⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.144
Server IP:
157.245.143.252
Server:
Linux www 6.11.0-9-generic #9-Ubuntu SMP PREEMPT_DYNAMIC Mon Oct 14 13:19:59 UTC 2024 x86_64
Server Software:
nginx/1.26.0
PHP Version:
8.3.11
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
usr
/
lib
/
python3
/
dist-packages
/
ufw
/
__pycache__
/
View File Name :
util.cpython-312.pyc
e 2 d Z ddlmZ ddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl Z ddl Z ddlZddlZddlmZ ddlmZmZ dZdZg dZg dZd d gZd Zd Zd Z d Z d Z d9dZ d Z d Z!d Z"d Z#d:dZ$d Z%d Z&d Z'd:dZ(d Z)ejT dfd Z+d Z,d Z-d Z.d Z/ e j` fd!Z1 e j` fd"Z2d# Z3d$ Z4d% Z5d& Z6d' Z7d( Z8d) Z9d* Z:d;d+Z;d<d,Z<d- Z=d=d.Z>d/ Z?d0 Z@d1 ZAd2 ZBd3 ZCd4 ZDd5 ZEd6 ZFd>d7ZGd8 ZHy)?z"util.py: utility functions for ufw )print_functionN)reduce)mkstempmktempF)tcpudpipv6espahigmpgrevrrp)r r r r r r r r c d} t j | t j | d d} t j | d |dk( rd}|S d} |S # t $ r w xY w# t $ r Y >w xY w# t $ r Y |S w xY w)z8Get the protocol for a specified port from /etc/services r r any)socket getservbyname Exception)portprotos */usr/lib/python3/dist-packages/ufw/util.pyget_services_protor . s E T" T5) T5) E>E L E L% L s3 A A% A4 A4 A"% A10A14 B Bc d}d}| j d }t | dk( r |d }d}||fS t | dk( r/|d }|d }|t v rt d|z }t | ||fS t d }t | ) z Parse port or port and protocolr / r r z Invalid port with protocol '%s'zBad port)splitlenportless_protocols_ ValueError)p_strr r tmperr_msgs r parse_port_protor% H s D E ++c C 3x1}1v %= SQ 1vA & &9EABG W% % %= J-!! c p t j s t d yt | dkD st j d| sy| j d } t j t j |d t | dkD ryt | dk( rt |d d syy # t $ r Y yw xY w) z Verifies if valid IPv6 addressz"python does not have IPv6 support.F+ z^[a-fA-F0-9:\./]+$r r r r T) r has_ipv6warnr rematchr inet_ptonAF_INET6r _valid_cidr_netmaskaddrnets r valid_address6r3 \ s ?? 12 4y2~RXX&;T B **S/C #a&1 3x!| SQ "3q640 s 'B) ) B54B5c Z t | dkD st j d| sy| j d } t j t j |d t |d d sy t | dkD ryt | dk( rt |d d syy# t $ r Y yw xY w) z Verifies if valid IPv4 address z ^[0-9\./]+$Fr r r r T) r r+ r, r r r- AF_INET_valid_dotted_quadsr valid_netmaskr0 s r valid_address4r9 v s 4y2~RXXnd ; **S/C Q0"3q651 2 3x!| SQ SVU+ s 6B B*)B*c 6 t | | xs t | | S )z(Verifies if valid cidr or dotted netmask)r/ r7 )nmv6s r r8 r8 s r2 & E*=b"*EEr& c |dk( r t | S |dk( r t | S |dk( rt | xs t | S t )zValidate IP addresses64r )r3 r9 r! )r1 versions r valid_addressrA sI #~ d## C d## E d#;~d';; r& c g }d}d}t j }|rd}t j }d| v r5| j d }|r |d dk( r|d= n'|s%|d dk( s|d dk( r|d= n|j | |s0t | d k( r"t |d | r t |d | |d< |d }t j |t j || }||d k7 rd }t | d k( r5|d|d z z }|s(t | }||k7 rd |d |d}t | |}d }t || sd|z }t | t ||fS # t $ r Y w xY w)zConvert address to standard form. Use no netmask for IP addresses. If netmask is specified and not all 1's, for IPv4 use cidr if possible, otherwise dotted netmask and for IPv6, use cidr. Fr? r> r r 12832z255.255.255.255r r TzUsing 'z' for address ''zInvalid address '%s')r r6 r. r appendr r7 _dotted_netmask_to_cidrr inet_ntopr- _address4_to_networkdebugrA r! ) origr< r2 changedr@ s_typer1 networkdbg_msgs r normalize_addressrP s| CGG ^^F d{jjo #a&E/AQ4 3q65F+FA 4 #c(a-$7A$C ,SVR8CF q6D FF$4$4VT$B CD s1v~ 3x1} c!f *40G$;BDIg w '(D1 g '?5 s E EEc t | d S )z"Opens the specified file read-onlyr)open)fns r open_file_readrU s C=r& c ~ t | } t \ }}|| ||dS # t $ r |j w xY w)z=Opens the specified file read-only and a tempfile read-write.)rK orignamer# tmpname)rU r r close)rT rK r# rX s r open_filesrZ sJ " D g r#' KK s ! <c |dk( ry| st t j d t r7| t j j k( rt j | yd}t j d dk\ r!t j | t |d }nt j | | }|dk rt t j d y) z~Write to the file descriptor and error out of 0 bytes written. Intended to be used with open_files() and close_files().r NzNot a valid file descriptorr asciiz"Could not write to file descriptor) OSErrorerrnoENOENT msg_outputsysstdoutfilenowrite version_infoosbytesEIO)fdoutrcs r write_to_filern s by ell$ABB bCJJ - - // B a XXb%W- . XXb# Qweii!EFF r& Tc | d j t j | d |r8t j | d | d t j | d | d t j | d y)zuCloses the specified files (as returned by open_files), and update original file with the temporary file. rK r# rW rX N)rY rh shutilcopystatcopyunlink)fnsupdates r close_filesrv sc KHHSZ JY 8 C NC O4IIc)n r& c t | t j | t j t j d }|j d }|j t | gS # t $ r}dt | gcY d}~S d}~ww xY w)z!Try to execute the given command.T)rd stderruniversal_newlines Nr ) rJ subprocessPopenPIPESTDOUTr_ str communicate returncode)commandspexrl s r cmdr sx 'N gjoo%/%6%6157 .. 1 C MM3s8 $$ SW~ s 5A, , B 5 BB B c * t j | t j }t j ||j }|j d }|j t | gS # t $ r}dt | gcY d}~S d}~ww xY w)z#Try to pipe command1 into command2.)rd )stdinrz Nr )r{ r| r} rd r_ r r r )command1command2sp1sp2r rl s r cmd_piper $ sy x @ xszz: // A C NNCH %% SW~ s AA2 2 B; B B Bc R | j } |j dd }t r5t j t j r|j | n|j t | | j y# t $ r | }Y w xY w# t $ r |}Y w xY w)zQImplement our own print statement that will output utf-8 when appropriate.utf-8ignoreN) bufferr encoderb inspectisclassioStringIOrf ri flush)outputswriterrl s r _printr 2 s hhw) goobkk2 Q U3Z LLN s" B B BB B&%B&c t t j d| z |rt j d yy# t $ r Y $w xY w)z Print error message and exitz ERROR: %s r N)r rc rx IOErrorexit)rl do_exits r errorr G sC szz=3./ s 8 AAc ^ t t j d| z y# t $ r Y yw xY w)zPrint warning messagez WARN: %s N)r rc rx r rl s r r* r* R s, szz<#-. s ,,c t r|t j k( rt } |rt |d| z yt |d| z y# t $ r Y yw xY w)z Print messagez%s %sN)rb rc rd r r )rl r newlines r msgr Z sK f * 66C< ( 64#: & s A A AAc l t r t t j d| z yy# t $ r Y yw xY w)zPrint debug messagez DEBUG: %s N) DEBUGGINGr rc rx r r s r rJ rJ h s6 3::}s 2 3 s ' 33c > t |fd| j d S )z A word-wrap function that preserves existing line breaks and most spaces in the text. Expects that existing line breaks are posix newlines ( ). c | dt | | j d z dz t |j dd d z |k\ |S )Nz r r )r rfindr )linewordwidths r <lambda>zword_wrap.<locals>.<lambda>w sT #d)DJJt$44q8 djjq 1! 4569>? A 3r& )r r )textr s r word_wrapr q s% 5 **S/ r& c t | d S )z Word wrap to a specific widthK )r )r s r wrap_textr s T2 r& c 6 d | j fd y)a$ Sorts list of strings into numeric order, with text case-insensitive. Modifies list in place. Eg: [ '80', 'a222', 'a32', 'a2', 'b1', '443', 'telnet', '3', 'http', 'ZZZ'] sorts to: ['3', '80', '443', 'a2', 'a32', 'a222', 'b1', 'http', 'telnet', 'ZZZ'] c X | j r t | S | j S N)isdigitintlower)ts r r z human_sort.<locals>.<lambda> s qyy{SV9 9r& c b t j d| D cg c] } | c}S c c}w )Nz([0-9]+))r+ r )kcnorms r r z human_sort.<locals>.<lambda> s( bhhz1.EF.ET!W.EFFs ,)keyN)sort)lstr s @r human_sortr s :DHHFHGr& c t | }t j j dt | d }t j j | st d|z t | j d j dd d j d }t | S # t $ r t d w xY w)zdFinds parent process id for pid based on /proc/<pid>/stat. See 'man 5 proc' for details. zpid must be an integer/procstatCouldn't find '%s'r )r ) r r r! rh pathjoinr isfiler rS readlinesrsplitr )mypidpidnameppids r get_ppidr s 3%j 77<<S6 2D 77>>$ *d344 : !! $ + +C 3A 6 < < >q AD t9 31223s B/ /Cc x t | }| dk( s|dk ryt j j dt | d }t j j | st d |z }t | t | j d j d }t d |z |d k( ry t | S # t $ r t d }t | Y yt $ r# t d t | z }t | w xY w# t $ r t d |z }t | w xY w) z1Determine if current process is running under sshz%Couldn't find pid (is /proc mounted?)Fz!Couldn't find parent pid for '%s'r r r r r z"Could not find executable for '%s'zunder_ssh: exe is '%s'z(sshd)T)r r r r* r r r! rh r r r rS r r rJ under_ssh)r r warn_msgr$ r exes r r r s/ "} ax419 77<<TF 3D 77>>$ ()T2!!"4j""$Q'--/2 "c *+ h ; <= X "78CHE!!" "89TB!!"s C ;-D D(+D#D9c v d}|rd}t j d| r t | dk st | |kD ryy)zVerifies cidr netmasks ^[0-9]+$r FT)r+ r, r )r; r< nums r r/ r/ s7 C 88K $B! s2w} r& c |ryt j d| rH| j d }t | dk7 ry|D ]" }|r t | dk st | dkD s" y yy)z.Verifies dotted quad ip addresses and netmasksFz^[0-9]+\.[0-9\.]+$. r T)r+ r, r r r )r; r< quadsqs r r7 r7 s` 88)2 .HHSME5zQ CFQJ#a&3, r& c d}|rt t | | st d} t t j dt j | d }d}t d D ] }||z dz dk( rd}|rd} n|dz } |dk\ r|dk rt d|z }t || st |S # t $ r8 t t j dt j | d }Y w xY w) z@Convert netmask to cidr. IPv6 dotted netmasks are not supported.r r >LFr r Tr\ ) r! r7 longstructunpackr inet_aton NameErrorr ranger r/ )r; r< cidrmbitsbits found_onens r rG rG s D "2r* E dF,<,<R,@A!DED rA Q!# EQJE A:%2+rEz?D tR ( K) Ev}}T6+;+;B+?@CDD Es 5B, ,>C-,C-c B d}|rt t | | st t d }t d D ] }|t | k s|dd|z z z } t j t j d| }t || st |S # t $ r d}Y tw xY w)z<Convert cidr to netmask. IPv6 dotted netmasks not supported.r r r r r5 r ) r! r/ r r r r r inet_ntoar packr7 )r r< r; r r s r _cidr_to_dotted_netmaskr $ s B "4, 7D rA3t9}R!V # fkk$ 5 6 r2 & I D s B B B c d| vr t d | S | j d }t | dk7 st |d d st |d }|d }|}t |d r t |d } t t j dt j | d }t t j dt j | d }||z }t j t j d| }|d|S # t $ rm t t j dt j | d }t t j dt j | d }Y w xY w)z8Convert an IPv4 address and netmask to a network addressr z8_address4_to_network: skipping address without a netmaskr r Fr r )rJ r r r7 r! r/ r r r r r r r r r r ) r1 r# hostorig_nmr; host_bitsnm_bits network_bitsrN s r rI rI A sO $ HI **S/C 3x1} /A > q6D!fG B2u% $R /D tV-=-=d-CDQGH v}}T6+;+;B+?@CD w&L v{{4 >?G w '' D dF,<,<T,BCAFG fmmD&*:*:2*>?BCDs +A*D A3F ?F c d }d| vr t d | S | j d }t | dk7 st |d d st |d }|d }t j dt j t j | } t d }t d D ]> } ||| d }t d D ]" } |dt || z d | z |d z z z z }$ @ t d } t d D ] }|t | k s| dd |z z z } || z } g } t d D ]0 }| j t || d |d z |d z d z d 2 t j t j t j d| d | d | d | d | d | d | d | d } | d|S # t $ r d}Y 3w xY w# t $ r d} Y w xY w)z8Convert an IPv6 address and netmask to a network addressc dj t |dz dd D cg c] }t | |z dz c} S c c}w )zDecimal to binaryr r r\ )r r r )r countys r dec2binz%_address6_to_network.<locals>.dec2binf s? wwU57B5KL5KSAXN+5KLMMLs =r z8_address6_to_network: skipping address without a netmaskr r Tr z>8H rz r r] r )rJ r r r8 r! r r r r- r. r r r r rF rH r )r1 r r# orig_hostnetmaskunpackedr ir jr r2 r rN s r _address6_to_networkr d s N $ HI **S/C 3x1}M#a&$ 7AI!fG}}UF$4$4V__5>%@ AHG 1X HQK $rA !c!A$i-SU1R4Z8 8I q' 3Z s7| qWM) )G g C C 1X 3wsC(2ad2g6:; v %{{5#a&#a&+.q63q63q6+.q63q63q6 CDG w ''A s$ F< $ G < G G G G c |j d }t | dk7 st |d | st |d }|d }|dk( s|dk( ry| }d|v r9|j d }t | dk7 st |d | st |d }|dk( s|dk( ry|r t | r t | s"t t | r t | st t || r|s t || }|rIt |d| j d d }t |d| j d d }||k( S t |d| j d d }t |d| j d d }||k( S )z&Determine if address x is in network yr r r r z0.0.0.0z::T) r r r8 r! r3 r9 r/ r r rI ) tested_add tested_netr< r# r r address orig_networkrN s r in_networkr s 3 C 3x1}M#a&" 5AI!fGI d!2G g~mmC s8q= c!fb 9 a&)w$ g&nY.G g&nY.G 7B')'26 +-6-A BBG%*QP &(/(: ;;@5:aI l "" ,-6-A BBG%*QP &(/(: ;;@5:aI l ""r& c d} dD ]E }t j j |d } t j j | r nd} G | dk( rt t j d | S )Nr )z/sbinz/binz /usr/sbinz/usr/binz/usr/local/sbinz/usr/local/biniptableszCould not find iptables)rh r r existsr_ r` ra )r ds r _find_system_iptablesr sa C3 ggll1j) 77>># C3 byell$=>> Jr& c | t } t | dg \ }}|dk7 r t t j d| z |j }t j dd|d S )zReturn iptables versionz-Vr zError running '%s'z^vr r )r r r_ r` ra r r+ sub)r rm rl r# s r get_iptables_versionr sa {#%S$K IR Qwell$8C$@AA ))+C 66$CF ##r& c ( d }|r1t j dk7 rt t j d | t } g }d}| j d rd}|t dd z }t | d |g \ }}|dk7 rt t j | || |g d r|j d || |g d r|j d t | d|g t | d|g \ }}|dk7 rt t j | |S )z[Return capabilities set for netfilter to support new features. Callers must be root.c < | d|g}t ||z \ }}|dk( ryy)Nz-Ar TF)r )r chainruleargsrm rl s r test_capz,get_netfilter_capabilities.<locals>.test_cap s- T5!t $ S 7r& r z Must be rootz ufw-caps-test ip6tableszufw6-caps-testr )prefixdirz-N)-m conntrack --ctstateNEWr! recentz--setz recent-set) r! r" r# r$ r! r% z--updatez --seconds30z --hitcountr> z recent-updatez-Fz-X) rh getuidr_ r` EPERMr endswithr r ra rF )r do_checksr capsr rm rl s r get_netfilter_capabilitiesr, s RYY[A%ekk>22 {#% D E ||K V22 &&E S$&'IR QwellC(( U 6 7 L! U 0 1 O$ dES$&'IR QwellC(( Kr& c | t | }t }|j D ] }|j d s|j d s'|j }|d }|d j d d }t }dj |d j d dd |d< |d |d < |d j d d |d < |d dk( r |d |d< n|d j d d |d< ||vrt ||< g || |< n||| vrg || |< || | j | |S )z:Get and parse netstat the output from get_netstat_output()r r r r :r\ Nladdrr] uidr r r -r )get_netstat_outputdict splitlines startswithr r rF )r< netstat_outputr r r# r r items r parse_netstat_outputr8 ' sK (+N A ))+u%dooe.D jjlA1v||C $vQ c!23B!78W !fU !fll3'*U ;# u+DK a&,,s+A.DK >vAeH AeHTN1U8#!#% % d#1 ,4 Hr& c d}|r d}t j j | s t t j d|z t | j D ] }|j }| |d k( s dj t dt |d d D cg c] }|d ||dz c} }|d j d k7 sr|d t |d j d } |dk( rt t j d t! j t j" t j$ } t! j& t) j* |j- d t/ j0 d| dd dd }t5 || d S c c}w # t2 $ r t t j d w xY w)z Get IP address for interfacer /proc/net/if_inet6'%s' does not existr r. r r r 80r r No such devicei 256sN )rh r r r_ r` ra rS r r r r r r r r ENODEVr r6 SOCK_DGRAMr fcntlioctlre r r r rP )ifnamer< r1 procr r# r r s r get_ip_from_ifrH M s D #ww~~d#%,,(=(DE EJ((*D**,CQ xx38CAK3KL3KaCF1QqSM3KLN q6<<>T)&*CA ,CDD + 2:%,,(89 9 MM&..&*;*; < :##EKK F$*KKs $D%FFH%M ND T2 &q )) M :%,,(89 9 :s F& AF+ +$Gc d}d}t | rd}d}n%t | st t j d t j j | s t t j d|z d}|rt | j D ] }|j }|d j }d j t d t! |d d D cg c] }|d ||d z c} }|d j# d k7 r"|dt% |d j# d }| |k( sd|v st' | |d s|} |S |S t | j D ]@ }d |vr|j d d j } t) |d } | | k( s=|} |S |S c c}w # t $ r Y Uw xY w)z Get interface for IP addressFz /proc/net/devTr: r= r; r r r. r r r r< r r )r3 r9 r r` rB rh r r r_ ra rS r r stripr r r r r r rH ) r1 r< rG matchedr r# rF r tmp_addrips r get_if_from_iprN m s B Dd # D !ell$455 77>>$ ell$9D$@AAG J((*D**,CV\\^Fxx38CAK3KL3KaCF1QqSM3KLNH1v||~%&.CFLLNB0GHx xJtXt$D N9 +8 N J((*D$ZZ_Q'--/F #FE2 Tz N + N/ M s F. F33 F?>F?c 2 t j d } | j t j d }t }| D ] }|j | st j j d|d }t j |t j t j z smd} t j t j j d|d } t j | }|D ]` } t j t j j || d }|dt j j | ||< b ! |S # t $ r Y w xY w# t $ r Y ?w xY w# t $ r Y w xY w)z Get inodes of files in /procr r rk r1 r r r )rh listdirr r+ compiler3 r, r r accessF_OKR_OKreadlinkr r basename) proc_filespatinodesr fd_pathexe_pathdirsr inodes r _get_proc_inodesr^ sL G$JOO **[ !C VF yy| '',,w40 yy"''BGG"34 {{277<<E#BCH ::g&D A Wa 89!< ()"''*:*:8*D EF5M + 8 M s6 74E+,E:6F + E76E7: FF FFc l ddddddddd d d d }d dddd}t j j d| }t j |t j t j z st g }d}t | j }|D ] }|j }|sd}|t ||d d } | j d rd} n| j d r| d k7 rX||d j d \ } } ||d } ||d } |j | t | d | | | f |S ) z=Read /proc/net/(tcp|udp)[6] file and return a list of tuples ESTABLISHEDSYN_SENTSYN_RECV FIN_WAIT1 FIN_WAIT2 TIME_WAITCLOSE CLOSE_WAITLAST_ACKLISTENCLOSING) r r r] r r r r r r r] r rk ) local_addrstater0 r] z /proc/netFTro r r NAr rn r. r0 r] ) rh r r rR rS rT r! rS r r r r5 rF )protocol tcp_statesproc_net_fieldsrT r skipped_firstlinesr fieldsro r/ r r0 r] s r _read_proc_net_protocolrw sX # !!! " J '(!" !"O k8 ,B 99R277* + CM H E M 3vog&> ?DE u %E 'EX,= _\ :;AA#F t_U+,w/0 E3tR=#ue<= Jr& c X d}t | dkD rd}t ddd D ]8 }|dj t |dz |d D cg c] }| |dz | c} z }: t dj t dt | d D cg c] }|||dz j c} d d }|S g }t ddd D cg c] }| |dz | c}D ]& }|j t t |d ( t d j | d d }|S c c}w c c}w c c}w ) zDConvert an address from /proc/net/(tcp|udp)* to a normalized addressr r r r r r. r Tr r F)r r r rP r rF r r )paddr convertedr# r r s r convert_proc_addressr| s6 I 5zA~q"a A 27751a3DF3DaU1Q3q\3DFG GC !%chh,1!SXq,AB,AqAac ",AB'D ).q!R : A51Q< :A JJs3q": ' ;%chhsmU;A> GB ;s D D" D'c t }ddg}| r|ddgz }|D ] } t | ||< t }t |j }|j d}|D ][ }|| D ]Q \ }} } } } t | } d}t | |v r|t | }||dd | d | d d | d d | dd | d d |d z }S ] |S # t $ r t d|z }t | Y w xY w)z5netstat-style output, without IPv6 address truncationr r tcp6udp6z!Could not get statistics for '%s'r r1 5r r. 4611r ) r3 rw r r r* r^ listkeysr r| r )r< proc_net_datar pr rY protocolsr r/ r r0 r] ro r1 r s r r2 r2 s FM ENE &&!! 6q 9M! F]'')*I NN A 0=a0@ ,UD#ue'.DC5zV# SZ( qBF7M7<c5#O OA 1A H/ <BCH N s C"C*)C*c || S | j d r7t | dk r|}|S t j j || dd }|S t j j || }|S )zAdd prefix to dirNr r r )r5 r rh r r )r r newdirs r _findpathr & sm ~ ~~c s8a<F M WW\\&#ab'2F M fc* Mr& c t j d dk rt j | d S t j | j dd j d S )z,Take a string and convert it to a hex stringr r] hexr r )errorsr^ )rc rg codecsr binasciihexlifydecode)r s r hex_encoder 4 sQ Q }}Q&& AHHWXH > ? F Fw OOr& c t j d dk r!| j d j d S t j dt | dz r| dd n| z j dd S ) z,Take a hex string and convert it to a stringr r] r )encodingr r r Nr\ backslashreplace)rc rg r r unhexlifyr )hs r hex_decoder = sn Q xxx'..w77 dA af B C J J# r& c n d}|s0t | d }t j |t j |S )zCreate a blocking lockfileNw)rS rD lockfLOCK_EX)lockfiledryrunlocks r create_lockr L s- D Hc" D%--( Kr& c | y t j | t j | j y# t $ r Y yw xY w)z(Free lockfile created with create_lock()N)rD r LOCK_UNrY r! )r s r release_lockr U s> | D%--( s 4: AA)r )Tr )NT)F)z /run/ufw.lockF)I__doc__ __future__r r r r` rD r r rh r+ rp r r r{ rc functoolsr tempfiler r r rb supported_protocolsr ipv4_only_protocolsr r% r3 r9 r8 rA rP rU rZ rn rv r r r r r* rd r rJ r r r getpidr r r/ r7 rG r rI r r r r r, r8 rH rN r^ rw r| r2 r r r r r r& r <module>r sv (" & $ Q A v& 4(42F 4n LG2 % & * JJ H 299; . "))+ ! N 2$\: (F7(t,#h $6r# L *@,^"J,^& F P r&