[prev in list] [next in list] [prev in thread] [next in thread] List: clamav-users Subject: Re: [clamav-users] clamav-users Digest, Vol 202, Issue 17 From: Gregory Poveda via clamav-users <clamav-users () lists ! clamav ! net> Date: 2021-09-23 1:19:16 Message-ID: 05C7A060-B9C3-49F2-B058-EE4A5CEE15ED () gmail ! com [Download RAW message or body] [Attachment #2 (multipart/alternative)] Good Evening, I'm not sure what changed, but I was able to confirm it is working today. Nothing \ changed on my firewall, ACL, or QNAP config since my initial email. It does appear \ the IP did change on the database.clamav.net. Below is a snapshot of the ACL that \ dynamically updates based on the DNS address. Thanks for the help and confirming \ others had this issue. Thanks, Gregory Poveda OIT - Network Infrastructure VBH M1D Cell: (865) 250-0290 Office: (256) 824-7656 gap0005@uah.edu > On Sep 22, 2021, at 7:00 AM, clamav-users-request@lists.clamav.net wrote: > > Send clamav-users mailing list submissions to > clamav-users@lists.clamav.net > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.clamav.net/mailman/listinfo/clamav-users > or, via email, send a message with subject or body 'help' to > clamav-users-request@lists.clamav.net > > You can reach the person managing the list at > clamav-users-owner@lists.clamav.net > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of clamav-users digest..." > When responding, please don't respond with the entire Digest. Please trim your \ > response. Today's Topics: > > 1. Re: QNAP Antivirus Updates (Paul Kosinski) > 2. Re: QNAP Antivirus Updates (Liston, Daniel (DLISTON)) > 3. Re: QNAP Antivirus Updates (Joel Esler (jesler)) > > From: Paul Kosinski <clamav-users@iment.com> > Subject: Re: [clamav-users] QNAP Antivirus Updates > Date: September 21, 2021 at 12:52:57 PM CDT > To: clamav-users@lists.clamav.net > Cc: Matus UHLAR - fantomas <uhlar@fantomas.sk> > > > "how's this different from what Joel said?" > > My reading of the following (based on normal English convention) > > > > 104.16.218.84 > > > 104.16.219.84 > > That's what they are for you. Cloudflare routes you to the closest pop to your \ > > network. Your mileage may vary > > is that "they" refers to the IP addresses, NOT the DNS names (which hadn't even \ > been mentioned in my email at this point). > Thus, what I inferred from Joel's statement is that "database.clamav.net" might \ > resolve to different IPs for other users (which would be weird, given the use of \ > Anycast). So I tested it the best I could (without traveling a lot, or setting up \ > VMs in different countries). > > On Tue, 21 Sep 2021 13:21:20 +0200 > Matus UHLAR - fantomas <uhlar@fantomas.sk> wrote: > > > > On Mon, 20 Sep 2021 17:17:34 +0000 > > > "Joel Esler (jesler)" <jesler@cisco.com> wrote: > > > > > > > > On Sep 20, 2021, at 13:08, Paul Kosinski via clamav-users \ > > > > > <clamav-users@lists.clamav.net> wrote: > > > > > These two IPs are Anycast addresses, and have been unchanged for well over \ > > > > > 2 years. (Anycast addresses don't have to change even if the physical \ > > > > > servers change, that's their point!) They are: > > > > > 104.16.218.84 > > > > > 104.16.219.84 > > > > That's what they are for you. Cloudflare routes you to the closest pop to \ > > > > your network. Your mileage may vary > > > > On 20.09.21 20:16, Paul Kosinski via clamav-users wrote: > > > I thought the IP addresses, being Anycast, were what are routed to the closest \ > > > POP. > > > > how's this different from what Joel said? > > > > > No matter, when I resolve "database.clamav.net" via various DNS servers, > > > using TCP to bypass the default local DNS server (as our firewall blocks > > > outbound UDP port 53 otherwise), I always get these same two IP addresses > > > as results (see below) > > > > yes, becaue those two IP are anycast... they are router to the nearest POP. > > > > > Given that the servers at 1.1.1.1, 8.8.8.8 and 9.9.9.9 are "public", and > > > likely Anycast, while 71.243.0.12 is local Verizon/FIOS, I suppose that > > > the Authoritative server and the public (Anycast) servers could > > > conceivably be distributing different IP addresses depending on who is > > > querying. (BIND/named has become incredibly complicated these days.) But > > > since the two IP addresses are themselves Anycast, what would be the > > > point? > > > > the point is, not to provide different IPs via anycast DNS but to provide > > anycast IPs via any DNS. > > > > > In any case, does anyone, anywhere, get IP addresses other than > > > > > > 104.16.218.84 > > > 104.16.219.84 > > > > > > when resolving "database.clamav.net"? > > > > > > > From: "Liston, Daniel (DLISTON)" <DLISTON@arinc.com> > Subject: Re: [clamav-users] QNAP Antivirus Updates > Date: September 21, 2021 at 1:42:00 PM CDT > To: "clamav-users@lists.clamav.net" <clamav-users@lists.clamav.net> > > > I have already forgotten the point, but I did do some DNS > queries from our datacenters in LON, TYO, and NYC. All > reported the same results; > > Non-authoritative answer: > database.clamav.net canonical name = database.clamav.net.cdn.cloudflare.net. > Name: database.clamav.net.cdn.cloudflare.net > Address: 104.16.218.84 > Name: database.clamav.net.cdn.cloudflare.net > Address: 104.16.219.84 > > It seems it should be safe to specify these 2 IP addresses > in your firewall for the updates. > > > L8r > Dan > > > > > From: "Joel Esler (jesler)" <jesler@cisco.com> > Subject: Re: [clamav-users] QNAP Antivirus Updates > Date: September 21, 2021 at 2:49:27 PM CDT > To: ClamAV users ML <clamav-users@lists.clamav.net> > Cc: "Liston, Daniel (DLISTON)" <DLISTON@arinc.com> > > > And… there's your answer. Thank you all! I think this thread is dead. > > > On Sep 21, 2021, at 2:42 PM, Liston, Daniel (DLISTON) via clamav-users \ > > <clamav-users@lists.clamav.net> wrote: > > I have already forgotten the point, but I did do some DNS > > queries from our datacenters in LON, TYO, and NYC. All > > reported the same results; > > > > Non-authoritative answer: > > database.clamav.net canonical name = database.clamav.net.cdn.cloudflare.net. > > Name: database.clamav.net.cdn.cloudflare.net > > Address: 104.16.218.84 > > Name: database.clamav.net.cdn.cloudflare.net > > Address: 104.16.219.84 > > > > It seems it should be safe to specify these 2 IP addresses > > in your firewall for the updates. > > > > > > L8r > > Dan > > > > _______________________________________________ > > > > clamav-users mailing list > > clamav-users@lists.clamav.net > > https://lists.clamav.net/mailman/listinfo/clamav-users > > > > > > Help us build a comprehensive ClamAV guide: > > https://github.com/vrtadmin/clamav-faq > > > > http://www.clamav.net/contact.html#ml > > > > > _______________________________________________ > > clamav-users mailing list > clamav-users@lists.clamav.net > https://lists.clamav.net/mailman/listinfo/clamav-users > > https://github.com/vrtadmin/clamav-faq > > http://www.clamav.net/contact.html#ml [Attachment #5 (multipart/related)] [Attachment #7 (unknown)] <html><head><meta http-equiv="Content-Type" content="text/html; \ charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; \ line-break: after-white-space;" class=""><div class="">Good Evening, </div><div \ class=""><br class=""></div>I'm not sure what changed, but I was able to confirm it \ is working today. Nothing changed on my firewall, ACL, or QNAP config since my \ initial email. It does appear the IP did change on the <a \ href="http://database.clamav.net" class="">database.clamav.net</a>. Below is a \ snapshot of the ACL that dynamically updates based on the DNS address. Thanks for the \ help and confirming others had this issue. <div class=""><br class=""></div><div \ class=""><img apple-inline="yes" id="F0DE04E8-633C-460F-996A-388021EABAB0" \ width="643" height="122" src="cid:216ABECC-5D3C-4A59-B21F-02446D0AEEE8" \ class=""></div><div class=""><br class=""><div class=""> <div>Thanks,<br \ class="">Gregory Poveda<br class="">OIT - Network Infrastructure<br class="">VBH \ M1D<br class="">Cell: (865) 250-0290<br class="">Office: (256) 824-7656<br \ class=""><a href="mailto:gap0005@uah.edu" class="">gap0005@uah.edu</a></div> </div> <div><br class=""><blockquote type="cite" class=""><div class="">On Sep 22, 2021, at \ 7:00 AM, <a href="mailto:clamav-users-request@lists.clamav.net" \ class="">clamav-users-request@lists.clamav.net</a> wrote:</div><br \ class="Apple-interchange-newline"><div class="">Send clamav-users mailing list \ submissions to<br class=""><span class="Apple-tab-span" \ style="white-space:pre"> </span><a href="mailto:clamav-users@lists.clamav.net" \ class="">clamav-users@lists.clamav.net</a><br class=""><br class="">To subscribe or \ unsubscribe via the World Wide Web, visit<br class=""><span class="Apple-tab-span" \ style="white-space:pre"> </span>https://lists.clamav.net/mailman/listinfo/clamav-users<br \ class="">or, via email, send a message with subject or body 'help' to<br \ class=""><span class="Apple-tab-span" \ style="white-space:pre"> </span>clamav-users-request@lists.clamav.net<br class=""><br \ class="">You can reach the person managing the list at<br class=""><span \ class="Apple-tab-span" \ style="white-space:pre"> </span>clamav-users-owner@lists.clamav.net<br class=""><br \ class="">When replying, please edit your Subject line so it is more specific<br \ class="">than "Re: Contents of clamav-users digest..."<br class="">When responding, \ please don't respond with the entire Digest. Please trim your response.<br \ class="">Today's Topics:<br class=""><br class=""> 1. Re: QNAP Antivirus \ Updates (Paul Kosinski)<br class=""> 2. Re: QNAP Antivirus Updates \ (Liston, Daniel (DLISTON))<br class=""> 3. Re: QNAP Antivirus Updates \ (Joel Esler (jesler))<br class=""><br class=""><div style="margin-top: 0px; \ margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span \ style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; \ color:rgba(127, 127, 127, 1.0);" class=""><b class="">From: </b></span><span \ style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" \ class="">Paul Kosinski <clamav-users@iment.com><br class=""></span></div><div \ style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" \ class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, \ sans-serif; color:rgba(127, 127, 127, 1.0);" class=""><b class="">Subject: \ </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, \ sans-serif;" class=""><b class="">Re: [clamav-users] QNAP Antivirus Updates</b><br \ class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: \ 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, \ Helvetica Neue, Helvetica, sans-serif; color:rgba(127, 127, 127, 1.0);" class=""><b \ class="">Date: </b></span><span style="font-family: -webkit-system-font, Helvetica \ Neue, Helvetica, sans-serif;" class="">September 21, 2021 at 12:52:57 PM CDT<br \ class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: \ 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, \ Helvetica Neue, Helvetica, sans-serif; color:rgba(127, 127, 127, 1.0);" class=""><b \ class="">To: </b></span><span style="font-family: -webkit-system-font, Helvetica \ Neue, Helvetica, sans-serif;" class="">clamav-users@lists.clamav.net<br \ class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: \ 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, \ Helvetica Neue, Helvetica, sans-serif; color:rgba(127, 127, 127, 1.0);" class=""><b \ class="">Cc: </b></span><span style="font-family: -webkit-system-font, Helvetica \ Neue, Helvetica, sans-serif;" class="">Matus UHLAR - fantomas \ <uhlar@fantomas.sk><br class=""></span></div><br class=""><br class="">"how's \ this different from what Joel said?"<br class=""><br class="">My reading of the \ following (based on normal English convention)<br class=""><br class=""><blockquote \ type="cite" class=""><blockquote type="cite" class=""> 104.16.218.84<br class=""> \ 104.16.219.84 <br class=""></blockquote>That's what they are for you. \ Cloudflare routes you to the closest pop to your network. Your mileage \ may vary <br class=""></blockquote><br class="">is that "they" refers to the IP \ addresses, NOT the DNS names (which hadn't even been mentioned in my email at this \ point).<br class=""><br class="">Thus, what I inferred from Joel's statement is that \ "database.clamav.net" might resolve to different IPs for other users (which would be \ weird, given the use of Anycast). So I tested it the best I could (without traveling \ a lot, or setting up VMs in different countries).<br class=""><br class=""><br \ class="">On Tue, 21 Sep 2021 13:21:20 +0200<br class="">Matus UHLAR - fantomas \ <uhlar@fantomas.sk> wrote:<br class=""><br class=""><blockquote type="cite" \ class=""><blockquote type="cite" class="">On Mon, 20 Sep 2021 17:17:34 +0000<br \ class="">"Joel Esler (jesler)" <jesler@cisco.com> wrote:<br class=""><br \ class=""><blockquote type="cite" class=""><blockquote type="cite" class="">On Sep 20, \ 2021, at 13:08, Paul Kosinski via clamav-users <clamav-users@lists.clamav.net> \ wrote:<br class=""><br class="">These two IPs are Anycast addresses, and have been \ unchanged for well over 2 years. (Anycast addresses don't have to change even if the \ physical servers change, that's their point!) They are:<br class=""><br class=""> \ 104.16.218.84<br class=""> 104.16.219.84 <br class=""></blockquote>That's what \ they are for you. Cloudflare routes you to the closest pop to your network. \ Your mileage may vary <br class=""></blockquote></blockquote><br \ class="">On 20.09.21 20:16, Paul Kosinski via clamav-users wrote:<br \ class=""><blockquote type="cite" class="">I thought the IP addresses, being Anycast, \ were what are routed to the closest POP. <br class=""></blockquote><br \ class="">how's this different from what Joel said?<br class=""><br \ class=""><blockquote type="cite" class="">No matter, when I resolve \ "database.clamav.net" via various DNS servers,<br class="">using TCP to bypass the \ default local DNS server (as our firewall blocks<br class="">outbound UDP port 53 \ otherwise), I always get these same two IP addresses<br class="">as results (see \ below) <br class=""></blockquote><br class="">yes, becaue those two IP are \ anycast... they are router to the nearest POP.<br class=""><br class=""><blockquote \ type="cite" class="">Given that the servers at 1.1.1.1, 8.8.8.8 and 9.9.9.9 are \ "public", and<br class="">likely Anycast, while 71.243.0.12 is local Verizon/FIOS, I \ suppose that<br class="">the Authoritative server and the public (Anycast) servers \ could<br class="">conceivably be distributing different IP addresses depending on who \ is<br class="">querying. (BIND/named has become incredibly complicated these \ days.) But<br class="">since the two IP addresses are themselves Anycast, what would \ be the<br class="">point? <br class=""></blockquote><br class="">the point is, \ not to provide different IPs via anycast DNS but to provide<br class="">anycast IPs \ via any DNS.<br class=""><br class=""><blockquote type="cite" class="">In any case, \ does anyone, anywhere, get IP addresses other than<br class=""><br class=""> \ 104.16.218.84<br class=""> 104.16.219.84<br class=""><br class="">when resolving \ "database.clamav.net"? <br class=""></blockquote><br class=""></blockquote><br \ class=""><br class=""><br class=""><br class=""><div style="margin-top: 0px; \ margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span \ style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; \ color:rgba(127, 127, 127, 1.0);" class=""><b class="">From: </b></span><span \ style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" \ class="">"Liston, Daniel (DLISTON)" <DLISTON@arinc.com><br \ class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: \ 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, \ Helvetica Neue, Helvetica, sans-serif; color:rgba(127, 127, 127, 1.0);" class=""><b \ class="">Subject: </b></span><span style="font-family: -webkit-system-font, Helvetica \ Neue, Helvetica, sans-serif;" class=""><b class="">Re: [clamav-users] QNAP Antivirus \ Updates</b><br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; \ margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: \ -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(127, 127, 127, \ 1.0);" class=""><b class="">Date: </b></span><span style="font-family: \ -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class="">September 21, \ 2021 at 1:42:00 PM CDT<br class=""></span></div><div style="margin-top: 0px; \ margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span \ style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; \ color:rgba(127, 127, 127, 1.0);" class=""><b class="">To: </b></span><span \ style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" \ class="">"clamav-users@lists.clamav.net" <clamav-users@lists.clamav.net><br \ class=""></span></div><br class=""><br class="">I have already forgotten the point, \ but I did do some DNS <br class="">queries from our datacenters in LON, TYO, and NYC. \ All <br class="">reported the same results;<br class=""><br \ class="">Non-authoritative answer:<br class="">database.clamav.net \ canonical name = database.clamav.net.cdn.cloudflare.net.<br \ class="">Name: database.clamav.net.cdn.cloudflare.net<br \ class="">Address: 104.16.218.84<br class="">Name: \ database.clamav.net.cdn.cloudflare.net<br class="">Address: \ 104.16.219.84<br class=""><br class="">It seems it should be safe to specify these 2 \ IP addresses<br class="">in your firewall for the updates.<br class=""><br \ class=""><br class="">L8r<br class="">Dan<br class=""><br class=""><br class=""><br \ class=""><br class=""><div style="margin-top: 0px; margin-right: 0px; margin-bottom: \ 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, \ Helvetica Neue, Helvetica, sans-serif; color:rgba(127, 127, 127, 1.0);" class=""><b \ class="">From: </b></span><span style="font-family: -webkit-system-font, Helvetica \ Neue, Helvetica, sans-serif;" class="">"Joel Esler (jesler)" \ <jesler@cisco.com><br class=""></span></div><div style="margin-top: 0px; \ margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span \ style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; \ color:rgba(127, 127, 127, 1.0);" class=""><b class="">Subject: </b></span><span \ style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" \ class=""><b class="">Re: [clamav-users] QNAP Antivirus Updates</b><br \ class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: \ 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, \ Helvetica Neue, Helvetica, sans-serif; color:rgba(127, 127, 127, 1.0);" class=""><b \ class="">Date: </b></span><span style="font-family: -webkit-system-font, Helvetica \ Neue, Helvetica, sans-serif;" class="">September 21, 2021 at 2:49:27 PM CDT<br \ class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: \ 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, \ Helvetica Neue, Helvetica, sans-serif; color:rgba(127, 127, 127, 1.0);" class=""><b \ class="">To: </b></span><span style="font-family: -webkit-system-font, Helvetica \ Neue, Helvetica, sans-serif;" class="">ClamAV users ML \ <clamav-users@lists.clamav.net><br class=""></span></div><div \ style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" \ class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, \ sans-serif; color:rgba(127, 127, 127, 1.0);" class=""><b class="">Cc: \ </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, \ sans-serif;" class="">"Liston, Daniel (DLISTON)" <DLISTON@arinc.com><br \ class=""></span></div><br class=""><br class="">And… there's your answer. \ Thank you all! I think this thread is dead.<br class=""><br \ class=""><blockquote type="cite" class="">On Sep 21, 2021, at 2:42 PM, Liston, Daniel \ (DLISTON) via clamav-users <clamav-users@lists.clamav.net> wrote:<br \ class=""><br class="">I have already forgotten the point, but I did do some DNS <br \ class="">queries from our datacenters in LON, TYO, and NYC. All <br \ class="">reported the same results;<br class=""><br class="">Non-authoritative \ answer:<br class="">database.clamav.net canonical name = \ database.clamav.net.cdn.cloudflare.net.<br class="">Name: \ database.clamav.net.cdn.cloudflare.net<br class="">Address: \ 104.16.218.84<br class="">Name: database.clamav.net.cdn.cloudflare.net<br \ class="">Address: 104.16.219.84<br class=""><br class="">It seems it should be safe \ to specify these 2 IP addresses<br class="">in your firewall for the updates.<br \ class=""><br class=""><br class="">L8r<br class="">Dan<br class=""><br \ class="">_______________________________________________<br class=""><br \ class="">clamav-users mailing list<br class="">clamav-users@lists.clamav.net<br \ class="">https://lists.clamav.net/mailman/listinfo/clamav-users<br class=""><br \ class=""><br class="">Help us build a comprehensive ClamAV guide:<br \ class="">https://github.com/vrtadmin/clamav-faq<br class=""><br \ class="">http://www.clamav.net/contact.html#ml<br class=""></blockquote><br \ class=""><br class=""><br class=""><br \ class="">_______________________________________________<br class=""><br \ class="">clamav-users mailing list<br class="">clamav-users@lists.clamav.net<br \ class="">https://lists.clamav.net/mailman/listinfo/clamav-users<br class=""><br \ class="">https://github.com/vrtadmin/clamav-faq<br class=""><br \ class="">http://www.clamav.net/contact.html#ml<br \ class=""></div></blockquote></div><br class=""></div></body></html> ["Screen Shot 2021-09-22 at 8.13.53 PM.png" (Screen Shot 2021-09-22 at 8.13.53 PM.png)] PNG IHDR jiCCPICC Profile HXS$$$@ޤwB \ U@B!!ؕE.X Z{Y{_,(.&$ \ 3g9s2;fW"E H#BSӘN@: c`$hڿw7 h:*l@ 9/An ȓH \ * $ YW FYJQp$Ƴ! \ FrY h܃rf!/E9'!+b7Um2d|c3o3sYì`Q$gjw˕*F+sx+gj1\Cy IJ}Ԉ'cd>74 pqnLJ) @.*$BևX KPlNWB3lJ~+@R#pT1"ab d dBQrd N("!;fHG*Wo 9^ Q 3*<|B'F `x\64dG =4 4L9w@ ')W)8>n.ȍP!{ Tc8LIA\2N(;&ND6L 5L@ ߔ= J24"eG I dB{ ?KOG9[88"<@.|{KO \ D\Xy0\X^>$*aAIJ"$Cpnx4|COxJh'<"\'tnO-~X퇫rm.pkh \ uhg~Xx lU܊0|k.d<L~E͏2|{&|F}-bgy \ qUz2ƓᏫȤ̥Υ哲@0@S%3,a&Gstsqs@Q}e~Cƅf |K0뫌k }Yf GxriR+/ w0 x A*,\ Y`>(e`X6-`;{ upNw \ ABCbX!"aH4"H"F,d!RB6 \ ېZg0r9#Hb(EQkAYhNB|-FhGO \ h 103X,ebRlVcU^ Wq: ēp?_=`Dp \ 8, 4B ppN ;" ^L%fg7^d@r \ bI\RttISSW3UsSWKS-P+WۥvL3~يG%3;MNr?EbC \ $R))Ӕ{E+SCr2j5zFYӂii2Z-$Ok \ ԨJiҜYYyPfYZ՚UuXV6]U;V;O{.uH::a:|b:'u1MwO;u6l2==z:zzz*u005e,g``|a<5B0bɈ#x?R?X_ \ _OGAAJ8i \ Ov?7t䁑wP#{xFۍ.GK46ad19feJ7 \ 41=nd1sS3#H36V~s$[P,|,2-XXXZeYgyNJlc%Zgu꽵u"66":{4 \ |*kvD;Mvmо \ r>0wxTըTGccC'SWΖi+:qturUu&7nn<Jk4p=<=ny=z.l%mORs߹G|?y?6w~` Ld zleff q ycf7ba:aIa \ gׅDxF̌h$DFE181cf9EJ(>Z4;fbb1 \ :~M\~ܯU{?+l=aJ w!&&ɓZ5'&&O MY1yS SEi䴝i \ &9sbl&Mt~GhNN9NHOIߕ˭fp26fؼu`~ @J,3 sUY] \ a[mΎޒ>'6:g 7%w_Z^za8G|jS%IG_itM5 C% \ iNמ.~i%34ɛ2lYgfoɘ2bnyjSm˂UZظx^"~+(\hb|hq%|)^(s)+/ \ ?V8,sYrWWWXfUW]]t_k=_Qee|]GEtEz+ \ p2rFK6tes[mUֶmUUۉ?ݑO>?4Ys&Twm.]:y]iw>ƾ`|q \ @A{e!z~F}O1-MM~uّʣzG+>6pxoD։-SZکqZOG>w&ɳ;r>.z]yojj}ͷ}t+AWN\ z1o$ݸus͎[[o~}NyJk/` \ wuxu}ңGw|"{)i3gݞ \ j{1EK?/yg|Ok7K㯖/3ǔ}"}lKԗ{y;x`E33xS -ཌྷ2Ay,:H?8X i V+T* uw"twSڢ o`1 &