<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
-----BEGIN PGP SIGNED MESSAGE----- <br>
Hash: SHA256 <br>
<br>
<br>
<br>
05.09.2016 22:25, Marcio Demetrio Bacci пишет:<br>
<span style="white-space: pre;">> Hi Amos<br>
><br>
> Now, my squid.conf is as follow (very simple):<br>
><br>
> ############ START #################<br>
> http_port 3128<br>
><br>
> debug_options 11,2<br>
><br>
> cache_mem 512 MB<br>
> cache_swap_low 80<br>
> cache_swap_high 90<br>
><br>
> maximum_object_size 512 MB<br>
> minimum_object_size 0 KB<br>
><br>
> maximum_object_size_in_memory 4096 KB<br>
><br>
> cache_replacement_policy heap LFUDA<br>
> memory_replacement_policy heap LFUDA<br>
><br>
> fqdncache_size 1024<br>
><br>
> ### Parametros de atualizacao da memoria cache<br>
> refresh_pattern ^ftp: 1440 20% 10080<br>
> refresh_pattern ^gopher: 1440 0% 1440<br>
> refresh_pattern -i (/cgi-bin/|\?) 0 0% 0<br>
> refresh_pattern . 0 20% 4320<br>
><br>
> ### Localizacao dos logs<br>
> access_log /var/log/squid3/access.log<br>
> cache_log /var/log/squid3/cache.log<br>
><br>
> cache_dir aufs /var/spool/squid3 600 16 256<br>
><br>
> visible_hostname proxy<br>
><br>
> ### acls<br>
> acl localhost src 192.168.200.7/32
<a class="moz-txt-link-rfc2396E" href="http://192.168.200.7/32"><http://192.168.200.7/32></a><br>
> acl to_localhost dst 192.168.200.7/32
<a class="moz-txt-link-rfc2396E" href="http://192.168.200.7/32"><http://192.168.200.7/32></a><br>
> acl SSL_ports port 22 443 563 7071 10000<br>
> acl Safe_ports port 21 70 80 88 210 280 389 443 488 563 591
777 1025-65535 <br>
><br>
> acl purge method PURGE<br>
> acl CONNECT method CONNECT<br>
><br>
> http_access deny !Safe_ports<br>
> http_access deny CONNECT !SSL_ports<br>
> http_access deny purge<br>
><br>
> auth_param basic program /usr/lib/squid3/basic_ncsa_auth
/etc/squid3/passwd<br>
> auth_param basic children 5<br>
> auth_param basic realm CMS<br>
> auth_param basic credentialsttl 2 hours<br>
> auth_param basic casesensitive off<br>
><br>
> ### Exige autenticacao<br>
> acl autenticados proxy_auth REQUIRED<br>
> http_access deny !autenticados<br>
><br>
> ### Rede do CMS #####<br>
> acl lannet src 192.168.200.0/22
<a class="moz-txt-link-rfc2396E" href="http://192.168.200.0/22"><http://192.168.200.0/22></a><br>
><br>
> ### Nega acesso de quem nao esta na rede local do CMS<br>
> http_access allow lannet<br>
> http_access allow localhost<br>
><br>
> #negando o acesso para todos que nao estiverem nas regras
anteriores<br>
> http_access deny all<br>
><br>
> ### Erros em portugues<br>
> error_directory /usr/share/squid3/errors/pt-br<br>
><br>
> #cache_effective_user proxy<br>
> coredump_dir /var/spool/squid3<br>
><br>
> ########## END ###########################<br>
><br>
> I have some doubts:<br>
><br>
> 1) I open my browser to test the authentication. It seems OK,
but when I open new tab in browser the Squid3 ask the user and
password again. Is this normal behavior ?<br>
><br>
> 2) Is necessary to declare LOCALHOST acl as "acl localhost
src 192.168.200.7/32 <a class="moz-txt-link-rfc2396E" href="http://192.168.200.7/32"><http://192.168.200.7/32></a>" ?</span><br>
#Default:<br>
# ACLs all, manager, localhost, and to_localhost are predefined.<br>
<br>
PS. localhost is always 127.0.0.1. You specified localnet, not
localhost.<br>
<br>
<span style="white-space: pre;">><br>
> 3) Isn't necessary MANAGER acl as "acl manager proto
cache_object" ?</span><br>
No.<br>
<span style="white-space: pre;">><br>
> 4) Is correct order of the ACL in my squid.conf ? How do I
improve it?</span><br>
Read squid.conf.documented carefully.<br>
<span style="white-space: pre;">><br>
> 5) In my access.log, I have saw many "TCP_MISS/200". Does
mean only the website is not in cache or is a strange behavior?</span><br>
website is not in cache<br>
<span style="white-space: pre;">><br>
><br>
> Sorry, but I'm still learning about Squid!</span><br>
Welcome. Do not forget to do RTFM first.<br>
<br>
A good habit is to first try to find the answers yourself.
Especially the obvious questions.<br>
<span style="white-space: pre;">><br>
><br>
> Regards,<br>
><br>
> Márcio<br>
><br>
><br>
><br>
><br>
> 2016-09-05 1:17 GMT-03:00 Amos Jeffries
<<a class="moz-txt-link-abbreviated" href="mailto:squid3@treenet.co.nz">squid3@treenet.co.nz</a> <a class="moz-txt-link-rfc2396E" href="mailto:squid3@treenet.co.nz"><mailto:squid3@treenet.co.nz></a>>:<br>
><br>
> On 5/09/2016 10:41 a.m., Marcio Demetrio Bacci wrote:<br>
> > I have used debug_options 11,2 in squid.conf file.
After I have following<br>
> > results in logs files:<br>
> ><br>
> > /var/log/squid3/access.log<br>
> > 1473026084.048 253 192.168.200.85
TCP_MISS_ABORTED/000 0 POST<br>
> > <a class="moz-txt-link-freetext" href="http://m.addthis.com/live/red_lojson/100eng.json">http://m.addthis.com/live/red_lojson/100eng.json</a>
<a class="moz-txt-link-rfc2396E" href="http://m.addthis.com/live/red_lojson/100eng.json"><http://m.addthis.com/live/red_lojson/100eng.json></a>? marcio
HIER_NONE/- -<br>
> > 1473026086.275 0 192.168.200.85 TCP_DENIED/407
3792 CONNECT<br>
> > tiles.services.mozilla.com:443
<a class="moz-txt-link-rfc2396E" href="http://tiles.services.mozilla.com:443"><http://tiles.services.mozilla.com:443></a> - HIER_NONE/-
text/html<br>
> > 1473026086.778 0 192.168.200.85 TCP_DENIED/407
3995 GET<br>
> > <a class="moz-txt-link-freetext" href="http://start.ubuntu.com/14.04/Google/">http://start.ubuntu.com/14.04/Google/</a>
<a class="moz-txt-link-rfc2396E" href="http://start.ubuntu.com/14.04/Google/"><http://start.ubuntu.com/14.04/Google/></a>? - HIER_NONE/-
text/html<br>
> > 1473026088.908 0 192.168.200.85 TCP_DENIED/407
3796 CONNECT<br>
> > shavar.services.mozilla.com:443
<a class="moz-txt-link-rfc2396E" href="http://shavar.services.mozilla.com:443"><http://shavar.services.mozilla.com:443></a> - HIER_NONE/-
text/html<br>
> > 1473026091.932 0 192.168.200.85 TCP_DENIED/407
3780 CONNECT<br>
> > self-repair.mozilla.org:443
<a class="moz-txt-link-rfc2396E" href="http://self-repair.mozilla.org:443"><http://self-repair.mozilla.org:443></a> - HIER_NONE/- text/html<br>
> > 1473026096.418 180 192.168.200.85 TCP_MISS/200
960 POST<br>
> > <a class="moz-txt-link-freetext" href="http://ocsp.digicert.com/">http://ocsp.digicert.com/</a> marcio
HIER_DIRECT/192.16.58.8 <a class="moz-txt-link-rfc2396E" href="http://192.16.58.8"><http://192.16.58.8></a><br>
> > application/ocsp-response<br>
> > 1473026096.467 85 192.168.200.85 TCP_MISS/200
960 POST<br>
> > <a class="moz-txt-link-freetext" href="http://ocsp.digicert.com/">http://ocsp.digicert.com/</a> marcio
HIER_DIRECT/192.16.58.8 <a class="moz-txt-link-rfc2396E" href="http://192.16.58.8"><http://192.16.58.8></a><br>
> > application/ocsp-response<br>
> > 1473026102.051 525 192.168.200.85
TCP_REFRESH_UNMODIFIED/200 2907 GET<br>
> > <a class="moz-txt-link-freetext" href="http://start.ubuntu.com/14.04/Google/">http://start.ubuntu.com/14.04/Google/</a>
<a class="moz-txt-link-rfc2396E" href="http://start.ubuntu.com/14.04/Google/"><http://start.ubuntu.com/14.04/Google/></a>? marcio
HIER_DIRECT/91.189.90.41 <a class="moz-txt-link-rfc2396E" href="http://91.189.90.41"><http://91.189.90.41></a><br>
> > text/html<br>
> > 1473026102.091 0 192.168.200.85 TCP_HIT/200
22099 GET<br>
> > <a class="moz-txt-link-freetext" href="http://start.ubuntu.com/12.04/sprite.png">http://start.ubuntu.com/12.04/sprite.png</a>
<a class="moz-txt-link-rfc2396E" href="http://start.ubuntu.com/12.04/sprite.png"><http://start.ubuntu.com/12.04/sprite.png></a> marcio
HIER_NONE/- image/png<br>
> > 1473026104.855 0 10.133.85.3 TCP_DENIED/407
3929 GET<br>
> >
<a class="moz-txt-link-freetext" href="http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab">http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab</a>
<a class="moz-txt-link-rfc2396E" href="http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab"><http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab></a>?<br>
> > - HIER_NONE/- text/html<br>
> > 1473026146.453 83 192.168.200.85 TCP_MISS/200
960 POST<br>
> > <a class="moz-txt-link-freetext" href="http://ocsp.digicert.com/">http://ocsp.digicert.com/</a> marcio
HIER_DIRECT/192.16.58.8 <a class="moz-txt-link-rfc2396E" href="http://192.16.58.8"><http://192.16.58.8></a><br>
> > application/ocsp-response<br>
> > 1473026147.447 83 192.168.200.85 TCP_MISS/200
960 POST<br>
> > <a class="moz-txt-link-freetext" href="http://ocsp.digicert.com/">http://ocsp.digicert.com/</a> marcio
HIER_DIRECT/192.16.58.8 <a class="moz-txt-link-rfc2396E" href="http://192.16.58.8"><http://192.16.58.8></a><br>
> > application/ocsp-response<br>
> > 1473026148.923 0 192.168.200.85 TCP_DENIED/407
3796 CONNECT<br>
> > shavar.services.mozilla.com:443
<a class="moz-txt-link-rfc2396E" href="http://shavar.services.mozilla.com:443"><http://shavar.services.mozilla.com:443></a> - HIER_NONE/-
text/html<br>
> > 1473026157.117 61506 192.168.200.85 TCP_MISS/200
3525 CONNECT<br>
> > tiles.services.mozilla.com:443
<a class="moz-txt-link-rfc2396E" href="http://tiles.services.mozilla.com:443"><http://tiles.services.mozilla.com:443></a> marcio
HIER_DIRECT/52.24.123.95 <a class="moz-txt-link-rfc2396E" href="http://52.24.123.95"><http://52.24.123.95></a> -<br>
> > 1473026157.195 61584 192.168.200.85 TCP_MISS/200
4521 CONNECT<br>
> > self-repair.mozilla.org:443
<a class="moz-txt-link-rfc2396E" href="http://self-repair.mozilla.org:443"><http://self-repair.mozilla.org:443></a> marcio
HIER_DIRECT/54.69.9.44 <a class="moz-txt-link-rfc2396E" href="http://54.69.9.44"><http://54.69.9.44></a> -<br>
> > 1473026160.190 63085 192
<a class="moz-txt-link-rfc2396E" href="tel:190%20%2063085%20192"><tel:190%20%2063085%20192></a>.168.200.85 TCP_MISS/200 5449
CONNECT<br>
> > self-repair.mozilla.org:443
<a class="moz-txt-link-rfc2396E" href="http://self-repair.mozilla.org:443"><http://self-repair.mozilla.org:443></a> marcio
HIER_DIRECT/54.69.9.44 <a class="moz-txt-link-rfc2396E" href="http://54.69.9.44"><http://54.69.9.44></a> -<br>
> > 1473026204.518 0 192.168.200.85 TCP_DENIED/407
3780 CONNECT<br>
> > safebrowsing.google.com:443
<a class="moz-txt-link-rfc2396E" href="http://safebrowsing.google.com:443"><http://safebrowsing.google.com:443></a> - HIER_NONE/- text/html<br>
> > 1473026207.807 62056 192.168.200.85 TCP_MISS/200
3686 CONNECT<br>
> > incoming.telemetry.mozilla.org:443
<a class="moz-txt-link-rfc2396E" href="http://incoming.telemetry.mozilla.org:443"><http://incoming.telemetry.mozilla.org:443></a> marcio
HIER_DIRECT/52.89.83.186 <a class="moz-txt-link-rfc2396E" href="http://52.89.83.186"><http://52.89.83.186></a> -<br>
> > 1473026207.808 61159 192.168.200.85 TCP_MISS/200
390 CONNECT<br>
> > incoming.telemetry.mozilla.org:443
<a class="moz-txt-link-rfc2396E" href="http://incoming.telemetry.mozilla.org:443"><http://incoming.telemetry.mozilla.org:443></a> marcio
HIER_DIRECT/52.89.83.186 <a class="moz-txt-link-rfc2396E" href="http://52.89.83.186"><http://52.89.83.186></a> -<br>
> > 1473026207.808 61159 192.168.200.85 TCP_MISS/200
390 CONNECT<br>
> > incoming.telemetry.mozilla.org:443
<a class="moz-txt-link-rfc2396E" href="http://incoming.telemetry.mozilla.org:443"><http://incoming.telemetry.mozilla.org:443></a> marcio
HIER_DIRECT/52.89.83.186 <a class="moz-txt-link-rfc2396E" href="http://52.89.83.186"><http://52.89.83.186></a> -<br>
> > 1473026207.808 61160 192.168.200.85 TCP_MISS/200
390 CONNECT<br>
> > incoming.telemetry.mozilla.org:443
<a class="moz-txt-link-rfc2396E" href="http://incoming.telemetry.mozilla.org:443"><http://incoming.telemetry.mozilla.org:443></a> marcio
HIER_DIRECT/52.89.83.186 <a class="moz-txt-link-rfc2396E" href="http://52.89.83.186"><http://52.89.83.186></a> -<br>
> > 1473026207.809 61160 192.168.200.85 TCP_MISS/200
390 CONNECT<br>
> > incoming.telemetry.mozilla.org:443
<a class="moz-txt-link-rfc2396E" href="http://incoming.telemetry.mozilla.org:443"><http://incoming.telemetry.mozilla.org:443></a> marcio
HIER_DIRECT/52.89.83.186 <a class="moz-txt-link-rfc2396E" href="http://52.89.83.186"><http://52.89.83.186></a> -<br>
> > 1473026207.814 61165 192.168.200.85 TCP_MISS/200
390 CONNECT<br>
> > incoming.telemetry.mozilla.org:443
<a class="moz-txt-link-rfc2396E" href="http://incoming.telemetry.mozilla.org:443"><http://incoming.telemetry.mozilla.org:443></a> marcio
HIER_DIRECT/52.89.83.186 <a class="moz-txt-link-rfc2396E" href="http://52.89.83.186"><http://52.89.83.186></a> -<br>
> > 1473026207.866 61052 192.168.200.85 TCP_MISS/200
3821 CONNECT<br>
> > aus5.mozilla.org:443
<a class="moz-txt-link-rfc2396E" href="http://aus5.mozilla.org:443"><http://aus5.mozilla.org:443></a> marcio
HIER_DIRECT/52.34.235.152 <a class="moz-txt-link-rfc2396E" href="http://52.34.235.152"><http://52.34.235.152></a> -<br>
> > 1473026212.687 116018 192.168.200.85 TCP_MISS/200
61971 CONNECT<br>
> > normandy.cdn.mozilla.net:443
<a class="moz-txt-link-rfc2396E" href="http://normandy.cdn.mozilla.net:443"><http://normandy.cdn.mozilla.net:443></a> marcio
HIER_DIRECT/52.84.177.125 <a class="moz-txt-link-rfc2396E" href="http://52.84.177.125"><http://52.84.177.125></a> -<br>
> > 1473026264.532 0 192.168.200.85 TCP_DENIED/407
3780 CONNECT<br>
> > safebrowsing.google.com:443
<a class="moz-txt-link-rfc2396E" href="http://safebrowsing.google.com:443"><http://safebrowsing.google.com:443></a> - HIER_NONE/- text/html<br>
> > 1473026299.647 0 10.133.85.3 TCP_DENIED/407
3813 CONNECT<br>
> > iecvlist.microsoft.com:443
<a class="moz-txt-link-rfc2396E" href="http://iecvlist.microsoft.com:443"><http://iecvlist.microsoft.com:443></a> - HIER_NONE/- text/html<br>
> > 1473026335.221 0 10.133.85.3 TCP_DENIED/407
3813 CONNECT<br>
> > ieonline.microsoft.com:443
<a class="moz-txt-link-rfc2396E" href="http://ieonline.microsoft.com:443"><http://ieonline.microsoft.com:443></a> - HIER_NONE/- text/html<br>
> > 1473026592.061 6624 10.133.85.3 TCP_MISS/200 3582
CONNECT<br>
> > forum.zentyal.org:443
<a class="moz-txt-link-rfc2396E" href="http://forum.zentyal.org:443"><http://forum.zentyal.org:443></a> marcio
HIER_DIRECT/162.13.13.134 <a class="moz-txt-link-rfc2396E" href="http://162.13.13.134"><http://162.13.13.134></a> -<br>
><br>
> Notice how the 407 occur in bunches. 2-3 getting a 407
reject, then many<br>
> requests going through with user credentials. Then again
some without<br>
> any getting a 407.<br>
> Those bunches of 407 will be matching some type of
credentials timeout<br>
> in the browser, or opening of new tabs.<br>
><br>
><br>
> This request below is the only one from 192.168.200.96 so
appears to be<br>
> the one you provide cache.log trace for...<br>
><br>
><br>
> > 1473026793.073 0 192.168.200.96 TCP_DENIED/407
3780 CONNECT<br>
> > safebrowsing.google.com:443
<a class="moz-txt-link-rfc2396E" href="http://safebrowsing.google.com:443"><http://safebrowsing.google.com:443></a> - HIER_NONE/- text/html<br>
> ><br>
> > /var/log/squid3/cache.log<br>
> ><br>
> > ----------<br>
> > 2016/09/04 19:06:33.073 kid1| client_side.cc(2407)
parseHttpRequest: HTTP<br>
> > Client local=192.168.200.7:3128
<a class="moz-txt-link-rfc2396E" href="http://192.168.200.7:3128"><http://192.168.200.7:3128></a> remote=192.168.200.96:56302
<a class="moz-txt-link-rfc2396E" href="http://192.168.200.96:56302"><http://192.168.200.96:56302></a> FD 12 flags=1<br>
> > 2016/09/04 19:06:33.073 kid1| client_side.cc(2408)
parseHttpRequest: HTTP<br>
> > Client REQUEST:<br>
> > ---------<br>
> > CONNECT safebrowsing.google.com:443
<a class="moz-txt-link-rfc2396E" href="http://safebrowsing.google.com:443"><http://safebrowsing.google.com:443></a> HTTP/1.1<br>
> > User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64;
rv:35.0) Gecko/20100101<br>
> > Firefox/35.0<br>
> > Proxy-Connection: keep-alive<br>
> > Connection: keep-alive<br>
> > Host: safebrowsing.google.com:443
<a class="moz-txt-link-rfc2396E" href="http://safebrowsing.google.com:443"><http://safebrowsing.google.com:443></a><br>
><br>
> Notice the abence of any Proxy-Authorization header
containing credentials.<br>
><br>
> ><br>
> ><br>
> > ----------<br>
> > 2016/09/04 19:06:33.073 kid1| client_side.cc(1459)
sendStartOfMessage: HTTP<br>
> > Client local=192.168.200.7:3128
<a class="moz-txt-link-rfc2396E" href="http://192.168.200.7:3128"><http://192.168.200.7:3128></a> remote=192.168.200.96:56302
<a class="moz-txt-link-rfc2396E" href="http://192.168.200.96:56302"><http://192.168.200.96:56302></a> FD 12 flags=1<br>
> > 2016/09/04 19:06:33.073 kid1| client_side.cc(1460)
sendStartOfMessage: HTTP<br>
> > Client REPLY:<br>
> > ---------<br>
> > HTTP/1.1 407 Proxy Authentication Required<br>
> > Server: squid/3.4.8<br>
> > Mime-Version: 1.0<br>
> > Date: Sun, 04 Sep 2016 22:06:33 GMT<br>
> > Content-Type: text/html<br>
> > Content-Length: 3357<br>
> > X-Squid-Error: *ERR_CACHE_ACCESS_DENIED 0*<br>
> > Proxy-Authenticate: Basic realm="CMS"<br>
><br>
> That realm="CMS" does not match the realm value of
"AUTENTICACAO" which<br>
> your earlier config contained.<br>
><br>
> Unless you changed your auth_param settings that is a
sign that some<br>
> other proxy is generating that response message. BUT,
your access.log<br>
> entry shows no server being contacted.<br>
><br>
><br>
><br>
> > X-Cache: MISS from proxy.cms.ensino.br
<a class="moz-txt-link-rfc2396E" href="http://proxy.cms.ensino.br"><http://proxy.cms.ensino.br></a><br>
> > X-Cache-Lookup: NONE from proxy.cms.ensino.br:3128
<a class="moz-txt-link-rfc2396E" href="http://proxy.cms.ensino.br:3128"><http://proxy.cms.ensino.br:3128></a><br>
> > Via: 1.1 proxy.cms.ensino.br
<a class="moz-txt-link-rfc2396E" href="http://proxy.cms.ensino.br"><http://proxy.cms.ensino.br></a> (squid/3.4.8)<br>
> > Connection: keep-alive<br>
> ><br>
> > ----------<br>
> ><br>
> > Sorry, but I didn't discover the problem!<br>
> ><br>
> > Anybody have an idea?<br>
><br>
> If you altered your squid.conf settings as above in the
auth details,<br>
> did you also remove 192.168.200.7 from the "localhost"
ACL ?<br>
><br>
> Your rule "http_access allow localhost" occurs before
anything that<br>
> requires authentication. That means these requests coming
from<br>
> 192.168.200.7 to your proxy would not use authentication
for the above<br>
> CONNECT request. So no reason for your proxy to generate
any 407 response.<br>
><br>
><br>
> Amos<br>
><br>
><br>
><br>
><br>
> _______________________________________________<br>
> squid-users mailing list<br>
> <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
> <a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a></span><br>
<br>
-----BEGIN PGP SIGNATURE-----
<br>
Version: GnuPG v2
<br>
<br>
iQEcBAEBCAAGBQJXzaflAAoJENNXIZxhPexG6eUH/jWH/V1FJmKWyDLDt8cTj4+Q
<br>
0cBW7KhaBvJnN0QX1t9J/AVaPP5ZY5wlsSFo6ESWd7tYo2h6UDbCLnUHADpI4DPC
<br>
nH3f8yBGL9sELL+RnUZjCV+mwwGLJPDbGquxRiJ2VVGijNj1CGrHEGQWMnZESG5D
<br>
Sz1e+9zBM62vM+40T/llgMopH7Z0NgsansWDgsFJlC9iuDzXQ3kDJ6lPG7w2HB2c
<br>
dL/jssrZg7tjDuMPJi5ZrI963GMxrbmqx8w2kTOvoLKiIYHmK6E1fSGvKtpSzXjz
<br>
PtuLqdleFGklny2n9iLBYwtPmjGCr1DBr4L7/k6Yt6GdPWaTfRQJolK5hBYm7/g=
<br>
=ObEq
<br>
-----END PGP SIGNATURE-----
<br>
<br>
</body>
</html>