&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
&8562'( 6(*85$1d$(0 5('(6/,18;
$XWRU5HQDWR0DUWLQL
UPDUWLQL#FLSVJDRUJEU 0DUoRGH
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
1
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
&XUVRGH6HJXUDQoDHP5HGHV &RPLWHGH,QFHQWLYRD3URGXomR GR6RIWZDUH*UDWXLWRH$OWHUQDWLYR &,36*$ $XWRU
5HQDWR0DUWLQL UPDUWLQL#FLSVJDRUJEU 0DUoRGH
&RS\ULJKW F 5HQDWR 0DUWLQL 3HUPLVVLRQ LV JUDQWHG WR FRS\ GLVWULEXWH DQGRU PRGLI\ WKLV GRFXPHQW XQGHU WKH WHUPV RI WKH *18 )UHH 'RFXPHQWDWLRQ /LFHQVH 9HUVLRQ RU DQ\ ODWHU YHUVLRQ SXEOLVKHG E\ WKH )UHH 6RIWZDUH )RXQGDWLRQ ZLWK WKH ,QYDULDQW 6HFWLRQV EHLQJ /,67 7+(,5 7,7/(6 ZLWK WKH )URQW&RYHU 7H[WV EHLQJ /,67 DQG ZLWK WKH %DFN&RYHU 7H[WV EHLQJ /,67 $ FRS\ RI WKH OLFHQVH LV LQFOXGHG LQ WKH VHFWLRQ HQWLWOHG *18 )UHH 'RFXPHQWDWLRQ /LFHQVH &RS\ULJKW F 5HQDWR 0DUWLQL ( JDUDQWLGD D SHUPLVVmR SDUD FRSLDU GLVWULEXLU HRX PRGLILFDU HVWH GRFXPHQWR VRE RV WHUPRV GD *18 )UHH 'RFXPHQWDWLRQ /LFHQVH YHUVmR RX TXDOTXHU RXWUD YHUVmR SRVWHULRU SXEOLFDGD SHOD )UHH 6RIWZDUH )RXQGDWLRQ VHP REULJDWRULHGDGH GH 6Ho}HV ,QYDULDQWHV QD DEHUWXUD H DR ILQDO GRV WH[WRV 8PD FRSLD GD OLFHQoD GHYH VHU LQFOXtGD QD VHomR LQWLWXODGD *18 )UHH 'RFXPHQWDWLRQ /LFHQVH
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
2
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
ËQGLFH 1 SEGURANÇA: FUNDAMENTOS ......................................................................................................................................... 4 1.1 Introdução ................................................................................................................................................................ 4 1.2 Segurança: o conceito .............................................................................................................................................. 4 1.3 Segurança e as ferramentas de rede......................................................................................................................... 6 1.4 Nosso objetivo .......................................................................................................................................................... 7 2 0 FIREWALL: DUAS SOLUÇÕES EM AMBIENTE LINUX...................................................................................................... 9 2.1 Uma palavra inicial sobre firewalls ......................................................................................................................... 9 2.2 Firewalls e acesso remoto: o Secure Shell ............................................................................................................. 10 2.3 Firewalls: solução Linux ........................................................................................................................................ 15 2.4 A filtragem de pacotes ............................................................................................................................................ 16 2.5 IPCHAINS (The Enhanced IP Firewalling Chains Software for Linux) ................................................................ 17 2.6 The SINUS Firewall - a TCP/IP packet filter for Linux ......................................................................................... 32 3 MONITORAÇÃO DA REDE ............................................................................................................................................... 56 3.1 Os scanners de rede................................................................................................................................................ 56 3.2 Saint: Security Administrator's Integrated Network Tool....................................................................................... 72
+8/B9= ................................................................................................................................................. 80 +8/B9 +$ ....................................................................................................................................................................... 81 +8/B9 ,$ ....................................................................................................................................................................... 82 +8/B9 -$ ....................................................................................................................................................................... 90 +8/B9 .$ ......................................................................................................................................................................... 96 +8/B9 /$ ......................................................................................................................................................................... 99 ,3,6391<+03+ 1/<+6 ..................................................................................................................... 100 SOBRE O AUTOR DA APOSTILA .................................................................................................... 102
*18 )5(( '2&80(17$7,21 /,&(16( ....................................................................................... 103
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
3
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
1 Segurança: Fundamentos 1.1 Introdução 9 YLTO^S`Y NO]^O NYM_WOX^Y ¤ WY]^\K\ MYWY Y 6SX_b YPO\OMO _WK ]YV_ÁYMYWZVO^KZK\KYZ\YLVOWKNK]OQ_\KXK9L]O\`O]OK[_S[_O ]O PKVKWY] ]YV_ÁY XÁY ]SQXSPSMK K ObS]^ XMSK NO _W ]S]^OWK KL]YV_^KWOX^O ]OQ_\Y 9 6SX_b YPO\OMO S]^Y ]SW K] PO\\KWOX^K] XOMO]]£\SK] ZK\K K QO]^ÁY NK ]OQ_\KXK X_W WSM\Y S]YVKNKWOX^O Y_ X_WKSX^\KXO^OOX^ÁY^KVSX^\KXO^MYXOM^KNK§1\KXNO
1.2 Segurança: o conceito >\K^K\OWY] ]OQ_\KXK MYWY ]OXNY K \O]^\SÁY NY] \OM_\]Y] NO _W WSM\YMYWZ_^KNY\ Y_ NO _WK \ONO Y_ NO ZY\ÉO] NO]^K \ONO ZK\K Y_^\Y] _]_£\SY] Y_ MYWZ_^KNY\O] =OQ_\KXK XKNK WKS] ¤ NY [_O K QO]^ÁYNO^KV\O]^\SÁYY[_OMYX]^S^_SZY\^KX^Y_WKZYV´^SMKNO ]OQ_\KXK Y_ MYWY ]O NSd OW SXQV ]$
]OM_\S^c ZYVSMc 9 [_O
]SQXSPSMK ^ÁY]YWOX^O [_O X_WK \ONO R£ NO^O\WSXKNY] \OM_\]Y] K\[_S`Y] NS]ZY]S^S`Y] NO RK\NaK\O O^M [_O O]^ÁY NS]ZYX´`OS] ZK\K O]^O MYWZ_^KNY\ Y_ ^SZY NO _]_£\SY WK] [_O ZY\ Y_^\Y VKNY PSMKW\O]^\S^Y]K^KVY_[_KVMYWZ_^KNY\O]^OTKOVOPY\KY_NOX^\Y NK\ONO 7O]WY _W ]S]^OWK MYWY Y KX^SQY .9= SWZVOWOX^K`K _W ^SZY NO ]OQ_\KXK MVK\Y [_O ]SXQOVK P\OX^O KY] =9 W_V^S_]_£\SY] MYWY Y 6SX_b Y_ [_KV[_O\ ^SZY NO ]S]^OWK ?83B 8Y .9= R£ NO^O\WSXKNY] K\[_S`Y]YM_V^Y]R£K\[_S`Y]MYWK^\SL_^Y]ZK\K[_O]OZO\WS^K[_O O]^O ]YWOX^O ]OTK VSNY O^M :Y\ MYX]OQ_SX^O R£ \O]^\SÁY NO
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
4
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
£\OK]NY=9-VK\Y[_O^_NYS]]YX_W]S]^OWK.9=Y_WO]WYXK]_K ]O[_ XMSK RS]^¥\SMK Y ASXNYa] #b ZY]]_OW \O]^\SÉO] [_O PKMSVWOX^OL_\VKWY]7K]Y.9=ASXNYa]XÁYPY\KWPOS^Y]ZK\K\ONO9 \OM_\]Y NY XO^aY\USXQ XÁY ¤ OWL_^SNY L_SV^SX SX^\´X]OMY KY ASXNYa]ZY\S]]YWO]WY^YNY]Y]OWLK\KY][_O]O_]_]_£\SY]ZY]]_OW KYYZO\K\OWXK3X^O\XO^MYWYZY\ObOWZVYXYPKWY]Y,KMU9\SPSMO 96SX_b¤_W]S]^OWKW_V^S_]_£\SYO]]OXMSKVWOX^O _W =9 MKZKMS^KNY ZK\KK]
INTERNET!
6YMKVf0S\OaKVVf ''''''''''''''''''''
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
5
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
1.3 Segurança e as ferramentas de rede 8_W ¦XSMY WSM\Y Y_ X_WK \ONO VYMKV NO ZO[_OXY W¤NSY Y_ Q\KXNO ZY\^O O K]]SW [_KXNY O]^K \ONO O]^£ MYXOM^KNK XK 1\KXNO
^\K^K\
ObZVSMS^KWOX^O
NY
^OWK
6OS^_\K]
SXSMSK]
YL\SQK^¥\SK] ZK\K ^KX^Y ]ÁY$ Y <0- # SX^S^_VKNY NO =S^O =OM_\S^c2KXNLYYUR^^Z$aaa\PMONS^Y\Y\QO]M\S^YZY\,0\K]O\ ]O^OWL\Y
NO
##!%
O
Y
6SX_b
=OM_\S^c
29A>9
P^Z$]_X]S^O_XMON_Z_L6SX_bNYM]29A>9NO50OXdSO.A\O]US WKSY NO ##"% O Y VS`\Y NO :K_V =O\c 0O\\KWOX^K] :YNO\Y]K] ZK\K
9 ARK^ K\O cY_ ^\cSXQ ^Y Z\Y^OM^) / Y .O`OVYZSXQ K ]OM_\S^c ZYVSMc O OVO] NO`OW ]O\ VO`KNY] OW MYX]SNO\KÁY KX^O] WO]WY NO ]O M\SK\ _WK ZYV´^SMK NO ]OQ_\KXK ZK\K K ]_K \ONO +X^O] NO Z\Y^OQO\ ]O_ ]S]^OWK `YM NO`O ]KLO\ NO [_O ^SZY NO KWOKK ]O
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
6
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
O]^£ ^OX^KXNY Z\Y^OQO\ ]O K^KMKNY Y [_O O]^£ OW TYQY @OTKWY] OX^ÁY$ *O risco é a possibilidade que um intruso possa ter sucesso ao tentar invadir seus computadores. Um intruso pode, ao acessar seus arquivos, danificar dados críticos? Não se esqueça, também, que ao possuir uma conta de sua rede, o intruso pode se passar por você.
*As ameaças serão sempre no sentido de se obter acesso não-autorizado em sua rede ou computador. Há portanto vários tipos de intrusos e, então, diferentes tipos de ameaça a sua rede.
*Há o curioso: esse tipo de intruso se interessa pelo tipo de dado e sistema você possui.
*Há o malicioso: esse quer em síntese derrubar o seu sistema, destruir dados, destruir os documento publicados no seu Web server, etc. É o chamado cracker.
*Há o intruso de “alto-nível” (High-Profile): ele quer obter popularidade mostrando suas habilidades ao invadir seu sistema.
*Há o competidor: esse que conhecer seus dados para obter algum ganho com isso.
*Por fim, “vulnerabilidade” descreve o quão bem protegido é seu computador, e o que se perderá se alguém obter acesso não-autorizado a algum(ns) computador(res).
Portanto, crie uma política de segurança para sua rede que seja simples e genérica e que todos os usuários possam prontamente compreender e seguir. Você pode proteger dados tanto quanto respeitar a privacidade dos usuários
1.4 Nosso objetivo /W]_WKXY]]KSX^OX^Y¤WY]^\K\MYWYT£NS]]OWY]K]PO\\KWOX^K] XOMO]]£\SK] ZK\K K MYX]^\_ÁY O QO\ XMSK NO _WK ZYV´^SMK NO ]OQ_\KXKOWKWLSOX^O6SX_b>YNY]]ÁY]YP^aK\O] KLO\^Y] O MYLO\^Y] ZOVK1:61OXO\KV:_LVSM6SMOX]ONK18?K]]SWMYWYKNYM_WOX^KÁY NS]ZYX´`OV:K\K^KX^YXY]]YMKWSXRYXÁYMYWOK\£NK]OQ_\KXKVYMKV 1
RFC é o acrônimo de Request for Comments, um enorme conjunto de documentos organizados pela INTERNIC reunindo &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
7
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
Y_]OTK_WK\ONOSX^O\XK]OQ_XNYKXYWOXMVK^_\KNY=S^O=OM_\S^c 2KXNLYYU OW NS\OÁY § ]OQ_\KXK Ob^\KXO^ \ONO Ob^O\XK -YX^\K\SKWOX^O S\OWY] NK ]OQ_\KXK Ob^O\XK ZK]]KXNY YL`SKWOX^O ZOVK][_O]^ÁYNO]OQ_\KXKXK\ONOSX^\KXO^ZYS]YPS\OaKVV^KWL¤W YM_ZK]OMYWO]^OZYX^YZK\KK]OQ_\KXKSX^O\XK
informações sobre TCP/IP e outros protocolos, assim como Redes, segurança, correio eletrônico, etc. &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
8
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
2 0 Firewall: duas soluções em ambiente Linux 2.1 Uma palavra inicial sobre firewalls 0S\OaKVV ¤ _WK ZK\ONO [_O ]OZK\K ]_K SX^\KXO^ NY W_XNY Ob^O\SY\ S]^Y ¤ K SX^O\XO^ 7K] ^KWL¤W _W PS\OaKVV ZYNO ]O\ _]KNY OPSMSOX^OWOX^OX_WKSX^\KXO^[_OXÁYMROQKK^O\KMO]]Y§SX^O\XO^ :YS] ZYNO PSV^\K\ ZKMY^O] [_O ZK]]KW NO _WK W£[_SXK K Y_^\K X_WK SX^\KXO^ Definindo: Um firewall é todo sistema conjunto de hardware e software que é elaborado para proteger uma intranet de usuários potencialmente perigosos, visto que não autorizados.
/X^\O^KX^Y K MKZKMSNKNO OPO^S`K NO MYX^\YVO NO _W PS\OaKVV ¤ SWZVOWOX^KNK KY Z¡\]O OX^\O K \ONO VYMKV O K SX^O\XO^ NO PY\WK K O`S^K\ [_O Y W_XNY ^OXRK KMO]]Y K NKNY] ZK\^SM_VK\O] 7K] XÁY O]^KWY] PKMO K PKMO MYW KVQY K]]SW MYWY _W Z\YQ\KWK P£MSV O ]SWZVO] NO ObOM_^K\ :YS] MYWY T£ `SWY] _W PS\OaKVV ^OW SX[_O]^SYXK`OVWOX^O_WKXK^_\OdKKL\KXQOX^O 8ÁY RK`O\SK Z\YLVOWK] NO ]OQ_\KXK ]O `YM MYWY [_O S]YVK]]O ]O_] MYWZ_^KNY\O] Y_ ]_K \ONO NY W_XNY 7K] _WK SX^\KXO^ ¤ P_XNKWOX^KVWOX^O _WK \ONO SX^O\XK [_O _]K ^OMXYVYQSK] AY\VN ASNO AOL ZK\K ZK\^SVRK\ ^K\OPK] O SXPY\WKÉO] OX^\O NOZK\^KWOX^Y] OY_ VYMKS]\OWY^Y]8ÁYZY]]YSX]^KVK\_W]O\`SNY\+ZKMROX_WKW£[_SXK O POMRK\ Y KMO]]Y K ]O_] NKNY] OW WO_ PS\OaKVV ^ÁY ZY_MY ZY]]Y POMRK\YKMO]]YK^YNY]Y]MYWZ_^KNY\O][_OPY\WKWK\ONOW_XNSKV
2
Definiçao retirada de SCO OpenServer© Internet Services (v.5.0.4 may 1997), p. 11. &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
9
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
/]^OO][_OWKWY]^\KKSWZVOWOX^KÁY]SWZVO]NO_WPS\OaKVV$
>YNK`SK NO`O\´KWY] XY^K\ OW XY]]Y O][_OWK [_O XY]]K \ONO ^OW [_O ZY]]_S\_WRY]^_WLK]^SYXRY]^[_OVSQKNYKY\Y^OKNY\XY]ZÉOOW MYX^K^YMYWYW_XNY»LK]^KX^OMYX]OX]_KV[_O^KVW£[_SXKNO`O^O\ ]O_] ]O\`SY] NO]VSQKNY] Y W´XSWY NO ZY\^K] NO`OW O]^K\ K^S`K] :K\K^KX^YYKV_XYNO`O]OQ_S\K]Y\SOX^KÉO]L£]SMK]ZK\KNO]VSQK\ ]O\`SY] XY ]O_ SXO^N 9 6SX_b NK
2.2 Firewalls e acesso remoto: o Secure Shell :K\K Y KMO]]Y \OWY^Y KY XY]]Y PS\OaKVV NO`OWY] _]K\ Y ]YP^aK\O ==2 =OM_\O =ROVV ]]R$ R^^Z$aaa]]RY\Q O XÁY ^OVXO^ Y_ \]R Y_ \VYQSX WO]WY ZY\[_O T£ ^\K^KWY] NO NO]VSQ£VY] 9 ]]R ¤ _W ZKMY^O MYWZVO^Y ZK\K VYQSX \OWY^Y [_O ^OW K MKZKMSNKNO NO M\SZ^YQ\KPK\ _^SVSdKXNY]ONKK_^OX^SMKÁYPY\^O<=+KMYW_XSMKÁYOX^\O\ONO]O RY]^] XÁYMYXPS£`OS] +]]SW ]OXNY ^YNK] K] MYW_XSMKÉO] ]ÁY &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
10
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
M\SZ^YQ\KPKNK] + <=+ ¤ _]KNK ZK\K _W SX^O\MWLSY NO MRK`O] X_W O][_OWKNOMRK`O]Z¦LVSMK]OZ\S`KNK]O_WW¤^YNYNOM\SZ^YQ\KPSK 3./+ ,VYaPS]R O^M ¤ _]KNY ^KWL¤W ZK\K M\SZ^YQ\KPK\ K ]O]]ÁY \OWY^K K ]O\ KLO\^K 9 [_O ¤ SWZY\^KX^O XY ]]R ¤ [_O Y ]YP^aK\O NS]ZK\K K M\SZ^YQ\KPSK KX^O] NY Z\YMO]]Y NO K_^OX^SMKÁY Y_ ]OTK KX^O]NKMROMKQOWNK]]OXRK]:Y\^KX^YXOXR_WK]OXRK¤OX`SKNKZOVK \ONOOWKLO\^Y]OWM\SZ^YQ\KPSK +WKSY\ZK\^ONK]NS]^\SL_SÉO]K^_KS]NY6SX_bT£`OWMYWK`O\]ÁY !NO]^OZ\YQ\KWKK¦V^SWK`O\]ÁY¤KMRKWKNKNO]]R =O MYX]OQ_S\ Y ]]R K^\K`¤] NO _W ZKMY^O <:7 LK]^K SX]^KV£VY MYW Y MYWKXNY\ZWS`R/VOSX]^KVK\£Y]]OQ_SX^O]K\[_S`Y]$ $UTXLYRV
'HVFULomR
VVKG
'DHPRQ TXH URGD QD PiTXLQDVHUYLGRU HVSHUD R SHGLGR GR FOLHQWH VVK DXWHQWLFD D FRQH[mR H LQLFLD D VHVVmR
VVKRXVORJLQ
&OLHQWH SURJUDPD XVDGR SDUD ORJLQ H H[HFXomR
VFS
8VDGR SDUD FRSLDU DUTXLYRV GH XP FRPSXWDGRU
GH RXWURV FRPDQGRV
SDUD RXWUR HP VHJXUDQoD
VVKNH\JHQ
8VDGR SDUD FULDU FKDYHV 56$
VVKDJHQW
$JHQWH SDUD D DXWHQWLFDomR GDV FKDYHV
VVKDGG
8VDGR SDUD UHJLVWUDU QRYDV FKDYHV
PDNHVVKNQRZQKRVWV
6FULSW
SHUO
XVDGR
SDUD
FULDU
R
DUTXLYR
HWFVVKBNQRZQBKRVWV D VHU XVDGR SHOR '16
>URRW#DOSKD @ VVKNH\JHQ ,QLWLDOL]LQJ UDQGRP QXPEHU JHQHUDWRU *HQHUDWLQJ S GLVWDQFH *HQHUDWLQJ T GLVWDQFH &RPSXWLQJ WKH NH\V 7HVWLQJ WKH NH\V .H\ JHQHUDWLRQ FRPSOHWH (QWHU ILOH LQ ZKLFK WR VDYH WKH NH\ URRWVVKLGHQWLW\ (QWHU SDVVSKUDVH HQWUH FRP D VHQKD QDGD VHUi HFRDGR 3
A autenticação RSA é baseada numa chave pública de criptografia. Uma chave para criptografar e a outra para descriptografar. A chave pública é usada para criptografar, e a chave para descriptografar por sua vez é privada, mas jamais poderemos derivar esta chave de descriptografar da outra. &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
11
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
(QWHU WKH VDPH SDVVSKUDVH DJDLQ LGHP
>URRW#EHWD URRW@ VVK DOSKD 6HFXUH FRQQHFWLRQ WR DOSKD UHIXVHG UHYHUWLQJ WR LQVHFXUH PHWKRG 8VLQJ UVK :$51,1* &RQQHFWLRQ ZLOO QRW EH HQFU\SWHG HQFU\SWHG 3DVVZRUG
Õ
+]]SW MO\^Y] [_O Y ]]RN O]^£ K^S`Y XY RY]^ KVZRK X_WK Y_^\K W£[_SXK[_OMRKWKWY]LO^KMK\\OQKWY]YMVSOX^O]]RZK\KMYXOM^K\MYW YRY]^KVZRK`OTKWY]$
>URRW#EHWD @ VVK DOSKDFLSVJDRUJEU +RVW NH\ QRW IRXQG IURP WKH OLVW RI NQRZQ KRVWV $UH \RX VXUH \RX ZDQW WR FRQWLQXH FRQQHFWLQJ \HVQR " HQWUD FRP VHQKD QDGD p HFRDGR@ /DVW ORJLQ IURP 6DW -DQ IURP DOSKD >URRW#DOSKD URRW@ @KWY]OX^OXNO\K]WOX]KQOX]NK^OVK;_KXNYY]O\`SNY\]]RNXYRY]^ KVZRK \OMOLO_ K ]YVSMS^KÁY OVO XY] KN`O\^S_ XÁY ^O\ OXMYX^\KNY K RY]^ UOc NK VS]^K NO RY]^] MYXROMSNY] KSXNK K]]SW KMOS^KWY] &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
12
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
MYX^SX_K\KMYXObÁYOVOZÉOKW£[_SXKLO^KXKVS]^KOMYX^SX_KMYW K K_^OX^SMKÁY NOZYS] [_O OVK ¤ ObOM_^KNK MYW bS^Y \OMOLOWY] Y ^O\WSXKV`S\^_KV=O\OKVSdK\WY]YVYQY_^OXY`KWOX^OOX^\K\MYW_W ZONSNYNO]O]]ÁY]]RYNKOWYXV YK\[_S`Yh]]R\KXNYXI]OONOXY] ZO\WS^OK]O]]ÁY]OQ_\KOKK_^OX^SMKÁYZKN\ÁYNY]S]^OWK:Y\¤WY KV_XYNO`OO]MYVRO\OX^\OO]^OW¤^YNYYSWZY\^K\]_KMRK`OZ¦LVSMK K\WKdOXKNK XY K\[_S`Y SNOX^S^cZ_L ZK\K K W£[_SXK \OWY^K 3]]Y ZY]]SLSVS^K\£KYZ\YQ\KWK_]K\KK_^OX^SMKÁYLK]OKNKOW<=+-YWY XY]]K W£[_SXK RKLSVS^KNK ZK\K PS\OaKVV XÁY XY] ZY]]SLSVS^K ^\KX]PO\ XMSKNOK\[_S`YP^Z80=O^M_]K\OWY]Y`OVRYNS][_O^O _]KXNY _W Z\YQ\KWK NK] PO\\KWOX^K] W^YYV] Y WMYZc -YVY[_O _W NS][_O^O XK _XSNKNO XK O NSQS^O$ WMYZc h]]RZ_L K$ -YW S]]Y MYZSK\OWY] ZK\K Y NS\O^¥\SY \OWY^Y h]]R XY]]K MRK`O Z¦LVSMK K^OXÁY$ ]¥ VO`KWY] XY]]K MRK`O Z¦LVSMK + MRK`O Z\S`KNK XÁY NO`O ]O\ NS`_VQKNK WK] KQY\K MYW _W XY`Y XYWO K ]O\ _^SVSdKNY XK] MYXObÉO] K ]KLO\ K_^RY\SdONIUOc] >KV K\[_S`Y MY\\O]ZYXNO KY MYX`OXMSYXKV K\[_S`Y \RY]^]% OVO ZY]]_S _WK MRK`O ZY\ VSXRK ]_ZY\^KXNY ZY\^KX^Y NS`O\]K] MRK`O] Z¦LVSMK] NO NSPO\OX^O] _]_£\SY] O RY]^] +^OXÁY ZK\K XÁY ^\_XMK\ Y K\[_S`Y ZYS] K] MRK`O] ]ÁY VYXQK] O NO`OW OX^\K\ X_WK ¦XSMK VSXRK 6YQY NOZYS] NS]]Y Y _]_£\SYZYNOObOM_^K\YVYQSX]OWKK_^OX^SMKÁYZKN\ÁYWK]KZOXK] NKXNYYZK]]ZR\K]ONKMRK`O<=+[_O¤]YL\OWKXOS\KWKS]]OQ_\Y -YWKM\SKÁYNYK_^RY\SdONIUOc][_KXNYKL\S\WY]KXY`K]O]]ÁYMYW YMVSOX^O]]R`O\OWY]Z\SWOS\KWOX^OOX^ÁY$
>URRW#DOSKD@VVK EHWD +RVW NH\ QRW IRXQG IURP WKH OLVW RI NQRZQ KRVWV $UH \RX VXUH \RX ZDQW WR FRQWLQXH FRQQHFWLQJ \HVQR " URRW#EHWD URRW@ 8_WKZY]^O\SY\MYXObÁYOXMYX^\K\OWY]Y]OQ_SX^OMOX£\SY$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
13
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
>URRW#DOSKD @VVK EHWD (QWHU WKH SDVVSKUDVH IRU 56$ NH\ URRW#DOSKDFLSVJDRUJEU QDGD HFRD /DVW ORJLQ 6XQ -DQ IURP DOSKD URRW#EHWD URRW@ +]]SWYKV_XYOX^\KMYWK]_KZK]]ZR\K]OK]MRK`O]]ÁYMROMKNK]OK ]O]]ÁY]OQ_\KM\SZ^YQ\KPKNK¤ZY]^KOWKÁY
9_^\Y W¤\S^Y SXNS]M_^´`OV NY =OM_\O =ROVV ¤ Y PK^Y NY MVSOX^O ZK\K KMO]]Y \OWY^Y T£ O]^K\ ZY\^KNY ZK\K NS`O\]K] ZVK^KPY\WK] ?83B 9=ASXO^MY[_O¤LK]^KX^OSWZY\^KX^O[_KXNY^OWY]\ONO] R´L\SNK]@S]S^OY]S^OP^Z$P^ZM]R_^PSZ_L]]RZK\K_WK`S]ÁY NO `O\]ÉO] NS]ZYX´`OS] :YNOWY] ]_QO\S\ KY KV_XY ZO][_S]K\ K] ]OQ_SX^O]`O\]ÉO]XÁYMYWO\MSKS]ZK\KASXO9=\O]ZOM^S`KWOX^O$
Âhttp://www.chiark.greenend.org.uk/~sgtatham/putty/ (PuTTY é uma versão livre para telnet e SSH).
R^^Z$NYWOaOOQ_SYaKON_Z_LNYWO]^SM]Y]ZY\^]]]R!McQaSXL^K\Ld @O\]ÁY MVSOX^O O ]O\`SNY\ ==2 NOX^\Y NY Z\YTO^Y -cQX_]
ÂP^Z$P^ZM]R_^PSZ_L]]RY]]]RY]dSZ
@O\]ÁY ==2 ZK\K 9= b
8O]^K^OVK`O\OWY]_WMVSOX^OMYWZSVKNYO\YNKXNYX_WKW£[_SXK?83B =-9 9ZOX=O\`O\ ` R^^Z$aaa]MYMYW O KL\SXNY _WK MYXObÁY ]]RMYWMROMKQOWNKMRK`O<=+X_WRY]^6SX_b$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
14
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
2.3 Firewalls: solução Linux 8ÁYNS]M_^S\OWY]K[_SKSWZVOWOX^KÁYP´]SMKNO_WPS\OaKVV8Y]]Y¤ YLTO^S`Y¤WY]^\K\K]PO\\KWOX^K]NS]ZYX´`OS]XY6SX_b9KV_XY^OW [_O^O\OWWOX^O^KWL¤W[_OXÁYObS]^O_WK]YV_ÁY¦XSMKOW^O\WY] NO PS\OaKVV @YM ^OW [_O MYXROMO\ K] PO\\KWOX^K] O OX^ÁY KNKZ^£ VK]§]XOMO]]SNKNO]O]ZOM´PSMK]NO]_K\ONOWYX^K\]_KZYV´^SMKNO ]OQ_\KXK O KNKZ^£VK K _W PS\OaKVV @YM ^O\£ _WK SX^\YN_ÁY O NOZYS] ^O\£ [_O ZO][_S]K\ ]_K] NOWKXNK] O]ZOM´PSMK] =ÁY ^KX^Y] Y] MOX£\SY] ZY]]´`OS] [_O Y ^OWK ^Y\XK]O SXO]QY^£`OV$ _WK ZO[_OXK \ONO NYW¤]^SMY Y_ _W ZO[_OXY O]M\S^¥\SY [_O ]O MYXOM^K K 3X^O\XO^ `SK ZZZ% _WK \ONO MYW _W \Y^OKNY\ MYXOM^KNY K 3X^O\XO^% _WK \ONO W¤NSK MYW NYS] PS\OaKVV] O^M O^M .K\OWY] K[_S Y] MYXMOS^Y] Z\SXMSZKS]NK]PO\\KWOX^K]]O_]MYWKXNY]YZÉO]O_^SVSdKÁY ?W PS\OaKVV ¤ SWZVOWOX^KNY XY 6SX_b OW X´`OV NO UO\XOV ZY\ S]]Y ^YNY Y ^Ob^Y ]YL\O Y ^OWK MYWOK MYW K] YZÉO] ZK\K \OMYWZSVK\ Y UO\XOV=OWN¦`SNKZK\K^O\WY]_WPS\OaKVVXY6SX_bXOMO]]S^KWY]NO ]_KRKLSVS^KÁYXYUO\XOV7K]S]]YXÁY]OPKdXOMO]]£\SYZYS]Y ATIVO
Em 'networking options': 1. turn network firewalls => ATIVO 4
O Linux IPCHAINS-HOWTO por exemplo apresenta 4 diferentes cenários possíveis. &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
15
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
2. turn TCP/IP networking => ATIVO 3. turn IP forwarding/gatewaying => ATIVO 4. turn IP firewalling => ATIVO 5. turn IP firewall packet logging => ATIVO 6. turn IP masquerading => ATIVO 7. turn IP accounting => ATIVO 8. turn IP tunneling => DESATIVO 9. turn IP aliasing => ATIVO (pode-se optar por seu uso modular...) 10. turn IP (PC/TCP mode) => DESATIVO 11. turn IP (reverse ARP) => DESATIVO 12. turn drop source routed frames => ATIVO
Em 'network device support': 1. turn network device support => ATIVO 2. turn net driver support => ATIVO 3. turn ethernet (10/100 mbit.) => ATIVO
2.4 A filtragem de pacotes +] SXPY\WKÉO] [_O K^\K`O]]KW _WK \ONO ]ÁY NO]WOWL\KNK] O OX`SKNK] XK PY\WK NO ZKMY^O] Y_ NK^KQ\KWK] >KS] ZKMY^O] ^ W _W PY\WK^Y [_O SXMV_S _W MKLOKVRY O _W MY\ZY NO NKNY] 8Y MKLOKVRY NY ZKMY^O 3: OXMYX^\KWY]KVQ_WK]SXPY\WKÉO]^KS]MYWY$ KOXNO\OYNOY\SQOW LOXNO\OYNONO]^SXY :Y\MYX]OQ_SX^O_WPSV^\YNOZKMY^O]ZY]]_SKRKLSVSNKNONOYVR£ VY] [_KXNY OVO] ZK]]KW O K]]SW NOMSNS\ Y ]O_ NO]^SXY :YNOXNY O]MYVRO\ ZY\ XOQK\ NOXc _W ZKMY^O NO]MK\^KXNYY ^Y^KVWOX^O KMOS^K\KMMOZ^YZKMY^ONOSbKXNYYZK]]K\Y_ ZY\ PSW\OTOS^K\ \OTOM^ Y ZKMY^O ZY\¤W \O^Y\XKXNY _WK WOX]KQOW KY OXNO\OY NO Y\SQOW /S] K´ ^\ ] MYXMOS^Y] P_XNKWOX^KS] OW [_KV[_O\ ]YP^aK\O NO PS\OaKVV
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
16
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
» ZY\ O]]K] MK\KM^O\´]^SMK] [_O _W PS\OaKVV ZYNO XY] QK\KX^S\ ]OQ_\KXKOMYX^\YVOX_WK\ONOYKNWSXS]^\KNY\ZY\O`S^K\YOX`SY NO ZKMY^O] ZK\K PY\K NK \ONO Y_ OX^ÁY [_O ZKMY^O NO PY\K OX^\O OW MO\^K]ZK\^O]NKSX^\KXO^
2.5 IPCHAINS (The Enhanced IP Firewalling Chains Software for Linux) O Ipchains5, escrito por Rusty Russel ([email protected]), tem a habilidade de filtrar os pacotes que passam pelo kernel. Não é um software simples, mas conhecendo o seu mecanismo e seus conceitos o administrador de rede pode escolher a política de segurança de sua rede. A versão trabalhada aqui será a 1.3.8 (ipchains-1.3.8-3.i386.rpm). Para lidar com um pacote o kernel do Linux possui três regras principais, que o Ipchains chama de firewall chains ou chains - não usaremos tradução para a palavra chains/chain, iremos portanto conservá-la em inglês. São elas:
IP INPUT CHAIN: quando um pacote entra ... IP OUTPUT CHAIN: quando um pacote sai ... IP FORWARD CHAIN: quando um pacote é roteado para outra máquina ...
» XO]^O ^\SZ¤ [_O ]O P_XNKWOX^K K MYX]^\_ÁY NO XY]]Y PS\OaKVV 7YX^K]OZY\^KX^YK]\OQ\K]ZK\KQO\S\O]]O]MRKSX]Z\SXMSZKS]$_W ZKMY^O OX^\K ZY]]Y \OM_]£VY NO ^KV OXNO\OY NO Y\SQOW KMOS^£VY ZK\K^KVNO]^SXYWK]]OK^\K`O]]KWO_PS\OaKVVOWNS\OÁYK^KVY_ [_KVNO]^SXY\OM_]YO^M +] [_K^\Y YZO\KÉO] WKS] L£]SMK] O MYW_X] XY 3ZMRKSX] ]ÁY$ KM\O]MOX^K\KZZOXN_WKXY`K\OQ\KMYWKPVKQ+ObMV_S\NOVO^O _WK\OQ\KMYWKPVKQ.%OVS]^K\K]\OQ\K]ObS]^OX^O]MYWKPVKQ 6OVSWZK\PV_]RSXNS]M\SWSXKNKWOX^O^YNK]K]\OQ\K]MYWKPVKQ 0
5
Uma questão terminológica: o aluno não deve confundir ipchains com o antigo ipfwadm: o primeiro está em distribuições com o kernel 2.2.x e o último no kernel 2.0.x; os parâmetros são essencialmente diferentes, portanto não servem os scripts feitos para o ipfwadm. &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
17
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
@OTKWY]KVQ_X]MKWSXRY]MYWY3ZMRKSX]OWKÁY»M_\SY]YXY^K\[_O ^YNK Z_LVSMKÁY OX]SXKXNY _WK VSXQ_KQOW NO Z\YQ\KWKÁY OW QO\KV MYWOMO WY]^\KXNY MYWY QO\K\ XO]^K VSXQ_KQOW _WK P\K]O NY ^SZY v2OVVY AY\VNv 8Y MK]Y NK] \OQ\K] NY PS\OaKVV MYWOKWY] WY]^\KXNY MYWY SWZONS\ Y ZSXQ ZK\K K SX^O\PKMO NO VYYZLKMU VY ^O\´KWY]Y]OQ_SX^O$
LSFKDLQV $ LQSXW V S LFPS M '(1<
/V_MSNKXNYY]ZK\WO^\Y_]KNY]$ +SXZ_^ÂKM\O]MOX^KWY]_WK\OQ\KZK\KKOX^\KNK ]ÂOS]YOXNO\OYNOY\SQOX]NY]ZKMY^O] ZÂYZ\Y^YMYVY_]KNY3-7: T./8CÂY[_OPK\OWY]MYWYZKMY^OT_WZ^Y$K[_SXOQKWY] +QY\K]OObOM_^KWY]_WZSXQZK\KYOXNO\OYNOVYYZLKMUS\OWY]`O\ K ^\KNSMSYXKV WOX]KQOW NO v ZKMUO^ VY]]v + \OQ\K [_O O]^KLOVOMOWY]NSd[_ONO`O]OXOQK\^YNY]ZKMY^O] 3-7: [_O MROQK\OW NYOXNO\OY!YZK\WO^\Y./8C¤MRKWKNY^OMXSMKWOX^ONO KV`Y (target). @OTKWY] Y_^\Y ObOWZVY KQY\K X_WK SX^O\PKMO NO \ONO /W XY]]Y MOX£\SY NO]OTKWY] POMRK\ K] ZY\^K] O NY XY]]Y RY]^ KVZRK # "ZK\KLO^K# "%OW]_WK$LO^KXÁYZYNO\£_]K\ ^KS] ]O\`SY] NK W£[_SXK KVZRK /]^K] ]ÁY K] ZY\^K] ZKN\ÁY ZK\K >OVXO^ O 0>: XY Z\Y^YMYVY >-: =OQ_XNY K V¥QSMK NK ]_S^O NO Z\Y^YMYVY] >-:3: XOMO]]S^KWY] KV¤W NY OXNO\OY 3: NO _W Y_^\Y X´`OVNOK^\SL_SÁYNOOXNO\OY][_O¤MRKWKNYZY\^KNOK ¤ OVK [_O NS\OMSYXK Y] NKNY] [_O MROQKW ZOVY OXNO\OY 3: ZK\K _W NO^O\WSXKNY ]O\`SY .O PY\WK [_O ZYNO]O WKX^O\ _W X¦WO\Y NO MYXObÉO] ]SW_V^XOK] O KY WO]WY ^OWZY ]OZK\KNK] +] ZY\^K] ]ÁY &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
18
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
]OZK\KNK] OW NYS] Q\_ZY] NS]^SX^Y]$ NO K ]ÁY K] ZY\^K] Z\S`SVOQSKNK] ]ÁY _]KNK] ZY\ NKOWYX] MYXPS£`OS] O MYW Z\S`SV¤QSY] NO \YY^ +] \O]^KX^O] NO K^¤ ]ÁY MRKWKNK] NO XÁY Z\S`SVOQSKNK] O ]ÁY _]KNK] VS`\OWOX^O :Y\ S]]Y KY WYX^K\ _W PS\OaKVV ^YNK K K^OXÁY MYW Y] WY`SWOX^Y] NO ZY\^K] XÁY Z\S`SVOQSKNK] +LKSbY O]^£ _WK VS]^K \O]_WSNK MYW Y] Z\SXMSZKS] ]O\`SY]]O_]ZY\^K]ZKN\ÁYOYZ\Y^YMYVYMY\\O]ZYXNOX^O$
SERVIÇO
PORTA
PROTOCOLO
netstat
15
tcp
ftp
21
tcp
ssh
22
tcp/udp
telnet
23
tcp
smtp
25
tcp
whois
43
tcp
finger
79
tcp
www
80
tcp
pop-3
110
tcp/udp
https
443
tcp/udp
=OO]^S`O\MYXP_]Y]YL\O[_KVYX¦WO\Y[_OMY\\O]ZYXNOK^KVY_[_KV ]O\`SY O ^KWL¤W NO]OTK\ _WK VS]^KQOW WKS] MYWZVO^K MYX]_V^O Y K\[_S`YvO^M]O\`SMO]v ¤ OVO [_O K\WKdOXK K MY\\O]ZYXN XMSK OX^\O Y XYWO NY ]O\`SY >OVXO^ O Y X¦WO\Y NK ZY\^K O ^KWL¤W Y Z\Y^YMYVY[_O¤_]KNY>-: 9L]O\`OOX^ÁYXY]]YObOWZVY$ >URRW#DOSKD @ LSFKDLQV $ LQSXW V G S WFS - '(1< >URRW#DOSKD @ LSFKDLQV $ LQSXW V G S WFS - '(1<
-YWO]]K]\OQ\K]XOQKWY]./8CKOX^\KNKNOZKMY^O]NYOXNO\OYNO Y\SQOW ]Y_\MO KNN\O]] v]v # " ZK\K Y OXNO\OY NO NO]^SXY vNv # " XK] ZY\^K] O XY Z\Y^YMYVY >-: 9U]OWWOX]KQOX]NOO\\YXY]]K]\OQ\K]PY\KWKMOS^K]>OX^OKQY\K 6
Pode-se consultar também o RFC 177 para uma lista completa das portas. &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
19
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
KL\S\ _WK ]O]]ÁY >OVXO^ Y_ 0>: NK W£[_SXK LO^K K ^OX^K^S`K YL`SKWOX^O ]O\£ ]OW ]_MO]]Y K ZY\^K O]^£ POMRKNK ZK\K O]^K W£[_SXK + PVKQ 4 O]ZOM´PSMK _W KV`Y K[_S _]KWY] ./8C% Y] Y_^\Y] KV`Y]WKS]SWZY\^KX^O]]ÁY+--/:>4/->O7+=;9]NYS]Z\SWOS\Y] T£WOXMSYXKWY]KX^O\SY\WOX^O_WKMOS^KKOX^\KNKOY\OTOS^KZY\¤W \O]ZYXNOXNYKYOXNO\OYNOY\SQOWT£YKV`Y7+=;]¥¤_]KNY[_KXNY _]KWY] Y MRKSX PY\aK\N vSZMRKSX] + PY\aK\Nv NOSbK Y ZKMY^O ZK]]K\ZY\¤W_]KXNYK^¤MXSMKNYWK]MK\KWOX^Y 0OS^Y S]]Y `KWY] OX^\K\ Y_^\K YZÁY NY 3ZMRKSX]$ `KWY] ZONS\ _WK VS]^KPVKQ6NOXY]]K]\OQ\K]$ >URRW#DOSKD @ LSFKDLQV / &KDLQ LQSXW SROLF\ $&&(37 WDUJHW SURW RSW VRXUFH '(1< WFS EHWDFLSVJDRUJEU '(1< WFS EHWDFLSVJDRUJEU &KDLQ IRUZDUG SROLF\ $&&(37 &KDLQ RXWSXW SROLF\ $&&(37
GHVWLQDWLRQ DOSKDFLSVJDRUJEU DOSKDFLSVJDRUJEU
SRUWV DQ\ ! DQ\ !
WHOQHW IWS
+ ]K´NK [_O YL^OWY] NK ^OVK ¤ W_S^Y OV_MSNK^S`K O ^KWL¤W W_S^Y MVK\K .O SX´MSY NO`OWY] YL]O\`K\ [_O OVO ]OZK\K Y] ^\ ] MRKSX] Z\SXMSZKS] SXZ_^ PY\aK\N O Y_^Z_^ O XY] WY]^\K [_KS] \OQ\K] SWZVOWOX^KWY] ZK\K OVO]% YL]O\`O [_O vSXZ_^v O vPY\aK\Nv O]^ÁY `KdSY] ZYS] XKNK SWZVOWOX^KWY] KSXNK 9_^\Y NO^KVRO K ]O\ YL]O\`KNY$KZ\O]OXKNKObZ\O]]ÁYOX^\OZK\ X^O]O]vZYVSMc+--/:>v 3]^Y [_O\ NSdO\ [_O K ZYV´^SMK NOPK_V^ NO XY]]Y PS\OaKVV ¤ KMOS^K\ ZKMY^O]% Y [_O ¤ POS^Y ZOVK PVKQ : KY NSQS^K\WY] ZY\ ObOWZVY$ vSZMRKSX]:SXZ_^./8CvY_KSXNK$vSZMRKSX]:Y_^Z_^4/->v8Y ]OQ_XNY MK]Y ]O XKNK PY\ O]ZOMSPSMKNY Y UO\XOV ZY\ ZKN\ÁY \OTOS^K\£K]K´NKNO[_KV[_O\ZKMY^O =OQ_OWOWMYV_XK]K]MK\KM^O\´]^SMK][_OO]MYVROWY]@OTKWY]$
9 KV`Y
:\Y^ Y Z\Y^YMYVY
9Z^ K] YZÉO]
;_KV KV`Y &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
=Y_\MO
.O]^SXK^SYX +] ZY\^K]
9 OXNO\OY 9 OXNO\OY
9 ]O\`SY
+] ZY\^K] 9]
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
20
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
_]KWY]
NO Y\SQOW [_O PYS ^\KN_dSNY ZK\K _W 0;.8
9 Z\Y^YMYVY 8OXR_WK YZÁY [_O O]MYVROWY] O]ZOM´PSMK PYS _]KNK
NO NO]^SXY OW TYQY ]O\`SY] [_O PYS 8Y ]OX^SNY ^\KN_dSNY] vZY\^K]v ^\KN_dSNY NO ½ ZK\K NO ZK\K ]O_ ZK\K _W XYWO 0;.8
*Fully Qualified Domain Name
@KWY]YL]O\`K\KQY\KMYWYZYNOWY]ObMV_S\K]\OQ\K][_OM\SKWY]2£ Z\SWOS\KWOX^O _WK ]YV_ÁY NSQKWY] \KNSMKV :YNOWY] ]SWZVO]WOX^O KZVSMK\ Y ZK\WO^\Y vPV_]Rv S]^Y ¤ VSWZKWY] ^Y^KVWOX^O K] N_K] \OQ\K]O]^KLOVOMSNK]$
>URRW#DOSKD @ LSFKDLQV ) >URRW#DOSKD @ LSFKDLQV / &KDLQ LQSXW SROLF\ $&&(37 &KDLQ IRUZDUG SROLF\ $&&(37 &KDLQ RXWSXW SROLF\ $&&(37 .OZYS]NYPV_]R`SWY]KXY]]KVS]^KOOVKO]^£`KdSK /X^\O^KX^Y S]]Y XÁY ]O\SK _WK ]YV_ÁY ]O NO]OTK\WY] KZ\Y`OS^K\ Y_^\K]\OQ\K]O]^KLOVOMSNK]8YXY]]YObOWZVY^OWY] N_K] \OQ\K] + Z\SWOS\KPOMRKKZY\^K>OVXO^OT£K]OQ_XNKPOMRKKZY\^K 0>::YNOWY]NO\\_LK\KZOXK]KZ\SWOS\K\OQ\K$
>URRW#DOSKD @ LSFKDLQV ' LQSXW /NOZYS]ZK\KXY]MO\^SPSMK\WY]NSQS^KWY]$ >URRW#DOSKD @ LSFKDLQV / &KDLQ LQSXW SROLF\ $&&(37 WDUJHW SURW RSW VRXUFH '(1< WFS O EHWDFLSVJDRUJEU &KDLQ IRUZDUG SROLF\ $&&(37 &KDLQ RXWSXW SROLF\ $&&(37
GHVWLQDWLRQ DOSKDFLSVJDRUJEU
SRUWV DQ\ !
IWS
=¥XY]\O]^KOX^ÁY_WK\OQ\KKNKZY\^KNO0>:»SWZY\^KX^OK[_SY KV_XY ZO\MOLO\ K PVKQ SXZ_^ ZYS] ¤ OVK [_O NOPSXO [_O [_O\OWY] OVSWSXK\ K \OQ\K NY] PS\OaKVV MRKSX] NO OX^\KNK O XÁY NO ]K´NK Y_^Z_^O^M
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
21
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
?W Y_^\Y ObOWZVY /]^KLOVOMOWY] POMRK\ K MYXObÁY `SK >-: ]OW O]ZOMSPSMK\ ZY\^K XOW OXNO\OY NO Y\SQOW K^OXÁY ZK\K O]]O] NO^KVRO] / SQ_KVWOX^O XOQKWY] [_KV[_O\ MYXObÁY 0>: NK W£[_SXK KVZRK]OTKZK\K[_KVNO]^SXYPY\@OTKVOWL\KXNY$KVZRK'# " OLO^K'# "$ >URRW#DOSKD @ LSFKDLQV $ LQSXW G S WFS - '(1< >URRW#DOSKD @ LSFKDLQV $ RXWSXW V S WFS - '(1< >URRW#DOSKD @ LSFKDLQV / &KDLQ LQSXW SROLF\ $&&(37 WDUJHW SURW RSW VRXUFH GHVWLQDWLRQ SRUWV '(1< WFS DQ\ZKHUH DOSKDFLSVJDRUJEU DQ\ ! DQ\ &KDLQ IRUZDUG SROLF\ $&&(37 &KDLQ RXWSXW SROLF\ $&&(37 WDUJHW SURW RSW VRXUFH GHVWLQDWLRQ SRUWV '(1< WFS DOSKDFLSVJDRUJEU DQ\ZKHUH IWS ! DQ\
;_O\OWY] OX^ÁY VSLO\K\ K] MYXObÉO] NO 0>: NK W£[_SXK # ") =SWZVO]$vSZMRKSX].Y_^Z_^v -YW O]]O MOX£\SY KMSWK ]O _]K\WY] _WK PO\\KWOX^K NO `K\\ON_\K NO ZY\^K]^O\OWY]_W[_KN\YSX^O\O]]KX^O:YNOWY]_]K\YXWKZ8O^aY\U /bZVY\K^SYX >YYV KXN =OM_\S^c =MKXXO\ O]M\S^Y ZY\ 0cYNY\ `O\]ÁY LO^K aaaSX]OM_\OY\QXWKZ OVO XY] WY]^\K K] ZY\^K] KLO\^K] OY_ PSV^\KNK] O WO]WY ]O XY]]K MYXObÁY PYS ^Y^KVWOX^O NO\\_LKNK 8O]^K ^OVK OVO XY] WY]^\K Y] ]YMUO^] [_O Y 3ZMRKSX] PSV^\Y_OY][_ONOSb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oD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
22
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
ILOWHUHG ILOWHUHG ILOWHUHG ILOWHUHG ILOWHUHG ILOWHUHG ILOWHUHG RSHQ RSHQ RSHQ RSHQ RSHQ RSHQ RSHQ RSHQ RSHQ RSHQ RSHQ RSHQ RSHQ
WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS
QHWVWDW XQNQRZQ TRWG PVS FKDUJHQ IWSGDWD IWS VVK WHOQHW VPWS ILQJHU KWWS VXQUSF DXWK QHWELRVVVQ KWWSV ORJLQ VKHOO SULQWHU VTXLGKWWS
1PDS UXQ FRPSOHWHG ,3 DGGUHVV KRVW XS VFDQQHG LQ VHFRQGV
+QY\K [_O OX^\KWY] MYW K \OQ\K ZK\K NO\\_LK\ K] MYXObÉO] >-: Y ]YP^aK\OXY]\OVK^K$ >URRW#DOSKD @XVUORFDOELQQPDS Y DOSKDFLSVJDRUJEU 6WDUWLQJ QPDS 9 %(7$ E\ )\RGRU I\RGRU#GKSFRP ZZZLQVHFXUHRUJQPDS +RVW DOSKDFLSVJDRUJEU DSSHDUV WR EH XS JRRG ,QLWLDWLQJ 7&3 FRQQHFW VFDQ DJDLQVW DOSKDFLSVJDRUJEU 7KH 7&3 FRQQHFW VFDQ WRRN VHFRQGV WR VFDQ SRUWV ,QWHUHVWLQJ SRUWV RQ DOSKDFLSVJDRUJEU 3RUWV VFDQQHG EXW QRW VKRZQ EHORZ DUH LQ VWDWH ILOWHUHG 3RUW 6WDWH 3URWRFRO 6HUYLFH
Õ
1PDS UXQ FRPSOHWHG ,3 DGGUHVV KRVW XS VFDQQHG LQ VHFRQGV
+VSXRKNOPVKQ]NY3ZMRKSX]¤LK]^KX^OWKVO£`OVOKZOXK]MYWO_]Y OYNOL_QMYX]^KX^ONK]\OQ\K][_OYKNWSXS]^\KNY\SWZVOWOX^K¤[_O ]OZYNONYWSX£VK]:OVYWOXY]K^¤YUO\XOV
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
23
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
SXMV_]S`K] ZY\ ObOWZVY$ vZ ^MZ # " $v SXMV_´WY] MYWS]]YY]3:]NObbbK^¤# " 9_^\Y\OM_\]YP_XNKWOX^KV¤YNKSX`O\]ÁY;_KXNY_]KWY]KPVKQvv /VK^OWY]OX^SNYXOQK^S`Y%[_KXNYY_]KWY]NO`OWY]VO\WOX^KVWOX^O$ v^YNY b WOXY] cv +]]SW$ vZ ^MZ ] # " aaav ]SQXSPSMK$ ^YNK]K]ZY\^K]>-:WOXY]K"AAA /bOWZVY.SQS^KWY]XYMYX]YVONKW£[_SXKKVZRK$
LSFKDLQV $ LQSXW V VVK G VVK S WFS M 5(-(&7 -YW S]]Y POMRKWY] ^YNK] K] ZY\^K] >-: WK] NOSbKWY] K ZK\K Y =OM_\O=ROVVYZO\K\=O^OX^KWY]_W>OVXO^XY]]KMYXObÁYYL`SKWOX^O PKVRK\£7K]Y]]RZYNOO]^KLOVOMO\]_K]O]]ÁY\OWY^K]OWZ\YLVOWK] ?WKVS]^KQOWXKW£[_SXKXY]WY]^\K$ >URRW#DOSKD @ LSFKDLQV / &KDLQ LQSXW SROLF\ $&&(37 WDUJHW SURW RSW VRXUFH '(1< WFS EHWDFLSVJDRUJEU &KDLQ IRUZDUG SROLF\ $&&(37 &KDLQ RXWSXW SROLF\ '(1<
GHVWLQDWLRQ DOSKDFLSVJDRUJEU
SRUWV VVK ! VVK
×
+MYXROMSNKPVKQv6vO]MVK\OMO[_OYZ\Y^YMYVY>-:^OWO]^K\./8C WK] XÁY K] ZY\^K] NY ]]R YL]O\`O K] ]O^K] :YNOWY] _]K\ Y vv XKO]ZOMSPSMKÁYNOOXNO\OY]3:XY]Z\Y^YMYVY]ObMO^YMYWY3-7: O XK] SX^O\PKMO] NO \ONO :YNO\´KWY] MYXPSQ_\K\ K \OTOSÁY NO ZKMY^O]NO[_KV[_O\Z\Y^YMYVYWOXY]Y?.:$vZ_NZv9_KSXNK$v+ SXZ_^ Z ^MZ N # " aaa T +--/:>v% O]ZOMSPSMKWY] MYW S]]Y[_OKMOS^KWY]KOX^\KNKNO[_KV[_O\ZKMY^O>-:ZK\KKZY\^K" WOXY]NKW£[_SXK# "[_OPSMKObMV_´NK-YX^_NY$v+SXZ_^ Z ^MZ N # " aaa T +--/:>v ¤ O]]OXMSKVWOX^O NSPO\OX^O +QY\K KMOS^KWY] [_KV[_O\ MYXObÁY >-: NK W£[_SXK # "WOXY]KNKZY\^KAOL
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
24
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
+MSWK PSdOWY] WOXÁY K] SX^O\PKMO] NO \ONO XO^aY\U SX^O\PKMO7 9 3ZMRKSX]ZYNOQO\S\^YNK]K]SX^O\PKMO]NY]S]^OWKZK\KS]]Y_]KWY] KPVKQvSv:YNOWY]_]K\vSO^RvK]_KZ\SWOS\KZVKMKO^RO\XO^ Y_ vS ZZZv K MYXObÁY NO WYNOW `SK ZZZN ZK\K XY] K^O\WY] OW ObOWZVY]WKS]_]_KS];_KXNY_WKW£[_SXKNOXY]]K\ONOYL^¤WKMO]]Y KSX^O\XO^`SKNSKV_ZYZK\WO^\Y¤P_XNKWOX^KV=OXNY[_OZYNOWY] WO]WY O]ZOMSPSMK\ _WK SX^O\PKMO [_O XÁY O]^£ K^S`K Y [_O [_K]O ]OWZ\O¤YMK]YNKSX^O\PKMOZZZ;_KXNYMYXOM^KWY]XY]]KZ\Y`ONY\K K SX^O\PKMO ZZZ O]^£ Z\O]OX^O Y SPMYXPSQ VS]^K ]_K Z\O]OXK ;_KXNY NO]PKdOWY] K MYXObÁY K SX^O\PKMO NO]KZK\OMO :YNO]O ^KWL¤W _]K\ _W M_\SXQK XK YZÁY S VKXKXNY WÁY NY ]´WLYVY vv$ O^R NO]SQXK [_KV[_O\ SX^O\PKMO ZY]]´`OV O^R O^R O^M + \OQ\K vSZMRKSX]+Y_^Z_^N# "#Z_NZSO^RT./8CvKZVSMK]O K[_KV[_O\SX^O\PKMOO^RO\XO^NOXY]]KW£[_SXK /bS]^O _WK PO\\KWOX^K NO MYXPSQ_\KÁY MRKWKNK 6SX_bMYXP /VK O]^£ Z\O]OX^O OW [_K]O XK] NS]^\SL_SÉO] NK OWY] ]OQ_SX^O^OVKT£MYWYK]O[_S`KV XMSK]KZYX^KNK]$
7
Consulte a documentação sobre o tema, principalmente sobre o comando ifconfig, que configura e lista as interfaces existentes num host. &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
25
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
.O]^KMKWY] Y] ^\ ] LY^ÉO] [_O \OZ\O]OX^KW Y ^\SZ¤ vSXZ_^PY\aK\N Y_^Z_^v NO ^YNK] K] \OQ\K] NO PS\OaKVVSXQ » K[_S [_O `YM OX^\K\£ MYWK]\OQ\K]NYPS\OaKVV@KWY]ONS^K\Y]SZMRKSX]Y_^Z_^XY^O]O [_O M_\SY]KWOX^O SXZ_^ PYS ^\KN_dSNY ZY\ LVY[_OSY MVS[_O XY LY^ÁYv]K´NKvOKZK\OMO\£O]^O[_KN\YNONS£VYQY$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
26
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
-VS[_O OX^ÁY XY LY^ÁY vKNSMSYXK\v >O\OWY] Y [_KN\Y ]OQ_SX^O [_O ZYNO XY] Z\YZY\MSYXK\ K ZY]]SLSVSNKNO NO W¦V^SZVK] ONSÉO] NY SZMRKSX]$
8ÁY R£ NKNY] XY`Y] XO]]K ^OVK NY 6SX_bMYXP + ¦XSMK MYS]K [_O XÁY ^YMKWY] KSXNK PYS K OX^\KNK ZK\K K XO^WK]U W£]MK\K NO \ONO [_O ¤ O]ZOMSPSMKNK KY VKNY NY OXNO\OY 3: +^OX^K ZK\K Y] KV`Y] KMOS^K\ \OTOS^K\ O LVY[_OK\ Y ./8C >\KN_dSXNY Y] MKWZY] NK TKXOVK ^O\´KWY]$ vSZMRKSX] + Y_^Z_^ ] # " ] # "Z_NZSO^RT\OTOM^v/X^ÁYWK\MKWY] Y[_KN\KNSXRYvK^S`YvOKMOS^KWY]K\OQ\K :K\K NO]K^S`£VK _]KWY] KWO]WKSX^O\PKMO
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
27
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
9_^\K YZÁY ZK\K Q\K`K\ K] \OQ\K] [_O M\SKWY] ]ÁY Y] ]M\SZ^] NO SXSMSKVSdKÁY^\KNSMSYXKVWOX^OQ_K\NKNY]XYNS\O^¥\SY\MN>O]^K]O ObK_]^S`KWOX^O K] \OQ\K] ObOM_^K]O Y NOL_Q O OX^ÁY M\SKWY] _W ]M\SZ^ [_O MK\\OQK K] \OQ\K] NO PS\OaKVV XK ZK\^SNK NY 6SX_b MYX]_V^O]OKNYM_WOX^KÁYObS]^OX^OZK\KYZO\K\^KS]KV^O\KÉO]OW ]O_ ]S]^OWK 2£ NYS] ]M\SZ^] [_O KT_NKW W_S^Y Y =c]KNWSX K WYX^K\ ]O_PS\OaKVV$YSZMRKSX]]K`OOYSZMRKSX]\O]^Y\O9Z\SWOS\YQ\K`K X_W K\[_S`Y `SK \ONS\OMSYXKWOX^Y K] \OQ\K] [_O `YM M\SY_$ ZY\ ObOWZVY vSZMRKSX]]K`O ( hPS\OaKVV^O]^KNYv O`SNOX^OWOX^O `YM ZYNO _]K\ Y XYWO [_O NO]OTK\ 4£ Y SZMRKSX]\O]^Y\O \O]^K_\K K] \OQ\K] Q\K`KNK] ZOVY SZMRKSX]]K`O$ vSZMRKSX]\O]^Y\O & hPS\OaKVV ^O]^KNYv :K\K ObOM_^£VY] ¤ XOMO]]£\SY Y] Z\S`SV¤QSY] NO _]_£\SY \YY^9_^\Y\OM_\]YW_S^Y¦^SV¤KMKZKMSNKNONY3ZMRKSX]NOKQ\_ZK\ `£\SK] \OQ\K] X_W MRKSX -YWY `SWY] Y Z\YQ\KWK ^OW ^\ ] MRKSX] L£]SMY] MRKWKNY] L_SV^SX MRKSX] O]^ÁY OWL_^SNY] XY Z\YQ\KWK ]O K]]SWZYNOWY]^\KN_dS\+PVKQ_]KNK¤v8v.SQS^KWY]$ >URRW#DOSKD >URRW#DOSKD >URRW#DOSKD >URRW#DOSKD
@ @ @ @
LSFKDLQV LSFKDLQV LSFKDLQV LSFKDLQV
1 $ $ $
QDRXGS LQSXW L HWK M QDRXGS QDRXGS S XGS V M '(1< QDRXGS S XGS V M 5(-(&7
HWF HWF
+]]SWKQ\_ZKWY]]YLYXYWOvXKY_NZv_WMYXT_X^YNO\OQ\K]:YNOWY] MYWYSZMRKSX]]K`OMYWY`SWY]Q\K`£VK]OOXPSW\O]^K_\£VK] /XMO\\KXNY @KWY] KXKVS]K\ _W MOX£\SY MV£]]SMY OW \ONO] W¤NSK] W_S^Y Z\O]OX^O XY] NSK] K^_KS] >OXRK OW WOX^O _WK SX^\KXO^ MYW _W ]O\`SNY\ YPO\OMOXNY `£\SY] ]O\`SY] ^´ZSMY] AOL 0>: O^M MYXOM^KNY] K _WK W£[_SXK PS\OaKVV 6SX_b O O]^O ZY\ ]_K `Od K _W \Y^OKNY\ MYW _WK VSXRK NONSMKNK 9L]O\`O Y] 3:] XK XY]]K \OZ\O]OX^KÁY$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
28
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
ROTEADOR - 200.255.210.0 =>
FIREWALL - 200.255.210.1
¦ SERVIDOR Linux {[eth0] 200.255.210.2 {[eth1] 172.16.0.0
¦
INTRANET
{ 192.168.0.1, 192.168.0.2 , etc.}
@OTKWY]K]MYXPSQ_\KÉO]$
No Firewall... Desligamos os serviços desnecessários, deixando o SSH para conexão remota com o servidor somente. E vamos proteger nossa intranet... ipchains -A input -p tcp -s 172.16.0.0 -j DENY ipchains -A input -p tcp -s 192.168.0.1/10 -j DENY ipchains -A input -p tcp -s ! 200.255.210.2 ssh -j DENY
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
29
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
No Servidor... Como nosso servidor irá ter serviços da Internet públicos precisamos liberálos... ipchains -A input -p tcp -s 0.0.0.0/0 -d 255.210.02 www -j ACCEPT ipchains -A input -p tcp -s 0.0.0.0/0- -d 255.210.02 ftp -j ACCEPT Inclua aqui todos os serviços que serão oferecidos... ipchains -A input -p tcp -s 192.168.0.1/10 -j DENY (Fechando nossa intranet...) ipchains -A input -p tcp -i lo -j ACCEPT (Abrindo interface 'lo'...) ipchains -P forward DENY ipchains -A forward -s 192.168.0.1/10 -d 200.255.210.2 -j MASQ (Usando a técnica do mascaramento de IPs...)
-Ou seja: qualquer faixa de IPs... ?WKZKVK`\K]YL\OY^¥ZSMYNOWK]MK\KWOX^YNO3:]3:WK][_O\KNSXQ +Y MYXPSQ_\K\WY] Y 3ZMRKSX] ZK\K _]K\ Y KV`Y 7+=; MYW K PVKQ vT 7+=;v ZY]]SLSVS^KWY] [_O _W Y_ WKS] OXNO\OY] 3:] PKV]Y] Y_ Z\S`K^S`Y]ZY]]KW]O\_]KNY]XKOb^\KXO^8YXY]]YObOWZVY^YNY]Y] OXNO\OY] NO XY]]K SX^\KXO^ KZK\OMOW _]KXNY Y 3: NY ]O\`SNY\ :K\K ^KX^Y XÁY ]O O][_OK NO MYXPSQ_\K\ Y K\[_S`Y O^M]c]MYXPSQ KNSMSYXKXNY vPY\aK\NISZ` ' cO]v =O `YM XÁY ONS^K\ YK\[_S`Y^O\£[_OKMSYXK\Y3:PY\aK\NSXQWKX_KVWOX^O/bOWZVY]O ^OX^K\ OPO^S`K\ Y 3: MRKSX] PY\aK\N ]OW K VSXRK KM\O]MSNK ^O\OS Y ]OQ_SX^OOWWSXRK^OVK$ >URRW#DOSKD @ LSFKDLQV $ IRUZDUG S WFS V G M $&&(37 :DUQLQJ \RX PXVW HQDEOH ,3 IRUZDUGLQJ IRU SDFNHWV WR EH IRUZDUGHG DW DOO 8VH HFKR ! SURFV\VQHWLSYLSBIRUZDUG
Õ
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
30
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
>URRW#DOSKD @
Basta seguir a orientação (observe a seta). Este comando irá ativar o IP forwarding. E, então, os ZKMY^O] ZYNO\ÁY ZK]]K\ K^\K`¤] NY RY]^ KVZRK ZK\K Y NO]^SXY NO]OTKNY/]^K]^¤MXSMK]^Y\XKW]OZYNO\Y]K][_KXNYO]^KLOVOMSNK]OW MYXT_X^YMYWK]\Y^K]NO\ONOQK^OaKc]O^M:Y\¤W]ÁY^¥ZSMY][_O PYQOWNYO]MYZYNO]^ONYM_WOX^Y +LKSbY_WKVS]^KNK]YZÉO]NY]YP^aK\O3ZMRKSX]:K\K_WKVS]^KQOW MYWZVO^K_]OYv3:-RKSX];_SMU
8VR
LSFKDLQV LSFKDLQV LSFKDLQV LSFKDLQV LSFKDLQV LSFKDLQV LSFKDLQV
>$'&@ FKDLQ UHJUDHVSHFLILFDGD >RSo}HV@ >5,@ FKDLQ QGDUHJUD UHJUDHVSHFLILFDGD >RSo}HV@ ' FKDLQ QGDUHJUD >RSo}HV@ >/)=1;@ >FKDLQ@ >RSo}HV@ 3 FKDLQ DOYR >RSo}HV@ 0 > / _ 6 @ >RSo}HV@ K >LFPS@ PRVWUD LQIRUPDomR GH DMXGD RX OLVWD ,&03
&RPDQGRV 3HUPLWHVH DGG GHOHWH GHOHWH
D IRUPD ORQJD RX FXUWD $ FKDLQ $FUHVFHQWD FKDLQ ' FKDLQ ([FOXL UHJUD ' FKDLQ QGDUHJUD H[FOXL UHJUD QGDUHJUD SULPHLUD GR FKDLQ LQVHUW , FKDLQ >QGDUHJUD@ ,QVHUH QR FKDLQ FRPR QGDUHJUD SDGUmR SULPHLUR UHSODFH 5 FKDLQ QGDUHJUD 6XEVWLWXL UHJUD QGDUHJUD SULPHLUD QR FKDLQ OLVW / >FKDLQ@ /LVWD UHEUDV QXP FKDLQ RX WRGRV RV FKDLQV IOXVK ) >FKDLQ@ ([FOXL WRGDV UHJUDV QR FKDLQ RU WRGRV RV FKDLQV ]HUR = >FKDLQ@ =HUD RV FKDLQV FKHFN & FKDLQ 7HVWD XP SDFRWH QXP FKDLQ QHZ 1 FKDLQ &ULD XP QRYR XVHUGHILQHG FKDLQ
GHOHWHFKDLQ ; FKDLQ ([FOXL XP XVHUGHILQHG FKDLQ
SROLF\ 3 FKDLQ DOYR 0XGD D SROtWLFD QXP FKDLQ SDUD WDO DOYR PDVTXHUDGH 0 / /LVWD DV FRQH[}HV PDVFDUDGDV DWXDLV VHW 0 6 WFS WFSILQ XGS 3}H YDORUHV GH WLPHRXW SDUD PDVFDUDPHQWR
2So}HV ELGLUHFWLRQDO E LQVHUH GXDV UHJUDV XPD FRP V G LQYHUWLGR SURWR S >@ SURWR SURWRFROR SHOR Q RU QRPH H[ CWFS
VRXUFH V >@ HQGHUHoR>PDVF@ >@ >SRUWD>SRUWD@@ RULJHP HVSHFLILFDomR VRXUFHSRUW >@ >SRUWD>SRUWD@@ RULJHP SRUWD HVSHFLILFDomR GHVWLQDWLRQ G >@ HQGHUHoR>PDVF@ >@ >SRUWD>SRUWD@@ GHVWLQR HVSHFLILFDomR GHVWLQDWLRQSRUW >@ >SRUWD>SRUWD@@ GHVWLQR SRUWD HVSHFLILFDomR LFPSW\SH >@ WLSR HVSHFLILFD WLSR GH ,&03 &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
31
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
LQWHUIDFH MXPS
M
PDUN P QXPHULF Q ORJ RXWSXW R 726 YHUERVH Y H[DFW [ >@ IUDJPHQW >@ V\Q \ >@ YHUVLRQ
L >@ QRPH>@ QRPH GD LQWHUIDFH GH UHGH >@ SDUD FXULQJD DOYR >SRUWD@ DOYR SDUD D UHJUD >SRUWD@ SDUD 5(',5(&7 >@PDUN Q SDUD PDUN QR SDFRWH FRUUHVSRQGHQWH VDtGD QXPHULFD GH HQGHUHoRV H SRUWDV O KDELOLWD UHJLVWUR ORJ QR NHUQHO >WDPDQKRPD[@ VDtGD GH SDFRWH SDUD GLVSRVLWLYR QHWOLQN
W H [RU H[RU PDVFiUDV SDUD 726 PRGR YHUERVH
H[SDQGH Q~PHURV PRVWUD YDORUHV H[DWRV I FRPELQD VRPHQWH R VHJXQGR RX PDLV IUDJPHQWRV FRPELQD SDFRWHV 7&3 VRPHQWH TXDQGR FRQILJXUD 6<1
9 PRVWUD YHUVmR
2.6 The SINUS Firewall - a TCP/IP packet filter for Linux @O\OWY] KQY\K _WK Y_^\K ]YV_ÁY NO QO\OXMSKWOX^Y NO PS\OaKVV OW KWLSOX^O6SX_b8ÁYPK\OWY]MYWZK\KÉO]OX^\OY3ZMRKSX]OY=38?= 9Z\SWOS\YT£_WZ\YN_^YZ\YX^YZK\KP_XMSYXK\Y]OQ_XNY_WZ\YN_^Y OW KWZVY NO]OX`YV`SWOX^Y :OVY WOXY] K `O\]ÁY [_O PYS NO]OX`YV`SNK ZK\K Y UO\XOV b NY 6SX_b" 9 =38?= 0S\OaKVV ]P 0S\OaKVV¤_WZ\YTO^YNK?XS`O\]SNKNONOD_\S[_OMYWYMYXM_\]YNK =A3>-2 NK >OVOU_\] :Kc]O\` +1 O NK />2 D®\SMR NO]OX`YV`SNY ZY\
http://www.ifi.unizh.ch/ikm/SINUS/firewall.html ftp://ftp.ifi.unizh.ch/pub/security/firewall 9] NO]OX`YV`ONY\O] KN`O\^OW NY O]^KNY NO NO]OX`YV`SWOX^Y NY ]YP^aK\O :Y\^KX^Y OVO XÁY ]O\ _]KNY KSXNK ZK\K K ]OQ_\KXK NO \ONO] MYW NKNY] M\´^SMY] +N`O\^OW KSXNK$ _]OY ZK\K KZ\OXNSdKNY O ]O`YM XÁY^OWXOXR_WPS\OaKVVY_XÁYMYXPSKXY[_O^OW 1
Há uma versão estável para versões de kernel mais antigos.
9]K]ZOM^Y]ZY]S^S`Y]NYZ\YQ\KWKO]^ÁYXY]O_WYNYNOK^_KÁY/VO ^\KLKVRK
MYW
_W
K\[_S`Y
NO
MYXPSQ_\KÁY
vO^MPS\OaKVVNPS\OaKVVMYXPv%KYMK\\OQK\OVOV K]MYXPSQ_\KÉO] K´O]^YMKNK]2£KSXNKMYWYZKMY^O ]SPS^K\Qd _W ]O\`SNY\ Y ]YP^aK\O ZK\K PS\OaKVV Z\YZ\SKWOX^O NS^Y O _W MVSOX^O O]M\S^Y 8
Há uma versão estável para versões de kernel mais antigos. &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
32
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
OW 4K`K _WK SX^O\PKMO ZK\K PKMSVS^K\ K ONSÁY NY PS\OaKVVMYXP MRKWKNY 0S\OaKVV -YX^\YV :KXOV 2£ Y_^\Y]]SW K MYX^\SL_SÁY NO ,OXONSM^ >\OPdO\ ZK\K K VOS^_\K] NY] VYQ] QO\KNY] ZOVY =38?= ?WK PO\\KWOX^KLK]OKNKOW2>76OW=;6 -YWY XÁY R£ ZKMY^O] <:7 XOW LSX£\SY] >+<1D3: MYW =38?= ^O\OWY] [_O ZK]]K\ Y] ZK]]Y] NO MYWZSVKÁY NY ]YP^aK\O 7O]WY ZY\[_O R£ NO^KVRO][_OXÁYZYNOW]O\XOQVSQOXMSKNY]ZOVYKV_XY 4£`SWY][_O_WPS\OaKVVXY6SX_b¤SWZVOWOX^KNYOWX´`OVNOUO\XOV 9 K\[_S`Y v+.7/v NY =38?= KN`O\^O Y _]_£\SY NK XOMO]]SNKNO NO \OMYWZSVKÁY
NY
UO\XOV
>KWL¤W
T£
WOXMSYXKWY]
[_O
`£\SK]
NS]^\SL_SÉO] 6SX_b T£ `OW MYW Y UO\XOV Z\YX^Y] ZK\K PS\OaKVVSXQ :Y\MYX]OQ_SX^OMO\^Y]NS]]YXÁY]OPKdXOMO]]£\SY\OMYWZSVK\^YNY Y UO\XOV 8Y OX^KX^Y ZK\K K MYWZSVKÁY NY =38?= Z\OMS]KWY] NO ]YWOX^O _W K\[_S`Y NK] PYX^O] NY UO\XOV ?W YLTOM^ PSVO _]KNY XY vVSXUv ZK\K QO\K\ Y ObOM_^£`OV NY Z\YQ\KWK ]OW OVO K MYWZSVKÁY PKVRK\£7K]^OWY]_WKNSMKZK\K\O]YV`O\YZ\YLVOWK% -O\^SPS[_O]O [_O `YM ^OW OW ]_K W£[_SXK _W KWLSOX^O NO NO]OX`YV`SWOX^Y SX]^KVKNY QMM ROKNO\] PSVO] O^M .OZYS] SX]^KVO Y K\[_S`Y [_O `OW MYW K] PYX^O] NY UO\XOV$ UO\XOV]Y_\MO S" \ZW.SQS^OY]OQ_SX^O$
>URRW#DOSKD >URRW#DOSKD >URRW#DOSKD >URRW#DOSKD
@ FG XVUOLEOLQX[DUFKLOLE OLE@ JFF 'BB$66(0%/
Õ [atenção]
×
9L]O\`O K ObS]^ XMSK NY K\[_S`Y [_O NO]OTKWY]$ Y vMROMU]_WYv9 +QY\K ZYNOWY] NO]MYWZKM^K\ Y K\[_S`Y MYW K] PYX^O] NY =38?= ]_Z\K MS^KNY /]MYVRK _W NS\O^¥\SY K ]O_ QY]^Y =O `YM ZY]]_S Y 4.5 b O Y ZKMY^O =A381 R^^Z$aaaTK`K]_XMYW ZYNO MYWZSVK\ Y 9
Se você optar por recompilar o kernel, não execute o 'make clean' no fim do processo! Pois sabidamente ele apagará todos os arquivos *.o gerados... &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
33
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
]P -YX^\YV :KXOV =O NO]OTK\ ONS^O Y] ZK^R] XY NS\O^¥\SY vMVSOX^7KUOPSVOSXv ZK\K KT_]^K\ Y MKWSXRY ZK\K K] MVK]]O] 4K`K 2£
_WK
`O\]ÁY
XÁYYPSMSKV
T£
MYWZSVKNK
XK
Z£QSXK
R^^Z$aaa]SX_]PS\OaKVVY\Q NY MVSOX^O NY -YX^\YV :KXOV ZYNO ]O\ _WK LYK YZÁY ]O `YM ^S`O\ Z\YLVOWK] MYW Y 4.5 MYW K] MVK]]O] =A381Y_WO]WY]OXÁYNO]OTK\MYWZSVK\OWKWLSOX^O4K`K /bOM_^OOX^ÁYXYNS\O^¥\SYKYXNO`YM SX]^KVY_K]PYX^O]$ MYXPSQ_\O WKUOevWKUOMVSOX^v]YWOX^OQO\K\£Y]P-YX^\YV:KXOV evWKUO]O\`O\v]YWOX^OQO\K\£Y]O\`SNY\ +X^O] NY WKUO SX]^KVV `YM NO`O M\SK\ _W XY`Y v_]_£\SYv MRKWKNY PS\OaKVV KNSMSYXKXNY K ]OQ_SX^O VSXRK OW ]O_ K\[_S`Y vO^MZK]]aNv _]O_W_]O\SNOQ\Y_ZSNNO]YM_ZKNY]$ firewall:x:888:888::/dev/null:/bin/false
+Z¥] M\SO _W XY`Y Q\_ZY ^KWL¤W MRKWKNY PS\OaKVV KNSMSYXKXNY O]^K] VSXRK] XY ]O_ K\[_S`Y vO^MQ\Y_Zv XÁY ]O O][_OK NO OPO^_K\ _W LKMU_ZXY]K\[_S`Y]KV^O\KNY]$ firewall:x:888:
0OS^YS]]YKSX]^KVKÁYZYNO]OQ_S\ WKUOSX]^KVVeZYNO]O\vWKUO]O\`O\ISX]^KVVv 9?vWKUOMVSOX^ISX]^KVVv + SX]^KVKÁY ZY\ ZKN\ÁY O ^KWL¤W ]O K MYWZSVKÁY ^\KX]MY\\O_ XY\WKVWOX^O ZÉO Y] ]OQ_SX^O] K\[_S`Y] NY ]O\`SNY\ XY WYWOX^Y XY]YM_ZK\OWY]MYWOVO]KZOXK]XO]^O]NS\O^¥\SY]$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
34
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
_]\VYMKV]LSX]PMKMMY_X^ _]\VYMKV]LSX]PMÖYNKOWYX `K\VYQPS\OaKVV { 'LOGS': arquivos de registros... `K\VYQPS\OaKVV]Zc `K\VYQPS\OaKVV\OZY\^ O^MPS\OaKVVNe\O]O\`KNYZK\KY]K\[_S`Y]PS\OaKVVMYXP OPS\OaKVVZK]]aN VSLWYN_VO]WS]M]PYÖ_WWYN_VYSX]^KV£`OV
@KWY] SXSMSK\ Y =38?= 0S\OaKVV :K\K S]]Y Z\OMS]KWY] NO _WK MYXPSQ_\KÁY ZYS] Y NS\O^¥\SY vO^MPS\OaKVVNv O]^£ `KdSY KZ¥] Y vWKUOSX]^KVVvPKV^KYK\[_S`YPS\OaKVVMYXP.OZYS][_OONS^K\_WK MYXPSQ_\KÁYKYXY]]YQY]^YOXOMO]]SNKNO]SX]^KVKWY]YWYN_VY10MYW vSX]WYNVSLWYN_VO]WS]M]PYv.OZYS]NKWY]ZK\^SNKXYNKOWYX$
>URRW#DOSKD @ LQVPRG OLEPRGXOHVPLVFVIR >URRW#DOSKD @ XVUORFDOVELQVIF VWDUW ,QLWLDOL]LQJ GDHPRQ 1R VRFNHW VHFXULW\ ILUHZDOOWRILUHZDOO FRPPXQLFDWLRQ GLVDEOH B >URRW#DOSKD @ ;_KXNY Y NKOWYX v]PMv N£ ZK\^SNK OVO V K ]_K MYXPSQ_\KÁY O ObOM_^KK]\OQ\K]NO]OTKNK]NOPS\OaKVV?W K]ZOM^Y SX^O\O]]KX^O NY Z\YQ\KWK NKOWYX ¤ [_O OVO MROMK K] SXMYX]S]^ XMSK] ZY]]´`OS] MYX^SNK] XY PS\OaKVVMYXP$ ^KX^Y NO \OQ\K] [_KX^Y O\\Y] NO NSQS^KÁY=OS]]YKMYX^OMO\OVOZ£\KONO`YV`O_WZK\]OO\\Y\KY _]_£\SY -RO[_O ^KS] SXMYXQ\_ XMSK] O \OZS^K Y Z\YMO]]Y ;_KX^Y K 10
Consulte a documentação diponível a respeito dos módulos instaláveis no Linux, ou mesmo as páginas manuais ('man lsmod', 'man insmod', 'man rmmod'). &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
35
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
WOX]KQOWOMYKNKXY]YMUO^]OM_\S^cXÁY]OZ\OYM_ZOOVKKZK\OMO [_KXNYY=38?=¤MYWZSVKNY]OWYZ\YQ\KWK/8]USZ/VOZY]]SLSVS^KK MYXObÁY M\SZ^YQ\KPKNK OX^\O PS\OaKVV] 7K] MYWY ^OWY] Y ==2 ZK\K O]]O SX^OX^Y ZYNOWY] KL\S\ NO ^KV ]_ZY\^O 2£ ^KWL¤W ]¤\SY] Z\YLVOWK]
NO
MYWZSVKÁY
NY
/X]USZ
P^Z$P^Z^SUOOO^RdMRZ_LZKMUKQO]]USZXY6SX_b :K\KNO]VSQK\Y=38?=\OWY`KYWYN_VYNKWOW¥\SKv\WWYN]PYvO ZK\OYNKOWYXMYWYMYWKXNYv_]\VYMKV]LSX]PM]^YZv ;_KXNYNYNOL_QNOXY]]KMYXPSQ_\KÁYO]^S`O\Z\YX^YOO]^S`O\WY] ]K^S]POS^Y] MYW K WYX^KQOW NK] \OQ\K] NY PS\OaKVV ZYNOWY] _]K\ _W ]M\SZ^ZK\KSXSMSK\YXY]]YNKOWYXv]PMv+LKSbYO]^£_WObOWZVYNO _W ]M\SZ^ [_O _]KWY] OW XY]]K \ONO ZYNO]O KNKZ^£VY §] WKS] NS`O\]K]]S^_KÉO]$
6FULSW SDUD LQLFLDU GDHPRQ GR 6,186 )LUHZDOO H LQVWDODU PRGXOR VIR
-DQHLUR GH 8VDGR QXP 6LVWHPD /LQX[ 5HG +DW NHUQHO -=--=- -=--=--=--=--=--=--=--= --= HWFUFGLQLWGIXQFWLRQV ,QLFLD DTXL R VFULSW IXQFWLRQV FDVH LQ VWDUW JSULQWI 6WDUWLQJ V VI )LUHZDOO LI WHVW U YDUUXQVIFSLG NLOO CFDW YDUUXQVIFSLGC WKHQ JSULQWI V H[LVWV V DOUHDG\ UXQQLQJ?Q ? YDUUXQVIFSLG VIF HOVH VELQLQVPRG OLEPRGXOHVPLVFVIR XVUORFDOVELQVIF VWDUW HFKR VIF IL WRXFK YDUORFNVXEV\VVIF VWRS JSULQWI 6WRSSLQJ V VI )LUHZDOO XVUORFDOVELQVIF VWRS JSULQWI 5HPRYLQJ 6,186 PRGXOH VELQUPPRG VI UP I YDUUXQVIFSLG UP I YDUORFNVXEV\VVIF HFKR VIF UHVWDUW VWRS VWDUW VWDWXV VWDWXV VIF &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
36
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
HVDF
XVUORFDOVELQVIF VKRZ JSULQWI 8VDJH V ^VWDUW_VWRS_VWDWXV_UHVWDUW`?Q VIF H[LW
H[LW @KWY]KQY\KKXKVS]K\KMYX]^\_ÁYNOXY]]K]\OQ\K]NOPS\OaKVV[_O PSMK\KW MYX^SNK] XY PS\OaKVVMYXP 9] K_^Y\O] MYVYMKW XY NS\O^¥\SY v]KWZVO]v[_K^\YK\[_S`Y]NOMYXPSQ_\KÁY§^´^_VYNOObOWZVYZK\K [_OYKNWSXS]^\KNY\O]^_NOY]$
¬ CheswickBellovin.conf ¬ MediumEnterprise.conf ¬ SimpleSample.conf ¬ SmallBusiness.conf -YX]_V^OY] NOZYS] NO NYWSXK\ K] ^¤MXSMK] NO PS\OaKVVSXQ 9] XYWO] NY]K\[_S`Y]T£NOWYX]^\KWY]O_SX^OX^Y=YWOX^OYZ\SWOS\Y^KV`Od XÁY Y ]OTK ;_OW XÁY O]^£ PKWSVSK\SdKNY MYW K LSLVSYQ\KPSK ]YL\O ]OQ_\KXK ZYNO XÁY MYXROM VY]$ A < -RO]aSMU O = 7 ,OVVY`SX ]ÁY K_^Y\O] NO _W MV£]]SMY ]YL\O Y ^OWK MRKWKNY 0S\OaKVV] KXN 3X^O\XO^ =OM_\S^c$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
37
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
UXOHV EORFN WFS WR SRUW OLQN SRUW VXSGXS QRWLILFDWLRQBOHYHO EORFN RSWLRQV ORRVHBVRXUFHBURXWH VWULFWBVRXUFHBURXWH DOO QRWLILFDWLRQBOHYHO GHWHFWD URWDV VHFXQGiULDV SDUD D ,QWHUQHW EORFN ULS IURP LQVLGH QRWLILFDWLRQBOHYHO 3HUPLWH D HQWUDGD GH UHTXLVLo}HV )73 SDUD QRVVR VHUYLGRU )73 DFFHSW WFS WR SRUW QRWLILFDWLRQBOHYHO DFFHSW WFS WR SRUW QRWLILFDWLRQBOHYHO 3HUPLWH D HQWUDGD GH UHTXLVLo}HV )73 SDUD R VHUYLGRU 7HOQHW/RJLQ DFFHSW WFS WR SRUW QRWLILFDWLRQBOHYHO DFFHSW WFS WR SRUW QRWLILFDWLRQBOHYHO DFFHSW DOO IURP WR QRWLILFDWLRQBOHYHO EORTXHLD
TXDOTXHU RXWUD UHTXLVLomR 7&3 H VRD R DODUPH
EORFN WFS QRWLILFDWLRQBOHYHO QRWLILFDWLRQ OHYHO UHJLVWUD WRGDV DV FKHJDGDV GH FRQH[mR )73 SHUPLWLGDV PHVVDJH 5HTXLVLFDR GH FRQH[DR )73 OHYHO UHJLVWUD WRGDV DV FKHJDGDV GH FRQH[mR 7HOQHW SHUPLWLGDV PHVVDJH 5HTXLVLFDR GH FRQH[DR 7HOQHW OHYHO UHJLVWUD WRGDV DV FKHJDGDV GH FRQH[mR ::: SHUPLWLGDV PHVVDJH 5HTXLVLFDR GH FRQH[DR ::: OHYHO UHJLVWUD WRGDV DV FKHJDGDV GH FRQH[mR 66+ SHUPLWLGDV PHVVDJH 5HTXLVLFDR GH 6HFXUH VKHOO OHYHO PHVVDJH 5HGLUHFLRQDPHQWR ,&03 UHFHELGR OHYHO PHVVDJH +D XPD URWD VHFXQGiULD SDUD D ,QWHUQHW OHYHO PHVVDJH 3DFRWH ,3 FRP RSFDR BVRXUFH URXWHB GHWHFWDGD OHW VUVRXUFHKRVW VUVRXUFHKRVW WLPHRXW LI VUVRXUFHKRVW WKHQ PHVVDJH 3DFRWH ,3 FRP RSFDR BVRXUFH URXWHB GHWHFWDGD VS\ HQGLI OHYHO PHVVDJH &RQH[DR 7&3 LOHJDO OHW LOOWFSVRXUFHKRVW LOOWFSVRXUFHKRVW WLPHRXW LI LOOWFSVRXUFHKRVW WKHQ PHVVDJH &RQH[DR 7&3 LOHJDO PDLO VS\ HQGLI OHYHO 'HVOLJD ,17(5)$&( (7+ H[HF LIFRQILJ HWK GRZQ &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
38
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
HQG
9PS\OaKVVMYXPZY]]_S^\ ]LVYMY]NOMYXPSQ_\KÁY]ÁYOVO]$
¾ SETUP ¾ RULES
(pode-se usar também PRIMARY_RULES)
¾ NOTIFICATION /X^\OY]LVYMY]NOMYXPSQ_\KÁYZYNOWY]^O\ MYWOX^£\SY] KMOS^KXNY Y ]´WLYVY Y_K]LK\\K]^\KNSMSYXKS]NY- 9 LVYMY =/>?: ¤ LOW M_\^Y K´ MYVYMKWY] K SXPY\WKÁY ]YL\O XY]]K ^YZYVYQSK NO \ONO SX^O\XKVXO^] ZK\K ^\KLKVRK\ MYX^\K Y SZ ]ZYYPSXQVS]^KXNYK]]SWXY]]KSX^\KXO^9]3:] NO`OW ]O\ ]OZK\KNY] ZY\`´\Q_VK]O^O\WSXKNY]MYWv%v:YNO]OK[_S^KWL¤WO]ZOMSPSMK\Y XO^WK]U$ v# " WK]U v =OQ_O]O NOZYS] K SXPY\WKÁYNY]OXNO\OY]_]KNY]WKSVINOPK_V^ZOVY=38?=ZK\K Y O`OX^_KV OX`SY NO OWKSV] MYVY[_O [_KX^Y] NO]OTK\ ]OZK\KXNYY] ZY\`´\Q_VK] 9 LVYMY 6/= ¤ Y Z\SXMSZKV NY K\[_S`Y 8O]^K ]OÁY K] VSXRK] MYWOKW YL\SQK^Y\SKWOX^O MYW K] ZKVK`\K]$+--/:> KMOS^K Y] ZKMY^O] OX`SKNY],69-59MY\\O]ZYXNOX^OKY./8CNY 3ZMRKSX] KLKXNYXK Y] ZKMY^O] ]OW WKSY\O] MYX]SNO\KÉO] 4/-> \OTOS^K QO\KXNY T_]^SPSMK^S`KO9,=/<@/MYX]^\_´NKZK\KQO\S\Y]VYQ]NY=38?=+ \SQY\ XÁY KMOS^K XOW \OM_]K WK] NOSbK K NOMS]ÁY ZK\K K Z\¥bSWK \OQ\K :Y\ PSW K \OQ\K] ]ÁY NS\OMSYXKNK] ZK\K _W X´`OV NO XY^SPSMKÁY [_O ]O OXMYX^\K XY ¦V^SWY LVYMY O ^O\WSXKNK] MYW _W v%v9]MYXMOS^Y]]ÁYLK]SMKWOX^OY]WO]WY]NY3ZMRKSX]O`YM NO`O ^\KdO\ Y] ]O_] MYXROMSWOX^Y] 9 [_O W_NK ¤ ]SX^KbO XK] VSXRK] NO MYXPSQ_\KÁY:YNO\]OSK\O]_WSVKK]]SW$ [regra] proto. IP (de) porta XX IP (para) porta XX -> nível de notificação &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
39
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
DFFHSW WFS WR SRUW QRWLILFDWLRQBOHYHO ;_KV \OQ\K O]^KLOVOMO]O K[_S) +MOS^KWY] ZKMY^O] >-: NY 3: # " Z\Y`OXSOX^O] NK ZY\^K O ]O OX^\KW Y] ZKMY^O] ObOM_^K]OYXY^SPSMK^SYXIVO`OVNOX¦WO\Y;_OO]^KLOVOMO$
OHYHO PHVVDJH 5HTXLVLFDR GH 6HFXUH VKHOO /X`SKZK\KYK\[_S`YNO\OQS]^\YNY=38?=OWv`K\VYQPS\OaKVVvK SXPY\WKÁY[_ORY_`O_WK\O[_S]SÁYXKZY\^K +VQ_WK] YL]O\`KÉO] KSXNK ]YL\O Y] ZK\WO^\Y] NY K\[_S`Y$ ZYNOWY] O]^KLOVOMO\ _WK \OQ\K ZK\K ^YNY] Y] Z\Y^YMYVY] KMOS^Y] MYW K PVKQ vKVVv^KWL¤WO]^KLOVOMO\PKSbK]NOZY\^K]bbbbOMYXPSQ_\K\K] PKSbK] NO OXNO\OY] _]KXNY v^Y P\YWv vNY 3: ^KV ZK\K Y 3: ^KVv/bOWZVY$ EORFN DOO WR QRWLILFDWLRQBOHYHO
SRUW
IURP
9_^\YZK\WO^\YSWZY\^KX^´]]SWY¤vSX]SNOv[_OXÁY KZK\OMO OW XY]]Y K\[_S`YObOWZVY 3X]SNO ¤ XY]]K SX^\KXO^ NOPSXSNK MYWY `SWY] XK PVKQSX^O\XKVXO^]/VO¤MYWLSXKNYMYWYZK\WO^\Yv^YP\YWv /OX^ÁY]OO]^KLOVOYZY\ObOWZVY$
EORFN WFS IURP LQVLGH WR SRUW QRWLILFDWLRQBOHYHO ,VY[_OSY [_KV[_O\ ZKMY^O >-: NO WSXRK SX^\KXO^ ZK\K Y 3: :Y]]Y SX`O\^O\ vSX]SNOv _]KXNY vY_^]SNOv S]^Y ¤ [_KV[_O\3:PY\KNOWSXRKSX^\KXO^
EORFN WFS IURP RXWVLGH WR SRUW QRWLILFDWLRQBOHYHO
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
40
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
:Y\PSWYLVYMY89>303-+>3988O]^K]OÁYMKNKX´`OVNOXY^SPSMKÁY ]O\£O]^KLOVOMSNYX_WZK\£Q\KPY3XSMSKXNY]OMYWKZKVK`\KvVO`OVv ]OQ_SNY NO _W X¦WO\Y SNOX^SPSMKNY\ O v$v :YNO]O O]ZOMSPSMK\ K] KÉO] XOMO]]£\SK] K ]O\OW SWZVKX^KNK] 9 X´`OV NO XY^SPSMKÁY P_XMSYXKOWX´`OVNO]M\SZ^/WZ]O_NYM¥NSQYPSMK\SK$ SE determinadas circunstâncias ocorrem... Mande uma MENSAGEM... E CHAMA (call) o Nível 900
Ø NÍVEL 900 Se as circunstâncias ocorrem 10 vezes DESLIGUE A INTERFACE ETH0!
» MVK\Y [_O NOWY] _W ObOWZVY \KNSMKV @OTKWY] Y_^\Y MK]Y >YNY KMO]]YKYWO_]O\`SNY\>OVXO^OW_WKY_WKS]RY]^]\ONS\OMSYXYZK\K _WX´`OVNOXY^SPSMKÁY$
OHYHO PHVVDJH ´6ROLFLWDFDR GH VHVVDR 7(/1(7 QD SRUWD µ FDOO -YWKVSXRKvMKVV"v\OOX`SYZK\K_WK]_L\Y^SXKYvVO`OV"v OWWO_PS\OaKVVMYXP9XNO$
OHYHO OHW FRQQHFWLRQVVRXUFHKRVW FRQQHFWLRQVVRXUFHKRVW WLPHRXW LI FRQQHFWLRQVVRXUFHKRVW ! WKHQ UHSRUW PHVVDJH ´$OJXHP HVWD WHQWDQGR DWLYDU PDLV GH FRQH[RHV 7HOQHWµ ´%ORTXHDQGR DFHVVR SRU VHJXQGRVµ EORFN DOO IURP VRXUFHKRVW QRWLILFDWLRQBOHYHO WLPHRXW FDOO HQGLI /]MVK\OMOXNY$ K ZKVK`\K vVO^v [_O SXSMSK K P\K]O ZYNO O]^KLOVOMO\ Y_
W_NK\
Y
`KVY\
NO
_WK
`K\S£`OV
8K
]OX^OXK
vMYXXOM^SYX]$]Y_\MORY]^vYZ\SWOS\Y^O\WY¤K`K\S£`OVO]Y_\MORY]^ ^KX^Y [_KX^Y NO]^RY]^ P_XMSYXK MYWY _W [_KVSPSMKNY\ -YXPSQ_\KWY] [_O ]O XY]]Y ]O\`SNY\ \OMOLO\ WKS] NY ( MSX[_OX^K MYXObÉO] NO _W OXNO\OY 3: Y ]Y_\MORY]^$ OX`SY WOX]KQOW KY VYQ LVY[_OSY NO &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
41
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
KMO]]YKYOXNO\OY3:NOY\SQOWZY\]OQ_XNY]O`KWY]ZK\KK]_L \Y^SXK9KV_XYZYNOMYX]_V^K\YWKX_KV2>76[_OXY]\OPO\SWY] ZK\K MROMK\ K] SX^O\O]]KX^O] YZÉO] NO ]M\SZ^ [_O Y =38?= YPO\OMO =ÁY O]^K] K] YZÉO] NO ]M\SZ^ [_O ZYNOW ]O\ _]KNK] XY LVYMY XY^SPSMK^SYXIVO`OV$ 7/==+1/$ .OPSXOKWOX]KQOWK]O\OX`SKNKZK\KYK\[_S`YNO\OQS]^\YO^KWL¤W ¤_]KNYXYOWKSVO]ZOMSPSMKNYXYLVYMYv]O^_Zv+]WOX]KQOX]NO`OW ]O\O]M\S^K]OX^\OK]ZK] =C=691$ -YVYMKY\OQS]^\YMY\\OX^O^KWL¤WXYvVYQvNY]S]^OWK $ -YZSKY\OQS]^\YMY\\OX^OZK\KYK\[_S`YvPS\OaKVV\OZY\^v 7+36$ /X`SKOWKSVZK\KY]OXNO\OY]O]ZOMSPSMKNY]XKMYXPSQ_\KÁY =:C$ 3^OW W_S^Y SX^O\O]]KX^O 8K NOPSXSÁY NO 7_MR]OV =MRWSN K NOMVK\KÁY v]Zcv SXSMSK _W MY_X^O\ SX^OVVSQOXMO =O_ YLTO^S`Y ¤ ZK\K ]O\ MVK\Y O]ZSYXK\ Y RY]^ O Y _]_£\SY [_O O]^£ ObOM_^KXNY _WK KÁY NK [_KV ]O NO]MYXPSK 8Y XY]]Y ObOWZVY _W _]_£\SY OW _W RY]^ ^OX^Y_ PKdO\ MYXObÉO] X_W MO\^Y Z\KdY NO ^OWZY OW XY]]Y ^OVXO^ ]O\`O\:YNO\´KWY]^O\MYXPSQ_\KNYMYWv]Zcv`OTKWY]$
LI FRQQHFWLRQVVRXUFHKRVW ! WKHQ VS\ UHSRUW
Õ
3]^Y ¤ ]O RY_`O\ WKS] NO MYXObÉO] OX^ÁY MYWOMO Y v]Zcv 9 v]Zcv¤_WZ\YMO]]YNOSNOX^SPSMKÁYNO_WRY]^_]_£\SY_]KXNYY.8= ZK\K YL^O\ Y XYWO NY RY]^ Y Z\Y^YMYVY SNOX^ `£VSNY ]YWOX^O OW
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
42
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
MYXObÉO] >-: PSXQO\ O \_]O\] + MYVO^K NO]]K SXPY\WKÉO] ^OXRK OVK bS^Y Y_ XÁY `ÁY ZK\K Y VYQ MYWY PYS MYXPSQ_\KNY MYW Y v\OZY\^v ZYNO\]OSK _^SVSdK\ ^KWL¤W WKSV O OX`SK\ ZY\ K´ Y] \O]_V^KNY]NY]Zc RELEVEL: Muda o nível de notificação para a regra que causou a ação.
EXEC: Declaração bastante poderosa. Pois pode abrir um shell local e executar um comando. Assim, na certeza de um ataque efetivo podemos desligar a nossa interface de rede (eth0, eth1, etc.) com a seguinte declaração 'exec':
H[HF LIFRQILJ HWK GRZQ -+66$ -RKWKY_^\YX´`OVNOObOM_ÁYOYObOM_^K LET: Esta declaração pode mudar o valor de uma variável. O valor de timeout (em segundos) pode ser especificado no fim da declaração 'let'. Observe o exemplo abaixo:
DFFHSW LFPS LFPSBHFKR WR LQVLGH QRWLILFDWLRQBOHYHO
Ø QRWLILFDWLRQ OHYHO OHW SLQJFRXQWVRXUFHKRVW SLQJFRXQWVRXUFHKRVW WLPHRXW LI SLQJFRXQWVRXUFHKRVW ! WKHQ EORFN DOO IURP VRXUFHKRVW QRWLILFDWLRQBOHYHO WLPHRXW HQGLI ?WW£[_SXK^OX^Y__WvZSXQvZK\KKVQ_WKW£[_SXKNOXY]]KSX^\KXO^Y Z\Y^YMYVY¤3-7:/VO¤_]KNYZK\KNSKQX¥]^SMY]OMYXNSÉO]NOO\\Y X_WK \ONO 7K] O]^K W£[_SXK ObOM_^Y_ Y vZSXQv `OdO] ( NOX^\Y MYW Y ^OWZY W£bSWY NO ]OQ_XNY] ^SWOY_^ K MKNK vZSXQ]v:Y\^KX^YLVY[_OSK]OKMYXObÁYZY\ ]OQ_XNY] IF (if ... then ... endif): &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
43
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
Use como num shell script: para executar um fluxo de ações, se tal ou qual condição acontece.
9 Z\YQ\KWK ]P 0S\OaKVV -YX^\YV :KXOV `O\]ÁY ZYNO ]O\ _]KNY ZK\K K ONSÁY NY PS\OaKVVMYXP +] WO]WK] KN`O\^ XMSK] POS^K] XK] VSÉO] ]YL\O Y 3ZMRKSX] O ]_K ONSÁY `SK 6SX_bMYXP `KVOW K[_S ?W Z\YQ\KWK1?3MYWY]P-YX^\YV:KXOVZYNOKT_NK\WK]¤Z\OMS]Y]KLO\ Y [_O O]^£ PKdOXNY MYXROMO\ Y] MYXMOS^Y] O Y] P_XNKWOX^Y] NO _W PS\OaKVV OW QO\KV O NK Z\YZY]^K NY =38?= OW ZK\^SM_VK\ 9 ]P -YX^\YV :KXOV ¤ _W Z\YQ\KWK POS^Y OW 4K`K XÁY Y _^SVSdKWY] XY ASXNYa]Y_OW[_KV[_O\Y_^\KZVK^KPY\WK.OWKXOS\K[_OXÁYZYNOWY] PKdO\_WKK`KVSKÁYNO]O_]\O]_V^KNY] 9 K\[_S`Y v\_Xv [_O MRKWK Y Z\YQ\KWK ¤ _W ]M\SZ^ [_O KT_]^K Y MVK]]ZK^R 4K`K ZK\K ZY]]SLSVS^K\ K ObOM_ÁY NY Z\YQ\KWK 0KK Y] KT_]^O] ]O PY\OW XOMO]]£\SY] KL\O _WK ]O]]ÁY B^O\W O Y ObOM_^O NY NS\O^¥\SYYXNOOVOPYSSX]^KVKNY$v\_Xv+]P_XÉO]NY]P-YX^\YV ]ÁY LK]SMKWOX^O K_^YObZVSMK^S`K] 9 SX^O\O]]KX^O NY ]YP^aK\O ¤ ]_K MKZKMSNKNO NO K_^YMYXPSQ_\KÁY Y_ ]OTK `YM WYX^K\ _WK ^YZYVYQSK NO \ONO ONS^K\RY]^ Y RY]^ PS\OaKVV K \ONO OW ]S O Y KMO]]Y K 3X^O\XO^ / NOZYS] ]KV`K\ X_W K\[_S`Y O KXKVS]£VY MYW Y] ZY]^O\SY\O]KT_]^O]@YM ZYNOKL\S\K]_KW£[_SXKPS\OaKVVZOVY]P -YX^\YV S]]Y ]O ^S`O\ MYWZSVKNY Y ]O\`SNY\ =38?= MYW Y ZKMY^O NK /8]USZZYNOXNYO]^ÁY_]K\YZ\Y^YMYVY0S\OaKVV^Y0S\OaKVV +] YZO\KÉO] MYW Y =P -YX^\YV MYWOKW MYW K ONSÁY NK ^YZYVYQSK NO \ONO:K\KS]]Y]OO]MYVROXYWOX_KYZÁY/NS^^YZYVYQc$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
44
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
45
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
.OZYS]¤XOMO]]£\SYWYX^K\K^YZYVYQSKZ\YZ\SKWOX^ONS^KO]MYVROXNY K] _XSNKNO] K ]O\OW MYXPSQ_\KNK] 8K ^OVK KMSWK O]^£ _W ObOWZVY NK MYXPSQ_\KÁY NO _WK W£[_SXK PS\OaKVV :YNOWY] MYW _W RY]^ ]O\`SNY\ MYXPSQ_\£VY MYW `£\SY] ]O\`SY] ZY]]´`OS] 0>: =OM_\O AAA ]O\`O\ ==2]O\`O\O^MVSLO\KXNYY_XÁYZK\KYKMO]]YZ¦LVSMY/XMO\\KNK K SNOX^SPSMKÁY NO XY]]K \ONO ]K´WY] NY vWYNY ^YZYVYQSKv XO]]O SX]^KX^O Y ]P -YX^\YV K`KVSK ]O R£ SXMYX]S]^ XMSK] OW XY]]K ^YZYVYQSK=O^_NYO]^£YUZYNOWY]O]MYVRO\ Y vK_^YMYXPSQv .OZYS] ZYNOWY] \O`O\ MYXPY\WO XY]]Y QY]^Y K] MYXPSQ_\KÉO] 8K ^OVK ]OQ_SX^OO]^KWY]ONS^KXNYYLVYMYNO]O^_Zv\_VO]v$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
46
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
+QY\K `KWY] `O\ Y WOMKXS]WY NO \OQS]^\Y NY =38?= 0S\OaKVV =OW N¦`SNK _W NY] ZYX^Y] PY\^O] NY ]YP^aK\O 4£ [_O K WYX^KQOW NO _W PS\OaKVV ]SQXSPSMK OW Q\KXNO ZK\^O `SQSVXMSK +]]SW \OQS]^\K\ OW K\[_S`Y] ]OQ_\Y] Y WY`SWOX^Y NO OX^\KNK O ]K´NK NO ZKMY^O] O KV¤W NYWKS]Q\KK]§MKZKMSNKNONO]M\SZ^NYZ\YQ\KWKObOM_^K\KÉO]¤ P_XNKWOX^KVZK\KYKNWSXS]^\KNY\NO_WK\ONO 4£ `SWY] [_O Y K\[_S`Y NO VYQ P_XNKWOX^KV NY =38?= MRKWK]O v`K\VYQPS\OaKVVv @YM NO`O SX`O]^SQ£VY ]OWZ\O ZYS] ^YNY Y WY`SWOX^Y NO ZKMY^O] ¤ XOVO Q\K`KNY K]]SW MYWY K] YZO\KÉO] MYXPSQ_\KNK]XYXY^SPSMK^SYXIVO`OV=OK]_K\ONO¤NOQ\KXNOZY\^O OZY\^KX^Y\OMOLO_W^\£POQYW_S^YSX^OX]Y¤KMYX]OVR£`OV_]K\_WK ZK\^SÁY ]OZK\KNK ZK\K Y NS\O^¥\SY v`K\VYQv -YW OPOS^Y ZYNOWY] _]K\YMYWKXNYv^KSVvZK\KSX]ZOMSYXK\YVYQQ\K`KNYXYK\[_S`YMYW Y KM\¤]MSWY NK PVKQ P ZK\K PY\K\ K VOS^_\K NY PSW NY K\[_S`Y :Y\ObOWZVY$
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
>OWY] K[_S _WK WY]^\K NK ]O[_ XMSK NO OX^\KNK] \OQS]^\KNK] MYW Y W ]YNSKKRY\KKKN`O\^ XMSKYMY\\SNKOXNO\OY]3:Z\Y^YMYVY] &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
47
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
OW [_O]^ÁY O^M 2£ N_K] OX^\KNK] NO OX`SY NO WKSV ZK\K Y _]_£\SY \YY^ VSXRK] O # 9 MYXROMSNY VOS^Y\ NO WKSV] :38/ KM_]K Y \OMOLSWOX^YNKWOX]KQOW$
9 MYWKXNY ^KSV _]KNY K]]SW ]O\`O MYWY _WK `S]ÁY SX]^KX^XOK NK ^\£POQYNO\ONOOVOOMYK\£]OWZK\K\Y]VYQ]MYX^SNY]OWPS\OaKVV K^¤[_OObOM_^O]O_Wv-YX^\YV-v+PY\WKWKS]Z\YN_^S`K¤_]K\Y] ^O\WSXKS] `S\^_KS] ZY\ ObOWZVY ! O " [_O ]KLSNKWOX^O ]ÁY KVMKXKNY] MYW v+6>0!vY_ _]O Y ^O\WSXKV [_O NO]OTK\ :K\K ^KX^YONS^OYK\[_S`YSXS^^KLONS^OK]]OQ_SX^O]VSXRK]$
À 7:2345:respawn:/usr/bin/tail -f /var/log/firewall > /dev/tty7 @YM ZYNO^KWL¤W[_O\O\VO\Y]O_v`K\VYQWO]]KQO]vX_W^O\WSXKV `S\^_KV_]OY"ZY\^KX^Y+6>0"` VY$
À 8:2345:respawn:/usr/bin/tail -f /var/log/messages > /dev/tty8
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
48
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
+MYX]OVRKWY] ^KWL¤W Y _]Y NO _W ¥^SWY ]M\SZ^ OW :O\V O]M\S^Y ZY\ 7SMRKOV,KLMYMUR^^Z$aaaVSX_b]_ZZY\^VSXOMYWhZQZVSX_bMRKWKNY 6YQMYVY\S]O VYQMYVY\S]O!^K\Qd ¤ K `O\]ÁY [_O _]KWY] /VO ^OW K MKZKMSNKNO NO Z¡\ MY\O] XY] K\[_S`Y] NO VYQ NO WKXOS\K [_O ZYNOKMOX^_K\NO^O\WSXKNK]ZKVK`\K]O]ZOM´PSMK] =O`YM NO]OTK\`O\Y]VYQ]QO\KNY]WK]SXSMSK\Y]O_]S]^OWKOW vSXS^ v Y_ WO]WY O]^S`O\ ]OWZ\O OW KWLSOX^O Q\£PSMY O XÁY NO]OTK\ ]KS\ NOVO ZYNO _]K\ K Y Z\YQ\KWK bMYX]YVO Z\O]OX^O XK [_K]O ^Y^KVSNKNO NK] NS]^\SL_SÉO] 6SX_b 9 bMYX]YVO WYXS^Y\K K] WOX]KQOX]NYMYX]YVOXYBASXNYa@YM ZYNO_]K\XY]O_vbSXS^\MvY MYWKXNY$ tail -f /var/log/firewall > /dev/console &
/OX^ÁY$ xconsole -exitOnFail &
8O]^K^OVK`OWY]_WObOWZVYNOObOM_ÁYXYbMYX]YVO$
9 NKOWYX NY =38?= v]PMv KMOS^K KVQ_WK] SWZY\^KX^O] YZÉO] XK ]_K VSXRKNOMYWKXNY=ÁYOVK]$
11
Portanto, para usá-lo você precisa de Perl em seu sistema (5.x)... &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
49
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
VWDUW >FRQILJ@
,QLFLD R GDHPRQ XVDQGR SRU SDGUmR R DUTXLYR
HWFILUHZDOOGILUHZDOO HQWUH FRP RXWUR DUTXLYR VH TXLVHU H[HPSOR VIF VWDUW XVU ORFDOWPSILUHZDOOWHVWH
VWRS
'HVOLJD R GDHPRQ PDV QmR GHVFDUUHJD R PRGXOR
UHFRQILJ >FRQILJ@ 'HVOLJD R GDHPRQ H UHLQLFLDR FRP XP QRYR >IOXVK RX IOXVKBDOO@ DUTXLYR GH FRQILJXUDomR CUHFRQILJ QmR SDUDOLVD DV FRQH[}HV 7&3 DR PHQRV TXH VH XVH IOXVK RX IOXVKBDOO
CIOXVK GHVWUyL WRGDV DV FRQH[}HV TXH QmR VmR SHUPLWLGDV QD QRYD FRQILJXUDomR Mi CIOXVKBDOO GHVWUyL WRGDV DV FRQH[}HV 7&3 H[LVWHQWHV FKHFNFRQILJ >FRQILJ@
&KHFD R DUTXLYR GH FRQILJXUDomR SRU HUURV GH VLQWD[H 3DGUmR HWFILUHZDOOGILUHZDOOFRQI
VKRZ
0RVWUD D FRQILJXUDomR XVDGD H DV FRQH[}HV 7&3
VKRZWFS
0RVWUD DSHQDV DV FRQH[}HV 7&3
NLOO LGNH\FULDGR
0DWD FRQH[mR 7&3 HVSHFLILFDGD
NLOODOO
0DWD WRGDV DV FRQH[}HV 7&3
NLOOLGOH PLQXWRV
0DWD WRGDV DV FRQH[}HV 7&3 RFLRVDV SRU ; PLQXWRV
UHVHWXVDJH
5HVHW XVDJH FRXQWHUV
/]^K] YZÉO] ]ÁY W_S^Y SWZY\^KX^O] =YL\O^_NY XK MYX]^\_ÁY NY XY^SPSMK^SYXIVO`OV :YNOWY] MYX]^\_S\ SX^O\O]]KX^O] O]^\K^¤QSK] _]KXNY K NOMVK\KÁY vObOMv OW MYXT_X^Y MYW O]^K] PVKQ] ?WK YZÁY NO`O\K] SWZY\^KX^O ¤ K ]K´NK ZY]]SLSVS^KNK ZY\ v]PM ]RYav KV¤W NO VS]^K\ XY]]K MYXPSQ_\KÁY XY O]]OXMSKV VS]^K K] MYXObÉO] K^S`K] WY]^\K] ]_K] vSNUOc]v [_O ZYNO\OWY] _]K\ ZK\K NO\\_LK\ MYXObÉO] [_O ]O WY]^\OW ZO\SQY]K] /S] _WK ]K´NK NY NKOWYX YL]O\`O MYW K] SXPY\WKÉO]]ÁYPKMSVWOX^OSNOX^SPSMKNK]$
>URRW#DOSKD DGP@ XVUORFDOVIF VKRZ $FWLYH UXOHV XVDJH FRXQWHUV ODVW UHVHW DW 6DW )HE &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
50
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
OLQH VWDWLF XVDJH WLPHV EORFN QRWLILFDWLRQ OHYHO SURWRFRO 7&3 WR SRUW OLQN SRUW VXSGXS OLQH VWDWLF XVDJH WLPHV EORFN QRWLILFDWLRQ OHYHO DOO SURWRFROV RSWLRQV CORRVH VRXUFH URXWH CVWULFW VRXUFH URXWH
OLQH VWDWLF XVDJH WLPHV EORFN QRWLILFDWLRQ OHYHO SURWRFRO 5,3 IURP OLQH VWDWLF XVDJH WLPH E\WHV DFFHSW QRWLILFDWLRQ OHYHO SURWRFRO 7&3 CIWSBDOO
WR SRUW VVK OLQH VWDWLF XVDJH WLPHV DFFHSW QRWLILFDWLRQ OHYHO SURWRFRO 7&3 CIWSBDOO
WR SRUW IWS OLQH VWDWLF XVDJH WLPH E\WHV DFFHSW QRWLILFDWLRQ OHYHO SURWRFRO 7&3 CIWSBDOO
WR SRUW WHOQHW OLQH VWDWLF XVDJH WLPHV DFFHSW QRWLILFDWLRQ OHYHO SURWRFRO 7&3 CIWSBDOO
WR SRUW ZZZ OLQH VWDWLF XVDJH WLPHV E\WHV DFFHSW QRWLILFDWLRQ OHYHO DOO SURWRFROV CIWSBDOO
IURP WR OLQH VWDWLF XVDJH WLPHV E\WHV EORFN QRWLILFDWLRQ OHYHO SURWRFRO 7&3 7&3 FRQQHFWLRQV DW LGNH\ FUHDWHG ODVW XVH WLPHRXW G GF QRQH IE H I QRQH
VWDWHKRVWV FOLHQW VHUYHU VHTXHQFH ZLQGRZ VHTXHQFH ZLQGRZ (67$%/,6+(' !WHOQHW (67$%/,6+(' !VVK
9DULDEOHV VU
LOOWFS WLPHRXW )HE KRVW WLPHRXW )HE :YNO\]OSK NS`SNS\ O]^O ]K´NK NO ]^K^_] NY NKOWYX OW NYS] Q\KXNO] LVYMY] 9 Z\SWOS\Y ¤ Y O]]OXMSKV NO XY]]K MYXPSQ_\KÁY 3]^Y ¤ K] &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
51
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
\OQ\K] K^S`K] ]OZK\KNK] OW # NS`S]ÉO] 3NOX^SPSMKXNY SXMV_]S`O K VSXRKNYPS\OaKVVMYXPYXNO]OOXMYX^\KWK] \OQ\K] >KWL¤W VS]^K]O YX´`OVNOXY^SPSMKÁY[_O¤MRKWKNYOYX¦WO\YNO`OdO]NOKMO]]Y OY]Lc^O]_]KNY]ZY\ObOWZVYXKVSXRK^OWY]$v_]KQO$^SWO Lc^O]v 8Y ]OQ_XNY LVYMY OXMYX^\KWY] K] vMYXObÉO] >-:v 6S]^KW]O ^YNK] K] MYXObÉO]K^S`K]MRKWKNK]v/=>+,63=2/.vY]O\`SNY\O Y MVSOX^O K ZY\^K _^SVSdKNK _]KXNY]O Y XYWO NY ]O\`SY O KY PSXKV ^YNK] MYXObÉO] MYX]SNO\KNK] SVOQKS] vSVV^MZv + VSXRK NO MYXObÉO] K^S`K] Q_K\NK ^\ ] NKNY] SWZY\^KX^O] ZK\K Y _]Y NK PVKQ vUSVVv NO`O]O VOWL\K\ [_O O]^K ¤ _WK RKLSVSNKNO [_O Y 3ZMRKSX] XÁY ZY]]_S ]KV`Y SXPY\WKÁY MYX^\£\SK -YW Y _]Y NO v]PM USVVKVVv WK^KWY] ^YNK O [_KV[_O\ MYXObÁY >-: K^S`K OW XY]]K \ONO ]OW NS]M\SWSXKÁY KVQ_WK -YW v]PM USVVSNVO BBBIWSX_^Y]v ZYNOWY] WK^K\ [_KV[_O\MYXObÁY[_OO]^OTKYMSY]YZY\NSQKWY]WSX_^Y]7K]v]PM USVVSNUOcM\SKNYvWK]_WKOX^\O^KX^K]MYXObÉO]OWXY]]K\ONO]O _WKMYXObÁY]OWY]^\KZO\SQY]KZY\KVQ_WK\KdÁY7K]YUSVV]YWOX^O P_XMSYXK MYW K] ^\ ] SXPY\WKÉO] MYWY _WK WONSNK NO Z\OYM_ZKÁY ]OQ_XNY \OVK^Y NY] Z\¥Z\SY] NO]OX`YV`ONY\O] -YWY SNOX^SPSM£VK]) @OTKWY]$
LGNH\
FUHDWHG G
ODVW XVH GF
WLPHRXW QRQH
VWDWHKRVWV FOLHQW VHUYHU VHTXHQFH ZLQGRZ VHTXHQFH ZLQGRZ (67$%/,6+(' !WHOQHW
× ¤Y3.#¤Y5/C!N#"!¤Y-+>/. :K\K WK^K\WY] ^KV MYXObÁY O]^KLOVOMSNK OW XY]]K \ONO _]K\´KWY] OX^ÁY$ >URRW#DOSKD @ XVUORFDOVELQVIF NLOO G 6HDUFKLQJ IRU 7&3 FRQQHFWLRQ G &RQQHFWLRQ WHUPLQDWHG >URRW#DOSKD @
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
52
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
+ YZÁY NO ^SWOY_^ OW MYXT_X^Y MYW K ZY]]SLSVSNKNO NO NO\\_LK\ K] MYXObÉO] >-: K^S`K] ¤ _WK SWZY\^KX^O PO\\KWOX^K NY =38?= :YNOWY] ZY\ ObOWZVY WYXS^Y\K\ K] MYXObÉO] OW XY]]Y ]O\`SNY\ AOL O`S^KXNY [_KV[_O\ ^OX^K^S`K NO .Y= v.OXSKV YP =O\`SMOv K^\K`¤] NO _W =C8 0VYYNSXQ@OTKWY];_KXNY_WKW£[_SXKObOM_^K_WKMYXObÁYOVKOX`SK _W ZKMY^O MRKWKNY =C8 NO ]cXMR\YXS]O [_KXNY _W =O\`SNY\ AOL MYWY OW XY]]Y ObOWZVY \OMOLO XY]]Y ZKMY^O =C8 OVO \O]ZYXNO MYW _W =C8+-5 _W ZKMY^O [_O ZY]]_S _WK ]O[_ XMSK X_W¤\SMK NO `KVY\ \KXN¡WSMY ;_KXNY XY]]Y RY]^ \OMOLO Y =C8+-5 KM\ONS^KWY] XY \OMYXROMSWOX^Y KMUXYaVONQO O OX^ÁY \O]ZYXNOWY] MYW _W +-5 :Y\¤W _W ]O\`SNY\ KZ¥] OX`SK\ _W =C8+-5 O]ZO\K MO\MK NO ]OQ_XNY] ZOVY +-5 NO \O]ZY]^K ]O OVO XÁY MROQK MKXMOVK]O K MYXObÁY/^KWL¤W]YWOX^OYS^YW£[_SXK]ZYNOW^OX^K\KMYXObÁYMYW Y]O\`SNY\KYWO]WY^OWZY9=C80VYYNSXQMYX]S]^OOWOX`SK\`£\SY] ZKMY^O]MYWvOXNO\OY]NOY\SQOWvSWKQSX£\SY]]_MO]]S`KWOX^O;_KXNY Y ]O\`SNY\ \OMOLO Y =C8 \O]ZYXNO WK] MYWY Y OXNO\OY XÁY ObS]^O XÁY \OMOLO \O]ZY]^K /]ZO\K ]OQ_XNY] O MKXMOVK K MYXObÁY =O K MKNK]OQ_XNY]MROQKWZKMY^O]=C8SXObS]^OX^O]NOYS^YMYXObÉO]_W ]O\`SNY\ Z\K^SMKWOX^O Z£\K NO P_XMSYXK\ :YNO\´KWY] O][_OWK^SdK\ OW^\ ]WYWOX^Y]$
n
Î
CLIENTE
SYN
SERVIDOR
SYN-ACK ... 40 segs.
o
SERVIDOR ACK
p
12
CLIENTE
Î
Î
CLIENTE
SERVIDOR
Flooding em inglês quer dizer inundação... &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
53
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
?W Y_^\Y ^´ZSMY K^K[_O LK]OKNY OW =C8+-5 PYS NO]M\S^Y XY VS`\Y >]_^YW_=RSWYW_\K8YOX^KX^YYYLTO^S`YNYSX`K]Y\XÁYO\KYZO\K\ ]SWZVO]WOX^O _W .Y= =O_ SX^OX^Y O\K ZOXO^\K\ X_WK \ONO Z\S`KNK PSXQSXNY]O]O\_W^\_]^ONRY]^MYWY`O\OWY]_]KXNY_WKY_^\K ^¤MXSMK$ Y 3: =ZYYPSXQ ^Y ]ZYYP Y_ ]OTK V_NSL\SK\ OXQKXK\ ;_O¤]OQ_XNYNO]M\SÁYNYO]ZOMSKVS]^K=,OVVY`SX$ “Um dos mais fascinantes buracos na segurança, e que foi primeiramente descrito por Morris. Em suma: usa-se uma predição dos números de sequência TCP para construir uma sequência de pacote TCP sem em qualquer momento ter recebido qualquer resposta do servidor. Isto lhe permite enganar (spoof) um host confiável numa rede local.”
:K\K^KX^YYSX`K]Y\KX_VY__WKNK]W£[_SXK]MYW`£\SY]=C8]NO WKXOS\K[_OOVKXÁYZYNO\O]ZYXNO\K_WY_^\YRY]^MYXPS£`OV+ W£[_SXK OX^ÁY \OMOLO_ _WK ]¤\SO NO =C8] Y RKMUO\ O]^_NY_ K ]O[_ XMSK X_W¤\SMK _]KNK O \O]ZYXNO_ MY\\O^KWOX^O XY V_QK\ NK W£[_SXK KSXNK ZK\KNK 0KdOXNY]O ZK]]K\ ZOVK W£[_SXK NK SX^\KXO^ OX`SY_ Y ]SWZVO] MYWKXNY vOMRY ( \RY]^]v NO]^\_SXNY [_KV[_O\ MYX^\YVO NO KMO]]Y KY RY]^ + RS]^¥\SK ¤ K]]SW MYX^KNK O NOPY\WKKSXNKWKS]NO^KVRKNKZOVYK_^Y\OW]O_VS`\Y .O`O]O NSdO\ ZY\ PSW [_O Y KV_XY XÁY NO`O MYXP_XNS\ K ^\YMK NO =C8+-5 [_O YMY\\O OX^\O _W ]O\`SNY\ O _W MVSOX^O MYW _W Z\YMO]]Y NO K_^OX^SMKÁY » S]^Y ]SW _WK ]SXM\YXSdKÁY 9 Z\Y^YMYVY >-: NSPO\OX^OWOX^O NY ?.: [_O Z\SWK ZOVK `OVYMSNKNO ¤ MK\KM^O\SdKNY ZOVKMYXPSKLSVSNKNOXKOX^\OQKNY]ZKMY^O]Y[_OZY\^KX^Y^OW_W M_]^Y .OX^\Y NO _W ZKMY^O >-: KV¤W NK] SXPY\WKÉO] ]YL\O K ZY\^K NO Y\SQOW O NK NO]^SXY NO _W MROMU]_W O^M R£ KVQ_WK] PVKQ] [_O QK\KX^OW K MYXPSKLSVSNKNO NK MYXObÁY =C8 O +-5 ]ÁY N_K] NO]]K] PVKQ] v<=>v ZY\ ObOWZVY \OSXSMSK K MYXObÁY Y_ 038 [_O OXMO\\K K MYXObÁY /W ]_WK ZK\K [_O K MYXObÁY ]OTK MYXPS£`OV ¤ XOMO]]£\SY [_ORKTKM\S^¤\SY]ZK\KK^\YMKNONKNY]OX^\ONYS]RY]^
13
Contra-Ataque. A História da captura do Pirata Cibernético mais procurado dos Estados Unidos. Ed. Companhia da Letras, 1996, p. 104 ss. 14 “Security Problems in the TCP/IP Protocol Suite”. Computer Communication Review, Vol. 19, nº2, p. 32. &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
54
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
55
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
3 Monitoração da rede 3.1 Os scanners de rede .OZYS]NOWYX^KNYYXY]]YPS\OaKVVXOMO]]S^KWY] NO PO\\KWOX^K] XÁY ]YWOX^OZK\K`KVSN£VYMYWYZK\KKNOZ_\KÁY XOMO]]£\SK +]]SW MYWY ZK\KX_WO`OX^_KVPKVRKNOXY]]KZYV´^SMKNO^OM^K\WY]Y]SX^\_]Y]OW XY]]K\ONO 9KWLSOX^O6SX_bNS]ZÉONO_WQ\KXNOX¦WO\YNOPO\\KWOX^K]`O\OWY] K]]SWKVQ_WK]NOVK][_O§]`OdO]M_WZ\OWKWO]WKP_XÁYZY\¤WMYW ]_K]ZK\^SM_VK\SNKNO] 1Y]^K\´KWY] NO `YV^K\ KY PSW NY MKZ´^_VY KX^O\SY\ :K\K ^YWK\WY] Y ObOWZVYMS^KNYXYVS`\YNO>]_^YW_=RSWYW_\K@SWY]V£[_OYSX`K]Y\ Z¡NOK^\K`¤]NO_W3:PVYYNSXQOXQKXK\K\ONOOOX^\K\MYWY_WRY]^ MYXPS£`OV/VOO]^_NY_K]O[_ XMSKOWS^SNKZY\_WNY]RY]^]OOX^ÁY POd K \O]ZY]^K ObK^K -YWY S]]Y PYS ZY]]´`OV) + Z\SY\S KN`O\^SWY] [_OYZ\YMO]]YNO\OMYXROMSWOX^YNY=C8+-5XÁY¤_WKK_^OX^SMKÁY WK]]SW_WKXOQYMSKÁYOXN^YOXNOX^\ORY]^][_O¤MY\\O^KWOX^O MRKWKNK NO ^MZ RKXN]RKUSXQ Y [_O ]SQXSPSMK VS^O\KVWOX^O _WK O]Z¤MSO NO KZO\^Y NO WÁY] 7_S^Y ZOVY MYX^\£\SY ¤ LK]OKNY X_WK ]O[_ XMSK V¥QSMK [_O S\OWY] OX^OXNO\ MYW PKMSVSNKNO 9] X¦WO\Y] ]O[_OXMSKS] XÁY ]ÁY KVQY K]]SW MYWY ]OXRK] XÁY \OMOLOW XOXR_WK O]Z¤MSO NO M\SZ^YQ\KPSK ?W Z\YQ\KWK NY ^SZY ]XSPPO\ NO ^Y ]XSPP$ PK\OTK\ ZYNO SX`O]^SQK\ Y] NKNY] NO _W MKLOKVRY >-: O ObOM_^K\ K]WKXYL\K]XOMO]]£\SK]`S]KXNYK\_Z^_\KNK]OQ_\KXK :\OMS]KWY]KQY\K`S]_KVSdK\Z\SWOS\KWOX^O_WMKLOKVRY>-:OZK\K _WKMYX^\KZY]SÁY_WMKLOKVRY?.:
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
56
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
0Y\WK^Y NO _W MKLOKVRY >-:15 _ 6RXUFH 3RUW _ 'HVWLQDWLRQ 3RUW _ _ 6HTXHQFH 1XPEHU _ _ $FNQRZOHGJPHQW 1XPEHU _ _ 'DWD _ _8_$_3_5_6_)_ _ _ 2IIVHW_ 5HVHUYHG _5_&_6_6_<_,_ :LQGRZ _ _ _ _*_._+_7_1_1_ _ _ &KHFNVXP _ 8UJHQW 3RLQWHU _ _ 2SWLRQV _ 3DGGLQJ _ _ GDWD _
8Y^O KQY\K K NSPO\OXK ZK\K _W MKLOKVRY ?.: LOW WKS] ]SWZVO] _ 6RXUFH _ 'HVWLQDWLRQ _ _ 3RUW _ 3RUW _ _ _ _ _ /HQJWK _ &KHFNVXP _ _ _ GDWD RFWHWV
9 WY^S`Y Z\SXMSZKV O]^£ XK XK^_\OdK WO]WK NY] Z\Y^YMYVY] + MYWZVObSNKNONYMKLOKVRY>-:O]^£OW]_K XOMO]]SNKNO O]^KLOVOMO\ K MYXPSKLSVSNKNONKMYXObÁYNONKNY] 8Y] MKWZY] SXSMSKS] ZYNOWY] YL]O\`K\ K SXNSMKÁY ZK\K K] ZY\^K] NO Y\SQOW O NO NO]^SXY ^KX^Y XY >-: [_KX^Y XY ?.: NSPO\OX^OWOX^O NO 15
0YX^O]$ <0- !# ZK\K Y MKLOKVRY >-: O <0- ! " ZK\K Y ?.: &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
57
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
_WMKLOKVRY3:[_O^\KdY]OXNO\OY]3:>\ ]MKWZY]XYMKLOKVRY >-: XY] SWZY\^KW NO SWONSK^Y$ ]O[_OXMO X_WLO\ X¦WO\Y ]O[_OXMSKV KMUXYaVONQWOX^X_WLO\X¦WO\YNO\OMYXROMSWOX^YOK]]OS]PVKQ]X_W ^Y^KVNO LS^]$?<1+-5:=2<=>=C8O038=ÁY^KS]PVKQ][_O MYX^\YVKW K ^\KX]WS]]ÁY NO NKNY] NO PY\WK MYXPS£`OV / ]ÁY K´ SQ_KVWOX^O[_O]OO]MYXNOWL_\KMY]XK]OQ_\KXK
=C8 -VSOX^O '''''''''''''(( =O\`SNY\ =O[ X_WLO\$ <+8.98 ! +MU X_WLO\$ =C8+-5 -VSOX^O &&''''''''''''' =O\`SNY\ =O[ X_WLO\$ <+8.98 # +MU 8_WLO\$ ! ' " +-5 -VSOX^ '''''''''''''(( =O\`SNY\ =O[ X_WLO\$ " +MU 8_WLO\$ # '
+]]SWYRY]^+ZONO_WK]O]]ÁY>OVXO^MYWYRY]^,Y]O\`SNY\8Y MKWZY ]O[_OXMO X_WLO\ NY RY]^ + [_O OX`SK Y =C8 O ¤ O]MYVRSNY KVOK^Y\SKWOX^O _W X¦WO\Y OW XY]]Y ObOWZVY ! 9 MKWZY KMUXYaVONQWOX^X_WLO\O]^£YL`SKWOX^OdO\KNY O RY]^,\O]ZYXNOMYW _W =C8+-5 O O]MYVRO KVOK^Y\SKWOX^O XY ]O[_OXMO X_WLO\ _W X¦WO\Y
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
58
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
#WK]T£XYMKWZYNYX¦WO\YNO\OMYXROMSWOX^YSXM\OWOX^K$]YWK Y ]O[_OXMO X_WLO\ NY MVSOX^O WKS] \O]_V^KXNY " 8Y +-5 OX`SKNY ZOVY RY]^ + `OWY] XY ]O[_OXMO X_WLO\ " S]^Y ¤ K ]YWK NY ¦V^SWY KMUXYaVONQWOX^X_WLO\OXY]O_X¦WO\YNO\OMYXROMSWOX^YO]^£K]YWK NY ]O[_OXMO X_WLO\ WKS] 9L]O\`O Y O][_OWK KX^O\SY\ [_O O]^K ]O[_ XMSKPSMK\£WKS]MVK\K0YSK]]SW[_OYSX`K]Y\ZYNOOX^\K\XK \ONOZ\S`KNKPKdOXNY]OZK]]K\ZY\_WKW£[_SXKMYXPS£`OV @OTKWY] _W ObOWZVY \OKV >\ ] PO\\KWOX^K] ]ÁY ¦^OS] XO]]O Z\YMO]]Y NOWYXS^Y\KÁY-KNK_W^OW]_K][_KVSNKNO]OPSMK[_K]OXYO]^SVY NY KNWSXS]^\KNY\ YZ^K\ ZY\ O]^O Y_ K[_OVO ]YP^aK\O =ÁY OVO]$ >MZN_WZ
NK
6Ka\OXMO
,O\UOVOc
8K^SYXKV
6KLY\K^Y\c
P^Z$P^ZOOVLVQY` Y 3:>\KP O]M\S^Y ZY\ 1O\KVN 4K`K [_O O]^ÁY Z\O]OX^O] OW [_K]O ^YNK] K] NS]^\SL_SÉO] 6SX_b O Y +:= +N`KXMON :KMUO^ =XSPPO\ `O\]ÁY O]M\S^Y ZY\ -R\S]^SKX =MR_V^O http://www.swrtec.de) 9 +:= XY] ZY]]SLSVS^K _WK \KNSYQ\KPSK MYWZVO^K NY MKLOKVRY NO _W ZKMY^O>-:Y_?.:\OMOLSNY:YNOWY]MYWOVO`S]V_WL\K\YK\\KXTYNO X¦WO\Y]]O[_OXMSKS][_OObZVSMKWY]=_K]YZÉO]]ÁY$ KZ]EYZÉO]GEZ&NKIZY\^K(&ZK\KIZY\^K(GEY&^SZY(G 9XNOv^SZYvO`SNOXMSKY^SZYP\KWO]O]WLK\Z^MZ_NZO^M8K] vYZÉO]v ZYNOWY] \O]^\SXQS\ NOMS]S`KWOX^O Y] ZKMY^O] K ]O\OW WY]^\KNY]$ XÁY WY]^\K\ Y] OXNO\OY] 3: XÁY WY]^\K\ Y] OXNO\OY] O^RO\XO^ XÁY WY]^\K\ ^KV Y_ [_KV PKSbK NO ZY\^K] O^M 9 MYWKXNY vKZ] ROVZv VS]^K Y] ZK\WO^\Y] NO]OTKNY] =O MRKWKWY] Y Z\YQ\KWK ]OW YZÉO] Y_ \O]^\SÉO] OVO ZÉO]O ]SWZVO]WOX^O K WYXS^Y\K\ K \ONO @KWY] \OKVSdK\ MYWY _W ^O]^O _WK ]SWZVO] MYXObÁY >OVXO^ Z\Y^YMYVY >-: ZY\^K +[_S Y RY]^ # " ¤ MVSOX^O O # "¤Y]O\`SNY\8ÁYR£]OX^SNYOW]OWY]^\K\^YNKK]K´NK
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
59
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
[_OY]XSPPO\XY]Z\YZY\MSYXKZYS]¤NOWK]SKNYVYXQK-YXQOVKWY]Y] ^\ ]WYWOX^Y]]SQXSPSMK^S`Y]@OTKWY]$ n +:$''5 EEDGF ! FGIHF ,3$''5 ! ,39HU __ +HDG[D E\WHV __ 6HUYLFH726 __ /HQJWK RYHU DOO )UDJPHQWDWLRQ ,'[E )ODJV 2IIVHW 77/ __ 3URWRNROO 7&3 __ +HDGHU&5&[F 7&3+($'(5 3RUWV ! WHOQHW 6HT$FN 1U[DEI [ 'DWD2IIVHW[D 5HVHUYHG%LW )ODJVXUJDFNSVKUVW6<1ILQ :LQGRZ[G &5&[ 8UJHQW3RLQWHU[
Õ
Õ
o +:$''5 FGIHF ! EEDGF ,3$''5 ! ,39HU __ +HDG[D E\WHV __ 6HUYLFH726 __ /HQJWK RYHU DOO )UDJPHQWDWLRQ ,'[F )ODJV 2IIVHW 77/ __ 3URWRNROO 7&3 __ +HDGHU&5&[G 7&3+($'(5 3RUWV ! WHOQHW 6HT$FN 1U[GD [DEI 'DWD2IIVHW[D 5HVHUYHG%LW )ODJVXUJ$&.SVKUVW6<1ILQ :LQGRZ[G &5&[ 8UJHQW3RLQWHU[
Õ Õ
p +:$''5 EEDGF ! FGIHF ,3$''5 ! ,39HU __ +HDG[D E\WHV __ 6HUYLFH726 __ /HQJWK RYHU DOO )UDJPHQWDWLRQ ,'[F )ODJV 2IIVHW 77/ __ 3URWRNROO 7&3 __ +HDGHU&5&[ 7&3+($'(5 3RUWV ! WHOQHW 6HT$FN 1U[DEI [GD 'DWD2IIVHW[ 5HVHUYHG%LW )ODJVXUJ$&.SVKUVWV\QILQ :LQGRZ[G &5&[HGF 8UJHQW3RLQWHU[
Õ Õ
+]]SXKVKWY]MYWK]O^KK]VSXRK][_OXY]SX^O\O]]KWK[_S8Y^OMYWY K] PVKQ] ]_MONOW]O MYWY PYS ObZVSMKNY /VK] ]ÁY Q\SPKNK] ZOVY +:= OWVO^\K]WKS¦]M_VK]$ 8Y[_KN\Y`OWY]$ )ODJVXUJDFNSVKUVW6<1ILQ
Î
8P 6<1 HQYLDGR
8Y[_KN\Y`OWY]$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
60
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
XUJ$&.SVKUVW6<1ILQ
8Y[_KN\Y`OWY]$ XUJ$&.SVKUVWV\QILQ
Î
8P 6<1$&. UHVSRQGLGR
Î
( ILQDOPHQWH XP $&.
9KV_XYNO`O^KWL¤WXY^K\K]_MO]]ÁYNY]]O[_OXMOOKMUXYaVONQWOX^] X_WLO\] 9L]O\`O MYWY YMY\\O Y SXM\OWOX^Y [_O PYS ObZVSMKNY KX^O\SY\WOX^O$ 1R6<1 6HT$FN 1U 1U[DEI [ 1~PHUR GH UHFRQKHFLPHQWR ]HUDGR
1R6<1$&. 6HT$FN 1U 1U[GD [DEI 5DQGRP 6HT 1U $QWHULRU
1R$FN 6HT$FN 1U 1U[DEI [GD $FN 1U 6HT 1U $QWHULRU DQWHULRU
9 Z\YQ\KWK +:= ¤ ]OW N¦`SNK _W NY] WKS] ¦^OS] ]XSPPO\] ZK\K Y KMYWZKXRKWOX^Y NO \ONO » MVK\Y [_O Z\YQ\KWK] NO]^O ^SZY SXMV_Y K[_S Y ^MZN_WZ ObOM_^KW _W N_WZSXQ MYWZVO^Y O ]OWZ\O ObK_]^S`Y NY ^\£POQY NO \ONO ?W \ONS\OMSYXKWOX^Y ZK\K _W K\[_S`YVYQ X_WK ZO[_OXKSX^\KXO^N_\KX^OZY_MY]WSX_^Y]QO\K\£K\[_S`Y]OXY\WO]/ XÁY R£ Y_^\K ]YV_ÁY ZK\K Y O]^_NY NO WYXS^Y\KWOX^Y O ZK\K K WYX^KQOW NO _W 3.= OPO^S`Y ]OXÁY Y O]^_NY M_SNKNY]Y NY] \OQS]^\Y] OW ^Ob^Y ;_O XY] KT_]NK\£ K OXMYX^\K\ K] ZOQKNK] NOSbKNK] ZY\ _WK SX`K]ÁY 9 ^MZN_WZ ^\KLKVRK MYWY Y +:= ZY\¤W ]O_] VKcY_^] ]ÁY NSPO\OX^O] @OTKWY] OX^ÁY 9 Z\YQ\KWK KMOS^K NS`O\]K] YZÉO] \O]^\S^S`K] O SXMV_]S`K]XKVSXRKNOMYWKXNYMYX]_V^OKZ£QSXKWKX_KV=_K]K´NK ZY]]_SY]OQ_SX^OPY\WK^YOWZKMY^O]>-:$ (QG RULJHP ! (QG GHVWLQR IODJV VHTQXPEHU DFNQXPEHU WDPDQKRBGHBMDQHOD XUJHQW RSo}HV
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
61
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
4£XY]ZKMY^O]?.:OWQO\KV$ (QG RULJHP ! (QG GHVWLQR SURWRFROR WDPDQKR
+[_S^OWY]_WK]K´NK^´ZSMKNY^MZN_WZ9L]O\`KWY]_WKMYXObÁY>-: KL\SXNY_WK]O]]ÁY0>:$ ! IWS 6 ZLQ PVV VDFN2.WLPHVWDPS QRSZVFDOH ! ') DUS ZKRKDV WHOO DUS UHSO\ EEDGF LVDW EEDGF FGIHF IWS ! 6 DFN ZLQ PVV VDFN2.WLPHVWDPS QRSZVFDOH ! ') ! IWS DFN ZLQ QRSQRSWLPHVWDPS ! ')
8Y^O [_O K ]K´NK NY ^MZN_WZ XÁY K]]SXKVK ObZVSMS^KWOX^O KY] =C8 +-5] / SQ_KVWOX^O XY ]O[_OXMO X_WLO\ SXSMSKV 3=8 OVO XÁY dO\K WK]\OZO^OY]`KVY\O]8O]^KMYXObÁYK]]SXKVKNK OW XOQ\S^Y ^OWY] ¤¥L`SYK\OZO^SÁYNKV¥QSMKNO]SXM\YXSdKÁYNY]ZKMY^O]>-: 9 ]YP^aK\O 3:^\KP ^\Kd K MYWYNSNKNO NO _WK SX^O\PKMO POS^K OW XM_\]O] :YNOWY] \YVK\ K ^OVK ZY\ ObOWZVY ZK\K _WK `S]ÁY SX]^KX^XOK NY ^\£POQY NO \ONO +V¤W NS]]Y Y 3ZP\KP ]OZK\K Y ^\£POQY ?.: NY >-: 2£ NS`O\]K] Y_^\K] YZÉO] NO WYXS^Y\KWOX^Y 8Y WOX_NOKLO\^_\K^OWY]VS]^KNK]^KS]YZÉO]$
,37UDI
_ ,3 WUDIILF PRQLWRU _ _ *HQHUDO LQWHUIDFH VWDWLVWLFV _ _ 'HWDLOHG LQWHUIDFH VWDWLVWLFV _ _ 7&38'3 VHUYLFH PRQLWRU _ _ (WKHUQHW VWDWLRQ PRQLWRU _ _ 7&3 GLVSOD\ ILOWHUV _ _ 2WKHU SURWRFRO ILOWHUV _ _ (WKHUQHW KRVW GHVFULSWLRQV _ _ 2SWLRQV _ _ ([LW _
'LVSOD\V FXUUHQW ,3 WUDIILF LQIRUPDWLRQ 8S'RZQ0RYH VHOHFWRU (QWHUH[HFXWH
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
62
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
+ Z\SWOS\K YZÁY v3: ^\KPPSM WYXS^Y\v WY]^\K\ OW N_K] ^OVK] K OX^\KNKO]K´NKNOZKMY^O]>/6+8YKV^YY^\£POQY>-:OWLKSbY Y^\£POQY?.:K[_S_WK]O]]ÁY80=8Y^O]O[_OK]O]]ÁY^OVXO^T£ OWM_\]YZY]]_SXYPVKQ]KVO^\K+Y_]OTK+-5@OWY]^KWL¤WY] OXNO\OY] 3: O K] ZY\^K] _]KNK] Y MVSOX^O MYW _WK ZY\^K XÁY Z\S`SVOQSKNKMYXOM^KXNYKZY\^KOY]ZKMY^O]OLc^O]OWM_\]YO K SX^O\PKMO _]KNK O^R 9_^\Y YZÁY SX^O\O]]KX^O >/6+ ZK\K MROMK\ K \ONO ¤ K O]^K^´]^SMK NO XY]]K SX^O\PKMO WOX_$ v.O^KSVON SX^O\PKMO ]^K^S]^SM]v :YNOWY] YL]O\`K\ Y] Z\Y^YMYVY] OW _]Y K W¤NSKNOK^S`SNKNOY]O\\Y]OXMYX^\KNY]O^M
7(/$ ,37UDI
6RXUFH 'HVWLQDWLRQ 3DFNHWV %\WHV )ODJV ,IDFH _ ! $ HWK_ _ ! $ HWK_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
7&3 HQWULHV $FWLYH
_ 8'3 IURP WR RQ HWK _ _ 8'3 IURP WR RQ HWK _ _ 8'3 IURP WR RQ HWK _ _ 8'3 IURP WR RQ HWK _ _ 8'3 IURP WR RQ HWK _ _ 8'3 IURP WR RQ HWK _
%RWWRP(ODSVHG WLPH ,3 7&3 8'3 ,&03 1RQ,3 8S'Q3J8S3J'QVFUO DFWY ZLQ :FKJ DFWY ZLQ 0PRUH 7&3 LQIR ;&WUO;([LW
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
63
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
7(/$ ,37UDI
6WDWLVWLFV IRU HWK _ _ _ 3DFNHWV %\WHV _ _ 7RWDO _ _ ,3 _ _ 7&3 $FWLYLW\ NELWVVHF _ _ 8'3 SDFNHWVVHF _ _ ,&03 _ _ 2WKHU ,3 ,3 &KHFNVXP (UURUV _ _ 1RQ,3 _ _ _ _ _ _ 3NW 6L]H E\WHV &RXQW 3NW 6L]H E\WHV &RXQW _ _ WR WR _ _ WR WR _ _ WR WR _ _ WR WR _ _ WR WR _ _ WR WR _ _ WR WR _ _ WR _ _ _
(ODSVHG WLPH ;&WUO;([LW
+QY\KZYNOWY]§^´^_VYNOObOWZVYWYXS^Y\K\_WK]SW_VKÁYNO=C8 PVYYNSXQ X_WK SX^\KXO^ / YL]O\`£VY OW XY]]Y] Z\YQ\KWK] +:= O 3:^\KP ?]K\OWY] _W ]YP^aK\O MRKWKNY =cXU Y M¥NSQY ¤ O]M\S^Y ZY\ _WRKMUO\MRKWKNYDKUK^R=O_]ZK\WO^\Y]]ÁY]SWZVO]$ ]cXUOXNINOIY\SQOWOXNINOINO]^SXYZY\^KZY\^K :YNO]OYZ^K\XKPVKQvOXNINOIY\SQOWvZY\Y[_OPK\£[_OY]=C8] ]OTKWNONSPO\OX^O]OKVOK^¥\SY]OXNO\OY]3: v:Y\^Kv O v:Y\^Kv MYWY MRKWKWY] \OPO\OW]O §] ZY\^K] K ]O\OW MYX]O[_OX^OWOX^O QO\KNK]% ZY\ ObOWZVY$ ]O O]MYVROWY] K] ZY\^K] K WKXNK\OWY] ZKMY^O] NK ZY\^K K^¤ K ZY\^K 9] ZKMY^O] ]ÁY K]]SW OX`SKNY] NO PY\WK SX^O\WS^OX^O K^¤ K SX^O\\_ZÁY ZOVY _]_£\SY MYW _W -YX^\YV-Y_-YX^\YVL\OKU 7Y]^\KWY] K[_S Y 3:^\KP NO^OM^KXNY _W =C8PVYYNSXQ XY^O MYWY Y] OXNO\OY] 3: ]ÁY QO\KNY] KVOK^Y\SKWOX^O O MYWY K] ZY\^K] ]ÁY
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
64
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
`K\\SNK]OW]O[_ XMSKK^OXÁY$R£^KWL¤W_WKMYXObÁY>OVXO^\OQ_VK\ ]OXNYWY]^\KNKXKVSXRK#XY^O^KWL¤WKPVKQ=C8WK\MKNKMYW_W =$ ,37UDI 6RXUFH 'HVWLQDWLRQ 3DFNHWV %\WHV )ODJV ,IDFH æ 6 HWK æ æ HWK æ æ 6 HWK æ æ HWK æ æ 6 HWK æ æ HWK æ æ 6 HWK æ æ HWK æ æ ! 3$ HWK æ æ ! $ HWK æ æ 6 HWK æ æ HWK æ 7&3 HQWULHV $FWLYH æ 8'3 E\WHV IURP WR RQ HWK æ æ 8'3 E\WHV IURP WR RQ HWK æ æ $53 E\WHV IURP EEDGF WR FGIHF RQ HWK æ æ $53 E\WHV IURP FGIHF WR EEDGF RQ HWK æ æ æ æ æ 7RS (ODSVHG WLPH ,3 7&3 8'3 ,&03 1RQ,3 8S'Q3J8S3J'QVFUO DFWY ZLQ :FKJ DFWY ZLQ 0PRUH 7&3 LQIR ;&WUO;([LW
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oD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
65
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
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
8ÁYZYNO\´KWY]NOSbK\NOWOXMSYXK\_WKPO\\KWOX^K Z\O]OX^O OW [_K]O ^YNY]Y]]S]^OWK]?83BMRKWKNKvXO^]^K^v-YWYT£NOWY]X^\KYXYWO ^\K^K]O _W Z\YQ\KWK ZK\K WY]^\K\ K] O]^K^´]^SMK] OW XY]]K \ONO :Y\¤W NSPO\OX^OWOX^O NY] Y_^\Y] ]YP^aK\O] Y XO^]^K^ ¤ NO MO\^K PY\WKO]^£^SMYZYS]XY]WY]^\KY]O]^KNYK^_KVNO_WSX^O\PKMONO \ONO]OQ_XNYYZ\Y^YMYVYNOXY]]KO]MYVRK:Y\ObOWZVY^OWY]K[_S _W=C8PVYYNSXQMKZ^KNYZOVYXO^]^K^$ >URRW#DOSKD ELQ@ QHWVWDW Q W $FWLYH ,QWHUQHW FRQQHFWLRQV ZR VHUYHUV 3URWR 5HFY4 6HQG4 /RFDO $GGUHVV WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
)RUHLJQ $GGUHVV
6WDWH (67$%/,6+(' (67$%/,6+(' (67$%/,6+(' (67$%/,6+(' (67$%/,6+(' (67$%/,6+(' (67$%/,6+(' (67$%/,6+(' (67$%/,6+(' (67$%/,6+(' 6<1B5(&9 6<1B5(&9 6<1B5(&9 6<1B5(&9
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
66
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS WFS
9,3V IDOVRV
6<1B5(&9 6<1B5(&9 6<1B5(&9 6<1B5(&9 6<1B5(&9 6<1B5(&9 6<1B5(&9 6<1B5(&9 6<1B5(&9 6<1B5(&9 6<1B5(&9 6<1B5(&9 6<1B5(&9 6<1B5(&9 6<1B5(&9 6<1B5(&9 6<1B5(&9 6<1B5(&9 6<1B5(&9 6<1B5(&9 6<1B5(&9 6<1B5(&9 6<1B5(&9 6<1B5(&9 6<1B5(&9 6<1B5(&9 6<1B5(&9 6<1B5(&9 6<1B5(&9 6<1B5(&9 96<1V
8ÁY]ONO`OO]^\KXRK\KObZ\O]]ÁY_]KNK=C8-@9XO^]^K^MYWY PKVKWY] ¤ _WK PO\\KWOX^K ^\KNSMSYXKV NY] =S]^OWK] YZO\KMSYXKS] ?83BZY\S]]Y_]KKObZ\O]]ÁYMKX¡XSMKZ\O]OX^OXY<0-!#+VS_WK MYXObÁY >-: PYS SX^O\Z\O^KNK MYWY _WK Z\YQ\O]]ÁY NO O]^KNY] MYW NSPO\OX^O] ]SQXSPSMKNY] YXNO =C8-/3@/. ¤ _W NOVO] ^KS] MYWY 63=>/8 O]ZO\K ZY\ _WK MYXObÁY /=>+,63=2/. O]^KLOVOMSWOX^Y NK MYXObÁY>-:038A+3>O]ZO\KZOVY^¤\WSXYNKMYXObÁYO^M /X^\O^KX^Y K KX£VS]O NO ^KS] PO\\KWOX^K] NO WYXS^Y\KÁY XÁY XY] \O]ZYXNOW]OQ_\KWOX^O_WK[_O]^ÁYNO_WK^K[_O3:]ZYYPSXQ_WZYX^Y ZO\WKXOMO KLO\^Y ;_KV ]OTK MYWY Y SX`K]Y\ ZYNO OX`SK\ _W ZKMY^O MYW_WOXNO\OYNO_WRY]^MYXPS£`OVOKV¤WNYWKS]\O]ZYXNOXNYK _W=C8+-5)-YWYWYX^K\_W]O[_OXMOX_WLO\Y__WKMUX_WLO\) ?W ]YP^aK\O KLO\^Y MRKWKNY =OXN3: `O\]ÁY NO 7SUO <SMRK\N] WSUO*OK\^RVS M\SKNY NOX^\Y NY MRKWKNY :\YTOM^ :_\ZVO R^^Z$aaaOK\^RVSZY\ObOWZVYZYNOPKdO\^KVYZO\KÁY]OXNY &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
67
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
_WK SWZY\^KX^´]]SWK PO\\KWOX^K NO NOL_Q O KNWSXS]^\KÁY NO \ONO O PS\OaKVV 9=OXN3:KMOS^KSX¦WO\K]YZÉO]XKVSXRKNOMYWKXNY-YL\SXNY[_K]O ^YNK]K]YZÉO]ObS]^OX^O]XY]Z\Y^YMYVY]?.:>-:O3-7:@OTKWY]$
]OXNSZ &RY]^XKWO( Z &^SZY( N &NKNY]( &YZÉO]( &RY]^XKWO( S] ^RO XKWO YP ^RO RY]^ ^Y ]OXN ^RO ZKMUO^ ^Y NOPK_V^] ^Y VYMKVRY]^ &^cZO( S] ^RO ZKMUO^ ^cZO$ M_\\OX^Vc ?.: >-: Y\ 3-7: NOPK_V^] ^Y 3: &NK^K( S] ^RO NK^K ZKcVYKN YP ^RO ZKMUO^ K] K ]^\SXQ YP RObKNOMSWKV X_WLO\] NOPK_V^] ^Y Lc^O] YP ] 9:À9
./=-<3À9
:+.<À9
9ZÉO] NO ]Y[_O^O$ ]N .OL_Q ]\ 8ÁY \Y^OK\ SO NY \Y_^O ]L :O\WS^O L\YKNMK]^ 9ZÉO] 3:$ S] 3: NO Y\SQOW SN 3: NO NO]^SXY SR >KWKXRY NO MKLOKVRY Sc v>cZO YP ]O\`SMOv SV >KWKXRY SS 3NOX^SPSMKÁY SP\ 0VKQ \O]O\`KNK SPN 8ÁY P\KQWOX^K SPW 7KS] P\KQWOX^Y] SP v0\KQ YPP]O^v S^ >>6 SZ :\Y^YMYVY SM v-ROMU]_Wv
! -Y\\O^Y -Y\\O^Y `O\ <0-!# -Y\\O^Y +VOK^¥\SY -Y\\O^Y ZK\K Y ^SZY -Y\\O^Y
9ZÉO] 3-7:$ M^ >SZY MN -¥NSQY MM v-ROMU]_Wv
" @O\ <0-!# @O\ <0-!# -Y\\O^Y
9ZÉO] ?.:$ _] :Y\^K NO 9\SQOW _N :Y\^K NO .O]^SXY _V >KWKXRY _M v-ROMU]_Wv
-Y\\O^Y -Y\\O^Y
9ZÉO] >-:$ ^] :Y\^K NO 9\SQOW ^N :Y\^K NO .O]^SXY ^X v=O[_OXMO X_WLO\v &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
+VOK^¥\SY ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
68
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
^K ^^ ^\ ^P_ ^PK ^PZ ^P\ ^P] ^PP ^a ^M ^_
v+MUXYaVONQOWOX^v v.K^K YPP]O^v
-Y\\O^Y K WOXY] [_O ^_ ]OTK O]ZOMSPSMKNY K WOXY] [_O ^K ]OTK O]ZOMSPSMKNY -Y\\O^Y
:YNOWY] KQY\K OX`SK\ _W ZKMY^O >-: K XY]]K O]MYVRK ZK\K _W RY]^ [_KV[_O\ NO XY]]K \ONO O OX^ÁY KXKVS]K\ MYW Y +:= O Y 3:^\KP Y MYX^O¦NYNYZKMY^O0K\OWY]MYWK]]OQ_SX^O]YZÉO]$ ]OXNSZ # " Z ^MZ S] ^] ^N ªMYX^ ^K^_ 9 Z\SWOS\Y OXNO\OY 3: ¤ Y RY]^ [_O NO]OTKWY] OX`SK\ Y ZKMY^O Y Z\Y^YMYVY>-:YOXNO\OYNO_W]O\`SNY\[_O_]K\OWY]ZK\K]ZYYPSXQ KW£[_SXK[_OO]^KOX`SKXNY¤Y\SQSXKVWOX^O# "=OQ_OW]O K]YZÉO]^´ZSMK]NYZ\Y^YMYVY$v^]vZY\^KNOY\SQOW`KVY\v ^Nv ZY\^K NO]^SXY ]]R v^Kv Y X¦WO\Y NO \OMYXROMSWOX^Y PY\TKNY$vvOWNOMSWKS]OZY\PSWWK\MKWY]OOX^ÁYK^S`KWY] MYWvvKPVKQ?<1NYMKLOKVRY -YWY+:=WYXS^Y\KXNYXY]]YRY]^OVOXY]\OZY\^K$
+N`KXMON:KMUO^=XSPPO\ @
-98031.+>/$ $"$#
-YZc\SQR^ - ### -R\S]^SKX =MR_V^O NQX]a*]K^_\XP\KXUOXNO >RS] Z\YQ\KW S] P\OO ]YP^aK\O% cY_ MKX \ONS]^\SL_^O S^ KXNY\ WYNSPc S^ _XNO\ ^RO ^O\W] YP ^RO 18? 1OXO\KV :_LVSM 6SMOX]O K] Z_LVS]RON Lc ^RO 0\OO =YP^aK\O 0Y_XNK^SYX 2A+..<$ $$L$L$K#$NM ( $M$NP$O$$M 3:+..<$ ( # " 3:@O\ ff 2OKN$bK Lc^O] ff =O\`SMO>9=$ ff 6OXQ^R Y`O\ KVV$ 0\KQWOX^K^SYX$ 3.$b ! 0VKQ]$ 9PP]O^$ >>6$ ff :\Y^YUYVV$ >-: ff 2OKNO\-<-$bL &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
69
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
>-:2/+./<$ :Y\^]$ ( XOaKMM^ =O[+MU 8\$bM !L b## .K^K9PP]O^$b
6RXUFH 'HVWLQDWLRQ 3DFNHWV %\WHV )ODJV ,IDFH _ ! 6$8 HWK _ _ ! HWK _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
7&3 HQWULHV $FWLYH
_ _ _ _ _ _ _ _ _ _ _ _
%RWWRP(ODSVHG WLPH ,3 7&3 8'3 ,&03 1RQ,3 8S'Q3J8S3J'QVFUO DFWY ZLQ :FKJ DFWY ZLQ 0PRUH 7&3 LQIR ;&WUO;([LW
+[_S YL]O\`KWY] OW KWLK] K] ^OVK] _W ¦XSMY ZKMY^O O ObK^KWOX^O MYWY]`KVY\O][_OM\SKWY]9]MKWZY]OWNO]^K[_OXY]WY]^\KWS]]Y + VOS^_\K NY MKLOKVRY XY] WY]^\K PKMSVWOX^O Y] LS^] NO _\Q XMSK WK\MKNY] O Y =C8+-5 NY ZKMY^O ^KWL¤W Y +:= ZYNO XY] WY]^\K\ Y X¦WO\Y NO \OMYXROMSWOX^Y [_O O]^KLOVOMOWY] vv ObZ\O]]Y OW RObKNOMSWKS]vb##v &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
70
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
9_^\Y NO^KVRO K ]O\ XY^KNY ¤ K \O[_S]SÁY +<: +NN\O]] -:3:7K]ZY\Y_^\YVKNYZYNO\O`OVK\ KVQ_X] ^\KY] SWZY\^KX^O] ZK\K Y WYXS^Y\KWOX^Y NK \ONO @OTKWY] +<: ¤ _W Z\Y^YMYVY [_O VSQK _W OXNO\OY O^RO\XO^ MRKWKNY MYW_WOX^O NO 7ONSK +MMO]] -YX^\YV 7+- Y_ OXNO\OY NO RK\NaK\O O^RO\XO^ K _W OXNO\OY 3: K^\SL_´NY=OQ_XNYKNOPSXSÁYZ\OMS]KNO.Y_QVK]-YWLO\$ +<:¤_WZ\Y^YMYVYNOLKSbYX´`OV[_OKL]^\KSYOXNO\OKWOX^Y P´]SMYZO\WS^SXNY[_O]OTKK^\SL_´NY_WOXNO\OY3:ZK\KMKNK W£[_SXK3NOKVSdKWY]+<:MYWYZK\^OP´]SMKNY]S]^OWKNO\ONO]O XÁYMYWYZK\^ONYZ\Y^YMYVYNOSX^O\VSQKÁYOW\ONO]16 ;_KXNY _W RY]^ NK \ONO NO]OTK ]KLO\ Y 7+- NO _W Y_^\Y RY]^ OVO OX`SK _WK \O[_S]SÁY Y_ _W ZKMY^O +<: ZY\ L\YKNMK]^ ZO\Q_X^KXNY [_KV Y OXNO\OY NO RK\NaK\O NK W£[_SXK MYW 3: ZY\ ObOWZVY v# "v)>YNK]K]W£[_SXK]KMOS^KWYZKMY^O+<:WK]MYWY]¥ R£_WKW£[_SXKMYW^KVOXNO\OKWOX^Y]YWOX^O OVK \O]ZYXNO OX`SKNY ]O_ 7+- .O]ZYS] ¤ PY\WKNY _W MKMRO MYW _WK VS]^KQOW MYW Y] OXNO\OY] 3Z] O Y] OXNO\OY] NO RK\NaK\O 9 MYWKXNY K\Z X` ZYNO WY]^\K\YMKMROM\SKNY$ >URRW#EHWD ELQ@ DUS QY $GGUHVV +ZW\SH HWKHU HWKHU
+ZDGGUHVV ))) ))))
)ODJV & &
0DVN
,IDFH HWK HWK
97+-¤_WOXNO\OY¦XSMY9_]OTKMKNKKNKZ^KNY\NO\ONOZY]]_S_W OXNO\OY ]SXQ_VK\ XY PY\WK^Y NO " LS^] Lc^O] O]M\S^Y OW RObKNOMSWKS] O ]OZK\KNY] ZY\ $ Y_ 9] ^\ ] Z\SWOS\Y] Lc^O] 16
-97,/< . 3X^O\VSQKÁY OW -:3: <SY NO 4KXOS\Y ON -KWZ_] ##" Z " &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
71
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
NO]SQXKW Y M¥NSQY NY PKL\SMKX^O NK ZVKMK NO^O\WSXKNY ZOVK 3/// 3X]^S^_^O YP /VO^\SMKV KXN /VOM^\YXSM] /WQSXOO\] 9 7+- NO ]_K ZVKMK NO \ONO ZYNO ]O\ WY]^\KNY MYW Y MYWKXNY vSPMYXPSQv% XK Z\SWOS\KNKVSXRKNKSX^O\PKMOO^RO\XO^ZYNO]O YL]O\`K\ K OX^\KNK 2AKNN\ B$B$B$B$B$ /W XY]]Y ObOWZVY OXMYX^\KWY] _WK ZVKMK NK OWZ\O]K-97]O_7+-¤$ $$,$,$+#$.ªM¥N NK OWZ\O]K -97 +SXNK OW XY]]Y ObOWZVY `SWY] [_O K W£[_SXK [_O OX`SY_ ZKMY^O] ]ZYYPSXQNOSbK\£MYWMO\^OdK\K]^\Y]+\O[_S]SÁY+<:O]^£ObZ\O]]K XY+:=XK]]OQ_SX^O]VSXRK] :
2A+..<$ $$L$L$K#$NM ( $M$NP$O$$M +<:$ 3:(/^RO\XO^
9 ZKMY^O ]ZYYPSXQ PYS OX`SKNY ZOVY RY]^ # " WK] WO]WK K W£[_SXK [_O OX`SY_ Y ZKMY^O K\^SPSMSKV SWONSK^KWOX^O OX`SK _W ZKMY^O+<:/KY_^\KW£[_SXK\O]ZYXNOMK]KXNYYOXNO\OY3:MYWY 7+-
3.2 Saint: Security Administrator's Integrated Network Tool @KWY] KQY\K KXKVS]K\ K PO\\KWOX^K =KSX^ =OM_\S^c +NWSXS]^\K^Y\v] 3X^OQ\K^ON8O^aY\U>YYV`O\]ÁY\OVOK]O!_W]YP^aK\OKLO\^YO &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
72
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
W_S^Y ZYNO\Y]Y NO]OX`YV`SNY ZOVK AY\VN ASNO .SQS^KV =OM_\S^c R^^Z$aaaaaN]SMYW]KSX^ /VO P_XMSYXK OW [_K]O ^YNY] Y] ]S]^OWK] ?83B ZK\K ]_K _^SVSdKÁY XOMO]]S^K NK VSXQ_KQOW :O\V `O\]ÁY Y_ ]_ZO\SY\% O ZY\ \YNK\ NOX^\Y NO _W L\Ya]O\ XOMO]]S^K O`SNOX^OWOX^O NO [_KV[_O\ ^SZY NO L\Ya]O\ ZK\K AOL K^¤ WO]WYY]OWWYNY^Ob^Y^KVMYWYY6cXbZYNOW]O\_]KNY]9=KSX^ ¤_WKO`YV_ÁYNKMYXROMSNKPO\\KWOX^K=K^KXO]M\S^KZY\.0K\WO\ A @OXOWK O ZY]]_S WO]WY Q\KXNO] ZY\ÉO] NO MYZc\SQR^ NO]^O ]YP^aK\O 7K] ]OW N¦`SNK Y =KSX^ O]^£ LOW WOVRY\ KNKZ^KNY §] NS]^\SL_SÉO] 6SX_b ;_OW ^OX^Y_ MYWZSVK\ Y =K^KX XY 6SX_b Y_ bO]^K\£NOKMY\NYMYXY]MY 8OW ^YNK] K] NS]^\SL_SÉO] 6SX_b SXMV_OW _WK `O\]ÁY NY =KSX^ + ObMOÁY ^KV`Od ]OTK K NK =_=/ ` [_O T£ NS]^\SL_S Y ZKMY^O MYWZSVKNY:K\KPKd VYObOM_^OY]]OQ_SX^O]ZK]]Y]$ .SQS^OvWKUOVSX_bvZK\KKMYWZSVKÁYNY]LSX£\SY] .OZYS] KT_]^O Y] ZK^R] ZK\K Y] ]M\SZ^] OW :O\V MYW vZO\V \OMYXPSQvMYWS]]Y^KWL¤WY=KSX^OXMYX^\K\£KKT_]^K\£YZK^RZK\K YL\Ya]O\NS]ZYX´`OVXY]S]^OWK]ONO]OTK\KV^O\£VYONS^OYK\[_S`Y vMYXPSQZK^R]ZVv @YM XOMO]]S^KNO]VSQK\Y]O\`SNY\Z\Ybc[_KXNYPY\_]K\Y=KSX^ ZYS]OVOZ\OMS]KNOKMO]]YNS\O^YKY]RY]^]NK\ONO@YM ZYNOPKdO\ ONS^KXNY K ]_K `K\S£`OV NO KWLSOX^O KVQY NY ^SZY R^^ZIZ\Ybc O ^KWL¤W NO]PKdOXNY Y _]Y NY Z\Ybc XY XO^]MKZO =OW O]]O KT_]^O Y =KSX^XÁYP_XMSYXK\£ +QY\KT£ZYNOWY]VKXK\Y=KSX^=O_]K\WY]_WL\Ya]O\Q\£PSMYMYWY Y XO^]MKZO Y_ Y 8=-+ WY]KSM Z\OMS]KWY] O]^K\ XY BASXNYa] .O _WK TKXOVK NY ^O\WSXKV Q\£PSMY Y B^O\W ZY\ ObOWZVY MK\\OQKWY] Y Z\YQ\KWKKZK\^S\NY]O_NS\O^¥\SY$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
73
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
MN_]\VYMKV]KSX^ OOX^ÁY$ ]KSX^ +^OVKSXSMSKVWY]^\K_WWOX_NOP_XÉO]NYZ\YQ\KWK9=KSX^XÁY¤ KZOXK]_W]YP^aK\ONOQO\OXMSKWOX^YNO\ONO7K]]SW_WZ\YQ\KWKNO KX£VS]O O \OVK^¥\SY NO NSKQX¥]^SMY] NO XY]]K \ONO O ]O_] RY]^] 9 =KSX^ Z\YM_\K `_VXO\KLSVSNKNO] O OX^ÁY K] \OZY\^K PY\WK^KXNYK] X_WKZ£QSXK2^WV @OTKWY]Y]O_WOX_NOKLO\^_\K$ .+>+
7+8+1/7/8>
Ö
MYXPSQ_\K
Y
K\[_S`Y
Y
ZKN\ÁY
¤$
`K\]KSX^]KSX^NK^K YXNO Y Z\YQ\KWK S\£ \OQS]^\K\ ]_K] KX£VS]O] O \O]_V^KNY]% Y Y_^\Y S^OW 7O\QO aS^R ObS]^SXQ =+38> NK^K LK]O ¤ _]KNYZK\KP_XNS\NYS]K\[_S`Y]NONKNY]Z\YN_dSNY]ZOVY=KSX^ >+<1/> =/6/->398 Ö MYXPSQ_\K Y RY]^ Y_ Y] RY]^] NO _WK ]_L\ONO Z\SW£\SK +[_S ]O\ÁY O]MYVRSNK] K] P_XÉO] L£]SMK] NY Z\YQ\KWK [_O S\OWY]NO^KVRK\§P\OX^O .+>+ +8+6C=3= Ö WY]^\K Y] \OVK^¥\SY] O KX£VS]O] NOZYS] NK SX`O]^SQKÁYNO_WRY]^ -98031?<+>398 71> WKXKQOWOX^ Ö » _WK Z£QSXK [_O QO\OXMSK K] MYXPSQ_\KÉO]QO\KS]NY=KSX^ONS^KXNYYK\[_S`YvMYXPSQ]KSX^MPv >KS]MYWYYK\[_S`Y]NONKNY]YvX´`OVNOZO][_S]KvVO`OVZ\YLO Y `KVY\ NO ^SWOY_^ [_KS] ]_PSbY] S\OWY] ObMV_S\ NK ZO][_S]K WSV QY`ZY\ObOWZVY]O_]KWY]_W.8=O^M
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
74
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
.9-?7/8>+>398 O ><9?,6/=299>381 Ö ]ÁY VSXU] ZK\K K NYM_WOX^KÁY K\WKdOXKNKVYMKVWOX^O + SX^O\PKMO MYX]^\_´NK MYWY _WK Z£QSXK AOL ¤ LK]^KX^O K_^Y ObZVSMK^S`K -YWOK\OWY] MYW K O]MYVRK NO _W RY]^ NO XY]]K \ONO O ]OQ_S\OWY] Y] ZK]]Y] NY Z\YQ\KWK /]MYVROWY] XY WOX_$ ^K\QO^ ]OVOM^SYX O Z\OOXMROWY] MYW Y OXNO\OY NY RY]^ :YNOWY] `K\\O\ ^YNKKXY]]K\ONO^KWL¤W]OO]^S`O\WY]X_WKW£[_SXKMYWLK]^KX^O \OM_\]Y NO WOW¥\SK 9_ ZYNOWY] O]MYVRO\ K ObOM_ÁY NO _W .OXSKV 9P =O\`SMO +LKSbY OXMYX^\KWY] K ]OVOÁY NY ]MKXXSXQ VO`OV$ VO`O XY\WKV ZO]KNY O`S^KXNY ZY\^K] Z\YLVOW£^SMK] NY ASXNYa] 8> O Y ¦V^SWY X´`OV Y vROK`cv XÁY O`S^KXNY K] ZY\^K] Z\YLVOW£^SMK] NY ASXNYa] 8> 8K O]MYVRK PSXKV RKLSVS^KWY] Y_ XÁY Y PS\OaKVV XK W£[_SXKK]O\SX`O]^SQKNK 0OS^Y]Y]KT_]^OSXSMSKWY]KSX`O]^SQKÁY$=^K\^^RO]MKX +]]SW Y =KSX^ MYWOK ]_K `K\\ON_\K XY RY]^ O K ]_L]O[_OX^O MYVO^K NO NKNY] NOZOXNOXNY NY ^\£POQY NO \ONO O WO]WY NY RK\NaK\O NY O[_SZKWOX^YZYNO]OVO`K\_WMO\^Y^OWZYK^¤PSXKVSdK\K`K\\ON_\K + Z£QSXK NO `K\\ON_\K S\£ WY]^\K\ K] ZY\^K] O Y] ]O\`SY] OXMYX^\KNY]K^¤KX_XMSK\YPSWNK^K\OPK$=KSX^\_XMYWZVO^ON @OWY]K[_SYZ\YMO]]YNO`K\\ON_\KNY=KSX^X_WRY]^$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
75
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
/VOXY]WY]^\K^YNY]Y]]O\`SY]O]_K]\O]ZOM^S`K]ZY\^K]»_W WKZK MYWZVO^Y NK] ZY\^K] [_O O]^ÁY KLO\^K] X_W RY]^ NO XY]]K \ONO \O]^KXY]MROMK\]OO]^OO]^KNYNOMYS]K]¤MY\\O^YY_XÁY /]MYVROWY] KQY\K K YZÁY -YX^SX_O aS^R \OZY\^ KXN KXKVc]S] -YW O]]K YZÁY Y =KSX^ S\£ KXKVS]K\ Y [_KN\Y OXMYX^\KNY XK W£[_SXK # " + ^OVK LKSbY WY]^\K K] YZÉO] YPO\OMSNK] ZOVY ]YP^aK\O =ÁY ^\ ] LVYMY] NO YZÉO]$ v@_VXO\KLSVSNKNO]v v3XPY\WKÉO] ]YL\O YRY]^v O ZY\ PSW _WK VS]^KQOW NO v>\_]^ON RY]^]v =OW N¦`SNK Y Z\SWOS\Y LVYMY¤YWKS]SWZY\^KX^ONYZYX^YNO`S]^KNK]OQ_\KXK9]OQ_XNY OY^O\MOS\Y]ÁYWKS]SXPY\WK^S`Y]
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
76
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
» ZY\ MYX]OQ_SX^O XY X´`OV 3 v,c +ZZ\YbSWK^O .KXQO\ 6O`OVv NK] @_VXO\KLSVSNKNO] [_O Y =KSX^ S\£ PKdO\ Z\SWOS\KWOX^O _WK KX£VS]O W_S^K\SMKNY]Z\YLVOWK]ZY^OXMSKS]OXMYX^\KNY]]OOVOZY\`OX^_\K Y] OXMYX^\K\ +[_S MYWY T£ KX_XMSK Y WOX_ OVO VS]^K Y] Z\YLVOWK] ]OQ_XNYYX´`OVNOZO\SQYKZ\YbSWKNY9]Z\YLVOWK]ZYNOW]O\Y]WKS] NS`O\]Y] ZY]]´`OS] /VO PK\£ _WK Z\YM_\K ObK_]^S`K O MYVYMK\£ _WK ZO[_OXK LYVK `O\WOVRK ZK\K K]]SXKVK\ K ObS]^ XMSK NO Z\YLVOWK] M\´^SMY] [_O ZY]]KW ]O\ OXMYX^\KNY] +Y WO]WY ^OWZY ]ÁY WYX^KNY] SX^O\O]]KX^O] VSXU] ZK\K ObZVSMKÉO] LK]^KX^O Z\Y`OS^Y]K] [_O O]^ÁYOWK\[_S`Y]OWNS\O^¥\SY]VYMKS] 8YS^OWKLKSbYX´`OV33,c>cZO YP @_VXO\KLSVS^c OXMYX^\KWY] _WK
VS]^K
NY]
Z\YLVOWK]
OXMYX^\KNY]
]OQ_XNY
Y
^SZY
`_VXO\KLSVSNKNO-YWYWY]^\KK^OVKKLKSbY$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
77
NO
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
9 RY]^ OW [_O]^ÁY ¤ _WK W£[_SXK \YNKXNY Y ASXNYa] 8> aY\U]^K^SYX9=KSX^KZYX^K^\ ]VSXU]$
+N`O\^O ZK\K Z\YLVOWK] NO .Y= MK\KM^O\´]^SMY] NO ]S]^OWK] ASXNYa]
9 K\[_S`Y ObZY\^ NY 80= \YNKXNY XY ASXNYa] 8> XÁY SWZÉO \O]^\SÉO]ZK\KNS\O^¥\SY]OK\[_S`Y]
/VO SWKQSXOW NO^OM^K O VS]^K Y Z\¥Z\SY ASXNYa] MYWY _W Z\YLVOWK 9 VSXU O LK]SMKWOX^O KN`O\^OW ZK\K Y _]Y NO ZK^MRO] ZK\K MY\\SQS\Z\YLVOWK]NO.Y=XYKWLSOX^OASXNYa] +]]SW ]O NO\WY] _W MVS[_O OW v:Y]]SLVO .Y= Z\YLVOWv Y_ vASXNYa] NO^OM^ONv OXMYX^\K\OWY] _WK ^OVK MYW Y] OXNO\OY] NY] RY]^]O]O]OQ_SWY]OX^ÁYYVSXUOXMYX^\K\OWY]Y]OQ_SX^O$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
78
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
+ LYVK `O\WOVRK WK\MK _W Z\YLVOWK M\´^SMY K ]KLO\ Y NS\O^¥\SY vN\S`OMv NK W£[_SXK 8> ZYNO ]O\ WYX^KNY ZY\ [_KV[_O\ _]_£\SY SXNS]M\SWSXKNKWOX^O 0OS^K K KN`O\^ XMSK \O]^K KY KNWSXS]^\KNY\ NK \ONO^YWK\K]WONSKNK]XOMO]]£\SK]_WKNSMK¦^SVK[_S¤MYXPO\S\Y K\[_S`Y v\_VO]N\YZv KVS ZYNOWY] MYXPSQ_\K\ PK^Y] K ]O\OW XOQVSQOXMSKNY] ZOVY =KSX^ /bOWZVY$ ¤ LK]^KX^O MYW_W XK] \ONO] [_O _]KW 80= VSLO\K\OW K WYX^KQOW NO _XSNKNO] NO -.<97 XY] ]O_] K\[_S`Y]O^MObZY\^]ZYNOWY]MYXPSQ_\K\OX^ÁYZK\K[_OY=KSX^XÁY \OZY\^O^KVPK^YMYWY_WZ\YLVOWK +]LYVK]WK\\YX]v3]cY_\RY]^K.Y=^R\OK^)vOY]OQ_SX^O MYWYNS]]OWY]KX^O\SY\WOX^OO]MVK\OMOWXY]NKXOMO]]SNKNONO MY\\OÉO]MYX^\KK]KÉO].Y=
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
79
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
+8/B9= +XObY +$ 9 K\[_S`Y vO^MZ\Y^YMYV]v +XObY ,$ 9 K\[_S`Y vO^M]O\`SMO]v +XObY -$ ?W v]M\SZ^v ZK\K 3:-2+38= +XObY .$ 9] MKLOKVRY] NO ZKMY^O] 3: 3-7: >-: ?.: O +<: +XObY /$ -YWY _W ZKMY^O `SKTK K^\K`¤] NK ZSVRK >-:3:)
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
80
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
+8/B9+$
Z\Y^YMYV] >RS] PSVO NO]M\SLO] ^RO `K\SY_] Z\Y^YMYV] ^RK^ K\O
K`KSVKLVO P\YW ^RO >-:3: ]_L]c]^OW 3^ ]RY_VN LO
MYX]_V^ON SX]^OKN YP _]SXQ ^RO X_WLO\] SX ^RO +<:+
SXMV_NO PSVO] Y\ aY\]O T_]^ Q_O]]SXQ ^ROW
SZ SMWZ SQWZ QQZ ^MZ Z_Z _NZ SNZ \Ka
!
3: 3-7: 317: 11: >-: :?: ?.: 3.: <+A
SX^O\XO^ Z\Y^YMYV Z]O_NY Z\Y^YMYV X_WLO\ SX^O\XO^ MYX^\YV WO]]KQO Z\Y^YMYV SX^O\XO^ Q\Y_Z W_V^SMK]^ Z\Y^YMYV QK^OaKcQK^OaKc Z\Y^YMYV ^\KX]WS]]SYX MYX^\YV Z\Y^YMYV :+<- _XS`O\]KV ZKMUO^ Z\Y^YMYV _]O\ NK^KQ\KW Z\Y^YMYV ARK^]>RS]) <+A 3: SX^O\PKMO
/XN
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
81
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
+8/B9,$
8O^aY\U ]O\`SMO] 3X^O\XO^ ]^cVO
8Y^O ^RK^ S^ S] Z\O]OX^Vc ^RO ZYVSMc YP 3+8+ ^Y K]]SQX K ]SXQVO aOVVUXYaX
ZY\^ X_WLO\ PY\ LY^R >-: KXN ?.:% ROXMO WY]^ OX^\SO] RO\O RK`O ^aY OX^\SO]
O`OX SP ^RO Z\Y^YMYV NYO]Xv^ ]_ZZY\^ ?.: YZO\K^SYX]
>RS] VS]^ MY_VN LO PY_XN YX$
R^^Z$aaaS]SON_SXXY^O]SKXKK]]SQXWOX^]ZY\^X_WLO\]
8Y^ KVV ZY\^] K\O SXMV_NON YXVc ^RO WY\O MYWWYX YXO]
^MZ
_NZ
>-: :Y\^ =O\`SMO 7_V^SZVObO\ ^MZW_b _NZ
>-: :Y\^ =O\`SMO 7_V^SZVObO\ MYWZ\O]]XO^ ^MZ
7KXKQOWOX^ ?^SVS^c MYWZ\O]]XO^ _NZ
7KXKQOWOX^ ?^SVS^c MYWZ\O]]XO^ ^MZ
-YWZ\O]]SYX :\YMO]] MYWZ\O]]XO^ _NZ
-YWZ\O]]SYX :\YMO]] \TO ^MZ
+M^S`O ?]O\] ]c]^K^ _NZ _]O\]
+M^S`O ?]O\] NKc^SWO ^MZ .Kc^SWO
<0- " ! NKc^SWO _NZ .Kc^SWO
<0- " ! XO^]^K^ ^MZ
?XK]]SQXON EaK] XO^]^K^G [Y^N !^MZ [_Y^O
;_Y^O YP ^RO .Kc [Y^N !_NZ [_Y^O
;_Y^O YP ^RO .Kc W]Z "^MZ
7O]]KQO =OXN :\Y^YMYV W]Z "_NZ
7O]]KQO =OXN :\Y^YMYV MRK\QOX #^MZ ^^c^]^ ]Y_\MO
-RK\KM^O\ 1OXO\K^Y\ MRK\QOX #_NZ ^^c^]^ ]Y_\MO
-RK\KM^O\ 1OXO\K^Y\ P^ZNK^K ^MZ
0SVO >\KX]PO\ E.OPK_V^ .K^KG P^ZNK^K _NZ
0SVO >\KX]PO\ E.OPK_V^ .K^KG P^Z ^MZ
0SVO >\KX]PO\ E-YX^\YVG P]Z _NZ ]]R ^MZ
==2
==2 OVXO^ ^OVXO^ _NZ >OVXO^
^MZ KXc Z\S`K^O WKSV ]c]^OW
_NZ KXc Z\S`K^O WKSV ]c]^OW ]W^Z ^MZ WKSV
=SWZVO 7KSV >\KX]PO\ ]W^Z _NZ WKSV
=SWZVO 7KSV >\KX]PO\ X]aPO !^MZ
8=A ?]O\ =c]^OW 0/ X]aPO !_NZ
8=A ?]O\ =c]^OW 0/ W]QSMZ #^MZ
7=1 3-: W]QSMZ #_NZ
7=1 3-: &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
82
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
W]QK_^R W]QK_^R N]Z N]Z
^SWO ^SWO \KZ \KZ \VZ \VZ Q\KZRSM] Q\KZRSM] XKWO XKWO XKWO]O\`O\ XKWO]O\`O\ XSMXKWO XSMXKWO aRYS] aRYS] WZWPVKQ] WZWPVKQ] WZW WZW WZW]XN WZW]XN XSP^Z XSP^Z K_NS^N K_NS^N ^KMKM] ^KMKM] \OWKSVMU \OWKSVMU VKWKSX^ VKWKSX^ bX]^SWO bX]^SWO NYWKSX NYWKSX bX]MR bX]MR S]SQV S]SQV bX]K_^R bX]K_^R
bX]WKSV bX]WKSV
XSWKSV XSWKSV KMK] KMK]
^MZ _NZ ^MZ _NZ ^MZ _NZ !^MZ !_NZ "^MZ "_NZ #^MZ #_NZ ^MZ _NZ ^MZ _NZ ^MZ _NZ ^MZ _NZ ^MZ _NZ ^MZ _NZ ^MZ _NZ ^MZ _NZ !^MZ !_NZ "^MZ "_NZ #^MZ #_NZ ^MZ _NZ ^MZ _NZ ^MZ _NZ ^MZ _NZ ^MZ _NZ ^MZ _NZ ^MZ _NZ !^MZ !_NZ "^MZ "_NZ #^MZ #_NZ ^MZ _NZ ^MZ _NZ
7=1 +_^ROX^SMK^SYX
7=1 +_^ROX^SMK^SYX
.S]ZVKc =_ZZY\^ :\Y^YMYV
.S]ZVKc =_ZZY\^ :\Y^YMYV KXc Z\S`K^O Z\SX^O\ ]O\`O\ KXc Z\S`K^O Z\SX^O\ ]O\`O\
>SWO ^SWO]O\`O\
>SWO ^SWO]O\`O\
2Y]^ 8KWO =O\`O\
2Y]^ 8KWO =O\`O\
2Y]^ 8KWO =O\`O\
2Y]^ 8KWO =O\`O\
ARY 3]
ARY 3]
ARY 3]
ARY 3]
7:7 06+1= :\Y^YMYV
7:7 06+1= :\Y^YMYV
7O]]KQO :\YMO]]SXQ 7YN_VO E\OM`G
7O]]KQO :\YMO]]SXQ 7YN_VO E\OM`G
7:7 ENOPK_V^ ]OXNG
7:7 ENOPK_V^ ]OXNG
83 0>:
83 0>:
.SQS^KV +_NS^ .KOWYX
.SQS^KV +_NS^ .KOWYX
6YQSX 2Y]^ :\Y^YMYV >+-+-=
6YQSX 2Y]^ :\Y^YMYV >+-+-=
37: 6YQSMKV +NN\O]] 7KSX^OXKXMO
37: 6YQSMKV +NN\O]] 7KSX^OXKXMO
B8= >SWO :\Y^YMYV
B8= >SWO :\Y^YMYV
.YWKSX 8KWO =O\`O\
.YWKSX 8KWO =O\`O\
B8= -VOK\SXQRY_]O
B8= -VOK\SXQRY_]O
3=3 1\KZRSM] 6KXQ_KQO
3=3 1\KZRSM] 6KXQ_KQO
B8= +_^ROX^SMK^SYX
B8= +_^ROX^SMK^SYX KXc Z\S`K^O ^O\WSXKV KMMO]] KXc Z\S`K^O ^O\WSXKV KMMO]]
B8= 7KSV
B8= 7KSV KXc Z\S`K^O PSVO ]O\`SMO KXc Z\S`K^O PSVO ]O\`SMO
83 7+36
83 7+36
+-+ =O\`SMO]
+-+ =O\`SMO]
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
83
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
aRYS] aRYS] MY`SK MY`SK ^KMKM]N] ^KMKM]N] ][VXO^ ][VXO^ LYY^Z] LYY^Z] LYY^ZM LYY^ZM ^P^Z ^P^Z QYZRO\ QYZRO\ XO^\T] XO^\T] XO^\T] XO^\T] XO^\T] XO^\T] XO^\T] XO^\T]
NOY] NOY]
`O^^MZ `O^^MZ PSXQO\ PSXQO\ R^^Z R^^Z aaa aaa aaaR^^Z aaaR^^Z RY]^]X] RY]^]X] bPO\ bPO\ WS^WVNO` WS^WVNO` M^P M^P WS^WVNO` WS^WVNO` WPMYLYV WPMYLYV
UO\LO\Y] UO\LO\Y] ]_WS^^Q ]_WS^^Q
^MZ _NZ ^MZ _NZ ^MZ _NZ ^MZ _NZ !^MZ !_NZ "^MZ "_NZ #^MZ #_NZ !^MZ !_NZ !^MZ !_NZ !^MZ !_NZ !^MZ !_NZ !^MZ !_NZ !^MZ !_NZ ! ^MZ ! _NZ !!^MZ !!_NZ !"^MZ !"_NZ !#^MZ !#_NZ "^MZ "_NZ "^MZ "_NZ "^MZ "_NZ "^MZ "_NZ "^MZ "_NZ "^MZ "_NZ "^MZ "_NZ "^MZ "_NZ " ^MZ " _NZ "!^MZ "!_NZ ""^MZ ""_NZ "#^MZ "#_NZ
aRYS] aRYS]
KXc Z\S`K^O KXc Z\S`K^O KXc Z\S`K^O KXc Z\S`K^O `O^^MZ `O^^MZ 0SXQO\ 0SXQO\
-YWW_XSMK^SYX] 3X^OQ\K^Y\ -3
-YWW_XSMK^SYX] 3X^OQ\K^Y\ -3
>+-+-=.K^KLK]O =O\`SMO
>+-+-=.K^KLK]O =O\`SMO
9\KMVO =;68/>
9\KMVO =;68/>
,YY^]^\KZ :\Y^YMYV =O\`O\
,YY^]^\KZ :\Y^YMYV =O\`O\
,YY^]^\KZ :\Y^YMYV -VSOX^
,YY^]^\KZ :\Y^YMYV -VSOX^
>\S`SKV 0SVO >\KX]PO\
>\S`SKV 0SVO >\KX]PO\
1YZRO\
1YZRO\
.S]^\SL_^ON /b^O\XKV 9LTOM^ =^Y\O
.S]^\SL_^ON /b^O\XKV 9LTOM^ =^Y\O <4/ ]O\`SMO <4/ ]O\`SMO
AY\VN ASNO AOL 2>>:
AY\VN ASNO AOL 2>>:
AY\VN ASNO AOL 2>>:
AY\VN ASNO AOL 2>>:
AY\VN ASNO AOL 2>>:
AY\VN ASNO AOL 2>>:
29=>= 8KWO =O\`O\
29=>= 8KWO =O\`O\
B0/< ?^SVS^c
B0/< ?^SVS^c
73> 76 .O`SMO
73> 76 .O`SMO
-YWWYX >\KMO 0KMSVS^c
-YWWYX >\KMO 0KMSVS^c
73> 76 .O`SMO
73> 76 .O`SMO
7SM\Y 0YM_] -YLYV
7SM\Y 0YM_] -YLYV KXc Z\S`K^O ^O\WSXKV VSXU KXc Z\S`K^O ^O\WSXKV VSXU 5O\LO\Y] 5O\LO\Y]
=?73> >OVXO^ 1K^OaKc
=?73> >OVXO^ 1K^OaKc
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
84
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
NX]Sb NX]Sb WS^NY` WS^NY` XZZ XZZ NMZ NMZ YLTMKVV YLTMKVV ]_ZN_Z ]_ZN_Z NSbSO NSbSO ]aSP^\`P ]aSP^\`P ^KMXOa] ^KMXOa] WO^KQ\KW WO^KQ\KW XOaKMM^ RY]^XKWO] S]Y^]KZ M]XO^X] M]XO^X] \^OVXO^ \^OVXO^ ZYZ ZYZ ZYZ ZYZ ]_X\ZM ]_X\ZM K_^R ]P^Z __MZZK^R XX^Z X^Z X^Z XO^LSY]X] XO^LSY]X] XO^LSY]NQW XO^LSY]NQW XO^LSY]]]X XO^LSY]]]X SWKZ SWKZ ]XWZ ]XWZ^\KZ MWSZWKX MWSZWKX MWSZKQOX^ MWSZKQOX^ bNWMZ bNWMZ XOb^]^OZ XOb^]^OZ
#^MZ #_NZ #^MZ #_NZ #^MZ #_NZ #^MZ #_NZ #^MZ #_NZ #^MZ #_NZ # ^MZ # _NZ #!^MZ #!_NZ #"^MZ #"_NZ ##^MZ ##_NZ ^MZ ^MZ ^MZ ^MZ _NZ !^MZ !_NZ #^MZ #_NZ ^MZ _NZ ^MZ _NZ ^MZ ^MZ !^MZ #^MZ ^MZ _NZ !^MZ !_NZ "^MZ "_NZ #^MZ #_NZ ^MZ _NZ _NZ _NZ ^MZ _NZ ^MZ _NZ !!^MZ !!_NZ !"^MZ !"_NZ
.8=3B =OM_\S^ +^^\SL_^O >YUOX 7KZ .8=3B =OM_\S^ +^^\SL_^O >YUOX 7KZ 73> .Y`O\ =ZYYVO\ 73> .Y`O\ =ZYYVO\ 8O^aY\U :\SX^SXQ :\Y^YMYV 8O^aY\U :\SX^SXQ :\Y^YMYV .O`SMO -YX^\YV :\Y^YMYV .O`SMO -YX^\YV :\Y^YMYV >S`YVS 9LTOM^ .S]ZK^MRO\ >S`YVS 9LTOM^ .S]ZK^MRO\ =?:.?: =?:.?: .3B3/ :\Y^YMYV =ZOMSPSMK^SYX .3B3/ :\Y^YMYV =ZOMSPSMK^SYX =aSP^ +- 8Oa] >+- 8Oa] 7O^KQ\KW
RY]^XKWO
_]_KVVc P\YW ]\SXSM ^]KZ
ZK\^ YP 3=9./ M]YX]
KV]Y _]ON Lc -=9 XKWO ]O\`O\ M]YX]
OVXO^ ZY]^YPPSMO :9: `O\]SYX
:9: `O\]SYX
^KZ SNOX^ K_^ROX^SMK^SYX \OKNXOa] _X^Z
?=/8/> 8Oa] >\KX]PO\ :\Y^YMYV
8O^aY\U >SWO :\Y^YMYV
8/>,39= 8KWO =O\`SMO
8/>,39= .K^KQ\KW =O\`SMO
8/>,39= ]O]]SYX ]O\`SMO SWKZ SWKZ SWKZ SWKZ
]XWZ^\KZ
3X^O\SW 7KSV +MMO]] :\Y^Y ` =SWZVO 8O^ 7QW^ :\Y^Y >\KZ] PY\ =87: 3=9 WQW^ Y`O\ 3: -79>
B .S]ZVKc 7Q\ -YX^\YV :\Y^Y 8OB>=^OZ 8Ob^=^OZ 8OB>=^OZ aSXNYa 8OB>=^OZ 8Ob^=^OZ ]O\`O\
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
85
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
LQZ !#^MZ
,Y\NO\ 1K^OaKc :\Y^Y LQZ !#_NZ Z\Y]ZO\Y #^MZ
-VSPP 8O_WKXv] :\Y]ZO\Y Z\Y]ZO\Y #_NZ S\M #^MZ
3X^O\XO^
=87: ?XSb 7_V^SZVObO\ ]W_b ##_NZ K^\^WZ ^MZ
+ZZVO>KVU \Y_^SXQ K^\^WZ _NZ K^XLZ ^MZ
+ZZVO>KVU XKWO LSXNSXQ K^XLZ _NZ K^OMRY ^MZ
+ZZVO>KVU OMRY K^OMRY _NZ K^dS] ^MZ
+ZZVO>KVU dYXO SXPY\WK^SYX K^dS] _NZ d# ^MZ aKS]
83=9 D# NK^KLK]O d# _NZ aKS] SZb ^MZ
3:B SZb _NZ SWKZ ^MZ
3X^O\KM^S`O 7KSV +MMO]] SWKZ _NZ
:\Y^YMYV ` _VS]^]O\` !^MZ
?83B 6S]^]O\` _VS]^]O\` !_NZ R^^Z] ^MZ
R^^Z Z\Y^YMYV Y`O\ >6===6 R^^Z] _NZ
R^^Z Z\Y^YMYV Y`O\ >6===6
?83B ]ZOMSPSM ]O\`SMO]
ObOM ^MZ LSPP _NZ MYW]K^ VYQSX ^MZ aRY _NZ aRYN ]ROVV ^MZ MWN
XY ZK]]aY\N] _]ON ]c]VYQ _NZ Z\SX^O\ ^MZ ]ZYYVO\
VSXO Z\SX^O\ ]ZYYVO\ ^KVU !_NZ X^KVU "_NZ \Y_^O _NZ \Y_^O\ \Y_^ON
<3: ^SWON _NZ ^SWO]O\`O\ ^OWZY ^MZ XOaNK^O MY_\SO\ ^MZ \ZM MYXPO\OXMO ^MZ MRK^ XO^XOa] ^MZ \OKNXOa] XO^aKVV _NZ
PY\ OWO\QOXMc L\YKNMK]^] __MZ ^MZ __MZN
__MZ NKOWYX \OWY^OP] ^MZ \P]I]O\`O\ \P]
,\_XRYPP \OWY^O PSVO]c]^OW UVYQSX ^MZ
5O\LO\SdON \VYQSXv ` U]ROVV ^MZ
5O\LO\SdON \]Rv ` UO\LO\Y]KNW !#^MZ
5O\LO\Y] UKNWSXv `
aOL]^O\ ! ^MZ
8O^aY\U NSM^SYXK\c aOL]^O\ ! _NZ
0\YW +]]SQXON 8_WLO\]vv$
( >RO
( MKX LO _]ON Lc Y\NSXK\c _]O\ Z\YMO]]O] Y\ Z\YQ\KW] ObOM_^ON Lc Y\NSXK\c &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
86
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
( _]O\]
( :Y\^] K\O _]ON SX ^RO >-: E G ^Y XKWO ^RO OXN] YP VYQSMKV
( MYXXOM^SYX] aRSMR MK\\c VYXQ ^O\W MYX`O\]K^SYX] 0Y\ ^RO Z_\ZY]O YP
( Z\Y`SNSXQ ]O\`SMO] ^Y _XUXYaX MKVVO\] K ]O\`SMO MYX^KM^ ZY\^ S]
( NOPSXON >RS] VS]^ ]ZOMSPSO] ^RO ZY\^ _]ON Lc ^RO ]O\`O\ Z\YMO]] K] S^]
( MYX^KM^ ZY\^ ARSVO ^RO 3+8+ MKX XY^ MYX^\YV _]O] YP ^RO]O ZY\^] S^
( NYO] \OQS]^O\ Y\ VS]^ _]O] YP ^RO]O ZY\^] K] K MYX`SOXOXMO ^Y ^RO
( MYWW_XS^c
SXQ\O]VYMU ^MZ SXQ\O]VYMU _NZ Z\Y]ZO\YXZ ^MZ
:\Y]ZO\Y XYXZ\S`SVOQON Z\Y]ZO\YXZ _NZ \PO ^MZ
+M^_KVVc _]O] ?.: YXVc
5O\LO\Y] :\YTOM^ +^ROXK73> ]O\`SMO]
8Y^O ^RK^ ^RO]O K\O PY\ 5O\LO\Y] ` KXN K\O _XYPPSMSKV =S^O] \_XXSXQ
` ]RY_VN _XMYWWOX^ ^RO]O KXN MYWWOX^ Y_^ ^RO ` OX^\SO] KLY`O
UO\LO\Y] !_NZ UNM 5O\LO\Y] ]O\`O\ _NZ
UO\LO\Y] !^MZ UNM 5O\LO\Y] ]O\`O\ ^MZ U\L_ZNK^O ! ^MZ U\OQ 5O\LO\Y] \OQS]^\K^SYX UZK]]aN ! ^MZ UZaN 5O\LO\Y] ZK]]aN
UVYQSX ^MZ
5O\LO\Y] \VYQSX OUVYQSX ^MZ
5O\LO\Y] OXM\cZ^ON \VYQSX
U]ROVV ^MZ U\MWN 5O\LO\Y] \OWY^O ]ROVV
?XYPPSMSKV L_^ XOMO]]K\c PY\ 8O^,=. ]O\`SMO]
]XZZ ^MZ
=SWZVO 8O^aY\U :KQSXQ :\Y^YMYV ]_ZPSVO]\` "!^MZ
=?: ]O\`O\ ]_ZPSVONLQ !^MZ
=?: NOL_QQSXQ RcVKPKb #^MZ
2cVK0+B MVSOX^]O\`O\ Z\Y^YMYV KbXO^ #^MZ
+ZZVSb =O\`O\ KKQ^ac #^MZ
+ZZVSb +XcaK\O \ZVKc _NZ R^^Z\WKX !^MZ
WKX ^Y R^WV YX ^RO PVc ][V !^MZ
KNKLK]N \OWY^O ][V L^b ^MZ MOZ^N `LYbN ^MZ
PY\ `LYb NKOWYX `LYbN _NZ S]NXVYQ ^MZ S]NXVYQ 68B.,7= ^MZ WSNSXO^ ^MZ WSNSXO^N
]O\`SMO] PY\ RZ OVY[_OXMO
\_X]\` "^MZ OVY[]N "^MZ OVY[NL "^MZ OVY[NL "^MZ
]YP^aK\O
2: 2: 2: 2:
/VY[_OXMO /VY[_OXMO /VY[_OXMO /VY[_OXMO
8=<@ ASXNYa] SX^OQ\K^SYX + OVY[]N ]O\`O\ + NK^K LK]O ]O\`O\ + /69;., ]O\`O\
]O\`SMO] PY\ KWKXNK LKMU_Z ]YP^aK\O &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
87
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
KWKXNK KWKXNKSNb KWSNb^KZO
"_NZ "^MZ "^MZ
]O\`SMO] PY\ \KNS_] ]YP^aK\O
\KNS_] _NZ \KNS_]N \KNKMM^ _NZ
WKUO KZZVO ^KVU WY\O P\SOXNVc
\^WZ NNZ
KLVO 7KSX^OXKXMO :\Y^YMYV XLZ NNZ
8KWO ,SXNSXQ :\Y^YMYV OMRY NNZ
+ZZVO>KVU /MRY :\Y^YMYV dSZ NNZ
DYXO 3XPY\WK^SYX :\Y^YMYV
+ZZVO^KVU
KPZY`O\^MZ "^MZ KPZY`O\^MZ "_NZ
+0: Y`O\ >-:
+0: Y`O\ ?-:
7c=;6 .KOWYX
Wc][V ^MZ Wc][V _NZ
^RO \]cXM NKOWYX
\]cXM "!^MZ
XO^ZVKX
XO^ZVKX
^MZ
]aK^ S] ^RO =KWLK AOL +NWSXS]^\K^SYX >YYV
]aK^ #^MZ
/X^\SO] PY\ 3,7 ., .K^KLK]O
NLMNLSX]^ ^MZ
-YXXOM^SYX ZY\^ PY\ ., SX]^KXMO NLSX]^ NLSNLSX]^ ^MZ
3X^O\\_Z^ ZY\^ PY\ ., SX]^KXMO NLSX]^
/X^\c PY\ 7SWO\ NK^KLK]O
WSWO\ ^MZ
7SWO\ .K^KLK]O =O\`O\
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
88
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
89
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
+8/B9-$ EY ]´WLYVY ]M\SZ^G
ª
WK\MK K MYX^SX_KÁY NK VSXRK% Y] KMOX^Y] PY\KW ]_Z\SWSNY] NY
LSX]R
-YX^\YVK MY\O] XK ^OVK LYVN'^Z_^ ]W]Y YPPLYVN'^Z_^ \W]Y ,96.98' ]O^^O\W LYVN YX ,96.900' ]O^^O\W LYVN YPP 1/8' ]O^^O\W PY\OQ\Y_XN Q\OOX ./0' ]O^^O\W NOPK_V^ MVOK\
PSW
3X^O\PKMO
-YVY[_O K[_S K SX^O\PKMO NO]OTKNK
O^R O^R ZZZ O^M 69-+630' O^R
6YMKVSdKMKY NY SZMRKSX] 3:-2+38=' ]LSXSZMRKSX]
' 69-+63:69-+67+=5 OMRY bb OMRY eLYVNgE0S\OaKVVGeYPPLYVNg 3:$ 69-+68/> 79>/8/>'
6SWZK ^YNK] K] \OQ\K] NO PS\OaKVV PVKQ v0v OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg 6SWZKXNY \OQ\K]
:KMY^O] [_O MROQKW INO PY\KI NK \ONO 3:-2+38= 0 SXZ_^ OMRY X &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
90
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
:KMY^O] [_O ]KOW NK SX^\KXO^ 3:-2+38= 0 Y_^Z_^ OMRY X 1/8 OMRY >O\WSXKNY ./0
OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg 3X^O\PKMO vVYv 3:-2+38= + SXZ_^ S VY ] N T +--/:> 3:-2+38= + Y_^Z_^ S VY ] N T +--/:> OMRY X 1/8 OMRY >O\WSXKNY ./0
-YXPSQ_\K ^OVXO^ AAA O 0>: MYW _W Z\KdY WSXSWY WKXSZ_VKXNY Y] LS^] NO >9= NY ZKMY^O
+>/8-+9 .O`O]O ^O\ RKLSVS^KNY XY UO\XOV K YZMKY -98031I3:I<9?>/I>9=
@O\ 3ZMRKSX] 2Ya>Y Z "
9] MRKWKNY] >9= LS^] KPO^KW K PY\WK MYWY Y] ZKMY^O] ]KY ^\K^KNY] +]
MYXPSQ_\KMYO] ZY]]S`OS] ]KY$
vWKbSW_W NOVKcv
vWKbSW_W ^R\Y_QRZ_^v
vWKbSW_W \OVSKLSVS^cv
vWSXSW_W MY]^v OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg >cZO 9P =O\`SMO PVKQ] 3:-2+38= + Y_^Z_^ Z ^MZ N aaa ^ b b 3:-2+38= + Y_^Z_^ Z ^MZ N ^OVXO^ ^ b b 3:-2+38= + Y_^Z_^ Z ^MZ N P^Z ^ b b OMRY X
-YXPSQ_\K P^ZNK^K ZK\K Y WKbSWY NO v]KSNKv 3:-2+38= + Y_^Z_^ Z ^MZ N P^ZNK^K ^ b b" OMRY X 1/8 OMRY >O\WSXKNY ./0
:YO \OQ\K] ZK\K ZO\WS^S\ MYXObYO] NO \ONO] O RY]^] MYXPSK`OS]
OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg
3:-2+38= + SXZ_^ ] E3:] RY]^XO^G N 69-+68/> &ZY\^]( T +--/:>
OMRY X
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
91
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
1/8
OMRY >O\WSXKNY
./0
:YO \OQ\K] ZK\K SWZONS\ MYXObYO] MYW \ONO] O RY]^] XKYMYXPSK`OS] 9]
ZKMY^O] ]KY \OQS]^\KNY]
OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg
3:-2+38= + SXZ_^ V ] E3:] RY]^XO^G N 69-+68/> &ZY\^]( T ./8C
OMRY X
3:-2+38= + SXZ_^ V L S 69-+630 Z SMWZ ] E3:]G N 69-+68/> T ª./8C
OMRY X
1/8
OMRY >O\WSXKNY
./0
OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg =O\`SMY] NS`O\]Y]
3:-2+38= + SXZ_^ +--/:>
3:-2+38= + SXZ_^ +--/:>
3:-2+38= + SXZ_^ +--/:>
3:-2+38= + SXZ_^ +--/:>
OMRY X
ª$ T WKSVMSZ]QKY\QL\ N 69-+68/> ª$ T aaaMSZ]QKY\QL\ N 69-+68/> $ ªT Z\YbcMSZ]QKY\QL\ N 69-+68/> ª$ T
Z ^MZ ] KVZRKMSZ]QKY\QL\ N 69-+68/> Z ^MZ ] Z ^MZ ] Z ^MZ ]
:Y]]Y _]K\ Y] OXNO\OMY] KLKSbY] ZK\K WKXOTK\ WO_ .8= .8=29=>' ZY\ ObOWZVY
3:-2+38= + SXZ_^ Z ^MZ ] .8=29=> N 69-+68/> $ T
3:-2+38= + SXZ_^ Z ^MZ ] .8=29=> N 69-+68/> $ T
OMRY X
ª+--/:> ª+--/:>
?]O O]]O O]ZKMY ZK\K XOQK\ KMO]]Y K \ONO K WK[_SXK Y_ Q\_ZY NO WK[_SXK] 3:-2+38= + SXZ_^ V ] E3:]G N 69-+68/> T ./8C OMRY X 1/8 OMRY >O\WSXKNY ./0
/]^K ZK\^O XOQK KMO]]Y K ]O\`SMY] O ZY\^K] ]KLSNKWOX^O Z\YLVOWK^SMK]
ZK\K PY\K NK \ONO VYMKV &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
92
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg :Y\^K] XOQKNK]
8O^,/?3=KWLK 3:-2+38= + SXZ_^ Z ^MZ ] 79>/8/> N 69-+68/> # T ./8C 3:-2+38= + SXZ_^ Z _NZ ] 79>/8/> N 69-+68/> # T ./8C OMRY X
7SM\Y]YP^ =;6 3:-2+38= + SXZ_^ Z ^MZ ] 79>/8/> N 69-+68/> T ./8C 3:-2+38= + SXZ_^ Z _NZ ] 79>/8/> N 69-+68/> T ./8C OMRY X
:Y]^Q\O] =;6 3:-2+38= + SXZ_^ Z ^MZ ] 79>/8/> N 69-+68/> T ./8C 3:-2+38= + SXZ_^ Z _NZ ] 79>/8/> N 69-+68/> T ./8C OMRY X
8O^aY\U 0SVO =c]^OW 80= 3:-2+38= + SXZ_^ Z ^MZ ] 79>/8/> N 69-+68/> # T ./8C 3:-2+38= + SXZ_^ Z _NZ ] 79>/8/> N 69-+68/> # T ./8C OMRY X
BASXNYa] .S]ZVKc] $$ 3:-2+38= + SXZ_^ Z ^MZ ] 79>/8/> N 69-+68/> ###$ T ./8C 3:-2+38= + SXZ_^ Z _NZ ] 79>/8/> N 69-+68/> ###$ T ./8C OMRY X
B 0YX^ =O\`O\ $$ 3:-2+38= + SXZ_^ Z ^MZ ] 79>/8/> N 69-+68/> ! T ./8C 3:-2+38= + SXZ_^ Z _NZ ] 79>/8/> N 69-+68/> ! T ./8C OMRY X
,KMU 9\SPSMO /8/> N 69-+68/> ! T ./8C 3:-2+38= + SXZ_^ V Z _NZ ] 79>/8/> N 69-+68/> ! T ./8C OMRY X
8O^,_] /8/> N 69-+68/> $ T 3:-2+38= + SXZ_^ V Z _NZ ] 79>/8/> N 69-+68/> $ T OMRY X
ª./8C ª./8C
1/8 OMRY >O\WSXKNY ./0
>KS] ZY\^K] ]KY KLO\^K] ZK\K ZO\WS^S\ ]Y[_O^O] M\SKNY ZY\ MYXObYO]
ZO\WS^SNK] ZOVY SZMRKSX] OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg :Y\^K] vKV^K]v O XKYªZ\S`SVKQSKNK] 3:-2+38= + SXZ_^ Z ^MZ ] 79>/8/> N 69-+68/> $ T 3:-2+38= + SXZ_^ Z _NZ ] 79>/8/> N 69-+68/> $ T OMRY X &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
ª+--/:> ª+--/:>
3iJLQD
93
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
1/8 OMRY >O\WSXKNY ./0
=O\`SMY] NO MK\K^O\ LK]SMY OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg =O\`SMY]
P^ZNK^K KXN P^Z 3:-2+38= + SXZ_^ Z ^MZ ] 79>/8/> N 69-+68/> T +--/:> 3:-2+38= + SXZ_^ Z ^MZ ] 79>/8/> N 69-+68/> T +--/:> OMRY X
]]R
3:-2+38= + SXZ_^ Z ^MZ ] 79>/8/> N 69-+68/> T +--/:>
OMRY X
^OVXO^
3:-2+38= + SXZ_^ Z ^MZ ] 79>/8/> N 69-+68/> T +--/:>
OMRY X
]W^Z
3:-2+38= + SXZ_^ Z ^MZ ] 79>/8/> N 69-+68/> T +--/:>
OMRY X
.8= 3:-2+38= + SXZ_^ Z ^MZ ] 79>/8/> N 69-+68/> T +--/:> 3:-2+38= + SXZ_^ Z _NZ ] 79>/8/> N 69-+68/> T +--/:> OMRY X
.2-: NY VKNY NK
3:-2+38= + SXZ_^ S 69-+630 Z _NZ ] 79>/8/> N ª ! T +--/:>
3:-2+38= + Y_^Z_^ S 69-+630 Z _NZ ] 79>/8/> N ª " T +--/:>
OMRY X
R^^Z "
3:-2+38= + SXZ_^ Z ^MZ ] 79>/8/> N 69-+68/> " T +--/:>
OMRY X
:9:
3:-2+38= + SXZ_^ Z ^MZ ] 79>/8/> N 69-+68/> T +--/:>
OMRY X
SNOX^N 3:-2+38= + SXZ_^ Z ^MZ ] 79>/8/> N 69-+68/> T 4/-> OMRY X
XX^Z #
3:-2+38= + SXZ_^ Z ^MZ ] 79>/8/> N 69-+68/> # T +--/:>
OMRY X
R^^Z]
3:-2+38= + SXZ_^ Z ^MZ ] 79>/8/> N 69-+68/> T +--/:> &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
94
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
OMRY X
3-; =O\`SMO]
3:-2+38= + SXZ_^ Z ^MZ ] 79>/8/> N 69-+68/> T +--/:>
OMRY X 1/8 OMRY >O\WSXKNY ./0
OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg
?]O S]]Y ZK\K XOQK\ K^K[_O] 3-7: NO OXNO\OMY] O]ZOMSPSMY] 3:-2+38= + SXZ_^ L S /B>/<8+630 Z SMWZ ] &KNN\O]]( N T
OMRY X
ª./8C
:O\WS^O K MROQKNK NO ZKMY^O] 3-7: 3:-2+38= + SXZ_^ Z SMWZ ] 79>/8/> N 69-+68/> T +--/:> 3:-2+38= + SXZ_^ Z SMWZ ] 79>/8/> N 69-+68/> T +--/:> OMRY X
:O\WS^O K ]KSNK NO ZKMY^O] 3-7: 3:-2+38= + Y_^Z_^ Z SMWZ ] 69-+68/> N 79>/8/> T +--/:> 3:-2+38= + Y_^Z_^ Z SMWZ ] 69-+68/> N 79>/8/> T +--/:> OMRY X 1/8 OMRY >O\WSXKNY ./0
-YXPSQ_\K ZYVS^SMK ZKN\KY 3:-2+38= + SXZ_^ T ./8C 3:-2+38= + Y_^Z_^ T +--/:> OMRY ,96.98 OMRY eLYVNgE0S\OaKVVGeYPPLYVNg /]^KLOVOMSWOX^Y NO PS\OaKVV ,96.900 OMRY bb ./0
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ªMYWZVO^Y
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
95
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
+XObY.$ K 9 MKLOKVRY 3:$ ! " # ! " # ! " # f@O\]SYXf 326 f>cZO YP =O\`SMOf >Y^KV 6OXQ^R f f 3NOX^SPSMK^SYX f0VKQ]f 0\KQWOX^ 9PP]O^ f f >SWO ^Y 6S`O f :\Y^YMYV f 2OKNO\ -ROMU]_W f f =Y_\MO +NN\O]] f f .O]^SXK^SYX +NN\O]] f f 9Z^SYX] f :KNNSXQ f K 9 MKLOKVRY 3-7: ! " # ! " # ! " # f >cZO f -YNO f -ROMU]_W f f _X_]ON f f 3X^O\XO^ 2OKNO\ LS^] YP 9\SQSXKV .K^K .K^KQ\KW f -KWZY] 3-7:$ >cZO -YNO
' ' ' ' ' '
XO^ _X\OKMRKLVO% RY]^ _X\OKMRKLVO% Z\Y^YMYV _X\OKMRKLVO% ZY\^ _X\OKMRKLVO% P\KQWOX^K^SYX XOONON KXN .0 ]O^% ]Y_\MO \Y_^O PKSVON
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
96
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
K 9 MKLOKVRY >-:$ ! " # ! " # ! " # f =Y_\MO :Y\^ f .O]^SXK^SYX :Y\^ f f =O[_OXMO 8_WLO\ f f +MUXYaVONQWOX^ 8_WLO\ f f .K^K f f?f+f:ff8f8f f f -ROMU]_W f ?\QOX^ :YSX^O\ f f 9Z^SYX] f :KNNSXQ f f NK^K f
K 9 MKLOKVRY ?.:$
! " f =Y_\MO f .O]^SXK^SYX f f :Y\^ f :Y\^ f f f f f 6OXQ^R f -ROMU]_W f f f NK^K YM^O^]
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
97
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
K 9 MKLOKVRY +<:
! " # ! " # ! " # f >cZO 2K\NaK\O f >cZO :\Y^YMYV f f 26/8 f :6/8 f 9ZO\K^SYX f f =/8./< 2+ f f =/8./< 2+ f =/8./< 3: f f =/8./< 3: f >+<1/> 2+ f f >+<1/> 2+ f f >+<1/> 3: f
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
98
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
+XObY/$* -YWY _W ZKMY^O `SKTK K^\K`¤] NO _W KZVSMK^S`Y MVSOX^O K^¤ Y RY]^ ]O\`SNY\) 8Y NSKQ\KWK KLKSbY X¥] YL]O\`KWY] _W RY]^ MVSOX^O KL\SXNY _WK MYXObÁY `SK \VYQSX MYW Y_^\Y RY]^ ]O\`SNY\$
*
0YX^O$ >-:3: KXN .K^K -YWW_XSMK^SYX] +NWSXS]^\K^SYX 1_SNO =_X 7SM\Y]c]^OW] 3XM YM^YLO\ ##" Z &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
99
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
,SLVSYQ\KPSKQO\KV +<8/>> 7 O^ KVSS .O]`OXNKXNY Y >-:3: <SY NO 4KXOS\Y ON -KWZ_] ##! ,/669@38 = .OPOXNSXQ +QKSX]^ =O[_OXMO 8_WLO\ +^^KMU] <0- #" IIIIIIIIIII =OM_\S^c :\YLVOW] SX ^RO -YWW_XSMK^SYX
>-:3:
:\Y^YMYV
=_S^O
-YWZ_^O\
-97/< . / 3X^O\VSQKÁY OW -:3: @YV_WO 3$ :\SXM´ZSY] :\Y^YMYVY] O +\[_S^O^_\K <SY NO 4KXOS\Y ON -KWZ_] Ø ONSÁY ##" -<3=-?969 : .S]^\SL_^ON .OXSKV YP =O\`SMO >\SX >\SLO 0VYYN 8O^aY\U >\SLO 0VYYN 8O^aY\U KXN =^KMROVN\KR^ -3+-# .OZK\^KWOX^ YP /XO\Qc 6686 POL\_K\c .+A=98 > 8/> 29A>9 ` WK\MR ##! .C=98 : .SMSYX£\SY NO 9 `# WKc ##" 0<+=/< , =S^O =OM_\S^c 2KXNLYYU <0- 2?8> < 3X^O\XO^3X^\KXO^ 0S\OaKVV =OM_\S^c :YVSMc >\KX]KM^SYX =O\`SMO] -YWZ_^O\ -YWW_XSMK^SYX] ##"
+\MRSM^O^S\O
KXN
7+<-/69 + 3X^\KXO^ OW +WLSOX^O 6SX_b <SY NO 4KXOS\Y ,<+=:9<> ### 7?-2=/6 < ]P 0S\OaKVV =YP^aK\O @O\]SYX POL ##! 89<>2-?>> = -YWY .O^OM^K\ 3X`K]ÁY OW /6 4 ON >\K]WS]]SYX -YX^\YV :\Y^YMYV .+<:+ 3X^O\XO^ :\YQ\KW :\Y^YMYV =ZOMSPSMK^SYX <0- !# :9=>/6 4 ?]O\ .K^KQ\KW :\Y^YMYV <0- ! " ==/6 : 6SX_b 3:-2+38=29A>9 ` TKX ### =-9 9ZOX=O\`O\q 3X^O\XO^ =O\`SMO] ` WKc ##! =/ 7+<5900 4 -YX^\K+^K[_O$ K 2S]^¥\SK NK -KZ^_\K NY :S\K^K -SLO\X¤^SMY WKS] :\YM_\KNY NY] /?+ =ÁY :K_VY -YWZKXRSK NK] 6O^\K] ## =?8 7SM\Y]c]^OW]q >-:3: KXN .K^K -YWW_XSMK^SYX] +NWSXS]^\K^SYX 1_SNO :KVY +V^Y YM^ ##" &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
100
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
=_=/ 6SX_bq 3X]^KVVK^SYX -YXPSQ_\K^SYX KXN 0S\]^ =^OZ] 8®\XLO\Q Ø ONSÁY
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
101
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
Sobre o autor da Apostila (VWDDSRVWLODpGHDXWRULDGH5HQDWR0DUWLQLUPDUWLQL#FLSVJDRUJEU!GRXWRUHP)LORVRILD SHOD 3RQWLItFLD 8QLYHUVLGDGH &DWyOLFD GR 5LR GH -DQHLUR RQGH OHFLRQRX DV GLVFLSOLQDV GH )LORVRILD GD &LrQFLD H /yJLFD SDUD R &7& )RL EROVLVWD GR &13T DR ORQJR GRV DQRV SyV JUDGXDomR 8VXiULR H HQWXVLDVWD Ki PDLV GH DQRV GR /LQX[ PDV HVVHQFLDOPHQWH FRPR XP 6LVWHPD 2SHUDFLRQDO YROWDGR SDUD 5HGH H LJXDOPHQWH DSWR DR FRQKHFLPHQWR H DRV GHVDILRVDFDGrPLFRVHSHGDJyJLFRVGHQRVVRSDtV 'HVHQYROYH QR PRPHQWR XP VLWH VREUH 6HJXUDQoD HP 5HGHV /LQX[ TXH VHUi KRVSHGDGR SHOR&,36*$7DPEpPSDUWLFLSDGRGHVHQYROYLPHQWRGHXP VQLIIHU R$36VRERVWHUPRV GD*18*3/FRP&KULVWLDQ6FKXOWH 1XPD HVFROD GD 6HFUHWDULD GH (GXFDomR GR 5LR GH -DQHLUR HP 1LWHUyL GHVHQYROYH XP /DERUDWyULRFRPXPD5HGH/LQX[SDUDRHQVLQRLQWURGXWyULRGH/LQX[H5HGHVSDUDMRYHQV GRHQVLQRPpGLR 6HXSURMHWRIXWXURGHHQVLQRWDPEpPpXP&XUVRTXHSURSRQKDDLQWHJUDomRGR/LQX[FRP RVRXWURV6LVWHPDV2SHUDFLRQDLV81,;WUDGLFLRQDLVWDLVFRPR6&22SHQ6HUYHUR6RODULVHR )UHH%6'
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
102
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
*18)UHH'RFXPHQWDWLRQ/LFHQVH 9HUVLRQ 0DUFK &RS\ULJKW & )UHH 6RIWZDUH )RXQGDWLRQ ,QF 7HPSOH 3ODFH 6XLWH %RVWRQ 0$ 86$ (YHU\RQH LV SHUPLWWHG WR FRS\ DQG GLVWULEXWH YHUEDWLP FRSLHV RI WKLV OLFHQVH GRFXPHQW EXW FKDQJLQJ LW LV QRW DOORZHG 35($0%/(
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
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
103
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ±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
,I \RX SXEOLVK SULQWHG FRSLHV RI WKH 'RFXPHQW QXPEHULQJ PRUH WKDQ DQG WKH 'RFXPHQW V OLFHQVH QRWLFH UHTXLUHV &RYHU 7H[WV \RX PXVW HQFORVH WKH FRSLHV LQ FRYHUV WKDW FDUU\ FOHDUO\ DQG OHJLEO\ DOO WKHVH &RYHU 7H[WV )URQW&RYHU 7H[WV RQ WKH IURQW FRYHU DQG %DFN&RYHU 7H[WV RQ WKH EDFN FRYHU %RWK FRYHUV PXVW DOVR FOHDUO\ DQG OHJLEO\ LGHQWLI\ \RX DV WKH SXEOLVKHU RI WKHVH FRSLHV 7KH IURQW FRYHU PXVW SUHVHQW WKH IXOO WLWOH ZLWK DOO ZRUGV RI WKH WLWOH HTXDOO\ SURPLQHQW DQG YLVLEOH
$
8VH LQ WKH 7LWOH 3DJH DQG RQ WKH FRYHUV LI DQ\ D WLWOH GLVWLQFW IURP WKDW RI WKH 'RFXPHQW DQG IURP WKRVH RI SUHYLRXV YHUVLRQV ZKLFK VKRXOG LI WKHUH ZHUH DQ\ EH OLVWHG LQ WKH +LVWRU\ VHFWLRQ RI WKH 'RFXPHQW
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
104
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
%
/LVW RQ WKH 7LWOH 3DJH DV DXWKRUV RQH RU PRUH SHUVRQV RU HQWLWLHV UHVSRQVLEOH IRU
DXWKRUVKLS RI WKH
PRGLILFDWLRQV LQ WKH 0RGLILHG 9HUVLRQ WRJHWKHU ZLWK DW OHDVW ILYH RI WKH SULQFLSDO DXWKRUV RI WKH 'RFXPHQW DOO RI LWV SULQFLSDO DXWKRUV LI LW KDV OHVV WKDQ ILYH
&
6WDWH RQ WKH 7LWOH SDJH WKH QDPH RI WKH SXEOLVKHU RI WKH 0RGLILHG 9HUVLRQ DV WKH SXEOLVKHU
'
3UHVHUYH DOO WKH FRS\ULJKW QRWLFHV RI WKH 'RFXPHQW
(
$GG DQ DSSURSULDWH FRS\ULJKW QRWLFH IRU \RXU PRGLILFDWLRQV DGMDFHQW WR WKH RWKHU FRS\ULJKW QRWLFHV
)
,QFOXGH LPPHGLDWHO\ DIWHU WKH FRS\ULJKW QRWLFHV D OLFHQVH QRWLFH JLYLQJ WKH SXEOLF SHUPLVVLRQ WR XVH WKH 0RGLILHG 9HUVLRQ XQGHU WKH WHUPV RI WKLV /LFHQVH LQ WKH IRUP VKRZQ LQ WKH $GGHQGXP EHORZ
*
3UHVHUYH LQ WKDW OLFHQVH QRWLFH WKH IXOO OLVWV RI ,QYDULDQW 6HFWLRQV DQG UHTXLUHG &RYHU 7H[WV JLYHQ LQ WKH 'RFXPHQW V OLFHQVH QRWLFH
+
,QFOXGH DQ XQDOWHUHG FRS\ RI WKLV /LFHQVH
,
3UHVHUYH WKH VHFWLRQ HQWLWOHG +LVWRU\ DQG LWV WLWOH DQG DGG WR LW DQ LWHP VWDWLQJ DW OHDVW WKH WLWOH \HDU QHZ DXWKRUV DQG SXEOLVKHU RI WKH 0RGLILHG 9HUVLRQ DV JLYHQ RQ WKH 7LWOH 3DJH ,I WKHUH LV QR VHFWLRQ HQWLWOHG +LVWRU\ LQ WKH 'RFXPHQW FUHDWH RQH VWDWLQJ WKH WLWOH \HDU DXWKRUV DQG SXEOLVKHU RI WKH 'RFXPHQW DV JLYHQ RQ LWV 7LWOH 3DJH WKHQ DGG DQ LWHP GHVFULELQJ WKH 0RGLILHG 9HUVLRQ DV VWDWHG LQ WKH SUHYLRXV VHQWHQFH
-
3UHVHUYH WKH QHWZRUN ORFDWLRQ LI DQ\ JLYHQ LQ WKH 'RFXPHQW IRU SXEOLF DFFHVV WR D 7UDQVSDUHQW FRS\ RI WKH 'RFXPHQW DQG OLNHZLVH WKH QHWZRUN ORFDWLRQV JLYHQ LQ WKH 'RFXPHQW IRU SUHYLRXV YHUVLRQV LW ZDV EDVHG RQ 7KHVH PD\ EH SODFHG LQ WKH +LVWRU\ VHFWLRQ
.
,Q DQ\ VHFWLRQ HQWLWOHG $FNQRZOHGJHPHQWV RU 'HGLFDWLRQV SUHVHUYH WKH VHFWLRQ V WLWOH DQG SUHVHUYH LQ WKH VHFWLRQ DOO WKH VXEVWDQFH DQG WRQH RI HDFK RI WKH FRQWULEXWRU DFNQRZOHGJHPHQWV DQGRU GHGLFDWLRQV JLYHQ WKHUHLQ
/
3UHVHUYH DOO WKH ,QYDULDQW 6HFWLRQV RI WKH 'RFXPHQW XQDOWHUHG LQ WKHLU WH[W DQG LQ WKHLU WLWOHV 6HFWLRQ QXPEHUV RU WKH HTXLYDOHQW DUH QRW FRQVLGHUHG SDUW RI WKH VHFWLRQ WLWOHV
0 'HOHWH DQ\ VHFWLRQ HQWLWOHG (QGRUVHPHQWV 6XFK D VHFWLRQ PD\ QRW EH LQFOXGHG LQ WKH 0RGLILHG 9HUVLRQ 1
1 'R QRW UHWLWOH DQ\ H[LVWLQJ VHFWLRQ DV (QGRUVHPHQWV RU WR FRQIOLFW LQ WLWOH ZLWK DQ\ ,QYDULDQW 6HFWLRQ
2 ,I WKH 0RGLILHG 9HUVLRQ LQFOXGHV QHZ IURQWPDWWHU VHFWLRQV RU DSSHQGLFHV WKDW TXDOLI\ DV 6HFRQGDU\ 6HFWLRQV DQG FRQWDLQ QR PDWHULDO FRSLHG IURP WKH 'RFXPHQW \RX PD\ DW \RXU RSWLRQ GHVLJQDWH VRPH RU DOO RI WKHVH VHFWLRQV DV LQYDULDQW 7R GR WKLV DGG WKHLU WLWOHV WR WKH OLVW RI ,QYDULDQW 6HFWLRQV LQ WKH 0RGLILHG 9HUVLRQ V OLFHQVH QRWLFH 7KHVH WLWOHV PXVW EH GLVWLQFW IURP DQ\ RWKHU VHFWLRQ WLWOHV
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
105
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$ E\ WKH VDPH HQWLW\ \RX DUH DFWLQJ RQ EHKDOI RI \RX PD\ QRW DGG DQRWKHU EXW \RX PD\ UHSODFH WKH ROG RQH RQ H[SOLFLW SHUPLVVLRQ IURP WKH SUHYLRXV SXEOLVKHU WKDW DGGHG WKH ROG RQH 7KH DXWKRUV DQG SXEOLVKHUV RI WKH 'RFXPHQW GR QRW E\ WKLV /LFHQVH JLYH SHUPLVVLRQ WR XVH WKHLU QDPHV IRU SXEOLFLW\ IRU RU WR DVVHUW RU LPSO\ HQGRUVHPHQW RI DQ\ 0RGLILHG 9HUVLRQ &20%,1,1* '2&80(176
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
7UDQVODWLRQ LV FRQVLGHUHG D NLQG RI PRGLILFDWLRQ VR \RX PD\ GLVWULEXWH WUDQVODWLRQV RI WKH 'RFXPHQW XQGHU WKH WHUPV RI VHFWLRQ 5HSODFLQJ ,QYDULDQW 6HFWLRQV ZLWK WUDQVODWLRQV UHTXLUHV HVSHFLDO SHUPLVVLRQ IURP WKHLU FRS\ULJKW KROGHUV EXW \RX PD\ LQFOXGH WUDQVODWLRQV RI VRPH RU DOO ,QYDULDQW 6HFWLRQV LQ DGGLWLRQ WR WKH RULJLQDO YHUVLRQV RI WKHVH ,QYDULDQW 6HFWLRQV
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
106
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
7(50,1$7,21
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
+RZ WR XVH WKLV /LFHQVH IRU \RXU GRFXPHQWV 7R XVH WKLV /LFHQVH LQ D GRFXPHQW \RX KDYH ZULWWHQ LQFOXGH D FRS\ RI WKH /LFHQVH LQ WKH GRFXPHQW DQG SXW WKH IROORZLQJ FRS\ULJKW DQG OLFHQVH QRWLFHV MXVW DIWHU WKH WLWOH SDJH
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
)URQW&RYHU
7H[WV EHLQJ /,67 OLNHZLVH IRU %DFN&RYHU 7H[WV ,I \RXU GRFXPHQW FRQWDLQV QRQWULYLDO H[DPSOHV RI SURJUDP FRGH ZH UHFRPPHQG UHOHDVLQJ WKHVH H[DPSOHV LQ SDUDOOHO XQGHU \RXU FKRLFH RI IUHH VRIWZDUH OLFHQVH VXFK DV WKH *18 *HQHUDO 3XEOLF /LFHQVH WR SHUPLW WKHLU XVH LQ IUHH VRIWZDUH
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
107
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
&RPLWrGH,QFHQWLYRD3URGXomRGR 6RIWZDUH*UDWXLWRH$OWHUQDWLYR
Fundado em 29 de janeiro de 1999.
1ª Diretoria Djalma Valois Filho
'LUHWRU([HFXWLYR [email protected]
José Luiz Nunes Poyares Diretor Administrativo
Paulo Roberto Ribeiro Guimarães Diretor Institucional
CIPSGA Rua Professora Ester de Melo, numero 202, Parte, Benfica, Rio de Janeiro, RJ, CEP. 20930-010; Telefone (Fax/Dados): 021-5564201; e-mail: [email protected] CNPJ: 03179614-0001/70
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
108