shorewall6-5.2.8-bp155.4.6 >  A dkPϊI%z u/AȜmm %߹$c44(jtS:a^tKce_SLJL "fwl78=#Z d޿O-mD~n 2'LCNi ؎`x9xrI I>! :ʋ-ޮ<1q}tN1IW YٜȿUJM\2.%zJ/ Vo{5DĦ*XkOneIY=:BLE%hTpO=(=XnmEVZfVs%4lvIVׄĔF{) 2,fk#|Ijmoql5s؊tJR-4I{^&UY?Lk7a\`5riY[vAB> ie9:j"ȼ5gl7{t˭ʺMxdv'b4fa2c9dbcbe3afa2a06af0dc263ad7c65863c8eca741cb4f1f13f887aeaf6651dbeeafbcca5f9595dbe04ce33b8c0964af64806 dkPϊI%z .=i17MkCavݛXWd5G{ޚ+ g o]]'ݡv}smDϋ-6Yx[owwV: c̜4aO/6,eH~ۭ%M1]ϪWp<'Ʋ(dqtXmuRej諶q\m_&XduNȗ+fWgMP% g\ 3 yma:aB E0mɓ [1lMrtozan1هS7!%Y_ 6RGn8KcXQ:% |)Rǻ/ZPk F@O$ׄQtQ!p:c5<18V/ũ_am,.=9=!xSm+]$6}eh]8Ȉ! ػ맆wo5X3&zvW\kaoBx>pE4?$d   cPT\`} a    d ( ? @ChFJRJtM8MlMN(OG8OP99P49:V/9=>?@FGHIXLYX\]L^ b c d e f l uvz  Cshorewall65.2.8bp155.4.6Shoreline Firewall 6 is an ip6tables-based firewall for Linux systemsThe Shoreline Firewall 6, more commonly known as "Shorewall6", is a Netfilter (ip6tables) based IPv6 firewall that can be used on a dedicated firewall system, a multi-function gateway/ router/server or on a standalone GNU/Linux system.dkPbuild77E1SUSE Linux Enterprise 15 SP5openSUSEGPL-2.0-onlyhttps://bugs.opensuse.orgProductivity/Networking/Securityhttp://www.shorewall.net/linuxnoarch if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in shorewall6.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in shorewall6.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done firm -f /etc/shorewall/startup_disabled test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable shorewall6.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop shorewall6.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in shorewall6.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart shorewall6.service ) || : fi fi@6UQ@D[0O`HEFC:?:2S<<@EJSVZYINR^ Fr#` 941133/401.1-10003201/2.63336/10/.U2[8p@?6UQg@D[ 0O,M`5aHDEFC:?#:B2/SNJ<<@7EJJSyVWZ*YvI"N!g[p:A큀AA큤A큤A큤A큤A큤AAdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkPdkP_m_mh_m_m_mh_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.base@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootshorewall-5.2.8-bp155.4.6.src.rpmconfig(shorewall6)shoreline_firewallshorewall6       /bin/sh/bin/sh/bin/sh/bin/sh/bin/sh/usr/sbin/servicebcconfig(shorewall6)coreutilsdiffutilsfillupgrepiproute2iptableslogrotateperl-baserpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)shorewall-coresystemdsystemdsystemdsystemd5.2.8-bp155.4.63.0.4-14.6.0-14.0-15.2-15.2.8-bp155.4.64.14.3ccAc_/@__o-@_A_c^@^^^1^^v^0^n^h^J@^8 @^)]o@\r@\v{\q5\V\/JZ>Z1@Z7Y@YYf@YTYJ_YA%@X[XrX,XN@XGVU@UUa@UKSU-@U@U@T@TÉ@TNT@T@TT@Tq@TZ@Thorsten Kukuk Bruno Friedmann Bruno Friedmann Bruno Friedmann Togan Muftuoglu Bruno Friedmann Bruno Friedmann Bruno Friedmann Bruno Friedmann Bruno Friedmann Bruno Friedmann Bruno Friedmann Bruno Friedmann Bruno Friedmann Bruno Friedmann Bruno Friedmann Bruno Friedmann Bruno Friedmann Dominique Leuenberger Bruno Friedmann Bruno Friedmann Bruno Friedmann Bruno Friedmann Bruno Friedmann Bruno Friedmann Bruno Friedmann bruno@ioda-net.chbruno@ioda-net.chbruno@ioda-net.chbruno@ioda-net.cholaf@aepfle.debruno@ioda-net.chalarrosa@suse.combruno@ioda-net.chbruno@ioda-net.chbruno@ioda-net.chbruno@ioda-net.chbruno@ioda-net.chbruno@ioda-net.chbruno@ioda-net.chbruno@ioda-net.chtoganm@opensuse.orgtoganm@opensuse.orgtoganm@opensuse.orgtoganm@opensuse.orgtoganm@opensuse.orgtoganm@opensuse.orgtoganm@opensuse.orgtoganm@opensuse.orgtoganm@opensuse.orgtoganm@opensuse.orgtoganm@opensuse.orgtoganm@opensuse.orgtoganm@opensuse.orgdimstar@opensuse.orgtoganm@opensuse.orgtoganm@opensuse.org- Add /etc/sysconfig/network hierachy, as this don't exist by default anymore- Add %dir %{_distconfdir} stop build failing on Leap- **Warning** this is the last patch revision to shorewall. No migration to manage nft will happen upstream. Be prepared to package removal, and migrate to firewalld. - Add shorewall-fix-install-manpages.patch fix boo#1203006 - Update spec copyright and macros - Move /etc to /usr for Networkmanager and logrotate - Update rpmlint check list- Rework xt_geo_ip fixes by using dynamic patching with find which is less burden and confusing than manual patches series. - Add dynamic patching for *.service with removing like upstream the obsolete StandardOutput=syslog until new release- Correct the xt_geo_ip locations - Correct output to journal- Update to version 5.2.8 (Upgrade your configuration) https://shorewall.org/pub/shorewall/5.2/shorewall-5.2.8/releasenotes.txt + Certain restrictions that apply to wildcard interfaces (interface name ends in '+') were previously not enforced when the logical interface name did not end in '+' but the physical interface name did end in '+'. That has been corrected. + To ensure that error messages appear in the correct place in the output stream, stderr is now redirected to stdout when the configured PAGER is used by a command. + Since Shorewall 5.1.0, the Shorewall uninstall.sh script has incorrectly removed ${SBINDIR}/shorewall, while the Shorewall-core uninstall.sh script has failed to remove that file. Both scripts have been corrected. + Previously, the Shorewall CLI included a spurious hyphen ('-') between the product name (e.g., 'Shorewall6') and the version when printing a command output banner. + The shorewall-snat(5) manpage previously stated that a comma-separated list of IP address could be specified for SNAT. That statement was in error and has been removed. As part of this change, IPv4 Example 6 has been updated to use the PROBABILITY column. - New features + 'show tc' command now shows the classifiers associated with each interface (as displayed by the 'show classifiers' command). This integrated qdisc/filter information is also included in the output of the 'dump' command. This change deprecates the 'show classifiers' ('show filters') command, as that command's output is now included in the 'show tc' output. + Shorewall6 has traditionally generated rules for IPv6 anycast addresses. These rules include: a) Packets with these destination IP addresses are dropped by REJECT rules. b) Packets with these source IP addresses are dropped by the 'nosmurfs' interface option and by the 'dropSmurfs' action. c) Packets with these destination IP addresses are not logged during policy enforcement. d) Packets with these destination IP addresses are processes by the 'Broadcast' action. Beginning with this release, individual network interfaces can be excluded from this treatment through use of the 'omitanycast' option in /etc/shorewall6/interfaces. Note: This option was named 'noanycast' in earlier Beta releases. + Duplicate function names have been eliminated between the Shorewall-core lib.cli shell library and the Shorewall lib.cli-std library. + The 'status' command in Shorewall[6]-lite now precedes the configuration directory name with the administrative host name separated with a colon (":"). + Tuomo Soini has contributed a macro that handles NFS v1.4 (no dynamic ports). - Packaging: + Add buildrequires for pkgconfig (missing) + Use macro for sbindir- Update to version 5.2.7 + **Upgrade your configuration** https://shorewall.org/pub/shorewall/5.2/shorewall-5.2.7/releasenotes.txt + Previously, it was not possible to classify traffic by destination IP address when using an Intermediate Functional Block (IFB) for traffic shaping. This is because such classification takes place before the traffic passes through the mangle PREROUTING chain. Such filtering is now possible by setting the 'connmark' option in the tcdevices file. This option causes the current connection mark to be copied to the packet mark prior to filtering, thus allowing the packet mark to be used for classification. This change adds a new CONNMARK_ACTION capability which is required to be able to specify the 'connmark' option. + The tcpri file now supports ?FORMAT 2 which inserts an SPORT column directly to the right of the PORT column. As part of this change, the PORT column is renamed to DPORT while allowing both 'port' and 'dport' to be used in the alternate input format. See shorewall-tcpri(5) and http://shorewall.org/simple_traffic_shaping.html for additional information. + The Simple TC document is now linked to FAQs 97 and 97a.- Update to version 5.2.6 + **Upgrade your configuration** https://shorewall.org/pub/shorewall/5.2/shorewall-5.2.6/releasenotes.txt + When compiling for export, the compiler generates a firewall.conf file which is later installed on the remote firewall system as ${VARDIR}/firewall.conf. Previously, the CLI on that firewall was not processing the file, resulting in some features not being available: - Default values for VERBOSITY, LOGFILE, LOGFORMAT, PATH, SHOREWALL_SHELL, SUBSYSLOCK, RESTOREFILE, RESTART, DYNAMIC_BLACKLIST and PAGER are not supplied. - scfilter file supplied at compile time. - dumpfilter file supplied at compile time. That has been corrected. + A bug in iptables (see https://git.netfilter.org/iptables/commit/?id=d1555a0906e35ba8d170613d5a43da64e527dbe1) prevents the '--queue-cpu-fanout' option from being applied unless that option is the last one specified. Unfortunately, Shorewall places the '--queue-bypass' option last if that option is also specified. This release works around this issue by ensuring that the '--queue-cpu-fanout' option appears last. + The -D 'compile', 'check', 'reload' and 'Restart' option was previously omitted from the output of 'shorewall help'. It is now included. As part of this change, an incorrect and conflicting description of the -D option was removed from the 'remote-restart' section of shorewall(8). + Previously, when EXPAND_POLICIES=No, chains that enforced ACCEPT policies were not completely optimized by optimize level 2 (ACCEPT rules preceding the final unconditional ACCEPT were not deleted). That has been corrected such that these rules are now optimized.- Update to version 5.2.5.2 https://shorewall.org/pub/shorewall/5.2/shorewall-5.2.5/releasenotes.txt + 5.2.5.2 Previously, ";;+" was mishandled in the snat file; the generated rule incorrectly included the leading "+". That has been corrected so that the generated rule is now correct. Example (SNAT OpenVPN server traffic leaving on eth0): SNAT(192.2.0.4) - eth0 ;;+ -p udp --sport 1194 + 5.2.5.1 - The change in 5.2.5 base which changed the 'user' facility to the 'daemon' facility in Shorewall syslog messages did not change the messages with severity 'err'. That has been corrected such that all syslog messages now use the 'daemon' facility. - The actions.std file contains "?IF...?ELSE...?ENDIF" sequences that provide different action options depending on the availabilty of certain capabilities. This has resulted in the Broadcast and Multicast options being listed twice in the output of "shorewall[6] show actions". Beginning with this release, this duplication is eliminated. Note, however, that the options shown will be incomplete if they were continued onto another line, and may be incorrect for Broadcast and Multicast. - A typo in shorewall-providers(5) has been corrected. + 5.2.5 Base - Previously, Shorewall-init installed a 'shorewall' script in /etc/network/if-down.d on Debian and derivatives. This script was unnecessary and required Debian-specific code in the generated firewall script. The Shorewall-init script is no longer installed and the generated firewall script is now free of distribution-specific code. - Also on Debian and derivatives, Shorewall-init installed /etc//NetworkManager/dispatcher.d/01-shorewall which was also unnecessary. Beginning with this release, that file is no longer installed. - Previously, if the dynamic-blacklisting default timeout was set in a variable in the params file and the variable was used in setting DYNAMIC_BLACKLIST, then the 'allow' command would fail with the message: ERROR: Invalid value (ipset-only,disconnect,timeout=) for DYNAMIC_BLACKLIST That has been corrected. - When EXPAND_POLICIES=No in shorewall[6].conf, policies in complex rulesets are enforced in chains such as 'net-all' and 'all-all'. Previously, these chains included redundant state-oriented rules. In addition to being redundant. these rules could actually break complex IPv6 configurations. The extra rules are now omitted.- Update to bugfix version 5.2.4.5 + The description of the 'optional' option has been expanded in shorewall-interfaces(5). + Previously, the AUTOMAKE option did not work properly when /etc/shorewall[6] was a symbolic link. That has been corrected. - Packaging + Remove broken %pretrans, move content to %pre + Remove use of %release in rpm scriptlet + This will avoid constant rebuild.- Update to bugfix version 5.2.4.4 + When DYNAMIC_BLACKLIST=ipset... or when SAVE_IPSETS=Yes in shorewall[6].conf, 'shorewall[6] start' could hang. Fixed. + 'shorewall[6] start' would not automatically create dynamic blacklisting ipsets. That has been corrected. - This version will served also as maintenance upgrade for Leap- Update to version 5.2.4.2 https://shorewall.org/pub/shorewall/5.2/shorewall-5.2.4/releasenotes.txt + Fixes for debian - Update to version 5.2.4.1 + Fixes for openSUSE shorewall-init will now ignore 'start' and 'stop' commands, for running firewalls + Spurious messages have been removed - Packaging + Move /usr/sbin/shorewall to shorewall-core so -lite version doesn't need main shorewall package + To make shorewall remote-* command working we patch lib.cli-std to use /usr/sbin instead of /sbin + commented spec + Desactivate for the moment the upgrade warning. we need to find a 100% working solution. + use %{var} form everywhere- Add perl-base as buildrequirement to force choice of SHA-DIGEST new problem in TW - To fix boo#1166114 never restart shorewall-init.service macro service_del_postun is replaced by simplier systemd_postun - Remove conflict between main and lite package. A managing station need main to build configuration and can use - lite to execute it. Users are in charge of choosing which service has to be started and used. ❤ Freedom- Remove shorewall require from shorewall-init (was a forgoten action)- Update to version 5.2.4 https://shorewall.org/pub/shorewall/5.2/shorewall-5.2.4/releasenotes.txt + Previously, when a Shorewall6 firewall was placed into the 'stopped' state, ICMP6 packets required by RFC 4890 were not automatically accepted by the generated ruleset. Beginning with this release, those packets are automatically accepted. + Previously, the output of 'shorewall[6] help' displayed the superseded 'load' command. That text has been deleted. + The QOSExample.html file in the documentation and on the web site previously showed tcrules content for the /etc/shorewall/mangle file (recall that 'mangle' superseded 'tcrules'). That page has been corrected. + The 'Starting and Stopping' and 'Configuration file basics' documents have been updated to align them with the current product behavior. + The 'ipsets' document has been updated to clarify the use of ipsets in the stoppedrules file. - Packaging + shorewall-init package has a removed %service_del_postun macro to close bug boo#1166114 Restarting this service can lock down admin out of the system. + shorewall(6) and shorewall(6)-lite conflict has they shouldn't be installed together on the same system. + conf_update flag is set to 1 to activate update reminder + Adjust and cleanup requires- Add version to requires in -lite version- Update to minor bugfix version 5.2.3.7 + When DOCKER=Yes, if both the DOCKER-ISOLATE and DOCKER-ISOLATE-STAGE-1 existed then the DOCKER-ISOLATE-STAGE-* chains were not preserved through shorewall state changes. That has been corrected so that both chains are preserved if present. + Previously, the compiler always detected the OLD_CONNTRACK_MATCH capability as being available in IPv6. When OLD_CONNTRACK_MATCH was available, the compiler also mishandled inversion ('!') in the ORIGDEST columns, leading to an assertion failure. Both the incorrect capability detection and the mishandled inversion have been corrected. + During 'enable' processing, if address variables associated with the interface have values different than those when the firewall was last started/restarted/reloaded, then a 'reload' is performed rather than a simple 'enable'. The logic that checks for those changes was incorrect in some configurations, leading to unneeded reload operations. That has been corrected. + When MANGLE_ENABLED=No in shorewall[6].conf, some features requiring use of the mangle table can be allowed, even though the mangle table is not updated. That has been corrected such that use of such features will raise an error. + When the IfEvent(...,reset) action was invoked, the compiler previously emitted a spurious "Resetting..." message. That message has been suppressed. - Packaging + Do not provide anymore unsused notrack file + Introduce define conf_need_update to track when we activate the post update warning for users when there's minor or major version update of shorewall bnc#1166114- Update to bugfix minor 5.2.3.6 + Fix for possible start failure when both Docker containers and Libvirt VMs were in use.- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to shortcut through the -mini flavors.- Update to bugfix minor 5.2.3.5 + A typo in the FTP documentation has been corrected. + The recommended mss setting when using IPSec with ipcomp has been corrected. + A number of incorrect links in the manpages have been corrected. + The 'bypass' option is now allowed when specifying an NFQUEUE policy. Previously, specifying that option resulted in an error. + Corrected IPv6 Address Range parsing. + Previously, such ranges were required to be of the form [-] rather than the more standard form []-[]. In the snat file (and in nat actions), the latter form was actually flagged as an error while in other contexts, it resulted in a less obvious error being raised. + The manpages have been updated to refer to https://shorewall.org rather than http://www.shorewall.org. - Refresh spec file- Update to bugfix minor 5.2.3.4 + Update release documents. + Correct handling of multi-queue NFQUEUE as a policy. + Correct handling of multi-queue NFQUEUE as a macro parameter. + Make 'AUTOMAKE=No' the update default. + Correct the description of the 'bypass' NFQUEUE option in shorewall-rules(5).- Update to bugfix minor 5.2.3.3 Previously, if an ipset was specified in an SPORT column, the compiler would raise an error similar to: ERROR: Invalid ipset name () /etc/shorewall/rules (line 44) - Update to bugfix minor 5.2.3.2 Shorewall 5.2 automatically converts an existing 'masq' file to an equivalent 'snat' file. Regrettably, Shorewall 5.2.3 broke that automatic update, such that the following error message was issued: Use of uninitialized value $Shorewall::Nat::raw::currentline in pattern match (m//) at /usr/share/shorewall/Shorewall/Nat.pm line 511, <$currentfile> line nnn. and the generated 'masq' file contains only initial comments. That has been corrected.- Update to bugfix minor 5.2.3.1 release + An issue in the implementation of policy file zone exclusion, released in 5.2.3 has been resolved. In the original release, if more than one zone was excluded then the following error was raised: ERROR: 'all' is not allowed in a source zone list etc/shorewall/policy (line ...)- Update to new 5.2.3 bugfix release http://www.shorewall.net/pub/shorewall/5.2/shorewall-5.2.3/releasenotes.txt This is the retirement of Tom Eastep see. https://sourceforge.net/p/shorewall/mailman/message/36589782/ - Removed module* in file section - Clean-up changes and spec (trailing slashes)- Update to new 5.2.2 bugfix release http://www.shorewall.net/pub/shorewall/5.2/shorewall-5.2.2/releasenotes.txt - Packaging: + As seen with upstream recommend running shorewall update on all version update + to be done: run update automatically- Update to major version 5.2.1.4 A lot of changes occurs since last package please consult http://www.shorewall.net/pub/shorewall/5.2/shorewall-5.2.1/releasenotes.txt and the know problem list at http://www.shorewall.net/pub/shorewall/5.2/shorewall-5.2.1/known_problems.txt - Update your configuration shorewall update - Packaging: renew spec file with spec-cleaner- Changes in 5.1.12.3 Problems Corrected: When 'reset' and 'dst' were specified to the IfEvent action, the action would incorrectly attempt to reset the event for the SOURCE IP address rather than the DEST address. That has been corrected.- spec : + Minimal changes with spec-cleaner + Stop conflicting with other firewall (SuSEFirewall2, firewalld) User can have several management tools, and it help preparing a migration - Run shorewall(6) update -A to update your configurations Check and adapt them before restarting. - Changes in 5.1.12.3 + Update release documents. + Ensure that mutex gets released at exit. - Changes in 5.1.12.2 + Alter documentation to prefer ';;' over ';' in INLINE and IP[6]TABLES rules. + Make 'update' convert ';' to ';;' in INLINE, IPTABLES and IP6TABLES rules. + Correct typo that resulted in an "unknown function" Perl diagnostic. + Correct "Invalid policy" message. + Fix omitted SYN limiting. - Changes in 5.1.12.1 + Replace macro.SSDPServer with corrected macro.SSDPserver. - Changes in 5.1.12 Final + Update release documents. + Add INLINE_MATCHES=Yes to the deprecated list. - Changes in 5.1.12 RC 1 + Update release documents. + Minor performance enhancements to Optimize Category 8. + Always report IPSET_MATCH. - Changes in 5.1.12 Beta 2 + Delete undocumented OPTIMIZE_USE_FIRST option. + Merge 5.1.11. + Suppress trailing whitespace. + Avoid awkward blank lines. - Changes in 5.1.12 Beta 1 + Code and manpage cleanup. + Allow SNAT in the INPUT chain. - Changes in 5.1.11 Final + Update release documents. - Changes in 5.1.11 RC 1 + Update versions and copyrights. + Clear the connection mark on forwarded IPSEC tunneled connections + Make TRACK_PROVIDERS=Yes the default. - Changes in 5.1.11 Beta 2 + Be selective about verification of the conntrack utility when + DYNAMIC_BLACKLIST=ipset,disconnect... + Don't require shorewall to be started for 'allow' with ipset-based DBL. + Make address variables play nice with the 'clear' command. + Don't unconditionally enable forwarding during 'clear'. - Changes in 5.1.11 Beta 1 + Allow non-root to run some 'show' commands. + Use synchain name in log messages rather than base chain name. + Assume :syn for TCP CT entries in the conntrack file and HELPER. + Limit depth of 'find' search when AUTOMAKE=Yes. - Changes in 5.1.10.2 + Limit 'find' to depth 1. + Don't run find in an empty entry in $CONFIG_PATH - Changes in 5.1.10.1 + Fix Shorewall-core installer for sandbox case. + Make /etc and /configfiles the same. - Changes in 5.1.10 Final + Add warning re wildcard and OPTIONS. + Correct IPv6 Universal interfaces file. - Changes in 5.1.10 RC 1 + Correct ingress policing. + Fix Shorewall-init recompilation problem. - Changes in 5.1.10 Beta 2 + Allow a protocol to be associated with a regular action. + Remove the PSH flag from the FIN action. - Changes in 5.1.10 Beta 1 + Allow CONFIG_PATH setting to begin with ':' to allow dropping the first directory by non-root. + Correct several typos in the manpages (Roberto Sánchez). + Correct typo in 'dump' processing. + Reset all table counters during 'reset'. - Changes in 5.1.9 Final + Use logical interface names in the Sample configs. - Changes in 5.1.9 RC 1 + Apply W Van den Akker's OpenWRT/Lede patches. + Don't verify IP and SHOREWALL_SHELL paths when compiling for export. + Support for Redfish remote console in macro.IPMI - Changes in 5.1.9 Beta 2 + Merge content from 5.1.8. - Changes in 5.1.9 Beta 1 + Update release documents. + Add TCPMSS action in the mangle file. + Inline the Broadcast action when ADDRTYPE match is available. + Support logging in the snat file. + Add shorewall-logging(5). - Changes in 5.1.8 Final + Correct 'delete_default_routes()'. + Delete default routes from 'main' when a fallback provider is successfully enabled. + Don't restore default route when a fallback provider is enabled. + Issue a warning when 'persistent' is used with RESTORE_DEFAULT_ROUTE=Yes. + Don't dump SPD entries for the other address family. + Fix 'persistent' provider issues. + Treat LOG_TARGET the same as all other capabilities. + Allow merging of rules with IPSEC policies- spec : + use new %_fillupdir macro with env DIRFILLUP in build * Redone patches *-fillup-install.patch to use ${DIRFILLUP} * use new %_fillupdir macro in files + change require perl to perl-base + Added conflict with firewalld + Refresh list of files and modules - Run shorewall(6) update -A to update your configurations Check and adapt them before restarting. - 5.1.8.1 release - Recommended action : + Update release documents + Make persistent routes and rules independent of 'autosrc' + Correct 'delete_default_routes()' + Delete default routes from 'main' when a fallback provider is successfully enabled + Don't restore default route when a fallback provider is enabled + Issue a warning when 'persistent' is used with RESTORE_DEFAULT_ROUTE=Yes + Don't dump SPD entries for the other address family + Fix 'persistent' provider issues + Treat LOG_TARGET the same as all other capabilities + Allow merging of rules with IPSEC policies - 5.1.7.2 release Please refer to releasenote.txt for a detailled description. As always use shorewall [-6] update and revise your configuration + Features summary * Module loading streamlined, shorewall [-6] update will remove MODULE_SUFFIX configuration * Check route if detect is used in gateway column (dhcpd5 has now binary encoded .lease) * DNAT and REDIRECT support in ShorewallActions * Docker configuration support: DOCKER-INGRESS chain. + Fixes summary * Fix shorewall-snat(5) man page example, DEST column has to be read eth0:+myset[dst] * Fix invalid vlsm to ipcalc message * ADD_IP_ALIASES is set to NO for ipv6 while yes for ipv4 * Cleanup .tmp in save ipset operations. * Command reenable fix for persistent and non-persistent interfaces * Warn if getattr failed (SeLinux) - 5.1.6 release + Fixes summary * $SHAREDIR $CONFIGDIR available again * Fix compilation with optimize level 8 * Be consistant with Netfilter interpretation of 'eth'='eth+' * RESTORE_WAIT_OPTION serialize start of ipv4/ipv6 with -w option * RDP macros handle also UDP part + Features summary * Sparse option (not implemented in our spec) * Add enable / disable runtime extension script * Check zone and subzone to share at least one interface * Runtime address and port variables * Iptables --wait option used for serialization- Update to bugfix release 5.1.5.2 + Make build reproducible boo#1047218 + Fix upgrade from 4x version : dropBcast and dropBcasts are now supported boo#1053650 + Perl 5.26 support + Fix for BASIC_FILTERS=Yes and tcfilters + Fix USER/GROUP messages + MAC address in OUTPUT col in accounting file error is raised at compile time + Fix port number 0 or > 65535 perl execption- Update filename in /var/adm/update-messages to match documentation, and build-compare pattern- bugfix release 5.1.4.4 A defect in 5.1.4.3 caused a startup failure when two or more 'fallback' providers were configured. That has been corrected.- Fix a typo in %posttrans that would remove the wrong file and could cause a problem depending on the execution order of the %pretrans and %posttrans scripts for the shorewall and shorewall6 packages.- This stable branch 5.1x will be the new default for Leap 42.3. Remember that each time you have an upgrade with changes in Major or Major,Minor it is mandatory you upgrade your configuration with shorewall(6) update -a /etc/shorewall(6) command. - Packaging : use pretrans and posttrans to inform user about configuration upgrade. - Bugfix release 5.1.4.3. Problem Corrected: When running on prior-generation distributions such as RHEL6, IPv6 multi-ISP configurations failed to start due to an error such as the following: ERROR: Command "ip -6 -6 route replace default scope global table 250 nexthop via ::192.88.99.1 dev tun6to4 weight 1" Failed Such configurations now start successfully.- Bugfix and enhancement release 5.1.4.2 complete changelog is available http://shorewall.net/pub/shorewall/5.1/shorewall-5.1.4/releasenotes.txt - Main changes All IPv6 standard actions have been deleted and their logic has been added to their IPv4 counterparts who can now handle both address families. Previously, ?error and ?require messages as well as verbose ?info and ?warning messages (those that report the file and line numbers) generated from an action file would report the action file name and line number rather than the file and line number where the action was invoked. The file and line number where the action was invoked were listed second. Beginning with this release, the invoking file and line number are listed first and the action file and line number are not reported. This allows for creation of clearer messages. IPv6 UPnP support (including MINIUPNPD) is now available. A PERL_HASH_SEED option has been added to allow the Perl hash seed to be specified. See shorewall.conf(5) and perlsec(1) for details.- Bugfix release 5.1.3.2 Previously, if a Shorewall Variable (e.g., @chain) was the target of a conditional ?RESET directive (one that was enclosed in ?if. ?else...?endif logic), the compiler could incorrectly use an existing chain created from the action rather than creating a new (and different) chain. That has been corrected. Previously, if alternate input format specified a column that had already been specified, the contents of that column were silently overwritten. Now, a warning message is issued stating that the prior value has been replaced by the newer value.- Update to last bugfix version 5.1.3.1 Problems Corrected: There was a typo in the BLACKLIST_DEFAULT settings in the 5.1.3 sample config files, which resulted in a compilation error. That typo has been corrected. There was also a typo in the two-interface IPv4 sample snat file; 192.168.0.0/16 was inadvertently entered as 92.168.0.0/16. That has been corrected. Previously, when processing the policy file, 'all+' was incorrectly treated the same as 'all'. That has been corrected so that 'all+' causes intra-zone traffic to be included in the policy.- Upgrade to last stable 5.1.3 For details see changelog.txt and releasenotes.txt containing all informations for a correct upgrade path. - Packaging Redone patches for var-fillup + shorewall-fillup-install.patch + shorewall-init-fillup-install.patch + shorewall-lite-fillup-install.patch- Upgrade to stable 5.1.1 For details see changelog.txt and releasenotes.txt containing all informations for a correct upgrade path. - Packaging: + use proper %{} syntax + Adjust year copyright + Remove attr on sbindir symlink + Move Samples and Contrib to doc package- Upgrade to last stable of 5.0.x version 5.0.15 For details see changelog.txt and releasenotes.txt containing all informations for a correct upgrade path. - Packaging : + Remove all non suse %if + Cleanup older non supported version + Remove upstream merged patch * 0001-remote_fs.patch * 0001-required-stop-fix.patch + Remove 0001-fillup-install.patch replaced by specific product patch for correct usage of var-fillup + Added patches for var-fillup when not specific %name6 is also supported * shorewall-fillup-install.patch * shorewall-init-fillup-install.patch * shorewall-lite-fillup-install.patch + spec-cleaner minimal- Update to last 4x bugfix version 4.6.13.4 For details see changelog.txt and releasenotes.txt - 4.6.13.4 * This release includes a couple of additional configure/install fixes from Matt Darfeuille. * The DROP command was previously rejected in the mangle file. That has been corrected. - 4.6.13.3 * Previously, Shorewall6 rejected rules in which the SOURCE contained both an interface name and a MAC address (in Shorewall format). That defect has been corrected so that such rules are now accepted. * A number of corrections have been made to the install, uninstall and configure scripts (Matt Darfeuille). * Previously, optional interfaces were not enabled during 'start' and 'restart' unless there was at least one entry in the 'providers' file. This resulted in these interfaces not appearing in the output of 'shorewall[6] status -i'. * The check for use of a circular kernel log buffer (as opposed to a log file) has been improved. * Previously, if a circular log buffer was being used, the output of various commands still displayed '/var/log/messages' as the log file. Now, it is displayed as 'logread'. * When processing the 'dump' command, the CLI now uses 'netstat' to print socket information when the 'ss' utility is not installed. - 4.6.13.2 * Previously, if statistical load balancing was used in the providers file, the default route in the main table was not deleted during firewall start/restart. That route is now correctly deleted. - 4.6.13.1 * Previously, the 'reset' command would fail if chain names were included. Now, the command succeeds, provided that all of the specified chains exist in the filter table. * The TCP meta-connection is now supported by the Tinc macro and tunnel type. Previously, only the UDP data connection was supported.- Update to version 4.6.13 For more details see changelog.txt and realeasenotes.txt * The 'rules' file manpages have been corrected regarding the packets that are processed by rules in the NEW section. * Parsing of IPv6 address ranges has been corrected. Previously, use of ranges resulted in 'Invalid IPv6 Address' errors. * The shorewall6-hosts man page has been corrected to show the proper contents of the HOST(S) column. * Previously, INLINE statements in the mangle file were not recognized if a chain designator (:F, :P, etc.) followingowed INLINE(...). As a consequence, additional matches following a semicolon were interpreted as column/value pairs unless INLINE_MATCHES=Yes, resulting in compilation failure. * Inline matches on IP[6]TABLE rules could be ignored if INLINE_MATCHES=No. They are now recognized. * Specifying an action with a logging level in one of the _DEFAULT options in shorewall[6].conf (e.g., REJECT_DEFAULT=Reject:info) produced a compilation error: ERROR: Invalid value (:info) for first Reject parameter /usr/share/shorewall/action.Rejectect (line 52) That has been corrected. Note, however, that specifying logging with a default action tends to defeat one of the main purposes of default actions which is to suppress logging. * Previously, it was necessary to set TC_EXPERT=Yes to have full access to the user mark in fw marks. That has been corrected so that any place that a mark or mask can be specified, both the TC mark and the User mark are accessible.- Update to version 4.6.11 For more details see changelog.txt and releasenotes.txt * Previously, when the -c option was given to the 'compile' command, the progress message "Compiling..." was issued before it was determined if compilation was necessary. Now, that message is suppressed when re-compilation is not required. * Previously, when the -c option was given to the 'compile' command, the 'postcompile' extension script was executed even when there was no (re-)compilation. Now, the 'postcompile' script is only invoked when a new script is generated. * If CONFDIR was other than /etc, then ordinary users would not receive a clear error message when they attempted to execute one of the commands that change the firewall state. * Previously, IPv4 DHCP client broadcasts were blocked by the 'rpfilter' interface option. That has been corrected. * The 'update' command incorrectly added the INLINE_MATCHES option to shorewall6.conf with a default value of 'Yes'. This caused 'start' to fail with invalid ip6tables rules when the alternate input format using ';' is used. Note: This last issue is not documented in the release notes included with the release.- Update to version 4.6.10.1 For more details see changelog.txt and releasenotes.txt * Indentation is now consistent in lib.core (Tuomo Soini). * The first problem corrected in 4.6.10 below was incomplete. It is now complete (Tuomo Soini). * Similarly, the second fix was also incomplete and is now completed (Tuomo Soini).- Update to version 4.6.9 For more details see changelog.txt and releasenotes.txt * This release contains defect repair from Shorewall 4.6.8.1 and earlier releases. * The means for preventing loading of helper modules has been clarified in the documentation. * The SetEvent and ResetEvent actions previously set/reset the event even if the packet did not match the other specified columns. This has been corrected. * Previously, the 'show capabilities' command was ignoring the HELPERS setting. This resulted in unwanted modules being autoloaded and, when the -f option was given, an incorrect capabilities file was generated. * Previously, when 'wait' was specified for an interface, the generated script erroneously checked for required interfaces on all commands rather than just start, restart and restore.- Update to version 4.6.8.1 For more details see changnlog.txt and releasenotes.txt * Previously, when servicd was installed and there were one or more required interfaces, the firewall would fail to start at boot.This has been corrected by Tuomo Soini. * Some startup logic in lib.cli has been deleted. A bug prevented the code from working as intended, so there is no loss of functionality resulting from deletion of the code.- Update to version 4.6.8 For more details see changelog.txt and releasenotes.txt * This release includes defect repair from Shorewall 4.6.6.2 and earlier releases. * Previously, when the -n option was specified and NetworkManager was installed on the target system, the Shorewall-init installer would still create ${DESTDIR}etc/NetworkManager/dispatcher.d/01-shorewall, regardless of the setting of $CONFDIR. That has been corrected such that the directory ${DESTDIR}${CONFDIR}/NetworkManager/dispatcher.d/01-shorewall is created instead. * Previously, handling of the IPTABLES and IP6TABLES actions in the conntrack file was broken. nfw provided a fix on IRC. * The Shorewall-core and Shorewall6 installers would previously report incorrectly that the product release was not installed. Matt Darfeuille provided fixes.- Update to version 4.6.7 For more details see changelog.txt and releasenotes.txt * This release includes defect repair from Shorewall 4.6.6.2 and earlier releases. * The 'tunnels' file now supports 'tinc' tunnels. * Previously, the SAME action in the mangle file had a fixed timeout of 300 seconds (5 minutes). That action now allows specification of a different timeout. * It is now possible to add or delete addresses from an ipset with entries in the mangle file. The ADD and DEL actions have the same behavior in the mangle file as they do in the rules file. - Added systemd_version macro in anticipation of detecting the correct service file when systemd version is >= 214- Update to version 4.6.6.2 For more details see changelog.txt and releasenotes.txt * The compiler failed to parse the construct +[n] where n is an integer (e.g., +bad[2]). * Orion Paplawski has provided a patch that adds 'ko.xz' to the default MODULE_SUFFIX setting. This change deals with recent Fedora releases where the module names now end with ".ko.xz". In addition to Orion's patch, the sample configurations have been modified to specify MODULE_SUFFIX="ko ko.xz".- Update to version 4.6.6.1 For more details see changelog.txt and releasenotes.txt * Previously the SAVE and RESTORE actions were erroneously disallowed in the INPUT chain within the mangle file. * The manpage descriptions of the mangle SAVE and RESTORE actions incorrectly required a slash (/) prior to the mask value. * Race conditions could previously occur between the 'start' command and the 'enable' and 'disable' commands. * The 'update' command incorrectly added the INLINE_MATCHES option to shorewall.conf with a default value of 'Yes'. This caused 'start' to fail with invalid iptables rules when the alternate input format using ';' is used. * Previously the LOCKFILE setting was not propagated to the generated script. So when the script was run directly, the script unconditionally used ${VARDIR}/lock.- Update to version 4.6.6 For more details see changlelog.txt and releasenotes.txt As there are many new features with this release please consult the mentioned files. * Previously, a line beginning with 'shell' was interpreted as a shell script. Now, the line must begin with 'SHELL' (case-sensitive). Note that ?SHELL and BEGIN SHELL are still case-insensitive.- Update to version 4.6.5.5 For more details see changelog.txt and releasenotes.txt * This release adds Tuomo Soini's fix for Shorewall-init to 4.6.5.5. Previously, the ifupdown scripts were looking in the wrong directory for the firewall script.- Update to version 4.6.5.4 For more details see changelog.txt and releasenotes.txt * The '-c' option of the 'dump' and 'show routing' commands is now documented. * The handling of the 'DIGEST' environmental variable has been corrected in the Shorewall installer. Previously, specifying that option would not correctly update the Chains module which led to a Perl compilation failure. * Handling of ipset names in PORT columns has been corrected. Previously, such usage resulted in an invalid iptables rule being generated.- Update to version 4.6.5.3 For more details see changelog.txt and releasenotes.txt * The Shorewall-init scripts were using the incorrect variable to set the state directory. Correction provided by Roberto Sanchez. * For normal dynamic zones, the 'add' command failed with a diagnostic such as: ERROR: Zone ast, interface net0 does not have a dynamic host list * When a mark range was used in the marks (tcrules) file, a run-time error occurred while attempting to load the generated ruleset.- Do not buildrequire openSUSE-release: it's a daily changing package and causes thus frequent rebuilds for no reason. configure and install both try to guess the target from /etc/os-release. So we simply inject BUILD=suse for the openSUSE case.- Update to version 4.6.5.2 For more details see changelog.txt and releasenotes.txt * LOG_BACKEND=LOG failed at run-time for all but the most recent kernels. - Changes in 4.6.5.1 * The generated script can now detect an gateway address assigned by later versions of that program (Alan Barrett). * In 4.6.5, the bash-based configure script would issue the following diagnostic if SERVICEDIR was not specified in the shorewallrc file: ./configure: line 199: [SERVICEDIR]=: command not found This was compounded by the fact that all of the released shorewallrc files still specified SYSTEMDDIR rather than SERVICEDIR (Evangelos Foutras) * The shorewallrc.archlinux file now reflects a change in SBINDIR that occurred in Arch Linux in mid 2013 (Evangelos Foutras).- Update to versioin 4.6.4.3 For more details see changelog.txt and releasenotes.txt * The fix for LOG_BACKEND in 4.6.4.2 worked on some older distributions but not on newer ones. This release fixes the problem in the remaining cases./bin/sh/bin/sh/bin/sh/bin/shbuild77 1684754618  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~5.2.8-bp155.4.65.2.8-bp155.4.65.2.8-bp155.4.6 shorewall6accountingactionsblrulesclearconntrackfindgwhostsinitinterfacesisusablelib.privatemaclistmanglenatnetmapparamspolicyprovidersproxyndprefreshrefreshedrestoredroutesrtrulesrulesscfiltersecmarksshorewall6.confsnatstartstartedstopstoppedstoppedrulestcclassestccleartcdevicestcfilterstcinterfacestcpritunnelszonesetclogrotate.dshorewall6shorewall6shorewall6.servicercshorewall6shorewall6shorewall6COPYINGchangelog.txtipsecvpnipv6releasenotes.txttunnelsysconfig.shorewall6shorewall6-accounting.5.gzshorewall6-actions.5.gzshorewall6-blrules.5.gzshorewall6-conntrack.5.gzshorewall6-exclusion.5.gzshorewall6-hosts.5.gzshorewall6-interfaces.5.gzshorewall6-ipsets.5.gzshorewall6-maclist.5.gzshorewall6-mangle.5.gzshorewall6-modules.5.gzshorewall6-nat.5.gzshorewall6-nesting.5.gzshorewall6-netmap.5.gzshorewall6-params.5.gzshorewall6-policy.5.gzshorewall6-providers.5.gzshorewall6-proxyndp.5.gzshorewall6-routes.5.gzshorewall6-rtrules.5.gzshorewall6-rules.5.gzshorewall6-secmarks.5.gzshorewall6-snat.5.gzshorewall6-stoppedrules.5.gzshorewall6-tcclasses.5.gzshorewall6-tcdevices.5.gzshorewall6-tcfilters.5.gzshorewall6-tcinterfaces.5.gzshorewall6-tcpri.5.gzshorewall6-tunnels.5.gzshorewall6-vardir.5.gzshorewall6-zones.5.gzshorewall6.conf.5.gzshorewall6.8.gzshorewall6action.mangletemplateaction.templateactions.stdconfigfilesaccountingaccounting.annotatedactionsactions.annotatedblrulesblrules.annotatedclearconntrackconntrack.annotatedfindgwhostshosts.annotatedinitinterfacesinterfaces.annotatedisusablelib.privatemaclistmaclist.annotatedmanglemangle.annotatednatnat.annotatednetmapnetmap.annotatedparamsparams.annotatedpolicypolicy.annotatedprovidersproviders.annotatedproxyndpproxyndp.annotatedrefreshrefreshedrestoredroutesroutes.annotatedrtrulesrtrules.annotatedrulesrules.annotatedscfiltersecmarkssecmarks.annotatedshorewall6.confsnatsnat.annotatedstartstartedstopstoppedstoppedrulesstoppedrules.annotatedtcclassestcclasses.annotatedtccleartcdevicestcdevices.annotatedtcfilterstcfilters.annotatedtcinterfacestcinterfaces.annotatedtcpritcpri.annotatedtunnelstunnels.annotatedzoneszones.annotatedconfigpathdeprecatedfunctionshelperslib.basemacro.Pingmacro.Trcrtmacro.mDNSmacro.mDNSbiversionshorewall6/etc//etc/shorewall6//usr//usr/etc//usr/etc/logrotate.d//usr/lib//usr/lib/systemd/system//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/shorewall6//usr/share/fillup-templates//usr/share/man/man5//usr/share/man/man8//usr/share//usr/share/shorewall6//usr/share/shorewall6/configfiles//var/lib/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Backports:SLE-15-SP5/standard/f80c202db0d1e263607aea4166538e7d-shorewallcpioxz5noarch-suse-linuxdirectoryASCII textcannot open `/home/abuild/rpmbuild/BUILDROOT/shorewall-5.2.8-bp155.4.6.x86_64/etc/shorewall6/isusable' (No such file or directory)UTF-8 Unicode textPOSIX shell script, ASCII text executabletroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)vt?wfif [ -f /run/shorewall6_upgrade ]; then cat > /var/adm/update-messages/shorewall-5.2.8-something << EOF Warning: Shorewall6 5.2 has just been installed Warning: You have to check and upgrade your configuration shorewall6 update -a /etc/shorewall6 Warning: Adjust changes and try the new configuration shorewall6 try /etc/shorewall6 Warning: If everything work run systemctl try-reload-or-restart shorewall6 EOF rm -f /run/shorewall6_upgrade fi/bin/shutf-81bba271b918d68627382fb823bd2cebb4eead29c69c9286ea4696f36c732f3cc?7zXZ !t/E] crt:bLL ؝.ηl2ꯗ>47)'H B HGo2$˾)cȄ$5JG365\\h\K! ô3}fC' 2lqQD$מdJ!nC8XOUVH93Wf 3<8-ʸ~FEqW3еwG:DRY)6-bZ`[1MU;𒜞CV0~녤amAFs'w#W=LciaQe2b9̼fذ0-!}l#hi{(U穝B1"&gg6ij5!5[ӂS YM;@~@(D$_/FX"|IԵ%_U2餑aəL+FdwzXkFF';y2~v$pv #np@m0YKB<{/o5"WڼBX  9'!lì{A!1E/>N/P:F}Pa}xNFoT69dMh'@b$hsc '!6[k.YlEf0E1>mdMKЮv 7\Ny5Jwd\ABwz!F$4C>HE d>*jJOj9o.aLSf(~206bw%PYzLeP_4[Q^mazQ+"cXQ nа%Jq"RS*=rfxԃF5ܫ{IE,~AmiV)f\CC`ͤ!,p8Zs3(с4ʷG=R|ՆS(~h#O,E} >ܾC1 ߏV:tWCN(h`/+Ц=V5 GA`-L]3r[5Rqc2{5A q:sbġ`Ǣ:<;TɃ.0c,;"ȋfp0TXAM#~B!\avv:\Pl0BŬNȆ,N&̒WHTY~S0E5oSEZ͕D>ͦ'T:SZ{d?fx(A#>  Sb C~3: /+2'Ӛ4;nk[h䠃K/ê.NZ:%Fic|/{F7Ɣg c jxe׊V֬,*qM7rhE̵VG"‫L0t2n Tj14vq=Y\  JEVFH慱aVڦ,OtCuRi@kyt&:T+v3^l jdO@x`CgEF aOkCDИ?$Ў+*Ni8^CHq^+wWHzf45i-, feK\j]`ѿiYI֗ng#;F7ӕo+ [$oֶE%ySn(jsOnog ]/Ebm^D"[?$uc~~RBÉ#i ~ @c1b#dg{ ټCrF`@NgL0Iُ:@杧cAn17 - 0.|w[PEUU!X24>[ys}+G/!Ε~\>ءzVJW4RQ(uUK(HPw-{vF f3 jgʰpnOD oķoZג6[QniAP㔷9gw:1o  *yL\E=³MPy$JagK9=zjfbdcS[xoHvHf1:kCb@T,5yޏ1W(E&];3gFPOGTrh;U~F }t$"&!!Gt4F[;ΝvWYe(n4-ڋ:v WPTyXoDz=wzTƏs))W(Eo)Ә3a`h Q cEHj{`Qo{^kw瘳qS8~tdd{k44fﺲշzPz-PpK<(ONTGGS@ZN9p2b~)~yY"u7xEVυeɜjXDM-*Š9Av~np(r2 N8f!y_1JtNo9r/6/)e|K6:UfOo aj$00OX*`!nFjj"D€SEǗ͆&2SU-<9JQ<.C1vN&-7x,VN2egg9uC٢ 3H2@^Pp:VpEsmn6OK~G"0Dٻۤ ^긧C6z凙)ֽ3q=0e0L9JOyN{hSHev cWO,Dy 8- o2*![9O!?6-^Y'~x- N'>tEPN#RX0j0@G!<,2:,8J#fJ nx'﷏(:`cؓ%TuI(^mes "rRkIgmQ;R6Li^xڙhd@詉dшm E't '' 3Q:iE8 0De ?g̞׽ ҝbm9v(3b}q H' G?Iy/=uKPAB%(;0ȃ0z?qG^!.O)`Wΰ+HS$Y}/"{w Ff'M}[ #7uw+K~h8)USs]f^Ч5ߘx@u1C_y2cozZb'G@ҁ3{HHЈCBo$gB=."&v'Hj2ӘɄۋ:F6Y,9( BżzӢ-&%B!9 ƂHYc moB8 h@oPVyy9#2=d+w$^ʶnm6iߠI#X[Ee}fql <_F$Xi٠!uXtC F( &sAl2,RvR\GU?#5|#mAY -gc ˙yx}°4m R%/g2k%&ªZ*k;zt'az SPу8wmP5UK P@gR::#@HFr͂aR uإY;C|.}~mTET!f3itڕʵx.J4D! +Sc=KM)R5LQ8Cqwx9c<*G\nэщ[~;3noϣ@t&y=K~LD,/un?6!K.`=j,[]z>z@4͍H1zRSK0 /I-OľH|NmhzK?h:˪ùz|7fGj*́Is)]~ϩhi2-_O@q3j@e1҇qٙk/\@MfT 9O=f`Sa o-j )KX)yv< 0 am wڿgL:q&07о*ely#S򑷝Oq:郷([<4spV@9iT"C;wџGS[#JF–&Q1' ]/F :EPmdN8YTUOK|nwU*7x%Çu )Mrh8F2#{(3t/)x&95hf&XS꛿Wyyt 7gj2˽;h Dnrv]`+2rU]d}&,\Yjl*`͇ ocGqv7/FYIc6q:7 &lR4)ٝB @ֱڿ (j伛}bf H%=lr#WPp'{Zm{ᅖIE#D Sqt%,wτ@gS&-dr =) z%Uk\& q~L?%Mcp7/YɚmWKv AF |ȯu DZՏ1[2:vWPE|&X,$KFVT=:M3UgRtSJJ~ *;ցz6 ~ƨ<ʀij? C:OFUs**%1\[) WU:.n&ބKΓ${n [''!n:_,ZKO\5|R~q @ d$@0 \}xpZVaY&*171-OM˳$ۜf+bj@Yf5jwJYxI-PJ|{Xe18F"o~BY~G$2/ i6GY Y@Pp(g zJ!-r/i,Vh 8 wB.o*̎of?Âr ]D` kHr?:W_b;BwԭTZ޵x3fRóq jЮ;Y|&$G'i@K}X&d9%Nƺ%^sZׄ=uͮS̷Y>5Ixv_o4Zo8ӄA8ĽJ (Πymk~{Vr0z:ZM76G#Jv ܓcͺ%Ņ^:=T8ͰJJ7'Khqղ7H)s@!B1Twg0s2 aYa.c5BfF*U  ;q#݌[1̤/%S1Kas;5Qa~A'l"t&t 0N I^\Cl y( O82lt*\7u?-M_2b;MDO2 .E BQ%dP 8qg^-j(Bo$&eoch* ElՃH*2[;ڷ~'fش% @ןa54-(17v!!pB$zG|2R@V(n* #&aNghzÅѹBjr_N|dE)~}V5}g Jk-9l M4]!B &}hظ{\k5}dA"h*-,D#~koxM%qt SasvPPJOnc"(c5ϼeo b,sꗓWcjv$b$W *1l:&0Ek57']kvZ%]m+ʆJy K[|V{W`J9mZ+( ǖraH)=)(n`:2\h恉 ѭ?N b 4q;/_fX״͡og4. ̽S3Z+cG䍂Cz>$1(3bp*?UBBg}'% ~^_ObIr̋L2R&H7=?)) ,d2fOOŲ8,2?swf9*VxqD$[`k@oixNGc\J񴘻)r/Wʄ#O1_h;:ד "H9ì*`{Oqlyh0,ݚ?tYFl1F{pZ,2n a$BvS®~ІODF:͇+kXBC;@i:tE xge륕yHyo&F)6HJG D[%$Y]q ֑ݳA!nOX#KۣnF =BnSgV !(nVZM \3+620v UU"ދ28n(ZYj5%F'0B6!۱][`,Sri3֚6Y$ n8N *J5}@31_/)UrFۈDnmN3 9D7mp.ߺb ϡoo*4F!SRƺS)ndzӣdM~Q<t1/ 64&$缀!mKy`*B'Zz4}oMC H7^f@iFrqL:^?8Rr]VdF?rGf'W{G$*B5ʏш`tu-G!lN4,7*644lO%:i!6)h/?)*0ΖTLPy—h]ZR&t6 NB99eH7hM 2O-{XP--D6gUnfFOrZ74 +u ava}y ~!kv^rrLK:uJPʸ ^,08_?;+fOڶrd- HN ZKA LE"sǖ?;`'XP1+@41dSp:E{F6Lbл$5O{`]~ TpƒE16.jo:Ю׫s6}sFi5|Q]z 3Ȃ.f=c}f]fU jcoS%,jȾDg:Q| 媊$[G&(kDwVӥ<|%~Ƈ:?N:lt;UI8fŢ)`|z+[ayf%iw=k3&1b6e)Srvl$/LN`9H_5PWhBj҂׎ـfK[h $9i_ oLG/8;6\6pz9='p>V/^DOY 'uDӰ߿N፞(BR`)k!ԁ żoHݰշ:Mv Ea?r}ēj?q18P4>gi-23aDD$e"3axu ";,Pw8FtiÖͩCjfka2$7jQ =Ysڴ6{q~[H(A8Nn5fM~t*|`k?Zu·*j-0f$&o~;|۫0[ PS͟哴 sxZӸˢNe3ds-Jby'Brff5ܵ8{bUp̜9#@jN_7ɤOJBpH> xX5?wUqVTD=_A(G]_E5^pR!*q{N/tA:xTԯUDq݈8T"iTAs fW4V6xɧR[p?37BLO8|%yz{~QJCWM]Ps9{N$ җ_\COZIB(kk?Vs* #JO;5I IXn/BF\$;>2JfvIS6Ζ;ǎD4XۛmϕA@-X:"G+ C3m[ j%rC06m;J =xg.ZL4㬦 ~xLo*e.=JX)ʥ~00{L*'P:1I_BOk;b_4p,X`_%wf /@a5]Mɸ5ܵ0ْ2ZHJ~l$`6G3RԎ&˳(V*\wc.Gn1J(q3ld|[YHh kN/6/{;awGyp7=oTvlД5,=g=%CN CD^spB$ǴB .?Qx:NN`6̚RP)lI jhm˖ EG46tJ3]@Tͷpމ @m6JZ1ӵ}ӣ$ki^Y6_R.lNlPu1;Yp</_e̤ID{xKt$KEm\1FvӤ6}گt[؏e|#0̧ADG4] C^+d6ENwލ6ht:(g}w@+Ac8m+Њyi9:m%FZi3B9xRJT:%s2>{IJ]0\]V>qN#h7]t_Cfv|(Sx=PXHBz:Q%gTdO W `mtnb5iI/!Xət#R?s8&q?HU 'ib!1TŲ$({diaDkm)M4=U &|SIP0!lv4Mm|z)PYi?IW'|#}j@q(8'Ɛ:6ޡ`+PG.Nr9cWX%v\6Hj6h~Jr v=d` sQe<C NhXP>jtv-01CkE<2K='=%xH^U b)1Kq1qK"-+֜ SG$nG5?P(|O)I`9=>"k(LElOH~3 W ȍ& H0P=˃{ab5mk@\f~E M.[܌()tL sAXڱ4mGQPo;V˓1I.=+" ݗ]#S;-?RDC=z7+",tYKʄ7cm8ƁZ;/!CL˭0 SN]v`ykJ f )z:OHV2}5Կ|~5sY]XQ2~}-E8n@wcXHE{.JyԲʍ7Ee>"PӅXM0/d֯ta^OflJJetTYiVE`{f$hw`1 %# .\^W4+|k+6r <]r%"+`P-%?&t!-`ƏĒ} <"deewA;m@ }bY’ *BX ĝo sS,⸞2Ƭ㝭=; Z9mrrA%MT_'O:Ѻ>'QCwK)z?\CM5aj'*rKQ2ڬ8CBb 2f/6M̗\nM(2B v+7z{BȵݖbQ-͒ц!wSPt^݆C-TR{:s * Hl@7G@5WZO_^TȆH0ξ 4Tdͩx^"fH_!WT$R1HLNZ(rrAq|0` b_MlArN5-m zO-_(ZY "3u|`Z"ݦqI,ӓBKISJ.0_I2(^LֶjTtNKrBKqhhE i}B/f/'ଠ'%{x%7]G R$5QHqQ Ց6`|E)y c-ںL:I7KK}&=[ޣ,#FuZOY6'H0]?#0NԅZre$59=>YʋQ y.ppcnargWU;z uDLKw,m#+yQChªl%|lEhyA(HCu܎bN_q(0ZHC!_2O\+ni2;O4 Cލ.NZN Zom+b;K"ih2<{Ua;>mx ZC.r%׶:@WI5scG =J c^i0”c3,&,.#^d09Ge5aq'?-q˚[ , @G5L-:bYh6桎R;`R])uEPyafd :'+6lR.wJrvlV>_tE6TsT,Qhԣ1MN)e!O@s龆_5i4XyQƥ(v\3RާzrܬGu\7dw~kZ#(aU6ejvy^{e3v}aD,6P%%$s*:])xƋvJa墓'诎$r@rovxl]3.;aOɸ'?hw@ O`\s E_]<͚Bdķ jpGvcGOi`pT6֣[^ͪVɍ . Xq@Im6֛v~swql_P*3ր(OP*%w 5O"y"XsJ(*NcÞTK0Wa34I*6Rr4y;<2<0 ,΁o_lVEus/TWN$} ĕ.v/dKR-Cs4ٵ1ΐئ0:4%s")_jD )d[Ϧ=Rp9:}-N}Cj}`b4JrgCTwԱro%͋+o#Y2pf .Iv{x)<3;NHZnFoӁzRT0JͩI'CKՂ6L3~=}RFj#[> I ~;aƵe`~$C/~'p/qZ~_qQoa} SnEr˻ސ6ZuٺXԟ5 -dO_Pe;NG!p9Rړ#O4qS?O{ӽr Y?o-4P\NE8=2S nsXu"7S ad<ƙ0CPq$Qɼm ueP/-)B(L!/ڮ`ormkͬayIRǗ IڐpJFoҪ?ng/,/ܥ}@N˷'b-1 5۩0+&4-t wvMT6}u}"NL 3l\$AfTa_4+GG'OmGXlx`2Hw =oZ֓s 8Ȣty2u+~݁BJ=1`.xH uע?>K(hJs%**|ex۰\Bv0 <?e%7\6 A2FD.}s"oAQ<O55w$Xh\*xqwQV2lC[Lݓ;Y5(ތ4A l`M{ hD#ʝ5C(ֈ=D*^FRiIAEcFYMʹ~8V ܁k sWs-[,仁=#g`,{7pUNxn\N@hw- >nlKDK2 ('^%D=†^On=)ۄ jKrfA5񔕢}0YPVNlD$Z{f=#99?BfڳGdu#dFnqpCiʸsK\m葤E)>K$᳍C$&ɬupՏ J`,SpL_ Cv}+In}e}~SG2S+c>.&J:rw89.݊<̵(֣5|o Pxƙ'M|)Vz&uMAIo/Xs=?.$7XHW#q7Hv WN,՟n?d<>_mIP4ARL-/@XYZ:|]gFpޓ ߆ ]Y!K;y:l&/C ^@yAN<_?3z>ǐٞ#lluD\O-E$5\"Й* .Q)Gwpi*fPC:PFofBKC;8쁑븭A6n/A Y|bt JM(`SϗG[Ui YVQ ٤sϥKST>ͺQѠG ^wuɴ[[J /'kqrOK6;4YOkS} isAu؜:3EV1Lvp bg q\/ I VZB ")U(dE]d__=R=j7|BXxs|eڌ-`{B+ŷ.Lᗎr^v$7"FIuOڀ,gXsZ݂ƿ{DꯊwjxQ)+=}!pL(R ֪DIŝ(y S܄myJQF)'\~5iێ ;F#Xjrj+5E DWʡvFO y)v4.!T h bFC8FCiH= D̋O\y%L@Fjf\ ul'P8bʨ>O,į94Jw V+Q&̩ݾܹ6bGg3&)&~@KK@&/e2g~lheΏ*;\:V΍vԟ8r+@Û4@=IaI<ˑ܀@́dbUs*+ߣɎteSÁ?ɐx/,S&FEv4L `Μ*KZ6)l!c˩}Vszǹ#RO,u <*7xjeެz(q5#yFo@rZ0m0C6}%]LL6GД^ =a4z]JxTy!8B$Nj[9xe Fe8:ݨP"aV}bA $mR4 y3KkY Uv+QJcZL4Cq(-H`ٰAtS{.dAڤ) g&an ib /D>0671-*=H7 & XQ7ҷ\$vה_jH+dH8G>J1?:JQJ:[ز*hmɅQ(e/5'x989LxTm4\zԿ X)LKj0\U ̨ߦ/~p} rrH*X W@S#S"Գ|u஑7-Zm` f~Xxf4+o1c|T @eYn` }QX(^ţER<g Mp-cF`Xޜ޲K'eHF r\*$!= aR o2s's̒ mVf?:&REEΓMߵg0>ڦsUcLw_Ha҅ aHog,j|N;?-`R qˊl3uGoxna$ +>PfBR6$|{Vi\A| hWL0p Yۼ ? $n:Gek_Yv4ze@9C ~fD"+1ƤҼmxl1&d]~E36O7%7#g˺X4Oy+&P.ri4/)ʛ`>uK 3 +O8j,z^Pf=ccӦK(lc;\0Cܯ}&%8k]_5nUpĥ ,B#Bk *|7]CnbhR1puAXw@Rȩs-9!EIX%hԑ$D:,# $t)]䄒CA'qo=CNP&1(WW@moi}} KPp{*C֧!g3| lg'Zmv?3S$&b[3Fʬ'pOAc YݹBc~lR< -vNbī61Cb7A|- k:f Gc?@ZR\Uڼo h,Hy OIaRMciw",5Ls0;ѓ=?ggzl\9HwFp^7WQ8 /`Ѩݠ<>ɒ"b<;u9Y :,ٶDS~167Zn>1L DQ'nKZ F[Zvv"4W˃ǔEʴ ֦ |k 2n75 428}q@'xHE&c8T%\( )J޽h`04ê~z9wGt L:=$D@0YkQޝm'0#c8|Gxx+]p}}~bjq[ܙ _~9&3*# q[)x߶N1|T:a0ZKr2hRLEuQ1{j(Q#ڌuAK>0? F`uS&?X}.n. Kژrн1o~Rb?Pk{ ) mfBMy sL)V|7w';yHad&H_RYƼBީj#I?rg}X$YVNMyoS7ι!Q@lx2>4?He8}ʧ{27F_]KnnDRyVvӼ M^+wr &dq>Jm:xݥua5F֣w{i {5$D8nkk"b/-G1ШCXvTQ^}km>`1װ2(]΅w*ӳz7Z|w~v|4vջ #ɪz[w"4R8 r>tu8|N;OG;k6Nd"L'{<d>ÿX9τ5@M!d{\!bK1vRy JJrLcUwO0w *a3>Igs|}40R oSUng4ԡHΔ7{tGk Svn &V2kDm}lD+ nPB'oCN{xjzkQ磙 c4)-.=qHRnqQ(ކ !mBL0O1 8)Ŏƪ<{)p?D䵺U`)Xƚpupt*džh Pzsd4GB4XQbPl E:%) hn<67d([&Gх[p¢ӹHuDhaa%,Ϝa%mFth=n{Pq ZR(lܰT,*K sxz. W5axQ6 ѝ'ryYW[VODj\cO]J@۱ҫRqe\_6rܙtdFxc4Nc ٱ4yBZe0x/7O0YK MhL*qފBw3hֶKr詭AfuWuН r֋8";(53ho BHPA֊Z$h굖08-WC{myj (\XvA?dPML5&$j.K} /W&jN ⶠ:nF@ wTs b(w/abuSZZc"\pЃlj=m'ewE'63Ma:f )gE/E߷SX/^c^D7: 2U߸v|?xu&'_NV3`,j&&6iWg~jCcc|2b3<~hR$Lu 6Q+RNI*j2:95p4Qg)܎.9j6PH&JU ͝b$jMŋHvSgcF 5$z뾀| 7L3B9d~ϒDۿ /:=Vq2\scSGb/'nY߃E_MWrtop֧LolMR& `K nۣ,+|lb7sC,DN3*iZ=r'.Nz_NyF9t+DDLb2,8a2%U19JgU TDW)X9ji! }|,5}} nm]/:[.*ok@S䘅 -Pd<d;8KX*Y2)h^L b"6{9MS"_瘧,erI !0N2"~#lN{_ӌolX7)SADz/HZVgz{Ӆs".i,+Z;%jDi (J$+_[ I@HľV6e*{g %uo PFk5GoNo9;w b=j}Z.aU6r0҇jwB6tEIĈ$!sW#|nmTmB)Ңd}mT80SfQg!"la4':p8W"pPsu ߊxwtJ ]j'⫁eduU4W}||¿+wP!<*4;"(?Z "sL?HHo7"|rL#˧2^7͍9Fby{<#\I4fL>N)*v'j&ac`ka#&Aҏ6Dؒ~p^; #\݋޸$ALbv(uX%o7i˕X,$W&Xjc!'S[Ae6 f2?FήT\NTو_P*QT-%i +! _pd&.mGCEG͹D g৔`0<-J#.E!G) RqiRyn8l"c$t{mUseŬD5Yh@Wgi.`BB0R+HQܼ*WPbk`ܟO躧tv8kŵĞ܏hNJ/Zku^!nCb\6B 7pa'pis*fM+YZ[͓z[#1Vڀ3ϟ"CҁOK껤lh/#wL}B/\íb\_zjT8j=8Zє:m i?x`$-3oq_}8.˙q]u"b? R*T4kmu1_@ugl< v$|*~38kn*)q"[}5(\_r+՞|v)yY!5MXa0xz>]f教X u))gZ I J/5g38-}Zs[QYɋRJѤ7_7Mg0q0gY+"yi0Xk8f WcY'[sWnNWq5SΔp?Q ZTv'-u\Ls &tqyY•I}`1KN{p/CpzXFo}CSAT9c,睫H]_Ē~~iiyo ܑ4s9,TBVn%]'H 3Y;܅{Bos!5na1f;C< %WY$? 9E 95V8Th`H-S)WB=2Ƿ\4Qwwjn:k ?ў>_?ބΟWOɥD+qyG]9,;p%"ݡ% "42 bQjts9 OƜ{LU+9L`]U3{/yw;]E)d15*洆Adɐj38X+tժk1x{ٷ-$NxTEKJ6b1fcvwIKK #Q)+ZNdC+S |xA8>!<^&β3pL댵af_=v .gH;pfD0Ɲ`/'UʋtqM5cD}*>ԫ*?%$%$)d0JJ̘:@cHKB0ϥev~DJMQBgB3M\D< 3CfåJ$?=j7ɪAPz(}+܈fd}3semٕRYg'ʊr6 ;F>3;|L5Q3s'TE qf*|ttjMe)5A;mb^Mh EtX@p$%<+׳w22zܔR pʍ"JbqR%xr^E@ŧ/VZNdf`0F(b\u?R&@`|'c?s8pI4G22LqB7 kӿG"qP*r풉F[R!lߐ4dPA0BFVC sDmr;qZ9f=!2: %ɆN(/ߺy'Oݽw x*Bh?ǝaqx!k!,/P[+!/K)5L!&y3ξ+|8 0bz,vε+~3T$dkR4v05@U>s8 <?tn_#B%mpnU- @Zާ3an( ^I+gDdw"߳,dpP~8q0LT$W7L ol[OhB6}/56oLB;CZ{\,CIX^i$Gav%1fP~%:m@|LLP{X |˙O+ATmK`X3}6m)["u>dГ|, KT7j(\$b3cv~j5y\QYܜ'\^}>:_BɅf%.x}T6oiJ]ϵ"dА;ac7 [V.obݰ|Oڹܒ<C=0<(D Cv ZpkDHJ@BU> VEφ(0L7,p}[E*:vxl~TrP'[=Wr㩱u7j x)O!84I 3Lgu ݜ26meo6~\:.oFc+T=,󢥑 ='K>Ծ A T}\y2us{ݱdcߛ+R['ip{5-;dz88j'퇳z &GX#;اկ*:thR ?i~Zgvj4l~ GqPbces"<>pw)^; ;,_j.WZ> 7x'wuLvE# ~3zL[|xKSq@Xrxf&pm'b6{r?I:mdjzAC;~{i0Ыe 6C7$]+—xTl${pb`Gɿ6WJwz, z+gi35K+U¾TLT~،Rb}ɑC˛bMhREFg:|_oIO5{˶w2O#쭂~^)k Stl&1m+;r;.O,&%f"zމU`w<~n1ak{cgA)IefE~VGpI{]͌d 8F)p9!oeՒ̌<|$jGx3h* & !vdY۴\_%LSp~ZsD|; ,%?p'Y;ſA(­뱭?~M8w|Jsc󨪶GgaXT;AqR曌usdq݋pZ2Mu0=BETsa[J?o=NԂW2$-H0TAٌ6%CL8lb"I /{")$СLWށo H~gEgDMkƶ!cakfLԿ$yy)[k}-j5.{ySC/QxYFmm͏xT9yA C#%a,̨ ZJ(JC~20v,ܫ ,#`)w1fIᐧJ hFCX~sCs x+`wA>G^L6bu)3祥 b!XB%fR=grĀMi:©ԄG}(R^6]>GVURE(anAe G~'n>L&;1uJ1ܛZ@)Y|#/w7(1|k1zAɫp?tX o@KSr⿓8 ?:&c?(§,ݧN?']o,:ygn\9n5@}Av_.Cdc[N t,ˠ=vo|rdiP'c=2լ/z5JR vk( 2k@mB`U{5{?G&HYeA>L <^^9f ( g$q) 54QăDS:F#rM334_5;w z4p_M_fmxo5A䩑hph8HzsdXW/ӂvIme?w쿗SK0}2kbӬܶDFTeQJ7pG뎵-W:PbWP=L3T4Jj|Y c|c\57qTGpYY|r O!T/:-8u1ؙ _1L) w pO2':<ҴJc .}ۺGA|$BK%vTTH/@Nwؖ3]Ed`ꬠS(^RJ&8J"_-(BXq6*Ua`%") bܐE9c8AӸk " S6xYCgxaj(WXLekPp8Fsw<:Ƨ9U Ol'FZfڢWPD -z9<"bC'rBoaҊ[HшS,4vQ`Vx; :KrM[-M?B칥+}ǃ1idSu?zPDJ]vdh*ؘRapM_1tS飀ݫKkyj&2kNQ*+$cy,#]Df$o\:ź+jӸ"YU5滂 &1"H. it @Zt] al#G9yNSR%q63m!y-FU$+ 0uUř~*"awֽJ-v@\S.@gY%WI' 5YZ6°"LI`amHn<p:D7%Q+mOy%f>z!>XC~Hg2C.-Z;̗H$sTdC1(_־6ȹݶHm\p舌kUL֬cm%V-h=taw` Z?H HUIB0/ LH/LlͰӼ{j!lw(X{_q{vߚqHc75BҐ[eu lwFƒ|4T o'7ap[o(BkQ<_#tBt&>V_9\A?ZyX|Tk ue'M]0(C*ҎrLˮXqQMt2VJ'qDM A+P $*3{@ `3y"G>AoR+x8<sՆO(2S%DYjQ9ծXz! ~1<]A?boTc?ٰpHD`.c .6eI-줽`wfTlGs+ӝ3e. :YNl#"R`scjث}r\<.NXh ­0}cg4 V, & TjLVj1(ؒ { )/Sr[q6xx|5S@ԟ]eJC13mf;{dPE=U[D@[4: $+VB(p3ÉLygJCū%Mf *fSIzDYM JC@1|޹D:SGW\}ٯڞAJk6&($X~Gg0R.qۙUGE0X6d -@6г} wiB~؜.ߑOt~,g%$48s)ޱ3Ɇk015_F6{l >"WK[^3$o++.4 m-ʏ+Βƙêc ZPJhƈ(!@er]9?jza`UX2f>xC=>XOj1hepl^e ߐ,[vMOƱo]58DˠY,CeEkF^D@b ++-BSpk2 CyVxfˣgjJi1\j E/SWtX<=DуGb52R;]|9V^0KƞxV{-gbY3É8&@γEL2[.k=(+xՈiOq5l k[TI$iՃ^' O ^6g"J;F7W߼eg- 91'NaGܚEKPͬe(Yne[H?Xb}ᅊaX%:~oxRPTf$#&|VZ31+n* P&Yg`IBA ud>KXM: #LgG W}UH!n pVX~#9MV[ՇqO jǏiD͆i{dJi.fkR:/3CLG. eR+ڒwv+an{8~B;^roHhNDtG߸Ӱkvgtr2=v%\] ן2xřNSy,fmvJ71\("M G$F&v<'YZ 4KѴM5Eau;o< WLOE`[UP@; QS$g,a% N{Z2.j[JR34.']W辄B{=ޜ}qy %y8s/,%v ܎GV2&睸iPPvoۉv0EN6*RR8N1Z>cO!|nsus o&gi5fR+7=-d 5E!^࿛b,GMX $K<(t(.ǁHM(wkQS4~L|˦}I=ADɖ } ׺~m"BD\n(Ꝉwc'#!2~6鍊nrTqOg::A1qAnvs3#6獝C._S}; gvg"Ug}/~V(3i4 KBjۦV j4Q?402t*z3;/EDK&+_dj q>V&vj@h^G+&yucmK->->O\ê%S~i--͓Ra2aB)i7B)r' 9ܝz M? *Ϩf4?-kT++0&!X1mi#soU{MrlaI8Vq,bYoOO6iWhYT 9Lc pjJ_ >]~MzcQ&1 \ }'r:o4dxb}Gvb>>GbҝG(L~Ɗ,@6_&`zw(UzQ"0M.4fpT1c. g;=&tDأBz$936qRcN̗eQy\7؇]&jo8lRorͱ~'K'i?i><*$:-Α$T=y f> w[ڞKy-uK#ٴ=:jSxg2cݨ2v+z++"] >BbtD){{Fi3ƚ`+4De݁Dff BM쳼+W488b0 ԱE6_-%IX sr0?0yܧJ Suٓ+ ʐn.:7sK;anq0ErsIz3c"Y]ſ)$$](6Hq{tgY=0Rx-adRv4w3 >oNpp}jMQ? F>+( V}ㄠr ltyUn@Ρ^q]W2,>@{hk5у{z[Cbh]]-AP%~/=Jej_/oXV~%uLrҠnrH~js_N:_"BLR7~jdІ ny ]*w*=U7ZF +m=i(Y{䛜atAR,hZbLY!L `gbЂ6 MyMRgAV`g^q_HJhR`Y&+9X\pb|}俈jea(A}չKujbvi#JzwUE#|LkEddƍͧg҈Rj c1 h {F5r8j!\*c97&[NC`έʘ+{):ZA$Hl.,~U!~&즞:NeݗW60DtBZsC wo0FG819j$)U`fO7u0 %nl ,mV򃍬<;ȽRIbYuf9@z\dp?&Je_k \{_3a靖C$pF LA9Or%pjtN^*>MgÀp>8:o}l P0!l 9YPlѭP|^gbihd -˴檔't4~P }QwHhg,ۦnclnѽJL})~tЇM$~eOm4&N|T.geGb1/XYEMX^56f _ɜW7%n΍"$K t2_i7zs$"#^<7nd#uY4ج]Ph'P)͊DWlK ;#tQO>>]JÓ jod2 ңpb9Z Ap)SoeΈ|~_}8@ S n})ԫsmժh_~%j@':GHHTIUUMkGǴ&x3Ka~40?5c6߼VmS 5V"%q,/DjÑYx138.lyir!@T!Z*:/;p^:3 _*5Š,-!vd➇IQD1b5`CmA&iJ)& Dyc'R%M@vux |*W$RV 1[?ay(Ϥ $-8{[s4)/ XSYXz!fБRX;cc],T 6/ [AF~TFgj]]}wXaǨHN ǭ4G5BeP6 1fXg!X/D :Q`.9K >`ư/f3f$8A.bRuYA q@eoU mOkmWGEm,t1k25_xh3X'}뺆!Q*s hƃ6GWDT5wՖWC(i-/KH8#vcY9 \]~_ŃiM<^5μEU!% t66=&q}x$ "wҹ #?mDǸFXT+8XbC͎b7InF%#f8щGxѷ[F/PSE7h̑n  /! msXN x65ؚ b,qn{2^`bkLa9jgN4\c${nV13#}45A?FRAe\ZP4 ~RPé.Xe Ks'6M#%Д]n:^(fǗ:‡MYLn9c|KMPLKzzoJ+y]O*FR|*ZnѸ6 M3;*-&f{#YwUa_ _?uܨ]O:+~:.3g'^-++\bFXQX\D4+@M󗦑@ %>u_@Q`jCB |ĀBi{fc`k \_@TZ-ުYր] զ<^"unJ3?R3:l8%oK閞 2VuR+ MG2Zg|m?GS Dmb=7c~~*!(_I7-D9oKG*/K43]q~/m"Zj-`1z1χdeB^}wȰ+VS- [ E ȄeCfjߢo'F:ìAJ/pd틯M&S)FZ_) ƑW"U9 ۴eRt1Z#Z36APPp |+О+ +b>?[y=rjaTntGXo@+k1KI>qǦ$q溮b;DOb9VU% 6+cGR$%X}n В}NҜ7m5swMBt9yx9E-oO7ʘtbU fx;sHTˁh`o.-9㬗zW !qʷU{z$@c!1QҜ$^H~?J g|ŨNKfWy$ ~C$TxUd2(-J&lielmD7p74?;*G eGG~nӚ3_c:0\3NUJhpՀOy@%Ɠ;|7ݺ0A-NQ[hwGK!<6H^]3!Y# J% z-Z ̍?9`E{adUgN)}ZAzXHl\ݛ5^Lގiq0:v˩mkz$^ަzƈo]^yZJ<u-T`7í,7UnJ>;:۷#l\'[K}N?ț'*|\Fɐ% _{P! "q|; u|uW? -m{ DYDf{ԭSWz{C;`C^-=Sr}WBRe+_[yR VX.?CRP[E8j>)A#;!+O[X5-pc ۺJwfcEEthkl`M-¼3g+IZ6N]썆"0Wr/o/,X0#5jpk WI'hV&Ӧ7&_KPvW ֛g7nIK,52}~ }c dZco:&H$=Pn%'JqI^5dU3tx/ v0!w >2[aeq/;25<`Ph=Ti&er;\BX21!='WCL`8 .'Uu{A7ZCP{*,3nf*@+d #u9K8H}U-и,Y3 gvRCpRR`U kK'fLcTLt)K{7@lCyј!@vb-&*3v/2v΢sEBLOBpа(99]D2T'Klv  ^(֋#K6`U`H` 9V[iэ|nۤl7bKk)+M$CYиJlߛߏ~O.\Xs' O0$q[el" NWA\XQ3*췯fq_mQwZ"fDjPu:!?t>ᇟH{U(Rw["mÑ)-V\)_+`LҷLQwU=y7x>Ő[ξ/p;5.\35wر=V?7|ᕮX{e>x,žƵ;obOѼq;sN=s\%P?e'!ruGx?g .16r}8Hi2``uovMr#)[ J3`p;MЌ3tZ_]<G>P1 "٬3ghT TċYj{W'!W1{>#M'S(]4@׍9qg͜ntyw?3g]M87\>eM-9\_쉹d,{$>ݻ#zc'%jDY;Dmx=oU2` RP=BZ G.f@F.vԹ 5jcwt‚˷-#Q(AEa?CT9d]R0]_AJvf+ 8BpTֲZFW&$DZ 4n\)ᦆ||I[˅.p@ݭ|n]!ٺ9#.劢 u}_8zx*jxI̅/82!|e ry°6+};x^-T,17}B,l9mvdjyՐi}jԧT@Yw H7P9B2kc ȉֵ? ׽Eu6;y3//.PP\usM41ޒ,`*kDCGǑȠԮ rdwy,KѹIeԎZXTx!|Wv6-5Nq Yd7 @<,TrUfbSLʌ Y49?qR !3Ȥ[å3s_8 $/CZǶ&}@̇D7MQjҋ">8YjS֕?b#/! c#`+.Ǐw\*bUg?j3#*&^ȔPڤ>nyb)ly\1 vm:WOX9Ee>9P UV>Ƕc'fOV:O >5n@( aQnUR|>a Dʏ" BasBԷ_ aܻC\exp?:C8*G4g $~_"wʏl7hn7MWHS3W`xaEܠ!9ևuo"\Y@EX<{#J0"2)D:~ˬsDg\u#GKO4Ny]يf)ma:BxU=>xfO>񘜚|f@2C%mkNZ'xVd_ž`Xnebc_L7:,9fW3qDXpGGuF[*Q2 Fx<)q[Ab2(8 žRAԄyQp[ 2{5H+-]A/=)]ش/W tD23Ճ$J?V 8k*z(Ujl9t{|oi5<>jĂX$(]zI KvP"W=*#?!nիwy]KDž=8z%J{ef JkB@T# = CwiBMĨ#rkGĦ_'JV T'+sݬWfE_RWn[%ل?h+IDB%:δdN5Fɨ7|9ڞLAPh(S_Mv5FC@Go^ ^~$<=z}F}qrd}4S">C}a-JwZk008**1ntj,#AZbntE\H,# +6{X,zDj+)+~ߠlMr+(;#"vrz9@_@.s(} HH^x22S1wIZɯt`[։u4JEc0~C?̂˺ޒ!8,F8~$%RVB 4P;RG)qQ#TR)T O3"KBAlY{@-DTc?G!]p'sLB^afKث24%H$9< TLIvn(& ˱}zPZȓ~o)X%|"(M0g^Ȋ}[ExN jqr{Q_/s]v=^cS?8jזK1v\Z;[tL`Frѵ'coc[4aN%yֶ{j 8BIXŗ-*&OXއjˡr黉E3XZ޼:mQ7m8r8S?oOɾ_@&n![3ׯ؃۱4P34E@Dj kԲQ {PB .md e2 Z?ɍ(V.],>IH@X= ctуSb*?&b`#\qN^`\mxC]{Cxy_z!F?I+4Cw**@9"l7ɓ?pc@ualу,eVyg{w$٩Efwjv+~-8PpĕZNCaOW'Hy0o6jxuM O<豶xq{Jݐ;7@ε'ݪvܤSQ,0Wj'r97]f[mطⵟ*ElWKS. 4ЌDc O"b[GG @aiջTZW<:BH)LSo2CFK$ǖHkET02($s,֠HNTRqif%σclqu+:&shTܳwђ']9"Xk2ƥ26Fas?t,L Adg!<ػ6N@n;p-.TZ\(kGOM~:"Η=k(FMt:3kԻ 'F|~ ؁ych\4kONLL FIN_IZs\i-L~&SVP :,QjANx}OIԠޟ\2jR幙/2KۻhvԕnƮi'lSN,~5!lͱ/Me&?;O~:~1!Ava28m4=(OO l}:ڔWu "YOΐ &Yl2SըK$D@])|f'JI@F@ᣮ O"-Zzcn)H>BuQ \n.3pWbN6!0O[JRdLs:'pI5i8+ {xz,Y"h & p5ǵ1T_VPnTnk}=a&ڛNbI 'օ "I[;ϖ1.F'a=r eTy5Зګ6p ˲wSUQT(NC1척 ɒM}>~c ~ "ϊ}tH~O{vD sXO]M-,8iǸejA ` }PŒ}aJxݚe;\ EH#ǀ ^gBzm ukF7 "/BmGw F!~&rB(`YDOL3W:[]E`^OiO40"4r9skl)1 =fZ 2 ʚ#/py٫rDDw>b5"FZX +11?:Ȁ7hXW?{`I[&rXVPֳuW%@v:)61ᑇ$Ê#hP"=4V=ϓ I%" |[K%o|w+&ŝl2אQjO)W.}lhzô}BK" p-7gh}e-e>53c"N>Q'P-WW;qgoRAbWE9P=Sb5.ĵkކ\,9uf 9קkf/hp>U]O1MqFo6 F Hi*lko []VZyc) }E;^(5 #3,>:O4WDN>#-BglrOR6gOa#J͓rdtAYd<儷Ԡk"EnL Q 5ր"8هp\6o^C)0{3y,,gBқ:^Q^oc824Ҏx]gLƇ٥OmF%Yḻ,AhX| #+McKm*NrI~6 ;Nخ9v%-m۷K*L Hא#b؈ي-Y쯭L3J&0=wpD:/􌺋XBp=L!G0=f}D pgy|:/4c.r~UhTbT:1<l&QȞ]H&NtdQoA ֺA`FkZ ?0Cц teJ4^Qsv46wezQ [ eU+g/M6@>vKd lկ"5̩!;}ЎiJdȬ,RϷ˙2}pF! Q0?\IssУB@;X7Z|v9 7`K 0$ nY3Il~ }ҷJovz|q=+TN$wO[s❓ F܎h@qcAzFĊXNNEA<0c1'aXټT~qab2/+JuѓApA1zΖ7OMN֊I. wUG9%5.4y$!ox|od^J?%ChgC'z*&3g:ۤP~KAzjCL[\.cUޗB9FNSĔ 'C^"f_gYI;ޗg875t:MIV7tda "{x:OHB ڹm:Ҏ~Ԟ 9>.|<b AN]{znQLAVe38'uN(,^ߚvin$X*ef4q1Cmգ9}{Rꁷ+iQ5-e_ ?A)W]52A_FZg[~_`hEⓁ_OO3,Sf['ΦqG58~9l%ty;Oŏ~M݉HPRlE& Q[0Hs f̔\Ek@g~zԻOUQ.]FWn1=/;qNuK%nIxֻCAҬa$U1h{YL|]eK(樀fҙ Qd~,]pXs69]'F$N yƕMB7A F5˪6HeYEL{v,ADk{V |]'I0w"Y^cwV 0Mɋ6X&~ޥRy0;m8>y^ұw sӫ@5DIy+^,M'Y֨XD74sJm3`Y6;,ϿB`iY47M1'%㫠|<nNɂ~[Qnk8C,VyTHM .3a\s®sJrw[MIë}Z$CQ]8+ߵ2 pC 61)/[(^,) ,ߢ@kJoUDmp,8Y(8 S?RhIs-4i7k'[MVG~X(`&:dngTMUӭ_BC7PJ/ŵNmAd@ R榟Š L?5JQf_rכ$./ aM0tjs@$C7H^jv4p: Nke2a9}: МeW8c m 5fXW {"+ËoݥZ3/)$lYwhl;6*\?܅~>6| )1D1R)>W!)b`Kv;4&7[BK3@o}>1{klǨT.:ԓMh;],ViSU% Ԩ )ێ oB59/|Z f+L][Rǘ4;nlCէ`{21ύC~(A~rU*)>$H RA1/sV c6MBˉO KSSFV#%yȺ6w#Qo -FEE 78[CE6kM ضQ2srfvzjfpJgQ됆RCټV LBOڒ֑o 1OHYV.)I* Z- C.=OѣG%P[5)by7|<;4n9'97 F0jr7\`/SrCdi+3P*))ilO } T"`cxۃ[/>@ X29e)v|`+%mT._l(Jz3SRMa2)yɏ 1=z?"[rkc 8_Ym j _k"X]1LPi ߺs?2 V¨G8 bHŰgHCZNu;:+< ۜ8NO酏MgI&63 f,`Xʀ=7gؒ˻g-M v6bj/[R-ޞ6L`.kA9U.U'AvtW-ڵNH=@˝p CdVKip oh-N=- |]Pj0윳QwExș=)ō$JU.p5ljXtZqdT:E=VDI}'//sh 6Xv-_G(U@3A2ii=^d=ײYp&Xݙ?Mis-}@5GFWۢF# x1AB㷡o QfS5tw\BX2pJS%."ېm?-sYp Y}ƒ[t^ʯ~7h{J>o4c R s>ЕFLU3`Z4v~(G{Y-XqX5so (tstvi%4vnU۳,)ދg[ZuH}cγ <2 w6$GrY;'4-AczbgGJBDӈtAIB˛L̚nۻ^Q ?Tէ!iA5w+ 5Z~;(d ?f`]r rYdlhI7"gr'7Hԓo.pU{;nA8X+6Vͨ\UW(6:8~/i$HߋWuɽA?ι7urJHpI'\7n&߆3?+/oN&-<)#c9f "@b*+o >&ؘ!*xiN$f`K[O-)~;Rٺۼ|h2zžX{~%W-9韟viϋbjD&2BC؏ga>vFzo]pA&cƃC='k 6u{iJQ}xt6D_&*NK_XNW4Qo t*8;zH@P.rbo կ)t }%ʸXTR,} u%&/'z=HPdJHó Z)6+8?+Y<9|r.}(=6EJCbV\m3( ug8P"DuJ;sT@pHfGat9q;/ W{Yj/9PEa Մ-j?/fV[#O\(*q`ySƑ+|#_*3Ry!V 3փЮ͢W? GN;مk Cp" /SӘ&bY@0uΊv1)O e6\jRN<'lc䓑@԰]nBn*݌'+ U3kޢ,+Vw&a_ˊc/B!ׯF4> PDÚFW__X~Ve=UuNt|1٘U#DdkTeJm>,-O'hȆGߵdrcѹj25S'ּun^j5naEX@۰Hz"٢Ru3X_svt}׬&ޮ#OV:ˉh_HDa\d(L +Q_ptidïptq8ReC!! \%*8F \OH>.+NaL%z͚Xk= QT ^>>Z'(*hޠ!_~|n~lv+Jx1A/m7Jm!ٮJf)YuTĂCQd n!#x)ŗS ϑ?,>#ޱ:>j'|ߝhܠSe b_W$ڏ lBsˆ#lQwGCȓW(α̢!'>9R3Ư;hx68Af7 /&(p/KqR,o__L0p{b/*u2xTqJoJ%'g2z!Wg4~>9w5G-T458M0J!C+|pF|ReB0UdHMLs[|k$^4aF=U$&DW%3ox7w3k46f.54ájև=I T:1]y',Blrt0#gmWʠY }x@Ԁhq@d!ˍt¾s^%V{9t|x(]Q)>r 0HfM+r0&EGn<jꡨ۪1N]ZtH&/+{tʶ-u8/NIac9|ŻRҙ_¿sn3oQћVΛC=XWl;'ԥKO7_j" y9+Q f;Wiw>/!z#|H8.g%dپ1;J]JV͝8rfzvczGn@Y.:X1pLyD~FA2g05.@w%ܩt.Lv .)v "4"X|i-֊%V}ߠe"ώP"~%xN,[Bc?K̅ϦWw%edH>kdhkZ%e+-yӓJؿދEb;ŴyօXd) z$yn7w +q ԿnxHl|"hZ#Ҩ\nzyU.S6ڣhT+; rPH{nG={%H3'{&d_ UrϽni:¥Ѭ Zm/qn tׇtQ( TND7yS69%+0fGG ~YF Yy-$upV_#b\"UM mxex 5TPUr Vɰ˯Mj{YYjl,0׃ ,Y؇m눤9BnuX:h˹7o4P 088!1sfD6C~+[ϩ58x3p>fQ,aWsH0R 9]OАcQ3I SxYA78"hbJ1aQ|ԩk/#|Ham~_"Cw43PASvEc+mIm-._c+ߏsW)b@_綿~- .pbA`_- hhz註 jy#5E>d)LtF[{o^/gKCH76B)UtdTH/ʍO2#p'?^Y j8Qnzb"9@)۶DQ2Ї64UNA.m~Yf--݆- nlM5Ө<~?UZJ-X]ߎ#ٳ#ADž׼#*`Ox(|t(QbfS-+_ OTy^/-S./׉hՌrݛ$72E fuOKJfya +م1z l%희8b}VAgJ9jU%JrDӛ(Wץz5mٲ-̣]4 c*2 [W⿂.H!UEf]̮̫yK P J@N:I_5:+N|=?r<ݐjZuai*n&H(EbM Ot9Gy p g(aGl;r2َ|A^Ѯj!6=w$ gME:"L15P,OlaLR*2AMt/-AÂRl{d|gJ&,9ğ2\e٨_\r݈3uE|ϱ@Se4ͳv*Okũ".قc{x'NW.` ئ">Uٶ^FP-!~UOmpu!tFa5ׄoM:bk!;V5jvմL[ ,#(h0-<)H^j=u*y, WMУ]X"Yf dH,rK.d8`Ώàz6&@`![8Ol Nrl2~OfY Ǝez]AO9kB%NAUBK~3d9WD0 B|{Քq*[BÏVnDW/3haU&J!'MJw4Mhٚ\a$cԲ*>-Hk!ߓEJug,Sn)4:[sEJ0tþ]ō,ߑ.)J\{zcGKCȫcEITM*uBD"xw4,ם}C"C';"]DW5{JsD `k_j Ar;Svu?#žAh7$*[ӭ2nG| M{߆b@Eۧ#u3D:[7-;~x;,E(xu s v9X[F!BIGҲIjndP:O$?j4O^_ue%.uRtXP Z,.V*?-pYp%NMy};&Uqc&-:I!ucC .¥M1wrMw^KՃ-Vڹ#KPܬO.=hN-@6Zt/t5Zj g}=e^:]2Y1?= ̪ۆ,kĵ!_,횇ۣű?*Hjpi ]T3 *D1C,^f).q' G YlCh] (#F=Q1j|\M`_LZ~m1P] S΁/TF=@v)V\ qh8'] cKԚɳW;a]Rm@aE^lJB1sfNQZu5q|8'}ΔGR1N:3-%7]kwơAE@Ŗ+i8(`;3ߞ|VKMd7n86 OmpT쓱R sv0)C}]Z@s%&s"̼.`NrDip׃ ]FI!]̖75^i's+|pGC|+!PXdڣjj7-!k]! @E ڳ1e2t, ro]0Lr$b" j>gj hgMIcvkN`QOe\_gr͋ ,ѵycZ-|xu]l5{lNH ZEvM>i ظJ[4 ;fp{}C`S{:-V ptnTUXB`=C{/y a'5\4{qc!B_LC4T%ĮBODW?Bj·l}G`i*^0&-G>[q큀1`*ZG }zM"Jc&; {z0-IGf T/ 8gG?"UǂP戀|;Cj<0{gvL1_K)>edʯh`lY˓ mW5K_vlܖtAI=RqvƎ?/4h!\A=Iazmh\ 6_ƇyFBfT笋;nj8{4SLE5pOAƾBÌx8B^o'd^_J&AAuBpQK52.+tc\a6 }<)k5%?ũT nw~ X1, 5&AqԱ,J '65f!ޣF}6URQ {MWGYYC*ա,;K6@_|Jt~&r\?y|{%N5@.{ >?>pYk>9%γx:#ei_pJ~Zlh(dC^>Vr< YsW!s AҒhKk"ιNlЀ9Jk簲'Kdf\0#<8Z@:d@X+IGo`wky\+tpF_H=Αx;$ -Jg#űYKb (dتE7HZR $UjU^X;A3w5ꌞ㹃JR3_JZ˜-f[Me’?\R=)Qb40qmV|άCel!rZSzYV! xeʟq[   +c#[-t˟/nF=mJ|0i칎D<3WV(rgE$a C\2aCaMFu :6dHe=nS?Bt@0؀f/|nx>?ZeI>`3cᰰ!un9~ħ\v4 ȯ@mu h!pCxQ¬I54%,iJ׳mQo OR/e ӄF _},%%$HW83R[Hd&TVS5!Ɓ̳QH0<"f9DK2wj]T 3rM" rv7wط?>_Wpnϖ&mM!w$4w?[RɔA J6J +JN/;sa1etfC/q &F9E,BUZ34$NuIjDߦppt|F"Ѩan)00*VȇJvDc 45(x=A!N+O^m"O[ZDzxplPzqʕW UO"ͫS`Y?˰K#k~)5(cڵ.<-S&i:!f$^;Vؓ͠4D  &,weN߀G %U?H(\cu,t,+ ط=~~F4}j=1H^b&1GW ʡ-yQjqĸbeϜpK4Kc1'A"2xmdFr\qYZjjvs o(g6Wn5䝯kbMB`I+ ȿkd1G2P|s(gHh "7-z٠.%=wrܩp^~g5٧݌EƘ:zS7_6zl:(|f\J| ExO.`A8`z9+vS0S&]rb_ 3gHH,G@7ƜhOHU QE\֢Jsdkp2_ѡ!+~E1M"m.Hz9 ",J#N xX$pyz{>>_P7[& YYꎮZѤ$bb3nO^ͥ+SyXȳN= ad~lwh(I(q#F8e<02,B.Oi^i~yZf/&bsȏ~6-âeוEg`/GepIdx#Ί; O/>6 nd5iUj(g-nޝ)2rĮFɕqOp/Ћ4(hb#o:61កC0) ccpEńSQ[!?%`=Ar/W=|Yb<<֜nsdFm/eT0䝣$ET/> *1VRO=*9ʲk | ɖ/P9<į,KԐborD<)Qd&3~nf?RmC(y+sYRAѣQM[ZrvqM#9QWcYjL38'x&UG]:6XwKծfYd[s$:A_i!ONkψJ!+\5~.4-B~jS>Umgrb M[|Eoi`v#1;"B;bHpuY)t^/>gR)Jy@|;h[T80X@zYrͺ}2|ajfn{; s9tiry̲#v䙌_PfRFrKW:|fN'`ȍ}"n''~Hѷކ:Y}0=D_B8ކT8rCMH&;$ǫIWi"J{"2UĵFc7e?PvY6c-Q1fKNjTjOcl?JS|#&K&ȭ[/U w/N&31>^'B(dH=JĈpZSj67k]Ӕ~,b4H֏1Hn ^d-טIr`|3QB@3LOp?ֿs׻G[z\wKG*}_.Ƚ$m>&?zukRԔjH!OH Q oQ;~h0+ϗU2wz3݌9uї5϶dbO7%L@J}zɬI`z/~CіS݈M򚗾 Hc>;8%7W)eEnxiϠ`۪zJIw)0  O _֦ BX"BI"kh> E@X' j--&@<^(ݨJ4S8Y=`(EwӠ'DŽa7Rne≿TW}UR\`L~V-^|y ;~&5Gxt%L''> xJJtc]i.]+)!ZMklҀqY:v\kb<& {}"Y^YGE+S; 72PL8zl8„^ig`?ٛ*jSlW(}306)BFV&+M %gvHoybڈ/HXp%ui<:$ZͭͺU^b嬁˗r%&'0C/Ldu,_ 5g,갎J}YD]w3"&lPsnFoQw"N} }' C Q b_ZȦ~C!~y@MRD[~ābVEØ|a\R£7,nNlX$9%A9³@_shpTLzw/i/D@&y9f%~_/`ۑ?}q`/4:.tzx0oTB̦ȧ8B|qj>w}.J%ʾCS>`1䒁m(#Rmx|XP?=^LοnrLC3(Uf{YyAe+@tAEV4  0[u>g8;q<ˢqO^oRr^x:<-yP-z ^򒲚b2u 7 6ۂ.)cv!ZBF5N4M׺T4ڵW&+bOBYi秐WULI̔!\'~V0.Hf±X똹):G1O7qs[&yW\SZC{S6Q4pr;ire7d:{'!W]EHdl[Lk;LyER@ 7)TNh-jI$tq :욊鴆p&g?ܵCm^5 zx[rb_U(##rΒcx%Adjͤ6fQ(LW3V؁f`V|h/Fu Lp3iwj vB24`R敶sw(j./Uuh๸YviA? vI43y6uBO ÉMi쿽PVW^CZ+?,7 IVe .ܜrVچtUr?0\g؀֖;곓B1-c1ʮͧ+pEp%+) \!fMN $mPY ?3P"{+PX>0EwFv՗|DgkN=ΰ`跁LETMyPWKu.pbe:aLךA zvpPxj+ի$A0Ⱥ%HtN{N|hjC@tNm2Qh1u" :rgwYiBXr ID(stQl(j٭ū|@mϾZ#gv~sv}͑ʼn {E\N/'\'R`]˰!X[`d& geo-WD>^_Z*zeXki6?(q׌rgw +p6agSwVg:`bv$:Dym7 rsqGLP'0KFDN0p%5$ý۷zy04tP- (/Is 0{~Sy]CޟbP|to>T :ƥO$GZXR;T:T)B3fx̰Ug]⒥k64 ',B.]dǀR4Wix<7lemz}1GNL+ *CsAe*ӋD&,dĤ`DO[%"]BrbpX8tud?@ Ҙx4]atUlۦO!a`Ȅ;&&dsP/A׻ZY͛팱5$+ɖ .K7oX_ t pYˆRQMNƫc֠7z5-nEҪ@_ @ E3߂9Q&WL6c{r"xӬg뢩n}@ve#|PAO\u =RVٙxLq֐EU\Θkҋ)?RRGϮ(u{J3@xfѠPZs+n$>+fr}KߗqÌ%_Ƃ}m!K53ڟ=r6h&Yc& K> uCg~ռbm8DX)* ?~N#zu>Bl-)fL=,&ɥ<-|0? ݨĠtkًFl,="~Gt4d XN;1a&-Of6Ni]&Dì.t"PrJ u8t_MWnS{ |D|kJ0+o /^ۭzӣCjenv)p6[Ws:3硂+O]&]5G_+:^ӿY˓A(0/_WfE&tgX2F ZD}vx<͏V5jN=6| HPX 8k昆r6sMM#jЉP)Ș k{!;e8y ΢N@0`eU?2N_w=银7s]<^Ԑ?*LC4tpCtSc/I_+9D^w=Fz-ۍ0Ճ߃~W 0K`c+95Dg8 |I] z]ifҽD\)_Kﵝq ?!Vt\Oy RmtzӁ2`; ]6WP</Ihl0FJ&=ErтhRަ26V# n0 6>ɖT. فt Z̤# } >#+=ЁaLcn. ma@:y :6y?)3%oG{Ƙ ~P`)ӭ{oE\k [>峢H"Mg$m9b&p:\[J#ۗr~USw zÑ#wOH74ƶI]:e/*\hY+e8%S_Ycfy}Mb̃e:ۦËqƓL)"SDkK/֧^ T ^ 27^ \߼!x`4-`Cݭ#ko+U^Tաqw /d+TUjaUXRtB@c]k:7 CWSvL-BVK@-%جxE|*@nW+W_l)X+@S $`|+۴Lc@ea]%u)rV#3A,QU-;;2} -JtQedo\cy[D-3M^EΊLPǵ%sr=\ZpeWeA`b+;vjcN!%}CPiiw3%}PA<+DD@/TR'2 ?*BY{6-b.-vWKo{.&q9!N85;qF ފ`F`mZk/fؐz<1 [ФSr<0Q2,zaBzJ(MNJ bW3d̔z=S1վ޺9TgWUW-C  jCےEPp L >痌C^s&b:E#i6e-0)ۦ1D,ѨvQC-lẏ7ыDN? `.<#3ZZnYrQ,=!؍ l~NuwC{e'V dGFdTȍ)ʼnVnkGcf+lW.NI2ڍ5F[FaM-A;{ nR6ө;X9Ǿ)Ϣr0*qs=cxn%:Iҽ@̄"@ 8oϻm7 ܰ̂9f @O'k|Ʌ>9U3a'zd8$n`(u*X 5F[*,x,{L: rR ̷ϼ1[aK~,UY2ML`>AZ&Corm40WsWj2 i_hޟ^Q#[ ET|WwWl7^ͳ%OaK@Z#$Ijq`^9/SWZ`d6u)ܓf"y0kmnl n4H+`Ct8z5/$BOCBd´Pii>|W7h3X`0,kP`g6ذJ^0%JE'UJok$]Ћnܕ~~ί*v{<+qJ[5,h\Oqo]*! (XT٣m~wU {Q|hUሪO{47>pJ'c?E}u4mތt\͈&('5^iL8 eCl"6~'vpihMH𛹀p] ^9eUuK:s* XFx([>WjW=ۏ8[;~[ޣi[A(!jc2(0H[hJQ֓&7ʥ\U~9n @N5FX4v X-9μjK2G",g%Rv1_{'}&\o UP"F8 h菕YFU4X6 :!2|$qͿAhWfg| ָEpX" xqY' bSI,hkNZʟ[p)(v2#K==ݭf<ٸ2Oҷz|=̀܂'^,XB˄6AL'q;ӂnY5c.":>))t"{ù+pOCc͋A͒vڮѲj1rP9B4*OZA1*B߳6MLXȷ&'⾽#O+~W8jHR$zsC |HDp (\#VB[ %kwOzQU9: cL:8 ]78"t{5<-wrC!Bܦ9fe= WmF5\gԅp CGFIw<]D}KQ#b%0Ml)F|3C*_RN2<|`[pv0<'l|G&?E_+cED:A1(HFmX)q^51lbE…/W9"Rq@sJNiъuUr$1zƕM\8^͇NPdJuޘZ |,PwPлo]{NGʘ#¤fmJdĜ rq-=!D9~XZwƃ !zG zrɘky{5ϛMչotϟCn7H–ެsx̶zXlC%6|dR,DD>yq QRN,Ii_tu\uH\ԏl_ՔEύݪHeY!r{8ơ+(`~uq~ FE?!!|`H 7(x]{Th8tb݈8=s"wgh219ip`=Iʃ4oCM̓$#y;ŅlނtOZ#F5JOή20yB['8`ᰯH!WwX?-[] gH3j"2f" 8X &Xf4 ?Bq`*|-A0Q$ dR-]z <̮Pނ&w;M[hW D!"̝PT/N8Mn/zX!EHU30(kDګ)q[Rn'T\t4e>cM޲\dh8cOllKUeӆ3fbq >,KbN1A<&Ti>YHW=z:99X$5kt7l(SߥiMgbw'jbp\[YŨ9 h Xzu/~1gR'z)kZ"*# #YڱwHYabI hY:?b'\lkW0Zc!Ā+>}Eb){vzYB0in- dBr=.XJ`唁udC1ItK=isY(+NZtfASC@I^@XheXgKohE؎; qiΒy80dctwk-2Aݿd\0.=qĵ[͛~My>(?»sOS̊DD44P)KdG)kY^r`k F֯ cڲH40>50dU5ҭ0^Uu'F$"TEMT1vsu+kk7.J _f?zEuϼ XN.:`qQfEʢO^ȑ3DV|Sʔ.05\NOiQam<Ɲq©/ &,d"BhrG_߼W^ uEX9XTL{f0%}K*"e@zP'hfWjDA+Y3L"'1+W^I] ;[p}D_*'VN) H<6*rDC& 8q.c2':6q*K9p>NH< K;zY9t/|kXcMhefzA~49PkO;/&u\qKu*/R4H79꭮W\j\Svo`ڿ6u"[ZUPzDb'2ULS44#pţ[1LE(=4҈;9Q8hZ(gt,Y¯|>z6Ǎ4EabͭGQH$Tuo_4EVv6DM8+I3ՋRK$bَR(0YESP̈́ [!(4$0/pw۳QAoj{r5= R˵'ki5Z(܉l}Aa_q::'T@W geSCjlx{j%`ݖU]ZR2Yk'Vѽ߾l}t+ʲsC f K )䲩9Fex>Ce+mI elELk $'n]}/`CLr`lFL(kZ1)Bph$4?C뱗"D$WL E64n*gT ײt]0h!A;|ºUq_ޟ?$2߄ qϢ ~Zg}|@<fOFUζMqxnh4~4|* lb(&P7璙+|\A:Vs Qq%@OT,<;P; ^w껦!_' :V jE9f<E쎭P R{_KQo El4ni9qO sdMM{&Mc~(Vw*7sRx"=ˠv> r-Z&^Ed9+C_X{k`-<".?\ q~~c3~fO8q=B5T cc*1hG@:%S2G!Ae|(|Ng,҇"\9k~#F֥>9LSbM lSϥoyZ.i-S*Ni:Gըm0.OC0ķgtɒ$S3m2]K;'N5/%Pz#%$okR ղ4A:mEBX_&*^bGVAB{]oj/f"3'e ZBQ#76%K 'DO զ晩$̵p_(AmHySΤs@eM\q\GeI q=PWd2n!+J_7mm}1/X7#t.E ,^>x'sz69J:4&̾1ZƗG/#i,:7Oru2 IUi݄`~y~=W}ϠqM!sU|q*8f#%z#٣6m!k$ ג30FÎ- !r̘t#9m,bXmƭ}R2.1K~-q23J jW%F,8P[i@*ge@g Yڳf%PWR/K<DW]]0 ;hEQmHoVzG89)|&9jPdkZo__lҹQ]_K?frNV?wldI*{$HE+ 113|I֪-5/$GCU0J0`Xp~1z .dx;S:n_8^k!C?܇?kngzon " lV 1/4UK"O!O!yߝغ]..G\ +TN+DžU^BƱTiC;;z;|~OkO[vZHREuڢ e̍U$f0nxI16)gL 2QGhf€AQB~,YuYB4Vai.sL8}KP̽+H\(0#|?ys*\[\=6>z<`?CNw_| 7o)r~_WB;SNۅ0!0ޚjuR;j,d0"3abե z;:&+haMb7Kֻk^YH<@L:n3prZ3T.ejߤLD=}yVvg³ǰ\0hǎެC :]tnu2֒H1Uy\8*˲YG.GBT,QtC]rt+_4.w^;jמ[vxk??c3İ.wK4W3)U"_r)Q=F_zqg:Ao8'u(2}0% ՝"1¹٩pغ#HL4RAu}p۔(>sBQ>ΗhqF%c5:Ch^d _P!V$O!GGxB2J1449 ϲ ,m;e` g!͈,xM7y);,R:.d:i`h2T.$␱!2fۘLbUܵq4BAëa /[Y5vp$.hI M<ߖYO\J,)ߏl;")ώA`vq.:Aq" E~&Zc u~ 9qмit(${^ՂnAJ6N;Xy*!7b^=:Y G5&htV}87˚.~/zXWY=ʫ,` Ycwla9 g $wx|*zFaQe+{n]?W]䒢Öαؒ'vLYf}փ*WhTdчx\Y; $-|# 1csI8aOM"AЇM>=18]{-]>9V'm\q*pglF]d?*V_>w~ȓ0RV]32gJ- ;Oe~&|L"hG[Eq|X*ڕZ헉ց*XgLv:5qݳqGڴg7) ee,D .=M?,6ſO%޹4<%${&%Y^Lȧvڹh3?5I; 5$#Y ffGuui&ovJ]a`Y/,dWLjZ>}ǫ}M{jXHzpB?BRdT e}:+gv &;3bvO&BO[gemT [=E⒇/JU~0{*Ogu*3m%h,B#qeLkP"aCy씧O2OiB h7KgsQ LlnIY)rtwG Pi/4eab`Q7T;_zo-1Ik[ P}[kť3T(y T79cLp@Z4^`4?D63N*|>ND]C|Vw¿!m`=:؅@$;$Yc8ǍoڭQ e4?j%yx.U? bmK+HF%mdݼfDp DMP-NI<'eũ5Ҙ'C+]>%=ċ:-pi=NMԱ7eМtOۏb~aJd%Ąqzpi75>|~>[c6;Gw &˱h,R$\bӆwOtT(%&%RM`-¼;EDs.h-q>PF,Lxܤ1!Qe8!znug_-Yp3 /hp&9i҆3n4?)&-CQV5&CɡE"f# i ?;f!| Y'/?zl1!4hMexM`D-"sǜ#NXS4>M?ynZSU~B,Ȁg <&;LϦW\yR/PBY|4=Zo1dHF):~Wug9yM Oc,_(BƂ,WCG ^)QCT] i1Iݴ6 (̇ި$ϻ,hC)D Ƞ`rWo{|EAe,!h<%Gfq--dw`TQQE|yWʮ*>r1tVysF "2j@?~Ií+};L)_dXZYw:UXM a()/†lBV VF^tHHy? $%&޴tz}yì='-seJ6Ѭq/C2aB̶tBoF0{4# ɔ*K0bNWV#),V ^A聲R= p p"l|&zvy 8M/MrD`93:񼂣[/s'{t+^jNo>'8?mzUsUlrr!t0꾪\c(^߾0Ml!GaoЮM/I(JYVU5AKm_s[VTzf\܇ԭl*xF[E`;qL>Ĝ]ztv3kV&#F{ҡqE'.(~AW2 AR`k%p.'L5ρ9Vz5?vJ"%ia=YˣʳQ_1AIɀA1.2o aHQςRbI`$1'v4؋ciPrɇmWE? FHJ13K4א_d, #ҍ|bJ$M}}]!1oϊ_yΥgJt05Z`*9^+okd\ ]@Q;kNK Pr:O-\ܐbDٚ˨?"u3me’\e:o3[[ I.VO}|)@0Q&u{,ivS~kk:c\\yJ!޴ZX QR[ KO!/3ٗo{tBB}]M> 2pۑAPT?)elFgS(L c+nkCI<B BQ*nzuoo"u.ǙS֪car;O꩷K  Xh.m1ɫw D_ZGҋe+Z_'WX>1!F;\\ԨvVN|#5zJDᨋ(bL"&AC.?`TsUʃg.,yu.0aPi,iW`)0o5f)ubmZ,)0dA#AaFq=2; JFq: }w3MXȽkt2@zx+Dr$Y/Id#9DeCK*sSWnU۫pcmR7Vi< ,J ֐Q>ƬOʌ.{AŹ)g 8`&$]VnA)'To2qΦ!BuΓb_ܦ_)wxfj&{UWsJRrlA* 825ϳiQ2'[ 01  9Hd(~iu%ٴp3yO:2aҙVӪ0-t.ۖ~[ki(: N,]S±Z]8ϊVLlfѨcQ O6p„{ `(]l8 7{n\lBɳTĵw6vtoLk]%۲၆c *c#"c!gJO6!dcesoꈊ1G|EƔ @89zut䓲GOg I\Эh-o!bЭ+GDORu1hاw؎VRimcHǗ.;Ju ~n*'+[{T\"R"ʉ h[-![8ٴZ͋ n);v I]x(# PM̷J9:/ ËvP ` W#>U ԟ]f4%yԷ a$.ToXΒi/X`16v^wix%}9LM꬘zoU Lqc;46D P*)lfZ-Hno1|50(#_ֆP ((y; h3v^0"bj0O_)vd4aK_kԳmjKpŝ/c<$#,l `WLZ֐F 1bNGت{L Z:"+y`fzQ9Iy|= )ńkQ{L^ӛ9|jS:Iڕ@>#t=]fWtY/CGLո V |Rq#]m&!7Sm'\$Rjc3$٥5>f#_ՓGtxM{@GoFDw>ʽa̝}e]2 JEZl@}oRv= o ΣVao(2>FRl.G}4ݾ<hl }!.Dƽ1Uػ5*aXYkTdt1^JxhiKC,$_>Hrd!Lb~R9nL۾՛=s8@xM }GZ'|~wN" 2,jnFw /f@ҼR].N L sG)FFwEM>uiQ:I;h mY]!BMda4LjN)Ƹ0oI{!a>x`rٳ!ooX )GЖ|7 Im ɓv:<E% wgR>(FC;br8L; &7en㶔=ۍ^ac|1y=~w^l<MʼnCᢀV9=UK_+Z|Ttͣ8zvL(y)! яr*Uu9ǀv0|~VPUMנ'}r(rWi+,8= tFԴc/ @|Q|6Sr${BtVsW6yj=j_܌@p?Hꇜ5ſqs2F%Ou;f\{[5؍, 0hn[ rĪs`X* s SL1V3M3nAMtt_'_q>Z~![8fԍf9mg(WvvkD'(i9ϝgCFN\v#>+SZ SzZXYr+J7gכCZY[p1:{&By-J|PvdՐ&tg%f,)[ 8f*#%˗5ԦXF.ka6EQ+$sm$`uK}`e(Aj6c?ےg΂&11~ϦT{# YZ