shorewall6-5.2.8-bp154.1.56 >  A b|[ڜ!M@eee};hI/}.44O:٤$k2oNW)ŽQdž~dO&ix>{:8s"3oX^|4^F Θ[V*+@7ᢢoWv<{TX]{>EdK'* ^iϽ>I }yކ;wy1rSB޷)D8O-K9wVuUbVIlKv-7RsX\?%TϮay ycJ9w>pE ?d   dPT`d e    | L A@ B DH`KLNO OpP(P8P69Q6:W[6=(>0?8@@FHG`H0IXY\]^ wb c Kd e f l u vzCshorewall65.2.8bp154.1.56Shoreline Firewall 6 is an ip6tables-based firewall for Linux systemsThe Shoreline Firewall 6, more commonly known as "Shorewall6", is a Netfilter (ip6tables) based IPv6 firewall that can be used on a dedicated firewall system, a multi-function gateway/ router/server or on a standalone GNU/Linux system.b|[old-cirrus4F&SUSE Linux Enterprise 15 SP4openSUSEGPL-2.0-onlyhttps://bugs.opensuse.orgProductivity/Networking/Securityhttp://www.shorewall.net/linuxnoarch if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in shorewall6.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in shorewall6.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done firm -f /etc/shorewall/startup_disabled test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable shorewall6.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop shorewall6.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in shorewall6.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart shorewall6.service ) || : fi fiR@6UQ@D[0O`HEFC:?:2S<<@EJSVZYIN^ Fr#` 9413133/401..1-100032061/2.63336/1-10/.U2[8p@?6UQg@D[ 0O,M`5aHDEFC:?#:B2/SNJ<<@7EJJSyVWZ*YvI"N!g[p:A큀A큤A큤A큤A큤AAb|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[_m_mh_m_m_mh_mb|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[b|[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.base@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootshorewall-5.2.8-bp154.1.56.src.rpmconfig(shorewall6)shoreline_firewallshorewall6       /bin/sh/bin/sh/bin/sh/bin/sh/bin/sh/usr/sbin/servicebcconfig(shorewall6)coreutilsdiffutilsfillupgrepiproute2iptableslogrotateperl-baserpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)shorewall-coresystemdsystemdsystemdsystemd5.2.8-bp154.1.563.0.4-14.6.0-14.0-15.2-15.2.8-bp154.1.564.14.3_/@__o-@_A_c^@^^^1^^v^0^n^h^J@^8 @^)]o@\r@\v{\q5\V\/JZ>Z1@Z7Y@YYf@YTYJ_YA%@X[XrX,XN@XGVU@UUa@UKSU-@U@U@T@TÉ@TNT@T@TT@Tq@TZ@Bruno Friedmann Togan Muftuoglu Bruno Friedmann Bruno Friedmann Bruno Friedmann Bruno Friedmann Bruno Friedmann Bruno Friedmann Bruno Friedmann Bruno Friedmann Bruno Friedmann Bruno Friedmann Bruno Friedmann Bruno Friedmann Bruno Friedmann Dominique Leuenberger Bruno Friedmann Bruno Friedmann Bruno Friedmann Bruno Friedmann Bruno Friedmann Bruno Friedmann Bruno Friedmann bruno@ioda-net.chbruno@ioda-net.chbruno@ioda-net.chbruno@ioda-net.cholaf@aepfle.debruno@ioda-net.chalarrosa@suse.combruno@ioda-net.chbruno@ioda-net.chbruno@ioda-net.chbruno@ioda-net.chbruno@ioda-net.chbruno@ioda-net.chbruno@ioda-net.chbruno@ioda-net.chtoganm@opensuse.orgtoganm@opensuse.orgtoganm@opensuse.orgtoganm@opensuse.orgtoganm@opensuse.orgtoganm@opensuse.orgtoganm@opensuse.orgtoganm@opensuse.orgtoganm@opensuse.orgtoganm@opensuse.orgtoganm@opensuse.orgtoganm@opensuse.orgtoganm@opensuse.orgdimstar@opensuse.orgtoganm@opensuse.orgtoganm@opensuse.org- Rework xt_geo_ip fixes by using dynamic patching with find which is less burden and confusing than manual patches series. - Add dynamic patching for *.service with removing like upstream the obsolete StandardOutput=syslog until new release- Correct the xt_geo_ip locations - Correct output to journal- Update to version 5.2.8 (Upgrade your configuration) https://shorewall.org/pub/shorewall/5.2/shorewall-5.2.8/releasenotes.txt + Certain restrictions that apply to wildcard interfaces (interface name ends in '+') were previously not enforced when the logical interface name did not end in '+' but the physical interface name did end in '+'. That has been corrected. + To ensure that error messages appear in the correct place in the output stream, stderr is now redirected to stdout when the configured PAGER is used by a command. + Since Shorewall 5.1.0, the Shorewall uninstall.sh script has incorrectly removed ${SBINDIR}/shorewall, while the Shorewall-core uninstall.sh script has failed to remove that file. Both scripts have been corrected. + Previously, the Shorewall CLI included a spurious hyphen ('-') between the product name (e.g., 'Shorewall6') and the version when printing a command output banner. + The shorewall-snat(5) manpage previously stated that a comma-separated list of IP address could be specified for SNAT. That statement was in error and has been removed. As part of this change, IPv4 Example 6 has been updated to use the PROBABILITY column. - New features + 'show tc' command now shows the classifiers associated with each interface (as displayed by the 'show classifiers' command). This integrated qdisc/filter information is also included in the output of the 'dump' command. This change deprecates the 'show classifiers' ('show filters') command, as that command's output is now included in the 'show tc' output. + Shorewall6 has traditionally generated rules for IPv6 anycast addresses. These rules include: a) Packets with these destination IP addresses are dropped by REJECT rules. b) Packets with these source IP addresses are dropped by the 'nosmurfs' interface option and by the 'dropSmurfs' action. c) Packets with these destination IP addresses are not logged during policy enforcement. d) Packets with these destination IP addresses are processes by the 'Broadcast' action. Beginning with this release, individual network interfaces can be excluded from this treatment through use of the 'omitanycast' option in /etc/shorewall6/interfaces. Note: This option was named 'noanycast' in earlier Beta releases. + Duplicate function names have been eliminated between the Shorewall-core lib.cli shell library and the Shorewall lib.cli-std library. + The 'status' command in Shorewall[6]-lite now precedes the configuration directory name with the administrative host name separated with a colon (":"). + Tuomo Soini has contributed a macro that handles NFS v1.4 (no dynamic ports). - Packaging: + Add buildrequires for pkgconfig (missing) + Use macro for sbindir- Update to version 5.2.7 + **Upgrade your configuration** https://shorewall.org/pub/shorewall/5.2/shorewall-5.2.7/releasenotes.txt + Previously, it was not possible to classify traffic by destination IP address when using an Intermediate Functional Block (IFB) for traffic shaping. This is because such classification takes place before the traffic passes through the mangle PREROUTING chain. Such filtering is now possible by setting the 'connmark' option in the tcdevices file. This option causes the current connection mark to be copied to the packet mark prior to filtering, thus allowing the packet mark to be used for classification. This change adds a new CONNMARK_ACTION capability which is required to be able to specify the 'connmark' option. + The tcpri file now supports ?FORMAT 2 which inserts an SPORT column directly to the right of the PORT column. As part of this change, the PORT column is renamed to DPORT while allowing both 'port' and 'dport' to be used in the alternate input format. See shorewall-tcpri(5) and http://shorewall.org/simple_traffic_shaping.html for additional information. + The Simple TC document is now linked to FAQs 97 and 97a.- Update to version 5.2.6 + **Upgrade your configuration** https://shorewall.org/pub/shorewall/5.2/shorewall-5.2.6/releasenotes.txt + When compiling for export, the compiler generates a firewall.conf file which is later installed on the remote firewall system as ${VARDIR}/firewall.conf. Previously, the CLI on that firewall was not processing the file, resulting in some features not being available: - Default values for VERBOSITY, LOGFILE, LOGFORMAT, PATH, SHOREWALL_SHELL, SUBSYSLOCK, RESTOREFILE, RESTART, DYNAMIC_BLACKLIST and PAGER are not supplied. - scfilter file supplied at compile time. - dumpfilter file supplied at compile time. That has been corrected. + A bug in iptables (see https://git.netfilter.org/iptables/commit/?id=d1555a0906e35ba8d170613d5a43da64e527dbe1) prevents the '--queue-cpu-fanout' option from being applied unless that option is the last one specified. Unfortunately, Shorewall places the '--queue-bypass' option last if that option is also specified. This release works around this issue by ensuring that the '--queue-cpu-fanout' option appears last. + The -D 'compile', 'check', 'reload' and 'Restart' option was previously omitted from the output of 'shorewall help'. It is now included. As part of this change, an incorrect and conflicting description of the -D option was removed from the 'remote-restart' section of shorewall(8). + Previously, when EXPAND_POLICIES=No, chains that enforced ACCEPT policies were not completely optimized by optimize level 2 (ACCEPT rules preceding the final unconditional ACCEPT were not deleted). That has been corrected such that these rules are now optimized.- Update to version 5.2.5.2 https://shorewall.org/pub/shorewall/5.2/shorewall-5.2.5/releasenotes.txt + 5.2.5.2 Previously, ";;+" was mishandled in the snat file; the generated rule incorrectly included the leading "+". That has been corrected so that the generated rule is now correct. Example (SNAT OpenVPN server traffic leaving on eth0): SNAT(192.2.0.4) - eth0 ;;+ -p udp --sport 1194 + 5.2.5.1 - The change in 5.2.5 base which changed the 'user' facility to the 'daemon' facility in Shorewall syslog messages did not change the messages with severity 'err'. That has been corrected such that all syslog messages now use the 'daemon' facility. - The actions.std file contains "?IF...?ELSE...?ENDIF" sequences that provide different action options depending on the availabilty of certain capabilities. This has resulted in the Broadcast and Multicast options being listed twice in the output of "shorewall[6] show actions". Beginning with this release, this duplication is eliminated. Note, however, that the options shown will be incomplete if they were continued onto another line, and may be incorrect for Broadcast and Multicast. - A typo in shorewall-providers(5) has been corrected. + 5.2.5 Base - Previously, Shorewall-init installed a 'shorewall' script in /etc/network/if-down.d on Debian and derivatives. This script was unnecessary and required Debian-specific code in the generated firewall script. The Shorewall-init script is no longer installed and the generated firewall script is now free of distribution-specific code. - Also on Debian and derivatives, Shorewall-init installed /etc//NetworkManager/dispatcher.d/01-shorewall which was also unnecessary. Beginning with this release, that file is no longer installed. - Previously, if the dynamic-blacklisting default timeout was set in a variable in the params file and the variable was used in setting DYNAMIC_BLACKLIST, then the 'allow' command would fail with the message: ERROR: Invalid value (ipset-only,disconnect,timeout=) for DYNAMIC_BLACKLIST That has been corrected. - When EXPAND_POLICIES=No in shorewall[6].conf, policies in complex rulesets are enforced in chains such as 'net-all' and 'all-all'. Previously, these chains included redundant state-oriented rules. In addition to being redundant. these rules could actually break complex IPv6 configurations. The extra rules are now omitted.- Update to bugfix version 5.2.4.5 + The description of the 'optional' option has been expanded in shorewall-interfaces(5). + Previously, the AUTOMAKE option did not work properly when /etc/shorewall[6] was a symbolic link. That has been corrected. - Packaging + Remove broken %pretrans, move content to %pre + Remove use of %release in rpm scriptlet + This will avoid constant rebuild.- Update to bugfix version 5.2.4.4 + When DYNAMIC_BLACKLIST=ipset... or when SAVE_IPSETS=Yes in shorewall[6].conf, 'shorewall[6] start' could hang. Fixed. + 'shorewall[6] start' would not automatically create dynamic blacklisting ipsets. That has been corrected. - This version will served also as maintenance upgrade for Leap- Update to version 5.2.4.2 https://shorewall.org/pub/shorewall/5.2/shorewall-5.2.4/releasenotes.txt + Fixes for debian - Update to version 5.2.4.1 + Fixes for openSUSE shorewall-init will now ignore 'start' and 'stop' commands, for running firewalls + Spurious messages have been removed - Packaging + Move /usr/sbin/shorewall to shorewall-core so -lite version doesn't need main shorewall package + To make shorewall remote-* command working we patch lib.cli-std to use /usr/sbin instead of /sbin + commented spec + Desactivate for the moment the upgrade warning. we need to find a 100% working solution. + use %{var} form everywhere- Add perl-base as buildrequirement to force choice of SHA-DIGEST new problem in TW - To fix boo#1166114 never restart shorewall-init.service macro service_del_postun is replaced by simplier systemd_postun - Remove conflict between main and lite package. A managing station need main to build configuration and can use - lite to execute it. Users are in charge of choosing which service has to be started and used. ❤ Freedom- Remove shorewall require from shorewall-init (was a forgoten action)- Update to version 5.2.4 https://shorewall.org/pub/shorewall/5.2/shorewall-5.2.4/releasenotes.txt + Previously, when a Shorewall6 firewall was placed into the 'stopped' state, ICMP6 packets required by RFC 4890 were not automatically accepted by the generated ruleset. Beginning with this release, those packets are automatically accepted. + Previously, the output of 'shorewall[6] help' displayed the superseded 'load' command. That text has been deleted. + The QOSExample.html file in the documentation and on the web site previously showed tcrules content for the /etc/shorewall/mangle file (recall that 'mangle' superseded 'tcrules'). That page has been corrected. + The 'Starting and Stopping' and 'Configuration file basics' documents have been updated to align them with the current product behavior. + The 'ipsets' document has been updated to clarify the use of ipsets in the stoppedrules file. - Packaging + shorewall-init package has a removed %service_del_postun macro to close bug boo#1166114 Restarting this service can lock down admin out of the system. + shorewall(6) and shorewall(6)-lite conflict has they shouldn't be installed together on the same system. + conf_update flag is set to 1 to activate update reminder + Adjust and cleanup requires- Add version to requires in -lite version- Update to minor bugfix version 5.2.3.7 + When DOCKER=Yes, if both the DOCKER-ISOLATE and DOCKER-ISOLATE-STAGE-1 existed then the DOCKER-ISOLATE-STAGE-* chains were not preserved through shorewall state changes. That has been corrected so that both chains are preserved if present. + Previously, the compiler always detected the OLD_CONNTRACK_MATCH capability as being available in IPv6. When OLD_CONNTRACK_MATCH was available, the compiler also mishandled inversion ('!') in the ORIGDEST columns, leading to an assertion failure. Both the incorrect capability detection and the mishandled inversion have been corrected. + During 'enable' processing, if address variables associated with the interface have values different than those when the firewall was last started/restarted/reloaded, then a 'reload' is performed rather than a simple 'enable'. The logic that checks for those changes was incorrect in some configurations, leading to unneeded reload operations. That has been corrected. + When MANGLE_ENABLED=No in shorewall[6].conf, some features requiring use of the mangle table can be allowed, even though the mangle table is not updated. That has been corrected such that use of such features will raise an error. + When the IfEvent(...,reset) action was invoked, the compiler previously emitted a spurious "Resetting..." message. That message has been suppressed. - Packaging + Do not provide anymore unsused notrack file + Introduce define conf_need_update to track when we activate the post update warning for users when there's minor or major version update of shorewall bnc#1166114- Update to bugfix minor 5.2.3.6 + Fix for possible start failure when both Docker containers and Libvirt VMs were in use.- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to shortcut through the -mini flavors.- Update to bugfix minor 5.2.3.5 + A typo in the FTP documentation has been corrected. + The recommended mss setting when using IPSec with ipcomp has been corrected. + A number of incorrect links in the manpages have been corrected. + The 'bypass' option is now allowed when specifying an NFQUEUE policy. Previously, specifying that option resulted in an error. + Corrected IPv6 Address Range parsing. + Previously, such ranges were required to be of the form [-] rather than the more standard form []-[]. In the snat file (and in nat actions), the latter form was actually flagged as an error while in other contexts, it resulted in a less obvious error being raised. + The manpages have been updated to refer to https://shorewall.org rather than http://www.shorewall.org. - Refresh spec file- Update to bugfix minor 5.2.3.4 + Update release documents. + Correct handling of multi-queue NFQUEUE as a policy. + Correct handling of multi-queue NFQUEUE as a macro parameter. + Make 'AUTOMAKE=No' the update default. + Correct the description of the 'bypass' NFQUEUE option in shorewall-rules(5).- Update to bugfix minor 5.2.3.3 Previously, if an ipset was specified in an SPORT column, the compiler would raise an error similar to: ERROR: Invalid ipset name () /etc/shorewall/rules (line 44) - Update to bugfix minor 5.2.3.2 Shorewall 5.2 automatically converts an existing 'masq' file to an equivalent 'snat' file. Regrettably, Shorewall 5.2.3 broke that automatic update, such that the following error message was issued: Use of uninitialized value $Shorewall::Nat::raw::currentline in pattern match (m//) at /usr/share/shorewall/Shorewall/Nat.pm line 511, <$currentfile> line nnn. and the generated 'masq' file contains only initial comments. That has been corrected.- Update to bugfix minor 5.2.3.1 release + An issue in the implementation of policy file zone exclusion, released in 5.2.3 has been resolved. In the original release, if more than one zone was excluded then the following error was raised: ERROR: 'all' is not allowed in a source zone list etc/shorewall/policy (line ...)- Update to new 5.2.3 bugfix release http://www.shorewall.net/pub/shorewall/5.2/shorewall-5.2.3/releasenotes.txt This is the retirement of Tom Eastep see. https://sourceforge.net/p/shorewall/mailman/message/36589782/ - Removed module* in file section - Clean-up changes and spec (trailing slashes)- Update to new 5.2.2 bugfix release http://www.shorewall.net/pub/shorewall/5.2/shorewall-5.2.2/releasenotes.txt - Packaging: + As seen with upstream recommend running shorewall update on all version update + to be done: run update automatically- Update to major version 5.2.1.4 A lot of changes occurs since last package please consult http://www.shorewall.net/pub/shorewall/5.2/shorewall-5.2.1/releasenotes.txt and the know problem list at http://www.shorewall.net/pub/shorewall/5.2/shorewall-5.2.1/known_problems.txt - Update your configuration shorewall update - Packaging: renew spec file with spec-cleaner- Changes in 5.1.12.3 Problems Corrected: When 'reset' and 'dst' were specified to the IfEvent action, the action would incorrectly attempt to reset the event for the SOURCE IP address rather than the DEST address. That has been corrected.- spec : + Minimal changes with spec-cleaner + Stop conflicting with other firewall (SuSEFirewall2, firewalld) User can have several management tools, and it help preparing a migration - Run shorewall(6) update -A to update your configurations Check and adapt them before restarting. - Changes in 5.1.12.3 + Update release documents. + Ensure that mutex gets released at exit. - Changes in 5.1.12.2 + Alter documentation to prefer ';;' over ';' in INLINE and IP[6]TABLES rules. + Make 'update' convert ';' to ';;' in INLINE, IPTABLES and IP6TABLES rules. + Correct typo that resulted in an "unknown function" Perl diagnostic. + Correct "Invalid policy" message. + Fix omitted SYN limiting. - Changes in 5.1.12.1 + Replace macro.SSDPServer with corrected macro.SSDPserver. - Changes in 5.1.12 Final + Update release documents. + Add INLINE_MATCHES=Yes to the deprecated list. - Changes in 5.1.12 RC 1 + Update release documents. + Minor performance enhancements to Optimize Category 8. + Always report IPSET_MATCH. - Changes in 5.1.12 Beta 2 + Delete undocumented OPTIMIZE_USE_FIRST option. + Merge 5.1.11. + Suppress trailing whitespace. + Avoid awkward blank lines. - Changes in 5.1.12 Beta 1 + Code and manpage cleanup. + Allow SNAT in the INPUT chain. - Changes in 5.1.11 Final + Update release documents. - Changes in 5.1.11 RC 1 + Update versions and copyrights. + Clear the connection mark on forwarded IPSEC tunneled connections + Make TRACK_PROVIDERS=Yes the default. - Changes in 5.1.11 Beta 2 + Be selective about verification of the conntrack utility when + DYNAMIC_BLACKLIST=ipset,disconnect... + Don't require shorewall to be started for 'allow' with ipset-based DBL. + Make address variables play nice with the 'clear' command. + Don't unconditionally enable forwarding during 'clear'. - Changes in 5.1.11 Beta 1 + Allow non-root to run some 'show' commands. + Use synchain name in log messages rather than base chain name. + Assume :syn for TCP CT entries in the conntrack file and HELPER. + Limit depth of 'find' search when AUTOMAKE=Yes. - Changes in 5.1.10.2 + Limit 'find' to depth 1. + Don't run find in an empty entry in $CONFIG_PATH - Changes in 5.1.10.1 + Fix Shorewall-core installer for sandbox case. + Make /etc and /configfiles the same. - Changes in 5.1.10 Final + Add warning re wildcard and OPTIONS. + Correct IPv6 Universal interfaces file. - Changes in 5.1.10 RC 1 + Correct ingress policing. + Fix Shorewall-init recompilation problem. - Changes in 5.1.10 Beta 2 + Allow a protocol to be associated with a regular action. + Remove the PSH flag from the FIN action. - Changes in 5.1.10 Beta 1 + Allow CONFIG_PATH setting to begin with ':' to allow dropping the first directory by non-root. + Correct several typos in the manpages (Roberto Sánchez). + Correct typo in 'dump' processing. + Reset all table counters during 'reset'. - Changes in 5.1.9 Final + Use logical interface names in the Sample configs. - Changes in 5.1.9 RC 1 + Apply W Van den Akker's OpenWRT/Lede patches. + Don't verify IP and SHOREWALL_SHELL paths when compiling for export. + Support for Redfish remote console in macro.IPMI - Changes in 5.1.9 Beta 2 + Merge content from 5.1.8. - Changes in 5.1.9 Beta 1 + Update release documents. + Add TCPMSS action in the mangle file. + Inline the Broadcast action when ADDRTYPE match is available. + Support logging in the snat file. + Add shorewall-logging(5). - Changes in 5.1.8 Final + Correct 'delete_default_routes()'. + Delete default routes from 'main' when a fallback provider is successfully enabled. + Don't restore default route when a fallback provider is enabled. + Issue a warning when 'persistent' is used with RESTORE_DEFAULT_ROUTE=Yes. + Don't dump SPD entries for the other address family. + Fix 'persistent' provider issues. + Treat LOG_TARGET the same as all other capabilities. + Allow merging of rules with IPSEC policies- spec : + use new %_fillupdir macro with env DIRFILLUP in build * Redone patches *-fillup-install.patch to use ${DIRFILLUP} * use new %_fillupdir macro in files + change require perl to perl-base + Added conflict with firewalld + Refresh list of files and modules - Run shorewall(6) update -A to update your configurations Check and adapt them before restarting. - 5.1.8.1 release - Recommended action : + Update release documents + Make persistent routes and rules independent of 'autosrc' + Correct 'delete_default_routes()' + Delete default routes from 'main' when a fallback provider is successfully enabled + Don't restore default route when a fallback provider is enabled + Issue a warning when 'persistent' is used with RESTORE_DEFAULT_ROUTE=Yes + Don't dump SPD entries for the other address family + Fix 'persistent' provider issues + Treat LOG_TARGET the same as all other capabilities + Allow merging of rules with IPSEC policies - 5.1.7.2 release Please refer to releasenote.txt for a detailled description. As always use shorewall [-6] update and revise your configuration + Features summary * Module loading streamlined, shorewall [-6] update will remove MODULE_SUFFIX configuration * Check route if detect is used in gateway column (dhcpd5 has now binary encoded .lease) * DNAT and REDIRECT support in ShorewallActions * Docker configuration support: DOCKER-INGRESS chain. + Fixes summary * Fix shorewall-snat(5) man page example, DEST column has to be read eth0:+myset[dst] * Fix invalid vlsm to ipcalc message * ADD_IP_ALIASES is set to NO for ipv6 while yes for ipv4 * Cleanup .tmp in save ipset operations. * Command reenable fix for persistent and non-persistent interfaces * Warn if getattr failed (SeLinux) - 5.1.6 release + Fixes summary * $SHAREDIR $CONFIGDIR available again * Fix compilation with optimize level 8 * Be consistant with Netfilter interpretation of 'eth'='eth+' * RESTORE_WAIT_OPTION serialize start of ipv4/ipv6 with -w option * RDP macros handle also UDP part + Features summary * Sparse option (not implemented in our spec) * Add enable / disable runtime extension script * Check zone and subzone to share at least one interface * Runtime address and port variables * Iptables --wait option used for serialization- Update to bugfix release 5.1.5.2 + Make build reproducible boo#1047218 + Fix upgrade from 4x version : dropBcast and dropBcasts are now supported boo#1053650 + Perl 5.26 support + Fix for BASIC_FILTERS=Yes and tcfilters + Fix USER/GROUP messages + MAC address in OUTPUT col in accounting file error is raised at compile time + Fix port number 0 or > 65535 perl execption- Update filename in /var/adm/update-messages to match documentation, and build-compare pattern- bugfix release 5.1.4.4 A defect in 5.1.4.3 caused a startup failure when two or more 'fallback' providers were configured. That has been corrected.- Fix a typo in %posttrans that would remove the wrong file and could cause a problem depending on the execution order of the %pretrans and %posttrans scripts for the shorewall and shorewall6 packages.- This stable branch 5.1x will be the new default for Leap 42.3. Remember that each time you have an upgrade with changes in Major or Major,Minor it is mandatory you upgrade your configuration with shorewall(6) update -a /etc/shorewall(6) command. - Packaging : use pretrans and posttrans to inform user about configuration upgrade. - Bugfix release 5.1.4.3. Problem Corrected: When running on prior-generation distributions such as RHEL6, IPv6 multi-ISP configurations failed to start due to an error such as the following: ERROR: Command "ip -6 -6 route replace default scope global table 250 nexthop via ::192.88.99.1 dev tun6to4 weight 1" Failed Such configurations now start successfully.- Bugfix and enhancement release 5.1.4.2 complete changelog is available http://shorewall.net/pub/shorewall/5.1/shorewall-5.1.4/releasenotes.txt - Main changes All IPv6 standard actions have been deleted and their logic has been added to their IPv4 counterparts who can now handle both address families. Previously, ?error and ?require messages as well as verbose ?info and ?warning messages (those that report the file and line numbers) generated from an action file would report the action file name and line number rather than the file and line number where the action was invoked. The file and line number where the action was invoked were listed second. Beginning with this release, the invoking file and line number are listed first and the action file and line number are not reported. This allows for creation of clearer messages. IPv6 UPnP support (including MINIUPNPD) is now available. A PERL_HASH_SEED option has been added to allow the Perl hash seed to be specified. See shorewall.conf(5) and perlsec(1) for details.- Bugfix release 5.1.3.2 Previously, if a Shorewall Variable (e.g., @chain) was the target of a conditional ?RESET directive (one that was enclosed in ?if. ?else...?endif logic), the compiler could incorrectly use an existing chain created from the action rather than creating a new (and different) chain. That has been corrected. Previously, if alternate input format specified a column that had already been specified, the contents of that column were silently overwritten. Now, a warning message is issued stating that the prior value has been replaced by the newer value.- Update to last bugfix version 5.1.3.1 Problems Corrected: There was a typo in the BLACKLIST_DEFAULT settings in the 5.1.3 sample config files, which resulted in a compilation error. That typo has been corrected. There was also a typo in the two-interface IPv4 sample snat file; 192.168.0.0/16 was inadvertently entered as 92.168.0.0/16. That has been corrected. Previously, when processing the policy file, 'all+' was incorrectly treated the same as 'all'. That has been corrected so that 'all+' causes intra-zone traffic to be included in the policy.- Upgrade to last stable 5.1.3 For details see changelog.txt and releasenotes.txt containing all informations for a correct upgrade path. - Packaging Redone patches for var-fillup + shorewall-fillup-install.patch + shorewall-init-fillup-install.patch + shorewall-lite-fillup-install.patch- Upgrade to stable 5.1.1 For details see changelog.txt and releasenotes.txt containing all informations for a correct upgrade path. - Packaging: + use proper %{} syntax + Adjust year copyright + Remove attr on sbindir symlink + Move Samples and Contrib to doc package- Upgrade to last stable of 5.0.x version 5.0.15 For details see changelog.txt and releasenotes.txt containing all informations for a correct upgrade path. - Packaging : + Remove all non suse %if + Cleanup older non supported version + Remove upstream merged patch * 0001-remote_fs.patch * 0001-required-stop-fix.patch + Remove 0001-fillup-install.patch replaced by specific product patch for correct usage of var-fillup + Added patches for var-fillup when not specific %name6 is also supported * shorewall-fillup-install.patch * shorewall-init-fillup-install.patch * shorewall-lite-fillup-install.patch + spec-cleaner minimal- Update to last 4x bugfix version 4.6.13.4 For details see changelog.txt and releasenotes.txt - 4.6.13.4 * This release includes a couple of additional configure/install fixes from Matt Darfeuille. * The DROP command was previously rejected in the mangle file. That has been corrected. - 4.6.13.3 * Previously, Shorewall6 rejected rules in which the SOURCE contained both an interface name and a MAC address (in Shorewall format). That defect has been corrected so that such rules are now accepted. * A number of corrections have been made to the install, uninstall and configure scripts (Matt Darfeuille). * Previously, optional interfaces were not enabled during 'start' and 'restart' unless there was at least one entry in the 'providers' file. This resulted in these interfaces not appearing in the output of 'shorewall[6] status -i'. * The check for use of a circular kernel log buffer (as opposed to a log file) has been improved. * Previously, if a circular log buffer was being used, the output of various commands still displayed '/var/log/messages' as the log file. Now, it is displayed as 'logread'. * When processing the 'dump' command, the CLI now uses 'netstat' to print socket information when the 'ss' utility is not installed. - 4.6.13.2 * Previously, if statistical load balancing was used in the providers file, the default route in the main table was not deleted during firewall start/restart. That route is now correctly deleted. - 4.6.13.1 * Previously, the 'reset' command would fail if chain names were included. Now, the command succeeds, provided that all of the specified chains exist in the filter table. * The TCP meta-connection is now supported by the Tinc macro and tunnel type. Previously, only the UDP data connection was supported.- Update to version 4.6.13 For more details see changelog.txt and realeasenotes.txt * The 'rules' file manpages have been corrected regarding the packets that are processed by rules in the NEW section. * Parsing of IPv6 address ranges has been corrected. Previously, use of ranges resulted in 'Invalid IPv6 Address' errors. * The shorewall6-hosts man page has been corrected to show the proper contents of the HOST(S) column. * Previously, INLINE statements in the mangle file were not recognized if a chain designator (:F, :P, etc.) followingowed INLINE(...). As a consequence, additional matches following a semicolon were interpreted as column/value pairs unless INLINE_MATCHES=Yes, resulting in compilation failure. * Inline matches on IP[6]TABLE rules could be ignored if INLINE_MATCHES=No. They are now recognized. * Specifying an action with a logging level in one of the _DEFAULT options in shorewall[6].conf (e.g., REJECT_DEFAULT=Reject:info) produced a compilation error: ERROR: Invalid value (:info) for first Reject parameter /usr/share/shorewall/action.Rejectect (line 52) That has been corrected. Note, however, that specifying logging with a default action tends to defeat one of the main purposes of default actions which is to suppress logging. * Previously, it was necessary to set TC_EXPERT=Yes to have full access to the user mark in fw marks. That has been corrected so that any place that a mark or mask can be specified, both the TC mark and the User mark are accessible.- Update to version 4.6.11 For more details see changelog.txt and releasenotes.txt * Previously, when the -c option was given to the 'compile' command, the progress message "Compiling..." was issued before it was determined if compilation was necessary. Now, that message is suppressed when re-compilation is not required. * Previously, when the -c option was given to the 'compile' command, the 'postcompile' extension script was executed even when there was no (re-)compilation. Now, the 'postcompile' script is only invoked when a new script is generated. * If CONFDIR was other than /etc, then ordinary users would not receive a clear error message when they attempted to execute one of the commands that change the firewall state. * Previously, IPv4 DHCP client broadcasts were blocked by the 'rpfilter' interface option. That has been corrected. * The 'update' command incorrectly added the INLINE_MATCHES option to shorewall6.conf with a default value of 'Yes'. This caused 'start' to fail with invalid ip6tables rules when the alternate input format using ';' is used. Note: This last issue is not documented in the release notes included with the release.- Update to version 4.6.10.1 For more details see changelog.txt and releasenotes.txt * Indentation is now consistent in lib.core (Tuomo Soini). * The first problem corrected in 4.6.10 below was incomplete. It is now complete (Tuomo Soini). * Similarly, the second fix was also incomplete and is now completed (Tuomo Soini).- Update to version 4.6.9 For more details see changelog.txt and releasenotes.txt * This release contains defect repair from Shorewall 4.6.8.1 and earlier releases. * The means for preventing loading of helper modules has been clarified in the documentation. * The SetEvent and ResetEvent actions previously set/reset the event even if the packet did not match the other specified columns. This has been corrected. * Previously, the 'show capabilities' command was ignoring the HELPERS setting. This resulted in unwanted modules being autoloaded and, when the -f option was given, an incorrect capabilities file was generated. * Previously, when 'wait' was specified for an interface, the generated script erroneously checked for required interfaces on all commands rather than just start, restart and restore.- Update to version 4.6.8.1 For more details see changnlog.txt and releasenotes.txt * Previously, when servicd was installed and there were one or more required interfaces, the firewall would fail to start at boot.This has been corrected by Tuomo Soini. * Some startup logic in lib.cli has been deleted. A bug prevented the code from working as intended, so there is no loss of functionality resulting from deletion of the code.- Update to version 4.6.8 For more details see changelog.txt and releasenotes.txt * This release includes defect repair from Shorewall 4.6.6.2 and earlier releases. * Previously, when the -n option was specified and NetworkManager was installed on the target system, the Shorewall-init installer would still create ${DESTDIR}etc/NetworkManager/dispatcher.d/01-shorewall, regardless of the setting of $CONFDIR. That has been corrected such that the directory ${DESTDIR}${CONFDIR}/NetworkManager/dispatcher.d/01-shorewall is created instead. * Previously, handling of the IPTABLES and IP6TABLES actions in the conntrack file was broken. nfw provided a fix on IRC. * The Shorewall-core and Shorewall6 installers would previously report incorrectly that the product release was not installed. Matt Darfeuille provided fixes.- Update to version 4.6.7 For more details see changelog.txt and releasenotes.txt * This release includes defect repair from Shorewall 4.6.6.2 and earlier releases. * The 'tunnels' file now supports 'tinc' tunnels. * Previously, the SAME action in the mangle file had a fixed timeout of 300 seconds (5 minutes). That action now allows specification of a different timeout. * It is now possible to add or delete addresses from an ipset with entries in the mangle file. The ADD and DEL actions have the same behavior in the mangle file as they do in the rules file. - Added systemd_version macro in anticipation of detecting the correct service file when systemd version is >= 214- Update to version 4.6.6.2 For more details see changelog.txt and releasenotes.txt * The compiler failed to parse the construct +[n] where n is an integer (e.g., +bad[2]). * Orion Paplawski has provided a patch that adds 'ko.xz' to the default MODULE_SUFFIX setting. This change deals with recent Fedora releases where the module names now end with ".ko.xz". In addition to Orion's patch, the sample configurations have been modified to specify MODULE_SUFFIX="ko ko.xz".- Update to version 4.6.6.1 For more details see changelog.txt and releasenotes.txt * Previously the SAVE and RESTORE actions were erroneously disallowed in the INPUT chain within the mangle file. * The manpage descriptions of the mangle SAVE and RESTORE actions incorrectly required a slash (/) prior to the mask value. * Race conditions could previously occur between the 'start' command and the 'enable' and 'disable' commands. * The 'update' command incorrectly added the INLINE_MATCHES option to shorewall.conf with a default value of 'Yes'. This caused 'start' to fail with invalid iptables rules when the alternate input format using ';' is used. * Previously the LOCKFILE setting was not propagated to the generated script. So when the script was run directly, the script unconditionally used ${VARDIR}/lock.- Update to version 4.6.6 For more details see changlelog.txt and releasenotes.txt As there are many new features with this release please consult the mentioned files. * Previously, a line beginning with 'shell' was interpreted as a shell script. Now, the line must begin with 'SHELL' (case-sensitive). Note that ?SHELL and BEGIN SHELL are still case-insensitive.- Update to version 4.6.5.5 For more details see changelog.txt and releasenotes.txt * This release adds Tuomo Soini's fix for Shorewall-init to 4.6.5.5. Previously, the ifupdown scripts were looking in the wrong directory for the firewall script.- Update to version 4.6.5.4 For more details see changelog.txt and releasenotes.txt * The '-c' option of the 'dump' and 'show routing' commands is now documented. * The handling of the 'DIGEST' environmental variable has been corrected in the Shorewall installer. Previously, specifying that option would not correctly update the Chains module which led to a Perl compilation failure. * Handling of ipset names in PORT columns has been corrected. Previously, such usage resulted in an invalid iptables rule being generated.- Update to version 4.6.5.3 For more details see changelog.txt and releasenotes.txt * The Shorewall-init scripts were using the incorrect variable to set the state directory. Correction provided by Roberto Sanchez. * For normal dynamic zones, the 'add' command failed with a diagnostic such as: ERROR: Zone ast, interface net0 does not have a dynamic host list * When a mark range was used in the marks (tcrules) file, a run-time error occurred while attempting to load the generated ruleset.- Do not buildrequire openSUSE-release: it's a daily changing package and causes thus frequent rebuilds for no reason. configure and install both try to guess the target from /etc/os-release. So we simply inject BUILD=suse for the openSUSE case.- Update to version 4.6.5.2 For more details see changelog.txt and releasenotes.txt * LOG_BACKEND=LOG failed at run-time for all but the most recent kernels. - Changes in 4.6.5.1 * The generated script can now detect an gateway address assigned by later versions of that program (Alan Barrett). * In 4.6.5, the bash-based configure script would issue the following diagnostic if SERVICEDIR was not specified in the shorewallrc file: ./configure: line 199: [SERVICEDIR]=: command not found This was compounded by the fact that all of the released shorewallrc files still specified SYSTEMDDIR rather than SERVICEDIR (Evangelos Foutras) * The shorewallrc.archlinux file now reflects a change in SBINDIR that occurred in Arch Linux in mid 2013 (Evangelos Foutras).- Update to versioin 4.6.4.3 For more details see changelog.txt and releasenotes.txt * The fix for LOG_BACKEND in 4.6.4.2 worked on some older distributions but not on newer ones. This release fixes the problem in the remaining cases./bin/sh/bin/sh/bin/sh/bin/shold-cirrus4 1652317122  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~5.2.8-bp154.1.565.2.8-bp154.1.565.2.8-bp154.1.56 shorewall6shorewall6accountingactionsblrulesclearconntrackfindgwhostsinitinterfacesisusablelib.privatemaclistmanglenatnetmapparamspolicyprovidersproxyndprefreshrefreshedrestoredroutesrtrulesrulesscfiltersecmarksshorewall6.confsnatstartstartedstopstoppedstoppedrulestcclassestccleartcdevicestcfilterstcinterfacestcpritunnelszonesshorewall6shorewall6.servicercshorewall6shorewall6shorewall6COPYINGchangelog.txtipsecvpnipv6releasenotes.txttunnelsysconfig.shorewall6shorewall6-accounting.5.gzshorewall6-actions.5.gzshorewall6-blacklist.5.gzshorewall6-blrules.5.gzshorewall6-conntrack.5.gzshorewall6-exclusion.5.gzshorewall6-hosts.5.gzshorewall6-interfaces.5.gzshorewall6-ipsets.5.gzshorewall6-maclist.5.gzshorewall6-mangle.5.gzshorewall6-masq.5.gzshorewall6-modules.5.gzshorewall6-nat.5.gzshorewall6-nesting.5.gzshorewall6-netmap.5.gzshorewall6-params.5.gzshorewall6-policy.5.gzshorewall6-providers.5.gzshorewall6-proxyndp.5.gzshorewall6-routes.5.gzshorewall6-routestopped.5.gzshorewall6-rtrules.5.gzshorewall6-rules.5.gzshorewall6-secmarks.5.gzshorewall6-snat.5.gzshorewall6-stoppedrules.5.gzshorewall6-tcclasses.5.gzshorewall6-tcdevices.5.gzshorewall6-tcfilters.5.gzshorewall6-tcinterfaces.5.gzshorewall6-tcpri.5.gzshorewall6-tcrules.5.gzshorewall6-tos.5.gzshorewall6-tunnels.5.gzshorewall6-vardir.5.gzshorewall6-zones.5.gzshorewall6.conf.5.gzshorewall6.8.gzshorewall6action.mangletemplateaction.templateactions.stdconfigfilesaccountingaccounting.annotatedactionsactions.annotatedblrulesblrules.annotatedclearconntrackconntrack.annotatedfindgwhostshosts.annotatedinitinterfacesinterfaces.annotatedisusablelib.privatemaclistmaclist.annotatedmanglemangle.annotatednatnat.annotatednetmapnetmap.annotatedparamsparams.annotatedpolicypolicy.annotatedprovidersproviders.annotatedproxyndpproxyndp.annotatedrefreshrefreshedrestoredroutesroutes.annotatedrtrulesrtrules.annotatedrulesrules.annotatedscfiltersecmarkssecmarks.annotatedshorewall6.confsnatsnat.annotatedstartstartedstopstoppedstoppedrulesstoppedrules.annotatedtcclassestcclasses.annotatedtccleartcdevicestcdevices.annotatedtcfilterstcfilters.annotatedtcinterfacestcinterfaces.annotatedtcpritcpri.annotatedtunnelstunnels.annotatedzoneszones.annotatedconfigpathdeprecatedfunctionshelperslib.basemacro.Pingmacro.Trcrtmacro.mDNSmacro.mDNSbiversionshorewall6/etc/logrotate.d//etc//etc/shorewall6//usr/lib//usr/lib/systemd/system//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/shorewall6//usr/share/fillup-templates//usr/share/man/man5//usr/share/man/man8//usr/share//usr/share/shorewall6//usr/share/shorewall6/configfiles//var/lib/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Backports:SLE-15-SP4/standard/97f2ce2d5be1dd0a844f5146ece16e0e-shorewallcpioxz5noarch-suse-linuxASCII textdirectorycannot open `/home/abuild/rpmbuild/BUILDROOT/shorewall-5.2.8-bp154.1.56.x86_64/etc/shorewall6/isusable' (No such file or directory)UTF-8 Unicode textPOSIX shell script, ASCII text executabletroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)NG,iAif [ -f /run/shorewall6_upgrade ]; then cat > /var/adm/update-messages/shorewall-5.2.8-something << EOF Warning: Shorewall6 5.2 has just been installed Warning: You have to check and upgrade your configuration shorewall6 update -a /etc/shorewall6 Warning: Adjust changes and try the new configuration shorewall6 try /etc/shorewall6 Warning: If everything work run systemctl try-reload-or-restart shorewall6 EOF rm -f /run/shorewall6_upgrade fi/bin/shutf-89a05c5be92677f6e8e385e68ec86999182584fcb2b51d097282693b73f873bc5?7zXZ !t/Fv] crv(vX0VK"E0g%92pG223UcL33ʋP]vދΞ7B͟H\ ZVRO3rEw@zJ4}FgXkX+%2 {wpݹ~Ϭz qբ}'W8MԜu}&6nf?%Rb"+,1YYN8UJd -YBJ } QhvC s9>CJZSP9Kn4Mk"?dS4᫝<ߵ!H7`i 9F3l!"/N!ԔԊjɪ7SZ˹jpԙêű(2Hf7Z2aj$\+L4EghSjLk.HW{?FqOMy\ C+RCkKu8[^2(ˊD?Q]*E1bͅn 'V|iL O0%tH$\-g4߅t^C@@x"5LգA*7Z^h HnCuZ>pN/,zqy @JWCN'Lj 5t'_) ;-$"6d\5ٿg@(ַB űز:3f-0aôXILBQx5݀{iکE& G ]8x\H5.)c9 U\4K’`negޭE6~b_31CCQpƃ%v4"ޑhhWc^?@1ad- l?\o%Lf ؂GC_t_ıò/ J:ϷʀCR)@kH c;fkY-0(g 쒼HiO #<yN\AT1`xq%WoQVtN;)1ŠsL#oY&JLT20NЂ9Z&3!FG[6q}Mүd0+dfx Dݜʟh-yz^C0т }߆E *FW;3H ( mbm ,2uFVn3 >V<>g4-fӖq\Rq0ᢅ1]X(4#4~[>Ào^8QlaVҹ'ƇsKMNC˪@s4ٵ V`][CV+L*Nj `/3`Gi[K&WT[Nm̞1ɐK̚AJc9"mZk;$:]˴R||XGg6I4}AoM4uJvYnQrT &t^ jaMP 2fPi,M"JR>1^}G=a-n}^gϤ18= rY?CWտH fSq9nэVѨ`CM]LC^g%` >/;/qızTsHa\p'G #SM9.&i 9yy,=wS" : -%?՗Ff{ee@/93`cfӉqsy v f{{?)<c2f⛿Ldָν4R]R}BrFm;9 {.kc>16 3:}.+Yi}Iͻ̻~7ķ (T`U/BpMXjhA ۞7K>M8ŔpK|{X+g 1H@mԺ a: % i&Z8 Q8AlKz͒f,;L%<eւ ۍ'=WlE. G+-:[ 1<%JHVGDpjfD1ʍxR-x5r^)cLZ}u|X63O|gYzqoWCqK 9"Ynl/)rpѾFd?~:BzEu9R1uWu}ߺTMyVCءK)eO|_ %"dU֩,51qVٌ2Ôx|RҗhMm0 Fmߦc^ʀTţH6@Wg#X_NnǼY=3=wNAґHHDz=9.Dxohj6x8y"z~œxѺq@kgq vGHVK<1h  e9#JuNF5 Gw$ 0}rɏ::r,s)}C33BP/|d)t@ /­eg6/"Ya5R;+b(@w^09f[5D>B9̈fЏ"%;0bCh:S@G bg,D:(#\ ;?ݖf@?pr=؁H;\2)'ޖ#n* b"QT(ZPxKM|dj@X>܄k6739ܬ<˖?2Rg`5tۏ-זszz%8`%0:'[IL"kq:}< L%E["_Lm'_E8I{~V ttQq>6߼|k`f3K< "otJ@yF!XL3)[!`SƾAoSvvY<\> u/=f|B@u[{&.){tsro3ֶ{;]C8 Ks=QMUnN]8,p܃".YUoy(Q4LjPf.JMc-cCDjX*WJo?n֜ui1vp!dz:V:(r[.$ kkЭxۅT*o;܂b ,4xQiS mApt4SgLEOXLYsӨǙL(8dH?/e/D͟fUN]]\ ?8̣s~,O4(H܊Cr׍Z=6L0N#[@8? h51C\lu=dEsW/r?LH#yWXxHQ:sёHU4ΑYo:q q%B_j l0EVcץva4àge:WV@C0$ )HA=u NG_6֘go+/3}+= 0$ "B41s'߉m@Or䌌\Kϥ_N" >9eOM BFC;A &fyOm,|@5U8ih )) {KQUmIڴtC :պo޳<\NZ1S3ynEB/;`w۶op6]MpzKvBib%{#VR䤉16:55G wAxY\ {,$"Ύ.d?b(:Z{4@R8V.Œ)y$Hc&HlfIWF8}+`zAXn<KTT6J.Ⱥ=زa]hdnYIW@5bCz2r7죁*dzi~#\mp0rL:1(@1Ѓ#")n!p]1Y㦔nS=ܻY|\7. Q4MzfCxщO:-uV7z @U?md#rь:%/$h_k(e杵erRp; ^yeY v8$uYAՒj: w G6v|@ηR8C(hp1v_F꭫Kt`}Q1<BƑ?H .Y~v|hd xG1E]FĚzY蔿^53KQ`V8$s+q<lI$Xl>>>7.GN|hvn ͇ &q3\Q%b n@$Y=kM3E8^d!@\<XbuGWO܆+EHӲ %eh^536iFd:HnB<0ahZRFQKMN,IAt_>1oOj@,{ji !"Li D]rj"ʩo @p=lj:|7S_6<|N+jyef,x!sF1(q^Q¸؝i$d³Ubhm1}Q=&ݦI?GIw'%K4}>kC.qWtЌ.e-]R}k="8` +2t4{HTGە8n먼 T^)p!"5;W$QH/!R?1mwߤ`EHjz(X2+of+ =]0FR n"8ӌvԟIl#) QGV(SCan NaDRpJM-bІK=D7{+GBPLb;& q`ۼYX /yĄe Uq^j\ܣm/R+H!TVcPnyFo^4jzno)PPŰBQ'x0Y9fuK|{or;^%f-%ʜV |(J=COї UN'GߢGlD뒓`c64lS') 8G-t  LoZg(WwDId51OZZBGxv{LshM)"~O#&Axj)jR lߗfq}`I "b3sLDzjÃpJmZ9%ki8B7i'(6e|tqrvhh<Oquq ~R}y5jqafez/`LY؞#1йmі\{['S=hc!7tDmzczRTY\Zo^ʐ1=jKR]pښa$)}2>"j:1e۠.4Ȅn'_~pl"UfǻY1<ӯ ;bwܴ5URTL0%T5/BOGW+&ذ+-nD5d =uxZV"%Ӻ|˜d +Lm&?0bCf=KQ~.V(}MwQ6Pb |um<OO{QG&3j/L/l(mAױvu`$&{AUBg~NO /vA 9a`](f_z;1|Ql sߩdKEy((c{B2cZ;XK׼gH mn+L!^"e 9]fMB[_1ms[ETuyWB3Wgğ}i A^zC7H!/UƧ`˕0}{McQfval0oD!q 5=V| ,ȹpܹt2γHO,=M{3R<B-`BGM*`Y7 Uddf-! PGdqнX50^`Ξ z1x?a`ZJ`Xrz=;tO}}]pmV^9qQM1TU<4?̋-4ߡ&xJ@ T z4=lѭ ܡesHQu[Kfu!Ou5T_˒G,e|F}gßl#i21 S&e zQ|g[p +ZqXcC.O ճ&rZ»!ģQJbsJU`/p|mpkdEOo.U.ٚh. #.jyqc#~I*V=ei0ɮ6 g]E5T|xcYZJеcstfC_~c;|YӗM*+\ kin-(k{$C+!VլT>1μJ 7[-3[L)W@evLR~`P6Vl[&*Cp\k9#Xg9Lť1JG-V^[ֈUimzӚFu%Omu hlĕFNNoŪ2 bN,-h%c  n5>g(kMc- )ೳuLGrr欸:Tpar^le DcManO Bje5Wa?waӞW67lBe_ɿɍ/C=̟|=]}v_k1FƟЮMGf0)Z"u8X<&P;VaքRJv$ :P3;9J8(%ꖢx79tSt }<@GgSX|CZY>6ߑ@g *PԬ nYqY>+agF1W.\a|;>6r9LïŞUgVm0a Mcs{CZ zO+ň@Csq'䵷 i/Hna%e!<@D0Z>i/ S.+,9#j4qh &0C>Gkү<2Zl>OVr+/७TuQ2h$Xr''_ >q=Hh Du%ȅelWA# SB뿏;fOy[+:F"iԾq{H""^mRaYts?z" 11d!,⭁쉓g'PVe(d}ߒC?sSlgƭD;Hp xTvh/čF#:2g2[㫄N{fWy#Y9.zgK.gHAp4$Al:lF"rf_-, ~\gX+%h0Z9ٕYҵF/Wkn3fQ;74(LgW7W囯)`0v'&V ;dX#pnfT8ч6W.Y88Pyeo.1 ԝ;P+7?ziu2.t}Xrv ˖7^48w* 8WjAc ކN4 _@|,xkR 'XC#o366(zDQH6JЃ0dI|;\Mᶕgq*.8r ˨֙GԘYTQULG)ӍG`rfׄOxc';.آ|i;Eh *В.ł>}u62魮*u-xg=c~k#D7P>IjwTs*i݈MRl"ߓ"0:bhO:V^1*YI=R (&dC.;ACjsPUMLHxs=oeHˍ-|A06h 1Zߌ.~'&xIrus*:JTlv!FD31z*ݒ[2آ2TUԅߙCYf{ dsDqS.קriiהj]w2Г;H7ǐº[җ\}2 :/f~&xʨ)' ƆXaC rZU5X_ -K|;9v%`ˀϏ6bB'* ޜUUBnZL#s! OE-hɉ_XZôQţDjwqSyal &2>^B7ȥ+aÅ"F,X6BxN11HۮC ߙ^wJE|4J?zq/ 0coɅ,'nc诏Sy{,'DaNM粟`c)>{,!iS _Xuaqukh w¾\KMއO2*|Uׇ,kO՝ KA~zEYffh/mNɽq)O֟[D7Rp -m~@>㞴}~U%-!RѧU_eI6l+yw:va`x浩fWN*^c4o/P>]R-w]jJl,jgWٔ\id!B/fsK׿`!;߰`\uků*| 0<%Xs ^;GGޑ9veǪFL/(?djm!zbq/s$,yGT73y >x>C7ySݻR̂ӹ2DђK=CLb.~ 1*aʬ7~!sPbXw7UQ6 8 i˲xG2]v1?q'+'pqlX4'*",o}{:$7 r٫.mçlP:vX||g9~+=4T"ݠBv;#^FMP ZJ~&5QBM-a]?eژ\aw6Etr'`͂RdAT(#hQ/Z6Znl |ŲTЍUW-]ã{+~8l@{($v[> ERel0ι^6w"kFO 0,fOsњr=zIlU>ݦm2wK"U~pnI[Z4GM@aA2F_4UލqX)a"n5J[Bj(<0'3 w\ ֊kH%jI*KdD{N8<659nt"c> m?0JٟV٥SU7(j Lk~8XƒJ`]-9Ldg"jƚ*(@+Q{Y|d:-F;ʰN3iO;mC,r4RQW[sPAah1'F.>N'̝~+nag}8dݗ 6=BNq3+Ǿq iq=u N >ExYΚ^ͣE':2vgMt%(;7nLb+R{TX L@,. NH1(V32CZqų]mB+އUՅ5?]dQ*r)LM(2||v|[IEVęEo^XyPV2Sk䄅{Il=DV9mt'?eQIK:Ḻ٭TV?Xl% {d"Vϓ{Nc"<:!yw;ĘAF6&FpUCI/JKi?!MSr8c<'+Lk6s)4B//d ȳ $ ).)0+E@͞~͝!&@0f^K :e@8 :> CByE0MBo)utKLW-(_oT@OߔuR=G9c)Z]y@A8ݵ#:b.\FN5ڕ/̊#y\NwO\ޙ%:4DcA,TǕQV҇kOQۢz o&`ֺ f-,b<__`x.ww{7*XmzP!"7b B\xah,NDqsP>\zC/EA70ȱܕzO38u9Yl=Maź%LZlzE:l\Mv:n :"_Lvcqce ^0-轄hYPV@=4;-}_a~3_eˢ7q}ʗ\Uu9Py\Chyw2ږWub/Gg>_\ P6O_3ZNs}1}0-¤7PJAVU1.e}bʁw o^һ ysT~vffS*%j*<*ir,+unZ&bДXFGd%3$zV+VB.J5)b^ށ=,%Hę=(zM7ow܅CL"58DԒ㸠sv>k3Ö͙5,X)~gmVV$ ]J'LCPVImθY=hƓBu$y .]_́c_Rߊ.h<~hFETWʼn0I R_۩Ε]:P8th6񾓑7,\]`X[׮y*W]A(wkC_sq8kxyY "RNIp!7N D?jdCZI}Ɯ0RΜv#/HI+cp+z\+\<_z!tam<)֞5AbeO{""ܪ%lkXDdزl>LR^ $O%X80(:k1=X5&1)c9\bIlb(ɀ/HF%7=>)-?/֋Mokׇͣr;^,yPYLWQ/j1aňg+r5W{洛2越Z`7yp%e޹Z{/宔a:C#{6Gs6܂8WV`͆a}q9Fm:>ԃ$NٻwA4m%.|;nG')z`gD|[p}dAI VZ=]J|n)p!,*%ryC;&bY 3@}*'?_"Al&䮽n/Rg~zy5`bEқ؅ERqm؍VIn(Y|.=Q 5 T`|I_%#/{x Vy-<mvVe E~Z0iTxwv]5^ 1vȀ-(d6OHVُF3Bt? 5V$S%ĆNJ^fG7;UI_|U4_P\= <-z;xN)HH'v)y[o j2:?k}vuP7~*=5:tpbC͝<`t ;[k@Dh]b aⷛnˮϋ.#:\<&k$#Ti3F) cz@?k[VU2UQ+e;BU YRq^ď<,?8jLtxo ,qoX PpyqVwt}pLݬّR b8Qݍ"*OKe4"7ٔ:J̻JNRJ(>R:({"NLNC!"v~1FgiԞݬc>/!Jl15WI>mjI^LSlD]Z˧Zf'QpWb{O){==٬T;{O\ěQh"o(ig 4#Gi~P؏#o.KfAOB3l\ܘ&P $އRXGA\fe (6N-sEj|*jJ]'\~x +PDP^.\ĩVK;T_uųoF3zIs m4 tMCz,]}Ɉ oa|rRiP? c52}VhׁrHem>]rnéMy*ݞ[FQelTn f2eKjR6$&gS~ZEln80--DAn>Uu6lg" gu6@Hmcf{4l_q^>+z,eMWfwTs.Ǎܧ`s漠+nabf^8JH'8 b=18bwKp9UFwK4wUuUX^Xf|jlÉ&@]fN}1'SiK!ts:t hjx}% /vVz}0xvJ7ȱ!Jl Htn*SmX$Ĝ:Rt6wvQj.e93-CxQb$`IeM_ 16iZBrzWJwkbsʳp Ճubk KdP~㞦ӐV`ׯ69=T2%ٞ)RŽ;RDZbDq8Rsg1u1HS1h|ѷ%iaZLkOu5aU}ZM"7 &3ҝUO(5Y gd{!з-ʽlwCCR"T~/AoE]a7\G#wO٨lBF9i|ZatkU EN´+C{ϴ_3;=/q[R\ u Vf3E] )2Kh(g06#Wc٦A ^X$r.`(hf~Nu9uURj@uC&e+g6&>w#ZM(5ԘJ9ԫpFK)Cz\%ؗE;ogЌ"|9Tm=kHx5Y8)˰ǘ/,*MPYE$?MoXW D6H#_JAG;~Y,,7D̕.<ʀtڹ]RJjƃ* 7 hHzM5LFX.&Rfz<8L\GKieV/g :1QHԵ$~ 7-vwXJOX 1DqklrRHv4e҉N:# *"OT/=@W#X_֭=3/ 75_]MThOv txpq+fHNV,jOLhӞ\zs_٘ 6Lqծ.`+ރWY9t@6ynͰ{M~mG[&QVR\oXH눰P儭bVGf?`غ)5Cov8j)e;gb3`^`yH_m%tjE k~uһ{q&3$;?g [ͼ+aHFw~ ;蘠]GD~UM]\o'b@%KS:uV L."IfonqRIsYf#1R [h 9[Kg8 KaUiY?Lb$`;Ac3 \Zuىh?%w~QB?ԳCV$(+LU"TX=e>HA0k}"#}r"ު1ɸvT+xKUl;]Ü/g֭\hnˁl| gz c + slmN/[ YqHŴ/ o{M;GY PS9pl[Spƫ}{[|OSnZ`QYׄl$10T],Vx6m2Dfoy`^^Ia$~׹‘ ̜mGANhmmG ik6y1drkz!,4Hk^B<'0V,1˾J~]y9 PNy*yx2\Vve<9oe SS(k-߀X=s.7 {j Dg`ۢYT WE2]{T xhQDH<$o;A5{B7sA g3;F ӕ /07n4wed蛥H,tpM ďk,xD (C|64:Bg+ʐ2>@3HTWŀOPTbX`se2_$?y|CM'*& Z_Lh762Z w3b=$mNVo)&‹L@!gC?CFLT[ ȴDWdxr&5Ȕ;=]x<5ɽlG9AZom M E7O0h&w9z }j1_fJpnն:c2j`LeX{oon[E,*8#pAjU REc*-w5ϜaxΒ'4x-c=X{Чg{3 {ٛ'0p8s {XoDw; pJ=!/U /#)=U> \᳹2B\4׫"\Ln1Zor cirMKD\qV =[Wt|{`xOyA-ijrݧU2aП 5Dnm jiqJAt? eȪ?Ch21\[b&VNt )![*F1ez榶 *|UĆ\K@j!ۉF%~eMw0#[#XJRg-:x[dP+l#)G JcXa O:2CSx5``<(*6ݜ&Y 8ȸ ^(hIbYO0?J@D• dT%-5]Qӽ.Ь}5jV]ݿS]_tp,\-G0Q~=!VN*]_Π<9de=''sUcqMA$M-=:® 654´~ p0tI ]=F4ǰ!^S.SPu,\0ͅ֋fJQs;okTOJQ2cЮ$p8iF)*O ssS$ ree B,?DAOR0 'B|27gUg'+{ܕu}=\t}l9n2r-`>k@5 NXWm\!t Hl=z.vkM%t Jr5_+4c865Dֶ fȆ?f^^v˜Ѕb孧ݣ?Il9HCex8)p]AMo4 >83MYv+0 ⵋh+6 r{W<9.q%튒 "S]lyh]5?ܓ.jˌ?^[@ mIjxGEqno4_K} @A޶*ŀ| a8aG> Yavl확@z-j -ᅇ~BDܷr0"66, v% ,8ŷ$?kC_ +hmsi*{9 C.r<絢6L2^< e =8lʑWJ洚.iųH;)||h{~&BO%'j|?_#wZ-IQ%궐z8.EhTd&G\6]+.jX3тIs9-X'>1fcEʎ%!%luJ%_BFXtyS!/K= VW"O!d_ӨiIr^m2UUN*Fjr|P5v»Ђ5l|<1K"v0kH@|g+:gWoC^ s:Ο!ptөbs[1($ORs-q$_O9`uSW)w-*N3މx&~+'Eۡ@4˘7bX;F2cD`6jc3+|uZf&l23 weSxN{jDZD+5B+o:s`YJ`3il݂1,r¼Dl}]~Ҡ m5̜ےiA6ZG41pU( & Ίy&Xk:gݛmi+'^{UD,˔pɞSHP ]v[4w(@V d~Cae~A&9& 81J5n&a#;X&({/׳WnaoC׼; $Z8R 5H UspH МUF~?MV$Wsb(Q/y`jj36Z $q kvYOxX2<.90rP(`N&opwFznՋ0X0 ,/c;cǟ%AtCdTD~o&uK$x) k5Nvhؕtvk*4FC1\rc1DS#(-Ksq:#ꍀ6/? lC,'[>eHrǁH룍eK0 3%)i5;*=2$#TCm`Nx4AM>G"z{N5- rJw/:%^O#lXP*nUK4vTtwXBhkVxY瞢/x|r!`-EWd P&+1HݝUbS"Oښw}/ lsGO"DĘ.\&+BrHRuUx,Sbsrd 5tB穝?Ŧ"Rx=k]c9v}: kVO.IzHSrNdBLf榁VhG5<,L aHf +hcrOf;J/tzI|r I|6~=ᶹkϤ.Rfn\KLe3ueAJkXL9yCXPrʌN>kWhYr 0!ժ>\}3J @*&@Bˋ^6433U"fۏtHgC>6뒀7He֬͢hM9x] N'4O<[5M@$ERev ԍ$af#߅SDc19oU u4sO<+DD7+h_aMLz;7Th_քJq!&Ї tfLG]&o֭Pr_b%2gbUz0?M$%2IMFJҀ(\l⚺١gb*97ZJ¾%,@Y9n/;3_bMlWɰl z>G~;\{u]t2&"]G,wqO QIh55S(/s}"N)5%&VfOfh4hsMDsFf` ܠ}J"t9mߠG \I4a wWZ9|ޡEi!\s+3ygu lr[^Xv٨S KKAbKaF웦 F0 ~#?8IcJd/pFBy"צnNeߛ,DO@EpnG;jE|;K S4kG=zN*DwDQHGz,Fj/Fk 즷_вTy5˚^hKԭdL(f̼EoXhV]?IRc0\?|dLv?|Ma\eB!qHCp8UʮR[ѣmL!g=l#R2&põ&ڊ$*<{Wr3Ǽ|sS=c`镴1[%<n鲇*\yTW#uRJV#ȉzJ io'Lr ۤyz,N OmPW*#؂\E7?3Ӆ@N >F?wy?VכFL#ސSCg9+;d1oc֤DP?u>Ȧ_ue5JJfgW! bje +!*#Zq4:3ȷwy:4IsLhJF _ZOyfDҟm(Us}zg1o{F/!?lKa\pSFS+AQ;_-燫#ݞ&MORBL_y whX_'HW}->s=04?k$F4,5K0/ze`~ ԦúW ;0}a ÎHIFہZqJUCԢNݵHX'{q-J Ḷ-̍+6h*mP\8ǕgrIQϜ?|,NWHm$,Eolֆ۞P)nL=i(IкP^ö7Z*gμ0yp$Q ~ G|':P\`B"s5F"Ci:Eyf A.d]ԂcO"#aYI#j`Xq#1yW@yD@r/H7-p@CX>3$Ӏ- |1nJkīʽqɠ#elHpB||Ƀ˓htuAIfcSb!w&};`EĚ|EDd9ҫ!"^;P m[άa! B- 9>)+a&mgҌĉ6H1Q0f*N/̈́ʈUs-$T07gDkwcIܚΨ]`%{uFL=.< 7_ XmC[G*= DERͯ h%ܡt FDb\;dzFN{cm#4wrd?Dz0];U<:*}p#*.6}8}"\M .r> ߻+Ɔsr?X<DD#NWVoaY 0t 6R}+p"x\'VVItEL_uQ`[Xg+Kxy>XpT +1D(IXL~]I5Zyp^^r~#GIRZ?X-*r5+~mE&ݲK O4PaD}$S?XD(?1 Kp]+/2r&2i(x}zB1EknwzDN iP ذ)Tg YQ\^0NݨwL N()Xu(VeZ8!5e 9\Ey! јSYt-:5c PQcK|NG"E̐v%Lt8czH2.]P90Qd-ypUCLx1ù$nE?_rAw?NA/-ظe ~I`GCxW`jWyji,mo#ʌ>$~+Ny:̡>"@t:$vD\=vQ(}M"⊮V).U۠Q @֟or/kPЊgmhm~!y[WLwI&eХ*7l%Jc3rhSPӕGe'`CbeJP*&;~L@I^zZۅ|G:SW\)7E{'=Pİʻݪ{k 3#IeĘ.GEiE6UAs@Wy14#= DW#iEJ|<{&䗍xZ^ )r`!?6cEVrՃ2v7*k@J+aЂ3 U)"et8yɵp=Dg{ spsV6jE˿O7dX&Jѻ}@f8!o5w|*`+\ZSsҸwtqB&~Hza_r=qy(m$A(@8Lt !2n_\@_ٍl_E{<ٜ`Yiv1BI)CnC.gh_}#)0O=hۄbQJ'MT} X-HVe#JyZlSjzk7WI:=gCȎ$( LA)2Dw:1F2{34t"):҅[OXBtл+kY_YB 8(٩_=\`cYy=bv =Z/l"AȦ[PpP m۱ i~w@|죟 +K>1 8f|b&OOIwcJP"cZ^!ȣu B["E4cѓA{")Ex#!I;KTI4ڧ Haqz&>B}cU\ 12~Y~tgʬLF|rNM?CDRp1BOQ {uWy,Zl%HX^I8>Xɵ[FjoLLүT9G)dU gJTZB4,DW ȍkO΅T(KhU֥Rlt;Rg"+e]*-kKgLi2,#LR ]%D p:^ꏤϸ&Fn2*{H!BiIDĚOuӨŲvn{JWQ>"4_+pÊyR>v91W`YcRu.7e';<~,C%%VnHh\l K^V_Eegol' 9Ȉ< H;eAQ|rR@3%Dwgq,bz/,hȘ_3{N JI|mpQ.9SkxZE-K2Dشd3&`rH`_ ,pZZ 7`T+Ժ\ЬZplIكIp?'8N1v3F|-P~ ڠpW3oJ[ׇB_NoQ@qc?8S_1rUW@uׄRhA_]5j,lbw{PF`T! w"iAi`,FX]v3y '8e ebk|̭b]GU96z}nUP6 煃2\pw0T-cJ/9'x[x3B)! F,nTj<3\\kwXo`lf*GT (e SND<{EH ϒ0ꖄW0*~1~ >=z)nNOPW*7mz% i(ƹfcS/3.8R PدLO)L,chvmdO/̙'eZ՚_35%60¾=m[Vf,/C[LYs:taMi/gV΃ZM94"ƨ]|cz'dmKo^N&‚{42NC4L6O6:CR!vWW.a2B@ؾߊﱈBIR˽dЛQ7Gs,).Y([;J$-Nؙ,3?\}wߺ੩CL y*:]`D%rĨ 3Z' pU?V_mSHBj 㢬ZkE*eld/ޜx~4SoV r _}04",xgMX6'lNK X:kE"a}q7\O1 ^ř[2ͫ}#M0 ]CCUE aH1Oe2!a3ȔAs/o7h4JAD`YZ$bfT/X%udۣC..ƻE3^+u (^9溽'-7R!_Y_8+HB4eZ:m4C5y;JIc4ti]_q\qR\u\~PW^g(5$Џs0`t'ѯs8\κ}5/ۙJM[.yKTݺ^s6V_"{foԱځLh:MAnBUAˍ[ Ǎn{*3bF,g E'w](H([èmr/QYh)MM̉?kj;[3?6AUc+Z+f諄wGࡡ'y&bاk'Zs'Sqѵ!u=s_Bt$q,ٻ`:jLnB2#yj=ndk%eۥ ={0z4Hc@f 0i!FnKqXEhy - H +I9ECa3} qnOSRHG퐋 /=X%O>:r;@-o ,\VNws;bLS\Zi}NXY^FN Ԉâk d)1-6Z"l~Ӡ aVZ@ļhs3`2D K7\YeTOR`Z9JwM(=6K@>}s v$n]-uA[ĪM/]Ƭ,.Fq:#Bp3?~ɜ- |5&M^4(7HVc^릡HrI℁%B3a)c]Tz#at꟞KJZ)wDI;(#܀gl4.! 1L>]\kW3TIՌY50v^95}X%kfV㧐yWΜ1TP4xQ=բT`c/zw#ZpےIu۳8q'R enC?AClQ,>1_(-%}+ZJL \2 Ii==ƄϽGo?M)e.]ü%T_lKX5l^{h( >hh´)aL \GEuHaiy:+ėڄ~~ZDSVc*,pc0OEozbvw~}.o$2)@z"f^BEbvq?"PčEwԭ=\N&8Zݤ9ڙI^Q;̌h$kDp>$Ԅ&!T >$<ʼsMD D{>#VKv.hs隈V3;aw{5m˺0j#εV; sN+$bey^Wq@|Dpշ$RVĪv{pQ]kli#WJ9q yu!EYYQ}dwJio 2J!T0޲'utPR 5Դ{cqؙ ) t|{Dˮ_R IXK&`$F&q{[L{"6`4Ӻed3Ǎ9B@BJiA_.W,-fxN `{eH `lճ{@J] gtdCĔ}P~ajZږ(C(,]s#-T?/U5_YiɅrn cUbk[+jedbX+$jM-UFsD&$O1YX%5v&w%.B6rR,h/ជiyp^hz-rYWSwߛIk=B(yUNmt` 6,Ͻ6sv:Wr pVOl% 96gA#W0&v@/B+F&?,./L?mϺ U&t-/R؟` M ]kXHbg^Oq&]h٘y jЂO5G7#}TIC',r{̰Y03+Tᖕnk/).K* dc{>ytѼRl=w^@l_$&P 'Po,5Y&/* @K҉,$`sßi\$Xu][? ֊/цk%ER\ųUѹtC .`iaܒӓ 8`!b |"`G ؝7a mjܪ)rM gE|THǰNl '񰨝Q>@yH(}%%𱜧J@:g_CtVZ̧BUx.%ŅF,j kZٵ= [d ڷA,Nr[AN謸b0/ ksRmND_s%A<>1,,Qj^Jkq_SDEt{k/ UnԭqϺ1#{Ca+I'd܏H#G2 zaЅX7< *Cܫ'|QG{PGBe!򗷌 ̛V xY^f|럵`sS3y^fBw5֣ `.?LDQ(BX$ܵԻ˲z YĄ2c"9]UF}O.["ig-q\H 5} t[<0cC|;J:,Ys25UqI_wl@=#2xfg$k?2y7>_{2܄kgɗAaKR_뀅ُ ),M6lX.F$>CF&c\HFd@޳'Ms|ljZ ='hT @et93HS9kVT+n9Ls٦5w˔,HOUWDCpvi[=WϢ$kƝicS*&#0tYjWɟ^Kg\FQ>#K4Cdg LU zIn[bp =7+{dGx. 0&6hS k"BAw*GHռ,R nK‹lPz?[w"V+LP*}BFْL^ %nvAy玝X?VR;nSo(+$?`A5^RiQvDtbs欄8K{HZ8O6=?c4A)3'$c' +XߵX_A=8pl/@Oconv<f{Fd$R8>+G1a$V3%W.( c;3_2}@_YsȄrX] g%*<)߉ƒ9k@}^N`^-%ŝC10X= l_ y74'< c]z.- .UZn|G؞`$iPp߫_QmU ٦ 2q-6M!sKH`aykWϜl  =p*}y"t\f#s#-A5L'kOmr؆(I982"weͅ0o@Qq_2k ,ɸ'',ˋk`<Sqz٧(aOpv҉5_̤'%^j^.NGp@{# ğplzeM}Fͩbȭ] YlG2|!mIq9:]'l=xWNr{f u.wTbrJioFqa-oj\u)>d&mR EZ?7:0yBJ*nv~d⯄ǏJ p Da/z1 )4+1uo{ćG_~:o)Ԓɟ5 ,j AP ,> 8_s}ddِgVKQ4r?-?OHCk1)pyȜUE(ܟvo=UW lv 9aDz[,34E|ʴRx5e*P|@>M bqRh9 ub"FF1KY>WY/i;qE5KRZ.f/`ތ꯵)?ЦB0Ǫћtt:%+>!êi>_dtni2Y0ƊԢ .LWV[OləAöPCs=Ў#W&oCTHEncy'* ğ:fC98Z{jM =5;X۶ !V<&Bi+Ca9ϵ F?u,9R!i lQ< 19nd:j#"kbJ1tÎt.նKtJvt\yoe>bц2:ڊ5` f{Dw俧#\8xYH#Zf*l5eOrrOh{ c],;RCSŸ:oL?0 l4Ng%z^nNI~;7Z% 7TfI]q3-`lEi3_mL99r!UuK78\Jb/S{/JlΈSWQwc(r.h8!qc̮A,LUS^g򎤓M`5oU =I /=cTހ!aj1ta3zϩG]fgk" lq㗄[XqJSwKPzeBU'(AyMKLK.f`}D٤CYh!q=EqݍKvӮP^9]'01|.~6>0Q H]!|+8r2S;F@lIU=52YiMڰ^A2u>Lv"}E kxc @sJG$U_R$A?$=zn?uww,Zď8 2L#ElQ|ZV*wxȫDSn\=ȩdҸ,ś!ݥB{<]OSꛬrٽ:,ϣ҃"+!K?dW)xtml"G0'- vAkbV`y&I=> umvS?GEX\Y$ݫQ4<M,=eNz;<XAю~qmJMVId'+qy \3[ 7z1yv^;pȰ|1L;ѐ5DioG ;2= / -<։Ԭ]ذZD4VṈ9.lї? } cx#{9^p:S?c޿?&]SwO67lrbD9FGQ,-w5}mTk PCR ou~Q6ZP2}5w݀lyJ^߽r{ .0Lkk9 K ٟ;YY^OI8{%{`y?J6ɠHHtҨmDįG#vaMhp;;7VX*vfsȶ]^eI*+s#}?*G}@rcHI QqydTP͜*Ч^ôODJf@=Y S7-cCM R[qfk?2r41vexI:#D1fa(aU6#Vn"%4mwFDT.@N+DRIͮj fRqs rO`^μvhw\3t?+k2r,"L}V&n12ۓY7@MUPzh WI8j?ڏ=R pK&+X2!Y;w/C巷 [ /p;r)P>öS:c.|EVXcnmsd!+W&cX~]HO Az:ݕ: >$|,AqJF4ze,@bՙ>@FU!S51yE3w<]9h-6A#Lz3,Цf9RxyF&P%ω/ 6lQE6]Lz,Ew NOmDPnnNU 5l8615 .ca5X!}^u+g{>yB$K8"j 2P!Ӭ[Kmf%xho.*6wr7/'֋Ҥe!X5O.R1& .m@Q|R}F;"s"1G͂JE "d)u}4ȭ_TWt@q&jBYw:|}-{SXA nS 5s ~WikkG!׭hn`k`g6ϸ%gBX)Iýb.Q5$>w(uP3p՝c99i(Wi1B|Ӵ]'z(9,S/c$և!yVtF[di^J ;[Ϛ&cMprW[ٱ \@J'%q"TCPRIib,era&jn|% TDp-b=67LFLo/ݵL&!L X#5.n 3 E8h*]"RSmF1%)P*Ĥ٘J'k\$Y P6x8޼Pt{=F45a'moU]WKξ|Z;@&!y7 ss2־ηO[fn—=\*Jl@uB^]T6Nw E]f x-~is/B2;Y>K&UKEzUmQtUW+:2jѯ|[*ѩY<ݒ}|XdSj.nً[oa"o;C7*]:qhbݡ CpZmDIG+Ngy4A[$|EskId)@*k O9\'(^"(bziLjD,^tfAehPm| OZ{#ĺ m :WB, ?STTVa.v(_, 5r bL!^T,y(|U3*>3J-`9ن0($6F; JJܚt@I }!vY^\LEM[x>r9͖B<9&ޢ%ڕ'\M>m[nYW:tge U$Yyo':"5ֻf;[-0P"?)6BƔ9EdfL9BqY *xp:yu<d?s]ElWHn'a9W>W Dܐ?ܫJ)竱M\ s5\O/b5X`Fjѱ`v((pzLۭA'JzUߑZAhkXF<!05GG}ʖoÎ'mw+?e#RyD["hg)w[ ]&c(*M L a1Rֱ-NOmz G tb>R(ok}Ϣ w}P6w+~L`yQɠGf L 'r|?WFQ bSMطkWS/J> Y)RN='MD_i3;6HRYvcw4ݦ6-)T d8qq$ѽ?@G-I1%)q7l^c24 `Ӫg=R~R>G9Aj}ih|:%P-;?6r%'Qn읒H 4~"f %ZAA_Hm B}JNo0GHzfwEp{m2;GAuqC(8U=GtO$ha"z3U9Ķ8832aAkDZkgTQ[HHۮwlx^ϔR\.G.tJQ ѡsYV#! mfy/d;R1{ːRGCrb8"FJ!TZlM+R+?R;x(=.TP"X;!e-ׄ hX+L #2;hA^TRu,5d` LHW6=uOO~4WG<ţ8{ @٨%n3g#ٞE{wL仙eCCÕmu~uyJGs&nV wzfa?]Btc&TӔT <snttwRMzjN #w8ˬqT®kOPKoDlo8uȱ4rfE'}#U*q#: tYP7}Ll]._|g V95rMVvقaEܔ#p3KG. JD `ˮ_a,V|a x`Dl =rGA(LAaO^` 4|'!8[X1Kw  +o%6S!Ib굊Y06=Ks^>B*ع z.?92sJF^<9#ɯngn{]cOC{Tl/pdԭ ցL3jq۳ MKKv<X]d^Z燫XP-z9a$Ii$QMGQ8oM>Y*HRRm'SK3&w;ypixpiH}*P$,KpOqLYi\]5X#,McJٿd9 X5ܮXY>m[HxXqE3 VE0$5t=nc6K 8ԠUΏ9]J @a誌iW5QOBA0x9^8#_2"ۢ^*Qm!j7~wԾDU!wc=-֍W6ώey`==6u&g#c`z2DT|-cT,^)m5I 547Z0{7#!~( 4Q(ùYՕ za3;9H}/3*+_!J}ʚ-~>2zL+!BAu?tPVt.WIhSJ2`ľnhtLrdE9n`V m)3h=*6GZsOѡk:ipKS0fukڝJAm4nff0Xw)1 /~ZF&XUfvšͮ %iZλ&%7 a(0nrn|J@B RBlK%凮>(_5rzI/AK6?\$}a)OM G#|a!̆iNHA&G|3b;`Nދ˅ c=h9$L ~%3ș˒1@]I" [hjk=fP aTHҎ (ZC1 ¨7ӫ+ P5E_gۛ:Zn5a`ԙ0 > u´ϾuEજ͕XJ)Wy,N#E\n݄Y+B2.=Amۙz]Y9l"[ XJQYT!PՋt@ Fbf~%|ONQbQT!}xBߌTVUA)w4YaR=GFʻI^&LX F&>w4MqhX8w޷-Y>ƫ=,:cX\$a͉ek%tY7cLS'u*%6e;yފ{#KC*0ꆰTB$ /u<=`Hǡ|E}ʦ jC* 2̪bs<]Z'B'X_d硈zݠ^l嚋ʰC [X#vS4gJ9nv]ҽmت0+kv%[oScoH'_)cا7,.Τ"0G/Twzvrl#B'StB츨`8ϤwLI+%Uq;$Wuz&r"zO->%-6{Ÿpf} }h{0PpI62@&܎7n ?¡]`٫ Q&Ւ_d%8-\d$hkm6b^rPd@M[eHAWY^8F%j[WaHzD1yROi*B{B}z:B3sq_LY!-WL<"F_ITsLQ_|tMԩLF$Ɲ4p{hs.{18Iӥk1pW<\9sOy/aQbLyӄOq:UɈC+t;Ό" QkS6 ؈$A&b[5R_?h8bpNFW拕UhKβAz508j5$Nc >,~WiGkwS ={sZ@k̸ݬMW;7DiLż%Edﮇu)'>BnRLL=2,P'+ʼ#qBLm}l}x~9ȋj]t³9X!Dm͡M"qr`4o>sP`L8nY|@z.&K'Kb(<ڲlV!v@twf@u 7@&3 eÌv'mks1V _1B:@pnhGi5/naPkvʤ(P~uE^I)Or|?~k [0Avos݀^gu v`p п&Mu}W>ӂ4_!L~)T4[&j-]s^#Js6eq5Jɩ^6w2qhiX2wT-Lr|\-i4`;MuʋTְ!VO74ԎG<*%]y0ZeV(MsNꪒ_ǧv,L Ā] H s򼑇DV\. 4ݵ6YnKLenVML擓fWHj 4^^KdFr ̪&@ȡp; F"1g8e^!I+XEyxTjϛz{-Q7m+Y B#6[QʫܥqU&ff0urs6GSF$;И,,PE[.&b}|bc|SDloj \90eE;keMB=f w :xG:EG5 &t%_Ԙɰ}<*:/۟{@i׸ (è}]1v">3Hǵ+홒uOPxk exS\iEpѲʃ*,(a<"+E:qK폩b7v4pV@ IDDM3th}To310=}SkJ0ni挿CX&j݇.=+v&nhvOGU$x.ۭW"p hj!on$Ѕ>d 3thj)ţ_p ]7#\=>5%JJZY .0+#cF.'|*H)/EFPZP^[^'#޵L~yj/GQVu7}4;l y$@Q l~gJߞOYJ<n_ìckv{U` +̹Jr/ya^PzS俭8"sBC5-&{af oB`UCx\\x)HoliGq*-](n-d%>t/6{;ugM3?X,*yaCힾ"?e~t N8'(-D)u6 4(m-4cu֜@XU8lWu yT* ;;# y6'/D$xAS}:_gQ#6-4jhɱ+B\O4~zWŝb6Epq$@GhYKYcokh =IF{?;;|'vc '}A`ұoZEz;6)b8OֺY]U5H9u* O84~ .A&.ކezu-R|i"F[\y7II.d籪XĦd賵ҪHl f4ZH2|gPXm=UzI6ʍuo6R45 4N}KL-\8@V1Թ8I{j}1ec IGW*yA.q<`'w2x s*>3{7HHgd_8+LWw+'*شh'7/ ˿P;L}x{;)yth.Z[˜:{xY ָ^ &l|ϾH[kTHsPaRq *Ďx2䐉Dtl_ }dҤac̕. }mrNyDZ}ҏfh ǘE 9ͪY^_$:a}=~h\fU$ *[ -sFK% Cu؞,)ħDg؎J?9+D4Acœhƈ<IJֱ5Xt}V&Q}R-,v!Loqc=ȑB m&.lsN.5{i[[ lkc-=mWprr^TfҚڤ15Þd`` 4u*#l_v!6Ni*h+`x_8*gIT-6>[A3E#G!9WChra`yx\3X1,|DB5=[N:dt$7f{ ܬ̌- iC!@p8W(ʬ<ƌ'B-j}^$ޏҏ>V &4Pꎰʍ|U͋?p%3[$4uAbC{E>6.`v $KJۑRW-](O*#Ah3 l3CB'4k>hN͕{QYD;Vc3K!t} ҕqZug(9^oQB;["pϙAH n>u:JDuVSPtQt؃5zg 7D.T| sjnegprQnh@vqEƹjq=#9'4mČv= 'z./ƕN̋CĚ > ^ 1A1mz*=)D1:"U%U)c(td xMFuWm*,ri QhH '1˷XM*^ l[|,EW?q b[Hm"O5pg^s{ [soaXs "4'RkDշwKK:(HK^ρ1/7 ugFS[#=F61]s&kÈ"tx9kBp]]s*bwExmqT?q La@J lY5ٰ~$g%q#"vp5S_b\KuWl#ǔjAV1a lWX9$wU8nܚ;j &8 "}CI~eֿ؍${1LA+ױ1W;vR,":h;OfzeEqv4Ō%''-ZOvZ+^.I4M>|qcKt3'<{c}]EurGPe( cq_{l"Ru9eܻHbW8&ėWWdl`۔P!MuzNК%d+?|:&Zy}.{?b N\vn?nE@$p斍SQۿ,au& +߳ 3qP8~iMP+ I;bhq2xB۰KpuH_XrQQ|=\@LG|F/ĺ/KN>)b8>-- Umaiv}`y'(EQ:'Bd}9 ,- ?t7i $;xB)^-Gf,*|>(a Eڷ{ .L \ /;S.<d6fGϳ8-zUUQEt~XTK4^w5)|ߢL]@0E6>+JU)^ q*&`y2o3~>א^v+Vlǽ"ZqÖ^]*X+!o$JۏAha4wָHhsQY 6P8mx2X,%bKmN37hbm\OE~ IDd,ny$.\XG"YMVgC^qb ź&>5>srMHw#qL"jEJn BHH\aI6%`Ef] `p}yV0H-:?73>:|y5rڟ VA>'m@ͣe>ia2 aXH*T !o6+z1OI<Pp G;} )Q;iL{ 9?%HQ=ݸB9:=mS5C@,gO[ .Y:Uvu@RC 8\ U͐RבX1D yd)؊!_ߤBBr%>)".`=_8keYDh~!+kh ,A(E c#/,'}Rn^60'=jF4P3_Hжk.^w#^3YӍis mWT9\n HRk>Į*vak+ZBja`JΗ='Bfc1iaaGwHv"T169P 9s8Tx=ٟh *@;fBa5J<9#Q]7 JoIw:߷ȷJ5^G;ʈd'u1s}FSLe>P>uF mC[JWLHY%0GVr= vO5,A]nP'ߛfǪ`Az9U^SNv)^QF.F T>7W #x3xk?K~ n8{NSK]!/_=-"YkC̔ԀPA8Ƿԁ,R> 4896riyщ%nx0EZ PI0n PY*QL^bpRxy\ GDG2+ijf 3aР)B4f"tQ)[-8Uڴ߷;(#(lDV8au?n7ZUliHсO\Fs\6ce 2ru?E LDoMEDc {d7əp΋*!hhh7΅S/Z4tۊ %h'W)+t']u]Mǀ0ͱZP!޷miYG1#Wm=Bߘӫa14reiQ5 XW.ֽofܜҏhY|ФB'tQ) /8tyYo&=wl_0#6V>Ye:v/>k„͂nmȮK=:qD1t䒠}#;@G64gZ?v \n.mJLl侕T8!4ŕdP{<0`>S]!64|.r-K"~z̕7x&f/cPͿge?4+\bW$]:P=PC~_咟{Vc翺DZϭq UUwV\4c%S쏢0ڝ K_h c%@|),m<+ï!? Q8MD^I zgO@>{-:,QV-RǾ}aN)8QLE,p$Rpi|gKЎ16؍"/a^?zX 0hnօWh|_g^k B`-W_4 nu; B!PۆtڒOHHNXYE{;2<ͶyFERhlõX mvG1i9B- 70@}۲r豸V;G[vD7v>¬<=<۞E?nFE2 9#?~¤g*א^~7ψrKFKa,pEQTʆlN$ (@| Z]W6 6]_+\"WRvL )WRchLM9IZ^b᝽bǠY"p>7Uf?|{ִh.nqp.EIp*q`8A[KAߞd~kuh}Rż{vKs\^[^HԯHH>csVX:L7Ȝ(<f/Q3 `-ٛ$݁ϐfldZ$jRcپcOyCBR/6dGrHgRZ 9cñ,hZl&CsV ؖ@ ^?A 2X cH۪oZI̴f'/!y8bVQcQWwCNSw⨳gC<7 h\DQyOl>We{[G@ׅV!o(RsZDhjd߰ VgO3!’UQQekkÄ1'6{kb}_eRu6T.Bya{ >H+MY ]D^{0!9{*K,%"_"[akU ?ݽ>KsiDŨw7>lP p:#=ĶdC,VjQ,#0TH|$y-@Ce]{qҙM %_`u: )YcL^Bp2FR}knoYJa' dE?R9C^pdMo LYl[Be%ca"WaY BB +L=]y:oOp`0Bzh8Q nfi{x"nM3Jϛ,h`>nsJ2y,A k-܈#􀡼XJM#LV QM}!qԟזG_%@󛉭5ΈE]$" dCVqbW^㫌w\M^VʏA\Ƌ7ً̝(it5͈s@.6^Qß3RѤ ŏx &;݅mGQ,ETcb`S'a\q`-;< #+\9R~ D='n([ l9.9[  @/_~?L=!>yhժ1Jׯv"W~~ e}po3wuM}*=C.o!AWN~鬂6ߦW<|PRW Л"jɧN1+`  XbpIԲ+lӚH8WAaVO1e0k\g:H( mqVEJE',^+ 3;+k\ c`BY:t] >5 s6LmIT~ꌿ7T;MA|q {qgWw"a16R}&;rIq!yKmWM (9tW}A0R&^4޳eKC4䥓1 ˸!AsaUg&fx$l#L fdT|6dY'&@M;8eW'F8qtoq/0ڍ11DffS<I}n1ȋHD^ :|jx9cU.lh&{] GcCDI$U*o_Sc ^&%b)x¥ 9*₎*_,b\- ޱ=H:G5,#HŠ@D=q9V#3eJ3f ֳͥJ<<"F=b^BAU|r'P`|A94h*㷇I|T [ZPmERhrޚoZU_'/GCC xgmk r" e 23Yp0ly8,c+Gi~jb2Ϸ;(^C*wDG%=bri"Vlo<IÕn17_%fΥNY|Ӫd[F"><z{>KV Ujgaqp*8՛}Vn@5d`ta'PѤnX* ],qVjaYēzk6]h)S4Yq;4: shiPulXMMɜ@)6pZ+zϢJFzWB B=XЙN ˄j?sԑ-[Bf $r l!;-b ;O"6RlH׭G=Wa1W3O4+\zkw36|}zC3J/>k1u.K\o HP|\ǫ^vųT;NUfZnk[V0fmNoj;MVd|ZI C بSrk\ϊ Р9 dea˳RGlJ`3⼻0ɮף]9d~Ħ>&7L!̆A "s^DzkGY}|HP]ZqoSf&bok,+t* #E5VOaCQf5BEeA6u:@&@.!EAMB }K2f?MAw$41+r־z跱5;J%ֲ%V$ȯJD!7 4=q,Vfq1?`QSwVUMV)wɠъ2p&۹sĆ>>Fra' =;3$g#U؋0A<^JdsqZwuA'+.(xX䢋N8z-`;}]FgifBZ!wUix~8O2CъK~f9 猼6UMv*,'ދإ)6/?BlL*H47 ?hّGΟ3K>d4^h6=-f*T WD fÃ^臁g3ֳTL߀*9L1: Snq{. N!{9c- |/Y#OG^c}O"l2%\ 6! K|Z1[öm!+qK=S={k%Yώ 4h6LOM_U}Yx)h/Q'oz]ް$n޶X⚓O8H(na⋔ruA#ϘC֜d1f 5Yf6 ܨd9IMmD=giBf; D]qtIXWz?m/Ji+ǂK,S$%#69_YwI5;KJVlu)4!c` HI7nx !H委@EI#>6ۿ[ā@qOM4Mz_,\rVFv>ypiVbR uWn.AY&* JGT!`]O'G٪EV+~>GH M oeͶ@&9H*MRcZv@{c>VUp_SP1b_[HF❐(&x[7Ow@.ڠmrOf99E4~I^5{>!\Ubr[H'%,F3/Ckt@4'+p.5=1< Us~ݞl*J %@M wMU?˻X#PR\`_EnTvy>Q5 :./lbmo2"U`px1f{2M'JM2[ةF^˚kTX7Ǧ]'ȋ/F!E`p| J_3r%ݙ-l . X*C)Q!fCO`naoO$TxHoZDuUXr_lptȼ7_Sy3l,\ ^EԢܝfc6D񶫩'̏w Z1)ݧ% NJ6!Oδ)>V8Gn[GfƸoN!WnvQiNsˑ2B~Yucp~ӗL?xt_ s_@":yFFGڼŴW,2 Zd#S9;֕;mPQ{Ghx1)jҙ~ ww@6[sSJi{(sU@.wR'c1]X ~CZu jMTI[<:#h|y/ʜq`YoXuzIK[>qԫklePp>d t,|fA{.hcLKp4oʼǝ#j@Ǝl j\ɯ*՞0  +A]?}'7i!`g,wc#ӄ[LCs \yӄH)<fa; qV=D/e^N), {d0limjߕ>PIR~wZpeK^`bWLLzR Ǚ Zd'%poҤ oRdvu kdϼ|Π]_j$P&N}W!؜`]Qd%w@ 0wҊRhKPE9k\6{]xiP[++c Xa{%vkB6$-@YăR32{yf]'ïHR%628;}㖷׉4Eoz:FxլCdHe4Y >[8"QXnkdR2)^..$Z'DGB7ri!/jƜho(f#@K2ޕYצPcIIfju1CgP>ЏPcaB[+iiy%S-]wwvs+jl6u 1}>,"/G' M~ijb3 F-@,ϑ1x<j) |rpqvGSpt%g1ueHZ[gbpOl7KYA܊tBvfN.=mįgc`~V]7P[9w͔߰G(E1޽_$3Y )= V#&ٰs2 i[;oB9{Ll=#8^oȪbfbd'ZCI>]urkAm0_#n<}7e|E/3x>:[;eH%\ZB[4 <qn=;E(gFHt^ Nleny IsNF"E{䕮IaDDxZ%ˠX$}6\덗 R4f߆7γ}j[Ħ"`ka @Պa#WqfGUMir\i8cN<, yBj Ur{^Y0~:ac)?My?/#cTВEa \zn 3fRJ࿍ACMhxz"}UEjwaEgT7?&!M,+(tnr}@.~1m>8NPZ7WšG5CtTh*,9$eoqke_*h}v;qb/(l*M$WMUu2W釡nX\v{QSRۗ0b`EKy.%75Q#$ U,~3%[Qڷ}9Ҏc8Lr}eh}o|/('9VMBiϣqaFnXFGᾹ;vNϤ :|A D@<) U/*gwySėY5E; K._@Z &N1IFs;qR e>隸)lI+JMCĆ^hb{YknE4 v\76r,~+w_frIH9uꉱ҉I%>滛S}EYq~gO?rxV7pdmKf [r?zr,ȼ't_H 1Um{ijT!әT_k'7@F٪b&svCbp uF11 U65V50|r0 qGQļzd}Is܎1w bDaLQӒ8RnuS|FQZM^;6< ٴ(8Dȑ35=+>~>:Tyx/"@9S+ɄKy ۦ=]aS{ O3@ڒ_]-|w8U~>yfߚꃝB˦tT-݃W:'0^=zqhqU pQ^ 浊;b_jO%l`ߺ5Mvr̻9C~4վ.e>5sTeK@«yD %[Ύgo?TG֟:n_~GPXDgegZL|u!(uw/X6]a(>1ls#H!s_}P5Y@:UMFz[e)~~s -ph yu[\%~bM{įvh*_'b}Ks$z~tgNpGRK)7@KoX'vyamp+Rt-+&qaSy|$QR|'3;Ýr[8--tXI|+ 1&?@#~ 9Ѡ C ]ZW%a4M2)T.uՐ]kC2ÜtB h]pʓЊk\5yr'Ϝ^o昰zMF@SrdZߢ=hgřm+Vz/7zӬ"76g0!W!j 4LuoLbW1Ico2`)/A0j%2O]/炡l_I%B,WeASh|$P]$HjfnC OI%Wt|yoW'HҀ7~ȩ0>Wxq-c4od`ڵ[q6/8xIxUQvU 0u{\]/Lh8b o(F\z8$մ$Y cw89onn4 L;XXӁ`5ƛwVQ8VzP ųcGy?yw}u!xaSLO Sb? j1F(@04یZRb~Cה˭dٖdLMWl3W>A}Һ$,9 vn5QT>a5JV`n$_Q6͟| z'4p>QρB nUO&*׈7p!~Vp:v/($Z%-2aP})ĪS~1!jgk6|L_IP{NJun=V V,` $4ۮ2G KzAv؞ %F*Î,1;';Q'n*xqAk6 ApK+X]VZ'g ^mNӚ/V̻E> Ղ#,>emIe 9Hd H-aU]Zղ] )^bHjuzH1ӧUG,N1 ,Yf}Ӆ 4 TM!׊]Jn}k%BX8we9۔& [13 k a]_- M 3%^#&;W3W|̗eW|uvqTNݰrT$ ejLE4k]Ӟ~'SJ 8bkmW褑s>ڟe,h]4r$7}QK!L5 Ky_)E%Qh~Fyro7Plhx>&t/J!/bFK_FXg(x=$Ki6s>r̍l'7,'Pɭz st54/HngLm^jS(3>+ ,uҸ+ӌ=Ґu)԰"W!*:Y;J}}tdU1$Y9\VPә2mc[\ k QD%alZ+ um2ZEy.rwh65ڿw.Uˋ4-EݽC }tY`WL_aj 毬ԉEJk͋ϝkR T=6EaŠKGКX#RΆ}c\Ψ~Ydf#+|º.DBkߜ>fQHN2ua&pqG*ncʹƿ_~]cZMMocWi&31ߺS#;"/i~'$x,\|<!JQ7@l\ ;МC?#fS5^=L9x//͸I=pk=*N4>(Ccrkk"p"w؏2(,MϔGeؕLOPp :;l> R+mw#cbPƒk3Y+S/CwIvfpvrU)\KYo`VPF?.Ldᆬ]M{Fi0\v [No o\uha tϢi+~x#@~<3Of_?.;q+X^Ԓ^JݙUkb{e!+^&O% jxwWx("xdVh;%[/L LA ^؅- 3vОE)˞2wZ@yDs3ʗSmp{$$qI|dD#/V<V -FZmcWz==r]՟r߯?74\Lv߳e;=!< 'eнi<7^CIGzW9$|/ʰxs^{N%XW:gRE!C\F^\;d"FI[LE2]:ESܲ﹛nx_@#8 ԒoWyf~0@B$0ގ3B9uSF1˓JV {w!XIwSTn`PZE. 'ibjkvXpv_..o'_)ݖi($]w PÞ$g*z= mԦ;h/Z*||ҏ q[8SB'Ptm`g8l%H/IF駥)JVs()/1n8Ro e䊯 x|h8Xb6l6t7)SX17m+^rJӿfB  X `&BVeOQQba{u%ͨ 4 Þ +5ԕ=S0w 8jcȔ[L쇤y15>"lSbYAkܴӾW>!d5+WB3P DWw.]Jdz5tȽtVٷ`8g|m fz%a׶hٵ-O)1 J^r&EuNM]j#8i&#m뫧3y `qՄ\XW"bar6(4h/6W{,MY S^yr8*闾 N#IE2 g0wK/F {#+ۇ{ ;^ɿw%Q:^@-Ox1$-!rv==Hw"Ks/d^S?^K7M`2B~ Z.W WǠRPM}II`&Z =G. V+<~ۣy@j f?aXoI]gxi  @xU8&7*qz/,`ٖʽxw&["Dkhfnu 0jC&#sT"2*K+ @4Ua-?lg FFn[gyQ0> Zߥ8 ;3 "QGWbIӥ bMJߌ. 1*3S*<KUw ʫ8YVW2,f#-LCfI;ρ1s^t[&{r[+5;[IO(gb]NQ|4YI$woTs Ddu| ^qHeX`)dfl:`?$r4sizja#WuzZkWr Tޞ݈[q;a +y݆U?j<\S oZ ʳ'[Wbޘ%Atq j r^Omh7*[Ycq& E!֐Ω~gX$:׽ `IbUڤY1SҍHe8I0|Jw`RBMu'Yޔz;9=K驫&JC

谆eC#;fπ-;u%AR"ڦ;QϬ&>r{GDȇ'8kbtvFe#{l$W.%;\ĮtML^tf=05[rDQ6$״p$s"l FI)QAfrstYm*fݫj:?CD̻"lC> b7 {\)o˓;7A>jQqjI<.!;#j21Đ[~kc+8)0jlh@HRCI:EػX l jKAIvă7?.SG6ޱ*r=x$T;o$(c13,yy e6fW1ܐAK|:굤8>߁ek~qO7s WyRW涷2#UFOR-eF1$Y!!!?9-9oAH]Z͏Q@`R7X +{O/4ެ_WR9MڤL\rsӸ>.+jקT$;6~)G^=y@g9>%4sOtos]O` ݀Y/IV1ޚ:_7{n쮚]) cS/p#ش p<S6C]5uk e X$mM izo4Kr\ ȢI%T;!L6 ݱD,D]0iQ׮Gd[7zC 9eU\QFČ/), ߈ 4*>J7wu3(jGh+9㙣C~4rɢ9}wQ#M^#v`*΅A@.8`S&Jy@am jՖ؈WKۡS nR,p,泞=lZ숕&P/{ZqR'T !y˹:N1H4fo.-eeڂz[D ,RG!ΞPQxhҬa쪺!57i\NH cs?9VTpml$ 'bb_JإzpKԞy(H̬\DHQ 氥=1/HE;a1?ҡHqx:<5CSg\/A?ԌAVgF}Ac5='>s6ёXl 80Kuk>I_mRf \ x }) =qͱ^$eX_pZKl@PTmuXhD..JD)ej[D5ֲwblW6 |j ]&ڽHCT1R? t}UJQ5-rQy%ڐs͛1K6O .q($F@4F0FdKMLmGjm$녧]Q";HJf>M}'wQ옯:Q}#io;v!ϵDܿBeU+:0D84-YRjJ,napW>NZU_t%Ybz/zA<]}ѫ,N$\VIEj"~B*a))+@ 85$.꫼'C1x8[Oe >fvZwiܯ'O?&orrd$1m >LUA@$@תI.Gm]8׵/dKA M 7I۶KE$iͶ7bK^ؗʛF]>OȈ} ㏾\9tl,:q=V^Ɣ)/gx-vUz fD>ERX-cvF3X~N!7A+pG;/g$BV m23̊L?Fk7]vӹ r N8KZ0o Fz I}߫ [薉^Fc2%OsX(-0TEFtz^4@8i%LH a//B2yNޭ*Ԍyw6%;Y0(ǽ,}ڦf#oLQ>9b&햙sXAA#МV4Ϸrφ{`B'c}mڷ $3YʹSʔ&u.9MV=6MCpWv6$ͅ_0g&?uwbLFsڕV5P-yٰDtl0XׂZw逡|{U315\:(mm+! c@9*SXh!hY^ʅq4V<*ZKMajqZMcfD']FTE#_҅H+F^rL,HkG8F<4+<-!?L5@4Oޘr FbA+c&ymsO}$'QŲmT,|%L0kQ¶ "dY󃵦^= G  .DyXAǵ%hZ>[LaڋGk& .blUk920)rbK7X $r?۳IZ4?Db5EwNCzq)3&ֹL•Ta IK HhD>KXԐy)_KƧ\^[ck%8UK=%[,V!vbn}øgPa;{a3lm+ Ƽo56nY̾([(C$C:[ 80Ŀ_t"7،i$VoezZ y-؍Z0Z)ś 6b~P5(-vcSLJ=5BF"=[/W' 7j3jbsJ>$ +$ᯑߢ?NIY]ZBm?~?GVٞy0q;ͤ7|vo-F+ vԯk%6 rD)"[c+6eV\lTcHd_D;78([)zt+ V 3W'?d@,cHǦ9 82|).=%uyƃu1> lVP s< 6_ 9ytl]'I ,Ȋ,UDSH@i;m˾N?m3\$&hJ௬!vq(ܢ;NAk `3pgV(7ŜdIӹA\ϑ̌N:{,Ȕ PZ38"Ah^\ԯOo>v2M)u"p}DYl^qsL%QC7.|/])Z 4ϔe|1{ͺٶx0-fU[-fX.N)N 6&}gN,C+ `>6EB힞x@]Q`^Kq㋯.(]zzǖ4#G¢iڐզ >- acmׇnǚzޝ53ޖj,TK̡~ϟ8YK0#_&ց-'?%);qUDr=8#, w>i*^p6Bqn튇m[ٮhuwAYZ9{=o/>kVgcz74B~l.դtU]aB9`ugR4.~^U g9 Nl¾xp A<xt@/>;Yem'hʋ:VEZ23,\xKIv& mu*܆ 6pBx%2[ #`^nF5L噔޸/=3oξ :jЙN ~zF_oo5HYmor_;sr S9cάmC+{<J`ռE 9ku[oatݸpu_j4,u@Y3o¢UXm6]V|G!.oT٧?کu|kUm8DwB۰1;Jjņs 2+=;hO}d?PQ`g:yiVu)&bPٱ}VonLC (D:9dd~ė!SԈ;upB?&- U?dيJYUإǏt@bkזW4/DGxW̾tL2,&1_n88;H盳;x:Kvk4I?kN堥$GZ)o<M$ [pAh HIDRLQ`-?㮴]NUv =-F>x$SiWwhn Xa4'\?X `5}ҾLh RPk-^r ?aVZb\})ޓh e:{(ƤSӄ3ٔjkQς䗫]b{#vsl*ߺR|c\uWRBK6֙iX>ޟ41<׻G2)cQ+0?@ ndoW7d,EnѫpSC7Ӊ\Z@8cW #R—^7%=O=v؊,ق?A'+l`: e4UM-R)Вı p"P` 9؁qWna`ʈ9`Y`-KٜY!hp(VeȦ2mTj/Խ(fz(^C?ݥ.b7-a±t[H>F[$j߳'x#鰴ax( GdغӃLoG1sD+xpDP^ H]PVbRb#vzٸAݫrkd;(q05TD.&OS_( POI!x]$恗U0*oA61:$YPv_7ǪV\uQ ڝ;gJ iذ!`S15aEQ`QPF+c3wJ Mbŝ/؛,U}a6zA[iqKJJ.p S#}A22TR9Bvoo`#" hfdB:Ҋytc)`\UB,{XouZzS=wv1Ԫ~~E=ûuN +Wm@(ɿxʇ#~.ΜbrJ7Pf$ԯNx#Kߥx [9!FL4+hwBX ^Ó=^6p"v*Q.LMƽKJ(Oqk-~Gǘ *gFw~4-jj#O7vv@ D?;ATvx/4¨ +,-^%56 3(M F }hQ=;`{vgL-{MǥX]1H WyrP]=aԁNX+٧ {i cO. h{4ūa%[<-,x70=A0P'HvF3T6buUԜMmSۙLD^S'Cw6n ER.V|ƿPې8+9[$z&iΦ8ȞI\kMaSR1bYZ+QoA51(kjڛ1]Yt|xCJ?ev2}%Zȸλ:('BGJY̾e_rnd.:ROR ]2F&x}0ł+)B`#Q1j+]fetft&'a~pn`;LN 0Z&4أ1#|Kx=7@Մ= .6̓C8 x" &ZgmKy&OĽ(F-ZoF:PUb0t!$ڃ6&zAim^\sݑYU~z\ʊ}sT0U ‹<`ᄬikβƁN{F&nG;,6 `tEXxW僐q_eM x}O60`L6nM<] W#߉n,>-4Gr1F9a23yL(b6K@hi#" +{/\1"=~?oY$p^Gk(=^AȓX{ !H;~N= b[ӹyҵOl2p@L._C@̣& ㄲ&Y ˛Fħ5]aK2bpl E G]6e%:9T+'٩2@`cą+Qv{V#L ).3Hx;3/lr^Q);EC~ޥkݔdrݨ#1 ~[(KFA6`h~7En/|]/':j S8Mi^J wuYbpbEaZn>#99ڙ;\Tj"%nV=U W2xa/0ju׼huK ʉ7d r_Zc퍯`P9|*m^cb>L$|T YV Yۓ,F qg#Q{P\LbGo@2o^cY5Pgy&7E3gz5ā8RuDtV._΀{@>{9X{S~s50M ۓn?.WEe:AlDRq'ȽrmZ|N؋V:$ GY9敜*z}nz3vc);bx~'&Za'VOCൔ8k2L!^C zh=>5j)n%13 pTC,sʉhИ`m&6nV"0c'Y<R0v6a>K --}ʷ j{9$uC á'Qb*{HІ.xψ(x5j+ͮr)}(۲yċ6 ǵsXJ>)Vpݮճ؅Aзp=Av4Hv5R|҉cH5YYTGh5{-zuR($rǔe뾄+޸]zݵ#`n~^!P[4 0%Ty#}iz4m 4-dys/||#dbJ!Pȓ>p'D&nI:2={%ClTT2Y$~b/C#P{ДiGC%5c]d(dY ri vT_\v1Fw3go>W5:9 *5asf#v.oxP3X#i\|k_YDFCo;.S ꣳ$]" ,)h /ŊQ_ّ3nmf|rvv&I4V,j4 ؐGeˎj.Z68˖RbfhǬH8 Fĝ]Qw kUuȊ[ݣ{0mOjL(ԙ1exق0 oka썾gA\AdyO-^[lk2Ue3>Ӱ$ ^ʅeB_=*Y vp5BNyVņ\gL;8RT3%PK=ܐO ص_5e0bn%S(޲K$ܓ{CwB޷ vE#k6ww1(\jnS`M Fv$<l{\8@q:?tm~>[N&48ԞbB25_D}Ww64 5zs,+s Zټg;Dx8u|[/v?f4G;WvF^@̈́$=l55c'P^jx`Ch4 yeJ^X֓/:&e`ﭯ{ ر^`~ A)gEnO>ׯ)p - ­^I6qv&Æ" #ĸ$dx7UGe liêfpdhW 5F% / G.wp"^Tu,=1 k@:h5~12@E0Y(: JtA+FWb+:HBG67#݃ kmΧ$G1E4݃<{KL%}S;{XmDެ6;Om\ΨQAm v3A \zod48/crm%5&3|5躋^4:FC~`'[7x2)Z2iBVqDEo Gw ` NԱ9c nf;i9 6N/ȭyWub5 w;-wrWPľ͗@2#Ê1JW@٭8GG<~7"w8ӯBcj(!ƾH> w7\7(F6ګ̚_Y0.'2kdGkd@ їprz,ÁRn.#Q51hm€=YZe`t\83eE.Rg^Ctvwy,~~"f\^If}:yGtZDeNQ֪v i$WN/ ub"Eg*2@5pe4EG?wk7oiX% dgwnpE ’BI5( /E@gv`>,m)1;K]@:J` R˱6<8OQ;ԠkEԲ.]x(G-6e8'WWb/{8"2Ha!0SԄ8 :q 86'G8߅G a2^.4n?AV*n줾ډޘc`׼}A\>GupCxJ.3~cʫ/bw UaAzP+z]t+O2x&^N%/O W rB%s8D/vRė.oP?L\L<׽ANج[(`Úȗe;zZ _Jx6[%MV^6\cgޜ^,4CE:NQFYm3kb%*6,`ԑUi7KI,^W8^4nCcYUQTW :SRɫEBP%kQbcaRd@ưtNC/@]<KCEE^!}) V0ᣓ$gΛng6vEt~ ИIޡо5vMKrؤdZρ'3`Yo gwߎ/CjP^ӰVz[+n؜Y|HNej_D?M@r1|G%+<u!%+IEBL9sA3.ͻLJkcTo.+Ĩ]Os굅{|+!ΗwRfhNR>~cFԃ'ًap-nAC'~P*KaWHf cK/Z8;N30ӕR]{BӴ*ncο Tu=@9oӌh*mRe٩0z{B2僻с~3LW`qqT|-{=>w5t6PkI餲#d6oc41mZjlKy/::MdZrQOBPa 7BdZ:i@$`dtf3]E̓Iw×!P*c_(f W"Ujts|)(C"J⼈fY󴑖X3A./&RS׫@pP?p:{RL&JSMٔلi^2y-#J=[{c+NS S:7+ 6@a׵ `*A1 &0TA+WHm0 a52%^3MC=HILT:uENMIU?^ɉyfue ŸlF6_}=WVLغ `k>ލ󕔫 ;NlwHEB*9NA*JWYws6 GN`:բ=3g#s'E6zPT[ щ2ͩ'w&M~o3(3"dDH$vQ3G(zA-D68Z`п3f!o:@aGH=Vz?8we̊yn?c}|e^ŸhE:o%+-ϳa܎H%ƞb (Vr!7dL+vPoа !E3HQ`=ipG[..w9M'mj$FQ<}רZ9f%M$ WF}@M\obe+J"Lg~A!3VPVB(7E,uv \a~*t6Y4^v&_n޽)-р3\^43,-0V<&Ԙ@3Da+ G[[҆f흖`5""j O]hl11uLiNP>`~ց@kzTK_4bq/L ƈ,I nf\lv#VlvE9}]?:ԑA|-V=EջcbrAGsŅ. zi?k'x){YohЧ}W>.xpw`d`Ab7SPd ұ{N`ì>̬^6,0H>7`ɾSZs?^z,a/az{߁%mu}SLl5Je3]hYHTH{њlE U0y*`WVcV[|6nQ<u8/)FӇ,7ZM|(+޻l=3G00SM!.wWa]*7(\*|p+vբ}(ō{nق7,q) $nft^Ldp^a ZK;Łj.D ]ۊA)r,\bKTWPV}1R1pw9Dk#w]+n&K1<{W!p4#V ֯pW~#DɯE(GImvc%ꛬbyѶkZ$tQ%BM/sߝ:%H:NTa@ΣeeDIT@Dʲr~i(tO3J" S6 hy|`ZDwE#]͊# @%6T ^G!r Z&a۟*mZz!mȸK@hGfi-Q)+kO{;:LAP%8U}GJk̼&V6[1+S4Vj%clnIlvQw7\-Y@tIZv8x`D; Ɔ#6(VlQToU2V^jX[*͢;Sqlfm/7f׻j+[\9Iver=c9a@ǀ }ʌ(GǷ @m5,U?"uY}w3fOM;.ɦ0с<rҰ?h·\,ۛfS}QV[ٵ9Mdn+W@P,V§qLc)u{yCϚuSR(R;'Χ,ic"D$\JlnY/ʴc$C(JFLJ8L}%6(t$K%QM`; zI ˖k4{DXXo"QE_0;bx1w~z(r{ ,jL9N`L]xeNhcn%3Xի̘涌8yvx{RPօ)8.Ir{͌==350pz3(y%弜Ыn[U~-;{rQ;^tqHμ܍0"x "4$=bNqۖ1Vx%3z=d&QQ5Le\'R0peJ`Á>d|qT=?$X. DxH%]aQ}` 6OR;MO:`l̤S^~[kkN 2?z2NU=$`v_=%|=3,#E|ӃGG"S$({ i?x݊1pZ,g));Q$9A9=k%@3(jLɵɬ9dVZh]~.UhN+8H\O7f{z’8? @VߢU@lɌ~؅x')c㸙֘?( D'p 3O!"@y;Q C3~yTD㹘SP,[/(+Pdp5|bը@&r{(|;ZWc M(0`Xü$cTz6yϞMp!fg ˭'KILVaReYVKt邢 ` 6N{"75Ǵv!2ɺ5]mTv?t%;:}ӫMzwNŢڄSIOSm~ZH#9d?^/a6z-sZx#t $ QW^֢gD(*Jgګ8`i\^V3=WMa>'`{ȬR>, k:fw+@vտ(&1īTp،wx2f9xΛLa?)٬Y'4 4@aTf[CkxT!ic!& W,C59Ƴ&p<4frd1./efz*ݘc Y9μɂmC8oN`4?QgS iG"oC</OJN^\qpMpoSXpP>k,>AdxªxۭK|LO棍9%=^mLy՗je8\fCO1vf=ߴͨ4$0Db'sbJL/@qd#Ow39'1M4X] 7>*p)#'\gXBTT⼥"cM\4 a$ѓW,g.LE7%XƦ\%d8 {_7*2c_.B۫eFqٞ#G>l6oԬQr3[c bz1[? ``F}%#;/! "rʪY#qV odF[oEv8%>|T!1y!l>4Q~rWأ*DY-C*PYB~"_.~r'V&Dja.Hswl\q[zQ]w:_8R#؅]2v#*.IW3HT.HgRdr |EGaLZ׉eoAkkCIIY "CvQwꔠ;ǕD'lhŖg܄iV'69K˭\[ A!ONjڟ `t91ʏjXe]\8A7X~/Mh{KwsDs8 xp,y;IPcUt|)YzPv;oȁ47z'ܦk'J_c)Y|_>u_| ji Vb=.=zZն5=)dsw}T0ybu4!}=pO;h¤d` 0sxK P f-\քbVC&FFGTFu, X"t#0kt 7In|l%l_(T}ZsR)ՙw;mr-)!7~0z'nɗ{B0M#U˩ P_ wD<;ژR:2UxϷ$|-eLi5ݙ8j7$؁2E7.ܫWKKH:ǫo @d@lF<ʃ{\LF L/EԜijH,* d$2Ӡ%H14r:ĞpiaZjN9qj?r8ov$/UyLunwPMMv-1 V|.;˗l4Y#+H“ӬӐTv}|lKM0yn1gCKsH+ hAˇ775Wcm/@ Y8b\7Gi0=mώ{A_5ՠ t۠([l2AKF=Dq]mקܬFTazH|p<~ 2,:֍X߇yO;ۈ`WčIAݏ=] ?$b;Gk+.ʴ<#c KGRwh8{\OճunDiכ !.*g)-hǗ&@lpAS[2$8-*mxvۏ#?/=P} B.L)nI(n=yУ2ϥ1[RAS\'$H Yŏ42:eS^N+[g J4M Slb}̤4F;.݀Ԃ,٣bV[YHUv:x35PdCA(y`/C KФsQ!B.f9vxVe%Zi^(zb!VԈ =q[rZxF]-:7iݥ*k}7) VtY`4$ajQ6'e-QtFUSsmG(Ld֌qa8 VGO$hlBN3o_ {Mo)eȱ^b,0̳r[˻i@V;?L"j;x0zz ?