From f163445ecf565f62944f06b0189ee22fe402d677 Mon Sep 17 00:00:00 2001
From: Stavros Kois <47820033+stavros-k@users.noreply.github.com>
Date: Tue, 18 Jan 2022 01:27:08 +0200
Subject: [PATCH] feat(clamav): add clamav (#1725)

* feat(clamav): add clamav

* typo and update defaults

* update questions

* use this for test

* no quotes

* readrootfs

* varrun

* rofs

* try this user

* without varrun

* readonly

* var

* root

* probe

* disable probe

* false runasnonroot

* test probes

* doc ports

* sync questions

* update image
---
 charts/incubator/clamav/Chart.yaml            |  29 ++
 charts/incubator/clamav/questions.yaml        | 418 ++++++++++++++++++
 charts/incubator/clamav/templates/common.yaml |   1 +
 charts/incubator/clamav/values.yaml           |  75 ++++
 docs/_static/img/appicons/clamav-icon.png     | Bin 0 -> 25476 bytes
 docs/manual/default-ports.md                  | 169 +++----
 6 files changed, 609 insertions(+), 83 deletions(-)
 create mode 100644 charts/incubator/clamav/Chart.yaml
 create mode 100644 charts/incubator/clamav/questions.yaml
 create mode 100644 charts/incubator/clamav/templates/common.yaml
 create mode 100644 charts/incubator/clamav/values.yaml
 create mode 100644 docs/_static/img/appicons/clamav-icon.png

diff --git a/charts/incubator/clamav/Chart.yaml b/charts/incubator/clamav/Chart.yaml
new file mode 100644
index 00000000000..e013976f580
--- /dev/null
+++ b/charts/incubator/clamav/Chart.yaml
@@ -0,0 +1,29 @@
+apiVersion: v2
+appVersion: "0.104.2"
+dependencies:
+- name: common
+  repository: https://truecharts.org
+  version: 8.13.0
+description: ClamAV® is an open source antivirus engine for detecting trojans, viruses, malware & other malicious threats.
+home: https://github.com/truecharts/apps/tree/master/charts/stable/clamav
+icon: https://truecharts.org/_static/img/appicons/clamav-icon.png
+keywords:
+- clamav
+- antivirus
+kubeVersion: '>=1.16.0-0'
+maintainers:
+- email: info@truecharts.org
+  name: TrueCharts
+  url: https://truecharts.org
+name: clamav
+sources:
+- https://github.com/Cisco-Talos/clamav
+- https://hub.docker.com/r/clamav/clamav
+- https://docs.clamav.net/
+type: application
+version: 0.0.1
+annotations:
+  truecharts.org/catagories: |
+    - utilities
+  truecharts.org/SCALE-support: "true"
+  truecharts.org/grade: U
diff --git a/charts/incubator/clamav/questions.yaml b/charts/incubator/clamav/questions.yaml
new file mode 100644
index 00000000000..a3780984b90
--- /dev/null
+++ b/charts/incubator/clamav/questions.yaml
@@ -0,0 +1,418 @@
+# Include{groups}
+portals: {}
+
+questions:
+
+# Include{global}
+  - variable: controller
+    group: "Controller"
+    label: ""
+    schema:
+      type: dict
+      attrs:
+        - variable: advanced
+          label: "Show Advanced Controller Settings"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: type
+                description: "Please specify type of workload to deploy"
+                label: "(Advanced) Controller Type"
+                schema:
+                  type: string
+                  default: "deployment"
+                  required: true
+                  enum:
+                    - value: "deployment"
+                      description: "Deployment"
+                    - value: "statefulset"
+                      description: "Statefulset"
+                    - value: "daemonset"
+                      description: "Daemonset"
+              - variable: replicas
+                description: "Number of desired pod replicas"
+                label: "Desired Replicas"
+                schema:
+                  type: int
+                  default: 1
+                  required: true
+              - variable: strategy
+                description: "Please specify type of workload to deploy"
+                label: "(Advanced) Update Strategy"
+                schema:
+                  type: string
+                  default: "Recreate"
+                  required: true
+                  enum:
+                    - value: "Recreate"
+                      description: "Recreate: Kill existing pods before creating new ones"
+                    - value: "RollingUpdate"
+                      description: "RollingUpdate: Create new pods and then kill old ones"
+                    - value: "OnDelete"
+                      description: "(Legacy) OnDelete: ignore .spec.template changes"
+# Include{controllerExpert}
+
+  - variable: env
+    group: "Container Configuration"
+    label: "Image Environment"
+    schema:
+      type: dict
+      attrs:
+# Include{fixedEnv}
+        - variable: CLAMAV_NO_CLAMD
+          label: "NO CLAMD"
+          description: "Do not start clamd."
+          schema:
+            type: boolean
+            default: false
+        - variable: CLAMAV_NO_FRESHCLAMD
+          label: "NO FRESHCLAMD"
+          description: "Do not start the freshclam daemon."
+          schema:
+            type: boolean
+            default: false
+        - variable: CLAMAV_NO_MILTERD
+          label: "NO MILTERD"
+          description: "Do not start the clamav-milter daemon."
+          schema:
+            type: boolean
+            default: true
+        - variable: CLAMD_STARTUP_TIMEOUT
+          label: "STARTUP TIMEOUT"
+          description: "Seconds to wait for clamd to start."
+          schema:
+            type: int
+            default: 1800
+        - variable: FRESHCLAM_CHECKS
+          label: "FRESHCLAM CHECKS "
+          description: "Freshclam daily update frequency."
+          schema:
+            type: int
+            default: 1
+
+# Include{containerConfig}
+
+  - variable: service
+    group: "Networking and Services"
+    label: "Configure Service(s)"
+    schema:
+      type: dict
+      attrs:
+        - variable: main
+          label: "Main Service"
+          description: "The Primary service on which the healthcheck runs, often the webUI"
+          schema:
+            type: dict
+            attrs:
+# Include{serviceSelector}
+                    - variable: main
+                      label: "Main Service Port Configuration"
+                      schema:
+                        type: dict
+                        attrs:
+                          - variable: port
+                            label: "Port"
+                            description: "This port exposes the container port on the service"
+                            schema:
+                              type: int
+                              default: 3310
+                              required: true
+                          - variable: advanced
+                            label: "Show Advanced settings"
+                            schema:
+                              type: boolean
+                              default: false
+                              show_subquestions_if: true
+                              subquestions:
+                                - variable: enabled
+                                  label: "Enable the port"
+                                  schema:
+                                    type: boolean
+                                    default: true
+                                - variable: protocol
+                                  label: "Port Type"
+                                  schema:
+                                    type: string
+                                    default: "HTTP"
+                                    enum:
+                                      - value: HTTP
+                                        description: "HTTP"
+                                      - value: "HTTPS"
+                                        description: "HTTPS"
+                                      - value: TCP
+                                        description: "TCP"
+                                      - value: "UDP"
+                                        description: "UDP"
+                                - variable: nodePort
+                                  label: "Node Port (Optional)"
+                                  description: "This port gets exposed to the node. Only considered when service type is NodePort, Simple or LoadBalancer"
+                                  schema:
+                                    type: int
+                                    min: 9000
+                                    max: 65535
+                                - variable: targetPort
+                                  label: "Target Port"
+                                  description: "The internal(!) port on the container the Application runs on"
+                                  schema:
+                                    type: int
+                                    default: 3310
+        - variable: milter
+          label:  "Milter Service"
+          description: "The Primary service on which the healthcheck runs, often the webUI"
+          schema:
+            type: dict
+            attrs:
+# Include{serviceSelector}
+                    - variable: milter
+                      label: "Main Service Port Configuration"
+                      schema:
+                        type: dict
+                        attrs:
+                          - variable: port
+                            label: "Port"
+                            description: "This port exposes the container port on the service"
+                            schema:
+                              type: int
+                              default: 7357
+                              required: true
+                          - variable: advanced
+                            label: "Show Advanced settings"
+                            schema:
+                              type: boolean
+                              default: false
+                              show_subquestions_if: true
+                              subquestions:
+                                - variable: enabled
+                                  label: "Enable the port"
+                                  schema:
+                                    type: boolean
+                                    default: true
+                                - variable: protocol
+                                  label: "Port Type"
+                                  schema:
+                                    type: string
+                                    default: "HTTP"
+                                    enum:
+                                      - value: HTTP
+                                        description: "HTTP"
+                                      - value: "HTTPS"
+                                        description: "HTTPS"
+                                      - value: TCP
+                                        description: "TCP"
+                                      - value: "UDP"
+                                        description: "UDP"
+                                - variable: nodePort
+                                  label: "Node Port (Optional)"
+                                  description: "This port gets exposed to the node. Only considered when service type is NodePort, Simple or LoadBalancer"
+                                  schema:
+                                    type: int
+                                    min: 9000
+                                    max: 65535
+                                - variable: targetPort
+                                  label: "Target Port"
+                                  description: "The internal(!) port on the container the Application runs on"
+                                  schema:
+                                    type: int
+                                    default: 7357
+
+  - variable: serviceexpert
+    group: "Networking and Services"
+    label: "Show Expert Config"
+    schema:
+      type: boolean
+      default: false
+      show_subquestions_if: true
+      subquestions:
+        - variable: hostNetwork
+          group: "Networking and Services"
+          label: "Host-Networking (Complicated)"
+          schema:
+            type: boolean
+            default: false
+
+# Include{serviceExpert}
+
+# Include{serviceList}
+
+  - variable: persistence
+    label: "Integrated Persistent Storage"
+    description: "Integrated Persistent Storage"
+    group: "Storage and Persistence"
+    schema:
+      type: dict
+      attrs:
+        - variable: sigdatabase
+          label: "App Signature Database Storage"
+          description: "Stores the Application Signature Database."
+          schema:
+            type: dict
+            attrs:
+              - variable: type
+                label: "Type of Storage"
+                description: "Sets the persistence type, Anything other than PVC could break rollback!"
+                schema:
+                  type: string
+                  default: "simplePVC"
+                  enum:
+                    - value: "simplePVC"
+                      description: "PVC (simple)"
+                    - value: "simpleHP"
+                      description: "HostPath (simple)"
+                    - value: "emptyDir"
+                      description: "emptyDir"
+                    - value: "pvc"
+                      description: "pvc"
+                    - value: "hostPath"
+                      description: "hostPath"
+# Include{persistenceBasic}
+              - variable: hostPath
+                label: "hostPath"
+                description: "Path inside the container the storage is mounted"
+                schema:
+                  show_if: [["type", "=", "hostPath"]]
+                  type: hostpath
+              - variable: medium
+                label: "EmptyDir Medium"
+                schema:
+                  show_if: [["type", "=", "emptyDir"]]
+                  type: string
+                  default: ""
+                  enum:
+                    - value: ""
+                      description: "Default"
+                    - value: "Memory"
+                      description: "Memory"
+# Include{persistenceAdvanced}
+        - variable: scandir
+          label: "App Scan Dir Storage"
+          description: "Stores the Application Scan Directory."
+          schema:
+            type: dict
+            attrs:
+              - variable: type
+                label: "Type of Storage"
+                description: "Sets the persistence type, Anything other than PVC could break rollback!"
+                schema:
+                  type: string
+                  default: "simplePVC"
+                  enum:
+                    - value: "simplePVC"
+                      description: "PVC (simple)"
+                    - value: "simpleHP"
+                      description: "HostPath (simple)"
+                    - value: "emptyDir"
+                      description: "emptyDir"
+                    - value: "pvc"
+                      description: "pvc"
+                    - value: "hostPath"
+                      description: "hostPath"
+# Include{persistenceBasic}
+              - variable: hostPath
+                label: "hostPath"
+                description: "Path inside the container the storage is mounted"
+                schema:
+                  show_if: [["type", "=", "hostPath"]]
+                  type: hostpath
+              - variable: medium
+                label: "EmptyDir Medium"
+                schema:
+                  show_if: [["type", "=", "emptyDir"]]
+                  type: string
+                  default: ""
+                  enum:
+                    - value: ""
+                      description: "Default"
+                    - value: "Memory"
+                      description: "Memory"
+# Include{persistenceAdvanced}
+
+# Include{persistenceList}
+
+  - variable: ingress
+    label: ""
+    group: "Ingress"
+    schema:
+      type: dict
+      attrs:
+        - variable: main
+          label: "Main Ingress"
+          schema:
+            type: dict
+            attrs:
+# Include{ingressDefault}
+
+# Include{ingressTLS}
+
+# Include{ingressTraefik}
+
+# Include{ingressExpert}
+
+# Include{ingressList}
+
+  - variable: advancedSecurity
+    label: "Show Advanced Security Settings"
+    group: "Security and Permissions"
+    schema:
+      type: boolean
+      default: false
+      show_subquestions_if: true
+      subquestions:
+        - variable: securityContext
+          label: "Security Context"
+          schema:
+            type: dict
+            attrs:
+              - variable: privileged
+                label: "Privileged mode"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: readOnlyRootFilesystem
+                label: "ReadOnly Root Filesystem"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: allowPrivilegeEscalation
+                label: "Allow Privilege Escalation"
+                schema:
+                  type: boolean
+                  default: false
+              - variable: runAsNonRoot
+                label: "runAsNonRoot"
+                schema:
+                  type: boolean
+                  default: false
+# Include{securityContextAdvanced}
+  - variable: podSecurityContext
+    group: "Security and Permissions"
+    label: "Pod Security Context"
+    schema:
+      type: dict
+      attrs:
+        - variable: runAsUser
+          label: "runAsUser"
+          description: "The UserID of the user running the application"
+          schema:
+            type: int
+            default: 0
+        - variable: runAsGroup
+          label: "runAsGroup"
+          description: The groupID this App of the user running the application"
+          schema:
+            type: int
+            default: 0
+        - variable: fsGroup
+          label: "fsGroup"
+          description: "The group that should own ALL storage."
+          schema:
+            type: int
+            default: 568
+# Include{podSecurityContextAdvanced}
+
+# Include{resources}
+
+# Include{advanced}
+
+# Include{addons}
diff --git a/charts/incubator/clamav/templates/common.yaml b/charts/incubator/clamav/templates/common.yaml
new file mode 100644
index 00000000000..a6613c2ce21
--- /dev/null
+++ b/charts/incubator/clamav/templates/common.yaml
@@ -0,0 +1 @@
+{{ include "common.all" . }}
diff --git a/charts/incubator/clamav/values.yaml b/charts/incubator/clamav/values.yaml
new file mode 100644
index 00000000000..9449ab9bc53
--- /dev/null
+++ b/charts/incubator/clamav/values.yaml
@@ -0,0 +1,75 @@
+image:
+  repository: tccr.io/truecharts/clamav
+  pullPolicy: IfNotPresent
+  tag: v0.104.2@sha256:9b600aac57738b292236fc534220b317ee3185fc96d0a995e08f44b19c4dcb25
+
+podSecurityContext:
+  runAsUser: 0
+  runAsGroup: 0
+
+securityContext:
+  readOnlyRootFilesystem: false
+  runAsNonRoot: false
+
+probes:
+  liveness:
+    enabled: true
+    custom: true
+    spec:
+      exec:
+        command:
+          - clamdcheck.sh
+      initialDelaySeconds: 15
+      periodSeconds: 30
+      failureThreshold: 10
+      timeoutSeconds: 1
+  readiness:
+    enabled: true
+    custom: true
+    spec:
+      exec:
+        command:
+          - clamdcheck.sh
+      initialDelaySeconds: 15
+      periodSeconds: 30
+      failureThreshold: 10
+      timeoutSeconds: 1
+  startup:
+    enabled: true
+    custom: true
+    spec:
+      exec:
+        command:
+          - clamdcheck.sh
+      initialDelaySeconds: 15
+      periodSeconds: 30
+      failureThreshold: 10
+      timeoutSeconds: 1
+
+service:
+  main:
+    ports:
+      main:
+        port: 3310
+        targetPort: 3310
+  milter:
+    ports:
+      milter:
+        port: 7357
+        targetPort: 7357
+
+env:
+  CLAMAV_NO_CLAMD: false
+  CLAMAV_NO_FRESHCLAMD: false
+  CLAMAV_NO_MILTERD: true
+  CLAMD_STARTUP_TIMEOUT: 1800
+  FRESHCLAM_CHECKS: 1
+
+persistence:
+  sigdatabase:
+    enabled: true
+    mountPath: "/var/lib/clamav"
+  scandir:
+    enabled: true
+    mountPath: "/scandir"
+    readOnly: true
diff --git a/docs/_static/img/appicons/clamav-icon.png b/docs/_static/img/appicons/clamav-icon.png
new file mode 100644
index 0000000000000000000000000000000000000000..5a0db2d4ac217487fec92b1add7729269e1eee85
GIT binary patch
literal 25476
zcmaf3<98=bu>Qr~*tTuk+Ss;j+qP}nwryLRY_hR$-unmK`=O?K&YbDfT~+hU(^VDm
zTTUDf8Vec#0KiE~h$#N(xBmnZ{O20}N0awQLD@@aH~|1K$o~ltATt{S0DzXa5ElOZ
z+uY9C&dJ=)o<LGqn84oA&eX!%1ORZ~%uzB^R=PmrecpW#k`DJzmbOzwg(OfEit<NE
zAfqCLLXZk4EZ9I*7(f&i1;rlE4+n{j^^ZnXpn;8qUWYg)EQ}2*3Xhz8KkzEDTJ3&5
zo%w26<2$Rq&uN;2=!b+&m0(t2^@ptx!b98-8XF!xIHnT_fF`jAAV4-56FPko0|8!q
zd3dOa`XPD&K<-O0kbr*KtbPWZuy6QFp$u&x|6rhg=L8OENPiT7fM={wDL_CB$Ui5Y
zObL(=3ecZ2GCTtOrUmGe`<*TU{BvG1ynp~&$%Lpt`3V35WRq|afH^mydQLS`6rj!k
zKrxjb<^-(M0vIIKOeFyIZGiq+1eituBrJeIAv}Z<0O|$MA15Yu2LxvTP{jVJ@!V0@
zBAikESSq8Dr-Ou3G(ZcI)&W9IjSi1uRuY{Wh0OriAX9*D&?5trDS!oj|9%<($WK81
z+3o$O`|PjU*;%&O)?a$Gmwn*hM23b(Ung@__5uLFfwS+z7Y%(AmOnSRzs*-6=?$p4
zE=<15bChW#yg&;e|6)_^-u^$^h!(_mY;2qyAFoRd3uzfls`-4G4eIr)eOkZz@_al$
z?)M&&1Tg6Yh=acD4^BVGl;F%ILIoRcpT>!Qw84CT;4TpjOB!~lQ=uFwAUVW}WJcdJ
zl@LV;B~p%%E`A#y?$Nx1@a?ez>Mi+zyb@^3b&Nosq{$J~o%;`;0f2v9b_2^4kRbl%
zK?ieg-+%c(#q&u4{-%<N4gi3z2nn6?WE1}wBmf|iA3#+vi2X2tLDLV8GXS<d0P~^G
z7A!<EJSc=91a0h(<ET$r9VkQ*I#Z8JrBA;sfXmXaU>=%e|BG%=rTrJLJ^Y&iWbOb(
zcK{Tq;5a0*0pVsikYS`caV#WyM#u}{fCMN~6bZpZIEn(1bONgcqhh2ofr<p~KVC;*
z&M<AU&IImp08`*cXty|HazLX3?=ozQa7Q^iR<Kwh%)GHPV`dy$e%8EWGZt?&Tfy0U
zl{x%o9G~zQL;pDj1oN;p1KsG5Py+`IRFctD15q_>)hJfIYBfk##G}z%gBvJPfM`Dy
z8>pKQfdQVNgu0Bn+`2?L0S*ZZ;wBV36iBebAURP|xpXsGC*tcch9MJUn7RZF@hVar
zGChJ<xbQGL2~vbG6M08Guw+BA@*>ir*rKf>@dZsq7K;QHani)5u~j1kXEF@|^?1l}
z&hgMO^D*`@;Xf_t976$z;uobu3dKoFDa;du6P6QjlXNCQm7+|=o$>-@MAkS>p_+nL
z#X5zsa%2{lOwO4gG)d`_n!=PNEOT`8XN$UX=T5|(6g;`Kd9}r<3-R-`bC3r&Sh!Hs
zps{c>3d}4F2n;h!H;lS;nNrN9D9kZs26o1)^s@~33_BHds#Yp*)Pzas6sZ)l6l^Mb
z<%-JE%H2vBm3x&b<+uu6C7)U`6=tQQ3aI7ODwWEd-&ac5N@f+@<zba(<#x*a#l9M!
z5#Sm_GDGsh#R~ZidPm)(1TaRJP3|;=R&Z6JE&;5=WDPSL-mX+#>7Te=QM{EE1)Rdn
zQp{>iiucK;{18X!4lmixa!_X!Woh@mk-I2=DGw>JOIc((7)`XTDpS)^)vF|`6sp9p
zde~~O%W_J4M7uQJ1AYmPNs()li<`yGg5{hkZ7A)OL6@P)@^U@a(p6fOU>9_Wxb@kV
z-K6LC>iXx(*p=;i^qjrn_|ShUf7-m2J&MDsgEzsFfN#OhV(^TxI@s~x(vNN3DG2Kf
z2?&=Mq!^?f1SfPX@D#0x#fZU2Ta0QSksR5K+Kd*Ffs+xENy}c!-efAuc9c?<a?5bb
zjLl5X6wa(>ux9Zxt}&fuon@_M?X~G^x@*$3mbbQ>NH!j8mTKIzcH4$%a%z;Qt7z&p
ziPhxPkgj&sbd@2Nb;u>jRpqXl4b|VZPPA6EVb-6lgKyQg+O+x@m>Hs*wT;vc-6ZuS
z`E>fkeDXrTg>C$*!qvp}b!v7*;Zo(=&794?;rAJNNWGvpQ=dbaTW3CMMV_J@w#ZS+
zS`s%yH|uZ;x(|<vkPe)pOXH)<!XDij?>Uxoess_|@LYV%$!f|Pye{9WyJ5SrxCz_N
zn`X(Q%++9anjab$-d8wT;D^aeVX)e(_LUcw4=`&vBc?Z^Pf)8_t8XiDt9&;2i_Z7N
z=a_fIcf`ZK%e1SZH_hJPHr_TRKV+Ay7qTbpNBnL4?fJa`DDx);G6RVS5Dd@)et+@w
zChUvl=h`xPYTURMjLz>6L=}t+tO-0Bs39~T{}W$B_<WW=n=otfE9AHD`RY7`!Kp#i
zkS{EGNLYwkD1WSdxH{GXV;Za5!nUx}p2(X>s>p7Z8KXRB9jz2A6<;NtCC?^%Crc;)
zD4nUs^on|px}>!<4ksN|Et{=%@7~Ateb`~nA<U5%dOH2Mj=e|0?BGL48CnG$5)D_X
zfK0d?NAj&80#!L$H0eKNH_}*Wk3rl)Ga~v0wuSI@VQnfrxqlK=vYv^561rJENJf}T
zXihqU$t&W!W#D9Xvbb{5GF=I5n0UE*7=scM;vIx431yR7%`VMOO<kv|O+p&KMr@<n
z=<!k@Cajv`tHCsAp<9JY&y_VP)~FyF%}mrx`(`30Ia8~0sb{XIn<ls7*|Y!VeP1ID
zA{`{QmV`>H(c-F~_EcMPHu5-lY(XEPf>DR6f>-mjN48SgtjJegtEJWY_K<nXS_SA1
zOa>0L09jqZs6d~D_*`wTUF*oJ(`)Rt7`%n%VDq6yMAo8gp{Jqxty65fpJ0dCP4;DM
zCpTAA4R;vNnJ$`MobJ-*YW+&BOgl~cWec~l*$lU*+I;=^B)UbPHbb%171S!+QPjuN
z-fdDgF+0P}uUxGBp!}xHcC)zCVzBmNyKsZ;)&0csXJt#P`}vb^qIXLLNJVzVbj9Rd
z^1bPqzc!-s;wAOnMyE#3#^HJlWD(>Og7{bKTF3GV?jo<UV%#eAmH4kQ{NAsezizZ}
zY;Y<u*`tTV_97m~7tc_8&v<ZLo37Db)dvtu_^!BSxb&7nng24yvXnC4wG6d7<)`@;
zRxfuwKg752;j>wIG(4p4l_xAVF9Mg6%>K<q=cMHL_|m;@>u(jddYu`~?peay{q00>
zK3Ej}jymJ+=APC5*Y5nUaq9$Gtz9j%j!Vzx()p6-D``o7tSh@Kv$jLqs^iA9r^U<k
z`2staeRk)e$Kwv|dvzt3lXs`*-qY@R<oR(AZO7M<{Bw4yYr~EFrlwoITkk>OT5v;n
zCv1gZ>uY=c@3x<1zgzzO!nXJ`cu3IPSHfc)yf9c?M%+{=T<BFU2OlTrA;072#YdU&
zobeo4F8WvD*HkS!8olq!%GKKJLi$2M+P}1<J{#|n&&&QR%(|`7!BM>433p~j-3Qh8
z>jAfIH{8EPd+_qd-UNOW-{!9kk4p1p?@5?RN#CF#>GvN-%(PoSe3QUPLQxg~@FWEQ
z{DT01*Y6*F0RXr#005Wz0037y0Dx|ns5c@80I1hViU=yZZ~n<~%O+9jc<wt>c1g!^
zHFaGdr<0xy^an+C9{@;+A;7B1sEKy#qrp;yQtRGQ4fKxykVHUL3+bo?nIvMTN;en`
z$mPc>op$*vJIgvdJIl;me<msO^^VN>wWOru;w$f)OWeE~42fv?9tuk@7>+==ApCQO
z#4Gau597}Xg@Pd?@Q6gh|F5AxXNsToOk>a)@Q!~bqN3b@K5S?quo5@=kN`pOeUmf3
z^s^aaZ5k#Vn0ddD(V1UpWigRyKqjW84LU*NOU#(=b}s8%Lcf-2BxMmSMg*iWhp|}~
znI9EXk;p?v|KjzIa~+6W7Nr^wwQ0BoqG6Q~z|a)(z704GfZgg=*aw*n%Q6ev<TH+<
zPQ)_NW|e3)jup?C<Ha}gLRF9HZs|q-))(;F?>7TVX&20sj=H&>s6S<aetun>=w;ri
zy;30p?Eb4A!8~2gCYOc4AQ1EItVyVf`U3Q<6p`QQ+sB&?0avY1a=-f``JV<5Cgv%+
z8Ax%cv4}qAQt65tkQ`X3ze-cc`M2ZuC-gj%jtF}T@r7^*Ul%05>`TL#%XJp5h#z8@
z-b#O4S<tc6pgjrf;0zi64q7}DsNp4u;~3zto1d@2X7D!4$IN3t*YnvNu$TNJ)H=tP
zNB9N^Sn-Sn;!T>Dudf9gq7R1q=>5xN#m5mA14_C9u+QqiZ>8S-KG;789v=_ZL|py%
zxq0vqa(R>V*-V7g!b?7?uV?MA4;5X1Y5PTU$8<O_%QQqE%)I0Lz**!|l=0aJX(6Tc
z%#zsFV*TZ%ODE;~u*x5Ke5YGX&2Sfza>s1?;Y$at(FI6IUaEseCmLlI0{M|SMxM8g
zmR>*0s7YF&-Gc@Nw#fsu{QGQWD@+e8@2}0^vIMHAX|Mx4`f>CVsMk(ARuffDnG5^H
z@|S$}z@N|PvJ+>v`?kD|ji4=evHkNr!J>gM!p}@`7h3MazJdPODC{$TqOId%tW$}&
zQ6GZKgxh#&>Hy2u+HXUUk1v7$0sXU|=wn4F{=u%j*yoRI=7EQ?Z7T7Lgeb6l6|z+m
zZiK%3dC=Z=dmQqK*{~I%XLqHDY(DPo4B>LyljP}K%N0Ne#Mj1Z*J_+anY@9%4#NQ`
zyRulTh%|X&nB#qV<|*^XOM8$%Om^ji=;lkJHy;Jf*{}raND6>Q$&?E8i`RaQp0urg
z`dG2EofG-)bwqIib%(MVDl>))LoREZC;FhdW#4brIG37*_%%XVzrI7dD)Y!xY^8v6
zg17&`!~@R*vmKBmx5-h|{I=@E=L+yWA%A6H>r;-nVO@7kI#ab>6ZsCp_EQod-{i}r
z2t#lS6+r2IOyel^`KBRwX4>!J5ax^>z1Y}ORe;0!gO@i<`P_~DLT=w>^(Ei++M7bt
zsrOb>!$smpJdtGlo|*6<Zxn7M)gp=-NCnCYnTeQXt8{Uoi(=Y9xB~s*Yn3hR2fF+~
zK93H-2miXs?BNHK+a8s~3ntqSs@;3D+n3AEj99(kA_UVi0v{*~IO>rfMu07B7bTq_
z&_(4?nB8vBLEd@7VO+n3UClgG$;1+g59Y;d*KeF7<n;-yw`YB}(_VUN>*vlGb={#9
z>w5pRbCmQ;!FEgU9H}L==?|wQbAlWZjBd>jw4z-mcuAAGgKwM`t)8Iu|KF+KMU5b>
z5OzKR7mmUNzW&JJnJgGe_#ssgd^eUi+yQY6yg)4(!5+0}-u*3>awC#=vJ+U@(<h+X
zXKn#-1TZw@lF%{1Da?fVOg83%wV%uuy2R2pw-qA({EF%Z%{4z!TAu3^#9~J%GXLpQ
z<`tJWgxS(e3pJ1xkn<_eM&J>N(w0~XX2A%;gt#R2z~yd&8!0}KjD6J%`tk^yd|FaZ
zecQ)z-L40Q7Uo_1()kG>xBTYK4*!xFMR!=V5T)7`aw4Y`^QTguQmus9Fb%gIs#<~k
zDo%XRN2HV;fv*qgxl$CI^p9>>sVq7@1YOAmo!t?uiO(=x^&5&Y(w<g@{4E!l=Z#V{
zMB?4saV*-nUAj0en!nF#Dxk37d}gj^EuapcaAMKO0t#{B_=0xZOWV=WY7ZQcRK0QK
zUv~tW&WDfWy*MAc^!W&S8!<uBLE37rejHmnfhR$R+^$2a5mh+(3R5>59L2dKqK6$M
z3-BYGfXp<1o%+Vk?!I@HbmW&CqlE4l)=4L9jg|bC-dD)h44NQ(8}{7+*p6I~LdL%Y
zt{8X3pwJdkUysC}$1C4zb0>N!hnh($32zvNn(p^1qI*I+5ZJ@ZRhnyzk5CQ_^nc#4
z>UEYF=jHeJWehUy2hJr!epM${i!AJafWdX+Angn&kugM{x~2$qc;%!FAZ6n`IQQG@
zgp2#Tg=}Y`Wydc4d##}S>Ox0E@SbYuz#5=x+!jdW49^~kzXF4dxB=HO7qN$-{Bbs~
zV>Qyqkv%kBDN@)z=w|QCL(6lh{d^$v`hjh!DSp%3J}9_!Vma0Tbjl$ric8VcAk1_;
z(@loJLt20gZXg|tTjF@tEaR<3Ho>}T2zT}2)?&rlF8%R(^kA3H)#Z}bogEIuNB1^%
zC8D#w1G7aY;%>|Pi%iFF=74j0peoe)(0%ZfLzhP7xSEv#sKA_7RLS0P|1Q{<)ZD_!
z8iXUUEUTSQwDOGOxm^%53@OPpT_6Y0=L!<}q>>5Aij!M)i3cH`w4`Wih3!ftkqURa
zW_|`Pb}vOAK@dFVeO|(}Rw!@v!6eUS6Iba5Zn;}}-Pz45!Fr&PI!OglL3C3ja#jqa
zogfJD9QuLBV)rB(mlO*Z<aR_eiJ@YF{%6>B%0TnI$Rr6N879y_rv1=sWxGf$`y%US
zv7)(HpwtroXwYawoIQcgAtQ9d-^J_d^>HKlD~)}3Rl&*!E#f)sVdjcdA#a%WvB?7C
zkGIfRIto!8Lj0}BUl^}z4>zo;*+&tphYs1P1eF|G&+jsvZA_sT^c;L#tn=X}SV=q*
zWJ)w~v*{YP+60>Z66uFP{f$5fU1>9E%=)##Pqoi?E#q5(Qp158>ZSJ2%`)Lbmed10
zDpY6>C!4@P!Wo~2=Ur?KD2KxKHx!9nlu}5#S_R9~F2lY$axO~<$G8p&p;4;?$8&;F
z@xFn69dxp2EyfjXN`iJhRF;(lB7Jmo5VN9{sKkT*aYU`Z2c#|0h*5Dlb!zI#Z;0(E
z=F|$LY_fx2$O>k_V&;u@>}1^m1i;cVgsK4X<ku7*ZLkKtkOqJu<c&(K-L7gkUtT}$
z^{)us=)SH*hQHsi1+OVm@xX>h#Cts1ueW0{cfIoI_DxWX!pGwGryt!Ph?mb9<qcpC
zgyoKL?Fb^g&sNU4Tp07F9HdiY5Y+{r_PSd|iiAkw^AU&7Bo*+gLeDeJSFB0ly8-05
z1=@O_bHyEbC@$l7NOAzb0%yjNHQ1LDpmd?%w4hGGl35HDh@oBTEcq4);4Xu=nQw%p
zh>tg)7Yb}SHw#55l4hAOvV-}O7{eh1hnXv(2rJ+;5VQZhm&NTJceta&7=B=?P|Q7$
zCT5`OUv9?v<TS}PP&e^2K`63ZpJL3dDrOPh0HkMka3AzKG6#Dbsgia$OjW{OOsC%v
zN}#VvlcLE+F%8=~8+NlSk|@f6A@QJA424&g1CnL}?l)&}I*C)aAO??7$%~C?dYMWp
z4RpK+A`Nn4$e=Mh^Pr(Y<2Zvw5~5`QXrv$tWkH=%AdMX6HR=&>7#9hy`bQ+_Bcx0u
z8AhE+sB`s<ap4}!$8gn(Ry>bHDu21bY}zA<4llQyw_HCHP@Y7-+@5*GUsYm^Wwt8o
ztTdI(70m{z4eLcTV99M%XlMx&lolaJ4HaT?@vHh4T+1g5241U>0gw$)Gcr%i(bAcf
zKl|Hp>@8%%naZjQ(F1g$6GR4$>QaY__2ML>yIfK<MYc%L4;<GT2S}%JR0C5KsYF53
zPbUJNr8@itkIS?hCDLiCMDDo*$gFAo1XvOKt{c;~BIm*}T18yX%COdvm!bU3gRB*Z
zoy{>3B!S2qb!bHFH2LRlUCl&b9}S+r#6>GFR$R+h$`Bj~&s8Fsk$1WcwP+9;jpaL>
zGgb>|>rq!qC;Y@LIY-J39aj5WSuL|k);OB>RTED{R-~cH^RWGi9iB)iqS*JmomSt@
z_lq}f9{CFFBhA^0UOKRdg2=dl^fthMcN!Ro*~jWk)m5I}E|}BG3dJw~nm8iWG)A2#
z!@2PBF-<q98O4f6G)zPk{uiEd%(`W0i<xMZuV=;8JR)T9FD6s$OM^Gf4g-#62E&+K
zz;V39owd&_Se61SXs<O9GnGHDLIlE$$Q)5}D`8tA^Mpze#BrOP4nRs6Q%Y6E$%1^4
zC_&t|+<Nz_4#x<JtGQ6+BH7pmJ<#NuD!WOB_Ro6~{Zed;s359_6N+TP*<3VC^^ZA*
zH~sFoO^c29h`GLnCR28!1XF`g66$PkKwLRXpBm+6kn9ttRqLDxK5q8n0QxOz&#=AN
z<3~6s1fmfi_~$v4WMwtzlxjHWA6({j;@xq~2F;tv*xNGa$TjCsNF=A_WAP%)#mF8a
zhs+QXY)3n(1hKnsBG!)$x%=W2GP-P<=xZd0fOs4`F-{_+vv1MLbp`S9QX9`ERb4C@
z5jLxAe|zW|dJMt{I#dgYGJan%!_wDtPH(6eyYD3MdZdxC@H^xU5pda1+H8=r{`lX>
zjNu}%tI$zv*RXS&7OR_VS1mLCtIJRWf=rW?4Vq{YL5R3wyJbjN<%ofJCGLw-4I12B
zExM4IC4yZ)ahbkMDM@6L(1_X!%m~G11(SG%akylejw@Z}vDcqrr>0=Dru=@+oO0gP
zso67rI9{j`clz8IkW^mk#l%*tl&=6uSrLOF0{6p8s_jjksnwd+AVF$ShcxHbY316?
z3Xc+b$w)ABkiVdX157LuQ;CY2n~W;6v->uJk69bDYdtYV-rr|>UhrnyDNTtM%q;(o
zR@weO3O~$`&PRNS#WG;GXk=DkD{B4IEA`Ky{h%57G$B+#f&mU_G2sBpq6my|qHO5F
z`8%y1C8GM;+!A{pt3>><JU&VM9~P)2%bseGwLnw7H|5hKGw&#)(%qF}K!Pc#o#CAh
zs|b>;%d5xjQ6CXfa!o^1rnOXp?7A^Bo8`KgUC6*KA(e3_c#gt(wO9%3<RV4aZLe(V
zqkgB<2^H(Gj&ZtP?lJtnvwo;Z9>5lYEsf}1h@>s)z%#VMWeVrfSP%0XC|-r|q7+8s
znnXY7W{PAgSq%0|Fi~1^p0Cxo&$d*rGehP9X!1{j?f&whpLoozTS_sM(G|63hL$zg
z^5xQg@f9UP<K*L%9_bMJG69*Kv?ZqVv~!bBDKc)hj)Y1DcH&m@RTXSgDosqueO6M}
zX`=zqpX99TR<H3ID(P}zhQPxt%Xk+GO>wj4v_bkiXPuw5V(1QD2vAe{Y$0?9kEpEx
zh|Mj@m-Ogg!&rmSK3q#?SmkO$1NOyh^?L2CM-l+F8)$R~tq1~N1|8@&`iO}q#xHtn
z%aL}njc0{DuI9b+l*zl5BymLL!vC;Yhf_$>`JZA1+e!8ikbE3(A??*V*wg!gN%#o|
zS}fDSNfK&mHdKCI%GszDe^+h;o`3_5f&3B*v}2HAmfIV`*zAUX`D%5<Y)eVLE!&3C
zS`3amDBkHEWoToN31SvAuS(F-3Ra>hopfw#i>*qQE@CBYj{!X^2dYF!iKTl7X13N|
zeiC^2l|2JTDgNXM+5$PNB)lybNJgS^l*O+0s<On@r>7KdGmmVaB21mgEqRN{Du5$+
zzdpcjPd5HxtM%5qwWxfQcMuK4)t=qA8=a3nGqys2-SE<0Jq8F}hc>B_I;%PrvNlnb
z`!}}I#rIN&aVTw>e#t12tHu4P2~V<+x4v3Q+}3h;k_Vbg<+jV&h;80G3TdU_9pJec
z|4@+LJje#783OH7^?v60?~ss_y$@`{6eX=fu$D{`H?WkEr2~#+{*RrQZ=;MD*Wy<C
z9$SgXobBs~$FG-;fR{j=qta#Ka<N<Hlw&9wx|GL1;>kcP8TO}Jf9~%ch^}HJa*1cs
zRtVq|O$ZaqyG$oNEPXVarWsz%t9^BY2-jDoC`+5YY|=`S8dF?I!0IsSn-v>vMHIr0
zi7GjzR}0C8lGO+fkqU`mCv8k>YLg}_B$APPRg{Ut315=14zysGLJS2%@XdjSH19^-
zLA=BcE5$X!!fCe!?u_VpT0Siw<W*R$8%WX7ncj`rQaXu~@)eZP%(eWD5oXRXO=}dh
z>8~tA80twgb%0IH(Pf}u)6a|H%K{fATXZJ~_VmL!F=)h8k(@#Fe_Q=xEBa$0B1uIG
zrfoRXu(i08r&!1iX%xjzOg2)si&?RGB+5NRwN=;)+_-f!!xkVdc^ldI5@D@RN7jRE
z;m{&DyyLs_JIl@`OG|`gQ&BE10Ed6VX5XqZ&PtLQKB#h%=*q)JmmKtO+%iH6Lp2L<
z?82=a6$UUTbwuvs6Iz~~>I8kO)C6JzhTXbqZ$?F8mTri?IH(_?uo#?uigh94#J+p!
z<mQb^RH)8{l0|P6RfHTxnY)-O34Xayyx_eLct<J;3}b|%2ZA0jh~}Lf^QfF@a<SuT
zgtOd*l_fUOTXL;x3s@L65g(nth9c!tB4a8BS%pKn@=4~mbo{n>Xk9s<qIo4%O`(${
zT_x-w+-9k2)!BF~VYvuy7Do`VZ%t^2P)xmkHVMS|zVZyN?Whj5Ko<!*B!}t{H+g4n
zn^mD5VWH4?-LcdRHrzyjSn@IG7#FRWBMjx2Je-0`H@0bhFp@$*Ih)W=?PHuyP+5A+
zrjW(Ru`7qKI8j?J&=uAYnP9zs^^bM>f1W5`aF4|xoo#DPF{!6T{8R_xj@@;ds123G
z31Ah>D?tsSmbj(b*v~!6eqr^ey1*$Q%X6KPli|XIR|2h+xOiLbBb*?}%!E=Er_z_V
zP$VzudR(Gd*g49<dRn@vh&h9leO@e`We*Y0EKM<lz%(EqB4G?bF|aiXw`HMLMmo7x
zRV-Q*7$z;;6c8DH*eO8>F<$ehL{M4eG%VB)P$5>28F5-?k%>Q++r@oiEFyr0*bEo?
z=e@8Rd51^10OIWg7bfLSof~CcV37<?D-=5=|J=2$0;#)zcA*{D0U!cKOp2w)LoIUS
z8=fZOne8FEw0vm?ENuw3C}~&^mwLiT7ik7(<mr&`T+QA8g|MfcnRkAMI)X~))I$Ix
zTRIQ1O9DSdYbmyb9a?~n4Q0sAm;cFzv5C4X5fmaR&^A<&#@s>5+AjMLjTc&=g0l`n
z4MM^9z^oCG$+?+GJkSpF?ECOhX1b*uA+P6BLV!qEjQA!%-nB=>x;q{b4z$T8=?W_j
zE}AFrz$JY_srp*RWl?ym2HaY>?Srt1I4#vuakg3&ZXt89WYgdjP5U`84(!x<8|v`{
zltKjsMN<{Ka>)w^+P#lk%F=?9r>~Sl?JiOT;@L1)y9kPjfg<XTlVa_nf*-Z^i=*E{
zJsYA)E>$a9FUE2pAakU_O`aAlSh}(o!CG(|kGldxk+jTs6|HpdgfCW*w+@7XSu3mR
zcD>U|?RkE<OFTpz)%5cTlEg|2)~Q<0yYA<n8fE<1(QIh5a8#}SWtBNyfuIFX$r3ZT
zFWuk?JKUa?4l3vIdF9I1hiq3MhW^#Roq)9|TqrM)WyQfN5gFK|_oQjku-RIUWT>s@
zj$vlEg+H9Rt|5lG>bl<AiCd_*g@agg$bHAvnaq2`k`-}EnNlLZHSD7d72dlBR2C+J
z&u=&=?EEch_M6Ad>>rjV&!A~i>x*J@YMZ#_`I72+s$JRd{&3Z7+?u0e3Dm3Q7nv6>
zLXVx<e}yRprNAbI2kr6a{z7qQ8~}AJ65b=l`rX-o!6~I;;SQ{n)hm(D84i5tb_5|Y
zq8y~AULgP^O=R@MsH)8M5tfVPO2ZNT&b$VqEW`2DVc_P@zZ_CShZ^z^4&c;s$)s`|
zfyZ~&p>#FjDiTZCdcD6TdUaN0YT`)-d1u?aIF<~oQ!x~LajbCG<`Kb`VJ2W)Q&Xs9
zMPe&ZWWdH|-bz!YByV)XjiBaR5kZ3{PvJ}uYvN0hB!DPU_^U1T*@>m>&eP_o9;l++
zL@Hk`n^Wa%)Ns6Ah+ZPsuB~%vjH<JYs2kLU@plGn`*j0|l%U_5XT(%I5N5$wsYk#T
zJa^G6iu5!HC(JUS>g+Gc_)zWkjhiCjP)oP7-4UG4RqA8PZYk*NFyV1Z3k*tif-o^%
zAa==k7}@NGb$~5uFjqSZD=@+5i%=o55czPbh$CdlwBMVS_1Yq!CejRJScuQD$D9kA
zRl#%;O`IKJ!a-O99mUHRaB);3uzy2^>csdObmw*~8mn6kZZI^Z{Q=oD&69|(8@W1H
zO7WNi4@AjqZcIRZP%(c<$o%&m!pDVy^$Xp^n~*n_zD<Lg53}Y#peggK{*4xtq1r|+
zZq*?fvu-@NZ9&-pAr0Ksr0VauhE1oM#DkBhz*gQ<PP4`UI<`oYOnNqA6=_rqFKr{s
zu#B*f)n&;*M*~+`Lq*_T#BU9(RnlcXHkR4V(o|>%W6s1a0d2_35QWx^kx|UfZ~O*J
zv?+=qTXZFf2Lz;ZHMFqwm29Mn!meo5Ik<fDB%(EA6{t)9A+s7W{3@lHoqXrH#=HU+
z7okNe(hMZpaJd_02Y<u^iK0vco3NZRLTLSiX%tRQ#cNRaDFj|3&?pm<c|4Soor$0!
zr1gL5Vi_=rVoM~lXp%w35z?jhibQ5&RThjSk~L+YLSgA1Kj&BovBUos&@}8`Mw7|8
zsNWF1zeDL&-BN4-A7u}1P1y|O^?MM15pPN#omj}FUtc0Z38*a(@r0o%GFbeVmz_+y
zc;3!DT?FZEf;n7GcwuxjsAr3*9%jJ`!+5*Gn`7jl@L|sI%O*oBexX{tupaO<<w@RI
z5apz)8u26(@nHT~pCi{&HqA*{A?tEfHrunMGw*=`C}AsoA-ASZLm1{!w>$36I*HCd
z>1@RfOHgs~LrBowC-Q400w60FGySh>5>K$lYtk9lzwb2pQqXb{Twf}E)DiE^rD|5a
zD0OH464^jCRBSCm(|m<iYg{;snMsAL+1NEjN)~M9qGhTNlrx-nSgx!^u#{Q(EgGi0
zDpu+&N;1zGt^9AZx`vfV=t>|^B^xTEFUHNGSB+4s<|E#OFEZ7sM@6i!6kV7EE>7a+
zy>qsSXR9J&Rx&Jk(JM=Ia9^pi38MGEh({S0u#hxU?nk7l5Uwd|!%PR=*vh_;(njcf
z-@qh)$Bc@_i`>ns({^PzbS96)hE5<6r%5e|Y*UeeNx)6!e3oP6EZ|zcY)Cryxyk||
z%|I<^#>Ofq2_mB=651pvl+Z3Z9=pxB{nS0im^6y5IwACUL(qzHL;EwX`3kL1G0C{G
z5oro8+}>k|Nt@g02nB?u*}k>CR!i=kz|B^(UDej(>w0sTMCb*-NC_9B5WzObh)n12
zp-Ln`5Hnz$Cc97PSP{%w%z=o|<B`F-Y=hH%OuZ@|O^!s4rJLoICa_!@j;cxCFwEUR
zFnXsbflJB;xdU~&bOcZA%BkG{e8@>WY=9gvZ?Wb(n+!kl|7~NFhD^pq;kv|vS&Ga+
zaj{#QSD*Ns=4t!Wv?E<pG4GtW(%bQEhFTw*{a7$>>3ki%2DkjXCZCfgopN|vJ3z3c
z*Ck<86$okTS^etpOt^-Ro56EVXY+C)?-MPLs%zC5GeqS#g%-qg4%D6x8DbCRIM1R{
z`T_Fe&|u>F#%10W)0L1{u3EsA1&!dLR-ejryahA!gmYXPv3~q9N&lIn46Ta25hVh`
zrcrN*ieppMv9GlJ`ypGARlz*cGT0n?_ufoHnno2IvtYw?vHrF<aC1i`1Bc>GJ>@oc
z!}@aOZhm&tP8$IoEG%Vx3R#IwwY}7JvA_$Y?nNgQbZ^YxPpo_wGVLHtVdv}4$r44>
zSoxCvBx(9?i(dv#3+^Xm^TqF$bUCR}%~T5Q)K|{RlP8e7#$pmyGjGa~h&Bq;vS`DH
zBEkColZhLnko1TW&%r6Cnx(nmT8Tws9g88Fd}mc&K_*239Fc+T16Rrrl$2Jhh&yyn
zeIfl+sP^}zi_m#akTk$7PZS5@dQ)J#pjahfgQQ-zhhxgESd{q#(fZUgxIH-^9{E{g
zN|K$)qFF4Q&6TM}R@j`K4I!MS!F<%*MId3&;V?m-O9VBnm|F$XDU=bAf_iLGGY`{O
zPN%r%AN!DXFlX?ar^|tg1IKt)G9Ch|6nt0Ve4*NQcq=o5W?$iqKG}|SaXv|6-=oTi
z6|_huHdG^VY&D1MpE|QtjIaoSE2@br6QF+Qe-F=l<$8B}(}S)~84S%ND>GQ*bU_pd
z%^8Rvv@}#<AMXARGh8)UH1-1%4<bIwcDK|bZmq(~-j!by%v{aoRQWGwJR>_t=<AX;
zQ0VVg6L(VKqgqeBE`^?bF4i5i2tjEGZFZh^0aNy1Z5K2=K*FAQRBK1*(UP!o<mCt@
ztS0dr$#szUQ8G?LRp}WDQ$dwV4&T!F83Z~%z3MWu^hXZgYp*lq-EXG-rj`v&W+h%E
zg*Im)HcmM#&4tt6=!zgm7A|6^doI0k`7m?hKKolwY-5`IV?`6==Q`xE6bfDLqD&ny
z&}*rWSXHpUMdM8Np*f*^o`ltk3$A^ba{du`IIq)~FMNXW@3?TS{v3f+K-9ERk5s}b
z@iYuXH1XhwBpN7^HErw8ssdIdlT{Ola$286*ou@y2@(^};=%qB$<>Xox@Hh{#*5x=
zVWcdXrW1^sN+qPE4D3i}E5itB&b0@r0k+~|n6dMd@GlJ6H}zGW?04>#!B=S41B33_
zxz?tN6Sn)-#?{)$I-uznMZwEQOjDnmJ;@^&%GDze%VX2pOF9<O-heT59%_68eAY)N
zLDT?&b_Z^HPMf&Uxt&`s63zaU2_WAj*~KE%706ReaJvM=SVkipoC-q-M8b$1d}&t3
zyzSz($=ijNx<;;)K^kGlzba8ul4AX|Jv-A;A|38ua_X%inPiPtYDxTT%TpCrdL~X>
zC+eg^pkfuoLivS=xmb9I53KZ#_lLY0_)$w%HkcbBS8U4$@nT5}k(vhjN72r$AQCt7
z6<}|dKwlp5s`TE~)YNHkKF*=ir&Lp*{K@i1?=5~6`8Wcoz*<9o<nJA1%rZ#~=7>nx
zGn!kcE?bAE)`>n$#MuZHhdv3HAAjlz+omLyUwV!P5gE_wv?iR0h0_zp)BCcPq%gT*
zgzN{lU%kscAQYD*9R10d2R}iwI2|6N03yT*jOfjv#w3IH#6#J=r=nlo#`Ky*3UAf0
zjyTS9I`>=#`hY6s)U9fR+_pyJg=Odos07O=#-r$bjMZH8&Zn$<-$icHI^BP%Ecd*x
z_xjWX-`^W%opBD_>|hok-UE%^34!D@rz@8un|cM?B_zC9dYzm5Za>L{3D~CJnXgd>
zL<C8t;Nc^N-KJXJJ2z*c)`3mLE8YB>Gen3cpjpabWIdpnM2xkY&6!%BT?|B~qSD+&
ztm<g@hYoahdXw*&XH3>wu<}iDwv@6#29C<IAkXk{@rY;&7OKTPGHHMEG~TiN)-B{M
zizN+lfJT2x#zKu!CLO%I({LLob(S#F)I@_0O}4XS?F6c07Y$sNA^HMW-kI`X>6-(x
z@<wNqQ=(hEc`NM5;dEu0=O({uTrLPAWF0;m_KpY5a${C|tB7FoRVDD+7C&g1r?m|b
zz>1S4C@=o}A<3FC)Ih_<#a-TF<Hl52-D1;|{PnN5fUZ{R*L)d@>>z=vX`Cw<i+CZ=
z{N9kCOD))vKx_kNF`!X1z{J5*iTYc+6@QF<u4GM$nF$2gA!yR@@1^Hgv$bBWc6~IL
zMdE}hHBl!ZI()(hq{rLuGi$hH80X0IxY@mlL9+1G#MA#MtgD@ZcN*M=Sx+JrGU!w!
z@)fhp<h3vHQ=4H?I8Jq$=sv+kg=}7Iz-oZZ*MySodf~&_;`&M5J@z{D+(?_GNyO7o
zJ4N!Oxb|N<BPGk4NvH%!ix2^9kTciJWD2#%oY(G<Ec?#z4Ex?RIo}-=oAu`K<w{jW
zD~&6gESuGg+9HTI$HGue1|iBk5$v?T>V~ETlkrA&n*}OGRyfXkqFFN7<mq4s%<F5R
zjzx^f#dN8uOi4BnEM-)(%^kkYeTUh_E{?KRT*^#hjXo+iq{#5GpXaKRxE?yKX|?er
z%9@NF3fcE~?CnGX9-YJ^b2aOfOp<5K#b$GaY)%dfD|>){K}?o91*~o3k~imqbX#i$
zG82F8MwX%ySgIanRAb{uhnrNxnNwktTv43EfM?YE$P|REa|A)ub3;v}os>2t-W=I$
zSW1DcM0}z$m8iHlgx>3<TKnB7Hs`-_VvjNI-2qfJ?E(JpS9v+k6BI5kF7-YK;u)d(
z-%`4*w0xO=PLPRrc;aP$6O%j+QeaT(*hu&;^u(r#hcd=A1leh9ZTOwSN4Xvif=&Gv
z=u63QaO!aC+H^Hx{-dQd_Alq@V0+a=U&A<siaOpAHGtsd;Vq?FDrR0^EHcO)QZsnM
z)W$*5k(r#7?cP7fpn<`H1(vI;OQXpYE)3Tdqixrdnp(Abe*gmiIGTA@f9G<AW;L)+
z6SFt_+yvu#*ccetiZe>SYSC&!Z%>y3#hKHMfc0uqd5pl*&tBd>!q=b%8jrbDRqYkJ
zy?B*ojw}IEhVq{5jlJ(x*7s!y-!L<zAgZnB+Gg8%N%rG}-tV9v1m5_hQpMTDb<q@q
zhDqkj)P#e1VX7@DOQWc<89E6=4sn8+804egix*=weUrn=%;E=7UG8qOxy&Hg%$ABx
z)dOUHPnU3K4G7pz1e$z!f63*eVtW0VoC`N#%ARp_SiAIg=5yP-3=vF;-_F53m`<?$
z;${|!LZD$Het3LpbUcwtrO_CKW8dz-Zrhvf+WWLUoyi(YB$aM|yR72;+kLOz<H-tR
zJ+gNV+b0934;dinFv~setw#Fc`fb#eed;!8y*AgGqdB@R#m1P5X`99{##&-FVkO@x
zQdEwV$o_{$ejW1?Y+b6sbOwv>u|obX=dX9!pI3ahZHH~2=N)aQ8CDw2=5Th^T9O6+
zX(2)jgup50q3rDQ!?p}T8MUtOawlBMsX?3}<GD?Z${5JDKkX2IZ8E1yWg`EuDIU=U
z7?>~`YI%42AhOeJ!U<y;UpK%Q1zR`@+o3-{xh$BAg?DOpD`|L>Z%jcTXL-!TB#b+U
zuI;)9WoBae{!7ZU|NeY-8pSmGt)ruJo6(>iJw@M_?KI07=5n>#ARytJC2Q};CYTd1
zy5Kx%?xZss2Ol~8-rP|`$O{vp`*c3fp;r1Jf}z7SqQLOG|9QQ%-r}UdI#Rc$f=y<%
zMr&+A9Dl|nO-FUXt-QAO)Cm6_1D@}NAWheka;0UZTDt|BJHt2wvuJNMJL}I$pfi5j
zL$%TCZ~9S;istH^l8tctxkX;i^45r28Oto}a6<p&RqNSOP7671x0`kdl|^U8Ad_B6
zI)vxP*%nySCS~a$EvBGsmhG82X5wZnvYFNyY-+V1U`5w;C;Wa}>*M(TxVNyirSp<g
z)AM09%kyEoQmr8h+>cylz;;P($Jk*|@VMNR?g$1eey--^{yl_Vy#WM=Z3es$k~@g7
zPyW1Kwmsz~Ib1}xoIVJZF1aSpybXxI0C$v`Gg9KfwG{ip@Zo*tXq$0tA(S*9X+!>W
zroiT95~9jEogmLM-e@#Iev`B7z5`#=^`cGF^W}^X3G}$WUS3{ln3!a0wm=qRi=ru-
zX_^!w=&-n}?e24+)7e;N+riJP%Cw3QdA$;VFRS$ksa6#+zL2Q}w&tFCbwW2<S-Y=V
zCQu->Xr}oA)nF41?_*;8gQmPs8VEf1{r1_iuC6TNIG#imyI!dK&DUgwk&Qd9x0X@I
z9Zs#7#8ok)gPjkhGj>1=kXF@))rSAGR_<7;X;0uz0O7ZX&f{X!R-G8W5qIe$7VmzI
z_%F5zp8zCwhC_TL1d@c3&=l2Fl~z$1E3U52mxVZA7K20(8m-o7X}XT!vRu!||6*z2
zz~Be#!pV{1CDTYc0A=SRs~?76igM<T61D5C2~}L%*)zAbp=`D~-4Ni5sOBZ;1%$F+
zWo1EC;&0}0A`RT!8cnvi<k|MX@VpNQKeoGWm;5!qxjAX)_pU`VH7HZs!JTEAW5c=P
zDN5$~TG^2erqQ`C_WpT~2P7<baeTe$j1S^dTY;QzNS$UH^sgjx*MA4bw#&><4<7=@
z9)SO`4?%u%?6zgY?)!PA=d`Bd=J2o}zO=Wd_7uA5Z=>PeSdznhHf`j@*0nQTH`Vgx
zYPN*4v_7bE?*?2mwR$E^h|pT-N+LK{D%*Y157Keny7j-P|1dAycJBR)V;?Zvw+{@?
zZml2F>b^LO;PmNOBc-MVUc;zDq>Ix0OB(F3)eB!I)`3D@<qtV(*~$kcQlBckR2(Eh
z!M;ig7!U{uNVeC_PkZx<?4=veVL0*2IwwAH)<mjLo{br2V{L%lb$xQOVsT54j%*TQ
zt;SZC?EOLNt9OA3kh-cylqj{Vo*w?*$0>WqS*{nyK`=5y^h5>0=d>B$&>$Ghcr=Oo
zpcG@i4J;+~;^{7{D%a-~BEl<2lCBQbL-$XI8{X0Ut=KNkVu{sOi(R-ty()dT0wbkH
z6;rheTE#A(>!t;HEdSR_%|Bkh@Ap0K05alr`j%#J!WZ`~;8W2f<CKvn$bcj({ASwT
z&ED`O>@)qX60m#&4D%X9#osC_tQBXC_6I_IpLyRAJ3BMf6kOIYOHHcQqvPA|zqo(D
zUlCCMYq9rx(66pG=F{%rF}IIvKu+JvxA9CS;$-Om`Lw39Ii1KpVY;8*tUg{>`H3f!
zT`sFdyGvv9CTaRGHe|FhSfGgah8uYWfrYlFS&h28Oz<QQAUg>Pv%n$SUk;-#uCH<)
zoH#FvlfuW2oXN%9hbGZ7j!4Hi;}-fAOK*-+GMw>CS%|nt?+ULIVmtD)apy%*SYnz`
zUcus(BVAfU6xmu@TDq@v{%&$@ez?`L#i3d`5rTElgs~>>Kgwi&%RJq0h``rX!8!#C
zqBP7v9Ct4~n;J0Xqw3*Z9(EO1)Ygcb)g+dBksuk^>&K%~tIE7_UiZG=WIO+xAYrpU
zG*Rh|X~||&GkR$1$}<A7G9_IYSs#;vyFhAc19sD)<Oefe#+EAFD5r(pDr{*<;eFnA
zTI|!~$~o=4s>5bw|EP^JF*2d0>pUm=PZF`&3fElhg$whVkb1V$F^P!QOIy0y8fyeG
zs>h>m4~9*BvvKqv-+moVYB(B=Fx2)uZPqyYj`ckE=wn$oHjylsJ5sQNHZJ-`YB%qU
zi0OY;lXPOeujd=I^bru6OPTE>0M!6T&?7{f&uD5ToL`@%8^sp%^!P0H?G3^6PhYB3
z1qq)m62A4mUr&vo>-_=EzUhinlH);KwL5HqyW%8Ym;#I7+x?AsDv?xPCuyoh&=H{@
ztF`e|V@z*G=Jl%PMqYijU*6W6@_y43*7dh{tHH9d#0dF$#|^(qwI=hyiRa^X$ih5J
zTAppj)W$#}LC?xHp6wabQ(DDzlMiP3@l|b;L757Vb<5`=I#dlB3(EP`0^dk<--bm3
zW1dYC#g%GgRx6&JKCG|i1zTX>o#I4J^m72-H{S0C_pdud+qNUjR2uymuAL8cwZ_<A
zE>#CHLuS8eSVY7`aQUQZ8M1cQ7WbHVnmO3Jf@M>>t>)O{%auROen9NHe!Olpdb2<f
z_{0BEj#=)%JkFSUJFR~{9<ycsqXTYuZ)~fNPt5tKi@2<49D=3gVnyrAZ6JkzZ|3IG
znsm*$7l3kUaf6pkw0=wTLi}W-IgJ#oWXYI2u(eB<ENuHepY+p2q5o9R{6x@H!x)a%
z!`s~${+y02+$S9j+P~4s6mRDxEIOHo`5GI|kO)R$S&y<Q*i+~vIvWRv#x!Ox_S@sD
zx~BTp*eSZ6WWSG3eDD1r{Nl}|NuKY(dqg39FqS@y(j-N#UhmiAt~eq4b3!}f6bv#+
z2Y3(8dtUQAHsHYFn|t}WV%mOFO@?1^ab8wiJv)Lapz__Ux4OvuF+>?Mi<`T%KYN$?
zdpbjsG$HwJTi5r+Mc?y+G)R%Uwoy%N`17zk(c?fH?sMq-4gLFlDQ{6%ZHivkFQmw8
z)xItzUln6HJOj0S%HpmaVLK7`;M3=-<4;SP`QmMkop(^!_al9;{QwwC3#y%Jqxk_5
zpZzGrJkZcr%Oa$({ZF7Y8GMFH^8d|o+l2Br*up$yOr6lBDp6%X5siZe*}`;wlaP4$
zH>T8IuVxsFN}y0OQx-VXm=o@$ql24j!pOqHVzGA}g05@doIpd?*vfiW$uWlK^(Q@V
zX>oC|Bk!9B{_EPe_pYU`p|&qBNzXgd&PG=r$sE;mz!Yr>C}b&!K`q^S_;4yn$NT)G
z%)@3$?CahL|LBYR?{U`NJ01)=J>5H}nfHD)u%LSWN=ZOUi~GL|a`Mj)?90pi&d6YH
z)Uxf{F~=+Dy<HzXq(1PUj%}K{4D(Jq#aoeqk+l)x65x``Ikjg#e4yWv?lfZEmC%Hs
z!otGFjT@4j7h`$u-G8pgbM1-l&*ti0?o(;CMxT4XeRO@^F!|ml<o_+rTyY+ckh_y)
z<!fXP4?lojvdmM!9tt^HxrY1bezLDsdj>Jf@#c`@yT?=4b%cIWRZH@prW>huyE|x9
zxcm@H`P~jHS*jF6b9W5HC?lcXhLUc!HJ|}~o%tS9bnxi!f}NNM(-JZKu+jED^Ug3j
zJzw?O@Bv`Uor;1%1_oFVLeLHC)UV!&jGgD<Bl%;WegYh~4+rG8Z5`L06f3_w7`(5o
zJq_n=FOJibvX`%{I)dcFg=@$qB`5iCLh}^F)k_+Dokt?Go(H>M93S>K-Pdfk?XP6N
zIF92Td`w+jSk1B>#P+48b;f@D23tZlW`K!_XKHSbAZ>Lh^qUk+Ll3+1$!1c2DE+-`
ztFwIOabePI#4b!k4Hd6{NN|ZO2we1yv>G>m1-DT8(vXp>%k%u_D329mhy@-L6r{eI
znv(zY_}E~oV{aou7t*|z>t(aB$MHi7Uf1&Mj^f<52U@&nkA~0iPf}`QnxTvInWk3f
z_W?7D{RoNQSGr@pbG)NLQD=94eP68b-zPuK{lUm&AFrHlVrlE?e@oJI4TnM}?v~!)
z-goxPiw77gT-U@Z4$~duc!%&mCrPRI^^8`cgRyp6f?2I^*IK>WmKs3VCzf)14;31<
zpbv!_8IVf+jN=Om3c6L>Xrgv!vf9p#xw*N25)w2PbaWc6!8vXl9*RVxWq99wy02Gz
z99N<Iw<BOP+K+=v3=GOFPBx3p?Fh~33c6V5M>}(T!)lfL;%R!bnSMOue%VgHOlew0
z{fvGhp{%8*#aPbg=g$@!8%z5|_hX)DSa{^PF-c>l^a&DKvFK(jxR=cUAP${Il})|u
z6W>{<P1=)Rvd_@fG$&D-saR{wt30+~>zf<b#)2%dygY;b{Q|yeC`&9CfB%waNXWbx
zzeBuD6iby|{qmj)SXN$>*&L~;sy%fw%btLH-X7|g@11j#yxoSGTZ)%J$^pI3%^GDE
z&m1?-{Pwu8kXzp#5JcA*pL(v@pE}DC*Kt}Z_D(A;CHuuo(+<a~7FX{%b4iP=F4fRc
z20;kAV4l3&%NKn>cxj}-#Anr@oa|HG={o1ICquF<6Ww_h%WsiqykgSaNmaB$ivnIB
zga}lFiGwrTN)v3~s=cbY^uuyQ%C4PlFQ;MPzJWp3{rW!JCLguumxtYEx#Q${Z{2cV
zp3>S!<d!}!ua>nct(9ihHMjL+8D7t<>TU~eRzBX1%<kL9@J}YA`lbp=rO7_Ma2{ie
zpljF4p^iS9d_PlF5}%yilH|%NDk}@y>f+FKy%RvJu*KFARDo({1uM1}fHSf;Y`s>q
zuT<&qtE8Q{sE%Yz>26dQ2nq_8ea}vs-EDJ@z2BM}%@GqjH#Kv;E=b?r-y=kbjF~WH
zmPit08av9uQdd_U^2`TYz>6stES1&QTb-nzckK3RJPV$*+T%ZapIGrYZhCkg-?7iX
zu48Cqwf?7)uZn8>iMlQB#a#=<AyA|^6fMv~3lxe4DH<R^p}13|Kq*d2a0@MzKyi0>
zcMGl|NOAe{U-#iYe)qop9_F`Z&CHrPXYaGmraL;?EjCn@!L?^&Cvm8t$xNU5Y~vdb
zS#=l7mU$#<Iv(q+*}p!1Ouavw<+o>l*LxF{j^yCrIKRBKQe#(PC%?hN^<HOvTuV-^
zZ;?8F2!^78Ksco}CXBQU`+?cv{Dirg0Z9lg14bEK-s<p@fG4bvVNy$veH`Z(7ZkBS
zMrI^Pz7D5LB+=2+w^n@-uZL`|sLudojzu_UFOO~y2aOaSo+WHaj0aqRc9DQXtxUEs
z_hgaD@EmQrJ|qj$_udA+67<ot`JWoRaVyRwb91eLf@54=W2f5dtjpLya4^q(5_Y#?
zDA1!P)PnCQ^V0;VWlUW(ArQxPS>yx`jmW05KU)mm{KI{Njoo>wi&2{c3(b3#ag0kS
z=GRladwgK^Z+{wRK^Z?JIWd+|B2l}j*CT6d07MHgQ#UbLOa@lsyLPqXRgO|a#_R5E
zKj9t5El=v{mM~7RLDf%=XU(>63S}%-+?dVH0vYX?-39*gO7G0f7_3~>)W-6v_f~sW
z*>3d2qNBjwF;VB*XwWqgkuJT%+a#yJ-s!)K9|S{RItrM^v}N1!L2N73UU$mDZH3^b
z6Dip1U*rSwLWs)+D7u+gY`c|7$xn_j`3k#gz%T!pXG=8llUyW=m0T{mO!VsOhtj<d
zntL|X{4m>fF;CPeQD?@MI8yFk5Jww$rKR0^=Be$sdQ#O}0y{U=nzTM{zQ~#yJ>1{_
zWbOU)8z`>|R{uL{$ILgX_qZWOd2vV7n)U}_Z2*Iey-;-y&`kE&5A>&ER(RixA%O6~
z&=mSB;9qw;S5t3+5(aPSPYw>I<*}jC%au-Owd3#7-@J9G2+Q~pYs1xXozH=CEO8Kj
z@aXbohO32>h=tfoG6f`XSEa%}M3u~GsVbyz7O=K78k7}2$rgV)3!>P;IzK-jn_WyF
z{X?hA9=7Hc)RYFi!8J1c_|CZG$)J!o33XMGZ$$1DcBhc7NP=wxde4prz|&$EGg1v}
zu)?bCqf&Qz?=5{6|3jVi6K@?1<t~yD@KSj$dj(|jfrwTx<03s{xtx3v{Ov?7P>>1a
z)AitzcF~@Ewmr-^DP62CdVYbvZQQMoO*7D&8{aJd3nOIH3D*y^s<32midNzEqHeR!
z1qCpX2DKBvYZ4K}>%9O#d|kxxKuHUMQtV#%={ajqk#ua<rM`q;ce3v8?LA|7e@^~F
zOO1kH1`d29ox<lATA!08AqR169THsI>sZ?!K9@Vk|IjTr+bgBZ<DiuklEPoqjPr69
z&%)%Q&NLs>y}2@J1P&;o<MUz#mIlrXmD%=h2X23y71k{n_K3=HF83r=M?4sHHk|O3
z$M3eMwv~ys?~(c^&aj%c+aVn@v}j1PMIp%E?6np=)`DC(Ksb`+g;qrx@qx579TSrP
z<J-`VDBgt`x`_5BW*B7mCT*ur{#LfQrG^KB-uGmu7B8GMP)o01so+RWuMIXxD#l?W
zg5><-pC#0GMStRzvNBds(3K_2?I19t%9=Z|=INK?0S{H&lm^_=(fD1de%X^pxZc<X
zYYyv&RTeRvF7vlZN;=e0Zq`jd%<uLg=TC{>1NHPo-WQ~xBQ41nFAp5TFm$hJ8|L;t
z)WO);1U71oHzSXF0t4r>C%h80nVNZ)?GKe$^|tbjk}nERO--$^4IrD?6FZQRrlVu}
zqK+g-qB*vZhrqz|v+Oei`a(_`?r@;k?u$NSfiYA=x$EH0q5|oi2aJCZtdx({N$62+
zUgC$RGuM)!m&(0mV6opgN;*#y2{7#HvwG)tYkr*H0*4nAr07cfT&$SQ{4pCwp<LS!
zz+mtYNRWkD&TfPW%8(8_%JTrvz3LV8vJfx~E)}Z*z{e=W#fe+%BWMkl6iOxPYHCtp
zFj%4z8~*+M{U4LsAJ!roUCO7XPvE)mAFHdr{6eLM?Ty=lY@j$>%R`FxTDHVn_icH{
zwbzT7AvM%_Sf;rdX>K8umi%e!d(;$0vzLC4O*nUV6@xza!xA6|Cjlc|{xG&rQ0ocM
zOXs;)J1{NlC4WChM}DGhL7tn;?QPrrgM*@@P`PV}OjH??jWU+XfqOIoGj(J+L|@`A
zVdRU0u?s2`Cwx}eOX$u6KkaP<3FFIh&?HxtuBzyb8%7<(JRoJT>`IFJxI8$*KKc1T
zWv1?L^7RI5Etzh|-%0ctGOIIr$a<?J#|~PJ>Cm=}3z~lHqBm|S?#jl04>AlGR!xU@
zS|9W&I5<AsPJjdHU{UdjEf0bJ-48D>i3IiM!lX-cbCMtv!dTja+Z*qT0rRo34{?Pa
zI&1(h>#Drm!n8w<xWDUVla3(()Av7f`?_Um1ioMg+ZdrAkaEvq23(*XP}7JlLtMK-
zG*ja&<rw&Ou}Ax9rYJ;laG+LT5d$hE+y^6?ee+8A%I$~>NO7~9#Lokm=Hd5-d6tJ=
z7!2dYl4veO>!l()^t@IF3l(nZ#r5@7-c}wClR4)+MVn)IeWaB+ELYaq4CrO{%BXSl
zKo?ymQ0paAHB~n?7=WjJ|9HDss{aYJuJcXQ$bom5J}AyDNk?APA3aafKvTA_<4m?_
zN#@+mHl`G(re{vm8C}++WRAC$V^S^oRU<mKf3Y2uxhm=GotNI$N>lGgN2z5h<w1G}
zUz#3YHXjA2TSM3y6(k{JFaLF{op;Nev?^Q^%&vNK47+bj-Ui2h7E$`<Z+@HQM@8#D
zH8Z8H6|cuDl17Y92%oE|d2e3tT<zFA4z?4~i0UdX@I=|}Tob9UoJqjzx8icd`mNnM
zmi;MJ-QC?^T$>n=YgU3b)c!cloOA~mFYyPPK-1Al>f?wPpyg+rfZ;%f;dhmmEFdj`
zRGB$T(<Ah06&rZ!k*xgq`fYczXPMSS#WgHe8pvMaw)imD(wak-b05G|4><Tl?2wLi
zz-TlrpFJ9gAo|d~krB86`r_ebwU~0`)^GrCM3Yvkd?_8@B_Y)f4ba@&XUV!M9OQX_
z=V;PTYrs}EmDUwTB5B{x+_{vcGkb)!92^|$uObz!%YMX)A)C0H2jJ?^#fbLbM`zc_
z%b>Q!%X!F5kD9a|FM429?*@9tYt711oHG67Hwi~gPW0m9`oyGh$xDv%US2z55@)9+
zWv9Q-Mt3Yg<t|o~$~AnGcT{WZduxhZ@~Y#dh+?pYGStb>kjV7+8m6M<qJwjG^<68A
zb4=4b7onQ^#>(z@o0AqPcOw@Q|HGv0f*KffW5tgNxV&s=6)%^mIgaL5|08Dd<7B1x
zM;Q}y+Z7{Ts|gpVFyO*K6fd-hJKMgiWR&_<_lOY}G^X3b8QwX@f{mWmgJm8obqN=1
zGNWam#lvl0)RxAYFMDH+F8dRiFZsCORs)5JTAhqLYvxKyGcO?7TZtuQ>yXvP=c^5l
zn<Fv|oGfu@P=HP{e<CmEbT^@)iTx@%Y)Eiq6A3SK$?xRw+>q@awT8yV>n_?>bq_mQ
z?&AtPjW-F3I3rd<)fmbnaUU^8;~uga>`f-N7x~7=QOrahsbQW7WYshO<M?{JCED;~
z@m7dfD2!aP5{w70s?2!EB|Rz0Hg5+NW%i7Xk^TNqY(4BNos<hknm&~|7iJ0A9KQ?w
z-n;RX-c)aLz_#C3M4L4q?hkP~UZqx&j7(NBCE*Us2|$`YxLq#$BiysM@Qz~aV|(`8
zYpvj2?0<uKQ1zURt~ZYl-)oUIGTD*`0_X+kXj&T4py6!-!qV=5vy+V?N>XW1jvW>S
zqN8IOW{pxg?RbNqK>L2)X-3M_u^_i4%Ui%q<@|p2G&L{Sq&?Fhx@X(g*Vk9_U^06<
z_BG2EW8-0zWoP-DQ(e8UF;z_f;M0Q_^XAY!kE6wyy&wEqK?Mkr;oV?@Edtris@ji(
zw_hnAo>AW~!1U?-e+6K)?yvN5%U>FybNuVENQJkuEJZ;UZ1G~6j_81l$NJ^HVpUy$
zv&;ne7mCue0$%itv$VAIKZ-3QV5OePbh%B&WPz?clV<4Tu3NFx&{%)iZd-6Olt{?>
zlJkw^dU@wA64_%=+=ep-=h80J_0f~L1U9dV+BxqG7*_LdChPK)k~=>c{-*Nl;xNkD
z<YnVg3!@Cc%(Q~UaAS%O9n(LL)Msz}j$~QqZ#>jU65jPHr4JGo{Dqh2ZCwYLeSNY8
z){)Yz0h+=Q^o*+SUEvnN!CbD|wI6kNoOg3-jQHM;WK60BxQm+KoI<1?TSx3BVOmwA
znFl{-F%)wW638!BU0Oq*#hX+*YGIA5ht<39xUDu{x*h)JrexK2Z4d3nFVw(s)--x3
z4-V7Kn6C+L1`qp<-msA>+zF$@t!ldlB5_V^xQSk<0DHD;gjtFt%kR*PuE0`~CfKB+
z*ol#2y$-X+Ef4UTDG-f<jtczGFx)yt7L1JzYn_?x0uHTYt3Kgmulh*Pq$OY`;*Ii-
z;Y^yRT)@eJ(g86ISaqV$Z>G{wJ5ss^ILJnWIxW3tzXdg2uwN8_FJ6AiSeWZr3Mabm
zBnevkYM0p^5OmK!t*<X8{!&^#fA+ju018c)+S=5M9vUrGJZ)%@E_QUd8g>cn+<QDB
z7k=AP?aE6O-X2`@9@&GvAw?w|8v7x-OlT#l;cY6Vg8$3G<GQaAH@-!MwL@M5aiSyj
zw2FA`9C6@9SPd-o=4Rn;cc=5IjO-)y658|W1vEX~=X9?~>iV$K=P)7YWPbU=nwA4;
zEYi&|4|6qkL>&~~yD_HBpy~zx;1JYWL)T7nLK#E1oBR$CXB4Klw^KxosZMdWj59C&
z7|FHEK-RrBgWi_I4%&}xcvn3VE$s&`O^PNaj3od5U0WoVQt4{`klOxv$5$iZIML4%
ztCl9?1qf(vHvNJK_rGw@?t~Yww|W{5wX1y(wDAj@>pE>j%WhxbLIhUAt86}Rzg8G{
zH1(uc!Z$WH#w>;QyB}pd3Yj*=e<hXw`5!sr$Q73J_jlC7f-$`D!FMI#2J{7P+)e8>
zAG2(ofdQtb)}V%yWR~%w9Nn1XL;qcEJ$WSgvuKdA{<3s@+2%7m6u_wOO^G#B%_b@j
zF*|X*5)dvBe?#(BltZ6sq6SMJENFVRxazj>yU1-^mG<QBY?Lxq4Fm$^!fR3=LNG4o
z{ajY=kzQEZ80z(}CcN=2ptka(cSQ>KQKF-gUrW$LSn>AgMw8T;cTfS8+$2dqhiVRK
zSs!^Mm3%Dc+2-d9PQSMfdt9+3AaUPz?dOD`{-d$+Sp4JBU;>Ku2ihM@_G3-<cBs-G
z4B|{5&Z~yO;XkC@w^2O@WoLV%0jchzau80nursfvSk(@T_a-=(V*s}u%ps5H1A)UQ
ziTqc!5ia0C*?EJnpUs?b<;xIiks}p6(`pZPv9Bb-rCC)b$V2S>qgW{d$sBRPiM4yQ
z_MR+}+w)JZi*?vw(2bsR(;nB#Ke*TDsf5=R=nCK8jUO@-Q&U4l3jaXJ`dgO${R3{X
z;~~bsKUCPYHSDB^u}J0nv?NygSY4W_`DtvB+A=3m>KV0+)8BctW`48bf3J!mM8-(?
z<%R^>xaW{>tiwFv@Y1b^NY?f7qOA3dIR7xccT(YU7jtNu5hUSe1{zi*bMnF(x`|Np
z^}D?a>Sa<Epvgz)#r9&Fy*K}sJbRf<9|p}U>hr&DK#n?c#~q4soEZ`*m}3glKZ@CS
zTJVZhj)u^;Y6bXUNT*D{<39d7J9EqKniMvPW6{trz9;oPw3q!cgY4llDs*-Do=N#V
zr$uvxk3jl13BPg>Ulaq&GjZ9W6+dLZ{OwWivq+{63>P0F)`z~=b>|arq|ik>y4?eg
z^x?$60#1V+6-RgFYA&DEoxg?{3PgaQ#H6H?^Yi^l@8tWNFINW9K8|lXD!$cLyS;CM
zPO?uQI`_~S5E316)c=yKrV;q&k#+TNB4@CsjyHX+jN>c1!jx0*@$~U{*Gh7$AZgC8
ztl1t6=A?)c77<aB&Kxm$kpeH<FXqFIjF37<bxNYzu<9<e{ESw|+a1fAdw^(yjbso~
z`H=E)t}%e6_hogtp<17PdRT8+O-x@&Oi|zNI{gs_GstlB(xUNaY0j{V&t7=^E~QFk
zFy#4=2R{Gn{zHx?*QhMoCjds`Y&H~yoZZ6|e#k_*u?@Ow0R^*3h##Ajcm*qi>@OI5
zn$~@L%hmaCdpt@W$*LWoj3p>2I0SNr<>rPgEG&#yrIXojIn~8$7NUV}Zb?bZwBrm4
zeXGt;`EjU;^pdeOv43FjAzj(Fz34!$S_T71_|GAxmH^+>dJ2X7rF%8i9AQ??<dRE~
zkEeZn`-t{XkMG62kKKyjP~)8Aaq~QAPuFwK60bM$bBvFhvP25QvZ0b=?3b8tRgHt-
zk6xt53Mcm&Uncqwt4HPUklX3rySb4XXbA9HnKE(&Y{yOfNlD~T+jW}rljwp~BJI$N
zvG9aT-FA~%>mapG#g5DdYKj0`GUhcN41P5Yfir7y*~cG==HFYm)S>{G*rBMqbPm~9
zWfM;2l}*1ZoTj4TZ=u#N-ze)-cQywQlM-8~<yTeLOo-S$jg5_+nw|ONsAb~FAFHMH
z=fLo_NE*A9(SMqozn?h*fIza?_tR5d>%|T<={gq@R)@AKpcGt!!am=sEAJtX7ZLo0
zZ|(#_7(nr_PNGu~s|FDtMR;d8)#&z-5yg^?M-}{oo=XYKUaPS-Z&D{FCX~>aTU=Zm
zoeU>8uDCVMb5Rg9`1#H?`H05Jol(`U_;COG7yG68luu@6`gA7MGqtPO{>9roe6=bq
z*xSIR*7WF8`_u8Z41g4kENxd+X6o*JFr>Ce>3;I!?Kx$w{5VF7LmO$6^=0~rnV$S>
zTMRnD{0RY8=j$(s>+gJCGPb3eq3PN(Z;A|@bZLMCTv*luG1gqlBI(c4heK^b4A=_X
z?Qt0LU<F(ZMK8>{0n^h%5H9yZ>)h|cy~5wv%7d$9442Bfxs}uLu8$u6XizDt{P1ik
zMcZyHe2D&tdprO0ZLnodfeMkL0k84SNMTD0&7fNz7r9;{6GN_-J1MMm%y{ybWo?fw
zTE-r;u3tq*P7H~sFIC4&u1JOU%QqaGp~`#N+~tb;m$Ma!(H1m<6Y;xAUt7~r+6v=1
zipGm4gJ(*ws1l`jYBwmULf0>)0-HjVlBS}=X3iaBFt+4zBdP~pzoI6ieJ?~@OeUuO
zm4^2>`YCx{t^4T-Zy`}ttt$={PTW@w0N?X!p8Wopet9UqXh<EEJvLe&Z{Lj%HM99U
zZ$Rvro*aK(kjS&BRM(9A8OI|5-{XXCSV>oiWIwz>6Z-R&v7-o2h4;nsAPy3rfh!No
z|4ZcVN-hOWVXevtwK?xqv*)*#Y1acP%7FAg9%WC8_`ER<mE<V|u?W~?L%73VIn>G;
zc+<9yw3^)JoqDS$sw7R&kYnQ}auEp9saqv~R||<J^GTm`(Ox9PU8>MQ$e1I1ig*++
za$GZh^?jJNf}X4d34SD#lEZ!vru%>ejvz=FcPY#l$C(Tc&D%_kNM<R;YO~5apwRg&
z6haj0=37-V4k$b#dI-$gjB^1eM($N>yse*i#YOS_`277S@h!x#d}THzl4^jPtRPO(
zGuS9w)hf5oKAQb1Br>yvCn;px`*-#mkc-ZGam?o>$SFhf)#nFe-;3-)uMv>Gr|6J{
zR_UO#-XZe|@LV4F2_REgBR`VV^sX~)F@Jl}OkBEc<7Ebk>9M_q%i!QInu~{+MSPCs
z?!>c2A}m8GW+6g+xLnvQ968$kq^Yr;Fnj)(vwW=h{S*AXznu7D)BOKNyRpMvqfUBk
z0=!H06UgWsFHKzXH8}ke7UePhiaM@t`*Tfy$gT3{h9reZDCfEOU412KB)o$4tvaQ|
z_23m1Ryjgt!fIdN3KL?7eTn+s8$`=expLdGbTDvMZ-!Wti^M!Vcrpp>d-X}X;603@
z<KTtaSyIE)C||IvnH~%2HIK6E(Mfl;P%&InW%_H6no-sR{$&6w1QmCbg1?BaIkyyA
zhJ?mN$s(8r`kzpmQInZ%u5!o)9ECqr0Z<Y5ww~|HnobM;p%P5uEa86ralKQsNmO9g
z#Yk38FJ4`|(Q_g$u#~$z&l=6IEe{lKR0I1X3zaGM-Ri~L(4*<smm5rs+XUXV5a*RA
znJ9rL3EUQzWZHY<eg2kR3)fYq`k7Bri`B>XD?0_RbH0hde8xx3CT<@Dr6k{AS4r4Y
z(}k0=SMX4LO98nbk!Nr9n>U$66Ov(S;uXz?@^2Dy9LQ5X(6(LHc!4Dt#eAK|Gx3+;
z2w*-ej}J9}f`h1X+1nWkIJf_>;^?->(z;ZZSr{h}J_>S*(}?2^F6u=<VxHthzfcEi
z(j5?H2^IA>w^!?8v&y{s=x`y8(c(33wsrmIN%GSEmGs&qy0$#ZkcR~#Ij%-%SUl>m
z^Fa*5p(CgSv+YSEcp6fpvp=sb%Tqy_3iPElO<q$M$cCM~<7Gpj^pWEGA_Z%JK!sob
z(d>d1&IXSq%n!>=6?;0I6Rx=3q#%)XOI*g~_1L_at)};Eyq1xN<hT~Wg5l>|4g1)*
zF$tq^fokpS!GRr)YD8dk!;4?PHoZtR`y|j0-JkxvO5mhE2~iZMFPo1KC?J?PEdD;K
z9ZV{p8dTatIHZ#ye<t2?M=jYcH26jR{D_d5aD{ixc1@j7?C{sBGsN(&9#j!XDJNmJ
z;8NiTDbN2cp+ohH662vB1-kuoBp9tGgQ#Tq^}Z5fvc~tm^58{)yJoz!y^Nqfz@D~_
zyZ-6(svx@$i<SDJI{{wyk~&VSO;4kcd9OSDsFn&5zm!6GAYmfrcBTHCCpXCa-y$Jn
z`O_}n)|={Q|3I?dTYy6KMCP`+TNPS@-|>8ab$h5nfe?Z&eKpjlvy9IaP5xrQlzo|2
zgU(*tjnM2;mC@_NUc~o2>G3yeM<+w7346%0RQ{*%dC5J=bREHCq2zwmsOD4*jEB0%
z`laLO&uK^DKxf6@lE4XH-lOc>pm+MOuGr3)Sldr<7L#uQGHped3U-j1r-4s1WK3vp
zow%eW88<Tv5DW-SUtkV>ilg%&#k5O)fv9Y|*dD!TCeeZqLD`_aj|&-qCmKF*b(w;@
z7P|1Eo333#=UM*=$QcvUN;UKq1a8U7F9G+5HDsS7H(W4iV~m={&?*miqAMnnG9J4p
z79lfJJ{^Ni1jozFJtf_*!-Gd0_e?XJAt=S|n_pvNEC;WWhl@HlRTq01zw_JG_<2S0
zLP7^qy7@I-!kIq^(w+yVxB1>wg}%eTYW}%(;6FpT{FQZa#Pi*(V{O;+8{4Ck<*!xQ
zt$(P$v}kZazJ7#jWCykK93}C`^#koYVk)lB|EdFe$iJ05Z%!q$G*~aA%xNZyg2%X_
ztf*(Ms_R}SUGhm1c(a)<JR85S)97>{`A9T3Y7X4yZaTmI_AsuO-&!QM?PBQw&tccb
zPHL&!d^r~sx&A3raCW=FTHI7>l_`6ax#?f|)8`_|aF5aY4_nwFp+SUKk|?#h0_8kN
zhgI7mxK6v{*4_F7dbZ;06Vh595n37_ZDQmR=o*H?nJI{rdthThcZ}uL)vmaJzT*`W
zpY-l)k+NSI!hFUKu7>`(9sR+0xS?*_>9Ap<Xr>^>;O4nvM{VT1$~eb9u=tV~dx29M
zJ?WTl+!EiH7hly7|0^)oJjxvK)3AEhkl9H!>{4~$Yk(UNmgww63C!)`gUx@Z)Ng%e
z+VX6?7l#0{fT}_i*m_<%fFEgwYZ%Lk_<a6RX0cEB@goTHkvNQ;zFGk~S!)~r#=GgT
zh1i<_;F{Y2?;vKs-%Ngc9rXGJgO1)R?cAJAWbg%ab{raf3-%^*{fl8vxUYS7bG&KJ
zzogFYIu;f=gx<}7mU<q-2?7W+^~X;A{XYj5p(W9wZtc|Wd~Mm6wK#a73tfgKy9N`&
z7EZ)1LX#v)o?acpyv7m-#es1PmCV#BY?x@0I}Q{y|J6@qE)*CCxymc3hYx~~1XO<e
zg#EEXx&U7Im;A78Sl9&(#)5){?vO%oS;LDIw3Q~ee&cEh0)xcdBa#}wj6mpwHkT*v
z0;0OG^t7Cq$7($(+d*$Yg4XKhXoI^JuvdbYhBP3cG}G~&$xuq6#`Z)U6Y~`X-Sr}(
ziKAM?6R=xsI+@#MaWVt~7))>+4wNd*u&;UowOCb*_1CL&F!U%j%5Zoe2hc6`&?Yp{
zXInN{F!vhWFeZWE8`1+h<9GGKi-Ps2GD;Dc7`HwI#h63xvIV1BP*ENhfTi;M!liDk
zz{5_jjF~209cGF_9}ei!Vi-Q~aS+EpH8fKE?p0eRqJk(&9$2R>(@QJnuh_PpL+>gQ
z{HLRG_jQyYR<yMy2(>oLCCyfmm`nM-!IjIfvgDP!+_xnRhWpjF!nS`15%lkr{$9a@
z;&(Hp=?b)l)>ky;5Levp`&}wBWn4l$o*z@U{R(NZGgfIwilbYJmMQkmtutO6`=f{g
zvB$Wz@h3RmyqSkyvu-59>k))4B&N6mL1*ZGiPkTB6U?90q+;Z(^ef@#zzDI-4;`2F
z47-90Q4_7Uq6?EqW`)C`l}DDMp-NP_nq55YA!F+5UYFdVhNN3|A?AYtVwFj*cFE`F
zwq3vNatb3G)IK<{$1aP1rO){s&l^1nW5~vGWN%}fyU32*8wdc5CqE#-_>$b=yfkjO
zEl&I{E+X#9V=ltAb@fOnq_7~${MX4F@yfp7>>4L{BNVL&6;~U0gx=n{t$ATOr)}QG
z<FI&YJm{>+%O(XY=SBV$m}7W&*XAO|RESW(W-7{QchTOX2&v17f;Xs?4_}af5rG=_
zoFaNfgF7ybBj2DLKVS4OGJL~m#ejG5I+~$<Tf1h$FdtwDm$pwN$C&cP8K9~Y-G!#9
z=k!L3Pn`2qW~pV1u<kD1j8~FqS!Yo3uErt9U7tN_ULrm2FC6K#&PL^H-S}#?0w1Tq
z>82;2o(=^01sQw?k^(SU4uWR`6o@QXF^cTH8-u;D(@=`-b*Hwso0I`f%wY5hvt%gc
zn_xEqH19J1E;znv2JmJbe3aF0L}kEa7`*)Iz^8vgaI-u}#SY65WNTs=jXXci8-!t3
zKB`+B1$^Suy%W2N1)f1>c(NskcbHjYs66~*FSO+83C5_sH*TF~KBFR2$@p!sq`IWe
zE^b*NV*2ewkw@$ce1U-`Bxk`9B_KMn{z981j?jDJ{wXQuR|JqGiX~6>=JWQ*>LG<g
zi`ppdH;!N|r#W&%o*dxUJ?=l^{jkQ~zgn2UHe-@9nVD~a_+7p^qD^454XzXYOyhri
zw)iX2Z#ZofIPQu<WMfYSu*V6-FiQdRR!H(q=QnIeEcSDogiz<P%r*uxW<dK#%mdY5
zrT?9!$azDrd&>@EuyhXLFE2FO$1KHuovD>$!qy-+qcS1h9N9V8lvx*{NAE#O&fay-
zCJ;hG&i>pNZM>_L7m5GBfBrw2^!^`1-~ZL5_x}!1A^rcf0iF+gRCq$G&9lT{ufTw|
PIewy{s;vT7vIzYjPI9lD

literal 0
HcmV?d00001

diff --git a/docs/manual/default-ports.md b/docs/manual/default-ports.md
index 56d44564d1d..cf6c9722b00 100644
--- a/docs/manual/default-ports.md
+++ b/docs/manual/default-ports.md
@@ -62,6 +62,7 @@ These defaults can of course be changed, but as we guarantee "sane, working defa
 | loki                       |      main       |      main       | 3100  |   HTTP   |                                         |
 | jdownloader2               |      myjd       |      myjd       | 3129  |   TCP    |                                         |
 | pylon                      |      main       |      main       | 3131  |   TCP    |                                         |
+| clamav                     |      main       |      main       | 3310  |   TCP    |                                         |
 | unifi                      |      stun       |    mstunain     | 3478  |   UDP    |                                         |
 | logitech-media-server      |    playertcp    |  slimprototcp   | 3483  |   TCP    |                                         |
 | logitech-media-server      |    playerudp    |  slimprotoudp   | 3483  |   UDP    |                                         |
@@ -93,6 +94,7 @@ These defaults can of course be changed, but as we guarantee "sane, working defa
 | qbittorrent                |   torrentudp    |   torrentudp    | 6881  |   UDP    |                                         |
 | aria2                      |     listen      |     listen      | 6888  |   TCP    |                                         |
 | logitech-media-server      |      main       |      main       | 7000  |   TCP    |                                         |
+| clamav                     |     milter      |     milter      | 7357  |   TCP    |                                         |
 | foldingathome              |      main       |      main       | 7396  |   TCP    |                                         |
 | haste-server               |      main       |      main       | 7777  |   TCP    |                                         |
 | nextcloud                  |       hpb       |       hpb       | 7867  |   TCP    |                                         |
@@ -145,7 +147,7 @@ These defaults can of course be changed, but as we guarantee "sane, working defa
 | tvheadend                  |      main       |      main       | 9981  |   TCP    |                                         |
 | tvheadend                  |      htsp       |      htsp       | 9982  |   TCP    |                                         |
 | teamspeak3                 |      voice      |      voice      | 9987  |   UDP    |                                         |
-| guacamole-client           |      main       |      main       | 9998 |   TCP    |                                         |
+| guacamole-client           |      main       |      main       | 9998  |   TCP    |                                         |
 | stash                      |      main       |      main       | 9999  |   TCP    |                                         |
 | ser2sock                   |      main       |      main       | 10000 |   TCP    |                                         |
 | deconz                     |    websocket    |    websocket    | 10001 |   TCP    |                                         |
@@ -367,88 +369,89 @@ These defaults can of course be changed, but as we guarantee "sane, working defa
 
 ## Ports that are blocked in major web browsers
 
-| Port  | Used by (example) |
-| :---: | :---: |
-| 1 | tcpmux |
-| 7 | echo |
-| 9 | discard |
-| 11 | systat |
-| 13 | daytime |
-| 15 | netstat |
-| 17 | qotd |
-| 19 | chargen |
-| 20 | ftp data |
-| 21 | ftp access |
-| 22 | ssh |
-| 23 | telnet |
-| 25 | smtp |
-| 37 | time |
-| 42 | name |
-| 43 | nicname |
-| 53 | domain |
-| 69 | tftp |
-| 77 | priv-rjs |
-| 79 | finger |
-| 87 | ttylink |
-| 95 | supdup |
-| 101 | hostriame |
-| 102 | iso-tsap |
-| 103 | gppitnp |
-| 104 | acr-nema |
-| 109 | pop2 |
-| 110 | pop3 |
-| 111 | sunrpc |
-| 113 | auth |
-| 115 | sftp |
-| 117 | uucp-path |
-| 119 | nntp |
-| 123 | NTP |
-| 135 | loc-srv /epmap |
-| 137 | netbios |
-| 139 | netbios |
-| 143 | imap2 |
-| 161 | snmp |
-| 179 | BGP |
-| 389 | ldap |
-| 427 | SLP (Also used by Apple Filing Protocol) |
-| 465 | smtp+ssl |
-| 512 | print / exec |
-| 513 | login |
-| 514 | shell |
-| 515 | printer |
-| 526 | tempo |
-| 530 | courier |
-| 531 | chat |
-| 532 | netnews |
-| 540 | uucp |
-| 548 | AFP (Apple Filing Protocol) |
-| 554 | rtsp |
-| 556 | remotefs |
-| 563 | nntp+ssl |
-| 587 | smtp (rfc6409) |
-| 601 | syslog-conn (rfc3195) |
-| 636 | ldap+ssl |
-| 989 | ftps-data |
-| 990 | ftps |
-| 993 | ldap+ssl |
-| 995 | pop3+ssl |
-| 1719 | h323gatestat |
-| 1720 | h323hostcall |
-| 1723 | pptp |
-| 2049 | nfs |
-| 3659 | apple-sasl / PasswordServer |
-| 4045 | lockd |
-| 5060 | sip |
-| 5061 | sips |
-| 6000 | X11 |
-| 6566 | sane-port |
-| 6665 | Alternate IRC [Apple addition] |
-| 6666 | Alternate IRC [Apple addition] |
-| 6667 | Standard IRC [Apple addition] |
-| 6668 | Alternate IRC [Apple addition] |
-| 6669 | Alternate IRC [Apple addition] |
-| 6697 | IRC + TLS |
-| 10080 | Amanda |
+| Port  |            Used by (example)             |
+| :---: | :--------------------------------------: |
+|   1   |                  tcpmux                  |
+|   7   |                   echo                   |
+|   9   |                 discard                  |
+|  11   |                  systat                  |
+|  13   |                 daytime                  |
+|  15   |                 netstat                  |
+|  17   |                   qotd                   |
+|  19   |                 chargen                  |
+|  20   |                 ftp data                 |
+|  21   |                ftp access                |
+|  22   |                   ssh                    |
+|  23   |                  telnet                  |
+|  25   |                   smtp                   |
+|  37   |                   time                   |
+|  42   |                   name                   |
+|  43   |                 nicname                  |
+|  53   |                  domain                  |
+|  69   |                   tftp                   |
+|  77   |                 priv-rjs                 |
+|  79   |                  finger                  |
+|  87   |                 ttylink                  |
+|  95   |                  supdup                  |
+|  101  |                hostriame                 |
+|  102  |                 iso-tsap                 |
+|  103  |                 gppitnp                  |
+|  104  |                 acr-nema                 |
+|  109  |                   pop2                   |
+|  110  |                   pop3                   |
+|  111  |                  sunrpc                  |
+|  113  |                   auth                   |
+|  115  |                   sftp                   |
+|  117  |                uucp-path                 |
+|  119  |                   nntp                   |
+|  123  |                   NTP                    |
+|  135  |              loc-srv /epmap              |
+|  137  |                 netbios                  |
+|  139  |                 netbios                  |
+|  143  |                  imap2                   |
+|  161  |                   snmp                   |
+|  179  |                   BGP                    |
+|  389  |                   ldap                   |
+|  427  | SLP (Also used by Apple Filing Protocol) |
+|  465  |                 smtp+ssl                 |
+|  512  |               print / exec               |
+|  513  |                  login                   |
+|  514  |                  shell                   |
+|  515  |                 printer                  |
+|  526  |                  tempo                   |
+|  530  |                 courier                  |
+|  531  |                   chat                   |
+|  532  |                 netnews                  |
+|  540  |                   uucp                   |
+|  548  |       AFP (Apple Filing Protocol)        |
+|  554  |                   rtsp                   |
+|  556  |                 remotefs                 |
+|  563  |                 nntp+ssl                 |
+|  587  |              smtp (rfc6409)              |
+|  601  |          syslog-conn (rfc3195)           |
+|  636  |                 ldap+ssl                 |
+|  989  |                ftps-data                 |
+|  990  |                   ftps                   |
+|  993  |                 ldap+ssl                 |
+|  995  |                 pop3+ssl                 |
+| 1719  |               h323gatestat               |
+| 1720  |               h323hostcall               |
+| 1723  |                   pptp                   |
+| 2049  |                   nfs                    |
+| 3659  |       apple-sasl / PasswordServer        |
+| 4045  |                  lockd                   |
+| 5060  |                   sip                    |
+| 5061  |                   sips                   |
+| 6000  |                   X11                    |
+| 6566  |                sane-port                 |
+| 6665  |      Alternate IRC [Apple addition]      |
+| 6666  |      Alternate IRC [Apple addition]      |
+| 6667  |      Standard IRC [Apple addition]       |
+| 6668  |      Alternate IRC [Apple addition]      |
+| 6669  |      Alternate IRC [Apple addition]      |
+| 6697  |                IRC + TLS                 |
+| 10080 |                  Amanda                  |
+
 ##### Note: TCP and UDP ports that are the same in some Apps, are not by mistake.
 
 ##### If you notice a port conflict, please notify us so we can resolve it (when possible).