
-/D [2699 0 R /XYZ 85.0394 507.1706 null]
+2717 0 obj <<
+/D [2714 0 R /XYZ 85.0394 749.2922 null]
>> endobj
-2698 0 obj <<
-/Font << /F37 1042 0 R /F22 977 0 R /F21 954 0 R /F41 1238 0 R /F53 1333 0 R >>
+2718 0 obj <<
+/D [2714 0 R /XYZ 85.0394 666.7399 null]
+>> endobj
+2713 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F42 1238 0 R /F54 1333 0 R /F22 957 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2705 0 obj <<
-/Length 2952
+2721 0 obj <<
+/Length 3377
/Filter /FlateDecode
>>
stream
-xÚÍZ[oÛ¸~ϯðÛq€šË;¥Ç,Ú-ºèÝ&Å.̓b+‰P[r%9iί?ÛLI”œm÷àˆ(jLçòÍ I²ÀðGB"™Òt¡RŽ&b±ÞáÅ=|{{FÍÊ­BªŸ¯Î~ú…©EŠRIåâê.+A8IÈâjs½ü‰Îa¼üpùùãë‹sÅ—WoÎW”r&—?¾ùðúÝŸð.0%ÆËß.>|¾xoû>ž§tyñöÍåùÍÕ¯go®:¶BÖ fš§¯g×7x±üz†K±x‚ŒHšÒÅîŒ †gÌ÷lÏ.Ï~ï ¾šŸÆDÁE‚år±b%0\`)B€H‰IFY'0JbóTZ`_òg»ð2Ûå¶Õäë:o‡ë'4…U`¹'±ÒQEx¡/ÖC0s¹Ï×Å_Ó¼V¼l²Ö¶²íÖ6ûMÖúïY}N’eîˆ+û¼uïW—ïÞ®šâ¾Ì7î§MQÞûs½ÀŸ~,àŠ
-h¢RX‹““
-ü^Ž‚®D)&îwû¬¨µÝ!M
-JÄ)(˜ÌŠ”
-A Ñ•ç §#â“*92› †KæhÖÕn—•«ºê1¯ëbcįYé”Ûi¹é$ìQÚ§ˆiôÆÛ¥ë~,2Ë
-Ù¥ &ž—U”]Ž8ر#©êÈ0 —D
-îGùʼnΒ ‘w:PD!.`¨y? ¨füÄSé[Λ($•dóóz¢È¼áSŠ¤Pª?ïçÆ)àíååJ[´SWåô æ=P u `#à…3ÿÌ¿ŠÇl›—í`(mwÏÚE"ŠN¨HJ¯¢ûÓŠž0,mR“ê“ *ÊX2¯¾jZ}•áf»™Ð Á vŠéüÜUdò>€®uÈêÍn•È¹Ë?Î…Xå¦zjìŠ1¶ŸÀ…›ÂHº«;Ûh_SÙ^§ýpà@û8ñÚû}í‡Cií¯,`Q‰0lîáÕ¤e$ÌÎ0ªÿ’ap°é èf ÃSinê<Ûî,׶=´"¡ŒöX8ù)J“$‰ÇýU7â ~ I!´Ï¯H7#¹DŒ’'ŠÌÚSH“ÅûÓþñƒÚã>ˆ2¥ý ©„R”`â±=*b†98 ÿœˆ»Ç‹íqÇÀ]E
-9ØHÆ3¦àÑü¸’ ¸¶K‡4¥´"1F­»6ù]vضöÅf)ÆÐ4QQÆb p óû¥¾.€µ#ÅÕ÷ÇuUÞŘd(Õé©“&¼»s9žƒú€Ÿ02Œ’ƒÎE›ìÑ÷Müv½Í]2¶™vb
-ˆo¶ýT´nŠÎ”û‰®T
-l(_o³¦¹9²<2@Û”5ÏnGá·g£”2ÒgøŸuýÐ< |Ö¹#ÞÎ yWÔ'`^ÑÈáÍîUdœ×Õ=–ÃH¤eQÄ„m; ®)#éAŠ˜Pü»pȇ¶È¨&÷è6ÏŸ§ò¬Ú-$ЯìÛ»ö©=¯(Û¼.óV›?øÁø‡ÝLàãI‚ %Qó>RMûDGƒÆö –B*?ËnGáwèL ÒgØ$ŒJg㡇0ªœ‡èïYH:ȱ÷è ú§Ú)ô7›‚Aã”S0Ä!T¿Ä)ؼSHDôÝÿÄ'ÈI¹ßxÚ§}ƒs.¢R*þ<ŠBÕ‰ú.¤šñOõãbé²6ChÄ:¤„Óµ»ÌñÞQE˜ï ,úÌ_Ew)µ}$´³à.f¸ "¼‚T:gW²÷õƒn‘¥•t™8{ëYs6…Ýk HZ»§
-ãÏ’›b¿*#«J”.r亣D'§ÂXrÜæC@›pFcŠ•z™3jÅ?l·7­W˾-ÌF´‚ÞtѽF€¦'³FºaÀ ú?}jÀ‹¥à9;aS>HÔ¬&ÓÔª žðKÛp 
-º€'[á„L(|Å¡" ªËqÈ÷d&³ ç¥Qª”œt^…GvD²|ª5ö–ö¥pO+kh4-¬)óAÑ|Ê¿¹;Šóï&/Û¬µ»Œ@eÔ4ŽºÇ^uÿåÌQoSA}{üäŽÞô¿‹IØgRŸÝ 1û!Õ4ìwTöí>¨ÃòM¾½Îo#ÜoÛíM$\cÀµ 7£½7e?f
-›~¢èÔ!̉oõä— ‘²;,ØrÝÛ¢}>'
-\ªpñTcpÉ6› \Ñ¢ùÎÄ2M™_@GYÁ0±L%ØUo c¼)Ñ™‡~”ù“mDì>%£‚K÷Ù]FÝrÁžœ*¹0„ažðYË
-êA:¨8ÐÚnB ³e '‘ËU[XþÆŸ>DèãòýÁESñB—ßÁ~\ûâÂNcß27NA²è#‘‡'øà.·A«©†“g–úÞ.ñ°7KÃý„ß¹û+MÄÊš3³.¿õÉŸ¾[X¬Ã;[áû×CÞ à¶Ã”D²¼_Û¬}o—.bGS7Z™6ßèuNÜyÄßv=Þêå
-±d
-ZAö~,=SZÎDñ1tB Â
+xÚ¥Z_sÛ6÷§ÐÛÉ3K
+eúýêÓoñ¬€ütGÊfzöq$¬•³ÝU¢U¤¥<e{uwõ°à`Ö½:©
+GR9¡ )¦t¡md”TNu¾+ <0˳J¢ÌÂJ±ãªÖ× eÅ<¯Ÿh°mVù‡r¾ËÛ®<ù[S—4Úä- Ú²ã凲ˆ$‹ŒÎxùã¾È»r±o¶ÕêiBc"›Å–¹»fjAéÌ‹KÒ¯#E¤Ó̯†M~Sögꪦ¦§†Ümª–ú¥äÃÿÇrË/­ræ_–¸ál!³Ôœ¨ÙBˆÈj-Ý^ÍCy8TEQÖäAU·¡Q·)IÒd(©Aý©—tñeâ0"‰’D{–f¢G$ƒˆu¤„…
+0K³¿D’'¼½}ÿñžÞüáçïnðÖá~â, Ð T¦É #¥8êà=/Ðh" ††aÈ°çPœjPœÝu¨‚7éoÛàÁ’mÊèÝËïê
+µxþ&w¥>âN³Û‘Ú…„sí·UÉT§i<ÀWk—Æ„å4ÔmU3ÌB6ˆ2q ®»—2쮥žß5HåÝ[z
+Ý¥’‚ÊuG-v
+¿ßÊkW ¦Ø!›ó,˜Ø…ΩSRóJ_ç[èêÜ¢×ñ·WÙ&³œéÜ"ÛmóØNY6G¨
+U- ;(xÜô &ÇÜ[Cvyzv²4NpñˆÖ&‚»‘Ž±TŽÒê`±a á g1„¬=(…½J
+ |¥9LoWµ-•GY6Œx"Ÿ‡
+3±¾Üa@g„€¥¹.K›¯VG¨:È4ŽËçºÙML”Z3ön_,ÃÝŒ¯ r¾~¡”ƒ×O
+Æ]£PÐÁy…»q§Ø"HªÈðwÐÓ¯žùÌ“Äá3Ò¥ÊTGJÆ^RÊ^$„Ci}zÇŽe$ÅÁ |…:œ
+=Û3ò1òG
+Ç9Ž+_1ºC<ssy†$ýýq¸hwuW[}®C)ù<LÈ8ÊðŽü2L ¸.À„çò™¶Ç‘Gò4H¼„Ì.‹à™&DŒL@k#îF÷½&d=è« (Œî=úÒ™›ao®Ýç‰áŒÏ5Àâ;J@y>ò q€i”É8À…æd\
+šXÛFð‚,=: _žC1F“iœ´'ÿÆàºû‡È62tS—ï­
+e';(lw ̾£‡¢„jeÇÝœõ­•U]ŽÀ^…< ýl‡ñ2§‹ôÌÒ5ßp)†'^Ç¥Tžæÿ}Q¬³Óÿéð_"¦BÇ`í).NÏó|Ø0ƒ¬mîÓ©>62µ—ö<gœMlåP2ë§KÕŠ“Œ¿l¿åÒdÒE…Rähï£t¸‰ÿƒ\—ffTC¾¼v¨¬j'…€ö[kï€oo§>´²Í}ô=óïyJGø?u
+Ãÿ÷¿îõÿ¢˜`ƒ™ÉiÛÉTƒnaÌB¡à"ÍÎ}•ÿÉï\öÿïßœ®endstream
endobj
-2704 0 obj <<
+2720 0 obj <<
/Type /Page
-/Contents 2705 0 R
-/Resources 2703 0 R
+/Contents 2721 0 R
+/Resources 2719 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2708 0 R
+/Parent 2691 0 R
>> endobj
-2706 0 obj <<
-/D [2704 0 R /XYZ 56.6929 794.5015 null]
+2722 0 obj <<
+/D [2720 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-2707 0 obj <<
-/D [2704 0 R /XYZ 56.6929 107.2827 null]
+2723 0 obj <<
+/D [2720 0 R /XYZ 56.6929 453.6878 null]
>> endobj
-2703 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F53 1333 0 R /F41 1238 0 R >>
+2719 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R /F54 1333 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2711 0 obj <<
-/Length 1792
+2726 0 obj <<
+/Length 2947
/Filter /FlateDecode
>>
stream
-xÚíX_oÛ6÷§0°R%êe@š?]Ö&ËjØÐöA‘èX¨,¹¦œ4ß~G¥H²âvkæ‘<w?ÞÅÆ~l,¡<òÇaäA™'ëßÁÜ›s<³šiÖæz½_ðp‘(ð‚ñbÙ’% •’éÇÉÉÍÍùõÙå_Ó™'èä5™Î¥“«“ë'ïpìfy““7çsèú2ò‰…†/ “÷×g§ÓÏ‹ßGç‹F¶ÊŒr£Ë×ÑÇÏtœ‚æ¿(á‘ãèP¢È¯G¾àDøœ×#ùh>ú³ØšµK‡L ¸$Bzဠ|6d?$A¢ ~™Î8t¡w›4®”9H1F"!<Ëò+²8K§*W5]æéªÔQßâõ&W$)×8qÒÆž§©SB= K’Oi-Ô6,ô #ì€ÆZ©™>¾ð¼–€™3Â¥éӧ܈6ÍvÊäD%¥mSm½Éºvvð´f"ÆuØAû¤€?°CêxŠÖN^o'œj64†™xȪÕС/o³`N¬5´leû™n­ŠœÑÉb¥p¶Ígv
-úJš±U\‹p;`“ÆH,îþ|¢‚:ç™®9Eªa”tL =Ç„fM›­Úª¯Žý[Z®ã¬p½,ùRÄkÕ1ãaü –C2ú¸<½>¹:w°+×jÏu?‹RtPÀY­Cðÿë.ÓYegÄÄØ6«²²@Æ;Ui¤ªz­9òjµ½8]b›¬Tò¥^WÈkk`›‰¸Ý)ÜB·rg‰Äm±w k¹trÌ¥³;=nƒŽ½žƒÖ7 åþäÒQGGXát<‚„i<< ×¾5tm=¥+XÆY®­XáÄJX‰7EÖv*-U=Vº¥ê[¦+·YŒ
-!ðŠ§’p+×jlë»èS®®G`ßœ_€zX)ãgÉÜeÁ=±F7)›-“¸@Ý ]Ÿ(åYRK5±Åí¤P|^w3]Å€­ânÈSÛ)Ø67ÜA01÷δï/N‘€,è#åt*ÆÆY¨õN»)Ô kUÇ®]k1Dinɽè8H¡6K׶…êžTl¬ñÒ&já}³;àñNnà ¼É­2Î0‚ÌÄò Žå0zv=ŸŸŸ"9Nk!Cx‚ ¤ÌE4mœç劰jéîô*¾WNÆûù団f·ç;…ÓàÚl;€ÃÞÝ$&"»ÄÆÍmò¡.1¥ŒYvqùJ¡~ÍC PQùœˆr¸LsL³6–(r Di¸Ì®ÇªJŽ·_ò{¸üŲ¯
-± ÒæYØ7/ŒÛlÍ7 ;ºÓ˜ŽÌ®«Áïgó…«o²Ûm¼í—AY]A%ÛÇMUÞmãÍ*K\‚Û(Pê;}ä¾É.•­ëÏ1É*.îz…ÔrWížÍõgž\A|Ó-¯ù„ûAã5A¼€ ôa!Ä/Jai‘&õ¡ TJá>Y\7¹gïÔ֡aJ0«ñc‘ç…ÏTÐxŒ²¨¬šeîªÃ*˳êñ¹°ÜT£|(ÐŽ?ýöé´BV‘ϔƜ‚%yÄj¥ÌÉY(úª7Ÿr÷uÿrž›endstream
+xÚÅZÝoܸ÷_±o]Y?%²}ò!¹ ‡6Hc®€Ï²W¶…ìJ¾•lÇýë;#’ZrEi˵…‹KÈáÌo¾H²…?¶ÐŠPaä"7’(ÊÔâf{Bwðîý s4+O´
+©~¼8ùá'¡†˜Œg‹‹Û`,M¨Ölq±¾\ž}úôîãÛÿ:]qE—?’Ó•¢tù³¿œýÝö}:5|yöþÝ9üäRd@Ä2¤Ëèòãù/ŸÞžæryñîôêâç“w[!ëŒ
+äé÷“Ë+ºXÃ
+~>¡D­Ïðƒf _lO¤DI!|ÏæäüäŸÃ€ÁÛþÓ”(¤ÒDq™-V@ÌiÎÓ£„*À*—Œp#Å 0ÎRóT(°®ÛX¹´åMS¯ÛÃe3!ˆ”yðUŠƒ*ÁX`BɵŽy8(oªÛàƒªew_Úƺ¼-7ë­¶®»kìsS=õ=ryÛìl×î”é%,£ÂR"úk÷}±^—kÐ77jyáçz*6%.ý‡Ÿ” øåZÃU"£uS;ªhU\£8sDÏÕfcG½Ù”ÅnbU0Êb%„!"“È`ŽJÈ}NÅ™1„faM£ÀáŒ_Ê ‚Ëûmqó׫ӕ`{뢻…Ç®ìÙ⌒œæb–¯hÌX$E¦H¦uqÖCã7Jy êd†‚ ‹Î¶
+36ÖEçߎ¸±Ïk÷ûâüÃûU[ÝÕåÚ}ÚVõ8
+H?Сõ Ðß]ÜWþYþþXAh(ëî`(°ÐnRÀW ¥,óZº;®ë l!ª¦5c(iÄ T3ôT=7›õ”…Oae³sT‰Éã\
+O„¬ìÊb³u)‚mBCB˜™<œÿXz̉Ñ
+&“ãÕ0à<³ â3’Š¸Å}5â0—^p5+¡h<k¤§Ü,ƒj$œõ×>Ü
+!}V!DˆFû"•c0ΉÆ2‡²>à^–¢æO“ï0àh¥ù©ôêå›ÊK0à3vàvg× I[måÑc»†Øœ­‡AÞ‘ˆ}ì‡ öóew­ˆË¢¡
+µ±öݬÌ(ï]úî^7}㦠{}µgû0ôU
+÷°ÞV]g÷àׇö‰–WÕ]¹«Ëá?ÿq;ø$ƒª>ƒºoÞ&ª›ðT)×ø6!@lîϲ;P%øm²Y_Ä°-CÏÆC <w‚ï‹,4}ïÞ@ðS4
+|gS0h3
+LÀ)ÿŒ"# ·°ÿ/6¡!'•~jûØ:í÷ÞbÎD0 õ* Éþ"
+n²ù T‰&– K/ál݃×0L<ðQ—϶‘À½a£‚ ûì.#¶\¬gÇJ.
+QXj9‹–#¸~EÅÅþk%ׄKéS‘£û Ì`8ÔGŠýjv•Í¦›çÑ©Å”›ÙYªÄ´ñẄàcx<ïÛª}Ø/}ÎïÊklÜ<î,*úDèØ–m[Ü•hÙZàùDæ`ý)¼í¯³`ÖÁ@“%GæÜ4†;0ø#>§ÀŽª¾)÷£Ú¸„èàèrSøúòŸéb”©Ìz¸y T3ôT6G·è‹5ˆ…š–ó³T‰ic 2H‡!8Fóž—õº=<lÔN}ß|Y Ä€fÕŒÞÐ>®7EýewdZÔ˜ãÝ©yQT3¢öTÖÎÛçr7¾¦‘“Lgùü¼Ubb~p°™e:ž8°–PÜŽŸþzÔ„,ŒË#á* š–„'êYyý˜¸®"ˆ†ühvÎh<i 9M ±Í£Y/NñöÙ®Ž/õ¼ÜV¦o}@öˈ`O3sãÃÒ +þÅH=ÛrnÊf4g …¬ÈÃI?E8;ÙßâÀLëq{=¿}¥ÞšMðC‡ÛOß}9w Yæ4ŸJ ¨VS¸4–›CÖ•ÐDi€À˜÷ÿ
endobj
-2710 0 obj <<
+2725 0 obj <<
/Type /Page
-/Contents 2711 0 R
-/Resources 2709 0 R
+/Contents 2726 0 R
+/Resources 2724 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2708 0 R
+/Parent 2691 0 R
>> endobj
-2712 0 obj <<
-/D [2710 0 R /XYZ 85.0394 794.5015 null]
+2727 0 obj <<
+/D [2725 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-2713 0 obj <<
-/D [2710 0 R /XYZ 85.0394 462.0323 null]
+2724 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F54 1333 0 R /F42 1238 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-2714 0 obj <<
-/D [2710 0 R /XYZ 85.0394 288.682 null]
+2730 0 obj <<
+/Length 2076
+/Filter /FlateDecode
+>>
+stream
+xÚíY_sÛ6÷§Ð̽ÈS þ_nF‰•œ[Ûu+e¦7mh’8¡H…¤ìø>ý-°Kš¤h%ióØÑÀrw±ûÃb‰ ‡Ÿ˜x>óC'œ¡Ë<.¼I¼;㓠̽?Ä3k˜f]®7«³ËwRMBúŽ?Y­;²ãJ‰É*ù}ú† Ÿƒ>½[~¸¿šŸîtµ8Ÿ9Ž+ýéüþ~qwuýô=ÌÀÉùôv~÷a~ƒc÷ç¡3¿_,Ïÿ\ýx¶XµfuM\›>ýþ'Ÿ$°‚Ï8“¡ò&OÐáL„¡3Ù¹ždž+e3’-Ï~ivfí§c®p=Å<ÇõÁ)’qîã,˜W07tUë0GŒ9¬á2Ûêl?\j€}1éŠ;RÚ0(u:J•Ã„¸}¥÷eš×èï›,­h Xc»]”'3ÖM`ˆ¹žëMfB1!ÏʹIs]!ûƒÞ¤yžæì>¥õ¶§ Ò»4.²"§Ñò\¨©~Q¥óš$Òžt“ØO¬EÖ·B°Ðó³N>™I¡çZË¿ÍoïoEp»Çu±«­Ñ äTŽvûÌ®G9°ž¬x‰j‹”35D£ûE pæn
+0×uLl‚uä[þÀ›þ¯È5lX©üé]Q§V ×Û¨n(JóýÁŽù@âŽâ-Q(;q‘×,{É)£4C$„‡,Ê?â ÒwU1T!÷—x°{Ê„—„¡B{f•n7M9M%ÏyÆ…ØÒøý§ƒn¶i·Ä±‹ªZ—HƒVWùØŒ® ":n'œ»ðJÎxèvEÿ:Ÿù@»{Y4ÆñßÈÒlè>†.²d[T5ë…ÛLÌÇ<8",J2B?KR¾Ëy#Ô6"pÌ9!˜8a1„"ß¾èß2ÏógÀ$—F´iŽ€/¹ƒÞ5³£«5-Lýyfæú
+4$Ä“w49M8Õ*u†™°‰qdÑ×÷»$¡Møëø
+aÕ2Z¥à”Ã<ƒìyf§ºØ|1ÒŒmhSj&ÁIôŒÄjEgñÜã<Ä+lפ‚Qqšþ7Bs_êR"öÏI±‹LÖ°½4þhöKÏß
+Ë1C\¾½›ß.vÅN…îï¢ùiiRFZ¥õK*LÒ:µ¤IdÚž‡@ÕÍ·”9Lúk2‡™.°·:þØ|ÑIÉmvƒ‰¨ÛÉéѾ<>@€Õ&P#Çl:«éy?YJgjÔû´Ò^Ûlöl„/ÈÆ èùm
+U„«† WM×p`TV¬Gb|‰;EµÖQèf¬ Oõg¨|HY„!^]•‚=XS[aÛìE— u3ªûä\ ¸
+ÏïÛ@eu§4K(ôÒ5x‰^G‡¬~¥@{ÅcN`nT@œôX—ëuµ\ÖcQyYòKcIrYA)
+hû2}¤AlÒa\ÂYu2$-×qLúp“Ì„¯úAiñ&Â.ÞLÏàÍ´/x3=‹7CôðfhâÞ†çñL(Τ#Ãþ¹¼\,ºó›åÏä=þúƒg¡šÂŽòÇ™
+endobj
+2729 0 obj <<
+/Type /Page
+/Contents 2730 0 R
+/Resources 2728 0 R
+/MediaBox [0 0 595.2756 841.8898]
+/Parent 2736 0 R
>> endobj
-2715 0 obj <<
-/D [2710 0 R /XYZ 85.0394 209.4795 null]
+2731 0 obj <<
+/D [2729 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-914 0 obj <<
-/D [2710 0 R /XYZ 85.0394 155.6441 null]
+2732 0 obj <<
+/D [2729 0 R /XYZ 56.6929 680.2422 null]
>> endobj
-1341 0 obj <<
-/D [2710 0 R /XYZ 85.0394 121.3428 null]
+2733 0 obj <<
+/D [2729 0 R /XYZ 56.6929 331.4618 null]
>> endobj
-2716 0 obj <<
-/D [2710 0 R /XYZ 85.0394 84.4903 null]
+2734 0 obj <<
+/D [2729 0 R /XYZ 56.6929 168.1912 null]
>> endobj
-2709 0 obj <<
-/Font << /F37 1042 0 R /F41 1238 0 R /F22 977 0 R /F21 954 0 R /F48 1258 0 R /F14 980 0 R /F39 1178 0 R >>
+2735 0 obj <<
+/D [2729 0 R /XYZ 56.6929 95.1985 null]
+>> endobj
+2728 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R /F49 1258 0 R /F14 980 0 R /F40 1178 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2719 0 obj <<
-/Length 3156
+2739 0 obj <<
+/Length 3029
/Filter /FlateDecode
>>
stream
-xÚ­ZKsÛF¾ëWðªÊÏ{0{Sl'«ÔZöFJj«²9@$(¢L
-JÑþú힀AÊ)§xÀ`Ðèiôôãëi²…›)M´åvf¬$Š25[î.èìžýxÁÍ"-†Tßß]¼ýA˜™%Vs=»[xe„f›Ý­~›O˜!—À‚ξyÿîrÁefåüêóç7ï¯ÿ÷ŠPP:ÿxuóËÕ¿üÜçKËçW?~¸½üýw8C‘(Ë¿ýNg+ü§ J„ÍÔìn(aÖòÙîB*A”"Îl/n/þÝ1<u¯Nª€QÂ…æ:àlƱJñD Ê-¸pJ¸}©êǦlÆŸ"1™3#$¼EíÔÒ ÌwB.bÓ Ö€…K²©­‰T(Õ¾Z-/ôþÛâE{û¬3xIØJ\©›ú°_‹|µÚMãÉ“52Atòä¿GÎË ÎB‘L+H—uµ.ër[L°ÕŠ%ä˜í—WÙ~)^Nñ”†dœš1ÏæUžM±*ö…&œK6æø8Áq!4Ü®f‹ÎnàÇzßN0æ‚X´òã_»ÑËÄ©Î@cÃc™…½ÙÌpNŒPæk¼ˆ›eÙ´-:Ž‹!Kg‰‰hÌÂÓ ÆŠX®&>q"”Ðé§/ëÝ.¯yêz &3"Ñ‘`æà§Ú½øþÃí»Ÿ¯?ß]ºéÞê¡3ˆHÄJ&{ŸðT|¸ œ(àÞl»¿dÙ¼Þ6¬¨š·›ÂêÇbŸ·e]…Ûµ¿æþRå»@ ÉÈ9„>ñº À¡)VÅ€ó±Ô\ZØ ¨ši™YÈF#8´å¶l_"Ó<,÷œ‡uý=•«bågÊø Û0ñýõÍ{\4f)QŠòÔ‚‡b[äMÑÀWI‘ͯ×Â+J2É£ð§4.ˆÈ¢ÂKÒ
-é©þâäƒÜð\¶?]Õ~&Ú†›Ü–Uá§ëGÜÀ¢Þûkî¤}8슪mÞ\.ö­áq_Âd ó—fƒîéž6XeÿØ­½FŒ„ô@uTˆÏ}Þ* —Á¦¢{;ÉUgÿóà#ÏŸòr›ßoÃm/ÿˆºÜ‡¹á·i#‡,lÏΪ¾1Ñùnw¨ÊeÞ¢)
-£‚Âqä$FƒÆ©`Ðn\w£Ü_îÞ}öôà9U±lËK6¯+к¤Þ¬Veõà){ոװRÕ:!VÁô‚‰¢£)Èùª|(Û|‹7 SùPåíÁÛ¥3I)æו§ôÚªåaï)ªÖ?é›h0*ìðØÿ ðLËWmXR:ŒZÃxH¢•£2Wl%ÖvqÐÙªŽâKÐãöņVfåa<
-Ž«‰DÄ‘8n¾}¨÷ Â°ÖÂy^ÿùñêÝâã{…+Z6Þ”ËrhŠ@“ûK³ñ6ˆk»ûbéï[ñ¯EY•#•.Dâ„·)D©+Ø1-íün%)—«a>äîöúÇEÓ¾l«l¬7·Æ ´‰ f}ØÀ/ö‡¢iø¤£F¯MgôÆ¿k†ï7`?Ê_xµÝ& DgY8óCww,“€°Üä “­¿Ùš@yà ØyŒ-÷/!&øËDîç€L•¶f¦ ÄX°«oMýÃÅ€£‡Æ‰7hH¢
-8Gªø½œUý\…¯®G_?Ì•Ç„© !šþº‡_b#Hõ›•ûHìc½Â4Rý—Rþpè29<ÃyPÌWE[ìw>ÏÀô¦~öóþ¹cÔæË6LnY
-B³‘ò¼ˆÕ„Œ ˆR†p(5ò—¦˜@ÝœúÔêL½”°Î ‹Ü¥<S+wï£y. ÿ
-DÎÀ«Œ< Q;¤¨,“©!}<lÛò1²jÚ¼ZÍl„ghÿml¢ëæÛ­÷tÞ¶uÙÝ…¶uRµË×C'¿þü$G¦t`2Ð…#éuQxÀ3i£”Í $9o£ª36©œ.§l؉š61PÁ‰6Æž—¯£š01PaˆV
- § + Åÿ‰²;á«­6r`P¹ùíbv"FâdŒ‘8F«Èêopß™ýë«bƒ‘½™*x)%Ô°(åÛ¢]¾Å`NPÞ)7JŽN²åê5cP1†HåŒáË«kx‘X4F3{^¸ŽjBºÄ8ƒÌ EY"ÞIK°FòÉ“’„)ÔjT;0Î#væ"d˜éÒ#ýÖãçò<¦?˜8³õLe$ã6;Úú€bF²C Ít·ó€‹€Å°N Å™XJ±FWò°1StvF
-¨ÄmÆ¢ÌÏ%‚=ÎŒgp…|»ò#á:¬jpF Bf"¼á•ÇzÀ‰ãrÝ?œHF
-Ÿö®bÏúÓM˜¥;
-QV"áQkrô1ÇÐlIÆn@4lS
-FýÿFG÷°¢o]a±LwƒMþ¦ŠªØçaáØåÐ2T+Ïåâq*š¦™ì
-¸?GPÌuÃæÀ»O?^ݼ¿p°Ñÿ)®ú*›Q­“jcÔ ¿™ê”âYUÙ_*„òjÔ*+Š*m”í/a£«
-ÝnbM* ïÏ¿¾jML:õ¡=ÕšŸ¡Ÿ†14¬ü_`ÞõmèíË×ümÀSÿã …^À·œ…³=ÿËX6fûüb[竉bL©Lž[0’ŒbJ
-ij$Eð/BbÒÎð¿ù/…ý_&%vy2~¢%j—u
-¿™}¼¥áχDzÿà<‰endstream
+xÚ­Ërã6òî¯Ð-rÕÁ›Àq^›ujÇ™ÔVMr %ÊbD*"e¯ÿ~»ñ Š’gkR:šF£ß-6£ðc3£VÎ2+‰¢LÍ–»+:{„µŸ®X€YD ÅêÝýÕÿff‰Õ\Ïî×\†PcØì~õeþöóç·nþs½àŠÎß‘ë…¢tþéííooÿåç>_[>ûÓÇ;x•ÆJ
+ ÀÕuù¸X—Ûb­V$SBŽÑ~}í×âåN™Ãi6ÆÙ¼Š3Ã)F¡ ç’1î'0.„†—Œ«Ù‹‹Wé}}h'sA,êãñïÝèeb‹”gÀˆ±Ôqf“€VsNËì·è;•1fZÛÆťĄ4Îaܲ~g$±\M€:=ú²Þíòj5¥q & ‘hr‚æy3ñáãÝû_o>ßßürÛ}•ÚE¸´ª×‰S‹´*ÀÞ l4 تæí¦ðƒz_ò¶¬«ðºöÏÜ?‚UQ¤LÎÁ&s0Ï7mX8†¦X̧T½pA‘5Ó4Ã…hTy-U@š‡ížó°ÏÞè©\+?SÆ3lÃÄ»›ÛÎÈÁ”(Ey”`Ïh‡¡ØyS4p*)Ìüf=A¼¢ÄH‰?ÇqA„‰ /‘H+€¤§ú«£œÛsÙnütUû™(nr[V…Ÿ®÷x!E}ðÏÜQûxÜUÛ¼¹^
+è[ÿÁþPÂd€ófƒêéV›#ìrx èÖž#˜UAuÊ/èCŽ{ToG¹êd¸ñožbtàùS^nó‡mxíéA—Á-%g!ÓBîÔ“_r8c¢òÝîX•Ë¼EQ™
+ Ç‘£Td:4NE7‰ãºåþqÿþ³‡Í©Še[^³y]×%ÍàËjUV²gûü;U­#bD/™ØÎ(
+r¾*Ë6Gïl¦ò±ÊÛ£—K'’RÌo*é¹ PËãÁCT­_ê›(0*ÜðXÿÀ p£å«2,©Ž Z­–Z¥™¹š@#(±¶³ƒNVu$_·/~4”2›0íQP\M¤Ñ"•Ó|ûX€…;@­…Ó6|þóÓÛ÷‹OîhÙüyS.7~åØ&÷fãe÷vïÅÒ¿·þí!>‹<¢(**‰Ä /S0ˆ2RWpcZÚùý&R40RM ÷†¹¿»ùiÑ´/[‡ÊŒYàæÖh„Î↦7øâÉþëX4mÀW:ø ô:ë„ÌøÍðûfòS ýp·Ûm²Ñˆt" '~¨î]¸Ù„å&ž„˜swläC4/ çѶ<¼›àS¾ßdRhˆÐ36dì»}ĸ¢ôa|¢à6,•¶ß9ø~OjU?WáàõˆCwyªCè|”öMfÏbc¨æï+÷ÆØ›{…ž¤úƒRþxìœ9¬áŒ·É<P(æ«¢-;ïj`zS?ûy¿îµù² “›
+÷ɈÆ@¦±JœMF†2Ø]sj/“ØAMИÆQŠh
+S ‘¿5ÅDàÍ) Z]H™Ô 7¨˜‡äÎë±è]¹ûÅsYøDäÍK€ô¶ Ã'l`<®z0Ò$dx)cd*HŸŽÛ¶ÜǤ¬š6¯–E3Œ7ÂÚå¿íb›¨ºùvëu•·mƒwÖmìTí\öPÉo>?ÉQS: ðÂô¼(|Ì3)£ò2gº,£¨ 2¡œŒ.§d”BÈΤµ‰€jF(—â2}Ô‰€jM(1J(œPL
+4Èü™Ì;Á«3€Íä@:™ ’Äì„ÄÉh#qŒR–Õ¿à½3+úÏWÅ:!{3•óR¸™ŒE*,ÚåhÌ Ò;¥FIåá¬0`ðÃX¦/ Ãê¼0tPN¾¾j°†ÅˆD¤„T]ÉËÄuPÔ%’
+2L›éáNÞ"BôC20‰£ìö<ÀukX¤ù¹Äx³ÌÇgð»ò#gá9LlpFsB–Åhpð…gëcN—ë~qÂe‚¨Œ}«®[&£éZÕE ¤ªÛÈF¤ÎF™Cñß²iÏ+œä„QûšÂ  .(\„r
+×¼j}ûJ]¢n‚YÇeÒ:¨SÚRN˲”¸a0Íã@´e§q¾¦ac"gcP#_£°©¿w ëÑ70À8äg8ÜåírS„òSPðæm± ¯õ•ž!Z•…¿v ìgʦ·žš}ä;ÝÆ%§1ºaDg¯¤Ë<e¢×åŒ*, 9¤XâÁº2̹¬ç ïÝ–.õ„7ORŒ¢Ì *„³Xº‹E ˜ÛÔ.×3<dànó(œ
+ª  pÇr$ÿÁ’-’&Á6…Ó(ÆIj9Ãk„FgJ~ò2)^a!$Zd½Ê³:Èbh4UƒTMÕY}f²«³í¬¨ÏC¨óúÜA9}Þ¿ê@cy<ÑfŽ•Du™®4AWZl†Ì‡ëawE5Y³‹Q®+l¹(¸«Þ§‚["²®vÓC¥·¦‰¤ÑN÷®s ®ôêFö‡@B½3©¤b€Û¾ Ÿƒ×;{½à{)\Î+×;€ºp½Ê]ïïã-1<¡`8/n&¶LnŽB˜llºåǪ¯Ÿ‚f>ÔQ#·õã#$#ç™ÀÁRýJÆ0„ºÀ„å˜ð2-㢷yÅÆ$8æŒ't}W±¦Ãxzˆin5=„ïÓ¤:h‰ÑŒ_f\5Á¹ä.…ÄÞ€JwýÍ]žŽmtqXڰĆ1UÚ^âE&ÔßÇÍãéÁÒX ¢“Œr1ÅΓ ž(«c¼½öj½1àԴä7ídÒa³ÍfçY# ‰„ôAþ}¬é0¾Âl‡2aþÖ„B(ü!ŠE(!â†þZG—ŽS¡K UïÔ1DÎŒ5²šPžSÃʸ{õÞ@%õm÷ÞB…#ôÍ”Ä( V>,P¾Vƒƒ‘­VóÄwùcØñ)ß–«Î]«ài°/¸\蛂û°g!,šhY[E˜æüüe+³0`™‚c³ï¾ëáb€ñôªx:Í3Õí{ö¦!BPÃFMròQˆœöŲDq/Vo¦:Œh⾡Ã(ûXɇBˆÑ\DHÑ]Ô_}VékmÔUÖñá’KÄxÇx÷øô±%e}¼J“p_]㣇¥ ìCá[b€C²7¡Ëh šwo|¶ }2hUè†ÊAÀ¯Ò€_†Ü#6}‹¦[ðBj»1LatÜ÷œÒæY—Ê/|ªÝ´ýÚø[5èUõØ@Óbªƒ„º¶¸žßÖ.A¦¶ëY›Øl·FV»øÖ´yé6„•a“
+W{%
+FýÿFõ{ØÑ“·®‡•XÌÕÝ`“?…©Ç¢*yØ8¶:BhÒ•g°o±¦
+&¦™(¦Æ¨"øçŠ ÿN».Âwÿm¬ÿ[œÄâ¸9(
+¾^X‰BN3ÃN ]üƒÙ)íÿ6Y·€endstream
endobj
-2718 0 obj <<
+2738 0 obj <<
/Type /Page
-/Contents 2719 0 R
-/Resources 2717 0 R
+/Contents 2739 0 R
+/Resources 2737 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2708 0 R
+/Parent 2736 0 R
>> endobj
-2720 0 obj <<
-/D [2718 0 R /XYZ 56.6929 794.5015 null]
+2740 0 obj <<
+/D [2738 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-2721 0 obj <<
-/D [2718 0 R /XYZ 56.6929 749.4437 null]
+914 0 obj <<
+/D [2738 0 R /XYZ 85.0394 769.5949 null]
>> endobj
-2722 0 obj <<
-/D [2718 0 R /XYZ 56.6929 680.7174 null]
+1341 0 obj <<
+/D [2738 0 R /XYZ 85.0394 748.1842 null]
>> endobj
-2723 0 obj <<
-/D [2718 0 R /XYZ 56.6929 501.4297 null]
+2741 0 obj <<
+/D [2738 0 R /XYZ 85.0394 713.2192 null]
>> endobj
-2724 0 obj <<
-/D [2718 0 R /XYZ 56.6929 130.8593 null]
+2742 0 obj <<
+/D [2738 0 R /XYZ 85.0394 649.2356 null]
>> endobj
-2717 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F41 1238 0 R /F53 1333 0 R /F22 977 0 R /F63 1385 0 R /F48 1258 0 R >>
+2743 0 obj <<
+/D [2738 0 R /XYZ 85.0394 579.1835 null]
+>> endobj
+2744 0 obj <<
+/D [2738 0 R /XYZ 85.0394 398.1506 null]
+>> endobj
+2737 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R /F54 1333 0 R /F64 1385 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2727 0 obj <<
-/Length 3076
+2747 0 obj <<
+/Length 2924
/Filter /FlateDecode
>>
stream
-xÚåZmsã¶þî_¡o•g" Þˆé''w—¹´¹\Ïδ™ä>Ð"e³IG¤ì8¿¾»X
--¡µ=ïÐhuìÑi8h›™¥S—~\zr±»mþx/›Ý%Ï–m}ðXw}h«+w ¹t¡²XqeÉ`T+nà áíær%˜ 6P NPª:ú]·ÍŒ¥—|y·wý–…¦¥ß}çW;å£)s ‚¢ß{¸j¶US®ºê®©š;o?vxÒå3hšëaXø\èæÕUmCítéÌŠª[çnäEYüt‚-óM_ÂŒvä›”é„1`Éç‰U*uc ¿êtI³­•æ®_¼öM#^Å1¢-•ë¶~Ø–}ù^ªð(_žx0]>UÛ-™ÜN†rW6å.ïÃ3OUORö8#6I)@Q=å½_Æî4ˆ0žˆÔ¼"#«3 ¬p ØÿLÂN‘á“€4ÃÊSžwe´:öå>„H
-º n~Þû¸ì®æ=Ý?z¢IÚ€$8üUÑt]¹ž‰<qÊcœúÉCÓ1A&pVKr-öÛzÈw Û¿TÉ@pà«öi¦?‘B
-©0¶v7ÓOàñ
-ÎË·]KA+2(jãÓµŸqîg6ÆAæê
-`>ºù¾…¼ªÊŽá`&ž°€cóXpP‰×íþ * ðù¶K0N±¨´°}Ï ç³,:¶:Í¢Ñ
-g[Eî3Ü%c¡Î|™I³—Pý>ˆT¥°‘âæ¼7£Õ±;¶ehGð©?‘2鉄H¤ {"‰¢J‘‚è3Í"ÛÌ0%RÎy,Ò!e¥4™èŠt¡=!9E*Bu "¼ATäÔÖÁ{‘u¤Ñˆu|Ó5Yëx uðv ÔÖQ
-
-ьͲÇÿþãi2;ëÔÌŽ¼:Of·^ﻇÒÕx°Î{m]¸†ßœ~†ð… :S„tb´
-jÉ—ß‚r÷Tá¸W"šÙLl¬ãSèú™ðŒ'‰D%ß蔿@­Š/}ÜUœ%^„Yž#›öEÅIÚHSŒ}ᇱÕiÚˆVîU0®§Õz[æÍÇÓ$’ÙDkaþ§.¿¡ÓÊì¼£Õ±ƒ§bm’BàL=|í< m 1šZEdñ (†ˆmŒ¸A»ëȯ0²ñ4ƪ¸9ç°L©Ž9G;B€„Q eÆ5ĨŒ–¸_£˜ êâ>d<wèHœ–Ê°'ZÕ~fTûb<ø ¥™&ÂdL·ð¹IOÏàïAÉNÕš?wÈCÞy^tºñ6‘ŠÏ“)È5~e•½P¹­N§`´r¯-Û¾Ú<ÿ}ctÖ™CÍväÍùšmâÎeGCXÒwßÞ¼}ó½?(».¿ +üéÉÙïM¸Ha-Œ|añGVg?XÑ÷&ë¶ÙTw‡;#Í^è9Zw=ñîòƒ¾ã×XÒg}*ÇçBáMžòe*=@kÿ†KR~vŸ‘ìŽQ(Zúu–(ŒëG||Äœ2äøÐkGåcØ{§0«äÁ9 ·áð¥{÷E ·&6\ÙÔ¼h~7éù¼!)§‡7{Ú[ž*Z“Òaü™àô=ÃÏ=‚Ù“#?Ì
-ÿ>9þíïp‡ïŒ¥I b>ñÎI0™ayº‚s8t%²Dá7Çcÿ6±)Yendstream
+xÚåZ_sÛ¸÷§Ð[噀hŸœØ¹Éõ⤶3Ó›$´HÙlDÒ'Rñ9Ÿ¾ ,
+l&Q†›™6 ‘”ÉÙ²:¡³;ûé„yžE`Z ¹^ÜœüøJ¤3CŒâjv³ÈJ MS6»É?Ì_¦É)ˆ ó«Ëó—§ ž¤&™Ÿ½{wqyþúïЗ˜€ƒÒù›³Ë÷g¿ íÝ©áó³Ÿ.®O?Ýü|rq—3\2£Â®å·“Ÿè,‡•ÿ|B‰0©œ=B‡f ŸU'‰D&BÊúäúäoQà`Ô=:©F ŠO耳cÄHÉGJ†(Á…SÂË·o`kçn+ð
+‘ M¡Ûdu»*6úW’h)’o°†ô¹S”ÿÆ ¡œ&Çõ¹ö:6ˆ‰”²t¬Ñ«^£Ϻ]g_öÌe屩v«²¶ ²ÚbóÚ:™{,fÖ$V5Ââפ*P†mà$¶U¶ø @tÊæ‹çþ™·m1•PÀ–¹Ž¢¬×e],Úòn€ U¤¢…
+Öñˆfª_–}.Ì ûj"ÚN3Þ
+–·ˆù ¬õªøw=8+Å0»ƒ±È´­Ãm/®ÑòÚ…X"¤5ë¢+~°]eórH°Ökd¹-宨 H Â36ÃVüvG4ì±¥@«€™²ÎãáœA’%Ìúx p‰!Ë.ÄÎ?á°c˜ø¢‡M|ebŽk2rí«r=¨$L(1Öå«¢[Úc—Ê;4äüüòúúâ%?O-¶<˜‹J 02F5Š**ðJ+)y‰v³ìš'}¤’B¡á# hE
+¥÷½h":(¨ØTP L±
+XÍ(nij«w0¦¡2”gÛ®©`wK°ÂXiZM-b\’QCQ1*y ³ Õ‘¸ŽJÝÜcU¡2ÄNóÛÖÛeÂjÖáøÓKÀš¢]þ"¯Û¶˜*x!Š‰adr¢£ Bc³œ£jí¼£zêk™8]5ó n‹ÁåšÍ„ ˆ
+2[· Ï~B¹½Ÿ™h©K,åÖô…kH܃÷"·qGÊŸê¬*—Ø+%ز1åºðÂ>ržœ÷|éüýCÀ‡ƒïð«²h-Ó~8˜°ç½X@÷cõ±`'¯šÞý)$ óuKlÀ8¢ …†T;
+¢C®Ã ¹ì.lè‚ûv ¢M*¾§¢Œ'PFIq\‘k_Ÿ;E™!4Qj¬Ð€¤4ñH
+ˆ¤ÐöH
+-4h @# )4½KX¶I‡¼ç 1FRÆXLÒÁg“DñÃåèBy(²à¡È’Ù„"G¡Ž‹¨ñeˆ:^t…\ˆ:ž†€:v8€‰¥Ô‘VÞCzÿy*Úîx »W\-©à8hAaS¢´Ð×}óXøjÆQBº¯c½¢}º¿uÓydøUUä% ‹L–¶ƒL–t뇢H‡K¶aÏÝÏw»íƳ¸8Dt>’†Å¶\ÖKœÕÞŒNb¤¿/þëÀ²*Žà  ¦ÇAÛÙÕ–Š8ˆ­i”DQžu}9ÔX&â mßzšÃA7ï$Ø0šþø<™Ç=;øšÞ=‚Z¢ˆL%Ÿ,éÔ
+Ÿa„QùÌíúë0ŠE.»Õ¦(¾ÂB¥“àñ¿¿xËŽ*µÇ²=­NcÙH­×Ûö¡p9œóÖY[‹gÂð›áOo¾ÐÁEû¾ë ÕM?„­Ò ‚ –¥õ‘ÂÕ0\b0`<$»uÐëZlö]ä°ÅuˆsÒû›oWÞ¢m¢zçɯ$¦áêÕ*Ë‹ñHÖÏŽ­ºÙT‰mµ”{)OS‰cT–àA«ø9Ý!ÑÇ#h-³mëvÉCqÕâ€iøE Æ?ší¦v;‚Nxµc뼨[ÏØ>[çAJõrL¼÷ëÅøÅM_ oêwãK¹®+ª‡® %Ûz=~§ˆg¶‚ý…ªî¾ —ÙG*DŸ}-êƒ7Nö¶<eÉ3o©†\GÂLàˆŸ=2cÇÿ>‚Lx uT¥ý»ª=N¿«)õ¢În­²¤1‚I4\ fØíɽ1bŽ„ìÊe¸0^7ýRJ/xs0Ò€>ÃÌÔ…"1^„}à $
+ÅI¨Q“fª|ØŠ À@õïùm•'üK
+hpµ
+{ŒË©=
endobj
-2726 0 obj <<
+2746 0 obj <<
/Type /Page
-/Contents 2727 0 R
-/Resources 2725 0 R
+/Contents 2747 0 R
+/Resources 2745 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2708 0 R
+/Parent 2736 0 R
>> endobj
-2728 0 obj <<
-/D [2726 0 R /XYZ 85.0394 794.5015 null]
+2748 0 obj <<
+/D [2746 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-2725 0 obj <<
-/Font << /F37 1042 0 R /F48 1258 0 R /F63 1385 0 R /F22 977 0 R /F21 954 0 R /F41 1238 0 R >>
+2749 0 obj <<
+/D [2746 0 R /XYZ 56.6929 751.6872 null]
+>> endobj
+2745 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F49 1258 0 R /F64 1385 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2731 0 obj <<
-/Length 3112
+2752 0 obj <<
+/Length 3116
/Filter /FlateDecode
>>
stream
-xÚÕÛ’Û¶õ}¿BoÑÎD0®1}r¼vºiêI²Û™t\?P"¥eL‘Ê’²£N>¾WâENã>tvv‚8œ;HþÈB$(QT-¤âH`"›ý ^ìàÝ·7ÄÁ¬<Ð*†úæñæÅ&
-©„&‹Çm´WŠpš’Åcþnù "ÝÂxùÓÛ»W·+ÊSÅ—/øáõÛ»ûŸáY`
-HÄdÐÔeñÉ#„œ¸bä\¢”†Søj*ὶYFÔÓ¾PSýð÷X½VMÌ6šÇüü±
-  {r½ª€¦è„¨å>û`’ Õ½ÜôSVŸì—ä˜\M¿ÐéÅN;&ý°ÏòÂã°GtÜ=Ùuù âV¹±o‡;6y)
- äWn烕ø¦h¥“JÙ:¹Bæ$AúÆhåÚŸkmÆç?>y;{j‚¹L»ø DZgÎÐzXãä=/
-Nšs²üÉY² –¬×ZK¶ÛE–¬'‚%ëoÉzMãpK6#o´cfmµ¯nŒaÁŠ1·V SÎO±³ÃØYñ×®˜=ºåŸJíùõêµ[d©®*»+Ó1"*{pk!öÈ~iŽV»#lvQá>°±~íÌ ÷ý–•@Ûeϱ¯„áq—"R„)#W<ŠÀ*‰=Š×<
-XŽnÀ|ŽG‘±Gû&ŒGI@}á;4oÖwè—Þw˜qmϾCo3Øß'¶D@%%H_U>Ï¡HŽ$KÓ/âO´UϹ®£À¼/ ÓŽÄ‚˜Ìý9Û—È †‹ŠÊidâYaEH`æŒì¾¶i^õ]BE`ÔºõŽ|}Œú$Uñ±p¾}ò=˜bZF Ž0ÁòŠ˜"¨Iy¨ž°.2x& n>„Zj/ý1¥BêYâÔº¾UBÙÏ¡\ì“÷PøäôBªçÌ|V¶>Œž£®m7¹ô6«Ž32Ç :Õ•2 fdî¡œ·SQ•"ÝÏšEë`†Xû²Ä "Yí—’%ž”ƒ4§ôJ{:†š–X€Ò¤o«cû4eÒ³XƒU°Žvëµø ™™Ä´T˜„ê^©Ãc¨©x¨ í›Ç*ðÒæTE|4mDûX9VÇ3éˆËø‘Mzý°aÖU4¥óbPC9\Ôï)¬D_çƒbÊ våGiè¡áFi”®ô`/¦îÞ>Ø9];ÌjSHCÊWnÝÌÊ­n9¯«Â¼£g¾vgd¢·4¢KšÔrjÏ•ç.ùñšuÙ:kݾd_gù*^6¯’Uê6È•¨CM«d€
-*Ù=ÿ*9+†³Jä0®’=A•d\ºDN%õPó¯ÓoIí¥‹ž3}=0u5ü–Ù!]¶ÇuÞì³²6)»$qÚ#¸P(½Tëñ”":-1åêÛ¦+¼«ËB*ãKؼ)\ž©‹** ×)º Í·¥Ä>+ÎìÅR±q(fLá£ú£T\Óü3ÐŒâ; ۘʺc;ˆè 
-1‡Óà pöã“„¸¯dç]ÙªL'$À Ì£V ýk= Q“
-é¢Rùã&Âw ]÷k#ΰ•s˜*ëMuÌí“ð«ô´+K†ɸBA±.ëüÅ«¿Ž( §ˆ$‰/´4N«¼k/’‹[R]yîÖÛæÿ `Î< ^èÅý۱ˌÀqxÏñTúœÞb{«Û€1îˆz;1•øtÆé;®—»nšZמ;×-œn­RêJRCÍ(°‡2¶î ·îÂo´í2‹úÜvào»ôß…;–pUÙvá*:Ü]—Þ õ¯jqŠTªþX¹êO ضB¯Ã%´ëÎ:y¸âlòHˆL¦øJÖCMI€2Ñ-«JpyæVS7Åôå–ù™ßÝãvÛ{ÿ·ùÖ™+Að+4Áì]ÔÈ©¸ÊàH¥ |^"j(’þiŠ$£i_&öó h±Ä·ažì×”1ϽºüŽÅ‡l'œÃ6c{[ š •'aŒö} Äχׯ FRˆnkCh¼èˆB‚9‹5¯Û¶Ø¬ì÷c—ã` ,õ]pûá„ÆVEÞÚaç¦L[ŽB>PtáÅðœ¦(Ô‡åS1v}NÙÐzÙl»°ðUOvô¸úÛHpØ¡›Ö§S.‹í!ó12£ËûÎu2Á6’T±~§Ï9ð‹6¸ûvdÚµÀ%N®Ø`5cƒÊ0Ô–»•ñESnqõÙ-p»Åòï­LÕù^Ò”vÎøEøµ·uðîñáþ[;õ¡8µv.ön!œÜìE¸±«Ü¥¤ùÔÈάOcÙuJ£×¯Wt£:|na>ù€ HÎ,ãl5=tÐèÇ'ßà†ËËLõÖM÷ä/*À7Àþi<ˆÚY'‹øã¦sïÿöúŸšŽU]욮̺xá¤ÂIpœ2!W>Ä;Í|‡ç€‚¶å…nžŽxë$…ú‚ûâÈ›¨¡8GŒ…6ôd•|NÅ&‹(¥PJ€î9I (.².Ž¤’¼'‹;+†cprÚ›„Š^ÏŒžš~b±ƒ¨B¢ÊßPâ~",¸2QÕµÛ™«sÌÈ3ÚrxJyy“
-…ÿ©ï¤>O•zóØ}dÊÀ)°Ñ áßÇŸþ
+xÚÕێܶõ}¿bÞ2 dhÞ)¡ONl§Z#±]4€ëÍH³«D#mFÛ[äã{xu»NŠÅb(òçðÜI²ÁðG6‰@˜¥|£RŽ&bs8ÝàÍŒýpCÌÎíb¨ïÞÞ<yÁ’MŠRIåæí1Z+A8IÈæmþnûô§Ÿž¿zöò—ÛxûºÝ Œ·úêOÿfû~ºMéöéÏßÀ'OR@Di8‰·¯_=ûþöýÛož¿ äÄ$Ì4-¿ß¼{79Pþã F,MÄæ#|`DÒ”nN7\0$8c¾§ºysósX05SçXÀE‚år³c%Ö˜eFXÀÆwJ¤H2Ê£x:Ç(¥u.M},ïÆÛ%ŒBL6ñšÌjŠšÒ5a
+%œŒp¿.ª&Ë5ÿÕ¶»/tCnœaLï.ç¬+›ÚŽêžª°í¬vSüd¹­‹¶ëßM]´ßÚöþÒÙFÞØߺqç[’l‹~zñ©l»²¾ë׈±¶ö£øPÔšI›…½¤ô’”
+AÍ^Êã펤RïãѶî³…n©íá>«ïŠ”‹‚ν½/[ áYÛg??«m+³“—ªÒx£$æhªÂÄ`¥hvcÁbÆ3Œ“ìã}Q2-bJ”Å)·UfïÜh}9í=}ۧᴴ/Ù¥-sh‚8äCîtÖè²M™·¶m%º(r×ÕØßâSv*ëbwjòR‹äàC–§Â­§)À;uÓIMŒÚYŽÂѨ^7¯jż<”ÞxÛe];±-ÂQJ[G ¦x‡¶E 9DüÏ[Å·ç²s¼h‹ó-BÓš´ÂÚ!×ãÆ
+EJ*î
+bÙ`§Ïël¯ý#jÛœío^¶}§a…mCîÀYéPE´l~á§ì³Ão­íæ¶çÐœ@˜û²*»Ç[Bȼ#c„­mÞœŒO5™srB.bhÆYÕ:]Ù;U»w¶û±ì·sgžÎ\NEÝ” vQ¹EÜætÓmÎY´_¥Îƒ‰k!Ø41db ø¡ÅÐ÷³_ˆ :XzHØ
+´@¦œJé•Ö ¢+î o꥕MåÂÍê‰ÙœÛO”ÌCêÀRÕœß/,©Wí²^#zÇ1C
+žˆKjQ´
+¼1N<ezÏí<s0aÉW1Çš KÁ?)B½X¬Ž/0Žê­`/ðE_- ~ÅWÇP˾:@iŒùåôïowÒìw»¬ªþزÃ}ñÇN‡á÷nÀ.^Z*Äõ®üC©s9 Œr슑sH¾hòÄY3,½²M3ÝåPŽÀt’BˆlólÓ >aMCh…xûMkÇÌÎ][;è¼8f—ª3nËÌöÄ(7
+‡R"ùsô‹@‘) 8à•­˜ñ^† NW¤<‰7ã´+%N†)žhŒÁ–/gÎÍ—a¿å€™ØØyn= J“z¥é’‘Ò@‡S£˜)
+ž$Ã@ñßhR´øŠ Œ5ùkõ§)¢Rˆu‹¡–u.@Ù´¾yð¾îaª$}¦ä:þ
+ɶ½ìó攕µIã‰SñÁHŸôT­ÆKzè”Ä°¯š.\g!“ñEmÞîžãÃH† ]šÌæàJ…“¾Ì^-‡bÅþ'šO$GX^QühYï=¿~¾LïŸ) &¯! @¬C.RHÈIhŸ•íC•éô‘H Ü!Ã|škz"¯!":·2$R/q"¼Ächÿ¡_J„tè*ëCuÉí—ð³t·«V¦6ÉxŠKüùð¾¬ó'ßÿuF_8ED†§效Ñ_öº&‡Õb¸³ìOíí%À úêX&^Ñ“—¯æ.x0×á}Ç}é³z÷\EŸ¶ö â3Ro*öùËbÎéÏ`Ç«öïq̚ˇ­Za¤~’²®ÂÔŠ{(÷DérnÝ¥ßìYÌ*êþ,f‚{ö,f€ûY¸j r¬Ê¶¾8ñ×¼3×µ8Ai’&_TÄzÁ®-ÏëpíÎk;\u¶(‘$E²ìuD@Ëòð@&¶eU™»'8ú”L_pÙ–ïùÃ}ƒop‡ß²r%˜*D%þ²+A¹x%È$©JWÙ€&ü
+Š„¡j0Ä>ÞÐ9“þÕ†ù²o9(c~ëºéR;‹×v8g m¾mÀgÝe L„1: ‘>ß<ÿB$U‘Dô17$ƃÎh£ÖìÀÖ¼nÛâ°³ æ.Ç!m`‰¿·/'46ý\«µÍÎu™“:
+é@Ñ…©œ¦H
+ê£òc1w}Nõ­+íïÿg–UXxÖ“]<®á2
+œu*£=j[„`‰áݾìÜÙ¦ H&éèÖÝ9ïѹ¸{<‚–ÞŠ2ø|éÿN˜_ýŽ´' †
endobj
-2730 0 obj <<
+2751 0 obj <<
/Type /Page
-/Contents 2731 0 R
-/Resources 2729 0 R
+/Contents 2752 0 R
+/Resources 2750 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2708 0 R
+/Parent 2736 0 R
>> endobj
-2732 0 obj <<
-/D [2730 0 R /XYZ 56.6929 794.5015 null]
+2753 0 obj <<
+/D [2751 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-2729 0 obj <<
-/Font << /F37 1042 0 R /F48 1258 0 R /F21 954 0 R /F14 980 0 R /F22 977 0 R /F41 1238 0 R /F63 1385 0 R /F39 1178 0 R >>
+2750 0 obj <<
+/Font << /F38 1042 0 R /F49 1258 0 R /F22 957 0 R /F21 954 0 R /F14 980 0 R /F42 1238 0 R /F64 1385 0 R /F40 1178 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2735 0 obj <<
-/Length 3324
+2756 0 obj <<
+/Length 3547
/Filter /FlateDecode
>>
stream
-xÚÝZmoÜ6þî_aèð²¤Hê¥ýä6i/Eâæjî€4ÀÉ»²W¨VÚ®´vÜ»ûï7ÃJÔ.ôpßß4ä¼=3C­:—ð§Îs+¤.ÌyVa¥²ç«í™<¿‡¹ïϯYúEËpÕ77g_~§³óBi’žßÜ´r!ó\߬ß/.ß½{uõòõ?^,+߈K+åâíåÕß.ßÐØ»E²¸üþÕ5tM^X¤2\—ÊÅOW/¿}ñá懳W7ãqÂ#+©ñ,¿ž½ÿ Ï×pòΤÐEnÏ¡#…*Šä|{f¬ÖhíGš³ë³¿ŽƒY÷jLÆæÂ&&=_Z 4¬‰ J
-iñe¦ ¡eªFA™<&(¿
-U®×¿um…Ü~ù]ªƒå&y"3Ø×M‹f4“BäyVð¢÷2VY–ò‚USö}„Œ¶"O­ý½dêê1v-
-T -úð!BT\è$÷ÇéÚ»úþ°/‡ºk®5¨-r¡TOd?®:~’„‹Jªt.ýËõúÅR'rQÒÃIÙµ7uƒMU,† õÕþ¡ÚS»î鹑/m[·÷h»0p³©_¨…òù2I`WkÁ~”…µ ³½Ý–-@@å‹ê×CMžFqO'½D…Ò“Hn_Ù4Ýã²­—xnÖëŒë\‰DjëvNδAGÏ[ä-Ë€·aœ8Õlž cMÂtž¢{‘j½½‚4Ò¼
-µÓWÛz¹êšŽMª$>´QM‘ù·„€­ÕI2Ë£Má°Æ|&­ W=ŸVŽ«ßuÕü¡ÓÊP˜Ÿ £Íg¤9®:ç<,XH7 g›ËóeÕTƒ‹Ý”+ª1WTA®(}ê ¦\Qq®¨ŽrESÈÅ-å#Ö Ê%Ô„uLÀ‰I ;Ón_ßC†Ñ ¡#D|¨Ëx
-ôoæ®Ê/>c©ÁòÉ«ÚÃìíˆ$(Þ²ö†?‚(@ËÌP^u‚D‰L‚µ}Ú ‚UŸp¿Ê%‚õ=
-›Àâ=B
-œ<R¯
-+SóiSWÚڼБвðÌ°ÃM߀IA&ct¶¨ÖµoB
-ù˜Ö b8Éœˆi€3¿îà«Š¦itÅÅZ?×e&‘IJ«<KÇ’´¾_²$–Á¡Íd€¡v„¡ Ñ)–a9ŒCÀ©%¤Ù:¨§!ô Ì
-È©†UVðùl^CSZ±Òf0© ù’(”ëòÖÕ0Žò¾ fÝ®ëëûÑ^° ¸Ù3¹)}W‹ÕaOÝv ø¥~mâ,ÊmŽÕ¨k¡Ñ·u¿¡€3-XÂ,I»8ÊðƳIož.‰sææ|>O¬øL°†e0Ƽnèãë˜~å<‰& ë<à;a š©¶L3Fa\ öKO³½oxdO çÂ3äȹ<ÉÓðUªJsR­KEÜt9D˜‚²an¶§L±¥¥ à¦Îç–öŒI«LØ¢ðiê¡wÙVÏ®ÚÔ‹uÝïšò‰‹Ð!űd4¸¢ôe+Ÿ+¤ÕâuKsDoºÉ3 ˾ò¯R>  ÐØq^ãI0Uo8¨J¢=…SÞ×8ƒcžff:÷š°Ôå‚Õé›’M³íxÅSŹ[„¨¯V¨¦Ó8:ï
-âDIò¬ä’k^ÌS¯Q<ça·ëð®ƒuáÏ2Sƶ
-“(úR€ñKA¸³Ñ"ïiDRÆP@
-¨eü'‰}ô¢KØLªÿA^&5 ·]Xêh8ÞÁàóqSÖcç©;ðhd.B¶β‘ÂnXvfö¶æFÍtÇe ØtùƒˆÝ¤AñfUqä“ñÇP)Ç‚Ï¥Ã7‡ ö°½u¬°t‹ cPÉ×Hµlxq½ßëhi¹ÛA™@Ðh'j¡5¥VÒ; ñ‡›_x»â?ŸªÂ9Š@s¶Ïj¡…±©óèóñ›z“[ÞÔ[º©‡-ø{ri;Œ­Ë¡¤‘ê£w žbcÁw9IË5@è¶l0;Lgr#åÍÓÎ
-«íQýd‚ô;³»P´ä?qËè äàIžœ\Œ|âc¿, (‡@Úñ‰*fØW°˜# “é£Ï$£¨9Á#QcGY¾m› 7,oÚÎÂpA”--.¸B¤*-Nîg)ä\px„ùƒ´ŒÞ %øùVÿ©™OÔÇ^êç&ÕQŸ?pßW#Œëª)¡? гúeÊHý¸d<’>GnüÄÛ{Mù¼{ªÎ‰ÍQïÀ'(Chc k¡TJ÷Ïo^¿}íŒèÿ»yýãÕu„Äœ¤Í_{Ç"6)ƒày\u'Œbð|,y`àBÏî¡^;"œ0áL¿)Ç+ׯŠê;ÜÂFK‰ðë´´ét­zòë1If-ØO&’Dæ¿ç?P_æ˜wÇ~î³).C’t•žM§©HR£§­£Ö#í™@Ý’¿Ó ´N”^b§Ÿˆ`¾´
-ÿ!Ù
-“Ê£ö×Õø9×kéÎ_:@dïË{of«é«¢0tŸ€z™²ãc““ÞÖ,í÷ê½{ùæúÇOYÙäî— #-âÎ `b‰=à\̹oÕÑÁ() ,vG¸ ì)O„”#ê~óúê%½X0'ëm eÝ
+xÚÝ]oãÆñÝ¿Â
+DN ÷‹\&ONî’^š\®±‹¶¸PZ¢%"©ˆ”}JÛÿÞ™Yr)­ ú–3p\Îwgfç{%.Sø—&K²B—y¡“
+s¹Ø^¤—+˜ûæB0ÎÜ#ÍC¬/o/>ûZÙË")2™]ÞÞkÙ$µV\Þ.ß;LDž\ÁéìÇ7/¿ºšKm =»~ûöÕ›—¯ÿï&$ÀHÓÙ÷×oþvýÁÞ^rvýÍ«›«÷·ß^¼ºÈ I©BZ~¹x÷>½\åß^¤‰*¬¹|„—4E!/·Ú¨Äh¥<dsqsñ×aÁ`Ö}661Rg (-Ÿ”Hr!
+Qú‘3Ò` Jyá¿‹¬¤%òŒÜYDNZ%š1!½?Óÿ¢H¬ÈÄó°Υ1Ñ™ê$/r=ÇK’Ä\)8?xÈb¶ªª† ѳà î.´[úÔ™‚»jÿPí¯rêgt1û)5éíºîhzÙV<jÚžÔR€0D‘Sµ,w;¯}}û{´’mÕ«l/žT5ðªÅo¨Z€õŒªy,GürùkÛÄÔL牕©WŸi²¦„sµ §uÌ$E>èØbSv]de›ó±ËŒª:%fªªï#Ë@°+”´žœ¶¹¯áPà°ÚæTô*±æªx^öÖ¹ð§ž0…F™Hÿz‰º*Y­S’²=®ë …WX9(¬;-…çþÊÎMS7+Tb
+ë%DŠý§H|˜dûf 6“¥é ÷ì
+%MŽâš? ©‡ä†ÿaÈbSGJðóZ y'”ˆõò³r³™÷ëmDQ ˆ ZxE.Oî#i¸uÓU µ+÷%{DGg¬h‚’Å›‘C™ïc—(r†ÁÛ4ƒ v¾hÅê³$®ÄÈ;@ÔÂV^ñ¬ž HgŠvZˆ
+š2føÖÃßÀ¢Š¦ë²n:RLœržà]ߎ½„7ôd®µ½Ã”ö5ó)3 °-– )ñÈ8l©-´¨hú\ìÁ·.Y‰äâpÙ<ózˆýC–Ä<ø"T¦üª2,ÚNÖÌÀá¶Ì®(% ä =ñSUM!óVÅXaC8ê™S÷«ÔüUi¹ýIÚN™¾4‚2i1[À»Ïi…rYÞ¹Šà(ï4¬›e½ðçï*¾ÀÐw„gWüqØ*?hä×HÒ(ܼ|à/Pñ›º[SÑ#š0ÉÛ^œ$}mé ž˜×9õ Ó@Ÿ:VLà° †8ØîÃZ;ßtšWÓ +pŒ/a|š1„ò4Ëu™?ô8ø^ú5›Õ†AÔ˜µ‚LxÒ-±Â™>)™ÁO©Pµt´.=qÓekWCC˜ªí9S¬i™L
+­läš!Ú_ïë3×Cç2&,¨]ªf˺ÛmÊ#×¥=ºW×’Ò Fé+YºU€ÚZÌ^74WAP§Þø¤²«ü§”£Ô;Îuü¼ªW GUŠÊPÁŽá”·5Î꘧ïZMXý–C·šë’U;änp¬x05‹ÐkÄ *óÃÔŽèíAÿúYpÒE>Éq"g
+á;“vp›®Ã5Hùà{¶E„™›r‘'JzpØËMÊU<kFæ3¢Hça·k±ý1^.8Z&‡±­À€ ±{cïi%è+óÍpøZ‹;5Ö÷pØsœžê¼z7ºÐA†êš§vö6” •h:1eŦì;ˆÁ7UØ™Î!þXy+£_Æ-œ‡¤wÇ&Ý:ÿxý=ÍÐê5ýs04!¹æô9ô ê8Ū\uîÍ€åú4ƒ§©Që2›ža5ÓäÐi»”·JÓ>ÏW“@# ÞÂ¥•»ýÞô±ÈqÖD¦/fåæÀ8¤2õÜÉ€;B®»X×SÛ$³ë醹/“FïXè@9© lzóçë¹pbl¹O»GêGÈ·yÅû H<~aœæÖç ÛòèíE¢D¡¦RFO¡¥ » w“6˜JrüÙ
+»~Þ˜Ù»š5¯; ±CÀ¡Ë’Xs j:#Šû•?æ@éPz¥tþÍ·•aжw.†Ë
endobj
-2734 0 obj <<
+2755 0 obj <<
/Type /Page
-/Contents 2735 0 R
-/Resources 2733 0 R
+/Contents 2756 0 R
+/Resources 2754 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2708 0 R
->> endobj
-2736 0 obj <<
-/D [2734 0 R /XYZ 85.0394 794.5015 null]
+/Parent 2736 0 R
>> endobj
-2737 0 obj <<
-/D [2734 0 R /XYZ 85.0394 177.3318 null]
+2757 0 obj <<
+/D [2755 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-2738 0 obj <<
-/D [2734 0 R /XYZ 85.0394 85.432 null]
+2758 0 obj <<
+/D [2755 0 R /XYZ 56.6929 104.0524 null]
>> endobj
-2733 0 obj <<
-/Font << /F37 1042 0 R /F48 1258 0 R /F63 1385 0 R /F22 977 0 R /F21 954 0 R /F53 1333 0 R /F41 1238 0 R /F39 1178 0 R >>
+2754 0 obj <<
+/Font << /F38 1042 0 R /F49 1258 0 R /F22 957 0 R /F21 954 0 R /F64 1385 0 R /F54 1333 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2741 0 obj <<
-/Length 2959
+2761 0 obj <<
+/Length 2725
/Filter /FlateDecode
>>
stream
-xÚ¥ÛRä¶ò¯˜ªó“0Z],YÞóIJlB*Ër¶*UIÌŒWfl2¶!ü}ºÕ’oãa7uŠ‡‘[íV«ïÝF,8ü‰…6̤2]$iÌ4z±ÚñÅ=ìýx$<Î2 -‡XïnŽÞ|PÉ"e©‘fqs7 e·V,nÖ¿Eìø›Ÿß|Ðj€,Yp  ÖçË÷gììÓå‘•I¡Rzzuu~ùþâ×ã¥ÔÈ/5çÑÇÓË/§¿ìê8•Ñéç×Hìèü¦»Èð²‚+¼Å_G¿ýÁk¸óÏGœ©ÔêÅ3<p&ÒT.¶G±VLÇJÈæèúèÁÁ®{uVx‚3©Œœ‘ž !Xªµ‰O§Ì(©è¶_n~úô™¤"å@*|weVjëð.Ê&ß•yC¸~©›|[ÓÃYUÖÕ®)Ú­'§ÆLÅFz:±d cÓ©‹Ðb;D‹³q’xìÊõŠ­ªònŽâ2à.•éºÈe¶Í=a1¹FÊ´Ï–có’Ö3ø]Ê„î‡ïÐ
-^üsyß¨J"d“÷Œö_ŠK•0!cí_¿”Õc]ÔSãQ‚%Ö(`C±8QfNÙ¸•`æü€%€ ƒçö$œ!ŒDì Ã: ñþ"||ƒ÷ç×gŸ/®n.>]øÀp^•xÂdʃÄA$ Q59.fÄ»^Üá®ÚuìöTO¦7[š9[r¼¼Ç9z‰éO~wqùžŽK P¢u9@ïžò]Ç`³;6ª6´Ù6Ŧh^Ž…#dtó@÷âÎEôy`†¬Ä¸d<ù.IìÛêb[l2<Lꨆ£lÔ®šÖ™4+×~û¥l²¿iÝT3z1·1±¿2Þh}P1)KP ¡bT:ºn2pú¼ljô¼\mª:wÌÄQQôv—­òzÂ)’mQ-ÿü\4A
-œ œ,;ãƒã3ð³¿-–«jS•ÀO¬âèl“µ5R—ŽñDÄr*D@=à7:nÝæ®<ZGÕ¿ß1çO¹ ÛºÍ6„´ª¶HÙóÕ¼lá¼ ߢn!Jæë·Ý®eZÅä%gK­· Á£7ßìû7³/üðÃÌ+oÖTô›£ÈqQÝÑï¦(ó9j_Êâï}rÿùFjû`Hûk!·sBôÛhÛ®p•¢ý?nÐÙÜ<dåÌi©fÊv4þU+žzýÂaÁ=ñ,oW
-ñ`½&5×5ÐÄÝýøð/1
-‹È±›Ä.0JB<ì>TuC«çb³¡Õ­³õÑöòÒÓ­ð—èûôë@õ¾x
-/d”…gÇö}ë5ûåÔ%&÷-)ï는 ³‰´=¢yîS5)ãR›©¥õ÷K‡J¨S¢L½„“z­XÒŠ%w@øóC!cH³XƒD
-4Ð)Ýlî>©`"1Éù‹HÁ$Ó¡c,ɸb(1 ÌPÊäŸKcLtŒ‹úÞ?‚ Tþª?»XÏœ® ЩÖJ&©üx*À*×î¦
-Z
-;®„÷'ŒŠAø1Ãbi9Rë½ö½<T)j¾ >4Ôb¸A1 ¯Ð
-ý•
-u¨êãÈá@Àquë‘|¼BzeÝä™pE¼;%¸0¬Q1®ûVÑyæÔ6>T}ƒˆùÄÙ(^JeögN+‚hÌß5 …»)
-ͲËpüà³ ¾2Ì.ˆ2±ÍÿE9Ù9ôR±|½×ŒóÔîÏ(bŽ¦yï&¸v³E(ó¹3„Pcx÷â(Y` RB)xà
-Uº-dÉxk).¡.ºã¢y®B›ÈO :ŒMöÅ–UÁ,³Í}µƒÛlççèB¨nŽÖ·¾˜_”EJIœÒî^B =Q÷x`žž@Éd»þéÐð
+xÚ¥Y_sÜ6÷§Ø™{¨Üfþ™{r§u§qr±3s3Mä]ÙÖtWrW’]ûR+ÉÚ8Ïx)A
+GËa¸û¸!°X•ea½Ëæ.#ïRê”sBθ&ÈnÂ¥\J=+wȪM*¬uAƒ¯Bdû(¡¼ø•1qۗʺ""R6ŬÁ£Ä`oGÁûTÕ÷MÙLqh
+¨íy4Lìƒê ½žWÄWßc†j&\¯h2bÂAIÃ'qò Y?¼Hy´xN?O¾t.4pK3ð‡ÝËýQßçVR*uLÄ®q dTŸðò÷‰Oh²‡"Ì4–RÁ((PFÙëâ&ï6í2Xà¹*Ö`+;­@«•Aƒ›z³©}"§ë'ú¥4ƒ*ôP¾¸N•bÛ×>µB:X¯ÉÍMC q?A?!û LBÇ<ñêfÊçE!c†‡Ù»ºiiôXn64ºov!9ÂÜ]Q¹5þ²‘üP]`¥Þ–ñ…<òøìվ킇€Sÿ¨"²qBýžŠˆ{Sú€#E–ÚL؉1<ŸK5.eB›©… ûsC'Õ;Q¸àD Dã¸àK^±¤?Þ•˜2†2Ë5X¤Ä
+0‡Q0™O°ÞŠM"ÂcŠÀœ
+֦̃hœ¢n#§®{@.ô›x†é/OnÚ}S>çÅÓ “×KyÙÂ1ݪ}Uy¬½ëW±÷Ž]wl‘‡½5=–pììÖEh¼ópnhwïž­lÀèåb»FiÇ·ða…Q3ˆ„pËàïW¸Ð“3zN(]Š¥/è 1üÌ ™†Wè
+/ueø‹÷›Ògêº#Ã8sx%p]¦¯P^Õ´E¼ÅcïW‰†1:ÆŸ¾er–{·W#—ù+6åK¦Ìÿ,hDõª”pI´»_†û^!ðÎÓ@ó/bwûb ±:u¼7i¼‹Ä^¸ïïªL¦V÷§€:(<tŽ¯
+êËðú!T|eX]e#šýƒ:r ²38K)ñí³~Kqöù…bš·þ†ÇþjÚ|æÃ)t0¼yò T,°…‰%©”<p„®@ýªîw3k)/ ‘>»ã }¬ã11ÍŒšt¼6ynl¶¬Œa™onëìf;ιìïÑöG_¬/2¤")^ÒîžbŸ {¡þñÀuz-“íÏO‡. ¥ï™|7'};óoìëT²êvá[V»y¢Éº¢‘H~ùprºüðN‡{2§¡û’“[`ªÞfÚ_àÑLÖsìÏ,HÅ3 RszlŠéѹO‰0î{…áEN„Ž„åM±4Š¨`ÍzŒ ;äíûC3w<ôE¼Ü a…—¯Wû%ýÅ_èl`\6ñ^6Þ¼{j·®;ßBàø¯NYcs~¡%Ưµ3_”Xÿèÿþ(¼ÿ*®²TZ+öß{GAÏðÛãQ)´·zªzÿùø¹îÿªz'Éendstream
endobj
-2740 0 obj <<
+2760 0 obj <<
/Type /Page
-/Contents 2741 0 R
-/Resources 2739 0 R
+/Contents 2761 0 R
+/Resources 2759 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2748 0 R
+/Parent 2736 0 R
>> endobj
-2742 0 obj <<
-/D [2740 0 R /XYZ 56.6929 794.5015 null]
+2762 0 obj <<
+/D [2760 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-2743 0 obj <<
-/D [2740 0 R /XYZ 56.6929 752.1262 null]
+2763 0 obj <<
+/D [2760 0 R /XYZ 85.0394 752.2635 null]
+>> endobj
+2764 0 obj <<
+/D [2760 0 R /XYZ 85.0394 690.7232 null]
>> endobj
918 0 obj <<
-/D [2740 0 R /XYZ 56.6929 713.2318 null]
+/D [2760 0 R /XYZ 85.0394 652.8084 null]
>> endobj
-2744 0 obj <<
-/D [2740 0 R /XYZ 56.6929 680.2418 null]
+2765 0 obj <<
+/D [2760 0 R /XYZ 85.0394 620.2487 null]
>> endobj
-2745 0 obj <<
-/D [2740 0 R /XYZ 56.6929 644.7005 null]
+2766 0 obj <<
+/D [2760 0 R /XYZ 85.0394 585.1376 null]
>> endobj
-2746 0 obj <<
-/D [2740 0 R /XYZ 56.6929 578.8284 null]
+2767 0 obj <<
+/D [2760 0 R /XYZ 85.0394 520.6753 null]
>> endobj
-2747 0 obj <<
-/D [2740 0 R /XYZ 56.6929 518.8431 null]
+2768 0 obj <<
+/D [2760 0 R /XYZ 85.0394 462.0998 null]
>> endobj
-2739 0 obj <<
-/Font << /F37 1042 0 R /F53 1333 0 R /F21 954 0 R /F22 977 0 R /F48 1258 0 R /F41 1238 0 R >>
+2759 0 obj <<
+/Font << /F38 1042 0 R /F54 1333 0 R /F21 954 0 R /F22 957 0 R /F40 1178 0 R /F49 1258 0 R /F42 1238 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2751 0 obj <<
-/Length 1703
+2771 0 obj <<
+/Length 1786
/Filter /FlateDecode
>>
stream
-xÚ­XYsÛ6~ׯÐø¥Ô4Dˆ‹G3yPlÙq±L&ÇMB[ŠtD*ŠÝæ¿w)J¦ãxÚÑÅbO|‹…èЃ†’x<à DzT“ùÀ^ÁÚÁ€Z·ar»\/.O÷y0ŒHä3x1íÈ
-‰†tx‘~rƧ§“ã½Ã#—IÏyAF®ô<çh|ünüi§£ˆ9ãƒÉ9L™|`¢!}¹xõt_òŽ|E$R›¥%Ÿïí’Ý“ã}Í:˜\´öv}¢×Æ~|úâ SpíÕÀ#<
-åpÐ(bÃù@HN¤à¼¡äƒóÁÛV`gÕlí‹‘ä!‘! z‚ÄèRIÉ6¢$#âsÆ/“ã£Ó7tZЮӒ„¾”CWxDÐHöòºÎÊ¢¹>Äòo½«Õàâ
-lÏUjÄs×F‘Q"/Ú £=ž”R‡˜êáì–ó9¯tmgN]Ú¯ÑÂè†u@o€%ë=PÑÑî¶4½ÑùDOg5Ë’®Ì—(šÂª¬òK+$UŸ=Æ7 gÅZIï!CÓáü¦½ ') -áj¹ˆu9ÖÄÐÑ”\!Ã
-0ŽÐrXËíbÑŽ0øzòˆ†ŽªuôàV¼˜YtU³Ôq­æª¨‘ži–
-OÛ´\ô÷V¿š.Öé}ió¡;ðý†£Õv¼u`t½ÈtH,h8 å}$hÖô1¨ñáaÖ<(¼ªÇ‘²ðgˆ¡‘O„~ÛlØ­’Y‰}ÚÎ_E¹*lÿ›ÇÚåï¶ Öa6ƒØv³¦kÛÁÉ?øÙ2nãݤ;JAcø:MÐïóÉÙnå÷ð1sý$<<xw6ÖѼ8<9¾Ä!¾ÀãkîYN}{)s*Ûê©©ØEèÑ¥]]_ý&)®øÀ7Nu]#'^šj‹4>Ü [‘"O³…%åU‘ÝZƒ‰Àƒï1 T×*É´òFkVôÝ‘¶Ù†ŒO"îG¿R‹€“wjgQsCpÊó8¢O›¯h(NEO³¢×8E2üÁkn¾Ær¨4"Šœs¥¶ì¨:ææÚk–ûê%ÁÃß’ &›}H§ë4xmê;÷págœÎ³"«j
+xÚ¥XYsÔ8~Ÿ_1•—uj±ÐiYKñ @€@v‹âxpÆžŒaìa»ü÷m©e'q6¡¨y°Ôjõ%u÷§aS
+?6U‰ 7Sm$Q”©é¬œÐé9¬=›0ÏvLáëÑéäþSO 1¦§ó¬˜Ð8fÓÓôCðˆ°˜ì~:}qÿ©’fÌŒrP`¹Þ=yL=EÎ-±\k¢™0žuïädÿèÉÁ»Ý+
+âwCEip¸wôçÞ+¤ìì=Ûk…MöO{G†Î2*¬_&>Ñi
+>¿˜P"L¬¦k˜PÂŒáÓr"• J
+ÑQŠÉÛÉë^à`Õm £„‹ˆDó±è)C"Á…söt‘-wYd»¡ ql&:h×5RguYÖ×ÉeƒÔ¶FÊyVeˤõÚ…ß}–4YI¤6í2¯Îq<¯—^þÂïi²êm!Ø2æÖ*\ytpô™ .c}¾LJ<IÎ.JnˆV<ö'¹¬ÒYhÙ¦a¿2FŒRÜ1Ìêjæ{IÃ` C(íoÏ,﹌ƒ³Ì~u°j²)6
+ö»‰‚]O¸Lª´.qü9»ÜeŒ÷pjƒ`9m®;Âà†sª…×_–Y5«ÓlÄPÅ ©ôŒƒðx=IÑx ?Wõºòæ5c:iL¤¨2ÿ¥‚0Ñ+½çC¬¡Šë+!v¡‹ †NÓ.t@q¡ƒï t°žxöîúØIw}ìú],q¥s
+†yu±jɈc<RD™èN±”0öŒi5(¹ª[ÔÝ,ò $­óv#¼¢vÕxËW-D@a¢4ø€`½Ê,"É×$/’³"éÍ/û-“êGÍeÓfe)! ÞfžÑeì¿Û;<yµï™³Y›w2\†9jR^t
+lÃuÄI‘WYs…9Kf‹Møú3œC8B µƒKåèô:N¹•4ŠÄ‘RÀn7c©/¬] +‚"ú L'z랤Ù<YmØd˯P’BÆ¿¨gI±¨›öÛH·#Ùm±™ÅvþÂùÃQM?zaRAîxj§7ª½Õj§ZÇ·«fwTÝfM;œß¦›K¿©×L·¹’4]fM“õ'0æáE½ô#%”x€Ã?ï‰3)FãV/’â¼^B2A>K{ä‹2™…eªF±"CKi°==œÿ-Åqó]—g\d<¶ÿÝsV/Ž/¾ïü‚>ª?ãAtWܱí¼Ïâ“èÑ˵y¿~·>½¹zýðᬾR¹Â>õ„ BPd=på¾+ÂÉYý5CZöÍѽ‘z ½G3&MtD#ç$VFy¦u^(÷ìUùäD"Ô|¤¢%’öwÞYå¹—Ò’?RÀ2\
+?†\XƲ0€Û ìËîúÖÏ8#JS³}þzÚŽL\õc´e‘slNöë´p¶eÐ{`É{Ttt¸m –>DÐÔ"Ÿ-p¥\¡hÖµl y!iöÀHå|r^m”ŒÔÅÎ4-ƒß¬7Z[ c%œ¯ Ïb›Ðq`)®;
+Úï’¼Í*/¶Š×ö
+•¥a¨ýJ@¼­µé2Äר«7Éût°ÕgDŽ!BéŽÇÖœe]4cq…«
endobj
-2750 0 obj <<
+2770 0 obj <<
/Type /Page
-/Contents 2751 0 R
-/Resources 2749 0 R
+/Contents 2771 0 R
+/Resources 2769 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2748 0 R
+/Parent 2774 0 R
>> endobj
-2752 0 obj <<
-/D [2750 0 R /XYZ 85.0394 794.5015 null]
->> endobj
-2753 0 obj <<
-/D [2750 0 R /XYZ 85.0394 751.3734 null]
+2772 0 obj <<
+/D [2770 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-2754 0 obj <<
-/D [2750 0 R /XYZ 85.0394 109.3471 null]
+2773 0 obj <<
+/D [2770 0 R /XYZ 56.6929 668.3939 null]
>> endobj
-2749 0 obj <<
-/Font << /F37 1042 0 R /F53 1333 0 R /F21 954 0 R /F41 1238 0 R /F22 977 0 R /F48 1258 0 R >>
+2769 0 obj <<
+/Font << /F38 1042 0 R /F54 1333 0 R /F22 957 0 R /F21 954 0 R /F42 1238 0 R /F49 1258 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2757 0 obj <<
-/Length 2475
+2777 0 obj <<
+/Length 2497
/Filter /FlateDecode
>>
stream
-xÚ¥Y[oÛÆ~÷¯Ð£ TÛ½_Ð'7qs\4N;À’<Ðe‘HU¤âúüú3{I­,÷°VËáììÌ7ßÌ®ÈÙ‰¤¡f¢ G1™o.ðäž½» Af…f}©_ï/~þ©‰AFR9¹_öti„µ&“ûŗ鯈t *ðôÓíÛ7³7n{w}{9#†+>½úøñúöíÍ¿/gT`IŒ§ï¯n?_ýáç>^:½zw}wùíþ÷‹ëûdVßt‚™µé¯‹/ßðd;øý#f´˜<Á 6:Ù\pÁàŒÅ™õÅÝÅŸIaï©{5ë
-‚e’f|AÉ„d„ gƒ$£Ì9ãîúÚoêê»v?ðíyOà)F'¾«ó¯X` ÿÈOþM;7›7õò±¬ÇÏ6›²ž7‹ÒÎ?ïÖ`¦·Q
- cìãssûÖ¿m‚i‹MUWm·+ºfç§>•ËrwIôÔ—~ê}Qï‹uf DjD¥ŒêQøfƸ@šA
-vfà ©h¨
-,0ÄÔÜÒVÿ ^¬1Óœ‘ —tÎ3:!fZ
-qP¹¬Öÿ@å*¾g”KØaü ¼N¨xòíY{·
-‘«v»fÝfVfq©"ìíjmiBèDr%Ô ðJÔÓv
-Ò˜0:†bмîšÇ6¾»„N>ßé¬g lÀ¡}wô¡aX@ùb—Ò—Š øq—’¤¸ê/)92†è——ŒB™%™CÅÈpÉ·Ž
-Çꚥ#@€HÉüsÙÍóÈUÒK`—.`ãÓ
-Ìþ‘-ÚЬh&"·Ï­M‹Ô/ ôà4´XyìÉV0E Ý–óʺ櫈žV¶…µ#6rsñáþZwöhå¿v`ª;ÊN« ütZzuŸ ðßqà©€žRRr&òq’ˆïD]½bmú —Ιƒûš°MHë]·ß"[ (`(ëK*å1[ÁIê­yùdaƒÆÈŒÙ
-ó©=³bZ;°báÀêf—Å~Ýù/óf³ñ¤s¨Wu¹öOÒ,äØ%™Bø ÍbÏÓþÄe×ëæ)_åž‘q6›.Wv‚eûÚ.YŸ@5cT‰!ƒ»˜Á
-¶ûTÞ®‹yê¿àE_Õ{¶ª©Ž-GXËQ*œì™Hýw~DÂABEýéTPm.<–m¼D!£ü»j;ß\Û ¶tÛ£s´­À*•üz®>ƒ\¢ö†ÉŒ t³´ëúƒƒÄÓMã½ë'ËuñÐØ£ÿz|òI ÚèóZâ‰iá<<çò‹Ã× Ž}ˆšÓÕ*‚ÇUUõ6ÿµ¯ü`ac"i„ìãïb³]G
-höGçð£:\Ù‘Un?mèì§E¨ý„›-‚¸[pÓt½î›q=}nö^ ]5ûuvwÆööòPJΟN…IÍ¥^ëmÍvñPÍØ‹<´R¨Qoõ9
-wÛ(Ã
-¶…wO28…ÛdìÚ3§BªSéI9És’ÿsô!ùs@$:ÕÜmoÙ™æ¶/uº¹MRÎåá–M²¡ËµIï]²õM#
-ÎÙ™h÷¤^ˆv”rÑžç¢mN2÷ŸƒhÑLIèN^´-IeŒF›ÙþodÝçP]ûõ*Ïp¶b*íɃ¿N­Y:ø÷ªëå—Ïñ䛎§îÆ¢×"ÞLWgCÐpÈzň+膱êÿÆ‘ >VHLÏ¿'õBð£”sÓêè+6êÌ’Q(³ä öAOgËö`É»*´@ØÕpëõ•½°öÃ=4绀f9êA|ÈÚñÅ„#ËÇ}ê­\<óœRª^Y´0´ÞŒ ´(TIòrdzB§…\\¾¿†‚ãïY
-~É°Y–%à¾iþµ}lˆŽŒ?HIWñüÈG°'¾’G”5Øžù’n!àÁfïÏ"2µÝ…ÿøQ¬ÝÅ ͦ¨êƒ(K¿~÷QcÎXᨦӱÊæËåx>eYªÄéÂëÿþúðK;·wäúD‚ÂÑÁË2e 'šc=üV}lûE}Î6endstream
+xÚ¥Yßoã6~Ï_áGX³ü)’¸§t“î¥è&{IöpÀî>8² µ%×’“¦ýÍ-Ùtœ¢ÉÔh8œ~ó ÅFþØÈ(B…•#m%Q”©Q¾:££'xö錙i'4íKý|öÓ/ÂŒ,±ÏF÷=]†PcØè~þm|þåËåõÅÕÿ&S®èøg2™*Jǟϯ¿žÿæǾL,Ÿº¼›L™•Z‚³(—ÑñíõÅÇéÇ›ë_>]^O~ÜÿzvyÍê›Î¨@›þ8ûöƒŽæ°‚_Ï(Ö¨Ñ ü  ÐòÑêL*A”¢YžÝý'*ì=u¯¦\¡„!Êpðg#ƈUŠœ¡,ÉÎ×çŸ/ý¢ï.o'°ÔÿÂÅýÆ5^}úz{ŽÎ¸¿ºq«¼ç_:QB%8•Ý/ŠÉT°l\ÍVîN›bó\lüèjÛ´þî!<Íëê;¥üi»™03.æþi[ûë,Ï‹uë%7Õ<÷£ðNUämYWM«æ^¦{Ï+Ë맪ü+Ô.ÂŒ¿¯~¤Yy‰“w³–.—ä}æ“_të–ýu³ŒX‘YF´€Y )dšIœoY|€ ¹o›²z¹EgžÀŵÎüzÙø‘¦µÅª¨ZÿÓ[y`ä‡2atþü¨=–hH€
+9-­ßÅžMÏÃb\W»Ç‰ÙÁ_ZHtº% ù‡“O%UDsø1y oô–ˆ‰KtWgŒÛ¢W×þÎúËù|UVeÓnfm½ñC·Åcáã^åáµÏ³j;[úûÇNn^´³rÙ`Ý`ƒ@è…"B
+í̺» ;ãü·»›ÓÉYð*jàûàßı)F⩨öŸ­`Åy=/pœùqï[Ú÷­ÖDi®‚oÿ™'—À2Cx–e1^™
+©ˆ€Mÿ÷Ííi·\Um±©ŠÛ»×BÝ„«7m¹]íæ•0CÖECR"mæõ S:ôj·g…$ÖÓ}Ò†¢ Ó1^Q‹³ç;çz7çðo@ª
+ µÃë,Ü@5«WG|áÁÛì«oNš;›Ï7EÓ¼ßíI•ùbS×í¼Ü¤ìú£byŒJ·'•n.¤Ü*¥vê’ Å80%3Ü|—wo¯¾ôÈ KUÑ#„SÞ¥T@ƒ‘ÌØé}±X€M`RMZwD"15Ô¢W²¹_µaæY˜ )^Á…s7 SÏ¢ÏEUú2‹ÃKf°÷9¼‰ô ¯/›²:\ aä^½v´…Ûì° g}9Ò’›9òš§ãV`‘öm|UkÖu5GîOqeíi&",‘Y¤e8[B›%†1¾‘Tµ¼Òé‰D¦ñ6'ÉZ;Îþ²–q`KN^½Ö˜K||$ÖK+í0>ç»È._'@ÏÆH9$؃¡—2$T>i``31ãm{)Û…áºEÂL¤{ÓYÊ-¡ê ¯×aSHÏÑQwã l×~`–p•6ÄRÆú™”ƒÂ¸k¾ŸH Þ'ê®Ëy°a–]Eòüðˆ `Bi=°#ø
+¢Þæ?¶e8[Ƙd¼K XÇŸ³ÕzÙ¡
+
+Ž°ƒQh83zßôø­÷Ðöÿ_(¶¹endstream
endobj
-2756 0 obj <<
+2776 0 obj <<
/Type /Page
-/Contents 2757 0 R
-/Resources 2755 0 R
+/Contents 2777 0 R
+/Resources 2775 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2748 0 R
+/Parent 2774 0 R
>> endobj
-2758 0 obj <<
-/D [2756 0 R /XYZ 56.6929 794.5015 null]
+2778 0 obj <<
+/D [2776 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-2759 0 obj <<
-/D [2756 0 R /XYZ 56.6929 752.1993 null]
+2779 0 obj <<
+/D [2776 0 R /XYZ 85.0394 752.3759 null]
>> endobj
-2760 0 obj <<
-/D [2756 0 R /XYZ 56.6929 689.9994 null]
+2780 0 obj <<
+/D [2776 0 R /XYZ 85.0394 668.0781 null]
+>> endobj
+2781 0 obj <<
+/D [2776 0 R /XYZ 85.0394 607.6906 null]
>> endobj
922 0 obj <<
-/D [2756 0 R /XYZ 56.6929 651.6264 null]
+/D [2776 0 R /XYZ 85.0394 570.577 null]
>> endobj
-2761 0 obj <<
-/D [2756 0 R /XYZ 56.6929 615.3075 null]
+2782 0 obj <<
+/D [2776 0 R /XYZ 85.0394 534.8112 null]
>> endobj
-2762 0 obj <<
-/D [2756 0 R /XYZ 56.6929 583.553 null]
+2783 0 obj <<
+/D [2776 0 R /XYZ 85.0394 503.6098 null]
>> endobj
-2763 0 obj <<
-/D [2756 0 R /XYZ 56.6929 518.4312 null]
+2784 0 obj <<
+/D [2776 0 R /XYZ 85.0394 440.3004 null]
>> endobj
-2764 0 obj <<
-/D [2756 0 R /XYZ 56.6929 447.241 null]
+2785 0 obj <<
+/D [2776 0 R /XYZ 85.0394 370.9227 null]
>> endobj
-2765 0 obj <<
-/D [2756 0 R /XYZ 56.6929 349.1756 null]
+2786 0 obj <<
+/D [2776 0 R /XYZ 85.0394 274.6697 null]
>> endobj
-2755 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F39 1178 0 R /F41 1238 0 R /F53 1333 0 R /F63 1385 0 R >>
+2775 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R /F40 1178 0 R /F54 1333 0 R /F64 1385 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2768 0 obj <<
-/Length 2199
+2789 0 obj <<
+/Length 2249
/Filter /FlateDecode
>>
stream
-xÚ¥YÛnÛH}÷Wè‘F¾³ùèLœl‰ã;À
-IÅp°¿Õ7š¤ZÒ,Â&Yê®Ë©SU4Y`øGJ Ì2¾H3Ž&b±Þ]áÅ#¼{wE¼Ì*­ÆR¯®^½eé"C™¤rñ°í¥VŠ,Š/ÉõÝÝÍí›÷-WTàä5Z®ÆÉÇëÛÏ×ܳ»eF“ëw7÷ËÉ„  D±‘“8yóæö~õû§Û·ïnn—_þ¸ºyÔ«N03:ý¸úò/
-°à+ŒX¦Äâ n0"YF»+.œ±ð¤¾º¿ú÷°áè­ýiÌ\($(—‹•V$; # /Áa£Œdjp%1‡)ã°ÕÞúê­d#IBÊhfEöºíçÞ à3ÅÅb|â‘^A(¢ŸFRTλߗëêoŒiÙ-W,“I¿-Ýb­w»¼)ÌHÖÛ¼iÊÚ½±šÚÕÓ¶l—D%¥³nâŠ1‚e0¯ÉweáÅÆj1Ž2–©ºêú²ñªltTÃ×}¥Ý‘lì©z9–0€æÜoØ6Å:r*¸Œ‡,S®’‡­5à€)”@j@„ x­TQnòCÝ;xW»BøЄ=N$d ÍRrLc©Ó`¤,˜Ú˜2$ÁjœÞmªº<B”àˆgJ×nŠ¨7Á”ÈW˜Lõ›bJð$7‘tú`ã¶.Ýc½qW§­“)ò>wO]ôañX6e›÷UóèDBͶ‡~«ÛêWnA””%ïýž^H$z~ìb›!Á8™†¶{ÔTÒ¤ÐFk*IÒèÞ=Ú;´ý¬ŠÒ=ÈÿùwDÁd>
-÷¤jö‡E¬T†L)™À ôŒØ($b< þèÆ0'8{`axÁ­¬òpÍÝ(§Í×}i¼c€a½á%[w5ÖþpDŸWE‰¹q>Í2`Ú`¼©šqb¯Í'ßJwèÊÂ=©ÀE^¸Çη8D‚„H
-1…âHè4ƒb­¬Ð:…€­·­Ö}QµGHä)üúÌsš BǪMË*E׎uûìh)Ë’§ªßºU¿aLB£ÇTÈœU‰'„Œ¦2]ï Vü–Ú]-mžÝaÊ ˜¥raZ÷ºõoÎbºL8¹Œu託zªêÚmÝ.UrðZÛ-‚uoø v™\ûWy±rxd„Aþš¦eÂó•±Íñ1ƒÌØ?K%{qá´Îaª”Ž’Þ g6$ªW¶uÅ„%OmÕ/¨ËÆÝ;gÕБüô®üEl–˜?s3¼ì!Gø,©üŽ„ýg§nôÁƒyôüRÇjš®CBŽ ¥HQ*éEÖ‚Á"crLÑÜ¥I¬.4Æc©3Ù¤,Ô§,(pí©)ë¬^Ôu¬WtÊš(æs׆Ëæ®ä§r—£4älî‚—)Éæ¹;@‰']Ù¿€Û.ôSc)³ÜÌΟ¶±ŒB§ˆ³†|€¾Z18Á7ì6S` zòcCSÆ+x''dðrÐ%Kòº V•¹ð Ls³)ÄuS?ϪÏKßhz¼ÙË—LðÅÉ%cî/QUïÁµÂáGß@Ys=6ЄÁ ‹%”KèFÒ@ê7]¼ûps±ÃO$ÂJ¦®°š*Ú«T×ú)âSì!ÍÉ…RNM
-©ÜëãЭ<RaÕxè6–H…m1Œ­¾~sO=e;X©Ñ¡+ ¦†}XOÅ á
-vÚ<z”ÇïøÄ KÍ*3.™eî.]¾Û×QJ'ˆ± ®ÍÉñÉEñ9®í ök6³Fëû•½††ÜÍ–óâ‡R„Þ1ãI«ë.Æš€Ú”†Zl‰ìK"GãBŒ2$EöézÈÀ “Ó¹÷ûæqÁ4©aîª&QJLS7ëê€4û€ p¸Ž¸kŽù¸@œôof(.Dâ"r†Â•fÙèDÒ OóìþæÆsýáþÓ¹dSÃîcüG‚†2æ…½°ÆŽ¤íédA”˜zýþöÿ|ä•*v0¹v=ä’öTòg¹ñU³ö©ùÑ¥_$ðÒ “rRwè‡AÙà¼7ñËõç‡}úó²CÞ70ˆ7¥§Ä{û½Äóßï0e趯/Óá0ûË0^ÁÎtDñB
-©^M7Ž  OLæn͇¸b0žQîhq²‹#wJS?‚×Ñ$Œ]„oI:°¾Öõ?Ïs£÷]u4~JC¸Ð¥
-(ÓXã`2—
-“ç¿)¿ì`›
-ý¤ì…Ž 7Üù%§˜ŽÑI¢Bºåõ£†–t»‹¤°€Fœ§F_îÛaõ=²? ©ÆGpt3ÄmÊІqFæ›·‘-
-¤ˆËœ«l¹DÍwí.îzBK-¶û¯I¿"»­XfèÆ– QþÒMt[ð¬ùkÆLÍae´ùzêO! ¸ùûE>x€ìÿýg’—?ÁˆÊ”¢ñö–anª( JsˆbsÕSZ·4¢ûd¦bendstream
+xÚ¥Y[oã¶~ϯð£ Ô\ÞE>f»éž»Ùtã
+´}P,9V–\IÞ ýõÞdI¦ísp ¢©19œù曚Ì0ü‘™Hjªg‰æH`"fëÝ ž½À»7ÄË,ƒÐr(õ~uóî¦fiIålµ¬¥VŠÌVÙó÷ˆb´€%ðüLJ§åÏ_~ùx÷°X-ß>>Þ=|¸ÿ}±¤ƒ0Hb<ÿ|ûðíö“›{\hûx÷´økõëÍݪWk¨:ÁÌèô÷ÍáY'øõ#¦•˜½ÂŒˆÖt¶»á‚!Á 3åÍÓÍoý‚ƒ·ö«1Sp¡ \‚QJ‹Û‹À+2 Ç(Qêh/Jbö
+RÆ^ËíôœR"¬9.v²eŠlI[&áDM¶|lŠªkµS÷h·uÓùáa·K›7÷¡Þ¸g·Íýľ+ê*|¹Êü Y59ìò~á®6çšX€r(¥ œÁ(ÒTÙz¹®«ÍK^yé¡òüB{¬0:Áƒ·z‚á+JË+®H]pM²®ùî”’| IRZ¥¾çoUºË§ª‚g€–‹ºõRåèhK8«´{ÚçëâOŒin-.ƒ¤QÊ ¬jväü81¦w£ô
+„°ù’Q5_m ¿ÇîÐvnôìJÝãGZ™fõ.-ª£Öq³%cHf ØC¬®²|“JAØÍžÐ@‘Pœ¡cÔ<… O¢8¹)D™¸›¡ÔyØôR6û«°Ù›h›è¥)âZ]Ñ+Eôš@'ˆ'z¢×0L{0˜Áº†7±Ì´˜¯·iUå¥{cµ£×mnƒ<…5ƆátÆéYÄ1Œ#Í’ Um—W^•MÝU`óµç£ÎÆîZï"Û´ŽGˆì
+éˆ'GÂTv”S„)ácTNÁhŸà½óX¢qu.›öXH]ÀR²Xj"XÒH*&éÁqõnS”§$D%"‚²ËÚõRõF$Ä"ŒÉ±~cL nè€ 1oëƒõÛ:wÓ†ÌÓiëd²´Kݬó> ä ðPõâDBͲ@RuSüc9
+œ()›ßû5½€Ü¾ì|«‘`|B8í  ’QYê”d^Õ›Ú;´ý(²ÜM¤&"DAÁ ½Þeùwþ\‘¢ /kÎiVÍÿ>À˜@»nX¢Xç?™þÐV¿† 2´¨yižnç*o[wj¢$J„ãcþÆ|®]¶öl]TûC‡"§T¦8¢d3Ð3rF@.ºñ’íÙ¼tšŽ|ò
endobj
-2767 0 obj <<
+2788 0 obj <<
/Type /Page
-/Contents 2768 0 R
-/Resources 2766 0 R
+/Contents 2789 0 R
+/Resources 2787 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2748 0 R
+/Parent 2774 0 R
>> endobj
-2769 0 obj <<
-/D [2767 0 R /XYZ 85.0394 794.5015 null]
+2790 0 obj <<
+/D [2788 0 R /XYZ 56.6929 794.5015 null]
>> endobj
-2770 0 obj <<
-/D [2767 0 R /XYZ 85.0394 465.3449 null]
+2791 0 obj <<
+/D [2788 0 R /XYZ 56.6929 390.6346 null]
>> endobj
-2771 0 obj <<
-/D [2767 0 R /XYZ 85.0394 333.447 null]
+2792 0 obj <<
+/D [2788 0 R /XYZ 56.6929 257.7108 null]
>> endobj
-2772 0 obj <<
-/D [2767 0 R /XYZ 85.0394 269.6416 null]
+2793 0 obj <<
+/D [2788 0 R /XYZ 56.6929 193.2733 null]
>> endobj
926 0 obj <<
-/D [2767 0 R /XYZ 85.0394 230.1531 null]
->> endobj
-2773 0 obj <<
-/D [2767 0 R /XYZ 85.0394 193.3443 null]
+/D [2788 0 R /XYZ 56.6929 153.3455 null]
>> endobj
-2774 0 obj <<
-/D [2767 0 R /XYZ 85.0394 161.0999 null]
+2794 0 obj <<
+/D [2788 0 R /XYZ 56.6929 116.3439 null]
>> endobj
-2775 0 obj <<
-/D [2767 0 R /XYZ 85.0394 94.3727 null]
+2795 0 obj <<
+/D [2788 0 R /XYZ 56.6929 83.9066 null]
>> endobj
-2766 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F63 1385 0 R /F22 977 0 R /F41 1238 0 R /F48 1258 0 R /F39 1178 0 R /F53 1333 0 R >>
+2787 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F64 1385 0 R /F42 1238 0 R /F49 1258 0 R /F40 1178 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2778 0 obj <<
-/Length 3021
+2798 0 obj <<
+/Length 3143
/Filter /FlateDecode
>>
stream
-xÚ½ZÝoã6Ï_áGX³üu÷´í¦{)Úì¶Iº}P,%*K®%ošþõ7Ã!eI–8,²¢¨9œß|ÈbÁáŸXËl*ÓE’jf¸0‹õæ‚/áÙÇ hV‘h5¤úöîâ›ïU²HYj¥]Ü= ÖrŒ;'wùoËo™äì–àËnnWß}ºùþãÕÍåJ¤ÆÈåûÏŸ¯n>\ÿûr% b ä|ùÓû›_ßÿHsŸ/S ûxu{ùûÝWw=[CÖWÈÓŸ¿ýÎ9œà‡ ÎTêÌân8i*› m3Z©8S]Ü^üÜ/8xê_…àL*+gd!ÅB†§ äÌ*©¼0>\Ý~÷Ëõç»ëO7xÿÎA~|±’–)#Iry^·«uS?<u –jk˜²BÂ[H 4Å.늄æô2ËZþQ¼ÐýC³£Á¾-èÑýË B8fmâu»ßæ°èÌîZ3—8³:Ÿ[-E¸¸X¶)ò™•giªâ–`
-´çº øÞHð<èäܬ·2ïA´ÄMÓqWàóX€ÿ¨Ò×°]1k{l/»¶¨¡³:ž>â9bkØ4£KÕ€iˆ¹‚‚]8 ”`ð\vOs
-“
- %‚±eUÍiMÀáч¤ã%-º9;ŸE0ÉuÜq7nêŠü{¥A<ÑjlÇ=&;¾|~*| ×ùrÓôÒ‚»¢Êîr¼‰‚¶…‡ôÞŸû’ù?À¥’h HWÄÖkÄ8éܲ|˜9¼’‚I{ìç³ݧ‘1~¯ûÀp0u=P€ÝÐ]ôs ÒæãFNüoÈNÁ²Û—"ÃAWƒT l[9¦$˜+¾ùÉç_Çé¤`àIva”a"I’é­†T1û;΄{*Üw•sV“%®‡¼¬zlv`Ä›)sEîxrž»žj†=9 Á À1{·} D5©ˆ708pEó ]ÉíTtÄáw·×q”ÐìŒÛå{Læ¿f%Xlh×OM¹Ž{f¤V´J®—O›l½ÚäQ º >£X¤»Lû”‰•xR¸¸>œ1v2£œŽ¹K>~b„D¾_Þ=3Ë‹‡l_u!÷iÖf§ÌJC¦¢ÐËÏšÕê´YõTÞ¬ž¦[‚¿ð4yeËH4³åÐTØä&[~Þ•uΞ÷{jvA*íÂÜî…n|f×.
-°Ù"(µ‰“Þ÷˜Ú…g”ˆN¡\§ ÈäÈ+˜øÇgUc3ðÆy͈Î(&y½ü1çîb¬‰ 8‡Ï§Î  •Pg뉎9¹º0L ص‘«+¡C \•01OT[h(#Q¶‡Éº+×!ÐĂîÈqp¾w¼Çñ²Ñ£°uŽHõ(ª†$xŸ¡d4¢ÏŸHù ®àAj¦‘°«Ø¤tiÅ’m´;(š;×\µsù©fiÒg·5 Þñ2D‰4šçêïWW!w ÞJà­¥á *ù'Ì(ð<ÃsÙúêCÄŠ‚ âž,0Ñ/y“\…fxÉhé¶Øf!‡I
-ñYC>,L:ŽÏMU5Ͼ˜1¾Ûà¯Ä5 †O3ÞΆ$$<n’. öÈÞÍœMòû1éäpÃäžÍ)A ðX3“»¸'Ù? ‚ýÃh³o»pPÈ"R¥&æõ”}-&q“uc
-M‚ú¬Ô
-0ˆŽ¦ À‚&²9¸… ÒˆHßäÅ×o¹f2 µ<F*h¥¯Ï
-ÑW6–‡Œè{0Ü—ÅE–Ó4É6"‰××Ö
-Z†Zžû£RC ðïçò©Ôb}24ÏGg}h:”uŽyW4ÑØNâSZA: £Ô1›85-œ¨Õ†0v_Dd+ò“P&aR°óX6¤: f=Õ0ïšÖÈRõšË˜SH\$.gùŠD3| Åœ+VŒùºkBûRÚ,Ÿš¶£Q5øÅŠ2˜;ÓøÖ›£ú}C§cÆFaE=·‘‹g ÑúgE ÂÎ^c› Ç¡½îǧÚÄo I”±¿vÆ=‡f¨-™<øTÊä:Ò†ö-á6-o`ÿ_Å+Íà]÷²-ð;¤}w‘råÚ¥ñ¾›ÎC;ébvK5È1ß»áܘW‡&¸|”J\hŠÒ²˜&)SÂ%×C4ž {žt>iU>z¾Îê[T
-Š[-¶á²¡«J ²ñ‡räØîˆ5‹ÏVã &Ð1Í©ºÙ¢KXÀ4nõ+õ’ÖÆê¥ÓÀ„0x¥Ë2¤:L‘jÈÚ™æ]lË€I@* Ýy¾"Ñ _#`²Øc¾ü¦ ayÈ{UìV‰s`$ø¯yð+F`„0Â}<᜷I˜h‹@DßeFø0‚·/"¦òØ\S™äø«î<þ™$c’2Ú½$õŸ„÷÷ÁIåÁIÑ %ö?¡’ ¯Æ“´a†&3ÿI&`¾®“ä­}!N>ªŒ§ìt»‰=½MἩ­øÿ»lû߸ì´3¿i
-é¨sãýíÕ±ðþÇÛO3ëO~(?@|ᆠø/6VOÌô N:šô[¨tx„üCŤõÛë›ôfË7a¶Ý«Cšú¥@ŒÅî56Lý”Õûlî¤qôY{ô…i((N°mDzyÿëÝ¿>ýòºP®kH˜ëXßúº&ÃwMÝ6»®ÜoNý¤F†¿ƒ™+Þ³ø?ÿÜæð³"0å܉z_&€?)ŒSx8áôq?Ì9æý?¤E<rendstream
+xÚ½ZÝoÜ6÷_±k Ëð[ÔÝSÚ8AŠÖIkp@›y%ÛBw%g¥ë¢üÍpH­$s×>pQÔˆÎÇo>´bÁáŸX8øÊõ"Ë53\˜Åz{ÆwðìÙ4«H´S}}öæ½r‹œåVÚÅõíh-Ǹsbq]þ¶|ûùóÅå»ÿ>_I×߳ó•á|ùóÛ˽ý‰æ>ŸçrùöÃÅÕùJäÆH ’é,_¾{wyµúáÓåû—ç_®<»¸Ø³.¸Bž¾žýö…/J8Ágœ©Ü™Å#Üp&ò\.¶gÚ(f´RqfsvuöË°àè©5%
+£3Nf YH±‚á &Â09³J*/Œ«§¦}èên~ ü(X4Sšq¡mjk‚–FÃ8©"θ‘¯ÆKx¶´L©(R!WeÙt«uÛÜÞUÍùÊ‚z~[Èâ›÷°ßáeÁ³Âå°#¾VlîÚ]Ýßo‰t²H2×™ ”_âª÷ÃèÄúÖ°Ì(^ú£zjŠm•X\ æ´óÅw‰%•aÎHwES¶ÛÛz“Zô”eÆÍWí^\õ—2gÎÅåþ¦åV%V[©LĹX‘ýãüÕ6ÉeA²hí36¿Æró…Þ›äJ;æ„Ía? Ûqãxwqõï?_üt9¼tØŒ/ÀCAçYÂPˆZNõ§,ƒXšjWôU^îô²À‹B­Òým»£Á¾«èÑÍS‚!Àß2-©éö%,šØ]kæ2šN­‚Îe>R\™XIq–ç*n H¤…X~ì‰Ý®Þ>lêß9—t2µàíÝN[· ‘µ·t-шë5î²Ìr€ n£¢å h\*ÏQþdW7wt_Ð…„‡÷p:¸åÃî\¸eû­.Úþ¾Jœ\r ð!Ä+äˆÁ_”£ÓÚåÈÐ.Ë˔ˢSwOM_ü-z=Ö›M@EצªÊª t-IOIÀy§fÒ#ó0R÷ß…A³Þìƒ<à¶hèZýY€æR²Ò‚©,ðH’Y=´›zý”6óu×ñ¶jzF\Š\2¡áÀ+°\•îk
+
+K“-Ù×Uø¶-}¡Û« ELº§ZŠH„èKRF;›¢)ú6F´¾ú3.ªª}WÜU“¾ÇqyËÜ0çä ÁfLu\Þ•—÷.l t*Ý„HuîÜiîª{Óô”㸘ò7 7†Ře×Ré·®hš@n‰Ê‹‚f}ª‰ƒqÓI`hŽ [ýËG#ˆ?V*꙽€º}ˆ/SÈÈ!OÐb–MúŠ«5 ^êT+À,zš:4+š(R ë‹êˆKoÊêÛ›p®D²¤–GeQq+}­pá÷‡%j*Ϭ‰-9ÊJd,Q|è±®´sSu]hž9‹iÁ É(§µè7-tI3uó°ïY┿äH113àóHR¥x7©8Œ^Ûd8"ೄœŠ?ë¾òžg‚4厮¸à&ÌŒö
+ka¹!j LÇh}h@ÔM‰ÙW4ÑØZâsZA: Í£Ü1‹=üY Em7³›*â[U4‘± "é €6¢:h‘jœ}Íëe©ÄücÐË0tBžfl Jp6íIj&p<aí
+
+MLi³¼o»žF!æàWJ%`îD\[ì•êW¶Ž©Å\tõØE.i€vëŸUmx]/‡n»¢j?eD¤É¦ž1î“?ÿª¦%“8|£›œBus­}GÈÍcØÄWñJ3x×?=TøUÒ¿ëH9ÊvmÈÖøÐ[硹t1Ë¥Zä9ß{ãÜØŸ|ô̸Ð"¥17Ìr¦„›zÔ
endobj
-2777 0 obj <<
+2797 0 obj <<
/Type /Page
-/Contents 2778 0 R
-/Resources 2776 0 R
+/Contents 2798 0 R
+/Resources 2796 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2748 0 R
+/Parent 2774 0 R
>> endobj
-2779 0 obj <<
-/D [2777 0 R /XYZ 56.6929 794.5015 null]
+2799 0 obj <<
+/D [2797 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-2780 0 obj <<
-/D [2777 0 R /XYZ 56.6929 751.9582 null]
+2800 0 obj <<
+/D [2797 0 R /XYZ 85.0394 749.2278 null]
>> endobj
-2781 0 obj <<
-/D [2777 0 R /XYZ 56.6929 565.8108 null]
+2801 0 obj <<
+/D [2797 0 R /XYZ 85.0394 677.9694 null]
>> endobj
-2782 0 obj <<
-/D [2777 0 R /XYZ 56.6929 148.6739 null]
+2802 0 obj <<
+/D [2797 0 R /XYZ 85.0394 495.229 null]
>> endobj
-2783 0 obj <<
-/D [2777 0 R /XYZ 56.6929 83.9989 null]
+2803 0 obj <<
+/D [2797 0 R /XYZ 85.0394 83.499 null]
>> endobj
-2776 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F63 1385 0 R /F41 1238 0 R /F53 1333 0 R /F39 1178 0 R >>
+2796 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F42 1238 0 R /F54 1333 0 R /F22 957 0 R /F64 1385 0 R /F40 1178 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2786 0 obj <<
-/Length 1276
+2806 0 obj <<
+/Length 968
/Filter /FlateDecode
>>
stream
-xÚ­W]oâ8}çW䤉ױc?Ò)Ûe4¥,Pi¥NRÚh!aHhÕùõ{Û!ÀŒ¦+Bì“ëësÏ=qˆ‡áG<Éf*ðB Ž ÷–›öžaî¦G,Æw ¿‰ºZôþø“…žBJPá-VXa)‰·ˆúÃét4¹ÿ3ð)Çý+4ð9ÆýÛáä~øÕŒMŠö‡7£9Ü
-6±ã“6ø•H„Ê«#T,~£44ÿÊ]”먴㩹Fq¼ÙOŠ"),2·×‹]æ;‹ÙæYœfÏfØUÁÜé5 ›l™ Å9µù1Ø5á¦òó÷,ßiq\7ä3`P0S¢‹g»¦<€ÿzÄsÐ—ß QÕ z¬Q-Öª pÖÀCùAºÖÐÀt«¶ ²Ù ™E"„ºè€:‡ˆ+Á-øz4ÿ<Oã»IýP»ÄR :’m‰!‘$Â%[×*Ë°-ºRÇE×Sß0Çãék`Yìžx0EÌ°V†5Ê€eTOMüáõõ 5à|çbŠÃŒÖ¹ï²ökž ùJP袢Œ F#«Ç¯ó;gê<yWãɵÁ+ûX¼I³´
-ª..YƒN×lÉm! hkÑ…Û°1ßf»×\Ô7©íèÓuþô^šJ5NÜN=gÉ>.ðOš²:Ož‰éÝ;£E!8?cD]\¸®Ü¢*Ä@w­¥mžúq„9jf|r^05xÉ÷ë¸íÒo»´,“ ûFCÔv›Âµu~øûñð Ç\ÐÎzÖ,*â’ÒìÉS¯¿4OsÿH ¾Üendstream
+xÚ½VMoã6½ûWèhË‘"ÎÚÝz±q\Û Èæ µäD@Dy-9Aúë;IYräEŠBIÃÇáðÍãI€á!H(ª‚XEˆcƒ]1ÂÁ#Œ}‡ =(ì¢n¶£_c2PH *‚í¾“K",% ¶éýøQ‚&§ëÕDÑñt9½OBJT§«Õ|9[ü ÿo§ËoÓ¯6fç|žo&Û/£ù¶-«[:ÁÌÔôstÿ€ƒvðe„S’¯ðƒQŠÅ(â ñˆ1ymF´ ;£ÍÔA*F” :À%!HqN{dp…£¬!cúmûûÝÚlà´CB#•Å-tuV[6oU•ýùTêª<Öù©pi`Õ±HP—'ˆ1©Zò'!Á@ir<$:)23ËÀXŒd[ºøû¢Ô1mPm†¦Žï”Æö«>&ºzNj7°XÙw’¦Ç ‘㬪2W{]º÷“ÃîÊ£ÃJæúц½PìŸY³:oöL±Ù,ADò¸©oó¦ËC•W—:=ÄR°€GèˆÉP_ ìšrèü•¦£˜MÏ#: ÿÕc­Ù
+LŠV
+&Ô˜‚ŠÇ•¹Á”{°X7¿«ò“Ù.7À,µŸ§D×yýÖOu¨²SZ†¾A&dÄö‹õ _xσ^ŸòÝ“Ól¢íÇ'âSe–k^õ”^•§Æ;¼s˜õÍ;Óu/o6°÷vS‚¡ýÑ(
+(Ðe,ÝšU÷ȿ浫I—ç'{Éwºvc™ËÓ€ðq+“ßÑÎwQpv0z¾~uµBcŽ`²ðEƉÂïJ÷·¹÷µÿ Ž°²Zendstream
endobj
-2785 0 obj <<
+2805 0 obj <<
/Type /Page
-/Contents 2786 0 R
-/Resources 2784 0 R
+/Contents 2806 0 R
+/Resources 2804 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2748 0 R
+/Parent 2774 0 R
>> endobj
-2787 0 obj <<
-/D [2785 0 R /XYZ 85.0394 794.5015 null]
+2807 0 obj <<
+/D [2805 0 R /XYZ 56.6929 794.5015 null]
+>> endobj
+2808 0 obj <<
+/D [2805 0 R /XYZ 56.6929 751.5568 null]
>> endobj
930 0 obj <<
-/D [2785 0 R /XYZ 85.0394 769.5949 null]
+/D [2805 0 R /XYZ 56.6929 708.6012 null]
>> endobj
-2788 0 obj <<
-/D [2785 0 R /XYZ 85.0394 745.1845 null]
+2809 0 obj <<
+/D [2805 0 R /XYZ 56.6929 670.3846 null]
>> endobj
-2789 0 obj <<
-/D [2785 0 R /XYZ 85.0394 713.9707 null]
+2810 0 obj <<
+/D [2805 0 R /XYZ 56.6929 636.5029 null]
>> endobj
-2790 0 obj <<
-/D [2785 0 R /XYZ 85.0394 651.0924 null]
+2811 0 obj <<
+/D [2805 0 R /XYZ 56.6929 564.786 null]
>> endobj
-2791 0 obj <<
-/D [2785 0 R /XYZ 85.0394 594.1009 null]
+2812 0 obj <<
+/D [2805 0 R /XYZ 56.6929 498.9559 null]
>> endobj
-2792 0 obj <<
-/D [2785 0 R /XYZ 85.0394 522.1893 null]
+2813 0 obj <<
+/D [2805 0 R /XYZ 56.6929 418.2058 null]
>> endobj
-2793 0 obj <<
-/D [2785 0 R /XYZ 85.0394 462.2329 null]
+2814 0 obj <<
+/D [2805 0 R /XYZ 56.6929 349.4108 null]
>> endobj
934 0 obj <<
-/D [2785 0 R /XYZ 85.0394 425.448 null]
->> endobj
-2794 0 obj <<
-/D [2785 0 R /XYZ 85.0394 389.7845 null]
+/D [2805 0 R /XYZ 56.6929 306.4553 null]
>> endobj
-2795 0 obj <<
-/D [2785 0 R /XYZ 85.0394 358.6854 null]
+2815 0 obj <<
+/D [2805 0 R /XYZ 56.6929 268.1239 null]
>> endobj
-2796 0 obj <<
-/D [2785 0 R /XYZ 85.0394 295.8072 null]
+2816 0 obj <<
+/D [2805 0 R /XYZ 56.6929 234.3569 null]
>> endobj
-2797 0 obj <<
-/D [2785 0 R /XYZ 85.0394 238.8156 null]
+2817 0 obj <<
+/D [2805 0 R /XYZ 56.6929 162.6401 null]
>> endobj
-2798 0 obj <<
-/D [2785 0 R /XYZ 85.0394 166.904 null]
+2818 0 obj <<
+/D [2805 0 R /XYZ 56.6929 96.81 null]
>> endobj
-2784 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F41 1238 0 R /F53 1333 0 R /F39 1178 0 R /F63 1385 0 R >>
+2804 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F22 957 0 R /F42 1238 0 R /F54 1333 0 R /F40 1178 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2801 0 obj <<
-/Length 1767
+2821 0 obj <<
+/Length 2019
/Filter /FlateDecode
>>
stream
-xÚµXÝsÚH ç¯àíÌMÙî‡?iBzm’ ä¦7m³€§xM±)å¿?iµ6¸×vnn2´ZI«•~Ò
-DŸÃŸè! ™ô£ÄgA?+z¼¿„½×=ád†ÐðTêÕ¬÷òJEý„%¡ û³Å‰­˜ñ8ýÙüƒ÷ŠIÅ`‚{“éÅðúÝèbx5yÿp7ŠÄWÒÝÝo.'ïCpYνw£›‡Ñ[âÝ {=ž>ÍÞôƳֱSçWèÕ—Þ‡O¼?‡;¼éq¦’8èïaÁ™HÙ/z~ Xà+ÕpÖ½iïÏÖàÉ®Uí †àp¥PvDCŠ¾, yŽ a¡’ʆc:Ó¥Fo§·xÐ’'1äý¡ YìûVz›šùGpÿÄ RL·{™{eÑî:[g€1•0ߧ£G³ëÛûž91µÞ]ÓiÓCU뢢ÅEiªr[ç»âxšÏ”6§ùW.ñcÉÌ«l¸*Òlø‘sùm·Amë\È‚ ¬øMZènßgAL6Ÿ²n}”2r²µó¡FÔg}p¼¥6z›ÖzNËÇ}–ë¹ÞùUo«îé6–“›ËGxz0å¦Ê«§8U‚Eq¨ú~3?
-Ã.\ ¸³
-IïŽ>
-ž¤9Àä9uS:mÙåm%<w]æEkиÞ[7ooÇ6§´Ùæ¦å°—;'Û´zØÏ ÈÓñÅÃýdö·voo¦“Ëñýëç™é¿ 4«i{yWÍCdcÿU¤èÒtLê¡£/ˆ bpÿ—ƒ/¸hCe8°ZÁø™cœhãiE.ÔöCNó¹*÷Í–3âæj 6T2u™•k×Be
+xÚ¥XKsÛ8¾ûWè¶ôVˆàÁçѱD³ÇkÉS3•É¦ ‰5©©Q4¿~»Ñ
+Ö>\Ëã;&¿Ïõn~ñö½J&)K#MæËÞY ãI"&óÅïêþþöîfúë¥/Cî½c—~ȹ÷éêîñêgš»¿L¥wõávvé‹4P˜¤B¾ˆ{ÓÙµÿñÓÕµÿ~úëãýå×ùO·óV±¾ò‚+ÔêÏ‹/_ùdwøé‚3•&áäÎDšÊÉö" ¥ÜÌæbvñßöÀÞªÙ:fŒP%,Ld<b )&B°4 åÀaÊ"%™ãáÃã§Û»ùìÙ]8ã!Ø,–‚E¡LÆa™ü>—=âÇ…’ýE¾}=NP7IC¸¯a)Û'½?×L(ÉÎå몵\#ºÉ¾D³8£ ”›– Iìí6Y®‘Œ¼jIS+]ê}ÖåŠÆUi~iýiä¸tM— " Sѳ[ž©Ž¥bËö;ùr)¯Ú’dIr›Š†)p"I•Úê’ívº\ Â#º€™x¥?¦KbÙ@$°Lü@
+ÊÄ |[‹t1ƒ¢¤ïŦz:5ä/ä®èëbèe ‚8üŽ {\¯˜ÐqQ¬¡šè¾g†”SJ¤¯Ën¹F„ )S¦ ‡ÒçCku±äÌæ t\ùšÈ}V.L^
+óѺ43‰›¤f»:¦
+¿zœüüð}©Ó²ÑûR7$ovª½­ip]•uµoŠÃ¶“þ "'/€° 0ç`±ƒÂÇ¡(uYv&çQ½ÅPŽ û‘åRG’áÙIä^)ãÎÑß´Uë«M }ª‡©à|y²ùµY
+N¶xps7³åb»Ûè-4âjÖž™@¤©­8ŠŒl„.´3Z—H…¥4]”ôµQ à¾Tâ}¬ŽðèvQÆîºwño³ÌÚê.WlŠæä4hŽV‰ÈA’˜H#ž/õ‘Ü÷A1°,Ì¢Êoˆ<®uI‹6Ÿp†( ¢®Pvh 4×aÛ5ŽŠ3üˆ–‰kì·Õ¢@^ù §YWµ&=\ÜÆ6
+ók¤OÎÎO°/À¯ð6€j[`h±%áÝÎ0n3±å¹cƒ«%Ü`dm:c"—Õž šF(=‰ ËjMsŠoìóÌj'd2†&ötÅ%®¸Ù¯’€&©XÑd(¤mé”0)]ÒRF¬wDôí…ëÇb³¡ÄRœéµ38CŠ5¡&ŽM)í¦j‚Ξ“46AÊõ½6èuAÆž?L>ƺ°ÛËÊÎÐòŸ‡¢MC˜Í-Ƽi´¯š¢q茷ïwà»=´ð®•Cð®–×á•öƒ-òìöúña:ÿÍv»ŸïfÓ›Û‡+Ìnìffßožgíí1Ò¸rUÈÿ/MsT¢[ÓЫ§TaÌà&Á?‚…@pá`¡53„w ˆ+õ­,@¢1,d5©Ð˜†3î»®ŽnÉbûj v”3M•W  2áòì!¬ö`rˆ˜ÊnÚ™ú^•4•§cÖ¤R¡q;®,*“W°ÅDa^¢Ø%4 4†˜;ì;„öC¡¼‡÷×´(Úýæi¬T€O†à?ÔÕ‰¸íl‹Ðg¿P±…9›.#iO`ôµÿ8³Á™å¹Þ5YÛ\<¹ØlSEköö}Ùbr÷Ôls¦.V¥ è;%û~µÁ–Õúìèå¡ÌmS„»âC oþÒÿð Ã? GÞ¼M›ÿû¿Èî_× f*Iäø“^q|ú§Â)…Ö©8W½ý×ò¹îÿ‹}·endstream
endobj
-2800 0 obj <<
+2820 0 obj <<
/Type /Page
-/Contents 2801 0 R
-/Resources 2799 0 R
+/Contents 2821 0 R
+/Resources 2819 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2812 0 R
+/Parent 2774 0 R
>> endobj
-2802 0 obj <<
-/D [2800 0 R /XYZ 56.6929 794.5015 null]
->> endobj
-2803 0 obj <<
-/D [2800 0 R /XYZ 56.6929 751.8011 null]
+2822 0 obj <<
+/D [2820 0 R /XYZ 85.0394 794.5015 null]
>> endobj
-2804 0 obj <<
-/D [2800 0 R /XYZ 56.6929 685.5141 null]
+2823 0 obj <<
+/D [2820 0 R /XYZ 85.0394 752.0628 null]
>> endobj
-938 0 obj <<
-/D [2800 0 R /XYZ 56.6929 644.3012 null]
+2824 0 obj <<
+/D [2820 0 R /XYZ 85.0394 603.3016 null]
>> endobj
-2805 0 obj <<
-/D [2800 0 R /XYZ 56.6929 606.8498 null]
+2825 0 obj <<
+/D [2820 0 R /XYZ 85.0394 539.7009 null]
>> endobj
-2806 0 obj <<
-/D [2800 0 R /XYZ 56.6929 573.7334 null]
+938 0 obj <<
+/D [2820 0 R /XYZ 85.0394 500.3546 null]
>> endobj
-2807 0 obj <<
-/D [2800 0 R /XYZ 56.6929 504.5246 null]
+2826 0 obj <<
+/D [2820 0 R /XYZ 85.0394 463.723 null]
>> endobj
-2808 0 obj <<
-/D [2800 0 R /XYZ 56.6929 441.2024 null]
+2827 0 obj <<
+/D [2820 0 R /XYZ 85.0394 431.4263 null]
>> endobj
-2809 0 obj <<
-/D [2800 0 R /XYZ 56.6929 240.8182 null]
+2828 0 obj <<
+/D [2820 0 R /XYZ 85.0394 364.9038 null]
>> endobj
-2810 0 obj <<
-/D [2800 0 R /XYZ 56.6929 150.6208 null]
+2829 0 obj <<
+/D [2820 0 R /XYZ 85.0394 304.268 null]
>> endobj
-2811 0 obj <<
-/D [2800 0 R /XYZ 56.6929 84.3338 null]
+2830 0 obj <<
+/D [2820 0 R /XYZ 85.0394 107.6861 null]
>> endobj
-2799 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F41 1238 0 R /F53 1333 0 R /F39 1178 0 R >>
+2819 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F64 1385 0 R /F22 957 0 R /F42 1238 0 R /F54 1333 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2815 0 obj <<
-/Length 1181
+2833 0 obj <<
+/Length 1203
/Filter /FlateDecode
>>
stream
-xÚ¥W[o£8~ϯà‘Hƒ×W°µOi›i;š¦Ý&•Všh@ `FÝ_¿ÇØPHHºÒªRmìÏçòùœãâ`ø#Ž3Å@q$0Î&›`g {·b1^ òú¨«Õä·Ï,pR>õÕkO–DXJ⬢oîìéi¾¸¹ÿsêQÝ+4õÆîÃlñ2ûjÖž¦Šº³Ûù>IÀ€(×8»‹åüšÝÍ–wÓï«/“ùª³©o7ÁLôcòí;v"0ÿË#¦¤p~ÁFD)êd.œ±ve7YNþèöv›£c<&‘4!‚‡pĸOL…¨ hÄvkê îçe¼aIX&Ú-í1Ž|á«·³X¯ƒPÚcPT"?P¬A½‹hHü‹ÒÀ̶qÂ*6_ fÚê3Ƥ„ V0ˆì7‚—oy±/Óò˜qhcà»`©ÔA¬¥‚Ã|4Š0¢ÂëIh¸ãd$ˆZÐÐ×Æ|Ázx`8„Y†»jêù@q¸Û‡´J2ø$ÂM+MJZä¥ÙŽŠ,Ló1:¼V―›ùòúùþiuÿ¸è ï†#Å ³wp\‚tX{ÛË«(#n˜›±½5FÝd
-Ë6nsÓ°·Ë82ÓÂÂC3”qe×_ÍÙN q÷áÂ
-H(!³fî*IKƒÚ´Z×±ëNAU˜q“Ä›¿íRҧ㵎xwàÏÏp—Fiõf"®±c„‡)‘n¼)š1*Íbš›14C™nóƘÿSä1úQ;{¾}y˜/VË“Ba£Ž+‚¤äþåÐì£Ú¼>ÍÕ…Ü‘R‚ Âú@k‡QÛðaé]%6ÅMÌëÙ¾aµø™F-}Í걿WŒ.AÐYÊ| [ùÁ”õP(kQÚô÷Ü<æ*$,/«îP#º¼AU•‚’¡ò¸¯„›×Ù:>è9‡ø‹Ò T‡|kö [°aÙ‚¥[çܽ®&”ój÷vtªÈÛ¥²Þï‹CÕÜƸ8óù
-ùÐ$•®"Ø'ä²éðtuÎêqy7óÈ'˜SæþJÒM2ܶi½úsýfÆÆB=i×sò;Œ,p7PãµuHïÀ›Â‰þ7ÞI1~êTŒ×zgæPê¸}׌¦ÐNÚ`Lm⇠‡Û:­çÃKx°%ÿ {¨ aØ¢´A½7á$5,ø@w‡Q>ŒC†H ´wùÛEb¯b†TQ°,ÜYÊÒ,.Ϧr™õÎfüÚîîãžÅÑY^Y #X\æµ:Ïk‡Òž½¿­Nuw€%¿¬·C(p
-™"¥
-†š;N­ †_ÝO ªáºÇ %è¤ `Pc4–ÃÞh>7'g_—æSçû€«ûÅÁ+{,ÊÒ<-+»6žã×ØV’5ë!Ìk¸øÓÞøQß÷móðiÄÐ. ³€çÏ×F¢ BŒõ"ZRA,zœ
-m-WG<Ì^VwÏgšÔ÷9¤XÛçiùVVqfÃøÒJcZgçZ{P¨ûñ‘(Á…ÿ»íÿmÃĤ¤ãáÆ04÷ žjk”vŽÈàØôî©íÿ+˜*Lendstream
+xÚÕW[Ú8~çWä1HÅõ=±ö‰Î0—ªÃÌŒT©Û‡@DKJB«Ù_¿Ç±&0}Ù¾ŸËw¾c;ÄÃð#žH*ª¼@q$0Þ2`o k·beFNhÔ–ú4|¼a¡§’TzóUKWˆpoó?!ÊÑT`:›\±»ñìn8¢$`Ì?=M¦×÷_a,0H‚ÆþÃxú2þb枆ŠúãÛÉlø}þy0™7>µý&˜i‡~ ¾}Ç^ î`ÄT(¼_0Àˆ(E½lÀC‚3æf¶ƒÙàÏFakµÞÚ‹Áˆ2I{€ Ä#)!h ¡d”ÕHÌ&ÔøËìQÇóñ†ã|ØTŠn€»Ÿ^ye·ÅYš§eµªbo¦ž“U²’ÐOòeb¦¢ümzJ[ê‰ •R‚­þC`=$Ì
+<ß\”`Þ£Ȭ VY‰ fŽ¸bÞˆ D–µèøe~÷øÜ£ñ€û¼JöyR/f¯e•d¥\yYì«ôÍrĸ¤V‡DI §càpD0P+/“%ÛDåFoÓrŒ#)¤ªå¦Q–œñ*D2P&‹Gµ'Q˜Þ:ÉHMCÍuÓuöNÑÁ–ÀÐã5/veZž2„’yš|*”a3 ¸K…Î\?mQ@ˆ4üu*jÖrÚS¾T7Ü:ÁÛ
+€á–e´…TI@9Ú®‹}Zm2᧕Æ%…”™å¸È¢4ïå‹ÓØáËõdvõ|ÿ4¿œ6›Î’æÄß.cCÐÖ_—/M)Fü(7­K£¾Í2L.¢2‰M·°r‘iÊšŸz~e65û‰¿‹ö@)ˆ¾„“aæÏ7ii¤–ÎÜ"1í¡1P¦]n’åßvjShm#5 A ?£m§Õ«a[íG—€æ„XuÛJsÓF¦)Óu^{
+Ù5>†ð•ðóC¶Hô½¥8/N—p&äk³fЂ‹LµÐqÎý«ÃÞÞtÕöõdW‘»©ò°ÛÁÅPg£_® êŠÒg–¤[Q¶v}]°ºÝGäô)ómÒ妻lÒvõpñjÚÚCÝqÁë>ùc¨qô—p"&?6 ½— 'ú¯«¼ÑbâÔ=8.V‡­éCýw¡™0ÌÓkåž •9w4k ׇ ¬ž¥! ¢!Ü¥iØ–:OÃFJ;Ôº NL+…BáEÓN¨Çt—……ŒvM7ÅÛаuVF1œŸà¼› ^i–”gë¸Ü‡­-÷…]Ý%{@;Kâó Âû–ìP[R@uR:²ãuÚ*VuÙ¬ê1ÛTIý2¦]³  Ö¾W?¡:ç࢟EçÍ­Ï꼞¼ÿ¯¯eA„øO¿–û¾¢À þôéán<üí/¬ãg$ Ã3åK`³tNéàˆ¢oëÊ~‹½õý_g|„Uendstream
endobj
-2814 0 obj <<
+2832 0 obj <<
/Type /Page
-/Contents 2815 0 R
-/Resources 2813 0 R
+/Contents 2833 0 R
+/Resources 2831 0 R
/MediaBox [0 0 595.2756 841.8898]
-/Parent 2812 0 R
+/Parent 2844 0 R
>> endobj
-2816 0 obj <<
-/D [2814 0 R /XYZ 85.0394 794.5015 null]
+2834 0 obj <<
+/D [2832 0 R /XYZ 56.6929 794.5015 null]
+>> endobj
+2835 0 obj <<
+/D [2832 0 R /XYZ 56.6929 752.4085 null]
+>> endobj
+2836 0 obj <<
+/D [2832 0 R /XYZ 56.6929 692.3565 null]
>> endobj
942 0 obj <<
-/D [2814 0 R /XYZ 85.0394 769.5949 null]
+/D [2832 0 R /XYZ 56.6929 655.476 null]
>> endobj
-2817 0 obj <<
-/D [2814 0 R /XYZ 85.0394 748.2826 null]
+2837 0 obj <<
+/D [2832 0 R /XYZ 56.6929 623.3704 null]
>> endobj
-2818 0 obj <<
-/D [2814 0 R /XYZ 85.0394 713.6257 null]
+2838 0 obj <<
+/D [2832 0 R /XYZ 56.6929 588.7135 null]
>> endobj
-2819 0 obj <<
-/D [2814 0 R /XYZ 85.0394 650.6518 null]
+2839 0 obj <<
+/D [2832 0 R /XYZ 56.6929 525.7396 null]
>> endobj
-2820 0 obj <<
-/D [2814 0 R /XYZ 85.0394 593.5646 null]
+2840 0 obj <<
+/D [2832 0 R /XYZ 56.6929 468.6524 null]
>> endobj
-2821 0 obj <<
-/D [2814 0 R /XYZ 85.0394 521.5574 null]
+2841 0 obj <<
+/D [2832 0 R /XYZ 56.6929 396.6452 null]
>> endobj
-2822 0 obj <<
-/D [2814 0 R /XYZ 85.0394 335.9761 null]
+2842 0 obj <<
+/D [2832 0 R /XYZ 56.6929 211.0639 null]
>> endobj
-2823 0 obj <<
-/D [2814 0 R /XYZ 85.0394 275.9241 null]
+2843 0 obj <<
+/D [2832 0 R /XYZ 56.6929 151.0119 null]
>> endobj
-2813 0 obj <<
-/Font << /F37 1042 0 R /F21 954 0 R /F22 977 0 R /F41 1238 0 R /F53 1333 0 R /F39 1178 0 R >>
+2831 0 obj <<
+/Font << /F38 1042 0 R /F21 954 0 R /F40 1178 0 R /F22 957 0 R /F42 1238 0 R /F54 1333 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2103 0 obj
+2115 0 obj
[946 0 R /Fit]
endobj
-1939 0 obj
+1952 0 obj
[946 0 R /Fit]
endobj
-1598 0 obj
+1606 0 obj
[946 0 R /Fit]
endobj
-2824 0 obj <<
+2845 0 obj <<
/Type /Encoding
/Differences [ 0 /.notdef 1/dotaccent/fi/fl/fraction/hungarumlaut/Lslash/lslash/ogonek/ring 10/.notdef 11/breve/minus 13/.notdef 14/Zcaron/zcaron/caron/dotlessi/dotlessj/ff/ffi/ffl/notequal/infinity/lessequal/greaterequal/partialdiff/summation/product/pi/grave/quotesingle/space/exclam/quotedbl/numbersign/dollar/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/less/equal/greater/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/backslash/bracketright/asciicircum/underscore/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/braceleft/bar/braceright/asciitilde 127/.notdef 128/Euro/integral/quotesinglbase/florin/quotedblbase/ellipsis/dagger/daggerdbl/circumflex/perthousand/Scaron/guilsinglleft/OE/Omega/radical/approxequal 144/.notdef 147/quotedblleft/quotedblright/bullet/endash/emdash/tilde/trademark/scaron/guilsinglright/oe/Delta/lozenge/Ydieresis 160/.notdef 161/exclamdown/cent/sterling/currency/yen/brokenbar/section/dieresis/copyright/ordfeminine/guillemotleft/logicalnot/hyphen/registered/macron/degree/plusminus/twosuperior/threesuperior/acute/mu/paragraph/periodcentered/cedilla/onesuperior/ordmasculine/guillemotright/onequarter/onehalf/threequarters/questiondown/Agrave/Aacute/Acircumflex/Atilde/Adieresis/Aring/AE/Ccedilla/Egrave/Eacute/Ecircumflex/Edieresis/Igrave/Iacute/Icircumflex/Idieresis/Eth/Ntilde/Ograve/Oacute/Ocircumflex/Otilde/Odieresis/multiply/Oslash/Ugrave/Uacute/Ucircumflex/Udieresis/Yacute/Thorn/germandbls/agrave/aacute/acircumflex/atilde/adieresis/aring/ae/ccedilla/egrave/eacute/ecircumflex/edieresis/igrave/iacute/icircumflex/idieresis/eth/ntilde/ograve/oacute/ocircumflex/otilde/odieresis/divide/oslash/ugrave/uacute/ucircumflex/udieresis/yacute/thorn/ydieresis]
>> endobj
-2130 0 obj <<
+2147 0 obj <<
/Length1 1628
/Length2 8040
/Length3 532
@@ -13634,7 +13891,7 @@ endobj
stream
xÚíte\Ôí¶6Ò ˆtÃÐÝÝÝÝ¡Ä0 00Ì ÝÝÝÝ’‚R"‚´t ÒÈ‹>ïÞûüž³?³?½¿w¾Ìÿ^×Z׺î7¶‡Œ5Ü
¬‡¹rðpr‹ t´P(ÐWç…C­fL9g0ЇÉ]Á¢
-Äü{fXE
+Äü{fXE
0Üú÷äè¹aÖÃöOÃoäæìüØã?ûÿxýœÿŒ=ì a.ÌÁAb¡ö™9Y® Ä£ò/z{xÂœ*Þè—ÖÁ»2#×Dj,ïêÃ8›ÇEµyÍî;Ýoª²n öA™ºÓÁß‹(üèX>ã.3v±ms™W`gÅúϨ¯"›
rn­êèš—ß¡RŽwð9£_²Ò¹Ð_8=óe4%v>oFÀk(Ù?`LÙ½¼`êú4ð±ûåÃ&9[~ƒ˜;26cLà«|r)Sƒj…×Íl(ßÛ
b¬Å7ÎßÊçÏVð™h9Žù,¢I‚°RÊ• e®äß·RÆ%=²ìÙ êt›œ(†Ì%³LÇî)®Ž>1Ù¥‘„µ…^Ñ2¼éˆO£Ý %õ‰>•pjÕr{2–ÂwÍ<–g¬™-j—!3cäáakIè,AŒ$ÁLˆÇÆ‹J¯³nöùU»Ïm›Þ‰D3
@@ -13657,35 +13914,35 @@ $OíœàÅ€DÈ
t‡Í=žÝbóÆÃwî6ß"£“˵?”JËOP2RÐ oQo+†â1)©w†¦ÜèådîI½ÈZ¿VÍ­(e÷åû È"QÔüFØs(úF$'‘qL ®/¶!õÔ ¤HvkÖ‰Œh¼È‰¬ê؉á¶o?Ùa:Šÿ±qêcŒ° gã!_QÇ~ÏWê¡1üaœ¯UÝGmã§Yñmn%ìRãr9÷¬ß0qˆ5†/‚E…(êÚ“†,W‚˜$Ù½ï¶åçLxËÎÔ|ú奕£w†Z|ÂV€ãž÷,éOd
ÞyŠGÝ ŽÎ¨Ý3lÍ4©¿Î\×T2Zª½Ag—.7Ù#ÏPæï™v¼eŦQLÞ»±Oþ¼Ô\’ ¬ÿĵJÅñ¾(š3Ç].Å*,MÎ>ÛBx(ÃSÃó|D³uû‚Þ¡ï†{:Ò‘Á¨2G9¡Cê{É•<|?ÒK áéá@F)Ø,êw÷ó?È ¸¢Ëa„Çh%Ù±o^Œñ{‹6™Ý @¥-«ä%Å~jÉwXjz1îi´·î¬%uÕ3^¿±g¸`d+ÎK[ŽDe—„]âò†YèÖýÇ?Ï>£³HjË,èkѸÍhÔ8Š” ™v_Å [ªJÖ®²9m=·âú?\‹k>¼à¬‡¤*³Ñ³ž,Y ê<‹ý¹uÓ Z/ZV$S·é#ƒmNOš¨5M@¿§rãÝ0Hõ7¬&7[àçŽAØñêOõƧÈêÚ5±pE6~d»Ž^.x¨T1¬µ¤$£Í7¿ÿ4òÆêüj§‹G1¬èípoóÌ3³QýÐZ:œNÍÆéç,0½‹Š‡Zg‹ðâ£à)‹Q©¯³‹X""œÛÆ0ÏÁ¾äBvFA‚)Y9(ÎYÖý…ì¬S…|¸Ôü¾“qbæÇN.LÔX§…_ï‚¿œ%%½¥åŒìé|°D>W²7}C–Í#—ZR¸­$º`bÛGο…a¿9gÝS%\”Á/œîñhC|?s§ Ø…šg¯ÎÙÈ)ª¬m}ÐvÖËk†Ÿ.bÉ&O
üõí+uqfº`Îa‡„°£â,I§ã¯½/‘˜÷ÇÝ›Á¤'P6ߢH‚Ú?÷›½šÙ¹˜Žà9¦ŠmHr7:pMRYŸ#£ 'æW¥¿ðKCß|-¡mWÝ躖nᲶË0–«ÞÐ3äÛÙ=j’¸Ë-,n–³e±€¢üb½iÙ;‘˜Hâ°l<)žL.ßÐYÖÿ°Ú·)wL=(‚Œ£± L|)=å'ÀÆ-Å@²öò¾µ<ÃNrä³6îµEôʃ3±d¶kÓ»¬ÿ‹%ôµøü·(kD~ô(¬_yñ‡Í; ¯åä²fùOî{&*‰äyÒ¯9ÛB±T¨d>è.<Sâ¢éX3p7«Á~ª"럽Ÿ“lË´ÍÔDQÿfŒ°Ì
-*s"}Y ;Ò‰¢ú{YÌÝÇí]p¶Òݯ€Ž¶Xo³êÙ}
+*s"}Y ;Ò‰¢ú{YÌÝÇí]p¶Òݯ€Ž¶Xo³êÙ}
endobj
-2131 0 obj <<
+2148 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 2824 0 R
+/Encoding 2845 0 R
/FirstChar 67
/LastChar 85
-/Widths 2825 0 R
-/BaseFont /ZKJAMS+URWPalladioL-Bold-Slant_167
-/FontDescriptor 2129 0 R
+/Widths 2846 0 R
+/BaseFont /VYGEOB+URWPalladioL-Bold-Slant_167
+/FontDescriptor 2146 0 R
>> endobj
-2129 0 obj <<
+2146 0 obj <<
/Ascent 708
/CapHeight 672
/Descent -266
-/FontName /ZKJAMS+URWPalladioL-Bold-Slant_167
+/FontName /VYGEOB+URWPalladioL-Bold-Slant_167
/ItalicAngle -9
/StemV 123
/XHeight 471
/FontBBox [-152 -301 1000 935]
/Flags 4
/CharSet (/C/D/E/H/I/O/R/S/T/U)
-/FontFile 2130 0 R
+/FontFile 2147 0 R
>> endobj
-2825 0 obj
+2846 0 obj
[722 833 611 0 0 833 389 0 0 0 0 0 833 0 0 722 611 667 778 ]
endobj
-2116 0 obj <<
+2129 0 obj <<
/Length1 1630
/Length2 6133
/Length3 532
@@ -13697,7 +13954,7 @@ xÚíVuTÔí¶VA!¤†n†n”.IéΆ˜f(‘N)én$†FJ Á!¤[:%•$.úÝï|g}÷üuÏùë®;kͬ߻Ÿ½Ÿýìø½
Òy¦§aáèha …«pJí•Ž H
±@Bá0Y $D¤±ÉB¬@¼¼ 
µµC‚XnxXÙÙ9þ²ürYzý‰ÜD" ¶0Ó̓;Äîì!o(þ×ZiÙ@! u %5‹‚šHƒ¸Þ¡áf鵩@­ 0„dw9þq
-³rt³þ%àÆnÿ-ÈÙ~ãátƒÝiÀH„•+Ô ºÉª!+ÿ‡N¤òWnôÁmn<­áVn¿JúÝÐÜ H ( BB<‘¿rYB@ÖP„³£…×Mî2gWèon(Ìö/ Wˆ­…«µ#¸¡¹áþÕ¿êýSõÎÎŽ^¿£á¿½þ¡ŠD@m¸
+³rt³þ%àÆnÿ-ÈÙ~ãátƒÝiÀH„•+Ô ºÉª!+ÿ‡N¤òWnôÁmn<­áVn¿JúÝÐÜ H ( BB<‘¿rYB@ÖP„³£…×Mî2gWèon(Ìö/ Wˆ­…«µ#¸¡¹áþÕ¿êýSõÎÎŽ^¿£á¿½þ¡ŠD@m¸
ÿóü{é!Oˆ`zn%lŸš‘†¬"Ïéé—5úÐÁƒÑâ\\£ý:ß¿Þî—¾(Rf~QÂU;(zÕä5¾í|¹ªÌ¶ÖÛAæÈÜž ÙË£ò¡g}ŸO4ÏôNˆ}-lZŒŸöU/Ê{LeÓP[wm©_ó™iÑÅ=àà;>WìýSVz÷|R†g_«”·¯´ÖÞ"®*ØþÊ”°yzÂÜÕ÷±§»ýðîûUJöìW8Œbî˜øL‘þ.Ù”O uJåÊߪݎË;BbubÁï<_^Ë¿Å`i¢KÙÅy¨yc@–‰Ÿ'\;ø$·®Q;S-”âs/, 9D¦Ô#,9ƦïKv²±SÐúê¿»èçö‰%…÷²õ-âÁ]3ëãÝ“±Ñ][™CæºÊlëŠÑLü‹¦ëÀ¢€5‘ؽrô›ìç3üÜ°˜üDÑSjÛðôä)Wï8Ž*öÜŸèž“3@'}~+ÏÝ6‘žˆ•Ø\Žpµ<züuÚ>AbåPóبLbZ÷a3ÒYÍEœVÁ= ¾‹­{·^®2<¿}5aq€©ÿ_5¹Ûðòµ÷>›À¥´ê$C}ÀXŠ¹­œÕ÷ji—û­€G‡/§Œdû-!j¹;Ë6#ÔÜŠ.Oé­×ôÎc´¼$z¾I(ñØÇ/ Wj®½"¹ßKÒÿ¾ð{Lš¿ÞH¥hԻí:iÓFRF<g] Û39}—ÞÞF™8|à0­‰å
b݇a›yKÜ£%t×TcaÖËF˨?B:äÐ 3ÚZP ‚ÌÆŠ} fñφôˆƒTU‡J鉽žj:»«Ï‹ºôN)/ÂÕ äE½¬^gº‹ ^/«k¯&6Ö7%³"”-ήQËòÍ“ ñÆ‘r¾“'#
ñÀèHvo»Vüy½¼Òç³³”ÎjÁÕŸ,_Âh^§–p³/â#Ó„HÊÀç„»ûÄŒ[‡¤Ê»B8Ò¬’%PË ™#¹&}Ô7uo(à–îu•úµÒ95ÀŒ¾?ËêcÕ8—ÄñâθÑ,™ê:f”†.‡Ðà¡ÝõÁ41hÀ›3):«;Ícƒ·ú‘¶Þ,èðY½:Nç5u…QEð ‰rŸ–²ÌûŠ!&.ÜYâü×É ú;á$¤`×yme~b©@{•3*¹
@@ -13715,32 +13972,32 @@ d ¯òˆ¦:ôw
ÕB¾ª\h~8©$‰¼¼·ý˜7!g;É¥ƒ\®cf>}7›ùâžÐÙZسãÁÖ–Ü^-Už&(
ÖËÓ»ÜIFÙØS­˜õOV_ºhýÐn-®
X{$¢½‰¼û£@–rlZ™âɞˊ1o(­¶¨mèö¡Ðé»÷ÝõäIŒ]Œ_-ô‹ ¸Þû ò'zŸT¶n76Gت–·& úìIĆ‹7ÎÔ‰‰f¾<B‡›&ª½úŒ×ž´)„Æc+¤ œ?µÆ(_¹à™ñ0áNZ¬/ˆ_c24íŒË¢—'{.ö¥dÖî§Çz̓¯ÛKÃ{u`‡:s±¹ Á<º'—0— HMq±LåRnC@x›ôs̈W6ß>uä3¾õˆ;)EO4,Źk&l‰#õŽ¾„˜¬Ù¶³ ½höâiF] ‹œx'´ÅfÊb\ñê{Ý?¬¹¶=ê3¤XTÕW©*®§‰\Ee¶©x‘@†Dz:ƒ!¡X¾ÂK ”G½èß>c{BŒÍCŒ±¹0šUÕ¼ƒ¿ªÝ•5xfœéÉU“Nhèòã»Z–$8û훎·òБÞåú¸;ß¾2~%~QÍ÷*|6οÀ.©ó¶H&l]ážçµÐ[èù%¥κƬ!ÙrOxÆ!.B˜“zuW,Ôêr‹9å™ÊT°CHÖ‘_e‘‰ÿð:û5r€û3.ñ4v—W”ò]ª[)ïó–äÙÀ—݈H¾ÌûùSŽ¸+¹ºfS4çHõ¿ÞzyàÂ*/ç%Šâ׻͠Ï8ôæãmº'7…\ì°Å÷K)8ÐÁ@£bÅî\ç±ÄÝÊ‚×[g“©»5é«ÅÖ¡’'¯ÔíÌ¥ºégˆ<‚â¢Ï8TŠqùœ_U å=¢¦#fœÞ*ª6í¶²*æ›\oi›–•`ûlj[ÛW*ˆ»ºœ2Ž(ËtŒp{ˆ¥6Í]š†}„¯>{?'CÆà§5zíEëÝÚÓÞ&vø¾öŠ ÷dYcØL‰8àÇÉu°à•GËÝšÎñtûëV²­ˆ’eÓëû­&KÅàჃ‘oS*.m•»8ÕîŒWQì3ÊDÌûj OpHY²ï®f>×¼ù‰_ôŸö‘Ƥ‰´»ø|EÀ’=PzêîXDƒ%½+C£ˆ1_ù¶‡=AýYœ:&Aaú;æ¬U¾öÝ*“ÍXJ·=à²ùˆ1¦¬ý<ð»©,|# O'Cƒµë“M]í¼æf°ºÜS4‡AÇ÷Mj€“Ò·ÐökxõÊáž™ËG‡ÞÕéú,óÔ92‚¬ ߸gp0o9)ÁM£«&ChVF=Vv¯ñõ­Åž¡üÜÈT·Žïvä(Ê´ãé¿7jzä­ ¾¹Â6]E³ÚŸÉÞeIGOIùç…&˜+ÊZ Sl©
-Í`ƒ©c½G¯Lsé:JθÿÍàÿ þOX9B,\‘p' WÀñyœendstream
+Í`ƒ©c½G¯Lsé:JθÿÍàÿ þOX9B,\‘p' WÀäy¥endstream
endobj
-2117 0 obj <<
+2130 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 2824 0 R
+/Encoding 2845 0 R
/FirstChar 66
/LastChar 78
-/Widths 2826 0 R
-/BaseFont /FLXFFM+URWPalladioL-BoldItal
-/FontDescriptor 2115 0 R
+/Widths 2847 0 R
+/BaseFont /ZIAQFQ+URWPalladioL-BoldItal
+/FontDescriptor 2128 0 R
>> endobj
-2115 0 obj <<
+2128 0 obj <<
/Ascent 728
/CapHeight 669
/Descent -256
-/FontName /FLXFFM+URWPalladioL-BoldItal
+/FontName /ZIAQFQ+URWPalladioL-BoldItal
/ItalicAngle -9.9
/StemV 114
/XHeight 469
/FontBBox [-170 -300 1073 935]
/Flags 4
/CharSet (/B/D/I/N)
-/FontFile 2116 0 R
+/FontFile 2129 0 R
>> endobj
-2826 0 obj
+2847 0 obj
[667 0 778 0 0 0 0 389 0 0 0 0 778 ]
endobj
1458 0 obj <<
@@ -13751,26 +14008,39 @@ endobj
/Filter /FlateDecode
>>
stream
-xÚíRiTSבª¡¬2©¤j=,Œy5„„H b,š0É 1÷†Ü’ÜK/7”AÄJª²,b£KFQQ*¬*u@©%Váp"­"<`ù,Rµ*N½`]]¥?Û_o½sþœýíïìýïlšG„œ!‚° °C ‡É‚`™LÊaòÌfSh´`V††( X8X©×î2Àæ yË„<>…‚±T#Ž$kàLŸ ñHãˆJ‰™’ÐÀ:²†J©rL…À„‘ DZ-X;q# ¬…Ó`<†˜@ˆŠ
-gÊBkL‰`¥\8s¾Ïµ¨23°yßßÃÐÔ.ûef']Ðïa~·Kš—]-™w´ÜEU=OëZEµ…ëZÖ5ëÐ ùukò\Rê:¸þEœÔ†=´µIc/i¿.Ú1ýIÂóç=Ï^›¨ÍT™6îǧE{ûîL÷ò¢·±©öW?³xÄ*5_Ü%Da=+L­ºöe5Ê@Œàz®Û#ŸyZ¹”{Â1ÝÞ²ÉÖyÝhÙ/6Øb/¢öU<üùb³i?7QדtFqÓûRMýùÊךüé –F‰¤rQãL¬»?h®G€ë|¿ÙN¢øÐì´^è2ÞלÍrá-8&ô9ÐõÂoð‡âHKÃðaŸ9öƒ›ç¥ìdÞW,ÍôýÅî\xM’±Ã·æ„åû9KöBŠ,Æš½)Ǫë·éŒ³öÔ=äØ•e}"jüN]Š‚Z¯ðO—Ò[ië/×<"œ
-#žW$1ñØÀ3Í-(ŽËLçžùh=Ï/>ùUWÀᵫ2wm|ðèæòÛ×S„}ÝýjªøÓâœ×[FºCõÎâƶ8+z÷¨ùö÷½ˆ óÙƒÎzOÿ˜¯4SkÏÿgtÅ×Y­Èdkc½ lûÆiPS…®Æ¹ \
-R&{YÝ-2×o¥OÜQKSªi›„ zy¢²8Š•3н⤱j´BˆÊKOi—ÚL»=}ôq±ûÀS|Ó«aüú²Pà­òˆu#åãþw:Çõ¹®—‡ Ú:½L¦–½Ž“ïIš«Î0:æd4v–Ìs*33¼¶œþ(ósî§L ›læà«¥Ð7¶š¶m×\¯„E9ê8›£î³#1íyvïf¬¤R?AM‹kG ûjÃJz츘ù~¾åŽW”{‰¸ø•mlTí`›miü!®Ð¥AÕPgÚ}¡¢ÈñÃ(m0^¢ÈSµÞJܼrHV[|—ÃvÎAMVQçìü¦ówlúÑíÑ’tyù—ëÎñóÒ£ÎJx½³¾õ\X¨! Ä샅âªÉwÅÝaYÏ¿{zÇ>ddÑãè3æ‚üçšžÓ¾eEÒ¡Ë¢›-»i5Úƪ’üݲÙÕ.ëß u:ÔvYxÕÉW[Qï“Ö1êâÅ«¸“Kݾ6&rBºLC›We@èáf,ÄquOƒKk 37WTÔy}ç°&±¾ýZiîOh¤¼ž:ÞZ¹o'2—Ð:_(°›qïƒ+±Ÿ~“TÅï=/nN¸ÚýùÈšüÖ=¡¡$VtñæX7<Ɉ8”WI­écÿÍEùÿ‰*-¬Ä L§ÄS(¿ùÛŒ£endstream
+xÚíRiTSבª¡¬2©¤j=,Œ‚4£†PÀ
+…ž`µ¼€#ñWˆøàé:IU‘À-À}’$
+9¤rR«©
+9
+d¸I ˆQDNÞÈ
+¸MÉt”HÇP€`%½§ºÁ”–ÿ†¬éŃ4(ºF®ž,?åÔßòr5‚êþ`àêt @ŠC0M§ÆÂoÅIaѨ§gCI9Š(ÄX*
+&w%‹³ò-Žd!ZŠ@H…
+(åh<…Ã4] åß”¶xdPäZ?¾v*!G02J—Ο쩘ûgL™D ZÀaq8\ŠHíw§¤iÍ$˜‡,ðøž@Nr"*â= k¬¥³YNRW
+ AÀ95>”Aïb%By
+ÃZXA3ßÄÞ[?Ýwz{M®¤ªó˜µ{ÆBã‘­íç·2z³†{½®?GÁýn¿ÍþSä¸]ÉHØ7lHÉg›ô2ö¶{“­“{Å~Ù¬‡ŠáÄä—ËÚZ?PÜqϼx0½Ñãá/®Ïîfž·® ¿ÏTÒG
+gÖܺùêInÚ¦Ž>³Í×ëP -©ìLø^8æŸw‹®N<Æ«psõåù‰ûŸ9¾6Ó[ït§Ý¶5
+ eR«FŸ—s8îZe{ m±9®T¸Z&š½ÐózL¹X|èãbŒómn
+“þ6{ Ë]8àb|¿;4?§$$64ztÁ±
+EÍÔ'¸šn ×·®oQûb ë×å;¤Õwò|Š¹é{‘)㯿/Ù9óiÒ‹½Ïßè-z ç3b=¼øeºy »·sèÖ×¾0¹ÄËU_Ý#Å~!½6« mêŸüú³›Ç¤ Nx#ÏéæÑ/\Í<Ú}Ѹz_ùÇÒõß6™ö$J´ÂøKØ'ý•þu©Åp€—Лr6ê–ÇåÚ† UŽµ3“LMAAUKšfã=þó]|zϵ'FÕ.óÅnmÑÕ¹lþÄø¢ã"σÝ/½‡~.‰65Žñ\”k=´eAÚ.Öƒ¨åz¯ß¬Î‡Õ¦è:½jOš~œ·l•Í\·/íxMXÍvµî±pÎÞcÂúG\«òìsOÅM?(ˈ"Pç¶éÙr÷6Ɔ+µI»¢ˆ•),"ÞïlK+F`ƒ'Æõ™¼³k7ð½S_wû‰<T­ß½éáã[+íØ@Ùô÷ éé’ÏKrßlí ÖØØKšÚÌؽcÆ;?ö!Â-çÙk\}â¾YêÛB¯»ð±Uë˜<{e”žƒÆ{ZöO0 æJu­r¼ì/Ou3;›¤Žß‡>uÆLÍé†íA$ãð«“U%1ìÜÁžU§<]Èð±J&[z]n1ãÎ̱'%΃ψͯ…ÊwA~·+"ÖVLøÜíšÐä9^)ìøõÌ
+©Rú&A¶7e¾2K§íœ—ÕÔUºÀ®\ÀtÛzf­þKÞW§ ›-ækB# ï,UíÛ¯;^ ‰±Us·Ä
+µ¼çGã:ò­ÞÏ)\M§†–Öi÷×…”öÝy)+úÃÓ]·çRIÉkËø˜º¡v˲ÄÃ<‘C£¢±Þ°çbe±í'1h
+n Ï‚°#-x íšÞF‡6?V^ž¸Ô¿ëÆ®UrCÇõ²¼_±hY}¢­jÿntÛ·m±Xh5ëþGWã?ÿ.¥Z00vAÒ’t­çËÑu;/ÍIl÷¤"¦œ\ÕÍŸgÞø4+âp~½¶Ÿó.Úÿ üOP °œ qµœH£ý猗endstream
endobj
1459 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 2827 0 R
+/Encoding 2848 0 R
/FirstChar 60
/LastChar 62
-/Widths 2828 0 R
-/BaseFont /FFXBTY+CMMI10
+/Widths 2849 0 R
+/BaseFont /BLRFRO+CMMI10
/FontDescriptor 1457 0 R
>> endobj
1457 0 obj <<
/Ascent 694
/CapHeight 683
/Descent -194
-/FontName /FFXBTY+CMMI10
+/FontName /BLRFRO+CMMI10
/ItalicAngle -14.04
/StemV 72
/XHeight 431
@@ -13779,10 +14049,10 @@ endobj
/CharSet (/less/greater)
/FontFile 1458 0 R
>> endobj
-2828 0 obj
+2849 0 obj
[778 0 778 ]
endobj
-2827 0 obj <<
+2848 0 obj <<
/Type /Encoding
/Differences [ 0 /.notdef 60/less 61/.notdef 62/greater 63/.notdef]
>> endobj
@@ -13790,40 +14060,46 @@ endobj
/Length1 1199
/Length2 2269
/Length3 544
-/Length 3057
+/Length 3058
/Filter /FlateDecode
>>
stream
-xÚíWi<”k2e$ûrYF3v*ëØ:a4v*cæ™1Œf±oÅÉV–6É’c/BeK´˜("„Ò¢T”,Y¢Sï£Nõž^ßÞoïï}žÏ}_ÿëú_×õ¿¯ûã$Åi˜é> ÆÒ@#QF€=%À‡ÍÄái{4ö‚d¶- O @WRr¢°¨àš.hÁ
-†Á³ '_6`‡g
- ¿‚èU3žFŒŠ¤$<• FQH ôG0ñÁ Àb°Á¨ˆþ¹ƒ£Ñ
-LhVÄ×ÑVþÉoOgQ €ø9F^(]4Aнæxý_sÈ~ÍaŦR¿*ƒø&
-5l¸_]Áoâoº_áoìf424ÐZߌ¦%$b),‚ï·Ùù.7ñë±t&eõŠC!ºè_0'_
-ÁŸ2™Ð¡|…@ñ—¤–4H¡‘ Q<ƒøð
-Ø ¤Óד‚b¿ïI¨D  ð¡:aÇ!¿šCMKͤC4^ÞÓn×s^ø–ӧP¹ÆÜmö’þ¥Ò:ùóY¹l§¯q•çz»õ\‰éÒ–)ú!þ†æÍÈÂ" ÂÜ6IRo‘—vÚmžÞ„è™AµKe•ÌÉ{cvËæ½|ù‚»’±Å]a\"],fë’Ç«×A0iÙòÂJ^‡×ª†âËqS6ÔhG#ØN åw8‡o÷µúûUv{ðÕ¿]©löî¸aίó ÑΪ™ö‘v/Õ7j¹{MkÙ·¬‘´|‘X¨»[{_àˆz÷%WDÊû¸sµ“¢Ù¯ÞJÆ»,Wh+Š*+šj-yœ·NU ýRYöáJëáV~á¡æV1è@ ¾|TZç&iÛž¸d…ÑÝi¶lžƒÔÂå\8ïu^ò´ì‡œ<X¬©Ÿ|n—UGZ‡"óŠK´õeqeJêˆÉ õ3½Ï&ݶÚmVšç½æŽP
-pJžÁÔxs¼ºßã£åÝá§ö” Å9C"Ù¿½ØxAûŒ”u:8A<ŸlEõAuz¤%Ägí‡×á¼OÄšæ½ßù¶ ±!Ø›,;²"ïvÄýÂI”2Å9EÚ^´ ;®þ—^Ö)¡‰
-ø6™W26Óu†bÏ­t>²Ç|ºtéqdK Wª1øïãçýí_ª;fϵh”E¿“îz<ËXiWê¨bøÉë–î}1C•p}Ђ­ÿÛ#nó'ÝnïBù–ÂÓr;>ut5õ½Rsi/s¸‡R™í1f~RXJ½`lßu–øŽØà¡rwù}q
-ŸÌè»ÐÆ ˆÎÁ4ŽõÃ×ø³–sÊø³²AâŽ3ÒNŸžk—hœM?™!‰Ý‘zb¢•ÞUt¶qLLþ]ªòÓjܹ/šî‹^ºE|¸SΧa®{¯ñ1í;ð„û¾E
-Mš©>p­#SÇÐ7 |1í#çã‡èCMAû;ˆ}Þ™Wb—Ù^“²ƒÎ:oBƒ¹ož»ßÄÙ¸Tœ’$Ÿp@ÑÄ_÷…_÷1Õ+±Cˆ'Û‰¹Ý0{½qBù"ïÓÙÆߟÓùŸ^±¸i„ç‹"ßÔHÖ&íž8Ël…¨šÌ·Qõ³
-œVAà£nwýóK°½êäåJ-·=iVŵe‹c¼M !|îÖzÁ®/àíR/d|*ïÙjvåZZ½Wæuþb?vž)(fvµ‡s*»f5/A;(ѯéb§Œ·ty|Aøþl"jŽüÊy9áXI’ó8·ûMU´n£|ÏÓ’1ÕÈ^ DtPSaITïAgŸNqK¨RvÍÇ'÷súé©¢Gå4S­³’å‚ÉÚ¡%À_¸ÞHÊúBVúÝŸªœÓc”ÄŸ_y|6N´¿¨îƒØ—­÷—i2ÝôR1žÐóå{:QoN§öñ{öâsð¯¢CÊîèèMÊÄL$ ›8Ĺ·ç2;xwÀÛ
-¤ˆ“‰ŽRÉ¿O¿Ë³àh•èŽï³nºúg³eiSσkÛüÏ ÄÌZñO”;æ᧽'»™óÉyâ\q˜ UFdUvf¤Ý)‡ê„þ*uŽ%~cÛç
-b4rMMhÒ™Ó:Œ$ñNÁ‘|½£Šg°d§jEÿ|Ñ…*¡¨]N*÷B7‘…2&ÒL)Y& ³G†ˆŽEÜžI3Ï.só¸:U~F\TzŒäñÒyI´¯”È_ð(ß–¢öóÙ³ìöã8ή «ÄÓÁ²¾Äé×÷y’û•ë ø7ÃËØ›¶¥—ðÖaï ʧòôçwI þËþ‚ÿ Ä3Xô
+xÚíWi<”k2e$[–ƒxÈ2Â,vSöA:a;•1óÌÆ ³Ø·ˆâd+K)É’#[%T¶D‹ ¡ÑžRÑFY¢Sï£NõžÞ¾½ßÞßû<žû¾þ×õ¿®ë_÷‡G]Oе"3@;&ƒ£‹A¢±€-$€Ë&Ûu]A*×C¤`H„««»Ñ8tð—.hÉ“#r ·@.àHdzh
+²™\ dc
+Tá¯36ÌÐ(ÈZÚÚ:?,SSS êà@6Ê
+'/ûâ)D[2³Ü6€äpB±(T(…B6$›‚d€”T¬-ƒlà Y&`×õÃÑX j,
+õ+ ƒÌFÌ/!
+AþÒ™Šrgи îï
+}à1lb8pX\0.æßîà @¦‘8@
+Šý¶§Ð A0$Áù#LÒæ=Aõ{ZN[)Dè>½¡ßeä>÷™«l
+¤f+ØfG›Z·!WKJ¥H
+nM“‰<»Å »öíÄÀ4ºK>g¿\Añ ›¨«[ߨTÏy«›ÛôIR™Ò |ž=s†)(U—Õ
+;?Ñ2•YLzí¼•ï‚…ÝâµãÐAI{ D¶]lºùAs›HÓËy©Ú6Iÿá‘ËÖ¢† ·Ríáœú·
+Þ'±í}õ«Z(‹§y¡e†Ûôw„ÞÑé?ë‰Èx“Ôn­}xýiî³—rÉ^»«U;ËãªÊ_wTÞ+ékÔRÇ<ÕPº½Ô±·CT’ßÖ!$ ¨Éçê+¼äºR¬ãp†[¬­ z„‚S'üNÈQz_P S² R)êµëÎêVcŸ÷ˆ·?G /½–ßgqYçèà£)¯ ŽkÕg…/zÖOª˜æ|Øt¼¹f~µF›¦°.¥¢gâ3_ÓhïH5Ê;»–&JVí©o8ÜÑ]=#׶瓈ÔHÚ”7ºV´ÚOÄ}.Ù£3åÕmß-ðO
+Ùž›^®5:—•`.sg­.̾ùRù$²N(¢_[äj#µ‡SK.w*ãEŒ­åžÆN•z˜ðߺ®‹<‚2í¢Ž´±:Â[Ã…}ý_íLzg~l÷‡‘Fµ{zÁÁÀÓÓ;öã*›ç<Û={/4ëE#ÿh§T¶öôä¿«/yì±þ}|ð¢æÖ^åXÜÙ3²z[>ù{x½°8—_nù-w¹ÿ¹Ýôµ£×WÉL4ØÕôm*¯H:ÊY2ù㌰CÌke8
+QÈßó@(>]sÆH W}ª,óv±Ü•íF¶ó>-"¥#×÷Úÿ
+°‡¾Áš]:7\)ûÜî8ÞY¥¨÷N^:¯U×\&Bg]ÿÒ@ÐêUùÉ¥ý<q­KÞgTæ"xU=Ú{ØÊp£pw®‡¤"ÚL~s¼ ;¹Í}â¥éó>ž
+÷ü<Œ™G½vÐëÀ ªÖ*>ö\šÏn¨—hŠ€¿x†µkfH¾?‘îW.©8òçŸ*Žcö&x¶±ùùh+ÓÒàjÓÖwZ“cw®ÌÕ³?ÉßJX ¢!”ObÆâñEUY£¯ß'Ç$ù¬[±Îóœ„*œVlòz¢-Y'èÞþêþèÂw*12<¾TþoOVŸÒ?*oŸ N2GO¤ÛÑÐ=>Y)Éy;áõaÿC‰Ö{Ç„oö¼lElFˆ¦+ÝYRñÚ€y⶞ñšWHÙTn†ŸÐùË(¯P"A6„šˆŸnµŽvºÙdUq”c°«y]^¼@¨CÞ”Û¦ºs´:Â?,ÝR4æ·Í–ÚéÌ™2ÎVµ^ÙU%ç Ë圙¢â]ŸZ½+[Ê!Ï.ïô/µÆ ¥ÅÈ'×3¤ €7 ƒ²0᫉w/nÎÙG™ÈEíŒzT{¡,ÇP›îû¼³‘I¸tP1áj¥¤™Üá-<åö⬕G“`4óÞî³·’ãüˆ8Ýèq7 ó+]ƒ¢Û/tÝ׊pÌF«•˜ßõj6Ä…I÷yêký Lí;ø+ZææPc³õ@MJÇ#|!R¿×ke@lÈH{¨Åµ5‹s“Y6¼[cuïÐüšüÔÅ¢õ§,Œì òÅ-|ÌÒîŸÍþ³­¾Qñ™âÖ·¦Ò›‘L rÀúíÉ…{±íí™ÊBäðÂLœvzþ±ñ€“À<6y½ Úó`ž¹ºYz¿ZôáK¶ÞC |ÙZ¸1hÃ5þí® õæÃ^×ÌÐÁ£'áY.Ý»{›%†Þðµ=ºªœo 5¥fÌÙU2O™[&÷#¿‡ãÅVùhö-¾©AvŽ•¬hg%›ŽÙ½*ùôÁöqæÑ”KҸ}A¥°YJ@{~C»T¶c•¨¾¡?ý àȬùÀ<€Û”f[±Îs`š—ŽüXR"+e6täªX VîR;o©®‰ßêsûD»šÉ~ËÎMÕ”2NÚ¢)GàVg»jÔl«À.©4Eï¿ŠlY…(PäíÎâÙß. L<j?®A<¦Ô6"ã2­àöñ±~¥î±ìÃ9rÈû›qò,ô²{˵ŒK«¼ÊÔxx†pü3ÊÙ{ÞÏYÌ°\„Pè~æéz‰/²Ïrh×Á›n4y eúÌ®‹Ý¹¦!ÑóYx{\ÞÇïiEˆ;]Gìð+Í=Ÿ¸è2Êõ›RÊu7x.èråøÍVÞê…ŠŒ4•”]jÁ†O‚úwkO¬™ä#l"õÃœŒ&HÕóÂgZ~Ì}xÞæ
+–øÊ–Ǿ豜5úI¶ù>ªqõ¹^÷unͨòb8¥¡wû½WÏ.ÀRŒÎ¤ïªVo¿æË°«h¨šnM‰pñ¶1
+÷|ï“¢°[cû«ó³šür/‰Vq‹-Ai« ¼ÂüúwèYY¦ônÙa”‡£ÑÖãÞ)É›3©èwÔgî‹)*ÓÜ'½¯ha [TVŽkÅÚ âÃZË*ãw»|pKZ@ŸäÖxp³`ˆ•¹~¿2*Ó>/]9œªYS Ü
+„ÝÉXYÆÉî»ü±Î=;A]&õñù{Ç’Ö—7¾—þ\ ÷æC±ŸyRZ(òDõönVÜ‹#™C¢¾ƒÄâ³øˆªëF“b¦Š “é’ΉdqÁMEìnáÍpñÎR,y*ÕE>ý÷·¯ŠmÅ:dû“‡ì[/<'l]·°fàÖÅÁÇGfìD'«]Š‰oý§úÙ³#éÅ¥2I¸-Vl]~n¬c¡ó™”á:Ÿ.•A6ã›Þ•&èYZ0rß”²ÒdzÄ¯vOu;£\²~®N"ÎÌMóFäªDÎd–%-Ï"efßXÙ¥\Ð7múv˱EA!O·ÚOˆÓê÷B¾|ƒ§d§ZÙ™9ŸêÚ±=Êï:Hà™MÚ¥ ¯Q
+¼+}׸iÈ—:¬ÑT*j¾^Å]³1»R¸}T%Sh¸¤Wý_>ðÿüOè ‘Åa†YÁðȆ~(—ÿÍàÿqR@Æendstream
endobj
1448 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 2824 0 R
+/Encoding 2845 0 R
/FirstChar 97
/LastChar 110
-/Widths 2829 0 R
-/BaseFont /JQQLHD+NimbusSanL-ReguItal
+/Widths 2850 0 R
+/BaseFont /KRWRIZ+NimbusSanL-ReguItal
/FontDescriptor 1446 0 R
>> endobj
1446 0 obj <<
/Ascent 712
/CapHeight 712
/Descent -213
-/FontName /JQQLHD+NimbusSanL-ReguItal
+/FontName /KRWRIZ+NimbusSanL-ReguItal
/ItalicAngle -12
/StemV 88
/XHeight 523
@@ -13832,7 +14108,7 @@ endobj
/CharSet (/a/c/n)
/FontFile 1447 0 R
>> endobj
-2829 0 obj
+2850 0 obj
[556 0 500 0 0 0 0 0 0 0 0 0 0 556 ]
endobj
1384 0 obj <<
@@ -13843,7 +14119,7 @@ endobj
/Filter /FlateDecode
>>
stream
-xÚíxePœë¶& ¸Ú¸;Á‚»»§Æi¬!Hp‡àîî.ÁÝ ÜÝÝ%ö>sî¹uæþš{MMWu×÷®g­g黪¾¦"SVc1µ3IÚ!Ll̬|
+xÚíxePœë¶& ¸Ú¸;Á‚»»§Æi¬!Hp‡àîî.ÁÝ ÜÝÝ%ö>sî¹uæþš{MMWu×÷®g­g黪¾¦"SVc1µ3IÚ!Ll̬|
àáfóü/<þMÃö¯³âhé
Ðeefee¼ýþóû¯“þ¿ÑH€MìLÿš5lú6fÿ!ø 6qvt|ëîß7ÿ-éžÿxÈd‚´8ggò9À*9-R—50*®ÛÓÅön о¨N=?קҮÓ;9dƒ·Ìè©*¹þßK³Ûì‘ýóŽ,ýîPךÎDÐY‘']w.æ*u+7î‹AjʱÖwóùuX.VÍÝÍQUƒÂ'xâ_­Žç¿é|(\r}p(ïìѼL’j£pÛ0ê¡°ªóŽŽ©ã~ßÑô ôw^Âuï2dF!R}vE¥÷qÈ$ÒÑ(ó¥”ÁDÖ‹ùE¾ìêê MºÌ©’}‹9YBbS™¶ý^Cï§mÇ4á åPÇgö›XpÈ´ó1ðegçB˜ú´žpDøj]Éy&w¢¥**g›×L·v醤Ÿ§œ­_öÓŸz ƒ·µÕ4Lm¯`o¼.W¯ú|ÞÊ?F€ñv. ©ô¼AíkLMàrWôêk¦ÈiÂ~éŒKé ÍKw¢ÏŸ‹ ŸÇý¼_ã¿ä²—B4ª¸¼^g­vªðĶŸÃRkÞµT僲õ£»ÒéðŸðˆ«)uoG%E="Ó)­“%KÜ_|Š¹„È& %*9¬ …‘Ö¶v£†ïkGะ»jcøá4-ï㊚©éEŠ+Έ–®•„Ëô\ÈšgœÕss×·”¯ø—«©—!´¥2cí7Ôaý¦"!šÿ¢éïØ…tg–òî¹·þc|LDÉ\‰¤&ÈôìýYx’Kèùƒæ7Õxÿµ›Ó
:!vV— žþœã®°‘‹s§)¸›ú¤J¢âÞ‹9±ú‰$cÙS¥R›Åa~oÝÿÚjŠå.Ö6X⟼°’G¢GÞ^3¤:4Ò^UÚï¿ý±S_¹´Dá{NË â2ÇG‡Ý-?±ŒX€ 9~C÷¨Çn¼Þ¿#¢ÍRFÒËh’x›+Vr•7.q&cr¸&zèñHcý=H–ºmÁÉ௳\œÝÜ•Gºt Ï|dn÷· “ŽÎ5‚~aã;õJbk¼®ùdž¼æUeÝ™R¾l1‰Dn%ý¹$c•Ö¾¡¾Š—ÙÂ×\îÙÃ[<gCÅn ˆÝ‡ßz]éö}ÙXêïˆØk©hhà:Ï]å+6îˆ Y%ŽoªRj¬ —ºµð¶O–z¼L¸G?Þ/)+
@@ -13890,23 +14166,23 @@ a"u"(–瘖³+ÿY¨®kÐÿl®«Û*ÉÓ fÙ»¶nÉ(’@Kð v)lSòÙïªRiyS§ª“—]ö®7|â•O1ì:Âw w
GÅQyrshÄV@sÒ9ßHfúvõÒ<"’™ºdæ×<>K„ã®YX6†j
<´â°À1¹õ¦Rí³Ì­½²3 [Üñ{ƒ 9ȉ¨Ú^ûëM=lÑø†élâiŒ ôxñKfJÿ2ax´˜r‰ø¯l+A#0â4$E€“·@òä—FÎÆ\kwX˜ëï£Pÿ¸™­l™°VâÛr£Ä›þK¸€}<”×OÄ ôrþ÷–ë¬gþ°d„.îZ`ɵ{;Hws|äÁ ;ê9Ÿ1QÞJçY4ù§‘Òû™ótWtê©ÔáF¾Tâza²‡à¢Àyb®f¤û¬öä9©à´ïtŸ‡åÝ2¨»å¡·ýòÅøn›}
ª²´Æõ÷¾6ëˆNí•Eâx¹èµäW<X1é‰þ¬'®†’{§#ÓxÓ˜v¨NUÒÒ„œ3”Ï´„5ytrøzÏwÃò†¦k±ÄÍUÖ‹–è;NÓë¸OKî¤côËêFmIdâ\MºÑ€¦1î2ÞM<ÊiÜC+W˜‡D- 'X,ò¢T ßÚåj)ýrÊKI‡£à"ç¾YLzׯ
-c•|z{Ù†B ¬À‡·ëA?̓9¨„&Þ¯žg¯ƒQÙl6…²r5§ Æ[€DÕÙ²| "–,㞸. }f7ˆO<<¡}«*Vù!C—ÛÖ î7+cÌ.™1 ÔHý‡HïFg®/lZÝ) I³…ÕN"–…µÄÛ¨¿w ù££Í‹(É¥ÙKhùŸaP{‹jáÁQ®’OHÔÃñž<ˆìN¥¾>¤0ßqÛ,ß¹ ŸëÚ«ñ~·Žlv ëx®·¬aýo~þ?Áÿ&6  #ÄÎèhô¿
+c•|z{Ù†B ¬À‡·ëA?̓9¨„&Þ¯žg¯ƒQÙl6…²r5§ Æ[€DÕÙ²| "–,㞸. }f7ˆO<<¡}«*Vù!C—ÛÖ î7+cÌ.™1 ÔHý‡HïFg®/lZÝ) I³…ÕN"–…µÄÛ¨¿w ù££Í‹(É¥ÙKhùŸaP{‹jáÁQ®’OHÔÃñž<ˆìN¥¾>¤0ßqÛ,ß¹ ŸëÚ«ñ~·Žlv ëx®·¬aýo~þ?Áÿ&6  #ÄÎèhô¿
endobj
1385 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 2824 0 R
+/Encoding 2845 0 R
/FirstChar 35
/LastChar 122
-/Widths 2830 0 R
-/BaseFont /SGSPAZ+NimbusMonL-BoldObli
+/Widths 2851 0 R
+/BaseFont /GRIABL+NimbusMonL-BoldObli
/FontDescriptor 1383 0 R
>> endobj
1383 0 obj <<
/Ascent 624
/CapHeight 552
/Descent -126
-/FontName /SGSPAZ+NimbusMonL-BoldObli
+/FontName /GRIABL+NimbusMonL-BoldObli
/ItalicAngle -12
/StemV 103
/XHeight 439
@@ -13915,73 +14191,70 @@ endobj
/CharSet (/numbersign/hyphen/period/slash/A/C/D/E/I/K/L/N/P/R/S/T/Y/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/r/s/t/u/v/w/x/y/z)
/FontFile 1384 0 R
>> endobj
-2830 0 obj
+2851 0 obj
[600 0 0 0 0 0 0 0 0 0 600 600 600 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 600 0 600 600 600 0 0 0 600 0 600 600 0 600 0 600 0 600 600 600 0 0 0 0 600 0 0 0 0 0 0 0 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 0 600 600 600 600 600 600 600 600 600 ]
endobj
1368 0 obj <<
/Length1 1608
/Length2 7939
/Length3 532
-/Length 8790
+/Length 8789
/Filter /FlateDecode
>>
stream
-xÚívgPTݶ-HPPÉIhrM‘œirNlèZº›,Q@¢ 9G%#A2HÎ9ƒäŒd âC¿{ιõ½óëÞóëÕÛU»j¯9çsÌ9æZµY´tyd K¨"ÂÍäåЀÙ[:£tÁj<²8pk&`a‘CBÁhÂAŒ†>B!
- ³‚:  
-uû €¡
- sDn³jÉ+þÅm Fÿ΂ݺëÛHÂÊùwI|·0·^4怠¡nèß¹,¡
-a%ð21% ]F‘Ñ5 ÿ¼­ˆÕè˜÷Iï}¶ïGD³Obð²hÑ‹ëÒ@ÞÊ¡g7uî“;Ž?×U87zZÈálÍñЃ,Z/&ŽÖìG ¬ "\þ|æy„I»†áž‡jKØ&Oø 6V´uÌs¯ï>jDâ~çðerÉö%e>w$ò¶J¨ˆ$k|X‰A\–³³Ëóõû9[GowWgó1Në: Wz$>‹˜ 6!k˜¯S:”‰~‘g„e.0¦ãclKP«>»àÂÌ1yÕ’ Àd ÿS¡Õ¬çn9´éçï©|e>·'ëC‹›f§—ЛÙq€úYšµ«„8ë$fÚõSëÁ·RÞoÛ@*¾« ʹAÔguG…*|«eB‰;}ƒv©¢]ùßÖÒï6”‡yÛ}sx/Gj¢T«$Jñ£•H âQ–®‹B~RlEÛ1w.ì*Çbr|¬½}$nÖ‡·Gs]> Ã?V1òx£+w¿³\õ9’e‡Ð†ŠØ¥ÍäÊv””7œœ¸äN­Ñ÷«/ùŠö.‹ú…&Ð)âá0äPùÝÚ…k¥ èé¹éÛR§ö
-^8³÷&sݱ­|&éŸî#6cÕ¯‡‹úœ‚ œEë=öÚÊÔïƒ.Œ}(pÚéc8hXÔêëeM±¸ÄÈpefI­|š
-8xÏŽo‚¹ Lœ¸
-R!ß1Âr<;Þâ$ûg2³£§Ä¯Cǥs‹©Ï¹å‹E#‡„2‰ó9[ª«eÖb äBñÇ›;qäë4‹¦y,'XÈ.ó¹^Ûû¾çm}l3S@+'éY“W[ZTç¤ay þR#ÁWeôùì¯w<Ààø!ËêHô‘ªÝ°a2Y'ŸxVc[ЃÖ̺«P‘|m÷L¨3X´•¢|FSp õ6!wˆ¥qi­ÍÖ)/)y4ž^ÉdÏ—“¦'»À+Oð+Wë³Ã/HŽõ°8³:̨%¾0€°nô™¦RºNSX)šÄ©wo¸Vá"n®¡U®uë.ýe‡°ƒ5­†âÁ„v0äÓ=Ì­²Ðµ”ž²­ÔÂtwï‡tKy…‰ ö €À›Á²Ãí/hÆnfÔÛYÏß35|\Ã)͹b€½^s$QÛ<.'DÑ
-(^‹òp߬h7š” ~Ý¢ñí‚…Ë.^,°‰ðzÈî§D€×û3ÊZú’|JRA.KÞ&[å/0õî¼2³–ÛOy«óCúÒB«e€öžt‹:¹ïäCA2µÅËV‘ÀP½'Ûz”êÅŒ~,ÁÑ’ØAkQè
-Çö7=s`[šzþáÞ•MåME÷¿€uG–h‰+÷ÜKI•9º¶Z¶ý3h#`+]¥J¢æ·šõ¬¥¸¦4 G‹Æä5ÍɦŸñ ¨/„~ 2…°ëIš%ƒR*µÈ¹ï¥‚CSž[çm•&ê,œ^ˆ®ül™ò‰0¼3F£!âù2°gáȺÝYzñ‚Ä^˜X@°æ¨Í›#díQ¿¸ ˜ßÈ?'ty…Š,ÿˆbx_¸Âæ••ÌDC«½¬}F0j|{¯Õ\þ˜ßsžù¬—}8$QŒáinúAµ$o<½öR•eµ#"Uòe¥rÞ‰Kÿ ñÃ=Û`GS"“H®bʘ#6W?³æ—å‰ÖÎ+ëíø ·¯ô– -ÝI{ˆQeY:BøÂb¢÷‘>:_/!€ÐéË@íáÞÑȬýu¢‡3èµ+òLn¯óqŠq`Uúmò'ÄaeG-
-óŠW¯C鶰€®ô
-„©ÊìiÝÇ.h™³ 6'¢È6
-VÍŠ2Û71sz8o+VPÚ^­M£õ‚¨‰J®ÆÕe/ýéœGÎ>Î
-òÎqE„¹¯øç*+nû…Æ—²;OeŸöY:«*š“ïgœò'\Ý7"µkûl‡ÉqèËÑÌ'ð9‘Tgeix¿qVV^­ÐÅnOiêlÄ&Àh1ÿ¥n† Šo-R’È!î±~x“ýè‘·ÞøyoÏõÏ4íÙ{¦Å\4X ²‰¤÷•Ï´±ÝÈ/åµ½¸N%{’;4u)Ç!‹=íè¡ç"Â3¬¶Ðœš®`¬õ<xö¡Øà
- 1±#-@ëÓóÄ<ì¾âæ©)[‰Ø“9QuC—̨é-ûFæÉ€?›ëþYû|96£àj’òÖåUNºnî…XÓ°‰Ä·ÏGÑÅk'uÁêFd×É>0¼f»åæ6ç -#vƒl|¯göÕšŽùí:qÄÔyN¿3-y„¨Å–UÇâ${Læ6¬ÆÚRøÉ™¼ó¥?"áZ¾þþË\øQ>È” §{õîû7l]
-™mÜtW?e‡ÌŠØÇRXÝŸ¶« qÐNøb%2t)( æß-Ö§9¢A¸‰Éš2žŠŸ±;Njf:¯ƒ9NÃïÊœT)š…ùïš=l“'v!V‚»ú7?êÑš\“Äk=ò†º¦ù^š-2~ë‰Uïs‘.»o¨ËªüaMfsÍ%W2b+¯ø¾
-(Ì°?ø6|Kú‘œ™µÁ86<6zlDÌ)®VésF¢¹¦GfôZ¸èøJü P!HlÆ<¼H›8ºîeg©õ/¶D-¾ú‰¤÷ ã›UêYœqáÕ±Ç øË
-*Ïp›Â¤A wÓ'v•ù7Vš4¶¨ž+jÙÚN9dB<o¬L©oÝÌ#%p áÔn³òäAH41ס tö. Zm½0ë¼r˜$‰®XrJJ&¼è ¢—Ë™¯`¾eM¹»3µ¤¯û_ê÷ðö}d½)(A=À_D‰ÔôÛòbN¿Ø}® ÆÿÄ5,¢Óc9A7!ô{•K*J^ŸÀ~™j'÷%U­Y Ü{ñ•Ý‡å]ä"Lžïxiå2¬Ž/ïb…U¸ƒjå×)4§"ò§ªÓ
+xÚívgPTݶ-HPPÉ™&çÐÉ™–œƒº–††î&K(HÎQÉH ’sÎ 9#$ˆ€øÐïžsn}ïüº÷üzõvÕ®ÚkιÆsŽ¹VmVF-]^Yª„p@óùž4`ö–Î(]°ƒ¯ÜEXYå‘P0†pP
+G8ÚCзÿãºP(
+²BÂÑ€Û¬Z
+JñDÛ‚Ñ¿s£`·n
+÷ßoÓ?QZ·ª£õÜo‰ýWêÈ?¿1ään
+uƒZ|™BX‰¼LLIB—Qdt (<okbu:æ}Ò{ŸíûÑ쓼,Vôâº4¯rèéMûäŽãÏõg\=-äpöæxèA­3gkö£¶Qî ~ó<¤]ÃpÏà µ%l“Ç+Ú:æ¹×w醄x‡ß9}™]²}IYΉ¼­*"ÉVb—åìì²Å|ý~ÎÞÑÛÝÕÙ|ŒÓºNÉÏ*î‚MÈæë”N#m¢_äa™ ŒéøÛÔªÏ!´0sL^µ$0ÙÂÿTh5ë¹[­Fúù{ª\™ÏíßÉúÐâ¦Ùé%üföC ~–fí*!Î:‰EvýÔzð­´÷Û6гßÕ•Ü 곺£Âgü«e‰;}ƒv©b]ùßÖÒï6”‡ùÚ}sø.Gj¢T«$Kñ£•I âQ–®‹Â~ÒìEÛ1w.ì*Çbr|¬½}$oÖ‡·Gs]> Ã?V1ñŸx£+w¿³^õ9’e‡Ð†ŠÚ¥ÍäÊu””7œœ¸äN­Ñ÷ˆ¨/ùŠõ.‹ú…'Ð)á0äPùÝÚ…ke
+¸éÛR§ö
+]8sô&sß±­|*åŸî#>cÕ¯‡‹úœ‚ œEëÑymeê÷AÆ€>8m„ 1œ4¬jõõr¦XÜâd8„²³¤¿V>M¼çÀ7ÁÜ&N\€*ÄJÒÜOµøï8•^Ýçôáö¼J%qõ‡ ‘®.µ&у;ìXBÒ0ÊÚcVKŸ0-SÛ·ߌG?óí·Eƒòñ(€(§¸Ëš’=´øô•ú+y\J6.æꔋ‚œÞ»ó^eúÞ‚·V„(õb*$Ã=AÁžéÌmEéïa9žoñ€Rý3™ÙÑS×!÷8ÎãÒ9‹ÅÕçÜrƒÅ£‘C™Äù\‹-ÕÕ²k±ò¡øáÃÍ8
+ušÅ?Ó<–“G¬
+hEá$=k
+jK‹ê\ô#Œ²Ô_j$ø>Û}~';Äë08~Ⱥ:{¤j7l˜ŒEÖÉ/‘ÕØô 5³î*Tô#ÛýêŒm¥(Ÿ¡\B½MÈb\Zk³u
+ÂKJ^'W²Ù3FÁå¤éÉ.ðÊüÊÕúìðã‹’c=,®¬3jÉ/Ì ¬}橃”.‡Ó6Š& êÝîU¸¨Ûkh•kgݺKÙ!ì`M«a'x0¡ƒÌ ùts«,t-¥§†ìC+µýÝû¡ÝÒ^aâBý" ðf°Üpû š±›õvV¥³ƒÃ÷Ì ×pJs®a¯—ÀœÉAgÔ6tå„è/ZÅkQ^î›íF“’Ô¯[t#¾]°rÛÅ‹60^Ùý” ðzFYËP’OI*ÄmÉ×d«òñ¦¾âWfÖòûé!ou¾qÊÜCZhµ ÐÞ“iQ'÷|(D¦¶xÙ*ª÷d_R½˜Ñ%8Z?Èb+
+à‹)קw&¬š>òÕäø° DxùAt€næ£`öVkøqvëð1']/¸t ¡yô8,TÎ.a Os%/i5
+ÉzY`yÖP@-ª¤9¯ŸÇæžÓçý¤>Vo€Ì¢éªd>Í/ˆöõÏ}êY
+³¸~h—•¸8˸ƒŒFF¹õ•Šû?ih
+vžj ×`­Ú[­›öÇ|-…>°ë=].žàŽJ,}”›­ûÈi±ð!æÛ‹õÛ‰ÌJ«—–r•øœEk±9,ð”ˆO’ܽ…n®Ðq !páxÓ“1¶¥©~à]ÙDXÞÑTtÿ Xwd‰–¸rϽ”T…³k«eÛ?ƒ6òg¶òõPªj~«YÏZš{JÃÁp´hü@AÓœlú)ÿ€úBè×@aS‡ž”Y2(õ¡r‹¼û^*84å¹uÞVi¢¾¡HÑÂé…ØÊÏ–)ŸÃ;c4¢ž/{Ž¬Ûe/HìEˆ…jŽÚ¼9CÖ•Š ‚ŒüsB—W¨Èòè!&÷E*l.\ÙÈL4´ÚËÚ÷h„¢Æ·GñZÍŽ<çYÎz9†CÅŸäá¦TKñÅ3c/ÕQYV;Ò+Q%_Vªdá¸ô¿ð‘8ܳ v4e$2iä*õ Œ9csõ3k~YžØaí¼zf¡äö•Á’±¥;Éb1ª"(GO_XLô>ÅGçë%:}¨=Â[#™µ¿Nôp½vCžªÂíu>N1 ¬Ê¼íQù„8¬ì¨`æWn-aö­§m+´Y¬~5A”XĽh§"hV לÞ_9æJqB—¡Ìh'·ïžrs)¤<ÃÑ!]‚ŒšÙZ~\ÍHÒzU´NÏh“[€Hái3
+RgT­$vÊ®éï9‡á׺ù§ßWŸa|…psØ´"ÀÅÑÁñgð~¸¿Õxy¿oA‹z¾Â¼âÕëPúí
+GZ÷± Z6ÂlƒÝI§(²‡
?Uôü¬Ë÷
-žä²5Äõv!.[7$›\ÉÌù ö)%Ü-DÇ9øÓ\¯äͯø7F Oâ×ÏžÅÚÅ8i“£òÅf&\†
--â×6™…ÈXÓØø,ï¾ÆÇ„Ék}YÆð”êA±<‘‹?qâoYêLÁoȯü¸"‚˜‰œñµŠýVw$€ÇÞ5-M¶Ãú&š{ ŸQ}2Ñ»5ãùáö¶xĽuéBÿ;¤»¥ªïÕ\rþhüæx¿Í?‚^iºÇ&‹ ÕCžËQµb\¸THüe%¤¼®QÕE²üO¥}¿:y´ÀJ ÛAHù åP¤-´á€[kNÔ/ˆ<Í©ÁEÁ‹zHÃ('¿8/ÖÈ><ï·NZN,±$íŽÝ\ë|.ʳ4
-Úu&IFlµPÈ‹˜<>ê¼çO}ö•>ݧ·ðgžF±;YuQTˆ §ÿæ‡ ¬ßôtD¤ûfP˜{s“cÞ·+J .>xi¾’²È¦{¹3Åš®Þ~—ÛãŒd@ãa‚äÄ·Ž„kï887Kp¥ôRXŠCãóÑ°áTîEQæü^w~@³ßG±¸½Kë3rÎN¡ÀK’jùÚ
-}~ÏLcÄçt>í ÔN$c÷¬¤úœ ú=nÆ©ngþõžå ÆIE^ÕÖŠ
-!dÌF æö/¨˜õpŽI^ø©Ý©²‰µ([|«Fv/f»H/>_!üËê¹ocG¥%ÅÉ s5“•ŽnÇ5¾Z‚ÏÝŸ¤±ðJ©ýšžÇÝ\UËúö¡ î[Ÿ2Êíß2û²Qx„úûs‘½¯Ø«PU XäxŠnO
-IÇäœ÷îÍóÍè v ó4ýð CihTðÞ²° ÇÒf%’2Ž
-Oyâ|g܇;Òðh¬Ù#1|éôë6Ög²›œ·UëáÇ rk_‹öw€º«¹j!:/œ*¼È_Ô¦ ¶S+³(#>û­pKÕs%ìÛø“hj£ê·ßN
-\O–ˆuõ–.½½h8¤Ëµ[%-n&í—o{Ø,OJ‹ä k ƒ$4Œsz!¼¢‡bÃ7Ú‡vçˆemÝÊ5Hcý™’W¤uÊTãO³‰³7 †³Ê;B¥È†“ŸÌõáõý"¡dËUŒtúÀóñ[í¹0!Ã<Ú—(U½›È>ä9íÁ;˜Ö€7¤ÊÞ­:À¤Õ²y £7À­ÔÁT}I”C¶–‘Qîì¹È\·ÞWõ3›Ã½ZÆ™&ÝhÄlÊÞK\o`~~çt!•†ó(à'¤§tq Y†¶bëÑ4r3ÛDZëòa[ö_ó> (ÁÔE7 bO;8<0¹8Ô4;Õª>*ËVëu?+«h–H½~šq»x/·}$ãºÊá+¡V8|ýƒ!Ù‘`Ç©³Mò×ÎàåÇøQÝ'ï³eò^JYõžâ7:¯?¾kñs”ÛqWç®fa Š’Œý4>§ ÇZ'úy]Ü;_GdRÁú È•†bn¥æf§çƒ\Qù²1³7›
-3ú·<Ȉ› h¥=¯`·C-ãZ*¾•‘Û3ØJ`+>…p˜;w cÁ¿ù\åµdf؆:îÉVÂÊ£QÏ
-Ló¶Ú±{i C¤üD8þúñ7.4ß=£Nƒ~ØA·™Y¼ŸíQíì
-;dÕÚÞùYÌú.ëÅ3¬m
-Œ·Ò'OܧZM•ÈkÚEä»óÔAøV¿F+áÖØ\7H”ÕÁ¬–ÞÙ‹s±
-A7µ¢¿ï?å151"yUF„I×íòÏfwÊ*Q;1WG¬ä‡üÖWG9
-dòú“¢Ï¡ã6–±hò¶þ|áç RÖ/?‚jïVÈttf=]«­mîXCh-»E²`?|(“躃Øçw¹©”]“RÉÆè·¸¿½ú‚[O÷^Üä'^m[ñ™4]aÄ‘þÖ9ö5QºÄ”ÔbcÅ‘n"¾ÿ]½GF&<ç ¤3dRµ°%‘ ”Ê.Óµ­ÉÂÆWòQmw)‡GÒDa™e¹ÔÖlNA|¦Z–ýÒ½‹Lýƒ÷ÛE}b\ÝîL» &épƒ·gr[‹÷šßžz÷ìòdÈÄ º‚íüë£-« ‡Z‹ÎîpnöŒ´Ð|˨) 2xqô¦S=w¶Æß jIž6a›6Ä.OSy]ÆñþS§oa¶Ô«ˆÌ±â£Š51r»%ob2üpȈEÐ&â§ÜÈÕöIòÊp¤ì‚è¯ôV²í­NæçiX¯Ô²»Í æá‡A$­Ñe$D{òD¾Ÿû‡‡';,Ög¦•k\Ü Gái3¼q¸Qþ¥L
-Xæ"¢Úbò3¸ý]ub7¾‚夨õù-ÅsÅK>ˆ<– !!’=j‰Á bê÷](åÏi·t9ù
-KÆ.Ha½+-Ε[åòÿÑÒñx Ciif|-is \‹¦ÿ€|6±m¦ÍñŠ =“1ä`K^!y9ÊÌßIjX÷žXHO~ûLýì«œÈF7v—")òï@µW™[zb™®ÕÚ4“*ý÷L´ªŽœ0–¯z$¹Š/‚„à{>UiO³ýE©²5êæ÷”t¦=Ä;î
-€¯À4?œt€sTeù›!4J%h¹‰¸—ŽQÏ:µ¿yÓ´(kY¸³½M>X‹– sôqÀirÐÀ³8!ÂùÕÏS€¤Sì$óÅ­$R÷Ñ•amPÍ$?çÔg•ËŸ˜Vd[ƒ1ËiÇO°<Ø_¥¶%yÐœáZ.›eˆô¤Xþ*Iò{()õŠ_¼¾êW÷ºÛ £x}kã¾ããVÔ³Ö–I͵'EÜöGi‚õÂV;áåÏ¿Ø×6™+Ý$Éž {ýTö"1Ðœä5v-V$ÍlÂÞ¯«ª›bݦ´³ã)º§ÊoS6”hLGñ…îÇ,v%¹u©I~®]%¾)Ñ}ú‚¸2¸  âoJ°]^¯ÿRÓ HmØ;Âúž
-8>Ô
-²©
-3ã½+ôÞÊ•÷aˆlª Ïn×–OBw:ëÌDöƒ^ቃ€¸Rn¹šd¢¯ÅÓò;SÓtd®ÌA~z M“èRVt}õÚ+'˜ †4~}µ÷°}³íÚš[T:áµ%|Å’Q"èXê³ÚÎÝ9"áòç0Tw³È‹d·¿Pô@åÉ@ÅìÓEâòxOæî¹à åÏIXUb_4²üQ ¨:ù©^\õ47ãÇU¸µ& ²ðc óŒA«`á0Ôýµ˜—™žÌ‘¥ˆß·%¢y†.Sz¾M²hàž·ãý°óg #$SÿçÅOÁëÏàBø[yã¦5åž Šq(OÜâƒL#‘'Þ/ãØ«*ûü©¯ð5X1œæ)ol×Ós[2L&³d´/øÿ—ÁÿøÀ
-#Ñ{0ÒŽàÿ
+žä¶5Äõv!.[7$›\ÙÌù ö %Ü-DÇ9øÓ\¯ÔÍŸÄ7& Oâ×ÏžÅÚÅ8“£òÅff\Æ
+-â×6™…ÈXÓØø¬ï¾ÆÇ„)h}YÆð–êA±>–?qhYêJÁoȯü¸"Š˜‰œñµŠýVw$ˆÇÑ5-C¶Ãö&šg ŸI}2Ñ»5ãùáö¶DăuéBÿ;¤»¥ªïÕ\rþhüæx€Í?‚^z:“Å„ê!Ïå¨Ú
+DЃqB[äßTœB<ug(°Ø˦×ý9J~¿|º#ß*ý2üÌ‘ÔLÉ{¾OO±ÏïùƒiÌ‚øœÎ'=Ú‰dž•TŸT¿ÇÍ8ÕíÌ¿Þó£œÁ8©È«ÚÁZ±€,m³2ÓDŽñC£{p›® Î>*«ic:5uª ÍÐåS;ùEÑÎÙÀHoÑÏWçx ×ØÄИ0uÎlPÎ5 —¢ú½»<>ÕW:‹ƒoY2’˜HJyf€ÇòTcª§Y½ªÄæ'Jçx{êI_Í[¾ÆuE^n¥ñÙ±pmËISDx°ñ¸U
+JŠ+Y–¾^#Y%ÿ GpXŽÒ0Nãˆ&^-`iªiðŸ;ÐNU‡UîS’7K±Åüð[Žç&“vñ;ÁsZ§â§u‰ö´{§¸àôò‡ëòÔˆBW ×B‹CóáiòT£ÊÚÿ“±'ŒÒÞÚ¾ ZwÕ¢‰?UÛ.[ h‡)qŒÐÇ
+¯5Áƒ ¨“¹Ýa%µxkÐÏ_WÃp)ÉâüdÃS<C&fåc—Åo FÏT±Õ„ú°
+)è@#{ë>Y]K¢þäWOk‹à0É
+m›Hi‘œô d„†q. „WôâPløFûÐÀî±Ü"“­[¹É`¬?sòŠô£NÙêqüiv Ž&#‘ÑPb6G¨4Ùpòã¹>¼¾_$”ì¹J‘Nx?~«=!ädœGû¥ªw³
+‡¯0&;ì8u¶IýÚ¼ü?"¦ûø}¶lÞK©#«ÞÓBüFçõ'Ã÷bc-~Žò8îêÜÕ, |¦,kÏ%äq†Ö‰~^÷ŽÓ×™E°~r¥¡˜[©¹Ùéù _T¾lÌâÍî
+ù¡M½Þöxhá,ÿ
+áHQ þY»Bå<GJÞ,6]JOU?ÀÕ«Uh´\ï MNñÂçzŽùy¬˜+߸+¤ „#äoàùØÈ)ÏøÅ PØ
+Û9ÔB1®¥Ò[Yù=cÁ­öâS§¹óp—ü›ÏUÞYKf†mˆ¡ãž\%¬,Ü1õ È<o«»—ÆØ1D*@„ã¯O‡¿q¡ùî)uô¼ÍÌâýükjgWØ!›ÖöÎÏb¶wéÜ/žbmS`¼•9yì>ÕjªâD^ûÐ."ß·ƽú5Zï°Æ溱@²¬®fµ4ðÎ^‚›M²¸©ým|ÿ ¯©‰É«ê4
+$L¦nW`6»SN™’h܉¥::`í ?ä·¾:*Q “ן”„y·±,ˆÅ’·õç ?‘²}ùT{·BV°£3ëÉZmmsÇBkÙ-’Ãøá+@™d׾€ËM¥Üšô³lŒ~‹ûÛ«/xôñTpïÅM~âÓ¶•˜IÓAéoc_3¥KNI/6Và&âûßÕ{´adÂ{Þ@:C&] [°A=Ûe¾¶5YØøJ>ªí®(íPãHš(b"»,ŸÚšíÑ)„Ï\˺_ºw‘©¿cð>b»¨Oœ»ÛybôÃ$N`ðöL~kñ^óÛSïž]Þ ÙXƒ‚AW°}´e•!]¨µØìà×fÏH Í·Œš’ ƒGïa:Õsg«1ì8ñÍÑ –äiöÉñhCìò´g¯Ë8ßêô-Ì–~‘9V|T±&Nn·äML†‘§ÚDü”¹Ú>I^Ž”[û•ÞJ¶½ÕÉò< ë•Zv·yÁ<ü0ˆ¤5ºŒ„hO!ƒÈ÷sÿððd‡åÁúÌ´Jb+"ä(2mfƒ77Ê¿”Í
+8*v4ºÏÄ^±ûà+h5zê2¶;šÞþ,-õQü! C$yw9†CšJO ™ňq\`±"H,Þ)T<icº ¿ª}ZþK§{«Þ®ûªè&4CSQ~åâ7ê
+QH;ǘ¢&šùŸe“ô¿žUÙ|µ°Sc0R2YE]¨
+‡á{__bçâ.°ßþ
+LóÃI8GU–¿Bã¡\‚–Ÿˆ{éõ´Sû›7M‹Š–…;ûÛ䃵h¹0GQœ&÷ <‹"œ_ý¼ÈAze‰ÀN2ÿPÜJ"u]©¶ÕLòs.}æQùü‰iõHö5¨ñ‹‚‘öqLðëƒýUj[’ =Á®…1Ñè²YÆHOŠåoq ’„!¿‡RÒ¯¸ð%ê«~u¯ ³¿0Š×·6î;>nE=m½aÔ\{\ÄcïQq”&T/bµ^þü‹}m“¹ò A’ü陈×O/ÍI>c×b%ÒÌ&ìýºªú· ¶mJ;û7žb{ª6eC‰Æô_è<@ÀbW’+Q'‘šäçÚU›‚ݧ/ˆ+ƒË°a
+<¤þdÑ _IÒõ.˜ê¢Ï\9¾§é-xÚÖ-9?›ìÐv_ wóý}¾éH`…Ñ'>Êß4¬>äŽT‹¬ÌÛúGäµGÔà…$Í ï‚7LI›u`žUJ2ì„΃79ç¯~f´lá­ÊΚìïW 5?|¸':U—.ûrJo ÇÓlÔË5áAÜçxE ³º×ا‰3Ç•ÚTñ#åKþtâ•.iKW@ö/É›ÔÑ÷ ûj&Q ¦Œ²È˜¥t°Èð§Äh-ؤ1íý b?e¾™F Š– ÉXrÙ/&Šjz©¨rAÁM°re.2Òe%ÉÍ£™6"5[¹(H4 :\mdb“™[i:ýP½2“¿Ýä÷ö0JÑ»pÕh¯QšQ¨ý±Qó_»Ã7;mþã«÷Aú^ÁÐ; Ó èvñ¡Õñ¥ã«*’Hóß¹,QëtT½}…ÁbWý€g”ùxÔ$Ó¬GÞ×™®'}¡uÞói õ´’D§ùõ; ¼xðÞÔ¡Æ°~. °öâ%ÅÅ4O”˜»ª¡ Þ»Bï­\ÿÆÈæ 
+†ìvm…$t§³ÎLd?莑ˆ+í–«I&VñZ"-¿35MGöÊìä§7À Ñ4‰>ÅauA×W¯½r‚…`Hã×W{Ûw1Û®­¹E¥^["W¬%BŽ… >«íÜMÑ#nNCuy‹¼Hû %Tž,TÜþ0]4.ïdîžk0œPañœ„5ðY ÓëF–?ªU'?Õ‹«žäfü¸Š·Ö¤qCr®až1j,†º¿÷2Ó“=²õáÿ¶D4ÏØeÊÀ¿I Üóv¼vþ´b„dîÿ¼ø)xý)\+"oÜ´¦ÜD1å[|)h$úØûeGUeŸ?õ¾†Ó<åízznKB†Éd–¬ö…Àÿò!øÿ
endobj
1369 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 2824 0 R
+/Encoding 2845 0 R
/FirstChar 36
/LastChar 121
-/Widths 2831 0 R
-/BaseFont /HBAJHG+NimbusSanL-Bold
+/Widths 2852 0 R
+/BaseFont /MKCQHH+NimbusSanL-Bold
/FontDescriptor 1367 0 R
>> endobj
1367 0 obj <<
/Ascent 722
/CapHeight 722
/Descent -217
-/FontName /HBAJHG+NimbusSanL-Bold
+/FontName /MKCQHH+NimbusSanL-Bold
/ItalicAngle 0
/StemV 141
/XHeight 532
@@ -13990,7 +14263,7 @@ endobj
/CharSet (/dollar/hyphen/semicolon/C/D/E/F/G/I/L/N/O/R/T/U/Y/a/c/d/e/f/g/h/i/l/m/n/o/p/q/r/s/t/u/w/y)
/FontFile 1368 0 R
>> endobj
-2831 0 obj
+2852 0 obj
[556 0 0 0 0 0 0 0 0 333 0 0 0 0 0 0 0 0 0 0 0 0 0 333 0 0 0 0 0 0 0 722 722 667 611 778 0 278 0 0 611 0 722 778 0 0 722 0 611 722 0 0 0 667 0 0 0 0 0 0 0 556 0 556 611 556 333 611 611 278 0 0 278 889 611 611 611 611 389 556 333 611 0 778 0 556 ]
endobj
1365 0 obj <<
@@ -14005,7 +14278,7 @@ xÚízU\\kö%‚»înA‚»»;PHî®!x 8 îîîîîÁƒ<$ýý¿ÝÓ·{žæm~Sõp¾o­}ÖÞ{}ûœz)
U 1Kˆ9Pveá`e
„8
l)qøCÀùÏ$AÎ@‹×¦¼Øþî›âöùØ
-¶ü³%K7G6-0ÈÉ ('ù?Á¯ò¿0k +€‡“Ÿ
+¶ü³%K7G6-0ÈÉ ('ù?Á¯ò¿0k +€‡“Ÿ
qýñ$X8x8þÆiÚ€,ìÀ@—׳ø“‚-ÿ–R
l±­®¯SiælùOàÚÂÍÙùÕž?èõÞ¿öV ×@O òÊ"ÄB0Ô¶6´ý¡ZŒØƒe’«Wëî·97rŒ=ô7V˜^e»bîÜÛwŸ³$UÇl„+ `•`¡Ã㉥bø<ìøÅ;X°°Ã°`d#‰NYë„”P/駯Øûˆ¢ R¾Kx Ê^P”ÝéÑKL`i„CpHôœTà‰ÉÊò+TŽøñž‚ÏUdíýÕàçG:%Ùmƒ#RPä»géäõQOï±+:°LûÅÑxæÃe]k/͉õJø:'º8ŸlJÛ¬žªGóy乌טòQK6‡ Ñ+íLvþ˜ð‰Å16(ÎñkX„Éßš†+…¨pœº–QÄ´Ôß^î)RêÔ[W,,¨Þ‘õÉ»ãp%n×)iuGYÖǚπñZ¬Õˆv4¹›îµ:®uľõ­«GZýÖ:„<=Ÿ@‡ª˜yÝ—l:GBÎÚOAs½À:rÁUuiw™ª¨,w‘ʽVç±ÌwZ6ç]ºš½žWßÆe ͹„縤h£öÙ8âØYWÑtÔ¸c}ü5æ?°5&Jt”ùËÞ¨—OÉËÛòÁHÌîZ‚pr_‘\OœÅ±„4šß²~òIÝbâí‡y"ûÊ“¬4òŽZ¦¿;‚Àždz™RÑ t[^cíÆ=ðàæ÷Ÿ‘øÜÏ•ä =X}§^ÍóâÓÌ:Ë;}ß %[µ, ýÉЛ>µÞܱ^4AXç%ä#¬wÛ±W:eÅNã¥S¶SÈ“H f÷ÖϦŠKuP ·}.óF!Ö§•"k¯“/ågö«ÉФÁ
 ê2³Õ°"Ý ÝkÇÃñJ
@@ -14035,23 +14308,23 @@ g~nM"up^ÅÃÓíÓêè” ,{!5ÿ8¿UËn
Ðú‡ä9¬PjK¢!zóÙ!ñHaŸ´Þãïÿ¼£êOß,?€úVÐz¾’¢Œ¤ñ¸gTW-Š«XÑèƒðN¨PÊ94X}chAc~‡^ÅûI8Y½-°Ji ¾á.˜<®¯ÇIâšo,¦ÙNì¥#ÊͽÊûÊàùk¤lùnýh2³ÒþÝu<Aíâ$FŒþ¦ÏD!þ:ƒêj%FDõŠ‚QúPÀ„´èÖ#מbG¡³°ï\ùe%mËf›‘g'CÕ䦨 Ñ)Ê$‰‡x`A%*›H«¶#Ì'å;…p‘ûÚ9ß/iÔ¤N…ï#‰yàE×Óz˜8ƒÄÛ¼êpXe€N®Ñ †µ§r%ç˜û7¯¼Çé&ï`Foùª’׬ó›}tW™ë',4Ó‘õÊ™‘8‘À`Z*\-šðú[Ü‚JåÕ®{i!Ux„T û•ˆ¼‘‡ômÙ85û)îÛ¼e¢ý¾KµÔÌ;¨žè{ÜÈ¡¾è{´Ñe¼Žò»~!–±l˜×R¡^n`žTG?ÂŽÎCMž—û[©s¬ ;ZWÀá¤ì`±3iSw-iUÉCW
ÚVâ>xj„E‹ŒwêIo³}‚üH—ã
Örú ãkÑnT‚e¿S< ¢x K»«- 1…‹54ËÆa«÷-ÕÜ@ÚUóªîÐsL/}8ÀѶ›Ñl¡ò‰ó9È+ß©O¹È¨qD‹£RKˆ7hëÀûÚë,l³Ž[‹x³#‹³ÆÒ4
-¶ÿÚ®½–ZJS•ñ~´õÓp+S!¨yWC6Æjy.Lä“X5­ ^g˜Â£˜ýÿòƒüÿþŸ°°š9»BÌœí}œ.®ç?þ€‡ü¿
+¶ÿÚ®½–ZJS•ñ~´õÓp+S!¨yWC6Æjy.Lä“X5­ ^g˜Â£˜ýÿòƒüÿþŸ°°š9»BÌœí}œ.®ç?þ€‡ü¿
endobj
1366 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 2824 0 R
+/Encoding 2845 0 R
/FirstChar 2
/LastChar 151
-/Widths 2832 0 R
-/BaseFont /ANFAQR+NimbusSanL-Regu
+/Widths 2853 0 R
+/BaseFont /DGJWBM+NimbusSanL-Regu
/FontDescriptor 1364 0 R
>> endobj
1364 0 obj <<
/Ascent 712
/CapHeight 712
/Descent -213
-/FontName /ANFAQR+NimbusSanL-Regu
+/FontName /DGJWBM+NimbusSanL-Regu
/ItalicAngle 0
/StemV 85
/XHeight 523
@@ -14060,7 +14333,7 @@ endobj
/CharSet (/fi/quoteright/parenleft/parenright/comma/hyphen/period/slash/zero/one/two/three/five/seven/eight/nine/semicolon/A/B/C/D/E/F/G/H/I/L/M/N/O/P/R/S/T/U/W/Y/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/quotedblright/endash/emdash)
/FontFile 1365 0 R
>> endobj
-2832 0 obj
+2853 0 obj
[500 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 222 333 333 0 0 278 333 278 278 556 556 556 556 0 556 0 556 556 556 0 278 0 0 0 0 0 667 667 722 722 667 611 778 722 278 0 0 556 833 722 778 667 0 722 667 611 722 0 944 0 667 0 0 0 0 0 0 222 556 556 500 556 556 278 556 556 222 222 500 222 833 556 556 556 556 333 500 278 556 500 722 500 500 500 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 333 0 556 1000 ]
endobj
1332 0 obj <<
@@ -14071,7 +14344,7 @@ endobj
/Filter /FlateDecode
>>
stream
-xÚíueTœí’-îîNãîÜ%hpw§±†Æàî‚[ ¸$¸Cp‚»{pw¸|ß™™3ëÜù53¿îº½V÷zŸÚU»ªž]o5 …Š:‹¸ÈÌRäèÊÂÁÊ.
+xÚíueTœí’-îîNãîÜ%hpw§±†Æàî‚[ ¸$¸Cp‚»{pw¸|ß™™3ëÜù53¿îº½V÷zŸÚU»ªž]o5 …Š:‹¸ÈÌRäèÊÂÁÊ.
Ô±ÁÿÝä¹:”µa\àµÙköÓËŽ<ãî`ž=]gšåi>‰Cwæ*m+/Ón›Q)jæ‘vŒÏÙŒâ:ŒÞv­ÝÍQU5£’g8ÒñV.0ÂÙC •{A õ­š¿yz]<nFVMáŸ#Ú䃻[º¾¡_ý°Ý;ÄL9ñˆ4‚î0¨´ÑÎ9Ä¢zšß}"™¶¡jwÉ㺓r?˜bYÊ<¤†à}Θ)ÏSuÐÔ¸üàß–ãûUº$µ]m¡Äè&Û·5‹@ü*ªÚ»o‹&χÄçü‡=ï“Øîx™’tÙ ‚(´_ú›òÖþMv#ÔÍKÖ‹u¹këv´a"Á¶TYrà>±‚ªÛ8ï¾å#v37o–áÅÍ,]?üÐ^ò/›Úh›5ºëž?}dÑ{P ½5m¯!„äHûÒf¬‰§dþý€Ö
"ø`€·§«Ssw–]<¦ŒiøBø®ë¿aac‹#›‡&Ê×hRÏ»Ÿ«µ®GÖvzq‰2dìJddÔkSÜ2ìXu'´9 Æc¾HÁ(9,#©sŠ_-!Îa3‹á‘ŒC˜ºÛ;ô×T†<b.œ©¦ K¬íöÚ_îCÎÀm_4hŸÏO!Â^õ"bO|8A¥#¿]÷}ˆº7€“ æoξ{ûIb+bæ„@‡É?ã\­Çséióá÷•q›RXµ¼XÓiP½KçN}Äïx¯Î"#0PãÎ^ØoÇ—ô³óò4?Å™ÜÂ؆E©¤p¨~“Ã@(ÅÊ î
G–f1–A‰9áZm|vjeÅNÖž^X¥-‚„a‘7°w+}÷ôqâ¡—vqžÈ• )
@@ -14122,23 +14395,23 @@ QÃQ$wý>Ubï%>QšGî²úÍEÆMq’áê¶9úŸ˜?ß”p¶£o›à©èp.E‰~˜ž´ ™QæqE)å Š{
šÙŽÊÉ7=µ;‰%puqcú0=Cë̱E62â 0å¡ÍÅà{më?»Õ¦¨ú‡ÀÅÉ…T8[ÁŠ¼2¶ÉYJ$+.°82WE5PCZÂÕ¦"~ ðZ‰k½Ž>T/Ú×íBe÷“¸ š¾ðQÆFBFœA_s={fm´aõ~Ž+ÀÖRW…ÁŒfC©È¤“ëÌ{5ùµ<Eû»á°DçàÀËóÊÍ›ï#ôb ë× Á¸‰ç¼§ém.ÅEì-/k:†´
Œn/wùªB:¾x‰§ƒ¨­Þöª…%¼&z[C÷¼cÛ+Ô(Žö=7ÇöCtmÖ“OHÀbÞ0j],G6!µÈik|GÐ÷é°ÚÊ~Øfóf>´ˆHni‚§§:vƒC™˜9žnͺ¬NõDljS“²9ÿ¬ZµL†¾AE?íz¹¾è™AvX
9ñ*Èî«“†].ŠƒøÆâZ%×H%û«òWjOüìdÈcäyžAÐì9c€™!áàU3ÆkoMéwÇ©Ã…c~5*xþöw;Ê(ÏÁ½&eKeïSÇYÁìì 3(k·>­¾Ÿ~*LŽeŽ·új€..SR÷ã+q2-ñ |Gñ6 G8ÌÔ(Ì—îWÂNkY0†
-äwÞ8!´w§’–³à0an‡Æþ?ü ý‚ÿ'Ìí-MÁ® S°ÒÿíB ìendstream
+äwÞ8!´w§’–³à0an‡Æþ?ü ý‚ÿ'Ìí-MÁ® S°Òÿ%} ãendstream
endobj
1333 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 2824 0 R
+/Encoding 2845 0 R
/FirstChar 34
/LastChar 122
-/Widths 2833 0 R
-/BaseFont /LXSHKS+NimbusMonL-ReguObli
+/Widths 2854 0 R
+/BaseFont /SWFWCJ+NimbusMonL-ReguObli
/FontDescriptor 1331 0 R
>> endobj
1331 0 obj <<
/Ascent 625
/CapHeight 557
/Descent -147
-/FontName /LXSHKS+NimbusMonL-ReguObli
+/FontName /SWFWCJ+NimbusMonL-ReguObli
/ItalicAngle -12
/StemV 43
/XHeight 426
@@ -14147,7 +14420,7 @@ endobj
/CharSet (/quotedbl/numbersign/parenleft/parenright/plus/hyphen/period/slash/zero/four/six/colon/equal/B/C/D/E/F/I/K/L/N/O/R/S/T/W/Y/bracketleft/bracketright/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z)
/FontFile 1332 0 R
>> endobj
-2833 0 obj
+2854 0 obj
[600 600 0 0 0 0 600 600 0 600 0 600 600 600 600 0 0 0 600 0 600 0 0 0 600 0 0 600 0 0 0 0 600 600 600 600 600 0 0 600 0 600 600 0 600 600 0 0 600 600 600 0 0 600 0 600 0 600 0 600 0 0 0 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 ]
endobj
1257 0 obj <<
@@ -14158,92 +14431,90 @@ endobj
/Filter /FlateDecode
>>
stream
-xÚ¬µcx¦]Ó%ÛfçŠm›ÛöÛ¶mÛ¤c;éضmwœô×÷óÌÌ;Çóͯ™÷Çy箪½jU­Ú{“+ªÐ ›ÚÅíí\虘x
-ŠZRò
- þÞuû[T9Pƒæ¸‘WÅЯçøÅxqD¹ædªw^sÄM]SÏx .¯‰¹í9I1X0ô®-ƒHG¹æ ê¢[UØ—DgŸ‡ãµË V«å0çÛ8æ£\¼Ý þZ¯a®¿fm×àaÀ5jî(!ò8þ
-ƒþ¶­¡^€èÍ{[„ïÃ÷ˆ’<ev99Iò¨"…6‘
-†9ŒÍÈÜ—Ñà£o©¸(J‘Ô«‡¢£Ú>áØÒû§Ÿæ¿òç‚F.“@mô¤…{ *üàYa^’>#‘»È^™éµ]M»ñ!O>Ú6:ì௽µ©ß¿Øüäi:.C³ªwtã~êËRþÚÐxùܳð›A£^ë€3w=¨ÄËM¶ï9Ïqºx+ïˆäš§(·%Ìß2U‘ÂÙ‚q·¸«H.¿ž°Mý¥Óæ[ÔÞ»V›éïx"æk“­Ú«öþÕ—n:™C -cšÈá7Ÿ¥íß)ß ÂëÜùšï‰–PdÊû<€‡2¨O»ðK4ÿDí€ó]ë&²A–
-K0É¡R6uÙ ]Þ ½ÚIoï»f€^êØ‘é­?rËÈÒhéN¿³MzK¾3üºí±å8?•…ð51"AAžiꘫL’æ2=­Fæ–=éû&û-¯uuY#RæýÁ)„ã`î„ •H1KwJ,b#DÌÔ*S³=œ2èqvÚD‚„ŽQ§nî÷ßáB0$fúî‘UMpšà¯š¦tD6•“ÿ1ºµ…ðÇ9Ÿ’®„÷x¬Y \Â,áüº§Òç5qí'
-!ªU Ïš(6ŸN{=GÑZœbIPÔ×â·ß¼<O™-¸œÕÿ²r‘›ÄªAhøCÎ1HltÌÇâÚ6TŒ,XÇF¥Ên¾ýF6
-»Ý¬;öh_j%Ûº†@ßs ãµ×Y—K ­áÛ ¼ù[Äv—ªÞ`½¤ˆv¨Ñ7‡+}œ¡HŸÒ|v™ùËÛ¬Ð,!J<¶ÑSqÿ9f°Àï£î˜•]>hß#SlîLŸôq6q 3H;îÉ¢–ÄÆUTt=¶kxR©MTIßý4#Ææ|Î*_ ̤QkJ„Á܉?Ø?DñÞ<Ý fKhÁß­wl£1Š¸‰2O}zzqÀ¤&~”zÞr,R p·Šœžq—<%@‹ \Âß ‡ñªco‡?ÜÞ/ú×Ñljçù®ý„¨²ÒÅ¡s7X Gä:ö£°çZe²\é9`¶õkò$4•D™—3¶ÑHb²ý2HôüQ\`­„mÛhf*“sbóà'ý©ÌJ&?ý(d0îæmè…MùÐÁ¶å̯L³Ö.KÔgZj‹¸¿°äQc»ÊÎ Úˆy\•°‡3À44ž•Æ‰×O8SÀÊ›ó‘Ëm¸4"Ñ6yøâÙí
-vJ‘ß¿p鯛l›:d_gB÷áú Ó~»t
-Fê^4½¾sŠ5%Bw/k~Ýw½ªˆ˜;ÿ\'’¶a†òñ͇ñ· .’µèN~T1”t?9¼lxffÌóÌÀ— ¶ÕAÐX-^ØðÙa–ë|“Så;(Ÿô¶JN­m;~@‹°°a-ö{»Š+eü2·mÀ3yK¢<’æÞ`ê
-Òõ涆‰Ÿ 1ÿª¥û<âÇh^ü„áÀ*dÄé~êX”+Voºñe¡âÔÖåқÔæÕ%
-IðN-ú˜cÊu¿5“‰¶>¡ü•Ûˆ¢…[0tÛòÝí%÷ÚRçœÐÕEïñù[#û{Rñâ"+Q ¨Q˜JšzAgXʦݼ™Wú-cJyû(ƒ›K’êD½9Bº<¬䤒¹.Ÿk§EE˜¬Ûæà]¯@w×O.4~Z¢ÜFµÒEibK<kMâ;(¬Ð0‘P×’ h#Ž;·Å›œuN9À)ƒÃð9˜t§˜¯*YPgb@É:óÏYpè?ž}3¡“ÑìÑ QÊR¤'Ã9íû!ëÎ|óNU²¦[£2É0©„ üà{¯ Ñ©#Öû<…Áü4Êþýùa©?ü¼Ú¾A·¸—KƱ¡i}l}‹M¦ú(vr«P"fôŠ*^ }YÞ£K®ðË™p&nä.—þ5FU‚ñF4žkò]a£µDb]6ÓìD#0Úõ+¹«ˆb{”^™R£Âj>7 @ÆÆ=óYZ[åTmWZ2JîQ2²Qeì£r›+®¦~"þ•»Íá i)ÃL3œºØj/:ïñÙÒòЧDx:sIßmšÝ?W\„¤˜0¼<ai-hT. ‡¿¯g’A–öŠ~Юo…7keEEÓ—’!LðU’û.µ|§1Ð9Ÿ ?Z¾ê¶M®2_n4è 66å0¹H0 ÌôoÈøa[ôcñåï˨¶Ë®JÏÛXµ2åwdíÞÔ Äí}îîÕÓÜŒ¦µ
-ã{õ{;ŒÛ±Ña"_Ç/„°KÛUàŠè¸Kh¶kj‡w•7ÛÁʤ§^JóÏjVJM¿Úí$å(žDЄ¨³ZÇÒéy>‰|GZ5÷tp4.\P,5¿
-.üRø#.c+g÷¯ð”ãlkÑ´Eò-P›æO&ûïÓ ³ŽfsYÎ5‘²p™¯ë"Aå?©ëÊqf¯²¦+„ÓÿÄà
-Á´2ߘŒk”¸CéÅTÐô‡²£‚:˜ó˜¿8
-{½1Odyh¥Ø€TùJ^:–Èæ c6±×µB
-íP¾æ~ê=‹âAzò˜3æµvtG4pE9#.‰PUº†Ü»zCçÇ}Æâ LP
-L÷a.„º¤ƒ­ ÒîBœn]×qÀ~æ‹yçÿ)‹'•üD#s‘&Ç>1˜`ðÀ/kY'c´¡èƳE ‘1K±ï{ø<Ùâé§}ô¹ø*i›µ#ÝRüÈ}bÃ1™$ýøsX?üU+·¦‚áæª2|Ų[°*}¿Ïþ5Ô®z`oA'å|³âÎP‘
-7Gjƒ}> >ˆ‘òø—´iÌè@6¤«ÛðkÐÚ­L¤…¢×úN<üŸYghi­†ªKí[JA³†sl1œÎ£aÞWsö£ÛWT˶)À¢BT»[¸(µ–‰…ý HKŠru*'ì:¯½ˆ=d1lÃQ“–+»PÔQmÆÕQùDZ$!—è´9£ l˜YñŸ]œ•dq…ÝL+½|q£7(Ÿ2ìd»²GàR"‹5—ãtí )ï]J)táê[ c2¨º.#ãý—åï`ì Óö°d+(sEK¸r¦›% ØÝÏ? g'×±j×ýtòišïÒ——ýß
-iÉmYÁ5ñÑCÀÓLí¯Wù )É'³…BO  š‘¨Li¨¬3Œë†*¼ õás3OzU¶Û”`…J#€©xÃ!Ç
-LáCZ±ÿòLZå$’mÿ†ÏÓ×=O€–Pt®|ø:²ðj?âWˆõfm×?n®8!ùC·"ê5<SJ¯“²OfY
-Rp>9,±4 %¢£¼ÈoJLú¥N®yæ¡oSj› ­åÑ úŒé남xM·qCoŽ¥K¹=¬ÝxmPE»‘– × vWÂILE³ùu³bÖ[â*°…ë9x÷wµÇØwá‘”}M’V2Cßçñ¾"ò÷ħʉåÖ]B>¦ÆeëækBz
-ÊX û´0 MßÎU»Èœ ˜‹8&ŒSÿùnärKx3{+ÞÛnàá
-0ʬpÂt)ÿNðˤ—zÆŠ@̳k^=]©õnuœ§ ü…¤eyÍ„j‰8ÙÂH¤i…”]LäKjOÔ”*Ó…kê†k[„Ÿ¿[@Z\;'“tÐÅaÅ[)a»8¦cm÷ˆÏt£Pp+MDL×bû|¨b1y¾#4&ƒ¯âw”qi+è!‡hæÖïxQ»Ðý"¾;e¹ƒO­8Âz©Ñ¢æCq5®Í¥+ÔæôFŸ´ù~A×¹1×óbÄÆËüšN)«¶I;Rñ€”@xùL,ç(S= ÷}¹‚Χ®–¸Ã1}Éqœ|¤å8»5‘þ·×úÚç¥!€ñ5®Y®
-îJêÞ5t*¹D³ã9ŒþÁÔ)AV)ýK\Žd@ æ0Æ[‚‰00¿ÔÛI”eIõ Ž¹¥ ŒaØ&oäx¹—ö°ÌëÝñ‡þî…\¼%½š.²™{!µ£ 54\ß!µÆ?`wÒ¬E»œSѬ(› uѺ?^|êƒßvkižGäZ³6ž€Ï6Å*Öí…y hŽÈõ›\OôÜ`&;\ô­(áü­:Ç©Ýân´v(Døâô<i®ŠÄ²Ç_ïbÙÑ!dá*7 b¬écñ™GŠÙÖÇŠ´Ùå›licÈÓ©ÄKVµõ/Jw
-,J•zíÖï´YíRú˜W™ö<ooÑñ+L]rÃÄ3¿Ò°¿C\½±bc·ªd€ßúÌp¸àR‡;ž×Ç7I†s±=*/¾2»v8òžV|—ê½Wèz¡IqïâciŒæÔqœ÷-XùtZE•WÉü xA¸[p±Ç÷I켜…8 ƒÄð«Ofû’J½É4?¢°!Þš¢T7áD,XG’\…›¦© asY~ãˆÔ¨ò‘^b¬çOH݃7’¥âÿ„)Zs;šRMâ¬,Û…ÅÑÜÄ¡Q½ðØœI˜K?L.!Ç+Åîí¾ž7صª]äàðÀE>dˆaÖgÙÛ’ñFþ148¹¢ßŒÇ%‰»13#r¨MÔ°4â8‰ÜéTÃÛŽ bbÅiïй$Üꢙo¦žRk¢l&ÃÆ«zëKB{¦k&×;ô­Ü"di“ óGîÞÏèô•D§S5}¾ÒØ’Å*ØóNFoï@Š'}è/矓§¶Rf}b ‰hæBds@hé1
-7`Q'YBô¥Í]ľ²†kï×Zü{Ùïç‘á ³’çÐgð!ã’ Nn¼–¬îTâžÇ6™!x~Áx¾¾†]¢ìñ$nR“ê
-ÜQÍàæÃÁ«ñX±Ø%ZxNç¨ç”tºðà‡Um½_a°H R¶3Õ"Dd¯q½›$»! º[êуA±Ë;]3Ž=ßcR|ëù’”ŸÆ_Ý™ö6æ-þÄ{–2¨2ÏRu6›ããžVX~V ±üÖ
- o»˜š=ªk¤íѳ€ú倥¨ûü
-Åq\`Þ³ ,‡­1ólw:)*Ü F Ï_ÁÓ+øªÑ"¡8cöFÀ5L¼{ÂrsH¦ D"('²—çReLüƨ“sFòZ«ƒg[>¸´b‹¤wW,¼@•© tNlÔÄ{=ãÝ|üS/³Ì?!7vw¾¡Q@ØÒ¢lÎAµÅöö&N¼ÍÈ
-o”ã©J<ÛíŸSš ¤i˜Ê§~Ĭu;àÍbg8³L¥w}²­³,'2iiæýäzºk×Ûº„–~NûºõåßÚø±Ôuʫ Œ½NÄ·Ã,Ñ/YÔèO”Û’ïÆ19øC00eÁEc•æ¹v\¿MÛEÂÄk%À'½‰´ëžd6$kŽŸüHLب¥fà"°ÆèQŽºüqwÞ¨Âõ–ØßHªU-^?P‰1r;Õ0›,9ˆ¢
-#ÞqÔ¹¯WgŠ"=‘H;n&¾³ö–2Y‰BÙ³ç²)î?ÕçŸ}4‹Á]=F5úË—nÜŒîôwçá,tµ¯kΉœU¾k£ó‡s“VKZsÕ‘/d?‚ÛÛ;î:êzpµúíÀ´""BÛý`“ô†v℉eÌ"¦>‰~6„¥ï'YRVfåŒY½’Ÿ–óTîèæ‚tÚ«úåÞ,
-R¥G”þSÂ[ñ¨E«ïäß:—’LO-í;¯®It• ñDR¬\$ò³Ï;•&ë÷ã€^j£nŒüî£?æ}8Î=dÐÉ…¥ç…„
-¬sÉ«t“J¿çî‰ñ&K"’Ý™¬ñ3b¡ùm)pògõÞ¨Ò@7ZðbùZëë3 $‡–}ÉR?Vô]×s³ëhœHª'H¯œhaVþ|£
-fi§b…¢ÃlùK§Í…ý`èñüªÅÆÒ?ÿ à9;¤Kg±'¹ ‘[3£!<£n“7ó˛̆¬C<²ý|1&‚»ù£ßÛÝN|«‹ù¤qµñKµŠ§nÞÃlo,Á
-§n ªþØü‘¨n9Ñ羘cá*ý®Vó,CêpÍ›„H hí&.ö}EMÄ¢]زÊ:³š/5C¸À7‡‰å ”Ûñè™7º5¤:êÇÔ‡õ¥k¼Žjs‹f&1¬KÆZLsØv¬ÀqUµ¢RÌÎZñ5¨¤¦|ßCú£•Ø8ú¼Ÿ÷&d‰ç›š ¹¯õ2¥/Ô>)kY­õà¸s†Öå¡©½LÐÝ(^øYv 1«­À,Út˜•IpÀéÌž8™? ÐÓø~!OÓ¤[gàUbw³´ úT:Áh­Ê­Ë²sMZþ÷œ‰Òb–= ;[¥$´ËZÅ_WHÂA¯:LÊÚ¢9ÈGÑYì¥b›Ï
-× zeRhPzj#‚N ú˜yújtA‹Š‹¦§e’²É°‚ÄÙºèÄé‚;§g†•Dê¹S,ºQ­€]>TÃ.X »”ÄüU›B]8÷‰­k÷¡²ìè HÛa¢Ùk^ì‘þ'í}ƒE%·š«Ïòâ[ÅRÅÙ, VQ…€Ãù®:Wì ò1x˜ÅÉ„ŽÌ:ÏÃŽ]é%·{²Èï<v»Ã¾A¦1¹²ð›È9Äîªl«ðËc¯{0;§°,ÆıÝò[sèñSü¬št pb‚¿ˆÛí”&æ¢Aã©Äõ-!_/‚BPfÌÃѯjcîͺ¥¼uß°ÓÀî‹çìÉö7«üÝ%DŸÒF
-ÔÚ½#š4ikíóTF yžÖÎø AŠI½–ëÈÀJ7 )‘Lkè„·~ÇÒB¸KØs3ì֤̾ÕB{6é=]óÎÙéyʵ üÂÑQû
-÷§@_8èm¡çö? ¢Ç¦‘]ะ×É ^Â¥ÇWs®ŠN¼â óy‡è0 Óà-\—¡`fo¹÷Þ¢³Ò&S
-Šp׳Xxçý3SËŸ²Öî´©–´…Wë¦v¸þ¶_úÙ"d–üSe¡ýYêíÃI íB}¤ÈÜ`”¹ü.E÷§íÖì
-‚HåéBÙ+~²¸Yé"ÑY^ºÈ‹]¶a{P!>h¬Wáæ,@a&##€)E+6R]¡L˜q“Ëó§G8ëBçŸsJйSjú
-–%ˆß®5[/ty§åVëÚËè©2—f&,b0C”¼qbÜ*ÚÕæWÒ©=n7]7Çm2ÔÚ$Ú7/5^õÔ?S¶ý®„žÈòNòvÍOéC¥ÜC½‡:R×j1ÉK–pùÁÕ¸´î*ÓŠŒl È:á4Ñ¿„0L5‘ð3[j¶]Gp¾€Œ¤Jpïz t(23/L@öcEƒ¶‡Iüy{I6£4ýÃÒDò95‰ÌâaÅÞÖg¸ÆaWž‚i…^››J<Þ&ØÀ© ¿Îèug P:¦ì<}vSs¯j8 À+$f¸”~`ŸAN0ÍÎy¸ê=(­­UHyJ³þ|²õ™(À¹³o–X³Û§™E –:b¢Ó”u³ñTÃzÐ4}qƒü£ý
-á_>ÃkØDG£c’§8²Ï1|°
-‚XXÒ§ßz¤•tCo¡Æg$‚>½Q'µ/ÓÚ.÷#SŒ[âa¹ëÎsœa§½ØM Wå³l¦ækÌîØ5>=Ä)ËwôæJ9Wvg«ÞkËŽ2|–‡‚{‚µ='æà9§/[ ÙÌT‚Dó†çʳŠ–žyÂϤF¯õÙ]eÿ¾Ød^"„þ J¶ÔÇ:ÅÄzê9âMÂh³#P7œ¢»£…ÀÙkšžò7(P‘ÅÈP€òaÒ•éÀ}ÝöëŠ,$ê&€×VÖ@b)]‚níòÔgê?Î. X½VÖz°bŸžãÛøà3у¿[B!¬¸à‹0|ù¬°1¾Ì%Y¶RhÇæüÅõ¼LçÝbÍ”lsœRK'äîP ÷ÕJò5äÐ:^¼lµþ¨æ/-"H:%§`#¾èµKv’cdò¦d aYŠòTaØ ÃløK.»VµÖ"ÔÇ”Ýè ËF0QÃ7šÑájR°šðð:?­
- {ó×Zû0'æ^­^TK‰)—&ž×aj ¨%ùìczÉ€a÷ô…¦‰^n¸¾‘³:òÉï&/_!•Æ½:0~¾î»ãÉ„G su©“4ûºVÔn:-}5Ä} ŠRúãmïåªàªskŽÌÛd‰…(U¡\ÂzµMÄ© ÑEÅnDµº“o,zŠþJH0ÿ\™Úkõ»mqWE)×¼ÈîÐÖ̺þâîocé» Ž[œI“QW$JÛJj¸ºÂ)'Ÿ%Õ)A3uñFéж۵
-õÇ*"Åô»ß8~¡¸à~†‹!‰zךb§Êg´‹æ¯}oÔý¢àÐæaiCÇn/‡‘?,ÊÊ­æm»Iƒ¬~©§à¯áâñZyó§ú™Š‡úx®ãª)§øÆRtpÄÌÌUÎz+ö$ÎÖÌÇOŠ¯ÏLªh’€¹eÒKÛ¡IâGhÒ˜åS” $¾5(D[ Vx±Ò/¡Ê‘…kTzÏJë À.Ç_N¸wKÍ:4bu‚jðtg¥+û”HåbÐÊhªôŠð%ªÔ™Á,–ĵ½A¼jŸŸr‚SÛ ôözF¼ëDÈN Ø£ô¨1©þÁVG ÒÑœD¥ˆ}™’ˆFV†#s¹RI)­p¿ÎwŽÂ/Pcé×ßט½<ŸjØtVmÇÈ¿®’RŠTC°p¢íßj]ºç²ç` ¾@ËÁÛƒ…Ô ð ÷åΚó"v#ڬ͡F«
-ø©,_ëgi%}
-‡ÛÖ+·ž"- ´é¨Zî.K–ع®ÓúÖàp¾W
-%ø>U£ {ü~èð¡É`8~}B¾-Z×=üé«XêBù ùùðž^Q@e¼tœ»|ìלPC
-,ùÒ’j¯þ¹òÁ;çlñ{ªýö„—¯K»pNÀk)Óè²É ÷Y«2Ýœ z¯9ó%Þ¥ì7þL³ {¿_­…~¹9Lé>¦œaO*x¢¹Ô¨ÏL¿’ñÅWÄi¸žUÑ3l%Ø"pM|C³FvËØAØeˆÜѬ!^íüõñ h¤^¢Ü(
-¡/ÍÂaIú ]€á?êù=à"»Ñ¾Èß ¬_ikS?ýsQÈù/ ¶2>ÀTá’¬s.ªÃää; v€)íÛ¢ñ“Ùqoh±
-JO­›ó0#‚ÆÙ±âI ýÚÒ®®lÜŠ7£QâxÛ˜ËZeŽü&è?—Ž;þT4ù©Ü4Þû†ÚVyª»jÞqƒi1EY–ËÝ»&µ­6BØ内êÝÒ1ñ!„c41ïýÖº Ў锉WŠAkxg}¸ƒQ0w}+õ¤ì/ÙO)O ⊞t$màVg†CÊ\?/iÑwi5ô¶_W.ó®í$gÁušã´a•F&;ÂÌY… ÊðrÉ"ÌË–#¹<¯•”å,N1Ä«2n´Íõn³§ªG¯ˆ&‹a y‚sº‰ËÖíŠ
-¬C@º6¥_ž¼6<K6ÆvÔ
-v÷wÛ8Áß×ý¨iù1=ÕàË[cw<Iz7»„ÆËeÀ´°Ùf.Ý“Õ;jÇB†#ê¨ •ãL”2^ßw%éøh„¹›UùuºJ5 =«6âA5{¨½]OøŬ]c2œ³>4®‚ŒÑêÈÁž˜iê;©žsU±weÚëâQ«TqïëìñÖɱ?~ÜËô&Ø!骮¶¦¿®ˆ2™Q¿ôƒÊ²¦ˆê ÝJ_®x¬[9Ÿˆï%ßÏÃÿXTUµês‰›$½H£7Š¯
-å+P¨7ùuW­@Ùò9ÿƒÖ«œm®z5åqÔüGš{ÜEÈOÔæJä4걨ÇN3ôÊ{¢&¸GOo’G
-MP()Ò$š×Ž·Ý/F†jÖÖ*¿L¼ °DüÑJ,Æ@¨£¬!,Zf92X>À~Њz'0E–œSL<Šp¯”¯Cºå}ýšà]²ß¤`ŸðJß®¹‘JÄšTß(ÂT&
-î€þT·bgJÂÿ\[!; ‡Nµ`ÔhH:óƒËž$)úµJÐßù‘ëBXѸq•©eÝ÷ÛpÌc¹Û ²
-ñlF»ÄË´“î‰Yi RÔtõ«= :tIBd•Îͼz54fsÁ¯jÃ-0D¥êÙ›Ö½üpë¨Õ¥œ$2Í…Š¿u ËÞðSëu€¬’.ï¨Ñ†6oîjŒ&r#ùÀ²(º)
-34‹>úË—âl¸ê)8•C7ðÒƒ¤kUǸ¹€//É×`rHRôHåý5KÅMOÚ9ýà{/*ƒæ,¼HÂƶ‡©gþxvç’†"²
-²¦!<]ƒ±Ë¿í‰HYFù•èŽ^KshšQ’b½Ž=GÕ-=²&‡æéï¹z¡ÉwZÕ–W¦$¥­é,ÿŸ‹’óé¿ßým¨½™4Ý(‡.ÈVÞgØ â…#“¾™û½ ¬Æ±nùêN íæóuŽÁÃBØÕÕpÃDÉ«[5“+£H5?¼üÆ.ÙÆùT¨41ººí1Åú%ÎáØ¡*#å±?ª DúÐaó‰ú00wÛkÇ­Nó ´ß9ÒÁ¡ÂC
-ïåIÐ}¾ËûÈd–@OBrÎ"ˆÉã,#’Ë$OoÞ
-w | »âÂöÛ ´Týrˆ/ºËè8ˆÙãÐ8m-,ªŒ£ÛÃå éíZ{[„ðKšçß%[M"
-ú"Aîû˜ƒs†#X}æÌ—¸~6³1*5Å-:X¦r½U\‹EˆföŸ
-æåS=¼ÒÖP9û; ¶R>Eã¥4ä ñ¥DöLå«ß"­ZìÆ .5à‘Î/è‡û"îØèMÄK²ea°gýç(E :¿µ#7­‡
-kµ·¡¶Â 3íÇTIøᮿR­´ xÞä¤~À2KY¸7§FtP‹õ*ZÌÃÀ“ï}Ô÷á…÷`âðER߶@¦Æø"ê^3H*ÍcéZG¥~?ŠîÖcÐw¥¶7αÎ_zkB â½ÈþvÕ¼[Š"e'ä ±ï¡¯‚º&Õ‰ï¶/¾à~áãCºƒÑW ÀÆÇŒ~¶ê E—ì v¥÷‡ß?Æ&*Ï“âsÀlÕHú”í,ôœà×›CâܗWJûmð3º^LrŠt›ì4?æ÷bÙ†Æ`’Ôi(„%|H%"JmŠŠÆ,6#9“w§Œ{ñŠŸ‚×ÂþÈÝ=óæüçس¹ÌÑÉB²$²î4ªÂ»ôöòƒçž+mÂá¨ÿ•%§:¿ÞܧþwLÑ9­ å¾HeV˜zcÎVN
-îÛ7ü‡×û
-²VÄÒ`.à›W—û·ëŒÓ²{9?Š/ÄB/‚@ñ9RW~ÑÀ¥ŽJûáÞ¹¨ÇÓoÚ1À³‹0zhIÊ$@¤¦>Z¸3W\pnŽóî|#~PWþó&¶ÞUõ§<”s‰,ÊØh>„ªÇ-WôÙjäkËom=8_
-Í6Ë<dÿvÐ7Äëx.#r ]ª’ÆP’}ÀÏ,˜z¤*†—ä&½ò-€MX=¶©¤'UÍs5rbƒú#&Š;~Xûª «´ Û;sÇÉ­'³zY#Ûf²‰t¤RW'u% 7ÙÅÀħ¸ÇòåOËÔ.ª‰™ë21ûZ©lT·B3KÈz_zcŸ{ÞHÅ&e‚ó¶ˆÆ{Á”ñE½¼»Üš‘ê‚FÚ±AGB¯Þ-åùçÂèmmz“åïáNQÅ¢6—3poÄõ0òb[×¾«ê´&gtN&=ëõšÀ­çøö^Ëê&×).•
-4…)Ö ºÐ1/ÀÞŸwu­ZFpd÷KñÛ IÄàŸÊŽ¼°<Ý0’]ù{ÁO èp¦C×¥âHv¿ù7í¤š~JµbìIú zÇYŽí;7@VäÓñ»Í-åpª·~½‰*xÔPdlÕã£?•`ù8n‰’^;+SÄSÐáÐdJŸz“8(ö=XX–Á†h\.›Ãá+ÞŸ…xCÖž²JSæmÄ[ h}*;ò­bj»IÐ#ö\[¦Ü.?3ßø– ÀÕ,úIީПk ó‹Húê,­¹>0æÉ2Æ]IÓOÌ v]²H—Îy©JÞ$"ÿþz¢19¤ÍƒƒWÁˤyù@\Éö’‚Zö‡+‡M4ë4¤´èXù–ç´$êø?G;ŠáÖM÷£ûdŽEß‘R´5ÏRÒ»¾tµwÙØ~ó+ûýyVQBÂââ±ÆIz½ØŽ'4t™gOóIbJ¥‚œÍ ~¹Šôá—K¤²ÌÃî<ó;Õc–ÎŽ“–n÷…Ùn•am1®ö~`–`?“-Çë~-" £¤oåí£6•vtQŽ¿CêV‰>j†ŸÍkÖn§tAîp¶üálæUÔ ÀØPRtZ”kkDV‹9Ñl¿÷˜Ï…pÖþ£æ™i‘¬²UÑMñÁØ¥†jY ÜÔðBîšu¾rš#P®É9•8®TÎ…ž›v3˜p#œ;@í¿Äõÿà"ð €GFG„Á#C¸þÜ@|ºendstream
+xÚ¬µcx¦]Ó%Ûv®Ø¶Ù±m_±mÛ¶ÝI:¶“Ží¤cul»¿¾ŸgfÞ9žo~ͼ?Îã8wUíU«jÕÞ›‚DI•AÄÌÁ(á`ïÊÀÂÈÌ P°²3qs‘w°—cu°5ü5rÀQPˆ9]­ìÅ]¼
+`e°ðððÀQ
+ôtý'— `fåâhkìõ7÷_0Gg«Ñps±²·ø/ô
+ĬsÍXŸë%¹Nfß{SÊ*åP„3]lÎ0×Ï4dîÅäOŽHþ¦ ˜Ý(Í hõ%gç”)'ÏOTCã£#Ã}·‡øtù °|1NùøB:êÕ>Q´ËGÙS¶XÂçÌ}#ÒÜXœ‘,‘|[Õ#~WØw'Š„ªð£Ê#$n6ÎÞÁ)óýxCÉ]ûAÍæ”=$w?º>1$S®ÝdÎ ÖÙPN< 3±ÌWêGâ¤Ý£âò
+ã@]á~?ÅñïVìÁ¢ˆJM†³„‚ô_G)|æ¦jœ:ªSÛbÈ ~,˜(£ÜÖº“£xõdñÔ¤3ÂW¢säbÖûº.Ÿ†Ç“Xœ¡f-TûnÝö†hRâ/2z}•wKª{ ?…†|ëþ÷(¦¤I{Ôħjäß{ôb²4ªR{È2Ý· 5ꮋ®¥o ¼WÐÂÜöš¢ª
+¡s,ÀñÙ燨×qZðoñS-Ýì…|­7€°4\±uhò2â·t–û
+C…Cmkj"úðÝãûò? ¤L›_LM‘>¨J£M&ÂÃ¥¹Ö›Bnv“EREŸÇæ« ÀZ§*ŒVXpÈqí$~Wóÿ˜\¶œÌÊòz¬©«TX¿Â4›÷T#x0E òÄ‚ùäNÕœjÛEƒ²¾ñâÈø¡Î¥7µ<t“[ß|šytl"†‹÷|ÊÍ6g"„¤jèŸe¿âûežU~¤ÍúƒŠö!8—q7¢rDìúøÁ‡~Y*ž÷3ó²ô½6"’E/ 3A~uâ„E9«X¾9y½L45˜>ZÇú~Vr—Ž!^Qê#®¨çS{„«;B¥9NG
+Y 'B
+MüWVM¸òØšSöÏsˆÊQ;ôà#tîWôÕd°±ÌêÐãFþY[G5Ó»ÒÝÏtãâ_± ;!µK°æ¾3’ØmÐð¼]ˆÂ:c
+Fú¼ªF&/0R=5;|¿ê°yöo1ð„­-ÓkÕG#w©V·‡Â6 ùQ®ÇÊæ [Hd/w’#B G8MÌÉ=VÐácn¨¹)Ë4j†c¢ Û?áØ3fž¾òçƒG/’Am eDz!*ýáY‘’áÞR¾£Q»ÈÞYuÝÍ» ¡O¾:¶ºà¯}uiß¾Øýh;/²kvôâ¿“ÈQýÜÔ¼ýܳôŸE£ùÕ gá2vP…——&âÐ{–ë|þVÑŽ@YaJX°e>(§*³ãay!^™Rq5i—öS·Ý¯¸£ïW]V€Ó±¸ŸmŽZŸúûW†Ùf. ´¬%h§ÿB¶N@—B£(ŸK×koZb±3ìó ÊÝâO±‚cõ®wíë¨F9j,¡dÇ*¹´ dà Ã:ôgý½oZúi`Gg|e¶þȯ Ë eX:?æ˜ö•~#3úºéµã<;‘ƒð35&EAžmJ–á6;©Aæ‘;î '’#ÊoÛD]Ñ,À£’}¿wá<˜?&HA%VÅGŒÇÒ›Ü7³„ÊÒjE 
+~˜›ñÑ $¡ØAÔ­Ÿü;\F$Ìß<³kNÔÒ5‘~“Oç|ŒmýŠFøãR@E_Êw4Þ"X!ižøNqÝ[åûÄôë'ˆ
+}ìD"`ž,èÛ˜AfU·oÚà·¨TÛ[³'œM£L²Î;òèeñ UU=O¤­ÃZÞ4@Z3uò7­ÈñyßÓªsÔÚR0’ö¥1¼7/‚¹R:ðw›@»Œbâ¬ßÞ>0éÀ©ßŠ‚ß˼n8—¨9KÚ$>NÎŒyJŸ¡ÀE/àoGÂù4°·#îoî–êi7uòý~ý€¨¶Öá÷0\‹@x:ò§tà^c¶Zí=`±óoö"´“BY7±ÕLf¶û2HöþQZd«‚mßha.—wf÷ û¡ÂF®0ó l8áîcä
+…Mußɾå" Bû«CŽ¸ß¬Ìqq/سÖn%Œƒ´û°&è
+ÉFl§?Xº„×Jf€^."+«^öyvðKÛú x¬/|äô0“Ëm¡Ù¹ê”_f[5·Î®?°UÄظ‰÷­CÕ*a…Ç.ð™¢5I^Yko(mOq†!<]ÖÏÐÖFßôd„š@SÜuýÒ¸íÝ7$PâÀ¹ƒßZ<RÕîÜ7†vzC3¡,oÁbø§¾˜¢æ\o, fôüÇ7û5Ž_‡Ý7í¼ »'h³P{Ê@sn­½»éõ@‘åe¹}Ø£<WõÁO’XÁñö7ÇbUd¶äFÛqÊn—ú ¯E‘¯ÊX*IÈÎØTØ„èûòÚÇÂ%N…Y~ÖÑþÀhYú„áÄ*bÂéyê\’/ Ñh¾öc¥æÒÑãÖŸÇ”áÓ#MôI+þ˜gÎs[¸1—±9¥ú™×„¢[8|×úÍí%÷ÊJ÷ŒÐÍUÿᙨ‰ã=¹di‘¸Ô8L5]£°+<õóî Þì+Ö •‚C´áõ…fiMŽþ<!}>ÖÆHJré|·ï•ó’’*Lö‡]KÈ®wÛ'7/š
+“OÆèïb”£»$„ß#´ï_åË^BYUÕò£b z•âÁ¾M«Ø)E r)àÆÀQ¨¾i—¯J× >¨F;.@.Œ
+œ¹Ëì™J‘Œ?±¸Â0í ,×fƒš¥‚®Pú±•´a¨ Ž¦&¼/N"Þo,SÙžÚ©¶ Õ~2FN¥r¹#˜Íõm€o¬æCðfÓT…ÉPé¾IÁ~#ˆ)oÛå´\s=QÕ â/=¤4{ PÎ`ÏYuJN•¼JÄ/à
+%¦j ý–Ïy´c땘ï,ÅàŠ3ž“þc3c$a²…{s†¶Ïƒ¢Òë6ùßÜ@¤c™2Ù½’ "Ód—§$ºNŒî%З¤K÷"#w>RdÝ<4O‹ñoÞªÏ'¯>{´C=ÑåØ?”>WFƒ{ ËÁúydlõ«0U})¸Úl‘pì)¬ýα˜žIÙ<°¤kñÊG!å tˆ­ ?ÚmÈP¢Í8z‘—uw¡Ðêaî¦ß³)ïe¦Ž¸bQëÆvÄ‚VU2㓆ÔÔ k)|j6t¿ße. ÙË"èŒQƒMWP[ÿ\òHÙõd<½C– Î!›ÉIÉuô ê»Üƒ }cr$¼´`’“†¦PöX‰¾è—–X-Xü³5V~ºÞVâµF;«ó#ìGÍD¯€ÎàKêM õ yû`ÊÂcð…º¿¸´6†çÏ®ß4õìÎfl?£i!e5¿bßg>Õ{û9A ® ”rÁ
+Ù*¬×'5 öƺiz®„‰Ýf
++Hê!± ®Ëö'Óä
+ÄŠ§h÷„Ü{É=Âݶ¡øU^–ÀàžèUS­œíê±¼ÛgéE¦oDs?X™W ß^®‹ B¾Óÿ…X÷Y(6ËCÊqZnÁëà¹Ïë-ú1ÿžæxñ˜²[ö©÷VŠ¨d­m1i0½ûùPšÒNövHûs úat=§
+©gÖ<L®CRÁÐöŠn,ÆXcñµ;W«`S¶"Sÿ·ˆò¥“O‡˜E
+eð5²v'úå„a(»¤Æ#r)†‰çðøË6-E£Í5øÊ÷5†ßý+f¨] ¾Â.ª…¥ábAðó³òþ7_†« ¡Å=ÚEÎ_k•-ó%AQIH„¦Æ.%í‚Dêä\n4[*37]ÈÉr4é*–› V7m‡n¿‚òF#²À›ô,y*oö#¨“÷©$Î9f¬ÒÏRÒÙþ\ͪL0¥Ü¦Ò>6 1ðòê/6]³äv®µZ
+_¸¨Àé«ì1ßRmþåEÆ„üPñsKªP=.¸#`@—ˆ>Qô›ð»Â¯_ƶ„íd¢ôN3×'M˜.ÆFrÔQ?žI$µ_«°ú ã¸åÓ1æOÊÊ; "ŽÀîÈ?²îwó:FÅ“|/{;þ¯º”ðE*´V÷$ ÷PŸ†¼ï'E›£u!¾$Hù+BŽ:´æô ˆŠ25íøµhÖ¦2Â1¿úO€¼ŸÙ§hémFƒjË[ÊÁsFó…ì±\.cá>—ócÛ—Ô+v©Àâ"Tû¸hõÖÉÅýLQH+VÊ
+ jgìzï½È=dql£1ÓÖYkû^PÔ1¦\µU1…$:$a^טôNyãLl˜9‰“Ý\Uäñ’E=Ì«}üñc×(Ÿ²ä»r¿Á¥E—j/&è;»Rß»•Sé#4¶ÇeQõ\G'.*ÞÁ8@g` ÉWQ>æ‹—qåÍ6K±{ž0BÏM­c×­ûëжÜf¬¬¼ÑQر!kᣇ‚§›-9\:­ R‘ Må‡C¶ Q›ÒRÛdšÔ$9WzC&Àç=²LƒzWuØ–`…IL €© úÀ!Ç NãCZsüôJ^ã"–ë ÂçíïY @ËA(>S9|]|u À+‹~³±ïL˜°Pš”ú®W ‘€
+õ‘%­ßÅ Ù/»" )´žTŽÑÙ^ì¿%.óR/ß2{ß¿)½†ÍŒÖúà ýÆìuQ̼¶Ç¤±/×ÊWŸµÂÖ~¢®¨ªÓDGë »+é,®ªÕòºY9ç#yÔÊý²ûX£Ì9þMd4u_‹´ÜÁïy¢¿˜¢Ñ#é©jr¥m—Ÿ¹iŦ—劒*Ã!=C˯ëCÍ>*78ö<žã$`V!”¹äÞÜÁš¯Ä®x8ˆ"‡cÍúÆâB“ˆYíHu›ö( Áz ¢
+ïà`íír⺰¹ò4r–ú¥ÍÃ_»øf¤¤ï§cžç¢&ô˜BoÂÕ¤7YÜ;ôXæëõsb‹W…«L9 ž:=\Þ«jö¾2–œÐÍ¡§³T®n1‡VtÈÓ¾LÌCôŽÕì=Ë÷ù”°tT¥×ÕÖz…ñ$YZ<*4<†¯i¤&A&Ùõ.˜n•ÇDÿ,égüáHÄ|‡ñ¶™µ“EÙ:O¹™6§ª ŸHÚVW̨VˆS­Lĺð˜ÖH9%Ä®qdÄÍi²Ý¸faîxqvÅøw»…d%uó¢0ÉÝœÖ|U’vKãº6öøÌ@!wJE÷²t!Ä möˆ ûjVÓç[Brøj'Y×öÂNY
+ˆƒ÷ÎÁõs½/’ÛÖ[0ø´ÊßxÃ/¢µÚô"ü(Nc&uy âEB:\>è³€v¿/èzw–>Œ¸¸ÙŸ3©å5¶é¿U@<!%^>ÓÁ£*8Ë•ÇN#ü^.¡ èFj$eoq`Ì^r¦è8OoLe¾À´¿öùh `üLêEW*«
+uóÁBˆ‹Ûª–õ›ãðü†Ké|^ŸØ$ÉÃö¬:ÿÊêÞYdäÌZõ[nðIZ¥ïƒ&ýMp‰£5ž×@ÄqÙ·dsá×mSY#Oô‡àáiÅÅžØ'u0övFä„ùžP( 1•}äG&ý&Ûrô€ÂŽXtc†BZsÔŒ¹h Mvi1ž¡!„ÍcýI‚#Z«ÆOv5„±^0)ùû¼™T8 ÿLñ/÷ßÓª"cÉ\Uå»°8Z›8´ŠÂcçÞ
+Î(ÒÚO¨²?1ÐDµò r8!´õ™D±h’­ úÓM~ϟǽ²…ë†î~µôqÜEÌ Ã7)e§Ì£ÏâCÆ'C_{/[ߪÆ>O
+º íää
+ŸNvYÞb¡‘±#Æ™uiÃØþáòD„Jº õJÌ)±ùQ'óŽéE½•+lx—.U!’o4Pe†»> ½güÏ/ hß÷ VŽO~^ÔÌðåHàj!Ï_®!‰7¡†:£L[‘xs¡°öJƒu-{—mR” ãÜ>1]ÃdKFq¸7}æ@,¶¼-Ç¢ÎÀCþ¨Ù³GìA YJ§øÕöú (Í¥ãX¶2À{ÅõÚ¬Çú=A$ÓbPI²4¯‰x¾V„÷c½áÄUŒì‚ü¸Úº»H!õ
+.ø@úo‰.Aµˆ¤l”é
+ZC¾“üxŠ>èï‡P‡ˆ%<ý`TTþ<¸¹Ã¨ò~ROI¯Hµ•·?}ñ7lymþÕ‘¼%-€†|~‘@˜†l
+û¬D¤AôùÙL—[€EfZæTVû=ÞžWðó‹OõtG 6ódìøÒfÜ_J‡ÁöR*iÖƒ¶_Yx}|!.ü9l½~ÓËöžû–4)¾ÜS¿4ØX½½ïü1Xš¹•.Ä!O 8×û…m^üÞ£ql1. ü‘B&xdûÎ !<ÏH›?©³Kì›ÇAà’°ü‰‡3ÌXo²°2fËÔáê.•I¹Fÿqš.ÜJ’ŽŽý¨Ï;µä€Ø”ue½ãVX ä¯u¢èLJ{BÖ´Æ ±ˆèŒ×°ìÇíç&íò-MÁÏÌ b²á—“­Udf»[{¯â…LˆÌCü¬¸"ƒƒ‹ '‘‡x’cEµõ]G¶ò¦‘îi­æs*Íd&„ç­•ÝÖskÍ6ÓåøQsèNíË°k—ËìÉ_ßoQƒ.ßaÌ/ÁsœSè×òy® ëW žc.©h–C>½t>! |x 4oÊ°úÀ׃Õ,o-LaºA7Í°Í7)äó3̆VfŽ$0T¸Ÿ9
+ÚŸ¸\@!#^dcÉqæ’ù-$ õR‹ÛGÐÑ‚ÄOL!¢köæV¡Rî6æÎrMˆã'¨_dœjÜõŽ­»¢'Š@z£æìôü,–NÌüua„¥¤|a¬hž~"^$6Â^°|ÒR4€†ž 0©Vb"óãÏ ž‹#A†L6G²»0… Â3ê6ùD ¿‰‚9È\Dá:ÄûR(¸ë?}=$7zOª ‘—?…!<تyë<Í÷Æ Qš?ab{¹F
+Mp.Þý©\B„$–AìÔ‡‡}Õ»X¤ ñé£×B?¢)ÚãŸ@´Æï 4pÒSËý
+±5Á¿Z¶&
+Æ<H)]Ì{Á}꺽î¡›0<aÔÔ.’mWâ#ªš,)=Îܘ’)nÞ ˆ=@öõÕ<jÔÜId¶QГörº+ž¸7rªXb D¡jºçÆœùaŽG¨¸Y/°kÀµl"%¢´™º:ô7“ˆucË©èÎi½ÔzZãß'W‚Qn&Z¡gßè!ÕÓ<¤Ý¯/Ú€àuÖXž·0‹ f_6ÕaZÀv`M¨¹ª—1bvÕIü‚Jn.ðK5bø½ÏÿãΔ<élS+1ïµÁQ¶ì…Æ7õWv[¸!MEXZ3tŠ·`~¶ý¢fìZp‹.fõ»c2p&«7^ö#ô ¾èÓ ÙÖ)xµ¸åí]££Áµnešc›JÛŠÜ|g³v$BÀ!W’Œ ¸U¯èÎViÝ
+§vÉ×%’Hð«.3„ŠŽX.òï˜ÀlŽ²HñÍgÅ«ÊFýri4(}õÑH!çDCOÌ|Iuúà%%Î%³“r)¹X!’=t’ ¡“S£*b¼iV½è6À.?ªQ7¬¦}jRÁšm‘œÇäÖ•ÇpyNL0¤ÝñÜöè@­³Î¾áµ’2רcíågE*ÉR™Ò\'›˜bàáÂw½v0Å8<'Ì÷’B'Ýg‚§ îŒÁÒ›=¹Bäw^ûÝ¿`³Ø<9øMä\5ö5ø•ÂñWÈ=˜XV’¸…­yô„i 6-úDA8qN!ÍŸ$öÊ“ó1  ÔV¯çÁ¡(³h—µM±wæ=Ò>zoØMé`w%óäû›ÕR÷bO飅Žê>‘ÍZtuùª£F&¼O¿NAJȼWêÉïÁJƒ6‹¨ÌjéE¶~‚ÇÑAxH:ð0î֦̽×A{5ë?]ñ-|Ùë{É·"|ÆÑQÿŠ D™X<èkeà 8êª=§fÀ¦•[ä<wÐÍ$YÆeÀWw©Ž…Nƺä ÷}‡è4×ä+Z—¥dáh½óÙ¢·Ö!WŽt×…³\|çû3[ÇÍÊ´ú«ÃyÓ
+6 eœn&`±Òj¿ŠäzM’äÙõDè.TbaY˜‚ì!Ɖo36ðõ‘nFk„§‹pi›ÇýÄŠ»iÈt‹Ç®:Ó5º²0“¼/ºI´„SyÕïɤrJÝyúì¡áùU4¤éB,¯˜”éZö}
+Y4=ÊB<7ïm覯üë÷¯Ji/¶Ov¾“…8·-’¿láöiEçh¤3Ókɹ[x)ŠcÝk™½¸CþÑy…Œ ¨Ÿå3j¦§Õ5͈WÝç9XÁ,­2n<ÓK{ (¶P2“ÀŸ^Ši’;VèìVúJ)'¬ð°<ô¸O±Ó_ì'Ñ« FX7Ó
+4çv웞îãU:ûò¤]ªzrÔîtäÆ?+ÂÀ½ÀÚŸ“rñ\2V,†mg«@bøÂBòØÄ*†N½àgÓb~õÛ_æ<žo²,Bÿ§X``âN¿aÕ)`Ѧàt8hOÐ=Ð ‰CálC4ƒÌN©Éce)Aù1éËua‹¿nôDW“ôÁëªj!±”/À·vy²ôI¾å”®Ý‰¨hß[sÌÌóo|ð›êÃß.£VƒžóG½|VÚš\ä‘®X+¶J`sEsߧ¬Ðû´Ú0§Ø¥‚ÔÑ {8–À}µ‘~ ;¶M”¬A­?¨Ȉ
+‘MËÂ)ÚJìyï’盾°+ÛAX•¡<UuÆEÁ°ý”Ï©S«³ óõå0þ
+èP…ÃR œüZþ¸» ÈÚ—F*þ/\<>c43‰0ÿB¯u!u•ŒA¿8ÊNÎØÙùªycPÏ¢/’­ü䄆¬äÊfI˜vÐi}°´ù 1Úd„fÍ9~%Ù ’Ã"´ÕÅkƒR†à<Q9˜ñ&å÷ìôNJì
+ü•Ä;÷´ìCc6g¨FÏ 6Z¸ñOÉ4nFíÌæ@Ÿ(’j½9ÌRi|ûÄ«ÎÙ 8-J_ŸW䛉n¤ÜLá J¯:³Úl j]­)Tʸ—iÉd8r×KÕT˜²†÷A«—h,‰BuÖƒ}͹‹Sðé€mWõv¬Âë•h +Úþö…G«I.& â ´<¼Xh
+¿ˆi_þ´° z`?ªÃÖRf|°¦ˆŸÆúµ~š^Ú¯x¸m)h³zã%ÚºH—ªíAéºl…Ý”ç68c`Gàw©XŠï[=Ƹç(àï–†ãß/ìת}ÅÙ+¹†¥!\
+ÒTÅË£A}f–ü™‚Ï$±*AËý¬zï„ži'ɉkê–8º[ÎÂ!w@ìfsñjàd€‡XH+ýèNY}aK:Pä
+ Š€øÞ à ÕƒöEñnhóJ×T—öД‡B!p±•ù¦—l“{^.¯Ð ±LíìØK˜Ê9ˆGxC‹€U¼VX–ììÆ©škð*û}¡óŽÌTÝF[|¨ÔõÙa—UÃÔÆöIœ¯ÁVÔæé„7½&$¡N‰pˆ®Ç}E÷År{U­chX•è'Mí¶Ì—ä$,ŸëeÞ·ž1ÍK™•aFïá{, -ÓÀ‹*øg•ŸÚ6`F…LÎsîã$’tdÜÜØy”®Ç¢%šð¶1W´ËL Ñ,uþ©löW' ¸nºó ³«öÒpÓºåÓfŽ¶ª¿sKn?]j‚°Ï Ó¿¡gæGˆÀhfÙ{Ô¾ Ô‰í’MPŽEoødx€Q²t•y Q ”î§V¤óMÇL9‘5òh°À!e­Ÿ•¶¸¶ù8¬«”{†ÔuQ°b‰¹BM‹sÙ²É “ÿÆÌ]ƒ ÎôvÍ&Ì‹Ï‘'½8«“’ã*I5«6i²Ë iw ®š@¯Œ!e$}‚s¾{‰ÏÑëŽ!!cPGÛD<À-€s_|ùbò´ùAðËQó‡ú-š"ñŽÓ&”­Ø5‚µ3~‚Šz½òh!Îi‚é!ƒ³ÈÒ"s‡¹;o˜n¨Ë¼ 8þßÆ”$'U©
+v.Z[våe±àÞ¦§°†`G‡·^—‘žÄR…ÒǺOƒò^ØÔ bŽeõþ™ŠÄÀ.2¿AÏ»bÁ²¨¹zYÛbÛÙR8ÕohrZG’Äý2
+’k­~ºk ´,x™-­å®¬¬HÖìFÉÞ NžŒ„_ ð3¡¬yÀ=ΑYÄCç­²(/ï?çïIþÝRˆ²¨è‹[_³r'Ÿ‰T™'´7”X‡€ *ÿ|xÖrlŒIìèUFìžovñBW¨é±½5à+[™ƒã·¼Éú×»„&+åœÀ´±Ùg/<R4:ë&ŒCG"ëiŒTâM•3_ßw¥èùiExZÔt»ËŽ´Š<«7@µzi|ÜŽÄmÜb3]²?4¯ƒMÐê)ÀžX~j8«'Œ½sWst’g9èáѨVóìëî À–Ës<|ÚËò!Ø!í®©±¡–¸ªŒ6Õ¸ð‡Ê…²¡ŒîÛÊX©|¨_=›Lè£ØÏÇÿ\RS³îwŸ";Og0N¨ã/Tl0ýu[£HÕú¹ðλœ}¾f-õaÌâ{ºGüyèQÔïÊ‚´q¨Gγ *{b¦¸¿ŸÞ¤~+6C¡¤Ê:j]9Ýô¼w©Ûبþ4õ6Ä^ @+µ¡‰¶°l;âÌdýdRCúN'æ“DÀUzF9ù ʳ>XJ²éžÿõs.noÙa“’cÒ;c»öZ:ckJc£S…
+Ò§ôSëÓ&áî` âìð2«oÜ“ýÛ²z6µÚÚ±]9̲MŒ¸#úSýª½©@Âs]¥`Þt:õ¢q“ÙtìwnÒä˜×j¡
+Ò¨tWj¶q,£Oí×Aò*úüßMî´tùó—ã´Q)VÅ1Íѽ»y§ÑÁL™¸Áì$Ó~ݯãvÔå\ƒóû ÝÓTùœJ̹`¿ÅŸ
+ÛÎØ,kc4Üò9¨3~`"Q€p ¶¥Î6…y»L3ñ|hk$XÀ­MÁ=3Èš„ƒÆ8¯ó÷øúãÁWæ§ËH‘þ#9Lñ>Àü‹tú“ïüú†Çåħ­ Ù§=Gß™nÚ[ù²kcñ>þþci˜˜0±½ýÖ$dï4ï–7ƒIÉ=&ß’(LaË­<ü;±! O$caf%ïâõžvefÁþc›k?2H·Dâ"V•Áó §›#„M韤ãب—ý™Å¨A·”€JJmu`UßK±ýj”ùŠ÷Þ£Êä€ÛïÖ/ÊÞ?H_]x3áÂýsÞV
+v£–%·;®ÄÙùÈ[Úãèß( v~݆¥À¹&=/{±¡MJ‡³ã™#ªCò¤›SOæÈ :I»ñ£WX{Ì5ö%{›ñp2‚D{j)Ë©‰ë8tT˜FËûU56…¸×¤à 6ž]¼Æ˜6sÃ2ôk£ªXÙ?"Wª¨T&ãUÖÒÊŽU&iÃÓØKwzK‘^ :àra‚_Ò‡mJ¯Hd—&—q̪·Ïöz—7QÑÂÅ'ø ¡‘Ô”|w»Xõ­©·>uC·Óè/™¾¨öƒ¦»Úéî–÷üoýËYtpqSù¡l¥®qõãõª9¿"Mq†ï³€xºôEÅŸK·š‚¸ x÷O¢&Sƒ:À!ÏbÖñP|iÁSG³hlÌ0Ðl†˜/?Êg°‘ê§4F ½  OÒ
+¬5]“–Bþüd?Ã!Èa)±Ÿ UwW¬•×½é·@LôƒoÑ|p¨ôÞŒú˜Ë°Ôð¢‰OØžfŠ\ãà9]ËšJȪÈZ¾P„ðôùPŒ&†®_vǢ噗b;ú­-aéÆÉJ ºœÕ7 ÈZœZ'ó¥ ÂSïtj‹¬¯ÌÉÊ[3Ù?–¤2ßli|˜µ…Ü©†ÏÉWßg9D‘ÉÞÌŽüß×âÙ¶üô&‹÷‹òBø»&‚áa!ìëky`¢4¬[(TP¤[î_±K"b·q>ë†L/ozÍ°~ŠFp@8uªÉJ;EFn$Œ©
+€­^A%CÛåÜLrjùY¢žÜn\4ìZàT2'c6ê
+½‡?„i¬yè-†ÇŹ(Tv–lè4Ä¢TÁÀô>\Jf>jϘøaøÀ1•Ü< m§afæ»'Nê8¹kðèRž;|(¦b.@nz# g[Á°½™­nÙ¸œLz¤Zõ’Êáa+ÿ|ÿ)\ØÇKΰ‰b0ÕªcÓ,îó5Q5²Fg:Ë$nÅáÕÒõÎ €Ð<‹OŠsº²ÝÙÿDÃO´0yw·„¥ÇÊ2ø½= Ó{ú¾í‰±Áh%‡òRsÛUc"g×>ÈZô3MÃà^ÒË«gÔQ™¯£—k½5ÖCÍôòíyÇtÛÔ¨Ù`X¼’ã$’¦½$85Éi7ÍdWꙩ/ABI±Õ燷Ö\šÃbEPE «Î~øxâ;p6Ú5´£„ÂÄ|öÊ~Û`¶­\3þ'q¤ÃsáÖZwüÈé.4v/'Áxjµ¾%Y3† #óÇ6¬æìy|^Aj¯ä–Û4ÒÆÕˆÉé
+V®ØäÊÕtßJ¿Ú™\z?K*¸6¥!ÑH³Á½Ù¥‹Lº|_‹MœMI¹$Ö›­»Zƒ¼ ¡¹ ’uºKÅ“ž
+·ìÛû'ãD¸Ø“²x};èþÓ–‡úŒ4D'P{”òeéø÷ÊÏÍùøëjˆ¬“q~½©ýë¼ñ<ZxàM>Ê€·ÅV¥V˜OëüÃwK,-èÄJ„¨Ôq®ÐÍ°î
+sþo§ý™
+#¶cër!¡W= „´*¯g±+¡‘À#es_‹,2™ÊãœP+ÒpuMYÖP/ºÈ˜ü‰‰;°>Û[¼”ZDñ½"ºßoÅq™Ü
+èEHÁU 1u”mLz‘ìåÃh p;ÞAåO‚¼ïw2}íÞ–!F¦†Ÿ’)fmûì‚Àü M½ÿÌ{<ÇRÚÖ[…§—Ëu Íc_Tž†t¾Ö“Þ©Û÷ŠUé„òPZÜ~›…–nX õCg›
+ÌãR7ù†æ9`ŠÌy8”5bX%2Z}ššÖ<.Ÿ3 9‹o§œgéJ€’Ï Âá·‡GæõÙI°g Ù[ããÅ)d½ T¥1vÙÍÅï<wú¤ãïWÖLœš‚ œ†ÇØâ3:Wª}ѪìpH¦Ü­|œ@l¯÷ŸS8±åëz,††ý;x âMJšÎH#œxå8Ÿˆ„‘Þ¬ÝçÎQøù—ÈÞyK|8aç*Asabvª†ž˜L)"Ù ÷¾¤B,ƒšqe>>þ$h(O®Ó=Æòè:ià·ãa(×ÆÞc1}œSBª=9›öÁï‰âòí§ÇØã®LYÛÃ%¸ö9¶Z³cçÔ%ו<7oø÷¯÷pn=¢+‚t³@wFQ´-Zå§;VIÿòÉòœ›¯ÀémÂYªíÎ)[HZe4;ä]æIÚ1Ô
+ë¶ÓÍeÖåW[v»óœ ¨ý³®èM6W(Js:L9þfzoÇÕÊåÄôq7ùX›§¥å;#=)GMjÓ§§°ó>7W7WB±Ú[·ùÿz¨w&"L>bq\½·„Ѫ~yQÕák Í«.·úû˜¿W?¬>¥¢¡@#r’ô-”‹Ea]eãò£»JÅ™|šŒ3’ÞR£ˆÉ½ÕÐüJåñDáÃhºÂ’ð‹²wíª[*Øà©r‚kº4\¾`fÜ^î ?d:ÍûEËf™³¤‹M”ÖCÓ„osCü>Kñ•¹4ÉÀOõ62|3ÑÎyõž=¹»ú1¿¾^ž®´—Ÿ5x´ !'„ú÷On,‡ÒoÝy€ùbº…q²{m Ì±ÓOkÏx†E+ÆÖÒ7ó!xìòŒF™³0¬·«H{¨˜þMû¾É^Ù^ÍIösìëôòC¨Ÿ/`u¨QwO¸øˆ”zŠãDÆFgÃî43ö¼š…¨{ÑÐ÷ É`²lAoÄšCÅôìc #sˆƒ6>Êjv*AjNeMx‰@³ÓÆÅ£4ìæh7ÀP­–gÂýÿµ3çÿL0
+Áiz“æÚæ†Á‰²ÍÕ²Ïm7ZÄUé×4(ê6•…zÌŒ¢PMpêÑýה¤ù†Ô(Y«»kªWÀî!`Ê£mbÄ¥„qgˆœíF2X3ó£æo_ÞdõÍd¥:»T˹’E€-ä{.1ëÉ
+dÜp®ÈVã _¨¦1³å{?î:Wõß~Šœ©"LùQjƒÖ±:KY5bx„6Úb ÿÃÖëlƒx¢¥ ~¥,£Y§Ê½I|çȨ!VÃ3µÓÂzG#•¦n4’£Ç¦ßÒù»oôu¶Ô~«Ó
+7Ÿ+ó²Vï„(a=ÔÅ>\M!†rµmè÷È%
+^&ÍËâJ€°—Ô²?\9¼h¢Y§!¥EÇÊ·<§ý#QÇÿ9ÚQ ·nºÝ's,ÂøŽ”¢­y–’Þõ¥«½ËÆð›_ÙïϳŠ5NÒë%Àv<¡¡ûÈ<{šOS*%älõËU¤¿\"•e†tçù›ß©s°tvܘ´t»Ç(Ìv« k‹qµ÷³ƒø™l9^÷k%}+oµ©´£‹rüR·JôQ3ül^{´v;¥ r‡³°åg3¯¢Ɔ’¢Ó¢\[#²Z̉ˆfû½Ç|(„›°ö5ÏL‹d•­ŠîhŠÆ.5TËúé䦆zp׬ó•ÓrMΩÄq¥r.œðÜ´›‘À4€áÜjÿ%®ÿÿh
endobj
1258 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 2824 0 R
+/Encoding 2845 0 R
/FirstChar 34
/LastChar 125
-/Widths 2834 0 R
-/BaseFont /PKANOS+NimbusMonL-Bold
+/Widths 2855 0 R
+/BaseFont /GKXHUR+NimbusMonL-Bold
/FontDescriptor 1256 0 R
>> endobj
1256 0 obj <<
/Ascent 624
/CapHeight 552
/Descent -126
-/FontName /PKANOS+NimbusMonL-Bold
+/FontName /GKXHUR+NimbusMonL-Bold
/ItalicAngle 0
/StemV 101
/XHeight 439
@@ -14252,7 +14523,7 @@ endobj
/CharSet (/quotedbl/numbersign/quoteright/parenleft/parenright/plus/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/equal/at/A/B/C/D/E/F/G/H/I/K/M/N/O/R/S/T/W/Z/bracketleft/bracketright/a/b/c/d/e/f/g/h/i/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/braceleft/bar/braceright)
/FontFile 1257 0 R
>> endobj
-2834 0 obj
+2855 0 obj
[600 600 0 0 0 600 600 600 0 600 0 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 0 600 0 0 600 600 600 600 600 600 600 600 600 600 0 600 0 600 600 600 0 0 600 600 600 0 0 600 0 0 600 600 0 600 0 0 0 600 600 600 600 600 600 600 600 600 0 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 ]
endobj
1237 0 obj <<
@@ -14267,7 +14538,7 @@ xÚ¬¶eTœÝÖ%ŠCpw),¸www÷
wNpww÷
økd‡§¤u»€ìíÄŒ]€<
`e°pssÃSDí<@–.
-tøÇEp
+tøÇEp
ÐÖ¿¶qÒí2”"¥ŸjFy_ÎÉmBép0kìo)«”¼ÁM´}s‚»|¤ñ'w+ðǤxp@ö5Mý‹ÕŽÚ†^Wxrú5ñèñêÏðà@×5tÏ]NìJ^7(¤¯‘þŽ9‚:ê•Þá40éMˆ×­—$šÞy”ø¶r/Jù+v­roIÐé­‚|‰òNR-{UZØW3‘|‰ÜÓ¹Ÿ«®”âÎ8|M„ãA½7SÖA“™°?‰î!®¨{üëlkh_zsg'•ÛKº7ÃìQ23 †»V!‹¶88Szé-ŠÈZßʲÃìb“ÿ<Ìišð·uO[מʙåê;Õeâ*1žü
=Æ:nâ(4n¼ë—jºÒQ•"/>Uöló½ˆtë% ˆ/÷€{`‰ÔÒE¨N»cj,Uoo–›U{Lê,þòÛ’`>8[œÂ—;1Œ"ŽÛd6k$T÷ó¤ï0ÃcÃ=­ò8Àëø‡ël2ø©ÙB ÿ-NE>…°­VQ?SÛ׊Û_ZßjcxÊSH£k‹_G–‘'²Âøøc±£ ~´½ Àë5ر3ìä=Í’ù9õC[¿êŽX? Cz!‹YÀGóµgàÝzŽD7 8’(GD¹‚Hñ%.fjM
ýÈ#§:Ð YœƒN o‰ÓûFp=)I%ú&Ç.½Ù™£J©³k´ ¾< ý6K†#„Rcxü¸
@@ -14342,23 +14613,23 @@ M¡„£ÉãB¤&vIA{}ɨüØ?òXcçR&YØÜ„*3cµ,;S˜©fKnLXӌȊeL§KSü,‘Ó.ýï)•òýX©"pnüÁúþ
î_æ7KbËͤ\Þâ?MÃòõ¬Î±Iž9ˆSïfâúó’Í¢qÖcU…D”R&ºP8ÐÌÉq‘púÛS¦™¾ì­§Ó@K¹¥í2y4,à nzñ~†ŠùÝB‡âw¡8²X7Õ…VËƶê ÿ/HñÛ‡8ž4ŸŒ[½‰;[ ]άT ¼HŠ¢oŒRUÚ÷q§X ‘ôö}‘÷S·‡¨õ`Yœød2¦ÐyÔ¾õ\¼Ã1?a#ò£uÄT!šÃZG=Q’›ü×Î]ÐÖc›9/±§dÒœ…i¬¬
õZ§¯‘6’4Lv+åÆË È/¾{Vsü¡æ;¥5Þ‹ÉÙ“÷°KqÐ@-Âú¥˜UJð¹;ÑÓn ïŽéU/"%ó<ÄÝ{ŸÉÖéFq+£¿
ªÎòêžëÍxì¯÷ŸQg›a+q%²½[ƒFe$™Mí%¸³År@]CÆ"pI“:%?0F»X¸_¥fÌN1¶Î®HŒ¹\Y2¾{Íï!"¹´èÊ­6fB®“»Åõè¤ÑO0–0¿Hú^˜4WíagUv;Ö—FñIôüzçõYˆØýÂè`²ËÁ¬€óÈ5è”CPWžà¾2‰ssFHâzS汕˳ŒÍ¤ }<.ëÙiµD{ä\Ì£º9! özד!î0Š²÷V;Ö&Ké¯(MœV}îüøQècL“ÈÒÎ3ïAT‹ëêןÌ&Ê'g®çÅVÆ´FÚÞùÊy¢tc¬óºøÒ-yfgA‘zTz¼ì®øŽ-:y@ƒ¥±ÿ\¸"•?PVÏWÕE†È3Ê lDK\$UÔw¬>rß©Dè%<»ÕìÚW”åv\ÏÓŒ ø¿€§Jœ‹ê¸
-A}Ü[®L¼«#²GŽ_aâÍ¿KH¤ŸŸ‰‚h ¼ª»,_&½òîoy£pB7vKŽ£¬NhÄO1û_¦¾¶®rD™91Üð)ÍÞºsùTAÍöæ÷Ý¥éëc5?Í‚ÒÚ.îçþy;4Ûú/¡üà"€ps°óòñxeç…¤ü@qMendstream
+A}Ü[®L¼«#²GŽ_aâÍ¿KH¤ŸŸ‰‚h ¼ª»,_&½òîoy£pB7vKŽ£¬NhÄO1û_¦¾¶®rD™91Üð)ÍÞºsùTAÍöæ÷Ý¥éëc5?Í‚ÒÚ.îçþy;4Ûú/¡üà"€ps°óòñxeç…¤üóqlendstream
endobj
1238 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 2824 0 R
+/Encoding 2845 0 R
/FirstChar 33
/LastChar 125
-/Widths 2835 0 R
-/BaseFont /SGHPXM+NimbusMonL-Regu
+/Widths 2856 0 R
+/BaseFont /MRVSUY+NimbusMonL-Regu
/FontDescriptor 1236 0 R
>> endobj
1236 0 obj <<
/Ascent 625
/CapHeight 557
/Descent -147
-/FontName /SGHPXM+NimbusMonL-Regu
+/FontName /MRVSUY+NimbusMonL-Regu
/ItalicAngle 0
/StemV 41
/XHeight 426
@@ -14367,7 +14638,7 @@ endobj
/CharSet (/exclam/quotedbl/numbersign/dollar/percent/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/less/equal/greater/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/backslash/bracketright/underscore/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/braceleft/bar/braceright)
/FontFile 1237 0 R
>> endobj
-2835 0 obj
+2856 0 obj
[600 600 600 600 600 0 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 0 600 0 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 ]
endobj
1177 0 obj <<
@@ -14378,7 +14649,7 @@ endobj
/Filter /FlateDecode
>>
stream
-xÚ¬ºct¤]·.Ûv*I§cul'[£b§bÛ¶mÛ¶­Ží¤cwý¼ï·÷>cŸóëœý£jÜk^s^×Zë5FQ’)ª0›Ø%ìlA ,ŒÌ<
+xÚ¬ºct¤]·.Ûv*I§cul'[£b§bÛ¶mÛ¶­Ží¤cwý¼ï·÷>cŸóëœý£jÜk^s^×Zë5FQ’)ª0›Ø%ìlA ,ŒÌ<
šþô­¯œtGLz¥ÈéQž7K²;P?8˜Õö¦””õJ>`ˆg:Yánžiü(\
ü°¾<Ù£ø§6Äbw¡5aÔž_|M<}~¢î½…î?$¤Ë‰…§äuBþéçC(øC­B¼ªùÕi{Ju ¡glŸÏÏìC(»ƒ¢ÈbÓËZÁçjð§fÌÁpC@¶
¦éÂú”/é„ÐaF)¹ìÉT_Äü AÇDF@’_²– z¿IÂ>^"ò“£œŸpÖj×Ñm¡HNZ¬¹Šù—;Ão{ô«OŠ—©š}¾ŽÈïqM gÀÁõ@‰Î
@@ -14452,23 +14723,23 @@ K› ÀöYt^¬evQ&57Ñ„t9Æ©‘;ØQLV2²ûËI2­U^¹¨%Ô~ŸŒ×ˆzW
p
íSß»bò7+֘ߠáænÍwˆ'£#µE°nx‹¢PšL~|ö4KQ¦–!¯jn£ÕªîØãVBGE”}œœ Žý­Ð{ƒéV³”Vã0¾ô.¶Tv‚Ì|` °SU[¸U!&ýø7 >hI£YÉì0…òÇ*껪¦úݳj€í¨ž¨ß`Ù?8sGx9g3ÎîèñÙt÷:n:—SúluHx‹œ›ÍÉPo·«ÃJAüÕh€ß¾ÅW'ˆÃô´B ¶q…¡Jˆ`“ý kaæ®´bg>–MO”¶æB8uk—ÄþÙ7)Çê®Ü¿5GVQ(ë¿P­m-FG*åTA¸¡WK2z)· Ž×?3Ì›QOl
-¹ƒ%ÔÕÝÙêjý7-âendstream
+¹ƒ%ÔÕÝÙêjý[wáÛendstream
endobj
1178 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 2824 0 R
+/Encoding 2845 0 R
/FirstChar 2
/LastChar 151
-/Widths 2836 0 R
-/BaseFont /QQCYVR+URWPalladioL-Ital
+/Widths 2857 0 R
+/BaseFont /OAUDDA+URWPalladioL-Ital
/FontDescriptor 1176 0 R
>> endobj
1176 0 obj <<
/Ascent 722
/CapHeight 693
/Descent -261
-/FontName /QQCYVR+URWPalladioL-Ital
+/FontName /OAUDDA+URWPalladioL-Ital
/ItalicAngle -9.5
/StemV 78
/XHeight 482
@@ -14477,7 +14748,7 @@ endobj
/CharSet (/fi/fl/parenleft/parenright/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/A/B/C/D/E/F/G/H/I/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/a/b/c/d/e/f/g/h/i/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/emdash)
/FontFile 1177 0 R
>> endobj
-2836 0 obj
+2857 0 obj
[528 545 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 333 333 0 0 250 333 250 296 500 500 500 500 500 500 500 500 500 500 250 0 0 0 0 0 0 722 611 667 778 611 556 722 778 333 0 667 556 944 778 778 611 778 667 556 611 778 722 944 722 667 667 0 0 0 0 0 0 444 463 407 500 389 278 500 500 278 0 444 278 778 556 444 500 463 389 389 333 556 500 722 500 500 444 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1000 ]
endobj
1041 0 obj <<
@@ -14488,89 +14759,82 @@ endobj
/Filter /FlateDecode
>>
stream
-xÚ¬¹eTœm“-Œ»kÐ4îî4¸»»7.»»»‚»»»»Cp ÜõËó¾gfΚs~o~õ}Õ®ÚUWíº«W¯¦ QTa6µ76··1°02óÔ”5llŒLö² Êö¶F€¿f
-ŠïNfF  ½¨ÈŒ af
-53°²Xxxx(
-a;‹¿r0ð0²s3óü
->W(dÊ(Ç\Amµr±ÊõÖ½.c_ñõwi~HVÓãʈßHyê…ÕØ7˜ñÀ¬€–}­á­º>›IÝo‰©›¡³XaW‘Í–êS«±­8Õ¿ˆ_$®°>µbÝÇÜ·¿<=jpŒYK‚kßìä
-°ø«üVþ]%ÄÕ3rñ<ñî5 !®®ãûz#l’–TÍáf‘xÙHÌë"äfëñP“ÃÐUeWcƒ¨ý°%Mg–@rW%v__ðÆ7ÊJ ÑÞ¡xÂ6%xË\5äh=Ë涃¬f'Ë¡r¾¬Ao JÎÓ€íÐ’½’=49þ­Ÿq€ûNH\åg½FK/2þ'ùÙQAtšåµ†,ß´œÖsù+–Z% ž•Ví0ªD]Z(
-‹ž Æ©lÝÊNõíëÓËv‰â›iŒ^ñ9 qÛ^U²a˜ÝåD\pœY-FEð‘ÄRÁešQ^ÿˆçš*B ¬$gÞ{EŽ²&ÂÀèΨ³Ûº Éõ–H6vyRº[˜}°¡EHSÕi+ÁMÎ%gbŠþå xšA²©² õÏѺÎ3;V@Óà/ çFôÖÃAV„è8ËP^Xü”àÍë/ ™Ã›õ+:’ÌÃ>-ÀF~‘ÛÔ»:Xm* 3èª_º°šjk͇"éá½èAýÜ“:£2½+&Ü£ø§$¥&k†,_•ÿîiÂtâwˆQ^×ü\Bª“ÍÍU¿¾]Ÿ| çot+dÙa@lMv<T3­p´šèªt‘§ûóÕl’]qc_òöþ¨?— Ã
-sÁÀ…¸h1Éœò¿T€U¥ëèÍKúÚ†O1œÐÃ=-ÂSGHˆœi*¡²ÕÛ9/€™—cõ¼ Aoü5ô°goGâ]%2¢!Œ>ì1€8·³læ ¹S0~øñ Éá4p}Ž¬5FÞuU7tD”£g|/šN·Jc ?KÔ9ÞJ(¤‰ÍÆÆ6ûwò|ÛCëB'u;0ËóˆÎ2{ ioQS‘¸sžû+;ó
-y-)„Kå/?8ú|ôL§‚#YGðuClÆÆÈ›ÇjBd‚ÜpÜ{k‡ ×zµ·€‡½âiaJ×D´‹Ep“F³–ÁËäöÅ°þ$äÇ~½®€¾M2°ª‡ªØÐ5©Ã’-S!-¸|÷[•;‰EùÔȨ2È ÇFbzÎK×ק±Ÿ„zÍ*Õ)]æIyÔažKéi5ßý¬} ½0œÍ4qXÙwÕdÅ®ºèSÍ¥Ô®?õ§ßýCÞR›0›&T˪¢§£ª(6¦º!X~xH½3ðe½ýò™¹„}f3§ßÔ _(ä¥HÌRˆ*kŠa¾Î’«&ÚŽ…‰Œ%ÔÑÿz¨¾§Gð–Y£>}C
-"eD}ðW:ä‡çèßfˆtó÷’»¨¬"ç"M.<oüFň@ÔÛ³]ŠóZ¨´ùhÍs…ôçÅ%D=ïþ*q™> ¯W¶äbz³Š:È/Ñ0´ˆÇêçîà¯Ï€„)7×wo‰2ÞDçjþ¡=ë×yÜ<"nÃÙ÷µjŸ¨T'Åà8Æòk•Læ“ ¹ÓõHi<¤wT¬ò},vfuÖC_L½e+k¦³”¹3¢_üѱ&­JCæ#CTüëT2ÜhŒ•@[åÅaîKÅŠ­º[=‹“oÄ.Z…æc¤Ì;ÜHÿâ¸K×ÙgQ­]2÷Á=¬‹y0ê[w%à{'v¯rî «_ks(Þ;6“:Yס›q uËQÏÈÿënD…§ sþÈɨ˜¼{9-v©cO±ڸ–S§Ð홤9D48_‹*U4óä¹Þ‹”ìu ?«ÖT#¿ì„¹×,8dÜjQ¬\΂¸eŒªø£»øÇ]FbO× ¦<qk–x»h³©ŽÚ鬲Çá™>Z5æ Th¯éñÈL†ÌÉV¨À r9׊<3Eê‡c"g 2þY8)Ì”R ýç¼ø¶zÆÑ)ÉUÂ^¼±Æ|ÿ@Ê°›#Áx¨‘Œjx$FŒjäôˆ›Ï„éa+Å2ö}”N£˜_Ùa³òÈ/Ò)lgª71h#ÖùЯîøwzj:îÖYtC&ãGˆ!{hëú°B•¸J[Éè ®Ÿr‚
-!¬!¾XGâUÀjñÕajÓâ1‹B9°E‰øA
-¼×)Ïù³%ÂÆõ3ätö»IƒØ³ÄýÜsfLë¨vjé5Ö¶0’òþ+ä»Tê8ñ›¯}Jžè³~
-,ŠÚŒ„¬E@h¨Ù´:æãÂõ„ÞλÃVH<ñŸZÔy{X¨2h†´–²×.‡\E‰]?5ëJ`×­›ÔÞQdB+,߆ϭ?sŸP7¢ÉoX‡W³œÜÛÐ$yÅE%{²qÑ´…Ñ”‡¸qÝPÜï„c~(^Šœ3~pÇZ¥¶
-™¦K.†¢ÍUiÎTcºiÖ]…&é;ç]1;&ƒ¡3–3#5' 9 ‚–¶ú‘ÕKÕ¹B/:nâW#9ÄE ?o£yç ý«9I¢Ä­£½0 ¸ƒöäÕO"Á„7ìˆx—»
-<)ˆ½ï-¢£:»ËÜ\Lø›Œ°¿qM毞s Lýz,Gi_'}yùÿŠÒ9¸¶²y 77%H‚—Ÿ Ømµât ³ià”z3ñ,É@þ. êÉ}Q¿L¶ ¿m™ŸÏÈä¢x™àÞé—›ÎD62Ÿ.ÅÏù‘ñœ¶ñEõš£¿9ñh.ˆ³’~§›x3×ø8:~ªè—Xø[
-R¦nåÄ~¾Ži ´ÈxTŸÉEmõmªM§h¶{”ˆ¯â¸Î&<ÿ˜c]5†Ç}à/ŠhôþzD`ü­wÿ ~8fZ¹­l´ð¼÷ÂU(¹õSc›åÙx|§oÈHwHTípÐ\ÂdYUÀKrE¶;R9Â0H çåKGÌÕƒõ7ÂGì¸Jô;^g‘â©…as&ísià‹WñŸE¬ç<v- «ßΦÎì=¾7%"¿TJ`Ôv¬<?ø&}Kê™âŠTÕûÞ£Fû™ Ø+¾âÃJc˜/X3ݲEd„Ú—ôSüS…å‚ Õ¢ 2
-9VÊy—Güš´¢IhÄdÌŒ{ÄKF­£Ò÷Ђ㔥ñû‹Æ}÷‡ÜUôx&e­‡˜M'Š¾Z¹ùâ‹ÕŽ ù`ä˜Ön¢ö|åÅ9lWˆïÀ‚2^MÑ&†Ù<M$P ¯#d?KÞŒ¨g ^I›¦Üâ‹hXÃY@™Ïp¯µž·õŽƒŒéÞ/MÍ %\ïšõËðx
-¬ˆ¸c˜‡%‘–Ng++Ówóã'6÷ˆ Á?¼ßVí¸ÐGw vðš+½ÐÕ۲棋æŒíéÊQ÷JŽM'‘yŸ× <‚lÇ%Ÿ êòh èwù¾ex‘xª}Žk [ý£ø“’[ÊkÄãrÂùä”·t‹?0E?… Û¥”e%`µ;v|ºe:ù|9ÍÈ]±ÃŒQʉŽ_@q´Õb’;ðÙ$jyù™Ûô¤›Z1Döiõˆ¬Y¸²–ƒ>wõ®¨m™‹ÝŽ0’#×ɲq‘]é붒EµCÂúÃL'IÚøÎ t$ÒŸ&­Ryt©¸nódà’@³0¬«®áñ¬EjSTh†@)–´D÷þ÷D¦\ÝÝQcçFϨ6obë7^ê—…ú5—ÍIÙ™}-úo#H »ß ŸÀ:CÇcœŒ ›ˆ§ò
-aDm™»êߎ1γ.ý—~¨ï_¢œré›ÇëIEÐ9hÆ8cäÅÌ]½h&B@¹Š_«±¶¾-1WÔ¥nå Ž.½ÞÍdà?…®Éžu¾wÕôùÎÐò`8
-óãÿ²uË2V„"jUŠD‰ô+·úúClûÑè2êû“ò,éë0(í<ïÜ«XÔ\ý¦êƒ¶åI“‰­~7=IË´LñkrÅ_5ŠBP,¦ÈÜ€R…Ÿ„÷)·Üíû5`Óû6•€h9|Ò’DÖõLý[j-ñJ"Âé£4ÝôäyB>g§Í±Âã×1™ú©ZÖh’*Màç†ÍuÞ…ÒÇœÍð(Í/®›<S4ÌU"ŠYÅú~J²"Èi¨N•$­ì\ßs~÷¡Xbî§|"H^ßf0Ú¾tãc'q÷š
-Qe‡®©ÊV<J2Z¹~1CáEœU®F•q€‚Æ«.þQ /4GÛJÖN5X£’&ÕU1‰D œ§ãH–ì/³ØíH†¿|^½|ۧЬuÒÖq0’eæâÎÅF¢«©ÃÐ4#b
-b䢳¯ò…§sÞ¹eü—“ñ ¿lÑó ­Ó{aØ[šNîêžØõ žã 踵
-"iQ
-’*ŸÁ¢ß„×Æ l-5R“¾ŒÒsI! ^ª‹däÊ}MÐ#žÍjSn·³|é\†»glmÔð÷±!Du9ô3¿²EMî±sœÞvŒT´Ý]í'*Œ.¬ÝvÞÒm1 eÏýýÁCþ´&Z×'äàKÅ"O=À^7•Ôó… Ù…Zoñ˜~Ø>ЊHÞ̤w/›U4ˆŽÛ y/òEù$7p 4%öƒï™®?íef‰ý1Í:@k^¹5S#J«.Ðk.ZøÈóíKýa }‹à×’²òõ¢µÄójÁ©«ì7(8–FƒžHü‡JtÏ*Tªßèá¨Tµ/}qŽä•çåÚ&Ã{P|ŒgÒú{ªVS!•ì'¿œ¸`¯î¯ÊQ %÷kÇ2#ê}ÖöM­,ÙÑ;Ìbè·£*,½l ’»±ÝªÍΔožÝ¼Úˆ§§ô·J„Äö­Ú(›Y ±Ôšû^Æ£%órw—t[_mú*ëkîCœÓU’uý×oˆN¢çžÁ§û’éŽoÀ‚µW÷
-|+ý@´YÀvÖ’ß­+±›¥bàNëƒEb¯/-ì~¢þ¾Ÿœ’¤¼}"
-ÏÕÃÆYƒL+½{
-Ô½¨qدG:Ø
-EÆ- åuK“Ö|Fòb«ƒ<N¹æöÊ(]ùƲ/›Žˆ6¨O·0ð=µèj§uiÏcØjsèwl
-·Ûž®ŸÁÜ .áã ‡yõô:a*bsî•‚·Çì5!«¦Dd‘èŽUr°tÓò¾}Ÿèãæ ¿nz8ùçcr{Cžç¾¬Æ²™=Vxlþ©¿¦–Šÿ¨Ù)„éo…Í¢Nj>ê FæâUþpjBÓ™¯+p«×'ž-íI œ:Ëp^ÒPZót+Sõ&Iˆ‰—»±ùaûÜþYÎö^luoç·óÝ㸘ÐùïÎuûx•
-Œ0S¬ú„¬î/ÝM·Õ$®»ûöÎ÷ Üׇ—ɹOvéÙ8¦/sFZ­AÙå†Õ{’¥§ë´ú¦®ìªê¼Ê±Äþ,Áz£§^¬›g8°Êðè|‹ò:æãz¡WCñ+¯¹J;Ù!C[Ìsºk¥Bˆ"9´‡ «|-&AhFÇ“}•Ñ~;EchÅ念‘D7ä¿ÑQÍÏÐ
-J‹<±ZnôaÙÒ²òŽ¯Ù.Où%¼¡Øªª2óee¬rÕÙÅ`·{-Ù†eb
-²1"¯² ‹e–EßÍú“ 99ôN ^ÐÎã’·oÍíÙÕJ6h”"ˆ¼Þx*µ¨ž4šþLÞí–L»Pºç§U!HUÞ™D(Òwsü¼ðÞø’6»¿Ÿ¸µoyJí.èa³ÙƆZz`èbç9™=SG¢v%ÊÃß¡²nÎI¸“$ϾxÅÜ
-PÖœÁ…9¼ÒZX»ö€­æ½`èuçoEU—B“,N8Í,Uã)~¾…5°0ܲ0XPT“Ö[8VÓçÑy&=dgôÂ!îwºÝƒè]°Y.z•è”Óº„:þèÏçÆâ¾éçGÖ¬ IgÆò ¨¯ óÎ’þe2ðƒC%nú÷|ÖŽÔ×:ÃåÐo»·ëÎœ_®X|Z?Jø
-„«"Õ3Šh¾HéÂú”øZÇÕbI‡«4l'Å4F¤CàÌø”‹¶§Óu -¼=eýX2$züVW-§X¯æ%¨°'÷ÖÊJ¯M?o2â†ux¿*¤ÄBl]ÉlŠV(B¹înWLÒn÷Pó5>€#2`#èÜ]i«Š@¶ÇšÉ"÷h<hl—ð€.Cwî$k˜3óΙXo"ݽ«‘Ýe‚†õ3|ŸÒ¥,t›CP"¸íIøºÏôX`<PLc2ñHxÃ5óT ùŽæðO;VX˜ävÆf—a¸ƒ"°U$pXÄå'Œèv³ƒIün¨›s‰¡®ìðtQé0ÙVÖ¿šHš­Ûé¯(‰ºÇma&÷‰`Ç"Ô Pâ'ȦÄCáDÔñÖ±{¾¨#ž†V æˆÈoÀ”Š¿$ÑÁþªŒU(ëá*Û¯=:Õ“ó8â,âabRÒ\Ÿ<M¹Ñ†›Ó§çe‰UŒaØà9õ‰œ@0Tþ¨%ôX% R1C“ƒÐ{O¦¸xLù· OΪ؃º3Kã_=”ñ ¾‘HŠ@YШ¦(uÇäUó÷ Õÿ¹#kÓÆÕ¯?JîëÛú \ Û(ò\}½!˜he_5@r…¥"=î¦dÎ_ýÏtʯgEëbËGLO$ö81DÌKˆYŒ`ÿUˆ—A Ì´b¦'Ïvô“Ô™!sqƒÖà1‡êZ€ËŠh†YÊLvRGñY)ݦfz¯‡ˆÎLÌv@…Â6)‚ ÓÕHÖ$é×óΪ®=ß÷T 7Âïéíé5ÕcJ@0¥s†n<¼-c+ðþÀÖ&',ŸÜ.Ü\þ<t ÉØǘÜý©iŸá‰IâN_z,~…hcèÖ„ÁáO<§'>óEnØwž¬òŸ(
-)ë¥üáYÙ¨Lúšô ©ŠWÈ
-BUt¶¨7Ž¨÷:cï õÇêÃ&nnvíõ¿ñ¯ÚKtbóD…ï¤3æ”ñ¦™ör¶å+a©p8¼m¿žÕð«<„«q.aÉÐ1Ú¹BiZšQ2›º¦ÎcÃ'`»O&zK•›Û#×ÍS"e®¯3cæðô.DÖ×ï”,S
-àÍõƒY« .€tª9´ZÝb‘„{ 嬔QÊö·Y?—£Y—YYÁWÂÙEÔ™q¡çÌÞák
-êÜyB 5™˜‡·
-à=a#·+«U}ŠŠM:œ‘±p>fìßJâÛ¯â®yµ­mͼ}ê,˜¡‰×ßÐæË‚š
-¦¡¡§(¾¥Ý ôEüÙ±—KAÂl liôìJ}{^Ø{QÒâˆPcûü™S'ó!1–¿uÇ^õdL
-ƒpù©ßÓÕFrdƒUÖDþ
-úq§4—¼¥äÖ`w6«rðŠŸÿ0.ëî½ÚиJ&ëmb­ ¼(°
-DöúÜõÜ©|¾Œ¢šÈŒ2 †'á‘¡6»Ø“졺²—;;ŒZt==ªÄHCÓ@›OÒÐÁ¢¶o-ýÐŽ; ±‹Œím@Š ŸJŸÔWß”ÃdÛ(}¯À`EíâêsØ÷“ßðz‘ù‰±`[Gy{·-§Þ­7Or·£ª³ð;ïÉSÏztÝ×{e½ß’C±KNu±“åQTos™<uE³º§KJœ¬Ã¿ JÓhŠ¶¤ßJ0ô…Žb=WMr¶7˜Þ ×±¼ðù«„’rúUäº?J 0•ít’Áúxœ é…*¨/Ò! CS¡@ æÈuÔråjª°¤Äóöþ1Á¨XÇægÐÆuu”èÖ/ïÄ®°seöàp„šñmÜ-¿ð~ð²†#í¢yfJÝc‹fÇÕ¨ùj¼×`´¤’ Kü/>Z¢ ­vZºK—/ÒeUßNB)¶4¤|ÄçC§/;ý~ÿYôØ"Y°Ž.ªûÍ"voÓò“6Ì¡¥¾c\hZvÛOå)m¡Y6“¯´,Z³–
-ÁÃ穇‹µ1Xè_F»H,@¨ÖQ«M6Jü¨vi…))g·ÿ¦Vlkj´­}ˆÿC3¹) ®†X6 ééû)4ÝNÔ¾CÎù¯©?±YÕ±mžCÇ;E*q\—´…hûÉÎ=u]w+Ì̬¥
-lãp Õ/…L‹z¼ÒÓ‘¹ ¼ ø§P}ƒ5"Ÿ¦èÌýÐwx“s½ÏÎ]ë“›ÜPè‡þLíaÁ7mÉÇ.8»q5šl¿É Å¢Híûˆ•äu.ûóAýŒ”¥Ð4^xsÉx„xGO‰v^ü9-g¦Ùó øŠçoû×l‚û­ª¼)MÜl‹9kÇÉ¢*îÞKÑ!5Ž¼[âÿõ/QþA…‰â}@þÕ~ˆ uRô
-pŒq6-tžž¹/bšE×íËkÍ}³Žn+œÀÜ[
-Ê©>ªus¿ýÎ.¹˜:ÜRgj@à󇦄ٸU‡µè`äs<®;ö
-™ý¸fÇNèöR¤tC åaÔlbÉšRfQëtF‡äÔr£š5”+¹s¾Ò”4GUÌœÏÉ£Äw VÈöŠ·°oý¤èFàš>š$’ã‹afH¶É'Ât× ŸjØ¥±ÃÊÝ¥å—D‡(È-%~™­U::®ctº–.æÃpàšS-dÉ+MSfeðÛnO BÙo?óFMéu$óÂ"ñG}}»ã¢ÃàmpÅMØ”· þ1îUXÙjù<ù0±½É'KyY)Ün”ËmS&ÙÜ0 ö䵋P˜ë4yž FÞu\–Úwùò#U|þæ"ß‚Ïйô°BT ך4|:'Ÿ.j‚DØò2=W¸¬hÛh–T¦Ýu¸xÔêéQûn)S)Ÿ›èoâȪp…ÁÞ§ð 6¿ ”’Ã4erZ؃àdY®Ô®ocr
-ýSr‚$Áõ¾Æ¤$<µ¢% Ϻ0k5G`¯
-—XÆ#vç dM6±5J­’â®F‘à¯ø<IßP¶ZqžT84š SœäƒýspªsN[:ŸzW3XïÑ”©Ï>5Öbåfƒí ¿ÛGdpOÓFR
-+S ²¼ÛXCÓàŒÚ¤ÉÈA<P oF†'oÈt°[6±âÉ0áNö;g¡~‘‡- µ&i[ƒ¥zž ÓO4kí^¸ïö£.‘ÚõÅÎ÷=õ Ãy˜6ÏNTüʤ°ªÜ‰E$Ƭ°2aÁ„É£“dYrÛZNR)RÇËǯ”0(t|‡ê—únGXîI©EH&üæj$Júp¸Ô¼±§4ŽÂÌdч²4@Þϸµj¨¦%z+ãêvdrŠ[Ž@)ܲ¦÷á^SíȳaåßM±xÄd;ªÝïÍMDJ«Ó”ñëeãjB5“/eþ‚àkˆ…Lï«Øy>lÈm‡å5ªýÕ6A,q$<e“2Ôü †ûÒ¬ëS R.þ¶#·¤÷¤(Ÿµç对NšDÄë&|íà~{¹YA NðE7í%Íôü»* §Š¥ÕÏ3Iàdg9´xÍvP¤]ʨ}7dh¯Óug8mÌ
-]*¯·î—œt×ðýý Ê[¬æù›/?!vlïí]nÆ,>2@Ñ.\[p´YƾQ?ŠóÊ¦ï ¿£1Àòâï×çoݬY’2Û_d(BÙUEl¦‰çåR¡±±œ¹ ´uªÜrìö:cÚ-s‘¬ôHÕ'àÙ1újœ4èOo_ƒ«æš!–5˜E±#Ö5ûUãŒaÛq!ªhùUÆÓAô_îͶ”ßD°l®»»yÈ27$üpE¿.PhûîŸP%Rà÷„XŒWƒ.à•%÷‰³2T~ ÒjKEl<ºŠ~$òÛ$‘ª[¥” ánÖtNúÂDÊ‹‘ô>üÚˆp"@XcdÝuz¢¥EÂ勲åSq(ŽPxðuör„Ç‚pŠüå¡¢•ß1?_qÔq(ÿn#·ž€iDžV ³Øjnfßr»ÅM,ª¨D“­ç9Ζï#Ò?á“ýöÀÉÜ! ï»_E&JnãÅ@­jZ”¦é§J$hÁÎd’8§.Ds³Zhð’o‘ÑHÈû
-¹¼vr{SÔ‡'æœÂãÄ  ïqVyé7[ˆsœˆåhe¸œã“ÜÄ Æ/uÇ.E•V´d]y¿½.õ¸$µ$•Ê7ï]ó쉯ŸôEéÃäGÞÒu{ɉßÕÌñéï r-Q\ý»ë Vª¿yg¹òGáÄv´œœÓ?MK‘i)ìS:PÓ$ãæ·4ê”uËr(Ÿöìo'p6 Ng[™ÛÇp'@x¾6*°ǪNQ‘HÝrŠÌÕ…±?iS'tç$À4©h›-yXÆÊEþZˆÚh£2œ¾
-íaB-ëAvº6U¾¦°áh\ìá—¢aÕ´i¥òndud‘ÏçÖ¦B¥„êN‡Ï²I×n‘Ÿ”éûaVðø‡T6ÊÐpG}ØRz{õíïó¢_¥Z®¡>„9böR¸jxú’[u·O#³Ô•BC•n"ç÷6è.ýDÉ·¾”žW ¹ Ø#^“dù¢ÚìÖ¢/çÀ‡¿»…æ¾· &¢ñ™Ë¿ÊÈŠ¥P‰Zè,ÐZø¤£„‚£8››hwqÙkÂ5G.Iôt8Ž@ h\[ú‘2³Ê5-"¾ì”)}ðýî‰d6{]ãÚê•°Èð[جs[±3ß¼Z_Nß~ueŠ³è_w¥hòée¦’=/ùp‰fÐÃ+æ»u^§N‚Ö¾ò'?óHºé½TjAf¾ëÈ[Ü9ªE«1Om¢.ÔkX;Hn´ë-Çþ´2êp®ú}ìÑRÃÙù,ÛA qÇœøY£2m"8¿Œ8Öñ›3b bgÁŽèÍÅðÿÁÛD¶«I5Â7éþuóþ-ŸÂLŽÞõW³<…u"(å"‚!šæ»Uöc“P‹+Ns£B—FØ—ê09+ùÚ}‡~°þ·zöb Âßù¡™˜öh?…ŽPd
-.Ë?ëÇ| øÚg¡c}’Q µ‘ÃMߪ›ž¿f
-”ñù,bG‚ÒAÁ®÷ÚÑ{êŸG·¸ú¼ÖŸ-+ÍSÛ1ú;¡vÞιèfoÙ…Ç€geI3󶃉Sü´@j·ÇH+„“úÉ^àíWˆ|m‹ô³¦=Jr(gœ;@s  àwŠ±dö“1ˆFÉ”„‹·lsy‚lð#¼ùµ¬Óöç[a²xyýÎàVì¹<Ü9öû¡‘O6ÕdÅèò³Y“ÄÚú籄–dîéï° BÕ_|àIYmä‚Bä#§ªòÅ&ââMUdÛ“’ÄÐÓ\ú‘ý¦•!tXQËá!,¤í+É„2îÌ>|àXû”ï;»ž‡Š¹Øî´²­Â‘ÝŠäÅá‰K®sF?¯/èdpÓ x«†ñø\Qwv¹õ-° NÓÇß@ à93Ϊ(E}jÈN_µ*’¥„ßÀð.=£‹F~é²ÿÁŠ³[7¼¯¨õ^ªI½ª¦L6Ÿx‡à2TDÃ÷œI_—ö¬ý\ФÍîRñ{B¶H×dicìÆÌR¥jñÈ q¬,<¹è%™ïô¬Dñ¸œ URæ­oæ¤Fé$ÝÙžqþínŸTåY{âÓYÌëÈÉ$ó™hzu_˜
-8ŸÏ¤$IÐIuîÔG|¨1š »5]²œIÁu'6…#ÂPB6ûãËJã*%ºŽù€3¸ãä¹Ù¹h¶WÝ‘þò<éLÂÆz5Õ#6SÅo’8x}éAÞT,=³p¾š4B¯ò‹Â’yV˜=äB^¡·1þ®.¯¢q§2îïpEåQY8Vþl
-Ð0…W"Px[`ºb÷çOjû§g
-U©ÇsáU1 }r¾Á·ö“nèTß‚T¤ÞÆ¿äž?C5ø5ʨôÕ­wÝ6cûbZbÓ­i¦¾»Z›§m{qm!/·¸j)¥“ˆïºûÞC8/[šãpºnPÔßØ,§¹˜Håm0ôG³æ@ðÕÌJ@ÕÀ{
-ÛÁ$ýJú£ë‡2A=fò;Ð[ϬœSWêèV—Ë^Î}×mÓö/eæ<°+»ÈàET">^ ŸX’ÑÀûÍùŒo/¼^Zž¦a´Èn—Ý­=ZéÑñ«‚n,Ë}°¡ÖËý=C½|üŒ_ôVƒÀõ¬áô®‘—u´‘ö²àb5ƒþP‡ÌŸYá˜÷Û#ýTfCÆëhz[!6 Â%–ÜDD+ýÔŠ°·`«@’c4V´ ‰+@‘ÖÏɤ8>êWZ«Ìü,ü î*µ64Õ’d|v#å½MW¢íQ zAß:æ5å)y?žxPqºbÔíÛ]ÂÞ¹­Qc ZÃÉ]ƒ+(“NÀèÐïú$,%-àgžM]>«U¦WÚ±ß Ó’È #á—,Æ~‹Bc Ø^’$~ÿ¾MØ]ÂŒÿƒT¢#ˆrµiøn
-<0~¹–¯)û`W÷Ro¥²'OdÈe€
-û–Œ[ÅØžÊó©yOKGê)$1€.9R?‰Aõ™µý¹û #@Õ¾ê
-$& É3ÆÄ=žºkô“ ˜RŸ§µ×J[R!|ò6´b%§O«OD?Â%ËæºÐ`p·‚`iÈCÑßV®…Û„]ð-¡s«ÉAðrç˜øöåCú i²ã Á„¾xz´Ÿg(ÕPöÇÂ2Á’+©ç„C'"éŠÍ™î1t1lîdÊ>hàüÄy)¤…šái"AùÚåÏ¥+ÕÎ-bÚÂ*ÓG¬öløeε ÎÚ‚­Ê_àCæЯ@pÉê׌
-RÁ›óÓ*8bø |nq) 5OÉÆŽèdÃe˜)üƒÄYÅ!± Ô¸O|‚ÜÎ@ÏpWõkyp)xõ(s~á°Lê‘–»{‘£Y˩Ƽ•âϪ‰…¹Û楽IèÙ÷Úžãõt«á’ò-©0AÜ::Äñp=Ï“
-ž¨ª3d8º„$3‹žèþ ó:m~Ý N«4‡²d¾Øšû:ž¯÷×¼Bì±Ûd‹J_¢ ÝÒ¤ÄEö~±ÌƒÙÄû\–„Ã^;Z(WêÐËÜm×MœÏŒ´X¯væ¯%8EÙôWµ’´èé0ás>dã ߀•ñüF;yÞ?“(îË/s„›/=)bù·Yõ¼†„µÕ|{cV‡~µIhªÈotùÝ>\Iüh<¾*ÞÚlGÊ:)^œšý2y~ÐÏÙoÞ†ØÆzR‰v¦¸ß´œ2Pw«ƒ-ä8·.P7A@íËreêš½l-†Ù"2‡ñÿhàtÎZ,4}r\û2Þ K4Òü rhscß{J¸­Í¬N,&í.ˆåW?õ˜ìõ™b¤^5Ì`é"’ש/$ˆv_&ñ—n_óæ,Q¹(¼¢9½ž‹1ÐKB‡Æ”f6¯N̪—á ËÔ-g¥Îú1ýÒá‘Ç\€ëy,Þ³‡˜Ù}ž}Ò晳~5#û’â=bí-J^>F1vÅŽl„Å
-iº
-¹ÓÏ™wŸ˜sìÇÆâ@•»¯M·åöMXvºóEÿÿu9~Û¤k²¹¶…ê¼ ª?yÉg“º”òÌÜ{ç;OÛ«YŸ$3iÕæ#ÛÏn•8²oväóŽ7¯ã}ËÏëÕýÜá?÷þ¹ësÿ„æÕäÈ©Ù÷pö.Õ`¹fýO©a›K<­ÛNîêè=|ˆuÖïD©â¹µßýÝ^Ú(šDªM?T¹CÂxÝ;)ñ´g¥ÙENÓ/Û¾}õ%×ÊÛJ®Q†…É9©‰E%ù¹‰EÙ\
+xÚ¬¹eTœm“-Œ»kðÆÝ‚{pw×Æ¥qwwwBpwwwwn‚÷/Ïûž™9kÎùu¾ùÕ÷U»jW]µë®^½š’TI•QÄÌÁÄ\ÒÁÄÈÊÄÂPWÑT2¶µ56:È1ª8Øþš9()ÅœÍA@{qc9@ÓÜ nn
+`c°òòò"PÄ=–V
+R
+ššÛ»˜Ó,œ¶ÿ>
+üfîajîøÄ
+hjcÿOó9ÿ ™Û›ý÷úÿÊô¯ê™•$Õ¥µµèÿ½Ê¨jûw¾ Y¹¸ÿ¡ôw@jžŽæ€ÿ•NSÞÁì?ÿð‰Š:x
+2¶7û;nÿiø6uuvþ«ò¿6ÀßëÿÇù_ƒonîanŠ°¾â`Êb‘ ªÃÍ™×èc… u,mT+* ¨qèõψØå­4z« ejšáûh÷\>s|?üFw4Ö‡cKÝ›f~ùЗœ¶¿ý'U'7ýQ³A)ræ¹fŒ÷Õ’Ü”‹ÆÑÞ”²ŠAÉ ÑL'»3ÜÕ#m
+‰ªV¶ý^]n?É÷oŠ üÐìæÇÕQÿÑŠ´Këñ¯0AÙ¬ŒÚ#Ûõ½ü¶Sz_“Ò¶Âæ°Â¯£Z¬4¦×âÚpj~¿H]c}jÇyŒ{ì|yz0Òä$·‘×ù³›'È úKåWµ0wïèåóä»÷ ¦¤†®ßëÓôäNg@«ÔËfR~7øX3X¯§º<†ž‡:;D݇Y‹’‡±ÇƲ ¾qv"©Î.嶱8Á[Ö†¸gÛyŽ
+‡Ø
+œQdÓžˆo¥j›*÷ú*yèõA®È›ŠØùÞ*9Ö¤û¸·ÂÃmÈŒ¿Åû ×táú9ÂÌ¿×jŒîuÊOà7¬ä'½£[»÷HsHs¢4xÅÈé ývÞh÷»&N™3ï²,ä¯òàÞ¼«»PøÛÖ……Ì\!nÊ—Iž‘Ýù™,dsa‹™2,ÉÜïéÏé›_Ôn8Zr烹ªv{ˆW1óLN¡¦‹JD¼¥"eéUMäãëj“µB‹ND·ó›^ÖåÓܦÙv‰çxD‹ú)MènÁ Œ;Õ×`xÞý¤ŒAhàI%Üú áG`¦‡SØÉň,ø,^‡QXÒ<5µ[OtÂ×{ù…Žö„F×Ï+N•W¾¤Tær U Œ€´q^¾tÆ^?Ø|%uÂŽ¯B_µ÷Åás-™^±`Ö¹Ðü|ñ.ù½„õœÏ¡-eýËÅÌ…£×ïO©èOÕRÁ]k¯þ)¿ÒÃú çøbU'þ÷˜ÀÁ±CŽÊ|Øo‹VÀ,÷QYáŽeƒTÅ€4ù`hõhÃÌ"ÎÕ
+¾•Qÿfí2FZ Ys“^É2ç1›èŒ}´x•oøLÅ~êú¼Sr6Ã,f“Å$ÖÁ~¸!’Åu£Ã¾¹fu[¨½$|8GŠ XP&k©:Ä0[gIJõ„ç)C‘ ŒÄ«é3TûÂü‘ë8‹( Ù‚.àu6s v>ñ±=ei™t„à cþ9
+ËžŸÜxªÄ®»~dÿ|°ƒÝ{ú볩P¤ˆC{TÃÂb ~3˜˜ Ô¶q-ÖTkþWBµRè1
+œ^Å}÷b"áŸÙ÷?'q ‰–Å/F?®ÊD¨%·ŽÐrm‡6ÓÃȈWw[ ØÊ.K.¼€–X¸¢¶ei—ùy¦ ÚI‰sÁÙÛ èFCëšˉ°Áº¬Âì§4{ô_ju5§qWb¡â:‚F®¹‘
+£MQùžÑéÄ›—\Jo£c ÚSAЧÏñ`K¡ˆC%oÝ«ü°¢’N½`ž¾VDÚº‘´^álmÌb'OŠ žQS‚sxCþíº7pážÄ!Jà wF‘›UíG7íoY{º³ÕãbžÕ\Û."{Š~ï!x¹Î+~SÆeT•±ZЯÆ7
+«ˆbÉ4‡\·L0<Vö†GÉ'e÷Ôß6ˆ'„ )©oè–¿aŠC!*uȨÈ9ý$JÄêpêütÏröýr–™·j«œ'“°ˆâd§Í,=~è»EÔúò#¯ùI/­r˜íÓúY«hu=}þú]%HÇ*»a4W(¾‹uó2§ÊÏ}5›z—”í»¹8NÒ7“;ðѨ
+›ˆu61j&všQÌ/‚·bénx;Á8G̾
+Xþ®qp…rÆm`‘ /Iï¨ë‚‘;ýR¨•å)’Ô`m ^f©>¬OÛÎ3[~½›ÍÄŠ
+x¯°&ù.±óh|-ö¤² K¶ÉÉ6 N¿È¿ð.·ÐøSýAH×ú¤ÅÌÞ°—‘,ŠeV®D’R¹ÏÎ_ƒ¢‡):?¨\)Ì/
+ásÆ#ûÝaØü¾C-(^Ÿ¼,•}3Ûð–VG¼:Žˆpöø ‡~fê"¡€«ËöDñqšû„\ãL={,Y6èsÓö&ÿRžéã ÎvøüÆ’ ©—2[<Â]*ŽUÍö~Fº*Äe¤A¬
+‰&$_׉<%@v©Ç1‰4~å¢få¶_±Eû´½ó*`,ÇÂÍ“)‡D7^[#¨eNÄî]›Ä|ccÌ.g‰æRuõ~êP„¨ö­þ²øwâ¯Ú ¬9ˆÆo Dà{éøk JPÔ箫¾<àØ¡{ÒŽƒ£H ˆš9Û¾>,v§ßÚˆ37ïegiZØÃÎ’~92ïc¾q`¼„¹WËmÞ/ŸªÈ"Ëùtþù¡Î T¼ 1¨3
+ŸáG®o4± ÖQÓo$øµì;ÑbV!ûykAžÔ^¶ª¡/©ƒÁ7ÙÈS÷ƒœÔdíMèSAˆ2xî^vΨÊXdºo{g@½ËZǃ¤ÃMp¦|€…¤}øí«š
+¹˜%AÇ©OOûØ+VÄ‹~{HŠ¹l…¥mß,+?(òÖÜþòHaöjZ<Dgº¢(ˆSN÷jÖI€µž„*m÷5eÉ ø;ë'{ª´äú\U·®¿nâ8¬÷Ó‘àfä
+,"õRbzR_'Ï4\ÎG-M
+ælSŒNÃ Ëù}ì3½ÿÚ»~¾-ÇÓ]–Í
+ÑÙÜôW3>Çz¶P\üõº"kw5·D
+(ÙüՅ'•±²ò±—gÊ1HðḶ Ýœœò*ãN_RÓýÈõ´Ùž®Svt¤/wpõL;AÔÑ8—šåÄx{K³íeS”Áñ9UMe›ŽˆÍ×ßÉ¥al‘Âèi×N~¾Î3±ÙpYbdÕŽðéa/å…8•H þÐeý%‚BÒØdÎö¬/~.¯mŒ“Óø5­ÝÑ„ßÓIÆk´í0ùX,ãHKKÙ©qä6ç¡•ø;~¿Éo Šœç”÷-mzË9é‹.òÕºû+Ó·œª7ÆÔ¹ D´!úÅA±´âë9œ¶a¤<Ïë­á_í°Á‚L=€@°ù¶NM¹•íô™gFNó®äìS!à{ù²gâA}*ßZ¬¾"L;¡!&{SºGÚõvÿáIt˜h<Êo`Ð W•˜÷¨º=áp¬ ]3#"ŒBŸtª”‚¥‡˜QðëÿDŸ°Xüù§—K`!6ïH©/ôyþËZ»ùc¥ÏÇÖ™„ÚÝ"ØÑ6Ølšä–ãNdn>‘W¨f4Ý…ÊðB÷=Iâ¹²ÞDŠ¡éóñL—eMåu/÷r5ÒÄØù?¶ßíž;> #ØŸ#J¬ïíýwÅ\á0NJ]þî\wL‰ËW) á«jû콪:‚ÄŒq˾t/eÖ’Ÿn…‡þàObë·¶tóÅ@Ý—†v9p%Z§ P4n¦khÛ%ý®äÇ=v±¯l8E45)ÂcŸfÕ‡³QùâïsÊ9 YbÜ„ƒlï^ë)ý—$ÕŽþ9%AÊf|(—À»‚††î^müu¹ƒŸŽC©¢p°°ð(3ïû{TªÓýᓘï,îÍÔ}»ŸÇ4¼ékv× Ð·5™\Å«ñNKå'®ÌhüMÁüúîVµü~¦@Œ1ÙYЯx¹éœI¶ä¹O¹˜ N‡6õqéà/ð¸7^–@€OÜslDåÓîjßËVS!V6U%áÇÔaDšò“£u»7Z3c‚8p€È3˜£Iº¾œˆ²#>‘¿ŒRý­Š˜–—œ-¤®ÐáZhOÑŒfuð4± wCóÀ:t²YÆ
+àé nرn¢YoIêŸ<vIS Y°ÆÒŽ5G­æå0Mö½Aˆß„«ÿ/kZâ üÂz×bAdð)9Å’6Îö‘Ðk¿Ý§Ä7#ÀjhD(ÅêùÒÓ|[Cªé¶w€áàrÏxéÈsCptE’÷$eŸ‘ƒcö2o¬ÝœSaTS¹/]v¶Ag`æÆ¡¦Á§GlÀ¢?væͶuŽ+¨Î_¸¤ k1¡v=œ°úš§¼›:ܵÍ2¯·^&,ˆ(:˜Kw²´.Ðf‚fr:=P]_ðµW2Vƒ4‹"úCñSðåÙâ­°¬Ø «õÏR ,{zvþÉ ûÕ™€”{uuVœ¬už‡ìNŸûâˆl,
+_… Q×G×züù²žxZ5„3&° S&áŠT›D«HÎÓMn@gl"º7÷qÔEÔÓÔ´´¥!e†j³7·_ßÛ*
+«4èÑ?jú9‘`¸âQ[è)µF¬j,>.¡ÿžByù˜únŸ‚)L©uwŽ6 f
+(ëI0r/*•6#ˆ,º¨YCYæɧàIfðcWζ{À`Œ" ίí+¸6¶qÔ…Æ*zcÑêZ ô,
+keFüŸÒù
+d§'¬ö ¬Âõ=¹»+¢Ûžß›-°6Ç´mQ@hbQîÀ@¾<˜õJšBHçJÑ#ëµmVi¸×0®*YEáœ
+ÒÇ™¼ïw±w9=rž„%É÷¿´á …ˆÛaçE„Ì|ÔÝîÄOÜå!ƒî8$á[¢ôbIe©93«•ìƒUëÔ8Ÿà% !U ÒRÓAšx®PöÔ™JØkóÇ×ng"¼Ð+7tF|…;þí|PvùçÆg/CD?Aæ`CFF9€”’Ò󮋇ùã9#H…Kà{p”¦§ó×XzƒÐhÃƧ ×´;{ØÉ…OÅY“óç"÷
+ãÊÅF_ÕXƒÖw_¡ØKèJVDËXcïEhÛ‹Ô— –ÙR¡pŠÔ€V§éêÆÎ~'%œjeö¯´!ç˜ö: cf f(æ’"äËèÁØ\ûÖôùiÁ<„îvÔÏ:¥•F²,ÎÒ$£ÞzvbsÓÚqÂQ V-/°í-2vŃäƒHì£ ß¬«&ÍÀµÓ©ê^; çÞÇóó~ì/ŒŸ ðþh¿ÂÞ Á†ž^tW÷´]þ¿À·Õw2tIW1‹*íàNk-ûÈȯÃîoÕ8çâ•<ÿfZÑÛu1¤u“&LÑßÂZ*4|Qdù ˆêó½ë½Sý0z'D%4•cŠHÆ#Gmqu ÜFu7â¨pq³ì~zS•>¦…¶˜¢¥‡EíØ^þ®Hj×-Þˆ-11e ±%ɾYö^‰Á†ÚÍÝïx௰éý"ûcÑ®žêön=F8^£GônW?&L1wñWþ“—¾Í؆ŸÏêÆ€#§R·¼ÚR룸þæ
+EÚªVMo·Œ$yg@;”¦ñ4] „逵PØWJ]¥0îNÚ”}0ý?ÜwüÄ
+"¯RÊ*×Qú(­À4ö³)FO›’ ‚äêàþ(ÇÀN-ÅBÁÚc·}2«Õëé¢~ÒR¯ÛûÇDã]ÛÁ›75ÑâÛ?}’^¸Ã/T89B"j':up·ýÁÀËuŠwX¨ôN,[œZÕz¡jð^[éÐÒÊB¬ ?ùéˆ&µ_8èè¯\¿T~+¯þzF¹­õ ã+¹6sÕétäïøë÷’ç6é¢MLqý/V‰{k˜ÖtᎭ 5Â3r;þªOé‹-ò°Yüeå‰4Š\uÔ®¾O½ÜlMÀ¢€rº%bABõ΢8ò1âGÝð+kLiyûƒ7õ;3»à%h#üï[)ÍápµÄsÙHObgÐô»ÑŽ¹?§Çe×ĵ{ ì«þ&ÄqKZÖ¦ ¿ðÒ;qÛª47·‘)<´ 2‰Ç-Ò¸6,éó}›‰Êá]Â?…®ù6Çœb„5ÂxÀ ž^èvíÙœþÉ ã…~È’Õ*Epב~솳ŸP§Í!ðœÚ ^*ŽÒ¹\ÝMÙàvu¸2ÈL].ÍàE´”NDJösö–êä*\Ðqeùšß±œ²ƒ¯êrýrxÍ!¸ï%ծΟÖòÄͱœ·qšZ%ªæé»V7äÌ¿%þ_ÿVš*Ý\„ÊÒ$ǬÇ™Va ÖÃVáÙàYú#gXõÜ¿Œ²ÕÞ·èêµÁ),|d œ¢Û¶†ñ;îìSJh"¬t§?ßyiKYLÚ´pØŠG?'â{âÁ:ì&~&¨*Ir‰OŽŠÜô«þaÀäOÀÝ 0ØÔ››Uñ@t°'Âÿ}û¨ÃšA0IùúL{—p.ðZ¦{xyYOÛ–©Äï´+Ü sHuOŒ¨ÎU G£–@¬Èo`ñý"qà‘±îø•¢†>MÅ€žQg¯¦ün(Nß_äz[ òô:ÕK œ­²S—|vîc50ð>rá*˜RLZr§±æ¨F÷ÓËÅRè¯%ùdÏÌnw°GAš¤’€\êÌp½{ë;îÿ©£1ö§¤Z…(Œ£ŸâÓlXzøÓ£g®éË7âE–$M@òŠŒ!‘ø„~!Óm¡.YAuõdOÉP)$0+17`´¦>‹Sºšà`Ù|ÃùõZ+iÌ%‰Õ-Ž­Lf„1®Á]L?ç©Žý²ødµ§jÄaš›ý ’«+}W¸½C…÷ .ìñHÖ¯b sú =l!î‚0Q­ %— ̤¥¥®.©Q0cÑ…2¡ùÄr*Û>ŸÙ8ðrõÜôÎGùÓ%'§Â5æ+)Éñ;wF$ö’/=Ô=†1Ñ¡*^À½”»ÑœäJû¢œ%uÅ,ºs+§ItO¸’ýôí^êÓqVÆ/õø­˜¸èc è¬æ²ao¼¸=¦ªò^y#et…Ëõêj‡sKÆÝ{%&é³ ˜P ÅFU1ÂäÿÈ8Lˇ™§”ÁW‚e¾Sî3_×ÐR…%«~Þ¶‡ª­R¹¼0Ö¡|!GZ¬7™D¡ÂmlÉ« û¬ÅÚ›å'û!ªXÌ Æ¥Ð‡Ÿ$Ûn¬ßi¶cNÖT{·d­ìD§Xw¿§ÄšU ~pÌßíÛ/“8
+—[«R^i52)úIí 8Ž?œðí•(Hù%‚¶§q‹©[&H…U½3È’PǃjÞX¡(ìÁõJ[Ú(y4\9{1¯€kÒ‰X)×'Ùʱiüƒ²{æxŠH.ž?–… Ý®CÚS‹|¦iŸÎ+—^Pcª(¿œ($&:W§||RÏä|ó­„Ñgx^­ˆI4¿,]…ѧ <‘å ãÜ5u@܉Ü Š4
+î~%³€8Áj·ÌÓ¥í©ªf‰¾„ö§Ï‰óçô$zƒ1Ž¤PP9*'+p9øx3T.Œh“öJ™¿Âõæbo¸ó¾4¯íò¯ý ~µbàÜÄÆÅëº
+ÅïBú¦·bF3‘¿Rm«v—¾NhŽµŸSs-©®Ø Vû$ß±:ÆMÏÇa£é¬¥Òžwu¸`†>I2"m)pŸ†¬)LJ-sE¤wBÆ\ûàx¼uÁ ìàà)†ý®?w-þÄÛóS*‡Û×wün>òîº佇1©úìIn\@Áû‚#–ÊI£óþmü€Êå^MåQ5Û†ì+fÌÉ)sm%$¥®2AÁ*r¾¯i`ƒÿë÷/Éf×(’eŽpý
+’EbŠøÒò÷³órrx¿Ùî…Ía"”æ$çÆ:O[½D—ÏMmî”ó¯åŽŒlº7›ßÔÁ¬„dp‰e=ãvÏA6ä“Ûc4ªÙ ž)ÊÏÓŒMëU—)Å#ãùp¥)~Ø߇gºte © wuÃ^-Ù†œ3m6vxÐ.ú»Cd&ÏÌ ]ˆ
+%"ë»­µ 4-ÎøYmº¬<ÄÕàÈVTøEʦl'‡U3ž,3îÔ€K6:á…Á ز0ÒöuXêçùpƒ$ó¶žÅûšR™=?ì¿3OZ0œ‡‹œ$%fÅ5•.," ÅÕIKfL&Ýd«ÒÛ¶
+Ò*Ñz>~|åÄ!á“;Tÿ¼°wc8Â
+Ÿ(*mBÊp‘77cq²¯„#eµˆ½eñ”æ¦KN84e
+þ&mÕõ­1Û™P·£SÓ<òÊVµ}÷Zê§@ÞMë€<€¬åË&ûqÝA_ÁXRz½–¬X;w3ª¹BË?#,d?¥®‹#{œhï1»D‰LÄшÔ]Lª0‹G€~8îK‹žo H]¤äë®ü²þ“’Bö¾w€Ö:8Y2Ÿo¸È£Ç}ÜÕV%$Á½ôK”t³ 15^@$N5k›¿W²àéîJXɺÝh‡ŒqÇ^èð ^—ÛÁîHú¸5<ºL~_ÜOùoÝ#ãP ÷C(oqZo~„Øq}·wy™søÈ
+Îs!V •ãrMLñ<'šP¾ÔŸ@¸WYÒ‘wçÿò¾Òç–Ö–V.wÚº7qËw ¾y2obW}ËÐë£ ~W·Àg¸sbj„ȳBMt èi(\­ùê“í&×ÙzzÁð4#C®­x@åHCK‚[ÐÚ¤[Þ#Ç©rÖ{°“ÈÕ84S’cmáË“áôÚ¤È*§6MM*sËY$:_Îñ¤C“Ø“›Ó¬ªc¾ìi'õs1z³vØhæ:¬—µ¼ÙùÆLå†Ò–³i]¨W@†–M˶ڧ‰I܉U¡€G‡•
+ª'>Ûf4C¸MvtrZnàyTÉZÕ$KËýaGåEìÝ¿krÀ‡~fµŽúî„ÙGé¦éåGa5ÜÓ1ƒÌZ[\ U¶…\Ðר·ü¥ÀæêÛ‚Rèmà>ñº4ëµ÷VyG~ü½m4ø0QÍÏ<5&6,Å*Ô" €öºàÏ`]M$¥¹¼$ûË«>Sîy
+i¢§£ !㺲”ÐÙmPžY1áÈU—¬h…øƒß'p¿X²0«Åû×N¿”UVÀzÔvƒÜšýâ„å®ðÕæjæ–Ä9Þr`òٷ…Zî¢ôÃ5†Q¯„ÿÖež&Zç:€âÜ3ùO7î•r+B«(ô]gþÒ¦ÈÑH=Fˆez u±!DÓÆQfl³C%q§Kõ¯ÏÖZ®^®¹Nˆ;–¤ßÀ¨ZÕS¡…ÄñÎ_\‘닼‹óDo®Fø>¦R°ÝÍj‘~É÷¯[÷oìÄæò n?[Œá)m’@©—‘Œ1´bÖ9Í­n8-MŠÝšá_jÂå­êÀ:BÝ{8J4 4q†ea: ý>F‘-¼ªø¬Oð…àŽóMA1bÒvBŽ0{«i~n"É(ãUeAqò`Z(سRl8ì|–½v:øŸ”‚'Š’^ÄÏlÇ7…·}¡…4íKœç:©ú,X…¥­­¡bt‡~Wî¥öÕcE«ÃÝS‹†=@å ´Ê×æåóÞ=hj3áRe*ý¸
+Cà ê8ÎÉ]Özá·}6ù\ø*ø1B%[3DŽG
+ŸH¡ó5q¤Ã·i±‚”p³×S“š¡¬p£“ ¿ EûÙc¡ó,ßlÁ5Á²È¬íŽÏl©-fͿ궘SOpø¼5Sy˃øú¶(û
+.3Ÿ– §ï¢Uí,?H-ýÖÒzÆ¥¨>#uQ4ŸÕÃJE,°NN•SONãó‚©;0ãb°^‰Uåª<& ²Nåð I[•Æ«çº´ÉQì\ïåºÞïñ8+ìNH‰\¶¥S‰)½0@ÌJ,yßÙ ?3FçÐi®“©
+X%Ž…¾‡¸ÝëÄìk|ßâðmbØ|¶®¶LïÄì†Ùû¸ä¡›¿å4žUt§Í-Ú'ÏxñwÓƒhÜ£¬N¦ú€·$:–©<©?æÌ"7{•åQιv – YRÀ¯Téœ'Ob­²)7_ùÖÊ$ùÐGDËky—Ý·¢ÉŠ†Ý¡í¸ sx¸ ìqŽ#cßê©Ê±•góf©õÏ)mé¼³_«´`—¦„j?ùÁ“³Û)„„)F'ÏÔJL%%›«Éw‚¦¤‰¡g¸ ¢̪Bé±¢W>"BYÉ:VS=e=X|ùÁ±¨Þw ö¼Ž”ò°=èäÚD¢z*•(J":“–ÝæÜ\ÒËâ¦òUàñ+º¡îîñ,XbAeL¼Ásg]ÔPŠûÕ!‘I´+SdDÞÀð®¼b–ŠÇêqüÆŽ·ß0º¯¬÷Y®M»®¡J±˜|‡à6RBÃðšÍØøæU÷¹¨E— 9Ò­êÿ„l™– ÅÚÎÔƒ™­GÝê™ "âX[zq3H³Üé[‹ãq»©¦-ÚÞ,ÈŒ3:I{r¼â:Ü?#©+²÷%g² X6F~“K0'Òöé½0r=ŸËH“¢“éÞiŒúR7a´Böj»å¸’CêOm‹FE „m&V”'TKõœ
+
+¿*,‰Hç[`öR{w…ÝƸ5¹¾ŠÇŸÉz¼ÃWDgãX°+>BÃ]‹BámƒéIÜ_<©œ+V§UžÌGT Æ‚(ø‡Þv9N{ Óü
+Óúš"ýSz×âת 2\Ö´ÝõØŽHhKÌ´¥sšùíio=¶ïÇ·‡¾Ü⪧–AL!¾ëø ãt¾tblkMÀé¹7AÑ|e·šáfa$|”?²Å0ËvœÁ×°(Õ‚î)=í†þ ±T1ß<” î³ PÔÚƒÞzçäu™»Óƶ»]÷so›w~ª°äƒ]ÛG…,¡ñó!XúÆ‘ŽÝo-*d~}áóÖö2 §Cv¿*ìiëÕÎøˆIXrg]é‡ ³Yèîã`"ùÞW×·sÔ¿A^nÒÕùIÖÇZˆ‹ÕúMºpnc1à€ôC…M¯³ùmlU”Ø—Xz ­ìS;ÒÁ’½yXžMÈð›’]h|¹ ˆü¬a^6ÕévH£ÊšÈØDuöGÑwdp7™õñàéÖd“ó?¢Ñ>;ô¥:žu ôÍáS>3ÞÒ÷“ÉU·ák&½þ½e|‘ÝÛZuFÒ0  ¬±üÕ¸¢
+iÑ$Œ.ÞoŠárò"~ÖùôÕ³zUF•=GÉÝ©‚~éRÜ×h4ÖÀeiâw±žRü/dRÁŒTkÍ#wƒ0&§šžh,Gë±Ãñ°`¿pLsî'úm¯=±çɱe—~–¯#\‡zó,ªÊÃã•ì9»^Bü¹“ÿC=u°cDk þD8œ/'V¶4¥? a¶d»Ø\ñQ­mÓõ:F,ÇÇÔ²\ñÎ<šr9oâ\è‰ñÓ­b]Å»¦f;Uˆ#e2S> xV¥˜ÃŽ­ˆ†ê§—jŠP™­¸¡.!‘#È÷©voÔ`ÒSº’ûþž}°S
+T S!õ\¶ZãÒJ)¡#¢:sÌæÀŽ_îR·è¢#Ô¦Bò
+êOqÚô¡9U¤ $Ö=6Ððü|Hò‹°s%nS,{¨üˆ&õÊ’—8$²cå’6¿p[Žx7íj£\k@?®ð¶ "Ü<4s=3Ña½BÚ_Z¼–âç0h^×IÓ¡gÀDFÌû"O,v}V%t ïæûüH¦¼¯¸Êi¹ò¢Œ
+Vº<3ÿiúü`+zв±ƒõ¤âBy¿e5m¨á^[ÄyaS©aŠ€()ÞŸíÆÜ=7w3ÔV³Md& ðÑÈå’½Teöä´þe¢QŽh¬õ äØîαÿ”øg´>»6¹”¼g´(>\PóÔkºßo†‘vÝ8‹¥‡HZR¯±˜(rÔs•Ì7R¶s×»LíªøŠæüz!ÁÈ U[–Õ²69§QŽƒ.[¿’6çÏhüS—Wse®÷±dßbfïyîI‡dÁFbNþ%ÕgÔÆGœ¢,bœrü(šÙÂ%+'‹ Òl£g"îuªrC`Wro¦1€5ÇCÈ…çpû¶šÍÄ]sG¹ÑOnäàrqœìZI=…M}…)äCQÊ~ ê!µŸ¾Dz9·%eÞ!­û©ÆÁ”,Ý,>׿¿âb‰lGûrs RøV0' uV·ƒÔ) É ²;^%!#úㆹå"à÷È“µ‚i4Í p#Öo·¤_Œä%±!¥Óæ`…(`¢ix¸ü={Pìr {[£3þÝɶ*\ÔvµvÈÆe~0{zŠJ"É®Ñc
+µÄÀ‹í_~ …U¢÷íýwõœÅ6o¸JÚè¨OÊÿ7E®Õ?ÿm]~»úàD¾?œñŽ¹,à¾$ôƒc2‹™‹ãé¸æß‹M|&ìšp{³×Ó\Ì «e •Œ¤·Æý:®s”CrªÞr±[G^…_x[´?ÒØæå'®Öܬž ¥Škv5‰GlŸ뽺>QÄè5ó†…¼~šÒÙŽÝ  ÙvnÂ|*ÑÐaòÝ¥ÉÿÞ^á=tønÚÖ•_ÎïxPðdòùCß•b­RæwWbgÖJ?~årοþC¬[BýädƯ{ñ h§úÍwÓ‰Ï'}2~Ñ]Ø6å°âÙŒ9û ²&ÜÔîNÖñûö¡î±`luî‹)G2O=ßùEßCùä”Õùù[
+¹ÓÏ™wŸ˜sìÇÆâ@•»¯M·åöMXvºóEÿÿu9~Û¤k²¹¶…ê¼ ª?yÉg“º”òÌÜ{ç;OÛ«YŸ$3iÕæ#ÛÏn•8²oväóŽ7¯ã}ËÏëÕýÜá?÷þ¹ësÿ„æÕäÈ©Ù÷pö.Õ`¹fýO©a›K<­ÛNîêè=|ˆuÖïD©â¹µßýÝ^Ú(šDªM?T¹CÂxÝ;)ñ´g¥ÙENÓ/Û¾}õ%×ÊÛJ®Q†…É9©‰E%ù¹‰EÙ\
endobj
1042 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 2824 0 R
+/Encoding 2845 0 R
/FirstChar 35
/LastChar 90
-/Widths 2837 0 R
-/BaseFont /KJJXFG+URWPalladioL-Roma-Slant_167
+/Widths 2858 0 R
+/BaseFont /PFUHYX+URWPalladioL-Roma-Slant_167
/FontDescriptor 1040 0 R
>> endobj
1040 0 obj <<
/Ascent 715
/CapHeight 680
/Descent -282
-/FontName /KJJXFG+URWPalladioL-Roma-Slant_167
+/FontName /PFUHYX+URWPalladioL-Roma-Slant_167
/ItalicAngle -9
/StemV 84
/XHeight 469
@@ -14579,7 +14843,7 @@ endobj
/CharSet (/numbersign/parenleft/parenright/comma/hyphen/period/zero/one/two/three/four/five/six/seven/eight/nine/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/X/Y/Z)
/FontFile 1041 0 R
>> endobj
-2837 0 obj
+2858 0 obj
[500 0 0 0 0 333 333 0 0 250 333 250 0 500 500 500 500 500 500 500 500 500 500 0 0 0 0 0 0 0 778 611 709 774 611 556 763 832 337 333 726 611 946 831 786 604 786 668 525 613 778 722 0 667 667 667 ]
endobj
979 0 obj <<
@@ -14590,29 +14854,29 @@ endobj
/Filter /FlateDecode
>>
stream
-xÚíUkTgnõJÀ+Å€€¸
-æ2@ Š,š–K
-¸!l®”úÀËæÜ`6O"XÉ2ÄŸÇróa€
-X±ÙgBÂæ ƒ
-Õ€PŠÄa'«¨@4ð„lX
-ÀRÌ1‰(DÄØ
-¾VҚЇg¾Ù¶½wz[\›ÎY¶Šîw®qn°[{£¥× KÓÍv½ç5Þß„xܹu²6.ïúNÖÄ­{® &^ä’f®à8jMC³pœ…ÂÊsÄ©å®JyTŸ=¿Þ#½É_úÄ8Õ4ÅìY«w¹t&-Ö0ú÷›ašø;©cÅ3_yhᚌé×nË“®+I™ñ{]ÚZs_nn³r—}L´^uq¤Ö =äÑŸ«À”×*ÍÍe±ÏˡЂš\ã=O¢Â¿«ß9w
+xÚíU}8Tùß­gYC¯VC¨Cײ4/gÖ(e”š]/ƒDdsÌœ1ÃÌÎÌh°áb±"D£bó6»Y»½àâzi´)zn“XòVS4C´y­uêi¯ýóÞ¿îsÏùç|?ŸÏïûûœÏ÷÷<?3¦7Á‰Ã.ˆPL
+íh2j‡3œ‘ð(”ÂΟ-Šì
+`ÃÉÁö‚1'ÿ S+›»Hø|wH°Ø~)¥?ñ€Çz«@á1ŒnF…+¥¾ð²97˜Í“V² 1Ä籜„!| €6D²5u™à‰\xR˜Íä‰Y\€ñEð Ù+­`ñ-!ùûíõq9dõv®K$â Å¢Âa€ü^½Tƒïk,%”'ÈD2Ä„Øûî+pÅf{…,„͆
+ ÅKg‹ÿ]Íáa#ƒa)ÌÂõv#,‡¤Ð¼êäŠØ½çïüðIëe[¥ºW³Ù¯66ŸÇ>æM=çi".-V^=!LJ)ô¿`9œÒE¯d¸§5]¢{ñjZQ¹_V<µ‰ØãJL“­yme>ÊG<]ðÒÖ„>:ûí¶í½ÓÛâÚtαUtÿósƒÝÚ-½NZšn¶ë½ 9ðá&|ÔÀ“έ“µqy7v²&nßwe0ñ"—4sÇQ;xš}Œ äD*Vž#N-÷TÊ£úìùõéMҧƩ¦)fÏ[½Ë¥3i±†1¿Ý
+×ÄßMË(žùÚC ×dL¿>pGžtCIÊŒß×hìjÔöÈšûjs›•»ì“ò õªK#µí¡}~©SÞ¨47—ž(‡Â
+jr÷<Žø¾~çœ>ãñËêÓ‡ž•Ö˵»ëõ@Ý]÷z3_j¹wh¤QÜ$WgeµÜc$üð¸MG÷}¥âè|÷µg` .Ãry­‘Ñ2<xüz8EËTÖegdþÕÁWŒÕåkE%›D%—âÇiýGÁª›]àÕxÆáœXÆ$#M/7äZŒ#ÇÛWY6o”ÕéõÔœ•ÉûtŒ5û•YÑz
+Y¥8ˆÇ9£=›™žÁ t÷ôûR#îps^R GàsµºïEų2ä쎱- c¾êdƉ֗ƒVS¢qomÚ¥®R¿Có(øRƒ£ÍL¦SùÙõ*†Éi¿I÷»x ‹[˜œÍžJ=÷Ó—qƒ¿O~¿±(”ðSŒåЄrköL܈›ÁÉ2îs¥GCu™± ±×~Ü.©'4çˆÊ’Ú•kžâoZuúï@1ŽˆË:1fÂÔÐõ(—]qÐNH¨¹®[( ™Ýaa9ÿ¬TL [¨Ÿ23À5½[wì™üXûr×È©?©)–’Öïj°ƒLWûlz“yðy]?÷“°¿éÎú©_EäÍVWyÈúä—qæ7Jüþ—¡ÒɈõù×nɯɉ.„Ö‰Öþ[E¶TÅч“Êë•7Æ$ 7Ìe$åmŠO™,v@ižïÅÕQ¬+*‹ÇUM=uó)Aƒ¢…p螢êSÚ<Êyæ2^á0YY@ûÜ{ÿ¯qT1ç¤Ó‹¿Ÿ"½Iì~¡Q×*5*ó¥W¥LM—hµ¾ÙÊÌjòÔ“ÍYYÒ)Õk$û› @šýî~Ã{8s~“Ú·¬÷U$ÆØëx…4:ã,?ÖyúóÝæݯ¹ùÏŽkĤȇ‹èøÄu÷U«TêÓFá´ûòÀŠ1b]aÚ…_Ýw*S’ç#·ä]o¬Øu0ÑìÝòÐîø†Ù¦W‰ªo3«˜¦«‹ûJ*ú¶ábuÁÀG$ñö²·}Â(5ñyQBCGs`®K’Ó›ã.¿MÎ|RŠûµÚè”ã‹{b.‹º7ÀÑFm5 wþšêx´kÝÌÝ{pj}¡lÌUµ*F³Ï@÷n§KÙ¨nëB-{wËíQÇÐ!§kZ’`~›æÏ 2ÿ¦@àï›—®9c³!1ÉIï.Ø®o¸.Ûh‰ÃÀ‡7ÍãŸPÎnõ´ŸÊ¦9å7fOBbΛüøMôÕHÀÚˆÑ_úZôUuuGNwv%ûƺšÎµKSÎ(§6îlï&œØ•íñ˜q²ï ºëþ9¹Öê¤òXvGh½ wHÒs,ÛK£WÆ-XÔ›[Áù@‡ü>¸ÿ7øŸh€]Ý*F†û_!þ€endstream
endobj
980 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 2838 0 R
+/Encoding 2859 0 R
/FirstChar 13
/LastChar 110
-/Widths 2839 0 R
-/BaseFont /ZNLINP+CMSY10
+/Widths 2860 0 R
+/BaseFont /ZXEUFY+CMSY10
/FontDescriptor 978 0 R
>> endobj
978 0 obj <<
/Ascent 750
/CapHeight 683
/Descent -194
-/FontName /ZNLINP+CMSY10
+/FontName /ZXEUFY+CMSY10
/ItalicAngle -14.035
/StemV 85
/XHeight 431
@@ -14621,14 +14885,14 @@ endobj
/CharSet (/circlecopyrt/bullet/braceleft/braceright/bar/backslash)
/FontFile 979 0 R
>> endobj
-2839 0 obj
+2860 0 obj
[1000 0 500 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 500 500 0 0 278 0 0 0 500 ]
endobj
-2838 0 obj <<
+2859 0 obj <<
/Type /Encoding
/Differences [ 0 /.notdef 13/circlecopyrt 14/.notdef 15/bullet 16/.notdef 102/braceleft/braceright 104/.notdef 106/bar 107/.notdef 110/backslash 111/.notdef]
>> endobj
-976 0 obj <<
+956 0 obj <<
/Length1 1616
/Length2 25435
/Length3 532
@@ -14636,7 +14900,7 @@ endobj
/Filter /FlateDecode
>>
stream
-xÚ¬ºc”¤]°%\]î²,Û¶mÛvuÙ¶mÛ¶»lW—mÛúú}ïܹ³î̯ùæG®õœˆ8;vÄ>'Öz2“„@^‰FÀØÎÐDÔÎÖ‰†–ž ¢¨&o`mm`la'M£hgc
+xÚ¬ºc”¤]°%\]î²,Û¶mÛvuÙ¶mÛ¶»lW—mÛúú}ïܹ³î̯ùæG®õœˆ8;vÄ>'Öz2“„@^‰FÀØÎÐDÔÎÖ‰†–ž ¢¨&o`mm`la'M£hgc
áàUûZ­RR Ž_&½þ’ÞŸfx¯%Ê3® ôEþsÈC®” ô“‘Bå0²TU’?…šÜ¡ˆhÍÒVùòýåm»T úÃ8Z§ä‚Û°ý ³:I?Ôöz"6›Èbœ^%
yá×h}×¹­Z  ypÓ‚u=jëé 3\xœa(74nŠïRýƒ&cx£aYKÜ¿‰~ػբÉI·XiêS¨“2ø ú›G²¨†lkÕ›$ñé³øI ñƒ<½*­;:̽¤PœT1]š«ÚowŽ0~,A¸ÕO˜Ó%/‡ìdccÅ÷‹k×{GKÌ‘›j™(+ÔBUÞD# ¡6ª:Mð%¿s¾†I¼;v #wïRUèB&%Ô øªÕ(cÊïZB™ª³/7í¿ '|8¾—}Z£6Ã*DLi´¯kâ'/rn¶èXÐ60µ!~Èaïގا*\Dxc(uè³?^NWù ±CVØñ Áá´ÅÚQ[´¬5üŠvȈ0Kïø^•vµÚ*V¦°cœ (p3“¸µMÖiÒ|#Óƒ}5ãByE¦Ç•yÖÌÞ¢º<^×<;>3ý
ÎÈ;V<g5j‡ùôIH›C„ÿæaTÓ€
@@ -14739,32 +15003,32 @@ PÔ3)lmŒ;œ¸—ü“5|—î”+ÀTÅv‰¼Ô_òF^›b QãLT?yÇ¥ðb²èewïA© !ÅdYò]mÝ ÏÈÍ[Ÿ
‡)Í1p’}l‹ÈÙ¤û¨¯šð1ônQ“Öü:”ƒ‘96êì(…+õƒ<“4Ã7Q|ÿF1°²¨üñ#\õl1ï,äÝ?7Âeì7®Œ½nØ<É„3ÄÓ›rhNBRòÂÑC
^[ÜÀ!ÄŠxMcOÝ—ÙPFt>l¿‹JF¢‡ßÂöð1’£†°åïxDÑv hÇÚ
¥åã—r¢fY—òU·zifÁUÆz*JfU¤ËÞ ½ ýä|ÿ:Ð(Pk<’¥WÝìo*Á]ö…gP³Šþ,ÚFjî¶%™;ɘ¹á9L9.DœÇǦÝ@sOµhòÚ³BãtÑsÒ~ˆ®›×)-ÉA
-ÇГöÞVMýͲ:“®³m›ÓWBÖþü/ùÁÿ ±©¡“‹½­¡“5Ìÿ
+ÇГöÞVMýͲ:“®³m›ÓWBÖþü/ùÁÿ ±©¡“‹½­¡“5Ìÿ
endobj
-977 0 obj <<
+957 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 2824 0 R
+/Encoding 2845 0 R
/FirstChar 2
/LastChar 216
-/Widths 2840 0 R
-/BaseFont /ARQOPU+URWPalladioL-Roma
-/FontDescriptor 975 0 R
+/Widths 2861 0 R
+/BaseFont /HORQBK+URWPalladioL-Roma
+/FontDescriptor 955 0 R
>> endobj
-975 0 obj <<
+955 0 obj <<
/Ascent 715
/CapHeight 680
/Descent -282
-/FontName /ARQOPU+URWPalladioL-Roma
+/FontName /HORQBK+URWPalladioL-Roma
/ItalicAngle 0
/StemV 84
/XHeight 469
/FontBBox [-166 -283 1021 943]
/Flags 4
/CharSet (/fi/fl/exclam/numbersign/dollar/percent/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/equal/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/bracketright/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/circumflex/quotedblleft/quotedblright/endash/emdash/Oslash)
-/FontFile 976 0 R
+/FontFile 956 0 R
>> endobj
-2840 0 obj
+2861 0 obj
[605 608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 278 0 500 500 840 0 278 333 333 389 606 250 333 250 606 500 500 500 500 500 500 500 500 500 500 250 250 0 606 0 444 747 778 611 709 774 611 556 763 832 337 333 726 611 946 831 786 604 786 668 525 613 778 722 1000 667 667 667 333 0 333 0 0 278 500 553 444 611 479 333 556 582 291 234 556 291 883 582 546 601 560 395 424 326 603 565 834 516 556 500 0 0 0 0 0 0 0 0 0 0 0 0 0 333 0 0 0 0 0 0 0 0 0 0 500 500 0 500 1000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 833 ]
endobj
953 0 obj <<
@@ -14778,7 +15042,7 @@ stream
xÚ¬zceß³eÙU]¶ÕeÛ¶m[·lÛv—mÛ¶m³ËìrMÿþOoæÓÌûp"ÎÎ̽re®Ü;î8dD
Ê´‚&
CF&ìhjèl °1t6å"T75!15&db"däää„!#Ø{8Zš[8RüÅ ¤¦¦ù/Ë?!„Fÿáù»ÓÉÒÜŽüï‹«© ÀÞÖÔÎù/ÄÿóFeSSBg SB3KSBayMI9qB
-q9UBqS;SGCB#KcBKcS;'SJB3€#¡Í¿-v&–ÿ”æD÷KЉÐÐÉÞÔØòï6SwcSû\4„ö¦Ž¶–NNß -Í íœÿöÀ@higlãbò¿v3À¿Ù;þFØþõýS
+q9UBqS;SGCB#KcBKcS;'SJB3€#¡Í¿-v&–ÿ”æD÷KЉÐÐÉÞÔØòï6SwcSû\4„ö¦Ž¶–NNß -Í íœÿöÀ@higlãbò¿v3À¿Ù;þFØþõýS
fH{ð 1Ycgl
ñi0–Wä¯}Ã4¿ ðtóE&Åt¶Z \&—Ešà’º››¹š#/(/25©â¾î‚C‡ã{»ò-o8J<îqæÔ§ -
㼑a1Š¯@x×" ÙÍÕƒHQzHÈÈH<àtáŒË{â,ȸ†ÍÊ·K3”’/Y”Ôty®žˆW"So¼¥¯Úh‰í}oSOw½MOY%9
@@ -14878,23 +15142,23 @@ _ÏfZYX/JÿŠPžUºÐ±;Äó™Ã¾¨5ÃÎ~¢M~;-5”äÖ$„€`3’’˜à0ßnpöã¤ÒE›­ðÆúb89qÄZ¥| ž
!µãmYgKà”‹ù÷ÿ•£B}ôçüÂÛZ = U³W¯Û䉊ù¥tàC½^¦W
QŒÝ›îl6;¹E& ˆÈš.®*·Kcî):+©†¸uó‘=t‹b'´á":
EúPjAõ¶Õ ª±E@ ûõo`¦iqKQ`_`+§|,33yºGÖÿÚæa#^¸“¯™ÆÀ¤Çð—àBÝ®éãó8OÝòUÐÇ3&]¥§J°Æ$h ‹YH<(|í HhtÊc­µ YjCorpôaá‘Ögnj/#;ÌèâCŠ7±]c¥£ÿ|I4aü½ï¯kÅ3|M&ïæ†Àh¿}®²L¸­¿‚fµÝ¤TíR8g¤=Œë&í‰A¬ >ª¢Ûd÷C{z‰-6ð7Tœçܧž p"ÿ²±(¯Ÿûº`h/áw»7¢»ªîÈ” û½U6´‹°ÚS +ÑT~¯Tç°Ç&µÖªñ˜ü¶×êI z {çNÊ€‘±6qZü(úX(ø¢ZyÁ´~´ãÅ¥ÙÛا°ÞÊ›H#æ
-½¨©5¯O3þU¬–.œ) @X±®Kàð`ç0’’A©2ã?Â’§¤1à*\Ü& Ï×ò•Es”òœ³e»`Ž-Ä_ø£½—†›}t`òC;]t:ü#?=*rež‡¾ZNžÿµ×Þ ÞÏ-aæ:-ƒ;ž""·È¶ êÝ'(ž¶b—PÝò$&¦‰É&ŸydÌG­<‡#{BŸí’Tdõ/úYýþª·Áè`þÜ(JæsmjžãdàѦÞ#¶«âÝ]¹CÑdH€ Aþ–/“6óN#å
+½¨©5¯O3þU¬–.œ) @X±®Kàð`ç0’’A©2ã?Â’§¤1à*\Ü& Ï×ò•Es”òœ³e»`Ž-Ä_ø£½—†›}t`òC;]t:ü#?=*rež‡¾ZNžÿµ×Þ ÞÏ-aæ:-ƒ;ž""·È¶ êÝ'(ž¶b—PÝò$&¦‰É&ŸydÌG­<‡#{BŸí’Tdõ/úYýþª·Áè`þÜ(JæsmjžãdàѦÞ#¶«âÝ]¹CÑdH€ Aþ–/“6óN#å
endobj
954 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 2824 0 R
+/Encoding 2845 0 R
/FirstChar 2
/LastChar 151
-/Widths 2841 0 R
-/BaseFont /SMOMGB+URWPalladioL-Bold
+/Widths 2862 0 R
+/BaseFont /QEKLTD+URWPalladioL-Bold
/FontDescriptor 952 0 R
>> endobj
952 0 obj <<
/Ascent 708
/CapHeight 672
/Descent -266
-/FontName /SMOMGB+URWPalladioL-Bold
+/FontName /QEKLTD+URWPalladioL-Bold
/ItalicAngle 0
/StemV 123
/XHeight 471
@@ -14903,249 +15167,255 @@ endobj
/CharSet (/fi/fl/exclam/numbersign/dollar/percent/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/equal/question/at/A/B/C/D/E/F/G/H/I/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/bracketright/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/quotedblright/emdash)
/FontFile 953 0 R
>> endobj
-2841 0 obj
+2862 0 obj
[611 611 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 278 0 500 500 889 0 278 333 333 444 606 250 333 250 296 500 500 500 500 500 500 500 500 500 500 250 250 0 606 0 444 747 778 667 722 833 611 556 833 833 389 0 778 611 1000 833 833 611 833 722 611 667 778 778 1000 667 667 667 333 0 333 0 0 0 500 611 444 611 500 389 556 611 333 333 611 333 889 611 556 611 611 389 444 333 611 556 833 500 556 500 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 500 0 0 1000 ]
endobj
-955 0 obj <<
+958 0 obj <<
/Type /Pages
/Count 6
-/Parent 2842 0 R
-/Kids [946 0 R 972 0 R 982 0 R 1037 0 R 1101 0 R 1164 0 R]
+/Parent 2863 0 R
+/Kids [946 0 R 975 0 R 982 0 R 1037 0 R 1101 0 R 1164 0 R]
>> endobj
1246 0 obj <<
/Type /Pages
/Count 6
-/Parent 2842 0 R
+/Parent 2863 0 R
/Kids [1226 0 R 1248 0 R 1260 0 R 1273 0 R 1284 0 R 1291 0 R]
>> endobj
1307 0 obj <<
/Type /Pages
/Count 6
-/Parent 2842 0 R
+/Parent 2863 0 R
/Kids [1303 0 R 1309 0 R 1317 0 R 1326 0 R 1336 0 R 1344 0 R]
>> endobj
1354 0 obj <<
/Type /Pages
/Count 6
-/Parent 2842 0 R
-/Kids [1351 0 R 1357 0 R 1379 0 R 1392 0 R 1398 0 R 1402 0 R]
+/Parent 2863 0 R
+/Kids [1351 0 R 1357 0 R 1379 0 R 1392 0 R 1397 0 R 1402 0 R]
>> endobj
1415 0 obj <<
/Type /Pages
/Count 6
-/Parent 2842 0 R
+/Parent 2863 0 R
/Kids [1407 0 R 1417 0 R 1426 0 R 1433 0 R 1439 0 R 1443 0 R]
>> endobj
1462 0 obj <<
/Type /Pages
/Count 6
-/Parent 2842 0 R
-/Kids [1453 0 R 1466 0 R 1474 0 R 1484 0 R 1493 0 R 1499 0 R]
+/Parent 2863 0 R
+/Kids [1452 0 R 1466 0 R 1473 0 R 1484 0 R 1493 0 R 1499 0 R]
>> endobj
1509 0 obj <<
/Type /Pages
/Count 6
-/Parent 2843 0 R
-/Kids [1505 0 R 1511 0 R 1520 0 R 1526 0 R 1532 0 R 1541 0 R]
+/Parent 2864 0 R
+/Kids [1504 0 R 1511 0 R 1519 0 R 1525 0 R 1532 0 R 1541 0 R]
>> endobj
-1551 0 obj <<
+1548 0 obj <<
/Type /Pages
/Count 6
-/Parent 2843 0 R
-/Kids [1548 0 R 1553 0 R 1563 0 R 1567 0 R 1574 0 R 1583 0 R]
+/Parent 2864 0 R
+/Kids [1545 0 R 1550 0 R 1557 0 R 1561 0 R 1571 0 R 1575 0 R]
>> endobj
-1597 0 obj <<
+1587 0 obj <<
/Type /Pages
/Count 6
-/Parent 2843 0 R
-/Kids [1591 0 R 1600 0 R 1612 0 R 1618 0 R 1624 0 R 1630 0 R]
+/Parent 2864 0 R
+/Kids [1581 0 R 1589 0 R 1600 0 R 1608 0 R 1620 0 R 1626 0 R]
>> endobj
-1638 0 obj <<
+1635 0 obj <<
/Type /Pages
/Count 6
-/Parent 2843 0 R
-/Kids [1634 0 R 1640 0 R 1646 0 R 1657 0 R 1661 0 R 1665 0 R]
+/Parent 2864 0 R
+/Kids [1630 0 R 1637 0 R 1643 0 R 1648 0 R 1654 0 R 1664 0 R]
>> endobj
-1673 0 obj <<
+1672 0 obj <<
/Type /Pages
/Count 6
-/Parent 2843 0 R
-/Kids [1669 0 R 1675 0 R 1679 0 R 1685 0 R 1690 0 R 1695 0 R]
+/Parent 2864 0 R
+/Kids [1669 0 R 1674 0 R 1678 0 R 1683 0 R 1687 0 R 1691 0 R]
>> endobj
-1706 0 obj <<
+1702 0 obj <<
/Type /Pages
/Count 6
-/Parent 2843 0 R
-/Kids [1701 0 R 1708 0 R 1718 0 R 1722 0 R 1726 0 R 1730 0 R]
+/Parent 2864 0 R
+/Kids [1698 0 R 1704 0 R 1710 0 R 1716 0 R 1724 0 R 1730 0 R]
>> endobj
-1745 0 obj <<
+1737 0 obj <<
/Type /Pages
/Count 6
-/Parent 2844 0 R
-/Kids [1740 0 R 1747 0 R 1755 0 R 1760 0 R 1764 0 R 1768 0 R]
+/Parent 2865 0 R
+/Kids [1734 0 R 1739 0 R 1749 0 R 1755 0 R 1762 0 R 1767 0 R]
>> endobj
-1781 0 obj <<
+1775 0 obj <<
/Type /Pages
/Count 6
-/Parent 2844 0 R
-/Kids [1774 0 R 1783 0 R 1788 0 R 1796 0 R 1801 0 R 1808 0 R]
+/Parent 2865 0 R
+/Kids [1772 0 R 1777 0 R 1781 0 R 1787 0 R 1795 0 R 1801 0 R]
>> endobj
-1818 0 obj <<
+1814 0 obj <<
/Type /Pages
/Count 6
-/Parent 2844 0 R
-/Kids [1813 0 R 1821 0 R 1828 0 R 1832 0 R 1836 0 R 1840 0 R]
+/Parent 2865 0 R
+/Kids [1808 0 R 1816 0 R 1822 0 R 1826 0 R 1835 0 R 1840 0 R]
>> endobj
-1850 0 obj <<
+1847 0 obj <<
/Type /Pages
/Count 6
-/Parent 2844 0 R
-/Kids [1846 0 R 1852 0 R 1856 0 R 1861 0 R 1865 0 R 1870 0 R]
+/Parent 2865 0 R
+/Kids [1844 0 R 1849 0 R 1853 0 R 1859 0 R 1864 0 R 1868 0 R]
>> endobj
-1886 0 obj <<
+1876 0 obj <<
/Type /Pages
/Count 6
-/Parent 2844 0 R
-/Kids [1875 0 R 1888 0 R 1896 0 R 1901 0 R 1905 0 R 1909 0 R]
+/Parent 2865 0 R
+/Kids [1873 0 R 1878 0 R 1883 0 R 1888 0 R 1900 0 R 1908 0 R]
>> endobj
1916 0 obj <<
/Type /Pages
/Count 6
-/Parent 2844 0 R
-/Kids [1913 0 R 1918 0 R 1926 0 R 1930 0 R 1941 0 R 1959 0 R]
+/Parent 2865 0 R
+/Kids [1913 0 R 1918 0 R 1922 0 R 1926 0 R 1930 0 R 1938 0 R]
>> endobj
-1988 0 obj <<
+1951 0 obj <<
/Type /Pages
/Count 6
-/Parent 2845 0 R
-/Kids [1973 0 R 1990 0 R 2001 0 R 2007 0 R 2011 0 R 2021 0 R]
+/Parent 2866 0 R
+/Kids [1942 0 R 1954 0 R 1972 0 R 1986 0 R 2002 0 R 2013 0 R]
>> endobj
-2032 0 obj <<
+2022 0 obj <<
/Type /Pages
/Count 6
-/Parent 2845 0 R
-/Kids [2027 0 R 2034 0 R 2044 0 R 2056 0 R 2064 0 R 2072 0 R]
+/Parent 2866 0 R
+/Kids [2019 0 R 2024 0 R 2034 0 R 2040 0 R 2046 0 R 2056 0 R]
>> endobj
-2083 0 obj <<
+2075 0 obj <<
/Type /Pages
/Count 6
-/Parent 2845 0 R
-/Kids [2076 0 R 2085 0 R 2093 0 R 2105 0 R 2112 0 R 2120 0 R]
+/Parent 2866 0 R
+/Kids [2068 0 R 2077 0 R 2085 0 R 2089 0 R 2097 0 R 2105 0 R]
>> endobj
-2135 0 obj <<
+2123 0 obj <<
/Type /Pages
/Count 6
-/Parent 2845 0 R
-/Kids [2126 0 R 2137 0 R 2141 0 R 2145 0 R 2156 0 R 2160 0 R]
+/Parent 2866 0 R
+/Kids [2117 0 R 2125 0 R 2133 0 R 2137 0 R 2143 0 R 2153 0 R]
>> endobj
-2176 0 obj <<
+2160 0 obj <<
/Type /Pages
/Count 6
-/Parent 2845 0 R
-/Kids [2167 0 R 2178 0 R 2237 0 R 2293 0 R 2347 0 R 2382 0 R]
+/Parent 2866 0 R
+/Kids [2157 0 R 2162 0 R 2173 0 R 2177 0 R 2184 0 R 2194 0 R]
>> endobj
-2397 0 obj <<
+2308 0 obj <<
/Type /Pages
/Count 6
-/Parent 2845 0 R
-/Kids [2390 0 R 2399 0 R 2406 0 R 2411 0 R 2417 0 R 2421 0 R]
+/Parent 2866 0 R
+/Kids [2253 0 R 2310 0 R 2364 0 R 2399 0 R 2407 0 R 2415 0 R]
>> endobj
-2435 0 obj <<
+2426 0 obj <<
/Type /Pages
/Count 6
-/Parent 2846 0 R
-/Kids [2430 0 R 2437 0 R 2442 0 R 2446 0 R 2450 0 R 2459 0 R]
+/Parent 2867 0 R
+/Kids [2422 0 R 2428 0 R 2434 0 R 2438 0 R 2447 0 R 2453 0 R]
>> endobj
-2477 0 obj <<
+2461 0 obj <<
/Type /Pages
/Count 6
-/Parent 2846 0 R
-/Kids [2467 0 R 2479 0 R 2490 0 R 2497 0 R 2506 0 R 2518 0 R]
+/Parent 2867 0 R
+/Kids [2458 0 R 2463 0 R 2467 0 R 2475 0 R 2484 0 R 2494 0 R]
>> endobj
-2529 0 obj <<
+2511 0 obj <<
/Type /Pages
/Count 6
-/Parent 2846 0 R
-/Kids [2524 0 R 2531 0 R 2541 0 R 2545 0 R 2550 0 R 2556 0 R]
+/Parent 2867 0 R
+/Kids [2506 0 R 2513 0 R 2523 0 R 2532 0 R 2541 0 R 2546 0 R]
>> endobj
-2576 0 obj <<
+2560 0 obj <<
/Type /Pages
/Count 6
-/Parent 2846 0 R
-/Kids [2567 0 R 2578 0 R 2584 0 R 2595 0 R 2599 0 R 2603 0 R]
+/Parent 2867 0 R
+/Kids [2552 0 R 2562 0 R 2566 0 R 2571 0 R 2579 0 R 2590 0 R]
>> endobj
-2612 0 obj <<
+2603 0 obj <<
/Type /Pages
/Count 6
-/Parent 2846 0 R
-/Kids [2607 0 R 2614 0 R 2624 0 R 2635 0 R 2647 0 R 2651 0 R]
+/Parent 2867 0 R
+/Kids [2598 0 R 2605 0 R 2616 0 R 2620 0 R 2624 0 R 2628 0 R]
>> endobj
-2666 0 obj <<
+2643 0 obj <<
/Type /Pages
/Count 6
-/Parent 2846 0 R
-/Kids [2658 0 R 2668 0 R 2672 0 R 2679 0 R 2693 0 R 2699 0 R]
+/Parent 2867 0 R
+/Kids [2635 0 R 2645 0 R 2656 0 R 2668 0 R 2672 0 R 2679 0 R]
>> endobj
-2708 0 obj <<
+2691 0 obj <<
/Type /Pages
/Count 6
-/Parent 2847 0 R
-/Kids [2704 0 R 2710 0 R 2718 0 R 2726 0 R 2730 0 R 2734 0 R]
+/Parent 2868 0 R
+/Kids [2688 0 R 2693 0 R 2700 0 R 2714 0 R 2720 0 R 2725 0 R]
>> endobj
-2748 0 obj <<
+2736 0 obj <<
/Type /Pages
/Count 6
-/Parent 2847 0 R
-/Kids [2740 0 R 2750 0 R 2756 0 R 2767 0 R 2777 0 R 2785 0 R]
+/Parent 2868 0 R
+/Kids [2729 0 R 2738 0 R 2746 0 R 2751 0 R 2755 0 R 2760 0 R]
>> endobj
-2812 0 obj <<
+2774 0 obj <<
/Type /Pages
-/Count 2
-/Parent 2847 0 R
-/Kids [2800 0 R 2814 0 R]
+/Count 6
+/Parent 2868 0 R
+/Kids [2770 0 R 2776 0 R 2788 0 R 2797 0 R 2805 0 R 2820 0 R]
>> endobj
-2842 0 obj <<
+2844 0 obj <<
+/Type /Pages
+/Count 1
+/Parent 2868 0 R
+/Kids [2832 0 R]
+>> endobj
+2863 0 obj <<
/Type /Pages
/Count 36
-/Parent 2848 0 R
-/Kids [955 0 R 1246 0 R 1307 0 R 1354 0 R 1415 0 R 1462 0 R]
+/Parent 2869 0 R
+/Kids [958 0 R 1246 0 R 1307 0 R 1354 0 R 1415 0 R 1462 0 R]
>> endobj
-2843 0 obj <<
+2864 0 obj <<
/Type /Pages
/Count 36
-/Parent 2848 0 R
-/Kids [1509 0 R 1551 0 R 1597 0 R 1638 0 R 1673 0 R 1706 0 R]
+/Parent 2869 0 R
+/Kids [1509 0 R 1548 0 R 1587 0 R 1635 0 R 1672 0 R 1702 0 R]
>> endobj
-2844 0 obj <<
+2865 0 obj <<
/Type /Pages
/Count 36
-/Parent 2848 0 R
-/Kids [1745 0 R 1781 0 R 1818 0 R 1850 0 R 1886 0 R 1916 0 R]
+/Parent 2869 0 R
+/Kids [1737 0 R 1775 0 R 1814 0 R 1847 0 R 1876 0 R 1916 0 R]
>> endobj
-2845 0 obj <<
+2866 0 obj <<
/Type /Pages
/Count 36
-/Parent 2848 0 R
-/Kids [1988 0 R 2032 0 R 2083 0 R 2135 0 R 2176 0 R 2397 0 R]
+/Parent 2869 0 R
+/Kids [1951 0 R 2022 0 R 2075 0 R 2123 0 R 2160 0 R 2308 0 R]
>> endobj
-2846 0 obj <<
+2867 0 obj <<
/Type /Pages
/Count 36
-/Parent 2848 0 R
-/Kids [2435 0 R 2477 0 R 2529 0 R 2576 0 R 2612 0 R 2666 0 R]
+/Parent 2869 0 R
+/Kids [2426 0 R 2461 0 R 2511 0 R 2560 0 R 2603 0 R 2643 0 R]
>> endobj
-2847 0 obj <<
+2868 0 obj <<
/Type /Pages
-/Count 14
-/Parent 2848 0 R
-/Kids [2708 0 R 2748 0 R 2812 0 R]
+/Count 19
+/Parent 2869 0 R
+/Kids [2691 0 R 2736 0 R 2774 0 R 2844 0 R]
>> endobj
-2848 0 obj <<
+2869 0 obj <<
/Type /Pages
-/Count 194
-/Kids [2842 0 R 2843 0 R 2844 0 R 2845 0 R 2846 0 R 2847 0 R]
+/Count 199
+/Kids [2863 0 R 2864 0 R 2865 0 R 2866 0 R 2867 0 R 2868 0 R]
>> endobj
-2849 0 obj <<
+2870 0 obj <<
/Type /Outlines
/First 7 0 R
/Last 847 0 R
@@ -15320,7 +15590,7 @@ endobj
847 0 obj <<
/Title 848 0 R
/A 845 0 R
-/Parent 2849 0 R
+/Parent 2870 0 R
/Prev 755 0 R
/First 851 0 R
/Last 943 0 R
@@ -15486,7 +15756,7 @@ endobj
755 0 obj <<
/Title 756 0 R
/A 753 0 R
-/Parent 2849 0 R
+/Parent 2870 0 R
/Prev 735 0 R
/Next 847 0 R
/First 759 0 R
@@ -15523,7 +15793,7 @@ endobj
735 0 obj <<
/Title 736 0 R
/A 733 0 R
-/Parent 2849 0 R
+/Parent 2870 0 R
/Prev 711 0 R
/Next 755 0 R
/First 739 0 R
@@ -15567,7 +15837,7 @@ endobj
711 0 obj <<
/Title 712 0 R
/A 709 0 R
-/Parent 2849 0 R
+/Parent 2870 0 R
/Prev 363 0 R
/Next 735 0 R
/First 715 0 R
@@ -16189,7 +16459,7 @@ endobj
363 0 obj <<
/Title 364 0 R
/A 361 0 R
-/Parent 2849 0 R
+/Parent 2870 0 R
/Prev 351 0 R
/Next 711 0 R
/First 367 0 R
@@ -16211,7 +16481,7 @@ endobj
351 0 obj <<
/Title 352 0 R
/A 349 0 R
-/Parent 2849 0 R
+/Parent 2870 0 R
/Prev 131 0 R
/Next 363 0 R
/First 355 0 R
@@ -16608,7 +16878,7 @@ endobj
131 0 obj <<
/Title 132 0 R
/A 129 0 R
-/Parent 2849 0 R
+/Parent 2870 0 R
/Prev 91 0 R
/Next 351 0 R
/First 135 0 R
@@ -16682,7 +16952,7 @@ endobj
91 0 obj <<
/Title 92 0 R
/A 89 0 R
-/Parent 2849 0 R
+/Parent 2870 0 R
/Prev 67 0 R
/Next 131 0 R
/First 95 0 R
@@ -16725,7 +16995,7 @@ endobj
67 0 obj <<
/Title 68 0 R
/A 65 0 R
-/Parent 2849 0 R
+/Parent 2870 0 R
/Prev 7 0 R
/Next 91 0 R
/First 71 0 R
@@ -16834,2899 +17104,2920 @@ endobj
7 0 obj <<
/Title 8 0 R
/A 5 0 R
-/Parent 2849 0 R
+/Parent 2870 0 R
/Next 67 0 R
/First 11 0 R
/Last 23 0 R
/Count -4
>> endobj
-2850 0 obj <<
-/Names [(Access_Control_Lists) 2124 0 R (Bv9ARM.ch01) 1250 0 R (Bv9ARM.ch02) 1294 0 R (Bv9ARM.ch03) 1312 0 R (Bv9ARM.ch04) 1360 0 R (Bv9ARM.ch05) 1544 0 R (Bv9ARM.ch06) 1556 0 R (Bv9ARM.ch07) 2123 0 R (Bv9ARM.ch08) 2148 0 R (Bv9ARM.ch09) 2163 0 R (Bv9ARM.ch10) 2424 0 R (Configuration_File_Grammar) 1579 0 R (DNSSEC) 1430 0 R (Doc-Start) 951 0 R (Setting_TTLs) 2049 0 R (acache) 1301 0 R (access_control) 1743 0 R (acl) 1587 0 R (address_match_lists) 1561 0 R (admin_tools) 1334 0 R (appendix.A) 754 0 R (appendix.B) 846 0 R (bibliography) 2171 0 R (bind9.library) 2380 0 R (boolean_options) 1375 0 R (builtin) 1817 0 R (chapter*.1) 985 0 R (chapter.1) 6 0 R (chapter.2) 66 0 R (chapter.3) 90 0 R (chapter.4) 130 0 R (chapter.5) 350 0 R (chapter.6) 362 0 R (chapter.7) 710 0 R (chapter.8) 734 0 R (cite.RFC1033) 2299 0 R (cite.RFC1034) 2184 0 R (cite.RFC1035) 2186 0 R (cite.RFC1101) 2281 0 R (cite.RFC1123) 2283 0 R (cite.RFC1183) 2243 0 R (cite.RFC1464) 2321 0 R (cite.RFC1535) 2229 0 R (cite.RFC1536) 2231 0 R (cite.RFC1537) 2301 0 R (cite.RFC1591) 2285 0 R (cite.RFC1706) 2245 0 R (cite.RFC1712) 2341 0 R (cite.RFC1713) 2323 0 R (cite.RFC1794) 2325 0 R (cite.RFC1876) 2247 0 R (cite.RFC1912) 2303 0 R (cite.RFC1982) 2233 0 R (cite.RFC1995) 2191 0 R (cite.RFC1996) 2193 0 R (cite.RFC2010) 2305 0 R (cite.RFC2052) 2249 0 R (cite.RFC2065) 2353 0 R (cite.RFC2136) 2195 0 R (cite.RFC2137) 2355 0 R (cite.RFC2163) 2251 0 R (cite.RFC2168) 2253 0 R (cite.RFC2181) 2197 0 R (cite.RFC2219) 2307 0 R (cite.RFC2230) 2255 0 R (cite.RFC2240) 2327 0 R (cite.RFC2308) 2199 0 R (cite.RFC2317) 2287 0 R (cite.RFC2345) 2329 0 R (cite.RFC2352) 2331 0 R (cite.RFC2535) 2357 0 R (cite.RFC2536) 2257 0 R (cite.RFC2537) 2259 0 R (cite.RFC2538) 2261 0 R (cite.RFC2539) 2263 0 R (cite.RFC2540) 2265 0 R (cite.RFC2671) 2201 0 R (cite.RFC2672) 2203 0 R (cite.RFC2673) 2343 0 R (cite.RFC2782) 2267 0 R (cite.RFC2825) 2311 0 R (cite.RFC2826) 2289 0 R (cite.RFC2845) 2205 0 R (cite.RFC2874) 2345 0 R (cite.RFC2915) 2269 0 R (cite.RFC2929) 2291 0 R (cite.RFC2930) 2207 0 R (cite.RFC2931) 2209 0 R (cite.RFC3007) 2211 0 R (cite.RFC3008) 2359 0 R (cite.RFC3071) 2333 0 R (cite.RFC3090) 2361 0 R (cite.RFC3110) 2271 0 R (cite.RFC3123) 2273 0 R (cite.RFC3225) 2217 0 R (cite.RFC3258) 2335 0 R (cite.RFC3445) 2363 0 R (cite.RFC3490) 2313 0 R (cite.RFC3491) 2315 0 R (cite.RFC3492) 2317 0 R (cite.RFC3596) 2275 0 R (cite.RFC3597) 2277 0 R (cite.RFC3645) 2213 0 R (cite.RFC3655) 2365 0 R (cite.RFC3658) 2367 0 R (cite.RFC3755) 2369 0 R (cite.RFC3757) 2371 0 R (cite.RFC3833) 2219 0 R (cite.RFC3845) 2373 0 R (cite.RFC3901) 2337 0 R (cite.RFC4033) 2221 0 R (cite.RFC4034) 2223 0 R (cite.RFC4035) 2225 0 R (cite.RFC4074) 2235 0 R (cite.RFC974) 2188 0 R (cite.id2513574) 2378 0 R (clients-per-query) 2103 0 R (configuration_file_elements) 1557 0 R (controls_statement_definition_and_usage) 1342 0 R (diagnostic_tools) 1282 0 R (dnssec.dynamic.zones) 1449 0 R (dynamic_update) 1370 0 R (dynamic_update_policies) 1377 0 R (dynamic_update_security) 1753 0 R (empty) 1825 0 R (historical_dns_information) 2165 0 R (id2466570) 1251 0 R (id2466594) 1252 0 R (id2467484) 1253 0 R (id2467494) 1254 0 R (id2467734) 1264 0 R (id2467755) 1265 0 R (id2467789) 1266 0 R (id2467874) 1269 0 R (id2467966) 1262 0 R (id2470272) 1276 0 R (id2470295) 1279 0 R (id2470393) 1280 0 R (id2470414) 1281 0 R (id2470444) 1287 0 R (id2470480) 1288 0 R (id2470574) 1289 0 R (id2470609) 1295 0 R (id2470635) 1296 0 R (id2470716) 1297 0 R (id2470742) 1300 0 R (id2470753) 1306 0 R (id2470785) 1314 0 R (id2470801) 1315 0 R (id2470823) 1320 0 R (id2470840) 1321 0 R (id2471245) 1329 0 R (id2471251) 1330 0 R (id2472304) 1347 0 R (id2472315) 1348 0 R (id2472878) 1389 0 R (id2472897) 1395 0 R (id2473330) 1410 0 R (id2473347) 1411 0 R (id2473453) 1412 0 R (id2473472) 1413 0 R (id2473482) 1414 0 R (id2473518) 1420 0 R (id2473576) 1421 0 R (id2473625) 1423 0 R (id2473639) 1424 0 R (id2473688) 1429 0 R (id2473893) 1431 0 R (id2473972) 1436 0 R (id2474121) 1437 0 R (id2474548) 1450 0 R (id2474585) 1451 0 R (id2474758) 1456 0 R (id2474861) 1469 0 R (id2474967) 1470 0 R (id2474980) 1471 0 R (id2475081) 1472 0 R (id2475108) 1477 0 R (id2475117) 1478 0 R (id2475127) 1479 0 R (id2475140) 1480 0 R (id2475245) 1481 0 R (id2475255) 1482 0 R (id2475361) 1488 0 R (id2475383) 1490 0 R (id2475485) 1497 0 R (id2475650) 1502 0 R (id2475719) 1503 0 R (id2475836) 1508 0 R (id2475987) 1514 0 R (id2475995) 1515 0 R (id2476027) 1516 0 R (id2476064) 1517 0 R (id2476112) 1518 0 R (id2476142) 1523 0 R (id2476546) 1529 0 R (id2476728) 1530 0 R (id2476782) 1535 0 R (id2476844) 1537 0 R (id2476866) 1538 0 R (id2476899) 1545 0 R (id2477114) 1558 0 R (id2478008) 1570 0 R (id2478036) 1571 0 R (id2478310) 1572 0 R (id2478325) 1577 0 R (id2478423) 1578 0 R (id2478498) 1580 0 R (id2478902) 1586 0 R (id2478945) 1588 0 R (id2479092) 1594 0 R (id2479588) 1603 0 R (id2479605) 1604 0 R (id2479628) 1605 0 R (id2479652) 1606 0 R (id2479742) 1610 0 R (id2479868) 1615 0 R (id2479921) 1616 0 R (id2480617) 1627 0 R (id2481560) 1637 0 R (id2481690) 1643 0 R (id2482148) 1649 0 R (id2482290) 1650 0 R (id2482354) 1653 0 R (id2482397) 1654 0 R (id2482419) 1655 0 R (id2486036) 1704 0 R (id2488549) 1735 0 R (id2488676) 1737 0 R (id2489237) 1752 0 R (id2490386) 1771 0 R (id2490514) 1777 0 R (id2490936) 1786 0 R (id2491438) 1804 0 R (id2493310) 1843 0 R (id2493436) 1849 0 R (id2494139) 1859 0 R (id2495348) 1880 0 R (id2495587) 1892 0 R (id2495702) 1894 0 R (id2496144) 1899 0 R (id2497924) 1921 0 R (id2497931) 1922 0 R (id2497937) 1923 0 R (id2498608) 1934 0 R (id2498709) 1935 0 R (id2500878) 2004 0 R (id2501474) 2014 0 R (id2501492) 2015 0 R (id2501512) 2018 0 R (id2501749) 2024 0 R (id2502987) 2030 0 R (id2503115) 2037 0 R (id2503273) 2038 0 R (id2503568) 2040 0 R (id2503704) 2042 0 R (id2503722) 2047 0 R (id2504195) 2050 0 R (id2504320) 2052 0 R (id2504334) 2053 0 R (id2504446) 2059 0 R (id2504469) 2060 0 R (id2504485) 2061 0 R (id2504546) 2062 0 R (id2504615) 2067 0 R (id2504720) 2068 0 R (id2504864) 2069 0 R (id2505306) 2080 0 R (id2505673) 2089 0 R (id2505678) 2090 0 R (id2507379) 2097 0 R (id2507385) 2098 0 R (id2507762) 2100 0 R (id2507767) 2101 0 R (id2508852) 2108 0 R (id2508952) 2109 0 R (id2509293) 2118 0 R (id2509521) 2132 0 R (id2509670) 2133 0 R (id2509730) 2134 0 R (id2509810) 2149 0 R (id2509815) 2150 0 R (id2509963) 2151 0 R (id2509980) 2152 0 R (id2510042) 2164 0 R (id2510146) 2170 0 R (id2510470) 2175 0 R (id2510472) 2182 0 R (id2510481) 2187 0 R (id2510504) 2183 0 R (id2510528) 2185 0 R (id2510564) 2196 0 R (id2510590) 2198 0 R (id2510616) 2190 0 R (id2510641) 2192 0 R (id2510664) 2194 0 R (id2510720) 2200 0 R (id2510746) 2202 0 R (id2510773) 2204 0 R (id2510835) 2206 0 R (id2510865) 2208 0 R (id2510894) 2210 0 R (id2510921) 2212 0 R (id2510996) 2215 0 R (id2511003) 2216 0 R (id2511030) 2218 0 R (id2511066) 2220 0 R (id2511131) 2222 0 R (id2511196) 2224 0 R (id2511261) 2227 0 R (id2511270) 2228 0 R (id2511296) 2230 0 R (id2511364) 2232 0 R (id2511399) 2234 0 R (id2511440) 2241 0 R (id2511445) 2242 0 R (id2511502) 2244 0 R (id2511540) 2252 0 R (id2511575) 2246 0 R (id2511629) 2248 0 R (id2511736) 2250 0 R (id2511762) 2254 0 R (id2511787) 2256 0 R (id2511814) 2258 0 R (id2511841) 2260 0 R (id2511880) 2262 0 R (id2511910) 2264 0 R (id2511940) 2266 0 R (id2511982) 2268 0 R (id2512016) 2270 0 R (id2512042) 2272 0 R (id2512066) 2274 0 R (id2512123) 2276 0 R (id2512148) 2279 0 R (id2512155) 2280 0 R (id2512181) 2282 0 R (id2512203) 2284 0 R (id2512227) 2286 0 R (id2512273) 2288 0 R (id2512296) 2290 0 R (id2512346) 2297 0 R (id2512354) 2298 0 R (id2512377) 2300 0 R (id2512404) 2302 0 R (id2512430) 2304 0 R (id2512467) 2306 0 R (id2512507) 2309 0 R (id2512513) 2310 0 R (id2512545) 2312 0 R (id2512659) 2314 0 R (id2512694) 2316 0 R (id2512721) 2319 0 R (id2512739) 2320 0 R (id2512829) 2322 0 R (id2512855) 2324 0 R (id2512881) 2326 0 R (id2512904) 2328 0 R (id2512950) 2330 0 R (id2512973) 2332 0 R (id2513000) 2334 0 R (id2513026) 2336 0 R (id2513063) 2339 0 R (id2513069) 2340 0 R (id2513127) 2342 0 R (id2513154) 2344 0 R (id2513190) 2351 0 R (id2513202) 2352 0 R (id2513241) 2354 0 R (id2513268) 2356 0 R (id2513298) 2358 0 R (id2513323) 2360 0 R (id2513350) 2362 0 R (id2513386) 2364 0 R (id2513422) 2366 0 R (id2513449) 2368 0 R (id2513476) 2370 0 R (id2513521) 2372 0 R (id2513562) 2375 0 R (id2513572) 2377 0 R (id2513574) 2379 0 R (id2513730) 2385 0 R (id2513739) 2386 0 R (id2513764) 2387 0 R (id2513863) 2388 0 R (id2513940) 2393 0 R (id2513966) 2395 0 R (id2513975) 2396 0 R (id2514134) 2402 0 R (id2514187) 2403 0 R (id2514251) 2404 0 R (id2514266) 2409 0 R (id2514466) 2414 0 R (id2514530) 2415 0 R (incremental_zone_transfers) 1386 0 R (internet_drafts) 2374 0 R (ipv6addresses) 1539 0 R (journal) 1382 0 R (lwresd) 1546 0 R (man.arpaname) 2788 0 R (man.ddns-confgen) 2773 0 R (man.dig) 2425 0 R (man.dnssec-checkds) 2473 0 R (man.dnssec-coverage) 2485 0 R (man.dnssec-dsfromkey) 2500 0 R (man.dnssec-keyfromlabel) 2514 0 R (man.dnssec-keygen) 1463 0 R (man.dnssec-revoke) 2561 0 R (man.dnssec-settime) 1464 0 R (man.dnssec-signzone) 2589 0 R (man.dnssec-verify) 2618 0 R (man.genrandom) 2794 0 R (man.host) 2462 0 R (man.isc-hmac-fixup) 2805 0 R (man.named) 2661 0 R (man.named-checkconf) 2629 0 R (man.named-checkzone) 2641 0 R (man.named-journalprint) 2684 0 R (man.nsec3hash) 2817 0 R (man.nsupdate) 2690 0 R (man.rndc) 1341 0 R (man.rndc-confgen) 2761 0 R (man.rndc.conf) 2744 0 R (managed-keys) 1491 0 R (notify) 1361 0 R (options) 1672 0 R (page.1) 950 0 R (page.10) 1338 0 R (page.100) 1943 0 R (page.101) 1961 0 R (page.102) 1975 0 R (page.103) 1992 0 R (page.104) 2003 0 R (page.105) 2009 0 R (page.106) 2013 0 R (page.107) 2023 0 R (page.108) 2029 0 R (page.109) 2036 0 R (page.11) 1346 0 R (page.110) 2046 0 R (page.111) 2058 0 R (page.112) 2066 0 R (page.113) 2074 0 R (page.114) 2078 0 R (page.115) 2087 0 R (page.116) 2095 0 R (page.117) 2107 0 R (page.118) 2114 0 R (page.119) 2122 0 R (page.12) 1353 0 R (page.120) 2128 0 R (page.121) 2139 0 R (page.122) 2143 0 R (page.123) 2147 0 R (page.124) 2158 0 R (page.125) 2162 0 R (page.126) 2169 0 R (page.127) 2180 0 R (page.128) 2239 0 R (page.129) 2295 0 R (page.13) 1359 0 R (page.130) 2349 0 R (page.131) 2384 0 R (page.132) 2392 0 R (page.133) 2401 0 R (page.134) 2408 0 R (page.135) 2413 0 R (page.136) 2419 0 R (page.137) 2423 0 R (page.138) 2432 0 R (page.139) 2439 0 R (page.14) 1381 0 R (page.140) 2444 0 R (page.141) 2448 0 R (page.142) 2452 0 R (page.143) 2461 0 R (page.144) 2469 0 R (page.145) 2481 0 R (page.146) 2492 0 R (page.147) 2499 0 R (page.148) 2508 0 R (page.149) 2520 0 R (page.15) 1394 0 R (page.150) 2526 0 R (page.151) 2533 0 R (page.152) 2543 0 R (page.153) 2547 0 R (page.154) 2552 0 R (page.155) 2558 0 R (page.156) 2569 0 R (page.157) 2580 0 R (page.158) 2586 0 R (page.159) 2597 0 R (page.16) 1400 0 R (page.160) 2601 0 R (page.161) 2605 0 R (page.162) 2609 0 R (page.163) 2616 0 R (page.164) 2626 0 R (page.165) 2637 0 R (page.166) 2649 0 R (page.167) 2653 0 R (page.168) 2660 0 R (page.169) 2670 0 R (page.17) 1404 0 R (page.170) 2674 0 R (page.171) 2681 0 R (page.172) 2695 0 R (page.173) 2701 0 R (page.174) 2706 0 R (page.175) 2712 0 R (page.176) 2720 0 R (page.177) 2728 0 R (page.178) 2732 0 R (page.179) 2736 0 R (page.18) 1409 0 R (page.180) 2742 0 R (page.181) 2752 0 R (page.182) 2758 0 R (page.183) 2769 0 R (page.184) 2779 0 R (page.185) 2787 0 R (page.186) 2802 0 R (page.187) 2816 0 R (page.19) 1419 0 R (page.2) 974 0 R (page.20) 1428 0 R (page.21) 1435 0 R (page.22) 1441 0 R (page.23) 1445 0 R (page.24) 1455 0 R (page.25) 1468 0 R (page.26) 1476 0 R (page.27) 1486 0 R (page.28) 1495 0 R (page.29) 1501 0 R (page.3) 1275 0 R (page.30) 1507 0 R (page.31) 1513 0 R (page.32) 1522 0 R (page.33) 1528 0 R (page.34) 1534 0 R (page.35) 1543 0 R (page.36) 1550 0 R (page.37) 1555 0 R (page.38) 1565 0 R (page.39) 1569 0 R (page.4) 1286 0 R (page.40) 1576 0 R (page.41) 1585 0 R (page.42) 1593 0 R (page.43) 1602 0 R (page.44) 1614 0 R (page.45) 1620 0 R (page.46) 1626 0 R (page.47) 1632 0 R (page.48) 1636 0 R (page.49) 1642 0 R (page.5) 1293 0 R (page.50) 1648 0 R (page.51) 1659 0 R (page.52) 1663 0 R (page.53) 1667 0 R (page.54) 1671 0 R (page.55) 1677 0 R (page.56) 1681 0 R (page.57) 1687 0 R (page.58) 1692 0 R (page.59) 1697 0 R (page.6) 1305 0 R (page.60) 1703 0 R (page.61) 1710 0 R (page.62) 1720 0 R (page.63) 1724 0 R (page.64) 1728 0 R (page.65) 1732 0 R (page.66) 1742 0 R (page.67) 1749 0 R (page.68) 1757 0 R (page.69) 1762 0 R (page.7) 1311 0 R (page.70) 1766 0 R (page.71) 1770 0 R (page.72) 1776 0 R (page.73) 1785 0 R (page.74) 1790 0 R (page.75) 1798 0 R (page.76) 1803 0 R (page.77) 1810 0 R (page.78) 1815 0 R (page.79) 1823 0 R (page.8) 1319 0 R (page.80) 1830 0 R (page.81) 1834 0 R (page.82) 1838 0 R (page.83) 1842 0 R (page.84) 1848 0 R (page.85) 1854 0 R (page.86) 1858 0 R (page.87) 1863 0 R (page.88) 1867 0 R (page.89) 1872 0 R (page.9) 1328 0 R (page.90) 1877 0 R (page.91) 1890 0 R (page.92) 1898 0 R (page.93) 1903 0 R (page.94) 1907 0 R (page.95) 1911 0 R (page.96) 1915 0 R (page.97) 1920 0 R (page.98) 1928 0 R (page.99) 1932 0 R (page.i) 984 0 R (page.ii) 1039 0 R (page.iii) 1103 0 R (page.iv) 1166 0 R (page.v) 1228 0 R (pkcs11) 1496 0 R (proposed_standards) 1390 0 R (query_address) 1758 0 R (rfc5011.support) 1487 0 R (rfcs) 1271 0 R (rndc) 1598 0 R (root_delegation_only) 1939 0 R (rrset_ordering) 1324 0 R (sample_configuration) 1313 0 R (section*.10) 2308 0 R (section*.100) 2633 0 R (section*.101) 2638 0 R (section*.102) 2639 0 R (section*.103) 2640 0 R (section*.104) 2642 0 R (section*.105) 2643 0 R (section*.106) 2644 0 R (section*.107) 2645 0 R (section*.108) 2654 0 R (section*.109) 2655 0 R (section*.11) 2318 0 R (section*.110) 2656 0 R (section*.111) 2662 0 R (section*.112) 2663 0 R (section*.113) 2664 0 R (section*.114) 2665 0 R (section*.115) 2675 0 R (section*.116) 2676 0 R (section*.117) 2677 0 R (section*.118) 2682 0 R (section*.119) 2683 0 R (section*.12) 2338 0 R (section*.120) 2685 0 R (section*.121) 2686 0 R (section*.122) 2687 0 R (section*.123) 2688 0 R (section*.124) 2689 0 R (section*.125) 2691 0 R (section*.126) 2696 0 R (section*.127) 2697 0 R (section*.128) 2702 0 R (section*.129) 2707 0 R (section*.13) 2350 0 R (section*.130) 2713 0 R (section*.131) 2714 0 R (section*.132) 2715 0 R (section*.133) 2716 0 R (section*.134) 2721 0 R (section*.135) 2722 0 R (section*.136) 2723 0 R (section*.137) 2724 0 R (section*.138) 2737 0 R (section*.139) 2738 0 R (section*.14) 2376 0 R (section*.140) 2743 0 R (section*.141) 2745 0 R (section*.142) 2746 0 R (section*.143) 2747 0 R (section*.144) 2753 0 R (section*.145) 2754 0 R (section*.146) 2759 0 R (section*.147) 2760 0 R (section*.148) 2762 0 R (section*.149) 2763 0 R (section*.15) 2426 0 R (section*.150) 2764 0 R (section*.151) 2765 0 R (section*.152) 2770 0 R (section*.153) 2771 0 R (section*.154) 2772 0 R (section*.155) 2774 0 R (section*.156) 2775 0 R (section*.157) 2780 0 R (section*.158) 2781 0 R (section*.159) 2782 0 R (section*.16) 2427 0 R (section*.160) 2783 0 R (section*.161) 2789 0 R (section*.162) 2790 0 R (section*.163) 2791 0 R (section*.164) 2792 0 R (section*.165) 2793 0 R (section*.166) 2795 0 R (section*.167) 2796 0 R (section*.168) 2797 0 R (section*.169) 2798 0 R (section*.17) 2428 0 R (section*.170) 2803 0 R (section*.171) 2804 0 R (section*.172) 2806 0 R (section*.173) 2807 0 R (section*.174) 2808 0 R (section*.175) 2809 0 R (section*.176) 2810 0 R (section*.177) 2811 0 R (section*.178) 2818 0 R (section*.179) 2819 0 R (section*.18) 2433 0 R (section*.180) 2820 0 R (section*.181) 2821 0 R (section*.182) 2822 0 R (section*.183) 2823 0 R (section*.19) 2434 0 R (section*.2) 2174 0 R (section*.20) 2440 0 R (section*.21) 2453 0 R (section*.22) 2454 0 R (section*.23) 2455 0 R (section*.24) 2456 0 R (section*.25) 2457 0 R (section*.26) 2463 0 R (section*.27) 2464 0 R (section*.28) 2465 0 R (section*.29) 2470 0 R (section*.3) 2181 0 R (section*.30) 2471 0 R (section*.31) 2472 0 R (section*.32) 2474 0 R (section*.33) 2475 0 R (section*.34) 2476 0 R (section*.35) 2482 0 R (section*.36) 2483 0 R (section*.37) 2484 0 R (section*.38) 2486 0 R (section*.39) 2487 0 R (section*.4) 2189 0 R (section*.40) 2488 0 R (section*.41) 2493 0 R (section*.42) 2494 0 R (section*.43) 2495 0 R (section*.44) 2501 0 R (section*.45) 2502 0 R (section*.46) 2503 0 R (section*.47) 2504 0 R (section*.48) 2509 0 R (section*.49) 2510 0 R (section*.5) 2214 0 R (section*.50) 2511 0 R (section*.51) 2512 0 R (section*.52) 2513 0 R (section*.53) 2515 0 R (section*.54) 2516 0 R (section*.55) 2521 0 R (section*.56) 2522 0 R (section*.57) 2527 0 R (section*.58) 2528 0 R (section*.59) 2534 0 R (section*.6) 2226 0 R (section*.60) 2535 0 R (section*.61) 2536 0 R (section*.62) 2537 0 R (section*.63) 2538 0 R (section*.64) 2539 0 R (section*.65) 2548 0 R (section*.66) 2553 0 R (section*.67) 2554 0 R (section*.68) 2559 0 R (section*.69) 2560 0 R (section*.7) 2240 0 R (section*.70) 2562 0 R (section*.71) 2563 0 R (section*.72) 2564 0 R (section*.73) 2565 0 R (section*.74) 2570 0 R (section*.75) 2571 0 R (section*.76) 2572 0 R (section*.77) 2573 0 R (section*.78) 2574 0 R (section*.79) 2575 0 R (section*.8) 2278 0 R (section*.80) 2581 0 R (section*.81) 2582 0 R (section*.82) 2587 0 R (section*.83) 2588 0 R (section*.84) 2590 0 R (section*.85) 2591 0 R (section*.86) 2592 0 R (section*.87) 2593 0 R (section*.88) 2610 0 R (section*.89) 2611 0 R (section*.9) 2296 0 R (section*.90) 2617 0 R (section*.91) 2619 0 R (section*.92) 2620 0 R (section*.93) 2621 0 R (section*.94) 2622 0 R (section*.95) 2627 0 R (section*.96) 2628 0 R (section*.97) 2630 0 R (section*.98) 2631 0 R (section*.99) 2632 0 R (section.1.1) 10 0 R (section.1.2) 14 0 R (section.1.3) 18 0 R (section.1.4) 22 0 R (section.2.1) 70 0 R (section.2.2) 74 0 R (section.2.3) 78 0 R (section.2.4) 82 0 R (section.2.5) 86 0 R (section.3.1) 94 0 R (section.3.2) 106 0 R (section.3.3) 110 0 R (section.4.1) 134 0 R (section.4.10) 274 0 R (section.4.11) 286 0 R (section.4.12) 338 0 R (section.4.2) 138 0 R (section.4.3) 146 0 R (section.4.4) 150 0 R (section.4.5) 158 0 R (section.4.6) 194 0 R (section.4.7) 198 0 R (section.4.8) 202 0 R (section.4.9) 218 0 R (section.5.1) 354 0 R (section.5.2) 358 0 R (section.6.1) 366 0 R (section.6.2) 394 0 R (section.6.3) 622 0 R (section.6.4) 678 0 R (section.7.1) 714 0 R (section.7.2) 718 0 R (section.7.3) 730 0 R (section.8.1) 738 0 R (section.8.2) 746 0 R (section.8.3) 750 0 R (section.A.1) 758 0 R (section.A.2) 766 0 R (section.A.3) 774 0 R (section.A.4) 790 0 R (section.B.1) 850 0 R (section.B.10) 886 0 R (section.B.11) 890 0 R (section.B.12) 894 0 R (section.B.13) 898 0 R (section.B.14) 902 0 R (section.B.15) 906 0 R (section.B.16) 910 0 R (section.B.17) 914 0 R (section.B.18) 918 0 R (section.B.19) 922 0 R (section.B.2) 854 0 R (section.B.20) 926 0 R (section.B.21) 930 0 R (section.B.22) 934 0 R (section.B.23) 938 0 R (section.B.24) 942 0 R (section.B.3) 858 0 R (section.B.4) 862 0 R (section.B.5) 866 0 R (section.B.6) 870 0 R (section.B.7) 874 0 R (section.B.8) 878 0 R (section.B.9) 882 0 R (server_resource_limits) 1779 0 R (server_statement_definition_and_usage) 1716 0 R (server_statement_grammar) 1868 0 R (statistics) 2079 0 R (statistics_counters) 2088 0 R (statschannels) 1879 0 R (statsfile) 1683 0 R (subsection.1.4.1) 26 0 R (subsection.1.4.2) 30 0 R (subsection.1.4.3) 34 0 R (subsection.1.4.4) 38 0 R (subsection.1.4.5) 54 0 R (subsection.1.4.6) 62 0 R (subsection.3.1.1) 98 0 R (subsection.3.1.2) 102 0 R (subsection.3.3.1) 114 0 R (subsection.3.3.2) 126 0 R (subsection.4.10.1) 278 0 R (subsection.4.10.2) 282 0 R (subsection.4.11.1) 290 0 R (subsection.4.11.2) 306 0 R (subsection.4.11.3) 322 0 R (subsection.4.11.4) 326 0 R (subsection.4.11.5) 330 0 R (subsection.4.11.6) 334 0 R (subsection.4.12.1) 342 0 R (subsection.4.12.2) 346 0 R (subsection.4.2.1) 142 0 R (subsection.4.4.1) 154 0 R (subsection.4.5.1) 162 0 R (subsection.4.5.2) 174 0 R (subsection.4.5.3) 178 0 R (subsection.4.5.4) 182 0 R (subsection.4.5.5) 186 0 R (subsection.4.5.6) 190 0 R (subsection.4.8.1) 206 0 R (subsection.4.8.2) 210 0 R (subsection.4.8.3) 214 0 R (subsection.4.9.1) 222 0 R (subsection.4.9.10) 258 0 R (subsection.4.9.11) 262 0 R (subsection.4.9.12) 266 0 R (subsection.4.9.13) 270 0 R (subsection.4.9.2) 226 0 R (subsection.4.9.3) 230 0 R (subsection.4.9.4) 234 0 R (subsection.4.9.5) 238 0 R (subsection.4.9.6) 242 0 R (subsection.4.9.7) 246 0 R (subsection.4.9.8) 250 0 R (subsection.4.9.9) 254 0 R (subsection.6.1.1) 370 0 R (subsection.6.1.2) 382 0 R (subsection.6.2.1) 398 0 R (subsection.6.2.10) 434 0 R (subsection.6.2.11) 450 0 R (subsection.6.2.12) 454 0 R (subsection.6.2.13) 458 0 R (subsection.6.2.14) 462 0 R (subsection.6.2.15) 466 0 R (subsection.6.2.16) 470 0 R (subsection.6.2.17) 558 0 R (subsection.6.2.18) 562 0 R (subsection.6.2.19) 566 0 R (subsection.6.2.2) 402 0 R (subsection.6.2.20) 570 0 R (subsection.6.2.21) 574 0 R (subsection.6.2.22) 578 0 R (subsection.6.2.23) 582 0 R (subsection.6.2.24) 586 0 R (subsection.6.2.25) 590 0 R (subsection.6.2.26) 594 0 R (subsection.6.2.27) 598 0 R (subsection.6.2.28) 602 0 R (subsection.6.2.3) 406 0 R (subsection.6.2.4) 410 0 R (subsection.6.2.5) 414 0 R (subsection.6.2.6) 418 0 R (subsection.6.2.7) 422 0 R (subsection.6.2.8) 426 0 R (subsection.6.2.9) 430 0 R (subsection.6.3.1) 626 0 R (subsection.6.3.2) 638 0 R (subsection.6.3.3) 642 0 R (subsection.6.3.4) 646 0 R (subsection.6.3.5) 650 0 R (subsection.6.3.6) 670 0 R (subsection.6.3.7) 674 0 R (subsection.6.4.1) 686 0 R (subsection.7.2.1) 722 0 R (subsection.7.2.2) 726 0 R (subsection.8.1.1) 742 0 R (subsection.A.1.1) 762 0 R (subsection.A.2.1) 770 0 R (subsection.A.3.1) 778 0 R (subsection.A.3.2) 782 0 R (subsection.A.3.3) 786 0 R (subsection.A.4.1) 794 0 R (subsection.A.4.2) 798 0 R (subsection.A.4.3) 802 0 R (subsection.A.4.4) 806 0 R (subsection.A.4.5) 810 0 R (subsection.A.4.6) 814 0 R (subsection.A.4.7) 842 0 R (subsubsection.1.4.4.1) 42 0 R (subsubsection.1.4.4.2) 46 0 R (subsubsection.1.4.4.3) 50 0 R (subsubsection.1.4.5.1) 58 0 R (subsubsection.3.3.1.1) 118 0 R (subsubsection.3.3.1.2) 122 0 R (subsubsection.4.11.1.1) 294 0 R (subsubsection.4.11.1.2) 298 0 R (subsubsection.4.11.1.3) 302 0 R (subsubsection.4.11.2.1) 310 0 R (subsubsection.4.11.2.2) 314 0 R (subsubsection.4.11.2.3) 318 0 R (subsubsection.4.5.1.1) 166 0 R (subsubsection.4.5.1.2) 170 0 R (subsubsection.6.1.1.1) 374 0 R (subsubsection.6.1.1.2) 378 0 R (subsubsection.6.1.2.1) 386 0 R (subsubsection.6.1.2.2) 390 0 R (subsubsection.6.2.10.1) 438 0 R (subsubsection.6.2.10.2) 442 0 R (subsubsection.6.2.10.3) 446 0 R (subsubsection.6.2.16.1) 474 0 R (subsubsection.6.2.16.10) 510 0 R (subsubsection.6.2.16.11) 514 0 R (subsubsection.6.2.16.12) 518 0 R (subsubsection.6.2.16.13) 522 0 R (subsubsection.6.2.16.14) 526 0 R (subsubsection.6.2.16.15) 530 0 R (subsubsection.6.2.16.16) 534 0 R (subsubsection.6.2.16.17) 538 0 R (subsubsection.6.2.16.18) 542 0 R (subsubsection.6.2.16.19) 546 0 R (subsubsection.6.2.16.2) 478 0 R (subsubsection.6.2.16.20) 550 0 R (subsubsection.6.2.16.21) 554 0 R (subsubsection.6.2.16.3) 482 0 R (subsubsection.6.2.16.4) 486 0 R (subsubsection.6.2.16.5) 490 0 R (subsubsection.6.2.16.6) 494 0 R (subsubsection.6.2.16.7) 498 0 R (subsubsection.6.2.16.8) 502 0 R (subsubsection.6.2.16.9) 506 0 R (subsubsection.6.2.28.1) 606 0 R (subsubsection.6.2.28.2) 610 0 R (subsubsection.6.2.28.3) 614 0 R (subsubsection.6.2.28.4) 618 0 R (subsubsection.6.3.1.1) 630 0 R (subsubsection.6.3.1.2) 634 0 R (subsubsection.6.3.5.1) 654 0 R (subsubsection.6.3.5.2) 658 0 R (subsubsection.6.3.5.3) 662 0 R (subsubsection.6.3.5.4) 666 0 R (subsubsection.6.4.0.1) 682 0 R (subsubsection.6.4.1.1) 690 0 R (subsubsection.6.4.1.2) 694 0 R (subsubsection.6.4.1.3) 698 0 R (subsubsection.6.4.1.4) 702 0 R (subsubsection.6.4.1.5) 706 0 R (subsubsection.A.4.6.1) 818 0 R (subsubsection.A.4.6.2) 822 0 R (subsubsection.A.4.6.3) 826 0 R (subsubsection.A.4.6.4) 830 0 R (subsubsection.A.4.6.5) 834 0 R (subsubsection.A.4.6.6) 838 0 R (table.1.1) 1255 0 R (table.1.2) 1263 0 R (table.3.1) 1322 0 R (table.3.2) 1349 0 R (table.6.1) 1559 0 R (table.6.10) 2019 0 R (table.6.11) 2025 0 R (table.6.12) 2031 0 R (table.6.13) 2039 0 R (table.6.14) 2041 0 R (table.6.15) 2048 0 R (table.6.16) 2051 0 R (table.6.17) 2054 0 R (table.6.18) 2070 0 R (table.6.19) 2081 0 R (table.6.2) 1581 0 R (table.6.20) 2091 0 R (table.6.21) 2099 0 R (table.6.22) 2102 0 R (table.6.23) 2110 0 R (table.6.3) 1589 0 R (table.6.4) 1628 0 R (table.6.5) 1644 0 R (table.6.6) 1705 0 R (table.6.7) 1805 0 R (table.6.8) 1924 0 R (table.6.9) 2005 0 R (the_category_phrase) 1622 0 R (the_sortlist_statement) 1792 0 R (topology) 1791 0 R (trusted-keys) 1891 0 R (tsig) 1405 0 R (tuning) 1806 0 R (types_of_resource_records_and_when_to_use_them) 1270 0 R (view_statement_grammar) 1826 0 R (zone_statement_grammar) 1738 0 R (zone_transfers) 1376 0 R (zonefile_format) 1819 0 R]
+2871 0 obj <<
+/Names [(Access_Control_Lists) 2141 0 R (Bv9ARM.ch01) 1250 0 R (Bv9ARM.ch02) 1294 0 R (Bv9ARM.ch03) 1312 0 R (Bv9ARM.ch04) 1360 0 R (Bv9ARM.ch05) 1553 0 R (Bv9ARM.ch06) 1564 0 R (Bv9ARM.ch07) 2140 0 R (Bv9ARM.ch08) 2165 0 R (Bv9ARM.ch09) 2180 0 R (Bv9ARM.ch10) 2441 0 R (Configuration_File_Grammar) 1592 0 R (DNSSEC) 1430 0 R (Doc-Start) 951 0 R (Setting_TTLs) 2061 0 R (acache) 1301 0 R (access_control) 1752 0 R (acl) 1596 0 R (address_match_lists) 1569 0 R (admin_tools) 1334 0 R (appendix.A) 754 0 R (appendix.B) 846 0 R (bibliography) 2188 0 R (bind9.library) 2397 0 R (boolean_options) 1375 0 R (builtin) 1830 0 R (chapter*.1) 985 0 R (chapter.1) 6 0 R (chapter.2) 66 0 R (chapter.3) 90 0 R (chapter.4) 130 0 R (chapter.5) 350 0 R (chapter.6) 362 0 R (chapter.7) 710 0 R (chapter.8) 734 0 R (cite.RFC1033) 2316 0 R (cite.RFC1034) 2200 0 R (cite.RFC1035) 2202 0 R (cite.RFC1101) 2297 0 R (cite.RFC1123) 2299 0 R (cite.RFC1183) 2259 0 R (cite.RFC1464) 2338 0 R (cite.RFC1535) 2245 0 R (cite.RFC1536) 2247 0 R (cite.RFC1537) 2318 0 R (cite.RFC1591) 2301 0 R (cite.RFC1706) 2261 0 R (cite.RFC1712) 2358 0 R (cite.RFC1713) 2340 0 R (cite.RFC1794) 2342 0 R (cite.RFC1876) 2263 0 R (cite.RFC1912) 2320 0 R (cite.RFC1982) 2249 0 R (cite.RFC1995) 2207 0 R (cite.RFC1996) 2209 0 R (cite.RFC2010) 2322 0 R (cite.RFC2052) 2265 0 R (cite.RFC2065) 2370 0 R (cite.RFC2136) 2211 0 R (cite.RFC2137) 2372 0 R (cite.RFC2163) 2267 0 R (cite.RFC2168) 2269 0 R (cite.RFC2181) 2213 0 R (cite.RFC2219) 2324 0 R (cite.RFC2230) 2271 0 R (cite.RFC2240) 2344 0 R (cite.RFC2308) 2215 0 R (cite.RFC2317) 2303 0 R (cite.RFC2345) 2346 0 R (cite.RFC2352) 2348 0 R (cite.RFC2535) 2374 0 R (cite.RFC2536) 2273 0 R (cite.RFC2537) 2275 0 R (cite.RFC2538) 2277 0 R (cite.RFC2539) 2279 0 R (cite.RFC2540) 2281 0 R (cite.RFC2671) 2217 0 R (cite.RFC2672) 2219 0 R (cite.RFC2673) 2360 0 R (cite.RFC2782) 2283 0 R (cite.RFC2825) 2328 0 R (cite.RFC2826) 2305 0 R (cite.RFC2845) 2221 0 R (cite.RFC2874) 2362 0 R (cite.RFC2915) 2285 0 R (cite.RFC2929) 2307 0 R (cite.RFC2930) 2223 0 R (cite.RFC2931) 2225 0 R (cite.RFC3007) 2227 0 R (cite.RFC3008) 2376 0 R (cite.RFC3071) 2350 0 R (cite.RFC3090) 2378 0 R (cite.RFC3110) 2287 0 R (cite.RFC3123) 2289 0 R (cite.RFC3225) 2233 0 R (cite.RFC3258) 2352 0 R (cite.RFC3445) 2380 0 R (cite.RFC3490) 2330 0 R (cite.RFC3491) 2332 0 R (cite.RFC3492) 2334 0 R (cite.RFC3596) 2291 0 R (cite.RFC3597) 2293 0 R (cite.RFC3645) 2229 0 R (cite.RFC3655) 2382 0 R (cite.RFC3658) 2384 0 R (cite.RFC3755) 2386 0 R (cite.RFC3757) 2388 0 R (cite.RFC3833) 2235 0 R (cite.RFC3845) 2390 0 R (cite.RFC3901) 2354 0 R (cite.RFC4033) 2237 0 R (cite.RFC4034) 2239 0 R (cite.RFC4035) 2241 0 R (cite.RFC4074) 2251 0 R (cite.RFC974) 2204 0 R (cite.id2513652) 2395 0 R (clients-per-query) 2115 0 R (configuration_file_elements) 1565 0 R (controls_statement_definition_and_usage) 1342 0 R (diagnostic_tools) 1282 0 R (dnssec.dynamic.zones) 1449 0 R (dynamic_update) 1370 0 R (dynamic_update_policies) 1377 0 R (dynamic_update_security) 1760 0 R (empty) 1838 0 R (historical_dns_information) 2182 0 R (id2466576) 1251 0 R (id2466600) 1252 0 R (id2467266) 1450 0 R (id2467371) 1455 0 R (id2467408) 1456 0 R (id2467491) 1253 0 R (id2467500) 1254 0 R (id2467740) 1264 0 R (id2467762) 1265 0 R (id2467796) 1266 0 R (id2467880) 1269 0 R (id2467973) 1262 0 R (id2470278) 1276 0 R (id2470370) 1279 0 R (id2470400) 1280 0 R (id2470421) 1281 0 R (id2470451) 1287 0 R (id2470486) 1288 0 R (id2470581) 1289 0 R (id2470615) 1295 0 R (id2470710) 1296 0 R (id2470723) 1297 0 R (id2470748) 1300 0 R (id2470759) 1306 0 R (id2470791) 1314 0 R (id2470807) 1315 0 R (id2470829) 1320 0 R (id2470846) 1321 0 R (id2471184) 1329 0 R (id2471325) 1330 0 R (id2472310) 1347 0 R (id2472322) 1348 0 R (id2472901) 1389 0 R (id2472919) 1395 0 R (id2473284) 1410 0 R (id2473437) 1411 0 R (id2473476) 1412 0 R (id2473494) 1413 0 R (id2473505) 1414 0 R (id2473541) 1420 0 R (id2473598) 1421 0 R (id2473648) 1423 0 R (id2473661) 1424 0 R (id2473847) 1429 0 R (id2473915) 1431 0 R (id2473994) 1436 0 R (id2474144) 1437 0 R (id2475020) 1469 0 R (id2475058) 1470 0 R (id2475070) 1471 0 R (id2475172) 1476 0 R (id2475198) 1477 0 R (id2475208) 1478 0 R (id2475286) 1479 0 R (id2475299) 1480 0 R (id2475336) 1481 0 R (id2475346) 1482 0 R (id2475451) 1488 0 R (id2475474) 1490 0 R (id2475576) 1497 0 R (id2475809) 1502 0 R (id2475878) 1507 0 R (id2475995) 1508 0 R (id2476146) 1514 0 R (id2476154) 1515 0 R (id2476186) 1516 0 R (id2476222) 1517 0 R (id2476270) 1522 0 R (id2476301) 1523 0 R (id2476705) 1528 0 R (id2476750) 1529 0 R (id2476873) 1535 0 R (id2476935) 1537 0 R (id2476956) 1538 0 R (id2477058) 1554 0 R (id2477205) 1566 0 R (id2478170) 1578 0 R (id2478198) 1579 0 R (id2478404) 1584 0 R (id2478419) 1585 0 R (id2478517) 1586 0 R (id2478592) 1593 0 R (id2478996) 1595 0 R (id2479107) 1597 0 R (id2479260) 1603 0 R (id2479620) 1611 0 R (id2479637) 1612 0 R (id2479729) 1613 0 R (id2479752) 1614 0 R (id2479911) 1618 0 R (id2480105) 1623 0 R (id2480157) 1624 0 R (id2480717) 1640 0 R (id2481660) 1646 0 R (id2481722) 1651 0 R (id2482248) 1657 0 R (id2482322) 1658 0 R (id2482386) 1661 0 R (id2482429) 1662 0 R (id2482451) 1667 0 R (id2486214) 1713 0 R (id2488594) 1744 0 R (id2488652) 1746 0 R (id2489190) 1765 0 R (id2490411) 1784 0 R (id2490471) 1790 0 R (id2491030) 1798 0 R (id2491464) 1812 0 R (id2493517) 1856 0 R (id2493643) 1862 0 R (id2494210) 1871 0 R (id2495504) 1893 0 R (id2495674) 1904 0 R (id2495721) 1906 0 R (id2496225) 1911 0 R (id2498138) 1933 0 R (id2498146) 1934 0 R (id2498151) 1935 0 R (id2498617) 1946 0 R (id2498718) 1947 0 R (id2500888) 2016 0 R (id2501552) 2027 0 R (id2501638) 2028 0 R (id2501658) 2031 0 R (id2501827) 2037 0 R (id2503065) 2043 0 R (id2503193) 2049 0 R (id2503351) 2050 0 R (id2503645) 2052 0 R (id2503782) 2054 0 R (id2503800) 2059 0 R (id2504341) 2062 0 R (id2504466) 2064 0 R (id2504481) 2065 0 R (id2504593) 2071 0 R (id2504615) 2072 0 R (id2504631) 2073 0 R (id2504692) 2074 0 R (id2504761) 2080 0 R (id2504797) 2081 0 R (id2504873) 2082 0 R (id2505384) 2093 0 R (id2505819) 2101 0 R (id2505825) 2102 0 R (id2507457) 2109 0 R (id2507463) 2110 0 R (id2507908) 2112 0 R (id2507981) 2113 0 R (id2508930) 2120 0 R (id2508962) 2121 0 R (id2509371) 2131 0 R (id2509598) 2149 0 R (id2509680) 2150 0 R (id2509739) 2151 0 R (id2509819) 2166 0 R (id2509825) 2167 0 R (id2509836) 2168 0 R (id2509853) 2169 0 R (id2509984) 2181 0 R (id2510292) 2187 0 R (id2510480) 2192 0 R (id2510482) 2198 0 R (id2510490) 2203 0 R (id2510582) 2199 0 R (id2510605) 2201 0 R (id2510642) 2212 0 R (id2510668) 2214 0 R (id2510694) 2206 0 R (id2510718) 2208 0 R (id2510742) 2210 0 R (id2510797) 2216 0 R (id2510824) 2218 0 R (id2510851) 2220 0 R (id2510913) 2222 0 R (id2510942) 2224 0 R (id2510972) 2226 0 R (id2510999) 2228 0 R (id2511074) 2231 0 R (id2511081) 2232 0 R (id2511108) 2234 0 R (id2511144) 2236 0 R (id2511209) 2238 0 R (id2511274) 2240 0 R (id2511339) 2243 0 R (id2511348) 2244 0 R (id2511373) 2246 0 R (id2511442) 2248 0 R (id2511477) 2250 0 R (id2511517) 2257 0 R (id2511523) 2258 0 R (id2511580) 2260 0 R (id2511618) 2268 0 R (id2511653) 2262 0 R (id2511776) 2264 0 R (id2511814) 2266 0 R (id2511840) 2270 0 R (id2511865) 2272 0 R (id2511960) 2274 0 R (id2511987) 2276 0 R (id2512026) 2278 0 R (id2512056) 2280 0 R (id2512086) 2282 0 R (id2512129) 2284 0 R (id2512162) 2286 0 R (id2512188) 2288 0 R (id2512212) 2290 0 R (id2512269) 2292 0 R (id2512294) 2295 0 R (id2512301) 2296 0 R (id2512327) 2298 0 R (id2512349) 2300 0 R (id2512373) 2302 0 R (id2512419) 2304 0 R (id2512442) 2306 0 R (id2512492) 2314 0 R (id2512500) 2315 0 R (id2512523) 2317 0 R (id2512550) 2319 0 R (id2512577) 2321 0 R (id2512613) 2323 0 R (id2512653) 2326 0 R (id2512659) 2327 0 R (id2512759) 2329 0 R (id2512805) 2331 0 R (id2512840) 2333 0 R (id2512867) 2336 0 R (id2512885) 2337 0 R (id2512907) 2339 0 R (id2512933) 2341 0 R (id2512958) 2343 0 R (id2512982) 2345 0 R (id2513028) 2347 0 R (id2513051) 2349 0 R (id2513078) 2351 0 R (id2513104) 2353 0 R (id2513141) 2356 0 R (id2513147) 2357 0 R (id2513205) 2359 0 R (id2513232) 2361 0 R (id2513268) 2368 0 R (id2513280) 2369 0 R (id2513319) 2371 0 R (id2513346) 2373 0 R (id2513376) 2375 0 R (id2513401) 2377 0 R (id2513428) 2379 0 R (id2513464) 2381 0 R (id2513500) 2383 0 R (id2513527) 2385 0 R (id2513554) 2387 0 R (id2513598) 2389 0 R (id2513640) 2392 0 R (id2513650) 2394 0 R (id2513652) 2396 0 R (id2513739) 2402 0 R (id2513749) 2403 0 R (id2513773) 2404 0 R (id2513804) 2405 0 R (id2513881) 2410 0 R (id2513908) 2412 0 R (id2513916) 2413 0 R (id2514075) 2418 0 R (id2514129) 2419 0 R (id2514261) 2420 0 R (id2514276) 2425 0 R (id2514544) 2431 0 R (id2514676) 2432 0 R (incremental_zone_transfers) 1386 0 R (internet_drafts) 2391 0 R (ipv6addresses) 1539 0 R (journal) 1382 0 R (lwresd) 1555 0 R (man.arpaname) 2809 0 R (man.ddns-confgen) 2794 0 R (man.dig) 2442 0 R (man.dnssec-checkds) 2490 0 R (man.dnssec-coverage) 2501 0 R (man.dnssec-dsfromkey) 2517 0 R (man.dnssec-keyfromlabel) 2535 0 R (man.dnssec-keygen) 1463 0 R (man.dnssec-revoke) 2582 0 R (man.dnssec-settime) 1464 0 R (man.dnssec-signzone) 2610 0 R (man.dnssec-verify) 2638 0 R (man.genrandom) 2815 0 R (man.host) 2479 0 R (man.isc-hmac-fixup) 2826 0 R (man.named) 2682 0 R (man.named-checkconf) 2650 0 R (man.named-checkzone) 2662 0 R (man.named-journalprint) 2705 0 R (man.nsec3hash) 2837 0 R (man.nsupdate) 2711 0 R (man.rndc) 1341 0 R (man.rndc-confgen) 2782 0 R (man.rndc.conf) 2765 0 R (managed-keys) 1491 0 R (notify) 1361 0 R (options) 1681 0 R (page.1) 950 0 R (page.10) 1338 0 R (page.100) 1932 0 R (page.101) 1940 0 R (page.102) 1944 0 R (page.103) 1956 0 R (page.104) 1974 0 R (page.105) 1988 0 R (page.106) 2004 0 R (page.107) 2015 0 R (page.108) 2021 0 R (page.109) 2026 0 R (page.11) 1346 0 R (page.110) 2036 0 R (page.111) 2042 0 R (page.112) 2048 0 R (page.113) 2058 0 R (page.114) 2070 0 R (page.115) 2079 0 R (page.116) 2087 0 R (page.117) 2091 0 R (page.118) 2099 0 R (page.119) 2107 0 R (page.12) 1353 0 R (page.120) 2119 0 R (page.121) 2127 0 R (page.122) 2135 0 R (page.123) 2139 0 R (page.124) 2145 0 R (page.125) 2155 0 R (page.126) 2159 0 R (page.127) 2164 0 R (page.128) 2175 0 R (page.129) 2179 0 R (page.13) 1359 0 R (page.130) 2186 0 R (page.131) 2196 0 R (page.132) 2255 0 R (page.133) 2312 0 R (page.134) 2366 0 R (page.135) 2401 0 R (page.136) 2409 0 R (page.137) 2417 0 R (page.138) 2424 0 R (page.139) 2430 0 R (page.14) 1381 0 R (page.140) 2436 0 R (page.141) 2440 0 R (page.142) 2449 0 R (page.143) 2455 0 R (page.144) 2460 0 R (page.145) 2465 0 R (page.146) 2469 0 R (page.147) 2477 0 R (page.148) 2486 0 R (page.149) 2496 0 R (page.15) 1394 0 R (page.150) 2508 0 R (page.151) 2515 0 R (page.152) 2525 0 R (page.153) 2534 0 R (page.154) 2543 0 R (page.155) 2548 0 R (page.156) 2554 0 R (page.157) 2564 0 R (page.158) 2568 0 R (page.159) 2573 0 R (page.16) 1399 0 R (page.160) 2581 0 R (page.161) 2592 0 R (page.162) 2600 0 R (page.163) 2607 0 R (page.164) 2618 0 R (page.165) 2622 0 R (page.166) 2626 0 R (page.167) 2630 0 R (page.168) 2637 0 R (page.169) 2647 0 R (page.17) 1404 0 R (page.170) 2658 0 R (page.171) 2670 0 R (page.172) 2674 0 R (page.173) 2681 0 R (page.174) 2690 0 R (page.175) 2695 0 R (page.176) 2702 0 R (page.177) 2716 0 R (page.178) 2722 0 R (page.179) 2727 0 R (page.18) 1409 0 R (page.180) 2731 0 R (page.181) 2740 0 R (page.182) 2748 0 R (page.183) 2753 0 R (page.184) 2757 0 R (page.185) 2762 0 R (page.186) 2772 0 R (page.187) 2778 0 R (page.188) 2790 0 R (page.189) 2799 0 R (page.19) 1419 0 R (page.190) 2807 0 R (page.191) 2822 0 R (page.192) 2834 0 R (page.2) 977 0 R (page.20) 1428 0 R (page.21) 1435 0 R (page.22) 1441 0 R (page.23) 1445 0 R (page.24) 1454 0 R (page.25) 1468 0 R (page.26) 1475 0 R (page.27) 1486 0 R (page.28) 1495 0 R (page.29) 1501 0 R (page.3) 1275 0 R (page.30) 1506 0 R (page.31) 1513 0 R (page.32) 1521 0 R (page.33) 1527 0 R (page.34) 1534 0 R (page.35) 1543 0 R (page.36) 1547 0 R (page.37) 1552 0 R (page.38) 1559 0 R (page.39) 1563 0 R (page.4) 1286 0 R (page.40) 1573 0 R (page.41) 1577 0 R (page.42) 1583 0 R (page.43) 1591 0 R (page.44) 1602 0 R (page.45) 1610 0 R (page.46) 1622 0 R (page.47) 1628 0 R (page.48) 1632 0 R (page.49) 1639 0 R (page.5) 1293 0 R (page.50) 1645 0 R (page.51) 1650 0 R (page.52) 1656 0 R (page.53) 1666 0 R (page.54) 1671 0 R (page.55) 1676 0 R (page.56) 1680 0 R (page.57) 1685 0 R (page.58) 1689 0 R (page.59) 1693 0 R (page.6) 1305 0 R (page.60) 1700 0 R (page.61) 1706 0 R (page.62) 1712 0 R (page.63) 1718 0 R (page.64) 1726 0 R (page.65) 1732 0 R (page.66) 1736 0 R (page.67) 1741 0 R (page.68) 1751 0 R (page.69) 1757 0 R (page.7) 1311 0 R (page.70) 1764 0 R (page.71) 1769 0 R (page.72) 1774 0 R (page.73) 1779 0 R (page.74) 1783 0 R (page.75) 1789 0 R (page.76) 1797 0 R (page.77) 1803 0 R (page.78) 1810 0 R (page.79) 1818 0 R (page.8) 1319 0 R (page.80) 1824 0 R (page.81) 1828 0 R (page.82) 1837 0 R (page.83) 1842 0 R (page.84) 1846 0 R (page.85) 1851 0 R (page.86) 1855 0 R (page.87) 1861 0 R (page.88) 1866 0 R (page.89) 1870 0 R (page.9) 1328 0 R (page.90) 1875 0 R (page.91) 1880 0 R (page.92) 1885 0 R (page.93) 1890 0 R (page.94) 1902 0 R (page.95) 1910 0 R (page.96) 1915 0 R (page.97) 1920 0 R (page.98) 1924 0 R (page.99) 1928 0 R (page.i) 984 0 R (page.ii) 1039 0 R (page.iii) 1103 0 R (page.iv) 1166 0 R (page.v) 1228 0 R (pkcs11) 1496 0 R (proposed_standards) 1390 0 R (query_address) 1770 0 R (rfc5011.support) 1487 0 R (rfcs) 1271 0 R (rndc) 1606 0 R (root_delegation_only) 1952 0 R (rrset_ordering) 1324 0 R (sample_configuration) 1313 0 R (section*.10) 2325 0 R (section*.100) 2654 0 R (section*.101) 2659 0 R (section*.102) 2660 0 R (section*.103) 2661 0 R (section*.104) 2663 0 R (section*.105) 2664 0 R (section*.106) 2665 0 R (section*.107) 2666 0 R (section*.108) 2675 0 R (section*.109) 2676 0 R (section*.11) 2335 0 R (section*.110) 2677 0 R (section*.111) 2683 0 R (section*.112) 2684 0 R (section*.113) 2685 0 R (section*.114) 2686 0 R (section*.115) 2696 0 R (section*.116) 2697 0 R (section*.117) 2698 0 R (section*.118) 2703 0 R (section*.119) 2704 0 R (section*.12) 2355 0 R (section*.120) 2706 0 R (section*.121) 2707 0 R (section*.122) 2708 0 R (section*.123) 2709 0 R (section*.124) 2710 0 R (section*.125) 2712 0 R (section*.126) 2717 0 R (section*.127) 2718 0 R (section*.128) 2723 0 R (section*.129) 2732 0 R (section*.13) 2367 0 R (section*.130) 2733 0 R (section*.131) 2734 0 R (section*.132) 2735 0 R (section*.133) 2741 0 R (section*.134) 2742 0 R (section*.135) 2743 0 R (section*.136) 2744 0 R (section*.137) 2749 0 R (section*.138) 2758 0 R (section*.139) 2763 0 R (section*.14) 2393 0 R (section*.140) 2764 0 R (section*.141) 2766 0 R (section*.142) 2767 0 R (section*.143) 2768 0 R (section*.144) 2773 0 R (section*.145) 2779 0 R (section*.146) 2780 0 R (section*.147) 2781 0 R (section*.148) 2783 0 R (section*.149) 2784 0 R (section*.15) 2443 0 R (section*.150) 2785 0 R (section*.151) 2786 0 R (section*.152) 2791 0 R (section*.153) 2792 0 R (section*.154) 2793 0 R (section*.155) 2795 0 R (section*.156) 2800 0 R (section*.157) 2801 0 R (section*.158) 2802 0 R (section*.159) 2803 0 R (section*.16) 2444 0 R (section*.160) 2808 0 R (section*.161) 2810 0 R (section*.162) 2811 0 R (section*.163) 2812 0 R (section*.164) 2813 0 R (section*.165) 2814 0 R (section*.166) 2816 0 R (section*.167) 2817 0 R (section*.168) 2818 0 R (section*.169) 2823 0 R (section*.17) 2445 0 R (section*.170) 2824 0 R (section*.171) 2825 0 R (section*.172) 2827 0 R (section*.173) 2828 0 R (section*.174) 2829 0 R (section*.175) 2830 0 R (section*.176) 2835 0 R (section*.177) 2836 0 R (section*.178) 2838 0 R (section*.179) 2839 0 R (section*.18) 2450 0 R (section*.180) 2840 0 R (section*.181) 2841 0 R (section*.182) 2842 0 R (section*.183) 2843 0 R (section*.19) 2451 0 R (section*.2) 2191 0 R (section*.20) 2456 0 R (section*.21) 2470 0 R (section*.22) 2471 0 R (section*.23) 2472 0 R (section*.24) 2473 0 R (section*.25) 2478 0 R (section*.26) 2480 0 R (section*.27) 2481 0 R (section*.28) 2482 0 R (section*.29) 2487 0 R (section*.3) 2197 0 R (section*.30) 2488 0 R (section*.31) 2489 0 R (section*.32) 2491 0 R (section*.33) 2492 0 R (section*.34) 2497 0 R (section*.35) 2498 0 R (section*.36) 2499 0 R (section*.37) 2500 0 R (section*.38) 2502 0 R (section*.39) 2503 0 R (section*.4) 2205 0 R (section*.40) 2504 0 R (section*.41) 2509 0 R (section*.42) 2510 0 R (section*.43) 2516 0 R (section*.44) 2518 0 R (section*.45) 2519 0 R (section*.46) 2520 0 R (section*.47) 2521 0 R (section*.48) 2526 0 R (section*.49) 2527 0 R (section*.5) 2230 0 R (section*.50) 2528 0 R (section*.51) 2529 0 R (section*.52) 2530 0 R (section*.53) 2536 0 R (section*.54) 2537 0 R (section*.55) 2538 0 R (section*.56) 2539 0 R (section*.57) 2544 0 R (section*.58) 2549 0 R (section*.59) 2550 0 R (section*.6) 2242 0 R (section*.60) 2555 0 R (section*.61) 2556 0 R (section*.62) 2557 0 R (section*.63) 2558 0 R (section*.64) 2559 0 R (section*.65) 2569 0 R (section*.66) 2574 0 R (section*.67) 2575 0 R (section*.68) 2576 0 R (section*.69) 2577 0 R (section*.7) 2256 0 R (section*.70) 2583 0 R (section*.71) 2584 0 R (section*.72) 2585 0 R (section*.73) 2586 0 R (section*.74) 2587 0 R (section*.75) 2588 0 R (section*.76) 2593 0 R (section*.77) 2594 0 R (section*.78) 2595 0 R (section*.79) 2596 0 R (section*.8) 2294 0 R (section*.80) 2601 0 R (section*.81) 2602 0 R (section*.82) 2608 0 R (section*.83) 2609 0 R (section*.84) 2611 0 R (section*.85) 2612 0 R (section*.86) 2613 0 R (section*.87) 2614 0 R (section*.88) 2631 0 R (section*.89) 2632 0 R (section*.9) 2313 0 R (section*.90) 2633 0 R (section*.91) 2639 0 R (section*.92) 2640 0 R (section*.93) 2641 0 R (section*.94) 2642 0 R (section*.95) 2648 0 R (section*.96) 2649 0 R (section*.97) 2651 0 R (section*.98) 2652 0 R (section*.99) 2653 0 R (section.1.1) 10 0 R (section.1.2) 14 0 R (section.1.3) 18 0 R (section.1.4) 22 0 R (section.2.1) 70 0 R (section.2.2) 74 0 R (section.2.3) 78 0 R (section.2.4) 82 0 R (section.2.5) 86 0 R (section.3.1) 94 0 R (section.3.2) 106 0 R (section.3.3) 110 0 R (section.4.1) 134 0 R (section.4.10) 274 0 R (section.4.11) 286 0 R (section.4.12) 338 0 R (section.4.2) 138 0 R (section.4.3) 146 0 R (section.4.4) 150 0 R (section.4.5) 158 0 R (section.4.6) 194 0 R (section.4.7) 198 0 R (section.4.8) 202 0 R (section.4.9) 218 0 R (section.5.1) 354 0 R (section.5.2) 358 0 R (section.6.1) 366 0 R (section.6.2) 394 0 R (section.6.3) 622 0 R (section.6.4) 678 0 R (section.7.1) 714 0 R (section.7.2) 718 0 R (section.7.3) 730 0 R (section.8.1) 738 0 R (section.8.2) 746 0 R (section.8.3) 750 0 R (section.A.1) 758 0 R (section.A.2) 766 0 R (section.A.3) 774 0 R (section.A.4) 790 0 R (section.B.1) 850 0 R (section.B.10) 886 0 R (section.B.11) 890 0 R (section.B.12) 894 0 R (section.B.13) 898 0 R (section.B.14) 902 0 R (section.B.15) 906 0 R (section.B.16) 910 0 R (section.B.17) 914 0 R (section.B.18) 918 0 R (section.B.19) 922 0 R (section.B.2) 854 0 R (section.B.20) 926 0 R (section.B.21) 930 0 R (section.B.22) 934 0 R (section.B.23) 938 0 R (section.B.24) 942 0 R (section.B.3) 858 0 R (section.B.4) 862 0 R (section.B.5) 866 0 R (section.B.6) 870 0 R (section.B.7) 874 0 R (section.B.8) 878 0 R (section.B.9) 882 0 R (server_resource_limits) 1792 0 R (server_statement_definition_and_usage) 1722 0 R (server_statement_grammar) 1881 0 R (statistics) 2092 0 R (statistics_counters) 2100 0 R (statschannels) 1892 0 R (statsfile) 1696 0 R (subsection.1.4.1) 26 0 R (subsection.1.4.2) 30 0 R (subsection.1.4.3) 34 0 R (subsection.1.4.4) 38 0 R (subsection.1.4.5) 54 0 R (subsection.1.4.6) 62 0 R (subsection.3.1.1) 98 0 R (subsection.3.1.2) 102 0 R (subsection.3.3.1) 114 0 R (subsection.3.3.2) 126 0 R (subsection.4.10.1) 278 0 R (subsection.4.10.2) 282 0 R (subsection.4.11.1) 290 0 R (subsection.4.11.2) 306 0 R (subsection.4.11.3) 322 0 R (subsection.4.11.4) 326 0 R (subsection.4.11.5) 330 0 R (subsection.4.11.6) 334 0 R (subsection.4.12.1) 342 0 R (subsection.4.12.2) 346 0 R (subsection.4.2.1) 142 0 R (subsection.4.4.1) 154 0 R (subsection.4.5.1) 162 0 R (subsection.4.5.2) 174 0 R (subsection.4.5.3) 178 0 R (subsection.4.5.4) 182 0 R (subsection.4.5.5) 186 0 R (subsection.4.5.6) 190 0 R (subsection.4.8.1) 206 0 R (subsection.4.8.2) 210 0 R (subsection.4.8.3) 214 0 R (subsection.4.9.1) 222 0 R (subsection.4.9.10) 258 0 R (subsection.4.9.11) 262 0 R (subsection.4.9.12) 266 0 R (subsection.4.9.13) 270 0 R (subsection.4.9.2) 226 0 R (subsection.4.9.3) 230 0 R (subsection.4.9.4) 234 0 R (subsection.4.9.5) 238 0 R (subsection.4.9.6) 242 0 R (subsection.4.9.7) 246 0 R (subsection.4.9.8) 250 0 R (subsection.4.9.9) 254 0 R (subsection.6.1.1) 370 0 R (subsection.6.1.2) 382 0 R (subsection.6.2.1) 398 0 R (subsection.6.2.10) 434 0 R (subsection.6.2.11) 450 0 R (subsection.6.2.12) 454 0 R (subsection.6.2.13) 458 0 R (subsection.6.2.14) 462 0 R (subsection.6.2.15) 466 0 R (subsection.6.2.16) 470 0 R (subsection.6.2.17) 558 0 R (subsection.6.2.18) 562 0 R (subsection.6.2.19) 566 0 R (subsection.6.2.2) 402 0 R (subsection.6.2.20) 570 0 R (subsection.6.2.21) 574 0 R (subsection.6.2.22) 578 0 R (subsection.6.2.23) 582 0 R (subsection.6.2.24) 586 0 R (subsection.6.2.25) 590 0 R (subsection.6.2.26) 594 0 R (subsection.6.2.27) 598 0 R (subsection.6.2.28) 602 0 R (subsection.6.2.3) 406 0 R (subsection.6.2.4) 410 0 R (subsection.6.2.5) 414 0 R (subsection.6.2.6) 418 0 R (subsection.6.2.7) 422 0 R (subsection.6.2.8) 426 0 R (subsection.6.2.9) 430 0 R (subsection.6.3.1) 626 0 R (subsection.6.3.2) 638 0 R (subsection.6.3.3) 642 0 R (subsection.6.3.4) 646 0 R (subsection.6.3.5) 650 0 R (subsection.6.3.6) 670 0 R (subsection.6.3.7) 674 0 R (subsection.6.4.1) 686 0 R (subsection.7.2.1) 722 0 R (subsection.7.2.2) 726 0 R (subsection.8.1.1) 742 0 R (subsection.A.1.1) 762 0 R (subsection.A.2.1) 770 0 R (subsection.A.3.1) 778 0 R (subsection.A.3.2) 782 0 R (subsection.A.3.3) 786 0 R (subsection.A.4.1) 794 0 R (subsection.A.4.2) 798 0 R (subsection.A.4.3) 802 0 R (subsection.A.4.4) 806 0 R (subsection.A.4.5) 810 0 R (subsection.A.4.6) 814 0 R (subsection.A.4.7) 842 0 R (subsubsection.1.4.4.1) 42 0 R (subsubsection.1.4.4.2) 46 0 R (subsubsection.1.4.4.3) 50 0 R (subsubsection.1.4.5.1) 58 0 R (subsubsection.3.3.1.1) 118 0 R (subsubsection.3.3.1.2) 122 0 R (subsubsection.4.11.1.1) 294 0 R (subsubsection.4.11.1.2) 298 0 R (subsubsection.4.11.1.3) 302 0 R (subsubsection.4.11.2.1) 310 0 R (subsubsection.4.11.2.2) 314 0 R (subsubsection.4.11.2.3) 318 0 R (subsubsection.4.5.1.1) 166 0 R (subsubsection.4.5.1.2) 170 0 R (subsubsection.6.1.1.1) 374 0 R (subsubsection.6.1.1.2) 378 0 R (subsubsection.6.1.2.1) 386 0 R (subsubsection.6.1.2.2) 390 0 R (subsubsection.6.2.10.1) 438 0 R (subsubsection.6.2.10.2) 442 0 R (subsubsection.6.2.10.3) 446 0 R (subsubsection.6.2.16.1) 474 0 R (subsubsection.6.2.16.10) 510 0 R (subsubsection.6.2.16.11) 514 0 R (subsubsection.6.2.16.12) 518 0 R (subsubsection.6.2.16.13) 522 0 R (subsubsection.6.2.16.14) 526 0 R (subsubsection.6.2.16.15) 530 0 R (subsubsection.6.2.16.16) 534 0 R (subsubsection.6.2.16.17) 538 0 R (subsubsection.6.2.16.18) 542 0 R (subsubsection.6.2.16.19) 546 0 R (subsubsection.6.2.16.2) 478 0 R (subsubsection.6.2.16.20) 550 0 R (subsubsection.6.2.16.21) 554 0 R (subsubsection.6.2.16.3) 482 0 R (subsubsection.6.2.16.4) 486 0 R (subsubsection.6.2.16.5) 490 0 R (subsubsection.6.2.16.6) 494 0 R (subsubsection.6.2.16.7) 498 0 R (subsubsection.6.2.16.8) 502 0 R (subsubsection.6.2.16.9) 506 0 R (subsubsection.6.2.28.1) 606 0 R (subsubsection.6.2.28.2) 610 0 R (subsubsection.6.2.28.3) 614 0 R (subsubsection.6.2.28.4) 618 0 R (subsubsection.6.3.1.1) 630 0 R (subsubsection.6.3.1.2) 634 0 R (subsubsection.6.3.5.1) 654 0 R (subsubsection.6.3.5.2) 658 0 R (subsubsection.6.3.5.3) 662 0 R (subsubsection.6.3.5.4) 666 0 R (subsubsection.6.4.0.1) 682 0 R (subsubsection.6.4.1.1) 690 0 R (subsubsection.6.4.1.2) 694 0 R (subsubsection.6.4.1.3) 698 0 R (subsubsection.6.4.1.4) 702 0 R (subsubsection.6.4.1.5) 706 0 R (subsubsection.A.4.6.1) 818 0 R (subsubsection.A.4.6.2) 822 0 R (subsubsection.A.4.6.3) 826 0 R (subsubsection.A.4.6.4) 830 0 R (subsubsection.A.4.6.5) 834 0 R (subsubsection.A.4.6.6) 838 0 R (table.1.1) 1255 0 R (table.1.2) 1263 0 R (table.3.1) 1322 0 R (table.3.2) 1349 0 R (table.6.1) 1567 0 R (table.6.10) 2032 0 R (table.6.11) 2038 0 R (table.6.12) 2044 0 R (table.6.13) 2051 0 R (table.6.14) 2053 0 R (table.6.15) 2060 0 R (table.6.16) 2063 0 R (table.6.17) 2066 0 R (table.6.18) 2083 0 R (table.6.19) 2094 0 R (table.6.2) 1594 0 R (table.6.20) 2103 0 R (table.6.21) 2111 0 R (table.6.22) 2114 0 R (table.6.23) 2122 0 R (table.6.3) 1598 0 R (table.6.4) 1641 0 R (table.6.5) 1652 0 R (table.6.6) 1714 0 R (table.6.7) 1813 0 R (table.6.8) 1936 0 R (table.6.9) 2017 0 R (the_category_phrase) 1634 0 R (the_sortlist_statement) 1804 0 R (topology) 1799 0 R (trusted-keys) 1903 0 R (tsig) 1405 0 R (tuning) 1819 0 R (types_of_resource_records_and_when_to_use_them) 1270 0 R (view_statement_grammar) 1833 0 R (zone_statement_grammar) 1747 0 R (zone_transfers) 1376 0 R (zonefile_format) 1832 0 R]
/Limits [(Access_Control_Lists) (zonefile_format)]
>> endobj
-2851 0 obj <<
-/Kids [2850 0 R]
+2872 0 obj <<
+/Kids [2871 0 R]
>> endobj
-2852 0 obj <<
-/Dests 2851 0 R
+2873 0 obj <<
+/Dests 2872 0 R
>> endobj
-2853 0 obj <<
+2874 0 obj <<
/Type /Catalog
-/Pages 2848 0 R
-/Outlines 2849 0 R
-/Names 2852 0 R
+/Pages 2869 0 R
+/Outlines 2870 0 R
+/Names 2873 0 R
/PageMode /UseOutlines
/OpenAction 945 0 R
>> endobj
-2854 0 obj <<
+2875 0 obj <<
/Author()/Title()/Subject()/Creator(LaTeX with hyperref package)/Producer(pdfeTeX-1.21a)/Keywords()
-/CreationDate (D:20140117011504Z)
+/CreationDate (D:20141120230844Z)
/PTEX.Fullbanner (This is pdfeTeX, Version 3.141592-1.21a-2.2 (Web2C 7.5.4) kpathsea version 3.5.4)
>> endobj
xref
-0 2855
+0 2876
0000000001 65535 f
0000000002 00000 f
0000000003 00000 f
0000000004 00000 f
0000000000 00000 f
0000000009 00000 n
-0000349948 00000 n
-0001233140 00000 n
+0000350003 00000 n
+0001242313 00000 n
0000000054 00000 n
0000000086 00000 n
-0000350075 00000 n
-0001233068 00000 n
+0000350130 00000 n
+0001242241 00000 n
0000000133 00000 n
0000000173 00000 n
-0000350203 00000 n
-0001232982 00000 n
+0000350258 00000 n
+0001242155 00000 n
0000000221 00000 n
0000000273 00000 n
-0000350331 00000 n
-0001232896 00000 n
+0000350386 00000 n
+0001242069 00000 n
0000000321 00000 n
0000000377 00000 n
-0000354617 00000 n
-0001232786 00000 n
+0000354669 00000 n
+0001241959 00000 n
0000000425 00000 n
0000000478 00000 n
-0000354744 00000 n
-0001232712 00000 n
+0000354796 00000 n
+0001241885 00000 n
0000000531 00000 n
0000000572 00000 n
-0000354872 00000 n
-0001232625 00000 n
+0000354924 00000 n
+0001241798 00000 n
0000000625 00000 n
0000000674 00000 n
-0000354999 00000 n
-0001232538 00000 n
+0000355051 00000 n
+0001241711 00000 n
0000000727 00000 n
0000000757 00000 n
-0000359296 00000 n
-0001232414 00000 n
+0000359347 00000 n
+0001241587 00000 n
0000000810 00000 n
0000000861 00000 n
-0000359424 00000 n
-0001232340 00000 n
+0000359475 00000 n
+0001241513 00000 n
0000000919 00000 n
0000000964 00000 n
-0000359552 00000 n
-0001232253 00000 n
+0000359603 00000 n
+0001241426 00000 n
0000001022 00000 n
0000001062 00000 n
-0000359680 00000 n
-0001232179 00000 n
+0000359731 00000 n
+0001241352 00000 n
0000001120 00000 n
0000001162 00000 n
-0000362665 00000 n
-0001232055 00000 n
+0000362716 00000 n
+0001241228 00000 n
0000001215 00000 n
0000001260 00000 n
-0000362793 00000 n
-0001231994 00000 n
+0000362844 00000 n
+0001241167 00000 n
0000001318 00000 n
0000001355 00000 n
-0000362921 00000 n
-0001231920 00000 n
+0000362972 00000 n
+0001241093 00000 n
0000001408 00000 n
0000001463 00000 n
-0000365868 00000 n
-0001231795 00000 n
+0000365919 00000 n
+0001240968 00000 n
0000001509 00000 n
0000001556 00000 n
-0000365996 00000 n
-0001231721 00000 n
+0000366047 00000 n
+0001240894 00000 n
0000001604 00000 n
0000001648 00000 n
-0000366124 00000 n
-0001231634 00000 n
+0000366175 00000 n
+0001240807 00000 n
0000001696 00000 n
0000001735 00000 n
-0000366252 00000 n
-0001231547 00000 n
+0000366303 00000 n
+0001240720 00000 n
0000001783 00000 n
0000001825 00000 n
-0000366379 00000 n
-0001231460 00000 n
+0000366430 00000 n
+0001240633 00000 n
0000001873 00000 n
0000001936 00000 n
-0000367456 00000 n
-0001231386 00000 n
+0000367507 00000 n
+0001240559 00000 n
0000001984 00000 n
0000002034 00000 n
-0000369115 00000 n
-0001231258 00000 n
+0000369165 00000 n
+0001240431 00000 n
0000002080 00000 n
0000002126 00000 n
-0000369242 00000 n
-0001231145 00000 n
+0000369292 00000 n
+0001240318 00000 n
0000002174 00000 n
0000002218 00000 n
-0000369370 00000 n
-0001231069 00000 n
+0000369420 00000 n
+0001240242 00000 n
0000002271 00000 n
0000002323 00000 n
-0000369498 00000 n
-0001230992 00000 n
+0000369548 00000 n
+0001240165 00000 n
0000002377 00000 n
0000002436 00000 n
-0000371947 00000 n
-0001230901 00000 n
+0000371997 00000 n
+0001240074 00000 n
0000002485 00000 n
0000002523 00000 n
-0000375285 00000 n
-0001230784 00000 n
+0000375336 00000 n
+0001239957 00000 n
0000002572 00000 n
0000002618 00000 n
-0000375413 00000 n
-0001230666 00000 n
+0000375464 00000 n
+0001239839 00000 n
0000002672 00000 n
0000002739 00000 n
-0000375541 00000 n
-0001230587 00000 n
+0000375592 00000 n
+0001239760 00000 n
0000002798 00000 n
0000002842 00000 n
-0000375670 00000 n
-0001230508 00000 n
+0000375721 00000 n
+0001239681 00000 n
0000002901 00000 n
0000002949 00000 n
-0000382656 00000 n
-0001230429 00000 n
+0000382706 00000 n
+0001239602 00000 n
0000003003 00000 n
0000003036 00000 n
-0000388281 00000 n
-0001230296 00000 n
+0000388332 00000 n
+0001239469 00000 n
0000003083 00000 n
0000003126 00000 n
-0000388410 00000 n
-0001230217 00000 n
+0000388461 00000 n
+0001239390 00000 n
0000003175 00000 n
0000003205 00000 n
-0000388539 00000 n
-0001230085 00000 n
+0000388590 00000 n
+0001239258 00000 n
0000003254 00000 n
0000003292 00000 n
-0000393048 00000 n
-0001230020 00000 n
+0000393111 00000 n
+0001239193 00000 n
0000003346 00000 n
0000003388 00000 n
-0000393177 00000 n
-0001229927 00000 n
+0000393240 00000 n
+0001239100 00000 n
0000003437 00000 n
0000003496 00000 n
-0000393306 00000 n
-0001229795 00000 n
+0000393369 00000 n
+0001238968 00000 n
0000003545 00000 n
0000003578 00000 n
-0000397225 00000 n
-0001229730 00000 n
+0000397089 00000 n
+0001238903 00000 n
0000003632 00000 n
0000003681 00000 n
-0000400239 00000 n
-0001229598 00000 n
+0000400240 00000 n
+0001238771 00000 n
0000003730 00000 n
0000003758 00000 n
-0000403019 00000 n
-0001229480 00000 n
+0000403186 00000 n
+0001238653 00000 n
0000003812 00000 n
0000003881 00000 n
-0000403148 00000 n
-0001229401 00000 n
+0000403315 00000 n
+0001238574 00000 n
0000003940 00000 n
0000003988 00000 n
-0000403276 00000 n
-0001229322 00000 n
+0000403444 00000 n
+0001238495 00000 n
0000004047 00000 n
0000004092 00000 n
-0000403405 00000 n
-0001229229 00000 n
+0000403573 00000 n
+0001238402 00000 n
0000004146 00000 n
0000004214 00000 n
-0000403534 00000 n
-0001229136 00000 n
+0000403702 00000 n
+0001238309 00000 n
0000004268 00000 n
0000004338 00000 n
-0000407203 00000 n
-0001229043 00000 n
+0000407164 00000 n
+0001238216 00000 n
0000004392 00000 n
0000004455 00000 n
-0000407332 00000 n
-0001228950 00000 n
+0000407293 00000 n
+0001238123 00000 n
0000004509 00000 n
0000004564 00000 n
-0000407460 00000 n
-0001228871 00000 n
+0000407422 00000 n
+0001238044 00000 n
0000004618 00000 n
0000004650 00000 n
-0000407588 00000 n
-0001228778 00000 n
+0000407551 00000 n
+0001237951 00000 n
0000004699 00000 n
0000004727 00000 n
-0000411357 00000 n
-0001228685 00000 n
+0000411410 00000 n
+0001237858 00000 n
0000004776 00000 n
0000004808 00000 n
-0000411486 00000 n
-0001228553 00000 n
+0000411539 00000 n
+0001237726 00000 n
0000004857 00000 n
0000004887 00000 n
-0000411615 00000 n
-0001228474 00000 n
+0000411667 00000 n
+0001237647 00000 n
0000004941 00000 n
0000004982 00000 n
-0000415413 00000 n
-0001228381 00000 n
+0000415569 00000 n
+0001237554 00000 n
0000005036 00000 n
0000005078 00000 n
-0000415542 00000 n
-0001228302 00000 n
+0000415697 00000 n
+0001237475 00000 n
0000005132 00000 n
0000005177 00000 n
-0000420866 00000 n
-0001228169 00000 n
+0000420837 00000 n
+0001237342 00000 n
0000005226 00000 n
0000005294 00000 n
-0000420995 00000 n
-0001228090 00000 n
+0000420966 00000 n
+0001237263 00000 n
0000005348 00000 n
0000005408 00000 n
-0000421124 00000 n
-0001227997 00000 n
+0000424941 00000 n
+0001237170 00000 n
0000005462 00000 n
0000005513 00000 n
-0000425392 00000 n
-0001227904 00000 n
+0000425070 00000 n
+0001237077 00000 n
0000005567 00000 n
0000005621 00000 n
-0000428374 00000 n
-0001227811 00000 n
+0000428031 00000 n
+0001236984 00000 n
0000005675 00000 n
0000005721 00000 n
-0000428503 00000 n
-0001227718 00000 n
+0000428160 00000 n
+0001236891 00000 n
0000005775 00000 n
0000005817 00000 n
-0000428632 00000 n
-0001227625 00000 n
+0000428289 00000 n
+0001236798 00000 n
0000005871 00000 n
0000005922 00000 n
-0000428761 00000 n
-0001227532 00000 n
+0000431355 00000 n
+0001236705 00000 n
0000005976 00000 n
0000006025 00000 n
-0000431520 00000 n
-0001227439 00000 n
+0000431484 00000 n
+0001236612 00000 n
0000006079 00000 n
0000006136 00000 n
-0000431649 00000 n
-0001227346 00000 n
+0000431613 00000 n
+0001236519 00000 n
0000006190 00000 n
0000006245 00000 n
-0000431778 00000 n
-0001227253 00000 n
+0000431742 00000 n
+0001236426 00000 n
0000006300 00000 n
0000006356 00000 n
-0000431906 00000 n
-0001227160 00000 n
+0000431871 00000 n
+0001236333 00000 n
0000006411 00000 n
0000006472 00000 n
-0000432034 00000 n
-0001227067 00000 n
+0000432000 00000 n
+0001236240 00000 n
0000006527 00000 n
0000006573 00000 n
-0000432163 00000 n
-0001226988 00000 n
+0000432129 00000 n
+0001236161 00000 n
0000006628 00000 n
0000006671 00000 n
-0000436027 00000 n
-0001226856 00000 n
+0000435982 00000 n
+0001236029 00000 n
0000006721 00000 n
0000006777 00000 n
-0000436156 00000 n
-0001226777 00000 n
+0000436111 00000 n
+0001235950 00000 n
0000006832 00000 n
0000006878 00000 n
-0000436285 00000 n
-0001226698 00000 n
+0000436240 00000 n
+0001235871 00000 n
0000006933 00000 n
0000006980 00000 n
-0000439687 00000 n
-0001226566 00000 n
+0000439720 00000 n
+0001235739 00000 n
0000007030 00000 n
0000007087 00000 n
-0000439816 00000 n
-0001226448 00000 n
+0000439849 00000 n
+0001235621 00000 n
0000007142 00000 n
0000007182 00000 n
-0000442484 00000 n
-0001226369 00000 n
+0000442360 00000 n
+0001235542 00000 n
0000007242 00000 n
0000007315 00000 n
-0000442613 00000 n
-0001226276 00000 n
+0000444969 00000 n
+0001235449 00000 n
0000007375 00000 n
0000007448 00000 n
-0000445330 00000 n
-0001226197 00000 n
+0000445097 00000 n
+0001235370 00000 n
0000007508 00000 n
0000007565 00000 n
-0000447722 00000 n
-0001226065 00000 n
+0000447471 00000 n
+0001235238 00000 n
0000007620 00000 n
0000007678 00000 n
-0000447851 00000 n
-0001225986 00000 n
+0000447599 00000 n
+0001235159 00000 n
0000007738 00000 n
0000007815 00000 n
-0000447980 00000 n
-0001225893 00000 n
+0000447728 00000 n
+0001235066 00000 n
0000007875 00000 n
0000007952 00000 n
-0000448109 00000 n
-0001225814 00000 n
+0000447857 00000 n
+0001234987 00000 n
0000008012 00000 n
0000008071 00000 n
-0000448238 00000 n
-0001225721 00000 n
+0000450792 00000 n
+0001234894 00000 n
0000008126 00000 n
0000008170 00000 n
-0000450869 00000 n
-0001225628 00000 n
+0000450920 00000 n
+0001234801 00000 n
0000008225 00000 n
0000008265 00000 n
-0000453677 00000 n
-0001225535 00000 n
+0000453671 00000 n
+0001234708 00000 n
0000008320 00000 n
0000008388 00000 n
-0000453806 00000 n
-0001225456 00000 n
+0000453799 00000 n
+0001234629 00000 n
0000008443 00000 n
0000008514 00000 n
-0000457867 00000 n
-0001225338 00000 n
+0000458040 00000 n
+0001234511 00000 n
0000008564 00000 n
0000008611 00000 n
-0000457996 00000 n
-0001225259 00000 n
+0000458168 00000 n
+0001234432 00000 n
0000008666 00000 n
0000008727 00000 n
-0000458125 00000 n
-0001225180 00000 n
+0000458297 00000 n
+0001234353 00000 n
0000008782 00000 n
0000008852 00000 n
-0000460610 00000 n
-0001225047 00000 n
+0000461855 00000 n
+0001234220 00000 n
0000008899 00000 n
0000008952 00000 n
-0000460739 00000 n
-0001224968 00000 n
+0000461984 00000 n
+0001234141 00000 n
0000009001 00000 n
0000009057 00000 n
-0000460868 00000 n
-0001224889 00000 n
+0000462113 00000 n
+0001234062 00000 n
0000009106 00000 n
0000009155 00000 n
-0000465138 00000 n
-0001224756 00000 n
+0000466383 00000 n
+0001233929 00000 n
0000009202 00000 n
0000009254 00000 n
-0000465267 00000 n
-0001224638 00000 n
+0000466512 00000 n
+0001233811 00000 n
0000009303 00000 n
0000009354 00000 n
-0000473691 00000 n
-0001224520 00000 n
+0000474773 00000 n
+0001233693 00000 n
0000009408 00000 n
0000009453 00000 n
-0000473820 00000 n
-0001224441 00000 n
+0000474902 00000 n
+0001233614 00000 n
0000009512 00000 n
0000009546 00000 n
-0000473949 00000 n
-0001224362 00000 n
+0000475031 00000 n
+0001233535 00000 n
0000009605 00000 n
0000009653 00000 n
-0000474078 00000 n
-0001224244 00000 n
+0000477464 00000 n
+0001233417 00000 n
0000009707 00000 n
0000009747 00000 n
-0000476611 00000 n
-0001224165 00000 n
+0000477593 00000 n
+0001233338 00000 n
0000009806 00000 n
0000009840 00000 n
-0000476740 00000 n
-0001224086 00000 n
+0000477722 00000 n
+0001233259 00000 n
0000009899 00000 n
0000009947 00000 n
-0000476869 00000 n
-0001223953 00000 n
+0000480873 00000 n
+0001233126 00000 n
0000009996 00000 n
0000010046 00000 n
-0000480110 00000 n
-0001223874 00000 n
+0000481132 00000 n
+0001233047 00000 n
0000010100 00000 n
0000010147 00000 n
-0000480238 00000 n
-0001223781 00000 n
+0000481261 00000 n
+0001232954 00000 n
0000010201 00000 n
0000010261 00000 n
-0000485595 00000 n
-0001223688 00000 n
+0000486315 00000 n
+0001232861 00000 n
0000010315 00000 n
0000010367 00000 n
-0000485724 00000 n
-0001223595 00000 n
+0000486444 00000 n
+0001232768 00000 n
0000010421 00000 n
0000010486 00000 n
-0000489194 00000 n
-0001223502 00000 n
+0000490537 00000 n
+0001232675 00000 n
0000010540 00000 n
0000010591 00000 n
-0000489323 00000 n
-0001223409 00000 n
+0000490666 00000 n
+0001232582 00000 n
0000010645 00000 n
0000010709 00000 n
-0000489452 00000 n
-0001223316 00000 n
+0000490795 00000 n
+0001232489 00000 n
0000010763 00000 n
0000010810 00000 n
-0000489581 00000 n
-0001223223 00000 n
+0000490924 00000 n
+0001232396 00000 n
0000010864 00000 n
0000010924 00000 n
-0000489709 00000 n
-0001223130 00000 n
+0000491052 00000 n
+0001232303 00000 n
0000010978 00000 n
0000011029 00000 n
-0000493408 00000 n
-0001222998 00000 n
+0000494217 00000 n
+0001232171 00000 n
0000011084 00000 n
0000011149 00000 n
-0000493537 00000 n
-0001222919 00000 n
+0000494346 00000 n
+0001232092 00000 n
0000011209 00000 n
0000011256 00000 n
-0000500377 00000 n
-0001222826 00000 n
+0000501595 00000 n
+0001231999 00000 n
0000011316 00000 n
0000011364 00000 n
-0000507238 00000 n
-0001222747 00000 n
+0000508556 00000 n
+0001231920 00000 n
0000011424 00000 n
0000011478 00000 n
-0000513667 00000 n
-0001222654 00000 n
+0000515114 00000 n
+0001231827 00000 n
0000011533 00000 n
0000011583 00000 n
-0000513796 00000 n
-0001222561 00000 n
+0000515243 00000 n
+0001231734 00000 n
0000011638 00000 n
0000011701 00000 n
-0000513925 00000 n
-0001222468 00000 n
+0000515371 00000 n
+0001231641 00000 n
0000011756 00000 n
0000011808 00000 n
-0000514054 00000 n
-0001222375 00000 n
+0000515500 00000 n
+0001231548 00000 n
0000011863 00000 n
0000011928 00000 n
-0000514183 00000 n
-0001222282 00000 n
+0000517217 00000 n
+0001231455 00000 n
0000011983 00000 n
0000012035 00000 n
-0000520931 00000 n
-0001222149 00000 n
+0000522093 00000 n
+0001231322 00000 n
0000012090 00000 n
0000012155 00000 n
-0000541866 00000 n
-0001222070 00000 n
+0000542683 00000 n
+0001231243 00000 n
0000012215 00000 n
0000012259 00000 n
-0000567381 00000 n
-0001221977 00000 n
+0000568820 00000 n
+0001231150 00000 n
0000012319 00000 n
0000012358 00000 n
-0000567509 00000 n
-0001221884 00000 n
+0000568949 00000 n
+0001231057 00000 n
0000012418 00000 n
0000012465 00000 n
-0000570958 00000 n
-0001221791 00000 n
+0000572457 00000 n
+0001230964 00000 n
0000012525 00000 n
0000012568 00000 n
-0000575288 00000 n
-0001221698 00000 n
+0000580283 00000 n
+0001230871 00000 n
0000012628 00000 n
0000012667 00000 n
-0000579035 00000 n
-0001221605 00000 n
+0000583803 00000 n
+0001230778 00000 n
0000012727 00000 n
0000012769 00000 n
-0000581953 00000 n
-0001221512 00000 n
+0000586851 00000 n
+0001230685 00000 n
0000012829 00000 n
0000012872 00000 n
-0000589425 00000 n
-0001221419 00000 n
+0000594552 00000 n
+0001230592 00000 n
0000012932 00000 n
0000012975 00000 n
-0000593613 00000 n
-0001221326 00000 n
+0000598913 00000 n
+0001230499 00000 n
0000013035 00000 n
0000013096 00000 n
-0000593741 00000 n
-0001221233 00000 n
+0000599042 00000 n
+0001230406 00000 n
0000013157 00000 n
0000013209 00000 n
-0000597768 00000 n
-0001221140 00000 n
+0000602750 00000 n
+0001230313 00000 n
0000013270 00000 n
0000013323 00000 n
-0000601352 00000 n
-0001221047 00000 n
+0000602879 00000 n
+0001230220 00000 n
0000013384 00000 n
0000013422 00000 n
-0000601480 00000 n
-0001220954 00000 n
+0000607174 00000 n
+0001230127 00000 n
0000013483 00000 n
0000013535 00000 n
-0000604708 00000 n
-0001220861 00000 n
+0000610125 00000 n
+0001230034 00000 n
0000013596 00000 n
0000013640 00000 n
-0000608315 00000 n
-0001220768 00000 n
+0000613730 00000 n
+0001229941 00000 n
0000013701 00000 n
0000013737 00000 n
-0000616760 00000 n
-0001220675 00000 n
+0000622587 00000 n
+0001229848 00000 n
0000013798 00000 n
0000013861 00000 n
-0000620505 00000 n
-0001220582 00000 n
+0000625727 00000 n
+0001229755 00000 n
0000013922 00000 n
0000013972 00000 n
-0000627454 00000 n
-0001220489 00000 n
+0000632716 00000 n
+0001229662 00000 n
0000014033 00000 n
0000014089 00000 n
-0000632152 00000 n
-0001220396 00000 n
+0000637344 00000 n
+0001229569 00000 n
0000014150 00000 n
0000014197 00000 n
-0000636382 00000 n
-0001220303 00000 n
+0000641622 00000 n
+0001229476 00000 n
0000014258 00000 n
0000014326 00000 n
-0000643421 00000 n
-0001220224 00000 n
+0000648682 00000 n
+0001229397 00000 n
0000014387 00000 n
0000014439 00000 n
-0000652184 00000 n
-0001220131 00000 n
+0000657275 00000 n
+0001229304 00000 n
0000014494 00000 n
0000014545 00000 n
-0000656910 00000 n
-0001220038 00000 n
+0000661944 00000 n
+0001229211 00000 n
0000014600 00000 n
0000014664 00000 n
-0000662275 00000 n
-0001219945 00000 n
+0000667468 00000 n
+0001229118 00000 n
0000014719 00000 n
0000014783 00000 n
-0000662404 00000 n
-0001219852 00000 n
+0000667597 00000 n
+0001229025 00000 n
0000014838 00000 n
0000014915 00000 n
-0000666004 00000 n
-0001219759 00000 n
+0000671189 00000 n
+0001228932 00000 n
0000014970 00000 n
0000015027 00000 n
-0000666133 00000 n
-0001219666 00000 n
+0000671318 00000 n
+0001228839 00000 n
0000015082 00000 n
0000015152 00000 n
-0000666262 00000 n
-0001219573 00000 n
+0000671447 00000 n
+0001228746 00000 n
0000015207 00000 n
0000015264 00000 n
-0000666391 00000 n
-0001219480 00000 n
+0000671576 00000 n
+0001228653 00000 n
0000015319 00000 n
0000015389 00000 n
-0000670697 00000 n
-0001219387 00000 n
+0000675885 00000 n
+0001228560 00000 n
0000015444 00000 n
0000015493 00000 n
-0000670826 00000 n
-0001219294 00000 n
+0000676014 00000 n
+0001228467 00000 n
0000015548 00000 n
0000015610 00000 n
-0000673452 00000 n
-0001219201 00000 n
+0000678638 00000 n
+0001228374 00000 n
0000015665 00000 n
0000015714 00000 n
-0000681437 00000 n
-0001219083 00000 n
+0000686619 00000 n
+0001228256 00000 n
0000015769 00000 n
0000015831 00000 n
-0000681566 00000 n
-0001219004 00000 n
+0000686748 00000 n
+0001228177 00000 n
0000015891 00000 n
0000015930 00000 n
-0000688820 00000 n
-0001218911 00000 n
+0000693994 00000 n
+0001228084 00000 n
0000015990 00000 n
0000016024 00000 n
-0000688948 00000 n
-0001218818 00000 n
+0000694122 00000 n
+0001227991 00000 n
0000016084 00000 n
0000016125 00000 n
-0000710733 00000 n
-0001218739 00000 n
+0000715912 00000 n
+0001227912 00000 n
0000016185 00000 n
0000016237 00000 n
-0000721255 00000 n
-0001218607 00000 n
+0000726448 00000 n
+0001227780 00000 n
0000016286 00000 n
0000016319 00000 n
-0000721384 00000 n
-0001218489 00000 n
+0000726577 00000 n
+0001227662 00000 n
0000016373 00000 n
0000016445 00000 n
-0000721513 00000 n
-0001218410 00000 n
+0000726706 00000 n
+0001227583 00000 n
0000016504 00000 n
0000016548 00000 n
-0000732115 00000 n
-0001218331 00000 n
+0000737308 00000 n
+0001227504 00000 n
0000016607 00000 n
0000016660 00000 n
-0000732504 00000 n
-0001218238 00000 n
+0000737697 00000 n
+0001227411 00000 n
0000016714 00000 n
0000016764 00000 n
-0000736346 00000 n
-0001218145 00000 n
+0000741552 00000 n
+0001227318 00000 n
0000016818 00000 n
0000016856 00000 n
-0000736605 00000 n
-0001218052 00000 n
+0000741811 00000 n
+0001227225 00000 n
0000016910 00000 n
0000016959 00000 n
-0000739380 00000 n
-0001217920 00000 n
+0000744585 00000 n
+0001227093 00000 n
0000017013 00000 n
0000017065 00000 n
-0000739505 00000 n
-0001217841 00000 n
+0000744710 00000 n
+0001227014 00000 n
0000017124 00000 n
0000017169 00000 n
-0000739634 00000 n
-0001217748 00000 n
+0000744839 00000 n
+0001226921 00000 n
0000017228 00000 n
0000017280 00000 n
-0000739763 00000 n
-0001217655 00000 n
+0000744968 00000 n
+0001226828 00000 n
0000017339 00000 n
0000017392 00000 n
-0000742206 00000 n
-0001217576 00000 n
+0000747419 00000 n
+0001226749 00000 n
0000017451 00000 n
0000017500 00000 n
-0000742335 00000 n
-0001217483 00000 n
+0000747548 00000 n
+0001226656 00000 n
0000017554 00000 n
0000017634 00000 n
-0000746657 00000 n
-0001217404 00000 n
+0000751914 00000 n
+0001226577 00000 n
0000017688 00000 n
0000017737 00000 n
-0000750163 00000 n
-0001217286 00000 n
+0000755420 00000 n
+0001226459 00000 n
0000017786 00000 n
0000017826 00000 n
-0000750422 00000 n
-0001217207 00000 n
+0000755679 00000 n
+0001226380 00000 n
0000017885 00000 n
0000017932 00000 n
-0000753851 00000 n
-0001217089 00000 n
+0000759110 00000 n
+0001226262 00000 n
0000017986 00000 n
0000018031 00000 n
-0000753980 00000 n
-0001217010 00000 n
+0000759239 00000 n
+0001226183 00000 n
0000018090 00000 n
0000018149 00000 n
-0000757319 00000 n
-0001216917 00000 n
+0000762581 00000 n
+0001226090 00000 n
0000018208 00000 n
0000018272 00000 n
-0000757578 00000 n
-0001216824 00000 n
+0000762840 00000 n
+0001225997 00000 n
0000018331 00000 n
0000018387 00000 n
-0000761762 00000 n
-0001216731 00000 n
+0000767020 00000 n
+0001225904 00000 n
0000018446 00000 n
0000018504 00000 n
-0000763934 00000 n
-0001216652 00000 n
+0000769200 00000 n
+0001225825 00000 n
0000018563 00000 n
0000018625 00000 n
-0000765719 00000 n
-0001216519 00000 n
+0000771366 00000 n
+0001225692 00000 n
0000018672 00000 n
0000018724 00000 n
-0000765847 00000 n
-0001216440 00000 n
+0000771494 00000 n
+0001225613 00000 n
0000018773 00000 n
0000018817 00000 n
-0000769646 00000 n
-0001216308 00000 n
+0000775292 00000 n
+0001225481 00000 n
0000018866 00000 n
0000018907 00000 n
-0000769775 00000 n
-0001216229 00000 n
+0000775421 00000 n
+0001225402 00000 n
0000018961 00000 n
0000019009 00000 n
-0000769904 00000 n
-0001216150 00000 n
+0000775550 00000 n
+0001225323 00000 n
0000019063 00000 n
0000019114 00000 n
-0000770032 00000 n
-0001216071 00000 n
+0000775678 00000 n
+0001225244 00000 n
0000019163 00000 n
0000019210 00000 n
-0000774292 00000 n
-0001215938 00000 n
+0000779937 00000 n
+0001225111 00000 n
0000019257 00000 n
0000019294 00000 n
-0000774421 00000 n
-0001215820 00000 n
+0000780066 00000 n
+0001224993 00000 n
0000019343 00000 n
0000019382 00000 n
-0000774550 00000 n
-0001215755 00000 n
+0000780195 00000 n
+0001224928 00000 n
0000019436 00000 n
0000019514 00000 n
-0000774679 00000 n
-0001215662 00000 n
+0000780324 00000 n
+0001224835 00000 n
0000019563 00000 n
0000019630 00000 n
-0000774808 00000 n
-0001215583 00000 n
+0000780453 00000 n
+0001224756 00000 n
0000019679 00000 n
0000019724 00000 n
-0000778249 00000 n
-0001215450 00000 n
+0000783894 00000 n
+0001224623 00000 n
0000019772 00000 n
0000019804 00000 n
-0000778378 00000 n
-0001215332 00000 n
+0000784023 00000 n
+0001224505 00000 n
0000019853 00000 n
0000019892 00000 n
-0000778507 00000 n
-0001215267 00000 n
+0000784152 00000 n
+0001224440 00000 n
0000019946 00000 n
0000020007 00000 n
-0000782189 00000 n
-0001215135 00000 n
+0000787834 00000 n
+0001224308 00000 n
0000020056 00000 n
0000020113 00000 n
-0000782318 00000 n
-0001215070 00000 n
+0000787963 00000 n
+0001224243 00000 n
0000020167 00000 n
0000020216 00000 n
-0000782447 00000 n
-0001214938 00000 n
+0000788092 00000 n
+0001224111 00000 n
0000020265 00000 n
0000020327 00000 n
-0000782576 00000 n
-0001214859 00000 n
+0000788221 00000 n
+0001224032 00000 n
0000020381 00000 n
0000020436 00000 n
-0000807418 00000 n
-0001214766 00000 n
+0000813063 00000 n
+0001223939 00000 n
0000020490 00000 n
0000020531 00000 n
-0000807547 00000 n
-0001214687 00000 n
+0000813192 00000 n
+0001223860 00000 n
0000020585 00000 n
0000020637 00000 n
-0000807936 00000 n
-0001214569 00000 n
+0000813581 00000 n
+0001223742 00000 n
0000020686 00000 n
0000020736 00000 n
-0000810757 00000 n
-0001214490 00000 n
+0000816402 00000 n
+0001223663 00000 n
0000020790 00000 n
0000020828 00000 n
-0000810886 00000 n
-0001214397 00000 n
+0000816531 00000 n
+0001223570 00000 n
0000020882 00000 n
0000020919 00000 n
-0000811015 00000 n
-0001214304 00000 n
+0000816660 00000 n
+0001223477 00000 n
0000020973 00000 n
0000021011 00000 n
-0000811144 00000 n
-0001214211 00000 n
+0000816789 00000 n
+0001223384 00000 n
0000021065 00000 n
0000021117 00000 n
-0000814380 00000 n
-0001214118 00000 n
+0000820022 00000 n
+0001223291 00000 n
0000021171 00000 n
0000021214 00000 n
-0000814508 00000 n
-0001213986 00000 n
+0000820150 00000 n
+0001223159 00000 n
0000021268 00000 n
0000021313 00000 n
-0000814636 00000 n
-0001213907 00000 n
+0000820278 00000 n
+0001223080 00000 n
0000021372 00000 n
0000021438 00000 n
-0000817622 00000 n
-0001213814 00000 n
+0000823261 00000 n
+0001222987 00000 n
0000021497 00000 n
0000021585 00000 n
-0000817751 00000 n
-0001213721 00000 n
+0000823390 00000 n
+0001222894 00000 n
0000021644 00000 n
0000021719 00000 n
-0000817880 00000 n
-0001213628 00000 n
+0000823519 00000 n
+0001222801 00000 n
0000021778 00000 n
0000021863 00000 n
-0000820788 00000 n
-0001213535 00000 n
+0000826426 00000 n
+0001222708 00000 n
0000021922 00000 n
0000022003 00000 n
-0000823249 00000 n
-0001213456 00000 n
+0000828888 00000 n
+0001222629 00000 n
0000022062 00000 n
0000022146 00000 n
-0000823378 00000 n
-0001213377 00000 n
+0000829017 00000 n
+0001222550 00000 n
0000022200 00000 n
0000022244 00000 n
-0000826274 00000 n
-0001213257 00000 n
+0000831927 00000 n
+0001222430 00000 n
0000022292 00000 n
0000022326 00000 n
-0000826403 00000 n
-0001213178 00000 n
+0000832056 00000 n
+0001222351 00000 n
0000022375 00000 n
0000022402 00000 n
-0000848974 00000 n
-0001213085 00000 n
+0000854606 00000 n
+0001222258 00000 n
0000022451 00000 n
0000022479 00000 n
-0000852607 00000 n
-0001212992 00000 n
+0000858377 00000 n
+0001222165 00000 n
0000022528 00000 n
0000022566 00000 n
-0000855811 00000 n
-0001212899 00000 n
+0000861282 00000 n
+0001222072 00000 n
0000022615 00000 n
0000022654 00000 n
-0000862214 00000 n
-0001212806 00000 n
+0000867843 00000 n
+0001221979 00000 n
0000022703 00000 n
0000022743 00000 n
-0000864940 00000 n
-0001212713 00000 n
+0000873736 00000 n
+0001221886 00000 n
0000022792 00000 n
0000022835 00000 n
-0000875077 00000 n
-0001212620 00000 n
+0000884313 00000 n
+0001221793 00000 n
0000022884 00000 n
0000022921 00000 n
-0000888727 00000 n
-0001212527 00000 n
+0000897351 00000 n
+0001221700 00000 n
0000022970 00000 n
0000023007 00000 n
-0000892108 00000 n
-0001212434 00000 n
+0000900851 00000 n
+0001221607 00000 n
0000023056 00000 n
0000023094 00000 n
-0000898633 00000 n
-0001212341 00000 n
+0000907802 00000 n
+0001221514 00000 n
0000023144 00000 n
0000023184 00000 n
-0000916435 00000 n
-0001212248 00000 n
+0000925083 00000 n
+0001221421 00000 n
0000023234 00000 n
0000023272 00000 n
-0000919577 00000 n
-0001212155 00000 n
+0000928233 00000 n
+0001221328 00000 n
0000023322 00000 n
0000023362 00000 n
-0000922492 00000 n
-0001212062 00000 n
+0000931149 00000 n
+0001221235 00000 n
0000023412 00000 n
0000023452 00000 n
-0000932500 00000 n
-0001211969 00000 n
+0000941141 00000 n
+0001221142 00000 n
0000023502 00000 n
0000023532 00000 n
-0000940973 00000 n
-0001211876 00000 n
+0000949681 00000 n
+0001221049 00000 n
0000023582 00000 n
0000023625 00000 n
-0000941427 00000 n
-0001211783 00000 n
+0000950135 00000 n
+0001220956 00000 n
0000023675 00000 n
0000023708 00000 n
-0000955679 00000 n
-0001211690 00000 n
+0000968269 00000 n
+0001220863 00000 n
0000023758 00000 n
0000023787 00000 n
-0000974104 00000 n
-0001211597 00000 n
+0000982927 00000 n
+0001220770 00000 n
0000023837 00000 n
0000023871 00000 n
-0000979694 00000 n
-0001211504 00000 n
+0000988636 00000 n
+0001220677 00000 n
0000023921 00000 n
0000023958 00000 n
-0000982902 00000 n
-0001211411 00000 n
+0000991896 00000 n
+0001220584 00000 n
0000024008 00000 n
0000024045 00000 n
-0000988586 00000 n
-0001211318 00000 n
+0000997378 00000 n
+0001220491 00000 n
0000024095 00000 n
0000024128 00000 n
-0000989040 00000 n
-0001211225 00000 n
+0000997831 00000 n
+0001220398 00000 n
0000024178 00000 n
0000024212 00000 n
-0000991752 00000 n
-0001211132 00000 n
+0001000780 00000 n
+0001220305 00000 n
0000024262 00000 n
0000024301 00000 n
-0000993865 00000 n
-0001211053 00000 n
+0001002914 00000 n
+0001220226 00000 n
0000024351 00000 n
0000024385 00000 n
-0000024758 00000 n
-0000024880 00000 n
-0000289681 00000 n
+0000024798 00000 n
+0000024920 00000 n
+0000289721 00000 n
0000024438 00000 n
-0000289555 00000 n
-0000289618 00000 n
-0001205007 00000 n
-0001178865 00000 n
-0001204833 00000 n
-0001206053 00000 n
-0000026189 00000 n
-0000026382 00000 n
-0000026462 00000 n
-0000026499 00000 n
-0000026580 00000 n
-0000026704 00000 n
-0000026963 00000 n
-0000027322 00000 n
-0000027354 00000 n
-0000027448 00000 n
-0000028481 00000 n
-0000039617 00000 n
-0000105207 00000 n
-0000170797 00000 n
-0000236387 00000 n
-0000291121 00000 n
-0000290936 00000 n
-0000289781 00000 n
-0000291058 00000 n
-0001177629 00000 n
-0001151010 00000 n
-0001177455 00000 n
-0001150325 00000 n
-0001148180 00000 n
-0001150161 00000 n
-0000302898 00000 n
-0000294171 00000 n
-0000291206 00000 n
-0000302772 00000 n
-0000302835 00000 n
-0000294741 00000 n
-0000294895 00000 n
-0000295052 00000 n
-0000295209 00000 n
-0000295366 00000 n
-0000295523 00000 n
-0000295685 00000 n
-0000295847 00000 n
-0000296008 00000 n
-0000296170 00000 n
-0000296337 00000 n
-0000296504 00000 n
-0000296669 00000 n
-0000296831 00000 n
-0000296997 00000 n
-0000297160 00000 n
-0000297315 00000 n
-0000297473 00000 n
-0000297631 00000 n
-0000297788 00000 n
-0000297945 00000 n
-0000298103 00000 n
-0000298259 00000 n
-0000298417 00000 n
-0000298580 00000 n
-0000298743 00000 n
-0000298901 00000 n
-0000299057 00000 n
-0000299219 00000 n
-0000299387 00000 n
-0000299555 00000 n
-0000299718 00000 n
-0000299874 00000 n
-0000300032 00000 n
-0000300190 00000 n
-0000300353 00000 n
-0000300511 00000 n
-0000300669 00000 n
-0000300832 00000 n
-0000300990 00000 n
-0000301153 00000 n
-0000301321 00000 n
-0000301489 00000 n
-0000301652 00000 n
-0000301815 00000 n
-0000301978 00000 n
-0000302141 00000 n
-0000302304 00000 n
-0000302460 00000 n
-0000302616 00000 n
-0000316405 00000 n
-0000306338 00000 n
-0000302983 00000 n
-0000316340 00000 n
-0001147592 00000 n
-0001130171 00000 n
-0001147406 00000 n
-0000306988 00000 n
-0000307152 00000 n
-0000307316 00000 n
-0000307479 00000 n
-0000307638 00000 n
-0000307802 00000 n
-0000307966 00000 n
-0000308130 00000 n
-0000308294 00000 n
-0000308458 00000 n
-0000308622 00000 n
-0000308786 00000 n
-0000308950 00000 n
-0000309114 00000 n
-0000309279 00000 n
-0000309444 00000 n
-0000309609 00000 n
-0000309774 00000 n
-0000309934 00000 n
-0000310099 00000 n
-0000310263 00000 n
-0000310423 00000 n
-0000310588 00000 n
-0000310757 00000 n
-0000310927 00000 n
-0000311097 00000 n
-0000311262 00000 n
-0000311431 00000 n
-0000311601 00000 n
-0000311771 00000 n
-0000311935 00000 n
-0000312100 00000 n
-0000312265 00000 n
-0000312430 00000 n
-0000312589 00000 n
-0000312754 00000 n
-0000312919 00000 n
-0000313076 00000 n
-0000313235 00000 n
-0000313394 00000 n
-0000313550 00000 n
-0000313709 00000 n
-0000313873 00000 n
-0000314042 00000 n
-0000314211 00000 n
-0000314375 00000 n
-0000314544 00000 n
-0000314713 00000 n
-0000314872 00000 n
-0000315036 00000 n
-0000315200 00000 n
-0000315364 00000 n
-0000315528 00000 n
-0000315691 00000 n
-0000315855 00000 n
-0000316017 00000 n
-0000316178 00000 n
-0000330524 00000 n
-0000319967 00000 n
-0000316505 00000 n
-0000330459 00000 n
-0000320635 00000 n
-0000320799 00000 n
-0000320968 00000 n
-0000321137 00000 n
-0000321305 00000 n
-0000321469 00000 n
-0000321633 00000 n
-0000321797 00000 n
-0000321961 00000 n
-0000322125 00000 n
-0000322289 00000 n
-0000322458 00000 n
-0000322627 00000 n
-0000322795 00000 n
-0000322964 00000 n
-0000323133 00000 n
-0000323302 00000 n
-0000323471 00000 n
-0000323640 00000 n
-0000323808 00000 n
-0000323978 00000 n
-0000324148 00000 n
-0000324318 00000 n
-0000324488 00000 n
-0000324658 00000 n
-0000324828 00000 n
-0000324998 00000 n
-0000325168 00000 n
-0000325337 00000 n
-0000325507 00000 n
-0000325676 00000 n
-0000325846 00000 n
-0000326010 00000 n
-0000326174 00000 n
-0000326338 00000 n
-0000326502 00000 n
-0000326666 00000 n
-0000326830 00000 n
-0000326994 00000 n
-0000327157 00000 n
-0000327321 00000 n
-0000327485 00000 n
-0000327649 00000 n
-0000327813 00000 n
-0000327982 00000 n
-0000328150 00000 n
-0000328319 00000 n
-0000328488 00000 n
-0000328645 00000 n
-0000328808 00000 n
-0000328975 00000 n
-0000329143 00000 n
-0000329306 00000 n
-0000329469 00000 n
-0000329632 00000 n
-0000329795 00000 n
-0000329963 00000 n
-0000330129 00000 n
-0000330294 00000 n
-0000343771 00000 n
-0000334192 00000 n
-0000330624 00000 n
-0000343706 00000 n
-0000334824 00000 n
-0000334987 00000 n
-0000335150 00000 n
-0000335308 00000 n
-0000335476 00000 n
-0000335639 00000 n
-0000335807 00000 n
-0000335975 00000 n
-0000336142 00000 n
-0001129280 00000 n
-0001107946 00000 n
-0001129104 00000 n
-0000336309 00000 n
-0000336477 00000 n
-0000336633 00000 n
-0000336791 00000 n
-0000336949 00000 n
-0000337112 00000 n
-0000337275 00000 n
-0000337433 00000 n
-0000337589 00000 n
-0000337747 00000 n
-0000337910 00000 n
-0000338068 00000 n
-0000338226 00000 n
-0000338383 00000 n
-0000338541 00000 n
-0000338703 00000 n
-0000338860 00000 n
-0000339023 00000 n
-0000339181 00000 n
-0000339344 00000 n
-0000339507 00000 n
-0000339670 00000 n
-0000339828 00000 n
-0000339991 00000 n
-0000340154 00000 n
-0000340317 00000 n
-0000340480 00000 n
-0000340643 00000 n
-0000340806 00000 n
-0000340974 00000 n
-0000341141 00000 n
-0000341308 00000 n
-0000341476 00000 n
-0000341644 00000 n
-0000341812 00000 n
-0000341974 00000 n
-0000342131 00000 n
-0000342289 00000 n
-0000342447 00000 n
-0000342605 00000 n
-0000342763 00000 n
-0000342921 00000 n
-0000343079 00000 n
-0000343237 00000 n
-0000343393 00000 n
-0000343549 00000 n
-0000347466 00000 n
-0000344914 00000 n
-0000343885 00000 n
-0000347401 00000 n
-0000345178 00000 n
-0000345337 00000 n
-0000345496 00000 n
-0000345654 00000 n
-0000345813 00000 n
-0000345972 00000 n
-0000346131 00000 n
-0001106967 00000 n
-0001086840 00000 n
-0001106792 00000 n
-0000346290 00000 n
-0000346449 00000 n
-0000346607 00000 n
-0000346766 00000 n
-0000346924 00000 n
-0000347083 00000 n
-0000347242 00000 n
-0001206174 00000 n
-0000350589 00000 n
-0000349822 00000 n
-0000347567 00000 n
-0000350010 00000 n
-0000350138 00000 n
-0000350266 00000 n
-0000350394 00000 n
-0000350459 00000 n
-0000350524 00000 n
-0001085998 00000 n
-0001067298 00000 n
-0001085823 00000 n
-0000355126 00000 n
-0000353985 00000 n
-0000350717 00000 n
-0000354487 00000 n
-0000354552 00000 n
-0000354679 00000 n
-0000354807 00000 n
-0000354935 00000 n
-0000354141 00000 n
-0000354335 00000 n
-0000355061 00000 n
-0000721448 00000 n
-0000782640 00000 n
-0000359808 00000 n
-0000358750 00000 n
-0000355254 00000 n
-0000359231 00000 n
-0000359359 00000 n
-0000358906 00000 n
-0000359069 00000 n
-0000359487 00000 n
-0000359615 00000 n
-0000359743 00000 n
-0000375605 00000 n
-0000363049 00000 n
-0000362474 00000 n
-0000359936 00000 n
-0000362600 00000 n
-0000362728 00000 n
-0000362856 00000 n
-0000362984 00000 n
-0000366507 00000 n
-0000365341 00000 n
-0000363163 00000 n
-0000365803 00000 n
-0000365931 00000 n
-0000366059 00000 n
-0000366187 00000 n
-0000366315 00000 n
-0000365497 00000 n
-0000365650 00000 n
-0000366442 00000 n
-0000627518 00000 n
-0000367584 00000 n
-0000367265 00000 n
-0000366593 00000 n
-0000367391 00000 n
-0000367519 00000 n
-0001206299 00000 n
-0000369627 00000 n
-0000368924 00000 n
-0000367684 00000 n
-0000369050 00000 n
-0000369178 00000 n
-0000369305 00000 n
-0000369433 00000 n
-0000369562 00000 n
-0000372206 00000 n
-0000371576 00000 n
-0000369727 00000 n
-0000371882 00000 n
-0000372011 00000 n
-0000372076 00000 n
-0000372141 00000 n
-0000371723 00000 n
-0000604772 00000 n
-0000375799 00000 n
-0000375094 00000 n
-0000372320 00000 n
-0000375220 00000 n
-0000375349 00000 n
-0000375476 00000 n
-0001066576 00000 n
-0001053199 00000 n
-0001066397 00000 n
-0000375734 00000 n
-0000380671 00000 n
-0000380110 00000 n
-0000375927 00000 n
-0000380606 00000 n
-0000380266 00000 n
-0000380420 00000 n
-0000955743 00000 n
-0000485787 00000 n
-0000382913 00000 n
-0000382465 00000 n
-0000380826 00000 n
-0000382591 00000 n
-0000382719 00000 n
-0000382784 00000 n
-0000382849 00000 n
-0000383382 00000 n
-0000383191 00000 n
-0000383041 00000 n
-0000383317 00000 n
-0001206424 00000 n
-0000386078 00000 n
-0000388668 00000 n
-0000385913 00000 n
-0000383424 00000 n
-0000388216 00000 n
-0000388345 00000 n
-0000388474 00000 n
-0000387721 00000 n
-0000387883 00000 n
-0001052293 00000 n
-0001042273 00000 n
-0001052119 00000 n
-0001041709 00000 n
-0001032622 00000 n
-0001041534 00000 n
-0000388603 00000 n
-0000388045 00000 n
-0000387550 00000 n
-0000387608 00000 n
-0000387698 00000 n
-0000541930 00000 n
-0000582017 00000 n
-0000710797 00000 n
-0000393435 00000 n
-0000392499 00000 n
-0000388839 00000 n
-0000392983 00000 n
-0000393112 00000 n
-0001032021 00000 n
-0001019599 00000 n
-0001031842 00000 n
-0000393241 00000 n
-0000392655 00000 n
-0000392821 00000 n
-0000393370 00000 n
-0000786671 00000 n
-0000397354 00000 n
-0000396845 00000 n
-0000393591 00000 n
-0000397160 00000 n
-0000397289 00000 n
-0000396992 00000 n
-0000398502 00000 n
-0000398311 00000 n
-0000397495 00000 n
-0000398437 00000 n
+0000289595 00000 n
+0000289658 00000 n
+0001214055 00000 n
+0001187913 00000 n
+0001213881 00000 n
+0001186677 00000 n
+0001160058 00000 n
+0001186503 00000 n
+0001215101 00000 n
+0000026229 00000 n
+0000026422 00000 n
+0000026502 00000 n
+0000026539 00000 n
+0000026620 00000 n
+0000026744 00000 n
+0000027003 00000 n
+0000027362 00000 n
+0000027394 00000 n
+0000027488 00000 n
+0000028521 00000 n
+0000039657 00000 n
+0000105247 00000 n
+0000170837 00000 n
+0000236427 00000 n
+0000291175 00000 n
+0000290990 00000 n
+0000289834 00000 n
+0000291112 00000 n
+0001159373 00000 n
+0001157228 00000 n
+0001159209 00000 n
+0000302952 00000 n
+0000294225 00000 n
+0000291260 00000 n
+0000302826 00000 n
+0000302889 00000 n
+0000294795 00000 n
+0000294949 00000 n
+0000295106 00000 n
+0000295263 00000 n
+0000295420 00000 n
+0000295577 00000 n
+0000295739 00000 n
+0000295901 00000 n
+0000296062 00000 n
+0000296224 00000 n
+0000296391 00000 n
+0000296558 00000 n
+0000296723 00000 n
+0000296885 00000 n
+0000297051 00000 n
+0000297214 00000 n
+0000297369 00000 n
+0000297527 00000 n
+0000297685 00000 n
+0000297842 00000 n
+0000297999 00000 n
+0000298157 00000 n
+0000298313 00000 n
+0000298471 00000 n
+0000298634 00000 n
+0000298797 00000 n
+0000298955 00000 n
+0000299111 00000 n
+0000299273 00000 n
+0000299441 00000 n
+0000299609 00000 n
+0000299772 00000 n
+0000299928 00000 n
+0000300086 00000 n
+0000300244 00000 n
+0000300407 00000 n
+0000300565 00000 n
+0000300723 00000 n
+0000300886 00000 n
+0000301044 00000 n
+0000301207 00000 n
+0000301375 00000 n
+0000301543 00000 n
+0000301706 00000 n
+0000301869 00000 n
+0000302032 00000 n
+0000302195 00000 n
+0000302358 00000 n
+0000302514 00000 n
+0000302670 00000 n
+0000316459 00000 n
+0000306393 00000 n
+0000303037 00000 n
+0000316394 00000 n
+0001156640 00000 n
+0001139219 00000 n
+0001156454 00000 n
+0000307043 00000 n
+0000307207 00000 n
+0000307371 00000 n
+0000307534 00000 n
+0000307693 00000 n
+0000307857 00000 n
+0000308020 00000 n
+0000308184 00000 n
+0000308348 00000 n
+0000308512 00000 n
+0000308676 00000 n
+0000308840 00000 n
+0000309004 00000 n
+0000309168 00000 n
+0000309333 00000 n
+0000309498 00000 n
+0000309663 00000 n
+0000309828 00000 n
+0000309988 00000 n
+0000310153 00000 n
+0000310317 00000 n
+0000310477 00000 n
+0000310642 00000 n
+0000310811 00000 n
+0000310981 00000 n
+0000311151 00000 n
+0000311316 00000 n
+0000311485 00000 n
+0000311655 00000 n
+0000311825 00000 n
+0000311989 00000 n
+0000312154 00000 n
+0000312319 00000 n
+0000312484 00000 n
+0000312643 00000 n
+0000312808 00000 n
+0000312973 00000 n
+0000313130 00000 n
+0000313289 00000 n
+0000313448 00000 n
+0000313604 00000 n
+0000313763 00000 n
+0000313927 00000 n
+0000314096 00000 n
+0000314265 00000 n
+0000314429 00000 n
+0000314598 00000 n
+0000314767 00000 n
+0000314926 00000 n
+0000315090 00000 n
+0000315254 00000 n
+0000315418 00000 n
+0000315582 00000 n
+0000315745 00000 n
+0000315909 00000 n
+0000316071 00000 n
+0000316232 00000 n
+0000330579 00000 n
+0000320023 00000 n
+0000316559 00000 n
+0000330514 00000 n
+0000320691 00000 n
+0000320855 00000 n
+0000321024 00000 n
+0000321193 00000 n
+0000321361 00000 n
+0000321525 00000 n
+0000321689 00000 n
+0000321853 00000 n
+0000322017 00000 n
+0000322181 00000 n
+0000322344 00000 n
+0000322513 00000 n
+0000322682 00000 n
+0000322850 00000 n
+0000323019 00000 n
+0000323188 00000 n
+0000323356 00000 n
+0000323525 00000 n
+0000323694 00000 n
+0000323862 00000 n
+0000324032 00000 n
+0000324202 00000 n
+0000324372 00000 n
+0000324542 00000 n
+0000324712 00000 n
+0000324882 00000 n
+0000325052 00000 n
+0000325222 00000 n
+0000325391 00000 n
+0000325561 00000 n
+0000325730 00000 n
+0000325900 00000 n
+0000326063 00000 n
+0000326227 00000 n
+0000326391 00000 n
+0000326555 00000 n
+0000326719 00000 n
+0000326883 00000 n
+0000327047 00000 n
+0000327210 00000 n
+0000327374 00000 n
+0000327538 00000 n
+0000327702 00000 n
+0000327866 00000 n
+0000328035 00000 n
+0000328204 00000 n
+0000328373 00000 n
+0000328542 00000 n
+0000328699 00000 n
+0000328862 00000 n
+0000329029 00000 n
+0000329197 00000 n
+0000329360 00000 n
+0000329523 00000 n
+0000329686 00000 n
+0000329849 00000 n
+0000330017 00000 n
+0000330183 00000 n
+0000330348 00000 n
+0000343828 00000 n
+0000334251 00000 n
+0000330679 00000 n
+0000343763 00000 n
+0000334883 00000 n
+0000335046 00000 n
+0000335209 00000 n
+0000335367 00000 n
+0000335535 00000 n
+0000335698 00000 n
+0000335866 00000 n
+0000336034 00000 n
+0000336201 00000 n
+0001138328 00000 n
+0001116994 00000 n
+0001138152 00000 n
+0000336368 00000 n
+0000336536 00000 n
+0000336692 00000 n
+0000336850 00000 n
+0000337008 00000 n
+0000337171 00000 n
+0000337334 00000 n
+0000337492 00000 n
+0000337648 00000 n
+0000337806 00000 n
+0000337969 00000 n
+0000338126 00000 n
+0000338283 00000 n
+0000338440 00000 n
+0000338598 00000 n
+0000338760 00000 n
+0000338917 00000 n
+0000339080 00000 n
+0000339238 00000 n
+0000339401 00000 n
+0000339564 00000 n
+0000339727 00000 n
+0000339885 00000 n
+0000340048 00000 n
+0000340211 00000 n
+0000340374 00000 n
+0000340537 00000 n
+0000340700 00000 n
+0000340863 00000 n
+0000341031 00000 n
+0000341198 00000 n
+0000341365 00000 n
+0000341533 00000 n
+0000341701 00000 n
+0000341869 00000 n
+0000342031 00000 n
+0000342188 00000 n
+0000342346 00000 n
+0000342504 00000 n
+0000342662 00000 n
+0000342820 00000 n
+0000342978 00000 n
+0000343136 00000 n
+0000343294 00000 n
+0000343450 00000 n
+0000343606 00000 n
+0000347521 00000 n
+0000344970 00000 n
+0000343942 00000 n
+0000347456 00000 n
+0000345234 00000 n
+0000345393 00000 n
+0000345552 00000 n
+0000345710 00000 n
+0000345869 00000 n
+0000346027 00000 n
+0000346186 00000 n
+0001116015 00000 n
+0001095888 00000 n
+0001115840 00000 n
+0000346345 00000 n
+0000346504 00000 n
+0000346662 00000 n
+0000346821 00000 n
+0000346979 00000 n
+0000347138 00000 n
+0000347297 00000 n
+0001215222 00000 n
+0000350644 00000 n
+0000349877 00000 n
+0000347622 00000 n
+0000350065 00000 n
+0000350193 00000 n
+0000350321 00000 n
+0000350449 00000 n
+0000350514 00000 n
+0000350579 00000 n
+0001095046 00000 n
+0001076346 00000 n
+0001094871 00000 n
+0000355178 00000 n
+0000354037 00000 n
+0000350772 00000 n
+0000354539 00000 n
+0000354604 00000 n
+0000354731 00000 n
+0000354859 00000 n
+0000354987 00000 n
+0000354193 00000 n
+0000354387 00000 n
+0000355113 00000 n
+0000726641 00000 n
+0000788285 00000 n
+0000359859 00000 n
+0000358801 00000 n
+0000355306 00000 n
+0000359282 00000 n
+0000359410 00000 n
+0000358957 00000 n
+0000359120 00000 n
+0000359538 00000 n
+0000359666 00000 n
+0000359794 00000 n
+0000375656 00000 n
+0000363100 00000 n
+0000362525 00000 n
+0000359987 00000 n
+0000362651 00000 n
+0000362779 00000 n
+0000362907 00000 n
+0000363035 00000 n
+0000366558 00000 n
+0000365392 00000 n
+0000363214 00000 n
+0000365854 00000 n
+0000365982 00000 n
+0000366110 00000 n
+0000366238 00000 n
+0000366366 00000 n
+0000365548 00000 n
+0000365701 00000 n
+0000366493 00000 n
+0000632780 00000 n
+0000367635 00000 n
+0000367316 00000 n
+0000366644 00000 n
+0000367442 00000 n
+0000367570 00000 n
+0001215347 00000 n
+0000369677 00000 n
+0000368974 00000 n
+0000367735 00000 n
+0000369100 00000 n
+0000369228 00000 n
+0000369355 00000 n
+0000369483 00000 n
+0000369612 00000 n
+0000372256 00000 n
+0000371626 00000 n
+0000369777 00000 n
+0000371932 00000 n
+0000372061 00000 n
+0000372126 00000 n
+0000372191 00000 n
+0000371773 00000 n
+0000610189 00000 n
+0000375850 00000 n
+0000375145 00000 n
+0000372370 00000 n
+0000375271 00000 n
+0000375400 00000 n
+0000375527 00000 n
+0001075624 00000 n
+0001062247 00000 n
+0001075445 00000 n
+0000375785 00000 n
+0000380722 00000 n
+0000380161 00000 n
+0000375978 00000 n
+0000380657 00000 n
+0000380317 00000 n
+0000380471 00000 n
+0000968333 00000 n
+0000486508 00000 n
+0000382963 00000 n
+0000382515 00000 n
+0000380877 00000 n
+0000382641 00000 n
+0000382769 00000 n
+0000382834 00000 n
+0000382899 00000 n
+0000383432 00000 n
+0000383241 00000 n
+0000383091 00000 n
+0000383367 00000 n
+0001215472 00000 n
+0000386129 00000 n
+0000388719 00000 n
+0000385964 00000 n
+0000383474 00000 n
+0000388267 00000 n
+0000388396 00000 n
+0000388525 00000 n
+0000387772 00000 n
+0000387934 00000 n
+0001061341 00000 n
+0001051321 00000 n
+0001061167 00000 n
+0001050757 00000 n
+0001041671 00000 n
+0001050582 00000 n
+0000388654 00000 n
+0000388096 00000 n
+0000387601 00000 n
+0000387659 00000 n
+0000387749 00000 n
+0000542747 00000 n
+0000586915 00000 n
+0000715976 00000 n
+0000393498 00000 n
+0000392563 00000 n
+0000388890 00000 n
+0000393046 00000 n
+0000393175 00000 n
+0001041070 00000 n
+0001028648 00000 n
+0001040891 00000 n
+0000393304 00000 n
+0000392719 00000 n
+0000392884 00000 n
+0000393433 00000 n
+0000792316 00000 n
+0000397218 00000 n
+0000396898 00000 n
+0000393654 00000 n
+0000397024 00000 n
+0000397153 00000 n
+0000398793 00000 n
+0000398413 00000 n
+0000397359 00000 n
+0000398728 00000 n
+0000398560 00000 n
0000400368 00000 n
-0000400048 00000 n
-0000398603 00000 n
-0000400174 00000 n
-0000400303 00000 n
-0000403663 00000 n
-0000402828 00000 n
+0000400049 00000 n
+0000398894 00000 n
+0000400175 00000 n
+0000400304 00000 n
+0000403831 00000 n
+0000402995 00000 n
0000400482 00000 n
-0000402954 00000 n
-0000403083 00000 n
-0000403212 00000 n
-0000403340 00000 n
-0000403469 00000 n
-0000403598 00000 n
-0001206549 00000 n
-0000407717 00000 n
-0000406821 00000 n
-0000403805 00000 n
-0000407138 00000 n
-0000407267 00000 n
-0000407395 00000 n
-0000406968 00000 n
-0000407523 00000 n
-0000407652 00000 n
-0000411744 00000 n
-0000411166 00000 n
-0000407858 00000 n
-0000411292 00000 n
-0000411421 00000 n
-0000411550 00000 n
-0000411679 00000 n
-0000415671 00000 n
-0000415222 00000 n
-0000411886 00000 n
-0000415348 00000 n
-0000415477 00000 n
-0000415606 00000 n
-0000417984 00000 n
-0000417793 00000 n
-0000415799 00000 n
-0000417919 00000 n
-0000421253 00000 n
-0000420675 00000 n
-0000418128 00000 n
-0000420801 00000 n
-0001019324 00000 n
-0001015966 00000 n
-0001019145 00000 n
-0000420930 00000 n
-0000421059 00000 n
-0000421188 00000 n
-0000425521 00000 n
-0000424842 00000 n
-0000421424 00000 n
+0000403121 00000 n
+0000403250 00000 n
+0000403379 00000 n
+0000403508 00000 n
+0000403637 00000 n
+0000403766 00000 n
+0001215597 00000 n
+0000407679 00000 n
+0000406782 00000 n
+0000403973 00000 n
+0000407099 00000 n
+0000407228 00000 n
+0000407357 00000 n
+0000406929 00000 n
+0000407486 00000 n
+0000407615 00000 n
+0000411796 00000 n
+0000411219 00000 n
+0000407820 00000 n
+0000411345 00000 n
+0000411474 00000 n
+0000411602 00000 n
+0000411731 00000 n
+0000415826 00000 n
+0000415378 00000 n
+0000411938 00000 n
+0000415504 00000 n
+0000415633 00000 n
+0000415761 00000 n
+0000417825 00000 n
+0000417634 00000 n
+0000415954 00000 n
+0000417760 00000 n
+0000421095 00000 n
+0000420646 00000 n
+0000417926 00000 n
+0000420772 00000 n
+0001028373 00000 n
+0001025014 00000 n
+0001028194 00000 n
+0000420901 00000 n
+0000421030 00000 n
+0000425199 00000 n
+0000424391 00000 n
+0000421266 00000 n
+0000424876 00000 n
+0000425005 00000 n
+0000425134 00000 n
+0001024659 00000 n
+0001022661 00000 n
+0001024494 00000 n
+0000424547 00000 n
+0000424711 00000 n
+0001215722 00000 n
+0000884377 00000 n
+0000900915 00000 n
+0000428417 00000 n
+0000427840 00000 n
0000425327 00000 n
-0000425456 00000 n
-0001015611 00000 n
-0001013613 00000 n
-0001015446 00000 n
-0000424998 00000 n
-0000425162 00000 n
-0001206674 00000 n
-0000875141 00000 n
-0000892172 00000 n
-0000428887 00000 n
-0000428183 00000 n
-0000425649 00000 n
-0000428309 00000 n
-0000428438 00000 n
-0000428567 00000 n
-0000428696 00000 n
-0000428823 00000 n
-0000432292 00000 n
-0000431329 00000 n
-0000429001 00000 n
-0000431455 00000 n
-0000431584 00000 n
-0000431713 00000 n
-0000431841 00000 n
-0000431970 00000 n
-0000432098 00000 n
-0000432227 00000 n
-0000436414 00000 n
-0000435655 00000 n
-0000432420 00000 n
-0000435962 00000 n
-0000436091 00000 n
-0000436220 00000 n
-0000435802 00000 n
-0000436349 00000 n
-0000666455 00000 n
-0000439945 00000 n
-0000439496 00000 n
-0000436528 00000 n
-0000439622 00000 n
-0000439751 00000 n
-0000439880 00000 n
-0000442741 00000 n
-0000442293 00000 n
-0000440115 00000 n
-0000442419 00000 n
-0000442548 00000 n
-0000442676 00000 n
-0000445459 00000 n
-0000445139 00000 n
-0000442898 00000 n
-0000445265 00000 n
-0000445394 00000 n
-0001206799 00000 n
-0000448367 00000 n
-0000447531 00000 n
-0000445573 00000 n
-0000447657 00000 n
-0000447786 00000 n
-0000447915 00000 n
-0000448044 00000 n
-0000448173 00000 n
-0000448302 00000 n
-0000450998 00000 n
-0000450678 00000 n
-0000448481 00000 n
-0000450804 00000 n
-0000450933 00000 n
-0000456715 00000 n
-0000453935 00000 n
-0000453486 00000 n
-0000451112 00000 n
-0000453612 00000 n
-0000453741 00000 n
-0000453870 00000 n
-0000458254 00000 n
-0000456568 00000 n
-0000454063 00000 n
-0000457802 00000 n
-0000457931 00000 n
-0000457641 00000 n
-0000458060 00000 n
-0000458189 00000 n
-0000782382 00000 n
-0000460997 00000 n
-0000460419 00000 n
-0000458425 00000 n
-0000460545 00000 n
-0000460674 00000 n
-0000460803 00000 n
-0000460932 00000 n
-0000461438 00000 n
-0000461247 00000 n
-0000461097 00000 n
-0000461373 00000 n
-0001206924 00000 n
-0000465525 00000 n
-0000464759 00000 n
-0000461480 00000 n
-0000465073 00000 n
-0000465202 00000 n
-0000465330 00000 n
-0000465395 00000 n
-0000465460 00000 n
-0000464906 00000 n
-0000473755 00000 n
-0000470220 00000 n
-0000470029 00000 n
-0000465625 00000 n
-0000470155 00000 n
-0000474207 00000 n
-0000473500 00000 n
-0000470362 00000 n
-0000473626 00000 n
-0000473884 00000 n
-0000474013 00000 n
-0000474142 00000 n
-0000477126 00000 n
-0000476420 00000 n
-0000474348 00000 n
-0000476546 00000 n
-0000476675 00000 n
-0000476804 00000 n
-0000476933 00000 n
-0000476998 00000 n
-0000477062 00000 n
-0000480495 00000 n
-0000479919 00000 n
-0000477283 00000 n
-0000480045 00000 n
-0000480173 00000 n
-0000480302 00000 n
-0000480366 00000 n
-0000480430 00000 n
-0000485852 00000 n
-0000485064 00000 n
-0000480609 00000 n
-0000485530 00000 n
-0000485659 00000 n
-0000485220 00000 n
-0000485371 00000 n
-0001207049 00000 n
-0000994592 00000 n
-0000489838 00000 n
-0000488438 00000 n
-0000485993 00000 n
-0000489129 00000 n
-0000489258 00000 n
-0000489387 00000 n
-0000489516 00000 n
-0000489645 00000 n
-0000488603 00000 n
-0000488755 00000 n
-0000488942 00000 n
-0000489773 00000 n
-0000493666 00000 n
-0000493217 00000 n
-0000489966 00000 n
-0000493343 00000 n
-0000493472 00000 n
-0000493601 00000 n
-0000497913 00000 n
-0000497535 00000 n
-0000493794 00000 n
-0000497848 00000 n
-0000497682 00000 n
-0000500441 00000 n
-0000500633 00000 n
-0000500186 00000 n
-0000498027 00000 n
-0000500312 00000 n
-0000500506 00000 n
-0000500570 00000 n
-0000503937 00000 n
-0000503746 00000 n
-0000500747 00000 n
-0000503872 00000 n
-0000507367 00000 n
-0000507047 00000 n
-0000504051 00000 n
-0000507173 00000 n
-0000507302 00000 n
-0001207174 00000 n
-0000510891 00000 n
-0000510570 00000 n
-0000507495 00000 n
-0000510696 00000 n
-0000510761 00000 n
-0000510826 00000 n
-0000514312 00000 n
-0000513142 00000 n
-0000510992 00000 n
-0000513602 00000 n
-0000513731 00000 n
-0000513860 00000 n
-0000513298 00000 n
-0000513451 00000 n
-0000513989 00000 n
-0000514118 00000 n
-0000514247 00000 n
-0000515847 00000 n
-0000515656 00000 n
-0000514426 00000 n
-0000515782 00000 n
-0000517350 00000 n
-0000517159 00000 n
-0000515948 00000 n
-0000517285 00000 n
-0000518861 00000 n
-0000518670 00000 n
-0000517451 00000 n
-0000518796 00000 n
-0000521060 00000 n
-0000520740 00000 n
-0000518962 00000 n
-0000520866 00000 n
-0000520995 00000 n
-0001207299 00000 n
-0000524632 00000 n
-0000524441 00000 n
-0000521174 00000 n
-0000524567 00000 n
-0000528882 00000 n
-0000528513 00000 n
-0000524774 00000 n
-0000528817 00000 n
-0000528660 00000 n
-0000750486 00000 n
-0000532831 00000 n
-0000532449 00000 n
-0000529010 00000 n
-0000532766 00000 n
-0000532596 00000 n
-0000537440 00000 n
-0000537044 00000 n
-0000532959 00000 n
-0000537375 00000 n
-0000537191 00000 n
-0000541995 00000 n
-0000541319 00000 n
-0000537582 00000 n
-0000541801 00000 n
-0000541475 00000 n
-0000541644 00000 n
-0000545818 00000 n
-0000545498 00000 n
-0000542123 00000 n
-0000545624 00000 n
-0000545689 00000 n
-0000545753 00000 n
-0001207424 00000 n
-0000550885 00000 n
-0000549757 00000 n
-0000545946 00000 n
-0000550820 00000 n
-0000549940 00000 n
-0000550094 00000 n
-0000550279 00000 n
-0000550453 00000 n
-0000550638 00000 n
-0000656973 00000 n
-0000555149 00000 n
-0000554958 00000 n
-0000551069 00000 n
-0000555084 00000 n
-0000559362 00000 n
-0000559171 00000 n
-0000555277 00000 n
-0000559297 00000 n
-0000563007 00000 n
-0000562816 00000 n
-0000559476 00000 n
-0000562942 00000 n
-0000567638 00000 n
-0000566651 00000 n
-0000563121 00000 n
-0000567316 00000 n
-0000566816 00000 n
-0000566981 00000 n
-0000567444 00000 n
-0000567147 00000 n
-0000567573 00000 n
-0000673516 00000 n
-0000571087 00000 n
-0000570579 00000 n
-0000567752 00000 n
-0000570893 00000 n
-0000571022 00000 n
-0000570726 00000 n
-0001207549 00000 n
-0000575417 00000 n
-0000574726 00000 n
-0000571244 00000 n
-0000575223 00000 n
-0000574882 00000 n
-0000575052 00000 n
-0000575352 00000 n
-0000770096 00000 n
-0000579164 00000 n
-0000578844 00000 n
-0000575545 00000 n
-0000578970 00000 n
-0000579099 00000 n
-0000582082 00000 n
-0000581762 00000 n
-0000579278 00000 n
-0000581888 00000 n
-0000586113 00000 n
-0000585922 00000 n
-0000582253 00000 n
-0000586048 00000 n
-0000589553 00000 n
-0000589055 00000 n
-0000586227 00000 n
-0000589360 00000 n
-0000589489 00000 n
-0000589202 00000 n
-0000593870 00000 n
-0000593064 00000 n
-0000589710 00000 n
-0000593548 00000 n
-0000593677 00000 n
-0000593220 00000 n
-0000593805 00000 n
-0000593394 00000 n
-0001207674 00000 n
-0000597895 00000 n
-0000597577 00000 n
-0000593984 00000 n
-0000597703 00000 n
-0000597830 00000 n
-0000601609 00000 n
-0000600817 00000 n
-0000598023 00000 n
-0000601287 00000 n
-0000601416 00000 n
-0000601544 00000 n
-0000600973 00000 n
-0000601134 00000 n
-0000604837 00000 n
-0000604329 00000 n
-0000601780 00000 n
-0000604643 00000 n
-0000604476 00000 n
-0000608443 00000 n
-0000607994 00000 n
-0000604951 00000 n
-0000608120 00000 n
-0000608185 00000 n
-0000608250 00000 n
-0000608378 00000 n
-0000612443 00000 n
-0000612070 00000 n
-0000608628 00000 n
-0000612378 00000 n
-0000612217 00000 n
-0000616887 00000 n
-0000616385 00000 n
-0000612614 00000 n
-0000616695 00000 n
-0000616532 00000 n
-0000616824 00000 n
-0001207799 00000 n
-0000746721 00000 n
-0000620634 00000 n
-0000620124 00000 n
-0000617015 00000 n
-0000620440 00000 n
-0000620271 00000 n
-0000620569 00000 n
-0000670761 00000 n
-0000622375 00000 n
-0000622184 00000 n
-0000620775 00000 n
-0000622310 00000 n
-0000624120 00000 n
-0000623929 00000 n
-0000622475 00000 n
-0000624055 00000 n
-0000627583 00000 n
-0000627263 00000 n
-0000624220 00000 n
-0000627389 00000 n
-0000632281 00000 n
-0000631735 00000 n
-0000627753 00000 n
-0000632087 00000 n
-0000632216 00000 n
-0000631882 00000 n
-0000636511 00000 n
-0000636191 00000 n
-0000632409 00000 n
-0000636317 00000 n
-0000636446 00000 n
-0001207924 00000 n
-0000640643 00000 n
-0000640452 00000 n
-0000636652 00000 n
-0000640578 00000 n
-0000643549 00000 n
-0000643230 00000 n
-0000640770 00000 n
-0000643356 00000 n
-0000643485 00000 n
-0000648262 00000 n
-0000648071 00000 n
-0000643677 00000 n
-0000648197 00000 n
-0000652313 00000 n
-0000651993 00000 n
-0000648376 00000 n
-0000652119 00000 n
-0000652248 00000 n
-0000657038 00000 n
-0000656547 00000 n
-0000652441 00000 n
-0000656845 00000 n
-0000656694 00000 n
-0000662533 00000 n
-0000660971 00000 n
-0000657152 00000 n
-0000662210 00000 n
-0000661163 00000 n
-0000662339 00000 n
-0000662468 00000 n
-0000661323 00000 n
-0000661498 00000 n
-0000661676 00000 n
-0000661856 00000 n
-0000662032 00000 n
-0001208049 00000 n
-0000666519 00000 n
-0000665638 00000 n
-0000662661 00000 n
-0000665939 00000 n
-0000666068 00000 n
-0000666197 00000 n
-0000665785 00000 n
-0000666326 00000 n
-0000670953 00000 n
-0000670506 00000 n
-0000666633 00000 n
-0000670632 00000 n
-0000670890 00000 n
-0000673581 00000 n
-0000673261 00000 n
-0000671095 00000 n
-0000673387 00000 n
-0000675208 00000 n
-0000675017 00000 n
-0000673695 00000 n
-0000675143 00000 n
-0000676793 00000 n
-0000676602 00000 n
-0000675309 00000 n
-0000676728 00000 n
-0000678173 00000 n
-0000677982 00000 n
-0000676894 00000 n
-0000678108 00000 n
-0001208174 00000 n
-0000681825 00000 n
-0000681246 00000 n
-0000678274 00000 n
-0000681372 00000 n
-0000681501 00000 n
-0000681630 00000 n
-0000681695 00000 n
-0000681760 00000 n
-0000684713 00000 n
-0000684522 00000 n
-0000681939 00000 n
-0000684648 00000 n
-0000689077 00000 n
-0000687932 00000 n
-0000684827 00000 n
-0000688755 00000 n
-0000688106 00000 n
-0000688883 00000 n
-0000689012 00000 n
-0000688274 00000 n
-0000688434 00000 n
-0000688595 00000 n
-0000994559 00000 n
-0000695084 00000 n
-0000692484 00000 n
-0000689205 00000 n
-0000695019 00000 n
-0000692748 00000 n
-0000692910 00000 n
-0000693072 00000 n
-0000693243 00000 n
-0000693405 00000 n
-0000693568 00000 n
-0000693730 00000 n
-0000693893 00000 n
-0000694055 00000 n
-0000694218 00000 n
-0000694380 00000 n
-0000694543 00000 n
-0000694697 00000 n
-0000694860 00000 n
-0000700317 00000 n
-0000698396 00000 n
-0000695212 00000 n
-0000700252 00000 n
-0000698624 00000 n
-0000698787 00000 n
-0000698954 00000 n
-0000699124 00000 n
-0000699286 00000 n
-0000699448 00000 n
-0000699610 00000 n
-0000699772 00000 n
-0000699935 00000 n
-0000700089 00000 n
-0000705530 00000 n
-0000703324 00000 n
-0000700445 00000 n
-0000705465 00000 n
-0000703570 00000 n
-0000703723 00000 n
-0000703877 00000 n
-0000704027 00000 n
-0000704181 00000 n
-0000704343 00000 n
-0000704505 00000 n
-0000704667 00000 n
-0000704829 00000 n
-0000704990 00000 n
-0000705152 00000 n
-0000705313 00000 n
-0001208299 00000 n
-0000710861 00000 n
-0000709343 00000 n
-0000705644 00000 n
-0000710668 00000 n
-0000709544 00000 n
-0000709707 00000 n
-0000709858 00000 n
-0000710023 00000 n
-0000710189 00000 n
-0000710351 00000 n
-0000710505 00000 n
-0000714800 00000 n
-0000714479 00000 n
-0000711003 00000 n
-0000714605 00000 n
-0000714670 00000 n
-0000714735 00000 n
-0000717577 00000 n
-0000717386 00000 n
-0000714942 00000 n
-0000717512 00000 n
-0000721772 00000 n
-0000720703 00000 n
-0000717735 00000 n
-0000721190 00000 n
-0000721319 00000 n
-0000721577 00000 n
-0000720859 00000 n
-0000721029 00000 n
-0000721642 00000 n
-0000721707 00000 n
-0000725224 00000 n
-0000724904 00000 n
-0000721900 00000 n
-0000725030 00000 n
-0000725095 00000 n
-0000725159 00000 n
-0000728709 00000 n
-0000728388 00000 n
-0000725325 00000 n
-0000728514 00000 n
-0000728579 00000 n
-0000728644 00000 n
-0001208424 00000 n
-0000732633 00000 n
-0000731924 00000 n
-0000728824 00000 n
-0000732050 00000 n
-0000732179 00000 n
-0000732244 00000 n
-0000732309 00000 n
-0000732374 00000 n
-0000732439 00000 n
-0000732568 00000 n
-0000736862 00000 n
-0000736025 00000 n
-0000732747 00000 n
-0000736151 00000 n
-0000736216 00000 n
-0000736281 00000 n
-0000736410 00000 n
-0000736475 00000 n
-0000736540 00000 n
-0000736669 00000 n
-0000736734 00000 n
-0000736798 00000 n
-0000739891 00000 n
-0000739189 00000 n
-0000736990 00000 n
-0000739315 00000 n
-0000739442 00000 n
-0000739569 00000 n
-0000739698 00000 n
-0000739826 00000 n
-0000742592 00000 n
-0000742015 00000 n
-0000740090 00000 n
-0000742141 00000 n
-0000742270 00000 n
-0000742399 00000 n
-0000742464 00000 n
-0000742528 00000 n
-0000746786 00000 n
-0000746466 00000 n
-0000742777 00000 n
-0000746592 00000 n
-0000750551 00000 n
-0000749791 00000 n
-0000746913 00000 n
-0000750098 00000 n
-0000750227 00000 n
-0000750292 00000 n
-0000750357 00000 n
-0000749938 00000 n
-0001208549 00000 n
-0000754239 00000 n
-0000753660 00000 n
-0000750665 00000 n
-0000753786 00000 n
-0000753915 00000 n
-0000754044 00000 n
-0000754109 00000 n
-0000754174 00000 n
-0000757836 00000 n
-0000756942 00000 n
-0000754353 00000 n
-0000757254 00000 n
-0000757089 00000 n
-0000757383 00000 n
-0000757448 00000 n
-0000757513 00000 n
-0000757642 00000 n
-0000757707 00000 n
-0000757772 00000 n
-0000994526 00000 n
-0000762020 00000 n
-0000761571 00000 n
-0000757950 00000 n
-0000761697 00000 n
-0000761826 00000 n
-0000761891 00000 n
-0000761956 00000 n
-0000764063 00000 n
-0000763743 00000 n
-0000762148 00000 n
-0000763869 00000 n
-0001013332 00000 n
-0001006048 00000 n
-0001013152 00000 n
-0000763998 00000 n
-0000765975 00000 n
-0000765528 00000 n
-0000764205 00000 n
-0000765654 00000 n
-0000765783 00000 n
-0000765910 00000 n
-0000770161 00000 n
-0000769455 00000 n
-0000766089 00000 n
-0000769581 00000 n
-0001005727 00000 n
-0000996514 00000 n
-0001005541 00000 n
-0000769710 00000 n
-0000769839 00000 n
-0000769967 00000 n
-0001208674 00000 n
-0000771194 00000 n
-0000771003 00000 n
-0000770388 00000 n
-0000771129 00000 n
+0000427966 00000 n
+0000428095 00000 n
+0000428224 00000 n
+0000428352 00000 n
+0000432258 00000 n
+0000431164 00000 n
+0000428531 00000 n
+0000431290 00000 n
+0000431419 00000 n
+0000431548 00000 n
+0000431677 00000 n
+0000431806 00000 n
+0000431935 00000 n
+0000432064 00000 n
+0000432193 00000 n
+0000436369 00000 n
+0000435610 00000 n
+0000432386 00000 n
+0000435917 00000 n
+0000436046 00000 n
+0000436175 00000 n
+0000435757 00000 n
+0000436304 00000 n
+0000671640 00000 n
+0000439978 00000 n
+0000439529 00000 n
+0000436483 00000 n
+0000439655 00000 n
+0000439784 00000 n
+0000439913 00000 n
+0000442489 00000 n
+0000442169 00000 n
+0000440134 00000 n
+0000442295 00000 n
+0000442424 00000 n
+0000445226 00000 n
+0000444778 00000 n
+0000442646 00000 n
+0000444904 00000 n
+0000445033 00000 n
+0000445161 00000 n
+0001215847 00000 n
+0000447986 00000 n
+0000447280 00000 n
+0000445340 00000 n
+0000447406 00000 n
+0000447534 00000 n
+0000447663 00000 n
+0000447792 00000 n
+0000447921 00000 n
+0000451048 00000 n
+0000450601 00000 n
+0000448100 00000 n
+0000450727 00000 n
+0000450856 00000 n
+0000450984 00000 n
+0000453928 00000 n
+0000453480 00000 n
+0000451162 00000 n
+0000453606 00000 n
+0000453734 00000 n
+0000453863 00000 n
+0000456888 00000 n
+0000458426 00000 n
+0000456741 00000 n
+0000454056 00000 n
+0000457975 00000 n
+0000458103 00000 n
+0000457814 00000 n
+0000458232 00000 n
+0000458361 00000 n
+0000788027 00000 n
+0000459185 00000 n
+0000458994 00000 n
+0000458597 00000 n
+0000459120 00000 n
+0000459627 00000 n
+0000459436 00000 n
+0000459286 00000 n
+0000459562 00000 n
+0001215972 00000 n
+0000462242 00000 n
+0000461664 00000 n
+0000459669 00000 n
+0000461790 00000 n
+0000461919 00000 n
+0000462048 00000 n
+0000462177 00000 n
+0000462683 00000 n
+0000462492 00000 n
+0000462342 00000 n
+0000462618 00000 n
+0000466770 00000 n
+0000466004 00000 n
+0000462725 00000 n
+0000466318 00000 n
+0000466447 00000 n
+0000466575 00000 n
+0000466640 00000 n
+0000466705 00000 n
+0000466151 00000 n
+0000474837 00000 n
+0000471494 00000 n
+0000471303 00000 n
+0000466870 00000 n
+0000471429 00000 n
+0000475160 00000 n
+0000474582 00000 n
+0000471636 00000 n
+0000474708 00000 n
+0000474966 00000 n
+0000475095 00000 n
+0000477851 00000 n
+0000477273 00000 n
+0000475301 00000 n
+0000477399 00000 n
+0000477528 00000 n
+0000477657 00000 n
+0000477786 00000 n
+0001216097 00000 n
+0000481520 00000 n
+0000480682 00000 n
+0000478008 00000 n
+0000480808 00000 n
+0000480937 00000 n
+0000481002 00000 n
+0000481067 00000 n
+0000481196 00000 n
+0000481325 00000 n
+0000481390 00000 n
+0000481455 00000 n
+0000486573 00000 n
+0000485786 00000 n
+0000481634 00000 n
+0000486250 00000 n
+0000486379 00000 n
+0000485942 00000 n
+0000486092 00000 n
+0001003640 00000 n
+0000491180 00000 n
+0000489782 00000 n
+0000486701 00000 n
+0000490472 00000 n
+0000490601 00000 n
+0000490730 00000 n
+0000490859 00000 n
+0000490988 00000 n
+0000489947 00000 n
+0000490098 00000 n
+0000490285 00000 n
+0000491116 00000 n
+0000494475 00000 n
+0000494026 00000 n
+0000491335 00000 n
+0000494152 00000 n
+0000494281 00000 n
+0000494410 00000 n
+0000498866 00000 n
+0000498675 00000 n
+0000494603 00000 n
+0000498801 00000 n
+0000501723 00000 n
+0000501216 00000 n
+0000498980 00000 n
+0000501530 00000 n
+0000501363 00000 n
+0000501658 00000 n
+0001216222 00000 n
+0000505078 00000 n
+0000504757 00000 n
+0000501837 00000 n
+0000504883 00000 n
+0000504948 00000 n
+0000505013 00000 n
+0000508685 00000 n
+0000508365 00000 n
+0000505192 00000 n
+0000508491 00000 n
+0000508620 00000 n
+0000512159 00000 n
+0000511838 00000 n
+0000508813 00000 n
+0000511964 00000 n
+0000512029 00000 n
+0000512094 00000 n
+0000515628 00000 n
+0000514590 00000 n
+0000512260 00000 n
+0000515049 00000 n
+0000515178 00000 n
+0000515307 00000 n
+0000514746 00000 n
+0000514900 00000 n
+0000515435 00000 n
+0000515564 00000 n
+0000517346 00000 n
+0000517026 00000 n
+0000515742 00000 n
+0000517152 00000 n
+0000517281 00000 n
+0000518840 00000 n
+0000518649 00000 n
+0000517460 00000 n
+0000518775 00000 n
+0001216347 00000 n
+0000520391 00000 n
+0000520200 00000 n
+0000518941 00000 n
+0000520326 00000 n
+0000522221 00000 n
+0000521902 00000 n
+0000520492 00000 n
+0000522028 00000 n
+0000522157 00000 n
+0000525553 00000 n
+0000525362 00000 n
+0000522335 00000 n
+0000525488 00000 n
+0000529792 00000 n
+0000529601 00000 n
+0000525681 00000 n
+0000529727 00000 n
+0000534170 00000 n
+0000533622 00000 n
+0000529934 00000 n
+0000534105 00000 n
+0000533778 00000 n
+0000533935 00000 n
+0000755743 00000 n
+0000538587 00000 n
+0000538190 00000 n
+0000534298 00000 n
+0000538522 00000 n
+0000538337 00000 n
+0001216472 00000 n
+0000542812 00000 n
+0000542135 00000 n
+0000538729 00000 n
+0000542618 00000 n
+0000542291 00000 n
+0000542461 00000 n
+0000546857 00000 n
+0000546536 00000 n
+0000542940 00000 n
+0000546662 00000 n
+0000546727 00000 n
+0000546792 00000 n
+0000551463 00000 n
+0000550724 00000 n
+0000546985 00000 n
+0000551398 00000 n
+0000550889 00000 n
+0000551043 00000 n
+0000551226 00000 n
+0000662008 00000 n
+0000556257 00000 n
+0000555666 00000 n
+0000551634 00000 n
+0000556192 00000 n
+0000555822 00000 n
+0000556007 00000 n
+0000560338 00000 n
+0000560147 00000 n
+0000556398 00000 n
+0000560273 00000 n
+0000564316 00000 n
+0000564125 00000 n
+0000560452 00000 n
+0000564251 00000 n
+0001216597 00000 n
+0000569077 00000 n
+0000568091 00000 n
+0000564430 00000 n
+0000568755 00000 n
+0000568256 00000 n
+0000568421 00000 n
+0000568884 00000 n
+0000568587 00000 n
+0000569013 00000 n
+0000678702 00000 n
+0000572586 00000 n
+0000572078 00000 n
+0000569191 00000 n
+0000572392 00000 n
+0000572521 00000 n
+0000572225 00000 n
+0000577054 00000 n
+0000576492 00000 n
+0000572743 00000 n
+0000576989 00000 n
+0000576648 00000 n
+0000576818 00000 n
+0000775742 00000 n
+0000580412 00000 n
+0000580092 00000 n
+0000577182 00000 n
+0000580218 00000 n
+0000580347 00000 n
+0000583932 00000 n
+0000583612 00000 n
+0000580540 00000 n
+0000583738 00000 n
+0000583867 00000 n
+0000586979 00000 n
+0000586660 00000 n
+0000584046 00000 n
+0000586786 00000 n
+0001216722 00000 n
+0000591022 00000 n
+0000590831 00000 n
+0000587136 00000 n
+0000590957 00000 n
+0000594681 00000 n
+0000594179 00000 n
+0000591179 00000 n
+0000594487 00000 n
+0000594616 00000 n
+0000594326 00000 n
+0000599170 00000 n
+0000598362 00000 n
+0000594852 00000 n
+0000598848 00000 n
+0000598977 00000 n
+0000598518 00000 n
+0000599106 00000 n
+0000598693 00000 n
+0000603006 00000 n
+0000602559 00000 n
+0000599284 00000 n
+0000602685 00000 n
+0000602814 00000 n
+0000602942 00000 n
+0000607303 00000 n
+0000606635 00000 n
+0000603177 00000 n
+0000607109 00000 n
+0000607238 00000 n
+0000606791 00000 n
+0000606953 00000 n
+0000610383 00000 n
+0000609743 00000 n
+0000607474 00000 n
+0000610060 00000 n
+0000609890 00000 n
+0000610253 00000 n
+0000610318 00000 n
+0001216847 00000 n
+0000613857 00000 n
+0000613358 00000 n
+0000610511 00000 n
+0000613665 00000 n
+0000613794 00000 n
+0000613505 00000 n
+0000617959 00000 n
+0000617768 00000 n
+0000614042 00000 n
+0000617894 00000 n
+0000622716 00000 n
+0000622035 00000 n
+0000618087 00000 n
+0000622522 00000 n
+0000622191 00000 n
+0000622651 00000 n
+0000622353 00000 n
+0000751978 00000 n
+0000675949 00000 n
+0000625856 00000 n
+0000625536 00000 n
+0000622858 00000 n
+0000625662 00000 n
+0000625791 00000 n
+0000627578 00000 n
+0000627387 00000 n
+0000625983 00000 n
+0000627513 00000 n
+0000629328 00000 n
+0000629137 00000 n
+0000627678 00000 n
+0000629263 00000 n
+0001216972 00000 n
+0000632845 00000 n
+0000632525 00000 n
+0000629428 00000 n
+0000632651 00000 n
+0000637473 00000 n
+0000636927 00000 n
+0000633015 00000 n
+0000637279 00000 n
+0000637408 00000 n
+0000637074 00000 n
+0000641751 00000 n
+0000641431 00000 n
+0000637601 00000 n
+0000641557 00000 n
+0000641686 00000 n
+0000645931 00000 n
+0000645740 00000 n
+0000641892 00000 n
+0000645866 00000 n
+0000648811 00000 n
+0000648491 00000 n
+0000646044 00000 n
+0000648617 00000 n
+0000648746 00000 n
+0000653517 00000 n
+0000653326 00000 n
+0000648953 00000 n
+0000653452 00000 n
+0001217097 00000 n
+0000657403 00000 n
+0000657084 00000 n
+0000653617 00000 n
+0000657210 00000 n
+0000657339 00000 n
+0000662073 00000 n
+0000661582 00000 n
+0000657531 00000 n
+0000661879 00000 n
+0000661729 00000 n
+0000667726 00000 n
+0000666164 00000 n
+0000662187 00000 n
+0000667403 00000 n
+0000666356 00000 n
+0000667532 00000 n
+0000667661 00000 n
+0000666518 00000 n
+0000666692 00000 n
+0000666870 00000 n
+0000667049 00000 n
+0000667225 00000 n
+0000671704 00000 n
+0000670823 00000 n
+0000667854 00000 n
+0000671124 00000 n
+0000671253 00000 n
+0000671382 00000 n
+0000670970 00000 n
+0000671511 00000 n
+0000676141 00000 n
+0000675694 00000 n
+0000671818 00000 n
+0000675820 00000 n
+0000676078 00000 n
+0000678767 00000 n
+0000678447 00000 n
+0000676283 00000 n
+0000678573 00000 n
+0001217222 00000 n
+0000680394 00000 n
+0000680203 00000 n
+0000678881 00000 n
+0000680329 00000 n
+0000681976 00000 n
+0000681785 00000 n
+0000680495 00000 n
+0000681911 00000 n
+0000683358 00000 n
+0000683167 00000 n
+0000682077 00000 n
+0000683293 00000 n
+0000687007 00000 n
+0000686428 00000 n
+0000683459 00000 n
+0000686554 00000 n
+0000686683 00000 n
+0000686812 00000 n
+0000686877 00000 n
+0000686942 00000 n
+0000689891 00000 n
+0000689700 00000 n
+0000687121 00000 n
+0000689826 00000 n
+0000694251 00000 n
+0000693107 00000 n
+0000690005 00000 n
+0000693929 00000 n
+0000693281 00000 n
+0000694057 00000 n
+0000694186 00000 n
+0000693448 00000 n
+0000693608 00000 n
+0000693769 00000 n
+0001217347 00000 n
+0001003607 00000 n
+0000700263 00000 n
+0000697664 00000 n
+0000694379 00000 n
+0000700198 00000 n
+0000697928 00000 n
+0000698090 00000 n
+0000698252 00000 n
+0000698423 00000 n
+0000698585 00000 n
+0000698748 00000 n
+0000698910 00000 n
+0000699071 00000 n
+0000699231 00000 n
+0000699394 00000 n
+0000699556 00000 n
+0000699719 00000 n
+0000699873 00000 n
+0000700036 00000 n
+0000705493 00000 n
+0000703573 00000 n
+0000700391 00000 n
+0000705428 00000 n
+0000703801 00000 n
+0000703962 00000 n
+0000704130 00000 n
+0000704300 00000 n
+0000704462 00000 n
+0000704624 00000 n
+0000704786 00000 n
+0000704948 00000 n
+0000705111 00000 n
+0000705265 00000 n
+0000710698 00000 n
+0000708498 00000 n
+0000705621 00000 n
+0000710633 00000 n
+0000708744 00000 n
+0000708898 00000 n
+0000709052 00000 n
+0000709205 00000 n
+0000709359 00000 n
+0000709521 00000 n
+0000709683 00000 n
+0000709843 00000 n
+0000710003 00000 n
+0000710164 00000 n
+0000710324 00000 n
+0000710482 00000 n
+0000716040 00000 n
+0000714521 00000 n
+0000710812 00000 n
+0000715847 00000 n
+0000714722 00000 n
+0000714885 00000 n
+0000715040 00000 n
+0000715205 00000 n
+0000715371 00000 n
+0000715533 00000 n
+0000715687 00000 n
+0000719986 00000 n
+0000719665 00000 n
+0000716182 00000 n
+0000719791 00000 n
+0000719856 00000 n
+0000719921 00000 n
+0000722760 00000 n
+0000722569 00000 n
+0000720128 00000 n
+0000722695 00000 n
+0001217472 00000 n
+0000726965 00000 n
+0000725895 00000 n
+0000722918 00000 n
+0000726383 00000 n
+0000726512 00000 n
+0000726770 00000 n
+0000726051 00000 n
+0000726221 00000 n
+0000726835 00000 n
+0000726900 00000 n
+0000730417 00000 n
+0000730097 00000 n
+0000727093 00000 n
+0000730223 00000 n
+0000730288 00000 n
+0000730352 00000 n
+0000733905 00000 n
+0000733584 00000 n
+0000730518 00000 n
+0000733710 00000 n
+0000733775 00000 n
+0000733840 00000 n
+0000737826 00000 n
+0000737117 00000 n
+0000734020 00000 n
+0000737243 00000 n
+0000737372 00000 n
+0000737437 00000 n
+0000737502 00000 n
+0000737567 00000 n
+0000737632 00000 n
+0000737761 00000 n
+0000742068 00000 n
+0000741231 00000 n
+0000737940 00000 n
+0000741357 00000 n
+0000741422 00000 n
+0000741487 00000 n
+0000741616 00000 n
+0000741681 00000 n
+0000741746 00000 n
+0000741875 00000 n
+0000741940 00000 n
+0000742004 00000 n
+0000745096 00000 n
+0000744394 00000 n
+0000742196 00000 n
+0000744520 00000 n
+0000744647 00000 n
+0000744774 00000 n
+0000744903 00000 n
+0000745031 00000 n
+0001217597 00000 n
+0000747805 00000 n
+0000747228 00000 n
+0000745295 00000 n
+0000747354 00000 n
+0000747483 00000 n
+0000747612 00000 n
+0000747677 00000 n
+0000747741 00000 n
+0000752043 00000 n
+0000751723 00000 n
+0000747990 00000 n
+0000751849 00000 n
+0000755808 00000 n
+0000755048 00000 n
+0000752170 00000 n
+0000755355 00000 n
+0000755484 00000 n
+0000755549 00000 n
+0000755614 00000 n
+0000755195 00000 n
+0000759498 00000 n
+0000758919 00000 n
+0000755922 00000 n
+0000759045 00000 n
+0000759174 00000 n
+0000759303 00000 n
+0000759368 00000 n
+0000759433 00000 n
+0000763098 00000 n
+0000762204 00000 n
+0000759612 00000 n
+0000762516 00000 n
+0000762351 00000 n
+0000762645 00000 n
+0000762710 00000 n
+0000762775 00000 n
+0000762904 00000 n
+0000762969 00000 n
+0000763034 00000 n
+0001003574 00000 n
+0000767278 00000 n
+0000766829 00000 n
+0000763212 00000 n
+0000766955 00000 n
+0000767084 00000 n
+0000767149 00000 n
+0000767214 00000 n
+0001217722 00000 n
+0000769329 00000 n
+0000769009 00000 n
+0000767406 00000 n
+0000769135 00000 n
+0001022380 00000 n
+0001015096 00000 n
+0001022200 00000 n
+0000769264 00000 n
+0000769812 00000 n
+0000769621 00000 n
+0000769471 00000 n
+0000769747 00000 n
0000771622 00000 n
-0000771431 00000 n
-0000771281 00000 n
+0000771175 00000 n
+0000769854 00000 n
+0000771301 00000 n
+0000771430 00000 n
0000771557 00000 n
-0000774936 00000 n
-0000773710 00000 n
-0000771664 00000 n
-0000774227 00000 n
-0000774356 00000 n
-0000774485 00000 n
-0000774614 00000 n
-0000774743 00000 n
-0000774872 00000 n
-0000773866 00000 n
-0000774038 00000 n
-0000775391 00000 n
-0000775200 00000 n
-0000775050 00000 n
-0000775326 00000 n
-0000778636 00000 n
-0000778058 00000 n
-0000775433 00000 n
-0000778184 00000 n
-0000778313 00000 n
-0000778442 00000 n
-0000778571 00000 n
-0000782833 00000 n
-0000781614 00000 n
-0000778722 00000 n
-0000782124 00000 n
-0000782253 00000 n
-0000782511 00000 n
-0000781770 00000 n
-0000781949 00000 n
-0000782705 00000 n
-0000782769 00000 n
-0001208799 00000 n
-0000789723 00000 n
-0000785895 00000 n
-0000782989 00000 n
-0000786021 00000 n
-0000786086 00000 n
-0000786151 00000 n
-0000786216 00000 n
-0000786281 00000 n
-0000786346 00000 n
-0000786411 00000 n
-0000786476 00000 n
-0000786541 00000 n
-0000786606 00000 n
-0000786736 00000 n
-0000786801 00000 n
-0000786866 00000 n
-0000786931 00000 n
-0000786996 00000 n
-0000787061 00000 n
-0000787126 00000 n
-0000787191 00000 n
-0000787256 00000 n
-0000787321 00000 n
-0000787386 00000 n
-0000787451 00000 n
-0000787516 00000 n
-0000787581 00000 n
-0000787646 00000 n
-0000787711 00000 n
-0000787776 00000 n
-0000787841 00000 n
-0000787906 00000 n
-0000787971 00000 n
-0000788036 00000 n
-0000788101 00000 n
-0000788166 00000 n
-0000788231 00000 n
-0000788295 00000 n
-0000788360 00000 n
-0000788425 00000 n
-0000788490 00000 n
-0000788555 00000 n
-0000788620 00000 n
-0000788685 00000 n
-0000788750 00000 n
-0000788815 00000 n
-0000788880 00000 n
-0000788945 00000 n
-0000789010 00000 n
-0000789075 00000 n
-0000789140 00000 n
-0000789205 00000 n
-0000789270 00000 n
-0000789335 00000 n
-0000789400 00000 n
-0000789465 00000 n
-0000789530 00000 n
-0000789595 00000 n
-0000789659 00000 n
-0000796371 00000 n
-0000792807 00000 n
-0000789837 00000 n
-0000792933 00000 n
-0000792998 00000 n
-0000793063 00000 n
-0000793128 00000 n
-0000793193 00000 n
-0000793258 00000 n
-0000793323 00000 n
-0000793388 00000 n
-0000793453 00000 n
-0000793518 00000 n
-0000793583 00000 n
-0000793648 00000 n
-0000793712 00000 n
-0000793777 00000 n
-0000793842 00000 n
-0000793907 00000 n
-0000793972 00000 n
-0000794037 00000 n
-0000794102 00000 n
-0000794167 00000 n
-0000794232 00000 n
-0000794297 00000 n
-0000794362 00000 n
-0000794427 00000 n
-0000794491 00000 n
-0000794556 00000 n
-0000794621 00000 n
-0000794686 00000 n
-0000794751 00000 n
-0000794816 00000 n
-0000794881 00000 n
-0000794946 00000 n
-0000795011 00000 n
-0000795076 00000 n
-0000795141 00000 n
-0000795206 00000 n
-0000795271 00000 n
-0000795336 00000 n
-0000795401 00000 n
-0000795466 00000 n
-0000795530 00000 n
-0000795594 00000 n
-0000795658 00000 n
-0000795723 00000 n
-0000795788 00000 n
-0000795853 00000 n
-0000795918 00000 n
-0000795983 00000 n
-0000796048 00000 n
-0000796113 00000 n
-0000796178 00000 n
-0000796243 00000 n
-0000796307 00000 n
-0000802546 00000 n
-0000799108 00000 n
-0000796485 00000 n
-0000799234 00000 n
-0000799299 00000 n
-0000799364 00000 n
-0000799429 00000 n
-0000799494 00000 n
-0000799559 00000 n
-0000799624 00000 n
-0000799689 00000 n
-0000799754 00000 n
-0000799819 00000 n
-0000799884 00000 n
-0000799949 00000 n
-0000800014 00000 n
-0000800079 00000 n
-0000800144 00000 n
-0000800209 00000 n
-0000800274 00000 n
-0000800339 00000 n
-0000800404 00000 n
-0000800469 00000 n
-0000800534 00000 n
-0000800599 00000 n
-0000800664 00000 n
-0000800729 00000 n
-0000800794 00000 n
-0000800859 00000 n
-0000800924 00000 n
-0000800989 00000 n
-0000801054 00000 n
-0000801119 00000 n
-0000801184 00000 n
-0000801249 00000 n
-0000801314 00000 n
-0000801379 00000 n
-0000801443 00000 n
-0000801508 00000 n
-0000801573 00000 n
-0000801638 00000 n
-0000801703 00000 n
-0000801768 00000 n
-0000801833 00000 n
-0000801898 00000 n
-0000801963 00000 n
-0000802028 00000 n
-0000802093 00000 n
-0000802158 00000 n
-0000802223 00000 n
-0000802288 00000 n
-0000802353 00000 n
-0000802418 00000 n
-0000802482 00000 n
-0000808065 00000 n
-0000805669 00000 n
-0000802660 00000 n
-0000805795 00000 n
-0000805860 00000 n
-0000805925 00000 n
-0000805990 00000 n
-0000806055 00000 n
-0000806120 00000 n
-0000806185 00000 n
-0000806250 00000 n
-0000806315 00000 n
-0000806380 00000 n
-0000806445 00000 n
-0000806510 00000 n
-0000806575 00000 n
-0000806639 00000 n
-0000806704 00000 n
-0000806769 00000 n
-0000806834 00000 n
-0000806899 00000 n
-0000806964 00000 n
-0000807029 00000 n
-0000807094 00000 n
-0000807159 00000 n
-0000807224 00000 n
-0000807289 00000 n
-0000807354 00000 n
-0000807482 00000 n
-0000807611 00000 n
-0000807676 00000 n
-0000807741 00000 n
-0000807806 00000 n
-0000807871 00000 n
-0000808000 00000 n
-0000811273 00000 n
-0000810566 00000 n
-0000808192 00000 n
-0000810692 00000 n
-0000810821 00000 n
-0000810950 00000 n
-0000811079 00000 n
-0000811208 00000 n
-0000814765 00000 n
-0000814008 00000 n
-0000811400 00000 n
-0000814315 00000 n
-0000814444 00000 n
-0000814155 00000 n
-0000814572 00000 n
-0000814700 00000 n
-0001208924 00000 n
-0000818009 00000 n
-0000817431 00000 n
-0000814892 00000 n
-0000817557 00000 n
-0000817686 00000 n
-0000817815 00000 n
-0000817944 00000 n
-0000820917 00000 n
-0000820597 00000 n
-0000818123 00000 n
-0000820723 00000 n
-0000820852 00000 n
-0000823507 00000 n
-0000823058 00000 n
-0000821087 00000 n
-0000823184 00000 n
-0000823313 00000 n
-0000823442 00000 n
-0000823948 00000 n
-0000823757 00000 n
-0000823607 00000 n
-0000823883 00000 n
-0000826727 00000 n
-0000826083 00000 n
-0000823990 00000 n
-0000826209 00000 n
-0000826338 00000 n
-0000826467 00000 n
-0000826532 00000 n
-0000826597 00000 n
-0000826662 00000 n
-0000831061 00000 n
-0000830740 00000 n
-0000826841 00000 n
-0000830866 00000 n
-0000830931 00000 n
-0000830996 00000 n
-0001209049 00000 n
-0000834824 00000 n
-0000834568 00000 n
-0000831217 00000 n
-0000834694 00000 n
-0000834759 00000 n
-0000838115 00000 n
-0000837924 00000 n
-0000834966 00000 n
-0000838050 00000 n
-0000841634 00000 n
-0000841443 00000 n
-0000838243 00000 n
-0000841569 00000 n
-0000845099 00000 n
-0000844584 00000 n
-0000841776 00000 n
-0000844710 00000 n
-0000844775 00000 n
-0000844840 00000 n
-0000844905 00000 n
-0000844970 00000 n
-0000845035 00000 n
-0000849298 00000 n
-0000848783 00000 n
-0000845255 00000 n
-0000848909 00000 n
-0000849038 00000 n
-0000849103 00000 n
-0000849168 00000 n
-0000849233 00000 n
-0000852930 00000 n
-0000852221 00000 n
-0000849426 00000 n
-0000852347 00000 n
-0000852412 00000 n
-0000852477 00000 n
-0000852542 00000 n
-0000852671 00000 n
-0000852736 00000 n
-0000852801 00000 n
-0000852866 00000 n
-0001209174 00000 n
-0000856135 00000 n
-0000855427 00000 n
-0000853072 00000 n
-0000855553 00000 n
-0000855618 00000 n
-0000855681 00000 n
-0000855746 00000 n
-0000855875 00000 n
-0000855940 00000 n
-0000856005 00000 n
-0000856070 00000 n
-0000859425 00000 n
-0000859040 00000 n
-0000856277 00000 n
-0000859166 00000 n
-0000859231 00000 n
-0000859296 00000 n
-0000859361 00000 n
-0000862602 00000 n
-0000862023 00000 n
-0000859553 00000 n
-0000862149 00000 n
-0000862278 00000 n
-0000862343 00000 n
-0000862408 00000 n
-0000862473 00000 n
-0000862537 00000 n
-0000865199 00000 n
-0000864424 00000 n
-0000862758 00000 n
-0000864550 00000 n
-0000864615 00000 n
-0000864680 00000 n
-0000864745 00000 n
-0000864810 00000 n
-0000864875 00000 n
-0000865004 00000 n
-0000865069 00000 n
-0000865134 00000 n
-0000868695 00000 n
-0000868374 00000 n
-0000865369 00000 n
-0000868500 00000 n
-0000868565 00000 n
-0000868630 00000 n
-0000872250 00000 n
-0000871931 00000 n
-0000868823 00000 n
-0000872057 00000 n
-0000872122 00000 n
-0000872187 00000 n
-0001209299 00000 n
-0000875466 00000 n
-0000874756 00000 n
-0000872378 00000 n
-0000874882 00000 n
-0000874947 00000 n
-0000875012 00000 n
-0000875206 00000 n
-0000875271 00000 n
-0000875336 00000 n
-0000875401 00000 n
-0000879229 00000 n
-0000879038 00000 n
-0000875635 00000 n
-0000879164 00000 n
-0000882939 00000 n
-0000882683 00000 n
-0000879357 00000 n
-0000882809 00000 n
-0000882874 00000 n
-0000886454 00000 n
-0000886133 00000 n
-0000883067 00000 n
-0000886259 00000 n
-0000886324 00000 n
-0000886389 00000 n
-0000889116 00000 n
-0000888406 00000 n
-0000886609 00000 n
-0000888532 00000 n
-0000888597 00000 n
-0000888662 00000 n
-0000888791 00000 n
-0000888856 00000 n
-0000888921 00000 n
-0000888986 00000 n
-0000889051 00000 n
-0000892497 00000 n
-0000891787 00000 n
-0000889286 00000 n
-0000891913 00000 n
-0000891978 00000 n
-0000892043 00000 n
-0000892237 00000 n
-0000892302 00000 n
-0000892367 00000 n
-0000892432 00000 n
-0001209424 00000 n
-0000895878 00000 n
-0000895557 00000 n
-0000892653 00000 n
-0000895683 00000 n
-0000895748 00000 n
-0000895813 00000 n
-0000899021 00000 n
-0000898312 00000 n
-0000895992 00000 n
-0000898438 00000 n
-0000898503 00000 n
-0000898568 00000 n
-0000898697 00000 n
-0000898761 00000 n
-0000898826 00000 n
-0000898891 00000 n
-0000898956 00000 n
-0000903034 00000 n
-0000902843 00000 n
-0000899177 00000 n
-0000902969 00000 n
-0000906921 00000 n
-0000906730 00000 n
-0000903162 00000 n
-0000906856 00000 n
-0000910447 00000 n
-0000910256 00000 n
-0000907049 00000 n
-0000910382 00000 n
-0000913639 00000 n
-0000913319 00000 n
-0000910575 00000 n
-0000913445 00000 n
-0000913510 00000 n
-0000913575 00000 n
-0001209549 00000 n
-0000916823 00000 n
-0000916179 00000 n
-0000913809 00000 n
-0000916305 00000 n
-0000916370 00000 n
-0000916499 00000 n
-0000916564 00000 n
-0000916629 00000 n
-0000916694 00000 n
-0000916759 00000 n
-0000919965 00000 n
-0000919256 00000 n
-0000916965 00000 n
-0000919382 00000 n
-0000919447 00000 n
-0000919512 00000 n
-0000919641 00000 n
-0000919706 00000 n
-0000919771 00000 n
-0000919836 00000 n
-0000919901 00000 n
-0000922878 00000 n
-0000922106 00000 n
-0000920121 00000 n
-0000922232 00000 n
-0000922297 00000 n
-0000922362 00000 n
-0000922427 00000 n
-0000922556 00000 n
-0000922621 00000 n
-0000922684 00000 n
-0000922749 00000 n
-0000922814 00000 n
-0000926235 00000 n
-0000926044 00000 n
-0000923020 00000 n
-0000926170 00000 n
-0000929379 00000 n
-0000928994 00000 n
-0000926349 00000 n
-0000929120 00000 n
-0000929185 00000 n
-0000929250 00000 n
-0000929315 00000 n
-0000932889 00000 n
-0000932309 00000 n
-0000929521 00000 n
-0000932435 00000 n
-0000932564 00000 n
-0000932629 00000 n
-0000932694 00000 n
-0000932759 00000 n
-0000932824 00000 n
-0001209674 00000 n
-0000935845 00000 n
-0000935654 00000 n
-0000933031 00000 n
-0000935780 00000 n
-0000938913 00000 n
-0000938528 00000 n
-0000936058 00000 n
-0000938654 00000 n
-0000938719 00000 n
-0000938784 00000 n
-0000938849 00000 n
-0000941620 00000 n
-0000940652 00000 n
-0000939154 00000 n
-0000940778 00000 n
-0000940843 00000 n
-0000940908 00000 n
-0000941037 00000 n
-0000941102 00000 n
-0000941167 00000 n
-0000941232 00000 n
-0000941297 00000 n
-0000941362 00000 n
-0000941491 00000 n
-0000941556 00000 n
-0000946126 00000 n
-0000945805 00000 n
-0000941762 00000 n
-0000945931 00000 n
-0000945996 00000 n
-0000946061 00000 n
-0000949876 00000 n
-0000949620 00000 n
-0000946254 00000 n
-0000949746 00000 n
-0000949811 00000 n
-0000953293 00000 n
-0000953037 00000 n
-0000950004 00000 n
-0000953163 00000 n
-0000953228 00000 n
-0001209799 00000 n
-0000955872 00000 n
-0000955294 00000 n
-0000953421 00000 n
-0000955420 00000 n
-0000955485 00000 n
-0000955550 00000 n
-0000955614 00000 n
-0000955808 00000 n
-0000959715 00000 n
-0000959264 00000 n
-0000956027 00000 n
-0000959390 00000 n
-0000959455 00000 n
-0000959520 00000 n
-0000959585 00000 n
-0000959650 00000 n
-0000963219 00000 n
-0000963028 00000 n
-0000959871 00000 n
-0000963154 00000 n
-0000966745 00000 n
-0000966554 00000 n
-0000963361 00000 n
-0000966680 00000 n
-0000970638 00000 n
-0000970319 00000 n
-0000966914 00000 n
-0000970445 00000 n
-0000970510 00000 n
-0000970575 00000 n
-0000974428 00000 n
-0000973848 00000 n
-0000970808 00000 n
-0000973974 00000 n
-0000974039 00000 n
-0000974168 00000 n
-0000974233 00000 n
-0000974298 00000 n
-0000974363 00000 n
-0001209924 00000 n
-0000976675 00000 n
-0000976354 00000 n
-0000974570 00000 n
-0000976480 00000 n
-0000976545 00000 n
-0000976610 00000 n
-0000980081 00000 n
-0000979373 00000 n
-0000976817 00000 n
-0000979499 00000 n
-0000979564 00000 n
-0000979629 00000 n
-0000979758 00000 n
-0000979823 00000 n
-0000979887 00000 n
-0000979952 00000 n
-0000980016 00000 n
-0000983160 00000 n
-0000982517 00000 n
-0000980237 00000 n
-0000982643 00000 n
-0000982708 00000 n
-0000982773 00000 n
-0000982837 00000 n
-0000982966 00000 n
-0000983031 00000 n
-0000983096 00000 n
-0000986882 00000 n
-0000986432 00000 n
-0000983330 00000 n
-0000986558 00000 n
-0000986623 00000 n
-0000986688 00000 n
-0000986753 00000 n
-0000986818 00000 n
-0000989427 00000 n
-0000988395 00000 n
-0000987038 00000 n
-0000988521 00000 n
-0000988650 00000 n
-0000988715 00000 n
-0000988780 00000 n
-0000988845 00000 n
-0000988910 00000 n
-0000988975 00000 n
-0000989103 00000 n
-0000989168 00000 n
-0000989233 00000 n
-0000989298 00000 n
-0000989363 00000 n
-0000992270 00000 n
-0000991431 00000 n
-0000989583 00000 n
-0000991557 00000 n
-0000991622 00000 n
-0000991687 00000 n
-0000991816 00000 n
-0000991881 00000 n
-0000991946 00000 n
-0000992011 00000 n
-0000992076 00000 n
-0000992141 00000 n
-0000992206 00000 n
-0001210049 00000 n
-0000994384 00000 n
-0000993674 00000 n
-0000992412 00000 n
-0000993800 00000 n
-0000993929 00000 n
-0000993994 00000 n
-0000994059 00000 n
-0000994124 00000 n
-0000994189 00000 n
-0000994254 00000 n
-0000994319 00000 n
-0000994625 00000 n
-0001005969 00000 n
-0001013558 00000 n
-0001015858 00000 n
-0001015827 00000 n
-0001019544 00000 n
-0001032341 00000 n
-0001042008 00000 n
-0001052743 00000 n
-0001066987 00000 n
-0001086493 00000 n
-0001107559 00000 n
-0001129709 00000 n
-0001147965 00000 n
-0001150812 00000 n
-0001150582 00000 n
-0001178230 00000 n
-0001205559 00000 n
-0001210138 00000 n
-0001210263 00000 n
-0001210389 00000 n
-0001210515 00000 n
-0001210641 00000 n
-0001210767 00000 n
-0001210866 00000 n
-0001210976 00000 n
-0001233250 00000 n
-0001258333 00000 n
-0001258374 00000 n
-0001258414 00000 n
-0001258548 00000 n
+0000775807 00000 n
+0000775101 00000 n
+0000771736 00000 n
+0000775227 00000 n
+0001014775 00000 n
+0001005562 00000 n
+0001014589 00000 n
+0000775356 00000 n
+0000775485 00000 n
+0000775613 00000 n
+0000776839 00000 n
+0000776648 00000 n
+0000776034 00000 n
+0000776774 00000 n
+0000777267 00000 n
+0000777076 00000 n
+0000776926 00000 n
+0000777202 00000 n
+0001217847 00000 n
+0000780581 00000 n
+0000779355 00000 n
+0000777309 00000 n
+0000779872 00000 n
+0000780001 00000 n
+0000780130 00000 n
+0000780259 00000 n
+0000780388 00000 n
+0000780517 00000 n
+0000779511 00000 n
+0000779683 00000 n
+0000781036 00000 n
+0000780845 00000 n
+0000780695 00000 n
+0000780971 00000 n
+0000784281 00000 n
+0000783703 00000 n
+0000781078 00000 n
+0000783829 00000 n
+0000783958 00000 n
+0000784087 00000 n
+0000784216 00000 n
+0000788478 00000 n
+0000787259 00000 n
+0000784367 00000 n
+0000787769 00000 n
+0000787898 00000 n
+0000788156 00000 n
+0000787415 00000 n
+0000787594 00000 n
+0000788350 00000 n
+0000788414 00000 n
+0000795368 00000 n
+0000791540 00000 n
+0000788634 00000 n
+0000791666 00000 n
+0000791731 00000 n
+0000791796 00000 n
+0000791861 00000 n
+0000791926 00000 n
+0000791991 00000 n
+0000792056 00000 n
+0000792121 00000 n
+0000792186 00000 n
+0000792251 00000 n
+0000792381 00000 n
+0000792446 00000 n
+0000792511 00000 n
+0000792576 00000 n
+0000792641 00000 n
+0000792706 00000 n
+0000792771 00000 n
+0000792836 00000 n
+0000792901 00000 n
+0000792966 00000 n
+0000793031 00000 n
+0000793096 00000 n
+0000793161 00000 n
+0000793226 00000 n
+0000793291 00000 n
+0000793356 00000 n
+0000793421 00000 n
+0000793486 00000 n
+0000793551 00000 n
+0000793616 00000 n
+0000793681 00000 n
+0000793746 00000 n
+0000793811 00000 n
+0000793876 00000 n
+0000793940 00000 n
+0000794005 00000 n
+0000794070 00000 n
+0000794135 00000 n
+0000794200 00000 n
+0000794265 00000 n
+0000794330 00000 n
+0000794395 00000 n
+0000794460 00000 n
+0000794525 00000 n
+0000794590 00000 n
+0000794655 00000 n
+0000794720 00000 n
+0000794785 00000 n
+0000794850 00000 n
+0000794915 00000 n
+0000794980 00000 n
+0000795045 00000 n
+0000795110 00000 n
+0000795175 00000 n
+0000795240 00000 n
+0000795304 00000 n
+0000802016 00000 n
+0000798452 00000 n
+0000795482 00000 n
+0000798578 00000 n
+0000798643 00000 n
+0000798708 00000 n
+0000798773 00000 n
+0000798838 00000 n
+0000798903 00000 n
+0000798968 00000 n
+0000799033 00000 n
+0000799098 00000 n
+0000799163 00000 n
+0000799228 00000 n
+0000799293 00000 n
+0000799357 00000 n
+0000799422 00000 n
+0000799487 00000 n
+0000799552 00000 n
+0000799617 00000 n
+0000799682 00000 n
+0000799747 00000 n
+0000799812 00000 n
+0000799877 00000 n
+0000799942 00000 n
+0000800007 00000 n
+0000800072 00000 n
+0000800136 00000 n
+0000800201 00000 n
+0000800266 00000 n
+0000800331 00000 n
+0000800396 00000 n
+0000800461 00000 n
+0000800526 00000 n
+0000800591 00000 n
+0000800656 00000 n
+0000800721 00000 n
+0000800786 00000 n
+0000800851 00000 n
+0000800916 00000 n
+0000800981 00000 n
+0000801046 00000 n
+0000801111 00000 n
+0000801175 00000 n
+0000801239 00000 n
+0000801303 00000 n
+0000801368 00000 n
+0000801433 00000 n
+0000801498 00000 n
+0000801563 00000 n
+0000801628 00000 n
+0000801693 00000 n
+0000801758 00000 n
+0000801823 00000 n
+0000801888 00000 n
+0000801952 00000 n
+0001217972 00000 n
+0000808191 00000 n
+0000804753 00000 n
+0000802130 00000 n
+0000804879 00000 n
+0000804944 00000 n
+0000805009 00000 n
+0000805074 00000 n
+0000805139 00000 n
+0000805204 00000 n
+0000805269 00000 n
+0000805334 00000 n
+0000805399 00000 n
+0000805464 00000 n
+0000805529 00000 n
+0000805594 00000 n
+0000805659 00000 n
+0000805724 00000 n
+0000805789 00000 n
+0000805854 00000 n
+0000805919 00000 n
+0000805984 00000 n
+0000806049 00000 n
+0000806114 00000 n
+0000806179 00000 n
+0000806244 00000 n
+0000806309 00000 n
+0000806374 00000 n
+0000806439 00000 n
+0000806504 00000 n
+0000806569 00000 n
+0000806634 00000 n
+0000806699 00000 n
+0000806764 00000 n
+0000806829 00000 n
+0000806894 00000 n
+0000806959 00000 n
+0000807024 00000 n
+0000807088 00000 n
+0000807153 00000 n
+0000807218 00000 n
+0000807283 00000 n
+0000807348 00000 n
+0000807413 00000 n
+0000807478 00000 n
+0000807543 00000 n
+0000807608 00000 n
+0000807673 00000 n
+0000807738 00000 n
+0000807803 00000 n
+0000807868 00000 n
+0000807933 00000 n
+0000807998 00000 n
+0000808063 00000 n
+0000808127 00000 n
+0000813710 00000 n
+0000811314 00000 n
+0000808305 00000 n
+0000811440 00000 n
+0000811505 00000 n
+0000811570 00000 n
+0000811635 00000 n
+0000811700 00000 n
+0000811765 00000 n
+0000811830 00000 n
+0000811895 00000 n
+0000811960 00000 n
+0000812025 00000 n
+0000812090 00000 n
+0000812155 00000 n
+0000812220 00000 n
+0000812284 00000 n
+0000812349 00000 n
+0000812414 00000 n
+0000812479 00000 n
+0000812544 00000 n
+0000812609 00000 n
+0000812674 00000 n
+0000812739 00000 n
+0000812804 00000 n
+0000812869 00000 n
+0000812934 00000 n
+0000812999 00000 n
+0000813127 00000 n
+0000813256 00000 n
+0000813321 00000 n
+0000813386 00000 n
+0000813451 00000 n
+0000813516 00000 n
+0000813645 00000 n
+0000816918 00000 n
+0000816211 00000 n
+0000813837 00000 n
+0000816337 00000 n
+0000816466 00000 n
+0000816595 00000 n
+0000816724 00000 n
+0000816853 00000 n
+0000820407 00000 n
+0000819650 00000 n
+0000817045 00000 n
+0000819957 00000 n
+0000820086 00000 n
+0000819797 00000 n
+0000820214 00000 n
+0000820342 00000 n
+0000823648 00000 n
+0000823070 00000 n
+0000820534 00000 n
+0000823196 00000 n
+0000823325 00000 n
+0000823454 00000 n
+0000823583 00000 n
+0000826555 00000 n
+0000826235 00000 n
+0000823762 00000 n
+0000826361 00000 n
+0000826490 00000 n
+0001218097 00000 n
+0000829146 00000 n
+0000828697 00000 n
+0000826725 00000 n
+0000828823 00000 n
+0000828952 00000 n
+0000829081 00000 n
+0000829587 00000 n
+0000829396 00000 n
+0000829246 00000 n
+0000829522 00000 n
+0000832380 00000 n
+0000831736 00000 n
+0000829629 00000 n
+0000831862 00000 n
+0000831991 00000 n
+0000832120 00000 n
+0000832185 00000 n
+0000832250 00000 n
+0000832315 00000 n
+0000836598 00000 n
+0000836277 00000 n
+0000832494 00000 n
+0000836403 00000 n
+0000836468 00000 n
+0000836533 00000 n
+0000840272 00000 n
+0000840016 00000 n
+0000836754 00000 n
+0000840142 00000 n
+0000840207 00000 n
+0000843777 00000 n
+0000843586 00000 n
+0000840414 00000 n
+0000843712 00000 n
+0001218222 00000 n
+0000847355 00000 n
+0000847164 00000 n
+0000843919 00000 n
+0000847290 00000 n
+0000850906 00000 n
+0000850457 00000 n
+0000847497 00000 n
+0000850583 00000 n
+0000850648 00000 n
+0000850713 00000 n
+0000850777 00000 n
+0000850842 00000 n
+0000854930 00000 n
+0000854350 00000 n
+0000851062 00000 n
+0000854476 00000 n
+0000854541 00000 n
+0000854670 00000 n
+0000854735 00000 n
+0000854800 00000 n
+0000854865 00000 n
+0000858634 00000 n
+0000857991 00000 n
+0000855058 00000 n
+0000858117 00000 n
+0000858182 00000 n
+0000858247 00000 n
+0000858312 00000 n
+0000858441 00000 n
+0000858506 00000 n
+0000858570 00000 n
+0000861606 00000 n
+0000860831 00000 n
+0000858776 00000 n
+0000860957 00000 n
+0000861022 00000 n
+0000861087 00000 n
+0000861152 00000 n
+0000861217 00000 n
+0000861346 00000 n
+0000861411 00000 n
+0000861476 00000 n
+0000861541 00000 n
+0000865299 00000 n
+0000864979 00000 n
+0000861748 00000 n
+0000865105 00000 n
+0000865170 00000 n
+0000865235 00000 n
+0001218347 00000 n
+0000868232 00000 n
+0000867587 00000 n
+0000865427 00000 n
+0000867713 00000 n
+0000867778 00000 n
+0000867907 00000 n
+0000867972 00000 n
+0000868037 00000 n
+0000868102 00000 n
+0000868167 00000 n
+0000870722 00000 n
+0000870207 00000 n
+0000868388 00000 n
+0000870333 00000 n
+0000870398 00000 n
+0000870463 00000 n
+0000870528 00000 n
+0000870593 00000 n
+0000870658 00000 n
+0000874125 00000 n
+0000873545 00000 n
+0000870878 00000 n
+0000873671 00000 n
+0000873800 00000 n
+0000873865 00000 n
+0000873930 00000 n
+0000873995 00000 n
+0000874060 00000 n
+0000877705 00000 n
+0000877449 00000 n
+0000874267 00000 n
+0000877575 00000 n
+0000877640 00000 n
+0000881214 00000 n
+0000880895 00000 n
+0000877833 00000 n
+0000881021 00000 n
+0000881086 00000 n
+0000881150 00000 n
+0000884702 00000 n
+0000884057 00000 n
+0000881369 00000 n
+0000884183 00000 n
+0000884248 00000 n
+0000884442 00000 n
+0000884507 00000 n
+0000884572 00000 n
+0000884637 00000 n
+0001218472 00000 n
+0000888392 00000 n
+0000888201 00000 n
+0000884844 00000 n
+0000888327 00000 n
+0000892047 00000 n
+0000891791 00000 n
+0000888520 00000 n
+0000891917 00000 n
+0000891982 00000 n
+0000895278 00000 n
+0000894828 00000 n
+0000892175 00000 n
+0000894954 00000 n
+0000895019 00000 n
+0000895084 00000 n
+0000895149 00000 n
+0000895214 00000 n
+0000897869 00000 n
+0000897160 00000 n
+0000895447 00000 n
+0000897286 00000 n
+0000897415 00000 n
+0000897480 00000 n
+0000897545 00000 n
+0000897610 00000 n
+0000897675 00000 n
+0000897740 00000 n
+0000897805 00000 n
+0000901239 00000 n
+0000900660 00000 n
+0000898025 00000 n
+0000900786 00000 n
+0000900980 00000 n
+0000901045 00000 n
+0000901110 00000 n
+0000901175 00000 n
+0000904815 00000 n
+0000904494 00000 n
+0000901381 00000 n
+0000904620 00000 n
+0000904685 00000 n
+0000904750 00000 n
+0001218597 00000 n
+0000908191 00000 n
+0000907481 00000 n
+0000904943 00000 n
+0000907607 00000 n
+0000907672 00000 n
+0000907737 00000 n
+0000907866 00000 n
+0000907931 00000 n
+0000907996 00000 n
+0000908061 00000 n
+0000908126 00000 n
+0000911994 00000 n
+0000911803 00000 n
+0000908347 00000 n
+0000911929 00000 n
+0000915804 00000 n
+0000915613 00000 n
+0000912122 00000 n
+0000915739 00000 n
+0000919217 00000 n
+0000919026 00000 n
+0000915932 00000 n
+0000919152 00000 n
+0000922343 00000 n
+0000921958 00000 n
+0000919345 00000 n
+0000922084 00000 n
+0000922149 00000 n
+0000922214 00000 n
+0000922279 00000 n
+0000925472 00000 n
+0000924892 00000 n
+0000922513 00000 n
+0000925018 00000 n
+0000925147 00000 n
+0000925212 00000 n
+0000925277 00000 n
+0000925342 00000 n
+0000925407 00000 n
+0001218722 00000 n
+0000928621 00000 n
+0000927912 00000 n
+0000925614 00000 n
+0000928038 00000 n
+0000928103 00000 n
+0000928168 00000 n
+0000928297 00000 n
+0000928362 00000 n
+0000928427 00000 n
+0000928492 00000 n
+0000928557 00000 n
+0000931535 00000 n
+0000930763 00000 n
+0000928777 00000 n
+0000930889 00000 n
+0000930954 00000 n
+0000931019 00000 n
+0000931084 00000 n
+0000931213 00000 n
+0000931278 00000 n
+0000931341 00000 n
+0000931406 00000 n
+0000931471 00000 n
+0000934889 00000 n
+0000934698 00000 n
+0000931677 00000 n
+0000934824 00000 n
+0000938027 00000 n
+0000937642 00000 n
+0000935003 00000 n
+0000937768 00000 n
+0000937833 00000 n
+0000937898 00000 n
+0000937963 00000 n
+0000941530 00000 n
+0000940950 00000 n
+0000938169 00000 n
+0000941076 00000 n
+0000941205 00000 n
+0000941270 00000 n
+0000941335 00000 n
+0000941400 00000 n
+0000941465 00000 n
+0000944564 00000 n
+0000944373 00000 n
+0000941672 00000 n
+0000944499 00000 n
+0001218847 00000 n
+0000947626 00000 n
+0000947241 00000 n
+0000944777 00000 n
+0000947367 00000 n
+0000947432 00000 n
+0000947497 00000 n
+0000947562 00000 n
+0000950328 00000 n
+0000949360 00000 n
+0000947867 00000 n
+0000949486 00000 n
+0000949551 00000 n
+0000949616 00000 n
+0000949745 00000 n
+0000949810 00000 n
+0000949875 00000 n
+0000949940 00000 n
+0000950005 00000 n
+0000950070 00000 n
+0000950199 00000 n
+0000950264 00000 n
+0000954889 00000 n
+0000954568 00000 n
+0000950470 00000 n
+0000954694 00000 n
+0000954759 00000 n
+0000954824 00000 n
+0000958731 00000 n
+0000958475 00000 n
+0000955017 00000 n
+0000958601 00000 n
+0000958666 00000 n
+0000962078 00000 n
+0000961887 00000 n
+0000958859 00000 n
+0000962013 00000 n
+0000964813 00000 n
+0000964363 00000 n
+0000962206 00000 n
+0000964489 00000 n
+0000964554 00000 n
+0000964619 00000 n
+0000964684 00000 n
+0000964749 00000 n
+0001218972 00000 n
+0000968658 00000 n
+0000968078 00000 n
+0000964968 00000 n
+0000968204 00000 n
+0000968398 00000 n
+0000968463 00000 n
+0000968528 00000 n
+0000968593 00000 n
+0000972061 00000 n
+0000971805 00000 n
+0000968800 00000 n
+0000971931 00000 n
+0000971996 00000 n
+0000975591 00000 n
+0000975400 00000 n
+0000972203 00000 n
+0000975526 00000 n
+0000979644 00000 n
+0000979388 00000 n
+0000975760 00000 n
+0000979514 00000 n
+0000979579 00000 n
+0000983251 00000 n
+0000982606 00000 n
+0000979800 00000 n
+0000982732 00000 n
+0000982797 00000 n
+0000982862 00000 n
+0000982991 00000 n
+0000983056 00000 n
+0000983121 00000 n
+0000983186 00000 n
+0000985530 00000 n
+0000985274 00000 n
+0000983407 00000 n
+0000985400 00000 n
+0000985465 00000 n
+0001219097 00000 n
+0000989024 00000 n
+0000988250 00000 n
+0000985672 00000 n
+0000988376 00000 n
+0000988441 00000 n
+0000988506 00000 n
+0000988571 00000 n
+0000988699 00000 n
+0000988764 00000 n
+0000988829 00000 n
+0000988894 00000 n
+0000988959 00000 n
+0000992089 00000 n
+0000991510 00000 n
+0000989180 00000 n
+0000991636 00000 n
+0000991701 00000 n
+0000991766 00000 n
+0000991831 00000 n
+0000991960 00000 n
+0000992025 00000 n
+0000995917 00000 n
+0000995469 00000 n
+0000992245 00000 n
+0000995595 00000 n
+0000995660 00000 n
+0000995725 00000 n
+0000995790 00000 n
+0000995854 00000 n
+0000998152 00000 n
+0000997122 00000 n
+0000996073 00000 n
+0000997248 00000 n
+0000997313 00000 n
+0000997442 00000 n
+0000997507 00000 n
+0000997572 00000 n
+0000997636 00000 n
+0000997701 00000 n
+0000997766 00000 n
+0000997895 00000 n
+0000997960 00000 n
+0000998025 00000 n
+0000998090 00000 n
+0001001167 00000 n
+0001000394 00000 n
+0000998294 00000 n
+0001000520 00000 n
+0001000585 00000 n
+0001000650 00000 n
+0001000715 00000 n
+0001000844 00000 n
+0001000908 00000 n
+0001000973 00000 n
+0001001038 00000 n
+0001001102 00000 n
+0001003432 00000 n
+0001002593 00000 n
+0001001309 00000 n
+0001002719 00000 n
+0001002784 00000 n
+0001002849 00000 n
+0001002977 00000 n
+0001003042 00000 n
+0001003107 00000 n
+0001003172 00000 n
+0001003237 00000 n
+0001003302 00000 n
+0001003367 00000 n
+0001219222 00000 n
+0001003673 00000 n
+0001015017 00000 n
+0001022606 00000 n
+0001024906 00000 n
+0001024875 00000 n
+0001028593 00000 n
+0001041390 00000 n
+0001051056 00000 n
+0001061791 00000 n
+0001076035 00000 n
+0001095541 00000 n
+0001116607 00000 n
+0001138757 00000 n
+0001157013 00000 n
+0001159860 00000 n
+0001159630 00000 n
+0001187278 00000 n
+0001214607 00000 n
+0001219302 00000 n
+0001219427 00000 n
+0001219553 00000 n
+0001219679 00000 n
+0001219805 00000 n
+0001219931 00000 n
+0001220039 00000 n
+0001220149 00000 n
+0001242423 00000 n
+0001267606 00000 n
+0001267647 00000 n
+0001267687 00000 n
+0001267821 00000 n
trailer
<<
-/Size 2855
-/Root 2853 0 R
-/Info 2854 0 R
-/ID [<D92076DFF62B13FFD21C721A377CFD07> <D92076DFF62B13FFD21C721A377CFD07>]
+/Size 2876
+/Root 2874 0 R
+/Info 2875 0 R
+/ID [<65996DE6A528710E195D7AD827588400> <65996DE6A528710E195D7AD827588400>]
>>
startxref
-1258806
+1268079
%%EOF
diff --git a/doc/arm/Makefile.in b/doc/arm/Makefile.in
index 3ecf4af90bb1..5bae2b2e47a1 100644
--- a/doc/arm/Makefile.in
+++ b/doc/arm/Makefile.in
@@ -1,4 +1,4 @@
-# Copyright (C) 2004-2007, 2009, 2012 Internet Systems Consortium, Inc. ("ISC")
+# Copyright (C) 2004-2007, 2009, 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
# Copyright (C) 2001, 2002 Internet Software Consortium.
#
# Permission to use, copy, modify, and/or distribute this software for any
@@ -23,6 +23,8 @@ top_srcdir = @top_srcdir@
@BIND9_VERSION@
+PKGVERSION = @PACKAGE_VERSION@
+
MANOBJS = Bv9ARM.html
PDFOBJS = Bv9ARM.pdf
@@ -38,34 +40,40 @@ docclean manclean maintainer-clean:: clean
docclean manclean maintainer-clean distclean::
rm -f releaseinfo.xml
+ rm -f pkgversion.xml
-Bv9ARM.html: Bv9ARM-book.xml releaseinfo.xml
+Bv9ARM.html: Bv9ARM-book.xml releaseinfo.xml pkgversion.xml
expand Bv9ARM-book.xml | \
${XSLTPROC} --stringparam root.filename Bv9ARM \
${top_srcdir}/doc/xsl/isc-docbook-chunk.xsl -
-Bv9ARM-all.html: Bv9ARM-book.xml releaseinfo.xml
+Bv9ARM-all.html: Bv9ARM-book.xml releaseinfo.xml pkgversion.xml
expand Bv9ARM-book.xml | \
${XSLTPROC} -o Bv9ARM-all.html ../xsl/isc-docbook-html.xsl -
-Bv9ARM.tex: Bv9ARM-book.xml releaseinfo.xml
+Bv9ARM.tex: Bv9ARM-book.xml releaseinfo.xml pkgversion.xml
expand Bv9ARM-book.xml | \
${XSLTPROC} ${top_srcdir}/doc/xsl/pre-latex.xsl - | \
${XSLTPROC} ${top_srcdir}/doc/xsl/isc-docbook-latex.xsl - | \
@PERL@ latex-fixup.pl >$@.tmp
if test -s $@.tmp; then mv $@.tmp $@; else rm -f $@.tmp; exit 1; fi
-Bv9ARM.dvi: Bv9ARM.tex releaseinfo.xml
+Bv9ARM.dvi: Bv9ARM.tex releaseinfo.xml pkgversion.xml
rm -f Bv9ARM-book.aux Bv9ARM-book.dvi Bv9ARM-book.log
${LATEX} '\batchmode\input Bv9ARM.tex' || (rm -f $@ ; exit 1)
${LATEX} '\batchmode\input Bv9ARM.tex' || (rm -f $@ ; exit 1)
${LATEX} '\batchmode\input Bv9ARM.tex' || (rm -f $@ ; exit 1)
-Bv9ARM.pdf: Bv9ARM.tex releaseinfo.xml
+Bv9ARM.pdf: Bv9ARM.tex releaseinfo.xml pkgversion.xml
rm -f Bv9ARM-book.aux Bv9ARM-book.pdf Bv9ARM-book.log
${PDFLATEX} '\batchmode\input Bv9ARM.tex' || (rm -f $@ ; exit 1)
${PDFLATEX} '\batchmode\input Bv9ARM.tex' || (rm -f $@ ; exit 1)
${PDFLATEX} '\batchmode\input Bv9ARM.tex' || (rm -f $@ ; exit 1)
-releaseinfo.xml:
+FORCE:
+
+releaseinfo.xml: FORCE
echo >$@ '<releaseinfo>BIND Version ${VERSION}</releaseinfo>'
+
+pkgversion.xml: FORCE
+ echo >$@ ' <para>This version of the manual corresponds to BIND version ${PKGVERSION}.</para>'
diff --git a/doc/arm/libdns.xml b/doc/arm/libdns.xml
index 6134ff6521f6..6b5e81739d8b 100644
--- a/doc/arm/libdns.xml
+++ b/doc/arm/libdns.xml
@@ -1,6 +1,6 @@
<?xml version="1.0" encoding="utf-8"?>
<!--
- - Copyright (C) 2010 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2010, 2014 Internet Systems Consortium, Inc. ("ISC")
-
- Permission to use, copy, modify, and/or distribute this software for any
- purpose with or without fee is hereby granted, provided that the above
@@ -270,7 +270,7 @@ $ <userinput>make</userinput>
consists of a single domain name. Example:
<literallayout>
www.example.com
- mx.examle.net
+ mx.example.net
ns.xxx.example
</literallayout>
</listitem>
diff --git a/doc/arm/man.arpaname.html b/doc/arm/man.arpaname.html
index 8f823ab058eb..5a845b00895f 100644
--- a/doc/arm/man.arpaname.html
+++ b/doc/arm/man.arpaname.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -50,20 +50,20 @@
<div class="cmdsynopsis"><p><code class="command">arpaname</code> {<em class="replaceable"><code>ipaddress </code></em>...}</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2617724"></a><h2>DESCRIPTION</h2>
+<a name="id2657076"></a><h2>DESCRIPTION</h2>
<p>
<span><strong class="command">arpaname</strong></span> translates IP addresses (IPv4 and
IPv6) to the corresponding IN-ADDR.ARPA or IP6.ARPA names.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2617739"></a><h2>SEE ALSO</h2>
+<a name="id2657091"></a><h2>SEE ALSO</h2>
<p>
<em class="citetitle">BIND 9 Administrator Reference Manual</em>.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2659054"></a><h2>AUTHOR</h2>
+<a name="id2657105"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
@@ -87,5 +87,6 @@
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/man.ddns-confgen.html b/doc/arm/man.ddns-confgen.html
index ddaa199a07a8..d0e8839ff545 100644
--- a/doc/arm/man.ddns-confgen.html
+++ b/doc/arm/man.ddns-confgen.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -50,7 +50,7 @@
<div class="cmdsynopsis"><p><code class="command">ddns-confgen</code> [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>] [<code class="option">-h</code>] [<code class="option">-k <em class="replaceable"><code>keyname</code></em></code>] [<code class="option">-r <em class="replaceable"><code>randomfile</code></em></code>] [ -s <em class="replaceable"><code>name</code></em> | -z <em class="replaceable"><code>zone</code></em> ] [<code class="option">-q</code>] [name]</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2650650"></a><h2>DESCRIPTION</h2>
+<a name="id2656688"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">ddns-confgen</strong></span>
generates a key for use by <span><strong class="command">nsupdate</strong></span>
and <span><strong class="command">named</strong></span>. It simplifies configuration
@@ -77,7 +77,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2650738"></a><h2>OPTIONS</h2>
+<a name="id2656775"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-a <em class="replaceable"><code>algorithm</code></em></span></dt>
<dd><p>
@@ -144,7 +144,7 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2658994"></a><h2>SEE ALSO</h2>
+<a name="id2656976"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">nsupdate</span>(1)</span>,
<span class="citerefentry"><span class="refentrytitle">named.conf</span>(5)</span>,
<span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
@@ -152,7 +152,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2659032"></a><h2>AUTHOR</h2>
+<a name="id2657014"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
@@ -176,5 +176,6 @@
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/man.dig.html b/doc/arm/man.dig.html
index 0d185b6d312f..3b9ee6d409a8 100644
--- a/doc/arm/man.dig.html
+++ b/doc/arm/man.dig.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -47,12 +47,12 @@
</div>
<div class="refsynopsisdiv">
<h2>Synopsis</h2>
-<div class="cmdsynopsis"><p><code class="command">dig</code> [@server] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-k <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-m</code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]name:key</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [name] [type] [class] [queryopt...]</p></div>
+<div class="cmdsynopsis"><p><code class="command">dig</code> [@server] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-k <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-m</code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-v</code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]name:key</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [name] [type] [class] [queryopt...]</p></div>
<div class="cmdsynopsis"><p><code class="command">dig</code> [<code class="option">-h</code>]</p></div>
<div class="cmdsynopsis"><p><code class="command">dig</code> [global-queryopt...] [query...]</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2611552"></a><h2>DESCRIPTION</h2>
+<a name="id2611550"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">dig</strong></span>
(domain information groper) is a flexible tool
for interrogating DNS name servers. It performs DNS lookups and
@@ -92,14 +92,14 @@
</p>
<p>
The IN and CH class names overlap with the IN and CH top level
- domains names. Either use the <code class="option">-t</code> and
+ domain names. Either use the <code class="option">-t</code> and
<code class="option">-c</code> options to specify the type and class,
use the <code class="option">-q</code> the specify the domain name, or
use "IN." and "CH." when looking up these top level domains.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2611654"></a><h2>SIMPLE USAGE</h2>
+<a name="id2611653"></a><h2>SIMPLE USAGE</h2>
<p>
A typical invocation of <span><strong class="command">dig</strong></span> looks like:
</p>
@@ -112,47 +112,47 @@
<dt><span class="term"><code class="constant">server</code></span></dt>
<dd>
<p>
- is the name or IP address of the name server to query. This
- can be an IPv4 address in dotted-decimal notation or an IPv6
- address in colon-delimited notation. When the supplied
- <em class="parameter"><code>server</code></em> argument is a hostname,
- <span><strong class="command">dig</strong></span> resolves that name before querying
- that name server.
- </p>
-<p>
- If no <em class="parameter"><code>server</code></em> argument is
- provided, <span><strong class="command">dig</strong></span> consults
- <code class="filename">/etc/resolv.conf</code>; if an
- address is found there, it queries the name server at
- that address. If either of the <code class="option">-4</code> or
- <code class="option">-6</code> options are in use, then
- only addresses for the corresponding transport
- will be tried. If no usable addresses are found,
- <span><strong class="command">dig</strong></span> will send the query to the
- local host. The reply from the name server that
- responds is displayed.
- </p>
+ is the name or IP address of the name server to query. This
+ can be an IPv4 address in dotted-decimal notation or an IPv6
+ address in colon-delimited notation. When the supplied
+ <em class="parameter"><code>server</code></em> argument is a hostname,
+ <span><strong class="command">dig</strong></span> resolves that name before querying
+ that name server.
+ </p>
+<p>
+ If no <em class="parameter"><code>server</code></em> argument is
+ provided, <span><strong class="command">dig</strong></span> consults
+ <code class="filename">/etc/resolv.conf</code>; if an
+ address is found there, it queries the name server at
+ that address. If either of the <code class="option">-4</code> or
+ <code class="option">-6</code> options are in use, then
+ only addresses for the corresponding transport
+ will be tried. If no usable addresses are found,
+ <span><strong class="command">dig</strong></span> will send the query to the
+ local host. The reply from the name server that
+ responds is displayed.
+ </p>
</dd>
<dt><span class="term"><code class="constant">name</code></span></dt>
<dd><p>
- is the name of the resource record that is to be looked up.
- </p></dd>
+ is the name of the resource record that is to be looked up.
+ </p></dd>
<dt><span class="term"><code class="constant">type</code></span></dt>
<dd><p>
- indicates what type of query is required &#8212;
- ANY, A, MX, SIG, etc.
- <em class="parameter"><code>type</code></em> can be any valid query
- type. If no
- <em class="parameter"><code>type</code></em> argument is supplied,
- <span><strong class="command">dig</strong></span> will perform a lookup for an
- A record.
- </p></dd>
+ indicates what type of query is required &#8212;
+ ANY, A, MX, SIG, etc.
+ <em class="parameter"><code>type</code></em> can be any valid query
+ type. If no
+ <em class="parameter"><code>type</code></em> argument is supplied,
+ <span><strong class="command">dig</strong></span> will perform a lookup for an
+ A record.
+ </p></dd>
</dl></div>
<p>
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2611780"></a><h2>OPTIONS</h2>
+<a name="id2611779"></a><h2>OPTIONS</h2>
<p>
The <code class="option">-b</code> option sets the source IP address of the query
to <em class="parameter"><code>address</code></em>. This must be a valid
@@ -211,10 +211,14 @@
</p>
<p>
The <code class="option">-q</code> option sets the query name to
- <em class="parameter"><code>name</code></em>. This useful do distinguish the
+ <em class="parameter"><code>name</code></em>. This is useful to distinguish the
<em class="parameter"><code>name</code></em> from other arguments.
</p>
<p>
+ The <code class="option">-v</code> causes <span><strong class="command">dig</strong></span> to
+ print the version number and exit.
+ </p>
+<p>
Reverse lookups &#8212; mapping addresses to names &#8212; are simplified by the
<code class="option">-x</code> option. <em class="parameter"><code>addr</code></em> is
an IPv4
@@ -256,7 +260,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2652877"></a><h2>QUERY OPTIONS</h2>
+<a name="id2664290"></a><h2>QUERY OPTIONS</h2>
<p><span><strong class="command">dig</strong></span>
provides a number of query options which affect
the way in which lookups are made and the results displayed. Some of
@@ -276,62 +280,19 @@
</p>
<div class="variablelist"><dl>
-<dt><span class="term"><code class="option">+[no]tcp</code></span></dt>
-<dd><p>
- Use [do not use] TCP when querying name servers. The default
- behavior is to use UDP unless an AXFR or IXFR query is
- requested, in
- which case a TCP connection is used.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]vc</code></span></dt>
-<dd><p>
- Use [do not use] TCP when querying name servers. This alternate
- syntax to <em class="parameter"><code>+[no]tcp</code></em> is
- provided for backwards
- compatibility. The "vc" stands for "virtual circuit".
- </p></dd>
-<dt><span class="term"><code class="option">+[no]ignore</code></span></dt>
-<dd><p>
- Ignore truncation in UDP responses instead of retrying with TCP.
- By
- default, TCP retries are performed.
- </p></dd>
-<dt><span class="term"><code class="option">+domain=somename</code></span></dt>
-<dd><p>
- Set the search list to contain the single domain
- <em class="parameter"><code>somename</code></em>, as if specified in
- a
- <span><strong class="command">domain</strong></span> directive in
- <code class="filename">/etc/resolv.conf</code>, and enable
- search list
- processing as if the <em class="parameter"><code>+search</code></em>
- option were given.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]search</code></span></dt>
-<dd><p>
- Use [do not use] the search list defined by the searchlist or
- domain
- directive in <code class="filename">resolv.conf</code> (if
- any).
- The search list is not used by default.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]showsearch</code></span></dt>
-<dd><p>
- Perform [do not perform] a search showing intermediate
- results.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]defname</code></span></dt>
+<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
<dd><p>
- Deprecated, treated as a synonym for <em class="parameter"><code>+[no]search</code></em>
- </p></dd>
+ A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
+ </p></dd>
<dt><span class="term"><code class="option">+[no]aaonly</code></span></dt>
<dd><p>
- Sets the "aa" flag in the query.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
+ Sets the "aa" flag in the query.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]additional</code></span></dt>
<dd><p>
- A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
- </p></dd>
+ Display [do not display] the additional section of a
+ reply. The default is to display it.
+ </p></dd>
<dt><span class="term"><code class="option">+[no]adflag</code></span></dt>
<dd><p>
Set [do not set] the AD (authentic data) bit in the
@@ -344,276 +305,310 @@
of the answer was insecure or not validated. This
bit is set by default.
</p></dd>
+<dt><span class="term"><code class="option">+[no]all</code></span></dt>
+<dd><p>
+ Set or clear all display flags.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]answer</code></span></dt>
+<dd><p>
+ Display [do not display] the answer section of a
+ reply. The default is to display it.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]authority</code></span></dt>
+<dd><p>
+ Display [do not display] the authority section of a
+ reply. The default is to display it.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]besteffort</code></span></dt>
+<dd><p>
+ Attempt to display the contents of messages which are
+ malformed. The default is to not display malformed
+ answers.
+ </p></dd>
+<dt><span class="term"><code class="option">+bufsize=B</code></span></dt>
+<dd><p>
+ Set the UDP message buffer size advertised using EDNS0
+ to <em class="parameter"><code>B</code></em> bytes. The maximum and
+ minimum sizes of this buffer are 65535 and 0 respectively.
+ Values outside this range are rounded up or down
+ appropriately. Values other than zero will cause a
+ EDNS query to be sent.
+ </p></dd>
<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
<dd><p>
- Set [do not set] the CD (checking disabled) bit in the query.
- This
- requests the server to not perform DNSSEC validation of
- responses.
- </p></dd>
+ Set [do not set] the CD (checking disabled) bit in
+ the query. This requests the server to not perform
+ DNSSEC validation of responses.
+ </p></dd>
<dt><span class="term"><code class="option">+[no]cl</code></span></dt>
<dd><p>
- Display [do not display] the CLASS when printing the record.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt>
+ Display [do not display] the CLASS when printing the
+ record.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]cmd</code></span></dt>
<dd><p>
- Display [do not display] the TTL when printing the record.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
+ Toggles the printing of the initial comment in the
+ output identifying the version of <span><strong class="command">dig</strong></span>
+ and the query options that have been applied. This
+ comment is printed by default.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]comments</code></span></dt>
<dd><p>
- Toggle the setting of the RD (recursion desired) bit
- in the query. This bit is set by default, which means
- <span><strong class="command">dig</strong></span> normally sends recursive
- queries. Recursion is automatically disabled when
- the <em class="parameter"><code>+nssearch</code></em> or
- <em class="parameter"><code>+trace</code></em> query options are used.
+ Toggle the display of comment lines in the output.
+ The default is to print comments.
</p></dd>
-<dt><span class="term"><code class="option">+[no]nssearch</code></span></dt>
+<dt><span class="term"><code class="option">+[no]defname</code></span></dt>
<dd><p>
- When this option is set, <span><strong class="command">dig</strong></span>
- attempts to find the
- authoritative name servers for the zone containing the name
- being
- looked up and display the SOA record that each name server has
- for the
- zone.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]trace</code></span></dt>
-<dd>
-<p>
- Toggle tracing of the delegation path from the root
- name servers for the name being looked up. Tracing
- is disabled by default. When tracing is enabled,
- <span><strong class="command">dig</strong></span> makes iterative queries to
- resolve the name being looked up. It will follow
- referrals from the root servers, showing the answer
- from each server that was used to resolve the lookup.
- </p>
-<p>
- <span><strong class="command">+dnssec</strong></span> is also set when +trace is
- set to better emulate the default queries from a nameserver.
- </p>
-</dd>
-<dt><span class="term"><code class="option">+[no]cmd</code></span></dt>
+ Deprecated, treated as a synonym for
+ <em class="parameter"><code>+[no]search</code></em>
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]dnssec</code></span></dt>
<dd><p>
- Toggles the printing of the initial comment in the output
- identifying
- the version of <span><strong class="command">dig</strong></span> and the query
- options that have
- been applied. This comment is printed by default.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]short</code></span></dt>
+ Requests DNSSEC records be sent by setting the DNSSEC
+ OK bit (DO) in the OPT record in the additional section
+ of the query.
+ </p></dd>
+<dt><span class="term"><code class="option">+domain=somename</code></span></dt>
<dd><p>
- Provide a terse answer. The default is to print the answer in a
- verbose form.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]identify</code></span></dt>
+ Set the search list to contain the single domain
+ <em class="parameter"><code>somename</code></em>, as if specified in
+ a <span><strong class="command">domain</strong></span> directive in
+ <code class="filename">/etc/resolv.conf</code>, and enable
+ search list processing as if the
+ <em class="parameter"><code>+search</code></em> option were given.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]edns[=#]</code></span></dt>
<dd><p>
- Show [or do not show] the IP address and port number that
- supplied the
- answer when the <em class="parameter"><code>+short</code></em> option
- is enabled. If
- short form answers are requested, the default is not to show the
- source address and port number of the server that provided the
- answer.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]comments</code></span></dt>
+ Specify the EDNS version to query with. Valid values
+ are 0 to 255. Setting the EDNS version will cause
+ a EDNS query to be sent. <code class="option">+noedns</code>
+ clears the remembered EDNS version. EDNS is set to
+ 0 by default.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]fail</code></span></dt>
<dd><p>
- Toggle the display of comment lines in the output. The default
- is to print comments.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]rrcomments</code></span></dt>
+ Do not try the next server if you receive a SERVFAIL.
+ The default is to not try the next server which is
+ the reverse of normal stub resolver behavior.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]identify</code></span></dt>
<dd><p>
- Toggle the display of per-record comments in the output (for
- example, human-readable key information about DNSKEY records).
- The default is not to print record comments unless multiline
- mode is active.
- </p></dd>
-<dt><span class="term"><code class="option">+split=W</code></span></dt>
+ Show [or do not show] the IP address and port number
+ that supplied the answer when the
+ <em class="parameter"><code>+short</code></em> option is enabled. If
+ short form answers are requested, the default is not
+ to show the source address and port number of the
+ server that provided the answer.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]ignore</code></span></dt>
<dd><p>
- Split long hex- or base64-formatted fields in resource
- records into chunks of <em class="parameter"><code>W</code></em> characters
- (where <em class="parameter"><code>W</code></em> is rounded up to the nearest
- multiple of 4).
- <em class="parameter"><code>+nosplit</code></em> or
- <em class="parameter"><code>+split=0</code></em> causes fields not to be
- split at all. The default is 56 characters, or 44 characters
- when multiline mode is active.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]stats</code></span></dt>
+ Ignore truncation in UDP responses instead of retrying
+ with TCP. By default, TCP retries are performed.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]keepopen</code></span></dt>
<dd><p>
- This query option toggles the printing of statistics: when the
- query
- was made, the size of the reply and so on. The default
- behavior is
- to print the query statistics.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]qr</code></span></dt>
+ Keep the TCP socket open between queries and reuse
+ it rather than creating a new TCP socket for each
+ lookup. The default is <code class="option">+nokeepopen</code>.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]multiline</code></span></dt>
<dd><p>
- Print [do not print] the query as it is sent.
- By default, the query is not printed.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]question</code></span></dt>
+ Print records like the SOA records in a verbose
+ multi-line format with human-readable comments. The
+ default is to print each record on a single line, to
+ facilitate machine parsing of the <span><strong class="command">dig</strong></span>
+ output.
+ </p></dd>
+<dt><span class="term"><code class="option">+ndots=D</code></span></dt>
<dd><p>
- Print [do not print] the question section of a query when an
- answer is
- returned. The default is to print the question section as a
- comment.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]answer</code></span></dt>
+ Set the number of dots that have to appear in
+ <em class="parameter"><code>name</code></em> to <em class="parameter"><code>D</code></em>
+ for it to be considered absolute. The default value
+ is that defined using the ndots statement in
+ <code class="filename">/etc/resolv.conf</code>, or 1 if no
+ ndots statement is present. Names with fewer dots
+ are interpreted as relative names and will be searched
+ for in the domains listed in the <code class="option">search</code>
+ or <code class="option">domain</code> directive in
+ <code class="filename">/etc/resolv.conf</code>.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]nsid</code></span></dt>
<dd><p>
- Display [do not display] the answer section of a reply. The
- default
- is to display it.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]authority</code></span></dt>
+ Include an EDNS name server ID request when sending
+ a query.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]nssearch</code></span></dt>
<dd><p>
- Display [do not display] the authority section of a reply. The
- default is to display it.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]additional</code></span></dt>
+ When this option is set, <span><strong class="command">dig</strong></span>
+ attempts to find the authoritative name servers for
+ the zone containing the name being looked up and
+ display the SOA record that each name server has for
+ the zone.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]onesoa</code></span></dt>
<dd><p>
- Display [do not display] the additional section of a reply.
- The default is to display it.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]all</code></span></dt>
+ Print only one (starting) SOA record when performing
+ an AXFR. The default is to print both the starting
+ and ending SOA records.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]qr</code></span></dt>
<dd><p>
- Set or clear all display flags.
- </p></dd>
-<dt><span class="term"><code class="option">+time=T</code></span></dt>
+ Print [do not print] the query as it is sent. By
+ default, the query is not printed.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]question</code></span></dt>
<dd><p>
-
- Sets the timeout for a query to
- <em class="parameter"><code>T</code></em> seconds. The default
- timeout is 5 seconds.
- An attempt to set <em class="parameter"><code>T</code></em> to less
- than 1 will result
- in a query timeout of 1 second being applied.
- </p></dd>
-<dt><span class="term"><code class="option">+tries=T</code></span></dt>
+ Print [do not print] the question section of a query
+ when an answer is returned. The default is to print
+ the question section as a comment.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
<dd><p>
- Sets the number of times to try UDP queries to server to
- <em class="parameter"><code>T</code></em> instead of the default, 3.
- If
- <em class="parameter"><code>T</code></em> is less than or equal to
- zero, the number of
- tries is silently rounded up to 1.
- </p></dd>
+ Toggle the setting of the RD (recursion desired) bit
+ in the query. This bit is set by default, which means
+ <span><strong class="command">dig</strong></span> normally sends recursive
+ queries. Recursion is automatically disabled when
+ the <em class="parameter"><code>+nssearch</code></em> or
+ <em class="parameter"><code>+trace</code></em> query options are used.
+ </p></dd>
<dt><span class="term"><code class="option">+retry=T</code></span></dt>
<dd><p>
- Sets the number of times to retry UDP queries to server to
- <em class="parameter"><code>T</code></em> instead of the default, 2.
- Unlike
- <em class="parameter"><code>+tries</code></em>, this does not include
- the initial
- query.
- </p></dd>
-<dt><span class="term"><code class="option">+ndots=D</code></span></dt>
+ Sets the number of times to retry UDP queries to
+ server to <em class="parameter"><code>T</code></em> instead of the
+ default, 2. Unlike <em class="parameter"><code>+tries</code></em>,
+ this does not include the initial query.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]rrcomments</code></span></dt>
<dd><p>
- Set the number of dots that have to appear in
- <em class="parameter"><code>name</code></em> to <em class="parameter"><code>D</code></em> for it to be
- considered absolute. The default value is that defined using
- the
- ndots statement in <code class="filename">/etc/resolv.conf</code>, or 1 if no
- ndots statement is present. Names with fewer dots are
- interpreted as
- relative names and will be searched for in the domains listed in
- the
- <code class="option">search</code> or <code class="option">domain</code> directive in
- <code class="filename">/etc/resolv.conf</code>.
- </p></dd>
-<dt><span class="term"><code class="option">+bufsize=B</code></span></dt>
+ Toggle the display of per-record comments in the
+ output (for example, human-readable key information
+ about DNSKEY records). The default is not to print
+ record comments unless multiline mode is active.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]search</code></span></dt>
<dd><p>
- Set the UDP message buffer size advertised using EDNS0 to
- <em class="parameter"><code>B</code></em> bytes. The maximum and minimum sizes
- of this buffer are 65535 and 0 respectively. Values outside
- this range are rounded up or down appropriately.
- Values other than zero will cause a EDNS query to be sent.
- </p></dd>
-<dt><span class="term"><code class="option">+edns=#</code></span></dt>
+ Use [do not use] the search list defined by the
+ searchlist or domain directive in
+ <code class="filename">resolv.conf</code> (if any). The search
+ list is not used by default.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]short</code></span></dt>
<dd><p>
- Specify the EDNS version to query with. Valid values
- are 0 to 255. Setting the EDNS version will cause
- a EDNS query to be sent. <code class="option">+noedns</code>
- clears the remembered EDNS version. EDNS is set to
- 0 by default.
+ Provide a terse answer. The default is to print the
+ answer in a verbose form.
</p></dd>
-<dt><span class="term"><code class="option">+[no]multiline</code></span></dt>
+<dt><span class="term"><code class="option">+[no]showsearch</code></span></dt>
<dd><p>
- Print records like the SOA records in a verbose multi-line
- format with human-readable comments. The default is to print
- each record on a single line, to facilitate machine parsing
- of the <span><strong class="command">dig</strong></span> output.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]onesoa</code></span></dt>
+ Perform [do not perform] a search showing intermediate
+ results.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]sigchase</code></span></dt>
<dd><p>
- Print only one (starting) SOA record when performing
- an AXFR. The default is to print both the starting and
- ending SOA records.
+ Chase DNSSEC signature chains. Requires dig be
+ compiled with -DDIG_SIGCHASE.
</p></dd>
-<dt><span class="term"><code class="option">+[no]fail</code></span></dt>
+<dt><span class="term"><code class="option">+split=W</code></span></dt>
<dd><p>
- Do not try the next server if you receive a SERVFAIL. The
- default is
- to not try the next server which is the reverse of normal stub
- resolver
- behavior.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]besteffort</code></span></dt>
+ Split long hex- or base64-formatted fields in resource
+ records into chunks of <em class="parameter"><code>W</code></em>
+ characters (where <em class="parameter"><code>W</code></em> is rounded
+ up to the nearest multiple of 4).
+ <em class="parameter"><code>+nosplit</code></em> or
+ <em class="parameter"><code>+split=0</code></em> causes fields not to
+ be split at all. The default is 56 characters, or
+ 44 characters when multiline mode is active.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]stats</code></span></dt>
<dd><p>
- Attempt to display the contents of messages which are malformed.
- The default is to not display malformed answers.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]dnssec</code></span></dt>
+ This query option toggles the printing of statistics:
+ when the query was made, the size of the reply and
+ so on. The default behavior is to print the query
+ statistics.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]tcp</code></span></dt>
<dd><p>
- Requests DNSSEC records be sent by setting the DNSSEC OK bit
- (DO)
- in the OPT record in the additional section of the query.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]sigchase</code></span></dt>
+ Use [do not use] TCP when querying name servers. The
+ default behavior is to use UDP unless an
+ <code class="literal">ixfr=N</code> query is requested, in which
+ case the default is TCP. AXFR queries always use
+ TCP.
+ </p></dd>
+<dt><span class="term"><code class="option">+time=T</code></span></dt>
+<dd><p>
+
+ Sets the timeout for a query to
+ <em class="parameter"><code>T</code></em> seconds. The default
+ timeout is 5 seconds.
+ An attempt to set <em class="parameter"><code>T</code></em> to less
+ than 1 will result
+ in a query timeout of 1 second being applied.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]topdown</code></span></dt>
+<dd><p>
+ When chasing DNSSEC signature chains perform a top-down
+ validation. Requires dig be compiled with -DDIG_SIGCHASE.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]trace</code></span></dt>
+<dd>
+<p>
+ Toggle tracing of the delegation path from the root
+ name servers for the name being looked up. Tracing
+ is disabled by default. When tracing is enabled,
+ <span><strong class="command">dig</strong></span> makes iterative queries to
+ resolve the name being looked up. It will follow
+ referrals from the root servers, showing the answer
+ from each server that was used to resolve the lookup.
+ </p>
+<p>
+ <span><strong class="command">+dnssec</strong></span> is also set when +trace
+ is set to better emulate the default queries from a
+ nameserver.
+ </p>
+</dd>
+<dt><span class="term"><code class="option">+tries=T</code></span></dt>
<dd><p>
- Chase DNSSEC signature chains. Requires dig be compiled with
- -DDIG_SIGCHASE.
- </p></dd>
+ Sets the number of times to try UDP queries to server
+ to <em class="parameter"><code>T</code></em> instead of the default,
+ 3. If <em class="parameter"><code>T</code></em> is less than or equal
+ to zero, the number of tries is silently rounded up
+ to 1.
+ </p></dd>
<dt><span class="term"><code class="option">+trusted-key=####</code></span></dt>
<dd>
<p>
- Specifies a file containing trusted keys to be used with
- <code class="option">+sigchase</code>. Each DNSKEY record must be
- on its own line.
- </p>
+ Specifies a file containing trusted keys to be used
+ with <code class="option">+sigchase</code>. Each DNSKEY record
+ must be on its own line.
+ </p>
<p>
- If not specified, <span><strong class="command">dig</strong></span> will look for
- <code class="filename">/etc/trusted-key.key</code> then
- <code class="filename">trusted-key.key</code> in the current directory.
+ If not specified, <span><strong class="command">dig</strong></span> will look
+ for <code class="filename">/etc/trusted-key.key</code> then
+ <code class="filename">trusted-key.key</code> in the current
+ directory.
</p>
<p>
- Requires dig be compiled with -DDIG_SIGCHASE.
+ Requires dig be compiled with -DDIG_SIGCHASE.
</p>
</dd>
-<dt><span class="term"><code class="option">+[no]topdown</code></span></dt>
-<dd><p>
- When chasing DNSSEC signature chains perform a top-down
- validation.
- Requires dig be compiled with -DDIG_SIGCHASE.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]nsid</code></span></dt>
+<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt>
<dd><p>
- Include an EDNS name server ID request when sending a query.
- </p></dd>
-<dt><span class="term"><code class="option">+[no]keepopen</code></span></dt>
+ Display [do not display] the TTL when printing the
+ record.
+ </p></dd>
+<dt><span class="term"><code class="option">+[no]vc</code></span></dt>
<dd><p>
- Keep the TCP socket open between queries and reuse it rather
- than creating a new TCP socket for each lookup. The default
- is <code class="option">+nokeepopen</code>.
- </p></dd>
+ Use [do not use] TCP when querying name servers. This
+ alternate syntax to <em class="parameter"><code>+[no]tcp</code></em>
+ is provided for backwards compatibility. The "vc"
+ stands for "virtual circuit".
+ </p></dd>
</dl></div>
<p>
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2653897"></a><h2>MULTIPLE QUERIES</h2>
+<a name="id2665318"></a><h2>MULTIPLE QUERIES</h2>
<p>
The BIND 9 implementation of <span><strong class="command">dig </strong></span>
supports
@@ -659,7 +654,7 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2654051"></a><h2>IDN SUPPORT</h2>
+<a name="id2665540"></a><h2>IDN SUPPORT</h2>
<p>
If <span><strong class="command">dig</strong></span> has been built with IDN (internationalized
domain name) support, it can accept and display non-ASCII domain names.
@@ -673,14 +668,14 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2654080"></a><h2>FILES</h2>
+<a name="id2665569"></a><h2>FILES</h2>
<p><code class="filename">/etc/resolv.conf</code>
</p>
<p><code class="filename">${HOME}/.digrc</code>
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2654101"></a><h2>SEE ALSO</h2>
+<a name="id2665590"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">host</span>(1)</span>,
<span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
@@ -688,7 +683,7 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2654138"></a><h2>BUGS</h2>
+<a name="id2665627"></a><h2>BUGS</h2>
<p>
There are probably too many query options.
</p>
@@ -711,5 +706,6 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/man.dnssec-checkds.html b/doc/arm/man.dnssec-checkds.html
index 74fe87af4185..2c04dc7d803d 100644
--- a/doc/arm/man.dnssec-checkds.html
+++ b/doc/arm/man.dnssec-checkds.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -51,7 +51,7 @@
<div class="cmdsynopsis"><p><code class="command">dnssec-dsfromkey</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2612723"></a><h2>DESCRIPTION</h2>
+<a name="id2612952"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">dnssec-checkds</strong></span>
verifies the correctness of Delegation Signer (DS) or DNSSEC
Lookaside Validation (DLV) resource records for keys in a specified
@@ -59,7 +59,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2612737"></a><h2>OPTIONS</h2>
+<a name="id2612966"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt>
<dd><p>
@@ -88,14 +88,14 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2612839"></a><h2>SEE ALSO</h2>
+<a name="id2614092"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">dnssec-dsfromkey</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2612873"></a><h2>AUTHOR</h2>
+<a name="id2614126"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
@@ -118,5 +118,6 @@
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/man.dnssec-coverage.html b/doc/arm/man.dnssec-coverage.html
index e8c7a22ea009..6021b685ae65 100644
--- a/doc/arm/man.dnssec-coverage.html
+++ b/doc/arm/man.dnssec-coverage.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -50,7 +50,7 @@
<div class="cmdsynopsis"><p><code class="command">dnssec-coverage</code> [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>DNSKEY TTL</code></em></code>] [<code class="option">-m <em class="replaceable"><code>max TTL</code></em></code>] [<code class="option">-r <em class="replaceable"><code>interval</code></em></code>] [<code class="option">-c <em class="replaceable"><code>compilezone path</code></em></code>] [zone]</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2613986"></a><h2>DESCRIPTION</h2>
+<a name="id2614219"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">dnssec-coverage</strong></span>
verifies that the DNSSEC keys for a given zone or a set of zones
have timing metadata set properly to ensure no future lapses in DNSSEC
@@ -78,7 +78,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2614012"></a><h2>OPTIONS</h2>
+<a name="id2614246"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt>
<dd><p>
@@ -112,7 +112,7 @@
<p>
This option is mandatory unless the <code class="option">-f</code> has
been used to specify a zone file. (If <code class="option">-f</code> has
- been specified, this option may still be used; it will overrde
+ been specified, this option may still be used; it will override
the value found in the file.)
</p>
</dd>
@@ -138,7 +138,7 @@
been used to specify a zone file, or a default key TTL was
set with the <code class="option">-L</code> to
<span><strong class="command">dnssec-keygen</strong></span>. (If either of those is true,
- this option may still be used; it will overrde the value found
+ this option may still be used; it will override the value found
in the zone or key file.)
</p>
</dd>
@@ -168,7 +168,7 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2614400"></a><h2>SEE ALSO</h2>
+<a name="id2614633"></a><h2>SEE ALSO</h2>
<p>
<span class="citerefentry"><span class="refentrytitle">dnssec-checkds</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">dnssec-dsfromkey</span>(8)</span>,
@@ -177,7 +177,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2614443"></a><h2>AUTHOR</h2>
+<a name="id2614677"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
@@ -201,5 +201,6 @@
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/man.dnssec-dsfromkey.html b/doc/arm/man.dnssec-dsfromkey.html
index e9e07c2273e1..4b357052d512 100644
--- a/doc/arm/man.dnssec-dsfromkey.html
+++ b/doc/arm/man.dnssec-dsfromkey.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -49,16 +49,17 @@
<h2>Synopsis</h2>
<div class="cmdsynopsis"><p><code class="command">dnssec-dsfromkey</code> [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-1</code>] [<code class="option">-2</code>] [<code class="option">-a <em class="replaceable"><code>alg</code></em></code>] [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-T <em class="replaceable"><code>TTL</code></em></code>] {keyfile}</p></div>
<div class="cmdsynopsis"><p><code class="command">dnssec-dsfromkey</code> {-s} [<code class="option">-1</code>] [<code class="option">-2</code>] [<code class="option">-a <em class="replaceable"><code>alg</code></em></code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-s</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-T <em class="replaceable"><code>TTL</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-A</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] {dnsname}</p></div>
+<div class="cmdsynopsis"><p><code class="command">dnssec-dsfromkey</code> [<code class="option">-h</code>] [<code class="option">-V</code>]</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2615180"></a><h2>DESCRIPTION</h2>
+<a name="id2615157"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">dnssec-dsfromkey</strong></span>
outputs the Delegation Signer (DS) resource record (RR), as defined in
RFC 3658 and RFC 4509, for the given key(s).
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2615194"></a><h2>OPTIONS</h2>
+<a name="id2615171"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-1</span></dt>
<dd><p>
@@ -132,10 +133,18 @@
<dd><p>
Sets the debugging level.
</p></dd>
+<dt><span class="term">-h</span></dt>
+<dd><p>
+ Prints usage information.
+ </p></dd>
+<dt><span class="term">-V</span></dt>
+<dd><p>
+ Prints version information.
+ </p></dd>
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2615770"></a><h2>EXAMPLE</h2>
+<a name="id2615843"></a><h2>EXAMPLE</h2>
<p>
To build the SHA-256 DS RR from the
<strong class="userinput"><code>Kexample.com.+003+26160</code></strong>
@@ -150,7 +159,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2615875"></a><h2>FILES</h2>
+<a name="id2615879"></a><h2>FILES</h2>
<p>
The keyfile can be designed by the key identification
<code class="filename">Knnnn.+aaa+iiiii</code> or the full file name
@@ -164,13 +173,13 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2616736"></a><h2>CAVEAT</h2>
+<a name="id2615921"></a><h2>CAVEAT</h2>
<p>
A keyfile error can give a "file not found" even if the file exists.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2616745"></a><h2>SEE ALSO</h2>
+<a name="id2615930"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
<em class="citetitle">BIND 9 Administrator Reference Manual</em>,
@@ -180,7 +189,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2616785"></a><h2>AUTHOR</h2>
+<a name="id2615970"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
@@ -204,5 +213,6 @@
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/man.dnssec-keyfromlabel.html b/doc/arm/man.dnssec-keyfromlabel.html
index cb1c8db18be4..6c9907a54f4d 100644
--- a/doc/arm/man.dnssec-keyfromlabel.html
+++ b/doc/arm/man.dnssec-keyfromlabel.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -47,14 +47,17 @@
</div>
<div class="refsynopsisdiv">
<h2>Synopsis</h2>
-<div class="cmdsynopsis"><p><code class="command">dnssec-keyfromlabel</code> {-l <em class="replaceable"><code>label</code></em>} [<code class="option">-3</code>] [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>] [<code class="option">-A <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-G</code>] [<code class="option">-I <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-k</code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-L <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-n <em class="replaceable"><code>nametype</code></em></code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-p <em class="replaceable"><code>protocol</code></em></code>] [<code class="option">-R <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-y</code>] {name}</p></div>
+<div class="cmdsynopsis"><p><code class="command">dnssec-keyfromlabel</code> {-l <em class="replaceable"><code>label</code></em>} [<code class="option">-3</code>] [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>] [<code class="option">-A <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-G</code>] [<code class="option">-I <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-i <em class="replaceable"><code>interval</code></em></code>] [<code class="option">-k</code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-L <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-n <em class="replaceable"><code>nametype</code></em></code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-p <em class="replaceable"><code>protocol</code></em></code>] [<code class="option">-R <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-S <em class="replaceable"><code>key</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-V</code>] [<code class="option">-y</code>] {name}</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2616118"></a><h2>DESCRIPTION</h2>
+<a name="id2616880"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">dnssec-keyfromlabel</strong></span>
- gets keys with the given label from a crypto hardware and builds
- key files for DNSSEC (Secure DNS), as defined in RFC 2535
- and RFC 4034.
+ generates a key pair of files that referencing a key object stored
+ in a cryptographic hardware service module (HSM). The private key
+ file can be used for DNSSEC signing of zone data as if it were a
+ conventional signing key created by <span><strong class="command">dnssec-keygen</strong></span>,
+ but the key material is stored within the HSM, and the actual signing
+ takes place there.
</p>
<p>
The <code class="option">name</code> of the key is specified on the command
@@ -63,7 +66,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2616138"></a><h2>OPTIONS</h2>
+<a name="id2616905"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-a <em class="replaceable"><code>algorithm</code></em></span></dt>
<dd>
@@ -170,6 +173,16 @@
Other possible values for this argument are listed in
RFC 2535 and its successors.
</p></dd>
+<dt><span class="term">-S <em class="replaceable"><code>key</code></em></span></dt>
+<dd><p>
+ Generate a key as an explicit successor to an existing key.
+ The name, algorithm, size, and type of the key will be set
+ to match the predecessor. The activation date of the new
+ key will be set to the inactivation date of the existing
+ one. The publication date will be set to the activation
+ date minus the prepublication interval, which defaults to
+ 30 days.
+ </p></dd>
<dt><span class="term">-t <em class="replaceable"><code>type</code></em></span></dt>
<dd><p>
Indicates the use of the key. <code class="option">type</code> must be
@@ -181,6 +194,10 @@
<dd><p>
Sets the debugging level.
</p></dd>
+<dt><span class="term">-V</span></dt>
+<dd><p>
+ Prints version information.
+ </p></dd>
<dt><span class="term">-y</span></dt>
<dd><p>
Allows DNSSEC key files to be generated even if the key ID
@@ -192,7 +209,7 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2617968"></a><h2>TIMING OPTIONS</h2>
+<a name="id2667508"></a><h2>TIMING OPTIONS</h2>
<p>
Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS.
If the argument begins with a '+' or '-', it is interpreted as
@@ -201,7 +218,8 @@
then the offset is computed in years (defined as 365 24-hour days,
ignoring leap years), months (defined as 30 24-hour days), weeks,
days, hours, or minutes, respectively. Without a suffix, the offset
- is computed in seconds.
+ is computed in seconds. To explicitly prevent a date from being
+ set, use 'none' or 'never'.
</p>
<div class="variablelist"><dl>
<dt><span class="term">-P <em class="replaceable"><code>date/offset</code></em></span></dt>
@@ -236,10 +254,34 @@
date, the key will no longer be included in the zone. (It
may remain in the key repository, however.)
</p></dd>
+<dt><span class="term">-i <em class="replaceable"><code>interval</code></em></span></dt>
+<dd>
+<p>
+ Sets the prepublication interval for a key. If set, then
+ the publication and activation dates must be separated by at least
+ this much time. If the activation date is specified but the
+ publication date isn't, then the publication date will default
+ to this much time before the activation date; conversely, if
+ the publication date is specified but activation date isn't,
+ then activation will be set to this much time after publication.
+ </p>
+<p>
+ If the key is being created as an explicit successor to another
+ key, then the default prepublication interval is 30 days;
+ otherwise it is zero.
+ </p>
+<p>
+ As with date offsets, if the argument is followed by one of
+ the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi', then the
+ interval is measured in years, months, weeks, days, hours,
+ or minutes, respectively. Without a suffix, the interval is
+ measured in seconds.
+ </p>
+</dd>
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2662302"></a><h2>GENERATED KEY FILES</h2>
+<a name="id2667629"></a><h2>GENERATED KEY FILES</h2>
<p>
When <span><strong class="command">dnssec-keyfromlabel</strong></span> completes
successfully,
@@ -278,7 +320,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2662396"></a><h2>SEE ALSO</h2>
+<a name="id2667860"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
<em class="citetitle">BIND 9 Administrator Reference Manual</em>,
@@ -286,7 +328,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2662498"></a><h2>AUTHOR</h2>
+<a name="id2667893"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
@@ -310,5 +352,6 @@
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/man.dnssec-keygen.html b/doc/arm/man.dnssec-keygen.html
index 55d8532a4a2d..cae041ecbfc9 100644
--- a/doc/arm/man.dnssec-keygen.html
+++ b/doc/arm/man.dnssec-keygen.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -47,10 +47,10 @@
</div>
<div class="refsynopsisdiv">
<h2>Synopsis</h2>
-<div class="cmdsynopsis"><p><code class="command">dnssec-keygen</code> [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>] [<code class="option">-b <em class="replaceable"><code>keysize</code></em></code>] [<code class="option">-n <em class="replaceable"><code>nametype</code></em></code>] [<code class="option">-3</code>] [<code class="option">-A <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-C</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-G</code>] [<code class="option">-g <em class="replaceable"><code>generator</code></em></code>] [<code class="option">-h</code>] [<code class="option">-I <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-i <em class="replaceable"><code>interval</code></em></code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-L <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-k</code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-p <em class="replaceable"><code>protocol</code></em></code>] [<code class="option">-q</code>] [<code class="option">-R <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-r <em class="replaceable"><code>randomdev</code></em></code>] [<code class="option">-S <em class="replaceable"><code>key</code></em></code>] [<code class="option">-s <em class="replaceable"><code>strength</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-z</code>] {name}</p></div>
+<div class="cmdsynopsis"><p><code class="command">dnssec-keygen</code> [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>] [<code class="option">-b <em class="replaceable"><code>keysize</code></em></code>] [<code class="option">-n <em class="replaceable"><code>nametype</code></em></code>] [<code class="option">-3</code>] [<code class="option">-A <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-C</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-G</code>] [<code class="option">-g <em class="replaceable"><code>generator</code></em></code>] [<code class="option">-h</code>] [<code class="option">-I <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-i <em class="replaceable"><code>interval</code></em></code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-L <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-k</code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-p <em class="replaceable"><code>protocol</code></em></code>] [<code class="option">-q</code>] [<code class="option">-R <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-r <em class="replaceable"><code>randomdev</code></em></code>] [<code class="option">-S <em class="replaceable"><code>key</code></em></code>] [<code class="option">-s <em class="replaceable"><code>strength</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-V</code>] [<code class="option">-z</code>] {name}</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2617296"></a><h2>DESCRIPTION</h2>
+<a name="id2617646"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">dnssec-keygen</strong></span>
generates keys for DNSSEC (Secure DNS), as defined in RFC 2535
and RFC 4034. It can also generate keys for use with
@@ -64,7 +64,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2617316"></a><h2>OPTIONS</h2>
+<a name="id2617667"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-a <em class="replaceable"><code>algorithm</code></em></span></dt>
<dd>
@@ -271,10 +271,14 @@
<dd><p>
Sets the debugging level.
</p></dd>
+<dt><span class="term">-V</span></dt>
+<dd><p>
+ Prints version information.
+ </p></dd>
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2662970"></a><h2>TIMING OPTIONS</h2>
+<a name="id2668318"></a><h2>TIMING OPTIONS</h2>
<p>
Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS.
If the argument begins with a '+' or '-', it is interpreted as
@@ -283,7 +287,8 @@
then the offset is computed in years (defined as 365 24-hour days,
ignoring leap years), months (defined as 30 24-hour days), weeks,
days, hours, or minutes, respectively. Without a suffix, the offset
- is computed in seconds.
+ is computed in seconds. To explicitly prevent a date from being
+ set, use 'none' or 'never'.
</p>
<div class="variablelist"><dl>
<dt><span class="term">-P <em class="replaceable"><code>date/offset</code></em></span></dt>
@@ -298,7 +303,9 @@
Sets the date on which the key is to be activated. After that
date, the key will be included in the zone and used to sign
it. If not set, and if the -G option has not been used, the
- default is "now".
+ default is "now". If set, if and -P is not set, then
+ the publication date will be set to the activation date
+ minus the prepublication interval.
</p></dd>
<dt><span class="term">-R <em class="replaceable"><code>date/offset</code></em></span></dt>
<dd><p>
@@ -345,7 +352,7 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2663160"></a><h2>GENERATED KEYS</h2>
+<a name="id2668508"></a><h2>GENERATED KEYS</h2>
<p>
When <span><strong class="command">dnssec-keygen</strong></span> completes
successfully,
@@ -391,7 +398,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2663336"></a><h2>EXAMPLE</h2>
+<a name="id2668821"></a><h2>EXAMPLE</h2>
<p>
To generate a 768-bit DSA key for the domain
<strong class="userinput"><code>example.com</code></strong>, the following command would be
@@ -412,7 +419,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2663461"></a><h2>SEE ALSO</h2>
+<a name="id2668877"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
<em class="citetitle">BIND 9 Administrator Reference Manual</em>,
<em class="citetitle">RFC 2539</em>,
@@ -421,7 +428,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2663492"></a><h2>AUTHOR</h2>
+<a name="id2668908"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
@@ -445,5 +452,6 @@
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/man.dnssec-revoke.html b/doc/arm/man.dnssec-revoke.html
index 43ed05402f21..665e86d17d9f 100644
--- a/doc/arm/man.dnssec-revoke.html
+++ b/doc/arm/man.dnssec-revoke.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -47,10 +47,10 @@
</div>
<div class="refsynopsisdiv">
<h2>Synopsis</h2>
-<div class="cmdsynopsis"><p><code class="command">dnssec-revoke</code> [<code class="option">-hr</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f</code>] [<code class="option">-R</code>] {keyfile}</p></div>
+<div class="cmdsynopsis"><p><code class="command">dnssec-revoke</code> [<code class="option">-hr</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-V</code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f</code>] [<code class="option">-R</code>] {keyfile}</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2618407"></a><h2>DESCRIPTION</h2>
+<a name="id2618032"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">dnssec-revoke</strong></span>
reads a DNSSEC key file, sets the REVOKED bit on the key as defined
in RFC 5011, and creates a new pair of key files containing the
@@ -58,7 +58,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2618421"></a><h2>OPTIONS</h2>
+<a name="id2618045"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-h</span></dt>
<dd><p>
@@ -77,6 +77,10 @@
<dd><p>
Sets the debugging level.
</p></dd>
+<dt><span class="term">-V</span></dt>
+<dd><p>
+ Prints version information.
+ </p></dd>
<dt><span class="term">-E <em class="replaceable"><code>engine</code></em></span></dt>
<dd><p>
Use the given OpenSSL engine. When compiled with PKCS#11 support
@@ -96,14 +100,14 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2618541"></a><h2>SEE ALSO</h2>
+<a name="id2618180"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
<em class="citetitle">BIND 9 Administrator Reference Manual</em>,
<em class="citetitle">RFC 5011</em>.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2618566"></a><h2>AUTHOR</h2>
+<a name="id2618204"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
@@ -127,5 +131,6 @@
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/man.dnssec-settime.html b/doc/arm/man.dnssec-settime.html
index 498ea96f0a3f..bb41f6db3a95 100644
--- a/doc/arm/man.dnssec-settime.html
+++ b/doc/arm/man.dnssec-settime.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -47,10 +47,10 @@
</div>
<div class="refsynopsisdiv">
<h2>Synopsis</h2>
-<div class="cmdsynopsis"><p><code class="command">dnssec-settime</code> [<code class="option">-f</code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-L <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-A <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-R <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-I <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-h</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] {keyfile}</p></div>
+<div class="cmdsynopsis"><p><code class="command">dnssec-settime</code> [<code class="option">-f</code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-L <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-A <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-R <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-I <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-h</code>] [<code class="option">-V</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] {keyfile}</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2618803"></a><h2>DESCRIPTION</h2>
+<a name="id2618452"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">dnssec-settime</strong></span>
reads a DNSSEC private key file and sets the key timing metadata
as specified by the <code class="option">-P</code>, <code class="option">-A</code>,
@@ -76,7 +76,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2618861"></a><h2>OPTIONS</h2>
+<a name="id2618510"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-f</span></dt>
<dd><p>
@@ -106,6 +106,10 @@
<dd><p>
Emit usage message and exit.
</p></dd>
+<dt><span class="term">-V</span></dt>
+<dd><p>
+ Prints version information.
+ </p></dd>
<dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt>
<dd><p>
Sets the debugging level.
@@ -118,7 +122,7 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2619051"></a><h2>TIMING OPTIONS</h2>
+<a name="id2619329"></a><h2>TIMING OPTIONS</h2>
<p>
Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS.
If the argument begins with a '+' or '-', it is interpreted as
@@ -127,7 +131,7 @@
then the offset is computed in years (defined as 365 24-hour days,
ignoring leap years), months (defined as 30 24-hour days), weeks,
days, hours, or minutes, respectively. Without a suffix, the offset
- is computed in seconds. To unset a date, use 'none'.
+ is computed in seconds. To unset a date, use 'none' or 'never'.
</p>
<div class="variablelist"><dl>
<dt><span class="term">-P <em class="replaceable"><code>date/offset</code></em></span></dt>
@@ -197,7 +201,7 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2619326"></a><h2>PRINTING OPTIONS</h2>
+<a name="id2619467"></a><h2>PRINTING OPTIONS</h2>
<p>
<span><strong class="command">dnssec-settime</strong></span> can also be used to print the
timing metadata associated with a key.
@@ -223,7 +227,7 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2619406"></a><h2>SEE ALSO</h2>
+<a name="id2619547"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
<em class="citetitle">BIND 9 Administrator Reference Manual</em>,
@@ -231,7 +235,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2619440"></a><h2>AUTHOR</h2>
+<a name="id2619580"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
@@ -255,5 +259,6 @@
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/man.dnssec-signzone.html b/doc/arm/man.dnssec-signzone.html
index 6b126fe661b4..10225d5c96e8 100644
--- a/doc/arm/man.dnssec-signzone.html
+++ b/doc/arm/man.dnssec-signzone.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -47,10 +47,10 @@
</div>
<div class="refsynopsisdiv">
<h2>Synopsis</h2>
-<div class="cmdsynopsis"><p><code class="command">dnssec-signzone</code> [<code class="option">-a</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-d <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-D</code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-e <em class="replaceable"><code>end-time</code></em></code>] [<code class="option">-f <em class="replaceable"><code>output-file</code></em></code>] [<code class="option">-g</code>] [<code class="option">-h</code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-k <em class="replaceable"><code>key</code></em></code>] [<code class="option">-L <em class="replaceable"><code>serial</code></em></code>] [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-i <em class="replaceable"><code>interval</code></em></code>] [<code class="option">-I <em class="replaceable"><code>input-format</code></em></code>] [<code class="option">-j <em class="replaceable"><code>jitter</code></em></code>] [<code class="option">-N <em class="replaceable"><code>soa-serial-format</code></em></code>] [<code class="option">-o <em class="replaceable"><code>origin</code></em></code>] [<code class="option">-O <em class="replaceable"><code>output-format</code></em></code>] [<code class="option">-P</code>] [<code class="option">-p</code>] [<code class="option">-R</code>] [<code class="option">-r <em class="replaceable"><code>randomdev</code></em></code>] [<code class="option">-S</code>] [<code class="option">-s <em class="replaceable"><code>start-time</code></em></code>] [<code class="option">-T <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-t</code>] [<code class="option">-u</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-X <em class="replaceable"><code>extended end-time</code></em></code>] [<code class="option">-x</code>] [<code class="option">-z</code>] [<code class="option">-3 <em class="replaceable"><code>salt</code></em></code>] [<code class="option">-H <em class="replaceable"><code>iterations</code></em></code>] [<code class="option">-A</code>] {zonefile} [key...]</p></div>
+<div class="cmdsynopsis"><p><code class="command">dnssec-signzone</code> [<code class="option">-a</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-d <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-D</code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-e <em class="replaceable"><code>end-time</code></em></code>] [<code class="option">-f <em class="replaceable"><code>output-file</code></em></code>] [<code class="option">-g</code>] [<code class="option">-h</code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-k <em class="replaceable"><code>key</code></em></code>] [<code class="option">-L <em class="replaceable"><code>serial</code></em></code>] [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-i <em class="replaceable"><code>interval</code></em></code>] [<code class="option">-I <em class="replaceable"><code>input-format</code></em></code>] [<code class="option">-j <em class="replaceable"><code>jitter</code></em></code>] [<code class="option">-N <em class="replaceable"><code>soa-serial-format</code></em></code>] [<code class="option">-o <em class="replaceable"><code>origin</code></em></code>] [<code class="option">-O <em class="replaceable"><code>output-format</code></em></code>] [<code class="option">-P</code>] [<code class="option">-p</code>] [<code class="option">-R</code>] [<code class="option">-r <em class="replaceable"><code>randomdev</code></em></code>] [<code class="option">-S</code>] [<code class="option">-s <em class="replaceable"><code>start-time</code></em></code>] [<code class="option">-T <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-t</code>] [<code class="option">-u</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-V</code>] [<code class="option">-X <em class="replaceable"><code>extended end-time</code></em></code>] [<code class="option">-x</code>] [<code class="option">-z</code>] [<code class="option">-3 <em class="replaceable"><code>salt</code></em></code>] [<code class="option">-H <em class="replaceable"><code>iterations</code></em></code>] [<code class="option">-A</code>] {zonefile} [key...]</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2633714"></a><h2>DESCRIPTION</h2>
+<a name="id2621236"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">dnssec-signzone</strong></span>
signs a zone. It generates
NSEC and RRSIG records and produces a signed version of the
@@ -61,7 +61,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2633733"></a><h2>OPTIONS</h2>
+<a name="id2621255"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-a</span></dt>
<dd><p>
@@ -183,6 +183,10 @@
Prints a short summary of the options and arguments to
<span><strong class="command">dnssec-signzone</strong></span>.
</p></dd>
+<dt><span class="term">-V</span></dt>
+<dd><p>
+ Prints version information.
+ </p></dd>
<dt><span class="term">-i <em class="replaceable"><code>interval</code></em></span></dt>
<dd>
<p>
@@ -479,7 +483,7 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2670004"></a><h2>EXAMPLE</h2>
+<a name="id2672149"></a><h2>EXAMPLE</h2>
<p>
The following command signs the <strong class="userinput"><code>example.com</code></strong>
zone with the DSA key generated by <span><strong class="command">dnssec-keygen</strong></span>
@@ -509,14 +513,14 @@ db.example.com.signed
%</pre>
</div>
<div class="refsect1" lang="en">
-<a name="id2670083"></a><h2>SEE ALSO</h2>
+<a name="id2672228"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
<em class="citetitle">BIND 9 Administrator Reference Manual</em>,
<em class="citetitle">RFC 4033</em>, <em class="citetitle">RFC 4641</em>.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2670110"></a><h2>AUTHOR</h2>
+<a name="id2672256"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
@@ -540,5 +544,6 @@ db.example.com.signed
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/man.dnssec-verify.html b/doc/arm/man.dnssec-verify.html
index 09f287e58c9d..512dd645ce2d 100644
--- a/doc/arm/man.dnssec-verify.html
+++ b/doc/arm/man.dnssec-verify.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -47,10 +47,10 @@
</div>
<div class="refsynopsisdiv">
<h2>Synopsis</h2>
-<div class="cmdsynopsis"><p><code class="command">dnssec-verify</code> [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-I <em class="replaceable"><code>input-format</code></em></code>] [<code class="option">-o <em class="replaceable"><code>origin</code></em></code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-x</code>] [<code class="option">-z</code>] {zonefile}</p></div>
+<div class="cmdsynopsis"><p><code class="command">dnssec-verify</code> [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-I <em class="replaceable"><code>input-format</code></em></code>] [<code class="option">-o <em class="replaceable"><code>origin</code></em></code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-V</code>] [<code class="option">-x</code>] [<code class="option">-z</code>] {zonefile}</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2621361"></a><h2>DESCRIPTION</h2>
+<a name="id2623653"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">dnssec-verify</strong></span>
verifies that a zone is fully signed for each algorithm found
in the DNSKEY RRset for the zone, and that the NSEC / NSEC3
@@ -58,7 +58,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2621374"></a><h2>OPTIONS</h2>
+<a name="id2623667"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-c <em class="replaceable"><code>class</code></em></span></dt>
<dd><p>
@@ -84,6 +84,10 @@
<dd><p>
Sets the debugging level.
</p></dd>
+<dt><span class="term">-V</span></dt>
+<dd><p>
+ Prints version information.
+ </p></dd>
<dt><span class="term">-x</span></dt>
<dd><p>
Only verify that the DNSKEY RRset is signed with key-signing
@@ -120,7 +124,7 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2627941"></a><h2>SEE ALSO</h2>
+<a name="id2630998"></a><h2>SEE ALSO</h2>
<p>
<span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
<em class="citetitle">BIND 9 Administrator Reference Manual</em>,
@@ -128,7 +132,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2627966"></a><h2>AUTHOR</h2>
+<a name="id2631024"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
@@ -152,5 +156,6 @@
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/man.genrandom.html b/doc/arm/man.genrandom.html
index 2052cb6b8259..82c192b8998c 100644
--- a/doc/arm/man.genrandom.html
+++ b/doc/arm/man.genrandom.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -50,7 +50,7 @@
<div class="cmdsynopsis"><p><code class="command">genrandom</code> [<code class="option">-n <em class="replaceable"><code>number</code></em></code>] {<em class="replaceable"><code>size</code></em>} {<em class="replaceable"><code>filename</code></em>}</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2659150"></a><h2>DESCRIPTION</h2>
+<a name="id2619177"></a><h2>DESCRIPTION</h2>
<p>
<span><strong class="command">genrandom</strong></span>
generates a file or a set of files containing a specified quantity
@@ -59,7 +59,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2659165"></a><h2>ARGUMENTS</h2>
+<a name="id2657217"></a><h2>ARGUMENTS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-n <em class="replaceable"><code>number</code></em></span></dt>
<dd><p>
@@ -77,14 +77,14 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2659294"></a><h2>SEE ALSO</h2>
+<a name="id2657277"></a><h2>SEE ALSO</h2>
<p>
<span class="citerefentry"><span class="refentrytitle">rand</span>(3)</span>,
<span class="citerefentry"><span class="refentrytitle">arc4random</span>(3)</span>
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2659321"></a><h2>AUTHOR</h2>
+<a name="id2657304"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
@@ -108,5 +108,6 @@
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/man.host.html b/doc/arm/man.host.html
index b01b72245315..e8acc5c47c8f 100644
--- a/doc/arm/man.host.html
+++ b/doc/arm/man.host.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -47,10 +47,10 @@
</div>
<div class="refsynopsisdiv">
<h2>Synopsis</h2>
-<div class="cmdsynopsis"><p><code class="command">host</code> [<code class="option">-aCdlnrsTwv</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-N <em class="replaceable"><code>ndots</code></em></code>] [<code class="option">-R <em class="replaceable"><code>number</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-W <em class="replaceable"><code>wait</code></em></code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] {name} [server]</p></div>
+<div class="cmdsynopsis"><p><code class="command">host</code> [<code class="option">-aCdlnrsTwv</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-N <em class="replaceable"><code>ndots</code></em></code>] [<code class="option">-R <em class="replaceable"><code>number</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-W <em class="replaceable"><code>wait</code></em></code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-v</code>] [<code class="option">-V</code>] {name} [server]</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2612021"></a><h2>DESCRIPTION</h2>
+<a name="id2611991"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">host</strong></span>
is a simple utility for performing DNS lookups.
It is normally used to convert names to IP addresses and vice versa.
@@ -200,9 +200,13 @@
<em class="parameter"><code>record</code></em>, <em class="parameter"><code>usage</code></em> and
<em class="parameter"><code>trace</code></em>.
</p>
+<p>
+ The <code class="option">-V</code> option causes <span><strong class="command">host</strong></span>
+ to print the version number and exit.
+ </p>
</div>
<div class="refsect1" lang="en">
-<a name="id2612535"></a><h2>IDN SUPPORT</h2>
+<a name="id2612723"></a><h2>IDN SUPPORT</h2>
<p>
If <span><strong class="command">host</strong></span> has been built with IDN (internationalized
domain name) support, it can accept and display non-ASCII domain names.
@@ -216,12 +220,12 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2612564"></a><h2>FILES</h2>
+<a name="id2612752"></a><h2>FILES</h2>
<p><code class="filename">/etc/resolv.conf</code>
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2612578"></a><h2>SEE ALSO</h2>
+<a name="id2612765"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">dig</span>(1)</span>,
<span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>.
</p>
@@ -245,5 +249,6 @@
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/man.isc-hmac-fixup.html b/doc/arm/man.isc-hmac-fixup.html
index 6b60d3b27393..b411032fae5b 100644
--- a/doc/arm/man.isc-hmac-fixup.html
+++ b/doc/arm/man.isc-hmac-fixup.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -50,7 +50,7 @@
<div class="cmdsynopsis"><p><code class="command">isc-hmac-fixup</code> {<em class="replaceable"><code>algorithm</code></em>} {<em class="replaceable"><code>secret</code></em>}</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2618278"></a><h2>DESCRIPTION</h2>
+<a name="id2657565"></a><h2>DESCRIPTION</h2>
<p>
Versions of BIND 9 up to and including BIND 9.6 had a bug causing
HMAC-SHA* TSIG keys which were longer than the digest length of the
@@ -76,7 +76,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2660972"></a><h2>SECURITY CONSIDERATIONS</h2>
+<a name="id2657593"></a><h2>SECURITY CONSIDERATIONS</h2>
<p>
Secrets that have been converted by <span><strong class="command">isc-hmac-fixup</strong></span>
are shortened, but as this is how the HMAC protocol works in
@@ -87,14 +87,14 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2660988"></a><h2>SEE ALSO</h2>
+<a name="id2657609"></a><h2>SEE ALSO</h2>
<p>
<em class="citetitle">BIND 9 Administrator Reference Manual</em>,
<em class="citetitle">RFC 2104</em>.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2661005"></a><h2>AUTHOR</h2>
+<a name="id2657626"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
@@ -118,5 +118,6 @@
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/man.named-checkconf.html b/doc/arm/man.named-checkconf.html
index ca13940f26fd..da1a4ec87b42 100644
--- a/doc/arm/man.named-checkconf.html
+++ b/doc/arm/man.named-checkconf.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -50,7 +50,7 @@
<div class="cmdsynopsis"><p><code class="command">named-checkconf</code> [<code class="option">-h</code>] [<code class="option">-v</code>] [<code class="option">-j</code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] {filename} [<code class="option">-p</code>] [<code class="option">-x</code>] [<code class="option">-z</code>]</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2633915"></a><h2>DESCRIPTION</h2>
+<a name="id2633942"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">named-checkconf</strong></span>
checks the syntax, but not the semantics, of a
<span><strong class="command">named</strong></span> configuration file. The file is parsed
@@ -70,7 +70,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2633986"></a><h2>OPTIONS</h2>
+<a name="id2637016"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-h</span></dt>
<dd><p>
@@ -119,21 +119,21 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2634210"></a><h2>RETURN VALUES</h2>
+<a name="id2637172"></a><h2>RETURN VALUES</h2>
<p><span><strong class="command">named-checkconf</strong></span>
returns an exit status of 1 if
errors were detected and 0 otherwise.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2634224"></a><h2>SEE ALSO</h2>
+<a name="id2637186"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">named-checkzone</span>(8)</span>,
<em class="citetitle">BIND 9 Administrator Reference Manual</em>.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2634253"></a><h2>AUTHOR</h2>
+<a name="id2637216"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
@@ -157,5 +157,6 @@
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/man.named-checkzone.html b/doc/arm/man.named-checkzone.html
index 159f005a38e1..76fb86e126c1 100644
--- a/doc/arm/man.named-checkzone.html
+++ b/doc/arm/man.named-checkzone.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -51,7 +51,7 @@
<div class="cmdsynopsis"><p><code class="command">named-compilezone</code> [<code class="option">-d</code>] [<code class="option">-j</code>] [<code class="option">-q</code>] [<code class="option">-v</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-C <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-f <em class="replaceable"><code>format</code></em></code>] [<code class="option">-F <em class="replaceable"><code>format</code></em></code>] [<code class="option">-i <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-k <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-m <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-n <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-L <em class="replaceable"><code>serial</code></em></code>] [<code class="option">-r <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-s <em class="replaceable"><code>style</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-T <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-w <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-D</code>] [<code class="option">-W <em class="replaceable"><code>mode</code></em></code>] {<code class="option">-o <em class="replaceable"><code>filename</code></em></code>} {zonename} {filename}</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2637408"></a><h2>DESCRIPTION</h2>
+<a name="id2641740"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">named-checkzone</strong></span>
checks the syntax and integrity of a zone file. It performs the
same checks as <span><strong class="command">named</strong></span> does when loading a
@@ -71,7 +71,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2637458"></a><h2>OPTIONS</h2>
+<a name="id2673603"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-d</span></dt>
<dd><p>
@@ -250,10 +250,10 @@
</p></dd>
<dt><span class="term">-T <em class="replaceable"><code>mode</code></em></span></dt>
<dd><p>
- Check if Sender Policy Framework records (TXT and SPF)
- both exist or both don't exist. A warning is issued
- if they don't match. Possible modes are
- <span><strong class="command">"warn"</strong></span> (default), <span><strong class="command">"ignore"</strong></span>.
+ Check if Sender Policy Framework (SPF) records exist
+ and issues a warning if an SPF-formatted TXT record is
+ not also present. Possible modes are <span><strong class="command">"warn"</strong></span>
+ (default), <span><strong class="command">"ignore"</strong></span>.
</p></dd>
<dt><span class="term">-w <em class="replaceable"><code>directory</code></em></span></dt>
<dd><p>
@@ -288,14 +288,14 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2670998"></a><h2>RETURN VALUES</h2>
+<a name="id2674443"></a><h2>RETURN VALUES</h2>
<p><span><strong class="command">named-checkzone</strong></span>
returns an exit status of 1 if
errors were detected and 0 otherwise.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2671080"></a><h2>SEE ALSO</h2>
+<a name="id2674457"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>,
<em class="citetitle">RFC 1035</em>,
@@ -303,7 +303,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2671113"></a><h2>AUTHOR</h2>
+<a name="id2674490"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
@@ -327,5 +327,6 @@
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/man.named-journalprint.html b/doc/arm/man.named-journalprint.html
index e391a4071f81..e0b24f8391aa 100644
--- a/doc/arm/man.named-journalprint.html
+++ b/doc/arm/man.named-journalprint.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -50,7 +50,7 @@
<div class="cmdsynopsis"><p><code class="command">named-journalprint</code> {<em class="replaceable"><code>journal</code></em>}</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2614871"></a><h2>DESCRIPTION</h2>
+<a name="id2615997"></a><h2>DESCRIPTION</h2>
<p>
<span><strong class="command">named-journalprint</strong></span>
prints the contents of a zone journal file in a human-readable
@@ -76,7 +76,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2641882"></a><h2>SEE ALSO</h2>
+<a name="id2616043"></a><h2>SEE ALSO</h2>
<p>
<span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">nsupdate</span>(8)</span>,
@@ -84,7 +84,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2641913"></a><h2>AUTHOR</h2>
+<a name="id2642630"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
@@ -108,5 +108,6 @@
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/man.named.html b/doc/arm/man.named.html
index dc9ebe4eeb37..a59d301dd44c 100644
--- a/doc/arm/man.named.html
+++ b/doc/arm/man.named.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -50,7 +50,7 @@
<div class="cmdsynopsis"><p><code class="command">named</code> [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine-name</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-S <em class="replaceable"><code>#max-socks</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-U <em class="replaceable"><code>#listeners</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-V</code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2640387"></a><h2>DESCRIPTION</h2>
+<a name="id2641988"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">named</strong></span>
is a Domain Name System (DNS) server,
part of the BIND 9 distribution from ISC. For more
@@ -65,7 +65,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2641442"></a><h2>OPTIONS</h2>
+<a name="id2642019"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-4</span></dt>
<dd><p>
@@ -201,10 +201,12 @@
Use <em class="replaceable"><code>#listeners</code></em>
worker threads to listen for incoming UDP packets on each
address. If not specified, <span><strong class="command">named</strong></span> will
- use the number of detected CPUs. If <code class="option">-n</code>
- has been set to a higher value than the number of CPUs,
- then <code class="option">-U</code> may be increased as high as that
- value, but no higher.
+ calculate a default value based on the number of detected
+ CPUs: 1 for 1 CPU, 2 for 2-4 CPUs, and the number of
+ detected CPUs divided by 2 for values higher than 4.
+ If <code class="option">-n</code> has been set to a higher value than
+ the number of detected CPUs, then <code class="option">-U</code> may
+ be increased as high as that value, but no higher.
</p></dd>
<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt>
<dd>
@@ -256,7 +258,7 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2666470"></a><h2>SIGNALS</h2>
+<a name="id2677286"></a><h2>SIGNALS</h2>
<p>
In routine operation, signals should not be used to control
the nameserver; <span><strong class="command">rndc</strong></span> should be used
@@ -277,7 +279,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2673074"></a><h2>CONFIGURATION</h2>
+<a name="id2677336"></a><h2>CONFIGURATION</h2>
<p>
The <span><strong class="command">named</strong></span> configuration file is too complex
to describe in detail here. A complete description is provided
@@ -294,7 +296,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2673123"></a><h2>FILES</h2>
+<a name="id2677453"></a><h2>FILES</h2>
<div class="variablelist"><dl>
<dt><span class="term"><code class="filename">/etc/named.conf</code></span></dt>
<dd><p>
@@ -307,7 +309,7 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2673166"></a><h2>SEE ALSO</h2>
+<a name="id2677497"></a><h2>SEE ALSO</h2>
<p><em class="citetitle">RFC 1033</em>,
<em class="citetitle">RFC 1034</em>,
<em class="citetitle">RFC 1035</em>,
@@ -320,7 +322,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2673237"></a><h2>AUTHOR</h2>
+<a name="id2677568"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
@@ -344,5 +346,6 @@
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/man.nsec3hash.html b/doc/arm/man.nsec3hash.html
index 9f6215c363a4..4dd3dee15ed5 100644
--- a/doc/arm/man.nsec3hash.html
+++ b/doc/arm/man.nsec3hash.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -48,7 +48,7 @@
<div class="cmdsynopsis"><p><code class="command">nsec3hash</code> {<em class="replaceable"><code>salt</code></em>} {<em class="replaceable"><code>algorithm</code></em>} {<em class="replaceable"><code>iterations</code></em>} {<em class="replaceable"><code>domain</code></em>}</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2661050"></a><h2>DESCRIPTION</h2>
+<a name="id2620056"></a><h2>DESCRIPTION</h2>
<p>
<span><strong class="command">nsec3hash</strong></span> generates an NSEC3 hash based on
a set of NSEC3 parameters. This can be used to check the validity
@@ -56,7 +56,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2661065"></a><h2>ARGUMENTS</h2>
+<a name="id2620071"></a><h2>ARGUMENTS</h2>
<div class="variablelist"><dl>
<dt><span class="term">salt</span></dt>
<dd><p>
@@ -80,14 +80,14 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2661127"></a><h2>SEE ALSO</h2>
+<a name="id2657748"></a><h2>SEE ALSO</h2>
<p>
<em class="citetitle">BIND 9 Administrator Reference Manual</em>,
<em class="citetitle">RFC 5155</em>.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2661144"></a><h2>AUTHOR</h2>
+<a name="id2657833"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
@@ -109,5 +109,6 @@
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/man.nsupdate.html b/doc/arm/man.nsupdate.html
index 03c5f554ccf1..231923f0375d 100644
--- a/doc/arm/man.nsupdate.html
+++ b/doc/arm/man.nsupdate.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -47,10 +47,10 @@
</div>
<div class="refsynopsisdiv">
<h2>Synopsis</h2>
-<div class="cmdsynopsis"><p><code class="command">nsupdate</code> [<code class="option">-d</code>] [<code class="option">-D</code>] [[<code class="option">-g</code>] | [<code class="option">-o</code>] | [<code class="option">-l</code>] | [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]keyname:secret</code></em></code>] | [<code class="option">-k <em class="replaceable"><code>keyfile</code></em></code>]] [<code class="option">-t <em class="replaceable"><code>timeout</code></em></code>] [<code class="option">-u <em class="replaceable"><code>udptimeout</code></em></code>] [<code class="option">-r <em class="replaceable"><code>udpretries</code></em></code>] [<code class="option">-R <em class="replaceable"><code>randomdev</code></em></code>] [<code class="option">-v</code>] [filename]</p></div>
+<div class="cmdsynopsis"><p><code class="command">nsupdate</code> [<code class="option">-d</code>] [<code class="option">-D</code>] [[<code class="option">-g</code>] | [<code class="option">-o</code>] | [<code class="option">-l</code>] | [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]keyname:secret</code></em></code>] | [<code class="option">-k <em class="replaceable"><code>keyfile</code></em></code>]] [<code class="option">-t <em class="replaceable"><code>timeout</code></em></code>] [<code class="option">-u <em class="replaceable"><code>udptimeout</code></em></code>] [<code class="option">-r <em class="replaceable"><code>udpretries</code></em></code>] [<code class="option">-R <em class="replaceable"><code>randomdev</code></em></code>] [<code class="option">-v</code>] [<code class="option">-V</code>] [filename]</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2642172"></a><h2>DESCRIPTION</h2>
+<a name="id2642887"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">nsupdate</strong></span>
is used to submit Dynamic DNS Update requests as defined in RFC 2136
to a name server.
@@ -131,7 +131,13 @@
[<span class="optional"><em class="parameter"><code>hmac:</code></em></span>]<em class="parameter"><code>keyname:secret.</code></em>
<em class="parameter"><code>keyname</code></em> is the name of the key, and
<em class="parameter"><code>secret</code></em> is the base64 encoded shared secret.
- Use of the <code class="option">-y</code> option is discouraged because the
+ <em class="parameter"><code>hmac</code></em> is the name of the key algorithm;
+ valid choices are <code class="literal">hmac-md5</code>,
+ <code class="literal">hmac-sha1</code>, <code class="literal">hmac-sha224</code>,
+ <code class="literal">hmac-sha256</code>, <code class="literal">hmac-sha384</code>, or
+ <code class="literal">hmac-sha512</code>. If <em class="parameter"><code>hmac</code></em>
+ is not specified, the default is <code class="literal">hmac-md5</code>.
+ NOTE: Use of the <code class="option">-y</code> option is discouraged because the
shared secret is supplied as a command line argument in clear text.
This may be visible in the output from
<span class="citerefentry"><span class="refentrytitle">ps</span>(1)</span>
@@ -208,9 +214,13 @@
<code class="filename">keyboard</code> indicates that keyboard input
should be used. This option may be specified multiple times.
</p>
+<p>
+ The -V option causes <span><strong class="command">nsupdate</strong></span> to print the
+ version number and exit.
+ </p>
</div>
<div class="refsect1" lang="en">
-<a name="id2642574"></a><h2>INPUT FORMAT</h2>
+<a name="id2643417"></a><h2>INPUT FORMAT</h2>
<p><span><strong class="command">nsupdate</strong></span>
reads input from
<em class="parameter"><code>filename</code></em>
@@ -314,14 +324,16 @@
</p></dd>
<dt><span class="term">
<span><strong class="command">key</strong></span>
- {name}
+ [hmac:] {keyname}
{secret}
</span></dt>
<dd><p>
Specifies that all updates are to be TSIG-signed using the
- <em class="parameter"><code>keyname</code></em> <em class="parameter"><code>keysecret</code></em> pair.
- The <span><strong class="command">key</strong></span> command
- overrides any key specified on the command line via
+ <em class="parameter"><code>keyname</code></em> <em class="parameter"><code>secret</code></em> pair.
+ If <em class="parameter"><code>hmac</code></em> is specified, then it sets the
+ signing algorithm in use; the default is
+ <code class="literal">hmac-md5</code>. The <span><strong class="command">key</strong></span>
+ command overrides any key specified on the command line via
<code class="option">-y</code> or <code class="option">-k</code>.
</p></dd>
<dt><span class="term">
@@ -490,6 +502,18 @@
<dd><p>
Turn on debugging.
</p></dd>
+<dt><span class="term">
+ <span><strong class="command">version</strong></span>
+ </span></dt>
+<dd><p>
+ Print version number.
+ </p></dd>
+<dt><span class="term">
+ <span><strong class="command">help</strong></span>
+ </span></dt>
+<dd><p>
+ Print a list of commands.
+ </p></dd>
</dl></div>
<p>
</p>
@@ -498,7 +522,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2674292"></a><h2>EXAMPLES</h2>
+<a name="id2678740"></a><h2>EXAMPLES</h2>
<p>
The examples below show how
<span><strong class="command">nsupdate</strong></span>
@@ -552,7 +576,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2674342"></a><h2>FILES</h2>
+<a name="id2678790"></a><h2>FILES</h2>
<div class="variablelist"><dl>
<dt><span class="term"><code class="constant">/etc/resolv.conf</code></span></dt>
<dd><p>
@@ -575,7 +599,7 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2674425"></a><h2>SEE ALSO</h2>
+<a name="id2678873"></a><h2>SEE ALSO</h2>
<p>
<em class="citetitle">RFC 2136</em>,
<em class="citetitle">RFC 3007</em>,
@@ -590,7 +614,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2674483"></a><h2>BUGS</h2>
+<a name="id2678931"></a><h2>BUGS</h2>
<p>
The TSIG key is redundantly stored in two separate files.
This is a consequence of nsupdate using the DST library
@@ -618,5 +642,6 @@
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/man.rndc-confgen.html b/doc/arm/man.rndc-confgen.html
index d394e0832fbf..67739754abf0 100644
--- a/doc/arm/man.rndc-confgen.html
+++ b/doc/arm/man.rndc-confgen.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -50,7 +50,7 @@
<div class="cmdsynopsis"><p><code class="command">rndc-confgen</code> [<code class="option">-a</code>] [<code class="option">-b <em class="replaceable"><code>keysize</code></em></code>] [<code class="option">-c <em class="replaceable"><code>keyfile</code></em></code>] [<code class="option">-h</code>] [<code class="option">-k <em class="replaceable"><code>keyname</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-r <em class="replaceable"><code>randomfile</code></em></code>] [<code class="option">-s <em class="replaceable"><code>address</code></em></code>] [<code class="option">-t <em class="replaceable"><code>chrootdir</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>]</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2647597"></a><h2>DESCRIPTION</h2>
+<a name="id2650424"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">rndc-confgen</strong></span>
generates configuration files
for <span><strong class="command">rndc</strong></span>. It can be used as a
@@ -66,7 +66,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2649916"></a><h2>OPTIONS</h2>
+<a name="id2650695"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-a</span></dt>
<dd>
@@ -173,7 +173,7 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2650507"></a><h2>EXAMPLES</h2>
+<a name="id2651081"></a><h2>EXAMPLES</h2>
<p>
To allow <span><strong class="command">rndc</strong></span> to be used with
no manual configuration, run
@@ -190,7 +190,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2650564"></a><h2>SEE ALSO</h2>
+<a name="id2657486"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">rndc.conf</span>(5)</span>,
<span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
@@ -198,7 +198,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2659545"></a><h2>AUTHOR</h2>
+<a name="id2657525"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
@@ -222,5 +222,6 @@
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/man.rndc.conf.html b/doc/arm/man.rndc.conf.html
index 9dcb4516a35c..bad0240cdfba 100644
--- a/doc/arm/man.rndc.conf.html
+++ b/doc/arm/man.rndc.conf.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -50,7 +50,7 @@
<div class="cmdsynopsis"><p><code class="command">rndc.conf</code> </p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2644379"></a><h2>DESCRIPTION</h2>
+<a name="id2645906"></a><h2>DESCRIPTION</h2>
<p><code class="filename">rndc.conf</code> is the configuration file
for <span><strong class="command">rndc</strong></span>, the BIND 9 name server control
utility. This file has a similar structure and syntax to
@@ -135,7 +135,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2644551"></a><h2>EXAMPLE</h2>
+<a name="id2646077"></a><h2>EXAMPLE</h2>
<pre class="programlisting">
options {
default-server localhost;
@@ -209,7 +209,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2645014"></a><h2>NAME SERVER CONFIGURATION</h2>
+<a name="id2649408"></a><h2>NAME SERVER CONFIGURATION</h2>
<p>
The name server must be configured to accept rndc connections and
to recognize the key specified in the <code class="filename">rndc.conf</code>
@@ -219,7 +219,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2645040"></a><h2>SEE ALSO</h2>
+<a name="id2649433"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">rndc-confgen</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">mmencode</span>(1)</span>,
@@ -227,7 +227,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2645078"></a><h2>AUTHOR</h2>
+<a name="id2649472"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
@@ -251,5 +251,6 @@
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/man.rndc.html b/doc/arm/man.rndc.html
index 3a22cb1ae868..0d3702d6dcbf 100644
--- a/doc/arm/man.rndc.html
+++ b/doc/arm/man.rndc.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -50,7 +50,7 @@
<div class="cmdsynopsis"><p><code class="command">rndc</code> [<code class="option">-b <em class="replaceable"><code>source-address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-k <em class="replaceable"><code>key-file</code></em></code>] [<code class="option">-s <em class="replaceable"><code>server</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-V</code>] [<code class="option">-y <em class="replaceable"><code>key_id</code></em></code>] {command}</p></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2642850"></a><h2>DESCRIPTION</h2>
+<a name="id2644443"></a><h2>DESCRIPTION</h2>
<p><span><strong class="command">rndc</strong></span>
controls the operation of a name
server. It supersedes the <span><strong class="command">ndc</strong></span> utility
@@ -79,7 +79,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2643856"></a><h2>OPTIONS</h2>
+<a name="id2644562"></a><h2>OPTIONS</h2>
<div class="variablelist"><dl>
<dt><span class="term">-b <em class="replaceable"><code>source-address</code></em></span></dt>
<dd><p>
@@ -145,7 +145,7 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2644201"></a><h2>COMMANDS</h2>
+<a name="id2645112"></a><h2>COMMANDS</h2>
<p>
A list of commands supported by <span><strong class="command">rndc</strong></span> can
be seen by running <span><strong class="command">rndc</strong></span> without arguments.
@@ -437,8 +437,8 @@
<dt><span class="term"><strong class="userinput"><code>signing [<span class="optional">( -list | -clear <em class="replaceable"><code>keyid/algorithm</code></em> | -clear <code class="literal">all</code> | -nsec3param ( <em class="replaceable"><code>parameters</code></em> | <code class="literal">none</code> ) ) </span>] <em class="replaceable"><code>zone</code></em> [<span class="optional"><em class="replaceable"><code>class</code></em> [<span class="optional"><em class="replaceable"><code>view</code></em></span>]</span>] </code></strong></span></dt>
<dd>
<p>
- List, edit, or remove the DNSSEC signing state for
- the specified zone. The status of ongoing DNSSEC
+ List, edit, or remove the DNSSEC signing state records
+ for the specified zone. The status of ongoing DNSSEC
operations (such as signing or generating
NSEC3 chains) is stored in the zone in the form
of DNS resource records of type
@@ -498,7 +498,7 @@
</dl></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2677869"></a><h2>LIMITATIONS</h2>
+<a name="id2681511"></a><h2>LIMITATIONS</h2>
<p>
There is currently no way to provide the shared secret for a
<code class="option">key_id</code> without using the configuration file.
@@ -508,7 +508,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2677888"></a><h2>SEE ALSO</h2>
+<a name="id2681529"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">rndc.conf</span>(5)</span>,
<span class="citerefentry"><span class="refentrytitle">rndc-confgen</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
@@ -518,7 +518,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2677943"></a><h2>AUTHOR</h2>
+<a name="id2681585"></a><h2>AUTHOR</h2>
<p><span class="corpauthor">Internet Systems Consortium</span>
</p>
</div>
@@ -542,5 +542,6 @@
</tr>
</table>
</div>
+<p style="text-align: center;">BIND Version 9.9</p>
</body>
</html>
diff --git a/doc/arm/pkcs11.xml b/doc/arm/pkcs11.xml
index b4e22bb351e5..d5a841295a5a 100644
--- a/doc/arm/pkcs11.xml
+++ b/doc/arm/pkcs11.xml
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2010, 2012, 2013 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2010, 2012-2014 Internet Systems Consortium, Inc. ("ISC")
-
- Permission to use, copy, modify, and/or distribute this software for any
- purpose with or without fee is hereby granted, provided that the above
@@ -68,12 +68,13 @@
is an example of such a device.</para>
</listitem>
</itemizedlist>
- <para>The modified OpenSSL code is included in the BIND 9 release,
- in the form of a context diff against the latest verions of
- OpenSSL. OpenSSL 0.9.8, 1.0.0 and 1.0.1 are supported; there are
- separate diffs for each version. In the examples to follow,
- we use OpenSSL 0.9.8, but the same methods work with OpenSSL 1.0.0
- and 1.0.1.
+ <para>
+ The modified OpenSSL code is included in the BIND 9 release,
+ in the form of a context diff against the latest versions of
+ OpenSSL. OpenSSL 0.9.8, 1.0.0, and 1.0.1 are supported; there are
+ separate diffs for each version. In the examples to follow,
+ we use OpenSSL 0.9.8, but the same methods work with OpenSSL
+ 1.0.0 and 1.0.1.
</para>
<note>
The latest OpenSSL versions at the time of the BIND release
diff --git a/doc/misc/options b/doc/misc/options
index 8cd0adb70888..66df0bd60c63 100644
--- a/doc/misc/options
+++ b/doc/misc/options
@@ -162,6 +162,8 @@ options {
max-ixfr-log-size <size>; // obsolete
max-journal-size <size_no_default>;
max-ncache-ttl <integer>;
+ max-recursion-depth <integer>;
+ max-recursion-queries <integer>;
max-refresh-time <integer>;
max-retry-time <integer>;
max-rsa-exponent-size <integer>;
@@ -179,6 +181,7 @@ options {
multi-master <boolean>;
multiple-cnames <boolean>; // obsolete
named-xfer <quoted_string>; // obsolete
+ no-case-compress { <address_match_element>; ... };
notify <notifytype>;
notify-delay <integer>;
notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
@@ -320,7 +323,6 @@ view <string> <optional_class> {
check-wildcard <boolean>;
cleaning-interval <integer>;
clients-per-query <integer>;
- database <string>;
deny-answer-addresses { <address_match_element>; ... } [
except-from { <quoted_string>; ... } ];
deny-answer-aliases { <quoted_string>; ... } [ except-from {
@@ -385,6 +387,8 @@ view <string> <optional_class> {
max-ixfr-log-size <size>; // obsolete
max-journal-size <size_no_default>;
max-ncache-ttl <integer>;
+ max-recursion-depth <integer>;
+ max-recursion-queries <integer>;
max-refresh-time <integer>;
max-retry-time <integer>;
max-transfer-idle-in <integer>;
@@ -397,6 +401,7 @@ view <string> <optional_class> {
min-roots <integer>; // not implemented
minimal-responses <boolean>;
multi-master <boolean>;
+ no-case-compress { <address_match_element>; ... };
notify <notifytype>;
notify-delay <integer>;
notify-source ( <ipv4_address> | * ) [ port ( <integer> | * ) ];
diff --git a/lib/bind9/Makefile.in b/lib/bind9/Makefile.in
index b6633e56f5e0..e9e65daa9661 100644
--- a/lib/bind9/Makefile.in
+++ b/lib/bind9/Makefile.in
@@ -1,4 +1,4 @@
-# Copyright (C) 2004, 2007, 2009, 2012 Internet Systems Consortium, Inc. ("ISC")
+# Copyright (C) 2004, 2007, 2009, 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
# Copyright (C) 2001 Internet Software Consortium.
#
# Permission to use, copy, modify, and/or distribute this software for any
@@ -79,7 +79,7 @@ installdirs:
$(SHELL) ${top_srcdir}/mkinstalldirs ${DESTDIR}${libdir}
install:: timestamp installdirs
- ${LIBTOOL_MODE_INSTALL} ${INSTALL_DATA} libbind9.@A@ ${DESTDIR}${libdir}
+ ${LIBTOOL_MODE_INSTALL} ${INSTALL_LIBRARY} libbind9.@A@ ${DESTDIR}${libdir}
clean distclean::
rm -f libbind9.@A@ timestamp
diff --git a/lib/bind9/api b/lib/bind9/api
index 0adc934e71ce..4d767dc0e2bd 100644
--- a/lib/bind9/api
+++ b/lib/bind9/api
@@ -5,5 +5,5 @@
# 9.9: 90-109
# 9.9-sub: 130-139
LIBINTERFACE = 90
-LIBREVISION = 9
+LIBREVISION = 11
LIBAGE = 0
diff --git a/lib/bind9/check.c b/lib/bind9/check.c
index af1b87ae23fd..e44d1d4aba96 100644
--- a/lib/bind9/check.c
+++ b/lib/bind9/check.c
@@ -15,8 +15,6 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
-/* $Id$ */
-
/*! \file */
#include <config.h>
@@ -1316,67 +1314,69 @@ check_zoneconf(const cfg_obj_t *zconfig, const cfg_obj_t *voptions,
const cfg_listelt_t *element;
static optionstable options[] = {
- { "allow-query", MASTERZONE | SLAVEZONE | STUBZONE | REDIRECTZONE |
- CHECKACL | STATICSTUBZONE },
{ "allow-notify", SLAVEZONE | CHECKACL },
+ { "allow-query", MASTERZONE | SLAVEZONE | STUBZONE | REDIRECTZONE |
+ CHECKACL | STATICSTUBZONE },
{ "allow-transfer", MASTERZONE | SLAVEZONE | CHECKACL },
- { "notify", MASTERZONE | SLAVEZONE },
+ { "allow-update", MASTERZONE | CHECKACL },
+ { "allow-update-forwarding", SLAVEZONE | CHECKACL },
{ "also-notify", MASTERZONE | SLAVEZONE },
+ { "auto-dnssec", MASTERZONE | SLAVEZONE },
+ { "check-dup-records", MASTERZONE },
+ { "check-mx", MASTERZONE },
+ { "check-mx-cname", MASTERZONE },
+ { "check-srv-cname", MASTERZONE },
+ { "check-wildcard", MASTERZONE },
+ { "database", MASTERZONE | SLAVEZONE | STUBZONE | REDIRECTZONE },
+ { "delegation-only", HINTZONE | STUBZONE | FORWARDZONE |
+ DELEGATIONZONE },
{ "dialup", MASTERZONE | SLAVEZONE | STUBZONE | STREDIRECTZONE },
- { "delegation-only", HINTZONE | STUBZONE | DELEGATIONZONE },
- { "forward", MASTERZONE | SLAVEZONE | STUBZONE |
- STATICSTUBZONE | FORWARDZONE },
- { "forwarders", MASTERZONE | SLAVEZONE | STUBZONE |
- STATICSTUBZONE | FORWARDZONE },
+ { "dnssec-dnskey-kskonly", MASTERZONE | SLAVEZONE },
+ { "dnssec-loadkeys-interval", MASTERZONE | SLAVEZONE },
+ { "dnssec-secure-to-insecure", MASTERZONE },
+ { "file", MASTERZONE | SLAVEZONE | STUBZONE | HINTZONE | REDIRECTZONE },
+ { "forward", MASTERZONE | SLAVEZONE | STUBZONE | STATICSTUBZONE |
+ FORWARDZONE },
+ { "forwarders", MASTERZONE | SLAVEZONE | STUBZONE | STATICSTUBZONE |
+ FORWARDZONE },
+ { "integrity-check", MASTERZONE },
+ { "ixfr-base", MASTERZONE | SLAVEZONE },
+ { "ixfr-tmp-file", MASTERZONE | SLAVEZONE },
+ { "journal", MASTERZONE | SLAVEZONE | STREDIRECTZONE },
+ { "key-directory", MASTERZONE | SLAVEZONE },
{ "maintain-ixfr-base", MASTERZONE | SLAVEZONE | STREDIRECTZONE },
+ { "masterfile-format", MASTERZONE | SLAVEZONE | STUBZONE |
+ REDIRECTZONE },
+ { "masters", SLAVEZONE | STUBZONE | REDIRECTZONE },
{ "max-ixfr-log-size", MASTERZONE | SLAVEZONE | STREDIRECTZONE },
- { "notify-source", MASTERZONE | SLAVEZONE },
- { "notify-source-v6", MASTERZONE | SLAVEZONE },
- { "transfer-source", SLAVEZONE | STUBZONE | STREDIRECTZONE },
- { "transfer-source-v6", SLAVEZONE | STUBZONE | STREDIRECTZONE },
- { "max-transfer-time-in", SLAVEZONE | STUBZONE | STREDIRECTZONE },
- { "max-transfer-time-out", MASTERZONE | SLAVEZONE },
+ { "max-refresh-time", SLAVEZONE | STUBZONE | STREDIRECTZONE },
+ { "max-retry-time", SLAVEZONE | STUBZONE | STREDIRECTZONE },
{ "max-transfer-idle-in", SLAVEZONE | STUBZONE | STREDIRECTZONE },
{ "max-transfer-idle-out", MASTERZONE | SLAVEZONE },
- { "max-retry-time", SLAVEZONE | STUBZONE | STREDIRECTZONE },
- { "min-retry-time", SLAVEZONE | STUBZONE | STREDIRECTZONE },
- { "max-refresh-time", SLAVEZONE | STUBZONE | STREDIRECTZONE },
+ { "max-transfer-time-in", SLAVEZONE | STUBZONE | STREDIRECTZONE },
+ { "max-transfer-time-out", MASTERZONE | SLAVEZONE },
{ "min-refresh-time", SLAVEZONE | STUBZONE | STREDIRECTZONE },
- { "dnssec-secure-to-insecure", MASTERZONE },
+ { "min-retry-time", SLAVEZONE | STUBZONE | STREDIRECTZONE },
+ { "notify", MASTERZONE | SLAVEZONE },
+ { "notify-source", MASTERZONE | SLAVEZONE },
+ { "notify-source-v6", MASTERZONE | SLAVEZONE },
+ { "pubkey", MASTERZONE | SLAVEZONE | STUBZONE },
+ { "request-ixfr", SLAVEZONE | REDIRECTZONE },
+ { "server-addresses", STATICSTUBZONE },
+ { "server-names", STATICSTUBZONE },
{ "sig-re-signing-interval", MASTERZONE | SLAVEZONE },
{ "sig-signing-nodes", MASTERZONE | SLAVEZONE },
{ "sig-signing-signatures", MASTERZONE | SLAVEZONE },
{ "sig-signing-type", MASTERZONE | SLAVEZONE },
{ "sig-validity-interval", MASTERZONE | SLAVEZONE },
{ "signing", MASTERZONE | SLAVEZONE },
+ { "transfer-source", SLAVEZONE | STUBZONE | STREDIRECTZONE },
+ { "transfer-source-v6", SLAVEZONE | STUBZONE | STREDIRECTZONE },
+ { "try-tcp-refresh", SLAVEZONE | STREDIRECTZONE },
+ { "update-check-ksk", MASTERZONE | SLAVEZONE },
+ { "update-policy", MASTERZONE },
{ "zone-statistics", MASTERZONE | SLAVEZONE | STUBZONE |
STATICSTUBZONE | REDIRECTZONE },
- { "allow-update", MASTERZONE | CHECKACL },
- { "allow-update-forwarding", SLAVEZONE | CHECKACL },
- { "file", MASTERZONE | SLAVEZONE | STUBZONE | HINTZONE | REDIRECTZONE },
- { "journal", MASTERZONE | SLAVEZONE | STREDIRECTZONE },
- { "ixfr-base", MASTERZONE | SLAVEZONE },
- { "ixfr-tmp-file", MASTERZONE | SLAVEZONE },
- { "masters", SLAVEZONE | STUBZONE | REDIRECTZONE },
- { "pubkey", MASTERZONE | SLAVEZONE | STUBZONE },
- { "update-policy", MASTERZONE },
- { "database", MASTERZONE | SLAVEZONE | STUBZONE | REDIRECTZONE },
- { "key-directory", MASTERZONE | SLAVEZONE },
- { "check-wildcard", MASTERZONE },
- { "check-mx", MASTERZONE },
- { "check-dup-records", MASTERZONE },
- { "integrity-check", MASTERZONE },
- { "check-mx-cname", MASTERZONE },
- { "check-srv-cname", MASTERZONE },
- { "masterfile-format", MASTERZONE | SLAVEZONE | STUBZONE | HINTZONE |
- REDIRECTZONE },
- { "update-check-ksk", MASTERZONE | SLAVEZONE },
- { "dnssec-dnskey-kskonly", MASTERZONE | SLAVEZONE },
- { "dnssec-loadkeys-interval", MASTERZONE | SLAVEZONE },
- { "auto-dnssec", MASTERZONE | SLAVEZONE },
- { "try-tcp-refresh", SLAVEZONE | STREDIRECTZONE },
- { "server-addresses", STATICSTUBZONE },
- { "server-names", STATICSTUBZONE },
};
static optionstable dialups[] = {
@@ -1525,12 +1525,36 @@ check_zoneconf(const cfg_obj_t *zconfig, const cfg_obj_t *voptions,
}
/*
- * Master & slave zones must have a "also-notify" field.
+ * Master & slave zones may have an "also-notify" field, but
+ * shouldn't if notify is disabled.
*/
if (ztype == MASTERZONE || ztype == SLAVEZONE ) {
+ isc_boolean_t donotify = ISC_TRUE;
+
obj = NULL;
- tresult = cfg_map_get(zoptions, "also-notify", &obj);
+ tresult = cfg_map_get(zoptions, "notify", &obj);
+ if (tresult != ISC_R_SUCCESS && voptions != NULL)
+ tresult = cfg_map_get(voptions, "notify", &obj);
+ if (tresult != ISC_R_SUCCESS && goptions != NULL)
+ tresult = cfg_map_get(goptions, "notify", &obj);
if (tresult == ISC_R_SUCCESS) {
+ if (cfg_obj_isboolean(obj))
+ donotify = cfg_obj_asboolean(obj);
+ else {
+ const char *notifystr = cfg_obj_asstring(obj);
+ if (ztype != MASTERZONE &&
+ strcasecmp(notifystr, "master-only") == 0)
+ donotify = ISC_FALSE;
+ }
+ }
+
+ obj = NULL;
+ tresult = cfg_map_get(zoptions, "also-notify", &obj);
+ if (tresult == ISC_R_SUCCESS && !donotify) {
+ cfg_obj_log(zoptions, logctx, ISC_LOG_WARNING,
+ "zone '%s': 'also-notify' set but "
+ "'notify' is disabled", znamestr);
+ } else if (tresult == ISC_R_SUCCESS) {
isc_uint32_t count;
tresult = validate_masters(obj, config, &count,
logctx, mctx);
@@ -1568,12 +1592,13 @@ check_zoneconf(const cfg_obj_t *zconfig, const cfg_obj_t *voptions,
* Master zones can't have both "allow-update" and "update-policy".
*/
if (ztype == MASTERZONE || ztype == SLAVEZONE) {
+ isc_boolean_t ddns = ISC_FALSE, signing = ISC_FALSE;
isc_result_t res1, res2, res3;
+ const cfg_obj_t *au = NULL;
const char *arg;
- isc_boolean_t ddns = ISC_FALSE, signing = ISC_FALSE;
obj = NULL;
- res1 = cfg_map_get(zoptions, "allow-update", &obj);
+ res1 = cfg_map_get(zoptions, "allow-update", &au);
obj = NULL;
res2 = cfg_map_get(zoptions, "update-policy", &obj);
if (res1 == ISC_R_SUCCESS && res2 == ISC_R_SUCCESS) {
@@ -1582,10 +1607,40 @@ check_zoneconf(const cfg_obj_t *zconfig, const cfg_obj_t *voptions,
"when 'update-policy' is present",
znamestr);
result = ISC_R_FAILURE;
- } else if (res2 == ISC_R_SUCCESS &&
- check_update_policy(obj, logctx) != ISC_R_SUCCESS)
- result = ISC_R_FAILURE;
- ddns = ISC_TF(res1 == ISC_R_SUCCESS || res2 == ISC_R_SUCCESS);
+ } else if (res2 == ISC_R_SUCCESS) {
+ res3 = check_update_policy(obj, logctx);
+ if (res3 != ISC_R_SUCCESS)
+ result = ISC_R_FAILURE;
+ }
+
+ /*
+ * To determine whether auto-dnssec is allowed,
+ * we should also check for allow-update at the
+ * view and options levels.
+ */
+ obj = NULL;
+ if (res1 != ISC_R_SUCCESS && voptions != NULL)
+ res1 = cfg_map_get(voptions, "allow-update", &au);
+ if (res1 != ISC_R_SUCCESS && goptions != NULL)
+ res1 = cfg_map_get(goptions, "allow-update", &au);
+
+ if (res2 == ISC_R_SUCCESS)
+ ddns = ISC_TRUE;
+ else if (res1 == ISC_R_SUCCESS) {
+ dns_acl_t *acl = NULL;
+ res1 = cfg_acl_fromconfig(au, config, logctx,
+ actx, mctx, 0, &acl);
+ if (res1 != ISC_R_SUCCESS) {
+ cfg_obj_log(au, logctx, ISC_LOG_ERROR,
+ "acl expansion failed: %s",
+ isc_result_totext(result));
+ result = ISC_R_FAILURE;
+ } else if (acl != NULL) {
+ if (!dns_acl_isnone(acl))
+ ddns = ISC_TRUE;
+ dns_acl_detach(&acl);
+ }
+ }
obj = NULL;
res1 = cfg_map_get(zoptions, "inline-signing", &obj);
@@ -1606,12 +1661,6 @@ check_zoneconf(const cfg_obj_t *zconfig, const cfg_obj_t *voptions,
" dynamic DNS or" : "");
result = ISC_R_FAILURE;
}
- if (strcasecmp(arg, "create") == 0) {
- cfg_obj_log(obj, logctx, ISC_LOG_ERROR,
- "'auto-dnssec create;' is not "
- "yet implemented");
- result = ISC_R_FAILURE;
- }
obj = NULL;
res1 = cfg_map_get(zoptions, "sig-signing-type", &obj);
diff --git a/lib/bind9/getaddresses.c b/lib/bind9/getaddresses.c
index a75e14ef650e..c4f8decb572f 100644
--- a/lib/bind9/getaddresses.c
+++ b/lib/bind9/getaddresses.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 2001, 2002 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -107,7 +107,7 @@ bind9_getaddresses(const char *hostname, in_port_t port,
result = isc_netscope_pton(AF_INET6, d + 1,
&in6, &zone);
-
+
if (result != ISC_R_SUCCESS)
return (result);
#else
@@ -129,7 +129,6 @@ bind9_getaddresses(const char *hostname, in_port_t port,
*addrcount = 1;
return (ISC_R_SUCCESS);
-
}
}
#ifdef USE_GETADDRINFO
diff --git a/lib/dns/Makefile.in b/lib/dns/Makefile.in
index a3e3e9a4e86a..eec4c9ef0e77 100644
--- a/lib/dns/Makefile.in
+++ b/lib/dns/Makefile.in
@@ -1,4 +1,4 @@
-# Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+# Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
# Copyright (C) 1998-2003 Internet Software Consortium.
#
# Permission to use, copy, modify, and/or distribute this software for any
@@ -142,7 +142,7 @@ installdirs:
$(SHELL) ${top_srcdir}/mkinstalldirs ${DESTDIR}${libdir}
install:: timestamp installdirs
- ${LIBTOOL_MODE_INSTALL} ${INSTALL_DATA} libdns.@A@ ${DESTDIR}${libdir}
+ ${LIBTOOL_MODE_INSTALL} ${INSTALL_LIBRARY} libdns.@A@ ${DESTDIR}${libdir}
clean distclean::
rm -f libdns.@A@ timestamp
diff --git a/lib/dns/acl.c b/lib/dns/acl.c
index dbc6f9cb4f3a..8d3718a22b27 100644
--- a/lib/dns/acl.c
+++ b/lib/dns/acl.c
@@ -290,6 +290,9 @@ dns_acl_merge(dns_acl_t *dest, dns_acl_t *source, isc_boolean_t pos)
if (newmem == NULL)
return (ISC_R_NOMEMORY);
+ /* Zero. */
+ memset(newmem, 0, newalloc * sizeof(dns_aclelement_t));
+
/* Copy in the original elements */
memmove(newmem, dest->elements,
dest->length * sizeof(dns_aclelement_t));
diff --git a/lib/dns/adb.c b/lib/dns/adb.c
index 10d51bc44143..c75ea59f751f 100644
--- a/lib/dns/adb.c
+++ b/lib/dns/adb.c
@@ -15,8 +15,6 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
-/* $Id: adb.c,v 1.264 2011/12/05 17:10:51 each Exp $ */
-
/*! \file
*
* \note
@@ -157,7 +155,7 @@ struct dns_adb {
unsigned int *entry_refcnt;
isc_event_t cevent;
- isc_boolean_t cevent_sent;
+ isc_boolean_t cevent_out;
isc_boolean_t shutting_down;
isc_eventlist_t whenshutdown;
isc_event_t growentries;
@@ -201,6 +199,7 @@ struct dns_adbfetch {
unsigned int magic;
dns_fetch_t *fetch;
dns_rdataset_t rdataset;
+ unsigned int depth;
};
/*%
@@ -245,6 +244,7 @@ struct dns_adbentry {
isc_sockaddr_t sockaddr;
isc_stdtime_t expires;
+ isc_stdtime_t lastage;
/*%<
* A nonzero 'expires' field indicates that the entry should
* persist until that time. This allows entries found
@@ -300,8 +300,7 @@ static inline isc_boolean_t dec_entry_refcnt(dns_adb_t *, isc_boolean_t,
static inline void violate_locking_hierarchy(isc_mutex_t *, isc_mutex_t *);
static isc_boolean_t clean_namehooks(dns_adb_t *, dns_adbnamehooklist_t *);
static void clean_target(dns_adb_t *, dns_name_t *);
-static void clean_finds_at_name(dns_adbname_t *, isc_eventtype_t,
- unsigned int);
+static void clean_finds_at_name(dns_adbname_t *, isc_eventtype_t, unsigned int);
static isc_boolean_t check_expire_namehooks(dns_adbname_t *, isc_stdtime_t);
static isc_boolean_t check_expire_entry(dns_adb_t *, dns_adbentry_t **,
isc_stdtime_t);
@@ -309,6 +308,7 @@ static void cancel_fetches_at_name(dns_adbname_t *);
static isc_result_t dbfind_name(dns_adbname_t *, isc_stdtime_t,
dns_rdatatype_t);
static isc_result_t fetch_name(dns_adbname_t *, isc_boolean_t,
+ unsigned int, isc_counter_t *qc,
dns_rdatatype_t);
static inline void check_exit(dns_adb_t *);
static void destroy(dns_adb_t *);
@@ -321,6 +321,9 @@ static inline isc_boolean_t unlink_entry(dns_adb_t *, dns_adbentry_t *);
static isc_boolean_t kill_name(dns_adbname_t **, isc_eventtype_t);
static void water(void *, int);
static void dump_entry(FILE *, dns_adbentry_t *, isc_boolean_t, isc_stdtime_t);
+static void adjustsrtt(dns_adbaddrinfo_t *addr, unsigned int rtt,
+ unsigned int factor, isc_stdtime_t now);
+static void shutdown_task(isc_task_t *task, isc_event_t *ev);
/*
* MUST NOT overlap DNS_ADBFIND_* flags!
@@ -344,7 +347,7 @@ static void dump_entry(FILE *, dns_adbentry_t *, isc_boolean_t, isc_stdtime_t);
* Private flag(s) for entries.
* MUST NOT overlap FCTX_ADDRINFO_xxx and DNS_FETCHOPT_NOEDNS0.
*/
-#define ENTRY_IS_DEAD 0x80000000
+#define ENTRY_IS_DEAD 0x00400000
/*
* To the name, address classes are all that really exist. If it has a
@@ -1498,10 +1501,13 @@ check_exit(dns_adb_t *adb) {
* If there aren't any external references either, we're
* done. Send the control event to initiate shutdown.
*/
- INSIST(!adb->cevent_sent); /* Sanity check. */
+ INSIST(!adb->cevent_out); /* Sanity check. */
+ ISC_EVENT_INIT(&adb->cevent, sizeof(adb->cevent), 0, NULL,
+ DNS_EVENT_ADBCONTROL, shutdown_task, adb,
+ adb, NULL, NULL);
event = &adb->cevent;
isc_task_send(adb->task, &event);
- adb->cevent_sent = ISC_TRUE;
+ adb->cevent_out = ISC_TRUE;
}
}
@@ -1756,6 +1762,7 @@ new_adbentry(dns_adb_t *adb) {
e->flags = 0;
isc_random_get(&r);
e->srtt = (r & 0x1f) + 1;
+ e->lastage = 0;
e->expires = 0;
ISC_LIST_INIT(e->lameinfo);
ISC_LINK_INIT(e, plink);
@@ -2430,10 +2437,9 @@ dns_adb_create(isc_mem_t *mem, dns_view_t *view, isc_timermgr_t *timermgr,
adb->view = view;
adb->taskmgr = taskmgr;
adb->next_cleanbucket = 0;
- ISC_EVENT_INIT(&adb->cevent, sizeof(adb->cevent), 0, NULL,
- DNS_EVENT_ADBCONTROL, shutdown_task, adb,
- adb, NULL, NULL);
- adb->cevent_sent = ISC_FALSE;
+ ISC_EVENT_INIT(&adb->cevent, sizeof(adb->cevent),
+ 0, NULL, 0, NULL, NULL, NULL, NULL, NULL);
+ adb->cevent_out = ISC_FALSE;
adb->shutting_down = ISC_FALSE;
ISC_LIST_INIT(adb->whenshutdown);
@@ -2467,7 +2473,7 @@ dns_adb_create(isc_mem_t *mem, dns_view_t *view, isc_timermgr_t *timermgr,
"intializing table sizes to %u\n",
nbuckets[11]);
adb->nentries = nbuckets[11];
- adb->nnames= nbuckets[11];
+ adb->nnames = nbuckets[11];
}
@@ -2740,9 +2746,28 @@ dns_adb_whenshutdown(dns_adb_t *adb, isc_task_t *task, isc_event_t **eventp) {
UNLOCK(&adb->lock);
}
+static void
+shutdown_stage2(isc_task_t *task, isc_event_t *event) {
+ dns_adb_t *adb;
+
+ UNUSED(task);
+
+ adb = event->ev_arg;
+ INSIST(DNS_ADB_VALID(adb));
+
+ LOCK(&adb->lock);
+ INSIST(adb->shutting_down);
+ adb->cevent_out = ISC_FALSE;
+ (void)shutdown_names(adb);
+ (void)shutdown_entries(adb);
+ if (dec_adb_irefcnt(adb))
+ check_exit(adb);
+ UNLOCK(&adb->lock);
+}
+
void
dns_adb_shutdown(dns_adb_t *adb) {
- isc_boolean_t need_check_exit;
+ isc_event_t *event;
/*
* Shutdown 'adb'.
@@ -2753,11 +2778,16 @@ dns_adb_shutdown(dns_adb_t *adb) {
if (!adb->shutting_down) {
adb->shutting_down = ISC_TRUE;
isc_mem_setwater(adb->mctx, water, adb, 0, 0);
- need_check_exit = shutdown_names(adb);
- if (!need_check_exit)
- need_check_exit = shutdown_entries(adb);
- if (need_check_exit)
- check_exit(adb);
+ /*
+ * Isolate shutdown_names and shutdown_entries calls.
+ */
+ inc_adb_irefcnt(adb);
+ ISC_EVENT_INIT(&adb->cevent, sizeof(adb->cevent), 0, NULL,
+ DNS_EVENT_ADBCONTROL, shutdown_stage2, adb,
+ adb, NULL, NULL);
+ adb->cevent_out = ISC_TRUE;
+ event = &adb->cevent;
+ isc_task_send(adb->task, &event);
}
UNLOCK(&adb->lock);
@@ -2770,6 +2800,19 @@ dns_adb_createfind(dns_adb_t *adb, isc_task_t *task, isc_taskaction_t action,
isc_stdtime_t now, dns_name_t *target,
in_port_t port, dns_adbfind_t **findp)
{
+ return (dns_adb_createfind2(adb, task, action, arg, name,
+ qname, qtype, options, now,
+ target, port, 0, NULL, findp));
+}
+
+isc_result_t
+dns_adb_createfind2(dns_adb_t *adb, isc_task_t *task, isc_taskaction_t action,
+ void *arg, dns_name_t *name, dns_name_t *qname,
+ dns_rdatatype_t qtype, unsigned int options,
+ isc_stdtime_t now, dns_name_t *target,
+ in_port_t port, unsigned int depth, isc_counter_t *qc,
+ dns_adbfind_t **findp)
+{
dns_adbfind_t *find;
dns_adbname_t *adbname;
int bucket;
@@ -3000,7 +3043,7 @@ dns_adb_createfind(dns_adb_t *adb, isc_task_t *task, isc_taskaction_t action,
* Start V4.
*/
if (WANT_INET(wanted_fetches) &&
- fetch_name(adbname, start_at_zone,
+ fetch_name(adbname, start_at_zone, depth, qc,
dns_rdatatype_a) == ISC_R_SUCCESS) {
DP(DEF_LEVEL,
"dns_adb_createfind: started A fetch for name %p",
@@ -3011,7 +3054,7 @@ dns_adb_createfind(dns_adb_t *adb, isc_task_t *task, isc_taskaction_t action,
* Start V6.
*/
if (WANT_INET6(wanted_fetches) &&
- fetch_name(adbname, start_at_zone,
+ fetch_name(adbname, start_at_zone, depth, qc,
dns_rdatatype_aaaa) == ISC_R_SUCCESS) {
DP(DEF_LEVEL,
"dns_adb_createfind: "
@@ -3754,6 +3797,12 @@ fetch_callback(isc_task_t *task, isc_event_t *ev) {
DP(DEF_LEVEL, "adb: fetch of '%s' %s failed: %s",
buf, address_type == DNS_ADBFIND_INET ? "A" : "AAAA",
dns_result_totext(dev->result));
+ /*
+ * Don't record a failure unless this is the initial
+ * fetch of a chain.
+ */
+ if (fetch->depth > 1)
+ goto out;
/* XXXMLG Don't pound on bad servers. */
if (address_type == DNS_ADBFIND_INET) {
name->expire_v4 = ISC_MIN(name->expire_v4, now + 300);
@@ -3791,9 +3840,8 @@ fetch_callback(isc_task_t *task, isc_event_t *ev) {
}
static isc_result_t
-fetch_name(dns_adbname_t *adbname,
- isc_boolean_t start_at_zone,
- dns_rdatatype_t type)
+fetch_name(dns_adbname_t *adbname, isc_boolean_t start_at_zone,
+ unsigned int depth, isc_counter_t *qc, dns_rdatatype_t type)
{
isc_result_t result;
dns_adbfetch_t *fetch = NULL;
@@ -3838,12 +3886,14 @@ fetch_name(dns_adbname_t *adbname,
result = ISC_R_NOMEMORY;
goto cleanup;
}
-
- result = dns_resolver_createfetch(adb->view->resolver, &adbname->name,
- type, name, nameservers, NULL,
- options, adb->task, fetch_callback,
- adbname, &fetch->rdataset, NULL,
- &fetch->fetch);
+ fetch->depth = depth;
+
+ result = dns_resolver_createfetch3(adb->view->resolver, &adbname->name,
+ type, name, nameservers, NULL,
+ NULL, 0, options, depth, qc,
+ adb->task, fetch_callback, adbname,
+ &fetch->rdataset, NULL,
+ &fetch->fetch);
if (result != ISC_R_SUCCESS)
goto cleanup;
@@ -3912,8 +3962,7 @@ dns_adb_adjustsrtt(dns_adb_t *adb, dns_adbaddrinfo_t *addr,
unsigned int rtt, unsigned int factor)
{
int bucket;
- unsigned int new_srtt;
- isc_stdtime_t now;
+ isc_stdtime_t now = 0;
REQUIRE(DNS_ADB_VALID(adb));
REQUIRE(DNS_ADBADDRINFO_VALID(addr));
@@ -3922,21 +3971,53 @@ dns_adb_adjustsrtt(dns_adb_t *adb, dns_adbaddrinfo_t *addr,
bucket = addr->entry->lock_bucket;
LOCK(&adb->entrylocks[bucket]);
- if (factor == DNS_ADB_RTTADJAGE)
- new_srtt = addr->entry->srtt * 98 / 100;
- else
+ if (addr->entry->expires == 0 || factor == DNS_ADB_RTTADJAGE)
+ isc_stdtime_get(&now);
+ adjustsrtt(addr, rtt, factor, now);
+
+ UNLOCK(&adb->entrylocks[bucket]);
+}
+
+void
+dns_adb_agesrtt(dns_adb_t *adb, dns_adbaddrinfo_t *addr, isc_stdtime_t now) {
+ int bucket;
+
+ REQUIRE(DNS_ADB_VALID(adb));
+ REQUIRE(DNS_ADBADDRINFO_VALID(addr));
+
+ bucket = addr->entry->lock_bucket;
+ LOCK(&adb->entrylocks[bucket]);
+
+ adjustsrtt(addr, 0, DNS_ADB_RTTADJAGE, now);
+
+ UNLOCK(&adb->entrylocks[bucket]);
+}
+
+static void
+adjustsrtt(dns_adbaddrinfo_t *addr, unsigned int rtt, unsigned int factor,
+ isc_stdtime_t now)
+{
+ isc_uint64_t new_srtt;
+
+ if (factor == DNS_ADB_RTTADJAGE) {
+ if (addr->entry->lastage != now) {
+ new_srtt = addr->entry->srtt;
+ new_srtt <<= 9;
+ new_srtt -= addr->entry->srtt;
+ new_srtt >>= 9;
+ addr->entry->lastage = now;
+ } else
+ new_srtt = addr->entry->srtt;
+ } else
new_srtt = (addr->entry->srtt / 10 * factor)
+ (rtt / 10 * (10 - factor));
- addr->entry->srtt = new_srtt;
- addr->srtt = new_srtt;
+ new_srtt &= 0xffffffff;
+ addr->entry->srtt = (unsigned int) new_srtt;
+ addr->srtt = (unsigned int) new_srtt;
- if (addr->entry->expires == 0) {
- isc_stdtime_get(&now);
+ if (addr->entry->expires == 0)
addr->entry->expires = now + ADB_ENTRY_WINDOW;
- }
-
- UNLOCK(&adb->entrylocks[bucket]);
}
void
@@ -3949,6 +4030,9 @@ dns_adb_changeflags(dns_adb_t *adb, dns_adbaddrinfo_t *addr,
REQUIRE(DNS_ADB_VALID(adb));
REQUIRE(DNS_ADBADDRINFO_VALID(addr));
+ REQUIRE((bits & ENTRY_IS_DEAD) == 0);
+ REQUIRE((mask & ENTRY_IS_DEAD) == 0);
+
bucket = addr->entry->lock_bucket;
LOCK(&adb->entrylocks[bucket]);
diff --git a/lib/dns/api b/lib/dns/api
index cc5437d0be7b..b11beb8343db 100644
--- a/lib/dns/api
+++ b/lib/dns/api
@@ -4,6 +4,6 @@
# 9.8: 80-89, 120-129
# 9.9: 90-109
# 9.9-sub: 130-139
-LIBINTERFACE = 102
-LIBREVISION = 2
-LIBAGE = 2
+LIBINTERFACE = 105
+LIBREVISION = 0
+LIBAGE = 1
diff --git a/lib/dns/dispatch.c b/lib/dns/dispatch.c
index 7af8e644b197..129895431ddf 100644
--- a/lib/dns/dispatch.c
+++ b/lib/dns/dispatch.c
@@ -819,14 +819,19 @@ deref_portentry(dns_dispatch_t *disp, dispportentry_t **portentryp) {
portentry, link);
isc_mempool_put(disp->portpool, portentry);
}
- UNLOCK(&qid->lock);
+ /*
+ * Set '*portentryp' to NULL inside the lock so that
+ * dispsock->portentry does not change in socket_search.
+ */
*portentryp = NULL;
+
+ UNLOCK(&qid->lock);
}
/*%
* Find a dispsocket for socket address 'dest', and port number 'port'.
- * Return NULL if no such entry exists.
+ * Return NULL if no such entry exists. Requires qid->lock to be held.
*/
static dispsocket_t *
socket_search(dns_qid_t *qid, isc_sockaddr_t *dest, in_port_t port,
@@ -1322,8 +1327,8 @@ udp_recv(isc_event_t *ev_in, dns_dispatch_t *disp, dispsocket_t *dispsock) {
} else {
free_buffer(disp, ev->region.base, ev->region.length);
- UNLOCK(&disp->lock);
isc_event_free(&ev_in);
+ UNLOCK(&disp->lock);
return;
}
} else if (ev->result != ISC_R_SUCCESS) {
@@ -1334,8 +1339,8 @@ udp_recv(isc_event_t *ev_in, dns_dispatch_t *disp, dispsocket_t *dispsock) {
"odd socket result in udp_recv(): %s",
isc_result_totext(ev->result));
- UNLOCK(&disp->lock);
isc_event_free(&ev_in);
+ UNLOCK(&disp->lock);
return;
}
@@ -1510,9 +1515,8 @@ udp_recv(isc_event_t *ev_in, dns_dispatch_t *disp, dispsocket_t *dispsock) {
*/
deactivate_dispsocket(disp, dispsock);
}
- UNLOCK(&disp->lock);
-
isc_event_free(&ev_in);
+ UNLOCK(&disp->lock);
}
/*
@@ -1694,9 +1698,8 @@ tcp_recv(isc_task_t *task, isc_event_t *ev_in) {
restart:
(void)startrecv(disp, NULL);
- UNLOCK(&disp->lock);
-
isc_event_free(&ev_in);
+ UNLOCK(&disp->lock);
}
/*
@@ -2286,9 +2289,12 @@ dns_dispatchmgr_setudp(dns_dispatchmgr_t *mgr,
/* Create or adjust socket pool */
if (mgr->spool != NULL) {
- if (maxrequests < DNS_DISPATCH_POOLSOCKS * 2)
- isc_mempool_setmaxalloc(mgr->spool, DNS_DISPATCH_POOLSOCKS * 2);
- isc_mempool_setfreemax(mgr->spool, DNS_DISPATCH_POOLSOCKS * 2);
+ if (maxrequests < DNS_DISPATCH_POOLSOCKS * 2) {
+ isc_mempool_setmaxalloc(mgr->spool,
+ DNS_DISPATCH_POOLSOCKS * 2);
+ isc_mempool_setfreemax(mgr->spool,
+ DNS_DISPATCH_POOLSOCKS * 2);
+ }
UNLOCK(&mgr->buffer_lock);
return (ISC_R_SUCCESS);
}
diff --git a/lib/dns/dns64.c b/lib/dns/dns64.c
index 7d47c66933b5..9bc3cd8266df 100644
--- a/lib/dns/dns64.c
+++ b/lib/dns/dns64.c
@@ -63,7 +63,7 @@ dns_dns64_create(isc_mem_t *mctx, isc_netaddr_t *prefix,
unsigned int nbytes = 16;
REQUIRE(prefix != NULL && prefix->family == AF_INET6);
- /* Legal prefix lengths from draft-ietf-behave-address-format-04. */
+ /* Legal prefix lengths from rfc6052.txt. */
REQUIRE(prefixlen == 32 || prefixlen == 40 || prefixlen == 48 ||
prefixlen == 56 || prefixlen == 64 || prefixlen == 96);
REQUIRE(isc_netaddr_prefixok(prefix, prefixlen) == ISC_R_SUCCESS);
@@ -73,7 +73,7 @@ dns_dns64_create(isc_mem_t *mctx, isc_netaddr_t *prefix,
static const unsigned char zeros[16];
REQUIRE(prefix->family == AF_INET6);
nbytes = prefixlen / 8 + 4;
- /* Bits 64-71 are zeros. draft-ietf-behave-address-format-04 */
+ /* Bits 64-71 are zeros. rfc6052.txt */
if (prefixlen >= 32 && prefixlen <= 64)
nbytes++;
REQUIRE(memcmp(suffix->type.in6.s6_addr, zeros, nbytes) == 0);
@@ -169,13 +169,13 @@ dns_dns64_aaaafroma(const dns_dns64_t *dns64, const isc_netaddr_t *reqaddr,
INSIST(nbytes <= 12);
/* Copy prefix. */
memmove(aaaa, dns64->bits, nbytes);
- /* Bits 64-71 are zeros. draft-ietf-behave-address-format-04 */
+ /* Bits 64-71 are zeros. rfc6052.txt */
if (nbytes == 8)
aaaa[nbytes++] = 0;
/* Copy mapped address. */
for (i = 0; i < 4U; i++) {
aaaa[nbytes++] = a[i];
- /* Bits 64-71 are zeros. draft-ietf-behave-address-format-04 */
+ /* Bits 64-71 are zeros. rfc6052.txt */
if (nbytes == 8)
aaaa[nbytes++] = 0;
}
diff --git a/lib/dns/dnssec.c b/lib/dns/dnssec.c
index d7addc681430..6a749ea56b32 100644
--- a/lib/dns/dnssec.c
+++ b/lib/dns/dnssec.c
@@ -1247,7 +1247,10 @@ get_hints(dns_dnsseckey_t *key, isc_stdtime_t now) {
/* Metadata says activate (so we must also publish) */
if (actset && active <= now) {
key->hint_sign = ISC_TRUE;
- key->hint_publish = ISC_TRUE;
+
+ /* Only publish if publish time has already passed. */
+ if (pubset && publish <= now)
+ key->hint_publish = ISC_TRUE;
}
/*
@@ -1522,7 +1525,7 @@ dns_dnssec_keylistfromrdataset(dns_name_t *origin,
const char *directory, isc_mem_t *mctx,
dns_rdataset_t *keyset, dns_rdataset_t *keysigs,
dns_rdataset_t *soasigs, isc_boolean_t savekeys,
- isc_boolean_t public,
+ isc_boolean_t publickey,
dns_dnsseckeylist_t *keylist)
{
dns_rdataset_t keys;
@@ -1551,7 +1554,7 @@ dns_dnssec_keylistfromrdataset(dns_name_t *origin,
if (!dns_name_equal(origin, dst_key_name(pubkey)))
goto skip;
- if (public) {
+ if (publickey) {
RETERR(addkey(keylist, &pubkey, savekeys, mctx));
goto skip;
}
diff --git a/lib/dns/ecdb.c b/lib/dns/ecdb.c
index 8b3f7740081b..22cd810a773c 100644
--- a/lib/dns/ecdb.c
+++ b/lib/dns/ecdb.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2009-2011, 2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2009-2011, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
*
* Permission to use, copy, modify, and/or distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
@@ -14,8 +14,6 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
-/* $Id: ecdb.c,v 1.10 2011/12/20 00:06:53 marka Exp $ */
-
#include "config.h"
#include <isc/result.h>
@@ -772,19 +770,24 @@ rdataset_settrust(dns_rdataset_t *rdataset, dns_trust_t trust) {
static void
rdatasetiter_destroy(dns_rdatasetiter_t **iteratorp) {
- ecdb_rdatasetiter_t *ecdbiterator;
isc_mem_t *mctx;
+ union {
+ dns_rdatasetiter_t *rdatasetiterator;
+ ecdb_rdatasetiter_t *ecdbiterator;
+ } u;
REQUIRE(iteratorp != NULL);
- ecdbiterator = (ecdb_rdatasetiter_t *)*iteratorp;
- REQUIRE(DNS_RDATASETITER_VALID(&ecdbiterator->common));
+ REQUIRE(DNS_RDATASETITER_VALID(*iteratorp));
- mctx = ecdbiterator->common.db->mctx;
+ u.rdatasetiterator = *iteratorp;
- ecdbiterator->common.magic = 0;
+ mctx = u.ecdbiterator->common.db->mctx;
+ u.ecdbiterator->common.magic = 0;
- dns_db_detachnode(ecdbiterator->common.db, &ecdbiterator->common.node);
- isc_mem_put(mctx, ecdbiterator, sizeof(ecdb_rdatasetiter_t));
+ dns_db_detachnode(u.ecdbiterator->common.db,
+ &u.ecdbiterator->common.node);
+ isc_mem_put(mctx, u.ecdbiterator,
+ sizeof(ecdb_rdatasetiter_t));
*iteratorp = NULL;
}
diff --git a/lib/dns/gen.c b/lib/dns/gen.c
index b934c9990fb3..ff41de6d624a 100644
--- a/lib/dns/gen.c
+++ b/lib/dns/gen.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2009, 2012, 2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2009, 2012-2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1998-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -331,15 +331,20 @@ insert_into_typenames(int type, const char *typename, const char *attr) {
exit(1);
}
+ /* XXXMUKS: This is redundant due to the INSIST above. */
if (strlen(typename) > sizeof(ttn->typename) - 1) {
fprintf(stderr, "Error: type name %s is too long\n",
typename);
exit(1);
}
+
strncpy(ttn->typename, typename, sizeof(ttn->typename));
- ttn->type = type;
+ ttn->typename[sizeof(ttn->typename) - 1] = '\0';
strncpy(ttn->macroname, ttn->typename, sizeof(ttn->macroname));
+ ttn->macroname[sizeof(ttn->macroname) - 1] = '\0';
+
+ ttn->type = type;
c = strlen(ttn->macroname);
while (c > 0) {
if (ttn->macroname[c - 1] == '-')
@@ -365,7 +370,10 @@ insert_into_typenames(int type, const char *typename, const char *attr) {
attr, typename);
exit(1);
}
+
strncpy(ttn->attr, attr, sizeof(ttn->attr));
+ ttn->attr[sizeof(ttn->attr) - 1] = '\0';
+
ttn->sorted = 0;
if (maxtype < type)
maxtype = type;
@@ -394,11 +402,17 @@ add(int rdclass, const char *classname, int type, const char *typename,
newtt->next = NULL;
newtt->rdclass = rdclass;
newtt->type = type;
+
strncpy(newtt->classname, classname, sizeof(newtt->classname));
+ newtt->classname[sizeof(newtt->classname) - 1] = '\0';
+
strncpy(newtt->typename, typename, sizeof(newtt->typename));
+ newtt->typename[sizeof(newtt->typename) - 1] = '\0';
+
if (strncmp(dirname, "./", 2) == 0)
dirname += 2;
strncpy(newtt->dirname, dirname, sizeof(newtt->dirname));
+ newtt->dirname[sizeof(newtt->dirname) - 1] = '\0';
tt = types;
oldtt = NULL;
@@ -437,6 +451,7 @@ add(int rdclass, const char *classname, int type, const char *typename,
}
newcc->rdclass = rdclass;
strncpy(newcc->classname, classname, sizeof(newcc->classname));
+ newcc->classname[sizeof(newcc->classname) - 1] = '\0';
cc = classes;
oldcc = NULL;
diff --git a/lib/dns/gssapictx.c b/lib/dns/gssapictx.c
index d4209d378a76..f28c07aba436 100644
--- a/lib/dns/gssapictx.c
+++ b/lib/dns/gssapictx.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 2000, 2001 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -233,7 +233,7 @@ check_config(const char *gss_name) {
krb5_free_context(krb5_ctx);
return;
}
- p = strchr(gss_name, '/');
+ p = strchr(gss_name, '@');
if (p == NULL) {
gss_log(ISC_LOG_ERROR, "badly formatted "
"tkey-gssapi-credentials (%s)", gss_name);
diff --git a/lib/dns/include/dns/Makefile.in b/lib/dns/include/dns/Makefile.in
index 6ff682f70d37..640a63e2c8e7 100644
--- a/lib/dns/include/dns/Makefile.in
+++ b/lib/dns/include/dns/Makefile.in
@@ -21,18 +21,22 @@ top_srcdir = @top_srcdir@
@BIND9_VERSION@
-HEADERS = acl.h adb.h byaddr.h cache.h callbacks.h cert.h compress.h \
+HEADERS = acache.h acl.h adb.h bit.h byaddr.h cache.h callbacks.h cert.h \
client.h clientinfo.h compress.h \
db.h dbiterator.h dbtable.h diff.h dispatch.h \
- dlz.h dnssec.h ds.h events.h fixedname.h iptable.h journal.h \
- keyflags.h keytable.h keyvalues.h lib.h log.h \
- master.h masterdump.h message.h name.h ncache.h nsec.h \
- peer.h portlist.h private.h rbt.h rcode.h \
- rdata.h rdataclass.h rdatalist.h rdataset.h rdatasetiter.h \
- rdataslab.h rdatatype.h request.h resolver.h result.h \
- rootns.h rpz.h sdb.h sdlz.h secalg.h secproto.h soa.h ssu.h \
- tcpmsg.h time.h tkey.h tsec.h tsig.h ttl.h types.h \
- validator.h version.h view.h xfrin.h zone.h zonekey.h zt.h
+ dlz.h dlz_dlopen.h dns64.h dnssec.h ds.h \
+ ecdb.h events.h fixedname.h forward.h iptable.h \
+ journal.h keydata.h keyflags.h keytable.h keyvalues.h \
+ lib.h lookup.h log.h master.h masterdump.h message.h \
+ name.h ncache.h nsec.h nsec3.h opcode.h order.h \
+ peer.h portlist.h private.h \
+ rbt.h rcode.h rdata.h rdataclass.h rdatalist.h \
+ rdataset.h rdatasetiter.h rdataslab.h rdatatype.h request.h \
+ resolver.h result.h rootns.h rpz.h rriterator.h rrl.h \
+ sdb.h sdlz.h secalg.h secproto.h soa.h ssu.h stats.h \
+ tcpmsg.h time.h timer.h tkey.h tsec.h tsig.h ttl.h types.h \
+ update.h validator.h version.h view.h xfrin.h \
+ zone.h zonekey.h zt.h
GENHEADERS = enumclass.h enumtype.h rdatastruct.h
diff --git a/lib/dns/include/dns/adb.h b/lib/dns/include/dns/adb.h
index a5a312406aff..8222bd211006 100644
--- a/lib/dns/include/dns/adb.h
+++ b/lib/dns/include/dns/adb.h
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2008, 2011, 2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2008, 2011, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -334,6 +334,13 @@ dns_adb_createfind(dns_adb_t *adb, isc_task_t *task, isc_taskaction_t action,
dns_rdatatype_t qtype, unsigned int options,
isc_stdtime_t now, dns_name_t *target,
in_port_t port, dns_adbfind_t **find);
+isc_result_t
+dns_adb_createfind2(dns_adb_t *adb, isc_task_t *task, isc_taskaction_t action,
+ void *arg, dns_name_t *name, dns_name_t *qname,
+ dns_rdatatype_t qtype, unsigned int options,
+ isc_stdtime_t now, dns_name_t *target, in_port_t port,
+ unsigned int depth, isc_counter_t *qc,
+ dns_adbfind_t **find);
/*%<
* Main interface for clients. The adb will look up the name given in
* "name" and will build up a list of found addresses, and perhaps start
@@ -510,7 +517,12 @@ dns_adb_marklame(dns_adb_t *adb, dns_adbaddrinfo_t *addr, dns_name_t *qname,
*/
/*
- * A reasonable default for RTT adjustments
+ * Reasonable defaults for RTT adjustments
+ *
+ * (Note: these values function both as scaling factors and as
+ * indicators of the type of RTT adjustment operation taking place.
+ * Adjusting the scaling factors is fine, as long as they all remain
+ * unique values.)
*/
#define DNS_ADB_RTTADJDEFAULT 7 /*%< default scale */
#define DNS_ADB_RTTADJREPLACE 0 /*%< replace with our rtt */
@@ -521,18 +533,6 @@ dns_adb_adjustsrtt(dns_adb_t *adb, dns_adbaddrinfo_t *addr,
unsigned int rtt, unsigned int factor);
/*%<
* Mix the round trip time into the existing smoothed rtt.
-
- * The formula used
- * (where srtt is the existing rtt value, and rtt and factor are arguments to
- * this function):
- *
- *\code
- * new_srtt = (old_srtt / 10 * factor) + (rtt / 10 * (10 - factor));
- *\endcode
- *
- * XXXRTH Do we want to publish the formula? What if we want to change how
- * this works later on? Recommend/require that the units are
- * microseconds?
*
* Requires:
*
@@ -549,6 +549,24 @@ dns_adb_adjustsrtt(dns_adb_t *adb, dns_adbaddrinfo_t *addr,
*/
void
+dns_adb_agesrtt(dns_adb_t *adb, dns_adbaddrinfo_t *addr, isc_stdtime_t now);
+/*
+ * dns_adb_agesrtt is equivalent to dns_adb_adjustsrtt with factor
+ * equal to DNS_ADB_RTTADJAGE and the current time passed in.
+ *
+ * Requires:
+ *
+ *\li adb be valid.
+ *
+ *\li addr be valid.
+ *
+ * Note:
+ *
+ *\li The srtt in addr will be updated to reflect the new global
+ * srtt value. This may include changes made by others.
+ */
+
+void
dns_adb_changeflags(dns_adb_t *adb, dns_adbaddrinfo_t *addr,
unsigned int bits, unsigned int mask);
/*%
diff --git a/lib/dns/include/dns/dns64.h b/lib/dns/include/dns/dns64.h
index eb8f8d6436a6..4d0e80158541 100644
--- a/lib/dns/include/dns/dns64.h
+++ b/lib/dns/include/dns/dns64.h
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2010 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2010, 2014 Internet Systems Consortium, Inc. ("ISC")
*
* Permission to use, copy, modify, and/or distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
@@ -84,7 +84,7 @@ dns_dns64_create(isc_mem_t *mctx, isc_netaddr_t *prefix,
* zero.
* 'client' to be NULL or a valid acl.
* 'mapped' to be NULL or a valid acl.
- * 'exculded' to be NULL or a valid acl.
+ * 'excluded' to be NULL or a valid acl.
*
* Returns:
* ISC_R_SUCCESS
diff --git a/lib/dns/include/dns/dnssec.h b/lib/dns/include/dns/dnssec.h
index 7202d99b5da9..936454fc465e 100644
--- a/lib/dns/include/dns/dnssec.h
+++ b/lib/dns/include/dns/dnssec.h
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2007, 2009-2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2007, 2009-2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2002 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -314,11 +314,11 @@ dns_dnssec_keylistfromrdataset(dns_name_t *origin,
const char *directory, isc_mem_t *mctx,
dns_rdataset_t *keyset, dns_rdataset_t *keysigs,
dns_rdataset_t *soasigs, isc_boolean_t savekeys,
- isc_boolean_t public,
+ isc_boolean_t publickey,
dns_dnsseckeylist_t *keylist);
/*%<
* Append the contents of a DNSKEY rdataset 'keyset' to 'keylist'.
- * Omit duplicates. If 'public' is ISC_FALSE, search 'directory' for
+ * Omit duplicates. If 'publickey' is ISC_FALSE, search 'directory' for
* matching key files, and load the private keys that go with
* the public ones. If 'savekeys' is ISC_TRUE, mark the keys so
* they will not be deleted or inactivated regardless of metadata.
diff --git a/lib/dns/include/dns/message.h b/lib/dns/include/dns/message.h
index 6b2f39fc9583..c678238d2224 100644
--- a/lib/dns/include/dns/message.h
+++ b/lib/dns/include/dns/message.h
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2010, 2012, 2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2010, 2012-2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -106,6 +106,10 @@
/*%< EDNS0 extended OPT codes */
#define DNS_OPT_NSID 0x0003 /*%< NSID opt code */
#define DNS_OPT_CLIENT_SUBNET 0x0008 /*%< client subnet opt code */
+#define DNS_OPT_EXPIRE 0x0009 /*%< EXPIRE opt code */
+
+/*%< The number of EDNS options we know about. */
+#define DNS_EDNSOPTIONS 3
#define DNS_MESSAGE_REPLYPRESERVE (DNS_MESSAGEFLAG_RD|DNS_MESSAGEFLAG_CD)
#define DNS_MESSAGEEXTFLAG_REPLYPRESERVE (DNS_MESSAGEEXTFLAG_DO)
diff --git a/lib/dns/include/dns/rbt.h b/lib/dns/include/dns/rbt.h
index 3e9dc886576f..8b382b5ed6be 100644
--- a/lib/dns/include/dns/rbt.h
+++ b/lib/dns/include/dns/rbt.h
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2009 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2009, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2002 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -914,6 +914,31 @@ dns_rbtnodechain_nextflat(dns_rbtnodechain_t *chain, dns_name_t *name);
#define dns_rbtnode_refinit(node, n) ((node)->references = (n))
#define dns_rbtnode_refdestroy(node) REQUIRE((node)->references == 0)
#define dns_rbtnode_refcurrent(node) ((node)->references)
+
+#if (__STDC_VERSION__ + 0) >= 199901L || defined __GNUC__
+static inline void
+dns_rbtnode_refincrement0(dns_rbtnode_t *node, unsigned int *refs) {
+ node->references++;
+ if (refs != NULL)
+ *refs = node->references;
+}
+
+static inline void
+dns_rbtnode_refincrement(dns_rbtnode_t *node, unsigned int *refs) {
+ REQUIRE(node->references > 0);
+ node->references++;
+ if (refs != NULL)
+ *refs = node->references;
+}
+
+static inline void
+dns_rbtnode_refdecrement(dns_rbtnode_t *node, unsigned int *refs) {
+ REQUIRE(node->references > 0);
+ node->references--;
+ if (refs != NULL)
+ *refs = node->references;
+}
+#else
#define dns_rbtnode_refincrement0(node, refs) \
do { \
unsigned int *_tmp = (unsigned int *)(refs); \
@@ -935,6 +960,7 @@ dns_rbtnodechain_nextflat(dns_rbtnodechain_t *chain, dns_name_t *name);
if ((refs) != NULL) \
(*refs) = (node)->references; \
} while (0)
+#endif
#endif /* DNS_RBT_USEISCREFCOUNT */
ISC_LANG_ENDDECLS
diff --git a/lib/dns/include/dns/rdataset.h b/lib/dns/include/dns/rdataset.h
index 31bcd15f1424..c266d14655ee 100644
--- a/lib/dns/include/dns/rdataset.h
+++ b/lib/dns/include/dns/rdataset.h
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2012, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -199,7 +199,8 @@ struct dns_rdataset {
#define DNS_RDATASETATTR_NXDOMAIN 0x00002000
#define DNS_RDATASETATTR_NOQNAME 0x00004000
#define DNS_RDATASETATTR_CHECKNAMES 0x00008000 /*%< Used by resolver. */
-#define DNS_RDATASETATTR_REQUIREDGLUE 0x00010000
+#define DNS_RDATASETATTR_REQUIRED 0x00010000
+#define DNS_RDATASETATTR_REQUIREDGLUE DNS_RDATASETATTR_REQUIRED
#define DNS_RDATASETATTR_LOADORDER 0x00020000
#define DNS_RDATASETATTR_RESIGN 0x00040000
#define DNS_RDATASETATTR_CLOSEST 0x00080000
@@ -673,7 +674,7 @@ dns_rdataset_trimttl(dns_rdataset_t *rdataset, dns_rdataset_t *sigrdataset,
const char *
dns_trust_totext(dns_trust_t trust);
-/*
+/*%<
* Display trust in textual form.
*/
diff --git a/lib/dns/include/dns/resolver.h b/lib/dns/include/dns/resolver.h
index 095269ea2dd2..a533f4ed2b24 100644
--- a/lib/dns/include/dns/resolver.h
+++ b/lib/dns/include/dns/resolver.h
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2012, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2001, 2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -97,6 +97,7 @@ typedef struct dns_fetchevent {
UDP buffer. */
#define DNS_FETCHOPT_WANTNSID 0x80 /*%< Request NSID */
+/* Reserved in use by adb.c 0x00400000 */
#define DNS_FETCHOPT_EDNSVERSIONSET 0x00800000
#define DNS_FETCHOPT_EDNSVERSIONMASK 0xff000000
#define DNS_FETCHOPT_EDNSVERSIONSHIFT 24
@@ -274,6 +275,18 @@ dns_resolver_createfetch2(dns_resolver_t *res, dns_name_t *name,
dns_rdataset_t *rdataset,
dns_rdataset_t *sigrdataset,
dns_fetch_t **fetchp);
+isc_result_t
+dns_resolver_createfetch3(dns_resolver_t *res, dns_name_t *name,
+ dns_rdatatype_t type,
+ dns_name_t *domain, dns_rdataset_t *nameservers,
+ dns_forwarders_t *forwarders,
+ isc_sockaddr_t *client, isc_uint16_t id,
+ unsigned int options, unsigned int depth,
+ isc_counter_t *qc, isc_task_t *task,
+ isc_taskaction_t action, void *arg,
+ dns_rdataset_t *rdataset,
+ dns_rdataset_t *sigrdataset,
+ dns_fetch_t **fetchp);
/*%<
* Recurse to answer a question.
*
@@ -575,6 +588,30 @@ dns_resolver_printbadcache(dns_resolver_t *resolver, FILE *fp);
* \li resolver to be valid.
*/
+void
+dns_resolver_setmaxdepth(dns_resolver_t *resolver, unsigned int maxdepth);
+unsigned int
+dns_resolver_getmaxdepth(dns_resolver_t *resolver);
+/*%
+ * Get and set how many NS indirections will be followed when looking for
+ * nameserver addresses.
+ *
+ * Requires:
+ * \li resolver to be valid.
+ */
+
+void
+dns_resolver_setmaxqueries(dns_resolver_t *resolver, unsigned int queries);
+unsigned int
+dns_resolver_getmaxqueries(dns_resolver_t *resolver);
+/*%
+ * Get and set how many iterative queries will be allowed before
+ * terminating a recursive query.
+ *
+ * Requires:
+ * \li resolver to be valid.
+ */
+
ISC_LANG_ENDDECLS
#endif /* DNS_RESOLVER_H */
diff --git a/lib/dns/include/dns/view.h b/lib/dns/include/dns/view.h
index 704e5fe3e999..b9d6084f351c 100644
--- a/lib/dns/include/dns/view.h
+++ b/lib/dns/include/dns/view.h
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -140,6 +140,7 @@ struct dns_view {
dns_acl_t * updateacl;
dns_acl_t * upfwdacl;
dns_acl_t * denyansweracl;
+ dns_acl_t * nocasecompress;
dns_rbt_t * answeracl_exclude;
dns_rbt_t * denyanswernames;
dns_rbt_t * answernames_exclude;
@@ -711,6 +712,7 @@ dns_viewlist_findzone(dns_viewlist_t *list, dns_name_t *name, isc_boolean_t allc
* Returns:
*\li #ISC_R_SUCCESS A matching zone was found.
*\li #ISC_R_NOTFOUND No matching zone was found.
+ *\li #ISC_R_MULTIPLE Multiple zones with the same name were found.
*/
isc_result_t
diff --git a/lib/dns/keytable.c b/lib/dns/keytable.c
index c49847f326ad..56fefcd2c122 100644
--- a/lib/dns/keytable.c
+++ b/lib/dns/keytable.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004, 2005, 2007, 2009, 2010, 2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004, 2005, 2007, 2009, 2010, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 2000, 2001 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -174,6 +174,7 @@ insert(dns_keytable_t *keytable, isc_boolean_t managed,
for (k = node->data; k != NULL; k = k->next) {
if (k->key == NULL) {
k->key = *keyp;
+ *keyp = NULL; /* transfer ownership */
break;
}
if (dst_key_compare(k->key, *keyp) == ISC_TRUE)
@@ -182,7 +183,7 @@ insert(dns_keytable_t *keytable, isc_boolean_t managed,
if (k == NULL)
result = ISC_R_SUCCESS;
- else
+ else if (*keyp != NULL)
dst_key_free(keyp);
}
@@ -575,6 +576,8 @@ dns_keytable_dump(dns_keytable_t *keytable, FILE *fp)
dns_rbtnodechain_current(&chain, NULL, NULL, &node);
for (knode = node->data; knode != NULL; knode = knode->next) {
+ if (knode->key == NULL)
+ continue;
dst_key_format(knode->key, pbuf, sizeof(pbuf));
fprintf(fp, "%s ; %s\n", pbuf,
knode->managed ? "managed" : "trusted");
diff --git a/lib/dns/master.c b/lib/dns/master.c
index 9e796e6e0ac7..dcea97a0bdd4 100644
--- a/lib/dns/master.c
+++ b/lib/dns/master.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2009, 2011-2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2009, 2011-2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -91,6 +91,8 @@
#define DNS_MASTER_LHS 2048
#define DNS_MASTER_RHS MINTSIZ
+#define CHECKNAMESFAIL(x) (((x) & DNS_MASTER_CHECKNAMESFAIL) != 0)
+
typedef ISC_LIST(dns_rdatalist_t) rdatalist_head_t;
typedef struct dns_incctx dns_incctx_t;
@@ -798,13 +800,12 @@ generate(dns_loadctx_t *lctx, char *range, char *lhs, char *gtype, char *rhs,
dns_rdatalist_t rdatalist;
dns_rdatatype_t type;
rdatalist_head_t head;
- int n;
int target_size = MINTSIZ; /* only one rdata at a time */
isc_buffer_t buffer;
isc_buffer_t target;
isc_result_t result;
isc_textregion_t r;
- unsigned int start, stop, step, i;
+ int i, n, start, stop, step = 0;
dns_incctx_t *ictx;
ictx = lctx->inc;
@@ -822,8 +823,10 @@ generate(dns_loadctx_t *lctx, char *range, char *lhs, char *gtype, char *rhs,
}
isc_buffer_init(&target, target_mem, target_size);
- n = sscanf(range, "%u-%u/%u", &start, &stop, &step);
- if (n < 2 || stop < start) {
+ n = sscanf(range, "%d-%d/%d", &start, &stop, &step);
+ if ((n < 2) || (start < 0) || (stop < 0) || (step < 0) ||
+ (stop < start))
+ {
(*callbacks->error)(callbacks,
"%s: %s:%lu: invalid range '%s'",
"$GENERATE", source, line, range);
@@ -1759,7 +1762,8 @@ load_text(dns_loadctx_t *lctx) {
dns_name_format(name, namebuf, sizeof(namebuf));
result = DNS_R_BADOWNERNAME;
desc = dns_result_totext(result);
- if ((lctx->options & DNS_MASTER_CHECKNAMESFAIL) != 0) {
+ if (CHECKNAMESFAIL(lctx->options) ||
+ type == dns_rdatatype_nsec3) {
(*callbacks->error)(callbacks,
"%s:%lu: %s: %s",
source, line,
@@ -2132,7 +2136,7 @@ load_raw(dns_loadctx_t *lctx) {
isc_result_totext(result));
return (result);
}
- isc_buffer_add(&target, commonlen);
+ isc_buffer_add(&target, (unsigned int)commonlen);
header.format = isc_buffer_getuint32(&target);
if (header.format != dns_masterformat_raw) {
(*callbacks->error)(callbacks,
@@ -2165,7 +2169,7 @@ load_raw(dns_loadctx_t *lctx) {
return (result);
}
- isc_buffer_add(&target, remainder);
+ isc_buffer_add(&target, (unsigned int)remainder);
header.dumptime = isc_buffer_getuint32(&target);
if (header.version == DNS_RAWFORMAT_VERSION) {
header.flags = isc_buffer_getuint32(&target);
@@ -2275,7 +2279,7 @@ load_raw(dns_loadctx_t *lctx) {
rdatalist.covers = isc_buffer_getuint16(&target);
rdatalist.ttl = isc_buffer_getuint32(&target);
rdcount = isc_buffer_getuint32(&target);
- if (rdcount == 0) {
+ if (rdcount == 0 || rdcount > 0xffff) {
result = ISC_R_RANGE;
goto cleanup;
}
diff --git a/lib/dns/message.c b/lib/dns/message.c
index 901c6b6d991d..d76eb4fb26c6 100644
--- a/lib/dns/message.c
+++ b/lib/dns/message.c
@@ -1377,6 +1377,16 @@ getsection(isc_buffer_t *source, dns_message_t *msg, dns_decompress_t *dctx,
covers = 0;
/*
+ * Check the ownername of NSEC3 records
+ */
+ if (rdtype == dns_rdatatype_nsec3 &&
+ !dns_rdata_checkowner(name, msg->rdclass, rdtype,
+ ISC_FALSE)) {
+ result = DNS_R_BADOWNERNAME;
+ goto cleanup;
+ }
+
+ /*
* If we are doing a dynamic update or this is a meta-type,
* don't bother searching for a name, just append this one
* to the end of the message.
@@ -3196,7 +3206,8 @@ dns_message_pseudosectiontotext(dns_message_t *msg,
dns_pseudosection_t section,
const dns_master_style_t *style,
dns_messagetextflag_t flags,
- isc_buffer_t *target) {
+ isc_buffer_t *target)
+{
dns_rdataset_t *ps = NULL;
dns_name_t *name = NULL;
isc_result_t result;
@@ -3270,8 +3281,11 @@ dns_message_pseudosectiontotext(dns_message_t *msg,
sprintf(buf, "%02x ", optdata[i]);
ADD_STRING(target, buf);
}
+
for (i = 0; i < optlen; i++) {
ADD_STRING(target, " (");
+ if (!isc_buffer_availablelength(target))
+ return (ISC_R_NOSPACE);
if (isprint(optdata[i]))
isc_buffer_putmem(target,
&optdata[i],
diff --git a/lib/dns/name.c b/lib/dns/name.c
index 9b24ed363804..5207f74b4240 100644
--- a/lib/dns/name.c
+++ b/lib/dns/name.c
@@ -53,7 +53,6 @@ typedef enum {
typedef enum {
fw_start = 0,
fw_ordinary,
- fw_copy,
fw_newcurrent
} fw_state;
@@ -1161,7 +1160,7 @@ dns_name_fromtext(dns_name_t *name, isc_buffer_t *source,
count++;
CONVERTTOASCII(c);
if (downcase)
- c = maptolower[(int)c];
+ c = maptolower[c & 0xff];
*ndata++ = c;
nrem--;
nused++;
@@ -1185,7 +1184,7 @@ dns_name_fromtext(dns_name_t *name, isc_buffer_t *source,
count++;
CONVERTTOASCII(c);
if (downcase)
- c = maptolower[(int)c];
+ c = maptolower[c & 0xff];
*ndata++ = c;
nrem--;
nused++;
@@ -1200,7 +1199,7 @@ dns_name_fromtext(dns_name_t *name, isc_buffer_t *source,
if (!isdigit(c & 0xff))
return (DNS_R_BADESCAPE);
value *= 10;
- value += digitvalue[(int)c];
+ value += digitvalue[c & 0xff];
digits++;
if (digits == 3) {
if (value > 255)
@@ -1252,7 +1251,7 @@ dns_name_fromtext(dns_name_t *name, isc_buffer_t *source,
while (n2 > 0) {
c = *label++;
if (downcase)
- c = maptolower[(int)c];
+ c = maptolower[c & 0xff];
*ndata++ = c;
n2--;
}
@@ -1859,7 +1858,6 @@ dns_name_fromwire(dns_name_t *name, isc_buffer_t *source,
0)
return (DNS_R_DISALLOWED);
new_current = c & 0x3F;
- n = 1;
state = fw_newcurrent;
} else
return (DNS_R_BADLABELTYPE);
@@ -1867,8 +1865,6 @@ dns_name_fromwire(dns_name_t *name, isc_buffer_t *source,
case fw_ordinary:
if (downcase)
c = maptolower[c];
- /* FALLTHROUGH */
- case fw_copy:
*ndata++ = c;
n--;
if (n == 0)
@@ -1877,9 +1873,6 @@ dns_name_fromwire(dns_name_t *name, isc_buffer_t *source,
case fw_newcurrent:
new_current *= 256;
new_current += c;
- n--;
- if (n != 0)
- break;
if (new_current >= biggest_pointer)
return (DNS_R_BADPOINTER);
biggest_pointer = new_current;
diff --git a/lib/dns/nsec.c b/lib/dns/nsec.c
index 5d1197d093b0..6183ef281c02 100644
--- a/lib/dns/nsec.c
+++ b/lib/dns/nsec.c
@@ -436,7 +436,7 @@ dns_nsec_noexistnodata(dns_rdatatype_t type, dns_name_t *name,
nlabels, &common);
}
result = dns_name_concatenate(dns_wildcardname, &common,
- wild, NULL);
+ wild, NULL);
if (result != ISC_R_SUCCESS) {
dns_rdata_freestruct(&nsec);
(*logit)(arg, ISC_LOG_DEBUG(3),
diff --git a/lib/dns/nsec3.c b/lib/dns/nsec3.c
index 3724118cb3fe..ef43c35d27bb 100644
--- a/lib/dns/nsec3.c
+++ b/lib/dns/nsec3.c
@@ -253,11 +253,11 @@ dns_nsec3_hashname(dns_fixedname_t *result,
if (hash_length != NULL)
*hash_length = len;
- /* convert the hash to base32hex */
+ /* convert the hash to base32hex non-padded */
region.base = rethash;
region.length = (unsigned int)len;
isc_buffer_init(&namebuffer, nametext, sizeof nametext);
- isc_base32hex_totext(&region, 1, "", &namebuffer);
+ isc_base32hexnp_totext(&region, 1, "", &namebuffer);
/* convert the hex to a domain name */
dns_fixedname_init(result);
@@ -269,7 +269,8 @@ unsigned int
dns_nsec3_hashlength(dns_hash_t hash) {
switch (hash) {
- case dns_hash_sha1: return(ISC_SHA1_DIGESTLENGTH);
+ case dns_hash_sha1:
+ return(ISC_SHA1_DIGESTLENGTH);
}
return (0);
}
@@ -277,7 +278,8 @@ dns_nsec3_hashlength(dns_hash_t hash) {
isc_boolean_t
dns_nsec3_supportedhash(dns_hash_t hash) {
switch (hash) {
- case dns_hash_sha1: return (ISC_TRUE);
+ case dns_hash_sha1:
+ return (ISC_TRUE);
}
return (ISC_FALSE);
}
@@ -565,6 +567,7 @@ dns_nsec3_addnsec3(dns_db_t *db, dns_dbversion_t *version,
CHECK(dns_nsec3_hashname(&fixed, nexthash, &next_length,
name, origin, hash, iterations,
salt, salt_length));
+ INSIST(next_length <= sizeof(nexthash));
/*
* Create the node if it doesn't exist and hold
@@ -842,8 +845,8 @@ dns_nsec3_addnsec3(dns_db_t *db, dns_dbversion_t *version,
dns_db_detachnode(db, &newnode);
} while (1);
- if (result == ISC_R_NOMORE)
- result = ISC_R_SUCCESS;
+ /* result cannot be ISC_R_NOMORE here */
+ INSIST(result != ISC_R_NOMORE);
failure:
if (dbit != NULL)
@@ -2072,6 +2075,9 @@ dns_nsec3_noexistnodata(dns_rdatatype_t type, dns_name_t* name,
if ((nsec3.flags & DNS_NSEC3FLAG_OPTOUT) != 0)
(*logit)(arg, ISC_LOG_DEBUG(3),
"NSEC3 indicates optout");
+ else
+ (*logit)(arg, ISC_LOG_DEBUG(3),
+ "NSEC3 indicates secure range");
*optout =
ISC_TF(nsec3.flags & DNS_NSEC3FLAG_OPTOUT);
}
diff --git a/lib/dns/openssl_link.c b/lib/dns/openssl_link.c
index 56465aa00645..a0a2724f41c1 100644
--- a/lib/dns/openssl_link.c
+++ b/lib/dns/openssl_link.c
@@ -1,5 +1,5 @@
/*
- * Portions Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC")
+ * Portions Copyright (C) 2004-2012, 2014 Internet Systems Consortium, Inc. ("ISC")
* Portions Copyright (C) 1999-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -242,8 +242,7 @@ dst__openssl_init(const char *engine) {
}
void
-dst__openssl_destroy() {
-
+dst__openssl_destroy(void) {
/*
* Sequence taken from apps_shutdown() in <apps/apps.h>.
*/
diff --git a/lib/dns/peer.c b/lib/dns/peer.c
index ec9e08cb27b7..b17bbea1328a 100644
--- a/lib/dns/peer.c
+++ b/lib/dns/peer.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2009, 2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2009, 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 2000, 2001, 2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -300,10 +300,15 @@ peer_delete(dns_peer_t **peer) {
isc_mem_put(mem, p->key, sizeof(dns_name_t));
}
- if (p->transfer_source != NULL) {
+ if (p->query_source != NULL)
+ isc_mem_put(mem, p->query_source, sizeof(*p->query_source));
+
+ if (p->notify_source != NULL)
+ isc_mem_put(mem, p->notify_source, sizeof(*p->notify_source));
+
+ if (p->transfer_source != NULL)
isc_mem_put(mem, p->transfer_source,
sizeof(*p->transfer_source));
- }
isc_mem_put(mem, p, sizeof(*p));
diff --git a/lib/dns/rbt.c b/lib/dns/rbt.c
index d97fcce28eb9..0e9c5f950569 100644
--- a/lib/dns/rbt.c
+++ b/lib/dns/rbt.c
@@ -15,8 +15,6 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
-/* $Id$ */
-
/*! \file */
/* Principal Authors: DCL */
@@ -134,7 +132,10 @@ struct dns_rbt {
* of memory concerns, when chains were first implemented).
*/
#define ADD_LEVEL(chain, node) \
- (chain)->levels[(chain)->level_count++] = (node)
+ do { \
+ INSIST((chain)->level_count < DNS_RBT_LEVELBLOCK); \
+ (chain)->levels[(chain)->level_count++] = (node); \
+ } while (0)
/*%
* The following macros directly access normally private name variables.
diff --git a/lib/dns/rbtdb.c b/lib/dns/rbtdb.c
index 013bf34a0a09..a8ad8329c73b 100644
--- a/lib/dns/rbtdb.c
+++ b/lib/dns/rbtdb.c
@@ -15,8 +15,6 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
-/* $Id$ */
-
/*! \file */
/*
@@ -93,6 +91,127 @@ typedef isc_uint64_t rbtdb_serial_t;
#define dns_rbtdb_t dns_rbtdb64_t
#define rdatasetheader_t rdatasetheader64_t
#define rbtdb_version_t rbtdb_version64_t
+
+#define init_count init_count64
+
+#define cache_methods cache_methods64
+#define dbiterator_methods dbiterator_methods64
+#define rdataset_methods rdataset_methods64
+#define rdatasetiter_methods rdatasetiter_methods64
+#define zone_methods zone_methods64
+
+#define acache_callback acache_callback64
+#define acache_cancelentry acache_cancelentry64
+#define activeempty activeempty64
+#define activeemtpynode activeemtpynode64
+#define add32 add64
+#define add_changed add_changed64
+#define add_empty_wildcards add_empty_wildcards64
+#define add_wildcard_magic add_wildcard_magic64
+#define addrdataset addrdataset64
+#define allrdatasets allrdatasets64
+#define attach attach64
+#define attachnode attachnode64
+#define attachversion attachversion64
+#define beginload beginload64
+#define bind_rdataset bind_rdataset64
+#define cache_find cache_find64
+#define cache_findrdataset cache_findrdataset64
+#define cache_findzonecut cache_findzonecut64
+#define cache_zonecut_callback cache_zonecut_callback64
+#define cleanup_dead_nodes cleanup_dead_nodes64
+#define cleanup_dead_nodes_callback cleanup_dead_nodes_callback64
+#define closeversion closeversion64
+#define createiterator createiterator64
+#define currentversion currentversion64
+#define dbiterator_current dbiterator_current64
+#define dbiterator_destroy dbiterator_destroy64
+#define dbiterator_first dbiterator_first64
+#define dbiterator_last dbiterator_last64
+#define dbiterator_next dbiterator_next64
+#define dbiterator_origin dbiterator_origin64
+#define dbiterator_pause dbiterator_pause64
+#define dbiterator_prev dbiterator_prev64
+#define dbiterator_seek dbiterator_seek64
+#define decrement_reference decrement_reference64
+#define delete_callback delete_callback64
+#define delete_node delete_node64
+#define deleterdataset deleterdataset64
+#define detach detach64
+#define detachnode detachnode64
+#define dump dump64
+#define endload endload64
+#define expire_header expire_header64
+#define expirenode expirenode64
+#define find_closest_nsec find_closest_nsec64
+#define find_coveringnsec find_coveringnsec64
+#define find_deepest_zonecut find_deepest_zonecut64
+#define findnode findnode64
+#define findnodeintree findnodeintree64
+#define findnsec3node findnsec3node64
+#define flush_deletions flush_deletions64
+#define free_acachearray free_acachearray64
+#define free_noqname free_noqname64
+#define free_rbtdb free_rbtdb64
+#define free_rbtdb_callback free_rbtdb_callback64
+#define free_rdataset free_rdataset64
+#define getnsec3parameters getnsec3parameters64
+#define getoriginnode getoriginnode64
+#define getrrsetstats getrrsetstats64
+#define getsigningtime getsigningtime64
+#define isdnssec isdnssec64
+#define ispersistent ispersistent64
+#define issecure issecure64
+#define iszonesecure iszonesecure64
+#define loading_addrdataset loading_addrdataset64
+#define loadnode loadnode64
+#define matchparams matchparams64
+#define maybe_free_rbtdb maybe_free_rbtdb64
+#define new_reference new_reference64
+#define newversion newversion64
+#define nodecount nodecount64
+#define overmem overmem64
+#define previous_closest_nsec previous_closest_nsec64
+#define printnode printnode64
+#define prune_tree prune_tree64
+#define rdataset_clone rdataset_clone64
+#define rdataset_count rdataset_count64
+#define rdataset_current rdataset_current64
+#define rdataset_disassociate rdataset_disassociate64
+#define rdataset_expire rdataset_expire64
+#define rdataset_first rdataset_first64
+#define rdataset_getadditional rdataset_getadditional64
+#define rdataset_getclosest rdataset_getclosest64
+#define rdataset_getnoqname rdataset_getnoqname64
+#define rdataset_next rdataset_next64
+#define rdataset_putadditional rdataset_putadditional64
+#define rdataset_setadditional rdataset_setadditional64
+#define rdataset_settrust rdataset_settrust64
+#define rdatasetiter_current rdatasetiter_current64
+#define rdatasetiter_destroy rdatasetiter_destroy64
+#define rdatasetiter_first rdatasetiter_first64
+#define rdatasetiter_next rdatasetiter_next64
+#define reactivate_node reactivate_node64
+#define resign_delete resign_delete64
+#define resign_insert resign_insert64
+#define resign_sooner resign_sooner64
+#define resigned resigned64
+#define rpz_enabled rpz_enabled64
+#define rpz_findips rpz_findips64
+#define set_index set_index64
+#define set_ttl set_ttl64
+#define setsigningtime setsigningtime64
+#define settask settask64
+#define setup_delegation setup_delegation64
+#define subtractrdataset subtractrdataset64
+#define ttl_sooner ttl_sooner64
+#define update_header update_header64
+#define update_rrsetstats update_rrsetstats64
+#define zone_find zone_find64
+#define zone_findrdataset zone_findrdataset64
+#define zone_findzonecut zone_findzonecut64
+#define zone_zonecut_callback zone_zonecut_callback64
+
#else
typedef isc_uint32_t rbtdb_serial_t;
#endif
@@ -537,6 +656,8 @@ static void overmem_purge(dns_rbtdb_t *rbtdb, unsigned int locknum_start,
isc_stdtime_t now, isc_boolean_t tree_locked);
static isc_result_t resign_insert(dns_rbtdb_t *rbtdb, int idx,
rdatasetheader_t *newheader);
+static void resign_delete(dns_rbtdb_t *rbtdb, rbtdb_version_t *version,
+ rdatasetheader_t *header);
static void prune_tree(isc_task_t *task, isc_event_t *event);
static void rdataset_settrust(dns_rdataset_t *rdataset, dns_trust_t trust);
static void rdataset_expire(dns_rdataset_t *rdataset);
@@ -774,7 +895,7 @@ resign_sooner(void *v1, void *v2) {
rdatasetheader_t *h1 = v1;
rdatasetheader_t *h2 = v2;
- if (h1->resign < h2->resign)
+ if (isc_serial_lt(h1->resign, h2->resign))
return (ISC_TRUE);
return (ISC_FALSE);
}
@@ -2372,8 +2493,18 @@ closeversion(dns_db_t *db, dns_dbversion_t **versionp, isc_boolean_t commit) {
lock = &rbtdb->node_locks[header->node->locknum].lock;
NODE_LOCK(lock, isc_rwlocktype_write);
- if (rollback)
- resign_insert(rbtdb, header->node->locknum, header);
+ if (rollback && !IGNORE(header)) {
+ isc_result_t result;
+ result = resign_insert(rbtdb, header->node->locknum,
+ header);
+ if (result != ISC_R_SUCCESS)
+ isc_log_write(dns_lctx,
+ DNS_LOGCATEGORY_DATABASE,
+ DNS_LOGMODULE_ZONE, ISC_LOG_ERROR,
+ "Unable to reinsert header to "
+ "re-signing heap: %s\n",
+ dns_result_totext(result));
+ }
decrement_reference(rbtdb, header->node, least_serial,
isc_rwlocktype_write, isc_rwlocktype_none,
ISC_FALSE);
@@ -5874,10 +6005,28 @@ resign_insert(dns_rbtdb_t *rbtdb, int idx, rdatasetheader_t *newheader) {
return (result);
}
+static void
+resign_delete(dns_rbtdb_t *rbtdb, rbtdb_version_t *version,
+ rdatasetheader_t *header)
+{
+ /*
+ * Remove the old header from the heap
+ */
+ if (header != NULL && header->heap_index != 0) {
+ isc_heap_delete(rbtdb->heaps[header->node->locknum],
+ header->heap_index);
+ header->heap_index = 0;
+ if (version != NULL) {
+ new_reference(rbtdb, header->node);
+ ISC_LIST_APPEND(version->resigned_list, header, link);
+ }
+ }
+}
+
static isc_result_t
-add(dns_rbtdb_t *rbtdb, dns_rbtnode_t *rbtnode, rbtdb_version_t *rbtversion,
- rdatasetheader_t *newheader, unsigned int options, isc_boolean_t loading,
- dns_rdataset_t *addedrdataset, isc_stdtime_t now)
+add32(dns_rbtdb_t *rbtdb, dns_rbtnode_t *rbtnode, rbtdb_version_t *rbtversion,
+ rdatasetheader_t *newheader, unsigned int options, isc_boolean_t loading,
+ dns_rdataset_t *addedrdataset, isc_stdtime_t now)
{
rbtdb_changed_t *changed = NULL;
rdatasetheader_t *topheader, *topheader_prev, *header, *sigheader;
@@ -6211,6 +6360,19 @@ add(dns_rbtdb_t *rbtdb, dns_rbtnode_t *rbtnode, rbtdb_version_t *rbtversion,
*/
newheader->down = NULL;
free_rdataset(rbtdb, rbtdb->common.mctx, header);
+
+ idx = newheader->node->locknum;
+ if (IS_CACHE(rbtdb)) {
+ ISC_LIST_PREPEND(rbtdb->rdatasets[idx],
+ newheader, link);
+ INSIST(rbtdb->heaps != NULL);
+ (void)isc_heap_insert(rbtdb->heaps[idx],
+ newheader);
+ } else if (RESIGN(newheader)) {
+ result = resign_insert(rbtdb, idx, newheader);
+ if (result != ISC_R_SUCCESS)
+ return (result);
+ }
} else {
newheader->down = topheader;
topheader->next = newheader;
@@ -6238,9 +6400,14 @@ add(dns_rbtdb_t *rbtdb, dns_rbtnode_t *rbtnode, rbtdb_version_t *rbtversion,
* will not leak... for long.
*/
INSIST(rbtdb->heaps != NULL);
- isc_heap_insert(rbtdb->heaps[idx], newheader);
- } else if (RESIGN(newheader))
- resign_insert(rbtdb, idx, newheader);
+ (void)isc_heap_insert(rbtdb->heaps[idx],
+ newheader);
+ } else if (RESIGN(newheader)) {
+ resign_delete(rbtdb, rbtversion, header);
+ result = resign_insert(rbtdb, idx, newheader);
+ if (result != ISC_R_SUCCESS)
+ return (result);
+ }
}
} else {
/*
@@ -6292,7 +6459,10 @@ add(dns_rbtdb_t *rbtdb, dns_rbtnode_t *rbtnode, rbtdb_version_t *rbtversion,
newheader, link);
isc_heap_insert(rbtdb->heaps[idx], newheader);
} else if (RESIGN(newheader)) {
- resign_insert(rbtdb, idx, newheader);
+ resign_delete(rbtdb, rbtversion, header);
+ result = resign_insert(rbtdb, idx, newheader);
+ if (result != ISC_R_SUCCESS)
+ return (result);
}
}
@@ -6601,8 +6771,8 @@ addrdataset(dns_db_t *db, dns_dbnode_t *node, dns_dbversion_t *version,
}
if (result == ISC_R_SUCCESS)
- result = add(rbtdb, rbtnode, rbtversion, newheader, options,
- ISC_FALSE, addedrdataset, now);
+ result = add32(rbtdb, rbtnode, rbtversion, newheader, options,
+ ISC_FALSE, addedrdataset, now);
if (result == ISC_R_SUCCESS && delegating)
rbtnode->find_callback = 1;
@@ -6778,6 +6948,7 @@ subtractrdataset(dns_db_t *db, dns_dbnode_t *node, dns_dbversion_t *version,
topheader->next = newheader;
rbtnode->dirty = 1;
changed->dirty = ISC_TRUE;
+ resign_delete(rbtdb, rbtversion, header);
} else {
/*
* The rdataset doesn't exist, so we don't need to do anything
@@ -6847,8 +7018,8 @@ deleterdataset(dns_db_t *db, dns_dbnode_t *node, dns_dbversion_t *version,
NODE_LOCK(&rbtdb->node_locks[rbtnode->locknum].lock,
isc_rwlocktype_write);
- result = add(rbtdb, rbtnode, rbtversion, newheader, DNS_DBADD_FORCE,
- ISC_FALSE, NULL, 0);
+ result = add32(rbtdb, rbtnode, rbtversion, newheader, DNS_DBADD_FORCE,
+ ISC_FALSE, NULL, 0);
NODE_UNLOCK(&rbtdb->node_locks[rbtnode->locknum].lock,
isc_rwlocktype_write);
@@ -7042,8 +7213,8 @@ loading_addrdataset(void *arg, dns_name_t *name, dns_rdataset_t *rdataset) {
} else
newheader->resign = 0;
- result = add(rbtdb, node, rbtdb->current_version, newheader,
- DNS_DBADD_MERGE, ISC_TRUE, NULL, 0);
+ result = add32(rbtdb, node, rbtdb->current_version, newheader,
+ DNS_DBADD_MERGE, ISC_TRUE, NULL, 0);
if (result == ISC_R_SUCCESS &&
delegating_type(rbtdb, node, rdataset->type))
node->find_callback = 1;
@@ -7411,6 +7582,9 @@ resigned(dns_db_t *db, dns_rdataset_t *rdataset, dns_dbversion_t *version)
INSIST(header != NULL);
header--;
+ if (header->heap_index == 0)
+ return;
+
RWLOCK(&rbtdb->tree_lock, isc_rwlocktype_write);
NODE_LOCK(&rbtdb->node_locks[node->locknum].lock,
isc_rwlocktype_write);
@@ -7418,11 +7592,7 @@ resigned(dns_db_t *db, dns_rdataset_t *rdataset, dns_dbversion_t *version)
* Delete from heap and save to re-signed list so that it can
* be restored if we backout of this change.
*/
- new_reference(rbtdb, node);
- isc_heap_delete(rbtdb->heaps[node->locknum], header->heap_index);
- header->heap_index = 0;
- ISC_LIST_APPEND(rbtversion->resigned_list, header, link);
-
+ resign_delete(rbtdb, rbtversion, header);
NODE_UNLOCK(&rbtdb->node_locks[node->locknum].lock,
isc_rwlocktype_write);
RWUNLOCK(&rbtdb->tree_lock, isc_rwlocktype_write);
diff --git a/lib/dns/rcode.c b/lib/dns/rcode.c
index 69007f881efd..2fdb751e6dbf 100644
--- a/lib/dns/rcode.c
+++ b/lib/dns/rcode.c
@@ -212,11 +212,13 @@ maybe_numeric(unsigned int *valuep, isc_textregion_t *source,
return (ISC_R_BADNUMBER);
/*
- * We have a potential number. Try to parse it with
- * isc_parse_uint32(). isc_parse_uint32() requires
+ * We have a potential number. Try to parse it with
+ * isc_parse_uint32(). isc_parse_uint32() requires
* null termination, so we must make a copy.
*/
- strncpy(buffer, source->base, NUMBERSIZE);
+ strncpy(buffer, source->base, sizeof(buffer));
+ buffer[sizeof(buffer) - 1] = '\0';
+
INSIST(buffer[source->length] == '\0');
result = isc_parse_uint32(&n, buffer, 10);
diff --git a/lib/dns/rdata.c b/lib/dns/rdata.c
index 5bdd1255b5f7..08bfa34aa678 100644
--- a/lib/dns/rdata.c
+++ b/lib/dns/rdata.c
@@ -116,7 +116,7 @@ typedef struct dns_rdata_textctx {
} dns_rdata_textctx_t;
static isc_result_t
-txt_totext(isc_region_t *source, isc_buffer_t *target);
+txt_totext(isc_region_t *source, isc_boolean_t quote, isc_buffer_t *target);
static isc_result_t
txt_fromtext(isc_textregion_t *source, isc_buffer_t *target);
@@ -130,9 +130,6 @@ multitxt_totext(isc_region_t *source, isc_buffer_t *target);
static isc_result_t
multitxt_fromtext(isc_textregion_t *source, isc_buffer_t *target);
-static isc_result_t
-multitxt_fromwire(isc_buffer_t *source, isc_buffer_t *target);
-
static isc_boolean_t
name_prefix(dns_name_t *name, dns_name_t *origin, dns_name_t *target);
@@ -1131,7 +1128,7 @@ name_length(dns_name_t *name) {
}
static isc_result_t
-txt_totext(isc_region_t *source, isc_buffer_t *target) {
+txt_totext(isc_region_t *source, isc_boolean_t quote, isc_buffer_t *target) {
unsigned int tl;
unsigned int n;
unsigned char *sp;
@@ -1146,13 +1143,20 @@ txt_totext(isc_region_t *source, isc_buffer_t *target) {
n = *sp++;
REQUIRE(n + 1 <= source->length);
+ if (n == 0U)
+ REQUIRE(quote == ISC_TRUE);
- if (tl < 1)
- return (ISC_R_NOSPACE);
- *tp++ = '"';
- tl--;
+ if (quote) {
+ if (tl < 1)
+ return (ISC_R_NOSPACE);
+ *tp++ = '"';
+ tl--;
+ }
while (n--) {
- if (*sp < 0x20 || *sp >= 0x7f) {
+ /*
+ * \DDD space (0x20) if not quoting.
+ */
+ if (*sp < (quote ? 0x20 : 0x21) || *sp >= 0x7f) {
if (tl < 4)
return (ISC_R_NOSPACE);
*tp++ = 0x5c;
@@ -1163,8 +1167,13 @@ txt_totext(isc_region_t *source, isc_buffer_t *target) {
tl -= 4;
continue;
}
- /* double quote, semi-colon, backslash */
- if (*sp == 0x22 || *sp == 0x3b || *sp == 0x5c) {
+ /*
+ * Escape double quote, semi-colon, backslash.
+ * If we are not enclosing the string in double
+ * quotes also escape at sign.
+ */
+ if (*sp == 0x22 || *sp == 0x3b || *sp == 0x5c ||
+ (!quote && *sp == 0x40)) {
if (tl < 2)
return (ISC_R_NOSPACE);
*tp++ = '\\';
@@ -1175,10 +1184,12 @@ txt_totext(isc_region_t *source, isc_buffer_t *target) {
*tp++ = *sp++;
tl--;
}
- if (tl < 1)
- return (ISC_R_NOSPACE);
- *tp++ = '"';
- tl--;
+ if (quote) {
+ if (tl < 1)
+ return (ISC_R_NOSPACE);
+ *tp++ = '"';
+ tl--;
+ }
isc_buffer_add(target, (unsigned int)(tp - (char *)region.base));
isc_region_consume(source, *source->base + 1);
return (ISC_R_SUCCESS);
@@ -1274,6 +1285,9 @@ txt_fromwire(isc_buffer_t *source, isc_buffer_t *target) {
return (ISC_R_SUCCESS);
}
+/*
+ * Conversion of TXT-like rdata fields without length limits.
+ */
static isc_result_t
multitxt_totext(isc_region_t *source, isc_buffer_t *target) {
unsigned int tl;
@@ -1292,9 +1306,8 @@ multitxt_totext(isc_region_t *source, isc_buffer_t *target) {
*tp++ = '"';
tl--;
do {
- n0 = n = *sp++;
-
- REQUIRE(n0 + 1 <= source->length);
+ n = source->length;
+ n0 = source->length - 1;
while (n--) {
if (*sp < 0x20 || *sp >= 0x7f) {
@@ -1346,17 +1359,11 @@ multitxt_fromtext(isc_textregion_t *source, isc_buffer_t *target) {
do {
isc_buffer_availableregion(target, &tregion);
- t0 = tregion.base;
+ t0 = t = tregion.base;
nrem = tregion.length;
if (nrem < 1)
return (ISC_R_NOSPACE);
- /* length byte */
- t = t0;
- nrem--;
- t++;
- /* 255 byte character-string slice */
- if (nrem > 255)
- nrem = 255;
+
while (n != 0) {
--n;
c = (*s++) & 0xff;
@@ -1390,39 +1397,9 @@ multitxt_fromtext(isc_textregion_t *source, isc_buffer_t *target) {
}
if (escape)
return (DNS_R_SYNTAX);
- *t0 = (unsigned char)(t - t0 - 1);
- isc_buffer_add(target, *t0 + 1);
- } while (n != 0);
- return (ISC_R_SUCCESS);
-}
-
-static isc_result_t
-multitxt_fromwire(isc_buffer_t *source, isc_buffer_t *target) {
- unsigned int n;
- isc_region_t sregion;
- isc_region_t tregion;
-
- isc_buffer_activeregion(source, &sregion);
- if (sregion.length == 0)
- return(ISC_R_UNEXPECTEDEND);
- n = 256U;
- do {
- if (n != 256U)
- return (DNS_R_SYNTAX);
- n = *sregion.base + 1;
- if (n > sregion.length)
- return (ISC_R_UNEXPECTEDEND);
- isc_buffer_availableregion(target, &tregion);
- if (n > tregion.length)
- return (ISC_R_NOSPACE);
-
- if (tregion.base != sregion.base)
- memmove(tregion.base, sregion.base, n);
- isc_buffer_forward(source, n);
- isc_buffer_add(target, n);
- isc_buffer_activeregion(source, &sregion);
- } while (sregion.length != 0);
+ isc_buffer_add(target, t - t0);
+ } while (n != 0);
return (ISC_R_SUCCESS);
}
diff --git a/lib/dns/rdata/generic/caa_257.c b/lib/dns/rdata/generic/caa_257.c
new file mode 100644
index 000000000000..993e3267e623
--- /dev/null
+++ b/lib/dns/rdata/generic/caa_257.c
@@ -0,0 +1,370 @@
+/*
+ * Copyright (C) 2014 Internet Systems Consortium, Inc. ("ISC")
+ *
+ * Permission to use, copy, modify, and/or distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
+ * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+ * AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
+ * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+ * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
+ * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+ * PERFORMANCE OF THIS SOFTWARE.
+ */
+
+#ifndef GENERIC_CAA_257_C
+#define GENERIC_CAA_257_C 1
+
+#define RRTYPE_CAA_ATTRIBUTES (0)
+
+static unsigned char const alphanumeric[256] = {
+ /* 0x00-0x0f */ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+ /* 0x10-0x1f */ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+ /* 0x20-0x2f */ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+ /* 0x30-0x3f */ 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 0, 0, 0, 0, 0, 0,
+ /* 0x40-0x4f */ 0, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
+ /* 0x50-0x5f */ 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 0, 0, 0, 0, 0,
+ /* 0x60-0x6f */ 0, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
+ /* 0x70-0x7f */ 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 0, 0, 0, 0, 0,
+ /* 0x80-0x8f */ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+ /* 0x90-0x9f */ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+ /* 0xa0-0xaf */ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+ /* 0xb0-0xbf */ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+ /* 0xc0-0xcf */ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+ /* 0xd0-0xdf */ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+ /* 0xe0-0xef */ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+ /* 0xf0-0xff */ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+};
+
+static inline isc_result_t
+fromtext_caa(ARGS_FROMTEXT) {
+ isc_token_t token;
+ isc_textregion_t tr;
+ isc_uint8_t flags;
+ unsigned int i;
+
+ REQUIRE(type == 257);
+
+ UNUSED(type);
+ UNUSED(rdclass);
+ UNUSED(origin);
+ UNUSED(options);
+ UNUSED(callbacks);
+
+ /* Flags. */
+ RETERR(isc_lex_getmastertoken(lexer, &token, isc_tokentype_number,
+ ISC_FALSE));
+ if (token.value.as_ulong > 255U)
+ RETTOK(ISC_R_RANGE);
+ flags = token.value.as_ulong;
+ RETERR(uint8_tobuffer(flags, target));
+
+ /*
+ * Tag
+ */
+ RETERR(isc_lex_getmastertoken(lexer, &token, isc_tokentype_string,
+ ISC_FALSE));
+ tr = token.value.as_textregion;
+ for (i = 0; i < tr.length; i++)
+ if (!alphanumeric[(unsigned int) tr.base[i]])
+ RETTOK(DNS_R_SYNTAX);
+ RETERR(uint8_tobuffer(tr.length, target));
+ RETERR(mem_tobuffer(target, tr.base, tr.length));
+
+ /*
+ * Value
+ */
+ RETERR(isc_lex_getmastertoken(lexer, &token,
+ isc_tokentype_qstring, ISC_FALSE));
+ if (token.type != isc_tokentype_qstring &&
+ token.type != isc_tokentype_string)
+ RETERR(DNS_R_SYNTAX);
+ RETERR(multitxt_fromtext(&token.value.as_textregion, target));
+ return (ISC_R_SUCCESS);
+}
+
+static inline isc_result_t
+totext_caa(ARGS_TOTEXT) {
+ isc_region_t region;
+ isc_uint8_t flags;
+ char buf[256];
+
+ UNUSED(tctx);
+
+ REQUIRE(rdata->type == 257);
+ REQUIRE(rdata->length >= 3U);
+ REQUIRE(rdata->data != NULL);
+
+ dns_rdata_toregion(rdata, &region);
+
+ /*
+ * Flags
+ */
+ flags = uint8_consume_fromregion(&region);
+ sprintf(buf, "%u ", flags);
+ RETERR(str_totext(buf, target));
+
+ /*
+ * Tag
+ */
+ RETERR(txt_totext(&region, ISC_FALSE, target));
+ RETERR(str_totext(" ", target));
+
+ /*
+ * Value
+ */
+ RETERR(multitxt_totext(&region, target));
+ return (ISC_R_SUCCESS);
+}
+
+static inline isc_result_t
+fromwire_caa(ARGS_FROMWIRE) {
+ isc_region_t sr;
+ unsigned int len, i;
+
+ REQUIRE(type == 257);
+
+ UNUSED(type);
+ UNUSED(rdclass);
+ UNUSED(dctx);
+ UNUSED(options);
+
+ /*
+ * Flags
+ */
+ isc_buffer_activeregion(source, &sr);
+ if (sr.length < 2)
+ return (ISC_R_UNEXPECTEDEND);
+
+ /*
+ * Flags, tag length
+ */
+ RETERR(mem_tobuffer(target, sr.base, 2));
+ len = sr.base[1];
+ isc_region_consume(&sr, 2);
+ isc_buffer_forward(source, 2);
+
+ /*
+ * Zero length tag fields are illegal.
+ */
+ if (sr.length < len || len == 0)
+ RETERR(DNS_R_FORMERR);
+
+ /* Check the Tag's value */
+ for (i = 0; i < len; i++)
+ if (!alphanumeric[sr.base[i]])
+ RETERR(DNS_R_FORMERR);
+ /*
+ * Tag + Value
+ */
+ isc_buffer_forward(source, sr.length);
+ return (mem_tobuffer(target, sr.base, sr.length));
+}
+
+static inline isc_result_t
+towire_caa(ARGS_TOWIRE) {
+ isc_region_t region;
+
+ REQUIRE(rdata->type == 257);
+ REQUIRE(rdata->length >= 3U);
+ REQUIRE(rdata->data != NULL);
+
+ UNUSED(cctx);
+
+ dns_rdata_toregion(rdata, &region);
+ return (mem_tobuffer(target, region.base, region.length));
+}
+
+static inline int
+compare_caa(ARGS_COMPARE) {
+ isc_region_t r1, r2;
+
+ REQUIRE(rdata1->type == rdata2->type);
+ REQUIRE(rdata1->rdclass == rdata2->rdclass);
+ REQUIRE(rdata1->type == 257);
+ REQUIRE(rdata1->length >= 3U);
+ REQUIRE(rdata2->length >= 3U);
+ REQUIRE(rdata1->data != NULL);
+ REQUIRE(rdata2->data != NULL);
+
+ dns_rdata_toregion(rdata1, &r1);
+ dns_rdata_toregion(rdata2, &r2);
+ return (isc_region_compare(&r1, &r2));
+}
+
+static inline isc_result_t
+fromstruct_caa(ARGS_FROMSTRUCT) {
+ dns_rdata_caa_t *caa = source;
+ isc_region_t region;
+ unsigned int i;
+
+ REQUIRE(type == 257);
+ REQUIRE(source != NULL);
+ REQUIRE(caa->common.rdtype == type);
+ REQUIRE(caa->common.rdclass == rdclass);
+ REQUIRE(caa->tag != NULL && caa->tag_len != 0);
+ REQUIRE(caa->value != NULL);
+
+ UNUSED(type);
+ UNUSED(rdclass);
+
+ /*
+ * Flags
+ */
+ RETERR(uint8_tobuffer(caa->flags, target));
+
+ /*
+ * Tag length
+ */
+ RETERR(uint8_tobuffer(caa->tag_len, target));
+
+ /*
+ * Tag
+ */
+ region.base = caa->tag;
+ region.length = caa->tag_len;
+ for (i = 0; i < region.length; i++)
+ if (!alphanumeric[region.base[i]])
+ RETERR(DNS_R_SYNTAX);
+ RETERR(isc_buffer_copyregion(target, &region));
+
+ /*
+ * Value
+ */
+ region.base = caa->value;
+ region.length = caa->value_len;
+ return (isc_buffer_copyregion(target, &region));
+}
+
+static inline isc_result_t
+tostruct_caa(ARGS_TOSTRUCT) {
+ dns_rdata_caa_t *caa = target;
+ isc_region_t sr;
+
+ REQUIRE(rdata->type == 257);
+ REQUIRE(target != NULL);
+ REQUIRE(rdata->length >= 3U);
+ REQUIRE(rdata->data != NULL);
+
+ caa->common.rdclass = rdata->rdclass;
+ caa->common.rdtype = rdata->type;
+ ISC_LINK_INIT(&caa->common, link);
+
+ dns_rdata_toregion(rdata, &sr);
+
+ /*
+ * Flags
+ */
+ if (sr.length < 1)
+ return (ISC_R_UNEXPECTEDEND);
+ caa->flags = uint8_fromregion(&sr);
+ isc_region_consume(&sr, 1);
+
+ /*
+ * Tag length
+ */
+ if (sr.length < 1)
+ return (ISC_R_UNEXPECTEDEND);
+ caa->tag_len = uint8_fromregion(&sr);
+ isc_region_consume(&sr, 1);
+
+ /*
+ * Tag
+ */
+ if (sr.length < caa->tag_len)
+ return (ISC_R_UNEXPECTEDEND);
+ caa->tag = mem_maybedup(mctx, sr.base, caa->tag_len);
+ if (caa->tag == NULL)
+ return (ISC_R_NOMEMORY);
+ isc_region_consume(&sr, caa->tag_len);
+
+ /*
+ * Value
+ */
+ caa->value_len = sr.length;
+ caa->value = mem_maybedup(mctx, sr.base, sr.length);
+ if (caa->value == NULL)
+ return (ISC_R_NOMEMORY);
+
+ caa->mctx = mctx;
+ return (ISC_R_SUCCESS);
+}
+
+static inline void
+freestruct_caa(ARGS_FREESTRUCT) {
+ dns_rdata_caa_t *caa = (dns_rdata_caa_t *) source;
+
+ REQUIRE(source != NULL);
+ REQUIRE(caa->common.rdtype == 257);
+
+ if (caa->mctx == NULL)
+ return;
+
+ if (caa->tag != NULL)
+ isc_mem_free(caa->mctx, caa->tag);
+ if (caa->value != NULL)
+ isc_mem_free(caa->mctx, caa->value);
+ caa->mctx = NULL;
+}
+
+static inline isc_result_t
+additionaldata_caa(ARGS_ADDLDATA) {
+ REQUIRE(rdata->type == 257);
+ REQUIRE(rdata->data != NULL);
+ REQUIRE(rdata->length >= 3U);
+
+ UNUSED(rdata);
+ UNUSED(add);
+ UNUSED(arg);
+
+ return (ISC_R_SUCCESS);
+}
+
+static inline isc_result_t
+digest_caa(ARGS_DIGEST) {
+ isc_region_t r;
+
+ REQUIRE(rdata->type == 257);
+ REQUIRE(rdata->data != NULL);
+ REQUIRE(rdata->length >= 3U);
+
+ dns_rdata_toregion(rdata, &r);
+
+ return ((digest)(arg, &r));
+}
+
+static inline isc_boolean_t
+checkowner_caa(ARGS_CHECKOWNER) {
+
+ REQUIRE(type == 257);
+
+ UNUSED(name);
+ UNUSED(type);
+ UNUSED(rdclass);
+ UNUSED(wildcard);
+
+ return (ISC_TRUE);
+}
+
+static inline isc_boolean_t
+checknames_caa(ARGS_CHECKNAMES) {
+
+ REQUIRE(rdata->type == 257);
+ REQUIRE(rdata->data != NULL);
+ REQUIRE(rdata->length >= 3U);
+
+ UNUSED(rdata);
+ UNUSED(owner);
+ UNUSED(bad);
+
+ return (ISC_TRUE);
+}
+
+static inline int
+casecompare_caa(ARGS_COMPARE) {
+ return (compare_caa(rdata1, rdata2));
+}
+
+#endif /* GENERIC_CAA_257_C */
diff --git a/lib/dns/rdata/generic/caa_257.h b/lib/dns/rdata/generic/caa_257.h
new file mode 100644
index 000000000000..9432f0f7f1ad
--- /dev/null
+++ b/lib/dns/rdata/generic/caa_257.h
@@ -0,0 +1,32 @@
+/*
+ * Copyright (C) 2014 Internet Systems Consortium, Inc. ("ISC")
+ *
+ * Permission to use, copy, modify, and/or distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
+ * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+ * AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
+ * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+ * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
+ * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+ * PERFORMANCE OF THIS SOFTWARE.
+ */
+
+#ifndef GENERIC_CAA_257_H
+#define GENERIC_CAA_257_H 1
+
+/* $Id$ */
+
+typedef struct dns_rdata_caa {
+ dns_rdatacommon_t common;
+ isc_mem_t * mctx;
+ isc_uint8_t flags;
+ unsigned char * tag;
+ isc_uint8_t tag_len;
+ unsigned char *value;
+ isc_uint8_t value_len;
+} dns_rdata_caa_t;
+
+#endif /* GENERIC_CAA_257_H */
diff --git a/lib/dns/rdata/generic/cdnskey_60.c b/lib/dns/rdata/generic/cdnskey_60.c
new file mode 100644
index 000000000000..a1e681403b75
--- /dev/null
+++ b/lib/dns/rdata/generic/cdnskey_60.c
@@ -0,0 +1,378 @@
+/*
+ * Copyright (C) 2014 Internet Systems Consortium, Inc. ("ISC")
+ *
+ * Permission to use, copy, modify, and/or distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
+ * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+ * AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
+ * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+ * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
+ * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+ * PERFORMANCE OF THIS SOFTWARE.
+ */
+
+/* $Id$ */
+
+/*
+ * Reviewed: Wed Mar 15 16:47:10 PST 2000 by halley.
+ */
+
+/* RFC2535 */
+
+#ifndef RDATA_GENERIC_CDNSKEY_60_C
+#define RDATA_GENERIC_CDNSKEY_60_C
+
+#include <dst/dst.h>
+
+#define RRTYPE_CDNSKEY_ATTRIBUTES (DNS_RDATATYPEATTR_DNSSEC)
+
+static inline isc_result_t
+fromtext_cdnskey(ARGS_FROMTEXT) {
+ isc_result_t result;
+ isc_token_t token;
+ dns_secalg_t alg;
+ dns_secproto_t proto;
+ dns_keyflags_t flags;
+
+ REQUIRE(type == 60);
+
+ UNUSED(type);
+ UNUSED(rdclass);
+ UNUSED(origin);
+ UNUSED(options);
+ UNUSED(callbacks);
+
+ /* flags */
+ RETERR(isc_lex_getmastertoken(lexer, &token, isc_tokentype_string,
+ ISC_FALSE));
+ RETTOK(dns_keyflags_fromtext(&flags, &token.value.as_textregion));
+ RETERR(uint16_tobuffer(flags, target));
+
+ /* protocol */
+ RETERR(isc_lex_getmastertoken(lexer, &token, isc_tokentype_string,
+ ISC_FALSE));
+ RETTOK(dns_secproto_fromtext(&proto, &token.value.as_textregion));
+ RETERR(mem_tobuffer(target, &proto, 1));
+
+ /* algorithm */
+ RETERR(isc_lex_getmastertoken(lexer, &token, isc_tokentype_string,
+ ISC_FALSE));
+ RETTOK(dns_secalg_fromtext(&alg, &token.value.as_textregion));
+ RETERR(mem_tobuffer(target, &alg, 1));
+
+ /* No Key? */
+ if ((flags & 0xc000) == 0xc000)
+ return (ISC_R_SUCCESS);
+
+ result = isc_base64_tobuffer(lexer, target, -1);
+ if (result != ISC_R_SUCCESS)
+ return (result);
+
+ /* Ensure there's at least enough data to compute a key ID for MD5 */
+ if (alg == DST_ALG_RSAMD5 && isc_buffer_usedlength(target) < 7)
+ return (ISC_R_UNEXPECTEDEND);
+
+ return (ISC_R_SUCCESS);
+}
+
+static inline isc_result_t
+totext_cdnskey(ARGS_TOTEXT) {
+ isc_region_t sr;
+ char buf[sizeof("64000")];
+ unsigned int flags;
+ unsigned char algorithm;
+ char algbuf[DNS_NAME_FORMATSIZE];
+ const char *keyinfo;
+
+ REQUIRE(rdata->type == 60);
+ REQUIRE(rdata->length != 0);
+
+ dns_rdata_toregion(rdata, &sr);
+
+ /* flags */
+ flags = uint16_fromregion(&sr);
+ isc_region_consume(&sr, 2);
+ sprintf(buf, "%u", flags);
+ RETERR(str_totext(buf, target));
+ RETERR(str_totext(" ", target));
+ if ((flags & DNS_KEYFLAG_KSK) != 0) {
+ if (flags & DNS_KEYFLAG_REVOKE)
+ keyinfo = "revoked KSK";
+ else
+ keyinfo = "KSK";
+ } else
+ keyinfo = "ZSK";
+
+ /* protocol */
+ sprintf(buf, "%u", sr.base[0]);
+ isc_region_consume(&sr, 1);
+ RETERR(str_totext(buf, target));
+ RETERR(str_totext(" ", target));
+
+ /* algorithm */
+ algorithm = sr.base[0];
+ sprintf(buf, "%u", algorithm);
+ isc_region_consume(&sr, 1);
+ RETERR(str_totext(buf, target));
+
+ /* No Key? */
+ if ((flags & 0xc000) == 0xc000)
+ return (ISC_R_SUCCESS);
+
+ if ((tctx->flags & DNS_STYLEFLAG_RRCOMMENT) != 0 &&
+ algorithm == DNS_KEYALG_PRIVATEDNS) {
+ dns_name_t name;
+ dns_name_init(&name, NULL);
+ dns_name_fromregion(&name, &sr);
+ dns_name_format(&name, algbuf, sizeof(algbuf));
+ } else {
+ dns_secalg_format((dns_secalg_t) algorithm, algbuf,
+ sizeof(algbuf));
+ }
+
+ /* key */
+ if ((tctx->flags & DNS_STYLEFLAG_MULTILINE) != 0)
+ RETERR(str_totext(" (", target));
+ RETERR(str_totext(tctx->linebreak, target));
+ if (tctx->width == 0) /* No splitting */
+ RETERR(isc_base64_totext(&sr, 0, "", target));
+ else
+ RETERR(isc_base64_totext(&sr, tctx->width - 2,
+ tctx->linebreak, target));
+
+ if ((tctx->flags & DNS_STYLEFLAG_RRCOMMENT) != 0)
+ RETERR(str_totext(tctx->linebreak, target));
+ else if ((tctx->flags & DNS_STYLEFLAG_MULTILINE) != 0)
+ RETERR(str_totext(" ", target));
+
+ if ((tctx->flags & DNS_STYLEFLAG_MULTILINE) != 0)
+ RETERR(str_totext(")", target));
+
+ if ((tctx->flags & DNS_STYLEFLAG_RRCOMMENT) != 0) {
+ isc_region_t tmpr;
+
+ RETERR(str_totext(" ; ", target));
+ RETERR(str_totext(keyinfo, target));
+ RETERR(str_totext("; alg = ", target));
+ RETERR(str_totext(algbuf, target));
+ RETERR(str_totext("; key id = ", target));
+ dns_rdata_toregion(rdata, &tmpr);
+ sprintf(buf, "%u", dst_region_computeid(&tmpr, algorithm));
+ RETERR(str_totext(buf, target));
+ }
+ return (ISC_R_SUCCESS);
+}
+
+static inline isc_result_t
+fromwire_cdnskey(ARGS_FROMWIRE) {
+ unsigned char algorithm;
+ isc_region_t sr;
+
+ REQUIRE(type == 60);
+
+ UNUSED(type);
+ UNUSED(rdclass);
+ UNUSED(dctx);
+ UNUSED(options);
+
+ isc_buffer_activeregion(source, &sr);
+ if (sr.length < 4)
+ return (ISC_R_UNEXPECTEDEND);
+
+ algorithm = sr.base[3];
+ RETERR(mem_tobuffer(target, sr.base, 4));
+ isc_region_consume(&sr, 4);
+ isc_buffer_forward(source, 4);
+
+ if (algorithm == DNS_KEYALG_PRIVATEDNS) {
+ dns_name_t name;
+ dns_decompress_setmethods(dctx, DNS_COMPRESS_NONE);
+ dns_name_init(&name, NULL);
+ RETERR(dns_name_fromwire(&name, source, dctx, options, target));
+ }
+
+ /*
+ * RSAMD5 computes key ID differently from other
+ * algorithms: we need to ensure there's enough data
+ * present for the computation
+ */
+ if (algorithm == DST_ALG_RSAMD5 && sr.length < 3)
+ return (ISC_R_UNEXPECTEDEND);
+
+ isc_buffer_activeregion(source, &sr);
+ isc_buffer_forward(source, sr.length);
+ return (mem_tobuffer(target, sr.base, sr.length));
+}
+
+static inline isc_result_t
+towire_cdnskey(ARGS_TOWIRE) {
+ isc_region_t sr;
+
+ REQUIRE(rdata->type == 60);
+ REQUIRE(rdata->length != 0);
+
+ UNUSED(cctx);
+
+ dns_rdata_toregion(rdata, &sr);
+ return (mem_tobuffer(target, sr.base, sr.length));
+}
+
+static inline int
+compare_cdnskey(ARGS_COMPARE) {
+ isc_region_t r1;
+ isc_region_t r2;
+
+ REQUIRE(rdata1->type == rdata2->type);
+ REQUIRE(rdata1->rdclass == rdata2->rdclass);
+ REQUIRE(rdata1->type == 60);
+ REQUIRE(rdata1->length != 0);
+ REQUIRE(rdata2->length != 0);
+
+ dns_rdata_toregion(rdata1, &r1);
+ dns_rdata_toregion(rdata2, &r2);
+ return (isc_region_compare(&r1, &r2));
+}
+
+static inline isc_result_t
+fromstruct_cdnskey(ARGS_FROMSTRUCT) {
+ dns_rdata_cdnskey_t *dnskey = source;
+
+ REQUIRE(type == 60);
+ REQUIRE(source != NULL);
+ REQUIRE(dnskey->common.rdtype == type);
+ REQUIRE(dnskey->common.rdclass == rdclass);
+
+ UNUSED(type);
+ UNUSED(rdclass);
+
+ /* Flags */
+ RETERR(uint16_tobuffer(dnskey->flags, target));
+
+ /* Protocol */
+ RETERR(uint8_tobuffer(dnskey->protocol, target));
+
+ /* Algorithm */
+ RETERR(uint8_tobuffer(dnskey->algorithm, target));
+
+ /* Data */
+ return (mem_tobuffer(target, dnskey->data, dnskey->datalen));
+}
+
+static inline isc_result_t
+tostruct_cdnskey(ARGS_TOSTRUCT) {
+ dns_rdata_cdnskey_t *dnskey = target;
+ isc_region_t sr;
+
+ REQUIRE(rdata->type == 60);
+ REQUIRE(target != NULL);
+ REQUIRE(rdata->length != 0);
+
+ dnskey->common.rdclass = rdata->rdclass;
+ dnskey->common.rdtype = rdata->type;
+ ISC_LINK_INIT(&dnskey->common, link);
+
+ dns_rdata_toregion(rdata, &sr);
+
+ /* Flags */
+ if (sr.length < 2)
+ return (ISC_R_UNEXPECTEDEND);
+ dnskey->flags = uint16_fromregion(&sr);
+ isc_region_consume(&sr, 2);
+
+ /* Protocol */
+ if (sr.length < 1)
+ return (ISC_R_UNEXPECTEDEND);
+ dnskey->protocol = uint8_fromregion(&sr);
+ isc_region_consume(&sr, 1);
+
+ /* Algorithm */
+ if (sr.length < 1)
+ return (ISC_R_UNEXPECTEDEND);
+ dnskey->algorithm = uint8_fromregion(&sr);
+ isc_region_consume(&sr, 1);
+
+ /* Data */
+ dnskey->datalen = sr.length;
+ dnskey->data = mem_maybedup(mctx, sr.base, dnskey->datalen);
+ if (dnskey->data == NULL)
+ return (ISC_R_NOMEMORY);
+
+ dnskey->mctx = mctx;
+ return (ISC_R_SUCCESS);
+}
+
+static inline void
+freestruct_cdnskey(ARGS_FREESTRUCT) {
+ dns_rdata_cdnskey_t *dnskey = (dns_rdata_cdnskey_t *) source;
+
+ REQUIRE(source != NULL);
+ REQUIRE(dnskey->common.rdtype == 60);
+
+ if (dnskey->mctx == NULL)
+ return;
+
+ if (dnskey->data != NULL)
+ isc_mem_free(dnskey->mctx, dnskey->data);
+ dnskey->mctx = NULL;
+}
+
+static inline isc_result_t
+additionaldata_cdnskey(ARGS_ADDLDATA) {
+ REQUIRE(rdata->type == 60);
+
+ UNUSED(rdata);
+ UNUSED(add);
+ UNUSED(arg);
+
+ return (ISC_R_SUCCESS);
+}
+
+static inline isc_result_t
+digest_cdnskey(ARGS_DIGEST) {
+ isc_region_t r;
+
+ REQUIRE(rdata->type == 60);
+
+ dns_rdata_toregion(rdata, &r);
+
+ return ((digest)(arg, &r));
+}
+
+static inline isc_boolean_t
+checkowner_cdnskey(ARGS_CHECKOWNER) {
+
+ REQUIRE(type == 60);
+
+ UNUSED(name);
+ UNUSED(type);
+ UNUSED(rdclass);
+ UNUSED(wildcard);
+
+ return (ISC_TRUE);
+}
+
+static inline isc_boolean_t
+checknames_cdnskey(ARGS_CHECKNAMES) {
+
+ REQUIRE(rdata->type == 60);
+
+ UNUSED(rdata);
+ UNUSED(owner);
+ UNUSED(bad);
+
+ return (ISC_TRUE);
+}
+
+static inline int
+casecompare_cdnskey(ARGS_COMPARE) {
+
+ /*
+ * Treat ALG 253 (private DNS) subtype name case sensistively.
+ */
+ return (compare_cdnskey(rdata1, rdata2));
+}
+
+#endif /* RDATA_GENERIC_CDNSKEY_60_C */
diff --git a/lib/dns/rdata/generic/cdnskey_60.h b/lib/dns/rdata/generic/cdnskey_60.h
new file mode 100644
index 000000000000..d284177c118d
--- /dev/null
+++ b/lib/dns/rdata/generic/cdnskey_60.h
@@ -0,0 +1,32 @@
+/*
+ * Copyright (C) 2014 Internet Systems Consortium, Inc. ("ISC")
+ *
+ * Permission to use, copy, modify, and/or distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
+ * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+ * AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
+ * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+ * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
+ * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+ * PERFORMANCE OF THIS SOFTWARE.
+ */
+
+#ifndef GENERIC_CDNSKEY_60_H
+#define GENERIC_CDNSKEY_60_H 1
+
+/* CDNSKEY records have the same RDATA fields as DNSKEY records. */
+typedef struct dns_rdata_cdnskey {
+ dns_rdatacommon_t common;
+ isc_mem_t * mctx;
+ isc_uint16_t flags;
+ isc_uint8_t protocol;
+ isc_uint8_t algorithm;
+ isc_uint16_t datalen;
+ unsigned char * data;
+} dns_rdata_cdnskey_t;
+
+
+#endif /* GENERIC_CDNSKEY_60_H */
diff --git a/lib/dns/rdata/generic/cds_59.c b/lib/dns/rdata/generic/cds_59.c
new file mode 100644
index 000000000000..fcf49662c46a
--- /dev/null
+++ b/lib/dns/rdata/generic/cds_59.c
@@ -0,0 +1,354 @@
+/*
+ * Copyright (C) 2014 Internet Systems Consortium, Inc. ("ISC")
+ *
+ * Permission to use, copy, modify, and/or distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
+ * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+ * AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
+ * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+ * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
+ * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+ * PERFORMANCE OF THIS SOFTWARE.
+ */
+
+/* $Id$ */
+
+/* draft-ietf-dnsext-delegation-signer-05.txt */
+
+#ifndef RDATA_GENERIC_CDS_59_C
+#define RDATA_GENERIC_CDS_59_C
+
+#define RRTYPE_CDS_ATTRIBUTES \
+ (DNS_RDATATYPEATTR_DNSSEC|DNS_RDATATYPEATTR_ATPARENT)
+
+#include <isc/sha1.h>
+#include <isc/sha2.h>
+
+#include <dns/ds.h>
+
+static inline isc_result_t
+fromtext_cds(ARGS_FROMTEXT) {
+ isc_token_t token;
+ unsigned char c;
+ int length;
+
+ REQUIRE(type == 59);
+
+ UNUSED(type);
+ UNUSED(rdclass);
+ UNUSED(origin);
+ UNUSED(options);
+ UNUSED(callbacks);
+
+ /*
+ * Key tag.
+ */
+ RETERR(isc_lex_getmastertoken(lexer, &token, isc_tokentype_number,
+ ISC_FALSE));
+ if (token.value.as_ulong > 0xffffU)
+ RETTOK(ISC_R_RANGE);
+ RETERR(uint16_tobuffer(token.value.as_ulong, target));
+
+ /*
+ * Algorithm.
+ */
+ RETERR(isc_lex_getmastertoken(lexer, &token, isc_tokentype_string,
+ ISC_FALSE));
+ RETTOK(dns_secalg_fromtext(&c, &token.value.as_textregion));
+ RETERR(mem_tobuffer(target, &c, 1));
+
+ /*
+ * Digest type.
+ */
+ RETERR(isc_lex_getmastertoken(lexer, &token, isc_tokentype_number,
+ ISC_FALSE));
+ if (token.value.as_ulong > 0xffU)
+ RETTOK(ISC_R_RANGE);
+ RETERR(uint8_tobuffer(token.value.as_ulong, target));
+ c = (unsigned char) token.value.as_ulong;
+
+ /*
+ * Digest.
+ */
+ switch (c) {
+ case DNS_DSDIGEST_SHA1:
+ length = ISC_SHA1_DIGESTLENGTH;
+ break;
+ case DNS_DSDIGEST_SHA256:
+ length = ISC_SHA256_DIGESTLENGTH;
+ break;
+ case DNS_DSDIGEST_GOST:
+ length = ISC_GOST_DIGESTLENGTH;
+ break;
+ case DNS_DSDIGEST_SHA384:
+ length = ISC_SHA384_DIGESTLENGTH;
+ break;
+ default:
+ length = -1;
+ break;
+ }
+ return (isc_hex_tobuffer(lexer, target, length));
+}
+
+static inline isc_result_t
+totext_cds(ARGS_TOTEXT) {
+ isc_region_t sr;
+ char buf[sizeof("64000 ")];
+ unsigned int n;
+
+ REQUIRE(rdata->type == 59);
+ REQUIRE(rdata->length != 0);
+
+ UNUSED(tctx);
+
+ dns_rdata_toregion(rdata, &sr);
+
+ /*
+ * Key tag.
+ */
+ n = uint16_fromregion(&sr);
+ isc_region_consume(&sr, 2);
+ sprintf(buf, "%u ", n);
+ RETERR(str_totext(buf, target));
+
+ /*
+ * Algorithm.
+ */
+ n = uint8_fromregion(&sr);
+ isc_region_consume(&sr, 1);
+ sprintf(buf, "%u ", n);
+ RETERR(str_totext(buf, target));
+
+ /*
+ * Digest type.
+ */
+ n = uint8_fromregion(&sr);
+ isc_region_consume(&sr, 1);
+ sprintf(buf, "%u", n);
+ RETERR(str_totext(buf, target));
+
+ /*
+ * Digest.
+ */
+ if ((tctx->flags & DNS_STYLEFLAG_MULTILINE) != 0)
+ RETERR(str_totext(" (", target));
+ RETERR(str_totext(tctx->linebreak, target));
+ if (tctx->width == 0) /* No splitting */
+ RETERR(isc_hex_totext(&sr, 0, "", target));
+ else
+ RETERR(isc_hex_totext(&sr, tctx->width - 2,
+ tctx->linebreak, target));
+ if ((tctx->flags & DNS_STYLEFLAG_MULTILINE) != 0)
+ RETERR(str_totext(" )", target));
+ return (ISC_R_SUCCESS);
+}
+
+static inline isc_result_t
+fromwire_cds(ARGS_FROMWIRE) {
+ isc_region_t sr;
+
+ REQUIRE(type == 59);
+
+ UNUSED(type);
+ UNUSED(rdclass);
+ UNUSED(dctx);
+ UNUSED(options);
+
+ isc_buffer_activeregion(source, &sr);
+
+ /*
+ * Check digest lengths if we know them.
+ */
+ if (sr.length < 4 ||
+ (sr.base[3] == DNS_DSDIGEST_SHA1 &&
+ sr.length < 4 + ISC_SHA1_DIGESTLENGTH) ||
+ (sr.base[3] == DNS_DSDIGEST_SHA256 &&
+ sr.length < 4 + ISC_SHA256_DIGESTLENGTH) ||
+ (sr.base[3] == DNS_DSDIGEST_GOST &&
+ sr.length < 4 + ISC_GOST_DIGESTLENGTH) ||
+ (sr.base[3] == DNS_DSDIGEST_SHA384 &&
+ sr.length < 4 + ISC_SHA384_DIGESTLENGTH))
+ return (ISC_R_UNEXPECTEDEND);
+
+ /*
+ * Only copy digest lengths if we know them.
+ * If there is extra data dns_rdata_fromwire() will
+ * detect that.
+ */
+ if (sr.base[3] == DNS_DSDIGEST_SHA1)
+ sr.length = 4 + ISC_SHA1_DIGESTLENGTH;
+ else if (sr.base[3] == DNS_DSDIGEST_SHA256)
+ sr.length = 4 + ISC_SHA256_DIGESTLENGTH;
+ else if (sr.base[3] == DNS_DSDIGEST_GOST)
+ sr.length = 4 + ISC_GOST_DIGESTLENGTH;
+ else if (sr.base[3] == DNS_DSDIGEST_SHA384)
+ sr.length = 4 + ISC_SHA384_DIGESTLENGTH;
+
+ isc_buffer_forward(source, sr.length);
+ return (mem_tobuffer(target, sr.base, sr.length));
+}
+
+static inline isc_result_t
+towire_cds(ARGS_TOWIRE) {
+ isc_region_t sr;
+
+ REQUIRE(rdata->type == 59);
+ REQUIRE(rdata->length != 0);
+
+ UNUSED(cctx);
+
+ dns_rdata_toregion(rdata, &sr);
+ return (mem_tobuffer(target, sr.base, sr.length));
+}
+
+static inline int
+compare_cds(ARGS_COMPARE) {
+ isc_region_t r1;
+ isc_region_t r2;
+
+ REQUIRE(rdata1->type == rdata2->type);
+ REQUIRE(rdata1->rdclass == rdata2->rdclass);
+ REQUIRE(rdata1->type == 59);
+ REQUIRE(rdata1->length != 0);
+ REQUIRE(rdata2->length != 0);
+
+ dns_rdata_toregion(rdata1, &r1);
+ dns_rdata_toregion(rdata2, &r2);
+ return (isc_region_compare(&r1, &r2));
+}
+
+static inline isc_result_t
+fromstruct_cds(ARGS_FROMSTRUCT) {
+ dns_rdata_cds_t *ds = source;
+
+ REQUIRE(type == 59);
+ REQUIRE(source != NULL);
+ REQUIRE(ds->common.rdtype == type);
+ REQUIRE(ds->common.rdclass == rdclass);
+ switch (ds->digest_type) {
+ case DNS_DSDIGEST_SHA1:
+ REQUIRE(ds->length == ISC_SHA1_DIGESTLENGTH);
+ break;
+ case DNS_DSDIGEST_SHA256:
+ REQUIRE(ds->length == ISC_SHA256_DIGESTLENGTH);
+ break;
+ case DNS_DSDIGEST_GOST:
+ REQUIRE(ds->length == ISC_GOST_DIGESTLENGTH);
+ break;
+ case DNS_DSDIGEST_SHA384:
+ REQUIRE(ds->length == ISC_SHA384_DIGESTLENGTH);
+ break;
+ }
+
+ UNUSED(type);
+ UNUSED(rdclass);
+
+ RETERR(uint16_tobuffer(ds->key_tag, target));
+ RETERR(uint8_tobuffer(ds->algorithm, target));
+ RETERR(uint8_tobuffer(ds->digest_type, target));
+
+ return (mem_tobuffer(target, ds->digest, ds->length));
+}
+
+static inline isc_result_t
+tostruct_cds(ARGS_TOSTRUCT) {
+ dns_rdata_cds_t *ds = target;
+ isc_region_t region;
+
+ REQUIRE(rdata->type == 59);
+ REQUIRE(target != NULL);
+ REQUIRE(rdata->length != 0);
+
+ ds->common.rdclass = rdata->rdclass;
+ ds->common.rdtype = rdata->type;
+ ISC_LINK_INIT(&ds->common, link);
+
+ dns_rdata_toregion(rdata, &region);
+
+ ds->key_tag = uint16_fromregion(&region);
+ isc_region_consume(&region, 2);
+ ds->algorithm = uint8_fromregion(&region);
+ isc_region_consume(&region, 1);
+ ds->digest_type = uint8_fromregion(&region);
+ isc_region_consume(&region, 1);
+ ds->length = region.length;
+
+ ds->digest = mem_maybedup(mctx, region.base, region.length);
+ if (ds->digest == NULL)
+ return (ISC_R_NOMEMORY);
+
+ ds->mctx = mctx;
+ return (ISC_R_SUCCESS);
+}
+
+static inline void
+freestruct_cds(ARGS_FREESTRUCT) {
+ dns_rdata_cds_t *ds = source;
+
+ REQUIRE(ds != NULL);
+ REQUIRE(ds->common.rdtype == 59);
+
+ if (ds->mctx == NULL)
+ return;
+
+ if (ds->digest != NULL)
+ isc_mem_free(ds->mctx, ds->digest);
+ ds->mctx = NULL;
+}
+
+static inline isc_result_t
+additionaldata_cds(ARGS_ADDLDATA) {
+ REQUIRE(rdata->type == 59);
+
+ UNUSED(rdata);
+ UNUSED(add);
+ UNUSED(arg);
+
+ return (ISC_R_SUCCESS);
+}
+
+static inline isc_result_t
+digest_cds(ARGS_DIGEST) {
+ isc_region_t r;
+
+ REQUIRE(rdata->type == 59);
+
+ dns_rdata_toregion(rdata, &r);
+
+ return ((digest)(arg, &r));
+}
+
+static inline isc_boolean_t
+checkowner_cds(ARGS_CHECKOWNER) {
+
+ REQUIRE(type == 59);
+
+ UNUSED(name);
+ UNUSED(type);
+ UNUSED(rdclass);
+ UNUSED(wildcard);
+
+ return (ISC_TRUE);
+}
+
+static inline isc_boolean_t
+checknames_cds(ARGS_CHECKNAMES) {
+
+ REQUIRE(rdata->type == 59);
+
+ UNUSED(rdata);
+ UNUSED(owner);
+ UNUSED(bad);
+
+ return (ISC_TRUE);
+}
+
+static inline int
+casecompare_cds(ARGS_COMPARE) {
+ return (compare_cds(rdata1, rdata2));
+}
+
+#endif /* RDATA_GENERIC_CDS_59_C */
diff --git a/lib/dns/rdata/generic/cds_59.h b/lib/dns/rdata/generic/cds_59.h
new file mode 100644
index 000000000000..099cba39468c
--- /dev/null
+++ b/lib/dns/rdata/generic/cds_59.h
@@ -0,0 +1,31 @@
+/*
+ * Copyright (C) 2014 Internet Systems Consortium, Inc. ("ISC")
+ *
+ * Permission to use, copy, modify, and/or distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
+ * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+ * AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
+ * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+ * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
+ * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+ * PERFORMANCE OF THIS SOFTWARE.
+ */
+
+#ifndef GENERIC_CDS_59_H
+#define GENERIC_CDS_59_H 1
+
+/* CDS records have the same RDATA fields as DS records. */
+typedef struct dns_rdata_cds {
+ dns_rdatacommon_t common;
+ isc_mem_t *mctx;
+ isc_uint16_t key_tag;
+ isc_uint8_t algorithm;
+ isc_uint8_t digest_type;
+ isc_uint16_t length;
+ unsigned char *digest;
+} dns_rdata_cds_t;
+
+#endif /* GENERIC_CDS_59_H */
diff --git a/lib/dns/rdata/generic/gpos_27.c b/lib/dns/rdata/generic/gpos_27.c
index ce71822b8237..e9ba59eacb6a 100644
--- a/lib/dns/rdata/generic/gpos_27.c
+++ b/lib/dns/rdata/generic/gpos_27.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004, 2005, 2007, 2009 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004, 2005, 2007, 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2002 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -61,7 +61,7 @@ totext_gpos(ARGS_TOTEXT) {
dns_rdata_toregion(rdata, &region);
for (i = 0; i < 3; i++) {
- RETERR(txt_totext(&region, target));
+ RETERR(txt_totext(&region, ISC_TRUE, target));
if (i != 2)
RETERR(str_totext(" ", target));
}
diff --git a/lib/dns/rdata/generic/hinfo_13.c b/lib/dns/rdata/generic/hinfo_13.c
index 10b4fec79dea..411d6b56866e 100644
--- a/lib/dns/rdata/generic/hinfo_13.c
+++ b/lib/dns/rdata/generic/hinfo_13.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004, 2007, 2009 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004, 2007, 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1998-2002 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -58,9 +58,9 @@ totext_hinfo(ARGS_TOTEXT) {
REQUIRE(rdata->length != 0);
dns_rdata_toregion(rdata, &region);
- RETERR(txt_totext(&region, target));
+ RETERR(txt_totext(&region, ISC_TRUE, target));
RETERR(str_totext(" ", target));
- return (txt_totext(&region, target));
+ return (txt_totext(&region, ISC_TRUE, target));
}
static inline isc_result_t
diff --git a/lib/dns/rdata/generic/hip_55.c b/lib/dns/rdata/generic/hip_55.c
index 5198497dcb07..eee581f26a95 100644
--- a/lib/dns/rdata/generic/hip_55.c
+++ b/lib/dns/rdata/generic/hip_55.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2009, 2011, 2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2009, 2011, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
*
* Permission to use, copy, modify, and/or distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
@@ -318,6 +318,8 @@ tostruct_hip(ARGS_TOSTRUCT) {
goto cleanup;
isc_region_consume(&region, hip->hit_len);
+ INSIST(hip->key_len <= region.length);
+
hip->key = mem_maybedup(mctx, region.base, hip->key_len);
if (hip->key == NULL)
goto cleanup;
@@ -466,23 +468,19 @@ casecompare_hip(ARGS_COMPARE) {
INSIST(r1.length > 4);
INSIST(r2.length > 4);
- r1.length = 4;
- r2.length = 4;
- order = isc_region_compare(&r1, &r2);
+ order = memcmp(r1.base, r2.base, 4);
if (order != 0)
return (order);
hit_len = uint8_fromregion(&r1);
isc_region_consume(&r1, 2); /* hit length + algorithm */
key_len = uint16_fromregion(&r1);
-
- dns_rdata_toregion(rdata1, &r1);
- dns_rdata_toregion(rdata2, &r2);
- isc_region_consume(&r1, 4);
+ isc_region_consume(&r1, 2); /* key length */
isc_region_consume(&r2, 4);
+
INSIST(r1.length >= (unsigned) (hit_len + key_len));
INSIST(r2.length >= (unsigned) (hit_len + key_len));
- order = isc_region_compare(&r1, &r2);
+ order = memcmp(r1.base, r2.base, hit_len + key_len);
if (order != 0)
return (order);
isc_region_consume(&r1, hit_len + key_len);
diff --git a/lib/dns/rdata/generic/isdn_20.c b/lib/dns/rdata/generic/isdn_20.c
index 0bf2146013e8..dea36f0f658a 100644
--- a/lib/dns/rdata/generic/isdn_20.c
+++ b/lib/dns/rdata/generic/isdn_20.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004, 2005, 2007, 2009, 2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004, 2005, 2007, 2009, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2002 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -65,11 +65,11 @@ totext_isdn(ARGS_TOTEXT) {
UNUSED(tctx);
dns_rdata_toregion(rdata, &region);
- RETERR(txt_totext(&region, target));
+ RETERR(txt_totext(&region, ISC_TRUE, target));
if (region.length == 0)
return (ISC_R_SUCCESS);
RETERR(str_totext(" ", target));
- return (txt_totext(&region, target));
+ return (txt_totext(&region, ISC_TRUE, target));
}
static inline isc_result_t
diff --git a/lib/dns/rdata/generic/naptr_35.c b/lib/dns/rdata/generic/naptr_35.c
index 83439a59293e..d7452ac176fe 100644
--- a/lib/dns/rdata/generic/naptr_35.c
+++ b/lib/dns/rdata/generic/naptr_35.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004, 2005, 2007-2009, 2011-2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004, 2005, 2007-2009, 2011-2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2001, 2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -224,19 +224,19 @@ totext_naptr(ARGS_TOTEXT) {
/*
* Flags.
*/
- RETERR(txt_totext(&region, target));
+ RETERR(txt_totext(&region, ISC_TRUE, target));
RETERR(str_totext(" ", target));
/*
* Service.
*/
- RETERR(txt_totext(&region, target));
+ RETERR(txt_totext(&region, ISC_TRUE, target));
RETERR(str_totext(" ", target));
/*
* Regexp.
*/
- RETERR(txt_totext(&region, target));
+ RETERR(txt_totext(&region, ISC_TRUE, target));
RETERR(str_totext(" ", target));
/*
diff --git a/lib/dns/rdata/generic/nsec3_50.c b/lib/dns/rdata/generic/nsec3_50.c
index 19b94efa06dc..35fcf5d58229 100644
--- a/lib/dns/rdata/generic/nsec3_50.c
+++ b/lib/dns/rdata/generic/nsec3_50.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2008, 2009, 2011, 2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2008, 2009, 2011, 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
*
* Permission to use, copy, modify, and/or distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
@@ -100,7 +100,7 @@ fromtext_nsec3(ARGS_FROMTEXT) {
RETERR(isc_lex_getmastertoken(lexer, &token, isc_tokentype_string,
ISC_FALSE));
isc_buffer_init(&b, bm, sizeof(bm));
- RETTOK(isc_base32hex_decodestring(DNS_AS_STR(token), &b));
+ RETTOK(isc_base32hexnp_decodestring(DNS_AS_STR(token), &b));
if (isc_buffer_usedlength(&b) > 0xffU)
RETTOK(ISC_R_RANGE);
RETERR(uint8_tobuffer(isc_buffer_usedlength(&b), target));
@@ -191,7 +191,7 @@ totext_nsec3(ARGS_TOTEXT) {
i = sr.length;
sr.length = j;
- RETERR(isc_base32hex_totext(&sr, 1, "", target));
+ RETERR(isc_base32hexnp_totext(&sr, 1, "", target));
sr.length = i - j;
if ((tctx->flags & DNS_STYLEFLAG_MULTILINE) == 0)
@@ -474,15 +474,26 @@ digest_nsec3(ARGS_DIGEST) {
static inline isc_boolean_t
checkowner_nsec3(ARGS_CHECKOWNER) {
+ unsigned char owner[NSEC3_MAX_HASH_LENGTH];
+ isc_buffer_t buffer;
+ dns_label_t label;
- REQUIRE(type == 50);
+ REQUIRE(type == 50);
+
+ UNUSED(type);
+ UNUSED(rdclass);
+ UNUSED(wildcard);
- UNUSED(name);
- UNUSED(type);
- UNUSED(rdclass);
- UNUSED(wildcard);
+ /*
+ * First label is a base32hex string without padding.
+ */
+ dns_name_getlabel(name, 0, &label);
+ isc_region_consume(&label, 1);
+ isc_buffer_init(&buffer, owner, sizeof(owner));
+ if (isc_base32hexnp_decoderegion(&label, &buffer) == ISC_R_SUCCESS)
+ return (ISC_TRUE);
- return (ISC_TRUE);
+ return (ISC_FALSE);
}
static inline isc_boolean_t
diff --git a/lib/dns/rdata/generic/opt_41.c b/lib/dns/rdata/generic/opt_41.c
index bd2adb5fe971..ae09abf71e91 100644
--- a/lib/dns/rdata/generic/opt_41.c
+++ b/lib/dns/rdata/generic/opt_41.c
@@ -151,6 +151,14 @@ fromwire_opt(ARGS_FROMWIRE) {
isc_region_consume(&sregion, addrbytes);
break;
}
+ case DNS_OPT_EXPIRE:
+ /*
+ * Request has zero length. Response is 32 bits.
+ */
+ if (length != 0 && length != 4)
+ return (DNS_R_FORMERR);
+ isc_region_consume(&sregion, length);
+ break;
default:
isc_region_consume(&sregion, length);
break;
diff --git a/lib/dns/rdata/generic/spf_99.c b/lib/dns/rdata/generic/spf_99.c
index c7cdfc9fbbad..10e86b888f3a 100644
--- a/lib/dns/rdata/generic/spf_99.c
+++ b/lib/dns/rdata/generic/spf_99.c
@@ -64,7 +64,7 @@ totext_spf(ARGS_TOTEXT) {
dns_rdata_toregion(rdata, &region);
while (region.length > 0) {
- RETERR(txt_totext(&region, target));
+ RETERR(txt_totext(&region, ISC_TRUE, target));
if (region.length > 0)
RETERR(str_totext(" ", target));
}
diff --git a/lib/dns/rdata/generic/tkey_249.c b/lib/dns/rdata/generic/tkey_249.c
index 6f1ec0253881..0c91fd221ed8 100644
--- a/lib/dns/rdata/generic/tkey_249.c
+++ b/lib/dns/rdata/generic/tkey_249.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004, 2007, 2009, 2011, 2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004, 2007, 2009, 2011, 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -465,6 +465,7 @@ tostruct_tkey(ARGS_TOSTRUCT) {
/*
* Key.
*/
+ INSIST(tkey->keylen + 2U <= sr.length);
tkey->key = mem_maybedup(mctx, sr.base, tkey->keylen);
if (tkey->key == NULL)
goto cleanup;
@@ -479,6 +480,7 @@ tostruct_tkey(ARGS_TOSTRUCT) {
/*
* Other.
*/
+ INSIST(tkey->otherlen <= sr.length);
tkey->other = mem_maybedup(mctx, sr.base, tkey->otherlen);
if (tkey->other == NULL)
goto cleanup;
diff --git a/lib/dns/rdata/generic/tlsa_52.c b/lib/dns/rdata/generic/tlsa_52.c
index 11c6d7528f98..b46556d35d4e 100644
--- a/lib/dns/rdata/generic/tlsa_52.c
+++ b/lib/dns/rdata/generic/tlsa_52.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
*
* Permission to use, copy, modify, and/or distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
@@ -16,7 +16,7 @@
/* $Id$ */
-/* draft-ietf-dane-protocol-19.txt */
+/* rfc6698.txt */
#ifndef RDATA_GENERIC_TLSA_52_C
#define RDATA_GENERIC_TLSA_52_C
diff --git a/lib/dns/rdata/generic/tlsa_52.h b/lib/dns/rdata/generic/tlsa_52.h
index 83ce9529976d..31bbf015c167 100644
--- a/lib/dns/rdata/generic/tlsa_52.h
+++ b/lib/dns/rdata/generic/tlsa_52.h
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
*
* Permission to use, copy, modify, and/or distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
@@ -20,7 +20,7 @@
#define GENERIC_TLSA_52_H 1
/*!
- * \brief per draft-ietf-dane-protocol-19.txt
+ * \brief per rfc6698.txt
*/
typedef struct dns_rdata_tlsa {
dns_rdatacommon_t common;
diff --git a/lib/dns/rdata/generic/txt_16.c b/lib/dns/rdata/generic/txt_16.c
index 76109251a766..41e270279216 100644
--- a/lib/dns/rdata/generic/txt_16.c
+++ b/lib/dns/rdata/generic/txt_16.c
@@ -71,7 +71,7 @@ totext_txt(ARGS_TOTEXT) {
dns_rdata_toregion(rdata, &region);
while (region.length > 0) {
- RETERR(txt_totext(&region, target));
+ RETERR(txt_totext(&region, ISC_TRUE, target));
if (region.length > 0)
RETERR(str_totext(" ", target));
}
diff --git a/lib/dns/rdata/generic/uri_256.c b/lib/dns/rdata/generic/uri_256.c
index 799eb694e666..3ddd790847ac 100644
--- a/lib/dns/rdata/generic/uri_256.c
+++ b/lib/dns/rdata/generic/uri_256.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2011, 2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2011, 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
*
* Permission to use, copy, modify, and/or distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
@@ -115,15 +115,12 @@ fromwire_uri(ARGS_FROMWIRE) {
isc_buffer_activeregion(source, &region);
if (region.length < 4)
return (ISC_R_UNEXPECTEDEND);
- RETERR(mem_tobuffer(target, region.base, 4));
- isc_buffer_forward(source, 4);
/*
- * Target URI
+ * Priority, weight and target URI
*/
- RETERR(multitxt_fromwire(source, target));
-
- return (ISC_R_SUCCESS);
+ isc_buffer_forward(source, region.length);
+ return (mem_tobuffer(target, region.base, region.length));
}
static inline isc_result_t
@@ -178,8 +175,6 @@ compare_uri(ARGS_COMPARE) {
static inline isc_result_t
fromstruct_uri(ARGS_FROMSTRUCT) {
dns_rdata_uri_t *uri = source;
- isc_region_t region;
- isc_uint8_t len;
REQUIRE(type == 256);
REQUIRE(source != NULL);
@@ -203,18 +198,6 @@ fromstruct_uri(ARGS_FROMSTRUCT) {
/*
* Target URI
*/
- len = 255U;
- region.base = uri->target;
- region.length = uri->tgt_len;
- while (region.length > 0) {
- REQUIRE(len == 255U);
- len = uint8_fromregion(&region);
- isc_region_consume(&region, 1);
- if (region.length < len)
- return (ISC_R_UNEXPECTEDEND);
- isc_region_consume(&region, len);
- }
-
return (mem_tobuffer(target, uri->target, uri->tgt_len));
}
diff --git a/lib/dns/rdata/generic/x25_19.c b/lib/dns/rdata/generic/x25_19.c
index 6867fecd86f8..c5fe2d18b08c 100644
--- a/lib/dns/rdata/generic/x25_19.c
+++ b/lib/dns/rdata/generic/x25_19.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004, 2005, 2007, 2009 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004, 2005, 2007, 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2002 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -60,7 +60,7 @@ totext_x25(ARGS_TOTEXT) {
REQUIRE(rdata->length != 0);
dns_rdata_toregion(rdata, &region);
- return (txt_totext(&region, target));
+ return (txt_totext(&region, ISC_TRUE, target));
}
static inline isc_result_t
diff --git a/lib/dns/rdataslab.c b/lib/dns/rdataslab.c
index 1c02b60201b2..9367127d9eaf 100644
--- a/lib/dns/rdataslab.c
+++ b/lib/dns/rdataslab.c
@@ -148,21 +148,36 @@ dns_rdataslab_fromrdataset(dns_rdataset_t *rdataset, isc_mem_t *mctx,
buflen = reservelen + 2;
- nalloc = dns_rdataset_count(rdataset);
- nitems = nalloc;
- if (nitems == 0 && rdataset->type != 0)
- return (ISC_R_FAILURE);
+ nitems = dns_rdataset_count(rdataset);
- if (nalloc > 0xffff)
- return (ISC_R_NOSPACE);
+ /*
+ * If there are no rdata then we can just need to allocate a header
+ * with zero a record count.
+ */
+ if (nitems == 0) {
+ if (rdataset->type != 0)
+ return (ISC_R_FAILURE);
+ rawbuf = isc_mem_get(mctx, buflen);
+ if (rawbuf == NULL)
+ return (ISC_R_NOMEMORY);
+ region->base = rawbuf;
+ region->length = buflen;
+ rawbuf += reservelen;
+ *rawbuf++ = 0;
+ *rawbuf = 0;
+ return (ISC_R_SUCCESS);
+ }
+ if (nitems > 0xffff)
+ return (ISC_R_NOSPACE);
- if (nalloc != 0) {
- x = isc_mem_get(mctx, nalloc * sizeof(struct xrdata));
- if (x == NULL)
- return (ISC_R_NOMEMORY);
- } else
- x = NULL;
+ /*
+ * Remember the original number of items.
+ */
+ nalloc = nitems;
+ x = isc_mem_get(mctx, nalloc * sizeof(struct xrdata));
+ if (x == NULL)
+ return (ISC_R_NOMEMORY);
/*
* Save all of the rdata members into an array.
@@ -180,12 +195,12 @@ dns_rdataslab_fromrdataset(dns_rdataset_t *rdataset, isc_mem_t *mctx,
#endif
result = dns_rdataset_next(rdataset);
}
- if (result != ISC_R_NOMORE)
- goto free_rdatas;
- if (i != nalloc) {
+ if (i != nalloc || result != ISC_R_NOMORE) {
/*
* Somehow we iterated over fewer rdatas than
- * dns_rdataset_count() said there were!
+ * dns_rdataset_count() said there were or there
+ * were more items than dns_rdataset_count said
+ * there were.
*/
result = ISC_R_FAILURE;
goto free_rdatas;
@@ -194,7 +209,8 @@ dns_rdataslab_fromrdataset(dns_rdataset_t *rdataset, isc_mem_t *mctx,
/*
* Put into DNSSEC order.
*/
- qsort(x, nalloc, sizeof(struct xrdata), compare_rdata);
+ if (nalloc > 1U)
+ qsort(x, nalloc, sizeof(struct xrdata), compare_rdata);
/*
* Remove duplicates and compute the total storage required.
@@ -230,17 +246,15 @@ dns_rdataslab_fromrdataset(dns_rdataset_t *rdataset, isc_mem_t *mctx,
buflen++;
}
}
+
/*
* Don't forget the last item!
*/
- if (nalloc != 0) {
#if DNS_RDATASET_FIXED
- buflen += (8 + x[i-1].rdata.length);
+ buflen += (8 + x[i-1].rdata.length);
#else
- buflen += (2 + x[i-1].rdata.length);
+ buflen += (2 + x[i-1].rdata.length);
#endif
- }
-
/*
* Provide space to store the per RR meta data.
*/
@@ -330,8 +344,7 @@ dns_rdataslab_fromrdataset(dns_rdataset_t *rdataset, isc_mem_t *mctx,
result = ISC_R_SUCCESS;
free_rdatas:
- if (x != NULL)
- isc_mem_put(mctx, x, nalloc * sizeof(struct xrdata));
+ isc_mem_put(mctx, x, nalloc * sizeof(struct xrdata));
return (result);
}
diff --git a/lib/dns/resolver.c b/lib/dns/resolver.c
index 2e60cd84cca2..befe3cafe0f2 100644
--- a/lib/dns/resolver.c
+++ b/lib/dns/resolver.c
@@ -21,6 +21,7 @@
#include <config.h>
+#include <isc/counter.h>
#include <isc/log.h>
#include <isc/platform.h>
#include <isc/print.h>
@@ -131,11 +132,20 @@
#define MAXIMUM_QUERY_TIMEOUT 30 /* The maximum time in seconds for the whole query to live. */
#endif
+/* The default maximum number of recursions to follow before giving up. */
+#ifndef DEFAULT_RECURSION_DEPTH
+#define DEFAULT_RECURSION_DEPTH 7
+#endif
+
+/* The default maximum number of iterative queries to allow before giving up. */
+#ifndef DEFAULT_MAX_QUERIES
+#define DEFAULT_MAX_QUERIES 50
+#endif
+
/*%
* Maximum EDNS0 input packet size.
*/
#define RECV_BUFFER_SIZE 4096 /* XXXRTH Constant. */
-#define EDNSOPTS 2
/*%
* This defines the maximum number of timeouts we will permit before we
@@ -163,6 +173,7 @@ typedef struct query {
isc_buffer_t *tsig;
dns_tsigkey_t *tsigkey;
isc_socketevent_t sendevent;
+ int ednsversion;
unsigned int options;
unsigned int attributes;
unsigned int sends;
@@ -234,12 +245,13 @@ struct fetchctx {
isc_sockaddrlist_t edns;
isc_sockaddrlist_t edns512;
isc_sockaddrlist_t bad_edns;
- dns_validator_t *validator;
+ dns_validator_t * validator;
ISC_LIST(dns_validator_t) validators;
dns_db_t * cache;
dns_adb_t * adb;
isc_boolean_t ns_ttl_ok;
isc_uint32_t ns_ttl;
+ isc_counter_t * qc;
/*%
* The number of events we're waiting for.
@@ -307,6 +319,7 @@ struct fetchctx {
isc_boolean_t timeout;
dns_adbaddrinfo_t *addrinfo;
isc_sockaddr_t *client;
+ unsigned int depth;
};
#define FCTX_MAGIC ISC_MAGIC('F', '!', '!', '!')
@@ -343,6 +356,7 @@ typedef struct {
struct dns_fetch {
unsigned int magic;
+ isc_mem_t * mctx;
fetchctx_t * private;
};
@@ -418,6 +432,8 @@ struct dns_resolver {
isc_timer_t * spillattimer;
isc_boolean_t zero_no_soa_ttl;
unsigned int query_timeout;
+ unsigned int maxdepth;
+ unsigned int maxqueries;
/* Locked by lock. */
unsigned int references;
@@ -449,12 +465,16 @@ struct dns_resolver {
#define FCTX_ADDRINFO_MARK 0x0001
#define FCTX_ADDRINFO_FORWARDER 0x1000
#define FCTX_ADDRINFO_TRIED 0x2000
+#define FCTX_ADDRINFO_EDNSOK 0x4000
+
#define UNMARKED(a) (((a)->flags & FCTX_ADDRINFO_MARK) \
== 0)
#define ISFORWARDER(a) (((a)->flags & \
FCTX_ADDRINFO_FORWARDER) != 0)
#define TRIED(a) (((a)->flags & \
FCTX_ADDRINFO_TRIED) != 0)
+#define EDNSOK(a) (((a)->flags & \
+ FCTX_ADDRINFO_EDNSOK) != 0)
#define NXDOMAIN(r) (((r)->attributes & DNS_RDATASETATTR_NXDOMAIN) != 0)
#define NEGATIVE(r) (((r)->attributes & DNS_RDATASETATTR_NEGATIVE) != 0)
@@ -792,6 +812,7 @@ fctx_cancelquery(resquery_t **queryp, dns_dispatchevent_t **deventp,
dns_adbfind_t *find;
dns_adbaddrinfo_t *addrinfo;
isc_socket_t *socket;
+ isc_stdtime_t now;
query = *queryp;
fctx = query->fctx;
@@ -862,14 +883,13 @@ fctx_cancelquery(resquery_t **queryp, dns_dispatchevent_t **deventp,
/*
* Age RTTs of servers not tried.
*/
- factor = DNS_ADB_RTTADJAGE;
+ isc_stdtime_get(&now);
if (finish != NULL)
for (addrinfo = ISC_LIST_HEAD(fctx->forwaddrs);
addrinfo != NULL;
addrinfo = ISC_LIST_NEXT(addrinfo, publink))
if (UNMARKED(addrinfo))
- dns_adb_adjustsrtt(fctx->adb, addrinfo,
- 0, factor);
+ dns_adb_agesrtt(fctx->adb, addrinfo, now);
if (finish != NULL && TRIEDFIND(fctx))
for (find = ISC_LIST_HEAD(fctx->finds);
@@ -879,16 +899,15 @@ fctx_cancelquery(resquery_t **queryp, dns_dispatchevent_t **deventp,
addrinfo != NULL;
addrinfo = ISC_LIST_NEXT(addrinfo, publink))
if (UNMARKED(addrinfo))
- dns_adb_adjustsrtt(fctx->adb, addrinfo,
- 0, factor);
+ dns_adb_agesrtt(fctx->adb, addrinfo,
+ now);
if (finish != NULL && TRIEDALT(fctx)) {
for (addrinfo = ISC_LIST_HEAD(fctx->altaddrs);
addrinfo != NULL;
addrinfo = ISC_LIST_NEXT(addrinfo, publink))
if (UNMARKED(addrinfo))
- dns_adb_adjustsrtt(fctx->adb, addrinfo,
- 0, factor);
+ dns_adb_agesrtt(fctx->adb, addrinfo, now);
for (find = ISC_LIST_HEAD(fctx->altfinds);
find != NULL;
find = ISC_LIST_NEXT(find, publink))
@@ -896,8 +915,8 @@ fctx_cancelquery(resquery_t **queryp, dns_dispatchevent_t **deventp,
addrinfo != NULL;
addrinfo = ISC_LIST_NEXT(addrinfo, publink))
if (UNMARKED(addrinfo))
- dns_adb_adjustsrtt(fctx->adb, addrinfo,
- 0, factor);
+ dns_adb_agesrtt(fctx->adb, addrinfo,
+ now);
}
/*
@@ -1533,6 +1552,7 @@ fctx_query(fetchctx_t *fctx, dns_adbaddrinfo_t *addrinfo,
if (result != ISC_R_SUCCESS)
goto cleanup_dispatch;
}
+
fctx->querysent++;
ISC_LIST_APPEND(fctx->queries, query, link);
@@ -1674,7 +1694,7 @@ resquery_send(resquery_t *query) {
isc_boolean_t cleanup_cctx = ISC_FALSE;
isc_boolean_t secure_domain;
isc_boolean_t connecting = ISC_FALSE;
- dns_ednsopt_t ednsopts[EDNSOPTS];
+ dns_ednsopt_t ednsopts[DNS_EDNSOPTIONS];
unsigned ednsopt = 0;
fctx = query->fctx;
@@ -1821,12 +1841,12 @@ resquery_send(resquery_t *query) {
if (fctx->timeout) {
if ((triededns512(fctx, &query->addrinfo->sockaddr) ||
fctx->timeouts >= (MAX_EDNS0_TIMEOUTS * 2)) &&
- (query->options & DNS_FETCHOPT_NOEDNS0) == 0) {
- query->options |= DNS_FETCHOPT_NOEDNS0;
- fctx->reason = "disabling EDNS";
+ (query->options & DNS_FETCHOPT_NOEDNS0) == 0 &&
+ !EDNSOK(query->addrinfo)) {
} else if ((triededns(fctx, &query->addrinfo->sockaddr) ||
fctx->timeouts >= MAX_EDNS0_TIMEOUTS) &&
- (query->options & DNS_FETCHOPT_NOEDNS0) == 0) {
+ (query->options & DNS_FETCHOPT_NOEDNS0) == 0 &&
+ !EDNSOK(query->addrinfo)) {
query->options |= DNS_FETCHOPT_EDNS512;
fctx->reason = "reducing the advertised EDNS UDP "
"packet size to 512 octets";
@@ -1859,12 +1879,13 @@ resquery_send(resquery_t *query) {
if (peer != NULL)
(void) dns_peer_getrequestnsid(peer, &reqnsid);
if (reqnsid) {
- INSIST(ednsopt < EDNSOPTS);
+ INSIST(ednsopt < DNS_EDNSOPTIONS);
ednsopts[ednsopt].code = DNS_OPT_NSID;
ednsopts[ednsopt].length = 0;
ednsopts[ednsopt].value = NULL;
ednsopt++;
}
+ query->ednsversion = version;
result = fctx_addopt(fctx->qmessage, version,
udpsize, ednsopts, ednsopt);
if (reqnsid && result == ISC_R_SUCCESS) {
@@ -1876,6 +1897,7 @@ resquery_send(resquery_t *query) {
* bit.
*/
query->options |= DNS_FETCHOPT_NOEDNS0;
+ query->ednsversion = -1;
}
} else {
/*
@@ -1884,8 +1906,10 @@ resquery_send(resquery_t *query) {
* not using EDNS0.
*/
query->options |= DNS_FETCHOPT_NOEDNS0;
+ query->ednsversion = -1;
}
- }
+ } else
+ query->ednsversion = -1;
/*
* If we need EDNS0 to do this query and aren't using it, we lose.
@@ -2186,9 +2210,9 @@ fctx_finddone(isc_task_t *task, isc_event_t *event) {
*/
INSIST(!SHUTTINGDOWN(fctx));
fctx->attributes &= ~FCTX_ATTR_ADDRWAIT;
- if (event->ev_type == DNS_EVENT_ADBMOREADDRESSES)
+ if (event->ev_type == DNS_EVENT_ADBMOREADDRESSES) {
want_try = ISC_TRUE;
- else {
+ } else {
fctx->findfail++;
if (fctx->pending == 0) {
/*
@@ -2217,7 +2241,7 @@ fctx_finddone(isc_task_t *task, isc_event_t *event) {
else if (want_done)
fctx_done(fctx, ISC_R_FAILURE, __LINE__);
else if (destroy) {
- fctx_destroy(fctx);
+ fctx_destroy(fctx);
if (bucket_empty)
empty_bucket(res);
}
@@ -2471,12 +2495,13 @@ findname(fetchctx_t *fctx, dns_name_t *name, in_port_t port,
* See what we know about this address.
*/
find = NULL;
- result = dns_adb_createfind(fctx->adb,
- res->buckets[fctx->bucketnum].task,
- fctx_finddone, fctx, name,
- &fctx->name, fctx->type,
- options, now, NULL,
- res->view->dstport, &find);
+ result = dns_adb_createfind2(fctx->adb,
+ res->buckets[fctx->bucketnum].task,
+ fctx_finddone, fctx, name,
+ &fctx->name, fctx->type,
+ options, now, NULL,
+ res->view->dstport,
+ fctx->depth + 1, fctx->qc, &find);
if (result != ISC_R_SUCCESS) {
if (result == DNS_R_ALIAS) {
/*
@@ -2584,6 +2609,14 @@ fctx_getaddresses(fetchctx_t *fctx, isc_boolean_t badcache) {
res = fctx->res;
+ if (fctx->depth > res->maxdepth) {
+ isc_log_write(dns_lctx, DNS_LOGCATEGORY_RESOLVER,
+ DNS_LOGMODULE_RESOLVER, ISC_LOG_DEBUG(3),
+ "too much NS indirection resolving '%s'",
+ fctx->info);
+ return (DNS_R_SERVFAIL);
+ }
+
/*
* Forwarders.
*/
@@ -3059,6 +3092,16 @@ fctx_try(fetchctx_t *fctx, isc_boolean_t retrying, isc_boolean_t badcache) {
}
}
+ result = isc_counter_increment(fctx->qc);
+ if (result != ISC_R_SUCCESS) {
+ isc_log_write(dns_lctx, DNS_LOGCATEGORY_RESOLVER,
+ DNS_LOGMODULE_RESOLVER, ISC_LOG_DEBUG(3),
+ "exceeded max queries resolving '%s'",
+ fctx->info);
+ fctx_done(fctx, DNS_R_SERVFAIL, __LINE__);
+ return;
+ }
+
result = fctx_query(fctx, addrinfo, fctx->options);
if (result != ISC_R_SUCCESS)
fctx_done(fctx, result, __LINE__);
@@ -3157,6 +3200,7 @@ fctx_destroy(fetchctx_t *fctx) {
isc_mem_put(fctx->mctx, sa, sizeof(*sa));
}
+ isc_counter_detach(&fctx->qc);
isc_timer_detach(&fctx->timer);
dns_message_destroy(&fctx->rmessage);
dns_message_destroy(&fctx->qmessage);
@@ -3485,7 +3529,8 @@ log_ns_ttl(fetchctx_t *fctx, const char *where) {
static isc_result_t
fctx_create(dns_resolver_t *res, dns_name_t *name, dns_rdatatype_t type,
dns_name_t *domain, dns_rdataset_t *nameservers,
- unsigned int options, unsigned int bucketnum, fetchctx_t **fctxp)
+ unsigned int options, unsigned int bucketnum, unsigned int depth,
+ isc_counter_t *qc, fetchctx_t **fctxp)
{
fetchctx_t *fctx;
isc_result_t result;
@@ -3507,6 +3552,21 @@ fctx_create(dns_resolver_t *res, dns_name_t *name, dns_rdatatype_t type,
fctx = isc_mem_get(mctx, sizeof(*fctx));
if (fctx == NULL)
return (ISC_R_NOMEMORY);
+
+ fctx->qc = NULL;
+ if (qc != NULL) {
+ isc_counter_attach(qc, &fctx->qc);
+ } else {
+ result = isc_counter_create(res->mctx,
+ res->maxqueries, &fctx->qc);
+ if (result != ISC_R_SUCCESS)
+ goto cleanup_fetch;
+ }
+
+ /*
+ * Make fctx->info point to a copy of a formatted string
+ * "name/type".
+ */
dns_name_format(name, buf, sizeof(buf));
dns_rdatatype_format(type, typebuf, sizeof(typebuf));
strcat(buf, "/"); /* checked */
@@ -3514,7 +3574,7 @@ fctx_create(dns_resolver_t *res, dns_name_t *name, dns_rdatatype_t type,
fctx->info = isc_mem_strdup(mctx, buf);
if (fctx->info == NULL) {
result = ISC_R_NOMEMORY;
- goto cleanup_fetch;
+ goto cleanup_counter;
}
FCTXTRACE("create");
dns_name_init(&fctx->name, NULL);
@@ -3537,6 +3597,7 @@ fctx_create(dns_resolver_t *res, dns_name_t *name, dns_rdatatype_t type,
fctx->state = fetchstate_init;
fctx->want_shutdown = ISC_FALSE;
fctx->cloned = ISC_FALSE;
+ fctx->depth = depth;
ISC_LIST_INIT(fctx->queries);
ISC_LIST_INIT(fctx->finds);
ISC_LIST_INIT(fctx->altfinds);
@@ -3615,7 +3676,7 @@ fctx_create(dns_resolver_t *res, dns_name_t *name, dns_rdatatype_t type,
*/
if (dns_rdatatype_atparent(fctx->type))
findoptions |= DNS_DBFIND_NOEXACT;
- result = dns_view_findzonecut(res->view, fwdname,
+ result = dns_view_findzonecut(res->view, name,
domain, 0, findoptions,
ISC_TRUE,
&fctx->nameservers,
@@ -3744,6 +3805,9 @@ fctx_create(dns_resolver_t *res, dns_name_t *name, dns_rdatatype_t type,
cleanup_info:
isc_mem_free(mctx, fctx->info);
+ cleanup_counter:
+ isc_counter_detach(&fctx->qc);
+
cleanup_fetch:
isc_mem_put(mctx, fctx, sizeof(*fctx));
@@ -4008,6 +4072,7 @@ validated(isc_task_t *task, isc_event_t *event) {
isc_result_t result = ISC_R_SUCCESS;
isc_stdtime_t now;
isc_uint32_t ttl;
+ isc_uint32_t bucketnum;
UNUSED(task); /* for now */
@@ -4024,7 +4089,8 @@ validated(isc_task_t *task, isc_event_t *event) {
FCTXTRACE("received validation completion event");
- LOCK(&res->buckets[fctx->bucketnum].lock);
+ bucketnum = fctx->bucketnum;
+ LOCK(&res->buckets[bucketnum].lock);
ISC_LIST_UNLINK(fctx->validators, vevent->validator, link);
fctx->validator = NULL;
@@ -4046,7 +4112,6 @@ validated(isc_task_t *task, isc_event_t *event) {
* so, destroy the fctx.
*/
if (SHUTTINGDOWN(fctx) && !sentresponse) {
- isc_uint32_t bucketnum = fctx->bucketnum;
isc_boolean_t bucket_empty;
bucket_empty = maybe_destroy(fctx, ISC_TRUE);
UNLOCK(&res->buckets[bucketnum].lock);
@@ -4149,7 +4214,7 @@ validated(isc_task_t *task, isc_event_t *event) {
result = fctx->vresult;
add_bad(fctx, addrinfo, result, badns_validation);
isc_event_free(&event);
- UNLOCK(&res->buckets[fctx->bucketnum].lock);
+ UNLOCK(&res->buckets[bucketnum].lock);
INSIST(fctx->validator == NULL);
fctx->validator = ISC_LIST_HEAD(fctx->validators);
if (fctx->validator != NULL)
@@ -4277,7 +4342,7 @@ validated(isc_task_t *task, isc_event_t *event) {
dns_db_detachnode(fctx->cache, &node);
if (SHUTTINGDOWN(fctx))
bucket_empty = maybe_destroy(fctx, ISC_TRUE);
- UNLOCK(&res->buckets[fctx->bucketnum].lock);
+ UNLOCK(&res->buckets[bucketnum].lock);
if (bucket_empty)
empty_bucket(res);
goto cleanup_event;
@@ -4294,7 +4359,7 @@ validated(isc_task_t *task, isc_event_t *event) {
* be validated.
*/
dns_db_detachnode(fctx->cache, &node);
- UNLOCK(&res->buckets[fctx->bucketnum].lock);
+ UNLOCK(&res->buckets[bucketnum].lock);
dns_validator_send(ISC_LIST_HEAD(fctx->validators));
goto cleanup_event;
}
@@ -4377,7 +4442,7 @@ validated(isc_task_t *task, isc_event_t *event) {
if (node != NULL)
dns_db_detachnode(fctx->cache, &node);
- UNLOCK(&res->buckets[fctx->bucketnum].lock);
+ UNLOCK(&res->buckets[bucketnum].lock);
fctx_done(fctx, result, __LINE__); /* Locks bucket. */
cleanup_event:
@@ -4913,10 +4978,17 @@ cache_name(fetchctx_t *fctx, dns_name_t *name, dns_adbaddrinfo_t *addrinfo,
}
}
- if (valrdataset != NULL)
- result = valcreate(fctx, addrinfo, name, fctx->type,
- valrdataset, valsigrdataset, valoptions,
- task);
+ if (valrdataset != NULL) {
+ dns_rdatatype_t vtype = fctx->type;
+ if (CHAINING(valrdataset)) {
+ if (valrdataset->type == dns_rdatatype_cname)
+ vtype = dns_rdatatype_cname;
+ else
+ vtype = dns_rdatatype_dname;
+ }
+ result = valcreate(fctx, addrinfo, name, vtype, valrdataset,
+ valsigrdataset, valoptions, task);
+ }
if (result == ISC_R_SUCCESS && have_answer) {
fctx->attributes |= FCTX_ATTR_HAVEANSWER;
@@ -5657,7 +5729,7 @@ noanswer_response(fetchctx_t *fctx, dns_name_t *oqname,
char qbuf[DNS_NAME_FORMATSIZE];
char nbuf[DNS_NAME_FORMATSIZE];
char tbuf[DNS_RDATATYPE_FORMATSIZE];
- dns_rdatatype_format(fctx->type, tbuf,
+ dns_rdatatype_format(type, tbuf,
sizeof(tbuf));
dns_name_format(name, nbuf,
sizeof(nbuf));
@@ -5666,8 +5738,8 @@ noanswer_response(fetchctx_t *fctx, dns_name_t *oqname,
log_formerr(fctx,
"unrelated %s %s in "
"%s authority section",
- tbuf, qbuf, nbuf);
- return (DNS_R_FORMERR);
+ tbuf, nbuf, qbuf);
+ goto nextname;
}
if (type == dns_rdatatype_ns) {
/*
@@ -5730,6 +5802,7 @@ noanswer_response(fetchctx_t *fctx, dns_name_t *oqname,
}
}
}
+ nextname:
result = dns_message_nextname(message, section);
if (result == ISC_R_NOMORE)
break;
@@ -7015,21 +7088,33 @@ resquery_response(isc_task_t *task, isc_event_t *event) {
* EDNS may not be supported so we can now cache the lack of
* EDNS support.
*/
- if (opt == NULL &&
+ if (opt == NULL && !EDNSOK(query->addrinfo) &&
(message->rcode == dns_rcode_noerror ||
message->rcode == dns_rcode_nxdomain ||
message->rcode == dns_rcode_refused ||
message->rcode == dns_rcode_yxdomain) &&
bad_edns(fctx, &query->addrinfo->sockaddr)) {
- char addrbuf[ISC_SOCKADDR_FORMATSIZE];
- isc_sockaddr_format(&query->addrinfo->sockaddr, addrbuf,
- sizeof(addrbuf));
dns_adb_changeflags(fctx->adb, query->addrinfo,
DNS_FETCHOPT_NOEDNS0,
DNS_FETCHOPT_NOEDNS0);
}
/*
+ * If we get a non error EDNS response record the fact so we
+ * won't fallback to plain DNS in the future for this server.
+ */
+ if (opt != NULL && !EDNSOK(query->addrinfo) &&
+ (query->options & DNS_FETCHOPT_NOEDNS0) == 0 &&
+ (message->rcode == dns_rcode_noerror ||
+ message->rcode == dns_rcode_nxdomain ||
+ message->rcode == dns_rcode_refused ||
+ message->rcode == dns_rcode_yxdomain)) {
+ dns_adb_changeflags(fctx->adb, query->addrinfo,
+ FCTX_ADDRINFO_EDNSOK,
+ FCTX_ADDRINFO_EDNSOK);
+ }
+
+ /*
* Deal with truncated responses by retrying using TCP.
*/
if ((message->flags & DNS_MESSAGEFLAG_TC) != 0)
@@ -7143,6 +7228,18 @@ resquery_response(isc_task_t *task, isc_event_t *event) {
DNS_FETCHOPT_EDNSVERSIONSET;
mask = DNS_FETCHOPT_EDNSVERSIONMASK |
DNS_FETCHOPT_EDNSVERSIONSET;
+ /*
+ * Record that we got a good EDNS response.
+ */
+ if (query->ednsversion > (int)version &&
+ !EDNSOK(query->addrinfo)) {
+ dns_adb_changeflags(fctx->adb, query->addrinfo,
+ FCTX_ADDRINFO_EDNSOK,
+ FCTX_ADDRINFO_EDNSOK);
+ }
+ /*
+ * Record the supported EDNS version.
+ */
switch (version) {
case 0:
dns_adb_changeflags(fctx->adb, query->addrinfo,
@@ -7731,6 +7828,8 @@ dns_resolver_create(dns_view_t *view,
res->spillattimer = NULL;
res->zero_no_soa_ttl = ISC_FALSE;
res->query_timeout = DEFAULT_QUERY_TIMEOUT;
+ res->maxdepth = DEFAULT_RECURSION_DEPTH;
+ res->maxqueries = DEFAULT_MAX_QUERIES;
res->nbuckets = ntasks;
res->activebuckets = ntasks;
res->buckets = isc_mem_get(view->mctx,
@@ -8169,9 +8268,9 @@ dns_resolver_createfetch(dns_resolver_t *res, dns_name_t *name,
dns_rdataset_t *sigrdataset,
dns_fetch_t **fetchp)
{
- return (dns_resolver_createfetch2(res, name, type, domain,
+ return (dns_resolver_createfetch3(res, name, type, domain,
nameservers, forwarders, NULL, 0,
- options, task, action, arg,
+ options, 0, NULL, task, action, arg,
rdataset, sigrdataset, fetchp));
}
@@ -8187,6 +8286,25 @@ dns_resolver_createfetch2(dns_resolver_t *res, dns_name_t *name,
dns_rdataset_t *sigrdataset,
dns_fetch_t **fetchp)
{
+ return (dns_resolver_createfetch3(res, name, type, domain,
+ nameservers, forwarders, client, id,
+ options, 0, NULL, task, action, arg,
+ rdataset, sigrdataset, fetchp));
+}
+
+isc_result_t
+dns_resolver_createfetch3(dns_resolver_t *res, dns_name_t *name,
+ dns_rdatatype_t type,
+ dns_name_t *domain, dns_rdataset_t *nameservers,
+ dns_forwarders_t *forwarders,
+ isc_sockaddr_t *client, dns_messageid_t id,
+ unsigned int options, unsigned int depth,
+ isc_counter_t *qc, isc_task_t *task,
+ isc_taskaction_t action, void *arg,
+ dns_rdataset_t *rdataset,
+ dns_rdataset_t *sigrdataset,
+ dns_fetch_t **fetchp)
+{
dns_fetch_t *fetch;
fetchctx_t *fctx = NULL;
isc_result_t result = ISC_R_SUCCESS;
@@ -8222,6 +8340,8 @@ dns_resolver_createfetch2(dns_resolver_t *res, dns_name_t *name,
fetch = isc_mem_get(res->mctx, sizeof(*fetch));
if (fetch == NULL)
return (ISC_R_NOMEMORY);
+ fetch->mctx = NULL;
+ isc_mem_attach(res->mctx, &fetch->mctx);
bucketnum = dns_name_fullhash(name, ISC_FALSE) % res->nbuckets;
@@ -8273,11 +8393,12 @@ dns_resolver_createfetch2(dns_resolver_t *res, dns_name_t *name,
if (fctx == NULL) {
result = fctx_create(res, name, type, domain, nameservers,
- options, bucketnum, &fctx);
+ options, bucketnum, depth, qc, &fctx);
if (result != ISC_R_SUCCESS)
goto unlock;
new_fctx = ISC_TRUE;
- }
+ } else if (fctx->depth > depth)
+ fctx->depth = depth;
result = fctx_join(fctx, task, client, id, action, arg,
rdataset, sigrdataset, fetch);
@@ -8312,7 +8433,7 @@ dns_resolver_createfetch2(dns_resolver_t *res, dns_name_t *name,
FTRACE("created");
*fetchp = fetch;
} else
- isc_mem_put(res->mctx, fetch, sizeof(*fetch));
+ isc_mem_putanddetach(&fetch->mctx, fetch, sizeof(*fetch));
return (result);
}
@@ -8403,7 +8524,7 @@ dns_resolver_destroyfetch(dns_fetch_t **fetchp) {
UNLOCK(&res->buckets[bucketnum].lock);
- isc_mem_put(res->mctx, fetch, sizeof(*fetch));
+ isc_mem_putanddetach(&fetch->mctx, fetch, sizeof(*fetch));
*fetchp = NULL;
if (bucket_empty)
@@ -9049,3 +9170,27 @@ dns_resolver_settimeout(dns_resolver_t *resolver, unsigned int seconds) {
resolver->query_timeout = seconds;
}
+
+void
+dns_resolver_setmaxdepth(dns_resolver_t *resolver, unsigned int maxdepth) {
+ REQUIRE(VALID_RESOLVER(resolver));
+ resolver->maxdepth = maxdepth;
+}
+
+unsigned int
+dns_resolver_getmaxdepth(dns_resolver_t *resolver) {
+ REQUIRE(VALID_RESOLVER(resolver));
+ return (resolver->maxdepth);
+}
+
+void
+dns_resolver_setmaxqueries(dns_resolver_t *resolver, unsigned int queries) {
+ REQUIRE(VALID_RESOLVER(resolver));
+ resolver->maxqueries = queries;
+}
+
+unsigned int
+dns_resolver_getmaxqueries(dns_resolver_t *resolver) {
+ REQUIRE(VALID_RESOLVER(resolver));
+ return (resolver->maxqueries);
+}
diff --git a/lib/dns/rootns.c b/lib/dns/rootns.c
index 34971788dd89..a3d9bd8d6084 100644
--- a/lib/dns/rootns.c
+++ b/lib/dns/rootns.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004, 2005, 2007, 2008, 2010, 2012, 2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004, 2005, 2007, 2008, 2010, 2012-2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2002 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -63,6 +63,7 @@ static char root_ns[] =
"A.ROOT-SERVERS.NET. 3600000 IN AAAA 2001:503:BA3E::2:30\n"
"B.ROOT-SERVERS.NET. 3600000 IN A 192.228.79.201\n"
"C.ROOT-SERVERS.NET. 3600000 IN A 192.33.4.12\n"
+"C.ROOT-SERVERS.NET. 3600000 IN AAAA 2001:500:2::c\n"
"D.ROOT-SERVERS.NET. 3600000 IN A 199.7.91.13\n"
"D.ROOT-SERVERS.NET. 3600000 IN AAAA 2001:500:2d::d\n"
"E.ROOT-SERVERS.NET. 3600000 IN A 192.203.230.10\n"
diff --git a/lib/dns/rpz.c b/lib/dns/rpz.c
index f617fe7b7c6a..3dd80664c7dc 100644
--- a/lib/dns/rpz.c
+++ b/lib/dns/rpz.c
@@ -496,16 +496,16 @@ ip2name(dns_rpz_cidr_t *cidr, const dns_rpz_cidr_key_t *tgt_ip,
}
if (canon_name != NULL) {
- isc__buffer_init(&buffer, str, sizeof(str));
- isc__buffer_add(&buffer, len);
+ isc_buffer_init(&buffer, str, sizeof(str));
+ isc_buffer_add(&buffer, len);
result = dns_name_fromtext(canon_name, &buffer,
dns_rootname, 0, NULL);
if (result != ISC_R_SUCCESS)
return (result);
}
if (search_name != NULL) {
- isc__buffer_init(&buffer, str, sizeof(str));
- isc__buffer_add(&buffer, len);
+ isc_buffer_init(&buffer, str, sizeof(str));
+ isc_buffer_add(&buffer, len);
if (type == DNS_RPZ_TYPE_NSIP)
name = &cidr->nsip_name;
else
diff --git a/lib/dns/rrl.c b/lib/dns/rrl.c
index 02554e9a9dfb..08fc8e712ffa 100644
--- a/lib/dns/rrl.c
+++ b/lib/dns/rrl.c
@@ -253,6 +253,7 @@ expand_entries(dns_rrl_t *rrl, int new) {
static inline dns_rrl_bin_t *
get_bin(dns_rrl_hash_t *hash, unsigned int hval) {
+ INSIST(hash != NULL);
return (&hash->bins[hval % hash->length]);
}
diff --git a/lib/dns/time.c b/lib/dns/time.c
index d331ca3bfe10..5dce07281195 100644
--- a/lib/dns/time.c
+++ b/lib/dns/time.c
@@ -35,7 +35,7 @@
#include <dns/result.h>
#include <dns/time.h>
-static int days[12] = { 31, 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31 };
+static const int days[12] = { 31, 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31 };
isc_result_t
dns_time64_totext(isc_int64_t t, isc_buffer_t *target) {
@@ -161,6 +161,14 @@ dns_time64_fromtext(const char *source, isc_int64_t *target) {
RANGE(1, 12, month);
RANGE(1, days[month - 1] +
((month == 2 && is_leap(year)) ? 1 : 0), day);
+#ifdef __COVERITY__
+ /*
+ * Use a simplified range to silence Coverity warning (in
+ * arithmetic with day below).
+ */
+ RANGE(1, 31, day);
+#endif /* __COVERITY__ */
+
RANGE(0, 23, hour);
RANGE(0, 59, minute);
RANGE(0, 60, second); /* 60 == leap second. */
diff --git a/lib/dns/tsig.c b/lib/dns/tsig.c
index 00ab570d9e34..1ddca181a4ab 100644
--- a/lib/dns/tsig.c
+++ b/lib/dns/tsig.c
@@ -1317,7 +1317,7 @@ dns_tsig_verify(isc_buffer_t *source, dns_message_t *msg,
alg == DST_ALG_HMACSHA384 || alg == DST_ALG_HMACSHA512) {
isc_uint16_t digestbits = dst_key_getbits(key);
if (tsig.siglen > siglen) {
- tsig_log(msg->tsigkey, 2, "signature length to big");
+ tsig_log(msg->tsigkey, 2, "signature length too big");
return (DNS_R_FORMERR);
}
if (tsig.siglen > 0 &&
diff --git a/lib/dns/validator.c b/lib/dns/validator.c
index d7982caa777a..0b203d882923 100644
--- a/lib/dns/validator.c
+++ b/lib/dns/validator.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 2000-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -343,7 +343,7 @@ isdelegation(dns_name_t *name, dns_rdataset_t *rdataset,
dns_name_getlabel(&nsec3name, 0, &hashlabel);
isc_region_consume(&hashlabel, 1);
isc_buffer_init(&buffer, owner, sizeof(owner));
- result = isc_base32hex_decoderegion(&hashlabel, &buffer);
+ result = isc_base32hexnp_decoderegion(&hashlabel, &buffer);
if (result != ISC_R_SUCCESS) {
dns_rdataset_disassociate(&set);
continue;
@@ -918,12 +918,26 @@ authvalidated(isc_task_t *task, isc_event_t *event) {
devent->name;
}
if (!exists) {
+ dns_name_t *closest;
+ unsigned int clabels;
+
val->attributes |= VALATTR_FOUNDNOQNAME;
- val->attributes |= VALATTR_FOUNDCLOSEST;
+
+ closest = dns_fixedname_name(&val->closest);
+ clabels = dns_name_countlabels(closest);
+ /*
+ * If we are validating a wildcard response
+ * clabels will not be zero. We then need
+ * to check if the generated wilcard from
+ * dns_nsec_noexistnodata is consistent with
+ * the wildcard used to generate the response.
+ */
+ if (clabels == 0 ||
+ dns_name_countlabels(wild) == clabels + 1)
+ val->attributes |= VALATTR_FOUNDCLOSEST;
/*
* The NSEC noqname proof also contains
* the closest encloser.
-
*/
if (NEEDNOQNAME(val))
proofs[DNS_VALIDATOR_NOQNAMEPROOF] =
@@ -2803,7 +2817,8 @@ nsecvalidate(dns_validator_t *val, isc_boolean_t resume) {
if (!NEEDNODATA(val) && !NEEDNOWILDCARD(val) && NEEDNOQNAME(val)) {
if (!FOUNDNOQNAME(val))
findnsec3proofs(val);
- if (FOUNDNOQNAME(val) && FOUNDCLOSEST(val)) {
+ if (FOUNDNOQNAME(val) && FOUNDCLOSEST(val) &&
+ !FOUNDOPTOUT(val)) {
validator_log(val, ISC_LOG_DEBUG(3),
"marking as secure, noqname proof found");
marksecure(val->event);
diff --git a/lib/dns/view.c b/lib/dns/view.c
index 142b09edbd74..3730593b9e37 100644
--- a/lib/dns/view.c
+++ b/lib/dns/view.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -182,6 +182,7 @@ dns_view_create(isc_mem_t *mctx, dns_rdataclass_t rdclass,
view->updateacl = NULL;
view->upfwdacl = NULL;
view->denyansweracl = NULL;
+ view->nocasecompress = NULL;
view->answeracl_exclude = NULL;
view->denyanswernames = NULL;
view->answernames_exclude = NULL;
@@ -359,6 +360,8 @@ destroy(dns_view_t *view) {
dns_db_detach(&view->cachedb);
if (view->cache != NULL)
dns_cache_detach(&view->cache);
+ if (view->nocasecompress != NULL)
+ dns_acl_detach(&view->nocasecompress);
if (view->matchclients != NULL)
dns_acl_detach(&view->matchclients);
if (view->matchdestinations != NULL)
@@ -621,6 +624,8 @@ resolver_shutdown(isc_task_t *task, isc_event_t *event) {
UNUSED(task);
+ isc_event_free(&event);
+
LOCK(&view->lock);
view->attributes |= DNS_VIEWATTR_RESSHUTDOWN;
@@ -628,8 +633,6 @@ resolver_shutdown(isc_task_t *task, isc_event_t *event) {
UNLOCK(&view->lock);
- isc_event_free(&event);
-
if (done)
destroy(view);
}
@@ -645,6 +648,8 @@ adb_shutdown(isc_task_t *task, isc_event_t *event) {
UNUSED(task);
+ isc_event_free(&event);
+
LOCK(&view->lock);
view->attributes |= DNS_VIEWATTR_ADBSHUTDOWN;
@@ -652,8 +657,6 @@ adb_shutdown(isc_task_t *task, isc_event_t *event) {
UNLOCK(&view->lock);
- isc_event_free(&event);
-
if (done)
destroy(view);
}
@@ -669,6 +672,8 @@ req_shutdown(isc_task_t *task, isc_event_t *event) {
UNUSED(task);
+ isc_event_free(&event);
+
LOCK(&view->lock);
view->attributes |= DNS_VIEWATTR_REQSHUTDOWN;
@@ -676,8 +681,6 @@ req_shutdown(isc_task_t *task, isc_event_t *event) {
UNLOCK(&view->lock);
- isc_event_free(&event);
-
if (done)
destroy(view);
}
@@ -1216,6 +1219,9 @@ dns_view_findzonecut2(dns_view_t *view, dns_name_t *name, dns_name_t *fname,
dns_name_t *zfname;
dns_rdataset_t zrdataset, zsigrdataset;
dns_fixedname_t zfixedname;
+#ifdef BIND9
+ unsigned int ztoptions = 0;
+#endif
#ifndef BIND9
UNUSED(zone);
@@ -1242,9 +1248,12 @@ dns_view_findzonecut2(dns_view_t *view, dns_name_t *name, dns_name_t *fname,
#ifdef BIND9
zone = NULL;
LOCK(&view->lock);
- if (view->zonetable != NULL)
- result = dns_zt_find(view->zonetable, name, 0, NULL, &zone);
- else
+ if (view->zonetable != NULL) {
+ if ((options & DNS_DBFIND_NOEXACT) != 0)
+ ztoptions |= DNS_ZTFIND_NOEXACT;
+ result = dns_zt_find(view->zonetable, name, ztoptions,
+ NULL, &zone);
+ } else
result = ISC_R_NOTFOUND;
if (result == ISC_R_SUCCESS || result == DNS_R_PARTIALMATCH)
result = dns_zone_getdb(zone, &db);
@@ -1461,7 +1470,7 @@ dns_viewlist_findzone(dns_viewlist_t *list, dns_name_t *name,
if (zone2 != NULL) {
dns_zone_detach(&zone1);
dns_zone_detach(&zone2);
- return (ISC_R_NOTFOUND);
+ return (ISC_R_MULTIPLE);
}
}
diff --git a/lib/dns/zone.c b/lib/dns/zone.c
index 01ff97b11dcb..7a9825bd96b0 100644
--- a/lib/dns/zone.c
+++ b/lib/dns/zone.c
@@ -2639,8 +2639,8 @@ integrity_checks(dns_zone_t *zone, dns_db_t *db) {
checkspf:
/*
- * Check if there is a type TXT spf record without a type SPF
- * RRset being present.
+ * Check if there is a type SPF record without an
+ * SPF-formatted type TXT record also being present.
*/
if (!DNS_ZONE_OPTION(zone, DNS_ZONEOPT_CHECKSPF))
goto next;
@@ -2669,16 +2669,13 @@ integrity_checks(dns_zone_t *zone, dns_db_t *db) {
dns_rdataset_disassociate(&rdataset);
notxt:
- if (have_spf != have_txt) {
+ if (have_spf && !have_txt) {
char namebuf[DNS_NAME_FORMATSIZE];
- const char *found = have_txt ? "TXT" : "SPF";
- const char *need = have_txt ? "SPF" : "TXT";
dns_name_format(name, namebuf, sizeof(namebuf));
- dns_zone_log(zone, ISC_LOG_WARNING, "'%s' found SPF/%s "
- "record but no SPF/%s record found, add "
- "matching type %s record", namebuf, found,
- need, need);
+ dns_zone_log(zone, ISC_LOG_WARNING, "'%s' found type "
+ "SPF record but no SPF TXT record found, "
+ "add matching type TXT record", namebuf);
}
next:
@@ -4567,6 +4564,21 @@ zone_get_from_db(dns_zone_t *zone, dns_db_t *db, unsigned int *nscount,
dns_db_currentversion(db, &version);
+ if (nscount != NULL)
+ *nscount = 0;
+ if (soacount != NULL)
+ *soacount = 0;
+ if (serial != NULL)
+ *serial = 0;
+ if (refresh != NULL)
+ *refresh = 0;
+ if (retry != NULL)
+ *retry = 0;
+ if (expire != NULL)
+ *expire = 0;
+ if (errors != NULL)
+ *errors = 0;
+
node = NULL;
result = dns_db_findnode(db, &zone->origin, ISC_FALSE, &node);
if (result != ISC_R_SUCCESS) {
@@ -8544,8 +8556,10 @@ keyfetch_done(isc_task_t *task, isc_event_t *event) {
trust_key(zone, keyname, &dnskey, mctx);
}
- if (!deletekey)
+ if (!deletekey) {
+ INSIST(newkey || updatekey);
set_refreshkeytimer(zone, &keydata, now);
+ }
}
/*
@@ -10933,70 +10947,25 @@ create_query(dns_zone_t *zone, dns_rdatatype_t rdtype,
static isc_result_t
add_opt(dns_message_t *message, isc_uint16_t udpsize, isc_boolean_t reqnsid) {
- dns_rdataset_t *rdataset = NULL;
- dns_rdatalist_t *rdatalist = NULL;
- dns_rdata_t *rdata = NULL;
isc_result_t result;
-
- result = dns_message_gettemprdatalist(message, &rdatalist);
- if (result != ISC_R_SUCCESS)
- goto cleanup;
- result = dns_message_gettemprdata(message, &rdata);
- if (result != ISC_R_SUCCESS)
- goto cleanup;
- result = dns_message_gettemprdataset(message, &rdataset);
- if (result != ISC_R_SUCCESS)
- goto cleanup;
- dns_rdataset_init(rdataset);
-
- rdatalist->type = dns_rdatatype_opt;
- rdatalist->covers = 0;
-
- /*
- * Set Maximum UDP buffer size.
- */
- rdatalist->rdclass = udpsize;
-
- /*
- * Set EXTENDED-RCODE, VERSION, DO and Z to 0.
- */
- rdatalist->ttl = 0;
+ dns_rdataset_t *rdataset = NULL;
+ dns_ednsopt_t ednsopts[DNS_EDNSOPTIONS];
+ int count = 0;
/* Set EDNS options if applicable */
if (reqnsid) {
- unsigned char data[4];
- isc_buffer_t buf;
-
- isc_buffer_init(&buf, data, sizeof(data));
- isc_buffer_putuint16(&buf, DNS_OPT_NSID);
- isc_buffer_putuint16(&buf, 0);
- rdata->data = data;
- rdata->length = sizeof(data);
- } else {
- rdata->data = NULL;
- rdata->length = 0;
+ INSIST(count < DNS_EDNSOPTIONS);
+ ednsopts[count].code = DNS_OPT_NSID;
+ ednsopts[count].length = 0;
+ ednsopts[count].value = NULL;
+ count++;
}
-
- rdata->rdclass = rdatalist->rdclass;
- rdata->type = rdatalist->type;
- rdata->flags = 0;
-
- ISC_LIST_INIT(rdatalist->rdata);
- ISC_LIST_APPEND(rdatalist->rdata, rdata, link);
- RUNTIME_CHECK(dns_rdatalist_tordataset(rdatalist, rdataset)
- == ISC_R_SUCCESS);
+ result = dns_message_buildopt(message, &rdataset, 0, udpsize, 0,
+ ednsopts, count);
+ if (result != ISC_R_SUCCESS)
+ return (result);
return (dns_message_setopt(message, rdataset));
-
- cleanup:
- if (rdatalist != NULL)
- dns_message_puttemprdatalist(message, &rdatalist);
- if (rdataset != NULL)
- dns_message_puttemprdataset(message, &rdataset);
- if (rdata != NULL)
- dns_message_puttemprdata(message, &rdata);
-
- return (result);
}
static void
@@ -11846,6 +11815,8 @@ dns_zone_notifyreceive(dns_zone_t *zone, isc_sockaddr_t *from,
int match = 0;
isc_netaddr_t netaddr;
isc_sockaddr_t local, remote;
+ dns_tsigkey_t *tsigkey;
+ dns_name_t *tsig;
REQUIRE(DNS_ZONE_VALID(zone));
@@ -11930,8 +11901,10 @@ dns_zone_notifyreceive(dns_zone_t *zone, isc_sockaddr_t *from,
* Accept notify requests from non masters if they are on
* 'zone->notify_acl'.
*/
+ tsigkey = dns_message_gettsigkey(msg);
+ tsig = dns_tsigkey_identity(tsigkey);
if (i >= zone->masterscnt && zone->notify_acl != NULL &&
- dns_acl_match(&netaddr, NULL, zone->notify_acl,
+ dns_acl_match(&netaddr, tsig, zone->notify_acl,
&zone->view->aclenv,
&match, NULL) == ISC_R_SUCCESS &&
match > 0)
@@ -13048,7 +13021,6 @@ save_nsec3param(dns_zone_t *zone, nsec3paramlist_t *nsec3list) {
isc_result_t result;
dns_dbnode_t *node = NULL;
dns_rdataset_t rdataset, prdataset;
- dns_rdata_t rdata_in, prdata_in, prdata_out;
dns_dbversion_t *version = NULL;
nsec3param_t *nsec3param = NULL;
nsec3param_t *nsec3p = NULL;
@@ -13060,10 +13032,12 @@ save_nsec3param(dns_zone_t *zone, nsec3paramlist_t *nsec3list) {
REQUIRE(nsec3list != NULL);
REQUIRE(ISC_LIST_EMPTY(*nsec3list));
+ dns_rdataset_init(&rdataset);
+ dns_rdataset_init(&prdataset);
+
dns_db_attach(zone->db, &db);
CHECK(dns_db_getoriginnode(db, &node));
- dns_rdataset_init(&rdataset);
dns_db_currentversion(db, &version);
result = dns_db_findrdataset(db, node, version,
dns_rdatatype_nsec3param,
@@ -13082,8 +13056,10 @@ save_nsec3param(dns_zone_t *zone, nsec3paramlist_t *nsec3list) {
result == ISC_R_SUCCESS;
result = dns_rdataset_next(&rdataset))
{
- dns_rdata_init(&rdata_in);
- dns_rdataset_current(&rdataset, &rdata_in);
+ dns_rdata_t rdata = DNS_RDATA_INIT;
+ dns_rdata_t private = DNS_RDATA_INIT;
+
+ dns_rdataset_current(&rdataset, &rdata);
isc_log_write(dns_lctx, DNS_LOGCATEGORY_GENERAL,
DNS_LOGMODULE_ZONE, ISC_LOG_DEBUG(3),
"looping through nsec3param data");
@@ -13096,16 +13072,14 @@ save_nsec3param(dns_zone_t *zone, nsec3paramlist_t *nsec3list) {
* now transfer the data from the rdata to
* the nsec3param
*/
- dns_rdata_init(&prdata_out);
- dns_nsec3param_toprivate(&rdata_in, &prdata_out,
+ dns_nsec3param_toprivate(&rdata, &private,
zone->privatetype, nsec3param->data,
sizeof(nsec3param->data));
- nsec3param->length = prdata_out.length;
+ nsec3param->length = private.length;
ISC_LIST_APPEND(*nsec3list, nsec3param, link);
}
getprivate:
- dns_rdataset_init(&prdataset);
result = dns_db_findrdataset(db, node, version, zone->privatetype,
dns_rdatatype_none, 0, &prdataset, NULL);
if (result != ISC_R_SUCCESS)
@@ -13120,26 +13094,39 @@ save_nsec3param(dns_zone_t *zone, nsec3paramlist_t *nsec3list) {
result == ISC_R_SUCCESS;
result = dns_rdataset_next(&prdataset))
{
- dns_rdata_init(&prdata_in);
- dns_rdataset_current(&prdataset, &prdata_in);
+ dns_rdata_t rdata = DNS_RDATA_INIT;
+ dns_rdata_t private = DNS_RDATA_INIT;
+
+ dns_rdataset_current(&prdataset, &private);
isc_log_write(dns_lctx, DNS_LOGCATEGORY_GENERAL,
DNS_LOGMODULE_ZONE, ISC_LOG_DEBUG(3),
"looping through nsec3param private data");
- if (!dns_nsec3param_fromprivate(&prdata_in, &prdata_out,
+ /*
+ * Do we have a valid private record?
+ */
+ if (!dns_nsec3param_fromprivate(&private, &rdata,
buf, sizeof(buf)))
continue;
- if ((prdata_out.data[1] & DNS_NSEC3FLAG_REMOVE) !=0) {
- prdata_out.data[1] = 0;
+ /*
+ * Remove any NSEC3PARAM records scheduled to be removed.
+ */
+ if (NSEC3REMOVE(rdata.data[1])) {
+ /*
+ * Zero out the flags.
+ */
+ rdata.data[1] = 0;
for (nsec3p = ISC_LIST_HEAD(*nsec3list);
nsec3p != NULL;
nsec3p = next)
{
next = ISC_LIST_NEXT(nsec3p, link);
- if (memcmp(prdata_out.data, nsec3p->data,
- sizeof(nsec3p->data)) == 0) {
+
+ if (nsec3p->length == rdata.length + 1 &&
+ memcmp(rdata.data, nsec3p->data + 1,
+ nsec3p->length - 1) == 0) {
ISC_LIST_UNLINK(*nsec3list,
nsec3p, link);
isc_mem_put(zone->mctx, nsec3p,
@@ -13154,11 +13141,13 @@ save_nsec3param(dns_zone_t *zone, nsec3paramlist_t *nsec3list) {
CHECK(ISC_R_NOMEMORY);
ISC_LINK_INIT(nsec3param, link);
- dns_rdata_init(&prdata_out);
- dns_nsec3param_toprivate(&prdata_in, &prdata_out,
- zone->privatetype, nsec3param->data,
- sizeof(nsec3param->data));
- nsec3param->length = prdata_out.length;
+ /*
+ * Copy the remaining private records so the nsec/nsec3
+ * chain gets created.
+ */
+ INSIST(private.length <= sizeof(nsec3param->data));
+ memmove(nsec3param->data, private.data, private.length);
+ nsec3param->length = private.length;
ISC_LIST_APPEND(*nsec3list, nsec3param, link);
}
@@ -13374,6 +13363,12 @@ receive_secure_db(isc_task_t *task, isc_event_t *event) {
dns_zone_log(zone, ISC_LOG_ERROR, "receive_secure_db: %s",
dns_result_totext(result));
+ while (!ISC_LIST_EMPTY(nsec3list)) {
+ nsec3param_t *nsec3p;
+ nsec3p = ISC_LIST_HEAD(nsec3list);
+ ISC_LIST_UNLINK(nsec3list, nsec3p, link);
+ isc_mem_put(zone->mctx, nsec3p, sizeof(nsec3param_t));
+ }
if (dns_rdataset_isassociated(&rdataset))
dns_rdataset_disassociate(&rdataset);
if (db != NULL) {
@@ -13493,7 +13488,6 @@ zone_replacedb(dns_zone_t *zone, dns_db_t *db, isc_boolean_t dump) {
!DNS_ZONE_FLAG(zone, DNS_ZONEFLG_FORCEXFER))
{
isc_uint32_t serial, oldserial;
- unsigned int soacount;
dns_zone_log(zone, ISC_LOG_DEBUG(3), "generating diffs");
@@ -15691,10 +15685,12 @@ dns_zone_checknames(dns_zone_t *zone, dns_name_t *name, dns_rdata_t *rdata) {
REQUIRE(DNS_ZONE_VALID(zone));
- if (!DNS_ZONE_OPTION(zone, DNS_ZONEOPT_CHECKNAMES))
+ if (!DNS_ZONE_OPTION(zone, DNS_ZONEOPT_CHECKNAMES) &&
+ rdata->type != dns_rdatatype_nsec3)
return (ISC_R_SUCCESS);
- if (DNS_ZONE_OPTION(zone, DNS_ZONEOPT_CHECKNAMESFAIL)) {
+ if (DNS_ZONE_OPTION(zone, DNS_ZONEOPT_CHECKNAMESFAIL) ||
+ rdata->type == dns_rdatatype_nsec3) {
level = ISC_LOG_ERROR;
fail = ISC_TRUE;
}
diff --git a/lib/export/isc/Makefile.in b/lib/export/isc/Makefile.in
index a92f66f30a98..9b0249acf66e 100644
--- a/lib/export/isc/Makefile.in
+++ b/lib/export/isc/Makefile.in
@@ -63,7 +63,7 @@ WIN32OBJS = win32/condition.@O@ win32/dir.@O@ win32/file.@O@ \
# Alphabetically
OBJS = @ISC_EXTRA_OBJS@ \
assertions.@O@ backtrace.@O@ backtrace-emptytbl.@O@ base32.@O@ \
- base64.@O@ buffer.@O@ bufferlist.@O@ \
+ base64.@O@ buffer.@O@ bufferlist.@O@ counter.@O@ \
error.@O@ event.@O@ \
hash.@O@ hex.@O@ hmacmd5.@O@ hmacsha.@O@ \
inet_aton.@O@ iterated_hash.@O@ lex.@O@ lfsr.@O@ log.@O@ \
@@ -86,7 +86,7 @@ ISCDRIVERSRCS = mem.c task.c lib.c timer.c heap.c
SRCS = @ISC_EXTRA_SRCS@ \
assertions.c backtrace.c backtrace-emptytbl.c base32.c \
- base64.c buffer.c bufferlist.c \
+ base64.c buffer.c bufferlist.c counter.c \
error.c event.c \
hash.c hex.c hmacmd5.c hmacsha.c \
inet_aton.c iterated_hash.c lex.c log.c lfsr.c \
diff --git a/lib/export/samples/sample-update.c b/lib/export/samples/sample-update.c
index 758e02eb33fa..f7e7dcc765e2 100644
--- a/lib/export/samples/sample-update.c
+++ b/lib/export/samples/sample-update.c
@@ -38,6 +38,7 @@
#include <isc/mem.h>
#include <isc/parseint.h>
#include <isc/sockaddr.h>
+#include <isc/string.h>
#include <isc/util.h>
#include <dns/callbacks.h>
diff --git a/lib/irs/Makefile.in b/lib/irs/Makefile.in
index c59af263fe4b..ba802bf47833 100644
--- a/lib/irs/Makefile.in
+++ b/lib/irs/Makefile.in
@@ -74,7 +74,7 @@ installdirs:
$(SHELL) ${top_srcdir}/mkinstalldirs ${DESTDIR}${libdir}
install:: timestamp installdirs
- ${LIBTOOL_MODE_INSTALL} ${INSTALL_DATA} libirs.@A@ ${DESTDIR}${libdir}
+ ${LIBTOOL_MODE_INSTALL} ${INSTALL_LIBRARY} libirs.@A@ ${DESTDIR}${libdir}
clean distclean::
rm -f libirs.@A@ libirs.la timestamp
diff --git a/lib/irs/api b/lib/irs/api
index 3f5a2a3b1693..c20ad07b828f 100644
--- a/lib/irs/api
+++ b/lib/irs/api
@@ -5,5 +5,5 @@
# 9.9: 90-109
# 9.9-sub: 130-139
LIBINTERFACE = 91
-LIBREVISION = 0
+LIBREVISION = 1
LIBAGE = 0
diff --git a/lib/irs/context.c b/lib/irs/context.c
index be69622b5b6a..b01087d19808 100644
--- a/lib/irs/context.c
+++ b/lib/irs/context.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
*
* Permission to use, copy, modify, and/or distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
@@ -148,7 +148,7 @@ thread_key_mutex_init(void) {
}
static isc_result_t
-thread_key_init() {
+thread_key_init(void) {
isc_result_t result;
result = isc_once_do(&once, thread_key_mutex_init);
diff --git a/lib/irs/getaddrinfo.c b/lib/irs/getaddrinfo.c
index 24d35bf691d9..f821635e984e 100644
--- a/lib/irs/getaddrinfo.c
+++ b/lib/irs/getaddrinfo.c
@@ -178,6 +178,7 @@ static int add_ipv6(const char *hostname, int flags, struct addrinfo **aip,
int socktype, int port);
static void set_order(int, int (**)(const char *, int, struct addrinfo **,
int, int));
+static void _freeaddrinfo(struct addrinfo *ai);
#define FOUND_IPV4 0x1
#define FOUND_IPV6 0x2
@@ -339,7 +340,7 @@ getaddrinfo(const char *hostname, const char *servname,
if (family == AF_INET6 || family == 0) {
ai = ai_alloc(AF_INET6, sizeof(struct sockaddr_in6));
if (ai == NULL) {
- freeaddrinfo(ai_list);
+ _freeaddrinfo(ai_list);
return (EAI_MEMORY);
}
ai->ai_socktype = socktype;
@@ -458,7 +459,7 @@ getaddrinfo(const char *hostname, const char *servname,
NI_NUMERICHOST) == 0) {
ai->ai_canonname = strdup(nbuf);
if (ai->ai_canonname == NULL) {
- freeaddrinfo(ai);
+ _freeaddrinfo(ai);
return (EAI_MEMORY);
}
} else {
@@ -481,7 +482,7 @@ getaddrinfo(const char *hostname, const char *servname,
socktype, port);
if (err != 0) {
if (ai_list != NULL) {
- freeaddrinfo(ai_list);
+ _freeaddrinfo(ai_list);
ai_list = NULL;
}
break;
@@ -831,7 +832,7 @@ process_answer(isc_task_t *task, isc_event_t *event) {
error = EAI_NONAME;
} else {
if (trans->ai_sentinel.ai_next != NULL) {
- freeaddrinfo(trans->ai_sentinel.ai_next);
+ _freeaddrinfo(trans->ai_sentinel.ai_next);
trans->ai_sentinel.ai_next = NULL;
}
}
@@ -1123,7 +1124,7 @@ add_ipv4(const char *hostname, int flags, struct addrinfo **aip,
ai = ai_clone(*aip, AF_INET); /* don't use ai_clone() */
if (ai == NULL) {
- freeaddrinfo(*aip);
+ _freeaddrinfo(*aip);
return (EAI_MEMORY);
}
@@ -1161,6 +1162,11 @@ add_ipv6(const char *hostname, int flags, struct addrinfo **aip,
/*% Free address info. */
void
freeaddrinfo(struct addrinfo *ai) {
+ _freeaddrinfo(ai);
+}
+
+static void
+_freeaddrinfo(struct addrinfo *ai) {
struct addrinfo *ai_next;
while (ai != NULL) {
diff --git a/lib/irs/include/irs/Makefile.in b/lib/irs/include/irs/Makefile.in
index eca98eb13671..2a4797551674 100644
--- a/lib/irs/include/irs/Makefile.in
+++ b/lib/irs/include/irs/Makefile.in
@@ -23,7 +23,7 @@ top_srcdir = @top_srcdir@
# machine generated. The latter are handled specially in the
# install target below.
#
-HEADERS = version.h
+HEADERS = context.h dnsconf.h resconf.h types.h version.h
SUBDIRS =
TARGETS =
@@ -39,8 +39,6 @@ install:: installdirs
done
${INSTALL_DATA} netdb.h ${DESTDIR}${includedir}/irs
${INSTALL_DATA} platform.h ${DESTDIR}${includedir}/irs
- ${INSTALL_DATA} resconf.h ${DESTDIR}${includedir}/irs
- ${INSTALL_DATA} types.h ${DESTDIR}${includedir}/irs
distclean::
rm -f netdb.h platform.h
diff --git a/lib/isc/Makefile.in b/lib/isc/Makefile.in
index f513eb97ff9e..3176a267988d 100644
--- a/lib/isc/Makefile.in
+++ b/lib/isc/Makefile.in
@@ -13,8 +13,6 @@
# OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
# PERFORMANCE OF THIS SOFTWARE.
-# $Id$
-
srcdir = @srcdir@
VPATH = @srcdir@
top_srcdir = @top_srcdir@
@@ -53,7 +51,7 @@ WIN32OBJS = win32/condition.@O@ win32/dir.@O@ win32/file.@O@ \
OBJS = @ISC_EXTRA_OBJS@ \
assertions.@O@ backtrace.@O@ base32.@O@ base64.@O@ \
bitstring.@O@ buffer.@O@ bufferlist.@O@ commandline.@O@ \
- error.@O@ event.@O@ \
+ counter.@O@ error.@O@ event.@O@ \
hash.@O@ heap.@O@ hex.@O@ hmacmd5.@O@ hmacsha.@O@ \
httpd.@O@ inet_aton.@O@ iterated_hash.@O@ \
lex.@O@ lfsr.@O@ lib.@O@ log.@O@ \
@@ -71,8 +69,8 @@ SYMTBLOBJS = backtrace-emptytbl.@O@
# Alphabetically
SRCS = @ISC_EXTRA_SRCS@ \
assertions.c backtrace.c base32.c base64.c bitstring.c \
- buffer.c bufferlist.c commandline.c error.c event.c \
- heap.c hex.c hmacmd5.c hmacsha.c \
+ buffer.c bufferlist.c commandline.c counter.c \
+ error.c event.c heap.c hex.c hmacmd5.c hmacsha.c \
httpd.c inet_aton.c iterated_hash.c \
lex.c lfsr.c lib.c log.c \
md5.c mem.c mutexblock.c \
@@ -134,7 +132,7 @@ installdirs:
$(SHELL) ${top_srcdir}/mkinstalldirs ${DESTDIR}${libdir}
install:: timestamp installdirs
- ${LIBTOOL_MODE_INSTALL} ${INSTALL_DATA} libisc.@A@ ${DESTDIR}${libdir}
+ ${LIBTOOL_MODE_INSTALL} ${INSTALL_LIBRARY} libisc.@A@ ${DESTDIR}${libdir}
clean distclean::
rm -f libisc.@A@ libisc-nosymtbl.@A@ libisc.la \
diff --git a/lib/isc/api b/lib/isc/api
index a1fe77ff05b6..d8990f0ffbea 100644
--- a/lib/isc/api
+++ b/lib/isc/api
@@ -4,6 +4,6 @@
# 9.8: 80-89, 120-129
# 9.9: 90-109
# 9.9-sub: 130-139
-LIBINTERFACE = 100
+LIBINTERFACE = 103
LIBREVISION = 0
-LIBAGE = 5
+LIBAGE = 8
diff --git a/lib/isc/backtrace.c b/lib/isc/backtrace.c
index a5b1a0fdba7e..2a510421474f 100644
--- a/lib/isc/backtrace.c
+++ b/lib/isc/backtrace.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2009, 2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2009, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
*
* Permission to use, copy, modify, and/or distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
@@ -140,7 +140,7 @@ isc_backtrace_gettrace(void **addrs, int maxaddrs, int *nframes) {
#elif defined(BACKTRACE_X86STACK)
#ifdef __x86_64__
static unsigned long
-getrbp() {
+getrbp(void) {
__asm("movq %rbp, %rax\n");
}
#endif
diff --git a/lib/isc/base32.c b/lib/isc/base32.c
index ad0b0da569e1..2ee99b182426 100644
--- a/lib/isc/base32.c
+++ b/lib/isc/base32.c
@@ -14,7 +14,7 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
-/* $Id: base32.c,v 1.6 2009/10/21 01:22:29 each Exp $ */
+/* $Id: base32.c,v 1.6.698.1 2012/02/15 05:00:16 marka Exp $ */
/*! \file */
@@ -54,7 +54,7 @@ static const char base32hex[] =
static isc_result_t
base32_totext(isc_region_t *source, int wordlength, const char *wordbreak,
- isc_buffer_t *target, const char base[])
+ isc_buffer_t *target, const char base[], char pad)
{
char buf[9];
unsigned int loops = 0;
@@ -67,8 +67,8 @@ base32_totext(isc_region_t *source, int wordlength, const char *wordbreak,
buf[0] = base[((source->base[0]>>3)&0x1f)]; /* 5 + */
if (source->length == 1) {
buf[1] = base[(source->base[0]<<2)&0x1c];
- buf[2] = buf[3] = buf[4] = '=';
- buf[5] = buf[6] = buf[7] = '=';
+ buf[2] = buf[3] = buf[4] = pad;
+ buf[5] = buf[6] = buf[7] = pad;
RETERR(str_totext(buf, target));
break;
}
@@ -77,7 +77,7 @@ base32_totext(isc_region_t *source, int wordlength, const char *wordbreak,
buf[2] = base[((source->base[1]>>1)&0x1f)]; /* 5 + */
if (source->length == 2) {
buf[3] = base[(source->base[1]<<4)&0x10];
- buf[4] = buf[5] = buf[6] = buf[7] = '=';
+ buf[4] = buf[5] = buf[6] = buf[7] = pad;
RETERR(str_totext(buf, target));
break;
}
@@ -85,7 +85,7 @@ base32_totext(isc_region_t *source, int wordlength, const char *wordbreak,
((source->base[2]>>4)&0x0f)]; /* 4 + */
if (source->length == 3) {
buf[4] = base[(source->base[2]<<1)&0x1e];
- buf[5] = buf[6] = buf[7] = '=';
+ buf[5] = buf[6] = buf[7] = pad;
RETERR(str_totext(buf, target));
break;
}
@@ -94,7 +94,7 @@ base32_totext(isc_region_t *source, int wordlength, const char *wordbreak,
buf[5] = base[((source->base[3]>>2)&0x1f)]; /* 5 + */
if (source->length == 4) {
buf[6] = base[(source->base[3]<<3)&0x18];
- buf[7] = '=';
+ buf[7] = pad;
RETERR(str_totext(buf, target));
break;
}
@@ -121,7 +121,8 @@ isc_result_t
isc_base32_totext(isc_region_t *source, int wordlength,
const char *wordbreak, isc_buffer_t *target)
{
- return (base32_totext(source, wordlength, wordbreak, target, base32));
+ return (base32_totext(source, wordlength, wordbreak, target,
+ base32, '='));
}
isc_result_t
@@ -129,7 +130,15 @@ isc_base32hex_totext(isc_region_t *source, int wordlength,
const char *wordbreak, isc_buffer_t *target)
{
return (base32_totext(source, wordlength, wordbreak, target,
- base32hex));
+ base32hex, '='));
+}
+
+isc_result_t
+isc_base32hexnp_totext(isc_region_t *source, int wordlength,
+ const char *wordbreak, isc_buffer_t *target)
+{
+ return (base32_totext(source, wordlength, wordbreak, target,
+ base32hex, 0));
}
/*%
@@ -143,11 +152,12 @@ typedef struct {
int val[8];
const char *base; /*%< Which encoding we are using */
int seen_32; /*%< Number of significant bytes if non zero */
+ isc_boolean_t pad; /*%< Expect padding */
} base32_decode_ctx_t;
static inline void
-base32_decode_init(base32_decode_ctx_t *ctx, int length,
- const char base[], isc_buffer_t *target)
+base32_decode_init(base32_decode_ctx_t *ctx, int length, const char base[],
+ isc_boolean_t pad, isc_buffer_t *target)
{
ctx->digits = 0;
ctx->seen_end = ISC_FALSE;
@@ -155,6 +165,7 @@ base32_decode_init(base32_decode_ctx_t *ctx, int length,
ctx->length = length;
ctx->target = target;
ctx->base = base;
+ ctx->pad = pad;
}
static inline isc_result_t
@@ -167,16 +178,25 @@ base32_decode_char(base32_decode_ctx_t *ctx, int c) {
if ((s = strchr(ctx->base, c)) == NULL)
return (ISC_R_BADBASE32);
last = (unsigned int)(s - ctx->base);
+
/*
* Handle lower case.
*/
if (last > 32)
last -= 33;
+
/*
* Check that padding is contiguous.
*/
if (last != 32 && ctx->seen_32 != 0)
return (ISC_R_BADBASE32);
+
+ /*
+ * If padding is not permitted flag padding as a error.
+ */
+ if (last == 32 && !ctx->pad)
+ return (ISC_R_BADBASE32);
+
/*
* Check that padding starts at the right place and that
* bits that should be zero are.
@@ -212,6 +232,7 @@ base32_decode_char(base32_decode_ctx_t *ctx, int c) {
ctx->seen_32 = 4;
break;
}
+
/*
* Zero fill pad values.
*/
@@ -244,23 +265,33 @@ base32_decode_char(base32_decode_ctx_t *ctx, int c) {
static inline isc_result_t
base32_decode_finish(base32_decode_ctx_t *ctx) {
+
if (ctx->length > 0)
return (ISC_R_UNEXPECTEDEND);
+ /*
+ * Add missing padding if required.
+ */
+ if (!ctx->pad && ctx->digits != 0) {
+ ctx->pad = ISC_TRUE;
+ do {
+ RETERR(base32_decode_char(ctx, '='));
+ } while (ctx->digits != 0);
+ }
if (ctx->digits != 0)
return (ISC_R_BADBASE32);
return (ISC_R_SUCCESS);
}
static isc_result_t
-base32_tobuffer(isc_lex_t *lexer, const char base[], isc_buffer_t *target,
- int length)
+base32_tobuffer(isc_lex_t *lexer, const char base[], isc_boolean_t pad,
+ isc_buffer_t *target, int length)
{
base32_decode_ctx_t ctx;
isc_textregion_t *tr;
isc_token_t token;
isc_boolean_t eol;
- base32_decode_init(&ctx, length, base, target);
+ base32_decode_init(&ctx, length, base, pad, target);
while (!ctx.seen_end && (ctx.length != 0)) {
unsigned int i;
@@ -285,19 +316,26 @@ base32_tobuffer(isc_lex_t *lexer, const char base[], isc_buffer_t *target,
isc_result_t
isc_base32_tobuffer(isc_lex_t *lexer, isc_buffer_t *target, int length) {
- return (base32_tobuffer(lexer, base32, target, length));
+ return (base32_tobuffer(lexer, base32, ISC_TRUE, target, length));
}
isc_result_t
isc_base32hex_tobuffer(isc_lex_t *lexer, isc_buffer_t *target, int length) {
- return (base32_tobuffer(lexer, base32hex, target, length));
+ return (base32_tobuffer(lexer, base32hex, ISC_TRUE, target, length));
+}
+
+isc_result_t
+isc_base32hexnp_tobuffer(isc_lex_t *lexer, isc_buffer_t *target, int length) {
+ return (base32_tobuffer(lexer, base32hex, ISC_FALSE, target, length));
}
static isc_result_t
-base32_decodestring(const char *cstr, const char base[], isc_buffer_t *target) {
+base32_decodestring(const char *cstr, const char base[], isc_boolean_t pad,
+ isc_buffer_t *target)
+{
base32_decode_ctx_t ctx;
- base32_decode_init(&ctx, -1, base, target);
+ base32_decode_init(&ctx, -1, base, pad, target);
for (;;) {
int c = *cstr++;
if (c == '\0')
@@ -312,19 +350,26 @@ base32_decodestring(const char *cstr, const char base[], isc_buffer_t *target) {
isc_result_t
isc_base32_decodestring(const char *cstr, isc_buffer_t *target) {
- return (base32_decodestring(cstr, base32, target));
+ return (base32_decodestring(cstr, base32, ISC_TRUE, target));
}
isc_result_t
isc_base32hex_decodestring(const char *cstr, isc_buffer_t *target) {
- return (base32_decodestring(cstr, base32hex, target));
+ return (base32_decodestring(cstr, base32hex, ISC_TRUE, target));
+}
+
+isc_result_t
+isc_base32hexnp_decodestring(const char *cstr, isc_buffer_t *target) {
+ return (base32_decodestring(cstr, base32hex, ISC_FALSE, target));
}
static isc_result_t
-base32_decoderegion(isc_region_t *source, const char base[], isc_buffer_t *target) {
+base32_decoderegion(isc_region_t *source, const char base[],
+ isc_boolean_t pad, isc_buffer_t *target)
+{
base32_decode_ctx_t ctx;
- base32_decode_init(&ctx, -1, base, target);
+ base32_decode_init(&ctx, -1, base, pad, target);
while (source->length != 0) {
int c = *source->base;
RETERR(base32_decode_char(&ctx, c));
@@ -336,12 +381,17 @@ base32_decoderegion(isc_region_t *source, const char base[], isc_buffer_t *targe
isc_result_t
isc_base32_decoderegion(isc_region_t *source, isc_buffer_t *target) {
- return (base32_decoderegion(source, base32, target));
+ return (base32_decoderegion(source, base32, ISC_TRUE, target));
}
isc_result_t
isc_base32hex_decoderegion(isc_region_t *source, isc_buffer_t *target) {
- return (base32_decoderegion(source, base32hex, target));
+ return (base32_decoderegion(source, base32hex, ISC_TRUE, target));
+}
+
+isc_result_t
+isc_base32hexnp_decoderegion(isc_region_t *source, isc_buffer_t *target) {
+ return (base32_decoderegion(source, base32hex, ISC_FALSE, target));
}
static isc_result_t
diff --git a/lib/isc/counter.c b/lib/isc/counter.c
new file mode 100644
index 000000000000..d7d187bbeee4
--- /dev/null
+++ b/lib/isc/counter.c
@@ -0,0 +1,138 @@
+/*
+ * Copyright (C) 2014 Internet Systems Consortium, Inc. ("ISC")
+ *
+ * Permission to use, copy, modify, and/or distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
+ * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+ * AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
+ * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+ * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
+ * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+ * PERFORMANCE OF THIS SOFTWARE.
+ */
+
+/*! \file */
+
+#include <config.h>
+
+#include <stddef.h>
+
+#include <isc/counter.h>
+#include <isc/magic.h>
+#include <isc/mem.h>
+#include <isc/util.h>
+
+#define COUNTER_MAGIC ISC_MAGIC('C', 'n', 't', 'r')
+#define VALID_COUNTER(r) ISC_MAGIC_VALID(r, COUNTER_MAGIC)
+
+struct isc_counter {
+ unsigned int magic;
+ isc_mem_t *mctx;
+ isc_mutex_t lock;
+ unsigned int references;
+ unsigned int limit;
+ unsigned int used;
+};
+
+isc_result_t
+isc_counter_create(isc_mem_t *mctx, int limit, isc_counter_t **counterp) {
+ isc_result_t result;
+ isc_counter_t *counter;
+
+ REQUIRE(counterp != NULL && *counterp == NULL);
+
+ counter = isc_mem_get(mctx, sizeof(*counter));
+ if (counter == NULL)
+ return (ISC_R_NOMEMORY);
+
+ result = isc_mutex_init(&counter->lock);
+ if (result != ISC_R_SUCCESS) {
+ isc_mem_put(mctx, counter, sizeof(*counter));
+ return (result);
+ }
+
+ counter->mctx = NULL;
+ isc_mem_attach(mctx, &counter->mctx);
+
+ counter->references = 1;
+ counter->limit = limit;
+ counter->used = 0;
+
+ counter->magic = COUNTER_MAGIC;
+ *counterp = counter;
+ return (ISC_R_SUCCESS);
+}
+
+isc_result_t
+isc_counter_increment(isc_counter_t *counter) {
+ isc_result_t result = ISC_R_SUCCESS;
+
+ LOCK(&counter->lock);
+ counter->used++;
+ if (counter->limit != 0 && counter->used >= counter->limit)
+ result = ISC_R_QUOTA;
+ UNLOCK(&counter->lock);
+
+ return (result);
+}
+
+unsigned int
+isc_counter_used(isc_counter_t *counter) {
+ REQUIRE(VALID_COUNTER(counter));
+
+ return (counter->used);
+}
+
+void
+isc_counter_setlimit(isc_counter_t *counter, int limit) {
+ REQUIRE(VALID_COUNTER(counter));
+
+ LOCK(&counter->lock);
+ counter->limit = limit;
+ UNLOCK(&counter->lock);
+}
+
+void
+isc_counter_attach(isc_counter_t *source, isc_counter_t **targetp) {
+ REQUIRE(VALID_COUNTER(source));
+ REQUIRE(targetp != NULL && *targetp == NULL);
+
+ LOCK(&source->lock);
+ source->references++;
+ INSIST(source->references > 0);
+ UNLOCK(&source->lock);
+
+ *targetp = source;
+}
+
+static void
+destroy(isc_counter_t *counter) {
+ counter->magic = 0;
+ isc_mutex_destroy(&counter->lock);
+ isc_mem_putanddetach(&counter->mctx, counter, sizeof(*counter));
+}
+
+void
+isc_counter_detach(isc_counter_t **counterp) {
+ isc_counter_t *counter;
+ isc_boolean_t want_destroy = ISC_FALSE;
+
+ REQUIRE(counterp != NULL && *counterp != NULL);
+ counter = *counterp;
+ REQUIRE(VALID_COUNTER(counter));
+
+ *counterp = NULL;
+
+ LOCK(&counter->lock);
+ INSIST(counter->references > 0);
+ counter->references--;
+ if (counter->references == 0)
+ want_destroy = ISC_TRUE;
+ UNLOCK(&counter->lock);
+
+ if (want_destroy)
+ destroy(counter);
+}
diff --git a/lib/isc/event.c b/lib/isc/event.c
index 8ab75240dca9..895e3d82fe8d 100644
--- a/lib/isc/event.c
+++ b/lib/isc/event.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1998-2001 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -41,7 +41,26 @@ destroy(isc_event_t *event) {
isc_event_t *
isc_event_allocate(isc_mem_t *mctx, void *sender, isc_eventtype_t type,
- isc_taskaction_t action, const void *arg, size_t size)
+ isc_taskaction_t action, void *arg, size_t size)
+{
+ isc_event_t *event;
+
+ REQUIRE(size >= sizeof(struct isc_event));
+ REQUIRE(action != NULL);
+
+ event = isc_mem_get(mctx, size);
+ if (event == NULL)
+ return (NULL);
+
+ ISC_EVENT_INIT(event, size, 0, NULL, type, action, arg,
+ sender, destroy, mctx);
+
+ return (event);
+}
+
+isc_event_t *
+isc_event_constallocate(isc_mem_t *mctx, void *sender, isc_eventtype_t type,
+ isc_taskaction_t action, const void *arg, size_t size)
{
isc_event_t *event;
void *deconst_arg;
diff --git a/lib/isc/hash.c b/lib/isc/hash.c
index f70e7943312d..e12c47183f21 100644
--- a/lib/isc/hash.c
+++ b/lib/isc/hash.c
@@ -283,7 +283,7 @@ isc_hash_ctxinit(isc_hash_t *hctx) {
}
void
-isc_hash_init() {
+isc_hash_init(void) {
INSIST(hash != NULL && VALID_HASH(hash));
isc_hash_ctxinit(hash);
@@ -348,7 +348,7 @@ isc_hash_ctxdetach(isc_hash_t **hctxp) {
}
void
-isc_hash_destroy() {
+isc_hash_destroy(void) {
unsigned int refs;
INSIST(hash != NULL && VALID_HASH(hash));
diff --git a/lib/isc/include/isc/Makefile.in b/lib/isc/include/isc/Makefile.in
index 54524beddc2a..572bb3e1046b 100644
--- a/lib/isc/include/isc/Makefile.in
+++ b/lib/isc/include/isc/Makefile.in
@@ -13,8 +13,6 @@
# OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
# PERFORMANCE OF THIS SOFTWARE.
-# $Id$
-
srcdir = @srcdir@
VPATH = @srcdir@
top_srcdir = @top_srcdir@
@@ -26,18 +24,20 @@ top_srcdir = @top_srcdir@
# machine generated. The latter are handled specially in the
# install target below.
#
-HEADERS = app.h assertions.h base64.h bind9.h bitstring.h boolean.h \
- buffer.h bufferlist.h commandline.h entropy.h error.h event.h \
+HEADERS = app.h assertions.h backtrace.h base32.h base64.h \
+ bind9.h bitstring.h boolean.h buffer.h bufferlist.h \
+ commandline.h counter.h entropy.h error.h event.h \
eventclass.h file.h formatcheck.h fsaccess.h \
hash.h heap.h hex.h hmacmd5.h hmacsha.h httpd.h \
interfaceiter.h @ISC_IPV6_H@ iterated_hash.h \
lang.h lex.h lfsr.h lib.h list.h log.h \
magic.h md5.h mem.h msgcat.h msgs.h mutexblock.h \
- namespace.h netaddr.h ondestroy.h os.h parseint.h \
- print.h quota.h radix.h random.h ratelimiter.h \
- refcount.h regex.h region.h resource.h \
- result.h resultclass.h rwlock.h safe.h serial.h sha1.h sha2.h \
- sockaddr.h socket.h stdio.h stdlib.h string.h symtab.h \
+ namespace.h netaddr.h netscope.h ondestroy.h os.h parseint.h \
+ pool.h portset.h print.h queue.h quota.h \
+ radix.h random.h ratelimiter.h refcount.h regex.h \
+ region.h resource.h result.h resultclass.h rwlock.h \
+ safe.h serial.h sha1.h sha2.h sockaddr.h socket.h \
+ stats.h stdio.h stdlib.h string.h symtab.h \
task.h taskpool.h timer.h tm.h types.h util.h version.h \
xml.h
diff --git a/lib/isc/include/isc/base32.h b/lib/isc/include/isc/base32.h
index 978a8db463ae..347b8ed40a09 100644
--- a/lib/isc/include/isc/base32.h
+++ b/lib/isc/include/isc/base32.h
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2008 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2008, 2014 Internet Systems Consortium, Inc. ("ISC")
*
* Permission to use, copy, modify, and/or distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
@@ -14,8 +14,6 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
-/* $Id: base32.h,v 1.3 2008/09/25 04:02:39 tbox Exp $ */
-
#ifndef ISC_BASE32_H
#define ISC_BASE32_H 1
@@ -27,6 +25,8 @@
*
* Base 32 hex preserves the sort order of data when it is encoded /
* decoded.
+ *
+ * Base 32 hex "np" is base 32 hex but no padding is produced or accepted.
*/
#include <isc/lang.h>
@@ -44,6 +44,9 @@ isc_base32_totext(isc_region_t *source, int wordlength,
isc_result_t
isc_base32hex_totext(isc_region_t *source, int wordlength,
const char *wordbreak, isc_buffer_t *target);
+isc_result_t
+isc_base32hexnp_totext(isc_region_t *source, int wordlength,
+ const char *wordbreak, isc_buffer_t *target);
/*!<
* \brief Convert data into base32 encoded text.
*
@@ -69,8 +72,11 @@ isc_result_t
isc_base32_decodestring(const char *cstr, isc_buffer_t *target);
isc_result_t
isc_base32hex_decodestring(const char *cstr, isc_buffer_t *target);
+isc_result_t
+isc_base32hexnp_decodestring(const char *cstr, isc_buffer_t *target);
/*!<
- * \brief Decode a null-terminated base32 string.
+ * \brief Decode a null-terminated string in base32, base32hex, or
+ * base32hex non-padded.
*
* Requires:
*\li 'cstr' is non-null.
@@ -91,8 +97,11 @@ isc_result_t
isc_base32_tobuffer(isc_lex_t *lexer, isc_buffer_t *target, int length);
isc_result_t
isc_base32hex_tobuffer(isc_lex_t *lexer, isc_buffer_t *target, int length);
+isc_result_t
+isc_base32hexnp_tobuffer(isc_lex_t *lexer, isc_buffer_t *target, int length);
/*!<
- * \brief Convert base32 encoded text from a lexer context into data.
+ * \brief Convert text encoded in base32, base32hex, or base32hex
+ * non-padded from a lexer context into data.
*
* Requires:
*\li 'lex' is a valid lexer context
@@ -110,8 +119,11 @@ isc_result_t
isc_base32_decoderegion(isc_region_t *source, isc_buffer_t *target);
isc_result_t
isc_base32hex_decoderegion(isc_region_t *source, isc_buffer_t *target);
+isc_result_t
+isc_base32hexnp_decoderegion(isc_region_t *source, isc_buffer_t *target);
/*!<
- * \brief Decode a packed (no white space permitted) base32 region.
+ * \brief Decode a packed (no white space permitted) region in
+ * base32, base32hex or base32hex non-padded.
*
* Requires:
*\li 'source' is a valid region.
diff --git a/lib/isc/include/isc/buffer.h b/lib/isc/include/isc/buffer.h
index 5aff01c24790..f9c0775790e7 100644
--- a/lib/isc/include/isc/buffer.h
+++ b/lib/isc/include/isc/buffer.h
@@ -664,12 +664,12 @@ ISC_LANG_ENDDECLS
/*! \note
* XXXDCL Something more could be done with initializing buffers that
- * point to const data. For example, a new function, isc_buffer_initconst,
- * could be used, and a new boolean flag in the buffer structure could
- * indicate whether the buffer was initialized with that function.
- * (isc_bufer_init itself would be reprototyped to *not* have its "base"
- * parameter be const.) Then if the boolean were true, the isc_buffer_put*
- * functions could assert a contractual requirement for a non-const buffer.
+ * point to const data. For example, isc_buffer_constinit() could
+ * set a new boolean flag in the buffer structure indicating whether
+ * the buffer was initialized with that function. * Then if the
+ * boolean were true, the isc_buffer_put* functions could assert a
+ * contractual requirement for a non-const buffer.
+ *
* One drawback is that the isc_buffer_* functions (macros) that return
* pointers would still need to return non-const pointers to avoid compiler
* warnings, so it would be up to code that uses them to have to deal
diff --git a/lib/isc/include/isc/counter.h b/lib/isc/include/isc/counter.h
new file mode 100644
index 000000000000..e7ebd2533254
--- /dev/null
+++ b/lib/isc/include/isc/counter.h
@@ -0,0 +1,90 @@
+/*
+ * Copyright (C) 2014 Internet Systems Consortium, Inc. ("ISC")
+ *
+ * Permission to use, copy, modify, and/or distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
+ * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+ * AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
+ * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+ * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
+ * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+ * PERFORMANCE OF THIS SOFTWARE.
+ */
+
+#ifndef ISC_COUNTER_H
+#define ISC_COUNTER_H 1
+
+/*****
+ ***** Module Info
+ *****/
+
+/*! \file isc/counter.h
+ *
+ * \brief The isc_counter_t object is a simplified version of the
+ * isc_quota_t object; it tracks the consumption of limited
+ * resources, returning an error condition when the quota is
+ * exceeded. However, unlike isc_quota_t, attaching and detaching
+ * from a counter object does not increment or decrement the counter.
+ */
+
+/***
+ *** Imports.
+ ***/
+
+#include <isc/lang.h>
+#include <isc/mutex.h>
+#include <isc/types.h>
+
+/*****
+ ***** Types.
+ *****/
+
+ISC_LANG_BEGINDECLS
+
+isc_result_t
+isc_counter_create(isc_mem_t *mctx, int limit, isc_counter_t **counterp);
+/*%<
+ * Allocate and initialize a counter object.
+ */
+
+isc_result_t
+isc_counter_increment(isc_counter_t *counter);
+/*%<
+ * Increment the counter.
+ *
+ * If the counter limit is nonzero and has been reached, then
+ * return ISC_R_QUOTA, otherwise ISC_R_SUCCESS. (The counter is
+ * incremented regardless of return value.)
+ */
+
+unsigned int
+isc_counter_used(isc_counter_t *counter);
+/*%<
+ * Return the current counter value.
+ */
+
+void
+isc_counter_setlimit(isc_counter_t *counter, int limit);
+/*%<
+ * Set the counter limit.
+ */
+
+void
+isc_counter_attach(isc_counter_t *source, isc_counter_t **targetp);
+/*%<
+ * Attach to a counter object, increasing its reference counter.
+ */
+
+void
+isc_counter_detach(isc_counter_t **counterp);
+/*%<
+ * Detach (and destroy if reference counter has dropped to zero)
+ * a counter object.
+ */
+
+ISC_LANG_ENDDECLS
+
+#endif /* ISC_COUNTER_H */
diff --git a/lib/isc/include/isc/event.h b/lib/isc/include/isc/event.h
index 68fabb2fcc3c..38206f53b9c9 100644
--- a/lib/isc/include/isc/event.h
+++ b/lib/isc/include/isc/event.h
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2007, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1998-2002 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -90,9 +90,12 @@ ISC_LANG_BEGINDECLS
isc_event_t *
isc_event_allocate(isc_mem_t *mctx, void *sender, isc_eventtype_t type,
- isc_taskaction_t action, const void *arg, size_t size);
+ isc_taskaction_t action, void *arg, size_t size);
+isc_event_t *
+isc_event_constallocate(isc_mem_t *mctx, void *sender, isc_eventtype_t type,
+ isc_taskaction_t action, const void *arg, size_t size);
/*%<
- * Allocate an event structure.
+ * Allocate an event structure.
*
* Allocate and initialize in a structure with initial elements
* defined by:
@@ -103,7 +106,7 @@ isc_event_allocate(isc_mem_t *mctx, void *sender, isc_eventtype_t type,
* ...
* };
* \endcode
- *
+ *
* Requires:
*\li 'size' >= sizeof(struct isc_event)
*\li 'action' to be non NULL
diff --git a/lib/isc/include/isc/file.h b/lib/isc/include/isc/file.h
index a974bbd7219b..7137410b613d 100644
--- a/lib/isc/include/isc/file.h
+++ b/lib/isc/include/isc/file.h
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2007, 2009, 2011-2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2007, 2009, 2011-2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 2000, 2001 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -62,7 +62,7 @@ isc_file_getmodtime(const char *file, isc_time_t *time);
*\li #ISC_R_NOPERM
* The file's metainformation could not be retrieved because
* permission was denied to some part of the file's path.
- *\li #ISC_R_EIO
+ *\li #ISC_R_IOERROR
* Hardware error interacting with the filesystem.
*\li #ISC_R_UNEXPECTED
* Something totally unexpected happened.
@@ -213,7 +213,7 @@ isc_file_isplainfile(const char *name);
* permitted in addition to ISC_R_SUCCESS. This is done since
* the next call in logconf.c is to isc_stdio_open(), which
* will create the file if it can.
- *\li #other ISC_R_* errors translated from errno
+ *\li other ISC_R_* errors translated from errno
* These occur when stat returns -1 and an errno.
*/
@@ -229,7 +229,7 @@ isc_file_isdirectory(const char *name);
* File is not a directory.
*\li #ISC_R_FILENOTFOUND
* File does not exist.
- *\li #other ISC_R_* errors translated from errno
+ *\li other ISC_R_* errors translated from errno
* These occur when stat returns -1 and an errno.
*/
diff --git a/lib/isc/include/isc/iterated_hash.h b/lib/isc/include/isc/iterated_hash.h
index a8173f0ab22f..5c0512c328c1 100644
--- a/lib/isc/include/isc/iterated_hash.h
+++ b/lib/isc/include/isc/iterated_hash.h
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2008 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2008, 2014 Internet Systems Consortium, Inc. ("ISC")
*
* Permission to use, copy, modify, and/or distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
@@ -23,7 +23,7 @@
#include <isc/sha1.h>
/*
- * The maximal hash length that can be encoded it a name
+ * The maximal hash length that can be encoded in a name
* using base32hex. floor(255/8)*5
*/
#define NSEC3_MAX_HASH_LENGTH 155
diff --git a/lib/isc/include/isc/print.h b/lib/isc/include/isc/print.h
index cd1e38eaf6fb..2b9169001fec 100644
--- a/lib/isc/include/isc/print.h
+++ b/lib/isc/include/isc/print.h
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2007, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2001, 2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -38,10 +38,13 @@
*/
#if !defined(ISC_PLATFORM_NEEDVSNPRINTF) && defined(ISC__PRINT_SOURCE)
#define ISC_PLATFORM_NEEDVSNPRINTF
+#undef snprintf
+#undef vsnprintf
#endif
#if !defined(ISC_PLATFORM_NEEDSPRINTF) && defined(ISC__PRINT_SOURCE)
#define ISC_PLATFORM_NEEDSPRINTF
+#undef sprintf
#endif
/***
diff --git a/lib/isc/include/isc/result.h b/lib/isc/include/isc/result.h
index dcd457b3d1b0..ed1bc63e7364 100644
--- a/lib/isc/include/isc/result.h
+++ b/lib/isc/include/isc/result.h
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2009, 2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2009, 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1998-2001, 2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -88,9 +88,10 @@
#define ISC_R_BADADDRESSFORM 59 /*%< invalid address format */
#define ISC_R_BADBASE32 60 /*%< bad base32 encoding */
#define ISC_R_UNSET 61 /*%< unset */
+#define ISC_R_MULTIPLE 62 /*%< multiple */
/*% Not a result code: the number of results. */
-#define ISC_R_NRESULTS 62
+#define ISC_R_NRESULTS 63
ISC_LANG_BEGINDECLS
diff --git a/lib/isc/include/isc/socket.h b/lib/isc/include/isc/socket.h
index 2ccd41a2d5c3..97e2f7605b9c 100644
--- a/lib/isc/include/isc/socket.h
+++ b/lib/isc/include/isc/socket.h
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2009, 2011-2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2009, 2011-2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1998-2002 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -281,7 +281,7 @@ typedef struct isc_socketmethods {
unsigned int options);
isc_result_t (*sendto)(isc_socket_t *sock, isc_region_t *region,
isc_task_t *task, isc_taskaction_t action,
- const void *arg, isc_sockaddr_t *address,
+ void *arg, isc_sockaddr_t *address,
struct in6_pktinfo *pktinfo);
isc_result_t (*sendto2)(isc_socket_t *sock, isc_region_t *region,
isc_task_t *task, isc_sockaddr_t *address,
@@ -290,10 +290,10 @@ typedef struct isc_socketmethods {
unsigned int flags);
isc_result_t (*connect)(isc_socket_t *sock, isc_sockaddr_t *addr,
isc_task_t *task, isc_taskaction_t action,
- const void *arg);
+ void *arg);
isc_result_t (*recv)(isc_socket_t *sock, isc_region_t *region,
unsigned int minimum, isc_task_t *task,
- isc_taskaction_t action, const void *arg);
+ isc_taskaction_t action, void *arg);
isc_result_t (*recv2)(isc_socket_t *sock, isc_region_t *region,
unsigned int minimum, isc_task_t *task,
isc_socketevent_t *event, unsigned int flags);
@@ -675,7 +675,7 @@ isc_socket_listen(isc_socket_t *sock, unsigned int backlog);
isc_result_t
isc_socket_accept(isc_socket_t *sock,
- isc_task_t *task, isc_taskaction_t action, const void *arg);
+ isc_task_t *task, isc_taskaction_t action, void *arg);
/*%<
* Queue accept event. When a new connection is received, the task will
* get an ISC_SOCKEVENT_NEWCONN event with the sender set to the listen
@@ -699,7 +699,7 @@ isc_socket_accept(isc_socket_t *sock,
isc_result_t
isc_socket_connect(isc_socket_t *sock, isc_sockaddr_t *addressp,
isc_task_t *task, isc_taskaction_t action,
- const void *arg);
+ void *arg);
/*%<
* Connect 'socket' to peer with address *saddr. When the connection
* succeeds, or when an error occurs, a CONNECT event with action 'action'
@@ -766,11 +766,11 @@ isc_socket_getsockname(isc_socket_t *sock, isc_sockaddr_t *addressp);
isc_result_t
isc_socket_recv(isc_socket_t *sock, isc_region_t *region,
unsigned int minimum,
- isc_task_t *task, isc_taskaction_t action, const void *arg);
+ isc_task_t *task, isc_taskaction_t action, void *arg);
isc_result_t
isc_socket_recvv(isc_socket_t *sock, isc_bufferlist_t *buflist,
unsigned int minimum,
- isc_task_t *task, isc_taskaction_t action, const void *arg);
+ isc_task_t *task, isc_taskaction_t action, void *arg);
isc_result_t
isc_socket_recv2(isc_socket_t *sock, isc_region_t *region,
@@ -853,21 +853,21 @@ isc_socket_recv2(isc_socket_t *sock, isc_region_t *region,
/*@{*/
isc_result_t
isc_socket_send(isc_socket_t *sock, isc_region_t *region,
- isc_task_t *task, isc_taskaction_t action, const void *arg);
+ isc_task_t *task, isc_taskaction_t action, void *arg);
isc_result_t
isc_socket_sendto(isc_socket_t *sock, isc_region_t *region,
- isc_task_t *task, isc_taskaction_t action, const void *arg,
+ isc_task_t *task, isc_taskaction_t action, void *arg,
isc_sockaddr_t *address, struct in6_pktinfo *pktinfo);
isc_result_t
isc_socket_sendv(isc_socket_t *sock, isc_bufferlist_t *buflist,
- isc_task_t *task, isc_taskaction_t action, const void *arg);
+ isc_task_t *task, isc_taskaction_t action, void *arg);
isc_result_t
isc_socket_sendtov(isc_socket_t *sock, isc_bufferlist_t *buflist,
- isc_task_t *task, isc_taskaction_t action, const void *arg,
+ isc_task_t *task, isc_taskaction_t action, void *arg,
isc_sockaddr_t *address, struct in6_pktinfo *pktinfo);
isc_result_t
isc_socket_sendtov2(isc_socket_t *sock, isc_bufferlist_t *buflist,
- isc_task_t *task, isc_taskaction_t action, const void *arg,
+ isc_task_t *task, isc_taskaction_t action, void *arg,
isc_sockaddr_t *address, struct in6_pktinfo *pktinfo,
unsigned int flags);
isc_result_t
diff --git a/lib/isc/include/isc/task.h b/lib/isc/include/isc/task.h
index 7abf2ef2be60..a42a7e6b2a51 100644
--- a/lib/isc/include/isc/task.h
+++ b/lib/isc/include/isc/task.h
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2007, 2009-2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2007, 2009-2012, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1998-2001, 2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -128,7 +128,7 @@ typedef struct isc_taskmethods {
unsigned int (*unsend)(isc_task_t *task, void *sender, isc_eventtype_t type,
void *tag, isc_eventlist_t *events);
isc_result_t (*onshutdown)(isc_task_t *task, isc_taskaction_t action,
- const void *arg);
+ void *arg);
void (*shutdown)(isc_task_t *task);
void (*setname)(isc_task_t *task, const char *name, void *tag);
unsigned int (*purgeevents)(isc_task_t *task, void *sender,
@@ -441,7 +441,7 @@ isc_task_unsend(isc_task_t *task, void *sender, isc_eventtype_t type,
isc_result_t
isc_task_onshutdown(isc_task_t *task, isc_taskaction_t action,
- const void *arg);
+ void *arg);
/*%<
* Send a shutdown event with action 'action' and argument 'arg' when
* 'task' is shutdown.
diff --git a/lib/isc/include/isc/timer.h b/lib/isc/include/isc/timer.h
index 0598f79b58e0..d72a86a379f9 100644
--- a/lib/isc/include/isc/timer.h
+++ b/lib/isc/include/isc/timer.h
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2009, 2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2009, 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1998-2002 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -112,7 +112,7 @@ typedef struct {
const isc_interval_t *interval,
isc_task_t *task,
isc_taskaction_t action,
- const void *arg,
+ void *arg,
isc_timer_t **timerp);
} isc_timermgrmethods_t;
@@ -173,7 +173,7 @@ isc_timer_create(isc_timermgr_t *manager,
const isc_interval_t *interval,
isc_task_t *task,
isc_taskaction_t action,
- const void *arg,
+ void *arg,
isc_timer_t **timerp);
/*%<
* Create a new 'type' timer managed by 'manager'. The timers parameters
diff --git a/lib/isc/include/isc/types.h b/lib/isc/include/isc/types.h
index a1edadd10db7..6f6e64ea1e67 100644
--- a/lib/isc/include/isc/types.h
+++ b/lib/isc/include/isc/types.h
@@ -50,6 +50,7 @@ typedef struct isc_buffer isc_buffer_t; /*%< Buffer */
typedef ISC_LIST(isc_buffer_t) isc_bufferlist_t; /*%< Buffer List */
typedef struct isc_constregion isc_constregion_t; /*%< Const region */
typedef struct isc_consttextregion isc_consttextregion_t; /*%< Const Text Region */
+typedef struct isc_counter isc_counter_t; /*%< Counter */
typedef struct isc_entropy isc_entropy_t; /*%< Entropy */
typedef struct isc_entropysource isc_entropysource_t; /*%< Entropy Source */
typedef struct isc_event isc_event_t; /*%< Event */
diff --git a/lib/isc/lib.c b/lib/isc/lib.c
index a50542551df3..0ab72420c2b9 100644
--- a/lib/isc/lib.c
+++ b/lib/isc/lib.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004, 2005, 2007, 2009 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004, 2005, 2007, 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2001 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -96,7 +96,7 @@ do_register(void) {
}
void
-isc_lib_register() {
+isc_lib_register(void) {
RUNTIME_CHECK(isc_once_do(&register_once, do_register)
== ISC_R_SUCCESS);
}
diff --git a/lib/isc/log.c b/lib/isc/log.c
index 2cf584b44a6d..986ed61352e6 100644
--- a/lib/isc/log.c
+++ b/lib/isc/log.c
@@ -1633,6 +1633,7 @@ isc_log_doit(isc_log_t *lctx, isc_logcategory_t *category,
TIME_NOW(&new->time);
+ ISC_LINK_INIT(new, link);
ISC_LIST_APPEND(lctx->messages,
new, link);
}
diff --git a/lib/isc/mem.c b/lib/isc/mem.c
index f45a077e1e94..043a579077fa 100644
--- a/lib/isc/mem.c
+++ b/lib/isc/mem.c
@@ -1778,7 +1778,6 @@ isc__mem_setwater(isc_mem_t *ctx0, isc_mem_water_t water, void *water_arg,
ctx->water_arg = water_arg;
ctx->hi_water = hiwater;
ctx->lo_water = lowater;
- ctx->hi_called = ISC_FALSE;
}
MCTXUNLOCK(ctx, &ctx->lock);
@@ -2258,7 +2257,7 @@ isc__mempool_getfillcount(isc_mempool_t *mpctx0) {
#ifdef USE_MEMIMPREGISTER
isc_result_t
-isc__mem_register() {
+isc__mem_register(void) {
return (isc_mem_register(isc__mem_create2));
}
#endif
diff --git a/lib/isc/netaddr.c b/lib/isc/netaddr.c
index 0940df1713e5..dcbfba42eae8 100644
--- a/lib/isc/netaddr.c
+++ b/lib/isc/netaddr.c
@@ -235,11 +235,12 @@ isc_netaddr_prefixok(const isc_netaddr_t *na, unsigned int prefixlen) {
nbytes = prefixlen / 8;
nbits = prefixlen % 8;
if (nbits != 0) {
+ INSIST(nbytes < ipbytes);
if ((p[nbytes] & (0xff>>nbits)) != 0U)
return (ISC_R_FAILURE);
nbytes++;
}
- if (memcmp(p + nbytes, zeros, ipbytes - nbytes) != 0)
+ if (nbytes < ipbytes && memcmp(p + nbytes, zeros, ipbytes - nbytes) != 0)
return (ISC_R_FAILURE);
return (ISC_R_SUCCESS);
}
diff --git a/lib/isc/print.c b/lib/isc/print.c
index a5e5ba6699d6..06719e83a547 100644
--- a/lib/isc/print.c
+++ b/lib/isc/print.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2008, 2010 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2008, 2010, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2001, 2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -117,7 +117,7 @@ isc_print_vsnprintf(char *str, size_t size, const char *format, va_list ap) {
dot = neg = space = plus = left = zero = alt = h = l = q = 0;
width = precision = 0;
head = "";
- length = pad = zeropad = 0;
+ pad = zeropad = 0;
do {
if (*format == '#') {
@@ -260,7 +260,7 @@ isc_print_vsnprintf(char *str, size_t size, const char *format, va_list ap) {
if (hi != 0)
sprintf(buf, "%lu", hi);
else
- buf[0] = '\n';
+ buf[0] = '\0';
sprintf(buf + strlen(buf), "%lu", mid);
sprintf(buf + strlen(buf), "%lu", lo);
}
@@ -317,7 +317,7 @@ isc_print_vsnprintf(char *str, size_t size, const char *format, va_list ap) {
if (hi != 0)
sprintf(buf, "%lu", hi);
else
- buf[0] = '\n';
+ buf[0] = '\0';
sprintf(buf + strlen(buf), "%lu", mid);
sprintf(buf + strlen(buf), "%lu", lo);
}
diff --git a/lib/isc/radix.c b/lib/isc/radix.c
index 82090d1fde91..df26615fa9bf 100644
--- a/lib/isc/radix.c
+++ b/lib/isc/radix.c
@@ -634,12 +634,12 @@ isc_radix_remove(isc_radix_tree_t *radix, isc_radix_node_t *node) {
if (node->r == NULL && node->l == NULL) {
parent = node->parent;
_deref_prefix(node->prefix);
- isc_mem_put(radix->mctx, node, sizeof(*node));
- radix->num_active_node--;
if (parent == NULL) {
INSIST(radix->head == node);
radix->head = NULL;
+ isc_mem_put(radix->mctx, node, sizeof(*node));
+ radix->num_active_node--;
return;
}
@@ -652,11 +652,13 @@ isc_radix_remove(isc_radix_tree_t *radix, isc_radix_node_t *node) {
child = parent->r;
}
+ isc_mem_put(radix->mctx, node, sizeof(*node));
+ radix->num_active_node--;
+
if (parent->prefix)
return;
/* We need to remove parent too. */
-
if (parent->parent == NULL) {
INSIST(radix->head == parent);
radix->head = child;
@@ -666,6 +668,7 @@ isc_radix_remove(isc_radix_tree_t *radix, isc_radix_node_t *node) {
INSIST(parent->parent->l == parent);
parent->parent->l = child;
}
+
child->parent = parent->parent;
isc_mem_put(radix->mctx, parent, sizeof(*parent));
radix->num_active_node--;
@@ -678,19 +681,23 @@ isc_radix_remove(isc_radix_tree_t *radix, isc_radix_node_t *node) {
INSIST(node->l != NULL);
child = node->l;
}
+
parent = node->parent;
child->parent = parent;
_deref_prefix(node->prefix);
- isc_mem_put(radix->mctx, node, sizeof(*node));
- radix->num_active_node--;
if (parent == NULL) {
INSIST(radix->head == node);
radix->head = child;
+ isc_mem_put(radix->mctx, node, sizeof(*node));
+ radix->num_active_node--;
return;
}
+ isc_mem_put(radix->mctx, node, sizeof(*node));
+ radix->num_active_node--;
+
if (parent->r == node) {
parent->r = child;
} else {
diff --git a/lib/isc/random.c b/lib/isc/random.c
index 4c48e60fd77d..d18204d6e337 100644
--- a/lib/isc/random.c
+++ b/lib/isc/random.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004, 2005, 2007, 2009, 2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004, 2005, 2007, 2009, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -67,8 +67,16 @@ isc_random_seed(isc_uint32_t seed)
#ifndef HAVE_ARC4RANDOM
srand(seed);
-#else
+#elif defined(HAVE_ARC4RANDOM_ADDRANDOM)
arc4random_addrandom((u_char *) &seed, sizeof(isc_uint32_t));
+#else
+ /*
+ * If arcrandom() is available and no corresponding seeding
+ * function arc4random_addrandom() is available, no seeding is
+ * done on such platforms (e.g., OpenBSD 5.5). This is because
+ * the OS itself is supposed to seed the RNG and it is assumed
+ * that no explicit seeding is required.
+ */
#endif
}
diff --git a/lib/isc/regex.c b/lib/isc/regex.c
index 279bcdc437fb..2ee13653bdde 100644
--- a/lib/isc/regex.c
+++ b/lib/isc/regex.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
*
* Permission to use, copy, modify, and/or distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
@@ -220,7 +220,7 @@ isc_regex_validate(const char *c) {
++c;
switch (*c) {
case '.': /* collating element */
- if (range) --range;
+ if (range != 0) --range;
++c;
state = parse_ce;
seen_ce = ISC_FALSE;
@@ -255,11 +255,11 @@ isc_regex_validate(const char *c) {
default:
inside:
seen_char = ISC_TRUE;
- if (range == 2 && *c < range_start)
+ if (range == 2 && (*c & 0xff) < range_start)
FAIL("out of order range");
if (range != 0)
--range;
- range_start = *c;
+ range_start = *c & 0xff;
++c;
break;
};
diff --git a/lib/isc/result.c b/lib/isc/result.c
index a9405fddf055..2bd2fb4218ed 100644
--- a/lib/isc/result.c
+++ b/lib/isc/result.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004, 2005, 2007, 2008, 2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004, 2005, 2007, 2008, 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1998-2001, 2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -103,6 +103,7 @@ static const char *text[ISC_R_NRESULTS] = {
"invalid address format", /*%< 59 */
"bad base32 encoding", /*%< 60 */
"unset", /*%< 61 */
+ "multiple", /*%< 62 */
};
#define ISC_RESULT_RESULTSET 2
diff --git a/lib/isc/socket_api.c b/lib/isc/socket_api.c
index 1fba3e0ac19a..dca6c34fc37a 100644
--- a/lib/isc/socket_api.c
+++ b/lib/isc/socket_api.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2009, 2011, 2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2009, 2011, 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
*
* Permission to use, copy, modify, and/or distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
@@ -131,7 +131,7 @@ isc_socket_bind(isc_socket_t *sock, isc_sockaddr_t *sockaddr,
isc_result_t
isc_socket_sendto(isc_socket_t *sock, isc_region_t *region, isc_task_t *task,
- isc_taskaction_t action, const void *arg,
+ isc_taskaction_t action, void *arg,
isc_sockaddr_t *address, struct in6_pktinfo *pktinfo)
{
REQUIRE(ISCAPI_SOCKET_VALID(sock));
@@ -154,7 +154,7 @@ isc_socket_sendto2(isc_socket_t *sock, isc_region_t *region,
isc_result_t
isc_socket_connect(isc_socket_t *sock, isc_sockaddr_t *addr, isc_task_t *task,
- isc_taskaction_t action, const void *arg)
+ isc_taskaction_t action, void *arg)
{
REQUIRE(ISCAPI_SOCKET_VALID(sock));
@@ -163,7 +163,7 @@ isc_socket_connect(isc_socket_t *sock, isc_sockaddr_t *addr, isc_task_t *task,
isc_result_t
isc_socket_recv(isc_socket_t *sock, isc_region_t *region, unsigned int minimum,
- isc_task_t *task, isc_taskaction_t action, const void *arg)
+ isc_task_t *task, isc_taskaction_t action, void *arg)
{
REQUIRE(ISCAPI_SOCKET_VALID(sock));
diff --git a/lib/isc/task.c b/lib/isc/task.c
index b743271339f9..02d6e2abaf60 100644
--- a/lib/isc/task.c
+++ b/lib/isc/task.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2012, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1998-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -208,7 +208,7 @@ isc__task_unsend(isc_task_t *task, void *sender, isc_eventtype_t type,
void *tag, isc_eventlist_t *events);
ISC_TASKFUNC_SCOPE isc_result_t
isc__task_onshutdown(isc_task_t *task0, isc_taskaction_t action,
- const void *arg);
+ void *arg);
ISC_TASKFUNC_SCOPE void
isc__task_shutdown(isc_task_t *task0);
ISC_TASKFUNC_SCOPE void
@@ -796,7 +796,7 @@ isc__task_unsend(isc_task_t *task, void *sender, isc_eventtype_t type,
ISC_TASKFUNC_SCOPE isc_result_t
isc__task_onshutdown(isc_task_t *task0, isc_taskaction_t action,
- const void *arg)
+ void *arg)
{
isc__task_t *task = (isc__task_t *)task0;
isc_boolean_t disallowed = ISC_FALSE;
@@ -1751,7 +1751,7 @@ isc__task_privilege(isc_task_t *task0) {
#ifdef USE_SOCKETIMPREGISTER
isc_result_t
-isc__task_register() {
+isc__task_register(void) {
return (isc_task_register(isc__taskmgr_create));
}
#endif
diff --git a/lib/isc/task_api.c b/lib/isc/task_api.c
index f49ab321b2d3..44aaa1761151 100644
--- a/lib/isc/task_api.c
+++ b/lib/isc/task_api.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2009-2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2009-2012, 2014 Internet Systems Consortium, Inc. ("ISC")
*
* Permission to use, copy, modify, and/or distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
@@ -172,7 +172,7 @@ isc_task_unsend(isc_task_t *task, void *sender, isc_eventtype_t type,
}
isc_result_t
-isc_task_onshutdown(isc_task_t *task, isc_taskaction_t action, const void *arg)
+isc_task_onshutdown(isc_task_t *task, isc_taskaction_t action, void *arg)
{
REQUIRE(ISCAPI_TASK_VALID(task));
@@ -204,7 +204,7 @@ isc_task_purge(isc_task_t *task, void *sender, isc_eventtype_t type, void *tag)
void
isc_taskmgr_setexcltask(isc_taskmgr_t *mgr, isc_task_t *task) {
REQUIRE(ISCAPI_TASK_VALID(task));
- return (mgr->methods->setexcltask(mgr, task));
+ mgr->methods->setexcltask(mgr, task);
}
isc_result_t
diff --git a/lib/isc/timer.c b/lib/isc/timer.c
index 23fcbbef6498..f48259dddbcc 100644
--- a/lib/isc/timer.c
+++ b/lib/isc/timer.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004, 2005, 2007-2009, 2011, 2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004, 2005, 2007-2009, 2011, 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1998-2002 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -131,7 +131,7 @@ struct isc__timermgr {
ISC_TIMERFUNC_SCOPE isc_result_t
isc__timer_create(isc_timermgr_t *manager, isc_timertype_t type,
const isc_time_t *expires, const isc_interval_t *interval,
- isc_task_t *task, isc_taskaction_t action, const void *arg,
+ isc_task_t *task, isc_taskaction_t action, void *arg,
isc_timer_t **timerp);
ISC_TIMERFUNC_SCOPE isc_result_t
isc__timer_reset(isc_timer_t *timer, isc_timertype_t type,
@@ -393,7 +393,7 @@ destroy(isc__timer_t *timer) {
ISC_TIMERFUNC_SCOPE isc_result_t
isc__timer_create(isc_timermgr_t *manager0, isc_timertype_t type,
const isc_time_t *expires, const isc_interval_t *interval,
- isc_task_t *task, isc_taskaction_t action, const void *arg,
+ isc_task_t *task, isc_taskaction_t action, void *arg,
isc_timer_t **timerp)
{
isc__timermgr_t *manager = (isc__timermgr_t *)manager0;
@@ -1066,7 +1066,7 @@ isc__timermgr_dispatch(isc_timermgr_t *manager0) {
#ifdef USE_TIMERIMPREGISTER
isc_result_t
-isc__timer_register() {
+isc__timer_register(void) {
return (isc_timer_register(isc__timermgr_create));
}
#endif
diff --git a/lib/isc/timer_api.c b/lib/isc/timer_api.c
index 39b33e3c7444..f6091b47c41d 100644
--- a/lib/isc/timer_api.c
+++ b/lib/isc/timer_api.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2009, 2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2009, 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
*
* Permission to use, copy, modify, and/or distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
@@ -97,7 +97,7 @@ isc_timermgr_destroy(isc_timermgr_t **managerp) {
isc_result_t
isc_timer_create(isc_timermgr_t *manager, isc_timertype_t type,
const isc_time_t *expires, const isc_interval_t *interval,
- isc_task_t *task, isc_taskaction_t action, const void *arg,
+ isc_task_t *task, isc_taskaction_t action, void *arg,
isc_timer_t **timerp)
{
REQUIRE(ISCAPI_TIMERMGR_VALID(manager));
diff --git a/lib/isc/tm.c b/lib/isc/tm.c
index 08af2bcc95dd..842a2f7fb4ab 100644
--- a/lib/isc/tm.c
+++ b/lib/isc/tm.c
@@ -147,6 +147,12 @@ isc_tm_strptime(const char *buf, const char *fmt, struct tm *tm) {
size_t len = 0;
int alt_format, i, split_year = 0;
+ REQUIRE(buf != NULL);
+ REQUIRE(fmt != NULL);
+ REQUIRE(tm != NULL);
+
+ memset(tm, 0, sizeof(struct tm));
+
bp = buf;
while ((c = *fmt) != '\0') {
diff --git a/lib/isc/unix/app.c b/lib/isc/unix/app.c
index d97d7c6bbcc9..6c53559fb032 100644
--- a/lib/isc/unix/app.c
+++ b/lib/isc/unix/app.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004, 2005, 2007-2009, 2013 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004, 2005, 2007-2009, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -379,7 +379,7 @@ isc__app_start(void) {
}
presult = sigprocmask(SIG_UNBLOCK, &sset, NULL);
if (presult != 0) {
- isc__strerror(presult, strbuf, sizeof(strbuf));
+ isc__strerror(errno, strbuf, sizeof(strbuf));
UNEXPECTED_ERROR(__FILE__, __LINE__,
"isc_app_start() sigprocmask: %s", strbuf);
return (ISC_R_UNEXPECTED);
@@ -718,7 +718,7 @@ isc__app_ctxrun(isc_appctx_t *ctx0) {
}
ISC_APPFUNC_SCOPE isc_result_t
-isc__app_run() {
+isc__app_run(void) {
return (isc__app_ctxrun((isc_appctx_t *)&isc_g_appctx));
}
@@ -773,7 +773,7 @@ isc__app_ctxshutdown(isc_appctx_t *ctx0) {
}
ISC_APPFUNC_SCOPE isc_result_t
-isc__app_shutdown() {
+isc__app_shutdown(void) {
return (isc__app_ctxshutdown((isc_appctx_t *)&isc_g_appctx));
}
@@ -955,7 +955,7 @@ isc__appctx_settimermgr(isc_appctx_t *ctx0, isc_timermgr_t *timermgr) {
#ifdef USE_APPIMPREGISTER
isc_result_t
-isc__app_register() {
+isc__app_register(void) {
return (isc_app_register(isc__appctx_create));
}
#endif
diff --git a/lib/isc/unix/include/isc/Makefile.in b/lib/isc/unix/include/isc/Makefile.in
index 6acad0067a77..9cd96d71b750 100644
--- a/lib/isc/unix/include/isc/Makefile.in
+++ b/lib/isc/unix/include/isc/Makefile.in
@@ -1,4 +1,4 @@
-# Copyright (C) 2004, 2007, 2012, 2013 Internet Systems Consortium, Inc. ("ISC")
+# Copyright (C) 2004, 2007, 2012-2014 Internet Systems Consortium, Inc. ("ISC")
# Copyright (C) 1998-2001 Internet Software Consortium.
#
# Permission to use, copy, modify, and/or distribute this software for any
@@ -21,8 +21,8 @@ top_srcdir = @top_srcdir@
@BIND9_VERSION@
-HEADERS = dir.h int.h net.h netdb.h offset.h stat.h stdtime.h \
- syslog.h time.h
+HEADERS = dir.h int.h keyboard.h net.h netdb.h offset.h stat.h \
+ stdtime.h strerror.h syslog.h time.h
SUBDIRS =
TARGETS =
diff --git a/lib/isc/unix/include/isc/net.h b/lib/isc/unix/include/isc/net.h
index efa67c223bef..c9ceaf774e89 100644
--- a/lib/isc/unix/include/isc/net.h
+++ b/lib/isc/unix/include/isc/net.h
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004, 2005, 2007, 2008, 2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004, 2005, 2007, 2008, 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
diff --git a/lib/isc/unix/include/isc/stat.h b/lib/isc/unix/include/isc/stat.h
index b7a798649225..4d59f922c15c 100644
--- a/lib/isc/unix/include/isc/stat.h
+++ b/lib/isc/unix/include/isc/stat.h
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004, 2007 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
*
* Permission to use, copy, modify, and/or distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
@@ -24,7 +24,7 @@
*****/
/*
- * Portable netdb.h support.
+ * Portable <sys/stat.h> support.
*
* This module is responsible for defining S_IS??? macros.
*
diff --git a/lib/isc/unix/socket.c b/lib/isc/unix/socket.c
index d1ac96f53514..2a004234d429 100644
--- a/lib/isc/unix/socket.c
+++ b/lib/isc/unix/socket.c
@@ -34,6 +34,9 @@
#include <stdlib.h>
#include <string.h>
#include <unistd.h>
+#ifdef HAVE_INTTYPES_H
+#include <inttypes.h> /* uintptr_t */
+#endif
#include <isc/buffer.h>
#include <isc/bufferlist.h>
@@ -49,6 +52,7 @@
#include <isc/platform.h>
#include <isc/print.h>
#include <isc/region.h>
+#include <isc/resource.h>
#include <isc/socket.h>
#include <isc/stats.h>
#include <isc/strerror.h>
@@ -374,6 +378,8 @@ struct isc__socketmgr {
#endif /* USE_EPOLL */
#ifdef USE_DEVPOLL
int devpoll_fd;
+ isc_resourcevalue_t open_max;
+ unsigned int calls;
int nevents;
struct pollfd *events;
#endif /* USE_DEVPOLL */
@@ -481,32 +487,32 @@ isc__socketmgr_destroy(isc_socketmgr_t **managerp);
ISC_SOCKETFUNC_SCOPE isc_result_t
isc__socket_recvv(isc_socket_t *sock, isc_bufferlist_t *buflist,
unsigned int minimum, isc_task_t *task,
- isc_taskaction_t action, const void *arg);
+ isc_taskaction_t action, void *arg);
ISC_SOCKETFUNC_SCOPE isc_result_t
isc__socket_recv(isc_socket_t *sock, isc_region_t *region,
unsigned int minimum, isc_task_t *task,
- isc_taskaction_t action, const void *arg);
+ isc_taskaction_t action, void *arg);
ISC_SOCKETFUNC_SCOPE isc_result_t
isc__socket_recv2(isc_socket_t *sock, isc_region_t *region,
unsigned int minimum, isc_task_t *task,
isc_socketevent_t *event, unsigned int flags);
ISC_SOCKETFUNC_SCOPE isc_result_t
isc__socket_send(isc_socket_t *sock, isc_region_t *region,
- isc_task_t *task, isc_taskaction_t action, const void *arg);
+ isc_task_t *task, isc_taskaction_t action, void *arg);
ISC_SOCKETFUNC_SCOPE isc_result_t
isc__socket_sendto(isc_socket_t *sock, isc_region_t *region,
- isc_task_t *task, isc_taskaction_t action, const void *arg,
+ isc_task_t *task, isc_taskaction_t action, void *arg,
isc_sockaddr_t *address, struct in6_pktinfo *pktinfo);
ISC_SOCKETFUNC_SCOPE isc_result_t
isc__socket_sendv(isc_socket_t *sock, isc_bufferlist_t *buflist,
- isc_task_t *task, isc_taskaction_t action, const void *arg);
+ isc_task_t *task, isc_taskaction_t action, void *arg);
ISC_SOCKETFUNC_SCOPE isc_result_t
isc__socket_sendtov(isc_socket_t *sock, isc_bufferlist_t *buflist,
- isc_task_t *task, isc_taskaction_t action, const void *arg,
+ isc_task_t *task, isc_taskaction_t action, void *arg,
isc_sockaddr_t *address, struct in6_pktinfo *pktinfo);
ISC_SOCKETFUNC_SCOPE isc_result_t
isc__socket_sendtov2(isc_socket_t *sock, isc_bufferlist_t *buflist,
- isc_task_t *task, isc_taskaction_t action, const void *arg,
+ isc_task_t *task, isc_taskaction_t action, void *arg,
isc_sockaddr_t *address, struct in6_pktinfo *pktinfo,
unsigned int flags);
ISC_SOCKETFUNC_SCOPE isc_result_t
@@ -528,11 +534,11 @@ ISC_SOCKETFUNC_SCOPE isc_result_t
isc__socket_listen(isc_socket_t *sock, unsigned int backlog);
ISC_SOCKETFUNC_SCOPE isc_result_t
isc__socket_accept(isc_socket_t *sock,
- isc_task_t *task, isc_taskaction_t action, const void *arg);
+ isc_task_t *task, isc_taskaction_t action, void *arg);
ISC_SOCKETFUNC_SCOPE isc_result_t
isc__socket_connect(isc_socket_t *sock, isc_sockaddr_t *addr,
isc_task_t *task, isc_taskaction_t action,
- const void *arg);
+ void *arg);
ISC_SOCKETFUNC_SCOPE isc_result_t
isc__socket_getpeername(isc_socket_t *sock, isc_sockaddr_t *addressp);
ISC_SOCKETFUNC_SCOPE isc_result_t
@@ -1091,8 +1097,6 @@ select_readmsg(isc__socketmgr_t *mgr, int *fd, int *msg) {
"read() failed "
"during watcher poke: %s"),
strbuf);
-
- return;
}
INSIST(cc == sizeof(buf));
@@ -1593,7 +1597,7 @@ destroy_socketevent(isc_event_t *event) {
static isc_socketevent_t *
allocate_socketevent(isc__socket_t *sock, isc_eventtype_t eventtype,
- isc_taskaction_t action, const void *arg)
+ isc_taskaction_t action, void *arg)
{
isc_socketevent_t *ev;
@@ -1951,7 +1955,7 @@ doio_send(isc__socket_t *sock, isc_socketevent_t *dev) {
* references exist.
*/
static void
-closesocket(isc__socketmgr_t *manager, isc__socket_t *sock, int fd) {
+socketclose(isc__socketmgr_t *manager, isc__socket_t *sock, int fd) {
isc_sockettype_t type = sock->type;
int lockid = FDLOCK_ID(fd);
@@ -2031,7 +2035,7 @@ destroy(isc__socket_t **sockp) {
if (sock->fd >= 0) {
fd = sock->fd;
sock->fd = -1;
- closesocket(manager, sock, fd);
+ socketclose(manager, sock, fd);
}
LOCK(&manager->lock);
@@ -2903,7 +2907,7 @@ isc__socket_close(isc_socket_t *sock0) {
UNLOCK(&sock->lock);
- closesocket(manager, sock, fd);
+ socketclose(manager, sock, fd);
return (ISC_R_SUCCESS);
}
@@ -3822,8 +3826,10 @@ watcher(void *uap) {
#elif defined (USE_EPOLL)
const char *fnname = "epoll_wait()";
#elif defined(USE_DEVPOLL)
+ isc_result_t result;
const char *fnname = "ioctl(DP_POLL)";
struct dvpoll dvp;
+ int pass;
#elif defined (USE_SELECT)
const char *fnname = "select()";
int maxfd;
@@ -3850,17 +3856,45 @@ watcher(void *uap) {
cc = epoll_wait(manager->epoll_fd, manager->events,
manager->nevents, -1);
#elif defined(USE_DEVPOLL)
- dvp.dp_fds = manager->events;
- dvp.dp_nfds = manager->nevents;
+ /*
+ * Re-probe every thousand calls.
+ */
+ if (manager->calls++ > 1000U) {
+ result = isc_resource_getcurlimit(
+ isc_resource_openfiles,
+ &manager->open_max);
+ if (result != ISC_R_SUCCESS)
+ manager->open_max = 64;
+ manager->calls = 0;
+ }
+ for (pass = 0; pass < 2; pass++) {
+ dvp.dp_fds = manager->events;
+ dvp.dp_nfds = manager->nevents;
+ if (dvp.dp_nfds >= manager->open_max)
+ dvp.dp_nfds = manager->open_max - 1;
#ifndef ISC_SOCKET_USE_POLLWATCH
- dvp.dp_timeout = -1;
-#else
- if (pollstate == poll_idle)
dvp.dp_timeout = -1;
- else
- dvp.dp_timeout = ISC_SOCKET_POLLWATCH_TIMEOUT;
+#else
+ if (pollstate == poll_idle)
+ dvp.dp_timeout = -1;
+ else
+ dvp.dp_timeout =
+ ISC_SOCKET_POLLWATCH_TIMEOUT;
#endif /* ISC_SOCKET_USE_POLLWATCH */
- cc = ioctl(manager->devpoll_fd, DP_POLL, &dvp);
+ cc = ioctl(manager->devpoll_fd, DP_POLL, &dvp);
+ if (cc == -1 && errno == EINVAL) {
+ /*
+ * {OPEN_MAX} may have dropped. Look
+ * up the current value and try again.
+ */
+ result = isc_resource_getcurlimit(
+ isc_resource_openfiles,
+ &manager->open_max);
+ if (result != ISC_R_SUCCESS)
+ manager->open_max = 64;
+ } else
+ break;
+ }
#elif defined(USE_SELECT)
LOCK(&manager->lock);
memmove(manager->read_fds_copy, manager->read_fds,
@@ -4022,11 +4056,12 @@ setup_watcher(isc_mem_t *mctx, isc__socketmgr_t *manager) {
}
#endif /* USE_WATCHER_THREAD */
#elif defined(USE_DEVPOLL)
- /*
- * XXXJT: /dev/poll seems to reject large numbers of events,
- * so we should be careful about redefining ISC_SOCKET_MAXEVENTS.
- */
manager->nevents = ISC_SOCKET_MAXEVENTS;
+ result = isc_resource_getcurlimit(isc_resource_openfiles,
+ &manager->open_max);
+ if (result != ISC_R_SUCCESS)
+ manager->open_max = 64;
+ manager->calls = 0;
manager->events = isc_mem_get(mctx, sizeof(struct pollfd) *
manager->nevents);
if (manager->events == NULL)
@@ -4557,7 +4592,7 @@ socket_recv(isc__socket_t *sock, isc_socketevent_t *dev, isc_task_t *task,
ISC_SOCKETFUNC_SCOPE isc_result_t
isc__socket_recvv(isc_socket_t *sock0, isc_bufferlist_t *buflist,
unsigned int minimum, isc_task_t *task,
- isc_taskaction_t action, const void *arg)
+ isc_taskaction_t action, void *arg)
{
isc__socket_t *sock = (isc__socket_t *)sock0;
isc_socketevent_t *dev;
@@ -4611,7 +4646,7 @@ isc__socket_recvv(isc_socket_t *sock0, isc_bufferlist_t *buflist,
ISC_SOCKETFUNC_SCOPE isc_result_t
isc__socket_recv(isc_socket_t *sock0, isc_region_t *region,
unsigned int minimum, isc_task_t *task,
- isc_taskaction_t action, const void *arg)
+ isc_taskaction_t action, void *arg)
{
isc__socket_t *sock = (isc__socket_t *)sock0;
isc_socketevent_t *dev;
@@ -4756,7 +4791,7 @@ socket_send(isc__socket_t *sock, isc_socketevent_t *dev, isc_task_t *task,
ISC_SOCKETFUNC_SCOPE isc_result_t
isc__socket_send(isc_socket_t *sock, isc_region_t *region,
- isc_task_t *task, isc_taskaction_t action, const void *arg)
+ isc_task_t *task, isc_taskaction_t action, void *arg)
{
/*
* REQUIRE() checking is performed in isc_socket_sendto().
@@ -4767,7 +4802,7 @@ isc__socket_send(isc_socket_t *sock, isc_region_t *region,
ISC_SOCKETFUNC_SCOPE isc_result_t
isc__socket_sendto(isc_socket_t *sock0, isc_region_t *region,
- isc_task_t *task, isc_taskaction_t action, const void *arg,
+ isc_task_t *task, isc_taskaction_t action, void *arg,
isc_sockaddr_t *address, struct in6_pktinfo *pktinfo)
{
isc__socket_t *sock = (isc__socket_t *)sock0;
@@ -4795,7 +4830,7 @@ isc__socket_sendto(isc_socket_t *sock0, isc_region_t *region,
ISC_SOCKETFUNC_SCOPE isc_result_t
isc__socket_sendv(isc_socket_t *sock, isc_bufferlist_t *buflist,
- isc_task_t *task, isc_taskaction_t action, const void *arg)
+ isc_task_t *task, isc_taskaction_t action, void *arg)
{
return (isc__socket_sendtov2(sock, buflist, task, action, arg, NULL,
NULL, 0));
@@ -4803,7 +4838,7 @@ isc__socket_sendv(isc_socket_t *sock, isc_bufferlist_t *buflist,
ISC_SOCKETFUNC_SCOPE isc_result_t
isc__socket_sendtov(isc_socket_t *sock, isc_bufferlist_t *buflist,
- isc_task_t *task, isc_taskaction_t action, const void *arg,
+ isc_task_t *task, isc_taskaction_t action, void *arg,
isc_sockaddr_t *address, struct in6_pktinfo *pktinfo)
{
return (isc__socket_sendtov2(sock, buflist, task, action, arg, address,
@@ -4812,7 +4847,7 @@ isc__socket_sendtov(isc_socket_t *sock, isc_bufferlist_t *buflist,
ISC_SOCKETFUNC_SCOPE isc_result_t
isc__socket_sendtov2(isc_socket_t *sock0, isc_bufferlist_t *buflist,
- isc_task_t *task, isc_taskaction_t action, const void *arg,
+ isc_task_t *task, isc_taskaction_t action, void *arg,
isc_sockaddr_t *address, struct in6_pktinfo *pktinfo,
unsigned int flags)
{
@@ -5211,7 +5246,7 @@ isc__socket_listen(isc_socket_t *sock0, unsigned int backlog) {
*/
ISC_SOCKETFUNC_SCOPE isc_result_t
isc__socket_accept(isc_socket_t *sock0,
- isc_task_t *task, isc_taskaction_t action, const void *arg)
+ isc_task_t *task, isc_taskaction_t action, void *arg)
{
isc__socket_t *sock = (isc__socket_t *)sock0;
isc_socket_newconnev_t *dev;
@@ -5286,7 +5321,7 @@ isc__socket_accept(isc_socket_t *sock0,
ISC_SOCKETFUNC_SCOPE isc_result_t
isc__socket_connect(isc_socket_t *sock0, isc_sockaddr_t *addr,
- isc_task_t *task, isc_taskaction_t action, const void *arg)
+ isc_task_t *task, isc_taskaction_t action, void *arg)
{
isc__socket_t *sock = (isc__socket_t *)sock0;
isc_socket_connev_t *dev;
@@ -5796,8 +5831,6 @@ isc__socketmgr_waitevents(isc_socketmgr_t *manager0, struct timeval *tvp,
isc_socketwait_t **swaitp)
{
isc__socketmgr_t *manager = (isc__socketmgr_t *)manager0;
-
-
int n;
#ifdef USE_KQUEUE
struct timespec ts, *tsp;
@@ -5806,6 +5839,8 @@ isc__socketmgr_waitevents(isc_socketmgr_t *manager0, struct timeval *tvp,
int timeout;
#endif
#ifdef USE_DEVPOLL
+ isc_result_t result;
+ int pass;
struct dvpoll dvp;
#endif
@@ -5839,15 +5874,41 @@ isc__socketmgr_waitevents(isc_socketmgr_t *manager0, struct timeval *tvp,
manager->nevents, timeout);
n = swait_private.nevents;
#elif defined(USE_DEVPOLL)
- dvp.dp_fds = manager->events;
- dvp.dp_nfds = manager->nevents;
- if (tvp != NULL) {
- dvp.dp_timeout = tvp->tv_sec * 1000 +
- (tvp->tv_usec + 999) / 1000;
- } else
- dvp.dp_timeout = -1;
- swait_private.nevents = ioctl(manager->devpoll_fd, DP_POLL, &dvp);
- n = swait_private.nevents;
+ /*
+ * Re-probe every thousand calls.
+ */
+ if (manager->calls++ > 1000U) {
+ result = isc_resource_getcurlimit(isc_resource_openfiles,
+ &manager->open_max);
+ if (result != ISC_R_SUCCESS)
+ manager->open_max = 64;
+ manager->calls = 0;
+ }
+ for (pass = 0; pass < 2; pass++) {
+ dvp.dp_fds = manager->events;
+ dvp.dp_nfds = manager->nevents;
+ if (dvp.dp_nfds >= manager->open_max)
+ dvp.dp_nfds = manager->open_max - 1;
+ if (tvp != NULL) {
+ dvp.dp_timeout = tvp->tv_sec * 1000 +
+ (tvp->tv_usec + 999) / 1000;
+ } else
+ dvp.dp_timeout = -1;
+ n = ioctl(manager->devpoll_fd, DP_POLL, &dvp);
+ if (n == -1 && errno == EINVAL) {
+ /*
+ * {OPEN_MAX} may have dropped. Look
+ * up the current value and try again.
+ */
+ result = isc_resource_getcurlimit(
+ isc_resource_openfiles,
+ &manager->open_max);
+ if (result != ISC_R_SUCCESS)
+ manager->open_max = 64;
+ } else
+ break;
+ }
+ swait_private.nevents = n;
#elif defined(USE_SELECT)
memmove(manager->read_fds_copy, manager->read_fds, manager->fd_bufsize);
memmove(manager->write_fds_copy, manager->write_fds,
@@ -5923,7 +5984,7 @@ isc__socket_gettag(isc_socket_t *socket0) {
#ifdef USE_SOCKETIMPREGISTER
isc_result_t
-isc__socket_register() {
+isc__socket_register(void) {
return (isc_socket_register(isc__socketmgr_create));
}
#endif
diff --git a/lib/isccc/Makefile.in b/lib/isccc/Makefile.in
index efa834133c73..1a33be9163b2 100644
--- a/lib/isccc/Makefile.in
+++ b/lib/isccc/Makefile.in
@@ -1,4 +1,4 @@
-# Copyright (C) 2004, 2007, 2009, 2011, 2012 Internet Systems Consortium, Inc. ("ISC")
+# Copyright (C) 2004, 2007, 2009, 2011, 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
# Copyright (C) 2001, 2003 Internet Software Consortium.
#
# Permission to use, copy, modify, and/or distribute this software for any
@@ -80,7 +80,7 @@ installdirs:
$(SHELL) ${top_srcdir}/mkinstalldirs ${DESTDIR}${libdir}
install:: timestamp installdirs
- ${LIBTOOL_MODE_INSTALL} ${INSTALL_DATA} libisccc.@A@ ${DESTDIR}${libdir}
+ ${LIBTOOL_MODE_INSTALL} ${INSTALL_LIBRARY} libisccc.@A@ ${DESTDIR}${libdir}
clean distclean::
rm -f libisccc.@A@ timestamp
diff --git a/lib/isccfg/Makefile.in b/lib/isccfg/Makefile.in
index 19ec61edd9e3..6e07da3dcedd 100644
--- a/lib/isccfg/Makefile.in
+++ b/lib/isccfg/Makefile.in
@@ -1,4 +1,4 @@
-# Copyright (C) 2004, 2005, 2007, 2009, 2011, 2012 Internet Systems Consortium, Inc. ("ISC")
+# Copyright (C) 2004, 2005, 2007, 2009, 2011, 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
# Copyright (C) 2001-2003 Internet Software Consortium.
#
# Permission to use, copy, modify, and/or distribute this software for any
@@ -78,7 +78,7 @@ installdirs:
$(SHELL) ${top_srcdir}/mkinstalldirs ${DESTDIR}${libdir}
install:: timestamp installdirs
- ${LIBTOOL_MODE_INSTALL} ${INSTALL_DATA} libisccfg.@A@ ${DESTDIR}${libdir}
+ ${LIBTOOL_MODE_INSTALL} ${INSTALL_LIBRARY} libisccfg.@A@ ${DESTDIR}${libdir}
clean distclean::
rm -f libisccfg.@A@ timestamp
diff --git a/lib/isccfg/aclconf.c b/lib/isccfg/aclconf.c
index af5659909e10..e1b68971738a 100644
--- a/lib/isccfg/aclconf.c
+++ b/lib/isccfg/aclconf.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2012, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2002 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -213,14 +213,16 @@ convert_keyname(const cfg_obj_t *keyobj, isc_log_t *lctx, isc_mem_t *mctx,
* elements table after all the nested ACLs have been merged in to the
* parent.
*/
-static int
+static isc_result_t
count_acl_elements(const cfg_obj_t *caml, const cfg_obj_t *cctx,
- isc_boolean_t *has_negative)
+ isc_log_t *lctx, cfg_aclconfctx_t *ctx, isc_mem_t *mctx,
+ isc_uint32_t *count, isc_boolean_t *has_negative)
{
const cfg_listelt_t *elt;
- const cfg_obj_t *cacl = NULL;
isc_result_t result;
- int n = 0;
+ isc_uint32_t n = 0;
+
+ REQUIRE(count != NULL);
if (has_negative != NULL)
*has_negative = ISC_FALSE;
@@ -241,7 +243,12 @@ count_acl_elements(const cfg_obj_t *caml, const cfg_obj_t *cctx,
n++;
} else if (cfg_obj_islist(ce)) {
isc_boolean_t negative;
- n += count_acl_elements(ce, cctx, &negative);
+ isc_uint32_t sub;
+ result = count_acl_elements(ce, cctx, lctx, ctx, mctx,
+ &sub, &negative);
+ if (result != ISC_R_SUCCESS)
+ return (result);
+ n += sub;
if (negative)
n++;
} else if (cfg_obj_isstring(ce)) {
@@ -251,26 +258,45 @@ count_acl_elements(const cfg_obj_t *caml, const cfg_obj_t *cctx,
n++;
} else if (strcasecmp(name, "any") != 0 &&
strcasecmp(name, "none") != 0) {
- result = get_acl_def(cctx, name, &cacl);
- if (result == ISC_R_SUCCESS)
- n += count_acl_elements(cacl, cctx,
- NULL) + 1;
+ dns_acl_t *inneracl = NULL;
+ /*
+ * Convert any named acls we reference now if
+ * they have not already been converted.
+ */
+ result = convert_named_acl(ce, cctx, lctx, ctx,
+ mctx, 0, &inneracl);
+ if (result == ISC_R_SUCCESS) {
+ if (inneracl->has_negatives)
+ n++;
+ else
+ n += inneracl->length;
+ dns_acl_detach(&inneracl);
+ } else
+ return (result);
}
}
}
- return n;
+ *count = n;
+ return (ISC_R_SUCCESS);
}
isc_result_t
-cfg_acl_fromconfig(const cfg_obj_t *caml,
- const cfg_obj_t *cctx,
- isc_log_t *lctx,
- cfg_aclconfctx_t *ctx,
- isc_mem_t *mctx,
- unsigned int nest_level,
+cfg_acl_fromconfig(const cfg_obj_t *caml, const cfg_obj_t *cctx,
+ isc_log_t *lctx, cfg_aclconfctx_t *ctx,
+ isc_mem_t *mctx, unsigned int nest_level,
dns_acl_t **target)
{
+ return (cfg_acl_fromconfig2(caml, cctx, lctx, ctx, mctx,
+ nest_level, 0, target));
+}
+
+isc_result_t
+cfg_acl_fromconfig2(const cfg_obj_t *caml, const cfg_obj_t *cctx,
+ isc_log_t *lctx, cfg_aclconfctx_t *ctx,
+ isc_mem_t *mctx, unsigned int nest_level,
+ isc_uint16_t family, dns_acl_t **target)
+{
isc_result_t result;
dns_acl_t *dacl = NULL, *inneracl = NULL;
dns_aclelement_t *de;
@@ -300,11 +326,14 @@ cfg_acl_fromconfig(const cfg_obj_t *caml,
* elements table. (Note that if nest_level is nonzero,
* *everything* goes in the elements table.)
*/
- int nelem;
+ isc_uint32_t nelem;
- if (nest_level == 0)
- nelem = count_acl_elements(caml, cctx, NULL);
- else
+ if (nest_level == 0) {
+ result = count_acl_elements(caml, cctx, lctx, ctx,
+ mctx, &nelem, NULL);
+ if (result != ISC_R_SUCCESS)
+ return (result);
+ } else
nelem = cfg_list_length(caml, ISC_FALSE);
result = dns_acl_create(mctx, nelem, &dacl);
@@ -319,6 +348,8 @@ cfg_acl_fromconfig(const cfg_obj_t *caml,
const cfg_obj_t *ce = cfg_listelt_value(elt);
isc_boolean_t neg;
+ INSIST(dacl->length <= dacl->alloc);
+
if (cfg_obj_istuple(ce)) {
/* This must be a negated element. */
ce = cfg_tuple_get(ce, "value");
@@ -349,6 +380,16 @@ cfg_acl_fromconfig(const cfg_obj_t *caml,
unsigned int bitlen;
cfg_obj_asnetprefix(ce, &addr, &bitlen);
+ if (family != 0 && family != addr.family) {
+ char buf[ISC_NETADDR_FORMATSIZE + 1];
+ isc_netaddr_format(&addr, buf, sizeof(buf));
+ cfg_obj_log(ce, lctx, ISC_LOG_WARNING,
+ "'%s': incorrect address family; "
+ "ignoring", buf);
+ if (nest_level != 0)
+ dns_acl_detach(&de->nestedacl);
+ continue;
+ }
/*
* If nesting ACLs (nest_level != 0), we negate
@@ -360,6 +401,7 @@ cfg_acl_fromconfig(const cfg_obj_t *caml,
goto cleanup;
if (nest_level > 0) {
+ INSIST(dacl->length < dacl->alloc);
de->type = dns_aclelementtype_nestedacl;
de->negative = neg;
} else
@@ -381,6 +423,7 @@ cfg_acl_fromconfig(const cfg_obj_t *caml,
goto cleanup;
nested_acl:
if (nest_level > 0 || inneracl->has_negatives) {
+ INSIST(dacl->length < dacl->alloc);
de->type = dns_aclelementtype_nestedacl;
de->negative = neg;
if (de->nestedacl != NULL)
@@ -390,14 +433,18 @@ nested_acl:
dns_acl_detach(&inneracl);
/* Fall through. */
} else {
+ INSIST(dacl->length + inneracl->length
+ <= dacl->alloc);
dns_acl_merge(dacl, inneracl,
ISC_TF(!neg));
de += inneracl->length; /* elements added */
dns_acl_detach(&inneracl);
+ INSIST(dacl->length <= dacl->alloc);
continue;
}
} else if (cfg_obj_istype(ce, &cfg_type_keyref)) {
/* Key name. */
+ INSIST(dacl->length < dacl->alloc);
de->type = dns_aclelementtype_keyname;
de->negative = neg;
dns_name_init(&de->keyname, NULL);
@@ -416,6 +463,7 @@ nested_acl:
goto cleanup;
if (nest_level != 0) {
+ INSIST(dacl->length < dacl->alloc);
de->type = dns_aclelementtype_nestedacl;
de->negative = neg;
} else
@@ -437,19 +485,26 @@ nested_acl:
dacl->has_negatives = !neg;
if (nest_level != 0) {
+ INSIST(dacl->length < dacl->alloc);
de->type = dns_aclelementtype_nestedacl;
de->negative = !neg;
} else
continue;
} else if (strcasecmp(name, "localhost") == 0) {
+ INSIST(dacl->length < dacl->alloc);
de->type = dns_aclelementtype_localhost;
de->negative = neg;
} else if (strcasecmp(name, "localnets") == 0) {
+ INSIST(dacl->length < dacl->alloc);
de->type = dns_aclelementtype_localnets;
de->negative = neg;
} else {
if (inneracl != NULL)
dns_acl_detach(&inneracl);
+ /*
+ * This call should just find the cached
+ * of the named acl.
+ */
result = convert_named_acl(ce, cctx, lctx, ctx,
mctx, new_nest_level,
&inneracl);
diff --git a/lib/isccfg/api b/lib/isccfg/api
index 7e580435abb9..3ee8eef93a67 100644
--- a/lib/isccfg/api
+++ b/lib/isccfg/api
@@ -4,6 +4,6 @@
# 9.8: 80-89, 120-129
# 9.9: 90-109
# 9.9-sub: 130-139
-LIBINTERFACE = 91
-LIBREVISION = 0
-LIBAGE = 1
+LIBINTERFACE = 92
+LIBREVISION = 3
+LIBAGE = 2
diff --git a/lib/isccfg/include/isccfg/Makefile.in b/lib/isccfg/include/isccfg/Makefile.in
index 211583a5f1e4..d6f395ca72b0 100644
--- a/lib/isccfg/include/isccfg/Makefile.in
+++ b/lib/isccfg/include/isccfg/Makefile.in
@@ -1,4 +1,4 @@
-# Copyright (C) 2004, 2005, 2007, 2012 Internet Systems Consortium, Inc. ("ISC")
+# Copyright (C) 2004, 2005, 2007, 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
# Copyright (C) 2001, 2002 Internet Software Consortium.
#
# Permission to use, copy, modify, and/or distribute this software for any
@@ -26,7 +26,8 @@ top_srcdir = @top_srcdir@
# machine generated. The latter are handled specially in the
# install target below.
#
-HEADERS = aclconf.h cfg.h grammar.h log.h namedconf.h version.h
+HEADERS = aclconf.h cfg.h dnsconf.h grammar.h log.h namedconf.h \
+ version.h
SUBDIRS =
TARGETS =
diff --git a/lib/isccfg/include/isccfg/aclconf.h b/lib/isccfg/include/isccfg/aclconf.h
index 38ab9f696fb0..deeec6954c3c 100644
--- a/lib/isccfg/include/isccfg/aclconf.h
+++ b/lib/isccfg/include/isccfg/aclconf.h
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2007, 2010-2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2007, 2010-2012, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2001 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -58,13 +58,16 @@ cfg_aclconfctx_attach(cfg_aclconfctx_t *src, cfg_aclconfctx_t **dest);
*/
isc_result_t
-cfg_acl_fromconfig(const cfg_obj_t *caml,
- const cfg_obj_t *cctx,
- isc_log_t *lctx,
- cfg_aclconfctx_t *ctx,
- isc_mem_t *mctx,
- unsigned int nest_level,
+cfg_acl_fromconfig(const cfg_obj_t *caml, const cfg_obj_t *cctx,
+ isc_log_t *lctx, cfg_aclconfctx_t *ctx,
+ isc_mem_t *mctx, unsigned int nest_level,
dns_acl_t **target);
+
+isc_result_t
+cfg_acl_fromconfig2(const cfg_obj_t *caml, const cfg_obj_t *cctx,
+ isc_log_t *lctx, cfg_aclconfctx_t *ctx,
+ isc_mem_t *mctx, unsigned int nest_level,
+ isc_uint16_t family, dns_acl_t **target);
/*
* Construct a new dns_acl_t from configuration data in 'caml' and
* 'cctx'. Memory is allocated through 'mctx'.
@@ -75,6 +78,11 @@ cfg_acl_fromconfig(const cfg_obj_t *caml,
* nested dns_acl_t object when the referring objects were created
* passing the same ACL configuration context 'ctx'.
*
+ * cfg_acl_fromconfig() is a backward-compatible version of
+ * cfg_acl_fromconfig2(), which allows an address family to be
+ * specified. If 'family' is not zero, then only addresses/prefixes
+ * of a matching family (AF_INET or AF_INET6) may be configured.
+ *
* On success, attach '*target' to the new dns_acl_t object.
*/
diff --git a/lib/isccfg/namedconf.c b/lib/isccfg/namedconf.c
index f11e2938e861..1c82f9bfd068 100644
--- a/lib/isccfg/namedconf.c
+++ b/lib/isccfg/namedconf.c
@@ -15,8 +15,6 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
-/* $Id$ */
-
/*! \file */
#include <config.h>
@@ -123,34 +121,8 @@ static cfg_type_t cfg_type_view;
static cfg_type_t cfg_type_viewopts;
static cfg_type_t cfg_type_zone;
static cfg_type_t cfg_type_zoneopts;
-static cfg_type_t cfg_type_dynamically_loadable_zones;
-static cfg_type_t cfg_type_dynamically_loadable_zones_opts;
static cfg_type_t cfg_type_v4_aaaa;
-
-/*
- * Clauses that can be found in a 'dynamically loadable zones' statement
- */
-static cfg_clausedef_t
-dynamically_loadable_zones_clauses[] = {
- { "database", &cfg_type_astring, 0 },
- { NULL, NULL, 0 }
-};
-
-/*
- * A dynamically loadable zones statement.
- */
-static cfg_tuplefielddef_t dynamically_loadable_zones_fields[] = {
- { "name", &cfg_type_astring, 0 },
- { "options", &cfg_type_dynamically_loadable_zones_opts, 0 },
- { NULL, NULL, 0 }
-};
-
-static cfg_type_t cfg_type_dynamically_loadable_zones = {
- "dlz", cfg_parse_tuple, cfg_print_tuple, cfg_doc_tuple,
- &cfg_rep_tuple,
- dynamically_loadable_zones_fields
- };
-
+static cfg_type_t cfg_type_dlz;
/*% tkey-dhkey */
@@ -896,7 +868,7 @@ namedconf_or_view_clauses[] = {
{ "key", &cfg_type_key, CFG_CLAUSEFLAG_MULTI },
{ "zone", &cfg_type_zone, CFG_CLAUSEFLAG_MULTI },
/* only 1 DLZ per view allowed */
- { "dlz", &cfg_type_dynamically_loadable_zones, 0 },
+ { "dlz", &cfg_type_dlz, 0 },
{ "server", &cfg_type_server, CFG_CLAUSEFLAG_MULTI },
{ "trusted-keys", &cfg_type_dnsseckeys, CFG_CLAUSEFLAG_MULTI },
{ "managed-keys", &cfg_type_managedkeys, CFG_CLAUSEFLAG_MULTI },
@@ -1419,10 +1391,13 @@ view_clauses[] = {
{ "max-cache-ttl", &cfg_type_uint32, 0 },
{ "max-clients-per-query", &cfg_type_uint32, 0 },
{ "max-ncache-ttl", &cfg_type_uint32, 0 },
+ { "max-recursion-depth", &cfg_type_uint32, 0 },
+ { "max-recursion-queries", &cfg_type_uint32, 0 },
{ "max-udp-size", &cfg_type_uint32, 0 },
{ "min-roots", &cfg_type_uint32, CFG_CLAUSEFLAG_NOTIMP },
{ "minimal-responses", &cfg_type_boolean, 0 },
{ "preferred-glue", &cfg_type_astring, 0 },
+ { "no-case-compress", &cfg_type_bracketed_aml, 0 },
{ "provide-ixfr", &cfg_type_boolean, 0 },
/*
* Note that the query-source option syntax is different
@@ -1513,6 +1488,7 @@ static cfg_type_t cfg_type_validityinterval = {
&cfg_rep_tuple, validityinterval_fields
};
+
/*%
* Clauses that can be found in a 'zone' statement,
* with defaults in the 'view' or 'options' statement.
@@ -1544,6 +1520,7 @@ zone_clauses[] = {
{ "dnssec-update-mode", &cfg_type_dnssecupdatemode, 0 },
{ "forward", &cfg_type_forwardtype, 0 },
{ "forwarders", &cfg_type_portiplist, 0 },
+ { "inline-signing", &cfg_type_boolean, 0 },
{ "key-directory", &cfg_type_qstring, 0 },
{ "maintain-ixfr-base", &cfg_type_boolean, CFG_CLAUSEFLAG_OBSOLETE },
{ "masterfile-format", &cfg_type_masterformat, 0 },
@@ -1564,13 +1541,12 @@ zone_clauses[] = {
{ "notify-source-v6", &cfg_type_sockaddr6wild, 0 },
{ "notify-to-soa", &cfg_type_boolean, 0 },
{ "nsec3-test-zone", &cfg_type_boolean, CFG_CLAUSEFLAG_TESTONLY },
- { "serial-update-method", &cfg_type_updatemethod, 0 },
{ "request-ixfr", &cfg_type_boolean, 0 },
+ { "serial-update-method", &cfg_type_updatemethod, 0 },
{ "sig-signing-nodes", &cfg_type_uint32, 0 },
{ "sig-signing-signatures", &cfg_type_uint32, 0 },
{ "sig-signing-type", &cfg_type_uint32, 0 },
{ "sig-validity-interval", &cfg_type_validityinterval, 0 },
- { "inline-signing", &cfg_type_boolean, 0 },
{ "transfer-source", &cfg_type_sockaddr4wild, 0 },
{ "transfer-source-v6", &cfg_type_sockaddr6wild, 0 },
{ "try-tcp-refresh", &cfg_type_boolean, 0 },
@@ -1672,7 +1648,6 @@ view_clausesets[] = {
namedconf_or_view_clauses,
view_clauses,
zone_clauses,
- dynamically_loadable_zones_clauses,
NULL
};
static cfg_type_t cfg_type_viewopts = {
@@ -1692,15 +1667,19 @@ static cfg_type_t cfg_type_zoneopts = {
/*% The "dynamically loadable zones" statement syntax. */
+static cfg_clausedef_t
+dlz_clauses[] = {
+ { "database", &cfg_type_astring, 0 },
+ { NULL, NULL, 0 }
+};
static cfg_clausedef_t *
-dynamically_loadable_zones_clausesets[] = {
- dynamically_loadable_zones_clauses,
+dlz_clausesets[] = {
+ dlz_clauses,
NULL
};
-static cfg_type_t cfg_type_dynamically_loadable_zones_opts = {
- "dynamically_loadable_zones_opts", cfg_parse_map,
- cfg_print_map, cfg_doc_map, &cfg_rep_map,
- dynamically_loadable_zones_clausesets
+static cfg_type_t cfg_type_dlz = {
+ "dlz", cfg_parse_named_map, cfg_print_map, cfg_doc_map,
+ &cfg_rep_map, dlz_clausesets
};
/*%
@@ -1730,21 +1709,21 @@ static cfg_type_t cfg_type_key = {
static cfg_clausedef_t
server_clauses[] = {
{ "bogus", &cfg_type_boolean, 0 },
- { "provide-ixfr", &cfg_type_boolean, 0 },
- { "request-ixfr", &cfg_type_boolean, 0 },
- { "support-ixfr", &cfg_type_boolean, CFG_CLAUSEFLAG_OBSOLETE },
- { "transfers", &cfg_type_uint32, 0 },
- { "transfer-format", &cfg_type_transferformat, 0 },
- { "keys", &cfg_type_server_key_kludge, 0 },
{ "edns", &cfg_type_boolean, 0 },
{ "edns-udp-size", &cfg_type_uint32, 0 },
+ { "keys", &cfg_type_server_key_kludge, 0 },
{ "max-udp-size", &cfg_type_uint32, 0 },
{ "notify-source", &cfg_type_sockaddr4wild, 0 },
{ "notify-source-v6", &cfg_type_sockaddr6wild, 0 },
+ { "provide-ixfr", &cfg_type_boolean, 0 },
{ "query-source", &cfg_type_querysource4, 0 },
{ "query-source-v6", &cfg_type_querysource6, 0 },
+ { "request-ixfr", &cfg_type_boolean, 0 },
+ { "support-ixfr", &cfg_type_boolean, CFG_CLAUSEFLAG_OBSOLETE },
+ { "transfer-format", &cfg_type_transferformat, 0 },
{ "transfer-source", &cfg_type_sockaddr4wild, 0 },
{ "transfer-source-v6", &cfg_type_sockaddr6wild, 0 },
+ { "transfers", &cfg_type_uint32, 0 },
{ NULL, NULL, 0 }
};
static cfg_clausedef_t *
diff --git a/lib/isccfg/parser.c b/lib/isccfg/parser.c
index 1708344e0607..492241d742c2 100644
--- a/lib/isccfg/parser.c
+++ b/lib/isccfg/parser.c
@@ -1306,8 +1306,9 @@ cfg_parse_mapbody(cfg_parser_t *pctx, const cfg_type_t *type, cfg_obj_t **ret)
"not implemented", clause->name);
if ((clause->flags & CFG_CLAUSEFLAG_NOTCONFIGURED) != 0) {
- cfg_parser_warning(pctx, 0, "option '%s' is not "
- "configured", clause->name);
+ cfg_parser_warning(pctx, 0, "option '%s' was not "
+ "enabled at compile time",
+ clause->name);
result = ISC_R_FAILURE;
goto cleanup;
}
diff --git a/lib/lwres/Makefile.in b/lib/lwres/Makefile.in
index 0cf873b51560..dd8eb65eed5f 100644
--- a/lib/lwres/Makefile.in
+++ b/lib/lwres/Makefile.in
@@ -1,4 +1,4 @@
-# Copyright (C) 2004, 2005, 2007, 2012 Internet Systems Consortium, Inc. ("ISC")
+# Copyright (C) 2004, 2005, 2007, 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
# Copyright (C) 2000, 2001 Internet Software Consortium.
#
# Permission to use, copy, modify, and/or distribute this software for any
@@ -31,25 +31,25 @@ CDEFINES =
CWARNINGS =
# Alphabetically
-OBJS = context.@O@ gai_strerror.@O@ getaddrinfo.@O@ gethost.@O@ \
+OBJS = compat.@O@ context.@O@ \
+ gai_strerror.@O@ getaddrinfo.@O@ gethost.@O@ \
getipnode.@O@ getnameinfo.@O@ getrrset.@O@ herror.@O@ \
lwbuffer.@O@ lwconfig.@O@ lwpacket.@O@ lwresutil.@O@ \
lwres_gabn.@O@ lwres_gnba.@O@ lwres_grbn.@O@ lwres_noop.@O@ \
- lwinetaton.@O@ lwinetpton.@O@ lwinetntop.@O@ print.@O@ \
- strtoul.@O@
+ lwinetaton.@O@ lwinetpton.@O@ lwinetntop.@O@ print.@O@
# Alphabetically
-SRCS = context.c gai_strerror.c getaddrinfo.c gethost.c \
+SRCS = compat.c context.c gai_strerror.c getaddrinfo.c gethost.c \
getipnode.c getnameinfo.c getrrset.c herror.c \
lwbuffer.c lwconfig.c lwpacket.c lwresutil.c \
lwres_gabn.c lwres_gnba.c lwres_grbn.c lwres_noop.c \
- lwinetaton.c lwinetpton.c lwinetntop.c print.c \
- strtoul.c
+ lwinetaton.c lwinetpton.c lwinetntop.c print.c
LIBS = @LIBS@
SUBDIRS = include man unix
TARGETS = timestamp
+TESTDIRS = @UNITTESTS@
@BIND9_MAKE_RULES@
@@ -78,7 +78,7 @@ installdirs:
$(SHELL) ${top_srcdir}/mkinstalldirs ${DESTDIR}${libdir}
install:: timestamp installdirs
- ${LIBTOOL_MODE_INSTALL} ${INSTALL_DATA} liblwres.@A@ ${DESTDIR}${libdir}
+ ${LIBTOOL_MODE_INSTALL} ${INSTALL_LIBRARY} liblwres.@A@ ${DESTDIR}${libdir}
clean distclean::
rm -f liblwres.@A@ liblwres.la timestamp
diff --git a/lib/lwres/api b/lib/lwres/api
index a27437f4335b..3f5a2a3b1693 100644
--- a/lib/lwres/api
+++ b/lib/lwres/api
@@ -4,6 +4,6 @@
# 9.8: 80-89, 120-129
# 9.9: 90-109
# 9.9-sub: 130-139
-LIBINTERFACE = 90
-LIBREVISION = 7
+LIBINTERFACE = 91
+LIBREVISION = 0
LIBAGE = 0
diff --git a/lib/lwres/strtoul.c b/lib/lwres/compat.c
index 82d215f43c10..b8ae31f1968d 100644
--- a/lib/lwres/strtoul.c
+++ b/lib/lwres/compat.c
@@ -49,8 +49,6 @@
static char sccsid[] = "@(#)strtoul.c 8.1 (Berkeley) 6/4/93";
#endif /* LIBC_SCCS and not lint */
-/* $Id: strtoul.c,v 1.4 2007/06/19 23:47:22 tbox Exp $ */
-
#include <config.h>
#include <limits.h>
@@ -58,6 +56,7 @@ static char sccsid[] = "@(#)strtoul.c 8.1 (Berkeley) 6/4/93";
#include <errno.h>
#include <lwres/stdlib.h>
+#include <lwres/string.h>
#define DE_CONST(konst, var) \
do { \
@@ -129,3 +128,28 @@ lwres_strtoul(const char *nptr, char **endptr, int base) {
DE_CONST(any ? s - 1 : nptr, *endptr);
return (acc);
}
+
+size_t
+lwres_strlcpy(char *dst, const char *src, size_t size) {
+ char *d = dst;
+ const char *s = src;
+ size_t n = size;
+
+ /* Copy as many bytes as will fit */
+ if (n != 0U && --n != 0U) {
+ do {
+ if ((*d++ = *s++) == 0)
+ break;
+ } while (--n != 0U);
+ }
+
+ /* Not enough room in dst, add NUL and traverse rest of src */
+ if (n == 0U) {
+ if (size != 0U)
+ *d = '\0'; /* NUL-terminate dst */
+ while (*s++)
+ ;
+ }
+
+ return(s - src - 1); /* count does not include NUL */
+}
diff --git a/lib/lwres/gai_strerror.c b/lib/lwres/gai_strerror.c
index 70b35b0d80b0..a3075ce3119b 100644
--- a/lib/lwres/gai_strerror.c
+++ b/lib/lwres/gai_strerror.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2007, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 2000, 2001 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -63,7 +63,8 @@ static const char *gai_messages[] = {
"ai_socktype not supported",
"system error returned in errno",
"bad hints",
- "bad protocol"
+ "bad protocol",
+ "overflow"
};
/*% Returns an error message corresponding to an error code returned by getaddrinfo() */
diff --git a/lib/lwres/getaddrinfo.c b/lib/lwres/getaddrinfo.c
index 1ebafd85a678..133f0c1f9ec4 100644
--- a/lib/lwres/getaddrinfo.c
+++ b/lib/lwres/getaddrinfo.c
@@ -134,13 +134,13 @@
#include <config.h>
#include <errno.h>
-
-#include <isc/string.h>
+#include <string.h>
#include <lwres/lwres.h>
#include <lwres/net.h>
#include <lwres/netdb.h>
#include <lwres/stdlib.h>
+#include <lwres/string.h>
#define SA(addr) ((struct sockaddr *)(addr))
#define SIN(addr) ((struct sockaddr_in *)(addr))
@@ -706,12 +706,16 @@ get_local(const char *name, int socktype, struct addrinfo **res) {
if (socktype == 0)
return (EAI_SOCKTYPE);
+ if (strlen(name) >= sizeof(slocal->sun_path))
+ return (EAI_OVERFLOW);
+
ai = ai_alloc(AF_LOCAL, sizeof(*slocal));
if (ai == NULL)
return (EAI_MEMORY);
slocal = SLOCAL(ai->ai_addr);
strncpy(slocal->sun_path, name, sizeof(slocal->sun_path));
+ slocal->sun_path[sizeof(slocal->sun_path) - 1] = '\0';
ai->ai_socktype = socktype;
/*
diff --git a/lib/lwres/gethost.c b/lib/lwres/gethost.c
index e36fc188e5c3..922d2aa45e14 100644
--- a/lib/lwres/gethost.c
+++ b/lib/lwres/gethost.c
@@ -153,6 +153,9 @@
#include <errno.h>
#include <string.h>
+#ifdef HAVE_INTTYPES_H
+#include <inttypes.h> /* uintptr_t */
+#endif
#include <lwres/net.h>
#include <lwres/netdb.h>
diff --git a/lib/lwres/include/lwres/Makefile.in b/lib/lwres/include/lwres/Makefile.in
index 36b8b03d5d0a..aed4e750f4b8 100644
--- a/lib/lwres/include/lwres/Makefile.in
+++ b/lib/lwres/include/lwres/Makefile.in
@@ -1,4 +1,4 @@
-# Copyright (C) 2004, 2007, 2012 Internet Systems Consortium, Inc. ("ISC")
+# Copyright (C) 2004, 2007, 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
# Copyright (C) 2000, 2001 Internet Software Consortium.
#
# Permission to use, copy, modify, and/or distribute this software for any
@@ -13,8 +13,6 @@
# OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
# PERFORMANCE OF THIS SOFTWARE.
-# $Id: Makefile.in,v 1.23 2007/06/19 23:47:22 tbox Exp $
-
srcdir = @srcdir@
VPATH = @srcdir@
top_srcdir = @top_srcdir@
@@ -24,8 +22,9 @@ top_srcdir = @top_srcdir@
# machine generated. The latter are handled specially in the
# install target below.
#
-HEADERS = context.h lwbuffer.h lwpacket.h lwres.h result.h \
- int.h lang.h list.h ipv6.h version.h
+HEADERS = context.h int.h ipv6.h lang.h list.h \
+ lwbuffer.h lwpacket.h lwres.h result.h \
+ stdlib.h string.h version.h
SUBDIRS =
TARGETS =
diff --git a/lib/lwres/include/lwres/lwres.h b/lib/lwres/include/lwres/lwres.h
index 6912448cf9ee..5b2b03a99eec 100644
--- a/lib/lwres/include/lwres/lwres.h
+++ b/lib/lwres/include/lwres/lwres.h
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2007, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 2000, 2001 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -121,6 +121,7 @@ struct lwres_addr {
lwres_uint32_t family;
lwres_uint16_t length;
unsigned char address[LWRES_ADDR_MAXLEN];
+ lwres_uint32_t zone;
LWRES_LINK(lwres_addr_t) link;
};
diff --git a/lib/lwres/include/lwres/netdb.h.in b/lib/lwres/include/lwres/netdb.h.in
index 0844384e5219..1c115dfa39f7 100644
--- a/lib/lwres/include/lwres/netdb.h.in
+++ b/lib/lwres/include/lwres/netdb.h.in
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004, 2005, 2007, 2009 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004, 2005, 2007, 2009, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 2000, 2001 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -88,6 +88,7 @@ struct addrinfo {
#undef EAI_SYSTEM
#undef EAI_BADHINTS
#undef EAI_PROTOCOL
+#undef EAI_OVERFLOW
#undef EAI_MAX
#define EAI_ADDRFAMILY 1 /* address family for hostname not supported */
@@ -103,7 +104,8 @@ struct addrinfo {
#define EAI_SYSTEM 11 /* system error returned in errno */
#define EAI_BADHINTS 12
#define EAI_PROTOCOL 13
-#define EAI_MAX 14
+#define EAI_OVERFLOW 14
+#define EAI_MAX 15
/*
* Flag values for getaddrinfo()
diff --git a/lib/lwres/include/lwres/platform.h.in b/lib/lwres/include/lwres/platform.h.in
index bb4f6ee235e9..d350a6a1043d 100644
--- a/lib/lwres/include/lwres/platform.h.in
+++ b/lib/lwres/include/lwres/platform.h.in
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 2000, 2001 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -59,7 +59,7 @@
@LWRES_PLATFORM_NEEDIN6ADDRANY@
/*
- * If this system is missing in6addr_loopback,
+ * If this system is missing in6addr_loopback,
* LWRES_PLATFORM_NEEDIN6ADDRLOOPBACK will be defined.
*/
@LWRES_PLATFORM_NEEDIN6ADDRLOOPBACK@
@@ -84,7 +84,7 @@
* Defined this system needs vsnprintf() and snprintf().
*/
@LWRES_PLATFORM_NEEDVSNPRINTF@
-
+
/*
* If this system need a modern sprintf() that returns (int) not (char*).
*/
@@ -100,6 +100,11 @@
*/
@LWRES_PLATFORM_NEEDSTRTOUL@
+/*! \brief
+ * Define if this system needs strlcpy.
+ */
+@LWRES_PLATFORM_NEEDSTRLCPY@
+
#ifndef LWRES_PLATFORM_USEDECLSPEC
#define LIBLWRES_EXTERNAL_DATA
#else
diff --git a/lib/lwres/include/lwres/stdlib.h b/lib/lwres/include/lwres/stdlib.h
index 25a109ee30c7..4ee1dd2dacc4 100644
--- a/lib/lwres/include/lwres/stdlib.h
+++ b/lib/lwres/include/lwres/stdlib.h
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004-2007, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -15,8 +15,6 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
-/* $Id: stdlib.h,v 1.6 2007/06/19 23:47:23 tbox Exp $ */
-
#ifndef LWRES_STDLIB_H
#define LWRES_STDLIB_H 1
diff --git a/lib/lwres/include/lwres/string.h b/lib/lwres/include/lwres/string.h
new file mode 100644
index 000000000000..deebb5a51c46
--- /dev/null
+++ b/lib/lwres/include/lwres/string.h
@@ -0,0 +1,37 @@
+/*
+ * Copyright (C) 2014 Internet Systems Consortium, Inc. ("ISC")
+ *
+ * Permission to use, copy, modify, and/or distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
+ * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+ * AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
+ * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+ * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
+ * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+ * PERFORMANCE OF THIS SOFTWARE.
+ */
+
+#ifndef LWRES_STRING_H
+#define LWRES_STRING_H 1
+
+/*! \file lwres/string.h */
+
+#include <stdlib.h>
+
+#include <lwres/lang.h>
+#include <lwres/platform.h>
+
+#ifdef LWRES_PLATFORM_NEEDSTRLCPY
+#define strlcpy lwres_strlcpy
+#endif
+
+LWRES_LANG_BEGINDECLS
+
+size_t lwres_strlcpy(char *dst, const char *src, size_t size);
+
+LWRES_LANG_ENDDECLS
+
+#endif
diff --git a/lib/lwres/lwconfig.c b/lib/lwres/lwconfig.c
index 62630238e121..32019b973182 100644
--- a/lib/lwres/lwconfig.c
+++ b/lib/lwres/lwconfig.c
@@ -15,8 +15,6 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
-/* $Id$ */
-
/*! \file */
/**
@@ -67,9 +65,12 @@
#include <lwres/lwres.h>
#include <lwres/net.h>
#include <lwres/result.h>
+#include <lwres/stdlib.h>
+#include <lwres/string.h>
#include "assert_p.h"
#include "context_p.h"
+#include "print_p.h"
#if ! defined(NS_INADDRSZ)
@@ -204,6 +205,7 @@ lwres_resetaddr(lwres_addr_t *addr) {
memset(addr->address, 0, LWRES_ADDR_MAXLEN);
addr->family = 0;
addr->length = 0;
+ addr->zone = 0;
}
static char *
@@ -449,6 +451,18 @@ static lwres_result_t
lwres_create_addr(const char *buffer, lwres_addr_t *addr, int convert_zero) {
struct in_addr v4;
struct in6_addr v6;
+ char buf[sizeof("ffff:ffff:ffff:ffff:ffff:ffff:255.255.255.255") +
+ sizeof("%4294967295")];
+ char *percent;
+ size_t n;
+
+ n = strlcpy(buf, buffer, sizeof(buf));
+ if (n >= sizeof(buf))
+ return (LWRES_R_FAILURE);
+
+ percent = strchr(buf, '%');
+ if (percent != NULL)
+ *percent = 0;
if (lwres_net_aton(buffer, &v4) == 1) {
if (convert_zero) {
@@ -459,15 +473,35 @@ lwres_create_addr(const char *buffer, lwres_addr_t *addr, int convert_zero) {
}
addr->family = LWRES_ADDRTYPE_V4;
addr->length = NS_INADDRSZ;
+ addr->zone = 0;
memmove((void *)addr->address, &v4, NS_INADDRSZ);
- } else if (lwres_net_pton(AF_INET6, buffer, &v6) == 1) {
+ } else if (lwres_net_pton(AF_INET6, buf, &v6) == 1) {
addr->family = LWRES_ADDRTYPE_V6;
addr->length = NS_IN6ADDRSZ;
memmove((void *)addr->address, &v6, NS_IN6ADDRSZ);
- } else {
+ if (percent != NULL) {
+ unsigned long zone;
+ char *ep;
+
+ percent++;
+
+#ifdef HAVE_IF_NAMETOINDEX
+ zone = if_nametoindex(percent);
+ if (zone != 0U) {
+ addr->zone = zone;
+ return (LWRES_R_SUCCESS);
+ }
+#endif
+ zone = strtoul(percent, &ep, 10);
+ if (ep != percent && *ep == 0)
+ addr->zone = zone;
+ else
+ return (LWRES_R_FAILURE);
+ } else
+ addr->zone = 0;
+ } else
return (LWRES_R_FAILURE); /* Unrecognised format. */
- }
return (LWRES_R_SUCCESS);
}
@@ -630,6 +664,7 @@ lwres_conf_print(lwres_context_t *ctx, FILE *fp) {
int i;
int af;
char tmp[sizeof("ffff:ffff:ffff:ffff:ffff:ffff:255.255.255.255")];
+ char buf[sizeof("%4000000000")];
const char *p;
lwres_conf_t *confdata;
lwres_addr_t tmpaddr;
@@ -647,7 +682,13 @@ lwres_conf_print(lwres_context_t *ctx, FILE *fp) {
if (p != tmp)
return (LWRES_R_FAILURE);
- fprintf(fp, "nameserver %s\n", tmp);
+ if (af == AF_INET6 && confdata->lwservers[i].zone != 0) {
+ snprintf(buf, sizeof(buf), "%%%u",
+ confdata->nameservers[i].zone);
+ } else
+ buf[0] = 0;
+
+ fprintf(fp, "nameserver %s%s\n", tmp, buf);
}
for (i = 0; i < confdata->lwnext; i++) {
@@ -658,7 +699,13 @@ lwres_conf_print(lwres_context_t *ctx, FILE *fp) {
if (p != tmp)
return (LWRES_R_FAILURE);
- fprintf(fp, "lwserver %s\n", tmp);
+ if (af == AF_INET6 && confdata->lwservers[i].zone != 0) {
+ snprintf(buf, sizeof(buf), "%%%u",
+ confdata->nameservers[i].zone);
+ } else
+ buf[0] = 0;
+
+ fprintf(fp, "lwserver %s%s\n", tmp, buf);
}
if (confdata->domainname != NULL) {
diff --git a/lib/lwres/man/lwres.3 b/lib/lwres/man/lwres.3
index 8ce65f3486d7..2c03e3ae9ff1 100644
--- a/lib/lwres/man/lwres.3
+++ b/lib/lwres/man/lwres.3
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.\" Copyright (C) 2000, 2001 Internet Software Consortium.
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
@@ -20,11 +20,11 @@
.\" Title: lwres
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: Jun 30, 2000
+.\" Date: June 18, 2007
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "LWRES" "3" "Jun 30, 2000" "BIND9" "BIND9"
+.TH "LWRES" "3" "June 18, 2007" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -39,7 +39,7 @@ lwres \- introduction to the lightweight resolver library
.PP
The BIND 9 lightweight resolver library is a simple, name service independent stub resolver library. It provides hostname\-to\-address and address\-to\-hostname lookup services to applications by transmitting lookup requests to a resolver daemon
\fBlwresd\fR
-running on the local host. The resover daemon performs the lookup using the DNS or possibly other name service protocols, and returns the results to the application through the library. The library and resolver daemon communicate using a simple UDP\-based protocol.
+running on the local host. The resolver daemon performs the lookup using the DNS or possibly other name service protocols, and returns the results to the application through the library. The library and resolver daemon communicate using a simple UDP\-based protocol.
.SH "OVERVIEW"
.PP
The lwresd library implements multiple name service APIs. The standard
@@ -159,7 +159,7 @@ bit should be set.
\fBresolver\fR(5),
\fBlwresd\fR(8).
.SH "COPYRIGHT"
-Copyright \(co 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
Copyright \(co 2000, 2001 Internet Software Consortium.
.br
diff --git a/lib/lwres/man/lwres.docbook b/lib/lwres/man/lwres.docbook
index 97d591c9d8d3..26723e5f0cab 100644
--- a/lib/lwres/man/lwres.docbook
+++ b/lib/lwres/man/lwres.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -18,11 +18,10 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres.docbook,v 1.10 2007/06/18 23:47:51 tbox Exp $ -->
<refentry>
<refentryinfo>
- <date>Jun 30, 2000</date>
+ <date>June 18, 2007</date>
</refentryinfo>
<refmeta>
@@ -40,6 +39,7 @@
<year>2004</year>
<year>2005</year>
<year>2007</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
@@ -63,7 +63,7 @@
and address-to-hostname lookup services to applications by
transmitting lookup requests to a resolver daemon
<command>lwresd</command>
- running on the local host. The resover daemon performs the
+ running on the local host. The resolver daemon performs the
lookup using the DNS or possibly other name service protocols,
and returns the results to the application through the library.
The library and resolver daemon communicate using a simple
diff --git a/lib/lwres/man/lwres.html b/lib/lwres/man/lwres.html
index 84008b625e05..cb8a0776af48 100644
--- a/lib/lwres/man/lwres.html
+++ b/lib/lwres/man/lwres.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -22,7 +22,7 @@
<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
-<a name="id2476274"></a><div class="titlepage"></div>
+<a name="id2476275"></a><div class="titlepage"></div>
<div class="refnamediv">
<h2>Name</h2>
<p>lwres &#8212; introduction to the lightweight resolver library</p>
@@ -32,14 +32,14 @@
<div class="funcsynopsis"><pre class="funcsynopsisinfo">#include &lt;lwres/lwres.h&gt;</pre></div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543350"></a><h2>DESCRIPTION</h2>
+<a name="id2543357"></a><h2>DESCRIPTION</h2>
<p>
The BIND 9 lightweight resolver library is a simple, name service
independent stub resolver library. It provides hostname-to-address
and address-to-hostname lookup services to applications by
transmitting lookup requests to a resolver daemon
<span><strong class="command">lwresd</strong></span>
- running on the local host. The resover daemon performs the
+ running on the local host. The resolver daemon performs the
lookup using the DNS or possibly other name service protocols,
and returns the results to the application through the library.
The library and resolver daemon communicate using a simple
@@ -47,7 +47,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543363"></a><h2>OVERVIEW</h2>
+<a name="id2543370"></a><h2>OVERVIEW</h2>
<p>
The lwresd library implements multiple name service APIs.
The standard
@@ -101,7 +101,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543427"></a><h2>CLIENT-SIDE LOW-LEVEL API CALL FLOW</h2>
+<a name="id2543434"></a><h2>CLIENT-SIDE LOW-LEVEL API CALL FLOW</h2>
<p>
When a client program wishes to make an lwres request using the
native low-level API, it typically performs the following
@@ -149,7 +149,7 @@
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543575"></a><h2>SERVER-SIDE LOW-LEVEL API CALL FLOW</h2>
+<a name="id2543582"></a><h2>SERVER-SIDE LOW-LEVEL API CALL FLOW</h2>
<p>
When implementing the server side of the lightweight resolver
protocol using the lwres library, a sequence of actions like the
@@ -191,7 +191,7 @@
<p></p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543658"></a><h2>SEE ALSO</h2>
+<a name="id2543666"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">lwres_gethostent</span>(3)</span>,
<span class="citerefentry"><span class="refentrytitle">lwres_getipnode</span>(3)</span>,
diff --git a/lib/lwres/man/lwres_buffer.3 b/lib/lwres/man/lwres_buffer.3
index 1ec60136ed78..22b14ab2e68c 100644
--- a/lib/lwres/man/lwres_buffer.3
+++ b/lib/lwres/man/lwres_buffer.3
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.\" Copyright (C) 2000, 2001 Internet Software Consortium.
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
@@ -20,11 +20,11 @@
.\" Title: lwres_buffer
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: Jun 30, 2000
+.\" Date: June 18, 2007
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "LWRES_BUFFER" "3" "Jun 30, 2000" "BIND9" "BIND9"
+.TH "LWRES_BUFFER" "3" "June 18, 2007" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -227,7 +227,7 @@ bytes of memory from
to
\fIbase\fR.
.SH "COPYRIGHT"
-Copyright \(co 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
Copyright \(co 2000, 2001 Internet Software Consortium.
.br
diff --git a/lib/lwres/man/lwres_buffer.docbook b/lib/lwres/man/lwres_buffer.docbook
index 97c52bdec499..17ccbf549f4a 100644
--- a/lib/lwres/man/lwres_buffer.docbook
+++ b/lib/lwres/man/lwres_buffer.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -18,10 +18,9 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_buffer.docbook,v 1.10 2007/06/18 23:47:51 tbox Exp $ -->
<refentry>
<refentryinfo>
- <date>Jun 30, 2000</date>
+ <date>June 18, 2007</date>
</refentryinfo>
<refmeta>
@@ -35,6 +34,7 @@
<year>2004</year>
<year>2005</year>
<year>2007</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
diff --git a/lib/lwres/man/lwres_buffer.html b/lib/lwres/man/lwres_buffer.html
index b2a9bfc62fec..4e7735ef8169 100644
--- a/lib/lwres/man/lwres_buffer.html
+++ b/lib/lwres/man/lwres_buffer.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -262,7 +262,7 @@ void
</div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543893"></a><h2>DESCRIPTION</h2>
+<a name="id2543901"></a><h2>DESCRIPTION</h2>
<p>
These functions provide bounds checked access to a region of memory
where data is being read or written.
diff --git a/lib/lwres/man/lwres_config.3 b/lib/lwres/man/lwres_config.3
index 42f0e695f7b3..25b11810051f 100644
--- a/lib/lwres/man/lwres_config.3
+++ b/lib/lwres/man/lwres_config.3
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.\" Copyright (C) 2000, 2001 Internet Software Consortium.
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
@@ -20,11 +20,11 @@
.\" Title: lwres_config
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: Jun 30, 2000
+.\" Date: June 18, 2007
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "LWRES_CONFIG" "3" "Jun 30, 2000" "BIND9" "BIND9"
+.TH "LWRES_CONFIG" "3" "June 18, 2007" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -100,7 +100,7 @@ unless an error occurred when converting the network addresses to a numeric host
.PP
\fI/etc/resolv.conf\fR
.SH "COPYRIGHT"
-Copyright \(co 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
Copyright \(co 2000, 2001 Internet Software Consortium.
.br
diff --git a/lib/lwres/man/lwres_config.docbook b/lib/lwres/man/lwres_config.docbook
index 5736ef3b6490..5af37eaf7cea 100644
--- a/lib/lwres/man/lwres_config.docbook
+++ b/lib/lwres/man/lwres_config.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -18,11 +18,10 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_config.docbook,v 1.9 2007/06/18 23:47:51 tbox Exp $ -->
<refentry>
<refentryinfo>
- <date>Jun 30, 2000</date>
+ <date>June 18, 2007</date>
</refentryinfo>
<refmeta>
@@ -36,6 +35,7 @@
<year>2004</year>
<year>2005</year>
<year>2007</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
diff --git a/lib/lwres/man/lwres_config.html b/lib/lwres/man/lwres_config.html
index ed10069c355a..b3b81f7a8288 100644
--- a/lib/lwres/man/lwres_config.html
+++ b/lib/lwres/man/lwres_config.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -90,7 +90,7 @@ lwres_conf_t *
</div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543442"></a><h2>DESCRIPTION</h2>
+<a name="id2543450"></a><h2>DESCRIPTION</h2>
<p><code class="function">lwres_conf_init()</code>
creates an empty
<span class="type">lwres_conf_t</span>
@@ -123,7 +123,7 @@ lwres_conf_t *
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543509"></a><h2>RETURN VALUES</h2>
+<a name="id2543517"></a><h2>RETURN VALUES</h2>
<p><code class="function">lwres_conf_parse()</code>
returns <span class="errorcode">LWRES_R_SUCCESS</span>
if it successfully read and parsed
@@ -142,13 +142,13 @@ lwres_conf_t *
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543546"></a><h2>SEE ALSO</h2>
+<a name="id2543555"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">stdio</span>(3)</span>,
<span class="citerefentry"><span class="refentrytitle">resolver</span>(5)</span>.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543572"></a><h2>FILES</h2>
+<a name="id2543580"></a><h2>FILES</h2>
<p><code class="filename">/etc/resolv.conf</code>
</p>
</div>
diff --git a/lib/lwres/man/lwres_context.3 b/lib/lwres/man/lwres_context.3
index 5764809fbd50..d544a3c39819 100644
--- a/lib/lwres/man/lwres_context.3
+++ b/lib/lwres/man/lwres_context.3
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.\" Copyright (C) 2000, 2001, 2003 Internet Software Consortium.
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
@@ -20,11 +20,11 @@
.\" Title: lwres_context
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: Jun 30, 2000
+.\" Date: June 18, 2007
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "LWRES_CONTEXT" "3" "Jun 30, 2000" "BIND9" "BIND9"
+.TH "LWRES_CONTEXT" "3" "June 18, 2007" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -164,7 +164,7 @@ times out waiting for a response.
\fBmalloc\fR(3),
\fBfree\fR(3).
.SH "COPYRIGHT"
-Copyright \(co 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
Copyright \(co 2000, 2001, 2003 Internet Software Consortium.
.br
diff --git a/lib/lwres/man/lwres_context.docbook b/lib/lwres/man/lwres_context.docbook
index ad0392e4e51e..e0a45eecf31d 100644
--- a/lib/lwres/man/lwres_context.docbook
+++ b/lib/lwres/man/lwres_context.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001, 2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -18,11 +18,10 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_context.docbook,v 1.11 2007/06/18 23:47:51 tbox Exp $ -->
<refentry>
<refentryinfo>
- <date>Jun 30, 2000</date>
+ <date>June 18, 2007</date>
</refentryinfo>
<refmeta>
@@ -36,6 +35,7 @@
<year>2004</year>
<year>2005</year>
<year>2007</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
diff --git a/lib/lwres/man/lwres_context.html b/lib/lwres/man/lwres_context.html
index e13539d9f924..ba6b858a4d32 100644
--- a/lib/lwres/man/lwres_context.html
+++ b/lib/lwres/man/lwres_context.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001, 2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -172,7 +172,7 @@ void *
</div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543532"></a><h2>DESCRIPTION</h2>
+<a name="id2543541"></a><h2>DESCRIPTION</h2>
<p><code class="function">lwres_context_create()</code>
creates a <span class="type">lwres_context_t</span> structure for use in
lightweight resolver operations. It holds a socket and other
@@ -258,7 +258,7 @@ void *
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543720"></a><h2>RETURN VALUES</h2>
+<a name="id2543729"></a><h2>RETURN VALUES</h2>
<p><code class="function">lwres_context_create()</code>
returns <span class="errorcode">LWRES_R_NOMEMORY</span> if memory for
the <span class="type">struct lwres_context</span> could not be allocated,
@@ -283,7 +283,7 @@ void *
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543770"></a><h2>SEE ALSO</h2>
+<a name="id2543779"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">lwres_conf_init</span>(3)</span>,
<span class="citerefentry"><span class="refentrytitle">malloc</span>(3)</span>,
diff --git a/lib/lwres/man/lwres_gabn.3 b/lib/lwres/man/lwres_gabn.3
index ea746903d4e7..f67126eb5459 100644
--- a/lib/lwres/man/lwres_gabn.3
+++ b/lib/lwres/man/lwres_gabn.3
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.\" Copyright (C) 2000, 2001 Internet Software Consortium.
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
@@ -20,11 +20,11 @@
.\" Title: lwres_gabn
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: Jun 30, 2000
+.\" Date: June 18, 2007
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "LWRES_GABN" "3" "Jun 30, 2000" "BIND9" "BIND9"
+.TH "LWRES_GABN" "3" "June 18, 2007" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -53,7 +53,7 @@ These are low\-level routines for creating and parsing lightweight resolver name
.PP
There are four main functions for the getaddrbyname opcode. One render function converts a getaddrbyname request structure \(em
\fBlwres_gabnrequest_t\fR
-\(em to the lighweight resolver's canonical format. It is complemented by a parse function that converts a packet in this canonical format to a getaddrbyname request structure. Another render function converts the getaddrbyname response structure \(em
+\(em to the lightweight resolver's canonical format. It is complemented by a parse function that converts a packet in this canonical format to a getaddrbyname request structure. Another render function converts the getaddrbyname response structure \(em
\fBlwres_gabnresponse_t\fR
\(em to the canonical format. This is complemented by a parse function which converts a packet in canonical format to a getaddrbyname response structure.
.PP
@@ -189,7 +189,7 @@ indicate that the packet is not a response to an earlier query.
.PP
\fBlwres_packet\fR(3)
.SH "COPYRIGHT"
-Copyright \(co 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
Copyright \(co 2000, 2001 Internet Software Consortium.
.br
diff --git a/lib/lwres/man/lwres_gabn.docbook b/lib/lwres/man/lwres_gabn.docbook
index d0b5c190c318..8743696c123e 100644
--- a/lib/lwres/man/lwres_gabn.docbook
+++ b/lib/lwres/man/lwres_gabn.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -18,11 +18,10 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_gabn.docbook,v 1.10 2007/06/18 23:47:51 tbox Exp $ -->
<refentry>
<refentryinfo>
- <date>Jun 30, 2000</date>
+ <date>June 18, 2007</date>
</refentryinfo>
<refmeta>
@@ -36,6 +35,7 @@
<year>2004</year>
<year>2005</year>
<year>2007</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
@@ -120,7 +120,7 @@ void
There are four main functions for the getaddrbyname opcode.
One render function converts a getaddrbyname request structure &mdash;
<type>lwres_gabnrequest_t</type> &mdash;
- to the lighweight resolver's canonical format.
+ to the lightweight resolver's canonical format.
It is complemented by a parse function that converts a packet in this
canonical format to a getaddrbyname request structure.
Another render function converts the getaddrbyname response structure
diff --git a/lib/lwres/man/lwres_gabn.html b/lib/lwres/man/lwres_gabn.html
index 270620d3d661..a00f82d3acaa 100644
--- a/lib/lwres/man/lwres_gabn.html
+++ b/lib/lwres/man/lwres_gabn.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -22,7 +22,7 @@
<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
-<a name="id2476274"></a><div class="titlepage"></div>
+<a name="id2476275"></a><div class="titlepage"></div>
<div class="refnamediv">
<h2>Name</h2>
<p>lwres_gabnrequest_render, lwres_gabnresponse_render, lwres_gabnrequest_parse, lwres_gabnresponse_parse, lwres_gabnresponse_free, lwres_gabnrequest_free &#8212; lightweight resolver getaddrbyname message handling</p>
@@ -178,7 +178,7 @@ void
</div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543524"></a><h2>DESCRIPTION</h2>
+<a name="id2543531"></a><h2>DESCRIPTION</h2>
<p>
These are low-level routines for creating and parsing
lightweight resolver name-to-address lookup request and
@@ -188,7 +188,7 @@ void
There are four main functions for the getaddrbyname opcode.
One render function converts a getaddrbyname request structure &#8212;
<span class="type">lwres_gabnrequest_t</span> &#8212;
- to the lighweight resolver's canonical format.
+ to the lightweight resolver's canonical format.
It is complemented by a parse function that converts a packet in this
canonical format to a getaddrbyname request structure.
Another render function converts the getaddrbyname response structure
@@ -278,7 +278,7 @@ typedef struct {
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543669"></a><h2>RETURN VALUES</h2>
+<a name="id2543676"></a><h2>RETURN VALUES</h2>
<p>
The getaddrbyname opcode functions
<code class="function">lwres_gabnrequest_render()</code>,
@@ -316,7 +316,7 @@ typedef struct {
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543735"></a><h2>SEE ALSO</h2>
+<a name="id2543742"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">lwres_packet</span>(3)</span>
</p>
</div>
diff --git a/lib/lwres/man/lwres_gai_strerror.3 b/lib/lwres/man/lwres_gai_strerror.3
index fa3f494dd6f3..8da3828f9144 100644
--- a/lib/lwres/man/lwres_gai_strerror.3
+++ b/lib/lwres/man/lwres_gai_strerror.3
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.\" Copyright (C) 2000, 2001 Internet Software Consortium.
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
@@ -20,11 +20,11 @@
.\" Title: lwres_gai_strerror
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: Jun 30, 2000
+.\" Date: June 18, 2007
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "LWRES_GAI_STRERROR" "3" "Jun 30, 2000" "BIND9" "BIND9"
+.TH "LWRES_GAI_STRERROR" "3" "June 18, 2007" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -123,7 +123,7 @@ used by
\fBgetaddrinfo\fR(3),
\fBRFC2133\fR().
.SH "COPYRIGHT"
-Copyright \(co 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
Copyright \(co 2000, 2001 Internet Software Consortium.
.br
diff --git a/lib/lwres/man/lwres_gai_strerror.docbook b/lib/lwres/man/lwres_gai_strerror.docbook
index c33fee5ea6cf..a9314d31998e 100644
--- a/lib/lwres/man/lwres_gai_strerror.docbook
+++ b/lib/lwres/man/lwres_gai_strerror.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -18,11 +18,10 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_gai_strerror.docbook,v 1.10 2007/06/18 23:47:51 tbox Exp $ -->
<refentry>
<refentryinfo>
- <date>Jun 30, 2000</date>
+ <date>June 18, 2007</date>
</refentryinfo>
<refmeta>
@@ -36,6 +35,7 @@
<year>2004</year>
<year>2005</year>
<year>2007</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
diff --git a/lib/lwres/man/lwres_gai_strerror.html b/lib/lwres/man/lwres_gai_strerror.html
index f2faacecfb6a..85d228ec1544 100644
--- a/lib/lwres/man/lwres_gai_strerror.html
+++ b/lib/lwres/man/lwres_gai_strerror.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -42,7 +42,7 @@ char *
</div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543362"></a><h2>DESCRIPTION</h2>
+<a name="id2543370"></a><h2>DESCRIPTION</h2>
<p><code class="function">lwres_gai_strerror()</code>
returns an error message corresponding to an error code returned by
<code class="function">getaddrinfo()</code>.
@@ -110,7 +110,7 @@ char *
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543577"></a><h2>SEE ALSO</h2>
+<a name="id2543586"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">strerror</span>(3)</span>,
<span class="citerefentry"><span class="refentrytitle">lwres_getaddrinfo</span>(3)</span>,
diff --git a/lib/lwres/man/lwres_getaddrinfo.3 b/lib/lwres/man/lwres_getaddrinfo.3
index a80904b8abba..88b4beabd2ce 100644
--- a/lib/lwres/man/lwres_getaddrinfo.3
+++ b/lib/lwres/man/lwres_getaddrinfo.3
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.\" Copyright (C) 2000, 2001, 2003 Internet Software Consortium.
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
@@ -20,11 +20,11 @@
.\" Title: lwres_getaddrinfo
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: Jun 30, 2000
+.\" Date: June 18, 2007
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "LWRES_GETADDRINFO" "3" "Jun 30, 2000" "BIND9" "BIND9"
+.TH "LWRES_GETADDRINFO" "3" "June 18, 2007" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -240,7 +240,7 @@ returns
\fBsendmsg\fR(2),
\fBsocket\fR(2).
.SH "COPYRIGHT"
-Copyright \(co 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
Copyright \(co 2000, 2001, 2003 Internet Software Consortium.
.br
diff --git a/lib/lwres/man/lwres_getaddrinfo.docbook b/lib/lwres/man/lwres_getaddrinfo.docbook
index a328764dbbe9..76927fd82250 100644
--- a/lib/lwres/man/lwres_getaddrinfo.docbook
+++ b/lib/lwres/man/lwres_getaddrinfo.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001, 2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -18,11 +18,10 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_getaddrinfo.docbook,v 1.13 2007/06/18 23:47:51 tbox Exp $ -->
<refentry>
<refentryinfo>
- <date>Jun 30, 2000</date>
+ <date>June 18, 2007</date>
</refentryinfo>
<refmeta>
@@ -36,6 +35,7 @@
<year>2004</year>
<year>2005</year>
<year>2007</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
diff --git a/lib/lwres/man/lwres_getaddrinfo.html b/lib/lwres/man/lwres_getaddrinfo.html
index 270236742964..b4845f56b440 100644
--- a/lib/lwres/man/lwres_getaddrinfo.html
+++ b/lib/lwres/man/lwres_getaddrinfo.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001, 2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -89,7 +89,7 @@ struct addrinfo {
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543413"></a><h2>DESCRIPTION</h2>
+<a name="id2543421"></a><h2>DESCRIPTION</h2>
<p><code class="function">lwres_getaddrinfo()</code>
is used to get a list of IP addresses and port numbers for host
<em class="parameter"><code>hostname</code></em> and service
@@ -283,7 +283,7 @@ struct addrinfo {
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543790"></a><h2>RETURN VALUES</h2>
+<a name="id2543799"></a><h2>RETURN VALUES</h2>
<p><code class="function">lwres_getaddrinfo()</code>
returns zero on success or one of the error codes listed in
<span class="citerefentry"><span class="refentrytitle">gai_strerror</span>(3)</span>
@@ -294,7 +294,7 @@ struct addrinfo {
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543828"></a><h2>SEE ALSO</h2>
+<a name="id2543836"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">lwres</span>(3)</span>,
<span class="citerefentry"><span class="refentrytitle">lwres_getaddrinfo</span>(3)</span>,
diff --git a/lib/lwres/man/lwres_gethostent.3 b/lib/lwres/man/lwres_gethostent.3
index 37067273f890..e53aa33c1755 100644
--- a/lib/lwres/man/lwres_gethostent.3
+++ b/lib/lwres/man/lwres_gethostent.3
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.\" Copyright (C) 2001 Internet Software Consortium.
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
@@ -20,11 +20,11 @@
.\" Title: lwres_gethostent
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: Jun 30, 2000
+.\" Date: June 18, 2007
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "LWRES_GETHOSTENT" "3" "Jun 30, 2000" "BIND9" "BIND9"
+.TH "LWRES_GETHOSTENT" "3" "June 18, 2007" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -309,7 +309,7 @@ The resolver daemon does not currently support any non\-DNS name services such a
or
\fBNIS\fR, consequently the above functions don't, either.
.SH "COPYRIGHT"
-Copyright \(co 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
Copyright \(co 2001 Internet Software Consortium.
.br
diff --git a/lib/lwres/man/lwres_gethostent.docbook b/lib/lwres/man/lwres_gethostent.docbook
index a3f084bc2fe7..487fb7f9ea18 100644
--- a/lib/lwres/man/lwres_gethostent.docbook
+++ b/lib/lwres/man/lwres_gethostent.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -18,11 +18,10 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_gethostent.docbook,v 1.11 2007/06/18 23:47:51 tbox Exp $ -->
<refentry>
<refentryinfo>
- <date>Jun 30, 2000</date>
+ <date>June 18, 2007</date>
</refentryinfo>
<refmeta>
@@ -36,6 +35,7 @@
<year>2004</year>
<year>2005</year>
<year>2007</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
diff --git a/lib/lwres/man/lwres_gethostent.html b/lib/lwres/man/lwres_gethostent.html
index 2c990850805f..3435f1c18078 100644
--- a/lib/lwres/man/lwres_gethostent.html
+++ b/lib/lwres/man/lwres_gethostent.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -228,7 +228,7 @@ void
</div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543609"></a><h2>DESCRIPTION</h2>
+<a name="id2543618"></a><h2>DESCRIPTION</h2>
<p>
These functions provide hostname-to-address and
address-to-hostname lookups by means of the lightweight resolver.
@@ -366,7 +366,7 @@ struct hostent {
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543960"></a><h2>RETURN VALUES</h2>
+<a name="id2543969"></a><h2>RETURN VALUES</h2>
<p>
The functions
<code class="function">lwres_gethostbyname()</code>,
@@ -430,7 +430,7 @@ struct hostent {
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2544194"></a><h2>SEE ALSO</h2>
+<a name="id2544202"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">gethostent</span>(3)</span>,
<span class="citerefentry"><span class="refentrytitle">lwres_getipnode</span>(3)</span>,
@@ -439,7 +439,7 @@ struct hostent {
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2544228"></a><h2>BUGS</h2>
+<a name="id2544236"></a><h2>BUGS</h2>
<p><code class="function">lwres_gethostbyname()</code>,
<code class="function">lwres_gethostbyname2()</code>,
<code class="function">lwres_gethostbyaddr()</code>
diff --git a/lib/lwres/man/lwres_getipnode.3 b/lib/lwres/man/lwres_getipnode.3
index 3632e64b1239..4eb58cc2b147 100644
--- a/lib/lwres/man/lwres_getipnode.3
+++ b/lib/lwres/man/lwres_getipnode.3
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.\" Copyright (C) 2000, 2001, 2003 Internet Software Consortium.
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
@@ -20,11 +20,11 @@
.\" Title: lwres_getipnode
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: Jun 30, 2000
+.\" Date: June 18, 2007
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "LWRES_GETIPNODE" "3" "Jun 30, 2000" "BIND9" "BIND9"
+.TH "LWRES_GETIPNODE" "3" "June 18, 2007" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -200,7 +200,7 @@ translates these error codes to suitable error messages.
\fBlwres_getnameinfo\fR(3),
\fBlwres_hstrerror\fR(3).
.SH "COPYRIGHT"
-Copyright \(co 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
Copyright \(co 2000, 2001, 2003 Internet Software Consortium.
.br
diff --git a/lib/lwres/man/lwres_getipnode.docbook b/lib/lwres/man/lwres_getipnode.docbook
index 825f46209cb7..44b628b5582f 100644
--- a/lib/lwres/man/lwres_getipnode.docbook
+++ b/lib/lwres/man/lwres_getipnode.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001, 2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -18,11 +18,10 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_getipnode.docbook,v 1.12 2007/06/18 23:47:51 tbox Exp $ -->
<refentry>
<refentryinfo>
- <date>Jun 30, 2000</date>
+ <date>June 18, 2007</date>
</refentryinfo>
<refmeta>
@@ -36,6 +35,7 @@
<year>2004</year>
<year>2005</year>
<year>2007</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
diff --git a/lib/lwres/man/lwres_getipnode.html b/lib/lwres/man/lwres_getipnode.html
index 0fc483d1a8aa..6fe0ec64750a 100644
--- a/lib/lwres/man/lwres_getipnode.html
+++ b/lib/lwres/man/lwres_getipnode.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001, 2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -98,7 +98,7 @@ void
</div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543432"></a><h2>DESCRIPTION</h2>
+<a name="id2543441"></a><h2>DESCRIPTION</h2>
<p>
These functions perform thread safe, protocol independent
nodename-to-address and address-to-nodename
@@ -217,7 +217,7 @@ struct hostent {
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543690"></a><h2>RETURN VALUES</h2>
+<a name="id2543699"></a><h2>RETURN VALUES</h2>
<p>
If an error occurs,
<code class="function">lwres_getipnodebyname()</code>
@@ -261,7 +261,7 @@ struct hostent {
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543787"></a><h2>SEE ALSO</h2>
+<a name="id2543796"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">RFC2553</span></span>,
<span class="citerefentry"><span class="refentrytitle">lwres</span>(3)</span>,
diff --git a/lib/lwres/man/lwres_getnameinfo.3 b/lib/lwres/man/lwres_getnameinfo.3
index 8ceb47cf6ec1..993b172144b7 100644
--- a/lib/lwres/man/lwres_getnameinfo.3
+++ b/lib/lwres/man/lwres_getnameinfo.3
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.\" Copyright (C) 2000, 2001 Internet Software Consortium.
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
@@ -20,11 +20,11 @@
.\" Title: lwres_getnameinfo
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: Jun 30, 2000
+.\" Date: June 18, 2007
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "LWRES_GETNAMEINFO" "3" "Jun 30, 2000" "BIND9" "BIND9"
+.TH "LWRES_GETNAMEINFO" "3" "June 18, 2007" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -111,7 +111,7 @@ RFC2133 fails to define what the nonzero return values of
\fBgetnameinfo\fR(3)
are.
.SH "COPYRIGHT"
-Copyright \(co 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
Copyright \(co 2000, 2001 Internet Software Consortium.
.br
diff --git a/lib/lwres/man/lwres_getnameinfo.docbook b/lib/lwres/man/lwres_getnameinfo.docbook
index 504dfb70adea..34a72cb884ae 100644
--- a/lib/lwres/man/lwres_getnameinfo.docbook
+++ b/lib/lwres/man/lwres_getnameinfo.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -18,11 +18,10 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_getnameinfo.docbook,v 1.10 2007/06/18 23:47:51 tbox Exp $ -->
<refentry>
<refentryinfo>
- <date>Jun 30, 2000</date>
+ <date>June 18, 2007</date>
</refentryinfo>
<refmeta>
@@ -36,6 +35,7 @@
<year>2004</year>
<year>2005</year>
<year>2007</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
diff --git a/lib/lwres/man/lwres_getnameinfo.html b/lib/lwres/man/lwres_getnameinfo.html
index 9cc7d5ae3cd1..6153e3b372c1 100644
--- a/lib/lwres/man/lwres_getnameinfo.html
+++ b/lib/lwres/man/lwres_getnameinfo.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -82,7 +82,7 @@ int
</div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543394"></a><h2>DESCRIPTION</h2>
+<a name="id2543402"></a><h2>DESCRIPTION</h2>
<p>
This function is equivalent to the
<span class="citerefentry"><span class="refentrytitle">getnameinfo</span>(3)</span> function defined in RFC2133.
@@ -149,13 +149,13 @@ int
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543536"></a><h2>RETURN VALUES</h2>
+<a name="id2543544"></a><h2>RETURN VALUES</h2>
<p><code class="function">lwres_getnameinfo()</code>
returns 0 on success or a non-zero error code if an error occurs.
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543547"></a><h2>SEE ALSO</h2>
+<a name="id2543556"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">RFC2133</span></span>,
<span class="citerefentry"><span class="refentrytitle">getservbyport</span>(3)</span>,
<span class="citerefentry"><span class="refentrytitle">lwres</span>(3)</span>,
@@ -165,7 +165,7 @@ int
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543605"></a><h2>BUGS</h2>
+<a name="id2543613"></a><h2>BUGS</h2>
<p>
RFC2133 fails to define what the nonzero return values of
<span class="citerefentry"><span class="refentrytitle">getnameinfo</span>(3)</span>
diff --git a/lib/lwres/man/lwres_getrrsetbyname.3 b/lib/lwres/man/lwres_getrrsetbyname.3
index f2e33413b845..6397a6e0fe74 100644
--- a/lib/lwres/man/lwres_getrrsetbyname.3
+++ b/lib/lwres/man/lwres_getrrsetbyname.3
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.\" Copyright (C) 2000, 2001 Internet Software Consortium.
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
@@ -20,11 +20,11 @@
.\" Title: lwres_getrrsetbyname
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: Oct 18, 2000
+.\" Date: June 18, 2007
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "LWRES_GETRRSETBYNAME" "3" "Oct 18, 2000" "BIND9" "BIND9"
+.TH "LWRES_GETRRSETBYNAME" "3" "June 18, 2007" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -158,7 +158,7 @@ other failure
.PP
\fBlwres\fR(3).
.SH "COPYRIGHT"
-Copyright \(co 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
Copyright \(co 2000, 2001 Internet Software Consortium.
.br
diff --git a/lib/lwres/man/lwres_getrrsetbyname.docbook b/lib/lwres/man/lwres_getrrsetbyname.docbook
index 5f2a68d1da1a..aceb5a1f9f34 100644
--- a/lib/lwres/man/lwres_getrrsetbyname.docbook
+++ b/lib/lwres/man/lwres_getrrsetbyname.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -18,11 +18,10 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_getrrsetbyname.docbook,v 1.10 2007/06/18 23:47:51 tbox Exp $ -->
<refentry>
<refentryinfo>
- <date>Oct 18, 2000</date>
+ <date>June 18, 2007</date>
</refentryinfo>
<refmeta>
@@ -36,6 +35,7 @@
<year>2004</year>
<year>2005</year>
<year>2007</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
diff --git a/lib/lwres/man/lwres_getrrsetbyname.html b/lib/lwres/man/lwres_getrrsetbyname.html
index e7d68bb54d3d..ad56c485b10d 100644
--- a/lib/lwres/man/lwres_getrrsetbyname.html
+++ b/lib/lwres/man/lwres_getrrsetbyname.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -102,7 +102,7 @@ struct rrsetinfo {
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543415"></a><h2>DESCRIPTION</h2>
+<a name="id2543424"></a><h2>DESCRIPTION</h2>
<p><code class="function">lwres_getrrsetbyname()</code>
gets a set of resource records associated with a
<em class="parameter"><code>hostname</code></em>, <em class="parameter"><code>class</code></em>,
@@ -150,7 +150,7 @@ struct rrsetinfo {
<p></p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543527"></a><h2>RETURN VALUES</h2>
+<a name="id2543536"></a><h2>RETURN VALUES</h2>
<p><code class="function">lwres_getrrsetbyname()</code>
returns zero on success, and one of the following error codes if
an error occurred:
@@ -184,7 +184,7 @@ struct rrsetinfo {
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543627"></a><h2>SEE ALSO</h2>
+<a name="id2543636"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">lwres</span>(3)</span>.
</p>
</div>
diff --git a/lib/lwres/man/lwres_gnba.3 b/lib/lwres/man/lwres_gnba.3
index 413519035e41..5c64f0714291 100644
--- a/lib/lwres/man/lwres_gnba.3
+++ b/lib/lwres/man/lwres_gnba.3
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.\" Copyright (C) 2000, 2001 Internet Software Consortium.
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
@@ -20,11 +20,11 @@
.\" Title: lwres_gnba
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: Jun 30, 2000
+.\" Date: June 18, 2007
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "LWRES_GNBA" "3" "Jun 30, 2000" "BIND9" "BIND9"
+.TH "LWRES_GNBA" "3" "June 18, 2007" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -177,7 +177,7 @@ indicate that the packet is not a response to an earlier query.
.PP
\fBlwres_packet\fR(3).
.SH "COPYRIGHT"
-Copyright \(co 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
Copyright \(co 2000, 2001 Internet Software Consortium.
.br
diff --git a/lib/lwres/man/lwres_gnba.docbook b/lib/lwres/man/lwres_gnba.docbook
index 452cdfcb0f43..ebb7487b031e 100644
--- a/lib/lwres/man/lwres_gnba.docbook
+++ b/lib/lwres/man/lwres_gnba.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -18,11 +18,10 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_gnba.docbook,v 1.11 2007/06/18 23:47:51 tbox Exp $ -->
<refentry>
<refentryinfo>
- <date>Jun 30, 2000</date>
+ <date>June 18, 2007</date>
</refentryinfo>
<refmeta>
@@ -36,6 +35,7 @@
<year>2004</year>
<year>2005</year>
<year>2007</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
diff --git a/lib/lwres/man/lwres_gnba.html b/lib/lwres/man/lwres_gnba.html
index 6d61b87bb43e..f05c05b36d85 100644
--- a/lib/lwres/man/lwres_gnba.html
+++ b/lib/lwres/man/lwres_gnba.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -22,7 +22,7 @@
<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
-<a name="id2476274"></a><div class="titlepage"></div>
+<a name="id2476275"></a><div class="titlepage"></div>
<div class="refnamediv">
<h2>Name</h2>
<p>lwres_gnbarequest_render, lwres_gnbaresponse_render, lwres_gnbarequest_parse, lwres_gnbaresponse_parse, lwres_gnbaresponse_free, lwres_gnbarequest_free &#8212; lightweight resolver getnamebyaddress message handling</p>
@@ -183,7 +183,7 @@ void
</div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543527"></a><h2>DESCRIPTION</h2>
+<a name="id2543534"></a><h2>DESCRIPTION</h2>
<p>
These are low-level routines for creating and parsing
lightweight resolver address-to-name lookup request and
@@ -270,7 +270,7 @@ typedef struct {
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543667"></a><h2>RETURN VALUES</h2>
+<a name="id2543674"></a><h2>RETURN VALUES</h2>
<p>
The getnamebyaddr opcode functions
<code class="function">lwres_gnbarequest_render()</code>,
@@ -308,7 +308,7 @@ typedef struct {
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543733"></a><h2>SEE ALSO</h2>
+<a name="id2543740"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">lwres_packet</span>(3)</span>.
</p>
</div>
diff --git a/lib/lwres/man/lwres_hstrerror.3 b/lib/lwres/man/lwres_hstrerror.3
index 6d24cf65e3fd..a8fa9788b4c4 100644
--- a/lib/lwres/man/lwres_hstrerror.3
+++ b/lib/lwres/man/lwres_hstrerror.3
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.\" Copyright (C) 2000, 2001 Internet Software Consortium.
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
@@ -20,11 +20,11 @@
.\" Title: lwres_hstrerror
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: Jun 30, 2000
+.\" Date: June 18, 2007
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "LWRES_HSTRERROR" "3" "Jun 30, 2000" "BIND9" "BIND9"
+.TH "LWRES_HSTRERROR" "3" "June 18, 2007" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -93,7 +93,7 @@ is not a valid error code.
\fBherror\fR(3),
\fBlwres_hstrerror\fR(3).
.SH "COPYRIGHT"
-Copyright \(co 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
Copyright \(co 2000, 2001 Internet Software Consortium.
.br
diff --git a/lib/lwres/man/lwres_hstrerror.docbook b/lib/lwres/man/lwres_hstrerror.docbook
index ca4589e080b4..d091b347dac5 100644
--- a/lib/lwres/man/lwres_hstrerror.docbook
+++ b/lib/lwres/man/lwres_hstrerror.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -18,11 +18,10 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_hstrerror.docbook,v 1.11 2007/06/18 23:47:51 tbox Exp $ -->
<refentry>
<refentryinfo>
- <date>Jun 30, 2000</date>
+ <date>June 18, 2007</date>
</refentryinfo>
<refmeta>
@@ -36,6 +35,7 @@
<year>2004</year>
<year>2005</year>
<year>2007</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
diff --git a/lib/lwres/man/lwres_hstrerror.html b/lib/lwres/man/lwres_hstrerror.html
index 8d4e9d60b5be..654e73f12d8e 100644
--- a/lib/lwres/man/lwres_hstrerror.html
+++ b/lib/lwres/man/lwres_hstrerror.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -50,7 +50,7 @@ const char *
</div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543380"></a><h2>DESCRIPTION</h2>
+<a name="id2543388"></a><h2>DESCRIPTION</h2>
<p><code class="function">lwres_herror()</code>
prints the string <em class="parameter"><code>s</code></em> on
<span class="type">stderr</span> followed by the string generated by
@@ -84,7 +84,7 @@ const char *
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543498"></a><h2>RETURN VALUES</h2>
+<a name="id2543507"></a><h2>RETURN VALUES</h2>
<p>
The string <span class="errorname">Unknown resolver error</span> is returned by
<code class="function">lwres_hstrerror()</code>
@@ -94,7 +94,7 @@ const char *
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543518"></a><h2>SEE ALSO</h2>
+<a name="id2543527"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">herror</span>(3)</span>,
<span class="citerefentry"><span class="refentrytitle">lwres_hstrerror</span>(3)</span>.
diff --git a/lib/lwres/man/lwres_inetntop.3 b/lib/lwres/man/lwres_inetntop.3
index 0dfe5e6eca6b..c27b25e3d54c 100644
--- a/lib/lwres/man/lwres_inetntop.3
+++ b/lib/lwres/man/lwres_inetntop.3
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.\" Copyright (C) 2000, 2001 Internet Software Consortium.
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
@@ -20,11 +20,11 @@
.\" Title: lwres_inetntop
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: Jun 30, 2000
+.\" Date: June 18, 2007
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "LWRES_INETNTOP" "3" "Jun 30, 2000" "BIND9" "BIND9"
+.TH "LWRES_INETNTOP" "3" "June 18, 2007" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -71,7 +71,7 @@ is not supported.
\fBinet_ntop\fR(3),
\fBerrno\fR(3).
.SH "COPYRIGHT"
-Copyright \(co 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
Copyright \(co 2000, 2001 Internet Software Consortium.
.br
diff --git a/lib/lwres/man/lwres_inetntop.docbook b/lib/lwres/man/lwres_inetntop.docbook
index 26f1779d3139..b2d170f29706 100644
--- a/lib/lwres/man/lwres_inetntop.docbook
+++ b/lib/lwres/man/lwres_inetntop.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -18,11 +18,10 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_inetntop.docbook,v 1.10 2007/06/18 23:47:51 tbox Exp $ -->
<refentry>
<refentryinfo>
- <date>Jun 30, 2000</date>
+ <date>June 18, 2007</date>
</refentryinfo>
<refmeta>
@@ -36,6 +35,7 @@
<year>2004</year>
<year>2005</year>
<year>2007</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
diff --git a/lib/lwres/man/lwres_inetntop.html b/lib/lwres/man/lwres_inetntop.html
index 6f1a37f6d7a4..99cad662b090 100644
--- a/lib/lwres/man/lwres_inetntop.html
+++ b/lib/lwres/man/lwres_inetntop.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -62,7 +62,7 @@ const char *
</div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543380"></a><h2>DESCRIPTION</h2>
+<a name="id2543388"></a><h2>DESCRIPTION</h2>
<p><code class="function">lwres_net_ntop()</code>
converts an IP address of protocol family
<em class="parameter"><code>af</code></em> &#8212; IPv4 or IPv6 &#8212; at
@@ -80,7 +80,7 @@ const char *
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543412"></a><h2>RETURN VALUES</h2>
+<a name="id2543420"></a><h2>RETURN VALUES</h2>
<p>
If successful, the function returns <em class="parameter"><code>dst</code></em>:
a pointer to a string containing the presentation format of the
@@ -93,7 +93,7 @@ const char *
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543445"></a><h2>SEE ALSO</h2>
+<a name="id2543453"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">RFC1884</span></span>,
<span class="citerefentry"><span class="refentrytitle">inet_ntop</span>(3)</span>,
<span class="citerefentry"><span class="refentrytitle">errno</span>(3)</span>.
diff --git a/lib/lwres/man/lwres_noop.3 b/lib/lwres/man/lwres_noop.3
index c0fc47ed6548..cacbd4b6a4cd 100644
--- a/lib/lwres/man/lwres_noop.3
+++ b/lib/lwres/man/lwres_noop.3
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.\" Copyright (C) 2000, 2001 Internet Software Consortium.
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
@@ -20,11 +20,11 @@
.\" Title: lwres_noop
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: Jun 30, 2000
+.\" Date: June 18, 2007
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "LWRES_NOOP" "3" "Jun 30, 2000" "BIND9" "BIND9"
+.TH "LWRES_NOOP" "3" "June 18, 2007" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -57,7 +57,7 @@ packet: a packet is sent to the resolver daemon and is simply echoed back. The o
.PP
There are four main functions for the no\-op opcode. One render function converts a no\-op request structure \(em
\fBlwres_nooprequest_t\fR
-\(em to the lighweight resolver's canonical format. It is complemented by a parse function that converts a packet in this canonical format to a no\-op request structure. Another render function converts the no\-op response structure \(em
+\(em to the lightweight resolver's canonical format. It is complemented by a parse function that converts a packet in this canonical format to a no\-op request structure. Another render function converts the no\-op response structure \(em
\fBlwres_noopresponse_t\fR
to the canonical format. This is complemented by a parse function which converts a packet in canonical format to a no\-op response structure.
.PP
@@ -177,7 +177,7 @@ indicate that the packet is not a response to an earlier query.
.PP
\fBlwres_packet\fR(3)
.SH "COPYRIGHT"
-Copyright \(co 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
Copyright \(co 2000, 2001 Internet Software Consortium.
.br
diff --git a/lib/lwres/man/lwres_noop.docbook b/lib/lwres/man/lwres_noop.docbook
index eb823b77335b..8f40990b478f 100644
--- a/lib/lwres/man/lwres_noop.docbook
+++ b/lib/lwres/man/lwres_noop.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -18,11 +18,10 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_noop.docbook,v 1.11 2007/06/18 23:47:51 tbox Exp $ -->
<refentry>
<refentryinfo>
- <date>Jun 30, 2000</date>
+ <date>June 18, 2007</date>
</refentryinfo>
<refmeta>
@@ -36,6 +35,7 @@
<year>2004</year>
<year>2005</year>
<year>2007</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
@@ -127,7 +127,7 @@ void
There are four main functions for the no-op opcode.
One render function converts a no-op request structure &mdash;
<type>lwres_nooprequest_t</type> &mdash;
- to the lighweight resolver's canonical format.
+ to the lightweight resolver's canonical format.
It is complemented by a parse function that converts a packet in this
canonical format to a no-op request structure.
Another render function converts the no-op response structure &mdash;
diff --git a/lib/lwres/man/lwres_noop.html b/lib/lwres/man/lwres_noop.html
index 69d0d386b366..e1d499cff704 100644
--- a/lib/lwres/man/lwres_noop.html
+++ b/lib/lwres/man/lwres_noop.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -22,7 +22,7 @@
<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
-<a name="id2476274"></a><div class="titlepage"></div>
+<a name="id2476275"></a><div class="titlepage"></div>
<div class="refnamediv">
<h2>Name</h2>
<p>lwres_nooprequest_render, lwres_noopresponse_render, lwres_nooprequest_parse, lwres_noopresponse_parse, lwres_noopresponse_free, lwres_nooprequest_free &#8212; lightweight resolver no-op message handling</p>
@@ -179,7 +179,7 @@ void
</div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543524"></a><h2>DESCRIPTION</h2>
+<a name="id2543531"></a><h2>DESCRIPTION</h2>
<p>
These are low-level routines for creating and parsing
lightweight resolver no-op request and response messages.
@@ -195,7 +195,7 @@ void
There are four main functions for the no-op opcode.
One render function converts a no-op request structure &#8212;
<span class="type">lwres_nooprequest_t</span> &#8212;
- to the lighweight resolver's canonical format.
+ to the lightweight resolver's canonical format.
It is complemented by a parse function that converts a packet in this
canonical format to a no-op request structure.
Another render function converts the no-op response structure &#8212;
@@ -270,7 +270,7 @@ typedef struct {
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543674"></a><h2>RETURN VALUES</h2>
+<a name="id2543682"></a><h2>RETURN VALUES</h2>
<p>
The no-op opcode functions
<code class="function">lwres_nooprequest_render()</code>,
@@ -309,7 +309,7 @@ typedef struct {
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543740"></a><h2>SEE ALSO</h2>
+<a name="id2543748"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">lwres_packet</span>(3)</span>
</p>
</div>
diff --git a/lib/lwres/man/lwres_packet.3 b/lib/lwres/man/lwres_packet.3
index 49ebff7ada41..a33990fc3de9 100644
--- a/lib/lwres/man/lwres_packet.3
+++ b/lib/lwres/man/lwres_packet.3
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.\" Copyright (C) 2000, 2001 Internet Software Consortium.
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
@@ -20,11 +20,11 @@
.\" Title: lwres_packet
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: Jun 30, 2000
+.\" Date: June 18, 2007
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "LWRES_PACKET" "3" "Jun 30, 2000" "BIND9" "BIND9"
+.TH "LWRES_PACKET" "3" "June 18, 2007" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -164,7 +164,7 @@ and lightweight resolver packet
both functions return
\fBLWRES_R_UNEXPECTEDEND\fR.
.SH "COPYRIGHT"
-Copyright \(co 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
Copyright \(co 2000, 2001 Internet Software Consortium.
.br
diff --git a/lib/lwres/man/lwres_packet.docbook b/lib/lwres/man/lwres_packet.docbook
index 87841db7c71a..b9462635023b 100644
--- a/lib/lwres/man/lwres_packet.docbook
+++ b/lib/lwres/man/lwres_packet.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -18,11 +18,10 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_packet.docbook,v 1.13 2007/06/18 23:47:51 tbox Exp $ -->
<refentry>
<refentryinfo>
- <date>Jun 30, 2000</date>
+ <date>June 18, 2007</date>
</refentryinfo>
<refmeta>
@@ -36,6 +35,7 @@
<year>2004</year>
<year>2005</year>
<year>2007</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
diff --git a/lib/lwres/man/lwres_packet.html b/lib/lwres/man/lwres_packet.html
index fad9076a6e8c..d0542daa72db 100644
--- a/lib/lwres/man/lwres_packet.html
+++ b/lib/lwres/man/lwres_packet.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -66,7 +66,7 @@ lwres_result_t
</div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543390"></a><h2>DESCRIPTION</h2>
+<a name="id2543399"></a><h2>DESCRIPTION</h2>
<p>
These functions rely on a
<span class="type">struct lwres_lwpacket</span>
@@ -219,7 +219,7 @@ struct lwres_lwpacket {
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543707"></a><h2>RETURN VALUES</h2>
+<a name="id2543716"></a><h2>RETURN VALUES</h2>
<p>
Successful calls to
<code class="function">lwres_lwpacket_renderheader()</code> and
diff --git a/lib/lwres/man/lwres_resutil.3 b/lib/lwres/man/lwres_resutil.3
index 0e9cf6f97800..0125c788d13c 100644
--- a/lib/lwres/man/lwres_resutil.3
+++ b/lib/lwres/man/lwres_resutil.3
@@ -1,4 +1,4 @@
-.\" Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.\" Copyright (C) 2000, 2001 Internet Software Consortium.
.\"
.\" Permission to use, copy, modify, and/or distribute this software for any
@@ -20,11 +20,11 @@
.\" Title: lwres_resutil
.\" Author:
.\" Generator: DocBook XSL Stylesheets v1.71.1 <http://docbook.sf.net/>
-.\" Date: Jun 30, 2000
+.\" Date: June 18, 2007
.\" Manual: BIND9
.\" Source: BIND9
.\"
-.TH "LWRES_RESUTIL" "3" "Jun 30, 2000" "BIND9" "BIND9"
+.TH "LWRES_RESUTIL" "3" "June 18, 2007" "BIND9" "BIND9"
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
@@ -97,7 +97,7 @@ functions.
.PP
The lightweight resolver uses
\fBlwres_getaddrsbyname()\fR
-to perform foward lookups. Hostname
+to perform forward lookups. Hostname
\fIname\fR
is looked up using the resolver context
\fIctx\fR
@@ -164,7 +164,7 @@ if the buffers used for sending queries and receiving replies are too small.
\fBlwres_buffer\fR(3),
\fBlwres_gabn\fR(3).
.SH "COPYRIGHT"
-Copyright \(co 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
.br
Copyright \(co 2000, 2001 Internet Software Consortium.
.br
diff --git a/lib/lwres/man/lwres_resutil.docbook b/lib/lwres/man/lwres_resutil.docbook
index e6184d912f5d..0a0c4704aa2d 100644
--- a/lib/lwres/man/lwres_resutil.docbook
+++ b/lib/lwres/man/lwres_resutil.docbook
@@ -2,7 +2,7 @@
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
[<!ENTITY mdash "&#8212;">]>
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -18,11 +18,10 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: lwres_resutil.docbook,v 1.12 2007/06/18 23:47:51 tbox Exp $ -->
<refentry>
<refentryinfo>
- <date>Jun 30, 2000</date>
+ <date>June 18, 2007</date>
</refentryinfo>
<refmeta>
@@ -36,6 +35,7 @@
<year>2004</year>
<year>2005</year>
<year>2007</year>
+ <year>2014</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
@@ -153,7 +153,7 @@ typedef struct {
<para>
The lightweight resolver uses
<function>lwres_getaddrsbyname()</function> to perform
- foward lookups.
+ forward lookups.
Hostname <parameter>name</parameter> is looked up using the
resolver
context <parameter>ctx</parameter> for memory allocation.
diff --git a/lib/lwres/man/lwres_resutil.html b/lib/lwres/man/lwres_resutil.html
index 4db7610448c5..28e571b4aec0 100644
--- a/lib/lwres/man/lwres_resutil.html
+++ b/lib/lwres/man/lwres_resutil.html
@@ -1,5 +1,5 @@
<!--
- - Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2004, 2005, 2007, 2014 Internet Systems Consortium, Inc. ("ISC")
- Copyright (C) 2000, 2001 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -134,7 +134,7 @@ lwres_result_t
</div>
</div>
<div class="refsect1" lang="en">
-<a name="id2543467"></a><h2>DESCRIPTION</h2>
+<a name="id2543476"></a><h2>DESCRIPTION</h2>
<p><code class="function">lwres_string_parse()</code>
retrieves a DNS-encoded string starting the current pointer of
lightweight resolver buffer <em class="parameter"><code>b</code></em>: i.e.
@@ -186,7 +186,7 @@ typedef struct {
<p>
The lightweight resolver uses
<code class="function">lwres_getaddrsbyname()</code> to perform
- foward lookups.
+ forward lookups.
Hostname <em class="parameter"><code>name</code></em> is looked up using the
resolver
context <em class="parameter"><code>ctx</code></em> for memory allocation.
@@ -210,7 +210,7 @@ typedef struct {
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543606"></a><h2>RETURN VALUES</h2>
+<a name="id2543614"></a><h2>RETURN VALUES</h2>
<p>
Successful calls to
<code class="function">lwres_string_parse()</code>
@@ -248,7 +248,7 @@ typedef struct {
</p>
</div>
<div class="refsect1" lang="en">
-<a name="id2543677"></a><h2>SEE ALSO</h2>
+<a name="id2543686"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">lwres_buffer</span>(3)</span>,
<span class="citerefentry"><span class="refentrytitle">lwres_gabn</span>(3)</span>.
diff --git a/lib/lwres/print.c b/lib/lwres/print.c
index 87f30323fe9a..4f44814bece7 100644
--- a/lib/lwres/print.c
+++ b/lib/lwres/print.c
@@ -1,5 +1,5 @@
/*
- * Copyright (C) 2004, 2005, 2007, 2011, 2012 Internet Systems Consortium, Inc. ("ISC")
+ * Copyright (C) 2004, 2005, 2007, 2011, 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
* Copyright (C) 1999-2001, 2003 Internet Software Consortium.
*
* Permission to use, copy, modify, and/or distribute this software for any
@@ -15,8 +15,6 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
-/* $Id$ */
-
#include <config.h>
#include <ctype.h>
@@ -26,6 +24,7 @@
#define LWRES__PRINT_SOURCE /* Used to get the lwres_print_* prototypes. */
#include <lwres/stdlib.h>
+#include <lwres/string.h>
#include "assert_p.h"
#include "print_p.h"
diff --git a/make/rules.in b/make/rules.in
index 37bc50d82fec..2a412f6c0313 100644
--- a/make/rules.in
+++ b/make/rules.in
@@ -1,4 +1,4 @@
-# Copyright (C) 2004-2009, 2011, 2012 Internet Systems Consortium, Inc. ("ISC")
+# Copyright (C) 2004-2009, 2011, 2012, 2014 Internet Systems Consortium, Inc. ("ISC")
# Copyright (C) 1998-2003 Internet Software Consortium.
#
# Permission to use, copy, modify, and/or distribute this software for any
@@ -303,6 +303,7 @@ INSTALL_PROGRAM = @INSTALL_PROGRAM@
LINK_PROGRAM = @LN_S@
INSTALL_SCRIPT = @INSTALL_SCRIPT@
INSTALL_DATA = @INSTALL_DATA@
+INSTALL_LIBRARY = @INSTALL_LIBRARY@
###
### Programs used when generating documentation. It's ok for these
@@ -359,11 +360,3 @@ ALWAYS_MAKE_SYMTABLE = @ALWAYS_MAKE_SYMTABLE@
.docbook.8:
${XSLTPROC} -o $@ ${top_srcdir}/doc/xsl/isc-manpage.xsl $<
-###
-### Python executable
-###
-.SUFFIXES: .py
-.py:
- cp -f $< $@
- chmod +x $@
-
diff --git a/version b/version
index 75861930e80d..01f2c7a2ac85 100644
--- a/version
+++ b/version
@@ -7,7 +7,7 @@ PRODUCT=BIND
DESCRIPTION="(Extended Support Version)"
MAJORVER=9
MINORVER=9
-PATCHVER=5
-RELEASETYPE=
-RELEASEVER=
+PATCHVER=6
+RELEASETYPE=-P
+RELEASEVER=1
EXTENSIONS=