[ossec-list] Re: Problems faced with OSSEC.

["Pankaj P. Pawar" <Pankajpa@xxxxxxxxxx>]

***********************
Your mail has been scanned by InterScan.
***********-***********


Dear Daniel,

It's been a long time since I have heard anything from your side on the
issue.
Did you find anything wrong with the kind of setup I have done on the
Client and the Server?

Thanks,
Pankaj P.

-----Original Message-----
From: Pankaj P. Pawar 
Sent: Friday, February 23, 2007 10:13 AM
To: 'ossec-list@xxxxxxxxx'
Cc: 'Daniel Cid'
Subject: RE: [ossec-list] Re: Problems faced with OSSEC.

Dear Daniel,

No I don't have any nat device between the client and the server.
In fact the client and the server both reside on the same switch.
Following is the output of "uname"

Server: Linux ossec 2.6.9-5.ELsmp #1 SMP Wed Jan 5 19:30:39 EST 2005
i686 i686 i386 GNU/Linux

Client: Linux ossecclient.nsdl.co.in 2.6.9-5.EL #1 Wed Jan 5 19:22:18
EST 2005 i686 i686 i386 GNU/Linux

Thanks,
Pankaj P.

-----Original Message-----
From: Daniel Cid [mailto:daniel.cid@xxxxxxxxx] 
Sent: Friday, February 23, 2007 2:42 AM
To: Pankaj P. Pawar
Subject: Re: [ossec-list] Re: Problems faced with OSSEC.

***********************
Your mail has been scanned by InterScan.
***********-***********


Hi Pankaj,

I am looking at your files in here and they look good (the config part).
Do you have a nat device between the two? What is the operating
system of each one? It is failing because the client can not decrypt the
messages from the server... I just don't know why yet.

Daniel

On 2/22/07, Pankaj P. Pawar <Pankajpa@xxxxxxxxxx> wrote:
>
>
************************************************************************
***********
> This message is for the named addressees' use only. It may contain
NSDL
>
> confidential, proprietary or legally privileged information. If you
receive
>
> this message in error, please immediately delete it. You must not,
directly
>
> or indirectly, use, disclose, distribute, print, or copy any part of
this message
>
> if you are not the intended recipient.Unless otherwise stated, any
commercial
>
> information given in this message does not constitute an offer to deal
on
>
> any terms quoted.  Any reference to the terms of executed transactions
>
> should be treated as preliminary only and subject to our formal
written
>
> confirmation.
>
************************************************************************
***********
>
> ***********************
> Your mail has been scanned by InterScan.
> ***********-***********
>
> Hi Daniel,
>
> Attached are files required.
> Kindly let me know if anything else is required.
>
> Thanks,
> Pankaj P.
>
> -----Original Message-----
> From: ossec-list@xxxxxxxxxxxxxxxx [mailto:ossec-list@xxxxxxxxxxxxxxxx]
> On Behalf Of Daniel Cid
> Sent: Thursday, February 22, 2007 6:58 AM
> To: ossec-list@xxxxxxxxxxxxxxxx
> Cc: pankajppawar@xxxxxxxxx
> Subject: [ossec-list] Re: Problems faced with OSSEC.
>
> ***********************
> Your mail has been scanned by InterScan.
> ***********-***********
>
>
>
> Hi Pankaj,
>
> Reply inline.
>
> On 2/20/07, Pankaj P. Pawar <Pankajpa@xxxxxxxxxx> wrote:
> > Hi,
> >
> > This is the first time I am raising the query in this group.
> >
> > I am using Ossec past three months and I am facing the problems
since
> my first installation of which some are listed below.
> >
> > 1.)     I have to change the permission of the
/var/ossec/log/*current
> log file* to READ everyday as the WEBUI shows the permission as
> FORBIDDEN.
> >
> > I have tried using CHMOD -R 777 var/ossec/log but of no use.
> >
> > Can I know what should be the permissions of the files that are
> installed in the /var/ossec directory?
>
> You need to be using version 1.0 (at least) and make sure to have your
> web server
> user in the ossec group. The following link has a step by step on how
to
> install
> the UI: http://www.ossec.net/dcid/?p=26 .
>
>
> > 2.)     I am getting the following error currently "2007/02/20
> 09:34:13 ossec-agentd(1214): >Problem receiving message from
> 172.16.7.254" and due to that I am not receiving any >alerts for my
> client on my mail ID although the same can be seen in the Current Log
> File >and WEBUI. Also I am able to get the mail alerts for the Server.
> Can I know what does it >means? I have tried importing the
> authentication keys and adding the client again and >again but still
the
> problem persists.
>
> You need to make sure that the IP you configured match what you are
> receiving. Can you
> send us your ossec.conf and ossec.log files in the gz format? In
> addition to that, which version are you using?
>
>
>
> > 3.)     I have attached the client and server configuration for your
> reference. I have followed the manual for configuring the active
> response and the "ar.conf" file does shows an entry for "host-deny" on
> the server as well as the client. But still the actual blocking is not
> happening. Can somebody tell me what could be the possible reason for
> this? I have simulated the same using Nessus Scan and block the Source
> IP if Rule 30114 triggers.
> >
> >
> > 4.)     I am getting the error "2007/02/19 11:16:50
> ossec-remoted(1403): Incorrectly formated message from '172.16.2.35'
> and
> >
> > "2007/02/15 14:08:44 ossec-remoted(1407): Duplicated counter for
> 'À¬#ÿÿÿÿ'.
> >
> > 2007/02/15 14:08:44 ossec-remoted: Duplicate error:  global: 2,
local:
> 9997, saved global: 3, saved local:3"
> >
> > quite frequently which doesn't appears once I restart both the
client
> and server. Is this a >bug and do we have to ignore this message?
>
>
> This kind of message should not happen frequently. Looks like you have
> a mis-configured
> agent. You need to make sure that every IP address maps to only one
> agent (unless
> your configure it for natting).
>
>
> > It is high time for me since I have to deploy the same in my
> production and I have no explanations for these queries. Any help
would
> be highly appreciated.
> >
> >
> >
> > Thanks,
> >
> > Pankaj P.
>
>
> I hope it helps. If you can send your config (and your client.keys
> file) and the ossec.log
> we can see what is going on (please, use the gz format)...
>
> Thanks,
>
> --
> Daniel B. Cid
> dcid ( at ) ossec.net
>
>
>
> begin 666 OssecFiles.tar.gz
> M'XL("" AW44``V9R+CDW.3<N,"Y/<W-E8R!&:6QE<RYT87(`[=WM;]M&GL#Q
> MO/9?,;=]L3802WR61,3&]I+F6B#;%$V*WHL#!%JB;&XD4DM2<;Q__?UF2#W%
> MBJTF4^_Q\.46:TN<^<R00_[F0;3RMJK2B7J=S=.J_];\_G*>I7G=+_2+WJ3(
> M9\^^=7-D&PP&YJ=LS>LH6+\.!J[SS'7"*/+\P/4EG3L(`_^9<KZYY".V554G
> MI5+/RJ*H'TIGSL<#^W</3O_LR/;"'-=8MW-V?7FBU(N):7_]J[RHTO)C6IYG
> MRTMWX/7<J#?H>6'PHK]]7V?IK_/H%]5=-;E))Q]:X3_.S]7K,OWG*LTG=ZJ^
> M26JU3J&R2J6?TLFJ3J?J7$W36;*:URH5^4YYZJ98E94Z/V^AV1JY=#WG17_[
> MTNS>%O8J*]-)79196JFZ4$U)ZG29EK.B7*AD/E=+.>CL:IXJ*2F;99.DSHJ\
> M.MN6-=TQ##"6;!=_N4NKOUSVTWKRO+^JROY5EC>_5/+;B_Y.IF,8D_M SIW3
> M9N[*Z?[Q9-=Y4:;;JC:O3:WZBSJY>M%OWSFP.Z\?3G!35'75FZ;YW4-*DLW[
> M<M/4655GD^J!E&623XO%>96FTP=2)=-_U-DB?:A:=;V<]N?%]4.%K>K%\M,#
> M^V\?V3]9+:O^)"WKG4*V3?%[)H=R6ZF9;I('FN%E_#^___3SJ[>_O^N_NZOJ
> M=.%[_3?%M6G)PX7OY'B57JVN'TW55N6WY32ITYZ<E4=S9%D5'96P6E?Y]BI=
> MZ'H_7N?]++^F<FME<K%^X0+:R?A+F<[DO-\\GO#ECS]\_^;]C_T??WCSR\OW
> MO_9?)77RLIC/'\WYKIC5MTF9OI(KM<RN5OHN?S33^W2Q//ZHF[AY?/IJ612/
> M5WR3_&52_RK]TFZ&%_UM@-4O=;^U&V_UZP]9/397ZF7_8U(V7;FYR*L;.1W3
> M_EZ:7OU)"MC/MD_59?&/)'\,:U/M<^NLIN)[5=U&.'T[+8I<7S;J=%Y,DKFI
> M1!..=<K->VV]Y%(>ZUB>U)=R+LR%O?/6.DT3U9M*R^[^(JVJY%K?AIM]IE8[
> MNKW"Y!RMRO1)BM+QN$W[=64ERT1:Y:BRFDB<EF51CI^VS&0RD?;[TPO=[V[^
> M3:4><WY?]/<';E\[_GO[I?%_EM=IF2?S<;$THZ-OF H\-O[WG4"/_YW B_S(
> MBYXYGN>X'N/_I]B^4P<;^KEZE>19.E?_V5,OLZDZG4[D__^FFEEAGM9GO9/O
> M3KY3K]ZJG]^^5^_?_O;R1_7^QY_>J=<_O?FAI][?I)OQ?'.)KDIS(4L>&?7+
> M)& [O^RIO^NA5)8W=X<DDOVQ)-2W1-SOW][>]C;E]M-<(EZ^2N:]FWHQ-Y5X
> M?Y,U(S-5R9QA/E57J;J1L>=<IA6W67VC)M)1]=1/IBIUDNE*E*M<Z6&G]#S3
> M[12@F9],$JG!;":C;GF=JE652H9BUE99O<WG=S*<3_)KJ72MLIFZ*U;J0U[<
> MJEN=75Y)>BE238LLO^ZI[Z^ES.=J7A0?I)IE5>\?OR26(Y>*R XI11=9WTC&
> MRKBW25XW\QA=8._D1))_+\UU5V75='..RY4<O3Z>69DL)%6R3M%K4XPW.R_\
> MR-DS]%B^4HOD4[98+92<C=EN?K-W+'OUC@M/+NU#F;/\H<PR8M69#Y8K\[*)
> MQ!OIF=7IC9S"Q6IRHX]7YTA+-2L+F;/)/$T2G-V3V\SCMFY[_.OW[]1<1GZJ
> MROZU=T9FDE'O&.L=%[YW+]?Z:/2H,;]N\ILYYKXAR0RAH_I8TEZX@6D=&3=/
> M9'AJ)FW-92DMOS2M4ZQJ==K,2->S7+D*BGQ:F4O )&X:NCH[F>\X/4V,6^+"
> MNU=,OEI<R=F2RR>I9>BXK,VHJEBF<B5+\=>&[NV3>N]XG?QB:.K^:[HH]&Q\
> M4JQT6%!9H6;S5773.RF;/3V9C'X<M[O'9M^%ZPWW\RZ6I72;YD9N6DZ:64YE
> M+77?0CK9N-T_7N^^<$>RF:K\7<8U4],&<A^:<Z8;X]2YF&95(I/WZ7/E7J2Y
> M^?7L1(^"]%6A4X_7J2_<1FH&EW*W)'?CVR2KY99<+/0AZ!.V;@`Y7WJ?!(^9
> M#D>;H\AE-"?#;_DIE+XYFU'S23MDE3NL52]<9Z^TM= SE2Y47M2;]W3=U[^?
> M;:GU6[KB.Y(N?U?1K[6@?^[DUB\_R]GN&\LYSNN]FK1[--/^NB/M9VM/X[OU
> MLLWZ]/97>D"MJJ5,\"7D%]+:A?02\Z24=R?+E0RY%S(5E*PFX7,3SW1PE1R3
> M;':G=N_W:IZF2PF[^JJ34E/=76Q.N2FQDEM2VNN_VP;8ZV.R:FML[BD=A8U7
> MILE47SQNN&Z\]1RJ9[+(#;7_QMCDNW!#<^!F7J[6W>/F#4>=7\JIE#K(J\V[
> MKGZWB?)SN<?GNLK[*3R38C6?-^]?Z\.4G>LE!O.F.I5>1SJR.W/XM^TNTQQG
> M)^W+GDEYX>RU33.!>JZ:!3HEO:!:Y=FG==;-8>[D7=^WIVT>L^ML<Y_NI-R&
> MR75:"3VFP+.]'F>306*4V@:I-M/S)HO.NUNUO=BT8_RV23,],3^V.V7O#V]?
> M?_78E^V!\7\S/I%&^?8R=L?_ZW'_^J<GOT61:];_!YX;1+YKUO^CP1./_Q\;
> MW_\_'?_+@&[0=[R^A$9W$/N#V(N:H>FY7IF?QNJ=G!X3'9:9O JEB63H_^5<
> MS8UZ(-OPJ&POBSR7"*"#M8[G39 YW?WL(7;#+U1AV%KK&'>@%EYT**?OM3EW
> M0]"I.PJ=L[B)>?_2%=)=1ZS^>F]!Z:_VR&;9R"+8+@Y9%#];`K(N;Y=<+-!?
> M7,ZQ;__Q,W+@\O0.79Z!NW>3G :NXTJ-?I<AIZF/]*/MC5*F2YF:GIHA8D,?
> M\L*!36^XO?&L>*/8#>QZP>&3_TM9Z*M!#T8^Z/'KKB_SRD5F9C"]WN=BX$@(
> MLEC#P(U]FRT<>+'GW0^%7WVX?NQX-JL7Q('-"R:(XF!DTQO%CLWF#:5Y(YM>
> ML&U>*Y[TG+XU;Q@[CMQS-CWI\1V;GARRO?88QJYK,Z"*%\6NS?;P'+GE;'IA
> M[-ML#]^Q&?[$"^/ 9GM(>';MQ2OQ!C;CRS .)3[;O)[#D<WXHH.I5-&BYWHV
> MXXMX,D"P=SW+R8MLQI=1[$N\MW<]Z]&0S?@RBD/'YH!-O*'%^"+!3^*]8RV^
> M>'KL9S&^B.?9' ^))]>+8ZT]=.?A2TBUZ$F\\NRUAQL[OL5X)9XKQVNO/5S=
> MOHZU>"6>M&]HKSW<. @MQBM/#X8D1%OSO-B1+M-:O!)/WW+VVD,Z(\]FO/+,
> M_,A>>WBF/>S%*U\&XW++6?3D/XOQ2F[>2)K8HB?SP=!2O(J4HT]>[%MJ#^.9
> M-1B+GB^WL*7V,)[,SSU+\4H\B?<2HNVUAVOF6Y;BE?'D_-E:$#.>G+_04KP2
> M3^*IA!A[[2&#R:&U>&4\F;_96F\RGEY_L12OQ/-U?^3::P]?SZ=MQ2OCR?C>
> MUGJ3>(%>SW'LQ:M QRM;\T'CR?5B,5X%>GW-UGJ3>*&>K]I:P#>>CB_VVB/4
> M\S>+\2J2P:ZU]2;C>2-KR^W&T^N[]MICH(_78KP:F..UUQYF/=O6^KAX0SW^
> MLS4?-)YO;WW<>*&$?'OMH3^-LK8^;CP_LC8?-%XXM!BOI''U_,A:>X@7>-;6
> MQ\5S]7JBK?F@\;RAQ7BE/PR0(9:]]O#T>I.M]7'CZ0]8[;6'K^<S]N*5>)[,
> M9^RUAV_:PUJ\DF @\P5[\T'Q`M=BO)*+17=)]MHC-.L;UN*5>.'0XGQ0&L,+
> M;,:K2(^'`GOMH1=?K*VW1^WG\?;F@\WGEQ;CU5 _$.+::P_S^9&M]7;C^;[%
> M^:#^?,&U&*_,XJ1<@A8]?;]9BU=Z/7M@<3ZHUXLCB_%*K^_*?-I>>WAZ/FAK
> MO3TRZYV!Q?F@>%(_6_%JH-?KI'ZAI?8P7AA:6V\?Z/4P+[(V'S2>7A^W%*\&
> M>KU)QI.^O?;PS?J+I7AE/)EOV9H/#LSZD&]M/&0\/3^R%%\&>GU#3S'M7<^A
> M'J_9BB\#O1ZAYY?VKN=(/U]B*[X,S'J$:VU]W'BAU?BBGSZU-AX:Z/FTGL_8
> M:X^1>8#76GR1^;2>PEEK#ST_'U@;#PW,?-JS&%_T?'IH;7U\8.:_@;7GI09Z
> M?NG:6Q\WGOZ\S%Y[Z(=%K:V/&R^T][S4P,PO(XOQRCP\:6V]R7BAO<_S!GK^
> MYME[P'W0/L]J+U[I#_/LK3<-S/-P@;7U\8&9;WG6GI<R7F!S/*3G1ZZU]::!
> M>?[%L;8^;KS L?:\U,#,9QQK\6IHGH^P]_RX\?3SNY;BU=#,/UQKSTL-V\_C
> M;<4KXP6!M?6F8?OYM*WU\:&9+PRL/2]EO&!D+5X-V\]7;:TW#=OQO:WU<>/)
> M?-76\U)#\_F@8RU>#<UXW-[SG4,S'H^LK8\;+W2LS0>'>OPLXTE[\<K5?VQ@
> M;;UIJ,>[^A:V%J_TPPQ#:_/!H1[O^K[%>&5N-FOK34/S>4I@;7W<>/KS>'OM
> M$=G\>Y>A&9]ZUM:;AF9\.K2V/FZ\T-[S4L/V[R'LQ:MF_=[6\YU#\SRZO<_S
> MAF8\&5B;#QI//V]A+5[IYVWM/=\Y,NO9(VOKXR/SO*B]/W@>F?'?P%J\,EX8
> M67N^<V2>)XRLK8^/UNN[]MHCU)\'V(I7(S->BZP]WSDRSX=%UC[/,YZ,_VS-
> M!T=ZO";]N:UX-3+KG2-KSW>.S/C*WGK[R#P_Y&_CW_X7/7A>*.J[G_[KY^_?
> MJ%_329I]U'\H_\.GK%8OYVFBOP)L[^_C[WF;/[>W@;4':T$RW^3RU5"TG:\=
> M_$H8SXD$?BA;<R2Q^KYJOTA-FBN?2G.U7R,7*_W8V> (X7[)HZ-*_HJOE=E8
> M![Y+X5XU_,'!K-'!Z^QKOE?F&\GJWO?*?&L=[W^OS#>*#WROC!7Y\'>_?"5]
> MU/?*V+'_^!DY='WZAZY/>^,$[=G[.]NU9^MSKL8;6EN'67O!X;/_%=^TTH@'
> MOWG$.]N$+VE1B5[Z"P&;:AX"#E?IC51%S<HT[6E+:K,Z&.M=9]MWV^@;=[UO
> M[AMWL6_K&W>E;^H;-?3@UZ5)K^;>[Z%VLZU[J)\+M2S3CUFQJC9?OII\E"BK
> MO]_47#I_;;Z8S[T7!PYQVZYVC6G"[&V_X,^56./$SA_4#G3<[N@(X=YI\>Y'
> MI$/YOK;CUM;]4>T?N)<T,'J\YQ_X[OVRW>T,QU+/__7D%WK^;ZCC%WK^KQ<?
> MZ_F_57Z@=_[C]/$]_S?;?_R,'+K/[H],P_M_T>+JKW4T/9=$FX5T?SH`ZJJU
> M5V3S-=R[MQTH*"@H*"@H*"@H*"@H*"@H*"@HZ+\3]<P?4WF@H*"@H*"@H*"@
> MH*"@H*"@H*"@H%U&??V]8*"@H*"@H*"@H*"@H*"@H*"@H*"@74?](2@H*"@H
> M*"@H*"@H*"@H*"@H*"AHQ]% _VL>G__K-*"@H*"@H*"@H*"@H*"@H*"@H*"@
> MW4+#V+O_#W&#@H*"@H*"@H*"@H*"@H*"@H*"@G8-#8:@H*"@H*"@H*"@H*"@
> MH*"@H*"@H!U'H]@-0$%!04%!04%!04%!04%!04%!04$[C@YB)XH]!Q04%!04
> M%!04%!04%!04%!04%!2TVV@X! 4%!04%!04%!04%!04%!04%!07M."IB``H*
> M"@H*"@H*"@H*"@H*"@H*"@K:<704ZS^,'X&"@H*"@H*"@H*"@H*"@H*"@H*"
> M=AL-/%!04%!04%!04%!04%!04%!04%#0;J.>$SM#4%!04%!04%!04%!04%!0
> M4%!04-#.HWX`"@H*"@H*"@H*"@H*"@H*"@H*"MIQU(V]*':'H*"@H*"@H*"@
> MH*"@H*"@H*"@H*#=1D,/%!04%!04%!04%!04%!04%!04%+3CJ!<'`2@H*"@H
> M*"@H*"@H*"@H*"@H*"AHAU'/48X3.U[L#D!!04%!04%!04%!04%!04%!04%!
> MNXUZ0U!04%!04%!04%!04%!04%!04%#0SJ-A``H*"@H*"@H*"@H*"@H*"@H*
> M"@K:<=2-@RAV(U!04%!04%!04%!04%!04%!04%#0+J->['J@H*"@H*"@H*"@
> MH*"@H*"@H*"@H)U'_2$H*"@H*"@H*"@H*"@H*"@H*"@H:,=1/PZCV U!04%!
> M04%!04%!04%!04%!04%!0;N,!K'G@8*"@H*"@H*"@H*"@H*"@H*"@H)V'@V&
> MH*"@H*"@H*"@H*"@H*"@H*"@H* =1Z-8_G,#4%!04%!04%!04%!04%!04%!0
> M4-!NH[X'"@H*"@H*"@H*"@H*"@H*"@H*"MIY-!R"@H*"@H*"@H*"@H*"@H*"
> M@H*"@G8<U?^F>^SZH*"@H*"@H*"@H*"@H*"@H*"@H*#=1@,/%!04%!04%!04
> M%!04%!04%!04%+3CZ"CV`U!04%!04%!04%!04%!04%!04%#0;J.N$WM1['J@
> MH*"@H*"@H*"@H*"@H*"@H*"@H-U&0P\4%!04%!04%!04%!04%!04%!04M..H
> M&P<!*"@H*"@H*"@H*"@H*"@H*"@H*&C'42]VG=BQ_%?QH*!_"AJ @H*"@H*"
> M@H*"@H*"@H*"@H)^&?4&L>^"@H*"@H*"@H*"@H*"@H*"@H*"@G8;#7U04%!0
> M4%!04%!04%!04%!04%!0T(ZC?AP&L0L*"@H*"@H*"@H*"@H*"@H*"@H*VFDT
> MB#W[7ZP("@H*"@H*"@H*"@H*"@H*"@H*"OK4:!#]">NGH*"@H*"@H*"@H*"@
> MH*"@H*"@H*!/B8:Q^>>._@ST3ZDI*"@H*"@H*"@H*"@H*"@H*"@H*.@!-(I]
> M^_^L.R@H*"@H*"@H*"@H*"@H*"@H*"CH4Z-A! H*"@H*"@H*"@H*"@H*"@H*
> M"@K:<700!T/K?\ ."@H*"@H*"@H*"@H*"@H*"@H*"OJTJ(A![(Q 04%!04%!
> M04%!04%!04%!04%!0;N-!O;_67=04%!04%!04%!04%!04%!04%!0T*=%1[$3
> M65\_!04%!04%!04%!04%!04%!04%!05]:C0<@H*"@H*"@H*"@H*"@H*"@H*"
> M@H)V&_6<V+/^5_&@H*"@H*"@H*"@H*"@H*"@H*"@H$^,NK$;Q<X0%!04%!04
> M%!04%!04%!04%!04%+3+J!?[`2@H*"@H*"@H*"@H*"@H*"@H*"AHQU$_=JS_
> M6T>@H*"@H*"@H*"@H*"@H*"@H*"@H$^.>E'L#$!!04%!04%!04%!04%!04%!
> M04%!NXV&'B@H*"@H*"@H*"@H*"@H*"@H*"AHEU%7.4X<!*"@H*"@H*"@H*"@
> MH*"@H*"@H*"@'4?=V'5BQP,%!04%!04%!04%!04%!04%!04%[3+JQ?J_"!04
> M%!04%!04%!04%!04%!04%!2TVZ@W! 4%!04%!04%!04%!04%!04%!07M/!H&
> MH*"@H*"@H*"@H*"@H*"@H*"@H* =1_W8<V+'!P4%!04%!04%!04%!04%!04%
> M!07M-AI$L1."@H*"@H*"@H*"@H*"@H*"@H*"@G89#6+7`P4%!04%!04%!04%
> M!04%!04%!07M/.H/04%!04%!04%!04%!04%!04%!04$[CH:Q;_^OXD%!04%!
> M04%!04%!04%!04%!04%!GQH-H]@)0$%!04%!04%!04%!04%!04%!04&[C$9Q
> M, 0%!04%!04%!04%!04%!04%!04%[3@ZB ,'%!04%!04%!04%!04%!04%!04
> M%+3CZ#!V(NM_%0\*"@H*"@H*"@H*"@H*"@H*"@H*^M1H. 0%!04%!04%!04%
> M!04%!04%!04%[3@ZBKT`%!04%!04%!04%!04%!04%!04%+3;J.O$KO5'14%!
> M04%!04%!04%!04%!04%!04%!GQAU8S^('0\4%!04%!04%!04%!04%!04%!04
> MM,NH%WL1*"@H*"@H*"@H*"@H*"@H*"@H*&CGT= #!04%!04%!04%!04%!04%
> M!04%!>TXZL>.$P>@H*"@H*"@H*"@H*"@H*"@H*"@H!U'W6'LN'\&^J?4%!04
> M%!04%!04%!04%!04%!04%!3T`!K&GOVE3E!04%!04%!04%!04%!04%!04%#0
> MIT4'L>O%C@,*"@H*"@H*"@H*"@H*"@H*"@H*VF'4$S&*_2$H*"@H*"@H*"@H
> M*"@H*"@H*"@H:+=1WP,%!04%!04%!04%!04%!04%!04%[3CJQZ$3^P-04%!0
> M4%!04%!04%!04%!04%!0T,ZBGG*<V(U 04%!04%!04%!04%!04%!04%!03N/
> M!AXH*"@H*"@H*"@H*"@H*"@H*"@H:,=1-W:&H*"@H*"@H*"@H*"@H*"@H*"@
> MH*"=1_T`%!04%!04%!04%!04%!04%!04%+3CJ!<[3NQ'H*"@H*"@H*"@H*"@
> MH*"@H*"@H*#=1D,/%!04%!04%!04%!04%!04%!04%+3CJ!^[0U!04%!04%!0
> M4%!04%!04%!04%#0SJ.AN*"@H*"@H*"@H*"@H*"@H*"@H*"@G4;#V/%B/P0%
> M!04%!04%!04%!04%!04%!04%[3(:Q9X#"@H*"@H*"@H*"@H*"@H*"@H*"MIQ
> M=!#KIT4#4%!04%!04%!04%!04%!04%!04-!NH_XP]D%!04%!04%!04%!04%!
> M04%!04%!.XT.8R<`!04%!04%!04%!04%!04%!04%!>T\ZCN@H*"@H*"@H*"@
> MH*"@H*"@H*"@H)U'PRCV?5!04%!04%!04%!04%!04%!04%#0+J.CV/- 04%!
> M04%!04%!04%!04%!04%!03N/!D-04%!04%!04%!04%!04%!04%!0T ZBS^QN
> M;W5]U.MLGE;]YO>7\TPJUY^8'[T/Z5WUK64XL@6!8W[*9GX.HF#]VG%]]YGK
> MA%'D^7[H>L\<=S!P_&?*L7& CVVKJDY*I9Z515$_E,XTW /[=P]._^S(YCAA
> MV^+N^D+S>GZHIGXPFKBNXSI1.(@FTY&?3+U$FG'@>TGDC:8S)TRGB3.87;E7
> MP]'4\69A-)BD0>BX5\[4LWV=LOTYV_W[_UU:?DS+OKG>>Y,BGWUS&?I^B(+@
> MWBW2WOU>Z$;F_A]XGN,-!OK^#^2M_UOW_V/[.WK_OS#M/-;MG%U?GBCUXGI>
> M7"5S_:N\2!=)-A_G19W-LDE29T5^>9=6+_H'WM_-4!>7RR3_D/QCF?PMKZ9S
> MN8YZ6;[.)GO59ZD_9-5-4:;5X=1-XFI1+\>5N3HOJT52UGIW;S?#;HK=`G0W
> M>FD.M.G5#I1BDC1Y;F^R.AW/LZJ^=+U!SY'_N2_Z.^_>3[;30Q^54H?8HQ(>
> M6[3K]]R!_WG2%_UU8^H7Y4IN\E;(\LE\-4TOS7MMZ_<^+>8O^NL]^^F6R6)L
> MTCZ4J*INIH^GJM-YGM9')*SNJGEQ_7BZI%S>)O7DYAAQD>2U'G]]?#SQ,OOT
> M>*(\6:3'',KBZHA4'ZM9O3PBW7)5IN=')BV+XQ(NJO%Q">4VG:;98GG$X2R+
> MI;FW'DUYFUX=T<S+9'*3/IXNFU9'-,@_5]D1!SO+RO0VF1]Q"'))5Y,R3?/9
> M[1&M4E3U[)C+JTKSZ7&G,%LD1S6S8-4DR?.T/.::.$\_36Z2_/J(TUXFDZ+(
> MCS@D"25'78_)JG[@EOZ/\_/=\SG/)G>'$JOS\\\OH[I.)A\>K\"\F"1'G/>F
> M^SR<[$6_";E*F?@K\4PNX,F'G2-X7:;_7*7YY$[5-TFMUBE45JGT4SI9U>E4
> MG:MI.DM6\UJETJ_=*4_=%*NRVA[9;(U(=^6\Z&]?FMW;PE[)Q3RIBS)+*U47
> MJBE)G2[3<E:4"R67N9(+L\ID+JJDI$W/7IUMRYKN& 882[:+O\B8X"^7_;2>
> M/.^OJK)_E>7-+]65[F%W,AW#F-P?D_+YH>P[Y\Z,6:?[!Y5=YS*,V&EU\]I4
> MK;^HDRMIG^:=`[OS^N$$-W+75KUIFM\]I,@-UI<A92U=<#:I'DA9)OFT6)Q7
> M:3I](%4R_4>=+=*'JE5+W.Y+3_E08:MZL?STP/[;1_9/5LNJ/TG+>J>0;5/\
> MGLFAW%9JIIOD@69X&?_/[S_]_.KM[^_Z[^ZJ.EWX7O]-<6U:\G#A.SE>I5>K
> MZT=3M57Y;3E-ZK0G9^71'%E614<EK-95OKU*%[K>C]=Y/\NOJ=Q?F5RL7[B
> M=C+^4J8S.>\WCR=\^>,/W[]Y_V/_QQ_>_/+R_:_]5TF=O"SF\T=SOI.1P6U2
> MIJ_D2BVSJY6^U1_-]#Y=+(\_ZF9<>7SZ:ED4CU=\D_QE4O\JL[+=#"_ZVRAK
> MQKRR?S?HZM<?LGILKM1+'66:B:ZYR*L;.1W3_EZ:7OU)"MC/MD_59?&/)'\,
> M:U/M<^NLQM/=LD3!9GZU?M'T(MN#T*\GQ4*&L=.V&GH$>MD$)?-K.^\QO4<B
> MH?Q2AZUSG:!7R>6TLV.=<BD!]+(J)]E2[S:OFETZ\!2K6L?FXC:=-C7[_$U3
> MPTV5OE"_]3CJ?%H6RR]5="_1$U2V[98/G<ZLTH6>)Y-)L<KK+U7XLV0/5GDE
> MTU);-4XF=?8Q/9?I\E)ZYW5!ZT3-M;!_5'HP8R;I,I3(\G3:+$"_Z&_>;Y*9
> M=\?9]-)Q9-JY>=5>[V:J*"]]QW6#=FRSW=U6_#)RG,U1-+6_5]W'C^&SZ^4+
> M!V.&:/<.8B[#I/EE).^;7QZH73L\NE_#YC27Z:*HMS63,?/$%-/,2W6M-F\U
> MMVF;_L&\<G64Z<-YD[GN9S<'>STV;XR;PW'U\>Z_M;O2L?O^8+VV\5EB.=Y-
> M"=N1E.ZV%T6NNR=U:LZL"7;-V.^D/>WFO9V:Z8%C4F_.R,Y;GS65"8ZRN]]^
> MLE'M-UOSJM7M%;8^VT]0E#[1;=JO*ZN9WAY55C/B2\NR*,=/6Z9$.FF_/[W0
> M_6'MOZG48\[OB_[^\NF_>S7WCV]?7/_/\CHM90PR+I9F$O@-'P4\O/[O!+X3
> M;-;_?3=ZYGAN% Y8_W^*[3MUL*&?JU=)GJ5S]9\]]3*;JM/I1/[_;\W'U[T\
> MK<]Z)]^=?*=>O54_OWVOWK_][>6/ZOV//[U3KW]Z\T-/O;])-\L6S<VQ*LTM
> M)'FR2B6UVGZ^U%-_UY/%+&_N2TDD^V-)J&_&N-^_O;WM;<KMI[G$VGR5S'LW
> M]6)N*O'^)FOFGJJZ*5;SJ;I*U8V,%^;I5-UF]8V:R%"\IWXR5:F33%>B7.5*
> MCP.DSYMN5SJ:91@9>ZMD-I/^65ZG2H9NDJ&8M556;_/YG6J6Q516JVRF[HJ5
> M^I 7M^I69Y=7DEZ*5-,BRZ][ZOMK*?.YFA?%!ZEF6=7[QR^)Y<BE(K)#2M%%
> MUC>2L3+N;9+7S7*-+K!W<B+)OY?FNJNR:KHYQWHP9HYG5LI0M7>2K%/TVA3C
> MS<X+/W+V#+U:4:E%\BE;K!9*SL9L-[_9.Y:]>L>%)Y?VH<Q9_E!FF9/KS ?+
> M7:;E1,:9^FF'TQLYA8O5Y$8?K\Z1ELT3$(D$)$EP=D]N,X_;NNWQK]^_4_J#
> M$%5E_]H[(S/)J'>,]8X+W[N7:WTT>EZ<7S?YS5AQWY!DAM#]R5C27KB!:9TW
> MQ?5$)N!F6:JY+*7EEZH==:K39N%MO9@G5T&13RMS"9C$34-79R?S':>GB7%+
> M7'CWBLE7BRLY6W+Y)+5,CI>U&<\5RU2N9"G^VM"]?5+O':^37PQ-W7\UX]"I
> M,A,:`;-"S>:KZJ9WTHQ0I[TRG7P<M[O'9M^%ZPWW\RZ6,I2NS(W<M)PTLYS*
> M6NJ^A72R<;M_O-Y]X8YD,U7YNXRHIJ8-Y#XTYTPWQJEST4Z[IL^5>Y'FYM>S
> M$SW^TE>%3CU>I[YP&ZD9ULK=DMR-;Y.LEEMRL="'H$_8N@'D?.E]$CQF.AQM
> MCB*7<61VG<M/H?3-V:P+G+2#9;G#6O7"=?9*6PL]4^E"Y46]>4_7??W[V99:
> MOZ4KOB/I\G<5_5H+^N=.;OWRLYSMOK&9R^W5I-VCF?;7'6D_6WL:WZU7I]>G
> MM[\R#RE5RU2:4[TOI+4+Z27F22GO3I8K&>POBO).LIJ$STT\T\%5<DRRV9W:
> MO=^K>9HN)>SJJTY*375WL3GEIL1*;DEIK_]N&V"OC\FJK;&YIW04-EZ9)E-]
> M\;CANO'6JT0]DT5NJ/TWQB;?A1N:`S<KCVK=/6[><-3YI9Q*J8.\VKSKZG>;
> M*&]F7+K*^RD\DV(UGS?O7^O#E)WK153SICJ57D<ZLCMS^+?M+M,<9R?MRYY)
> M>>'LM4TS=7NNFD_!E?2":I5GG]99-X>YDW=]WYZV><RNL\U]NI-R&R;7:27T
> MF +/]GJ<30:)46H;I-I,SYLL.N]NU?9BTX[QVR;-],3\V.Z4O3^\?=W!4??_
> MG>V+XW_+S_\],/[?//]GQO^^KY__":.0\?]3;#S_Q\;&QL;&QL;&QL;&QL;&
> BQL;&QL;&QL;&QL;&QL;&QL;&QL;&ULWM?P$.WLN'`.@(````
> `
> end
>




***********************************************************************************
This message is for the named addressees' use only. It may contain NSDL

confidential, proprietary or legally privileged information. If you receive 

this message in error, please immediately delete it. You must not, directly

or indirectly, use, disclose, distribute, print, or copy any part of this message

if you are not the intended recipient.Unless otherwise stated, any commercial

information given in this message does not constitute an offer to deal on 

any terms quoted.  Any reference to the terms of executed transactions 

should be treated as preliminary only and subject to our formal written 

confirmation.
***********************************************************************************