Seg. Redes Linux

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR &,36*$
&8562'(
6(*85$1d$(0
5('(6/,18;
$XWRU5HQDWR0DUWLQL
UPDUWLQL#FLSVJDRUJEU
0DUoRGH
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
&XUVRGH6HJXUDQoDHP5HGHV
&RPLWHGH,QFHQWLYRD3URGXomR
GR6RIWZDUH*UDWXLWRH$OWHUQDWLYR
&,36*$
$XWRU
5HQDWR0DUWLQL
UPDUWLQL#FLSVJDRUJEU
0DUoRGH
&RS\ULJKW F 5HQDWR 0DUWLQL

3HUPLVVLRQ LV JUDQWHG WR FRS\ GLVWULEXWH DQGRU PRGLI\ WKLV GRFXPHQW XQGHU WKH WHUPV RI WKH *18 )UHH
'RFXPHQWDWLRQ /LFHQVH 9HUVLRQ RU DQ\ ODWHU YHUVLRQ SXEOLVKHG E\ WKH )UHH 6RIWZDUH )RXQGDWLRQ ZLWK WKH
,QYDULDQW 6HFWLRQV EHLQJ /,67 7+(,5 7,7/(6 ZLWK WKH )URQW&RYHU 7H[WV EHLQJ /,67 DQG ZLWK WKH %DFN&RYHU
7H[WV EHLQJ /,67
$ FRS\ RI WKH OLFHQVH LV LQFOXGHG LQ WKH VHFWLRQ HQWLWOHG *18 )UHH 'RFXPHQWDWLRQ /LFHQVH
&RS\ULJKW F 5HQDWR 0DUWLQL
( JDUDQWLGD D SHUPLVVmR SDUD FRSLDU GLVWULEXLU HRX PRGLILFDU HVWH GRFXPHQWR VRE RV WHUPRV GD *18 )UHH 'RFXPHQWDWLRQ /LFHQVH
YHUVmR RX TXDOTXHU RXWUD YHUVmR SRVWHULRU SXEOLFDGD SHOD )UHH 6RIWZDUH )RXQGDWLRQ VHP REULJDWRULHGDGH GH 6Ho}HV ,QYDULDQWHV QD
DEHUWXUD H DR ILQDO GRV WH[WRV
8PD FRSLD GD OLFHQoD GHYH VHU LQFOXtGD QD VHomR LQWLWXODGD *18 )UHH 'RFXPHQWDWLRQ /LFHQVH
3iJLQD
QGLFH
1 SEGURANA: FUNDAMENTOS ......................................................................................................................................... 4
1.1 Introduo ................................................................................................................................................................ 4
1.2 Segurana: o conceito .............................................................................................................................................. 4
1.3 Segurana e as ferramentas de rede......................................................................................................................... 6
1.4 Nosso objetivo .......................................................................................................................................................... 7
2 0 FIREWALL: DUAS SOLUES EM AMBIENTE LINUX...................................................................................................... 9
2.1 Uma palavra inicial sobre firewalls ......................................................................................................................... 9
2.2 Firewalls e acesso remoto: o Secure Shell ............................................................................................................. 10
2.3 Firewalls: soluo Linux ........................................................................................................................................ 15
2.4 A filtragem de pacotes ............................................................................................................................................ 16
2.5 IPCHAINS (The Enhanced IP Firewalling Chains Software for Linux) ................................................................ 17
2.6 The SINUS Firewall - a TCP/IP packet filter for Linux ......................................................................................... 32
3 MONITORAO DA REDE ............................................................................................................................................... 56
3.1 Os scanners de rede................................................................................................................................................ 56
3.2 Saint: Security Administrator's Integrated Network Tool....................................................................................... 72
+8/B9= ................................................................................................................................................. 80
+8/B9 +$ ....................................................................................................................................................................... 81
+8/B9 ,$ ....................................................................................................................................................................... 82
+8/B9 -$ ....................................................................................................................................................................... 90
+8/B9 .$ ......................................................................................................................................................................... 96
+8/B9 /$ ......................................................................................................................................................................... 99
,3,6391<+03+ 1/<+6 ..................................................................................................................... 100
SOBRE O AUTOR DA APOSTILA .................................................................................................... 102
*18 )5(( '2&80(17$7,21 /,&(16( ....................................................................................... 103
3iJLQD
1 Segurana: Fundamentos
1.1 Introduo
9 YLTO^S`Y NO]Ô NYM_WOX^Y WY]^\K\ MYWY Y 6SX_b YPO\OMO _WK
]YV_YMYWZVO^KZK\KYZ\YLVOWKNK]OQ_\KXK9L]O\Ò]OK[_S[_O
]O PKVKWY] ]YV_Y XY ]SQXSPSMK K ObS]^XMSK NO _W ]S]ÔWK
KL]YV_^KWOXÔ ]OQ_\Y 9 6SX_b YPO\OMO S]^Y ]SW K] PO\\KWOX^K]
XOMO]]\SK] ZK\K K QO]^Y NK ]OQ_\KXK X_W WSM\Y S]YVKNKWOXÔ Y_
X_WKSX^\KXOÔOX^Y^KVSX^\KXO^MYXOM^KNK1\KXNO<ONO/]Ô
NYM_WOX^YNO]M\OÒSX^\YN_^Y\SKWOXÔ^KS]PO\\KWOX^K]OZ\YLVOWK]NO
]OQ_\KXK
1.2 Segurana: o conceito

>\K^K\OWY] ]OQ_\KXK MYWY ]OXNY K \O]^\SY NY] \OM_\]Y] NO _W
WSM\YMYWZ_^KNY\ Y_ NO _WK \ONO Y_ NO ZY\O] NO]^K \ONO ZK\K
Y_^\Y] _]_\SY] Y_ MYWZ_^KNY\O] =OQ_\KXK XKNK WKS] NY [_O K
QO]^YNO^KV\O]^\SYY[_OMYX]^S^_SZY\^KX^Y_WKZYV^SMKNO
]OQ_\KXK Y_ MYWY ]O NSd OW SXQV]$
]OM_\S^c ZYVSMc 9 [_O
]SQXSPSMK ^Y]YWOXÔ [_O X_WK \ONO R NOÔ\WSXKNY] \OM_\]Y]

K\[_S`Y] NS]ZY]S^S`Y] NO RK\NaK\O O^M [_O O]^Y NS]ZYXÒS]
ZK\K O]Ô MYWZ_^KNY\ Y_ ^SZY NO _]_\SY WK] [_O ZY\ Y_^\Y VKNY
PSMKW\O]^\S^Y]K^KVY_[_KVMYWZ_^KNY\O]ÔTKOVOPY\KY_NOX^\Y
NK\ONO
7O]WY _W ]S]ÔWK MYWY Y KX^SQY .9= SWZVOWOX^K`K _W ^SZY NO
]OQ_\KXK MVK\Y [_O ]SXQOVK P\OXÔ KY] =9 W_V^S_]_\SY] MYWY Y
6SX_b Y_ [_KV[_O\ ^SZY NO ]S]ÔWK ?83B 8Y .9= R NOÔ\WSXKNY]
K\[_S`Y]YM_V^Y]RK\[_S`Y]MYWK^\SL_^Y]ZK\K[_O]OZO\WS^K[_O
O]Ô ]YWOXÔ ]OTK VSNY O^M :Y\ MYX]OQ_SXÔ R \O]^\SY NO
3iJLQD
\OK]NY=9-VK\Y[_O^_NYS]]YX_W]S]ÔWK.9=Y_WO]WYXK]_K
]O[_XMSK RS]^\SMK Y ASXNYa] #b ZY]]_OW \O]^\SO] [_O
PKMSVWOXÔL_\VKWY]7K]Y.9=ASXNYa]XYPY\KWPOS^Y]ZK\K\ONO9
\OM_\]Y NY XOâY\USXQ XY OWL_^SNY L_SV^SX SX^\X]OMY KY
ASXNYa]ZY\S]]YWO]WY^YNY]Y]OWLK\KY][_O]O_]_]_\SY]ZY]]_OW
KYYZO\K\OWXK3XÔ\XO^MYWYZY\ObOWZVYXYPKWY]Y,KMU9\SPSMO
96SX_b_W]S]ÔWKW_V^S_]_\SYO]]OXMSKVWOXÔ _W =9 MKZKMS^KNY
ZK\KK]<ONO]XY_W\OM_\]Y[_OVROPYSKM\O]MSNYObÔ\XKWOXÔ
/^YNY=9NO\ONOO]^KLOVOMOZ\S`SVQSY]MYWYPY\WKNO]OQ_\KXK$R
_]_\SY] O]ZOMSKS] XK XYWOXMVK^_\K MY\\O^K =_ZO\?]_\SY] Y_
_]_\SY <YY^ [_O ZYNOW KVÔ\K\ K\[_S`Y] O]ZOMSKS] NY ]S]ÔWK
WYX^K\ ZK\^SO] ]OTKW VYMKS] Y_ \OWY^K] NO]VSQK\ K \ONO O^M 9
_]_\SYMYW_W]OWZ\S`SVQSY]XYZYNOPKdVY :Y\W [_KXNY XY]
NO]VYMKWY] NK ^SMK NO _W MYWZ_^KNY\ ZOX]KNY S]YVKNKWOXÔ S]^Y
_WK XSMK O]^KY NO ^\KLKVRY _]KNY ZY\ _WK] ZO]]YK] NSQKWY]
ÒWY] [_O ]O MYVYMK ]OW N`SNK Y ÔWK NK ]OQ_\KXK 7K] [_KXNY
YL]O\`KWY]_WK\ONOVYMKVK]OQ_\KXK_WÔWKKSXNKWKS]_\QOXÔ
8_WK SX^\KXO^ ] ÒdO] NSÒ\]Y] \OM_\]Y] NO `\SY] WSM\Y] O]^Y
SXÔ\NS^KNY] NO _W NOZK\^KWOX^Y ZY\ ObOWZVY / ]YL\O^_NY [_KXNY
O]^K SX^\KXO^ MYXOM^K]O K 3XÔ\XO^ Y [_O [_K]O SXO`S^ÒV K
]OQ_\KXK^Y\XK]OKSXNKWKS]_\QOXÔOP_XNKWOX^KV
:YNO\KWY]O][_OWK^SdK\K]]SW$
<ONO''''''''''''''''''''
INTERNET!
6YMKVf0S\OaKVVf
''''''''''''''''''''
3iJLQD
1.3 Segurana e as ferramentas de rede

8_W XSMY WSM\Y Y_ X_WK \ONO VYMKV NO ZO[_OXY WNSY Y_ Q\KXNO
ZY\Ô O K]]SW [_KXNY O]^K \ONO O]^ MYXOM^KNK XK 1\KXNO <ONO K
]OQ_\KXKÔW[_O]O\QO\SNKOVYQYÒ\OWY]Y6SX_bÔW^YNK]K]
PO\\KWOX^K]OKNYM_WOX^KYXOMO]]\SK]ZK\KS]]Y
.OÒ]OVOWL\K\[_O^KS]PO\\KWOX^K]]YSXÔS] ]O Y KNWSXS]^\KNY\
XY ^SÒ\ _WK ZYV^SMK NO ]OQ_\KXK 8Y MYX]^S^_S YLTO^S`Y NO]Ô
NYM_WOX^Y
^\K^K\
ObZVSMS^KWOXÔ
NY
ÔWK
6OS^_\K]
SXSMSK]
YL\SQK^\SK] ZK\K ^KX^Y ]Y$ Y <0- # SX^S^_VKNY NO =SÔ

=OM_\S^c2KXNLYYUR^^Z$aaa\PMONS^Y\Y\QO]M\S^YZY\,0\K]O\
]OÔWL\Y
NO
##!%
O
Y
6SX_b
=OM_\S^c
29A>9
P^Z$]_X]SÔ_XMON_Z_L6SX_bNYM]29A>9NO50OXdSO.A\O]US
WKSY NO ##"% O Y VS`\Y NO :K_V =O\c 0O\\KWOX^K] :YNO\Y]K] ZK\K
<ONO] OW 6SX_b ON -SXMSK 7YNO\XK +VS Y VOS^Y\ OXMYX^\K\ ZY\
MO\^Y Y] OX]SXKWOX^Y] SXSMSKS] ZK\K K MYX]^\_Y NK ZYV^SMK NO
]OQ_\KXK NO ]_K \ONO O [_O Y <0- # Z\YZ\SKWOXÔ NOPSXO MYWY
_WK NOMVK\KY PY\WKV NO \OQ\K] [_O MYXMONOW KMO]]Y K \OM_\]Y] NO
SXPY\WKY O ÔMXYVYQSK O [_O VYQY NOÒW ]O\ M_WZ\SNK] .OÒWY]
VOWL\K\ KSXNK [_O Y KV_XY ZYNO\ OXMYX^\K\ _WK \O_XSY LK]^KXÔ
KL\KXQOXÔNOPO\\KWOX^K]ZK\K^YNY]Y]]KLY\O]NO]S]ÔWK]?83B
XY ]SÔ R^^Z$aaa]OM_\S^cPYM_]MYW `S]S^K YL\SQK^\SK ZK\K ^YNY
K[_OVO[_O]OYM_ZKMYW]OQ_\KXK
1Y]^K\KWY] NO \O]_WS\ K[_S KVQ_X] ZYX^Y] NY 6SX_b =OM_\S^c 29A>9
ARK^ K\O cY_ ^\cSXQ ^Y Z\YÔM^) / Y .OÒVYZSXQ K
]OM_\S^c ZYVSMc O OVO] NOÒW ]O\ VO`KNY] OW MYX]SNO\KY KXÔ]
WO]WY NO ]O M\SK\ _WK ZYV^SMK NO ]OQ_\KXK ZK\K K ]_K \ONO +XÔ]
NO Z\YÔQO\ ]O_ ]S]ÔWK `YM NOÒ ]KLO\ NO [_O ^SZY NO KWOKK ]O
3iJLQD
O]^ ÔX^KXNY Z\YÔQO\ ]O K^KMKNY Y [_O O]^ OW TYQY @OTKWY]
OX^Y$
*O risco a possibilidade que um intruso possa ter sucesso ao tentar invadir seus computadores. Um intruso pode, ao
acessar seus arquivos, danificar dados crticos? No se esquea, tambm, que ao possuir uma conta de sua rede, o
intruso pode se passar por voc.
*As ameaas sero sempre no sentido de se obter acesso no-autorizado em sua rede ou computador. H portanto
vrios tipos de intrusos e, ento, diferentes tipos de ameaa a sua rede.
*H o curioso: esse tipo de intruso se interessa pelo tipo de dado e sistema voc possui.
*H o malicioso: esse quer em sntese derrubar o seu sistema, destruir dados, destruir os documento publicados no
seu Web server, etc. o chamado cracker.
*H o intruso de alto-nvel (High-Profile): ele quer obter popularidade mostrando suas habilidades ao invadir seu
sistema.
*H o competidor: esse que conhecer seus dados para obter algum ganho com isso.
*Por fim, vulnerabilidade descreve o quo bem protegido seu computador, e o que se perder se algum obter
acesso no-autorizado a algum(ns) computador(res).
Portanto, crie uma poltica de segurana para sua rede que seja simples e genrica e que todos os usurios
possam prontamente compreender e seguir. Voc pode proteger dados tanto quanto respeitar a privacidade dos
usurios
1.4 Nosso objetivo

/W]_WKXY]]KSXÔX^YWY]^\K\MYWYTNS]]OWY]K]PO\\KWOX^K]
XOMO]]\SK] ZK\K K MYX]^\_Y O QO\XMSK NO _WK ZYV^SMK NO
]OQ_\KXKOWKWLSOXÔ6SX_b>YNY]]Y]YPâK\O] KLO\^Y] O MYLO\^Y]
ZOVK1:61OXO\KV:_LVSM6SMOX]ONK18?K]]SWMYWYKNYM_WOX^KY
NS]ZYXÒV:K\K^KX^YXY]]YMKWSXRYXYMYWOK\NK]OQ_\KXKVYMKV
1
RFC o acrnimo de Request for Comments, um enorme conjunto de documentos organizados pela INTERNIC reunindo
3iJLQD
Y_]OTK_WK\ONOSXÔ\XK]OQ_XNYKXYWOXMVK^_\KNY=SÔ=OM_\S^c
2KXNLYYU OW NS\OY ]OQ_\KXK Ob^\KXO^ \ONO ObÔ\XK
-YX^\K\SKWOXÔ S\OWY] NK ]OQ_\KXK ObÔ\XK ZK]]KXNY YL`SKWOXÔ
ZOVK][_O]^YNO]OQ_\KXKXK\ONOSX^\KXO^ZYS]YPS\OaKVV^KWLW
YM_ZK]OMYWO]ÔZYX^YZK\KK]OQ_\KXKSXÔ\XK
informaes sobre TCP/IP e outros protocolos, assim como Redes, segurana, correio eletrnico, etc.
3iJLQD
2 0 Firewall: duas solues em ambiente Linux

2.1 Uma palavra inicial sobre firewalls
0S\OaKVV _WK ZK\ONO [_O ]OZK\K ]_K SX^\KXO^ NY W_XNY ObÔ\SY\
S]^Y K SXÔ\XO^ 7K] ^KWLW _W PS\OaKVV ZYNO ]O\ _]KNY
OPSMSOXÔWOXÔX_WKSX^\KXO^[_OXYMROQKKÔ\KMO]]YSXÔ\XO^
:YS] ZYNO PSV^\K\ ZKMYÔ] [_O ZK]]KW NO _WK W[_SXK K Y_^\K X_WK
SX^\KXO^
Definindo:
Um firewall todo sistema conjunto de hardware e software que
elaborado
para
proteger
uma
intranet
de
usurios
potencialmente perigosos, visto que no autorizados.
/X^\O^KX^Y K MKZKMSNKNO OPO^S`K NO MYX^\YVO NO _W PS\OaKVV

SWZVOWOX^KNK KY Z\]O OX^\O K \ONO VYMKV O K SXÔ\XO^ NO PY\WK K
O`S^K\ [_O Y W_XNY ÔXRK KMO]]Y K NKNY] ZK\^SM_VK\O] 7K] XY
O]^KWY] PKMO K PKMO MYW KVQY K]]SW MYWY _W Z\YQ\KWK PMSV O
]SWZVO] NO ObOM_^K\ :YS] MYWY T `SWY] _W PS\OaKVV ÔW
SX[_O]^SYXKÒVWOXÔ_WKXK^_\OdKKL\KXQOXÔ
8Y RKÒ\SK Z\YLVOWK] NO ]OQ_\KXK ]O `YM MYWY [_O S]YVK]]O ]O_]
MYWZ_^KNY\O] Y_ ]_K \ONO NY W_XNY 7K] _WK SX^\KXO^
P_XNKWOX^KVWOXÔ _WK \ONO SXÔ\XK [_O _]K ÔMXYVYQSK] AY\VN ASNO
AOL ZK\K ZK\^SVRK\ ^K\OPK] O SXPY\WKO] OX^\O NOZK\^KWOX^Y] OY_
VYMKS]\OWY^Y]8YZY]]YSX]^KVK\_W]O\`SNY\+ZKMROX_WKW[_SXK
O POMRK\ Y KMO]]Y K ]O_] NKNY] OW WO_ PS\OaKVV ^Y ZY_MY ZY]]Y
POMRK\YKMO]]YK^YNY]Y]MYWZ_^KNY\O][_OPY\WKWK\ONOW_XNSKV
Definiao retirada de SCO OpenServer Internet Services (v.5.0.4 may 1997), p. 11.
3iJLQD
/]ÔO][_OWKWY]^\KKSWZVOWOX^KY]SWZVO]NO_WPS\OaKVV$
>YNK`SK NOÒ\KWY] XY^K\ OW XY]]Y O][_OWK [_O XY]]K \ONO ÔW [_O
ZY]]_S\_WRY]^_WLK]^SYXRY]^[_OVSQKNYKY\YÔKNY\XY]ZOOW
MYX^K^YMYWYW_XNYLK]^KXÔMYX]OX]_KV[_O^KVW[_SXKNOÒÔ\
]O_] ]O\`SY] NO]VSQKNY] Y WXSWY NO ZY\^K] NOÒW O]^K\ K^S`K]
:K\K^KX^YYKV_XYNOÒ]OQ_S\K]Y\SOX^KO]L]SMK]ZK\KNO]VSQK\
]O\`SY] XY ]O_ SXO^N 9 6SX_b NK <ON 2K^ ZY]]_S _WK PO\\KWOX^K NO
]O^_ZOWWYNYÔb^Y:YNO]O_]VKMYWY_WKSXÔ\PKMO`KVSY]KZK\K
NO]VSQK\]O\`SY]MYWYP^Z^P^ZÔVXOÔ^M@YMZYNOMRKWVKXY
MYX]YVO K ZK\^S\ NY MYWKXNY ]O^_Z Y_ MRKWK\ NS\O^KWOXÔ ZOVY
MYWKXNYXO^]c]`ZYS]KPO\\KWOX^K]O^_ZKZOXK]_WKSXÔ\PKMOZK\K
NSÒ\]Y] Y_^\Y] Z\YQ\KWK] NO MYXPSQ_\KY 3Q_KVWOXÔ XY ]O PKd
XOMO]]\SYKSX]^KVKYNY]S]ÔWKQ\PSMYBP\OO9RY]^\O]ZYX]ÒV
ZOVY PS\OaKVV NO XY]]K \ONO NOÒ ]O\ _WK W[_SXK OXb_^K MYW K
Z\SY\SNKNOL`SKNOM_WZ\S\K]P_XO]NOPS\OaKVV
2.2 Firewalls e acesso remoto: o Secure Shell

:K\K Y KMO]]Y \OWY^Y KY XY]]Y PS\OaKVV NOÒWY] _]K\ Y ]YPâK\O ==2
=OM_\O =ROVV ]]R$ R^^Z$aaa]]RY\Q O XY ÔVXO^ Y_ \]R Y_
\VYQSX WO]WY ZY\[_O T ^\K^KWY] NO NO]VSQVY] 9 ]]R _W ZKMYÔ
MYWZVO^Y ZK\K VYQSX \OWY^Y [_O ÔW K MKZKMSNKNO NO M\SZ^YQ\KPK\
_^SVSdKXNY]ONKK_ÔX^SMKYPY\Ô<=+KMYW_XSMKYOX^\O\ONO]O
RY]^] XYMYXPSÒS] +]]SW ]OXNY ^YNK] K] MYW_XSMKO] ]Y
3iJLQD
10
M\SZ^YQ\KPKNK] + <=+ _]KNK ZK\K _W SXÔ\MWLSY NO MRKÒ] X_W

O][_OWKNOMRKÒ]ZLVSMK]OZ\S`KNK]O_WW^YNYNOM\SZ^YQ\KPSK
3./+ ,VYaPS]R O^M _]KNY ^KWLW ZK\K M\SZ^YQ\KPK\ K ]O]]Y
\OWY^K K ]O\ KLO\^K 9 [_O SWZY\^KXÔ XY ]]R [_O Y ]YPâK\O
NS]ZK\K K M\SZ^YQ\KPSK KXÔ] NY Z\YMO]]Y NO K_ÔX^SMKY Y_ ]OTK
KXÔ]NKMROMKQOWNK]]OXRK]:Y\^KX^YXOXR_WK]OXRKOX`SKNKZOVK
\ONOOWKLO\^Y]OWM\SZ^YQ\KPSK
+WKSY\ZK\ÔNK]NS]^\SL_SO]K^_KS]NY6SX_bTÒWMYWKÒ\]Y
!NO]ÔZ\YQ\KWKKV^SWKÒ\]YKMRKWKNKNO]]R
=O MYX]OQ_S\ Y ]]R K^\K`] NO _W ZKMYÔ <:7 LK]^K SX]^KVVY MYW Y
MYWKXNY\ZWS`R/VOSX]^KVK\Y]]OQ_SXÔ]K\[_S`Y]$
$UTXLYRV
'HVFULomR
VVKG
'DHPRQ TXH URGD QD PiTXLQDVHUYLGRU

HVSHUD R SHGLGR GR FOLHQWH VVK DXWHQWLFD D
FRQH[mR H LQLFLD D VHVVmR
VVKRXVORJLQ
&OLHQWH SURJUDPD XVDGR SDUD ORJLQ H H[HFXomR
VFS
8VDGR SDUD FRSLDU DUTXLYRV GH XP FRPSXWDGRU
GH RXWURV FRPDQGRV
SDUD RXWUR HP VHJXUDQoD
VVKNH\JHQ
8VDGR SDUD FULDU FKDYHV 56$
VVKDJHQW
$JHQWH SDUD D DXWHQWLFDomR GDV FKDYHV
VVKDGG
8VDGR SDUD UHJLVWUDU QRYDV FKDYHV
PDNHVVKNQRZQKRVWV
6FULSW
SHUO
XVDGR
SDUD
FULDU
DUTXLYR
HWFVVKBNQRZQBKRVWV D VHU XVDGR SHOR '16
<OKVSdKNKKSX]^KVKYMYWbS^Y`KWY]QO\KWY]OX^Y_WKMRKÒ<=+
ZK\KY_]_\SY\YY^X_WRY]^MRKWKNYKVZRK_]KXNYYMYWKXNYNO]M\S^Y
KMSWK]]RUOcQOX/XMYX^\K\KWY]ZY\ObOWZVYK]OQ_SXÔ]KNK$
>URRW#DOSKD @ VVKNH\JHQ

,QLWLDOL]LQJ UDQGRP QXPEHU JHQHUDWRU
*HQHUDWLQJ S GLVWDQFH
*HQHUDWLQJ T GLVWDQFH
&RPSXWLQJ WKH NH\V
7HVWLQJ WKH NH\V
.H\ JHQHUDWLRQ FRPSOHWH
(QWHU ILOH LQ ZKLFK WR VDYH WKH NH\ URRWVVKLGHQWLW\
(QWHU SDVVSKUDVH HQWUH FRP D VHQKD QDGD VHUi HFRDGR
3
A autenticao RSA baseada numa chave pblica de criptografia. Uma chave para criptografar e a outra para
descriptografar. A chave pblica usada para criptografar, e a chave para descriptografar por sua vez privada, mas
jamais poderemos derivar esta chave de descriptografar da outra.
3iJLQD
11
(QWHU WKH VDPH SDVVSKUDVH DJDLQ LGHP

<RXU LGHQWLILFDWLRQ KDV EHHQ VDYHG LQ URRWVVKLGHQWLW\
<RXU SXEOLF NH\ LV

URRW#FLSVJDRUJEU
<RXU SXEOLF NH\ KDV EHHQ VDYHG LQ URRWVVKLGHQWLW\SXE
.OZYS] NO QO\K\WY] XY]]K] MRKÒ] K ZLVSMK O K Z\S`KNK O O]^K]
]O\OW Q\K`KNK] XY NS\O^\SY NO XY]]K O]MYVRK K[_S KMOS^KWY] K
WOVRY\YZYKNOPK_V^NY]]RUOcQOX`KWY]ÔX^K\KL\S\_WK]O]]Y
]OQ_\K 7K] KXÔ] ÔWY] NO MK\\OQK\ Y Z\YQ\KWK ]O\`SNY\ NY ]]R Y
]]RN /bOM_^K\OWY] ]]RN WKX_KVWOXÔ ZK\K ^KX^Y Y KV_XY NOÒ
NSQS^K\$ O^M\MNSXS^N]]RN MYW O]]O ]M\SZ^ [_O Y <ON 2K^
6SX_b ]KLSNKWOXÔ MK\\OQK OW ^YNK SXSMSKVSdKY Y NKOWYX ]OW
ZY\^KX^Y K XOMO]]SNKNO NO _WK ObOM_Y WKX_KV .OZYS] KV_XY NOÒ
Ò\SPSMK\MYWKPO\\KWOX^KXO^]c]`NY<ON2K^]OY]]RNO]^WK\MKNY
ZK\K ObOM_Y K_^YW^SMK .OÒ ]O Ô\ KÔXY ZK\K ^KV NO^KVRO
ZY\[_O ]O Y ]]R Y MVSOXÔ XY OXMYX^\K\ Y ]]RN \YNKXNY OVO
YPO\OMO K ZY]]SLSVSNKNO NO _WK ]O]]Y XY]OQ_\K `SK \]R -YWY XY
ObOWZVYKLKSbY$
>URRW#EHWD URRW@ VVK DOSKD

6HFXUH FRQQHFWLRQ WR DOSKD UHIXVHG UHYHUWLQJ WR LQVHFXUH PHWKRG
8VLQJ UVK :$51,1* &RQQHFWLRQ ZLOO QRW EH HQFU\SWHG
HQFU\SWHG
3DVVZRUG
+]]SW MO\^Y] [_O Y ]]RN O]^ K^S`Y XY RY]^ KVZRK X_WK Y_^\K
W[_SXK[_OMRKWKWY]LO^KMK\\OQKWY]YMVSOXÔ]]RZK\KMYXOM^K\MYW
YRY]^KVZRKÒTKWY]$
>URRW#EHWD @ VVK DOSKDFLSVJDRUJEU

+RVW NH\ QRW IRXQG IURP WKH OLVW RI NQRZQ KRVWV
$UH \RX VXUH \RX ZDQW WR FRQWLQXH FRQQHFWLQJ \HVQR" <HV
+RVW
EHWDFLSVJDRUJEU
DGGHG WR WKH OLVW RI NQRZQ KRVWV
&UHDWLQJ UDQGRP VHHG ILOH aVVKUDQGRPBVHHG 7KLV PD\ WDNH D ZKLOH
URRW#DOSKDFLSVJDRUJEU
V SDVVZRUG >HQWUD FRP VHQKD QDGD p HFRDGR@
/DVW ORJLQ IURP 6DW -DQ IURP DOSKD
>URRW#DOSKD URRW@
@KWY]OXÔXNO\K]WOX]KQOX]NKÔVK;_KXNYY]O\`SNY\]]RNXYRY]^
KVZRK \OMOLO_ K ]YVSMS^KY OVO XY] KNÒ\^S_ XY Ô\ OXMYX^\KNY K
RY]^ UOc NK VS]^K NO RY]^] MYXROMSNY] KSXNK K]]SW KMOS^KWY]
3iJLQD
12
MYX^SX_K\KMYXObYOVOZOKW[_SXKLO^KXKVS]^KOMYX^SX_KMYW
K K_ÔX^SMKY NOZYS] [_O OVK ObOM_^KNK MYW bS^Y \OMOLOWY] Y
Ô\WSXKV`S\^_KV=O\OKVSdK\WY]YVYQY_ÔXY`KWOXÔOX^\K\MYW_W
ZONSNYNO]O]]Y]]RYNKOWYXVYK\[_S`Yh]]R\KXNYXI]OONOXY]
ZO\WSÔK]O]]Y]OQ_\KOKK_ÔX^SMKYZKN\YNY]S]ÔWK:Y\WY
KV_XYNOÒO]MYVRO\OX^\OO]ÔW^YNYYSWZY\^K\]_KMRKÒZLVSMK
K\WKdOXKNK XY K\[_S`Y SNOX^S^cZ_L ZK\K K W[_SXK \OWY^K 3]]Y
ZY]]SLSVS^K\KYZ\YQ\KWK_]K\KK_ÔX^SMKYLK]OKNKOW<=+-YWY
XY]]K W[_SXK RKLSVS^KNK ZK\K PS\OaKVV XY XY] ZY]]SLSVS^K
^\KX]PO\XMSKNOK\[_S`YP^Z80=O^M_]K\OWY]YÒVRYNS][_OÔ
_]KXNY _W Z\YQ\KWK NK] PO\\KWOX^K] W^YYV] Y WMYZc -YVY[_O _W
NS][_OÔ XK _XSNKNO XK O NSQSÔ$ WMYZc h]]RZ_L K$ -YW S]]Y
MYZSK\OWY] ZK\K Y NS\O^\SY \OWY^Y h]]R XY]]K MRKÒ ZLVSMK
KÔXY$ ] VO`KWY] XY]]K MRKÒ ZLVSMK + MRKÒ Z\S`KNK XY NOÒ
]O\ NS`_VQKNK WK] KQY\K MYW _W XY`Y XYWO K ]O\ _^SVSdKNY XK]
MYXObO] K ]KLO\ K_^RY\SdONIUOc] >KV K\[_S`Y MY\\O]ZYXNO KY
MYXÒXMSYXKV K\[_S`Y \RY]^]% OVO ZY]]_S _WK MRKÒ ZY\ VSXRK
]_ZY\^KXNY ZY\^KX^Y NSÒ\]K] MRKÒ] ZLVSMK] NO NSPO\OXÔ] _]_\SY]
O RY]^] +ÔXY ZK\K XY ^\_XMK\ Y K\[_S`Y ZYS] K] MRKÒ] ]Y
VYXQK] O NOÒW OX^\K\ X_WK XSMK VSXRK 6YQY NOZYS] NS]]Y Y
_]_\SYZYNOObOM_^K\YVYQSX]OWKK_ÔX^SMKYZKN\YWK]KZOXK]
NKXNYYZK]]ZR\K]ONKMRKÒ<=+[_O]YL\OWKXOS\KWKS]]OQ_\Y
-YWKM\SKYNYK_^RY\SdONIUOc][_KXNYKL\S\WY]KXY`K]O]]YMYW
YMVSOXÔ]]RÒ\OWY]Z\SWOS\KWOXÔOX^Y$
>URRW#DOSKD@VVK EHWD
+RVW NH\ QRW IRXQG IURP WKH OLVW RI NQRZQ KRVWV
$UH \RX VXUH \RX ZDQW WR FRQWLQXH FRQQHFWLQJ \HVQR" <HV
+RVW
EHWD
DGGHG WR WKH OLVW RI NQRZQ KRVWV
(QWHU WKH SDVVSKUDVH IRU 56$ NH\
QDGD HFRD
/DVW ORJLQ 6XQ -DQ RQ WW\
<RX KDYH PDLO
>URRW#EHWD URRW@
8_WKZY]Ô\SY\MYXObYOXMYX^\K\OWY]Y]OQ_SXÔMOX\SY$
3iJLQD
13
>URRW#DOSKD @VVK EHWD

(QWHU WKH SDVVSKUDVH IRU 56$ NH\
QDGD HFRD
/DVW ORJLQ 6XQ -DQ IURP DOSKD
<RX KDYH PDLO
>URRW#EHWD URRW@
+]]SWYKV_XYOX^\KMYWK]_KZK]]ZR\K]OK]MRKÒ]]YMROMKNK]OK
]O]]Y]OQ_\KM\SZ^YQ\KPKNKZY]^KOWKY
9_^\Y W\S^Y SXNS]M_^ÒV NY =OM_\O =ROVV Y PK^Y NY MVSOXÔ ZK\K
KMO]]Y \OWY^Y T O]^K\ ZY\^KNY ZK\K NSÒ\]K] ZVK^KPY\WK] ?83B
9=ASXO^MY[_OLK]^KXÔSWZY\^KXÔ[_KXNYÔWY]\ONO]
RL\SNK]@S]SÔY]SÔP^Z$P^ZM]R_^PSZ_L]]RZK\K_WK`S]Y
NO Ò\]O] NS]ZYXÒS] :YNOWY] ]_QO\S\ KY KV_XY ZO][_S]K\ K]
]OQ_SXÔ]Ò\]O]XYMYWO\MSKS]ZK\KASXO9=\O]ZOM^S`KWOXÔ$
http://www.chiark.greenend.org.uk/~sgtatham/putty/ (PuTTY uma verso livre para telnet e SSH).
R^^Z$NYWOaOOQ_SYaKON_Z_LNYWO]^SM]Y]ZY\^]]]R!McQaSXL^K\Ld
@O\]Y MVSOXÔ O ]O\`SNY\ ==2 NOX^\Y NY Z\YTO^Y -cQX_]
P^Z$P^ZM]R_^PSZ_L]]RY]]]RY]dSZ
@O\]Y ==2 ZK\K 9= b
8O]^KÔVKÒ\OWY]_WMVSOXÔMYWZSVKNYO\YNKXNYX_WKW[_SXK?83B
=-9 9ZOX=O\Ò\ ` R^^Z$aaa]MYMYW O KL\SXNY _WK MYXObY
]]RMYWMROMKQOWNKMRKÒ<=+X_WRY]^6SX_b$
3iJLQD
14
2.3 Firewalls: soluo Linux

8YNS]M_^S\OWY]K[_SKSWZVOWOX^KYP]SMKNO_WPS\OaKVV8Y]]Y
YLTO^S`YWY]^\K\K]PO\\KWOX^K]NS]ZYXÒS]XY6SX_b9KV_XYÔW
[_OÔ\OWWOXÔ^KWLW[_OXYObS]Ô_WK]YV_YXSMKOWÔ\WY]
NO PS\OaKVV @YM ÔW [_O MYXROMO\ K] PO\\KWOX^K] O OX^Y KNKZ^
VK]]XOMO]]SNKNO]O]ZOMPSMK]NO]_K\ONOWYX^K\]_KZYV^SMKNO
]OQ_\KXK O KNKZ^VK K _W PS\OaKVV @YM Ô\ _WK SX^\YN_Y O
NOZYS] Ô\ [_O ZO][_S]K\ ]_K] NOWKXNK] O]ZOMPSMK] =Y ^KX^Y] Y]
MOX\SY] ZY]]ÒS] [_O Y ÔWK ^Y\XK]O SXO]QY^ÒV$ _WK ZO[_OXK
\ONO NYW]^SMY Y_ _W ZO[_OXY O]M\S^\SY [_O ]O MYXOM^K K 3XÔ\XO^
`SK ZZZ% _WK \ONO MYW _W \YÔKNY\ MYXOM^KNY K 3XÔ\XO^% _WK \ONO
WNSK MYW NYS] PS\OaKVV] O^M O^M .K\OWY] K[_S Y] MYXMOS^Y]
Z\SXMSZKS]NK]PO\\KWOX^K]]O_]MYWKXNY]YZO]O_^SVSdKY
?W PS\OaKVV SWZVOWOX^KNY XY 6SX_b OW XÒV NO UO\XOV ZY\ S]]Y
^YNY Y Ôb^Y ]YL\O Y ÔWK MYWOK MYW K] YZO] ZK\K \OMYWZSVK\ Y
UO\XOV=OWN`SNKZK\KÔ\WY]_WPS\OaKVVXY6SX_bXOMO]]S^KWY]NO
]_KRKLSVS^KYXYUO\XOV7K]S]]YXY]OPKdXOMO]]\SYZYS]Y<ON
2K^ b T ÒW MYW Y UO\XOV ZK\K PS\OaKVVSXQ ^KX^Y [_KX^Y Y =_=/
b ZY\ ObOWZVY Y 9ZOX6SX_b NK -KVNO\K ` ZY\ ]O\ WKS]
`YV^KNYZK\K_W]S]ÔWKNO]U^YZXYZY]]_S_WUO\XOVMYWZSVKNYZK\K
PS\OaKVV +SXNK K]]SW ]O NO]OTK\ MROMK\ ]O ]_K] W[_SXK] O]^Y
RKLSVS^KNK] ZK\K PS\OaKVV NSQSÔ$ V] Z\YMXO^SZIPaMRKSX] ]O
^KV K\[_S`Y O]^SÒ\ K YU ÔWY] PS\OaKVV +ZOXK] MYWY SXPY\WKY
VS]^KWY] KLKSbY K] YZO] K ]O\OW RKLSVS^KNK] O NO]KLSVS^KNK] X_W
UO\XOV\OMYWZSVKNYZK\KPS\OaKVV$
Em 'general setup':
1. turn networking support => ATIVO
Em 'networking options':
1. turn network firewalls => ATIVO
4
O Linux IPCHAINS-HOWTO por exemplo apresenta 4 diferentes cenrios possveis.

3iJLQD
15
2. turn TCP/IP networking => ATIVO

3. turn IP forwarding/gatewaying => ATIVO
4. turn IP firewalling => ATIVO
5. turn IP firewall packet logging => ATIVO
6. turn IP masquerading => ATIVO
7. turn IP accounting => ATIVO
8. turn IP tunneling => DESATIVO
9. turn IP aliasing => ATIVO (pode-se optar por seu uso modular...)
10. turn IP (PC/TCP mode) => DESATIVO
11. turn IP (reverse ARP) => DESATIVO
12. turn drop source routed frames => ATIVO
Em 'network device support':

1. turn network device support => ATIVO
2. turn net driver support => ATIVO
3. turn ethernet (10/100 mbit.) => ATIVO
2.4 A filtragem de pacotes

+] SXPY\WKO] [_O K^\KÒ]]KW _WK \ONO ]Y NO]WOWL\KNK] O OX`SKNK]
XK PY\WK NO ZKMYÔ] Y_ NK^KQ\KWK] >KS] ZKMYÔ] ^W _W PY\WK^Y [_O
SXMV_S _W MKLOKVRY O _W MY\ZY NO NKNY] 8Y MKLOKVRY NY ZKMYÔ 3:
OXMYX^\KWY]KVQ_WK]SXPY\WKO]^KS]MYWY$
KOXNO\OYNOY\SQOW
LOXNO\OYNONO]^SXY
:Y\MYX]OQ_SXÔ_WPSV^\YNOZKMYÔ]ZY]]_SKRKLSVSNKNONOYVR
VY] [_KXNY OVO] ZK]]KW O K]]SW NOMSNS\ Y ]O_ NO]^SXY :YNOXNY
O]MYVRO\ ZY\ XOQK\ NOXc _W ZKMYÔ NO]MK\^KXNYY ^Y^KVWOXÔ
KMOS^K\KMMOZ^YZKMYÔNOSbKXNYYZK]]K\Y_ ZY\ PSW\OTOS^K\
\OTOM^ Y ZKMYÔ ZY\W \O^Y\XKXNY _WK WOX]KQOW KY OXNO\OY NO
Y\SQOW /S] K ^\] MYXMOS^Y] P_XNKWOX^KS] OW [_KV[_O\ ]YPâK\O NO
PS\OaKVV
3iJLQD
16
ZY\ O]]K] MK\KMÔ\]^SMK] [_O _W PS\OaKVV ZYNO XY] QK\KX^S\

]OQ_\KXKOMYX^\YVOX_WK\ONOYKNWSXS]^\KNY\ZY\O`S^K\YOX`SY
NO ZKMYÔ] ZK\K PY\K NK \ONO Y_ OX^Y [_O ZKMYÔ NO PY\K OX^\O OW
MO\^K]ZK\Ô]NKSX^\KXO^
2.5 IPCHAINS (The Enhanced IP Firewalling Chains Software for Linux)

O Ipchains5, escrito por Rusty Russel (ipchains@rustcorp.com), tem a habilidade de filtrar os pacotes que passam pelo
kernel. No um software simples, mas conhecendo o seu mecanismo e seus conceitos o administrador de rede pode
escolher a poltica de segurana de sua rede. A verso trabalhada aqui ser a 1.3.8 (ipchains-1.3.8-3.i386.rpm).
Para lidar com um pacote o kernel do Linux possui trs regras principais, que o Ipchains chama de firewall chains ou
chains - no usaremos traduo para a palavra chains/chain, iremos portanto conserv-la em ingls. So elas:
IP INPUT CHAIN: quando um pacote entra ...

IP OUTPUT CHAIN: quando um pacote sai ...
IP FORWARD CHAIN: quando um pacote roteado para
outra mquina ...
XO]Ô ^\SZ [_O ]O P_XNKWOX^K K MYX]^\_Y NO XY]]Y PS\OaKVV

7YX^K]OZY\^KX^YK]\OQ\K]ZK\KQO\S\O]]O]MRKSX]Z\SXMSZKS]$_W
ZKMYÔ OX^\K ZY]]Y \OM_]VY NO ^KV OXNO\OY NO Y\SQOW KMOS^VY
ZK\K^KVNO]^SXYWK]]OK^\KÒ]]KWO_PS\OaKVVOWNS\OYK^KVY_
[_KVNO]^SXY\OM_]YO^M
+] [_K^\Y YZO\KO] WKS] L]SMK] O MYW_X] XY 3ZMRKSX] ]Y$
KM\O]MOX^K\KZZOXN_WKXY`K\OQ\KMYWKPVKQ+ObMV_S\NOVOÔ
_WK\OQ\KMYWKPVKQ.%OVS]^K\K]\OQ\K]ObS]ÔXÔ]MYWKPVKQ
6OVSWZK\PV_]RSXNS]M\SWSXKNKWOXÔ^YNK]K]\OQ\K]MYWKPVKQ
0
Uma questo terminolgica: o aluno no deve confundir ipchains com o antigo ipfwadm: o primeiro est em
distribuies com o kernel 2.2.x e o ltimo no kernel 2.0.x; os parmetros so essencialmente diferentes, portanto no
servem os scripts feitos para o ipfwadm.
3iJLQD
17
@OTKWY]KVQ_X]MKWSXRY]MYWY3ZMRKSX]OWKYM_\SY]YXY^K\[_O
^YNK Z_LVSMKY OX]SXKXNY _WK VSXQ_KQOW NO Z\YQ\KWKY OW QO\KV
MYWOMO WY]^\KXNY MYWY QO\K\ XO]^K VSXQ_KQOW _WK P\K]O NY ^SZY
v2OVVY AY\VNv 8Y MK]Y NK] \OQ\K] NY PS\OaKVV MYWOKWY]
WY]^\KXNY MYWY SWZONS\ Y ZSXQ ZK\K K SXÔ\PKMO NO VYYZLKMU VY
Ô\KWY]Y]OQ_SXÔ$
LSFKDLQV $ LQSXW V S LFPS M '(1<
/V_MSNKXNYY]ZK\WO^\Y_]KNY]$
+SXZ_^KM\O]MOX^KWY]_WK\OQ\KZK\KKOX^\KNK
]OS]YOXNO\OYNOY\SQOX]NY]ZKMYÔ]
ZYZ\Y^YMYVY_]KNY3-7:
T./8CY[_OPK\OWY]MYWYZKMYÔT_WZ^Y$K[_SXOQKWY]
+QY\K]OObOM_^KWY]_WZSXQZK\KYOXNO\OYNOVYYZLKMUS\OWY]Ò\
K ^\KNSMSYXKV WOX]KQOW NO v ZKMUO^ VY]]v + \OQ\K [_O
O]^KLOVOMOWY]NSd[_ONOÒ]OXOQK\^YNY]ZKMYÔ] 3-7: [_O MROQK\OW
NYOXNO\OY!YZK\WO^\Y./8CMRKWKNYÔMXSMKWOXÔNO
KV`Y (target).
@OTKWY] Y_^\Y ObOWZVY KQY\K X_WK SXÔ\PKMO NO \ONO /W XY]]Y
MOX\SY NO]OTKWY] POMRK\ K] ZY\^K] O NY XY]]Y RY]^ KVZRK
# "ZK\KLO^K# "%OW]_WK$LO^KXYZYNO\_]K\
^KS] ]O\`SY] NK W[_SXK KVZRK /]^K] ]Y K] ZY\^K] ZKN\Y ZK\K
>OVXO^ O 0>: XY Z\Y^YMYVY >-: =OQ_XNY K VQSMK NK ]_SÔ NO
Z\Y^YMYVY] >-:3: XOMO]]S^KWY] KVW NY OXNO\OY 3: NO _W Y_^\Y
XÒVNOK^\SL_SYNOOXNO\OY][_OMRKWKNYZY\^KNOK
OVK [_O NS\OMSYXK Y] NKNY] [_O MROQKW ZOVY OXNO\OY 3: ZK\K _W
NOÔ\WSXKNY ]O\`SY .O PY\WK [_O ZYNO]O WKXÔ\ _W XWO\Y NO
MYXObO] ]SW_V^XOK] O KY WO]WY ÔWZY ]OZK\KNK] +] ZY\^K] ]Y
3iJLQD
18
]OZK\KNK] OW NYS] Q\_ZY] NS]^SX^Y]$ NO K ]Y K] ZY\^K]
Z\S`SVOQSKNK] ]Y _]KNK] ZY\ NKOWYX] MYXPSÒS] O MYW Z\S`SVQSY]
NO \YY^ +] \O]^KXÔ] NO K^ ]Y MRKWKNK] NO XY
Z\S`SVOQSKNK] O ]Y _]KNK] VS`\OWOXÔ :Y\ S]]Y KY WYX^K\ _W
PS\OaKVV ^YNK K KÔXY MYW Y] WY`SWOX^Y] NO ZY\^K] XY
Z\S`SVOQSKNK] +LKSbY O]^ _WK VS]^K \O]_WSNK MYW Y] Z\SXMSZKS]
]O\`SY]]O_]ZY\^K]ZKN\YOYZ\Y^YMYVYMY\\O]ZYXNOXÔ$
SERVIO
PORTA
PROTOCOLO
netstat
15
tcp
ftp
21
tcp
ssh
22
tcp/udp
telnet
23
tcp
smtp
25
tcp
whois
43
tcp
finger
79
tcp
www
80
tcp
pop-3
110
tcp/udp
https
443
tcp/udp
=OO]^SÒ\MYXP_]Y]YL\O[_KVYXWO\Y[_OMY\\O]ZYXNOK^KVY_[_KV
]O\`SY O ^KWLW NO]OTK\ _WK VS]^KQOW WKS] MYWZVO^K MYX]_VÔ Y
K\[_S`YvO^M]O\`SMO]v OVO [_O K\WKdOXK K MY\\O]ZYXNXMSK OX^\O
Y XYWO NY ]O\`SY >OVXO^ O Y XWO\Y NK ZY\^K O ^KWLW Y
Z\Y^YMYVY[_O_]KNY>-:
9L]O\ÒOX^YXY]]YObOWZVY$
>URRW#DOSKD @ LSFKDLQV $ LQSXW V G S WFS - '(1<
>URRW#DOSKD @ LSFKDLQV $ LQSXW V G S WFS - '(1<
-YWO]]K]\OQ\K]XOQKWY]./8CKOX^\KNKNOZKMYÔ]NYOXNO\OYNO
Y\SQOW ]Y_\MO KNN\O]] v]v # " ZK\K Y OXNO\OY NO
NO]^SXY vNv # " XK] ZY\^K] O XY Z\Y^YMYVY >-:
9U]OWWOX]KQOX]NOO\\YXY]]K]\OQ\K]PY\KWKMOS^K]>OXÔKQY\K
6
Pode-se consultar tambm o RFC 177 para uma lista completa das portas.
3iJLQD
19
KL\S\ _WK ]O]]Y >OVXO^ Y_ 0>: NK W[_SXK LO^K K ÔX^K^S`K
YL`SKWOXÔ ]O\ ]OW ]_MO]]Y K ZY\^K O]^ POMRKNK ZK\K O]^K
W[_SXK + PVKQ 4 O]ZOMPSMK _W KV`Y K[_S _]KWY] ./8C% Y] Y_^\Y]
KV`Y]WKS]SWZY\^KXÔ]]Y+--/:></4/->O7+=;9]NYS]Z\SWOS\Y]
TWOXMSYXKWY]KXÔ\SY\WOXÔ_WKMOS^KKOX^\KNKOY\OTOS^KZY\W
\O]ZYXNOXNYKYOXNO\OYNOY\SQOWTYKV`Y7+=;]_]KNY[_KXNY
_]KWY] Y MRKSX PY\aK\N vSZMRKSX] + PY\aK\Nv NOSbK Y ZKMYÔ
ZK]]K\ZY\W_]KXNYK^MXSMKNYWK]MK\KWOX^Y
0OS^Y S]]Y `KWY] OX^\K\ Y_^\K YZY NY 3ZMRKSX]$ `KWY] ZONS\ _WK
VS]^KPVKQ6NOXY]]K]\OQ\K]$
>URRW#DOSKD @ LSFKDLQV /
&KDLQ LQSXW SROLF\ $&&(37
WDUJHW
SURW RSW
VRXUFH
'(1<
WFS EHWDFLSVJDRUJEU
'(1<
WFS EHWDFLSVJDRUJEU
&KDLQ IRUZDUG SROLF\ $&&(37
&KDLQ RXWSXW SROLF\ $&&(37
GHVWLQDWLRQ
DOSKDFLSVJDRUJEU
DOSKDFLSVJDRUJEU
SRUWV
DQ\ !
DQ\ !
WHOQHW
IWS
+ ]KNK [_O YLÔWY] NK ÔVK W_S^Y OV_MSNK^S`K O ^KWLW W_S^Y

MVK\K .O SXMSY NOÒWY] YL]O\`K\ [_O OVO ]OZK\K Y] ^\] MRKSX]
Z\SXMSZKS] SXZ_^ PY\aK\N O Y_^Z_^ O XY] WY]^\K [_KS] \OQ\K]
SWZVOWOX^KWY] ZK\K OVO]% YL]O\Ò [_O vSXZ_^v O vPY\aK\Nv O]^Y
`KdSY] ZYS] XKNK SWZVOWOX^KWY] KSXNK 9_^\Y NO^KVRO K ]O\
YL]O\`KNY$KZ\O]OXKNKObZ\O]]YOX^\OZK\XÔ]O]vZYVSMc+--/:>v
3]^Y [_O\ NSdO\ [_O K ZYV^SMK NOPK_V^ NO XY]]Y PS\OaKVV KMOS^K\
ZKMYÔ]% Y [_O POS^Y ZOVK PVKQ : KY NSQS^K\WY] ZY\ ObOWZVY$
vSZMRKSX]:SXZ_^./8CvY_KSXNK$vSZMRKSX]:Y_^Z_^</4/->v8Y
]OQ_XNY MK]Y ]O XKNK PY\ O]ZOMSPSMKNY Y UO\XOV ZY\ ZKN\Y
\OTOS^K\K]KNKNO[_KV[_O\ZKMYÔ
=OQ_OWOWMYV_XK]K]MK\KMÔ\]^SMK][_OO]MYVROWY]@OTKWY]$
9 KV`Y
:\Y^ Y
Z\Y^YMYVY
9Z^ K]
YZO]
;_KV KV`Y
=Y_\MO
.O]^SXK^SYX +] ZY\^K]
9 OXNO\OY 9 OXNO\OY

9 ]O\`SY
+] ZY\^K] 9]
3iJLQD
20
_]KWY]
NO Y\SQOW
[_O PYS
^\KN_dSNY
ZK\K _W
0;.8
9 Z\Y^YMYVY 8OXR_WK
YZY
[_O
O]MYVROWY] O]ZOMPSMK
PYS
_]KNK
NO NO]^SXY OW TYQY ]O\`SY]

[_O PYS
8Y ]OX^SNY ^\KN_dSNY]
vZY\^K]v
^\KN_dSNY
NO ZK\K NO
ZK\K ]O_
ZK\K _W
XYWO
0;.8
*Fully Qualified Domain Name
@KWY]YL]O\`K\KQY\KMYWYZYNOWY]ObMV_S\K]\OQ\K][_OM\SKWY]2
Z\SWOS\KWOXÔ _WK ]YV_Y NSQKWY] \KNSMKV :YNOWY] ]SWZVO]WOXÔ
KZVSMK\ Y ZK\WO^\Y vPV_]Rv S]^Y VSWZKWY] ^Y^KVWOXÔ K] N_K]
\OQ\K]O]^KLOVOMSNK]$
>URRW#DOSKD @ LSFKDLQV )

.OZYS]NYPV_]R`SWY]KXY]]KVS]^KOOVKO]^`KdSK
/X^\O^KX^Y S]]Y XY ]O\SK _WK ]YV_Y ]O NO]OTK\WY] KZ\YÒS^K\
Y_^\K]\OQ\K]O]^KLOVOMSNK]8YXY]]YObOWZVYÔWY] N_K] \OQ\K] +
Z\SWOS\KPOMRKKZY\^K>OVXOÔTK]OQ_XNKPOMRKKZY\^K
0>::YNOWY]NO\\_LK\KZOXK]KZ\SWOS\K\OQ\K$
>URRW#DOSKD @ LSFKDLQV ' LQSXW

/NOZYS]ZK\KXY]MO\^SPSMK\WY]NSQS^KWY]$
WDUJHW
SURW RSW
VRXUFH
'(1<
WFS O EHWDFLSVJDRUJEU
GHVWLQDWLRQ
DOSKDFLSVJDRUJEU
SRUWV
DQ\ !
IWS
=XY]\O]^KOX^Y_WK\OQ\KKNKZY\^KNO0>:SWZY\^KXÔK[_SY
KV_XY ZO\MOLO\ K PVKQ SXZ_^ ZYS] OVK [_O NOPSXO [_O [_O\OWY]
OVSWSXK\ K \OQ\K NY] PS\OaKVV MRKSX] NO OX^\KNK O XY NO ]KNK
Y_^Z_Ô^M
3iJLQD
21
?W Y_^\Y ObOWZVY /]^KLOVOMOWY] POMRK\ K MYXObY `SK >-: ]OW

O]ZOMSPSMK\ ZY\^K XOW OXNO\OY NO Y\SQOW KÔXY ZK\K O]]O]
NO^KVRO] / SQ_KVWOXÔ XOQKWY] [_KV[_O\ MYXObY 0>: NK W[_SXK
KVZRK]OTKZK\K[_KVNO]^SXYPY\@OTKVOWL\KXNY$KVZRK'# "
OLO^K'# "$
>URRW#DOSKD @ LSFKDLQV $ LQSXW G S WFS - '(1<
>URRW#DOSKD @ LSFKDLQV $ RXWSXW V S WFS - '(1<
WDUJHW
SURW RSW
VRXUFH
GHVWLQDWLRQ
SRUWV
'(1<
WFS DQ\ZKHUH
DOSKDFLSVJDRUJEU
DQ\ !
DQ\
WDUJHW
SURW RSW
VRXUFH
GHVWLQDWLRQ
SRUWV
'(1<
WFS DOSKDFLSVJDRUJEU
DQ\ZKHUH
IWS !
DQ\
;_O\OWY] OX^Y VSLO\K\ K] MYXObO] NO 0>: NK W[_SXK # ")
=SWZVO]$vSZMRKSX].Y_^Z_^v
-YW O]]O MOX\SY KMSWK ]O _]K\WY] _WK PO\\KWOX^K NO `K\\ON_\K NO
ZY\^K]Ô\OWY]_W[_KN\YSXÔ\O]]KXÔ:YNOWY]_]K\YXWKZ8OâY\U
/bZVY\K^SYX >YYV KXN =OM_\S^c =MKXXO\ O]M\S^Y ZY\ 0cYNY\ Ò\]Y
LO^K aaaSX]OM_\OY\QXWKZ OVO XY] WY]^\K K] ZY\^K]
KLO\^K] OY_ PSV^\KNK] O WO]WY ]O XY]]K MYXObY PYS ^Y^KVWOXÔ
NO\\_LKNK 8O]^K ÔVK OVO XY] WY]^\K Y] ]YMUO^] [_O Y 3ZMRKSX]
PSV^\Y_OY][_ONOSbKWY]KLO\^Y]$
>URRW#DOSKD @XVUORFDOELQQPDS Y DOSKDFLSVJDRUJEU
6WDUWLQJ QPDS 9 %(7$ E\ )\RGRU I\RGRU#GKSFRP ZZZLQVHFXUHRUJQPDS
+RVW DOSKDFLSVJDRUJEU DSSHDUV WR EH XS JRRG
,QLWLDWLQJ 7&3 FRQQHFW VFDQ DJDLQVW DOSKDFLSVJDRUJEU
$GGLQJ 7&3 SRUW VWDWH 2SHQ
$GGLQJ 7&3 SRUW VWDWH 2SHQ
HFRDP WRGDV DV SRUWDV LQYHVWLJDGDV
7KH 7&3 FRQQHFW VFDQ WRRN VHFRQGV WR VFDQ SRUWV
,QWHUHVWLQJ SRUWV RQ DOSKDFLSVJDRUJEU
3RUW
6WDWH
3URWRFRO 6HUYLFH

ILOWHUHG
WFS
WFSPX[

ILOWHUHG
WFS
FRPSUHVVQHW

ILOWHUHG
WFS
FRPSUHVVQHW

ILOWHUHG
WFS
XQNQRZQ

ILOWHUHG
WFS
UMH

ILOWHUHG
WFS
XQNQRZQ

ILOWHUHG
WFS
HFKR

ILOWHUHG
WFS
XQNQRZQ

ILOWHUHG
WFS
GLVFDUG

ILOWHUHG
WFS
XQNQRZQ

ILOWHUHG
WFS
V\VWDW

ILOWHUHG
WFS
XQNQRZQ

ILOWHUHG
WFS
GD\WLPH
3iJLQD
22

ILOWHUHG
ILOWHUHG
ILOWHUHG
ILOWHUHG
ILOWHUHG
ILOWHUHG
ILOWHUHG
RSHQ
RSHQ
RSHQ
RSHQ
RSHQ
RSHQ
RSHQ
RSHQ
RSHQ
RSHQ
RSHQ
RSHQ
RSHQ
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
QHWVWDW
XQNQRZQ
TRWG
PVS
FKDUJHQ
IWSGDWD
IWS
VVK
WHOQHW
VPWS
ILQJHU
KWWS
VXQUSF
DXWK
QHWELRVVVQ
KWWSV
ORJLQ
VKHOO
SULQWHU
VTXLGKWWS
1PDS UXQ FRPSOHWHG ,3 DGGUHVV KRVW XS VFDQQHG LQ VHFRQGV
+QY\K [_O OX^\KWY] MYW K \OQ\K ZK\K NO\\_LK\ K] MYXObO] >-: Y
]YPâK\OXY]\OVK^K$
>URRW#DOSKD @XVUORFDOELQQPDS Y DOSKDFLSVJDRUJEU
6WDUWLQJ QPDS 9 %(7$ E\ )\RGRU I\RGRU#GKSFRP ZZZLQVHFXUHRUJQPDS
+RVW DOSKDFLSVJDRUJEU DSSHDUV WR EH XS JRRG
,QLWLDWLQJ 7&3 FRQQHFW VFDQ DJDLQVW DOSKDFLSVJDRUJEU
7KH 7&3 FRQQHFW VFDQ WRRN VHFRQGV WR VFDQ SRUWV
,QWHUHVWLQJ SRUWV RQ DOSKDFLSVJDRUJEU
3RUWV VFDQQHG EXW QRW VKRZQ EHORZ DUH LQ VWDWH ILOWHUHG
3RUW
6WDWH
3URWRFRO 6HUYLFH
1PDS UXQ FRPSOHWHG ,3 DGGUHVV KRVW XS VFDQQHG LQ VHFRQGV
+VSXRKNOPVKQ]NY3ZMRKSX]LK]^KXÔWKVOÒVOKZOXK]MYWO_]Y
OYNOL_QMYX]^KXÔNK]\OQ\K][_OYKNWSXS]^\KNY\SWZVOWOX^K[_O
]OZYNONYWSXVK]:OVYWOXY]K^YUO\XOV
<OVOWL\KXNYKVQ_WK]PVKQ]`SWY][_OZYNOWY]_]K\XYZK\WO^\Y]Y_
N ^KX^Y Y 0;.8 Y_ Y OXNO\OY 3: ObZ\O]]Y X_WO\SMKWOXÔ 8K
O]ZOMSPSMKYNK]ZY\^K]ZYNOWY]_]K\YXWO\YY_YXYWONY]O\`SY$
ÔVXO^Y_]]RY_O^M:YNOWY]SQ_KVWOXÔO]ZOMSPSMK\PKSbK]
\KXQ] NO ZY\^K]$ vN # " $v Y_ ]OTK WKXOTKWY] K[_S
^YNK] K] ZY\^K] NO K^ SXMV_]SÒ :YNOWY] O]M\OÒ\ v]
# " $v Y_ v] QKWKMSZ]QKY\QL\ ]]Rv 9 WO]WY ]O ZK]]K
MYW Y] OXNO\OY] 3: [_O ZYNOWY] WKXOTK\ ZYNOWY] _]K\ PKSbK]
3iJLQD
23
SXMV_]S`K] ZY\ ObOWZVY$ vZ ^MZ # " $v SXMV_WY]

MYWS]]YY]3:]NObbbK^# "
9_^\Y\OM_\]YP_XNKWOX^KVYNKSXÒ\]Y;_KXNY_]KWY]KPVKQvv
/VKÔWY]OX^SNYXOQK^S`Y%[_KXNYY_]KWY]NOÒWY]VO\WOX^KVWOXÔ$
v^YNY b WOXY] cv +]]SW$ vZ ^MZ ] # " aaav ]SQXSPSMK$
^YNK]K]ZY\^K]>-:WOXY]K"AAA
/bOWZVY.SQS^KWY]XYMYX]YVONKW[_SXKKVZRK$
LSFKDLQV $ LQSXW V VVK G VVK S WFS M 5(-(&7

-YW S]]Y POMRKWY] ^YNK] K] ZY\^K] >-: WK] NOSbKWY] K ZK\K Y
=OM_\O=ROVVYZO\K\=OÔX^KWY]_W>OVXO^XY]]KMYXObYYL`SKWOXÔ
PKVRK\7K]Y]]RZYNOO]^KLOVOMO\]_K]O]]Y\OWY^K]OWZ\YLVOWK]
?WKVS]^KQOWXKW[_SXKXY]WY]^\K$
WDUJHW
SURW
RSW
VRXUFH
'(1<
WFS

EHWDFLSVJDRUJEU
&KDLQ RXWSXW SROLF\ '(1<
GHVWLQDWLRQ
DOSKDFLSVJDRUJEU
SRUWV
VVK ! VVK
+MYXROMSNKPVKQv6vO]MVK\OMO[_OYZ\Y^YMYVY>-:ÔWO]^K\./8C
WK] XY K] ZY\^K] NY ]]R YL]O\Ò K] ]O^K] :YNOWY] _]K\ Y vv
XKO]ZOMSPSMKYNOOXNO\OY]3:XY]Z\Y^YMYVY]ObMO^YMYWY3-7:
O XK] SXÔ\PKMO] NO \ONO :YNO\KWY] MYXPSQ_\K\ K \OTOSY NO
ZKMYÔ]NO[_KV[_O\Z\Y^YMYVYWOXY]Y?.:$vZ_NZv9_KSXNK$v+
SXZ_^ Z ^MZ N # " aaa T +--/:>v% O]ZOMSPSMKWY] MYW
S]]Y[_OKMOS^KWY]KOX^\KNKNO[_KV[_O\ZKMYÔ>-:ZK\KKZY\^K"
WOXY]NKW[_SXK# "[_OPSMKObMV_NK-YX^_NY$v+SXZ_^
Z ^MZ N # " aaa T +--/:>v O]]OXMSKVWOXÔ
NSPO\OXÔ +QY\K KMOS^KWY] [_KV[_O\ MYXObY >-: NK W[_SXK
# "WOXY]KNKZY\^KAOL
3iJLQD
24
+MSWK PSdOWY] WOXY K] SXÔ\PKMO] NO \ONO XOâY\U SXÔ\PKMO7 9

3ZMRKSX]ZYNOQO\S\^YNK]K]SXÔ\PKMO]NY]S]ÔWKZK\KS]]Y_]KWY]
KPVKQvSv:YNOWY]_]K\vSO^RvK]_KZ\SWOS\KZVKMKO^RO\XO^
Y_ vS ZZZv K MYXObY NO WYNOW `SK ZZZN ZK\K XY] KÔ\WY] OW
ObOWZVY]WKS]_]_KS];_KXNY_WKW[_SXKNOXY]]K\ONOYL^WKMO]]Y
KSXÔ\XO^`SKNSKV_ZYZK\WO^\YP_XNKWOX^KV=OXNY[_OZYNOWY]
WO]WY O]ZOMSPSMK\ _WK SXÔ\PKMO [_O XY O]^ K^S`K Y [_O [_K]O
]OWZ\OYMK]YNKSXÔ\PKMOZZZ;_KXNYMYXOM^KWY]XY]]KZ\YÒNY\K
K SXÔ\PKMO ZZZ O]^ Z\O]OXÔ Y SPMYXPSQ VS]^K ]_K Z\O]OXK
;_KXNY NO]PKdOWY] K MYXObY K SXÔ\PKMO NO]KZK\OMO :YNO]O ^KWLW
_]K\ _W M_\SXQK XK YZY S VKXKXNY WY NY ]WLYVY vv$ O^R
NO]SQXK [_KV[_O\ SXÔ\PKMO ZY]]ÒV O^R O^R O^M + \OQ\K
vSZMRKSX]+Y_^Z_^N# "#Z_NZSO^RT./8CvKZVSMK]O
K[_KV[_O\SXÔ\PKMOO^RO\XO^NOXY]]KW[_SXK
/bS]Ô _WK PO\\KWOX^K NO MYXPSQ_\KY MRKWKNK 6SX_bMYXP /VK O]^
Z\O]OXÔ OW [_K]O XK] NS]^\SL_SO] NK <ON 2K^ O OW VXQ_K
ZY\^_Q_O]KXY-YXOM^S`K6SX_b_WKSXÔ\PKMO Q\PSMK [_O P_XMSYXK
NOX^\YNYBASXNYaZK\KONS^K\OQO\S\K]P_XO]NY]S]ÔWK]6SX_b
-YWY ^YNY \OM_\]Y 1?3 ZYNO ] ÒdO] MYXP_XNS\ PKMSVSNKNO MYW
NO]MYXROMSWOX^Y = NOÒWY] XY] RKLSVS^K\ K _]K\ ^KS] PO\\KWOX^K]
ZY\^KX^Y [_KXNY ÔWY] _W MYXROMSWOX^Y MYXMOS^_KV NK[_SVY [_O `KWY]
XY] YM_ZK\ @KWY] NK\ _WK \ZSNK YVRKNK XK SXÔ\PKMO NOX^\Y NK]
P_XO] NY 6SX_bMYXP ZK\K KVÔ\K\ K] \OQ\K] NY PS\OaKVV 8_WK
TKXOVK NY bÔ\W MRKWK Y Z\YQ\KWK$ vVSX_bMYXP v 8K ÔVK [_O ]_\QO
O]MYVRK v+WLSOXÔ NO \ONOv O NOZYS] K Q_SK vPS\OaKVVv >OWY]
]OQ_SXÔÔVKTMYWYK]O[_S`KVXMSK]KZYX^KNK]$
Consulte a documentao sobre o tema, principalmente sobre o comando ifconfig, que configura e lista as interfaces
existentes num host.
3iJLQD
25
.O]^KMKWY] Y] ^\] LYÔ] [_O \OZ\O]OX^KW Y ^\SZ vSXZ_^PY\aK\N

Y_^Z_^v NO ^YNK] K] \OQ\K] NO PS\OaKVVSXQ K[_S [_O `YM OX^\K\
MYWK]\OQ\K]NYPS\OaKVV@KWY]ONS^K\Y]SZMRKSX]Y_^Z_^XYÔ]O
[_O M_\SY]KWOXÔ SXZ_^ PYS ^\KN_dSNY ZY\ LVY[_OSY MVS[_O XY
LY^Yv]KNKvOKZK\OMO\O]Ô[_KN\YNONSVYQY$
3iJLQD
26
-VS[_O OX^Y XY LY^Y vKNSMSYXK\v >O\OWY] Y [_KN\Y ]OQ_SXÔ [_O

ZYNO XY] Z\YZY\MSYXK\ K ZY]]SLSVSNKNO NO WV^SZVK] ONSO] NY
SZMRKSX]$
8Y R NKNY] XY`Y] XO]]K ÔVK NY 6SX_bMYXP + XSMK MYS]K [_O XY
^YMKWY] KSXNK PYS K OX^\KNK ZK\K K XO^WK]U W]MK\K NO \ONO [_O
O]ZOMSPSMKNK KY VKNY NY OXNO\OY 3: +ÔX^K ZK\K Y] KV`Y] KMOS^K\
\OTOS^K\ O LVY[_OK\ Y ./8C >\KN_dSXNY Y] MKWZY] NK TKXOVK
Ô\KWY]$ vSZMRKSX] + Y_^Z_^ ] # " ]
# "Z_NZSO^RT\OTOM^v/X^YWK\MKWY]
Y[_KN\KNSXRYvK^S`YvOKMOS^KWY]K\OQ\K :K\K NO]K^S`VK _]KWY]
KWO]WKSXÔ\PKMO
3iJLQD
27
9_^\K YZY ZK\K Q\K`K\ K] \OQ\K] [_O M\SKWY] ]Y Y] ]M\SZ^] NO
SXSMSKVSdKY^\KNSMSYXKVWOXÔQ_K\NKNY]XYNS\O^\SY\MN>O]^K]O
ObK_]^S`KWOXÔ K] \OQ\K] ObOM_^K]O Y NOL_Q O OX^Y M\SKWY] _W
]M\SZ^ [_O MK\\OQK K] \OQ\K] NO PS\OaKVV XK ZK\^SNK NY 6SX_b
MYX]_VÔ]OKNYM_WOX^KYObS]ÔXÔZK\KYZO\K\^KS]KVÔ\KO]OW
]O_ ]S]ÔWK 2 NYS] ]M\SZ^] [_O KT_NKW W_S^Y Y =c]KNWSX K WYX^K\
]O_PS\OaKVV$YSZMRKSX]]KÒOYSZMRKSX]\O]^Y\O9Z\SWOS\YQ\K`K
X_W K\[_S`Y `SK \ONS\OMSYXKWOX^Y K] \OQ\K] [_O `YM M\SY_$ ZY\
ObOWZVY vSZMRKSX]]KÒ ( hPS\OaKVVÔ]^KNYv O`SNOXÔWOXÔ `YM
ZYNO _]K\ Y XYWO [_O NO]OTK\ 4 Y SZMRKSX]\O]^Y\O \O]^K_\K K]
\OQ\K] Q\K`KNK] ZOVY SZMRKSX]]KÒ$ vSZMRKSX]\O]^Y\O & hPS\OaKVV
Ô]^KNYv :K\K ObOM_^VY] XOMO]]\SY Y] Z\S`SVQSY] NO _]_\SY
\YY^9_^\Y\OM_\]YW_S^Y^SVKMKZKMSNKNONY3ZMRKSX]NOKQ\_ZK\
`\SK] \OQ\K] X_W MRKSX -YWY `SWY] Y Z\YQ\KWK ÔW ^\] MRKSX]
L]SMY] MRKWKNY] L_SV^SX MRKSX] O]^Y OWL_^SNY] XY Z\YQ\KWK ]O
K]]SWZYNOWY]^\KN_dS\+PVKQ_]KNKv8v.SQS^KWY]$
>URRW#DOSKD
>URRW#DOSKD
>URRW#DOSKD
>URRW#DOSKD
@
@
@
@
LSFKDLQV
LSFKDLQV
LSFKDLQV
LSFKDLQV
1
$
$
$
QDRXGS
LQSXW L HWK M QDRXGS
QDRXGS S XGS V M '(1<
QDRXGS S XGS V M 5(-(&7
HWF
HWF
+]]SWKQ\_ZKWY]]YLYXYWOvXKY_NZv_WMYXT_X^YNO\OQ\K]:YNOWY]
MYWYSZMRKSX]]KÒMYWY`SWY]Q\K`VK]OOXPSW\O]^K_\VK]
/XMO\\KXNY @KWY] KXKVS]K\ _W MOX\SY MV]]SMY OW \ONO] WNSK]
W_S^Y Z\O]OXÔ XY] NSK] K^_KS] >OXRK OW WOXÔ _WK SX^\KXO^ MYW _W
]O\`SNY\ YPO\OMOXNY `\SY] ]O\`SY] ^ZSMY] AOL 0>: O^M
MYXOM^KNY] K _WK W[_SXK PS\OaKVV 6SX_b O O]Ô ZY\ ]_K Òd K _W
\YÔKNY\ MYW _WK VSXRK NONSMKNK 9L]O\Ò Y] 3:] XK XY]]K
\OZ\O]OX^KY$
3iJLQD
28
ROTEADOR - 200.255.210.0 =>
FIREWALL - 200.255.210.1
SERVIDOR Linux {[eth0] 200.255.210.2

{[eth1] 172.16.0.0
INTRANET
{ 192.168.0.1, 192.168.0.2 , etc.}
@OTKWY]K]MYXPSQ_\KO]$
No Firewall...
Desligamos os servios desnecessrios, deixando o SSH para conexo remota com
o servidor somente. E vamos proteger nossa intranet...
ipchains -A input -p tcp -s 172.16.0.0 -j DENY
ipchains -A input -p tcp -s 192.168.0.1/10 -j DENY
ipchains -A input -p tcp -s ! 200.255.210.2 ssh -j DENY
3iJLQD
29
No Servidor...
Como nosso servidor ir ter servios da Internet pblicos precisamos liberlos...
ipchains -A input -p tcp -s 0.0.0.0/0 -d 255.210.02 www -j ACCEPT
ipchains -A input -p tcp -s 0.0.0.0/0- -d 255.210.02 ftp -j ACCEPT
Inclua aqui todos
os servios que sero oferecidos...
ipchains -A input -p tcp -s 192.168.0.1/10 -j DENY
(Fechando nossa intranet...)
ipchains -A input -p tcp -i lo -j ACCEPT
(Abrindo interface 'lo'...)
ipchains -P forward DENY
ipchains -A forward -s 192.168.0.1/10 -d 200.255.210.2 -j MASQ
(Usando a tcnica do mascaramento de IPs...)
-Ou seja: qualquer faixa de IPs...

?WKZKVK`\K]YL\OY^ZSMYNOWK]MK\KWOX^YNO3:]3:WK][_O\KNSXQ
+Y MYXPSQ_\K\WY] Y 3ZMRKSX] ZK\K _]K\ Y KV`Y 7+=; MYW K PVKQ vT
7+=;v ZY]]SLSVS^KWY] [_O _W Y_ WKS] OXNO\OY] 3:] PKV]Y] Y_
Z\S`K^S`Y]ZY]]KW]O\_]KNY]XKOb^\KXO^8YXY]]YObOWZVY^YNY]Y]
OXNO\OY] NO XY]]K SX^\KXO^ KZK\OMOW _]KXNY Y 3: NY ]O\`SNY\
:K\K ^KX^Y XY ]O O][_OK NO MYXPSQ_\K\ Y K\[_S`Y
O^M]c]MYXPSQ KNSMSYXKXNY vPY\aK\NISZ` ' cO]v =O `YM XY ONS^K\
YK\[_S`YÔ\[_OKMSYXK\Y3:PY\aK\NSXQWKX_KVWOXÔ/bOWZVY]O
ÔX^K\ OPO^S`K\ Y 3: MRKSX] PY\aK\N ]OW K VSXRK KM\O]MSNK Ô\OS Y
]OQ_SXÔOWWSXRKÔVK$
>URRW#DOSKD @ LSFKDLQV $ IRUZDUG S WFS V G M $&&(37
:DUQLQJ \RX PXVW HQDEOH ,3 IRUZDUGLQJ IRU SDFNHWV WR EH IRUZDUGHG DW DOO
8VH
HFKR ! SURFV\VQHWLSYLSBIRUZDUG
3iJLQD
30
>URRW#DOSKD @
Basta seguir a orientao (observe a seta). Este comando ir ativar o IP forwarding. E, ento, os
ZKMYÔ] ZYNO\Y ZK]]K\ K^\K`] NY RY]^ KVZRK ZK\K Y NO]^SXY
NO]OTKNY/]^K]^MXSMK]^Y\XKW]OZYNO\Y]K][_KXNYO]^KLOVOMSNK]OW
MYXT_X^YMYWK]\Y^K]NO\ONOQKÔaKc]O^M:Y\W]Y^ZSMY][_O
PYQOWNYO]MYZYNO]ÔNYM_WOX^Y
+LKSbY_WKVS]^KNK]YZO]NY]YPâK\O3ZMRKSX]:K\K_WKVS]^KQOW
MYWZVO^K_]OYv3:-RKSX];_SMU<OPO\OXMOvNO=,\YX]YXPOS^YOW
:Y]^=M\SZ^ O [_O ZYNO ]O\ ^\KdSNY NK ZQSXK AOL YPSMSKV OW
R^^Z$aaaKNOVKSNOXO^K_h\_]^MY\ZVSX_bSZMRKSX]
8VR
LSFKDLQV
LSFKDLQV
LSFKDLQV
LSFKDLQV
LSFKDLQV
LSFKDLQV
LSFKDLQV
>$'&@ FKDLQ UHJUDHVSHFLILFDGD >RSo}HV@

>5,@ FKDLQ QGDUHJUD UHJUDHVSHFLILFDGD >RSo}HV@
' FKDLQ QGDUHJUD >RSo}HV@
>/)=1;@ >FKDLQ@ >RSo}HV@
3 FKDLQ DOYR >RSo}HV@
0 > / _ 6 @ >RSo}HV@
K >LFPS@ PRVWUD LQIRUPDomR GH DMXGD RX OLVWD ,&03
&RPDQGRV
3HUPLWHVH
DGG
GHOHWH
GHOHWH
D IRUPD ORQJD RX FXUWD

$ FKDLQ
$FUHVFHQWD FKDLQ
' FKDLQ
([FOXL UHJUD
' FKDLQ QGDUHJUD
H[FOXL UHJUD QGDUHJUD SULPHLUD GR FKDLQ
LQVHUW , FKDLQ >QGDUHJUD@
,QVHUH QR FKDLQ FRPR QGDUHJUD SDGUmR SULPHLUR
UHSODFH 5 FKDLQ QGDUHJUD
6XEVWLWXL UHJUD QGDUHJUD SULPHLUD QR FKDLQ
OLVW
/ >FKDLQ@
/LVWD UHEUDV QXP FKDLQ RX WRGRV RV FKDLQV
IOXVK ) >FKDLQ@
([FOXL WRGDV UHJUDV QR FKDLQ RU WRGRV RV FKDLQV
]HUR
= >FKDLQ@
=HUD RV FKDLQV
FKHFN & FKDLQ
7HVWD XP SDFRWH QXP FKDLQ
QHZ
1 FKDLQ
&ULD XP QRYR
XVHUGHILQHG FKDLQ
GHOHWHFKDLQ
; FKDLQ
([FOXL XP
XVHUGHILQHG FKDLQ
SROLF\ 3 FKDLQ DOYR

0XGD D SROtWLFD QXP FKDLQ SDUD WDO DOYR
PDVTXHUDGH 0 /
/LVWD DV FRQH[}HV PDVFDUDGDV DWXDLV
VHW
0 6 WFS WFSILQ XGS
3}H YDORUHV GH
WLPHRXW
SDUD PDVFDUDPHQWR
2So}HV
ELGLUHFWLRQDO E
LQVHUH GXDV UHJUDV XPD FRP V G LQYHUWLGR
SURWR S >@ SURWR
SURWRFROR SHOR Q RU QRPH H[ CWFS
VRXUFH V >@ HQGHUHoR>PDVF@ >@ >SRUWD>SRUWD@@

RULJHP HVSHFLILFDomR
VRXUFHSRUW >@ >SRUWD>SRUWD@@
RULJHP SRUWD HVSHFLILFDomR
GHVWLQDWLRQ G >@ HQGHUHoR>PDVF@ >@ >SRUWD>SRUWD@@
GHVWLQR HVSHFLILFDomR
GHVWLQDWLRQSRUW >@ >SRUWD>SRUWD@@
GHVWLQR SRUWD HVSHFLILFDomR
LFPSW\SH >@ WLSR HVSHFLILFD WLSR GH ,&03
3iJLQD
31
LQWHUIDFH
MXPS
M
PDUN
P
QXPHULF Q
ORJ
RXWSXW R
726
YHUERVH Y
H[DFW [
>@ IUDJPHQW
>@ V\Q \
>@ YHUVLRQ
L >@ QRPH>@
QRPH GD LQWHUIDFH GH UHGH >@ SDUD FXULQJD
DOYR >SRUWD@
DOYR SDUD D UHJUD >SRUWD@ SDUD 5(',5(&7
>@PDUN Q SDUD
PDUN
QR SDFRWH FRUUHVSRQGHQWH
VDtGD QXPHULFD GH HQGHUHoRV H SRUWDV
O
KDELOLWD UHJLVWUR ORJ QR NHUQHO
>WDPDQKRPD[@ VDtGD GH SDFRWH SDUD GLVSRVLWLYR
QHWOLQN
W H [RU H[RU PDVFiUDV SDUD 726

PRGR
YHUERVH
H[SDQGH Q~PHURV PRVWUD YDORUHV H[DWRV

I
FRPELQD VRPHQWH R VHJXQGR RX PDLV IUDJPHQWRV
FRPELQD SDFRWHV 7&3 VRPHQWH TXDQGR FRQILJXUD
6<1
9
PRVWUD YHUVmR
2.6 The SINUS Firewall - a TCP/IP packet filter for Linux

@O\OWY] KQY\K _WK Y_^\K ]YV_Y NO QO\OXMSKWOX^Y NO PS\OaKVV OW
KWLSOXÔ6SX_b8YPK\OWY]MYWZK\KO]OX^\OY3ZMRKSX]OY=38?=
9Z\SWOS\YT_WZ\YN_^YZ\YX^YZK\KP_XMSYXK\Y]OQ_XNY_WZ\YN_^Y
OW KWZVY NO]OX`YV`SWOX^Y :OVY WOXY] K Ò\]Y [_O PYS
NO]OX`YV`SNK ZK\K Y UO\XOV b NY 6SX_b" 9 =38?= 0S\OaKVV ]P
0S\OaKVV_WZ\YTO^YNK?XSÒ\]SNKNONOD_\S[_OMYWYMYXM_\]YNK
=A3>-2 NK >OVOU_\] :Kc]O\` +1 O NK />2 D\SMR NO]OX`YV`SNY ZY\
<YLO\^ 7_MR]OV <YVKXN =MRWSN 3XPY\WKO] ]YL\O Y Z\YTO^Y O
NYaXVYKNNYZ\YQ\KWKO]^YOW$
http://www.ifi.unizh.ch/ikm/SINUS/firewall.html
ftp://ftp.ifi.unizh.ch/pub/security/firewall
9] NO]OX`YVÒNY\O] KNÒ\ÔW NY O]^KNY NO NO]OX`YV`SWOX^Y NY
]YPâK\O :Y\^KX^Y OVO XY ]O\ _]KNY KSXNK ZK\K K ]OQ_\KXK NO
\ONO] MYW NKNY] M\^SMY] +NÒ\ÔW KSXNK$ _]OY ZK\K KZ\OXNSdKNY O
]O`YMXYÔWXOXR_WPS\OaKVVY_XYMYXPSKXY[_OÔW
1
H uma verso estvel para verses de kernel mais antigos.
9]K]ZOM^Y]ZY]S^S`Y]NYZ\YQ\KWKO]^YXY]O_WYNYNOK^_KY/VO
^\KLKVRK
MYW
_W
K\[_S`Y
NO
MYXPSQ_\KY
vO^MPS\OaKVVNPS\OaKVVMYXPv%KYMK\\OQK\OVOVK]MYXPSQ_\KO]
KO]^YMKNK]2KSXNKMYWYZKMYÔ ]SPS^K\Qd _W ]O\`SNY\
Y ]YPâK\O ZK\K PS\OaKVV Z\YZ\SKWOXÔ NS^Y O _W MVSOXÔ O]M\S^Y
8
H uma verso estvel para verses de kernel mais antigos.

3iJLQD
32
OW 4K`K _WK SXÔ\PKMO ZK\K PKMSVS^K\ K ONSY NY PS\OaKVVMYXP

MRKWKNY 0S\OaKVV -YX^\YV :KXOV 2 Y_^\Y]]SW K MYX^\SL_SY NO
,OXONSM^ >\OPdO\ ZK\K K VOS^_\K] NY] VYQ] QO\KNY] ZOVY =38?= ?WK
PO\\KWOX^KLK]OKNKOW2>76OW=;6
-YWY XY R ZKMYÔ] <:7 XOW LSX\SY] >+<1D3: MYW =38?= Ô\OWY]
[_O ZK]]K\ Y] ZK]]Y] NO MYWZSVKY NY ]YPâK\O 7O]WY ZY\[_O R
NO^KVRO][_OXYZYNOW]O\XOQVSQOXMSKNY]ZOVYKV_XY
4`SWY][_O_WPS\OaKVVXY6SX_bSWZVOWOX^KNYOWXÒVNOUO\XOV
9 K\[_S`Y v</+.7/v NY =38?= KNÒ\Ô Y _]_\SY NK XOMO]]SNKNO NO
\OMYWZSVKY
NY
UO\XOV
>KWLW
T
WOXMSYXKWY]
[_O
`\SK]
NS]^\SL_SO] 6SX_b T ÒW MYW Y UO\XOV Z\YX^Y] ZK\K PS\OaKVVSXQ

:Y\MYX]OQ_SXÔMO\^Y]NS]]YXY]OPKdXOMO]]\SY\OMYWZSVK\^YNY
Y UO\XOV 8Y OX^KX^Y ZK\K K MYWZSVKY NY =38?= Z\OMS]KWY] NO
]YWOXÔ _W K\[_S`Y NK] PYXÔ] NY UO\XOV ?W YLTOM^ PSVO _]KNY XY
vVSXUv ZK\K QO\K\ Y ObOM_^ÒV NY Z\YQ\KWK ]OW OVO K MYWZSVKY
PKVRK\7K]ÔWY]_WKNSMKZK\K\O]YVÒ\YZ\YLVOWK%
-O\^SPS[_O]O [_O `YM ÔW OW ]_K W[_SXK _W KWLSOXÔ NO
NO]OX`YV`SWOX^Y SX]^KVKNY QMM ROKNO\] PSVO] O^M .OZYS]
SX]^KVO Y K\[_S`Y [_O ÒW MYW K] PYXÔ] NY UO\XOV$ UO\XOV]Y_\MO
S" \ZW.SQSÔY]OQ_SXÔ$
>URRW#DOSKD
>URRW#DOSKD
>URRW#DOSKD
>URRW#DOSKD
@ FG XVUOLEOLQX[DUFKLOLE
OLE@ JFF 'BB$66(0%/<BB WUDGLWLRQDO F FKHFNVXP6
OLE@ OV F
OLE@ FKHFNVXP6 FKHFNVXPR
[ateno]
9L]O\Ò K ObS]^XMSK NY K\[_S`Y [_O NO]OTKWY]$ Y vMROMU]_WYv9

+QY\K ZYNOWY] NO]MYWZKM^K\ Y K\[_S`Y MYW K] PYXÔ] NY =38?= ]_Z\K
MS^KNY /]MYVRK _W NS\O^\SY K ]O_ QY]^Y =O `YM ZY]]_S Y 4.5
b O Y ZKMYÔ =A381 R^^Z$aaaTK`K]_XMYW ZYNO MYWZSVK\ Y
9
Se voc optar por recompilar o kernel, no execute o 'make clean' no fim do processo! Pois sabidamente ele apagar
todos os arquivos *.o gerados...
3iJLQD
33
]P -YX^\YV :KXOV =O NO]OTK\ ONSÔ Y] ZK^R] XY NS\O^\SY
vMVSOX^7KUOPSVOSXv ZK\K KT_]^K\ Y MKWSXRY ZK\K K] MVK]]O] 4K`K
2
_WK
Ò\]Y
XYYPSMSKV
T
MYWZSVKNK
XK
ZQSXK
R^^Z$aaa]SX_]PS\OaKVVY\Q NY MVSOXÔ NY -YX^\YV :KXOV ZYNO ]O\

_WK LYK YZY ]O `YM ^SÒ\ Z\YLVOWK] MYW Y 4.5 MYW K] MVK]]O]
=A381Y_WO]WY]OXYNO]OTK\MYWZSVK\OWKWLSOXÔ4K`K
/bOM_ÔOX^YXYNS\O^\SYKYXNO`YMSX]^KVY_K]PYXÔ]$
MYXPSQ_\O
WKUOevWKUOMVSOX^v]YWOXÔQO\K\Y]P-YX^\YV:KXOV
evWKUO]O\Ò\v]YWOXÔQO\K\Y]O\`SNY\
+XÔ] NY WKUO SX]^KVV `YM NOÒ M\SK\ _W XY`Y v_]_\SYv MRKWKNY
PS\OaKVV KNSMSYXKXNY K ]OQ_SXÔ VSXRK OW ]O_ K\[_S`Y vO^MZK]]aNv
_]O_W_]O\SNOQ\Y_ZSNNO]YM_ZKNY]$
firewall:x:888:888::/dev/null:/bin/false
+Z] M\SO _W XY`Y Q\_ZY ^KWLW MRKWKNY PS\OaKVV KNSMSYXKXNY O]^K]
VSXRK] XY ]O_ K\[_S`Y vO^MQ\Y_Zv XY ]O O][_OK NO OPO^_K\ _W
LKMU_ZXY]K\[_S`Y]KVÔ\KNY]$
firewall:x:888:
0OS^YS]]YKSX]^KVKYZYNO]OQ_S\
WKUOSX]^KVVeZYNO]O\vWKUO]O\Ò\ISX]^KVVv
9?vWKUOMVSOXÎSX]^KVVv
+ SX]^KVKY ZY\ ZKN\Y O ^KWLW ]O K MYWZSVKY ^\KX]MY\\O_
XY\WKVWOXÔ ZO Y] ]OQ_SXÔ] K\[_S`Y] NY ]O\`SNY\ XY WYWOX^Y
XY]YM_ZK\OWY]MYWOVO]KZOXK]XO]Ô]NS\O^\SY]$
3iJLQD
34
_]\VYMKV]LSX]PMKMMY_X^
_]\VYMKV]LSX]PMYNKOWYX
`K\VYQPS\OaKVV
{ 'LOGS': arquivos de registros...
`K\VYQPS\OaKVV]Zc
`K\VYQPS\OaKVV\OZY\^
O^MPS\OaKVVNe\O]O\`KNYZK\KY]K\[_S`Y]PS\OaKVVMYXP
OPS\OaKVVZK]]aN
VSLWYN_VO]WS]M]PY_WWYN_VYSX]^KVÒV
@KWY] SXSMSK\ Y =38?= 0S\OaKVV :K\K S]]Y Z\OMS]KWY] NO _WK

MYXPSQ_\KY ZYS] Y NS\O^\SY vO^MPS\OaKVVNv O]^ `KdSY KZ] Y
vWKUOSX]^KVVvPKV^KYK\[_S`YPS\OaKVVMYXP.OZYS][_OONS^K\_WK
MYXPSQ_\KYKYXY]]YQY]^YOXOMO]]SNKNO]SX]^KVKWY]YWYN_VY10MYW
vSX]WYNVSLWYN_VO]WS]M]PYv.OZYS]NKWY]ZK\^SNKXYNKOWYX$
>URRW#DOSKD @ LQVPRG OLEPRGXOHVPLVFVIR

>URRW#DOSKD @ XVUORFDOVELQVIF VWDUW
,QLWLDOL]LQJ GDHPRQ
1R VRFNHW VHFXULW\ ILUHZDOOWRILUHZDOO FRPPXQLFDWLRQ GLVDEOH
B
>URRW#DOSKD @
;_KXNY Y NKOWYX v]PMv N ZK\^SNK OVO V K ]_K MYXPSQ_\KY O
ObOM_^KK]\OQ\K]NO]OTKNK]NOPS\OaKVV?W K]ZOM^Y SXÔ\O]]KXÔ NY
Z\YQ\KWK NKOWYX [_O OVO MROMK K] SXMYX]S]^XMSK] ZY]]ÒS]
MYX^SNK] XY PS\OaKVVMYXP$ ^KX^Y NO \OQ\K] [_KX^Y O\\Y] NO
NSQS^KY=OS]]YKMYXÔMO\OVOZ\KONO`YVÒ_WZK\]OO\\Y\KY
_]_\SY -RO[_O ^KS] SXMYXQ\_XMSK] O \OZS^K Y Z\YMO]]Y ;_KX^Y K
10
Consulte a documentao diponvel a respeito dos mdulos instalveis no Linux, ou mesmo as pginas manuais ('man
lsmod', 'man insmod', 'man rmmod').
3iJLQD
35
WOX]KQOWOMYKNKXY]YMUO^]OM_\S^cXY]OZ\OYM_ZOOVKKZK\OMO
[_KXNYY=38?=MYWZSVKNY]OWYZ\YQ\KWK/8]USZ/VOZY]]SLSVS^KK
MYXObY M\SZ^YQ\KPKNK OX^\O PS\OaKVV] 7K] MYWY ÔWY] Y ==2 ZK\K
O]]O SXÔX^Y ZYNOWY] KL\S\ NO ^KV ]_ZY\Ô 2 ^KWLW ]\SY]
Z\YLVOWK]
NO
MYWZSVKY
NY
/X]USZ
P^Z$P^Z^SUOOO^RdMRZ_LZKMUKQO]]USZXY6SX_b
:K\KNO]VSQK\Y=38?=\OWY`KYWYN_VYNKWOW\SKv\WWYN]PYvO
ZK\OYNKOWYXMYWYMYWKXNYv_]\VYMKV]LSX]PM]^YZv
;_KXNYNYNOL_QNOXY]]KMYXPSQ_\KYO]^SÒ\Z\YX^YOO]^SÒ\WY]
]K^S]POS^Y] MYW K WYX^KQOW NK] \OQ\K] NY PS\OaKVV ZYNOWY] _]K\ _W
]M\SZ^ZK\KSXSMSK\YXY]]YNKOWYXv]PMv+LKSbYO]^_WObOWZVYNO
_W ]M\SZ^ [_O _]KWY] OW XY]]K \ONO ZYNO]O KNKZ^VY ] WKS]
NSÒ\]K]]S^_KO]$

6FULSW SDUD LQLFLDU GDHPRQ GR 6,186 )LUHZDOO

H LQVWDODU PRGXOR
VIR
-DQHLUR GH

8VDGR QXP 6LVWHPD /LQX[ 5HG +DW NHUQHO
-=--=- -=--=--=--=--=--=--=--= --= HWFUFGLQLWGIXQFWLRQV ,QLFLD DTXL R VFULSW
IXQFWLRQV

FDVH LQ
VWDUW
JSULQWI 6WDUWLQJ V VI )LUHZDOO
LI WHVW U YDUUXQVIFSLG NLOO CFDW YDUUXQVIFSLGC
WKHQ
JSULQWI V H[LVWV V DOUHDG\ UXQQLQJ?Q ?
YDUUXQVIFSLG VIF
HOVH VELQLQVPRG OLEPRGXOHVPLVFVIR XVUORFDOVELQVIF VWDUW
HFKR VIF
IL
WRXFK YDUORFNVXEV\VVIF

VWRS
JSULQWI 6WRSSLQJ V VI )LUHZDOO
XVUORFDOVELQVIF VWRS
JSULQWI 5HPRYLQJ 6,186 PRGXOH
VELQUPPRG VI
UP I YDUUXQVIFSLG
UP I YDUORFNVXEV\VVIF
HFKR VIF

UHVWDUW
VWRS
VWDUW

VWDWXV
VWDWXV VIF
3iJLQD
36

HVDF
XVUORFDOVELQVIF VKRZ

JSULQWI 8VDJH V ^VWDUW_VWRS_VWDWXV_UHVWDUW`?Q VIF
H[LW
H[LW
@KWY]KQY\KKXKVS]K\KMYX]^\_YNOXY]]K]\OQ\K]NOPS\OaKVV[_O
PSMK\KW MYX^SNK] XY PS\OaKVVMYXP 9] K_^Y\O] MYVYMKW XY NS\O^\SY
v]KWZVO]v[_K^\YK\[_S`Y]NOMYXPSQ_\KY^^_VYNOObOWZVYZK\K
[_OYKNWSXS]^\KNY\O]^_NOY]$
CheswickBellovin.conf
MediumEnterprise.conf
SimpleSample.conf
SmallBusiness.conf
-YX]_VÔY] NOZYS] NO NYWSXK\ K] ^MXSMK] NO PS\OaKVVSXQ 9] XYWO]
NY]K\[_S`Y]TNOWYX]^\KWY]O_SXÔX^Y=YWOXÔYZ\SWOS\Y^KVÒd
XY Y ]OTK ;_OW XY O]^ PKWSVSK\SdKNY MYW K LSLVSYQ\KPSK ]YL\O
]OQ_\KXK ZYNO XY MYXROMVY]$ A < -RO]aSMU O = 7 ,OVVY`SX
]Y K_^Y\O] NO _W MV]]SMY ]YL\O Y ÔWK MRKWKNY 0S\OaKVV] KXN
3XÔ\XO^ =OM_\S^c$ <OZOVVSXQ ^RO ASVc 2KMUO\ 9 Z\SWOS\Y K\[_S`Y]
ÔX^KKZVSMK\Y]Z\OMOS^Y]NO]M\S^Y]XO]ÔVS`\Y
@KWY] _]K\ K[_S _W PS\OaKVVMYXP KVÔ\XK^S`Y LOW ]SWZVO] ZK\K
O]^_NK\ K NSXWSMK NY =38?= 0S\OaKVV /VO O]^ XY WKX_KV NY
Z\YQ\KWK Y KV_XY Y OXMYX^\K\ OW PY\WK^Y R^WV XY NS\O^\SY
vNYMR^WVSXNObR^WVv NK NS]^\SL_SY 7YNSPSMKWY] KVQ_WK] ZK\Ô]
WK]OW]XÔ]OOVOO]^K@OTKWY]$

_ 6DPSOH FRQILJXUDWLRQ IRU WKH VI )LUHZDOO_

VHWXS
LQWHUQDOQHWV
PDLOBGHIDXOW URRW#ORFDOKRVW
3iJLQD
37
UXOHV
EORFN WFS WR SRUW OLQN
SRUW VXSGXS
QRWLILFDWLRQBOHYHO
EORFN RSWLRQV ORRVHBVRXUFHBURXWH VWULFWBVRXUFHBURXWH DOO
QRWLILFDWLRQBOHYHO
GHWHFWD URWDV VHFXQGiULDV SDUD D ,QWHUQHW
EORFN ULS IURP LQVLGH QRWLILFDWLRQBOHYHO
3HUPLWH D HQWUDGD GH UHTXLVLo}HV )73 SDUD QRVVR VHUYLGRU )73
DFFHSW WFS WR SRUW QRWLILFDWLRQBOHYHO
3HUPLWH D HQWUDGD GH UHTXLVLo}HV )73 SDUD R VHUYLGRU 7HOQHW/RJLQ
DFFHSW DOO IURP WR QRWLILFDWLRQBOHYHO
EORTXHLD
TXDOTXHU RXWUD UHTXLVLomR 7&3 H VRD R DODUPH
EORFN WFS QRWLILFDWLRQBOHYHO

QRWLILFDWLRQ
OHYHO UHJLVWUD WRGDV DV FKHJDGDV GH FRQH[mR )73 SHUPLWLGDV
PHVVDJH 5HTXLVLFDR GH FRQH[DR )73
OHYHO UHJLVWUD WRGDV DV FKHJDGDV GH FRQH[mR 7HOQHW SHUPLWLGDV
PHVVDJH 5HTXLVLFDR GH FRQH[DR 7HOQHW
OHYHO UHJLVWUD WRGDV DV FKHJDGDV GH FRQH[mR ::: SHUPLWLGDV
PHVVDJH 5HTXLVLFDR GH FRQH[DR :::
OHYHO UHJLVWUD WRGDV DV FKHJDGDV GH FRQH[mR 66+ SHUPLWLGDV
PHVVDJH 5HTXLVLFDR GH 6HFXUH VKHOO
OHYHO
PHVVDJH 5HGLUHFLRQDPHQWR ,&03 UHFHELGR
OHYHO
PHVVDJH +D XPD URWD VHFXQGiULD SDUD D ,QWHUQHW
OHYHO
PHVVDJH 3DFRWH ,3 FRP RSFDR BVRXUFH URXWHB GHWHFWDGD
OHW VUVRXUFHKRVW VUVRXUFHKRVW WLPHRXW
LI VUVRXUFHKRVW
WKHQ
PHVVDJH 3DFRWH ,3 FRP RSFDR BVRXUFH URXWHB GHWHFWDGD
VS\
HQGLI
OHYHO
PHVVDJH &RQH[DR 7&3 LOHJDO
OHW LOOWFSVRXUFHKRVW LOOWFSVRXUFHKRVW WLPHRXW
LI LOOWFSVRXUFHKRVW
WKHQ
PHVVDJH &RQH[DR 7&3 LOHJDO
PDLO
VS\
HQGLI
OHYHO 'HVOLJD ,17(5)$&( (7+
H[HF LIFRQILJ HWK GRZQ
3iJLQD
38
HQG
9PS\OaKVVMYXPZY]]_S^\]LVYMY]NOMYXPSQ_\KY]YOVO]$
SETUP
RULES
(pode-se usar tambm PRIMARY_RULES)
NOTIFICATION
/X^\OY]LVYMY]NOMYXPSQ_\KYZYNOWY]Ô\ MYWOX^\SY] KMOS^KXNY Y
]WLYVY Y_K]LK\\K]^\KNSMSYXKS]NY-
9 LVYMY =/>?: LOW M_\^Y K MYVYMKWY] K SXPY\WKY ]YL\O XY]]K
^YZYVYQSK NO \ONO SXÔ\XKVXO^] ZK\K ^\KLKVRK\ MYX^\K Y SZ
]ZYYPSXQVS]^KXNYK]]SWXY]]KSX^\KXO^9]3:] NOÒW ]O\ ]OZK\KNY]
ZY\`\Q_VK]OÔ\WSXKNY]MYWv%v:YNO]OK[_S^KWLWO]ZOMSPSMK\Y
XO^WK]U$ v# " WK]U v =OQ_O]O NOZYS] K
SXPY\WKYNY]OXNO\OY]_]KNY]WKSVINOPK_V^ZOVY=38?=ZK\K
Y OÒX^_KV OX`SY NO OWKSV] MYVY[_O [_KX^Y] NO]OTK\ ]OZK\KXNYY]
ZY\`\Q_VK]
9 LVYMY <?6/= Y Z\SXMSZKV NY K\[_S`Y 8O]^K ]OY K] VSXRK]
MYWOKW YL\SQK^Y\SKWOXÔ MYW K] ZKVK`\K]$+--/:> KMOS^K Y] ZKMYÔ]
OX`SKNY],69-59MY\\O]ZYXNOXÔKY./8CNY 3ZMRKSX] KLKXNYXK Y]
ZKMYÔ] ]OW WKSY\O] MYX]SNO\KO] </4/-> \OTOS^K QO\KXNY
T_]^SPSMK^S`KO9,=/<@/MYX]^\_NKZK\KQO\S\Y]VYQ]NY=38?=+
\SQY\ XY KMOS^K XOW \OM_]K WK] NOSbK K NOMS]Y ZK\K K Z\bSWK
\OQ\K :Y\ PSW K \OQ\K] ]Y NS\OMSYXKNK] ZK\K _W XÒV NO
XY^SPSMKY [_O ]O OXMYX^\K XY V^SWY LVYMY O Ô\WSXKNK] MYW _W
v%v9]MYXMOS^Y]]YLK]SMKWOXÔY]WO]WY]NY3ZMRKSX]O`YMNOÒ
^\KdO\ Y] ]O_] MYXROMSWOX^Y] 9 [_O W_NK ]SX^KbO XK] VSXRK] NO
MYXPSQ_\KY:YNO\]OSK\O]_WSVKK]]SW$
[regra] proto. IP (de) porta XX IP (para) porta XX -> nvel de notificao
3iJLQD
39
<O^S\KXNY_WObOWZVYNOXY]]YK\[_S`YOXMYX^\KWY]$

;_KV \OQ\K O]^KLOVOMO]O K[_S) +MOS^KWY] ZKMYÔ] >-: NY 3:
# " Z\YÒXSOXÔ] NK ZY\^K O ]O OX^\KW Y] ZKMYÔ]
ObOM_^K]OYXY^SPSMK^SYXIVOÒVNOXWO\Y;_OO]^KLOVOMO$
OHYHO
PHVVDJH 5HTXLVLFDR GH 6HFXUH VKHOO
/X`SKZK\KYK\[_S`YNO\OQS]^\YNY=38?=OWv`K\VYQPS\OaKVVvK
SXPY\WKY[_ORY_Ò_WK\O[_S]SYXKZY\^K
+VQ_WK] YL]O\`KO] KSXNK ]YL\O Y] ZK\WO^\Y] NY K\[_S`Y$ ZYNOWY]
O]^KLOVOMO\ _WK \OQ\K ZK\K ^YNY] Y] Z\Y^YMYVY] KMOS^Y] MYW K PVKQ
vKVVv^KWLWO]^KLOVOMO\PKSbK]NOZY\^K]bbbbOMYXPSQ_\K\K]
PKSbK] NO OXNO\OY] _]KXNY v^Y P\YWv vNY 3: ^KV ZK\K Y 3:
^KVv/bOWZVY$
EORFN
DOO
WR

QRWLILFDWLRQBOHYHO
SRUW

IURP

9_^\YZK\WO^\YSWZY\^KX^]]SWYvSX]SNOv[_OXY KZK\OMO OW XY]]Y

K\[_S`YObOWZVY 3X]SNO XY]]K SX^\KXO^ NOPSXSNK MYWY `SWY] XK
PVKQSXÔ\XKVXO^]/VOMYWLSXKNYMYWYZK\WO^\Yv^YP\YWv
/OX^Y]OO]^KLOVOYZY\ObOWZVY$
EORFN WFS IURP LQVLGH WR SRUW QRWLILFDWLRQBOHYHO

,VY[_OSY [_KV[_O\ ZKMYÔ >-: NO WSXRK SX^\KXO^ ZK\K Y 3:
:Y]]Y SXÒ\Ô\ vSX]SNOv _]KXNY vY_^]SNOv S]^Y
[_KV[_O\3:PY\KNOWSXRKSX^\KXO^
EORFN WFS IURP RXWVLGH WR SRUW QRWLILFDWLRQBOHYHO
3iJLQD
40
:Y\PSWYLVYMY89>303-+>3988O]^K]OYMKNKXÒVNOXY^SPSMKY
]O\O]^KLOVOMSNYX_WZK\Q\KPY3XSMSKXNY]OMYWKZKVK`\KvVOÒVv
]OQ_SNY NO _W XWO\Y SNOX^SPSMKNY\ O v$v :YNO]O O]ZOMSPSMK\ K]
KO] XOMO]]\SK] K ]O\OW SWZVKX^KNK] 9 XÒV NO XY^SPSMKY
P_XMSYXKOWXÒVNO]M\SZ^/WZ]O_NYMNSQYPSMK\SK$
SE
determinadas circunstncias ocorrem...
Mande uma MENSAGEM...
E CHAMA (call) o Nvel 900
NVEL 900
Se as circunstncias ocorrem 10 vezes
DESLIGUE A INTERFACE ETH0!
MVK\Y [_O NOWY] _W ObOWZVY \KNSMKV @OTKWY] Y_^\Y MK]Y >YNY
KMO]]YKYWO_]O\`SNY\>OVXOÔW_WKY_WKS]RY]^]\ONS\OMSYXYZK\K
_WXÒVNOXY^SPSMKY$
OHYHO
PHVVDJH 6ROLFLWDFDR GH VHVVDR 7(/1(7 QD SRUWD
FDOO

-YWKVSXRKvMKVV"v\OOX`SYZK\K_WK]_L\Y^SXKYvVOÒV"v
OWWO_PS\OaKVVMYXP9XNO$
OHYHO
OHW FRQQHFWLRQVVRXUFHKRVW FRQQHFWLRQVVRXUFHKRVW WLPHRXW
LI FRQQHFWLRQVVRXUFHKRVW ! WKHQ
UHSRUW
PHVVDJH $OJXHP HVWD WHQWDQGR DWLYDU PDLV GH FRQH[RHV 7HOQHW
%ORTXHDQGR DFHVVR SRU VHJXQGRV
EORFN DOO IURP VRXUFHKRVW QRWLILFDWLRQBOHYHO WLPHRXW
FDOO
HQGLI
/]MVK\OMOXNY$ K ZKVK`\K vVO^v [_O SXSMSK K P\K]O ZYNO O]^KLOVOMO\
Y_
W_NK\
Y
`KVY\
NO
_WK
`K\SÒV
8K
]OXÔXK
vMYXXOM^SYX]$]Y_\MORY]^vYZ\SWOS\YÔ\WYK`K\SÒVO]Y_\MORY]^
^KX^Y [_KX^Y NO]^RY]^ P_XMSYXK MYWY _W [_KVSPSMKNY\ -YXPSQ_\KWY]
[_O ]O XY]]Y ]O\`SNY\ \OMOLO\ WKS] NY ( MSX[_OX^K MYXObO] NO
_W OXNO\OY 3: Y ]Y_\MORY]^$ OX`SY WOX]KQOW KY VYQ LVY[_OSY NO
3iJLQD
41
KMO]]YKYOXNO\OY3:NOY\SQOWZY\]OQ_XNY]O`KWY]ZK\KK]_L
\Y^SXK9KV_XYZYNOMYX]_V^K\YWKX_KV2>76[_OXY]\OPO\SWY]
ZK\K MROMK\ K] SXÔ\O]]KXÔ] YZO] NO ]M\SZ^ [_O Y =38?= YPO\OMO
=Y O]^K] K] YZO] NO ]M\SZ^ [_O ZYNOW ]O\ _]KNK] XY LVYMY
XY^SPSMK^SYXIVOÒV$
7/==+1/$
.OPSXOKWOX]KQOWK]O\OX`SKNKZK\KYK\[_S`YNO\OQS]^\YO^KWLW
_]KNYXYOWKSVO]ZOMSPSMKNYXYLVYMYv]O^_Zv+]WOX]KQOX]NOÒW
]O\O]M\S^K]OX^\OK]ZK]
=C=691$
-YVYMKY\OQS]^\YMY\\OXÔ^KWLWXYvVYQvNY]S]ÔWK
</:9<>$
-YZSKY\OQS]^\YMY\\OXÔZK\KYK\[_S`YvPS\OaKVV\OZY\^v
7+36$
/X`SKOWKSVZK\KY]OXNO\OY]O]ZOMSPSMKNY]XKMYXPSQ_\KY
=:C$
3ÔW W_S^Y SXÔ\O]]KXÔ 8K NOPSXSY NO 7_MR]OV =MRWSN K
NOMVK\KY v]Zcv SXSMSK _W MY_XÔ\ SXÔVVSQOXMO =O_ YLTO^S`Y
ZK\K ]O\ MVK\Y O]ZSYXK\ Y RY]^ O Y _]_\SY [_O O]^ ObOM_^KXNY _WK
KY NK [_KV ]O NO]MYXPSK 8Y XY]]Y ObOWZVY _W _]_\SY OW _W RY]^
ÔX^Y_ PKdO\ MYXObO] X_W MO\^Y Z\KdY NO ÔWZY OW XY]]Y ÔVXO^
]O\Ò\:YNO\KWY]Ô\MYXPSQ_\KNYMYWv]ZcvÒTKWY]$
LI FRQQHFWLRQVVRXUFHKRVW ! WKHQ
VS\
UHSRUW
3]^Y ]O RY_Ò\ WKS] NO MYXObO] OX^Y MYWOMO Y v]Zcv 9
v]Zcv_WZ\YMO]]YNOSNOX^SPSMKYNO_WRY]^_]_\SY_]KXNYY.8=
ZK\K YLÔ\ Y XYWO NY RY]^ Y Z\Y^YMYVY SNOX^ `VSNY ]YWOXÔ OW
3iJLQD
42
MYXObO] >-: PSXQO\ O \_]O\] + MYVO^K NO]]K SXPY\WKO] ÔXRK

OVK bS^Y Y_ XY `Y ZK\K Y VYQ MYWY PYS MYXPSQ_\KNY MYW Y
v\OZY\^v ZYNO\]OSK _^SVSdK\ ^KWLW WKSV O OX`SK\ ZY\ K Y]
\O]_V^KNY]NY]Zc
RELEVEL:
Muda o nvel de notificao para a regra que causou a ao.
EXEC:
Declarao bastante poderosa. Pois pode abrir um shell local e executar um comando. Assim, na certeza de um ataque
efetivo podemos desligar a nossa interface de rede (eth0, eth1, etc.) com a seguinte declarao 'exec':
H[HF LIFRQILJ HWK GRZQ

-+66$
-RKWKY_^\YXÒVNOObOM_YOYObOM_^K
LET:
Esta declarao pode mudar o valor de uma varivel. O valor de timeout (em segundos) pode ser especificado no fim da
declarao 'let'. Observe o exemplo abaixo:
DFFHSW LFPS LFPSBHFKR WR LQVLGH QRWLILFDWLRQBOHYHO

QRWLILFDWLRQ
OHYHO
OHW SLQJFRXQWVRXUFHKRVW SLQJFRXQWVRXUFHKRVW WLPHRXW
LI SLQJFRXQWVRXUFHKRVW ! WKHQ
EORFN DOO IURP VRXUFHKRVW QRWLILFDWLRQBOHYHO WLPHRXW
HQGLI
?WW[_SXKÔX^Y__WvZSXQvZK\KKVQ_WKW[_SXKNOXY]]KSX^\KXO^Y
Z\Y^YMYVY3-7:/VO_]KNYZK\KNSKQX]^SMY]OMYXNSO]NOO\\Y
X_WK \ONO 7K] O]^K W[_SXK ObOM_^Y_ Y vZSXQv ÒdO] (
NOX^\Y MYW Y ÔWZY WbSWY NO ]OQ_XNY] ^SWOY_^ K MKNK
vZSXQ]v:Y\^KX^YLVY[_OSK]OKMYXObYZY\ ]OQ_XNY]
IF (if ... then ... endif):
3iJLQD
43
Use como num shell script: para executar um fluxo de aes, se tal ou qual condio acontece.
9 Z\YQ\KWK ]P 0S\OaKVV -YX^\YV :KXOV Ò\]Y ZYNO ]O\ _]KNY
ZK\K K ONSY NY PS\OaKVVMYXP +] WO]WK] KNÒ\^XMSK] POS^K] XK]
VSO] ]YL\O Y 3ZMRKSX] O ]_K ONSY `SK 6SX_bMYXP `KVOW K[_S ?W
Z\YQ\KWK1?3MYWY]P-YX^\YV:KXOVZYNOKT_NK\WK]Z\OMS]Y]KLO\
Y [_O O]^ PKdOXNY MYXROMO\ Y] MYXMOS^Y] O Y] P_XNKWOX^Y] NO _W
PS\OaKVV OW QO\KV O NK Z\YZY]^K NY =38?= OW ZK\^SM_VK\ 9 ]P
-YX^\YV :KXOV _W Z\YQ\KWK POS^Y OW 4K`K XY Y _^SVSdKWY] XY
ASXNYa]Y_OW[_KV[_O\Y_^\KZVK^KPY\WK.OWKXOS\K[_OXYZYNOWY]
PKdO\_WKK`KVSKYNO]O_]\O]_V^KNY]
9 K\[_S`Y v\_Xv [_O MRKWK Y Z\YQ\KWK _W ]M\SZ^ [_O KT_]^K Y
MVK]]ZK^R 4K`K ZK\K ZY]]SLSVS^K\ K ObOM_Y NY Z\YQ\KWK 0KK Y]
KT_]Ô] ]O PY\OW XOMO]]\SY] KL\O _WK ]O]]Y BÔ\W O Y ObOM_Ô NY
NS\O^\SYYXNOOVOPYSSX]^KVKNY$v\_Xv+]P_XO]NY]P-YX^\YV
]Y LK]SMKWOXÔ K_^YObZVSMK^S`K] 9 SXÔ\O]]KXÔ NY ]YPâK\O ]_K
MKZKMSNKNO NO K_^YMYXPSQ_\KY Y_ ]OTK `YM WYX^K\ _WK
^YZYVYQSK NO \ONO ONS^K\RY]^ Y RY]^ PS\OaKVV K \ONO OW ]S O Y
KMO]]Y K 3XÔ\XO^ / NOZYS] ]KV`K\ X_W K\[_S`Y O KXKVS]VY MYW Y]
ZY]Ô\SY\O]KT_]Ô]@YMZYNOKL\S\K]_KW[_SXKPS\OaKVVZOVY]P
-YX^\YV S]]Y ]O ^SÒ\ MYWZSVKNY Y ]O\`SNY\ =38?= MYW Y ZKMYÔ NK
/8]USZZYNOXNYO]^Y_]K\YZ\Y^YMYVY0S\OaKVV^Y0S\OaKVV
+] YZO\KO] MYW Y =P -YX^\YV MYWOKW MYW K ONSY NK ^YZYVYQSK NO
\ONO:K\KS]]Y]OO]MYVROXYWOX_KYZY/NS^^YZYVYQc$
3iJLQD
44
3iJLQD
45
.OZYS]XOMO]]\SYWYX^K\K^YZYVYQSKZ\YZ\SKWOXÔNS^KO]MYVROXNY
K] _XSNKNO] K ]O\OW MYXPSQ_\KNK] 8K ÔVK KMSWK O]^ _W ObOWZVY NK
MYXPSQ_\KY NO _WK W[_SXK PS\OaKVV :YNOWY] MYW _W RY]^ ]O\`SNY\
MYXPSQ_\VY MYW `\SY] ]O\`SY] ZY]]ÒS] 0>: =OM_\O AAA ]O\Ò\
==2]O\Ò\O^MVSLO\KXNYY_XYZK\KYKMO]]YZLVSMY/XMO\\KNK
K SNOX^SPSMKY NO XY]]K \ONO ]KWY] NY vWYNY ^YZYVYQSKv XO]]O
SX]^KXÔ Y ]P -YX^\YV K`KVSK ]O R SXMYX]S]^XMSK] OW XY]]K
^YZYVYQSK=O^_NYO]^YUZYNOWY]O]MYVRO\ Y vK_^YMYXPSQv .OZYS]
ZYNOWY] \OÒ\ MYXPY\WO XY]]Y QY]^Y K] MYXPSQ_\KO] 8K ÔVK
]OQ_SXÔO]^KWY]ONS^KXNYYLVYMYNO]O^_Zv\_VO]v$
3iJLQD
46
+QY\K `KWY] Ò\ Y WOMKXS]WY NO \OQS]^\Y NY =38?= 0S\OaKVV =OW
N`SNK _W NY] ZYX^Y] PY\Ô] NY ]YPâK\O 4 [_O K WYX^KQOW NO _W
PS\OaKVV ]SQXSPSMK OW Q\KXNO ZK\Ô `SQSVXMSK +]]SW \OQS]^\K\ OW
K\[_S`Y] ]OQ_\Y] Y WY`SWOX^Y NO OX^\KNK O ]KNK NO ZKMYÔ] O KVW
NYWKS]Q\KK]MKZKMSNKNONO]M\SZ^NYZ\YQ\KWKObOM_^K\KO]
P_XNKWOX^KVZK\KYKNWSXS]^\KNY\NO_WK\ONO
4 `SWY] [_O Y K\[_S`Y NO VYQ P_XNKWOX^KV NY =38?= MRKWK]O
v`K\VYQPS\OaKVVv @YM NOÒ SXÒ]^SQVY ]OWZ\O ZYS] ^YNY Y
WY`SWOX^Y NO ZKMYÔ] XOVO Q\K`KNY K]]SW MYWY K] YZO\KO]
MYXPSQ_\KNK]XYXY^SPSMK^SYXIVOÒV=OK]_K\ONONOQ\KXNOZY\Ô
OZY\^KX^Y\OMOLO_W^\POQYW_S^YSXÔX]YKMYX]OVRÒV_]K\_WK
ZK\^SY ]OZK\KNK ZK\K Y NS\O^\SY v`K\VYQv -YW OPOS^Y ZYNOWY]
_]K\YMYWKXNYv^KSVvZK\KSX]ZOMSYXK\YVYQQ\K`KNYXYK\[_S`YMYW
Y KM\]MSWY NK PVKQ P ZK\K PY\K\ K VOS^_\K NY PSW NY K\[_S`Y
:Y\ObOWZVY$
>URRW#DOSKD ORFDO@ WDLO I YDUORJILUHZDOO

)HE V DFFHSW 7&3 !WHOQHW
)HE 7HOQHW FRQQHFWLRQ UHTXHVW
)HE V EORFN 7&3 !ZZZ
)HE ,OOHJDO 7&3 FRQQHFWLRQ
)HE VHQGLQJ PDLO WR URRW
)HE VWDUWHG FRXQWHU LQWHOOLJHQFH DJDLQVW KRVW
)HE V EORFN 7&3 !DXWK
)HE VHQGLQJ PDLO WR URRW
)HE V EORFN 7&3 !ILQJHU
6HJXH
>OWY] K[_S _WK WY]^\K NK ]O[_XMSK NO OX^\KNK] \OQS]^\KNK] MYW Y
W]YNSKKRY\KKKNÒ\^XMSKYMY\\SNKOXNO\OY]3:Z\Y^YMYVY]
3iJLQD
47
OW [_O]^Y O^M 2 N_K] OX^\KNK] NO OX`SY NO WKSV ZK\K Y _]_\SY
\YY^ VSXRK] O # 9 MYXROMSNY VOS^Y\ NO WKSV] :38/ KM_]K Y
\OMOLSWOX^YNKWOX]KQOW$
9 MYWKXNY ^KSV _]KNY K]]SW ]O\Ò MYWY _WK `S]Y SX]^KX^XOK NK

^\POQYNO\ONOOVOOMYK\]OWZK\K\Y]VYQ]MYX^SNY]OWPS\OaKVV
K^[_OObOM_Ô]O_Wv-YX^\YV-v+PY\WKWKS]Z\YN_^S`K_]K\Y]
Ô\WSXKS] `S\^_KS] ZY\ ObOWZVY ! O " [_O ]KLSNKWOXÔ ]Y
KVMKXKNY] MYW v+6>0!vY_ _]O Y Ô\WSXKV [_O NO]OTK\ :K\K
^KX^YONSÔYK\[_S`YSXS^^KLONSÔK]]OQ_SXÔ]VSXRK]$
7:2345:respawn:/usr/bin/tail -f /var/log/firewall > /dev/tty7

@YMZYNO^KWLW[_O\O\VO\Y]O_v`K\VYQWO]]KQO]vX_WÔ\WSXKV
`S\^_KV_]OY"ZY\^KX^Y+6>0"`VY$
8:2345:respawn:/usr/bin/tail -f /var/log/messages > /dev/tty8
3iJLQD
48
+MYX]OVRKWY] ^KWLW Y _]Y NO _W ^SWY ]M\SZ^ OW :O\V O]M\S^Y ZY\
7SMRKOV,KLMYMUR^^Z$aaaVSX_b]_ZZY\^VSXOMYWhZQZVSX_bMRKWKNY
6YQMYVY\S]O VYQMYVY\S]O!^K\Qd K Ò\]Y [_O _]KWY] /VO
ÔW K MKZKMSNKNO NO Z\ MY\O] XY] K\[_S`Y] NO VYQ NO WKXOS\K [_O
ZYNOKMOX^_K\NOÔ\WSXKNK]ZKVK`\K]O]ZOMPSMK]
=O`YMNO]OTK\Ò\Y]VYQ]QO\KNY]WK]SXSMSK\Y]O_]S]ÔWKOW
vSXS^ v Y_ WO]WY O]^SÒ\ ]OWZ\O OW KWLSOXÔ Q\PSMY O XY
NO]OTK\ ]KS\ NOVO ZYNO _]K\ K Y Z\YQ\KWK bMYX]YVO Z\O]OXÔ XK
[_K]O ^Y^KVSNKNO NK] NS]^\SL_SO] 6SX_b 9 bMYX]YVO WYXS^Y\K K]
WOX]KQOX]NYMYX]YVOXYBASXNYa@YMZYNO_]K\XY]O_vbSXS^\MvY
MYWKXNY$
tail -f /var/log/firewall > /dev/console &
/OX^Y$
xconsole -exitOnFail &
8O]^KÔVKÒWY]_WObOWZVYNOObOM_YXYbMYX]YVO$
9 NKOWYX NY =38?= v]PMv KMOS^K KVQ_WK] SWZY\^KXÔ] YZO] XK ]_K
VSXRKNOMYWKXNY=YOVK]$
11
Portanto, para us-lo voc precisa de Perl em seu sistema (5.x)...

3iJLQD
49
VWDUW >FRQILJ@
,QLFLD R GDHPRQ XVDQGR SRU SDGUmR R DUTXLYR
HWFILUHZDOOGILUHZDOO
HQWUH FRP RXWUR
DUTXLYR VH TXLVHU H[HPSOR
VIF VWDUW XVU
ORFDOWPSILUHZDOOWHVWH

VWRS
'HVOLJD R GDHPRQ PDV QmR GHVFDUUHJD R PRGXOR
UHFRQILJ >FRQILJ@
'HVOLJD R GDHPRQ H UHLQLFLDR FRP XP QRYR
>IOXVK RX IOXVKBDOO@ DUTXLYR GH FRQILJXUDomR
CUHFRQILJ
QmR SDUDOLVD DV FRQH[}HV 7&3
DR PHQRV TXH VH XVH
IOXVK
RX
IOXVKBDOO
CIOXVK
GHVWUyL WRGDV DV FRQH[}HV TXH QmR
VmR SHUPLWLGDV QD QRYD FRQILJXUDomR Mi
CIOXVKBDOO
GHVWUyL WRGDV DV FRQH[}HV 7&3
H[LVWHQWHV
FKHFNFRQILJ >FRQILJ@
&KHFD R DUTXLYR GH FRQILJXUDomR

SRU HUURV GH VLQWD[H
3DGUmR HWFILUHZDOOGILUHZDOOFRQI
VKRZ
0RVWUD D FRQILJXUDomR XVDGD H DV FRQH[}HV 7&3
VKRZWFS
0RVWUD DSHQDV DV FRQH[}HV 7&3
NLOO LGNH\FULDGR
0DWD FRQH[mR 7&3 HVSHFLILFDGD
NLOODOO
0DWD WRGDV DV FRQH[}HV 7&3
NLOOLGOH PLQXWRV
0DWD WRGDV DV FRQH[}HV 7&3 RFLRVDV SRU ; PLQXWRV
UHVHWXVDJH
5HVHW XVDJH FRXQWHUV

/]^K] YZO] ]Y W_S^Y SWZY\^KXÔ] =YL\O^_NY XK MYX]^\_Y NY

XY^SPSMK^SYXIVOÒV :YNOWY] MYX]^\_S\ SXÔ\O]]KXÔ] O]^\K^QSK]
_]KXNY K NOMVK\KY vObOMv OW MYXT_X^Y MYW O]^K] PVKQ] ?WK YZY
NOÒ\K] SWZY\^KXÔ K ]KNK ZY]]SLSVS^KNK ZY\ v]PM ]RYav KVW NO
VS]^K\ XY]]K MYXPSQ_\KY XY O]]OXMSKV VS]^K K] MYXObO] K^S`K]
WY]^\K] ]_K] vSNUOc]v [_O ZYNO\OWY] _]K\ ZK\K NO\\_LK\ MYXObO]
[_O ]O WY]^\OW ZO\SQY]K] /S] _WK ]KNK NY NKOWYX YL]O\Ò MYW K]
SXPY\WKO]]YPKMSVWOXÔSNOX^SPSMKNK]$
>URRW#DOSKD DGP@ XVUORFDOVIF VKRZ

$FWLYH UXOHV XVDJH FRXQWHUV ODVW UHVHW DW 6DW )HE

3iJLQD
50
OLQH VWDWLF XVDJH WLPHV

EORFN QRWLILFDWLRQ OHYHO
SURWRFRO 7&3
WR
SRUW OLQN
SRUW VXSGXS
DOO SURWRFROV
RSWLRQV CORRVH VRXUFH URXWH
CVWULFW VRXUFH URXWH

SURWRFRO 5,3
IURP

OLQH VWDWLF XVDJH WLPH E\WHV
DFFHSW QRWLILFDWLRQ OHYHO
SURWRFRO 7&3 CIWSBDOO
WR
SRUW VVK
WR
SRUW IWS
OLQH VWDWLF XVDJH WLPH E\WHV
WR
SRUW WHOQHW
WR
SRUW ZZZ
OLQH VWDWLF XVDJH WLPHV E\WHV
DOO SURWRFROV CIWSBDOO
IURP

WR

OLQH VWDWLF XVDJH WLPHV E\WHV
SURWRFRO 7&3
7&3 FRQQHFWLRQV DW

LGNH\ FUHDWHG ODVW XVH WLPHRXW

G GF
QRQH
IE H
I QRQH
VWDWHKRVWV FOLHQW
VHUYHU
VHTXHQFH ZLQGRZ VHTXHQFH ZLQGRZ
(67$%/,6+('
!WHOQHW
(67$%/,6+('
!VVK
9DULDEOHV

VU
LOOWFS WLPHRXW )HE

KRVW
WLPHRXW )HE
:YNO\]OSK NS`SNS\ O]Ô ]KNK NO ]^K^_] NY NKOWYX OW NYS] Q\KXNO]
LVYMY] 9 Z\SWOS\Y Y O]]OXMSKV NO XY]]K MYXPSQ_\KY 3]^Y K]
3iJLQD
51
\OQ\K] K^S`K] ]OZK\KNK] OW # NS`S]O] 3NOX^SPSMKXNY SXMV_]SÒ K

VSXRKNYPS\OaKVVMYXPYXNO]OOXMYX^\KWK] \OQ\K] >KWLW VS]^K]O
YXÒVNOXY^SPSMKY[_OMRKWKNYOYXWO\YNOÒdO]NOKMO]]Y
OY]LcÔ]_]KNY]ZY\ObOWZVYXKVSXRKÔWY]$v_]KQO$^SWO
LcÔ]v
8Y ]OQ_XNY LVYMY OXMYX^\KWY] K] vMYXObO] >-:v 6S]^KW]O ^YNK] K]
MYXObO]K^S`K]MRKWKNK]v/=>+,63=2/.vY]O\`SNY\O Y MVSOXÔ K
ZY\^K _^SVSdKNK _]KXNY]O Y XYWO NY ]O\`SY O KY PSXKV ^YNK]
MYXObO] MYX]SNO\KNK] SVOQKS] vSVV^MZv + VSXRK NO MYXObO]
K^S`K] Q_K\NK ^\] NKNY] SWZY\^KXÔ] ZK\K Y _]Y NK PVKQ vUSVVv
NOÒ]O VOWL\K\ [_O O]^K _WK RKLSVSNKNO [_O Y 3ZMRKSX] XY
ZY]]_S ]KV`Y SXPY\WKY MYX^\\SK -YW Y _]Y NO v]PM USVVKVVv
WK^KWY] ^YNK O [_KV[_O\ MYXObY >-: K^S`K OW XY]]K \ONO ]OW
NS]M\SWSXKY KVQ_WK -YW v]PM USVVSNVO BBBIWSX_^Y]v ZYNOWY] WK^K\
[_KV[_O\MYXObY[_OO]ÔTKYMSY]YZY\NSQKWY]WSX_^Y]7K]v]PM
USVVSNUOcM\SKNYvWK]_WKOX^\O^KX^K]MYXObO]OWXY]]K\ONO]O
_WKMYXObY]OWY]^\KZO\SQY]KZY\KVQ_WK\KdY7K]YUSVV]YWOXÔ
P_XMSYXK MYW K] ^\] SXPY\WKO] MYWY _WK WONSNK NO Z\OYM_ZKY
]OQ_XNY \OVK^Y NY] Z\Z\SY] NO]OX`YVÒNY\O] -YWY SNOX^SPSMVK])
@OTKWY]$
LGNH\

FUHDWHG

G

ODVW XVH

GF

WLPHRXW

QRQH
VWDWHKRVWV FOLHQW
VHUYHU
VHTXHQFH ZLQGRZ VHTXHQFH ZLQGRZ
(67$%/,6+('
!WHOQHW
Y3.#Y5/C!N#"!Y-</+>/.
:K\K WK^K\WY] ^KV MYXObY O]^KLOVOMSNK OW XY]]K \ONO _]K\KWY]
OX^Y$

>URRW#DOSKD @ XVUORFDOVELQVIF NLOO G
6HDUFKLQJ IRU 7&3 FRQQHFWLRQ G
&RQQHFWLRQ WHUPLQDWHG
>URRW#DOSKD @
3iJLQD
52
+ YZY NO ^SWOY_^ OW MYXT_X^Y MYW K ZY]]SLSVSNKNO NO NO\\_LK\ K]

MYXObO] >-: K^S`K] _WK SWZY\^KXÔ PO\\KWOX^K NY =38?= :YNOWY]
ZY\ ObOWZVY WYXS^Y\K\ K] MYXObO] OW XY]]Y ]O\`SNY\ AOL O`S^KXNY
[_KV[_O\ ÔX^K^S`K NO .Y= v.OXSKV YP =O\`SMOv K^\K`] NO _W =C8
0VYYNSXQ@OTKWY];_KXNY_WKW[_SXKObOM_^K_WKMYXObYOVKOX`SK
_W ZKMYÔ MRKWKNY =C8 NO ]cXMR\YXS]O [_KXNY _W =O\`SNY\ AOL
MYWY OW XY]]Y ObOWZVY \OMOLO XY]]Y ZKMYÔ =C8 OVO \O]ZYXNO MYW
_W =C8+-5 _W ZKMYÔ [_O ZY]]_S _WK ]O[_XMSK X_W\SMK NO `KVY\
\KXNWSMY ;_KXNY XY]]Y RY]^ \OMOLO Y =C8+-5 KM\ONS^KWY] XY
\OMYXROMSWOX^Y KMUXYaVONQO O OX^Y \O]ZYXNOWY] MYW _W +-5
:Y\W _W ]O\`SNY\ KZ] OX`SK\ _W =C8+-5 O]ZO\K MO\MK NO
]OQ_XNY] ZOVY +-5 NO \O]ZY]^K ]O OVO XY MROQK MKXMOVK]O K
MYXObY/^KWLW]YWOXÔYS^YW[_SXK]ZYNOWÔX^K\KMYXObYMYW
Y]O\`SNY\KYWO]WYÔWZY9=C80VYYNSXQMYX]S]ÔOWOX`SK\`\SY]
ZKMYÔ]MYWvOXNO\OY]NOY\SQOWvSWKQSX\SY]]_MO]]S`KWOXÔ;_KXNY
Y ]O\`SNY\ \OMOLO Y =C8 \O]ZYXNO WK] MYWY Y OXNO\OY XY ObS]Ô
XY \OMOLO \O]ZY]^K /]ZO\K ]OQ_XNY] O MKXMOVK K MYXObY =O K
MKNK]OQ_XNY]MROQKWZKMYÔ]=C8SXObS]ÔXÔ]NOYS^YMYXObO]_W
]O\`SNY\ Z\K^SMKWOXÔ Z\K NO P_XMSYXK\ :YNO\KWY] O][_OWK^SdK\
OW^\]WYWOX^Y]$
CLIENTE
SYN
SERVIDOR
SYN-ACK ... 40 segs.
SERVIDOR
ACK
12
CLIENTE
CLIENTE
SERVIDOR
Flooding em ingls quer dizer inundao...

3iJLQD
53
?W Y_^\Y ^ZSMY K^K[_O LK]OKNY OW =C8+-5 PYS NO]M\S^Y XY VS`\Y
>]_^YW_=RSWYW_\K8YOX^KX^YYYLTO^S`YNYSX`K]Y\XYO\KYZO\K\
]SWZVO]WOXÔ _W .Y= =O_ SXÔX^Y O\K ZOXO^\K\ X_WK \ONO Z\S`KNK
PSXQSXNY]O]O\_W^\_]ÔNRY]^MYWYÒ\OWY]_]KXNY_WKY_^\K
^MXSMK$ Y 3: =ZYYPSXQ ^Y ]ZYYP Y_ ]OTK V_NSL\SK\ OXQKXK\
;_O]OQ_XNYNO]M\SYNYO]ZOMSKVS]^K=,OVVY`SX$
Um dos mais fascinantes buracos na segurana, e que foi primeiramente descrito por Morris. Em suma: usa-se uma
predio dos nmeros de sequncia TCP para construir uma sequncia de pacote TCP sem em qualquer momento ter
recebido qualquer resposta do servidor. Isto lhe permite enganar (spoof) um host confivel numa rede local.
:K\K^KX^YYSX`K]Y\KX_VY__WKNK]W[_SXK]MYW`\SY]=C8]NO
WKXOS\K[_OOVKXYZYNO\O]ZYXNO\K_WY_^\YRY]^MYXPSÒV+
W[_SXK OX^Y \OMOLO_ _WK ]\SO NO =C8] Y RKMUO\ O]^_NY_ K
]O[_XMSK X_W\SMK _]KNK O \O]ZYXNO_ MY\\O^KWOXÔ XY V_QK\ NK
W[_SXK KSXNK ZK\KNK 0KdOXNY]O ZK]]K\ ZOVK W[_SXK NK
SX^\KXO^ OX`SY_ Y ]SWZVO] MYWKXNY vOMRY ( \RY]^]v NO]^\_SXNY
[_KV[_O\ MYX^\YVO NO KMO]]Y KY RY]^ + RS]^\SK K]]SW MYX^KNK O
NOPY\WKKSXNKWKS]NO^KVRKNKZOVYK_^Y\OW]O_VS`\Y
.OÒ]O NSdO\ ZY\ PSW [_O Y KV_XY XY NOÒ MYXP_XNS\ K ^\YMK NO
=C8+-5 [_O YMY\\O OX^\O _W ]O\`SNY\ O _W MVSOXÔ MYW _W Z\YMO]]Y
NO K_ÔX^SMKY S]^Y ]SW _WK ]SXM\YXSdKY 9 Z\Y^YMYVY >-:
NSPO\OXÔWOXÔ NY ?.: [_O Z\SWK ZOVK ÒVYMSNKNO MK\KMÔ\SdKNY
ZOVKMYXPSKLSVSNKNOXKOX^\OQKNY]ZKMYÔ]Y[_OZY\^KX^YÔW_W
M_]^Y .OX^\Y NO _W ZKMYÔ >-: KVW NK] SXPY\WKO] ]YL\O K ZY\^K
NO Y\SQOW O NK NO]^SXY NO _W MROMU]_W O^M R KVQ_WK] PVKQ] [_O
QK\KXÔW K MYXPSKLSVSNKNO NK MYXObY =C8 O +-5 ]Y N_K] NO]]K]
PVKQ] v<=>v ZY\ ObOWZVY \OSXSMSK K MYXObY Y_ 038 [_O OXMO\\K K
MYXObY /W ]_WK ZK\K [_O K MYXObY ]OTK MYXPSÒV XOMO]]\SY
[_ORKTKM\S^\SY]ZK\KK^\YMKNONKNY]OX^\ONYS]RY]^
13
Contra-Ataque. A Histria da captura do Pirata Ciberntico mais procurado dos Estados Unidos. Ed. Companhia da
Letras, 1996, p. 104 ss.
14
Security Problems in the TCP/IP Protocol Suite. Computer Communication Review, Vol. 19, n2, p. 32.
3iJLQD
54
3iJLQD
55
3 Monitorao da rede
3.1 Os scanners de rede
.OZYS]NOWYX^KNYYXY]]YPS\OaKVVXOMO]]S^KWY] NO PO\\KWOX^K] XY
]YWOXÔZK\K`KVSNVYMYWYZK\KKNOZ_\KY XOMO]]\SK +]]SW MYWY
ZK\KX_WOÒX^_KVPKVRKNOXY]]KZYV^SMKNOÔM^K\WY]Y]SX^\_]Y]OW
XY]]K\ONO
9KWLSOXÔ6SX_bNS]ZONO_WQ\KXNOXWO\YNOPO\\KWOX^K]Ò\OWY]
K]]SWKVQ_WK]NOVK][_O]ÒdO]M_WZ\OWKWO]WKP_XYZY\WMYW
]_K]ZK\^SM_VK\SNKNO]
1Y]^K\KWY] NO `YV^K\ KY PSW NY MKZ^_VY KXÔ\SY\ :K\K ^YWK\WY] Y
ObOWZVYMS^KNYXYVS`\YNO>]_^YW_=RSWYW_\K@SWY]V[_OYSX`K]Y\
ZNOK^\K`]NO_W3:PVYYNSXQOXQKXK\K\ONOOOX^\K\MYWY_WRY]^
MYXPSÒV/VOO]^_NY_K]O[_XMSKOWS^SNKZY\_WNY]RY]^]OOX^Y
POd K \O]ZY]^K ObK^K -YWY S]]Y PYS ZY]]ÒV) + Z\SY\S KNÒ\^SWY]
[_OYZ\YMO]]YNO\OMYXROMSWOX^YNY=C8+-5XY_WKK_ÔX^SMKY
WK]]SW_WKXOQYMSKYOXN^YOXNOX^\ORY]^][_OMY\\O^KWOXÔ
MRKWKNK NO ^MZ RKXN]RKUSXQ Y [_O ]SQXSPSMK VSÔ\KVWOXÔ _WK
O]ZMSO NO KZO\^Y NO WY] 7_S^Y ZOVY MYX^\\SY LK]OKNY X_WK
]O[_XMSK VQSMK [_O S\OWY] OXÔXNO\ MYW PKMSVSNKNO 9] XWO\Y]
]O[_OXMSKS] XY ]Y KVQY K]]SW MYWY ]OXRK] XY \OMOLOW XOXR_WK
O]ZMSO NO M\SZ^YQ\KPSK ?W Z\YQ\KWK NY ^SZY ]XSPPO\ NO ^Y ]XSPP$
PK\OTK\ ZYNO SXÒ]^SQK\ Y] NKNY] NO _W MKLOKVRY >-: O ObOM_^K\
K]WKXYL\K]XOMO]]\SK]`S]KXNYK\_Z^_\KNK]OQ_\KXK
:\OMS]KWY]KQY\K`S]_KVSdK\Z\SWOS\KWOXÔ_WMKLOKVRY>-:OZK\K
_WKMYX^\KZY]SY_WMKLOKVRY?.:
3iJLQD
56
0Y\WK^Y NO _W MKLOKVRY >-:15

_
6RXUFH 3RUW
_
'HVWLQDWLRQ 3RUW
_

_
6HTXHQFH 1XPEHU
_

_
$FNQRZOHGJPHQW 1XPEHU
_

_ 'DWD _
_8_$_3_5_6_)_
_
_ 2IIVHW_ 5HVHUYHG _5_&_6_6_<_,_
:LQGRZ
_
_
_
_*_._+_7_1_1_
_

_
&KHFNVXP
_
8UJHQW 3RLQWHU
_

_
2SWLRQV
_
3DGGLQJ
_

_
GDWD
_

8YÔ KQY\K K NSPO\OXK ZK\K _W MKLOKVRY ?.: LOW WKS] ]SWZVO]

_
6RXUFH
_
'HVWLQDWLRQ
_
_
3RUW
_
3RUW
_

_
_
_
_
/HQJWK
_
&KHFNVXP
_

_
_
GDWD RFWHWV

9 WY^S`Y Z\SXMSZKV O]^ XK XK^_\OdK WO]WK NY] Z\Y^YMYVY] +

MYWZVObSNKNONYMKLOKVRY>-:O]ÔW]_K XOMO]]SNKNO O]^KLOVOMO\ K
MYXPSKLSVSNKNONKMYXObYNONKNY]
8Y] MKWZY] SXSMSKS] ZYNOWY] YL]O\`K\ K SXNSMKY ZK\K K] ZY\^K] NO
Y\SQOW O NO NO]^SXY ^KX^Y XY >-: [_KX^Y XY ?.: NSPO\OXÔWOXÔ NO
15
0YXÔ]$ <0- !# ZK\K Y MKLOKVRY >-: O <0- ! " ZK\K Y ?.:
3iJLQD
57
_WMKLOKVRY3:[_O^\KdY]OXNO\OY]3:>\]MKWZY]XYMKLOKVRY
>-: XY] SWZY\^KW NO SWONSK^Y$ ]O[_OXMO X_WLO\ XWO\Y ]O[_OXMSKV
KMUXYaVONQWOX^X_WLO\XWO\YNO\OMYXROMSWOX^YOK]]OS]PVKQ]X_W
^Y^KVNO LS^]$?<1+-5:=2<=>=C8O038=Y^KS]PVKQ][_O
MYX^\YVKW K ^\KX]WS]]Y NO NKNY] NO PY\WK MYXPSÒV / ]Y K
SQ_KVWOXÔ[_O]OO]MYXNOWL_\KMY]XK]OQ_\KXK
<OVOWL\KXNY$ `SWY] KXÔ\SY\WOXÔ [_O _W MVSOXÔ [_KXNY ]O MYXOM^K
MYW _W ]O\`SNY\ OX`SK ZKMYÔ YXNO XY ]O_ MKLOKVRY K PVKQ =C8
WK\MKNK/VO]YVSMS^K_WKMYXObY=OQ_OWY=C8+-5NY]O\`SNY\O
Y+-5YLÔXNYKMYXObYKPVKQ038WK\MKYOXMO\\KWOX^YNOOX`SYNO
NKNY] 7K] [_KXNY O]Ô] MKLOKVRY] ]Y ^\YMKNY] K XOQYMSKY ]O
N ^KWLW XY] MKWZY] [_O K]]SXKVKW Y] vXWO\Y] ]O[_OXMSKS]v O Y
vXWO\Y NO \OMYXROMSWOX^Yv 4 YL]O\`KWY] [_O _WK ]O[_XMSK
VQSMK /VO KMYXÔMO OW SXM\OWOX^Y] NO _WK _XSNKNO 9L]O\Ò Y
]OQ_SXÔO][_OWK$
=C8
-VSOXÔ '''''''''''''(( =O\`SNY\
=O[ X_WLO\$ <+8.98 !
+MU X_WLO\$
=C8+-5
-VSOXÔ &&''''''''''''' =O\`SNY\
=O[ X_WLO\$ <+8.98 #
+MU 8_WLO\$ ! ' "
+-5
-VSOX^ '''''''''''''(( =O\`SNY\
=O[ X_WLO\$ "
+MU 8_WLO\$ # '
+]]SWYRY]^+ZONO_WK]O]]Y>OVXO^MYWYRY]^,Y]O\`SNY\8Y
MKWZY ]O[_OXMO X_WLO\ NY RY]^ + [_O OX`SK Y =C8 O O]MYVRSNY
KVOK^Y\SKWOXÔ _W XWO\Y OW XY]]Y ObOWZVY ! 9 MKWZY
KMUXYaVONQWOX^X_WLO\O]^YL`SKWOXÔdO\KNY O RY]^,\O]ZYXNOMYW
_W =C8+-5 O O]MYVRO KVOK^Y\SKWOXÔ XY ]O[_OXMO X_WLO\ _W XWO\Y
3iJLQD
58
#WK]TXYMKWZYNYXWO\YNO\OMYXROMSWOX^YSXM\OWOX^K$]YWK
Y ]O[_OXMO X_WLO\ NY MVSOXÔ WKS] \O]_V^KXNY " 8Y +-5 OX`SKNY
ZOVY RY]^ + ÒWY] XY ]O[_OXMO X_WLO\ " S]^Y K ]YWK NY V^SWY
KMUXYaVONQWOX^X_WLO\OXY]O_XWO\YNO\OMYXROMSWOX^YO]^K]YWK
NY ]O[_OXMO X_WLO\ WKS] 9L]O\Ò Y O][_OWK KXÔ\SY\ [_O O]^K
]O[_XMSKPSMK\WKS]MVK\K0YSK]]SW[_OYSX`K]Y\ZYNOOX^\K\XK
\ONOZ\S`KNKPKdOXNY]OZK]]K\ZY\_WKW[_SXKMYXPSÒV
@OTKWY] _W ObOWZVY \OKV >\] PO\\KWOX^K] ]Y ÔS] XO]]O Z\YMO]]Y
NOWYXS^Y\KY-KNK_WÔW]_K][_KVSNKNO]OPSMK[_K]OXYO]^SVY
NY KNWSXS]^\KNY\ YZ^K\ ZY\ O]Ô Y_ K[_OVO ]YPâK\O =Y OVO]$
>MZN_WZ
NK
6Ka\OXMO
,O\UOVOc
8K^SYXKV
6KLY\K^Y\c
P^Z$P^ZOOVLVQY` Y 3:>\KP O]M\S^Y ZY\ 1O\KVN 4K`K [_O O]^Y

Z\O]OXÔ] OW [_K]O ^YNK] K] NS]^\SL_SO] 6SX_b O Y +:= +N`KXMON
:KMUO^ =XSPPO\ Ò\]Y O]M\S^Y ZY\ -R\S]^SKX =MR_VÔ
http://www.swrtec.de)
9 +:= XY] ZY]]SLSVS^K _WK \KNSYQ\KPSK MYWZVO^K NY MKLOKVRY NO _W
ZKMYÔ>-:Y_?.:\OMOLSNY:YNOWY]MYWOVO`S]V_WL\K\YK\\KXTYNO
XWO\Y]]O[_OXMSKS][_OObZVSMKWY]=_K]YZO]]Y$
KZ]EYZO]GEZ&NKIZY\^K(&ZK\KIZY\^K(GEY&^SZY(G
9XNOv^SZYvO`SNOXMSKY^SZYP\KWO]O]WLK\Z^MZ_NZO^M8K]
vYZO]v ZYNOWY] \O]^\SXQS\ NOMS]S`KWOXÔ Y] ZKMYÔ] K ]O\OW
WY]^\KNY]$ XY WY]^\K\ Y] OXNO\OY] 3: XY WY]^\K\ Y] OXNO\OY]
O^RO\XO^ XY WY]^\K\ ^KV Y_ [_KV PKSbK NO ZY\^K] O^M 9 MYWKXNY
vKZ] ROVZv VS]^K Y] ZK\WO^\Y] NO]OTKNY] =O MRKWKWY] Y Z\YQ\KWK
]OW YZO] Y_ \O]^\SO] OVO ZO]O ]SWZVO]WOXÔ K WYXS^Y\K\ K
\ONO @KWY] \OKVSdK\ MYWY _W Ô]Ô _WK ]SWZVO] MYXObY >OVXO^
Z\Y^YMYVY >-: ZY\^K +[_S Y RY]^ # " MVSOXÔ O
# "Y]O\`SNY\8YR]OX^SNYOW]OWY]^\K\^YNKK]KNK
3iJLQD
59
[_OY]XSPPO\XY]Z\YZY\MSYXKZYS]NOWK]SKNYVYXQK-YXQOVKWY]Y]
^\]WYWOX^Y]]SQXSPSMK^S`Y]@OTKWY]$
n
+:$''5 EEDGF ! FGIHF
,3$''5
!
,39HU __ +HDG[D E\WHV __ 6HUYLFH726 __ /HQJWK RYHU DOO
)UDJPHQWDWLRQ ,'[E )ODJV 2IIVHW
77/ __ 3URWRNROO 7&3
__ +HDGHU&5&[F
7&3+($'(5
3RUWV ! WHOQHW 6HT$FN 1U[DEI [
'DWD2IIVHW[D 5HVHUYHG%LW )ODJVXUJDFNSVKUVW6<1ILQ
:LQGRZ[G &5&[ 8UJHQW3RLQWHU[
o
+:$''5 FGIHF ! EEDGF
,3$''5
!
)UDJPHQWDWLRQ ,'[F )ODJV 2IIVHW
__ +HDGHU&5&[G
7&3+($'(5
3RUWV ! WHOQHW 6HT$FN 1U[GD [DEI
'DWD2IIVHW[D 5HVHUYHG%LW )ODJVXUJ$&.SVKUVW6<1ILQ
:LQGRZ[G &5&[ 8UJHQW3RLQWHU[
p
,3$''5
!
)UDJPHQWDWLRQ ,'[F )ODJV 2IIVHW
__ +HDGHU&5&[
7&3+($'(5
3RUWV ! WHOQHW 6HT$FN 1U[DEI [GD
'DWD2IIVHW[ 5HVHUYHG%LW )ODJVXUJ$&.SVKUVWV\QILQ
:LQGRZ[G &5&[HGF 8UJHQW3RLQWHU[
+]]SXKVKWY]MYWK]O^KK]VSXRK][_OXY]SXÔ\O]]KWK[_S8YÔMYWY
K] PVKQ] ]_MONOW]O MYWY PYS ObZVSMKNY /VK] ]Y Q\SPKNK] ZOVY +:=
OWVO^\K]WKS]M_VK]$
8Y[_KN\YÒWY]$
)ODJVXUJDFNSVKUVW6<1ILQ
8P 6<1 HQYLDGR
8Y[_KN\YÒWY]$
3iJLQD
60
XUJ$&.SVKUVW6<1ILQ
8Y[_KN\YÒWY]$
XUJ$&.SVKUVWV\QILQ
8P 6<1$&. UHVSRQGLGR
( ILQDOPHQWH XP $&.
9KV_XYNOÒ^KWLWXY^K\K]_MO]]YNY]]O[_OXMOOKMUXYaVONQWOX^]
X_WLO\] 9L]O\Ò MYWY YMY\\O Y SXM\OWOX^Y [_O PYS ObZVSMKNY
KXÔ\SY\WOXÔ$
1R6<1
6HT$FN 1U
1U[DEI [
1~PHUR GH UHFRQKHFLPHQWR ]HUDGR
1R6<1$&.
6HT$FN 1U
1U[GD [DEI
5DQGRP
6HT 1U $QWHULRU
1R$FN
6HT$FN 1U
1U[DEI [GD
$FN 1U
6HT 1U $QWHULRU
DQWHULRU
9 Z\YQ\KWK +:= ]OW N`SNK _W NY] WKS] ÔS] ]XSPPO\] ZK\K Y
KMYWZKXRKWOX^Y NO \ONO MVK\Y [_O Z\YQ\KWK] NO]Ô ^SZY SXMV_Y
K[_S Y ^MZN_WZ ObOM_^KW _W N_WZSXQ MYWZVO^Y O ]OWZ\O ObK_]^S`Y NY
^\POQY NO \ONO ?W \ONS\OMSYXKWOX^Y ZK\K _W K\[_S`YVYQ X_WK
ZO[_OXKSX^\KXO^N_\KXÔZY_MY]WSX_^Y]QO\K\K\[_S`Y]OXY\WO]/
XY R Y_^\K ]YV_Y ZK\K Y O]^_NY NO WYXS^Y\KWOX^Y O ZK\K K
WYX^KQOW NO _W 3.= OPO^S`Y ]OXY Y O]^_NY M_SNKNY]Y NY] \OQS]^\Y]
OW Ôb^Y ;_O XY] KT_]NK\ K OXMYX^\K\ K] ZOQKNK] NOSbKNK] ZY\ _WK
SX`K]Y
9 ^MZN_WZ ^\KLKVRK MYWY Y +:= ZY\W ]O_] VKcY_^] ]Y NSPO\OXÔ]
@OTKWY] OX^Y 9 Z\YQ\KWK KMOS^K NSÒ\]K] YZO] \O]^\S^S`K] O
SXMV_]S`K]XKVSXRKNOMYWKXNYMYX]_VÔKZQSXKWKX_KV=_K]KNK
ZY]]_SY]OQ_SXÔPY\WK^YOWZKMYÔ]>-:$
(QG RULJHP ! (QG GHVWLQR IODJV VHTQXPEHU DFNQXPEHU WDPDQKRBGHBMDQHOD XUJHQW RSo}HV
3iJLQD
61
4XY]ZKMYÔ]?.:OWQO\KV$
(QG RULJHP ! (QG GHVWLQR SURWRFROR WDPDQKR
+[_SÔWY]_WK]KNK^ZSMKNY^MZN_WZ9L]O\`KWY]_WKMYXObY>-:
KL\SXNY_WK]O]]Y0>:$
! IWS 6
ZLQ PVV VDFN2.WLPHVWDPS QRSZVFDOH ! ')
DUS ZKRKDV WHOO
DUS UHSO\ EEDGF LVDW EEDGF
FGIHF
IWS ! 6
DFN ZLQ PVV VDFN2.WLPHVWDPS QRSZVFDOH !
')
! IWS
DFN ZLQ QRSQRSWLPHVWDPS ! ')
8YÔ [_O K ]KNK NY ^MZN_WZ XY K]]SXKVK ObZVSMS^KWOXÔ KY] =C8
+-5] / SQ_KVWOXÔ XY ]O[_OXMO X_WLO\ SXSMSKV 3=8 OVO XY dO\K
WK]\OZOÔY]`KVY\O]8O]^KMYXObYK]]SXKVKNK OW XOQ\S^Y ÔWY]
L`SYK\OZO^SYNKVQSMKNO]SXM\YXSdKYNY]ZKMYÔ]>-:
9 ]YPâK\O 3:^\KP ^\Kd K MYWYNSNKNO NO _WK SXÔ\PKMO POS^K OW
XM_\]O] :YNOWY] \YVK\ K ÔVK ZY\ ObOWZVY ZK\K _WK `S]Y
SX]^KX^XOK NY ^\POQY NO \ONO +VW NS]]Y Y 3ZP\KP ]OZK\K Y
^\POQY ?.: NY >-: 2 NSÒ\]K] Y_^\K] YZO] NO WYXS^Y\KWOX^Y 8Y
WOX_NOKLO\^_\KÔWY]VS]^KNK]^KS]YZO]$
,37UDI

_ ,3 WUDIILF PRQLWRU
_
_ *HQHUDO LQWHUIDFH VWDWLVWLFV
_
_ 'HWDLOHG LQWHUIDFH VWDWLVWLFV
_
_ 7&38'3 VHUYLFH PRQLWRU
_
_ (WKHUQHW VWDWLRQ PRQLWRU
_
_ 7&3 GLVSOD\ ILOWHUV
_
_ 2WKHU SURWRFRO ILOWHUV
_
_ (WKHUQHW KRVW GHVFULSWLRQV
_
_ 2SWLRQV
_
_ ([LW
_

'LVSOD\V FXUUHQW ,3 WUDIILF LQIRUPDWLRQ
8S'RZQ0RYH VHOHFWRU (QWHUH[HFXWH
3iJLQD
62
+ Z\SWOS\K YZY v3: ^\KPPSM WYXS^Y\v WY]^\K\ OW N_K] ÔVK] K

OX^\KNKO]KNKNOZKMYÔ]>/6+8YKV^YY^\POQY>-:OWLKSbY
Y^\POQY?.:K[_S_WK]O]]Y80=8YÔ]O[_OK]O]]YÔVXO^T
OWM_\]YZY]]_SXYPVKQ]KVO^\K+Y_]OTK+-5@OWY]^KWLWY]
OXNO\OY] 3: O K] ZY\^K] _]KNK] Y MVSOXÔ MYW _WK ZY\^K XY
Z\S`SVOQSKNKMYXOM^KXNYKZY\^KOY]ZKMYÔ]OLcÔ]OWM_\]YO
K SXÔ\PKMO _]KNK O^R 9_^\Y YZY SXÔ\O]]KXÔ >/6+ ZK\K
MROMK\ K \ONO K O]^K^]^SMK NO XY]]K SXÔ\PKMO WOX_$ v.O^KSVON
SXÔ\PKMO ]^K^S]^SM]v :YNOWY] YL]O\`K\ Y] Z\Y^YMYVY] OW _]Y K
WNSKNOK^S`SNKNOY]O\\Y]OXMYX^\KNY]O^M
7(/$
,37UDI
6RXUFH 'HVWLQDWLRQ 3DFNHWV %\WHV )ODJV ,IDFH
_

!

$ HWK_
_

!

$ HWK_
_
_
_
_
_
_
_
_
_
_
_
_
_
_
_
_
7&3 HQWULHV $FWLYH

_ 8'3 IURP WR RQ HWK
_
_
_
_
_
_
%RWWRP(ODSVHG WLPH
,3 7&3 8'3 ,&03 1RQ,3
8S'Q3J8S3J'QVFUO DFWY ZLQ :FKJ DFWY ZLQ 0PRUH 7&3 LQIR ;&WUO;([LW
3iJLQD
63
7(/$
,37UDI
6WDWLVWLFV IRU HWK
_
_
_ 3DFNHWV
%\WHV
_
_ 7RWDO
_
_ ,3

_
_ 7&3

$FWLYLW\
NELWVVHF _
_ 8'3

SDFNHWVVHF
_
_ ,&03

_
_ 2WKHU ,3

,3 &KHFNVXP (UURUV
_
_ 1RQ,3

_
_
_
_
_
_ 3NW 6L]H E\WHV
&RXQW 3NW 6L]H E\WHV
&RXQW
_
_ WR

WR

_
_ WR
WR

_
_ WR
WR

_
_ WR
WR

_
_ WR
WR

_
_ WR
WR

_
_ WR
WR

_
_ WR

_
_
_
(ODSVHG WLPH
;&WUO;([LW
+QY\KZYNOWY]^^_VYNOObOWZVYWYXS^Y\K\_WK]SW_VKYNO=C8
PVYYNSXQ X_WK SX^\KXO^ / YL]O\`VY OW XY]]Y] Z\YQ\KWK] +:= O
3:^\KP ?]K\OWY] _W ]YPâK\O MRKWKNY =cXU Y MNSQY O]M\S^Y ZY\
_WRKMUO\MRKWKNYDKUK^R=O_]ZK\WO^\Y]]Y]SWZVO]$
]cXUOXNINOIY\SQOWOXNINOINO]^SXYZY\^KZY\^K
:YNO]OYZ^K\XKPVKQvOXNINOIY\SQOWvZY\Y[_OPK\[_OY]=C8]
]OTKWNONSPO\OXÔ]OKVOK^\SY]OXNO\OY]3: v:Y\^Kv O v:Y\^Kv
MYWY MRKWKWY] \OPO\OW]O ] ZY\^K] K ]O\OW MYX]O[_OXÔWOXÔ
QO\KNK]% ZY\ ObOWZVY$ ]O O]MYVROWY] K] ZY\^K] K WKXNK\OWY]
ZKMYÔ] NK ZY\^K K^ K ZY\^K 9] ZKMYÔ] ]Y K]]SW OX`SKNY]
NO PY\WK SXÔ\WSÔXÔ K^ K SXÔ\\_ZY ZOVY _]_\SY MYW _W
-YX^\YV-Y_-YX^\YVL\OKU
7Y]^\KWY] K[_S Y 3:^\KP NOÔM^KXNY _W =C8PVYYNSXQ XYÔ MYWY Y]
OXNO\OY] 3: ]Y QO\KNY] KVOK^Y\SKWOXÔ O MYWY K] ZY\^K] ]Y
3iJLQD
64
`K\\SNK]OW]O[_XMSKKÔXY$R^KWLW_WKMYXObY>OVXO^\OQ_VK\
]OXNYWY]^\KNKXKVSXRK#XYÔ^KWLWKPVKQ=C8WK\MKNKMYW_W
=$
,37UDI

6
HWK

HWK

6
HWK

HWK

6
HWK

HWK

6
HWK

HWK

!

3$
HWK

!

$
HWK

6
HWK

HWK
7&3 HQWULHV $FWLYH

8'3 E\WHV IURP WR RQ HWK
8'3 E\WHV IURP WR RQ HWK
$53 E\WHV IURP EEDGF WR FGIHF RQ HWK
$53 E\WHV IURP FGIHF WR EEDGF RQ HWK
7RS (ODSVHG WLPH

,3
7&3
8'3
,&03
1RQ,3

+QY\K_WK^K[_ONYWO]WY^SZYOMYKXNYXO]^KMKZ^_\KNY+:=$

,3$''5
!
)UDJPHQWDWLRQ ,'[GD )ODJV 2IIVHW
__ +HDGHU&5&[
7&3+($'(5
3RUWV ! WHOQHW 6HT$FN 1U[ [
'DWD2IIVHW[ 5HVHUYHG%LW )ODJVXUJDFNSVKUVW6<1ILQ
:LQGRZ[IIII &5&[I 8UJHQW3RLQWHU[

,3$''5
!
)UDJPHQWDWLRQ ,'[EG )ODJV 2IIVHW
__ +HDGHU&5&[
7&3+($'(5
3RUWV ! XQNQRZQ 6HT$FN 1U[ [
:LQGRZ[IIII &5&[IDG 8UJHQW3RLQWHU[

,3$''5
!
)UDJPHQWDWLRQ ,'[H )ODJV 2IIVHW
3iJLQD
65

__ +HDGHU&5&[
7&3+($'(5
3RUWV ! VPWS 6HT$FN 1U[ [
:LQGRZ[IIII &5&[GI 8UJHQW3RLQWHU[

,3$''5
!
)UDJPHQWDWLRQ ,'[EE )ODJV 2IIVHW
__ +HDGHU&5&[GGE
7&3+($'(5
3RUWV ! XQNQRZQ 6HT$FN 1U[ [
:LQGRZ[IIII &5&[EIE 8UJHQW3RLQWHU[

,3$''5
!
)UDJPHQWDWLRQ ,'[E )ODJV 2IIVHW
__ +HDGHU&5&[F
7&3+($'(5
3RUWV ! QVZIH 6HT$FN 1U[ [
:LQGRZ[IIII &5&[DH 8UJHQW3RLQWHU[

8YZYNO\KWY]NOSbK\NOWOXMSYXK\_WKPO\\KWOX^K Z\O]OXÔ OW [_K]O

^YNY]Y]]S]ÔWK]?83BMRKWKNKvXO^]^K^v-YWYTNOWY]X^\KYXYWO
^\K^K]O _W Z\YQ\KWK ZK\K WY]^\K\ K] O]^K^]^SMK] OW XY]]K \ONO
:Y\W NSPO\OXÔWOXÔ NY] Y_^\Y] ]YPâK\O] Y XO^]^K^ NO MO\^K
PY\WKO]^^SMYZYS]XY]WY]^\KY]O]^KNYK^_KVNO_WSXÔ\PKMONO
\ONO]OQ_XNYYZ\Y^YMYVYNOXY]]KO]MYVRK:Y\ObOWZVYÔWY]K[_S
_W=C8PVYYNSXQMKZ^KNYZOVYXO^]^K^$
>URRW#DOSKD ELQ@ QHWVWDW Q W
$FWLYH ,QWHUQHW FRQQHFWLRQV ZR VHUYHUV
3URWR 5HFY4 6HQG4 /RFDO $GGUHVV
WFS

WFS

WFS

WFS

WFS

WFS

WFS

WFS

WFS

WFS

WFS

WFS

WFS

WFS

)RUHLJQ $GGUHVV

6WDWH
(67$%/,6+('
(67$%/,6+('
(67$%/,6+('
(67$%/,6+('
(67$%/,6+('
(67$%/,6+('
(67$%/,6+('
(67$%/,6+('
(67$%/,6+('
(67$%/,6+('
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
3iJLQD
66
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS

9,3V
IDOVRV

6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
96<1V
8Y]ONOÒO]^\KXRK\KObZ\O]]Y_]KNK=C8</-@9XO^]^K^MYWY
PKVKWY] _WK PO\\KWOX^K ^\KNSMSYXKV NY] =S]ÔWK] YZO\KMSYXKS]
?83BZY\S]]Y_]KKObZ\O]]YMKXXSMKZ\O]OXÔXY<0-!#+VS_WK
MYXObY >-: PYS SXÔ\Z\O^KNK MYWY _WK Z\YQ\O]]Y NO O]^KNY] MYW
NSPO\OXÔ] ]SQXSPSMKNY] YXNO =C8</-/3@/. _W NOVO] ^KS] MYWY
63=>/8 O]ZO\K ZY\ _WK MYXObY /=>+,63=2/. O]^KLOVOMSWOX^Y NK
MYXObY>-:038A+3>O]ZO\KZOVY^\WSXYNKMYXObYO^M
/X^\O^KX^Y K KXVS]O NO ^KS] PO\\KWOX^K] NO WYXS^Y\KY XY XY]
\O]ZYXNOW]OQ_\KWOXÔ_WK[_O]^YNO_WK^K[_O3:]ZYYPSXQ_WZYX^Y
ZO\WKXOMO KLO\^Y ;_KV ]OTK MYWY Y SX`K]Y\ ZYNO OX`SK\ _W ZKMYÔ
MYW_WOXNO\OYNO_WRY]^MYXPSÒVOKVWNYWKS]\O]ZYXNOXNYK
_W=C8+-5)-YWYWYX^K\_W]O[_OXMOX_WLO\Y__WKMUX_WLO\)
?W ]YPâK\O KLO\^Y MRKWKNY =OXN3: Ò\]Y NO 7SUO <SMRK\N]
WSUO*OK\^RVS M\SKNY NOX^\Y NY MRKWKNY :\YTOM^ :_\ZVO
R^^Z$aaaOK\^RVSZY\ObOWZVYZYNOPKdO\^KVYZO\KY]OXNY
3iJLQD
67
_WK SWZY\^KX^]]SWK PO\\KWOX^K NO NOL_Q O KNWSXS]^\KY NO \ONO O

PS\OaKVV
9=OXN3:KMOS^KSXWO\K]YZO]XKVSXRKNOMYWKXNY-YL\SXNY[_K]O
^YNK]K]YZO]ObS]ÔXÔ]XY]Z\Y^YMYVY]?.:>-:O3-7:@OTKWY]$
]OXNSZ &RY]^XKWO( Z &^SZY( N &NKNY]( &YZO](

&RY]^XKWO( S] ^RO XKWO YP ^RO RY]^ ^Y ]OXN ^RO ZKMUO^ ^Y NOPK_V^] ^Y
VYMKVRY]^
&^cZO( S] ^RO ZKMUO^ ^cZO$ M_\\OX^Vc ?.: >-: Y\ 3-7: NOPK_V^] ^Y 3:
&NK^K( S] ^RO NK^K ZKcVYKN YP ^RO ZKMUO^ K] K ]^\SXQ YP RObKNOMSWKV
X_WLO\] NOPK_V^] ^Y LcÔ] YP ]
9:9
./=-<39
:+.<9
9ZO] NO ]Y[_OÔ$
]N
.OL_Q

]\
8Y \YÔK\
SO NY \Y_Ô
]L
:O\WSÔ L\YKNMK]^
9ZO] 3:$
S]
3: NO Y\SQOW
SN
3: NO NO]^SXY
SR
>KWKXRY NO MKLOKVRY
Sc
v>cZO YP ]O\`SMOv
SV
>KWKXRY
SS
3NOX^SPSMKY
SP\
0VKQ \O]O\`KNK
SPN
8Y P\KQWOX^K
SPW
7KS] P\KQWOX^Y]
SP
v0\KQ YPP]O^v
S^
>>6
SZ
:\Y^YMYVY
SM
v-ROMU]_Wv
!
-Y\\O^Y
-Y\\O^Y
Ò\ <0-!#
-Y\\O^Y
+VOK^\SY

-Y\\O^Y ZK\K Y ^SZY
-Y\\O^Y
9ZO] 3-7:$
M^
>SZY
MN
-NSQY
MM
v-ROMU]_Wv
" @O\ <0-!#

@O\ <0-!#
-Y\\O^Y
9ZO] ?.:$
_]
:Y\^K NO 9\SQOW
_N
:Y\^K NO .O]^SXY
_V
>KWKXRY
_M
v-ROMU]_Wv

-Y\\O^Y
-Y\\O^Y
9ZO] >-:$
^]
:Y\^K NO 9\SQOW
^N
:Y\^K NO .O]^SXY
^X
v=O[_OXMO X_WLO\v

+VOK^\SY
3iJLQD
68
^K
^^
^\
^P_
^PK
^PZ
^P\
^P]
^PP
â
^M
^_
v+MUXYaVONQOWOX^v
v.K^K YPP]O^v
<O]O\`KNY
-YXP v_\Q LS^v
-YXP vKMU LS^v
-YXP vZ]R LS^v
-YXP v\]^ LS^v
-YXP v]cX LS^v
-YXP vPSX LS^v
4KXOVK
v-ROMU]_Wv
3XNSMKNY\?\QXMSK

-Y\\O^Y

K WOXY] [_O ^_ ]OTK O]ZOMSPSMKNY
K WOXY] [_O ^K ]OTK O]ZOMSPSMKNY

-Y\\O^Y

:YNOWY] KQY\K OX`SK\ _W ZKMYÔ >-: K XY]]K O]MYVRK ZK\K _W RY]^
[_KV[_O\ NO XY]]K \ONO O OX^Y KXKVS]K\ MYW Y +:= O Y 3:^\KP Y
MYXÔNYNYZKMYÔ0K\OWY]MYWK]]OQ_SXÔ]YZO]$
]OXNSZ # " Z ^MZ S] ^] ^N
MYX^ ^K^_
9 Z\SWOS\Y OXNO\OY 3: Y RY]^ [_O NO]OTKWY] OX`SK\ Y ZKMYÔ Y
Z\Y^YMYVY>-:YOXNO\OYNO_W]O\`SNY\[_O_]K\OWY]ZK\K]ZYYPSXQ
KW[_SXK[_OO]^KOX`SKXNYY\SQSXKVWOXÔ# "=OQ_OW]O
K]YZO]^ZSMK]NYZ\Y^YMYVY$v^]vZY\^KNOY\SQOW`KVY\v
^Nv ZY\^K NO]^SXY ]]R v^Kv Y XWO\Y NO \OMYXROMSWOX^Y
PY\TKNY$vvOWNOMSWKS]OZY\PSWWK\MKWY]OOX^YK^S`KWY]
MYWvvKPVKQ?<1NYMKLOKVRY
-YWY+:=WYXS^Y\KXNYXY]]YRY]ÔVOXY]\OZY\^K$
+N`KXMON:KMUO^=XSPPO\ @
-98031.+>/$ $"$#
-YZc\SQR^ - ### -R\S]^SKX =MR_VÔ NQX]a*]K^_\XP\KXUOXNO

>RS] Z\YQ\KW S] P\OO ]YPâK\O% cY_ MKX \ONS]^\SL_Ô S^ KXNY\ WYNSPc
S^ _XNO\ ^RO Ô\W] YP ^RO 18? 1OXO\KV :_LVSM 6SMOX]O K] Z_LVS]RON Lc
^RO 0\OO =YPâK\O 0Y_XNK^SYX
2A+..<$ $$L$L$K#$NM ( $M$NP$O$$M
3:+..<$ ( # "
3:@O\ ff 2OKN$bK LcÔ] ff =O\`SMO>9=$ ff 6OXQ^R YÒ\ KVV$
0\KQWOX^K^SYX$ 3.$b ! 0VKQ]$ 9PP]O^$
>>6$ ff :\Y^YUYVV$ >-: ff 2OKNO\-<-$bL
3iJLQD
69
>-:2/+./<$
:Y\^]$ ( XOaKMM^ =O[+MU 8\$bM !L b##
.K^K9PP]O^$b <O]O\ÒN ,S^$ 0VKQ]$?<1+-5Z]R\]^=C8PSX
ASXNYa$bPPPP -<-$b ?\QOX^:YSXÔ\$b

2A+..<$ $$L$L$K#$NM ( $M$NP$O$$M
+<:$ 3:(/^RO\XO^
<O[_O]^ P\YW # " 2A$$$L$L$K#$NM
1YO]
^Y # " 2A$$$$$$

2A+..<$ $M$NP$O$$M ( $$L$L$K#$NM
+<:$ 3:(/^RO\XO^
+X]aO\ P\YW # " 2A$$M$NP$O$$M
1YO]
^Y # " 2A$$$L$L$K#$NM

+QY\KXY3:^\KPZYNOWY]SQ_KVWOXÔYL]O\`K\$

,37UDI
_

!

6$8 HWK _
_

!

HWK _
_
_
_
_
_
_
_
_
_
_
_
_
_
_
_
_
7&3 HQWULHV $FWLYH

_
_
_
_
_
_
_
_
_
_
_
_
%RWWRP(ODSVHG WLPH
,3 7&3 8'3 ,&03 1RQ,3
+[_S YL]O\`KWY] OW KWLK] K] ÔVK] _W XSMY ZKMYÔ O ObK^KWOXÔ
MYWY]`KVY\O][_OM\SKWY]9]MKWZY]OWNO]^K[_OXY]WY]^\KWS]]Y
+ VOS^_\K NY MKLOKVRY XY] WY]^\K PKMSVWOXÔ Y] LS^] NO _\QXMSK
WK\MKNY] O Y =C8+-5 NY ZKMYÔ ^KWLW Y +:= ZYNO XY] WY]^\K\ Y
XWO\Y NO \OMYXROMSWOX^Y [_O O]^KLOVOMOWY] vv ObZ\O]]Y OW
RObKNOMSWKS]vb##v
3iJLQD
70
9_^\Y NO^KVRO K ]O\ XY^KNY K \O[_S]SY +<: +NN\O]] <O]YV_^SYX

:\Y^YMYV 9] ZKMYÔ] +<:] XY ]Y Ob^\OWKWOXÔ SWZY\^KXÔ] OW
Ô\WY] NO ]OQ_\KXK :YS] O]^KWY] X_W XÒV WKS] LKSbY NK ZSVRK
>-:3:7K]ZY\Y_^\YVKNYZYNO\OÒVK\ KVQ_X] ^\KY] SWZY\^KXÔ]
ZK\K Y WYXS^Y\KWOX^Y NK \ONO @OTKWY] +<: _W Z\Y^YMYVY [_O VSQK
_W OXNO\OY O^RO\XO^ MRKWKNY MYW_WOXÔ NO 7ONSK +MMO]] -YX^\YV
7+- Y_ OXNO\OY NO RK\NaK\O O^RO\XO^ K _W OXNO\OY 3:
K^\SL_NY=OQ_XNYKNOPSXSYZ\OMS]KNO.Y_QVK]-YWLO\$
+<:_WZ\Y^YMYVYNOLKSbYXÒV[_OKL]^\KSYOXNO\OKWOX^Y
P]SMYZO\WS^SXNY[_O]OTKK^\SL_NY_WOXNO\OY3:ZK\KMKNK
W[_SXK3NOKVSdKWY]+<:MYWYZK\ÔP]SMKNY]S]ÔWKNO\ONO]O
XYMYWYZK\ÔNYZ\Y^YMYVYNOSXÔ\VSQKYOW\ONO]16
;_KXNY _W RY]^ NK \ONO NO]OTK ]KLO\ Y 7+- NO _W Y_^\Y RY]^ OVO
OX`SK _WK \O[_S]SY Y_ _W ZKMYÔ +<: ZY\ L\YKNMK]^ ZO\Q_X^KXNY
[_KV Y OXNO\OY NO RK\NaK\O NK W[_SXK MYW 3: ZY\ ObOWZVY
v# "v)>YNK]K]W[_SXK]KMOS^KWYZKMYÔ+<:WK]MYWY]
R_WKW[_SXKMYW^KVOXNO\OKWOX^Y]YWOXÔ OVK \O]ZYXNO OX`SKNY
]O_ 7+- .O]ZYS] PY\WKNY _W MKMRO MYW _WK VS]^KQOW MYW Y]
OXNO\OY] 3Z] O Y] OXNO\OY] NO RK\NaK\O 9 MYWKXNY K\Z X` ZYNO
WY]^\K\YMKMROM\SKNY$
>URRW#EHWD ELQ@ DUS QY
$GGUHVV
+ZW\SH

HWKHU

HWKHU

+ZDGGUHVV
)))
))))
)ODJV
&
&
0DVN
,IDFH
HWK
HWK
97+-_WOXNO\OYXSMY9_]OTKMKNKKNKZ^KNY\NO\ONOZY]]_S_W
OXNO\OY ]SXQ_VK\ XY PY\WK^Y NO " LS^] LcÔ] O]M\S^Y OW
RObKNOMSWKS] O ]OZK\KNY] ZY\ $ Y_ 9] ^\] Z\SWOS\Y] LcÔ]
16
-97,/< . 3XÔ\VSQKY OW <ONO MYW >-:3: <SY NO 4KXOS\Y ON -KWZ_] ##" Z
"
3iJLQD
71
NO]SQXKW Y MNSQY NY PKL\SMKXÔ NK ZVKMK NOÔ\WSXKNY ZOVK 3///

3X]^S^_Ô YP /VO^\SMKV KXN /VOM^\YXSM] /WQSXOO\] 9 7+- NO ]_K
ZVKMK NO \ONO ZYNO ]O\ WY]^\KNY MYW Y MYWKXNY vSPMYXPSQv% XK
Z\SWOS\KNKVSXRKNKSXÔ\PKMOO^RO\XO^ZYNO]O YL]O\`K\ K OX^\KNK
2AKNN\ B$B$B$B$B$ /W XY]]Y ObOWZVY OXMYX^\KWY] _WK ZVKMK NK
OWZ\O]K-97]O_7+-$
$$,$,$+#$.MN NK OWZ\O]K -97
+SXNK OW XY]]Y ObOWZVY `SWY] [_O K W[_SXK [_O OX`SY_ ZKMYÔ]
]ZYYPSXQNOSbK\MYWMO\ÔdK\K]^\Y]+\O[_S]SY+<:O]ÔbZ\O]]K
XY+:=XK]]OQ_SXÔ]VSXRK] :
2A+..<$ $$L$L$K#$NM ( $M$NP$O$$M

+<:$ 3:(/^RO\XO^
<O[_O]^ P\YW # " 2A$$$L$L$K#$NM
1YO]
^Y # " 2A$$$$$$
OXNO\OY KSXNK NO]MYXROMSNY

2A+..<$ $M$NP$O$$M ( $$L$L$K#$NM
+<:$ 3:(/^RO\XO^
+X]aO\ P\YW # " 2A$$M$NP$O$$M
1YO]
^Y # " 2A$$$L$L$K#$NM
\O[_S]SY MYWZVO^KNK
9 ZKMYÔ ]ZYYPSXQ PYS OX`SKNY ZOVY RY]^ # " WK] WO]WK K
W[_SXK [_O OX`SY_ Y ZKMYÔ K\^SPSMSKV SWONSK^KWOXÔ OX`SK _W
ZKMYÔ+<:/KY_^\KW[_SXK\O]ZYXNOMK]KXNYYOXNO\OY3:MYWY
7+-
3.2 Saint: Security Administrator's Integrated Network Tool

@KWY] KQY\K KXKVS]K\ K PO\\KWOX^K =KSX^ =OM_\S^c +NWSXS]^\K^Y\v]
3XÔQ\KÔN8OâY\U>YYVÒ\]Y\OVOK]O!_W]YPâK\OKLO\^YO
3iJLQD
72
W_S^Y ZYNO\Y]Y NO]OX`YV`SNY ZOVK AY\VN ASNO .SQS^KV =OM_\S^c

R^^Z$aaaaaN]SMYW]KSX^ /VO P_XMSYXK OW [_K]O ^YNY] Y]
]S]ÔWK] ?83B ZK\K ]_K _^SVSdKY XOMO]]S^K NK VSXQ_KQOW :O\V
Ò\]Y Y_ ]_ZO\SY\% O ZY\ \YNK\ NOX^\Y NO _W L\Ya]O\
XOMO]]S^K O`SNOXÔWOXÔ NO [_KV[_O\ ^SZY NO L\Ya]O\ ZK\K AOL K^
WO]WYY]OWWYNYÔb^Y^KVMYWYY6cXbZYNOW]O\_]KNY]9=KSX^
_WKO`YV_YNKMYXROMSNKPO\\KWOX^K=K^KXO]M\S^KZY\.0K\WO\
A @OXOWK O ZY]]_S WO]WY Q\KXNO] ZY\O] NO MYZc\SQR^ NO]Ô
]YPâK\O 7K] ]OW N`SNK Y =KSX^ O]^ LOW WOVRY\ KNKZ^KNY ]
NS]^\SL_SO] 6SX_b ;_OW ÔX^Y_ MYWZSVK\ Y =K^KX XY 6SX_b Y_
bO]^K\NOKMY\NYMYXY]MY
8OW ^YNK] K] NS]^\SL_SO] 6SX_b SXMV_OW _WK Ò\]Y NY =KSX^ +
ObMOY ^KVÒd ]OTK K NK =_=/ ` [_O T NS]^\SL_S Y ZKMYÔ
MYWZSVKNY:K\KPKdVYObOM_ÔY]]OQ_SXÔ]ZK]]Y]$
.SQSÔvWKUOVSX_bvZK\KKMYWZSVKYNY]LSX\SY]
.OZYS] KT_]Ô Y] ZK^R] ZK\K Y] ]M\SZ^] OW :O\V MYW vZO\V
\OMYXPSQvMYWS]]Y^KWLWY=KSXÔXMYX^\K\KKT_]^K\YZK^RZK\K
YL\Ya]O\NS]ZYXÒVXY]S]ÔWK]ONO]OTK\KVÔ\VYONSÔYK\[_S`Y
vMYXPSQZK^R]ZVv
@YMXOMO]]S^KNO]VSQK\Y]O\`SNY\Z\Ybc[_KXNYPY\_]K\Y=KSX^
ZYS]OVOZ\OMS]KNOKMO]]YNS\O^YKY]RY]^]NK\ONO@YMZYNOPKdO\
ONS^KXNY K ]_K `K\SÒV NO KWLSOXÔ KVQY NY ^SZY R^^ZIZ\Ybc O
^KWLW NO]PKdOXNY Y _]Y NY Z\Ybc XY XO^]MKZO =OW O]]O KT_]Ô Y
=KSX^XYP_XMSYXK\
+QY\KTZYNOWY]VKXK\Y=KSX^=O_]K\WY]_WL\Ya]O\Q\PSMYMYWY
Y XO^]MKZO Y_ Y 8=-+ WY]KSM Z\OMS]KWY] O]^K\ XY BASXNYa] .O _WK
TKXOVK NY Ô\WSXKV Q\PSMY Y BÔ\W ZY\ ObOWZVY MK\\OQKWY] Y
Z\YQ\KWKKZK\^S\NY]O_NS\O^\SY$
3iJLQD
73
MN_]\VYMKV]KSX^
OOX^Y$
]KSX^
+ÔVKSXSMSKVWY]^\K_WWOX_NOP_XO]NYZ\YQ\KWK9=KSX^XY
KZOXK]_W]YPâK\ONOQO\OXMSKWOX^YNO\ONO7K]]SW_WZ\YQ\KWKNO
KXVS]O O \OVK^\SY NO NSKQX]^SMY] NO XY]]K \ONO O ]O_] RY]^] 9
=KSX^ Z\YM_\K `_VXO\KLSVSNKNO] O OX^Y K] \OZY\^K PY\WK^KXNYK]
X_WKZQSXK2^WV
@OTKWY]Y]O_WOX_NOKLO\^_\K$
.+>+
7+8+1/7/8>
MYXPSQ_\K
Y
K\[_S`Y
Y
ZKN\Y
`K\]KSX^]KSX^NK^K YXNO Y Z\YQ\KWK S\ \OQS]^\K\ ]_K] KXVS]O]

O \O]_V^KNY]% Y Y_^\Y SÔW 7O\QO aS^R ObS]^SXQ =+38> NK^K LK]O
_]KNYZK\KP_XNS\NYS]K\[_S`Y]NONKNY]Z\YN_dSNY]ZOVY=KSX^
>+<1/> =/6/->398 MYXPSQ_\K Y RY]^ Y_ Y] RY]^] NO _WK ]_L\ONO
Z\SW\SK +[_S ]O\Y O]MYVRSNK] K] P_XO] L]SMK] NY Z\YQ\KWK [_O
S\OWY]NO^KVRK\P\OXÔ
.+>+ +8+6C=3= WY]^\K Y] \OVK^\SY] O KXVS]O] NOZYS] NK
SXÒ]^SQKYNO_WRY]^
-98031?<+>398 71> WKXKQOWOX^ _WK ZQSXK [_O QO\OXMSK K]
MYXPSQ_\KO]QO\KS]NY=KSXÔNS^KXNYYK\[_S`YvMYXPSQ]KSX^MPv
>KS]MYWYYK\[_S`Y]NONKNY]YvXÒVNOZO][_S]KvVOÒVZ\YLO
Y `KVY\ NO ^SWOY_^ [_KS] ]_PSbY] S\OWY] ObMV_S\ NK ZO][_S]K WSV
QY`ZY\ObOWZVY]O_]KWY]_W.8=O^M
3iJLQD
74
.9-?7/8>+>398 O ><9?,6/=299>381 ]Y VSXU] ZK\K K NYM_WOX^KY

K\WKdOXKNKVYMKVWOXÔ
+ SXÔ\PKMO MYX]^\_NK MYWY _WK ZQSXK AOL LK]^KXÔ K_^Y
ObZVSMK^S`K -YWOK\OWY] MYW K O]MYVRK NO _W RY]^ NO XY]]K \ONO O
]OQ_S\OWY] Y] ZK]]Y] NY Z\YQ\KWK /]MYVROWY] XY WOX_$ ^K\QO^
]OVOM^SYX O Z\OOXMROWY] MYW Y OXNO\OY NY RY]^ :YNOWY] `K\\O\
^YNKKXY]]K\ONO^KWLW]OO]^SÒ\WY]X_WKW[_SXKMYWLK]^KXÔ
\OM_\]Y NO WOW\SK 9_ ZYNOWY] O]MYVRO\ K ObOM_Y NO _W .OXSKV 9P
=O\`SMO +LKSbY OXMYX^\KWY] K ]OVOY NY ]MKXXSXQ VOÒV$ VOÒ
XY\WKV ZO]KNY O`S^KXNY ZY\^K] Z\YLVOW^SMK] NY ASXNYa] 8> O Y
V^SWY XÒV Y vROK`cv XY O`S^KXNY K] ZY\^K] Z\YLVOW^SMK] NY
ASXNYa] 8> 8K O]MYVRK PSXKV RKLSVS^KWY] Y_ XY Y PS\OaKVV XK
W[_SXKK]O\SXÒ]^SQKNK
0OS^Y]Y]KT_]ÔSXSMSKWY]KSXÒ]^SQKY$=^K\^^RO]MKX
+]]SW Y =KSX^ MYWOK ]_K `K\\ON_\K XY RY]^ O K ]_L]O[_OXÔ MYVO^K
NO NKNY] NOZOXNOXNY NY ^\POQY NO \ONO O WO]WY NY RK\NaK\O NY
O[_SZKWOX^YZYNO]OVO`K\_WMO\^YÔWZYK^PSXKVSdK\K`K\\ON_\K
+ ZQSXK NO `K\\ON_\K S\ WY]^\K\ K] ZY\^K] O Y] ]O\`SY]
OXMYX^\KNY]K^KX_XMSK\YPSWNK^K\OPK$=KSX^\_XMYWZVOÔN
@OWY]K[_SYZ\YMO]]YNO`K\\ON_\KNY=KSX^X_WRY]^$
3iJLQD
75
/VOXY]WY]^\K^YNY]Y]]O\`SY]O]_K]\O]ZOM^S`K]ZY\^K]_W
WKZK MYWZVO^Y NK] ZY\^K] [_O O]^Y KLO\^K] X_W RY]^ NO XY]]K \ONO
\O]^KXY]MROMK\]OO]ÔO]^KNYNOMYS]K]MY\\O^YY_XY
/]MYVROWY] KQY\K K YZY -YX^SX_O aS^R \OZY\^ KXN KXKVc]S] -YW
O]]K YZY Y =KSX^ S\ KXKVS]K\ Y [_KN\Y OXMYX^\KNY XK W[_SXK
# "
+ ÔVK LKSbY WY]^\K K] YZO] YPO\OMSNK] ZOVY ]YPâK\O =Y ^\]
LVYMY] NO YZO]$ v@_VXO\KLSVSNKNO]v v3XPY\WKO] ]YL\O YRY]^v O
ZY\ PSW _WK VS]^KQOW NO v>\_]ÔN RY]^]v =OW N`SNK Y Z\SWOS\Y
LVYMYYWKS]SWZY\^KXÔNYZYX^YNO`S]^KNK]OQ_\KXK9]OQ_XNY
OYÔ\MOS\Y]YWKS]SXPY\WK^S`Y]
3iJLQD
76
ZY\ MYX]OQ_SXÔ XY XÒV 3 v,c +ZZ\YbSWKÔ .KXQO\ 6OÒVv NK]

@_VXO\KLSVSNKNO] [_O Y =KSX^ S\ PKdO\ Z\SWOS\KWOXÔ _WK KXVS]O
W_S^K\SMKNY]Z\YLVOWK]ZYÔXMSKS]OXMYX^\KNY]]OOVOZY\ÒX^_\K
Y] OXMYX^\K\ +[_S MYWY T KX_XMSK Y WOX_ OVO VS]^K Y] Z\YLVOWK]
]OQ_XNYYXÒVNOZO\SQYKZ\YbSWKNY9]Z\YLVOWK]ZYNOW]O\Y]WKS]
NSÒ\]Y] ZY]]ÒS] /VO PK\ _WK Z\YM_\K ObK_]^S`K O MYVYMK\ _WK
ZO[_OXK LYVK Ò\WOVRK ZK\K K]]SXKVK\ K ObS]^XMSK NO Z\YLVOWK]
M\^SMY] [_O ZY]]KW ]O\ OXMYX^\KNY] +Y WO]WY ÔWZY ]Y WYX^KNY]
SXÔ\O]]KXÔ] VSXU] ZK\K ObZVSMKO] LK]^KXÔ Z\YÒS^Y]K] [_O
O]^YOWK\[_S`Y]OWNS\O^\SY]VYMKS]
8YSÔWKLKSbYXÒV33,c>cZO YP @_VXO\KLSVS^c OXMYX^\KWY]
_WK
VS]^K
NY]
Z\YLVOWK]
OXMYX^\KNY]
]OQ_XNY
Y
^SZY
`_VXO\KLSVSNKNO-YWYWY]^\KKÔVKKLKSbY$
3iJLQD
77
NO
9 RY]^ OW [_O]^Y _WK W[_SXK \YNKXNY Y ASXNYa] 8>

aY\U]^K^SYX9=KSX^KZYX^K^\]VSXU]$

+NÒ\Ô ZK\K Z\YLVOWK] NO .Y= MK\KMÔ\]^SMY] NO ]S]ÔWK]

ASXNYa]

9 K\[_S`Y ObZY\^ NY 80= \YNKXNY XY ASXNYa] 8> XY SWZO
\O]^\SO]ZK\KNS\O^\SY]OK\[_S`Y]
/VO SWKQSXOW NOÔM^K O VS]^K Y Z\Z\SY ASXNYa] MYWY _W

Z\YLVOWK
9 VSXU O LK]SMKWOXÔ KNÒ\ÔW ZK\K Y _]Y NO ZK^MRO] ZK\K
MY\\SQS\Z\YLVOWK]NO.Y=XYKWLSOXÔASXNYa]
+]]SW ]O NO\WY] _W MVS[_O OW v:Y]]SLVO .Y= Z\YLVOWv Y_ vASXNYa]
NOÔMÔNv OXMYX^\K\OWY] _WK ÔVK MYW Y] OXNO\OY] NY]
RY]^]O]O]OQ_SWY]OX^YYVSXUOXMYX^\K\OWY]Y]OQ_SXÔ$
3iJLQD
78
+ LYVK Ò\WOVRK WK\MK _W Z\YLVOWK M\^SMY K ]KLO\ Y NS\O^\SY

vN\SÒMv NK W[_SXK 8> ZYNO ]O\ WYX^KNY ZY\ [_KV[_O\ _]_\SY
SXNS]M\SWSXKNKWOXÔ 0OS^K K KNÒ\^XMSK \O]^K KY KNWSXS]^\KNY\ NK
\ONO^YWK\K]WONSKNK]XOMO]]\SK]_WKNSMK^SVK[_SMYXPO\S\Y
K\[_S`Y v\_VO]N\YZv KVS ZYNOWY] MYXPSQ_\K\ PK^Y] K ]O\OW
XOQVSQOXMSKNY] ZOVY =KSX^ /bOWZVY$ LK]^KXÔ MYW_W XK] \ONO] [_O
_]KW 80= VSLO\K\OW K WYX^KQOW NO _XSNKNO] NO -.<97 XY] ]O_]
K\[_S`Y]O^MObZY\^]ZYNOWY]MYXPSQ_\K\OX^YZK\K[_OY=KSX^XY
\OZY\Ô^KVPK^YMYWY_WZ\YLVOWK
+]LYVK]WK\\YX]v3]cY_\RY]^K.Y=^R\OK^)vOY]OQ_SXÔ
MYWYNS]]OWY]KXÔ\SY\WOXÔO]MVK\OMOWXY]NKXOMO]]SNKNONO
MY\\OO]MYX^\KK]KO].Y=
3iJLQD
79
+8/B9=
+XObY +$ 9 K\[_S`Y vO^MZ\Y^YMYV]v
+XObY ,$ 9 K\[_S`Y vO^M]O\`SMO]v
+XObY -$ ?W v]M\SZ^v ZK\K 3:-2+38=
+XObY .$ 9] MKLOKVRY] NO ZKMYÔ] 3: 3-7: >-: ?.: O +<:
+XObY /$ -YWY _W ZKMYÔ `SKTK K^\K`] NK ZSVRK >-:3:)
3iJLQD
80
+8/B9+$

Z\Y^YMYV] >RS] PSVO NO]M\SLO] ^RO `K\SY_] Z\Y^YMYV] ^RK^ K\O

K`KSVKLVO P\YW ^RO >-:3: ]_L]c]ÔW 3^ ]RY_VN LO

MYX]_VÔN SX]ÔKN YP _]SXQ ^RO X_WLO\] SX ^RO +<:+

SXMV_NO PSVO] Y\ aY\]O T_]^ Q_O]]SXQ ^ROW

SZ
SMWZ
SQWZ
QQZ
^MZ
Z_Z
_NZ
SNZ
\Ka

!

3:
3-7:
317:
11:
>-:
:?:
?.:
3.:
<+A
SXÔ\XO^ Z\Y^YMYV Z]O_NY Z\Y^YMYV X_WLO\

SXÔ\XO^ MYX^\YV WO]]KQO Z\Y^YMYV
SXÔ\XO^ Q\Y_Z W_V^SMK]^ Z\Y^YMYV
QKÔaKcQKÔaKc Z\Y^YMYV
^\KX]WS]]SYX MYX^\YV Z\Y^YMYV
:+<- _XSÒ\]KV ZKMUO^ Z\Y^YMYV
_]O\ NK^KQ\KW Z\Y^YMYV
ARK^]>RS])
<+A 3: SXÔ\PKMO
/XN
3iJLQD
81
+8/B9,$

8OâY\U ]O\`SMO] 3XÔ\XO^ ]^cVO

8YÔ ^RK^ S^ S] Z\O]OX^Vc ^RO ZYVSMc YP 3+8+ ^Y K]]SQX K ]SXQVO aOVVUXYaX
ZY\^ X_WLO\ PY\ LY^R >-: KXN ?.:% ROXMO WY]^ OX^\SO] RO\O RKÒ âY OX^\SO]
OÒX SP ^RO Z\Y^YMYV NYO]Xv^ ]_ZZY\^ ?.: YZO\K^SYX]

>RS] VS]^ MY_VN LO PY_XN YX$

R^^Z$aaaS]SON_SXXYÔ]SKXKK]]SQXWOX^]ZY\^X_WLO\]

8Y^ KVV ZY\^] K\O SXMV_NON YXVc ^RO WY\O MYWWYX YXO]

^MZ
<O]O\ÒN

_NZ
<O]O\ÒN
^MZW_b
^MZ
>-: :Y\^ =O\`SMO 7_V^SZVObO\
^MZW_b
_NZ
>-: :Y\^ =O\`SMO 7_V^SZVObO\
MYWZ\O]]XO^
^MZ
7KXKQOWOX^ ?^SVS^c
MYWZ\O]]XO^
_NZ
7KXKQOWOX^ ?^SVS^c
MYWZ\O]]XO^
^MZ
-YWZ\O]]SYX :\YMO]]
MYWZ\O]]XO^
_NZ
-YWZ\O]]SYX :\YMO]]
\TO
^MZ
<OWYÔ 4YL /X^\c
\TO
_NZ
<OWYÔ 4YL /X^\c
OMRY
!^MZ
/MRY
OMRY
!_NZ
/MRY
NS]MK\N
#^MZ
.S]MK\N ]SXU X_VV
NS]MK\N
#_NZ
.S]MK\N ]SXU X_VV
]c]^K^
^MZ
_]O\]
+M^SÒ ?]O\]
]c]^K^
_NZ
_]O\]
+M^SÒ ?]O\]
NKc^SWO
^MZ
.Kc^SWO
<0- " !
NKc^SWO
_NZ
.Kc^SWO
<0- " !
XO^]^K^
^MZ
?XK]]SQXON EaK] XO^]^K^G
[Y^N
!^MZ
[_YÔ
;_YÔ YP ^RO .Kc
[Y^N
!_NZ
[_YÔ
;_YÔ YP ^RO .Kc
W]Z
"^MZ
7O]]KQO =OXN :\Y^YMYV
W]Z
"_NZ
7O]]KQO =OXN :\Y^YMYV
MRK\QOX
#^MZ
^^c^]^ ]Y_\MO
-RK\KMÔ\ 1OXO\K^Y\
MRK\QOX
#_NZ
^^c^]^ ]Y_\MO
-RK\KMÔ\ 1OXO\K^Y\
P^ZNK^K
^MZ
0SVO >\KX]PO\ E.OPK_V^ .K^KG
P^ZNK^K
_NZ
0SVO >\KX]PO\ E.OPK_V^ .K^KG
P^Z
^MZ
0SVO >\KX]PO\ E-YX^\YVG
P]Z
_NZ
]]R
^MZ
==2 <OWYÔ 6YQSX :\Y^YMYV
]]R
_NZ
==2 <OWYÔ 6YQSX :\Y^YMYV
ÔVXO^
^MZ
>OVXO^
ÔVXO^
_NZ
>OVXO^

^MZ
KXc Z\S`KÔ WKSV ]c]ÔW

_NZ
KXc Z\S`KÔ WKSV ]c]ÔW
]W^Z
^MZ
WKSV
=SWZVO 7KSV >\KX]PO\
]W^Z
_NZ
WKSV
=SWZVO 7KSV >\KX]PO\
X]aPO
!^MZ
8=A ?]O\ =c]ÔW 0/
X]aPO
!_NZ
8=A ?]O\ =c]ÔW 0/
W]QSMZ
#^MZ
7=1 3-:
W]QSMZ
#_NZ
7=1 3-:
3iJLQD
82
W]QK_^R
W]QK_^R
N]Z
N]Z

^SWO
^SWO
\KZ
\KZ
\VZ
\VZ
Q\KZRSM]
Q\KZRSM]
XKWO
XKWO
XKWO]O\Ò\
XKWO]O\Ò\
XSMXKWO
XSMXKWO
aRYS]
aRYS]
WZWPVKQ]
WZWPVKQ]
WZW
WZW
WZW]XN
WZW]XN
XSP^Z
XSP^Z
K_NS^N
K_NS^N
^KMKM]
^KMKM]
\OWKSVMU
\OWKSVMU
VKWKSX^
VKWKSX^
bX]^SWO
bX]^SWO
NYWKSX
NYWKSX
bX]MR
bX]MR
S]SQV
S]SQV
bX]K_^R
bX]K_^R

bX]WKSV
bX]WKSV

XSWKSV
XSWKSV
KMK]
KMK]
^MZ
_NZ
^MZ
_NZ
^MZ
_NZ
!^MZ
!_NZ
"^MZ
"_NZ
#^MZ
#_NZ
^MZ
_NZ
^MZ
_NZ
^MZ
_NZ
^MZ
_NZ
^MZ
_NZ
^MZ
_NZ
^MZ
_NZ
^MZ
_NZ
!^MZ
!_NZ
"^MZ
"_NZ
#^MZ
#_NZ
^MZ
_NZ
^MZ
_NZ
^MZ
_NZ
^MZ
_NZ
^MZ
_NZ
^MZ
_NZ
^MZ
_NZ
!^MZ
!_NZ
"^MZ
"_NZ
#^MZ
#_NZ
^MZ
_NZ
^MZ
_NZ
7=1 +_^ROX^SMK^SYX
7=1 +_^ROX^SMK^SYX
.S]ZVKc =_ZZY\^ :\Y^YMYV
.S]ZVKc =_ZZY\^ :\Y^YMYV
KXc Z\S`KÔ Z\SXÔ\ ]O\Ò\
KXc Z\S`KÔ Z\SXÔ\ ]O\Ò\
>SWO ^SWO]O\Ò\
>SWO ^SWO]O\Ò\
<Y_Ô +MMO]] :\Y^YMYV
<Y_Ô +MMO]] :\Y^YMYV
\O]Y_\MO
<O]Y_\MO 6YMK^SYX :\Y^YMYV
\O]Y_\MO
<O]Y_\MO 6YMK^SYX :\Y^YMYV
1\KZRSM]
1\KZRSM]
2Y]^ 8KWO =O\Ò\
2Y]^ 8KWO =O\Ò\
2Y]^ 8KWO =O\Ò\
2Y]^ 8KWO =O\Ò\
ARY 3]
ARY 3]
ARY 3]
ARY 3]
7:7 06+1= :\Y^YMYV
7:7 06+1= :\Y^YMYV
7O]]KQO :\YMO]]SXQ 7YN_VO E\OM`G
7O]]KQO :\YMO]]SXQ 7YN_VO E\OM`G
7:7 ENOPK_V^ ]OXNG
7:7 ENOPK_V^ ]OXNG
83 0>:
83 0>:
.SQS^KV +_NS^ .KOWYX
.SQS^KV +_NS^ .KOWYX
6YQSX 2Y]^ :\Y^YMYV >+-+-=
6YQSX 2Y]^ :\Y^YMYV >+-+-=
<OWYÔ 7KSV -ROMUSXQ :\Y^YMYV
<OWYÔ 7KSV -ROMUSXQ :\Y^YMYV
37: 6YQSMKV +NN\O]] 7KSXÔXKXMO
37: 6YQSMKV +NN\O]] 7KSXÔXKXMO
B8= >SWO :\Y^YMYV
B8= >SWO :\Y^YMYV
.YWKSX 8KWO =O\Ò\
.YWKSX 8KWO =O\Ò\
B8= -VOK\SXQRY_]O
B8= -VOK\SXQRY_]O
3=3 1\KZRSM] 6KXQ_KQO
3=3 1\KZRSM] 6KXQ_KQO
B8= +_^ROX^SMK^SYX
B8= +_^ROX^SMK^SYX
KXc Z\S`KÔ Ô\WSXKV KMMO]]
KXc Z\S`KÔ Ô\WSXKV KMMO]]
B8= 7KSV
B8= 7KSV
KXc Z\S`KÔ PSVO ]O\`SMO
KXc Z\S`KÔ PSVO ]O\`SMO
83 7+36
83 7+36
+-+ =O\`SMO]
+-+ =O\`SMO]
3iJLQD
83
aRYS]
aRYS]
MY`SK
MY`SK
^KMKM]N]
^KMKM]N]
][VXO^
][VXO^
LYY^Z]
LYY^Z]
LYY^ZM
LYY^ZM
^P^Z
^P^Z
QYZRO\
QYZRO\
XO^\T]
XO^\T]
XO^\T]
XO^\T]
XO^\T]
XO^\T]
XO^\T]
XO^\T]

NOY]
NOY]

Ò^^MZ
Ò^^MZ
PSXQO\
PSXQO\
R^^Z
R^^Z
aaa
aaa
aaaR^^Z
aaaR^^Z
RY]^]X]
RY]^]X]
bPO\
bPO\
WS^WVNO`
WS^WVNO`
M^P
M^P
WS^WVNO`
WS^WVNO`
WPMYLYV
WPMYLYV

UO\LO\Y]
UO\LO\Y]
]_WS^^Q
]_WS^^Q
^MZ
_NZ
^MZ
_NZ
^MZ
_NZ
^MZ
_NZ
!^MZ
!_NZ
"^MZ
"_NZ
#^MZ
#_NZ
!^MZ
!_NZ
!^MZ
!_NZ
!^MZ
!_NZ
!^MZ
!_NZ
!^MZ
!_NZ
!^MZ
!_NZ
! ^MZ
! _NZ
!!^MZ
!!_NZ
!"^MZ
!"_NZ
!#^MZ
!#_NZ
"^MZ
"_NZ
"^MZ
"_NZ
"^MZ
"_NZ
"^MZ
"_NZ
"^MZ
"_NZ
"^MZ
"_NZ
"^MZ
"_NZ
"^MZ
"_NZ
" ^MZ
" _NZ
"!^MZ
"!_NZ
""^MZ
""_NZ
"#^MZ
"#_NZ
aRYS]
aRYS]
KXc Z\S`KÔ
KXc Z\S`KÔ
KXc Z\S`KÔ
KXc Z\S`KÔ
Ò^^MZ
Ò^^MZ
0SXQO\
0SXQO\
-YWW_XSMK^SYX] 3XÔQ\K^Y\ -3

-YWW_XSMK^SYX] 3XÔQ\K^Y\ -3
>+-+-=.K^KLK]O =O\`SMO
>+-+-=.K^KLK]O =O\`SMO
9\KMVO =;68/>
9\KMVO =;68/>
,YY^]^\KZ :\Y^YMYV =O\Ò\
,YY^]^\KZ :\Y^YMYV =O\Ò\
,YY^]^\KZ :\Y^YMYV -VSOX^
,YY^]^\KZ :\Y^YMYV -VSOX^
>\S`SKV 0SVO >\KX]PO\
>\S`SKV 0SVO >\KX]PO\
1YZRO\
1YZRO\
<OWYÔ 4YL =O\`SMO
<OWYÔ 4YL =O\`SMO
<OWYÔ 4YL =O\`SMO
<OWYÔ 4YL =O\`SMO
<OWYÔ 4YL =O\`SMO
<OWYÔ 4YL =O\`SMO
<OWYÔ 4YL =O\`SMO
<OWYÔ 4YL =O\`SMO
NSKV Y_^ ]O\`SMO
NSKV Y_^ ]O\`SMO
.S]^\SL_ÔN /bÔ\XKV 9LTOM^ =^Y\O
.S]^\SL_ÔN /bÔ\XKV 9LTOM^ =^Y\O
<4/ ]O\`SMO
<4/ ]O\`SMO
AY\VN ASNO AOL 2>>:

AY\VN ASNO AOL 2>>:
AY\VN ASNO AOL 2>>:
AY\VN ASNO AOL 2>>:
AY\VN ASNO AOL 2>>:
AY\VN ASNO AOL 2>>:
29=>= 8KWO =O\Ò\
29=>= 8KWO =O\Ò\
B0/< ?^SVS^c
B0/< ?^SVS^c
73> 76 .O`SMO
73> 76 .O`SMO
-YWWYX >\KMO 0KMSVS^c
-YWWYX >\KMO 0KMSVS^c
73> 76 .O`SMO
73> 76 .O`SMO
7SM\Y 0YM_] -YLYV
7SM\Y 0YM_] -YLYV
KXc Z\S`KÔ Ô\WSXKV VSXU
KXc Z\S`KÔ Ô\WSXKV VSXU
5O\LO\Y]
5O\LO\Y]
=?73> >OVXO^ 1KÔaKc
=?73> >OVXO^ 1KÔaKc
3iJLQD
84
NX]Sb
NX]Sb
WS^NY`
WS^NY`
XZZ
XZZ
NMZ
NMZ
YLTMKVV
YLTMKVV
]_ZN_Z
]_ZN_Z
NSbSO
NSbSO
]aSP^\`P
]aSP^\`P
^KMXOa]
^KMXOa]
WO^KQ\KW
WO^KQ\KW
XOaKMM^
RY]^XKWO]
S]Y^]KZ
M]XO^X]
M]XO^X]
\ÔVXO^
\ÔVXO^
ZYZ
ZYZ
ZYZ
ZYZ
]_X\ZM
]_X\ZM
K_^R
]P^Z
__MZZK^R
XX^Z
X^Z
X^Z
XO^LSY]X]
XO^LSY]X]
XO^LSY]NQW
XO^LSY]NQW
XO^LSY]]]X
XO^LSY]]]X
SWKZ
SWKZ
]XWZ
]XWZ^\KZ
MWSZWKX
MWSZWKX
MWSZKQOX^
MWSZKQOX^
bNWMZ
bNWMZ
XOb^]ÔZ
XOb^]ÔZ
#^MZ
#_NZ
#^MZ
#_NZ
#^MZ
#_NZ
#^MZ
#_NZ
#^MZ
#_NZ
#^MZ
#_NZ
# ^MZ
# _NZ
#!^MZ
#!_NZ
#"^MZ
#"_NZ
##^MZ
##_NZ
^MZ
^MZ
^MZ
^MZ
_NZ
!^MZ
!_NZ
#^MZ
#_NZ
^MZ
_NZ
^MZ
_NZ
^MZ
^MZ
!^MZ
#^MZ
^MZ
_NZ
!^MZ
!_NZ
"^MZ
"_NZ
#^MZ
#_NZ
^MZ
_NZ
_NZ
_NZ
^MZ
_NZ
^MZ
_NZ
!!^MZ
!!_NZ
!"^MZ
!"_NZ
.8=3B =OM_\S^ +^^\SL_Ô >YUOX 7KZ

.8=3B =OM_\S^ +^^\SL_Ô >YUOX 7KZ
73> .YÒ\ =ZYYVO\
73> .YÒ\ =ZYYVO\
8OâY\U :\SX^SXQ :\Y^YMYV
8OâY\U :\SX^SXQ :\Y^YMYV
.O`SMO -YX^\YV :\Y^YMYV
.O`SMO -YX^\YV :\Y^YMYV
>S`YVS 9LTOM^ .S]ZK^MRO\
>S`YVS 9LTOM^ .S]ZK^MRO\
=?:.?:
=?:.?:
.3B3/ :\Y^YMYV =ZOMSPSMK^SYX
.3B3/ :\Y^YMYV =ZOMSPSMK^SYX
=aSP^ <OWYÔ @S\^_\KV 0SVO :\Y^YMYV
=aSP^ <OWYÔ @S\^_\KV 0SVO :\Y^YMYV
>+- 8Oa]
>+- 8Oa]
7O^KQ\KW <OVKc
7O^KQ\KW <OVKc
E_XK_^RY\SdON _]OG
RY]^XKWO
_]_KVVc P\YW ]\SXSM
^]KZ
ZK\^ YP 3=9./
M]YX]
KV]Y _]ON Lc -=9 XKWO ]O\Ò\
M]YX]
<OWYÔ >OVXO^
ZY]^YPPSMO :9: Ò\]SYX
:9: Ò\]SYX
^KZ SNOX^ K_^ROX^SMK^SYX

\OKNXOa] _X^Z
?=/8/> 8Oa] >\KX]PO\ :\Y^YMYV
8OâY\U >SWO :\Y^YMYV

8/>,39= 8KWO =O\`SMO
8/>,39= .K^KQ\KW =O\`SMO
8/>,39= ]O]]SYX ]O\`SMO
SWKZ SWKZ
SWKZ SWKZ

]XWZ^\KZ

3XÔ\SW 7KSV +MMO]] :\Y^Y `

=SWZVO 8O^ 7QW^ :\Y^Y
>\KZ] PY\ =87:
3=9 WQW^ YÒ\ 3: -79>
B .S]ZVKc 7Q\ -YX^\YV :\Y^Y

8OB>=ÔZ 8Ob^=ÔZ 8OB>=ÔZ aSXNYa
8OB>=ÔZ 8Ob^=ÔZ ]O\Ò\
3iJLQD
85
LQZ
!#^MZ
,Y\NO\ 1KÔaKc :\Y^Y
LQZ
!#_NZ
Z\Y]ZO\Y
#^MZ
-VSPP 8O_WKXv] :\Y]ZO\Y
Z\Y]ZO\Y
#_NZ
S\M
#^MZ
3XÔ\XO^ <OVKc -RK^
S\M
#_NZ
]W_b
##^MZ
=87: ?XSb 7_V^SZVObO\
]W_b
##_NZ
K^\^WZ
^MZ
+ZZVO>KVU \Y_^SXQ
K^\^WZ
_NZ
K^XLZ
^MZ
+ZZVO>KVU XKWO LSXNSXQ
K^XLZ
_NZ
KÔMRY
^MZ
+ZZVO>KVU OMRY
KÔMRY
_NZ
K^dS]
^MZ
+ZZVO>KVU dYXO SXPY\WK^SYX
K^dS]
_NZ
d#
^MZ
aKS]
83=9 D# NK^KLK]O
d#
_NZ
aKS]
SZb
^MZ
3:B
SZb
_NZ
SWKZ
^MZ
3XÔ\KM^SÒ 7KSV +MMO]]
SWKZ
_NZ
:\Y^YMYV `
_VS]^]O\` !^MZ
?83B 6S]^]O\`
_VS]^]O\` !_NZ
R^^Z]
^MZ
R^^Z Z\Y^YMYV YÒ\ >6===6
R^^Z]
_NZ
R^^Z Z\Y^YMYV YÒ\ >6===6

?83B ]ZOMSPSM ]O\`SMO]

ObOM
^MZ
LSPP
_NZ
MYW]K^
VYQSX
^MZ
aRY
_NZ
aRYN
]ROVV
^MZ
MWN
XY ZK]]aY\N] _]ON
]c]VYQ
_NZ
Z\SXÔ\
^MZ
]ZYYVO\
VSXO Z\SXÔ\ ]ZYYVO\
^KVU
!_NZ
X^KVU
"_NZ
\Y_Ô
_NZ
\Y_Ô\ \Y_ÔN
<3:
^SWON
_NZ
^SWO]O\Ò\
ÔWZY
^MZ
XOaNKÔ
MY_\SO\
^MZ
\ZM
MYXPO\OXMO ^MZ
MRK^
XO^XOa]
^MZ
\OKNXOa]
XOâKVV
_NZ
PY\ OWO\QOXMc L\YKNMK]^]
__MZ
^MZ
__MZN
__MZ NKOWYX
\OWYÔP]
^MZ
\P]I]O\Ò\ \P]
,\_XRYPP \OWYÔ PSVO]c]ÔW
UVYQSX
^MZ
5O\LO\SdON \VYQSXv `
U]ROVV
^MZ
5O\LO\SdON \]Rv `
UO\LO\Y]KNW
!#^MZ
5O\LO\Y] UKNWSXv `

aOL]Ô\
! ^MZ
8OâY\U NSM^SYXK\c
aOL]Ô\
! _NZ

0\YW +]]SQXON 8_WLO\]vv$

( >RO <OQS]Ô\ON :Y\^] K\O XY^ MYX^\YVVON Lc ^RO 3+8+ KXN YX WY]^ ]c]ÔW]
( MKX LO _]ON Lc Y\NSXK\c _]O\ Z\YMO]]O] Y\ Z\YQ\KW] ObOM_ÔN Lc Y\NSXK\c
3iJLQD
86
( _]O\]

( :Y\^] K\O _]ON SX ^RO >-: E G ^Y XKWO ^RO OXN] YP VYQSMKV
( MYXXOM^SYX] aRSMR MK\\c VYXQ Ô\W MYXÒ\]K^SYX] 0Y\ ^RO Z_\ZY]O YP
( Z\Y`SNSXQ ]O\`SMO] ^Y _XUXYaX MKVVO\] K ]O\`SMO MYX^KM^ ZY\^ S]
( NOPSXON >RS] VS]^ ]ZOMSPSO] ^RO ZY\^ _]ON Lc ^RO ]O\Ò\ Z\YMO]] K] S^]
( MYX^KM^ ZY\^ ARSVO ^RO 3+8+ MKX XY^ MYX^\YV _]O] YP ^RO]O ZY\^] S^
( NYO] \OQS]Ô\ Y\ VS]^ _]O] YP ^RO]O ZY\^] K] K MYX`SOXOXMO ^Y ^RO
( MYWW_XS^c

SXQ\O]VYMU ^MZ
SXQ\O]VYMU _NZ
Z\Y]ZO\YXZ ^MZ
:\Y]ZO\Y XYXZ\S`SVOQON
Z\Y]ZO\YXZ _NZ
\PO
^MZ
<KNSY 0\OO /^RO\XO^
\PO
_NZ
+M^_KVVc _]O] ?.: YXVc

5O\LO\Y] :\YTOM^ +^ROXK73> ]O\`SMO]
8YÔ ^RK^ ^RO]O K\O PY\ 5O\LO\Y] ` KXN K\O _XYPPSMSKV =SÔ] \_XXSXQ
` ]RY_VN _XMYWWOX^ ^RO]O KXN MYWWOX^ Y_^ ^RO ` OX^\SO] KLYÒ

UO\LO\Y] !_NZ
UNM 5O\LO\Y] ]O\Ò\ _NZ
UO\LO\Y] !^MZ
UNM 5O\LO\Y] ]O\Ò\ ^MZ
U\L_ZNKÔ ! ^MZ
U\OQ 5O\LO\Y] \OQS]^\K^SYX
UZK]]aN
! ^MZ
UZaN 5O\LO\Y] ZK]]aN
UVYQSX
^MZ
5O\LO\Y] \VYQSX
OUVYQSX
^MZ
5O\LO\Y] OXM\cZÔN \VYQSX
U]ROVV
^MZ
U\MWN 5O\LO\Y] \OWYÔ ]ROVV

?XYPPSMSKV L_^ XOMO]]K\c PY\ 8O^,=. ]O\`SMO]

]XZZ
^MZ
=SWZVO 8OâY\U :KQSXQ :\Y^YMYV
]_ZPSVO]\` "!^MZ
=?: ]O\Ò\
]_ZPSVONLQ !^MZ
=?: NOL_QQSXQ
RcVKPKb
#^MZ
2cVK0+B MVSOX^]O\Ò\ Z\Y^YMYV
KbXO^
#^MZ
+ZZVSb =O\Ò\
KKQâc
#^MZ
+ZZVSb +XcaK\O
\ZVKc
_NZ
R^^Z\WKX
!^MZ
WKX ^Y R^WV YX ^RO PVc
][V
!^MZ
KNKLK]N \OWYÔ ][V
L^b
^MZ MOZ^N
`LYbN
^MZ
PY\ `LYb NKOWYX
`LYbN
_NZ
S]NXVYQ
^MZ
S]NXVYQ
68B.,7=
^MZ
WSNSXO^
^MZ
WSNSXO^N

]O\`SMO] PY\ RZ OVY[_OXMO

\_X]\`
"^MZ
OVY[]N
"^MZ
OVY[NL
"^MZ
OVY[NL
"^MZ
]YPâK\O

2:
2:
2:
2:
/VY[_OXMO
/VY[_OXMO
/VY[_OXMO
/VY[_OXMO
<?8=<@ ASXNYa] SXÔQ\K^SYX

+ OVY[]N ]O\Ò\
+ NK^K LK]O ]O\Ò\
+ /69;., ]O\Ò\

]O\`SMO] PY\ KWKXNK LKMU_Z ]YPâK\O
3iJLQD
87

KWKXNK
KWKXNKSNb
KWSNb^KZO
"_NZ
"^MZ
"^MZ

]O\`SMO] PY\ \KNS_] ]YPâK\O

\KNS_]
_NZ
\KNS_]N
\KNKMM^
_NZ

WKUO KZZVO ^KVU WY\O P\SOXNVc

\^WZ
NNZ
<Y_^SXQ >KLVO 7KSXÔXKXMO :\Y^YMYV
XLZ
NNZ
8KWO ,SXNSXQ :\Y^YMYV
OMRY
NNZ
+ZZVO>KVU /MRY :\Y^YMYV
dSZ
NNZ
DYXO 3XPY\WK^SYX :\Y^YMYV

+ZZVO^KVU

KPZYÒ\^MZ "^MZ
KPZYÒ\^MZ "_NZ
+0: YÒ\ >-:

+0: YÒ\ ?-:

7c=;6 .KOWYX

Wc][V
^MZ
Wc][V
_NZ

^RO \]cXM NKOWYX

\]cXM
"!^MZ

XO^ZVKX

XO^ZVKX
^MZ

]aK^ S] ^RO =KWLK AOL +NWSXS]^\K^SYX >YYV

]aK^
#^MZ

/X^\SO] PY\ 3,7 ., .K^KLK]O

NLMNLSX]^
^MZ
-YXXOM^SYX ZY\^ PY\ ., SX]^KXMO NLSX]^
NLSNLSX]^
^MZ
3XÔ\\_Z^ ZY\^ PY\ ., SX]^KXMO NLSX]^

/X^\c PY\ 7SWO\ NK^KLK]O

WSWO\
^MZ
7SWO\ .K^KLK]O =O\Ò\
3iJLQD
88
3iJLQD
89
+8/B9-$
EY ]WLYVY
]M\SZ^G
WK\MK K MYX^SX_KY NK VSXRK% Y] KMOX^Y] PY\KW ]_Z\SWSNY] NY
LSX]R
-YX^\YVK MY\O] XK ÔVK
LYVN'^Z_^ ]W]Y
YPPLYVN'^Z_^ \W]Y
,96.98']O^Ô\W LYVN YX
,96.900']O^Ô\W LYVN YPP
1<//8']O^Ô\W PY\OQ\Y_XN Q\OOX
./0']O^Ô\W NOPK_V^
MVOK\
PSW

3XÔ\PKMO
-YVY[_O K[_S K SXÔ\PKMO NO]OTKNK
O^R O^R ZZZ O^M
69-+630'O^R

6YMKVSdKMKY NY SZMRKSX]
3:-2+38=']LSXSZMRKSX]
<O^S\K OXNO\OMY] K ZK\^S\ NY SPMYXPSQ 8KY KVÔ\O
69-+63:'SPMYXPSQ 69-+630 f Q\OZ SXO^ f M_^ N $ P f M_^ N F P
69-+67+=5'SPMYXPSQ 69-+630 f Q\OZ 7K]U f M_^ N $ P
69-+68/>'69-+63:69-+67+=5
OMRY bb
OMRY eLYVNgE0S\OaKVVGeYPPLYVNg 3:$ 69-+68/>
</79>/8/>'

6SWZK ^YNK] K] \OQ\K] NO PS\OaKVV PVKQ v0v
OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg 6SWZKXNY \OQ\K]
:KMYÔ] [_O MROQKW INO PY\KI NK \ONO
3:-2+38= 0 SXZ_^
OMRY X
3iJLQD
90
:KMYÔ] [_O ]KOW NK SX^\KXO^

3:-2+38= 0 Y_^Z_^
OMRY X
1<//8
OMRY >O\WSXKNY
./0

OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg 3XÔ\PKMO vVYv
3:-2+38= + SXZ_^ S VY ] N T +--/:>
3:-2+38= + Y_^Z_^ S VY ] N T +--/:>
OMRY X
1<//8
OMRY >O\WSXKNY
./0

-YXPSQ_\K ÔVXO^ AAA O 0>: MYW _W Z\KdY WSXSWY WKXSZ_VKXNY Y] LS^] NO >9= NY
ZKMYÔ
+>/8-+9 .OÒ]O Ô\ RKLSVS^KNY XY UO\XOV K YZMKY -98031I3:I<9?>/I>9=
@O\ 3ZMRKSX] 2Ya>Y Z "
9] MRKWKNY] >9= LS^] KPO^KW K PY\WK MYWY Y] ZKMYÔ] ]KY ^\K^KNY] +]
MYXPSQ_\KMYO] ZY]]SÒS] ]KY$
vWKbSW_W NOVKcv
vWKbSW_W ^R\Y_QRZ_^v
vWKbSW_W \OVSKLSVS^cv
vWSXSW_W MY]^v
OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg >cZO 9P =O\`SMO PVKQ]
3:-2+38= + Y_^Z_^ Z ^MZ N aaa ^ b b
3:-2+38= + Y_^Z_^ Z ^MZ N ÔVXO^ ^ b b
3:-2+38= + Y_^Z_^ Z ^MZ N P^Z ^ b b
OMRY X
-YXPSQ_\K P^ZNK^K ZK\K Y WKbSWY NO v]KSNKv
3:-2+38= + Y_^Z_^ Z ^MZ N P^ZNK^K ^ b b"
OMRY X
1<//8
OMRY >O\WSXKNY
./0

:YO \OQ\K] ZK\K ZO\WS^S\ MYXObYO] NO \ONO] O RY]^] MYXPSKÒS]
OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg <ONO] MYXPSKÒS]
3:-2+38= + SXZ_^ ] E3:] RY]^XO^G N 69-+68/> &ZY\^]( T +--/:>
OMRY X
3iJLQD
91
1<//8
OMRY >O\WSXKNY
./0

:YO \OQ\K] ZK\K SWZONS\ MYXObYO] MYW \ONO] O RY]^] XKYMYXPSKÒS] 9]
ZKMYÔ] ]KY \OQS]^\KNY]
OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg <ONO] XKYMYXPSKÒS]
3:-2+38= + SXZ_^ V ] E3:] RY]^XO^G N 69-+68/> &ZY\^]( T ./8C
OMRY X
<OQ\K ZK\K SWZONS\ K^K[_O] 3-7:
3:-2+38= + SXZ_^ V L S 69-+630 Z SMWZ ] E3:]G N 69-+68/> T
./8C
OMRY X
1<//8
OMRY >O\WSXKNY
./0

OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg =O\`SMY] NSÒ\]Y]
3:-2+38= + SXZ_^
+--/:>
3:-2+38= + SXZ_^
+--/:>
3:-2+38= + SXZ_^
+--/:>
3:-2+38= + SXZ_^
+--/:>
OMRY X
$ T
WKSVMSZ]QKY\QL\ N 69-+68/> $ T
aaaMSZ]QKY\QL\ N 69-+68/> $ T
Z\YbcMSZ]QKY\QL\ N 69-+68/> $ T
Z ^MZ ] KVZRKMSZ]QKY\QL\ N 69-+68/>

Z ^MZ ]
Z ^MZ ]
Z ^MZ ]
:Y]]Y _]K\ Y] OXNO\OMY] KLKSbY] ZK\K WKXOTK\ WO_ .8=

.8=29=>' ZY\ ObOWZVY
3:-2+38= + SXZ_^ Z ^MZ ] .8=29=> N 69-+68/> $ T
3:-2+38= + SXZ_^ Z ^MZ ] .8=29=> N 69-+68/> $ T
OMRY X
+--/:>
+--/:>
?]O O]]O O]ZKMY ZK\K XOQK\ KMO]]Y K \ONO K WK[_SXK Y_ Q\_ZY NO WK[_SXK]
3:-2+38= + SXZ_^ V ] E3:]G N 69-+68/> T ./8C
OMRY X
1<//8
OMRY >O\WSXKNY
./0

/]^K ZK\Ô XOQK KMO]]Y K ]O\`SMY] O ZY\^K] ]KLSNKWOXÔ Z\YLVOWK^SMK]
ZK\K PY\K NK \ONO VYMKV
3iJLQD
92
OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg :Y\^K] XOQKNK]

8O^,/?3=KWLK
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> # T ./8C
3:-2+38= + SXZ_^ Z _NZ ] </79>/8/> N 69-+68/> # T ./8C
OMRY X
7SM\Y]YP^ =;6
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T ./8C
3:-2+38= + SXZ_^ Z _NZ ] </79>/8/> N 69-+68/> T ./8C
OMRY X
:Y]^Q\O] =;6
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T ./8C
3:-2+38= + SXZ_^ Z _NZ ] </79>/8/> N 69-+68/> T ./8C
OMRY X
8OâY\U 0SVO =c]ÔW 80=
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> # T ./8C
3:-2+38= + SXZ_^ Z _NZ ] </79>/8/> N 69-+68/> # T ./8C
OMRY X
BASXNYa] .S]ZVKc] $$
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> ###$ T ./8C
3:-2+38= + SXZ_^ Z _NZ ] </79>/8/> N 69-+68/> ###$ T ./8C
OMRY X
B 0YX^ =O\Ò\ $$
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> ! T ./8C
3:-2+38= + SXZ_^ Z _NZ ] </79>/8/> N 69-+68/> ! T ./8C
OMRY X
,KMU 9\SPSMO <OQS]^\KNY 0VKQ V
3:-2+38= + SXZ_^ V Z ^MZ ] </79>/8/> N 69-+68/> ! T ./8C
3:-2+38= + SXZ_^ V Z _NZ ] </79>/8/> N 69-+68/> ! T ./8C
OMRY X
8O^,_] <OQS]^\KNY 0VKQ V
3:-2+38= + SXZ_^ V Z ^MZ ] </79>/8/> N 69-+68/> $ T
3:-2+38= + SXZ_^ V Z _NZ ] </79>/8/> N 69-+68/> $ T
OMRY X
./8C
./8C
1<//8
OMRY >O\WSXKNY
./0

>KS] ZY\^K] ]KY KLO\^K] ZK\K ZO\WS^S\ ]Y[_OÔ] M\SKNY ZY\ MYXObYO]
ZO\WS^SNK] ZOVY SZMRKSX]
OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg :Y\^K] vKV^K]v O XKYZ\S`SVKQSKNK]
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> $ T
3:-2+38= + SXZ_^ Z _NZ ] </79>/8/> N 69-+68/> $ T
OMRY X
+--/:>
+--/:>

3iJLQD
93
1<//8
OMRY >O\WSXKNY
./0

=O\`SMY] NO MK\KÔ\ LK]SMY
OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg =O\`SMY]

P^ZNK^K KXN P^Z

3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T +--/:>
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T +--/:>
OMRY X
]]R
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T +--/:>
OMRY X
ÔVXO^
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T +--/:>
OMRY X
]W^Z
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T +--/:>
OMRY X
.8=
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T +--/:>
3:-2+38= + SXZ_^ Z _NZ ] </79>/8/> N 69-+68/> T +--/:>
OMRY X
.2-: NY VKNY NK <ONO 6YMKV ^Y WKUO *2YWO .2-: aY\U ! "
3:-2+38= + SXZ_^ S 69-+630 Z _NZ ] </79>/8/> N !
T +--/:>
3:-2+38= + Y_^Z_^ S 69-+630 Z _NZ ] </79>/8/> N "
T +--/:>
OMRY X
R^^Z "
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> " T +--/:>
OMRY X
:9:
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T +--/:>
OMRY X
SNOX^N
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T </4/->
OMRY X
XX^Z #
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> # T +--/:>
OMRY X
R^^Z]
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T +--/:>
3iJLQD
94
OMRY X
3-; =O\`SMO]
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T +--/:>
OMRY X
1<//8
OMRY >O\WSXKNY
./0

OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg <OQ\K] 3-7:
?]O S]]Y ZK\K XOQK\ K^K[_O] 3-7: NO OXNO\OMY] O]ZOMSPSMY]
3:-2+38= + SXZ_^ L S /B>/<8+630 Z SMWZ ] &KNN\O]]( N T
OMRY X
./8C
:O\WSÔ K MROQKNK NO ZKMYÔ] 3-7:

3:-2+38= + SXZ_^ Z SMWZ ] </79>/8/> N 69-+68/> T +--/:>
3:-2+38= + SXZ_^ Z SMWZ ] </79>/8/> N 69-+68/> T +--/:>
OMRY X
:O\WSÔ K ]KSNK NO ZKMYÔ] 3-7:
3:-2+38= + Y_^Z_^ Z SMWZ ] 69-+68/> N </79>/8/> T +--/:>
3:-2+38= + Y_^Z_^ Z SMWZ ] 69-+68/> N </79>/8/> T +--/:>
OMRY X
1<//8
OMRY >O\WSXKNY
./0

-YXPSQ_\K ZYVS^SMK ZKN\KY
3:-2+38= + SXZ_^ T ./8C
3:-2+38= + Y_^Z_^ T +--/:>
OMRY
,96.98
OMRY eLYVNgE0S\OaKVVGeYPPLYVNg /]^KLOVOMSWOX^Y NO PS\OaKVV
,96.900
OMRY bb
./0
MYWZVO^Y
3iJLQD
95
+XObY.$
K 9 MKLOKVRY 3:$

! " # ! " # ! " #

f@O\]SYXf 326 f>cZO YP =O\`SMOf
>Y^KV 6OXQ^R
f

f
3NOX^SPSMK^SYX
f0VKQ]f
0\KQWOX^ 9PP]O^
f

f >SWO ^Y 6SÒ f
:\Y^YMYV f
2OKNO\ -ROMU]_W
f

f
=Y_\MO +NN\O]]
f

f
.O]^SXK^SYX +NN\O]]
f

f
9Z^SYX]
f
:KNNSXQ
f

K 9 MKLOKVRY 3-7:

! " # ! " # ! " #

f
>cZO
f
-YNO
f
-ROMU]_W
f

f
_X_]ON
f

f
3XÔ\XO^ 2OKNO\ LS^] YP 9\SQSXKV .K^K .K^KQ\KW
f

-KWZY] 3-7:$
>cZO

-YNO

'
'
'
'
'
'
XO^ _X\OKMRKLVO%
RY]^ _X\OKMRKLVO%
Z\Y^YMYV _X\OKMRKLVO%
ZY\^ _X\OKMRKLVO%
P\KQWOX^K^SYX XOONON KXN .0 ]O^%
]Y_\MO \Y_Ô PKSVON
3iJLQD
96
K 9 MKLOKVRY >-:$

! " # ! " # ! " #

f
=Y_\MO :Y\^
f
.O]^SXK^SYX :Y\^
f

f
=O[_OXMO 8_WLO\
f

f
+MUXYaVONQWOX^ 8_WLO\
f

f .K^K f
f?f+f:f<f=f0f
f
f 9PP]O^f <O]O\ÒN f<f-f=f=fCf3f
ASXNYa
f
f
f
f1f5f2f>f8f8f
f

f
-ROMU]_W
f
?\QOX^ :YSXÔ\
f

f
9Z^SYX]
f
:KNNSXQ
f

f
NK^K
f

K 9 MKLOKVRY ?.:$

! "

f
=Y_\MO
f .O]^SXK^SYX f
f
:Y\^
f
:Y\^
f

f
f
f
f
6OXQ^R
f
-ROMU]_W
f

f
f
NK^K YMÔ^]

3iJLQD
97
K 9 MKLOKVRY +<:

! " # ! " # ! " #

f
>cZO 2K\NaK\O
f
>cZO :\Y^YMYV
f

f
26/8
f :6/8
f
9ZO\K^SYX
f

f
=/8./< 2+
f

f
=/8./< 2+
f
=/8./< 3:
f

f
=/8./< 3:
f
>+<1/> 2+
f

f
>+<1/> 2+
f

f
>+<1/> 3:
f

3iJLQD
98
+XObY/$*
-YWY _W ZKMYÔ `SKTK K^\K`] NO _W KZVSMK^S`Y MVSOXÔ K^ Y RY]^ ]O\`SNY\)
8Y NSKQ\KWK KLKSbY X] YL]O\`KWY] _W RY]^ MVSOXÔ KL\SXNY _WK MYXObY `SK \VYQSX
MYW Y_^\Y RY]^ ]O\`SNY\$
0YXÔ$ >-:3: KXN .K^K -YWW_XSMK^SYX] +NWSXS]^\K^SYX 1_SNO =_X 7SM\Y]c]ÔW]

3XM YM^YLO\ ##" Z
3iJLQD
99
,SLVSYQ\KPSKQO\KV
+<8/>> 7 O^ KVSS .O]ÒXNKXNY Y >-:3: <SY NO 4KXOS\Y ON -KWZ_] ##!
,/669@38 = .OPOXNSXQ +QKSX]^ =O[_OXMO 8_WLO\ +^^KMU] <0- #"
IIIIIIIIIII =OM_\S^c :\YLVOW] SX ^RO
-YWW_XSMK^SYX <O`SOa `YV # X #"#
>-:3:
:\Y^YMYV
=_SÔ
-YWZ_Ô\
-97/< . / 3XÔ\VSQKY OW <ONO MYW >-:3: @YV_WO 3$ :\SXMZSY] :\Y^YMYVY] O

+\[_SÔ^_\K <SY NO 4KXOS\Y ON -KWZ_] ONSY ##"
-<3=-?969 : .S]^\SL_ÔN .OXSKV YP =O\`SMO >\SX >\SLO 0VYYN 8OâY\U >\SLO
0VYYN 8OâY\U KXN =^KMROVN\KR^ -3+-# .OZK\^KWOX^ YP /XO\Qc 6686
POL\_K\c
.+A=98 > 8/> 29A>9 ` WK\MR ##!
.C=98 : .SMSYX\SY NO <ONO] <SY NO 4KXOS\Y ON -KWZ_] 8YÒVV :\O]] ##
0+<7/< . ASO^]O @ 3WZ\Y`SXQ ^RO =OM_\S^c YP cY_\ =SÔ Lc ,\OKUSXQ SX^Y S^
## PYXÔ$ vP^Z$P^ZaSX^_OXVv
0/8D3 5 A</=53 . 6SX_b =OM_\S^c29A>9 `# WKc ##"
0<+=/< , =SÔ =OM_\S^c 2KXNLYYU <0-
2?8> < 3XÔ\XO^3X^\KXO^ 0S\OaKVV =OM_\S^c :YVSMc
>\KX]KM^SYX =O\`SMO] -YWZ_Ô\ -YWW_XSMK^SYX] ##"
+\MRSMÔ^S\O
KXN
7+<-/69 + 3X^\KXO^ OW +WLSOXÔ 6SX_b <SY NO 4KXOS\Y ,<+=:9<> ###

7?-2=/6 < ]P 0S\OaKVV =YPâK\O @O\]SYX POL ##!
89<>2-?>> = -YWY .OÔM^K\ 3X`K]Y OW <ONO ?W 1_SK ZK\K +XKVS]^K] <SY NO
4KXOS\Y ON -SXMSK 7YNO\XK
963@/3<+ A 4 2KMUO\$ 3X`K]Y O :\YÔY 0VY\SKXZYVS] @S]_KV ,YYU] ###
:9=>/6 4 ON >\K]WS]]SYX -YX^\YV :\Y^YMYV .+<:+ 3XÔ\XO^ :\YQ\KW :\Y^YMYV
=ZOMSPSMK^SYX <0- !#
:9=>/6 4 ?]O\ .K^KQ\KW :\Y^YMYV <0- ! "
<?==/6 : 6SX_b 3:-2+38=29A>9 ` TKX ###
=-9 9ZOX=O\Ò\q 3XÔ\XO^ =O\`SMO] ` WKc ##!
=/<C : 0O\\KWOX^K] :YNO\Y]K] ZK\K <ONO] OW 6SX_b <SY NO 4KXOS\Y -SXMSK
7YNO\XK ##"
=23797?<+ > 7+<5900 4 -YX^\K+^K[_O$ K 2S]^\SK NK -KZ^_\K NY :S\K^K
-SLO\X^SMY WKS] :\YM_\KNY NY] /?+ =Y :K_VY -YWZKXRSK NK] 6O^\K] ##
=?8 7SM\Y]c]ÔW]q >-:3: KXN .K^K -YWW_XSMK^SYX] +NWSXS]^\K^SYX 1_SNO :KVY +V^Y
YM^ ##"
3iJLQD
100
=_=/ 6SX_bq 3X]^KVVK^SYX -YXPSQ_\K^SYX KXN 0S\]^ =ÔZ] 8\XLO\Q ONSY
3iJLQD
101
Sobre o autor da Apostila

(VWDDSRVWLODpGHDXWRULDGH5HQDWR0DUWLQLUPDUWLQL#FLSVJDRUJEU!GRXWRUHP)LORVRILD
SHOD 3RQWLItFLD 8QLYHUVLGDGH &DWyOLFD GR 5LR GH -DQHLUR RQGH OHFLRQRX DV GLVFLSOLQDV GH
)LORVRILD GD &LrQFLD H /yJLFD SDUD R &7& )RL EROVLVWD GR &13T DR ORQJR GRV DQRV SyV
JUDGXDomR 8VXiULR H HQWXVLDVWD Ki PDLV GH DQRV GR /LQX[ PDV HVVHQFLDOPHQWH FRPR
XP 6LVWHPD 2SHUDFLRQDO YROWDGR SDUD 5HGH H LJXDOPHQWH DSWR DR FRQKHFLPHQWR H DRV
GHVDILRVDFDGrPLFRVHSHGDJyJLFRVGHQRVVRSDtV
'HVHQYROYH QR PRPHQWR XP VLWH VREUH 6HJXUDQoD HP 5HGHV /LQX[ TXH VHUi KRVSHGDGR
SHOR&,36*$7DPEpPSDUWLFLSDGRGHVHQYROYLPHQWRGHXP
VQLIIHU
R$36VRERVWHUPRV
GD*18*3/FRP&KULVWLDQ6FKXOWH
1XPD HVFROD GD 6HFUHWDULD GH (GXFDomR GR 5LR GH -DQHLUR HP 1LWHUyL GHVHQYROYH XP
/DERUDWyULRFRPXPD5HGH/LQX[SDUDRHQVLQRLQWURGXWyULRGH/LQX[H5HGHVSDUDMRYHQV
GRHQVLQRPpGLR
6HXSURMHWRIXWXURGHHQVLQRWDPEpPpXP&XUVRTXHSURSRQKDDLQWHJUDomRGR/LQX[FRP
RVRXWURV6LVWHPDV2SHUDFLRQDLV81,;WUDGLFLRQDLVWDLVFRPR6&22SHQ6HUYHUR6RODULVHR
)UHH%6'
3iJLQD
102
*18)UHH'RFXPHQWDWLRQ/LFHQVH
9HUVLRQ 0DUFK
&RS\ULJKW & )UHH 6RIWZDUH )RXQGDWLRQ ,QF
7HPSOH 3ODFH 6XLWH %RVWRQ 0$ 86$
(YHU\RQH LV SHUPLWWHG WR FRS\ DQG GLVWULEXWH YHUEDWLP FRSLHV
RI WKLV OLFHQVH GRFXPHQW EXW FKDQJLQJ LW LV QRW DOORZHG
35($0%/(
7KH SXUSRVH RI WKLV /LFHQVH LV WR PDNH D PDQXDO WH[WERRN RU RWKHU ZULWWHQ GRFXPHQW IUHH LQ WKH VHQVH RI
IUHHGRP WR DVVXUH HYHU\RQH WKH HIIHFWLYH IUHHGRP WR FRS\ DQG UHGLVWULEXWH LW ZLWK RU ZLWKRXW PRGLI\LQJ LW
HLWKHU FRPPHUFLDOO\ RU QRQFRPPHUFLDOO\ 6HFRQGDULO\ WKLV /LFHQVH SUHVHUYHV IRU WKH DXWKRU DQG SXEOLVKHU D ZD\
WR JHW FUHGLW IRU WKHLU ZRUN ZKLOH QRW EHLQJ FRQVLGHUHG UHVSRQVLEOH IRU PRGLILFDWLRQV PDGH E\ RWKHUV
7KLV /LFHQVH LV D NLQG RI FRS\OHIW ZKLFK PHDQV WKDW GHULYDWLYH ZRUNV RI WKH GRFXPHQW PXVW WKHPVHOYHV EH
IUHH LQ WKH VDPH VHQVH ,W FRPSOHPHQWV WKH *18 *HQHUDO 3XEOLF /LFHQVH ZKLFK LV D FRS\OHIW OLFHQVH GHVLJQHG
IRU IUHH VRIWZDUH
:H KDYH GHVLJQHG WKLV /LFHQVH LQ RUGHU WR XVH LW IRU PDQXDOV IRU IUHH VRIWZDUH EHFDXVH IUHH
VRIWZDUH QHHGV IUHH GRFXPHQWDWLRQ D IUHH SURJUDP VKRXOG FRPH ZLWK PDQXDOV SURYLGLQJ WKH VDPH IUHHGRPV
WKDW WKH VRIWZDUH GRHV %XW WKLV /LFHQVH LV QRW OLPLWHG WR VRIWZDUH PDQXDOV LW FDQ EH XVHG IRU DQ\ WH[WXDO ZRUN
UHJDUGOHVV RI VXEMHFW PDWWHU RU ZKHWKHU LW LV SXEOLVKHG DV D SULQWHG ERRN :H UHFRPPHQG WKLV /LFHQVH
SULQFLSDOO\ IRU ZRUNV ZKRVH SXUSRVH LV LQVWUXFWLRQ RU UHIHUHQFH
$33/,&$%,/,7< $1' '(),1,7,216
7KLV /LFHQVH DSSOLHV WR DQ\ PDQXDO RU RWKHU ZRUN WKDW FRQWDLQV D QRWLFH SODFHG E\ WKH FRS\ULJKW KROGHU VD\LQJ LW
FDQ EH GLVWULEXWHG XQGHU WKH WHUPV RI WKLV /LFHQVH 7KH 'RFXPHQW EHORZ UHIHUV WR DQ\ VXFK PDQXDO RU ZRUN
$Q\ PHPEHU RI WKH SXEOLF LV D OLFHQVHH DQG LV DGGUHVVHG DV \RX
$ 0RGLILHG 9HUVLRQ RI WKH 'RFXPHQW PHDQV DQ\ ZRUN FRQWDLQLQJ WKH 'RFXPHQW RU D SRUWLRQ RI LW HLWKHU
FRSLHG YHUEDWLP RU ZLWK PRGLILFDWLRQV DQGRU WUDQVODWHG LQWR DQRWKHU ODQJXDJH
$ 6HFRQGDU\ 6HFWLRQ LV D QDPHG DSSHQGL[ RU D IURQWPDWWHU VHFWLRQ RI WKH 'RFXPHQW WKDW GHDOV H[FOXVLYHO\
ZLWK WKH UHODWLRQVKLS RI WKH SXEOLVKHUV RU DXWKRUV RI WKH 'RFXPHQW WR WKH 'RFXPHQW
V RYHUDOO VXEMHFW RU WR
UHODWHG PDWWHUV DQG FRQWDLQV QRWKLQJ WKDW FRXOG IDOO GLUHFWO\ ZLWKLQ WKDW RYHUDOO VXEMHFW )RU H[DPSOH LI WKH
'RFXPHQW LV LQ SDUW D WH[WERRN RI PDWKHPDWLFV D 6HFRQGDU\ 6HFWLRQ PD\ QRW H[SODLQ DQ\ PDWKHPDWLFV 7KH
UHODWLRQVKLS FRXOG EH D PDWWHU RI KLVWRULFDO FRQQHFWLRQ ZLWK WKH VXEMHFW RU ZLWK UHODWHG PDWWHUV RU RI OHJDO
FRPPHUFLDO SKLORVRSKLFDO HWKLFDO RU SROLWLFDO SRVLWLRQ UHJDUGLQJ WKHP
7KH ,QYDULDQW 6HFWLRQV DUH FHUWDLQ 6HFRQGDU\ 6HFWLRQV ZKRVH WLWOHV DUH GHVLJQDWHG DV EHLQJ WKRVH RI
,QYDULDQW 6HFWLRQV LQ WKH QRWLFH WKDW VD\V WKDW WKH 'RFXPHQW LV UHOHDVHG XQGHU WKLV /LFHQVH
7KH &RYHU 7H[WV DUH FHUWDLQ VKRUW SDVVDJHV RI WH[W WKDW DUH OLVWHG DV )URQW&RYHU 7H[WV RU
%DFN&RYHU 7H[WV LQ WKH QRWLFH WKDW VD\V WKDW WKH 'RFXPHQW LV UHOHDVHG XQGHU WKLV /LFHQVH
$ 7UDQVSDUHQW FRS\ RI WKH 'RFXPHQW PHDQV D PDFKLQHUHDGDEOH FRS\ UHSUHVHQWHG LQ D IRUPDW ZKRVH
VSHFLILFDWLRQ LV DYDLODEOH WR WKH JHQHUDO SXEOLF ZKRVH FRQWHQWV FDQ EH YLHZHG DQG HGLWHG GLUHFWO\ DQG
VWUDLJKWIRUZDUGO\ ZLWK JHQHULF WH[W HGLWRUV RU IRU LPDJHV FRPSRVHG RI SL[HOV JHQHULF SDLQW SURJUDPV RU IRU
GUDZLQJV VRPH ZLGHO\ DYDLODEOH GUDZLQJ HGLWRU DQG WKDW LV VXLWDEOH IRU LQSXW WR WH[W IRUPDWWHUV RU IRU
DXWRPDWLF WUDQVODWLRQ WR D YDULHW\ RI IRUPDWV VXLWDEOH IRU LQSXW WR WH[W IRUPDWWHUV $ FRS\ PDGH LQ DQ RWKHUZLVH
7UDQVSDUHQW ILOH IRUPDW ZKRVH PDUNXS KDV EHHQ GHVLJQHG WR WKZDUW RU GLVFRXUDJH VXEVHTXHQW PRGLILFDWLRQ E\
UHDGHUV LV QRW 7UDQVSDUHQW $ FRS\ WKDW LV QRW 7UDQVSDUHQW LV FDOOHG 2SDTXH
3iJLQD
103

([DPSOHV RI VXLWDEOH IRUPDWV IRU 7UDQVSDUHQW FRSLHV LQFOXGH SODLQ $6&,, ZLWKRXW PDUNXS 7H[LQIR LQSXW IRUPDW
/D7H; LQSXW IRUPDW 6*0/ RU ;0/ XVLQJ D SXEOLFO\ DYDLODEOH '7' DQG
VWDQGDUGFRQIRUPLQJ VLPSOH +70/ GHVLJQHG IRU KXPDQ PRGLILFDWLRQ 2SDTXH IRUPDWV LQFOXGH 3RVW6FULSW 3')
SURSULHWDU\ IRUPDWV WKDW FDQ EH UHDG DQG HGLWHG RQO\ E\ SURSULHWDU\ ZRUG SURFHVVRUV 6*0/ RU ;0/ IRU ZKLFK
WKH '7' DQGRU SURFHVVLQJ WRROV DUH QRW JHQHUDOO\ DYDLODEOH DQG WKH PDFKLQHJHQHUDWHG +70/ SURGXFHG E\
VRPH ZRUG SURFHVVRUV IRU RXWSXW SXUSRVHV RQO\
7KH 7LWOH 3DJH PHDQV IRU D SULQWHG ERRN WKH WLWOH SDJH LWVHOI SOXV VXFK IROORZLQJ SDJHV DV DUH QHHGHG WR
KROG OHJLEO\ WKH PDWHULDO WKLV /LFHQVH UHTXLUHV WR DSSHDU LQ WKH WLWOH SDJH
)RU ZRUNV LQ IRUPDWV ZKLFK GR QRW KDYH DQ\ WLWOH SDJH DV VXFK 7LWOH 3DJH PHDQV WKH WH[W QHDU WKH PRVW
SURPLQHQW DSSHDUDQFH RI WKH ZRUN
V WLWOH SUHFHGLQJ WKH EHJLQQLQJ RI WKH ERG\ RI WKH WH[W
9(5%$7,0 &23<,1*
<RX PD\ FRS\ DQG GLVWULEXWH WKH 'RFXPHQW LQ DQ\ PHGLXP HLWKHU FRPPHUFLDOO\ RU QRQFRPPHUFLDOO\ SURYLGHG
WKDW WKLV /LFHQVH WKH FRS\ULJKW QRWLFHV DQG WKH OLFHQVH QRWLFH VD\LQJ WKLV /LFHQVH DSSOLHV WR WKH 'RFXPHQW DUH
UHSURGXFHG LQ DOO FRSLHV DQG WKDW \RX DGG QR RWKHU FRQGLWLRQV ZKDWVRHYHU WR WKRVH RI WKLV /LFHQVH <RX PD\
QRW XVH WHFKQLFDO PHDVXUHV WR REVWUXFW RU FRQWURO WKH UHDGLQJ RU IXUWKHU FRS\LQJ RI WKH FRSLHV \RX PDNH RU
GLVWULEXWH +RZHYHU \RX PD\ DFFHSW FRPSHQVDWLRQ LQ H[FKDQJH IRU FRSLHV ,I \RX GLVWULEXWH D ODUJH HQRXJK
QXPEHU RI FRSLHV \RX PXVW DOVR IROORZ WKH FRQGLWLRQV LQ VHFWLRQ
<RX PD\ DOVR OHQG FRSLHV XQGHU WKH VDPH FRQGLWLRQV VWDWHG DERYH DQG \RX PD\ SXEOLFO\ GLVSOD\ FRSLHV
&23<,1* ,1 48$17,7<
,I \RX SXEOLVK SULQWHG FRSLHV RI WKH 'RFXPHQW QXPEHULQJ PRUH WKDQ DQG WKH 'RFXPHQW
V OLFHQVH QRWLFH
UHTXLUHV &RYHU 7H[WV \RX PXVW HQFORVH WKH FRSLHV LQ FRYHUV WKDW FDUU\ FOHDUO\ DQG OHJLEO\ DOO WKHVH &RYHU
7H[WV )URQW&RYHU 7H[WV RQ WKH IURQW FRYHU DQG %DFN&RYHU 7H[WV RQ WKH EDFN FRYHU %RWK FRYHUV PXVW DOVR
FOHDUO\ DQG OHJLEO\ LGHQWLI\ \RX DV WKH SXEOLVKHU RI WKHVH FRSLHV 7KH IURQW FRYHU PXVW SUHVHQW WKH IXOO WLWOH ZLWK
DOO ZRUGV RI WKH WLWOH HTXDOO\ SURPLQHQW DQG YLVLEOH <RX PD\ DGG RWKHU PDWHULDO RQ WKH FRYHUV LQ DGGLWLRQ
&RS\LQJ ZLWK FKDQJHV OLPLWHG WR WKH FRYHUV DV ORQJ DV WKH\ SUHVHUYH WKH WLWOH RI WKH 'RFXPHQW DQG VDWLVI\
WKHVH FRQGLWLRQV FDQ EH WUHDWHG DV YHUEDWLP FRS\LQJ LQ RWKHU UHVSHFWV
,I WKH UHTXLUHG WH[WV IRU HLWKHU FRYHU DUH WRR YROXPLQRXV WR ILW OHJLEO\ \RX VKRXOG SXW WKH ILUVW RQHV OLVWHG DV
PDQ\ DV ILW UHDVRQDEO\ RQ WKH DFWXDO FRYHU DQG FRQWLQXH WKH UHVW RQWR
DGMDFHQW SDJHV
,I \RX SXEOLVK RU GLVWULEXWH 2SDTXH FRSLHV RI WKH 'RFXPHQW QXPEHULQJ PRUH WKDQ \RX PXVW HLWKHU LQFOXGH
D PDFKLQHUHDGDEOH 7UDQVSDUHQW FRS\ DORQJ ZLWK HDFK 2SDTXH FRS\ RU VWDWH LQ RU ZLWK HDFK 2SDTXH FRS\ D
SXEOLFO\DFFHVVLEOH FRPSXWHUQHWZRUN ORFDWLRQ FRQWDLQLQJ D FRPSOHWH 7UDQVSDUHQW FRS\ RI WKH 'RFXPHQW IUHH
RI DGGHG PDWHULDO ZKLFK WKH JHQHUDO QHWZRUNXVLQJ SXEOLF KDV DFFHVV WR GRZQORDG DQRQ\PRXVO\ DW QR FKDUJH
XVLQJ SXEOLFVWDQGDUG QHWZRUN SURWRFROV ,I \RX XVH WKH ODWWHU RSWLRQ \RX PXVW WDNH UHDVRQDEO\ SUXGHQW VWHSV
ZKHQ \RX EHJLQ GLVWULEXWLRQ RI 2SDTXH FRSLHV LQ TXDQWLW\ WR HQVXUH WKDW WKLV 7UDQVSDUHQW FRS\ ZLOO UHPDLQ WKXV
DFFHVVLEOH DW WKH VWDWHG ORFDWLRQ XQWLO DW OHDVW RQH \HDU DIWHU WKH ODVW WLPH \RX GLVWULEXWH DQ 2SDTXH FRS\
GLUHFWO\ RU WKURXJK \RXU DJHQWV RU UHWDLOHUV RI WKDW HGLWLRQ WR WKH SXEOLF
,W LV UHTXHVWHG EXW QRW UHTXLUHG WKDW \RX FRQWDFW WKH DXWKRUV RI WKH 'RFXPHQW ZHOO EHIRUH UHGLVWULEXWLQJ DQ\
ODUJH QXPEHU RI FRSLHV WR JLYH WKHP D FKDQFH WR SURYLGH \RX ZLWK DQ XSGDWHG YHUVLRQ RI WKH 'RFXPHQW
02',),&$7,216
<RX PD\ FRS\ DQG GLVWULEXWH D 0RGLILHG 9HUVLRQ RI WKH 'RFXPHQW XQGHU WKH FRQGLWLRQV RI VHFWLRQV DQG
DERYH SURYLGHG WKDW \RX UHOHDVH WKH 0RGLILHG 9HUVLRQ XQGHU SUHFLVHO\ WKLV /LFHQVH ZLWK WKH 0RGLILHG 9HUVLRQ
ILOOLQJ WKH UROH RI WKH 'RFXPHQW WKXV OLFHQVLQJ GLVWULEXWLRQ DQG PRGLILFDWLRQ RI WKH 0RGLILHG 9HUVLRQ WR ZKRHYHU
SRVVHVVHV D FRS\ RI LW ,Q DGGLWLRQ \RX PXVW GR WKHVH WKLQJV LQ WKH 0RGLILHG 9HUVLRQ
$
8VH LQ WKH 7LWOH 3DJH DQG RQ WKH FRYHUV LI DQ\ D WLWOH GLVWLQFW IURP WKDW RI WKH 'RFXPHQW DQG IURP WKRVH
RI SUHYLRXV YHUVLRQV ZKLFK VKRXOG LI WKHUH ZHUH DQ\ EH OLVWHG LQ WKH +LVWRU\ VHFWLRQ RI WKH 'RFXPHQW
<RX PD\ XVH WKH VDPH WLWOH DV D SUHYLRXV YHUVLRQ LI WKH RULJLQDO SXEOLVKHU RI WKDW YHUVLRQ JLYHV SHUPLVVLRQ
3iJLQD
104
%
/LVW RQ WKH 7LWOH 3DJH DV DXWKRUV RQH RU PRUH SHUVRQV RU HQWLWLHV UHVSRQVLEOH IRU
DXWKRUVKLS RI WKH
PRGLILFDWLRQV LQ WKH 0RGLILHG 9HUVLRQ WRJHWKHU ZLWK DW OHDVW ILYH RI WKH SULQFLSDO DXWKRUV RI WKH 'RFXPHQW
DOO RI LWV SULQFLSDO DXWKRUV LI LW KDV OHVV WKDQ ILYH
&
6WDWH RQ WKH 7LWOH SDJH WKH QDPH RI WKH SXEOLVKHU RI WKH 0RGLILHG 9HUVLRQ DV WKH SXEOLVKHU
'
3UHVHUYH DOO WKH FRS\ULJKW QRWLFHV RI WKH 'RFXPHQW
(
$GG DQ DSSURSULDWH FRS\ULJKW QRWLFH IRU \RXU PRGLILFDWLRQV DGMDFHQW WR WKH RWKHU FRS\ULJKW QRWLFHV
)
,QFOXGH LPPHGLDWHO\ DIWHU WKH FRS\ULJKW QRWLFHV D OLFHQVH QRWLFH JLYLQJ WKH SXEOLF SHUPLVVLRQ WR XVH WKH
0RGLILHG 9HUVLRQ XQGHU WKH WHUPV RI WKLV /LFHQVH LQ WKH IRUP VKRZQ LQ WKH $GGHQGXP EHORZ
*
3UHVHUYH LQ WKDW OLFHQVH QRWLFH WKH IXOO OLVWV RI ,QYDULDQW 6HFWLRQV DQG UHTXLUHG &RYHU 7H[WV JLYHQ LQ WKH
'RFXPHQW
V OLFHQVH QRWLFH
+
,QFOXGH DQ XQDOWHUHG FRS\ RI WKLV /LFHQVH
,
3UHVHUYH WKH VHFWLRQ HQWLWOHG +LVWRU\ DQG LWV WLWOH DQG DGG WR LW DQ LWHP VWDWLQJ DW OHDVW WKH WLWOH \HDU
QHZ DXWKRUV DQG SXEOLVKHU RI WKH 0RGLILHG 9HUVLRQ DV JLYHQ RQ WKH 7LWOH 3DJH ,I WKHUH LV QR VHFWLRQ
HQWLWOHG +LVWRU\ LQ WKH 'RFXPHQW FUHDWH RQH VWDWLQJ WKH WLWOH \HDU DXWKRUV DQG SXEOLVKHU RI WKH
'RFXPHQW DV JLYHQ RQ LWV 7LWOH 3DJH WKHQ DGG DQ LWHP GHVFULELQJ WKH 0RGLILHG 9HUVLRQ DV VWDWHG LQ WKH
SUHYLRXV VHQWHQFH
-
3UHVHUYH WKH QHWZRUN ORFDWLRQ LI DQ\ JLYHQ LQ WKH 'RFXPHQW IRU SXEOLF DFFHVV WR D 7UDQVSDUHQW FRS\ RI WKH
'RFXPHQW DQG OLNHZLVH WKH QHWZRUN ORFDWLRQV JLYHQ LQ WKH 'RFXPHQW IRU SUHYLRXV YHUVLRQV LW ZDV EDVHG RQ
7KHVH PD\ EH SODFHG LQ WKH +LVWRU\ VHFWLRQ <RX PD\ RPLW D QHWZRUN ORFDWLRQ IRU D ZRUN WKDW ZDV
SXEOLVKHG DW OHDVW IRXU \HDUV EHIRUH WKH 'RFXPHQW LWVHOI RU LI WKH RULJLQDO SXEOLVKHU RI WKH YHUVLRQ LW UHIHUV
WR JLYHV SHUPLVVLRQ
.
,Q DQ\ VHFWLRQ HQWLWOHG $FNQRZOHGJHPHQWV RU 'HGLFDWLRQV SUHVHUYH WKH VHFWLRQ

V WLWOH DQG SUHVHUYH LQ
WKH VHFWLRQ DOO WKH VXEVWDQFH DQG WRQH RI HDFK RI WKH FRQWULEXWRU DFNQRZOHGJHPHQWV DQGRU GHGLFDWLRQV
JLYHQ WKHUHLQ
/
3UHVHUYH DOO WKH ,QYDULDQW 6HFWLRQV RI WKH 'RFXPHQW XQDOWHUHG LQ WKHLU WH[W DQG LQ WKHLU WLWOHV 6HFWLRQ
QXPEHUV RU WKH HTXLYDOHQW DUH QRW FRQVLGHUHG SDUW RI WKH VHFWLRQ WLWOHV
0 'HOHWH DQ\ VHFWLRQ HQWLWOHG (QGRUVHPHQWV 6XFK D VHFWLRQ PD\ QRW EH LQFOXGHG LQ WKH 0RGLILHG 9HUVLRQ
1
1 'R QRW UHWLWOH DQ\ H[LVWLQJ VHFWLRQ DV (QGRUVHPHQWV RU WR FRQIOLFW LQ WLWOH ZLWK DQ\ ,QYDULDQW 6HFWLRQ
2 ,I WKH 0RGLILHG 9HUVLRQ LQFOXGHV QHZ IURQWPDWWHU VHFWLRQV RU DSSHQGLFHV WKDW TXDOLI\ DV 6HFRQGDU\ 6HFWLRQV
DQG FRQWDLQ QR PDWHULDO FRSLHG IURP WKH 'RFXPHQW \RX PD\ DW \RXU RSWLRQ GHVLJQDWH VRPH RU DOO RI WKHVH
VHFWLRQV DV LQYDULDQW 7R GR WKLV DGG WKHLU WLWOHV WR WKH OLVW RI ,QYDULDQW 6HFWLRQV LQ WKH 0RGLILHG 9HUVLRQ
V
OLFHQVH QRWLFH 7KHVH WLWOHV PXVW EH GLVWLQFW IURP DQ\ RWKHU VHFWLRQ WLWOHV
<RX PD\ DGG D VHFWLRQ HQWLWOHG (QGRUVHPHQWV SURYLGHG LW FRQWDLQV QRWKLQJ EXW HQGRUVHPHQWV RI \RXU
0RGLILHG 9HUVLRQ E\ YDULRXV SDUWLHVIRU H[DPSOH VWDWHPHQWV RI SHHU UHYLHZ RU WKDW WKH WH[W KDV EHHQ DSSURYHG
E\ DQ RUJDQL]DWLRQ DV WKH DXWKRULWDWLYH GHILQLWLRQ RI D VWDQGDUG
<RX PD\ DGG D SDVVDJH RI XS WR ILYH ZRUGV DV D )URQW&RYHU 7H[W DQG D SDVVDJH RI XS WR ZRUGV DV D %DFN
&RYHU 7H[W WR WKH HQG RI WKH OLVW RI &RYHU 7H[WV LQ WKH 0RGLILHG 9HUVLRQ 2QO\ RQH SDVVDJH RI )URQW&RYHU 7H[W
DQG RQH RI %DFN&RYHU 7H[W PD\ EH DGGHG E\ RU WKURXJK DUUDQJHPHQWV PDGH E\ DQ\ RQH HQWLW\ ,I WKH
'RFXPHQW DOUHDG\ LQFOXGHV D FRYHU WH[W IRU WKH VDPH FRYHU SUHYLRXVO\ DGGHG E\ \RX RU E\ DUUDQJHPHQW PDGH
3iJLQD
105

E\ WKH VDPH HQWLW\ \RX DUH DFWLQJ RQ EHKDOI RI \RX PD\ QRW DGG DQRWKHU EXW \RX PD\ UHSODFH WKH ROG RQH RQ
H[SOLFLW SHUPLVVLRQ IURP WKH SUHYLRXV SXEOLVKHU WKDW DGGHG WKH ROG RQH
7KH DXWKRUV DQG SXEOLVKHUV RI WKH 'RFXPHQW GR QRW E\ WKLV /LFHQVH JLYH SHUPLVVLRQ WR XVH WKHLU QDPHV IRU
SXEOLFLW\ IRU RU WR DVVHUW RU LPSO\ HQGRUVHPHQW RI DQ\ 0RGLILHG 9HUVLRQ
&20%,1,1* '2&80(176
<RX PD\ FRPELQH WKH 'RFXPHQW ZLWK RWKHU GRFXPHQWV UHOHDVHG XQGHU WKLV /LFHQVH XQGHU WKH WHUPV GHILQHG LQ
VHFWLRQ DERYH IRU PRGLILHG YHUVLRQV SURYLGHG WKDW \RX LQFOXGH LQ WKH FRPELQDWLRQ DOO RI WKH ,QYDULDQW 6HFWLRQV
RI DOO RI WKH RULJLQDO GRFXPHQWV XQPRGLILHG DQG OLVW WKHP DOO DV ,QYDULDQW 6HFWLRQV RI \RXU FRPELQHG ZRUN LQ LWV
OLFHQVH QRWLFH
7KH FRPELQHG ZRUN QHHG RQO\ FRQWDLQ RQH FRS\ RI WKLV /LFHQVH DQG PXOWLSOH LGHQWLFDO ,QYDULDQW 6HFWLRQV PD\
EH UHSODFHG ZLWK D VLQJOH FRS\ ,I WKHUH DUH PXOWLSOH ,QYDULDQW 6HFWLRQV ZLWK WKH VDPH QDPH EXW GLIIHUHQW
FRQWHQWV PDNH WKH WLWOH RI HDFK VXFK VHFWLRQ XQLTXH E\ DGGLQJ DW WKH HQG RI LW LQ SDUHQWKHVHV WKH QDPH RI WKH
RULJLQDO DXWKRU RU SXEOLVKHU RI WKDW VHFWLRQ LI NQRZQ RU HOVH D XQLTXH QXPEHU 0DNH WKH VDPH DGMXVWPHQW WR
WKH VHFWLRQ WLWOHV LQ WKH OLVW RI ,QYDULDQW 6HFWLRQV LQ WKH OLFHQVH QRWLFH RI WKH FRPELQHG ZRUN
,Q WKH FRPELQDWLRQ \RX PXVW FRPELQH DQ\ VHFWLRQV HQWLWOHG +LVWRU\ LQ WKH YDULRXV RULJLQDO GRFXPHQWV
IRUPLQJ RQH VHFWLRQ HQWLWOHG +LVWRU\ OLNHZLVH FRPELQH DQ\ VHFWLRQV HQWLWOHG $FNQRZOHGJHPHQWV DQG DQ\
VHFWLRQV HQWLWOHG 'HGLFDWLRQV <RX PXVW GHOHWH DOO VHFWLRQV HQWLWOHG (QGRUVHPHQWV
&2//(&7,216 2) '2&80(176
<RX PD\ PDNH D FROOHFWLRQ FRQVLVWLQJ RI WKH 'RFXPHQW DQG RWKHU GRFXPHQWV UHOHDVHG XQGHU WKLV /LFHQVH DQG
UHSODFH WKH LQGLYLGXDO FRSLHV RI WKLV /LFHQVH LQ WKH YDULRXV GRFXPHQWV ZLWK D VLQJOH FRS\ WKDW LV LQFOXGHG LQ WKH
FROOHFWLRQ SURYLGHG WKDW \RX IROORZ WKH UXOHV RI WKLV /LFHQVH IRU YHUEDWLP FRS\LQJ RI HDFK RI WKH GRFXPHQWV LQ
DOO RWKHU UHVSHFWV
<RX PD\ H[WUDFW D VLQJOH GRFXPHQW IURP VXFK D FROOHFWLRQ DQG GLVWULEXWH LW LQGLYLGXDOO\ XQGHU WKLV /LFHQVH
SURYLGHG \RX LQVHUW D FRS\ RI WKLV /LFHQVH LQWR WKH H[WUDFWHG GRFXPHQW DQG IROORZ WKLV /LFHQVH LQ DOO RWKHU
UHVSHFWV UHJDUGLQJ YHUEDWLP FRS\LQJ RI WKDW GRFXPHQW
$**5(*$7,21 :,7+ ,1'(3(1'(17 :25.6
$ FRPSLODWLRQ RI WKH 'RFXPHQW RU LWV GHULYDWLYHV ZLWK RWKHU VHSDUDWH DQG LQGHSHQGHQW GRFXPHQWV RU ZRUNV LQ
RU RQ D YROXPH RI D VWRUDJH RU GLVWULEXWLRQ PHGLXP GRHV QRW DV D ZKROH FRXQW DV D 0RGLILHG 9HUVLRQ RI WKH
'RFXPHQW SURYLGHG QR FRPSLODWLRQ FRS\ULJKW LV FODLPHG IRU WKH FRPSLODWLRQ 6XFK D FRPSLODWLRQ LV FDOOHG DQ
DJJUHJDWH DQG WKLV WKLV /LFHQVH GRHV QRW DSSO\ WR WKH RWKHU VHOIFRQWDLQHG ZRUNV WKXV FRPSLOHG ZLWK WKH
'RFXPHQW RQ DFFRXQW RI WKHLU EHLQJ WKXV FRPSLOHG LI WKH\ DUH QRW WKHPVHOYHV GHULYDWLYH ZRUNV RI WKH
'RFXPHQW ,I WKH &RYHU 7H[W UHTXLUHPHQW RI VHFWLRQ LV DSSOLFDEOH WR WKHVH FRSLHV RI WKH 'RFXPHQW WKHQ LI WKH
'RFXPHQW LV OHVV WKDQ RQH TXDUWHU RI WKH HQWLUH DJJUHJDWH WKH 'RFXPHQW
V &RYHU 7H[WV PD\ EH SODFHG RQ
FRYHUV WKDW VXUURXQG RQO\ WKH 'RFXPHQW ZLWKLQ WKH DJJUHJDWH 2WKHUZLVH WKH\ PXVW DSSHDU RQ FRYHUV DURXQG
WKH ZKROH DJJUHJDWH
75$16/$7,21
7UDQVODWLRQ LV FRQVLGHUHG D NLQG RI PRGLILFDWLRQ VR \RX PD\ GLVWULEXWH WUDQVODWLRQV RI WKH

'RFXPHQW XQGHU WKH WHUPV RI VHFWLRQ 5HSODFLQJ ,QYDULDQW 6HFWLRQV ZLWK WUDQVODWLRQV UHTXLUHV HVSHFLDO
SHUPLVVLRQ IURP WKHLU FRS\ULJKW KROGHUV EXW \RX PD\ LQFOXGH WUDQVODWLRQV RI VRPH RU DOO ,QYDULDQW 6HFWLRQV LQ
DGGLWLRQ WR WKH RULJLQDO YHUVLRQV RI WKHVH ,QYDULDQW 6HFWLRQV <RX PD\ LQFOXGH D WUDQVODWLRQ RI WKLV /LFHQVH
SURYLGHG WKDW \RX DOVR LQFOXGH WKH RULJLQDO (QJOLVK YHUVLRQ RI WKLV /LFHQVH ,Q FDVH RI D GLVDJUHHPHQW EHWZHHQ
WKH WUDQVODWLRQ DQG WKH RULJLQDO (QJOLVK YHUVLRQ RI WKLV /LFHQVH WKH RULJLQDO (QJOLVK YHUVLRQ ZLOO SUHYDLO
3iJLQD
106
7(50,1$7,21
<RX PD\ QRW FRS\ PRGLI\ VXEOLFHQVH RU GLVWULEXWH WKH 'RFXPHQW H[FHSW DV H[SUHVVO\ SURYLGHG IRU XQGHU WKLV
/LFHQVH $Q\ RWKHU DWWHPSW WR FRS\ PRGLI\ VXEOLFHQVH RU GLVWULEXWH WKH 'RFXPHQW LV YRLG DQG ZLOO
DXWRPDWLFDOO\ WHUPLQDWH \RXU ULJKWV XQGHU WKLV /LFHQVH +RZHYHU SDUWLHV ZKR KDYH UHFHLYHG FRSLHV RU ULJKWV
IURP \RX XQGHU WKLV /LFHQVH ZLOO QRW KDYH WKHLU OLFHQVHV WHUPLQDWHG VR ORQJ DV VXFK SDUWLHV UHPDLQ LQ IXOO
FRPSOLDQFH
)8785( 5(9,6,216 2) 7+,6 /,&(16(
7KH )UHH 6RIWZDUH )RXQGDWLRQ PD\ SXEOLVK QHZ UHYLVHG YHUVLRQV RI WKH *18 )UHH 'RFXPHQWDWLRQ /LFHQVH IURP
WLPH WR WLPH 6XFK QHZ YHUVLRQV ZLOO EH VLPLODU LQ VSLULW WR WKH SUHVHQW YHUVLRQ EXW PD\ GLIIHU LQ GHWDLO WR
DGGUHVV QHZ SUREOHPV RU FRQFHUQV 6HH KWWSZZZJQXRUJFRS\OHIW
(DFK YHUVLRQ RI WKH /LFHQVH LV JLYHQ D GLVWLQJXLVKLQJ YHUVLRQ QXPEHU ,I WKH 'RFXPHQW VSHFLILHV WKDW D SDUWLFXODU
QXPEHUHG YHUVLRQ RI WKLV /LFHQVH RU DQ\ ODWHU YHUVLRQ DSSOLHV WR LW \RX KDYH WKH RSWLRQ RI IROORZLQJ WKH WHUPV
DQG FRQGLWLRQV HLWKHU RI WKDW VSHFLILHG YHUVLRQ RU RI DQ\ ODWHU YHUVLRQ WKDW KDV EHHQ SXEOLVKHG QRW DV D GUDIW
E\ WKH )UHH 6RIWZDUH )RXQGDWLRQ ,I WKH 'RFXPHQW GRHV QRW VSHFLI\ D YHUVLRQ QXPEHU RI WKLV /LFHQVH \RX PD\
FKRRVH DQ\ YHUVLRQ HYHU SXEOLVKHG QRW DV D GUDIW E\ WKH )UHH 6RIWZDUH )RXQGDWLRQ
+RZ WR XVH WKLV /LFHQVH IRU \RXU GRFXPHQWV

7R XVH WKLV /LFHQVH LQ D GRFXPHQW \RX KDYH ZULWWHQ LQFOXGH D FRS\ RI WKH /LFHQVH LQ WKH GRFXPHQW DQG SXW WKH
IROORZLQJ FRS\ULJKW DQG OLFHQVH QRWLFHV MXVW DIWHU WKH WLWOH SDJH
&RS\ULJKW F <($5 <285 1$0(

3HUPLVVLRQ LV JUDQWHG WR FRS\ GLVWULEXWH DQGRU PRGLI\ WKLV GRFXPHQW
XQGHU WKH WHUPV RI WKH *18 )UHH 'RFXPHQWDWLRQ /LFHQVH 9HUVLRQ
RU DQ\ ODWHU YHUVLRQ SXEOLVKHG E\ WKH )UHH 6RIWZDUH )RXQGDWLRQ
ZLWK WKH ,QYDULDQW 6HFWLRQV EHLQJ /,67 7+(,5 7,7/(6 ZLWK WKH
)URQW&RYHU 7H[WV EHLQJ /,67 DQG ZLWK WKH %DFN&RYHU 7H[WV EHLQJ /,67
$ FRS\ RI WKH OLFHQVH LV LQFOXGHG LQ WKH VHFWLRQ HQWLWOHG *18
)UHH 'RFXPHQWDWLRQ /LFHQVH
,I \RX KDYH QR ,QYDULDQW 6HFWLRQV ZULWH ZLWK QR ,QYDULDQW 6HFWLRQV LQVWHDG RI VD\LQJ ZKLFK
RQHV DUH LQYDULDQW ,I \RX KDYH QR )URQW&RYHU 7H[WV ZULWH QR )URQW&RYHU 7H[WV LQVWHDG RI
)URQW&RYHU
7H[WV EHLQJ /,67 OLNHZLVH IRU %DFN&RYHU 7H[WV

,I \RXU GRFXPHQW FRQWDLQV QRQWULYLDO H[DPSOHV RI SURJUDP FRGH ZH UHFRPPHQG UHOHDVLQJ WKHVH H[DPSOHV LQ
SDUDOOHO XQGHU \RXU FKRLFH RI IUHH VRIWZDUH OLFHQVH VXFK DV WKH *18 *HQHUDO 3XEOLF /LFHQVH WR SHUPLW WKHLU XVH
LQ IUHH VRIWZDUH
3iJLQD
107
&RPLWrGH,QFHQWLYRD3URGXomRGR
6RIWZDUH*UDWXLWRH$OWHUQDWLYR
Fundado em 29 de janeiro de 1999.
1 Diretoria
Djalma Valois Filho
'LUHWRU([HFXWLYR
dvalois@cxpostal.com
Jos Luiz Nunes Poyares

Diretor Administrativo
Paulo Roberto Ribeiro Guimares

Diretor Institucional
CIPSGA
Rua Professora Ester de Melo, numero 202,
Parte, Benfica, Rio de Janeiro, RJ, CEP. 20930-010;
Telefone (Fax/Dados): 021-5564201;
e-mail: administracao@cipsga.org.br
CNPJ: 03179614-0001/70
3iJLQD
108

Seg. Redes Linux

Enviado por

Dados do documento

Direitos autorais

Formatos disponíveis

Compartilhar este documento

Compartilhar ou incorporar documento

Opções de compartilhamento

Você considera este documento útil?

Este conteúdo é inapropriado?

Direitos autorais:

Formatos disponíveis

Seg. Redes Linux

Enviado por

Direitos autorais:

Formatos disponíveis

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR &,36*$

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR &,36*$

&RS\ULJKW F  5HQDWR 0DUWLQL

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR &,36*$

*18 )5(( '2&80(17$7,21 /,&(16( ....................................................................................... 103

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR &,36*$

1.2 Segurana: o conceito

]OM_\S^c ZYVSMc 9 [_O

]SQXSPSMK ^Y]YWOX^O [_O X_WK \ONO R NO^O\WSXKNY] \OM_\]Y]

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR &,36*$

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR &,36*$

1.3 Segurana e as ferramentas de rede

YL\SQK^\SK] ZK\K ^KX^Y ]Y$ Y <0- # SX^S^_VKNY NO =S^O

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR &,36*$

1.4 Nosso objetivo

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR &,36*$

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR &,36*$

2 0 Firewall: duas solues em ambiente Linux

/X^\O^KX^Y K MKZKMSNKNO OPO^S`K NO MYX^\YVO NO _W PS\OaKVV

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR &,36*$

2.2 Firewalls e acesso remoto: o Secure Shell

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR &,36*$

M\SZ^YQ\KPKNK] + <=+ _]KNK ZK\K _W SX^O\MWLSY NO MRK`O] X_W

'DHPRQ TXH URGD QD PiTXLQDVHUYLGRU

&OLHQWH SURJUDPD XVDGR SDUD ORJLQ H H[HFXomR

8VDGR SDUD FRSLDU DUTXLYRV GH XP FRPSXWDGRU

SDUD RXWUR HP VHJXUDQoD

8VDGR SDUD FULDU FKDYHV 56$

$JHQWH SDUD D DXWHQWLFDomR GDV FKDYHV

8VDGR SDUD UHJLVWUDU QRYDV FKDYHV

HWFVVKBNQRZQBKRVWV D VHU XVDGR SHOR '16

>URRW#DOSKD @ VVKNH\JHQ

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR &,36*$

(QWHU WKH VDPH SDVVSKUDVH DJDLQ LGHP

>URRW#EHWD URRW@ VVK DOSKD

>URRW#EHWD @ VVK DOSKDFLSVJDRUJEU

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR &,36*$

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR &,36*$

>URRW#DOSKD @VVK EHWD

http://www.chiark.greenend.org.uk/~sgtatham/putty/ (PuTTY uma verso livre para telnet e SSH).

@O\]Y ==2 ZK\K 9= b

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR &,36*$

2.3 Firewalls: soluo Linux

O Linux IPCHAINS-HOWTO por exemplo apresenta 4 diferentes cenrios possveis.

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR &,36*$

2. turn TCP/IP networking => ATIVO

Em 'network device support':

2.4 A filtragem de pacotes

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR &,36*$

ZY\ O]]K] MK\KM^O\]^SMK] [_O _W PS\OaKVV ZYNO XY] QK\KX^S\

2.5 IPCHAINS (The Enhanced IP Firewalling Chains Software for Linux)

IP INPUT CHAIN: quando um pacote entra ...

XO]^O ^\SZ [_O ]O P_XNKWOX^K K MYX]^\_Y NO XY]]Y PS\OaKVV

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR &,36*$

LSFKDLQV $ LQSXW V  S LFPS M '(1<

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

&RS\ULJKW F 5HQDWR 0DUWLQL

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

]OM_\S^c ZYVSMc 9 [_O

]SQXSPSMK ^Y]YWOX^O [_O X_WK \ONO R NO^O\WSXKNY] \OM_\]Y]

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

YL\SQK^\SK] ZK\K ^KX^Y ]Y$ Y <0- # SX^S^_VKNY NO =S^O

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

/X^\O^KX^Y K MKZKMSNKNO OPO^S`K NO MYX^\YVO NO _W PS\OaKVV

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

M\SZ^YQ\KPKNK] + <=+ _]KNK ZK\K _W SX^O\MWLSY NO MRK`O] X_W

'DHPRQ TXH URGD QD PiTXLQDVHUYLGRU

&OLHQWH SURJUDPD XVDGR SDUD ORJLQ H H[HFXomR

HWFVVKBNQRZQBKRVWV D VHU XVDGR SHOR '16

>URRW#DOSKD @ VVKNH\JHQ

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

(QWHU WKH VDPH SDVVSKUDVH DJDLQ LGHP

>URRW#EHWD URRW@ VVK DOSKD

>URRW#EHWD @ VVK DOSKDFLSVJDRUJEU

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

>URRW#DOSKD @VVK EHWD

@O\]Y ==2 ZK\K 9= b

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

XO]^O ^\SZ [_O ]O P_XNKWOX^K K MYX]^\_Y NO XY]]Y PS\OaKVV

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

LSFKDLQV $ LQSXW V S LFPS M '(1<

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

NO NO]^SXY OW TYQY ]O\`SY]

>URRW#DOSKD @ LSFKDLQV )

>URRW#DOSKD @ LSFKDLQV ' LQSXW

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

?W Y_^\Y ObOWZVY /]^KLOVOMOWY] POMRK\ K MYXObY `SK >-: ]OW

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

1PDS UXQ FRPSOHWHG ,3 DGGUHVV KRVW XS VFDQQHG LQ VHFRQGV

1PDS UXQ FRPSOHWHG ,3 DGGUHVV KRVW XS VFDQQHG LQ VHFRQGV

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

SXMV_]S`K] ZY\ ObOWZVY$ vZ ^MZ # " $v SXMV_WY]

LSFKDLQV $ LQSXW V VVK G VVK S WFS M 5(-(&7

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

+MSWK PSdOWY] WOXY K] SXÔ\PKMO] NO \ONO XOâY\U SXÔ\PKMO7 9

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

.O]^KMKWY] Y] ^\] LY^O] [_O \OZ\O]OX^KW Y ^\SZ vSXZ_^PY\aK\N

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

-VS[_O OX^Y XY LY^Y vKNSMSYXK\v >O\OWY] Y [_KN\Y ]OQ_SX^O [_O

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

SERVIDOR Linux {[eth0] 200.255.210.2

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

>$'&@ FKDLQ UHJUDHVSHFLILFDGD >RSo}HV@

D IRUPD ORQJD RX FXUWD

SROLF\ 3 FKDLQ DOYR

VRXUFH V >@ HQGHUHoR>PDVF@ >@ >SRUWD>SRUWD@@

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

W H [RU H[RU PDVFiUDV SDUD 726

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

OW 4K`K _WK SX^O\PKMO ZK\K PKMSVS^K\ K ONSY NY PS\OaKVVMYXP

NS]^\SL_SO] 6SX_b T `OW MYW Y UO\XOV Z\YX^Y] ZK\K PS\OaKVVSXQ

9L]O\`O K ObS]^XMSK NY K\[_S`Y [_O NO]OTKWY]$ Y vMROMU]_WYv9

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

R^^Z$aaa]SX_]PS\OaKVVY\Q NY MVSOX^O NY -YX^\YV :KXOV ZYNO ]O\

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

@KWY] SXSMSK\ Y =38?= 0S\OaKVV :K\K S]]Y Z\OMS]KWY] NO _WK

>URRW#DOSKD @ LQVPRG OLEPRGXOHVPLVFVIR

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR &,36$

TXDOTXHU RXWUD UHTXLVLomR 7&3 H VRD R DODUPH

EORFN WFS QRWLILFDWLRQBOHYHO