From e13e465a4b54050bfe0f4e8e21568344ba109093 Mon Sep 17 00:00:00 2001 From: Michael Date: Wed, 28 Feb 2018 16:43:29 +0100 Subject: [PATCH] Add article for BINAT with IPSEC like in core/#440 (#12) --- .../images/opnsense_nat_binat_ipsec.png | Bin 0 -> 22957 bytes source/manual/how-tos/ipsec-s2s-binat.rst | 18 ++++++++++++++++++ source/manual/vpnet.rst | 4 ++++ 3 files changed, 22 insertions(+) create mode 100644 source/manual/how-tos/images/opnsense_nat_binat_ipsec.png create mode 100644 source/manual/how-tos/ipsec-s2s-binat.rst diff --git a/source/manual/how-tos/images/opnsense_nat_binat_ipsec.png b/source/manual/how-tos/images/opnsense_nat_binat_ipsec.png new file mode 100644 index 0000000000000000000000000000000000000000..550952f7068041d420c51bfa433f7a935e63a033 GIT binary patch literal 22957 zcmb?@2RzpQ-u~UzP?3BuOP9Ba-awO{GHiUKx?>z4!mR z`~A*2&pGFL&i|bM^Y=RE_d@Rb{*KS*dSCDBy53*!%W@Y;chKx05D27~E=nj82pdiC ze|eIP_|3at4M_yT5yB;jvr4yLjdVDuT~S@yHZf05BE4n9mi@kskxg5a?$bZaRyx-B zB9}h9N5E!tY&0dWM!aHH9FtszM#fwWlckr2?ep9p8#T@w*X}TmKN5d*^Ttag_gB`k z2Kz4D@~N{KgS2KE#!^!PMiZ7lbAz*cml_iKMR`_e#^pJ`!(_^r#~&Qsog zepZdODv27SKYqL(Tw9R3l=Cy{WR<2EJssFJI`2vgf z%z=U4MjBzEt!}Hc&0Dt$6cQ#zTGIyWV{&qG61DQi#vj!`;od~xqI|$UdfKp}#bYNG zkJw4lvX&M;PR^S+sLIMpv(bplOqN}RqXPqKDsN?^av1}p@ay%-J?m~O#o=BzZ{B<> z6J)NZcXRA}(J=pY=M`C=`@brJhWq*q^!05fd%jq-(9_&k0b#&;t!X}7PklG4ol zHk0n)4Fnn=RUumvQY{hlmYQ(4wVa{y@87>$6|LGeyxY^1>~s*k-1EK+*bcq)~q!(Iw&Y8FtE8Hww}wX)=lJVjC{CdTe?Zb zOFz-I7PHkQTjf1DP1R{{CnhSxU1=mFwr}5F{D72}duUUorrXNok>fvo6rw~H2BP+; zCM+-?J9e)82bX>&R)!ZFd!Eap!9Z)85ycJ*D3~t<*#4Rga z8j_|TYH#-T8tanRotKi6V~DJ%cy#yfMtaAEi9G>QjWP0v>38he)0I8ho}SJXtr!#@ zewdcF0GDY=iTt3`S+>B{sd9E(+kwXNvq$#6;v)+U3{*Aq#J`jIr=^uUjpvwZ7f$6f z2QZ&F;o&8+R2px(Tyoe=Mq+W%fuEm0_^Z6gC#v&o^vZxqB5970Jn>-+Yf*{~3Ro>ChR&5$vZfkDVzav?aIttD5@X z-T&nO_U+qal8@fS-xGiRlE=c)!C|qpz{%UIq*vJ`D>9P)=+Vx)x>U_9%Z@yIUS8fJ zm*q_H*SGr|d>%e*S^hTKo|W8YiM3;DDk-sL3%zVqO3LKY?7^xq;gZh00+(f;cJ1bV z^|VKQ<$<2}Ss3Vfd9%s`la1L}tU7X)qZLUHiwFrUeg1gQb7^MqiiSq+^^!Razvw$= zTM5PzHV&PG!-B+p>nzgs`SbBJXO0~^R@{^+d#!upty|M`qwQ(^r?7XaiaE@=-oANL z+Lt;rWAobjjlVxxNa)BSlT&AFp1sxK!{O3_Y-}1ci*d^FUKiN{)4Z2crJSq7gn8{o zvU3HPD5l7cNw&1xd;1nlEKDBTx34~KoPmMi#q;OcxpPL;4@!D-a&wsjq-5z60myq~utYKIgJUTRFYHGT)wp{G}E<#L3LPMnb%^RoS_3Q&Y=I^eu#oG=&di1EG zVi%p?e5=t%6&01ywv6SOdJhSk{wi7z@z(}VnibNTrDWgDZ{6)45TM*> zpRDC`EOIARl}@&Gp;T|i$9vm~+H6=gGk;DmN<~j$!zqhK=jRJWD_)Yw%;X7{ti1F- zCFS%g%$Kg!hFm^F_z*JK*Sct`k!gNOqN%Cr z!sA1UcITgay?V7orr@}A?A*CyBH>*bW~vuTIz9JXh<+==!p26&V@^$WlHws2`OBan zi`G<+>i+mf(+rKoc6u!>t>xKa``IDo*O%X!BqSu{-{_UBteTwUJ;ltti&Up?U+?5? zm!+A-*=8O2P=T^A#WcAvp-U22pII3eQ7)TD!~6TnRZTnMhZw)EZM%SCBg1e83o6p6 zn$x@V!-oii@)s6u>9PE!W{C#~5tEKuI<-#AqgkUPBcJsq+cL~jQ&TB+oR|7Gu9~cE z&^21~`d*?%i0HcW3NT=1q_w`Z^qqWor-aSYjLA}UWmQj4WNIoWP$o3=g#X2+L`}`v zLD{*ko}M0h9=f;!=fPW z;>C-xv9XcZkY~^87pGBN=DVC-T)ay^e)QLU+0vqhGm|@bP*by=2cVZ`SgB`k#C|lj z9i{YG;t^E?xI%9X#a3$ zll&{b8>1Sp;^X6A)TUPqkBsyT4s&MhO>XFR{lp+_e7 zB3M!c1Ir~ax(}qO`#_@(>NDbZyrpvZujP|a{P+72LGY^Vvvy!v*7rs>6A0Z~Tett; zUvQd*g{8rsl;FF)m;-ySOPRps2;^vUJ2n;a$iKXADG6^Iarz^-=Kubq5{5}r)V@El z#XE6P+8Q#FwYIi$tI^^|-z`b4|KWlE^O?#P8yFcI8>7^c?MJa~d4o3=h$$aYidFi= zjQwmnS5{GRHQksjk9P0g%eUsAKc|>8xOnlRr6pS)7@-c47D}Y+eR&vn1@|O+sPxXA zJN?z+$^6$7N86O+NeKk8bM4~_4qLEoF8I+U&aytx^}2Xu??_vQkHtw=*2JcmbDq1M zuujrVp56KAcCH{hTP<3#tZ(Y+)29KaRLN_J)F{{1jGa9>ZW)-)BP?8?5%mHKt!XRn zl;dc#IVv8b%u5clri6+L8G3S`FVp?ijFB}pH3XpOuf)hH(;j7G zv;5$`Vbj)K*{-X(FT69Yy2g5Yi!F_ejLhT?#b=rw61r{u>Hc>7G1wEEW?ia5d47I= zi+Peph#Je<%5?QPadAp^?L(B5cH^DG^iQRtanf$n&o&U;C8bJQPx@bMiH`**IsuOH zGhQ_r)Yk$tvt`9ey=WjxXS5dfED zbimHeuFGX!OKY6r#0g>WOuR`5ua(H{i6dlvzkWG7IbD#Hd>a#kqgIV)Wo5MhIlvVN z;?VsB+Uhkh)EE!S(mj!bJFsucF}YR5ai+AmI10Ea(SYk1IF_Umzv#S{Zc;xt)?ucv zFCjti&vf#n3C>(X|Jt?7YHG%yySzR!^74LueuqU}g_aeg6*DZ_o65?(y*6*WbCoT* zN$1F3J^=x81>ovuy%Y)h9M{z)T&^|40|Y|N#ez<=Oky#|IypgJRu8rdA~&j)p}|V- z{jIz_K4Z@zzW4Zwh;a8xx|-9|-%oXr_$7Fw=QFO`+G<>`&0x>3Uv@uB{ZZFx1?`js zk2YzyzdU{YF`clfrKP2=?&SO_T=%a7wpwYZ<){bvZK!~4@agMcACMl@$g<`}V?omz&P)rE3I&v5JjzQJP6RRud>5YRTR1%>?5r>(1X$Qx%Ra_n%`>Z6^flrjx6BEW3)76;{CpxC-p45SO2oxc>YESQ z8^uACr4qlxMW&5$K+3pc$@AwI7Zw&47two>*SFn%`esg}L^$acDF;pPSar?sT zd-SVgtLqj?eN{XBO3dot`d&O@)?LatSE?~DG z8E!imK}O+GN*@ag3x231(d*;Tc>?KY@Z+$q4t?sa zX2%HmG+IWCgn|93`yw`UKid0`{KaO~Nr@oV^?vt>55o^eHXAEWEbI~6^uOEr|CJ3z zS+L%YRcgET2k&T0t^f8d?&A<~3$a*NQvT!7{7-C3vVC4~Lqu&^RaKMy_K0mLX-jOc z9l%1kxEGAlb3VFpa0^{c+XCJt+1wv$nz8bAx5LVq)a1TR@maFls?ON1GoF6**oX*m zhiSv@DG$F?ATM~YIF&FPeD_;q!qWkdFaEB%p*^3y_i1ZugLgEKzQ-}nzQH#C&VSi% z+&bfH>gRWsEhdNS1!t)5Yn2{Gq3Zhl7*T zVPVJTULaP0xooR0ksz5&-QowRNiosUiRx)@0iQy2>=0_0nd5NEAVAn`@)s}i*^Ru6 zin@OD<`hxhv+6WAHhy=RDUS3mkuq!58rV&>@hb^kIzs=z=<}NXnfjWl6vKYtfdD^0 znZMYPC*^(0T~dEXBerkeI9D-MbZhc9xwrmcT{O1t+}xbR^A|68^h@_v^0r$-`moqb z=ND6aZwtZQP&%;HWQga&((yZ9ESuOuTYh;L zvX>6b2Z>2UQ#C#Ryg5)??VQ9{7e*RE`NZlmNO05B(}FHb>Cc{BN!Bh{SzR@%3=Vku zRME`H$!Qr^ja4gGiQ(DlUFRfl$AJj|1l()1p|b}zM_`EzCn?6>7k_=3X=Z9_2?P?@ zGNVN!cKwr5o^~9NLC3&=-8NciOlNB0uu>1B(6HRwO}~P7Ym4ntVc%$c1h}KI_A5?_ zSx2WU>Vlss55XF$ByNSQ@?xf-W5f~%^N?Wu0dM)z#)^t*horB8ZT0kG~O1ng-7Js zvu9+ltd8h2ik&eqF)4FB^{5f--Txv5CFQT~?i#?nsb8L`^TPX~TO&0bLc+qWn>~1m z4Vsr1`M!O$w6rCU4y4_l>_J1CjDsTgeuF3&y1g(* zg4_P@HG)l&1Y^_Gw6s~Rjbi&ee*-P8gZox@vrN3jzt=yu6?UnsskQtKO22>4|IeXx zYtb@I#3hATCB<0uWL_t?MaXwy9Ds&{QRGo}4d?}oL{ z90Fm0WidA!=T3D;;}X%b>M4<(v5Mq;SYuhs+(ULCud+5Z5GDam2PO$C3(IG{8@jqb&}pNyuw9%o zU}tCFxzh(^&~0fj##uy^k#XBcbP|p+^&`$!lIMrE^jXzD^cg;IMmj@ATw+CJ-@@u! zkNU9`{com-6`C^0u~JM1hb zL6l_j?DuTnZUQy~3R)X=p*0JyqCIrTi|P3B<9vMCU||w7=1O#hOtG=|Le zz{eGEJ#?3?~Cf6HAh{~b6Z~n%S~ekf6lUKf7|tx z5G>>^K~J#*5O)iU*mV9Z-ao&ffc5-v*hW*4a8dAYuo;>I2gv*{9+#4m3g*z= zNOpjl8kno0uHNXzCND2Px0xd1J8u%7)%GK31<@XnQ zoP5Vw(|dv2C%zJ?nqaV5Cbr5-j}N=)Xz%!VxWE5d39xcH0UM@vKK;@sa1OZDLJ3wZ zl5By^OApjoGBYwPx=jh)R?u3r($ebf_b1Z}3LaelC3gMJ^nW71i9P$&KW)GnR2bha z!|-f!(b+|H!(|<{YRZU9r+Ik;rJ~8bCAvJUi~FasRc5ueh`AgU+z?Db=VxSM5;-h@O1OGW^)`m4j@kX6i%~-3HLZItl8Ygr88Eg+-l@W$#~Kq-MCG+ z(3N>N^5TKpAmW78+DQka$vX#5)b2cWqFN*Qw? zsj$@4(4Z4`R4P9Lf+N7CkJ@!3knzzfjxObBJ zfqMS!8=#ue(S74Z>thhAp)*2vK*Jcyf9q>QgH3Cy0i@$b255ebc1I)Qdc*l{h@Y7S zRs!FC{`f&gM`sD^sf;oFYX0rhf`U$v6wuKvln&?SRX)gsWeS2Z*j5Mn>}{b(dOJEMHq-dcb$Y@TONpC)M+ zrrX-05o}NZ=C2<=bgy4OC$VYUZYYRZDJiiU%5rj5 z&?XZS6MY{&%64-lR0cy&UF;7xs(AT&T%4dShXa0Vd8>uA{DX9GxP-odwYFBCl9Cbx z*@@xgqRu>f_V!4X`1AA%__RPaEjay;5AmbMr(G}Ejb6cEh^V?UFl^nj#rGhuT%yW8 zvSN_US1Td^cPH{Q>RW9t*B?o`b- zpwI<#8hnEuV!Nh5)Bp@)yyL@fgm0Hna@3W*Bx613!7ZWx-99p9T1oaW>f`InIE~u~ zAfT1a&CAO&YaZ(lcVmb|U$?lp7%Jk@hBgOw+}he2yeO$lmuf{a3JO;7*)Q0%n4guk z_(W4uQr^rF5)mm((lULV92D$@%Zdgw*M59#WW*VlOI20XE)aV8!t(OAty>)(9p@mQ zw7rC_2?rRr9(NPlBYEcJ#(X;nb~p#Utn1gW!>fUxZwc8QS`8L%b!)2w6dvM|ahfyN zate6*nQZXhXrf~Qm&VP@W8*KgBAvD38LD2TI?{Q2S#bf01nt$B)lMt*lcLb*QKv4cde^12OM@=xpDsd7f_$|*<`nXz`*gg zjQFAX&sZ>PgZS-_snl|Uh! zxP5}bX?=AbofKO5K=|2<>?T1nc0fjW@C_NNFlNPH<08EhcCrK3$S{;wRt8)=4r9^Q z+WPk3n-eEa{QC7vLf_c9v{T<K5pVN14|vb z(u1`E9ZNz7e;2HPElujdmc;zjk%%Lw0>+$C1zy)77F7_|g3^QLu-m zV@dz`@#EZsT{$;;w=REom!Q{;%GKD=<+{w8R}M7*TY2xRi3eh+xa>GN(B6?bU~J*a zRC#G>>G$tfv8Z7w;d>b6US3`k6V_;qQJ$<&Q{aC#&b8$`OrtQt>)Ewy7uwzCJp1wS z!evXWSGfPL&KSv|(NA>pxPSlsDC9nCd;2}RcUwYpfU1Lt2?IrSsGw>FVJ@$OU`3-P zdTKMlQMsCtwv!1q$XII{W7wv?+>+~(b_`TmTkC`;5auJ6F!u; znPB;+N$@WW%;4vgtQr&)6a#rX+$CdCV?h~b2ffGN5x7pmF{vmmy*>5Q`#0CnNH?y< zT3?#^O+?_h;(U?{;|az+|DmP_)_5>sH&no{;+l5BAtAi~KMYC9_F(5^@kBPCE_FLI ztLO#qJB{sMEpI*Awy^Iv)p>W%-(O)>5WP`Rp%fvQ1A^cSy5JK&+moIPrCkkBRez4} z*?fZ&L3?l=uHjZV2GNKWHOxkhb8etHtz~G`+HujK&fnDco0Dh2d?Xk9bv-?zWB|Jf zLT^D+Q2`QhcDA+#S<1|fKg*u2uf0U~>gERZ)p*1vDD>NXVWL8KszX4G$cM_w?a~gy zG-F`+1-%|<#OqfAtgrtu(g;1j>*L3>S=Ybmb9U?o_ww~;OS=-_6y9;$>=)Uz$M#1- zvp#dLDC~+6z|wt*+76m1AIw$u`SX1*!~ujHrha0%h6y=5^;%mRPR3qHUEQ>CBbpJk zgBLHB*5Nm-nvxRWP2oHi!D!8Zu--5dzm=4fAmMQOw8E83D9Obf4<0m*|9beP2X2Nl zLVwt`xO>MU8{<`D-n`lCkBuXLDt@<`?a=;HD*6TnFkXg0&jeO#(6ZOoj;4vTCw-JE za_X8IHc}4ONe=;iRZn9;2o9(MU|$6+0;!U<@+is3UMt3`B&eZD^wS8pxhOBMQ{ZTe za^Q-P2wG|b2x$)&xr#FhJ%qUc3wp3QkNJX0eO>RsAmu{+QI`SY3LJ)#u*_mla*evQkOo|Of6 zmC9QJj0TI(6(|6427*(x;vlLMgu*!4TC4;B6EGd|4&urJ2?H@C>d2@+plU7M$LYN# z^b8D?!-Gk8?YgR^g^uzX+(BJkg=Tk_-+t?ankYf+OicN-T<^T0(i`o|Ym|xE*%h@r^{+b`^VbaNpK?gpC^b60$1rEw3VEkEt@w}Q&Zn|azc#>_3Ct)?|?6s zotq2IHM)(Ws;Ua%oOK8|vNAFoH*Un|*VonI8?Vyl=D<<(i%0j84C%}vQ@Ux>CMtGq z83`hF73hvQdoON|Xu+Z~At=U;vr%1rLR@#(f8KORwDS6*r>Ut~)f;=NJjseZFXO@q z*H39<`rq9$CnE@YG&Zx5AWBeZ@<7u_`A>d0`02NUvZhD9l}dr2?fYB)d?dWlS9qhX z5DOJnB8{kPKHW|L*IQW_4ul9*zVXe*1ht)Xe{(c)3%j-xmcDlLQfQk88`ysqE*&s4?j1Yf!H=RFFg3C2r*S0}V| z(v;)-cztN2v~>3E{l5W+6WO(er#Sc#I~7cHwrK>Z~x@&CAK%-^#*p#V~6n4Y>n&cdP?fm z3SU<->Te~ z%EQ{b+CF7k*E^Z!+;=%yl;hK}*IS~twicCrd2SSGHAq7OuV@Kz3d{k>`79-Eqm^Q#7x z^BPDlTHCRGyY4c+sP^yo{?dcmD|Gz0KH^;xHoyT$?D)IRoLin=yXl1ZbU)q4?t_e@ z>RE!Y&1I^N&T*wQHwsJI?*c4YQqw+mXU?P%O;|}uxRhoq3zNV^St+SpNJ$7^qK?2M zh9g+kKW+9nMd zcwlRpS^wop7$4MOWXsPgWzGp+kPSyxn^hzIB6C2JMn)VIIEV^#baZfZCAeT7&CJYb z7dSQ^QvWlZfyVR6(R05s4Y92+B`6xAVJ@+XvDTi4V5swIX{T}9h7?<>ZPl(@IZj`H zXS&4~BzyFGPTIS7US7LMNdu$|&~JhJoFw-~2To2-4kxw}K$V&bTtyd3G{9wv2}|^# z{l9_g&6_tizb%cFq6}h3($IJfc z=|PuFzIX36Jw0*?iiRS$^@au|H#awWbW~C}dYjvPxS|<)e}R_DXocMk0aMv-WxZ~f zy~8IG1cP?JG!wYJ;j~%-NyHr`t!f@o(RJlD%5%p8Lqjdh%;LwHgZZ?QPkp9-xqCY& zE%}>XT{x4S)O^P_yRR!i=dBLYOSuiLBYDm;s{ZrtZEFm$LDDE`X@yPd-hg;XN=n8x z4gudm(FRk(Ah;yuA*_lX?&(y|av!8g^g!Hs1)oX@wnXJkhdXcy{dk_;XkFt%^7{cp z6O+MHG7V_;&_OAws0=ylyK4~HbaJq?i%F79>OoLnG#DB=H&2iSyg-MSizQu4G@d9B zFH)wBYuaCk_7!TM=-R?{yUlSak6RFyf*-X0!}BoFb4yf#dueE3u-)Sm@;YW)V>6{Q zJie;o$l+|o$c4tmzll2rf%a;iov#;!U^KQ)^tteBphpk$6IB%Kg2r|Asc79-qHfx1 zUl78fxoP)qd+YWZ=M-s|6UUEN1aqHaV0hb>_YWcnn!g<$Jrh5Q!MO?x3n7^_%`_xT zWc(qYn6{m#uYIQwwfhj?hsP1>7tCREh_0{PLbO;)>Y>;XKFAQBp4*B!Q1k#YP%>e) z2K&d4ic6rg!MW(98TuL$1E*G2<2$L?-s>DrR#$BFhr?N&G@!1iIQ6q^A3Y)!N%8S! zF28aSWJ2ps#j4Tpp{V3jef^bNtXfPIrj%@3Txw@;WfE%MDQOPHV><jyds^bB0w{XJe!C8FBoWVf$Iqj}9rQPoF*^ z?g%+SH7!3l59Gm^lBWK0e51378|DItjV{7A8OLRf{-xIP)+GsnkTXVA5YN-DaB)EH zrANA7(zOzfkHb%*4jnug0s$R2GnK!DW7o26onz93@-5nw&z~hOTqsG# zfB+4-1 zd2S@g!vlG2Fe3ZE3tm;{H9^n&oOFzmntA|=88{m(Cd8i&zGvTnet|yc_@9!8$(Vi9 z_w&nSi_6PK`ugt$RZhhYm7-GvcLYPWx3d$0>*I8Dr7j1JpNxzQW(XjhBeSQyG%3FC z?Xax}K`dFjD_5Lo>oPID6mm$t%7&JC6>IN%M~5vp-@x9c{iXyE2Y1ICHZ}-ZKY&|< zW>LU?Oz7GNf{W_r2;SQ&B!r>!NA|w&8Xyo}5vO?mRld}n!Kb>vT%QxNFR9d@I(O~N z4?$*v>7VmnA6G$K&NBy~hjf3t z2Yc_0n!5Vn?;jvD|6|?^A&p>`oU36$LEbT*!OWf=-aXwDSIjf$uvdHz8Zh4sRN*-aaDx*GP0V5p2E@@dLTf zi%b+W2M@Nlw}-rZxwjTg3d~Ei>k7?mVPRpAVf3>8aP~Jfw!OQ?dYf?jBV6R{Y=lmj znW-N*5Z^~kM@m{69WBl)GAc?CCyWw^KsxKHu&}T<6F>ifkLpxdiywBv=X&Vl^X%er z06#3f66yAw$D16F1`w;HfLRmEsZ;T&3K!0wM-@O0bL-~K5aJp#0+9^3du1naLkEP1 z!=QTuFhRIg7%m|CX9U4Me*6fnXJ&R5c8pf4{&up)Ms17v+@;~gBOzIUC|ql~mmD9z zeDUytoOR%juqPZOq7DJxw8Zv4<*(&gcukHE?%yABUBWnXH#fl9616aWMH53ab1z>~ zqniLR!HC%0h(`yMaPODO)kI zk!m1~u(5Dc1l1o&^Z!6v`5$enT^ac?T_+w8*@g_VSpRPUf`3l7w>ABA+HY#BzEYK{ z>2&Ig{H}yf9=nk1LLb7ZB}>u>Vzd~{8S2W(&tI8U-dJ;ga3Mc!riMjb#ya|EP+wgB zw@BjmCJpAak9DqI{r*G{`v~QKxY2NP4VCTcK%R`dq)cF|x*e}#kj)#7sHslfz5*sY z&1gkpx)ad=RAod0pGYAl!^6bn)lrJ5d8+=U)nSJ|T5jUN;Ly-FVjdK2e$l5Rw#rB( z_&$e@67;_RO9ZQVwC1*VedKcn>YprS4=<^n_tz?3o<=P6N_->YU8Uc?5l;us2Bu&zz2@cBv4APL z65oSVl$4SZaBRW(Mp{)C6 zW2vxT?G(KwK82~M2-73rKu(?tE)4@hIZ?_pTnJ*var7b1H@2N$>R4WHzgix;pU$uO zt?WVni_iZd8rtz+lcm2$H|px@rck|M((5*MfGsk}yqthpK^#>S6b$j|gjxe3yA~pn zfIzU9X~$`P{zZ^FfGW&(0Z8`nGxTYY6RWG(lQA%9v~5DD;Q*hKWDm4SMqMz zvISlJD8knWU1{CQFsXkF0a*g%cU#WYs=v>uhUU&e!tu|`%k%XmB}2u;xx7P(YJ5;< zvj*AP#o2l2Ox}MZ)x=#uWCjgl#I#uvRs?&l&^VV}=oicMg`anSF%q*Fv2C)6D*gTa zpu96<9qp)o|0uo?uLH)-kfMVow2ah-xtssRH>ctBQYB@w!)y@ zVfNoG6qa}52?Oto^!}*Kjr||~QMVcOx-F!gQS3%+13!ew#I!DU?s6TUlz5Y!t!-!O z-_zqr-!mWdVVw7T{RMjeM|8phe0(i6HBSn-Tc9JM#RO_sgz%1IUJVjI7VGrfT;}`t z11%}X$Vd-x>Vu25S?w*Ht`Y?AMls?HdbC*Ge93GKFW14e4`Px)>m44SAg?rYUz3!4 zAa>;4dWs(^AcQ}d0Ph?m8XcSZtr6ao{i;+Tr5^Cx`0o=6%S|0wnggQzk!1V2YIJbV zjw5d;6SZwnwNWMQF&Wb3L9o8Audh@+Zppdp-tb{UvgCgWWC+k@e#AXA#@~bC0QDpg zRN9OPmjk2NCSzySD?q}ToxcIiHwlpJUU+(;@;o8=0GQFGkE}B8|4~5eUrz){wrfm4 zr~5Opm2MCNv;5E0eRnXTMgLxq%r_Hjjn{GY7QB)>@buO~dy@}qmBR3;Hei-|I_?8vJkt5xC zsD#G zhN^(uObfzEP7ea%z*XXN0W<-<5O;y=;3gKG`HS$5PM$ou@lH3aUT8DBitl@PsB35- zQHA+o_>JoFEf_9IHxC>DT_z51_1tJQW3Xy+};mcTY z8Us_otVr^IdA6Be@3!QKJkJ@@(L-i-Z0zjSWo2l6b6l3~kblD`x6T0vy(Jt=mY&rt^ z@s%w8kp~9dCy3d8TE1jc-VBXU%!$*{bz*!RY8X@pNXE4MH;*$g7$QqwR#paGA0fX+ z=tOj)t`&2TyHOQ2-WJ-8YUt_dUA|lc@3mo_zcMlB`aj4_>2Hu76w@Nk6!Z+mtn_vn zl$A)cC!D@r9+#T_#Ou+r9G6{K+~6_)i;|BIwIUgcBEN0(=Dq%?8X)RLMWSS~L7dT8 z4S?h7iVB+>HwJ%0;6a{>>S`;XAed{Sndx71yfd(Ajn<}Z>w*OlUnZsI_|VnWg{g#+ zk{Had>7}T766bZew#jIzp8TSh5*kX|Kl!gzBqb%|Or(c(`m9cK-2^cOwOC4u^sb-H z6@PSR@X3+-qh|%^kmKq0y>mwV&xU70bg0PPpwUY1mP=NxiJs>sw|xLMb>j06xJ>F0 z5COq#G_^G}`~~hgqqb+6Kw>$LX(q;Fn;NzdRTtd-fq?-`Ens0z z-p+>t(!qAE%zB+xDma>pf3W6tF{%agsZ+KhQwMwCczi?&e;6!CWcpbDUpXpZ zg&0^`jtvi+>FGrp^p%4{z<|OKR`6=SARAlK&}C)SrUou%iifa$iP5{@E$s2E4`U5T zOaxZGJhrUuN2cC}L^rYX&V*qn!j_PxPJ;nCOokLrvj!U0Hz0rs4vz z+8!>g^b3|CQ8!l%9bCHPE&iI%d0_$vH#I#C<0N6xG2PHW_ICh&E8-xTTF1$u7`V-~ z8jX;^FCK|}$sAz1IMoNCt)i-ml4LUs7}tsJ4S8E*pm4+C;^sDPs%;q2yMF!IUsYYx zTx0_fvxoa)-SS>H;{}H67%EEM$$lv$-!1MjuBwQYQK`IbTjj@L}*URska*OrZUqI%a8W@7(-_)p2~ zQgD@=oE+LK$CZT}5c;6cD4+S=yPZFRS;eMp z5$gbbOEpr0n%(BMzBP|93tEd++WP7`^#iSkuiL%_+pbQP2K(qCGGeN8?^(S-@c)ad zw6l^};unWH@_36mAQ`618HAS_Wq zetulw@~$qorUdoiel4>)mWN14{&!-Ma&vbBrvGw$=8jGM9v8f3pP&Mzu;U+MF>^l` zqHlpbLG?m0f>5VO@1H-@>%kz?Y&NyQUAv%=dlAog(7b$^!(mE4=V~F)7n5x;)rL*2 zYmO$AH4})g&1}!W0EP}pkw$>hNgPqYaOzSLiI~+y!d^mykJyoGMYS7dZ5NHpTjwseSl$3G@%Po&>_VtXKtrgYq| zzHI8s*(z$8?c>ddZ{M5}s$LAM_+0&pQC?0)D!Q&#nNPGZY9k*jbjYaMQd;XJ3b>j0 z8eo2PxOF=pD-{)$m6g>6)eU?{e?g6Uf?Pd8jEN&^a`(=V6lm)xD8N`c4K3$F<2BBpq2XZ{7Z+M(_b3jdoqViOweJ*T4{2?2 zd?*!tbK%Y1ygVl;{@2Z{Nq!#}kt6<_L!Og3({oe;lnCgA=Z}P9 zUI7^vV810aOB9_`s!3ebyFzEl#bE_wdc+2Jh1G0gWwj2g`d3vbtRfW+4b$PeFUII+ zFhGgkxM9#n*rm|Lx7A!5`}CkyehOxT3bffrp+SB{g3zinf3T&^kvnzYKz)O$t%E~O zItugpr=9F0D0y65Gc~Wzf%CW^J^*0Vc3td4)YqmdJ|*P__7FrS#rQ@M5fP2V%+%B= zbcC|9vcflidL>F5MPaNh50MIJfeH!=kj%#y&x~oVA>@Qs8+Om`gFGW(KH^?qze<9G z9Xd2JQ0K@yX0&t0{7vcn^C zn|yLICyno6=ZTLf*=TU(z=x46fJ{zu6c&CKJp7~Q9teFu!Nw*>^19ZTq^iogV|zE_ z)_Xs?5GuWXy%$v4xRWO;!*fqnby*Bss#GXm*Y zzUk>L!L~eYxYr=wI;yJnsN$+RE*UXZiOF$ENysy*WAFl*-MxBPQYfVOf7;Kh zg;XI)72A_gu`Xi8077F427(g-8g_W-;aAA9RtwL6$64daB)FldQrH#zkR%gT@{q3Z zbV8BFGJvx0JX1?7r$wuyRDE8QHIu6(cao62&`WG!M5;vJ$W)6U3RaZSebMiOZ0hRs&eE-9T{kKPeUrx(V zRrAkL783|7Lbd^+sMPX_2x~d+{710;XZ!*J=PtQ2x@(u1^Qfw*(D+JTpxQVig12DL zpSX*(%yrGDq3%~=6B00ll$<~HFly%p$HTx@b@jz^owcbH)}XX4uO8MKcpA&! ze(Y+7#_Ij@17KAz*mXKv(_s8{m>|u56&$YVQ>ZBE&=0GX<8^IU8HKs1#@=U4&drG+ zXo|Gn7d=2q`Ljc892^{if_Z61vJ6-3@pQ2xfx>C^kp&DELZagl{i)&}PV3=wsyd@B zGOsTq4vV?Tj_eyzv9Xs(&~Qv6!Nhpt1fHYO+|a;+d^OVMFbMH*9&uu(7GYp8bKw1f zT@N6v6602ehBUh#oREG&a&*_$b8s@j=tHaua||nK(pvLD_ux|C++1fHRWl96y+D}I zQh`z|m$Mf=7huCD^nD8`TJ9J}Les1y5J|$%Bg+mk%1b5L7Io`g7B1Pb5WVoI3mbt@ z$tXN+qXYaHV}iGC-b4X_mqrW@L*4WczkxS`8jBEwcOlQqjsxq>+(ctaS{)o_!-r2GJ$80(OG_PYI@sfy1KGbxIC5z zTmm{sEw8Wiiw@5&p@qdmu$)1e5ePxeLLU76Ov1-&BqSu%r+YqbSY2Jk)00l#$DnOu zQj)8_1G-Bn1Wz{d(bFT;{k^%_9-Ip1gt!-EEod2xZkWrKs}5@pwbY%CCiVN`kXa;7 zf;CASqMq0U+cmav=ntxf#5PLYczf13iYIPn0YnWivSZLv?qPO)yBvEG=XEjvdTQOf`cx$T$=@FW$5-T-`zV zP(0$$F~~C(x*YA0sJc7rRcnOxd}i>_{k`96C%>hnnOh7E4QV@#atBCpLsr3u?L3M> zOqBber%&ncW8RY*wiIGSc=Qo!JE9(U@7~1?&V*(R*+j*(J_ueX-h)_GUhyfAkRdT| z{o@lRgMp>eq2FieCH;dj}FN5O=H8Y8a;enu9&I;A{1 zZ6>Ez2I}12X)bKcdPnhkpf!&QD;oMyeB%(E@Q#{O#$3Tqp6ms^n;{+%yjoZDGfrKq z7i+66^y1n-D+%sd=4-mZdSN3Wf|0Ly)f{}H2;vQ1Ko~gnib%3<2miOw^e=xI)AQrU z>*irvtt~aD24@}j?C~2*PoFR7-oU3MCiVgC3EI*NztIfx1_pFHOfK1NL0Fm-teL?yW@l$H z7WSBJ^MDJqCS+P6%KeG0$;tNi_Vcr|wl+t_#;^Y-s(I6Mx>c0c%y47~TTySH~A&hEg0*vm{KP80;fq0*}6Q1oq(Vd9gM5rL3J${8Sl z6vef!b3%3g$1cEYd=V0YO*f7w)#0Hz`%Y{iyb2IbOT&YBqH2ZSryT{;zknSiN@w_)P$3|23mp7@jbr7<9ycVxZzFW?v6o1N{rtj_ ztyfT}h441x=wfb;r-LLWx|D1c_bOUn9mj(o@IbdFdpw^9Y9cls7#)Nyyi?0t2Sg!7 zv5B$}MMvnJ{g*xV8m2kGVulHVQ_Bp6TRuGA~8LwmLeXl*w^3R?rJ@AXDf{_13SAF z;$&b`81;a2GCMbiCvJ@2*3wi|#B()sV4lm1EdD&azHkAvaeKw%8>{db9lRePRaseC zeq{%4`yJtabD~#1+{AkHKG$KhkN{dP<0px}ji!hK-uhM1nqd|=vw9^|4%1EKa58LT zq0El(X2FR44Zuu@KQl4ihJ6#gO6k*g=fxf_D0`AJG8Irm^Oy<~63n5nV$x9D3r0y` zKmh0==^;L%K~neH;z|v{U8D-2j0jKNS3GXb!p&nZTDCpuheTbSaR;=Msl=V}=HPuq zV!60TybH*j(K$r~YCE2!r|-eXK&2zj5^G((`eqe*BGBbMyd-!Afc1~ND)EiOvvpD@ z;v3`Y2iw}(1Rgs~_M8uuvqy#$B_|>xg3+1Vy)!ywXO*C9MQtnHhr!k}f|vk!GyDl+ z1CC+^p)_$Xl!i-zmU}MB$$`sd?(M-7QH#(FMTdgwq9V>--@|2C@e&(>k&zKRxhvCD zm1NRKXC)G?Ttr0oovrX&V5dPI21BW1e%-b5i+E0m<&E=UZ|OsL0U3a$8jncMarP|} zX(w3i{d|29ul=5C;8SZ%!NRvqU(tqVKcG1`?5Feb_{OEttS;?bn@hotq?itV_^_vw zD#R_MHl_6IYt&!FDjXu)E}^Q=S=(MB792;6P~ z{%$vP3itOaI*ah|<@q^%+~g7n9)odJTY*prf$9Cg9RvX($w5=e<+{#=tOJBPjJskc z_2M_VXJwdcNx<#ImO;BI`;z1AkeOzeC1((9iHmkUM&b|UeI>6acT?yy)&yo`WGJhu zg7jphr(bk}9&IDg0nzOO#$4=1)G)r3o0|)=hUdGsXSx%g9EPV8k&8b%$eWa#+s4yY zytCV4c!5wtOjM9JXqU=Gu%~Jyf-!*rVN5a|t|Y6VkB<*F2tS^_h^IoiA+&@sw3Fz} zq@|ZZ8ZGREJuOjUainaD(X$}wSj8;_F(vr3QM9K!%TzCfA)