2_Curso de Seguranca em Redes Linux

Transcrição

2_Curso de Seguranca em Redes Linux
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
&8562'(
6(*85$1d$(0
5('(6/,18;
$XWRU5HQDWR0DUWLQL
UPDUWLQL#FLSVJDRUJEU
0DUoRGH
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
1
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
&XUVRGH6HJXUDQoDHP5HGHV
&RPLWHGH,QFHQWLYRD3URGXomR
GR6RIWZDUH*UDWXLWRH$OWHUQDWLYR
&,36*$
$XWRU
5HQDWR0DUWLQL
UPDUWLQL#FLSVJDRUJEU
0DUoRGH
&RS\ULJKW F 5HQDWR 0DUWLQL
3HUPLVVLRQ LV JUDQWHG WR FRS\ GLVWULEXWH DQGRU PRGLI\ WKLV GRFXPHQW XQGHU WKH WHUPV RI WKH *18 )UHH
'RFXPHQWDWLRQ /LFHQVH 9HUVLRQ RU DQ\ ODWHU YHUVLRQ SXEOLVKHG E\ WKH )UHH 6RIWZDUH )RXQGDWLRQ ZLWK WKH
,QYDULDQW 6HFWLRQV EHLQJ /,67 7+(,5 7,7/(6 ZLWK WKH )URQW&RYHU 7H[WV EHLQJ /,67 DQG ZLWK WKH %DFN&RYHU
7H[WV EHLQJ /,67
$ FRS\ RI WKH OLFHQVH LV LQFOXGHG LQ WKH VHFWLRQ HQWLWOHG *18 )UHH 'RFXPHQWDWLRQ /LFHQVH
&RS\ULJKW F 5HQDWR 0DUWLQL
( JDUDQWLGD D SHUPLVVmR SDUD FRSLDU GLVWULEXLU HRX PRGLILFDU HVWH GRFXPHQWR VRE RV WHUPRV GD *18 )UHH 'RFXPHQWDWLRQ /LFHQVH
YHUVmR RX TXDOTXHU RXWUD YHUVmR SRVWHULRU SXEOLFDGD SHOD )UHH 6RIWZDUH )RXQGDWLRQ VHP REULJDWRULHGDGH GH 6Ho}HV ,QYDULDQWHV QD
DEHUWXUD H DR ILQDO GRV WH[WRV
8PD FRSLD GD OLFHQoD GHYH VHU LQFOXtGD QD VHomR LQWLWXODGD *18 )UHH 'RFXPHQWDWLRQ /LFHQVH
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
2
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
ËQGLFH
1 SEGURANÇA: FUNDAMENTOS ......................................................................................................................................... 4
1.1 Introdução ................................................................................................................................................................ 4
1.2 Segurança: o conceito .............................................................................................................................................. 4
1.3 Segurança e as ferramentas de rede......................................................................................................................... 6
1.4 Nosso objetivo .......................................................................................................................................................... 7
2 0 FIREWALL: DUAS SOLUÇÕES EM AMBIENTE LINUX...................................................................................................... 9
2.1 Uma palavra inicial sobre firewalls ......................................................................................................................... 9
2.2 Firewalls e acesso remoto: o Secure Shell ............................................................................................................. 10
2.3 Firewalls: solução Linux ........................................................................................................................................ 15
2.4 A filtragem de pacotes ............................................................................................................................................ 16
2.5 IPCHAINS (The Enhanced IP Firewalling Chains Software for Linux) ................................................................ 17
2.6 The SINUS Firewall - a TCP/IP packet filter for Linux ......................................................................................... 32
3 MONITORAÇÃO DA REDE ............................................................................................................................................... 56
3.1 Os scanners de rede................................................................................................................................................ 56
3.2 Saint: Security Administrator's Integrated Network Tool....................................................................................... 72
+8/B9= ................................................................................................................................................. 80
+8/B9 +$ ....................................................................................................................................................................... 81
+8/B9 ,$ ....................................................................................................................................................................... 82
+8/B9 -$ ....................................................................................................................................................................... 90
+8/B9 .$ ......................................................................................................................................................................... 96
+8/B9 /$ ......................................................................................................................................................................... 99
,3,6391<+03+ 1/<+6 ..................................................................................................................... 100
SOBRE O AUTOR DA APOSTILA .................................................................................................... 102
*18 )5(( '2&80(17$7,21 /,&(16( ....................................................................................... 103
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
3
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
1 Segurança: Fundamentos
1.1 Introdução
9 YLTO^S`Y NO]^O NYM_WOX^Y ¤ WY]^\K\ MYWY Y 6SX_b YPO\OMO _WK
]YV_”ÁYMYWZVO^KZK\KYZ\YLVOWKNK]OQ_\KX”K9L]O\`O]OK[_S[_O
]O PKVKWY] ]YV_”ÁY€ XÁY ]SQXSPSMK K ObS]^ XMSK NO _W ]S]^OWK
KL]YV_^KWOX^O ]OQ_\Y 9 6SX_b YPO\OMO S]^Y ]SW K] PO\\KWOX^K]
XOMO]]£\SK] ZK\K K QO]^ÁY NK ]OQ_\KX”K X_W WSM\Y S]YVKNKWOX^O Y_
X_WKSX^\KXO^OOX^ÁY^KVSX^\KXO^MYXOM^KNK§1\KXNO<ONO/]^O
NYM_WOX^YNO]M\O`OSX^\YN_^Y\SKWOX^O^KS]PO\\KWOX^K]OZ\YLVOWK]NO
]OQ_\KX”K
1.2 Segurança: o conceito
>\K^K\OWY] ]OQ_\KX”K MYWY ]OXNY K \O]^\S”ÁY NY] \OM_\]Y] NO _W
WSM\YMYWZ_^KNY\ Y_ NO _WK \ONO Y_ NO ZY\ӃO] NO]^K \ONO ZK\K
Y_^\Y] _]_£\SY] Y_ MYWZ_^KNY\O] =OQ_\KX”K XKNK WKS] ¤ NY [_O K
QO]^ÁYNO^KV\O]^\S”ÁYY[_OMYX]^S^_SZY\^KX^Y_WKZYV´^SMKNO
]OQ_\KX”K Y_ MYWY ]O NSd OW SXQV ]$
]OM_\S^c ZYVSMc 9 [_O
]SQXSPSMK ^ÁY]YWOX^O [_O X_WK \ONO R£ NO^O\WSXKNY] \OM_\]Y]
K\[_S`Y] NS]ZY]S^S`Y] NO RK\NaK\O O^M [_O O]^ÁY NS]ZYX´`OS]
ZK\K O]^O MYWZ_^KNY\ Y_ ^SZY NO _]_£\SY WK] [_O ZY\ Y_^\Y VKNY
PSMKW\O]^\S^Y]K^KVY_[_KVMYWZ_^KNY\O]^OTKOVOPY\KY_NOX^\Y
NK\ONO
7O]WY _W ]S]^OWK MYWY Y KX^SQY .9= SWZVOWOX^K`K _W ^SZY NO
]OQ_\KX”K MVK\Y [_O ]SXQOVK P\OX^O KY] =9 W_V^S_]_£\SY] MYWY Y
6SX_b Y_ [_KV[_O\ ^SZY NO ]S]^OWK ?83B 8Y .9= R£ NO^O\WSXKNY]
K\[_S`Y]YM_V^Y]R£K\[_S`Y]MYWK^\SL_^Y]ZK\K[_O]OZO\WS^K[_O
O]^O ]YWOX^O ]OTK VSNY O^M :Y\ MYX]OQ_SX^O R£ \O]^\S”ÁY NO
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
4
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
£\OK]€NY=9-VK\Y[_O^_NYS]]YX_W]S]^OWK.9=Y_WO]WYXK]_K
]O[_ XMSK RS]^¥\SMK Y ASXNYa] #b ZY]]_OW \O]^\S”ÉO] [_O
PKMSVWOX^OL_\VKWY]7K]Y.9=ASXNYa]XÁYPY\KWPOS^Y]ZK\K\ONO9
\OM_\]Y NY XO^aY\USXQ XÁY ¤ OWL_^SNY L_SV^SX SX^\´X]OMY KY
ASXNYa]ZY\S]]YWO]WY^YNY]Y]OWLK\K”Y][_O]O_]_]_£\SY]ZY]]_OW
KYYZO\K\OWXK3X^O\XO^MYWYZY\ObOWZVYXYPKWY]Y,KMU9\SPSMO
96SX_b¤_W]S]^OWKW_V^S_]_£\SYO]]OXMSKVWOX^O _W =9 MKZKMS^KNY
ZK\KK]<ONO]XÁY¤_W\OM_\]Y[_OVROPYSKM\O]MSNYOb^O\XKWOX^O
/^YNY=9NO\ONOO]^KLOVOMOZ\S`SV¤QSY]MYWYPY\WKNO]OQ_\KX”K$R£
_]_£\SY] O]ZOMSKS] XK XYWOXMVK^_\K MY\\O^K =_ZO\?]_£\SY] Y_
_]_£\SY <YY^ [_O ZYNOW KV^O\K\ K\[_S`Y] O]ZOMSKS] NY ]S]^OWK
WYX^K\ ZK\^SӃO] ]OTKW VYMKS] Y_ \OWY^K] NO]VSQK\ K \ONO O^M 9
_]_£\SYMYW_W]OWZ\S`SV¤QSY]XÁYZYNOPKd VY :Y\¤W [_KXNY XY]
NO]VYMKWY] NK ¥^SMK NO _W MYWZ_^KNY\ ZOX]KNY S]YVKNKWOX^O S]^Y ¤
_WK ¦XSMK O]^K”ÁY NO ^\KLKVRY _]KNY ZY\ _WK] ZO]]YK] NSQKWY]
`OWY] [_O ]O MYVYMK ]OW N¦`SNK Y ^OWK NK ]OQ_\KX”K 7K] [_KXNY
YL]O\`KWY]_WK\ONOVYMKVK]OQ_\KX”K¤_W^OWKKSXNKWKS]_\QOX^O
8_WK SX^\KXO^ §] `OdO] NS`O\]Y] \OM_\]Y] NO `£\SY] WSM\Y] O]^ÁY
SX^O\NS^KNY] NO _W NOZK\^KWOX^Y ZY\ ObOWZVY / ]YL\O^_NY [_KXNY
O]^K SX^\KXO^ MYXOM^K]O K 3X^O\XO^ Y [_O ¤ [_K]O SXO`S^£`OV K
]OQ_\KX”K^Y\XK]OKSXNKWKS]_\QOX^OOP_XNKWOX^KV
:YNO\´KWY]O][_OWK^SdK\K]]SW$
<ONO''''''''''''''''''''
INTERNET!
6YMKVf0S\OaKVVf
''''''''''''''''''''
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
5
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
1.3 Segurança e as ferramentas de rede
8_W ¦XSMY WSM\Y Y_ X_WK \ONO VYMKV NO ZO[_OXY W¤NSY Y_ Q\KXNO
ZY\^O O K]]SW [_KXNY O]^K \ONO O]^£ MYXOM^KNK XK 1\KXNO <ONO K
]OQ_\KX”K^OW[_O]O\QO\SNKOVYQY`O\OWY]Y6SX_b^OW^YNK]K]
PO\\KWOX^K]OKNYM_WOX^K”ÁYXOMO]]£\SK]ZK\KS]]Y
.O`O]OVOWL\K\[_O^KS]PO\\KWOX^K]]ÁYSX¦^OS] ]O Y KNWSXS]^\KNY\
XÁY ^S`O\ _WK ZYV´^SMK NO ]OQ_\KX”K 8ÁY MYX]^S^_S YLTO^S`Y NO]^O
NYM_WOX^Y
^\K^K\
ObZVSMS^KWOX^O
NY
^OWK
6OS^_\K]
SXSMSK]
YL\SQK^¥\SK] ZK\K ^KX^Y ]ÁY$ Y <0- # SX^S^_VKNY NO =S^O
=OM_\S^c2KXNLYYUR^^Z$aaa\PMONS^Y\Y\QO]M\S^YZY\,0\K]O\
]O^OWL\Y
NO
##!%
O
Y
6SX_b
=OM_\S^c
29A>9
P^Z$]_X]S^O_XMON_Z_L6SX_bNYM]29A>9NO50OXdSO.A\O]US
WKSY NO ##"% O Y VS`\Y NO :K_V =O\c 0O\\KWOX^K] :YNO\Y]K] ZK\K
<ONO] OW 6SX_b ON -S XMSK 7YNO\XK +VS Y VOS^Y\ OXMYX^\K\£ ZY\
MO\^Y Y] OX]SXKWOX^Y] SXSMSKS] ZK\K K MYX]^\_”ÁY NK ZYV´^SMK NO
]OQ_\KX”K NO ]_K \ONO O [_O Y <0- # Z\YZ\SKWOX^O NOPSXO MYWY
_WK NOMVK\K”ÁY PY\WKV NO \OQ\K] [_O MYXMONOW KMO]]Y K \OM_\]Y] NO
SXPY\WK”ÁY O ^OMXYVYQSK O [_O VYQY NO`OW ]O\ M_WZ\SNK] .O`OWY]
VOWL\K\ KSXNK [_O Y KV_XY ZYNO\£ OXMYX^\K\ _WK \O_XSÁY LK]^KX^O
KL\KXQOX^ONOPO\\KWOX^K]ZK\K^YNY]Y]]KLY\O]€NO]S]^OWK]?83B
XY ]S^O R^^Z$aaa]OM_\S^cPYM_]MYW `S]S^K YL\SQK^¥\SK ZK\K ^YNY
K[_OVO[_O]OYM_ZKMYW]OQ_\KX”K
1Y]^K\´KWY] NO \O]_WS\ K[_S KVQ_X] ZYX^Y] NY 6SX_b =OM_\S^c 29A>9
ARK^ K\O cY_ ^\cSXQ ^Y Z\Y^OM^)€ / Y .O`OVYZSXQ K
]OM_\S^c ZYVSMc€ O OVO] NO`OW ]O\ VO`KNY] OW MYX]SNO\K”ÁY KX^O]
WO]WY NO ]O M\SK\ _WK ZYV´^SMK NO ]OQ_\KX”K ZK\K K ]_K \ONO +X^O]
NO Z\Y^OQO\ ]O_ ]S]^OWK `YM NO`O ]KLO\ NO [_O ^SZY NO KWOK”K ]O
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
6
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
O]^£ ^OX^KXNY Z\Y^OQO\ ]O K^KMKNY Y [_O O]^£ OW TYQY @OTKWY]
OX^ÁY$
*O risco é a possibilidade que um intruso possa ter sucesso ao tentar invadir seus computadores. Um intruso pode, ao
acessar seus arquivos, danificar dados críticos? Não se esqueça, também, que ao possuir uma conta de sua rede, o
intruso pode se passar por você.
*As ameaças serão sempre no sentido de se obter acesso não-autorizado em sua rede ou computador. Há portanto
vários tipos de intrusos e, então, diferentes tipos de ameaça a sua rede.
*Há o curioso: esse tipo de intruso se interessa pelo tipo de dado e sistema você possui.
*Há o malicioso: esse quer em síntese derrubar o seu sistema, destruir dados, destruir os documento publicados no
seu Web server, etc. É o chamado cracker.
*Há o intruso de “alto-nível” (High-Profile): ele quer obter popularidade mostrando suas habilidades ao invadir seu
sistema.
*Há o competidor: esse que conhecer seus dados para obter algum ganho com isso.
*Por fim, “vulnerabilidade” descreve o quão bem protegido é seu computador, e o que se perderá se alguém obter
acesso não-autorizado a algum(ns) computador(res).
Portanto, crie uma política de segurança para sua rede que seja simples e genérica e que todos os usuários
possam prontamente compreender e seguir. Você pode proteger dados tanto quanto respeitar a privacidade dos
usuários
1.4 Nosso objetivo
/W]_WKXY]]KSX^OX^Y¤WY]^\K\MYWYT£NS]]OWY]K]PO\\KWOX^K]
XOMO]]£\SK] ZK\K K MYX]^\_”ÁY O QO\ XMSK NO _WK ZYV´^SMK NO
]OQ_\KX”KOWKWLSOX^O6SX_b>YNY]]ÁY]YP^aK\O] KLO\^Y] O MYLO\^Y]
ZOVK1:61OXO\KV:_LVSM6SMOX]ONK18?K]]SWMYWYKNYM_WOX^K”ÁY
NS]ZYX´`OV:K\K^KX^YXY]]YMKWSXRYXÁYMYWO”K\£NK]OQ_\KX”KVYMKV
1
RFC é o acrônimo de Request for Comments, um enorme conjunto de documentos organizados pela INTERNIC reunindo
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
7
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
Y_]OTK_WK\ONOSX^O\XK]OQ_XNYKXYWOXMVK^_\KNY=S^O=OM_\S^c
2KXNLYYU OW NS\O”ÁY § ]OQ_\KX”K Ob^\KXO^ \ONO Ob^O\XK
-YX^\K\SKWOX^O S\OWY] NK ]OQ_\KX”K Ob^O\XK ZK]]KXNY YL`SKWOX^O
ZOVK][_O]^ÁYNO]OQ_\KX”KXK\ONOSX^\KXO^ZYS]YPS\OaKVV^KWL¤W
YM_ZK]OMYWO]^OZYX^YZK\KK]OQ_\KX”KSX^O\XK
informações sobre TCP/IP e outros protocolos, assim como Redes, segurança, correio eletrônico, etc.
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
8
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
2 0 Firewall: duas soluções em ambiente Linux
2.1 Uma palavra inicial sobre firewalls
0S\OaKVV ¤ _WK ZK\ONO€ [_O ]OZK\K ]_K SX^\KXO^ NY W_XNY Ob^O\SY\
S]^Y ¤ K SX^O\XO^ 7K] ^KWL¤W _W PS\OaKVV ZYNO ]O\ _]KNY
OPSMSOX^OWOX^OX_WKSX^\KXO^[_OXÁYMROQKK^O\KMO]]Y§SX^O\XO^
:YS] ZYNO PSV^\K\ ZKMY^O] [_O ZK]]KW NO _WK W£[_SXK K Y_^\K X_WK
SX^\KXO^
Definindo:
Um firewall é todo sistema conjunto de hardware e software que
é
elaborado
para
proteger
uma
intranet
de
usuários
potencialmente perigosos, visto que não autorizados.
/X^\O^KX^Y K MKZKMSNKNO OPO^S`K NO MYX^\YVO NO _W PS\OaKVV ¤
SWZVOWOX^KNK KY Z¡\]O OX^\O K \ONO VYMKV O K SX^O\XO^ NO PY\WK K
O`S^K\ [_O Y W_XNY ^OXRK KMO]]Y K NKNY] ZK\^SM_VK\O] 7K] XÁY
O]^KWY] PKMO K PKMO MYW KVQY K]]SW MYWY _W Z\YQ\KWK€ P£MSV O
]SWZVO] NO ObOM_^K\ :YS] MYWY T£ `SWY] _W PS\OaKVV ^OW
SX[_O]^SYXK`OVWOX^O_WKXK^_\OdKKL\KXQOX^O
8ÁY RK`O\SK Z\YLVOWK] NO ]OQ_\KX”K ]O `YM MYWY [_O S]YVK]]O ]O_]
MYWZ_^KNY\O] Y_ ]_K \ONO NY W_XNY 7K] _WK SX^\KXO^ ¤
P_XNKWOX^KVWOX^O _WK \ONO SX^O\XK [_O _]K ^OMXYVYQSK] AY\VN ASNO
AOL ZK\K ZK\^SVRK\ ^K\OPK] O SXPY\WKӃO] OX^\O NOZK\^KWOX^Y] OY_
VYMKS]\OWY^Y]€8ÁYZY]]YSX]^KVK\_W]O\`SNY\+ZKMROX_WKW£[_SXK
O POMRK\ Y KMO]]Y K ]O_] NKNY] OW WO_ PS\OaKVV ^ÁY ZY_MY ZY]]Y
POMRK\YKMO]]YK^YNY]Y]MYWZ_^KNY\O][_OPY\WKWK\ONOW_XNSKV
2
Definiçao retirada de SCO OpenServer© Internet Services (v.5.0.4 may 1997), p. 11.
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
9
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
/]^OO][_OWKWY]^\KKSWZVOWOX^K”ÁY]SWZVO]NO_WPS\OaKVV$
>YNK`SK NO`O\´KWY] XY^K\ OW XY]]Y O][_OWK [_O XY]]K \ONO ^OW [_O
ZY]]_S\_WRY]^_WLK]^SYXRY]^[_OVSQKNYKY\Y^OKNY\XY]ZÉOOW
MYX^K^YMYWYW_XNY»LK]^KX^OMYX]OX]_KV[_O^KVW£[_SXKNO`O^O\
]O_] ]O\`S”Y] NO]VSQKNY] Y W´XSWY NO ZY\^K] NO`OW O]^K\ K^S`K]
:K\K^KX^YYKV_XYNO`O]OQ_S\K]Y\SOX^K”ÉO]L£]SMK]ZK\KNO]VSQK\
]O\`S”Y] XY ]O_ SXO^N 9 6SX_b NK <ON 2K^ ZY]]_S _WK PO\\KWOX^K NO
]O^_ZOWWYNY^Ob^Y:YNO]O_]£VKMYWY_WKSX^O\PKMO`KVSY]KZK\K
NO]VSQK\]O\`S”Y]MYWYP^Z^P^Z^OVXO^O^M@YM ZYNOMRKW£VKXY
MYX]YVO K ZK\^S\ NY MYWKXNY ]O^_Z Y_ MRKWK\ NS\O^KWOX^O ZOVY
MYWKXNYXO^]c]`ZYS]KPO\\KWOX^K]O^_Z¤KZOXK]_WKSX^O\PKMOZK\K
NS`O\]Y] Y_^\Y] Z\YQ\KWK] NO MYXPSQ_\K”ÁY 3Q_KVWOX^O XÁY ]O PKd
XOMO]]£\SYKSX]^KVK”ÁYNY]S]^OWKQ\£PSMYBP\OO9RY]^\O]ZYX]£`OV
ZOVY PS\OaKVV NO XY]]K \ONO NO`O ]O\ _WK W£[_SXK OXb_^K€ MYW K
Z\SY\SNKNO¥L`SKNOM_WZ\S\K]P_X”ÉO]NOPS\OaKVV
2.2 Firewalls e acesso remoto: o Secure Shell
:K\K Y KMO]]Y \OWY^Y KY XY]]Y PS\OaKVV NO`OWY] _]K\ Y ]YP^aK\O ==2
=OM_\O =ROVV ]]R$ R^^Z$aaa]]RY\Q O XÁY ^OVXO^ Y_ \]R Y_
\VYQSX WO]WY ZY\[_O T£ ^\K^KWY] NO NO]VSQ£VY] 9 ]]R ¤ _W ZKMY^O
MYWZVO^Y ZK\K VYQSX \OWY^Y [_O ^OW K MKZKMSNKNO NO M\SZ^YQ\KPK\
_^SVSdKXNY]ONKK_^OX^SMK”ÁYPY\^O<=+KMYW_XSMK”ÁYOX^\O\ONO]O
RY]^] XÁYMYXPS£`OS] +]]SW ]OXNY ^YNK] K] MYW_XSMK”ÉO] ]ÁY
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
10
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
M\SZ^YQ\KPKNK] + <=+ ¤ _]KNK ZK\K _W SX^O\MŸWLSY NO MRK`O]€ X_W
O][_OWKNOMRK`O]Z¦LVSMK]OZ\S`KNK]O_WW¤^YNYNOM\SZ^YQ\KPSK
3./+ ,VYaPS]R O^M ¤ _]KNY ^KWL¤W ZK\K M\SZ^YQ\KPK\ K ]O]]ÁY
\OWY^K K ]O\ KLO\^K 9 [_O ¤ SWZY\^KX^O XY ]]R ¤ [_O Y ]YP^aK\O
NS]ZK\K K M\SZ^YQ\KPSK KX^O] NY Z\YMO]]Y NO K_^OX^SMK”ÁY Y_ ]OTK
KX^O]NKMROMKQOWNK]]OXRK]:Y\^KX^YXOXR_WK]OXRK¤OX`SKNKZOVK
\ONOOWKLO\^Y]OWM\SZ^YQ\KPSK
+WKSY\ZK\^ONK]NS]^\SL_S”ÉO]K^_KS]NY6SX_bT£`OWMYWK`O\]ÁY
!NO]^OZ\YQ\KWKK¦V^SWK`O\]ÁY¤KMRKWKNKNO]]R
=O MYX]OQ_S\ Y ]]R K^\K`¤] NO _W ZKMY^O <:7 LK]^K SX]^KV£VY MYW Y
MYWKXNY\ZWS`R€/VOSX]^KVK\£Y]]OQ_SX^O]K\[_S`Y]$
$UTXLYRV
'HVFULomR
VVKG
'DHPRQ TXH URGD QD PiTXLQDVHUYLGRU
HVSHUD R SHGLGR GR FOLHQWH VVK DXWHQWLFD D
FRQH[mR H LQLFLD D VHVVmR
VVKRXVORJLQ
&OLHQWH SURJUDPD XVDGR SDUD ORJLQ H H[HFXomR
VFS
8VDGR SDUD FRSLDU DUTXLYRV GH XP FRPSXWDGRU
GH RXWURV FRPDQGRV
SDUD RXWUR HP VHJXUDQoD
VVKNH\JHQ
8VDGR SDUD FULDU FKDYHV 56$
VVKDJHQW
$JHQWH SDUD D DXWHQWLFDomR GDV FKDYHV
VVKDGG
8VDGR SDUD UHJLVWUDU QRYDV FKDYHV
PDNHVVKNQRZQKRVWV
6FULSW
SHUO
XVDGR
SDUD
FULDU
R
DUTXLYR
HWFVVKBNQRZQBKRVWV D VHU XVDGR SHOR '16
<OKVSdKNKKSX]^KVK”ÁYMYW bS^Y`KWY]QO\KWY]OX^ÁY_WKMRK`O<=+
ZK\KY_]_£\SY\YY^X_WRY]^MRKWKNYKVZRK_]KXNYYMYWKXNYNO]M\S^Y
KMSWK]]RUOcQOX/XMYX^\K\´KWY]ZY\ObOWZVYK]OQ_SX^O]K´NK$
>URRW#DOSKD @ VVKNH\JHQ
,QLWLDOL]LQJ UDQGRP QXPEHU JHQHUDWRU
*HQHUDWLQJ S GLVWDQFH *HQHUDWLQJ T GLVWDQFH &RPSXWLQJ WKH NH\V
7HVWLQJ WKH NH\V
.H\ JHQHUDWLRQ FRPSOHWH
(QWHU ILOH LQ ZKLFK WR VDYH WKH NH\ URRWVVKLGHQWLW\
(QWHU SDVVSKUDVH HQWUH FRP D VHQKD QDGD VHUi HFRDGR
3
A autenticação RSA é baseada numa chave pública de criptografia. Uma chave para criptografar e a outra para
descriptografar. A chave pública é usada para criptografar, e a chave para descriptografar por sua vez é privada, mas
jamais poderemos derivar esta chave de descriptografar da outra.
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
11
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
(QWHU WKH VDPH SDVVSKUDVH DJDLQ LGHP
<RXU LGHQWLILFDWLRQ KDV EHHQ VDYHG LQ URRWVVKLGHQWLW\
<RXU SXEOLF NH\ LV
URRW#FLSVJDRUJEU
<RXU SXEOLF NH\ KDV EHHQ VDYHG LQ URRWVVKLGHQWLW\SXE
.OZYS] NO QO\K\WY] XY]]K] MRK`O] K Z¦LVSMK O K Z\S`KNK O O]^K]
]O\OW Q\K`KNK] XY NS\O^¥\SY NO XY]]K O]MYVRK K[_S KMOS^KWY] K
WOVRY\YZ”ÁYKNOPK_V^NY]]RUOcQOX`KWY]^OX^K\KL\S\_WK]O]]ÁY
]OQ_\K 7K] KX^O] ^OWY] NO MK\\OQK\ Y Z\YQ\KWK ]O\`SNY\ NY ]]R Y
]]RN /bOM_^K\OWY] ]]RN WKX_KVWOX^O ZK\K ^KX^Y Y KV_XY NO`O
NSQS^K\$ O^M\MNSXS^N]]RN ¤ MYW O]]O ]M\SZ^ [_O Y <ON 2K^
6SX_b ]KLSNKWOX^O MK\\OQK OW ^YNK SXSMSKVSdK”ÁY Y NKOWYX ]OW
ZY\^KX^Y K XOMO]]SNKNO NO _WK ObOM_”ÁY WKX_KV .OZYS] KV_XY NO`O
`O\SPSMK\MYWKPO\\KWOX^KXO^]c]`NY<ON2K^]OY]]RNO]^£WK\MKNY
ZK\K ObOM_”ÁY K_^YW£^SMK .O`O ]O ^O\ K^OX”ÁY ZK\K ^KV NO^KVRO
ZY\[_O ]O Y ]]R Y MVSOX^O XÁY OXMYX^\K\ Y ]]RN \YNKXNY OVO
YPO\OMO K ZY]]SLSVSNKNO NO _WK ]O]]ÁY XÁY]OQ_\K `SK \]R -YWY XY
ObOWZVYKLKSbY$
>URRW#EHWD URRW@ VVK DOSKD
6HFXUH FRQQHFWLRQ WR DOSKD UHIXVHG UHYHUWLQJ WR LQVHFXUH PHWKRG
8VLQJ UVK :$51,1* &RQQHFWLRQ ZLOO QRW EH HQFU\SWHG
HQFU\SWHG
3DVVZRUG Õ
+]]SW MO\^Y] [_O Y ]]RN O]^£ K^S`Y XY RY]^ KVZRK X_WK Y_^\K
W£[_SXK[_OMRKWKWY]LO^KMK\\OQKWY]YMVSOX^O]]RZK\KMYXOM^K\MYW
YRY]^KVZRK`OTKWY]$
>URRW#EHWD @ VVK DOSKDFLSVJDRUJEU
+RVW NH\ QRW IRXQG IURP WKH OLVW RI NQRZQ KRVWV
$UH \RX VXUH \RX ZDQW WR FRQWLQXH FRQQHFWLQJ \HVQR" <HV
+RVW EHWDFLSVJDRUJEU
DGGHG WR WKH OLVW RI NQRZQ KRVWV
&UHDWLQJ UDQGRP VHHG ILOH aVVKUDQGRPBVHHG 7KLV PD\ WDNH D ZKLOH
URRW#DOSKDFLSVJDRUJEU
V SDVVZRUG >HQWUD FRP VHQKD QDGD p HFRDGR@
/DVW ORJLQ IURP 6DW -DQ IURP DOSKD
>URRW#DOSKD URRW@
@KWY]OX^OXNO\K]WOX]KQOX]NK^OVK;_KXNYY]O\`SNY\]]RNXYRY]^
KVZRK \OMOLO_ K ]YVSMS^K”ÁY OVO XY] KN`O\^S_ XÁY ^O\ OXMYX^\KNY K
RY]^ UOc NK VS]^K NO RY]^] MYXROMSNY] KSXNK K]]SW KMOS^KWY]
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
12
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
MYX^SX_K\KMYXObÁYOVOZÉOKW£[_SXKLO^KXKVS]^KOMYX^SX_KMYW
K K_^OX^SMK”ÁY NOZYS] [_O OVK ¤ ObOM_^KNK MYW bS^Y \OMOLOWY] Y
^O\WSXKV`S\^_KV=O\OKVSdK\WY]YVYQY_^OXY`KWOX^OOX^\K\MYW_W
ZONSNYNO]O]]ÁY]]RYNKOWYXV YK\[_S`Yh]]R\KXNYXI]OONOXY]
ZO\WS^OK]O]]ÁY]OQ_\KOKK_^OX^SMK”ÁYZKN\ÁYNY]S]^OWK:Y\¤WY
KV_XYNO`OO]MYVRO\OX^\OO]^OW¤^YNYYSWZY\^K\]_KMRK`OZ¦LVSMK
K\WKdOXKNK XY K\[_S`Y SNOX^S^cZ_L ZK\K K W£[_SXK \OWY^K 3]]Y
ZY]]SLSVS^K\£KYZ\YQ\KWK_]K\KK_^OX^SMK”ÁYLK]OKNKOW<=+-YWY
XY]]K W£[_SXK RKLSVS^KNK ZK\K PS\OaKVV XÁY XY] ZY]]SLSVS^K
^\KX]PO\ XMSKNOK\[_S`YP^Z80=O^M_]K\OWY]Y`OVRYNS][_O^O
_]KXNY _W Z\YQ\KWK NK] PO\\KWOX^K] W^YYV] Y WMYZc -YVY[_O _W
NS][_O^O XK _XSNKNO XK O NSQS^O$ WMYZc h]]RZ_L K$€ -YW S]]Y
MYZSK\OWY] ZK\K Y NS\O^¥\SY \OWY^Y h]]R XY]]K MRK`O Z¦LVSMK
K^OX”ÁY$ ]¥ VO`KWY] XY]]K MRK`O Z¦LVSMK + MRK`O Z\S`KNK XÁY NO`O
]O\ NS`_VQKNK WK] KQY\K MYW _W XY`Y XYWO K ]O\ _^SVSdKNY XK]
MYXObÉO] K ]KLO\ K_^RY\SdONIUOc] >KV K\[_S`Y MY\\O]ZYXNO KY
MYX`OXMSYXKV K\[_S`Y \RY]^]% OVO ZY]]_S _WK MRK`O ZY\ VSXRK
]_ZY\^KXNY ZY\^KX^Y NS`O\]K] MRK`O] Z¦LVSMK] NO NSPO\OX^O] _]_£\SY]
O RY]^] +^OX”ÁY ZK\K XÁY ^\_XMK\ Y K\[_S`Y ZYS] K] MRK`O] ]ÁY
VYXQK] O NO`OW OX^\K\ X_WK ¦XSMK VSXRK 6YQY NOZYS] NS]]Y Y
_]_£\SYZYNOObOM_^K\YVYQSX]OWKK_^OX^SMK”ÁYZKN\ÁYWK]KZOXK]
NKXNYYZK]]ZR\K]ONKMRK`O<=+[_O¤]YL\OWKXOS\KWKS]]OQ_\Y
-YWKM\SK”ÁYNYK_^RY\SdONIUOc][_KXNYKL\S\WY]KXY`K]O]]ÁYMYW
YMVSOX^O]]R`O\OWY]Z\SWOS\KWOX^OOX^ÁY$
>URRW#DOSKD@VVK EHWD
+RVW NH\ QRW IRXQG IURP WKH OLVW RI NQRZQ KRVWV
$UH \RX VXUH \RX ZDQW WR FRQWLQXH FRQQHFWLQJ \HVQR" <HV
+RVW EHWD
DGGHG WR WKH OLVW RI NQRZQ KRVWV
(QWHU WKH SDVVSKUDVH IRU 56$ NH\ URRW#DOSKDFLSVJDRUJEU
QDGD HFRD
/DVW ORJLQ 6XQ -DQ RQ WW\
<RX KDYH PDLO
>URRW#EHWD URRW@
8_WKZY]^O\SY\MYXObÁYOXMYX^\K\OWY]Y]OQ_SX^OMOX£\SY$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
13
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
>URRW#DOSKD @VVK EHWD
(QWHU WKH SDVVSKUDVH IRU 56$ NH\ URRW#DOSKDFLSVJDRUJEU
QDGD HFRD
/DVW ORJLQ 6XQ -DQ IURP DOSKD
<RX KDYH PDLO
>URRW#EHWD URRW@
+]]SWYKV_XYOX^\KMYWK]_KZK]]ZR\K]OK]MRK`O]]ÁYMROMKNK]OK
]O]]ÁY]OQ_\KM\SZ^YQ\KPKNK¤ZY]^KOWK”ÁY
9_^\Y W¤\S^Y SXNS]M_^´`OV NY =OM_\O =ROVV ¤ Y PK^Y NY MVSOX^O ZK\K
KMO]]Y \OWY^Y T£ O]^K\ ZY\^KNY ZK\K NS`O\]K] ZVK^KPY\WK] ?83B
9=ASXO^MY[_O¤LK]^KX^OSWZY\^KX^O[_KXNY^OWY]\ONO]
R´L\SNK]€@S]S^OY]S^OP^Z$P^ZM]R_^PSZ_L]]RZK\K_WK`S]ÁY
NO `O\]ÉO] NS]ZYX´`OS] :YNOWY] ]_QO\S\ KY KV_XY ZO][_S]K\ K]
]OQ_SX^O]`O\]ÉO]XÁYMYWO\MSKS]ZK\KASXO9=\O]ZOM^S`KWOX^O$
Âhttp://www.chiark.greenend.org.uk/~sgtatham/putty/ (PuTTY é uma versão livre para telnet e SSH).
R^^Z$NYWOaOOQ_SYaKON_Z_LNYWO]^SM]Y]ZY\^]]]R!McQaSXL^K\Ld
@O\]ÁY MVSOX^O O ]O\`SNY\ ==2 NOX^\Y NY Z\YTO^Y -cQX_]
ÂP^Z$P^ZM]R_^PSZ_L]]RY]]]RY]dSZ
@O\]ÁY ==2 ZK\K 9= b
8O]^K^OVK`O\OWY]_WMVSOX^OMYWZSVKNYO\YNKXNYX_WKW£[_SXK?83B
=-9 9ZOX=O\`O\ ` R^^Z$aaa]MYMYW O KL\SXNY _WK MYXObÁY
]]RMYWMROMKQOWNKMRK`O<=+X_WRY]^6SX_b$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
14
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
2.3 Firewalls: solução Linux
8ÁYNS]M_^S\OWY]K[_SKSWZVOWOX^K”ÁYP´]SMKNO_WPS\OaKVV8Y]]Y¤
YLTO^S`Y¤WY]^\K\K]PO\\KWOX^K]NS]ZYX´`OS]XY6SX_b9KV_XY^OW
[_O^O\OWWOX^O^KWL¤W[_OXÁYObS]^O_WK]YV_”ÁY¦XSMKOW^O\WY]
NO PS\OaKVV @YM ^OW [_O MYXROMO\ K] PO\\KWOX^K] O OX^ÁY KNKZ^£
VK]§]XOMO]]SNKNO]O]ZOM´PSMK]NO]_K\ONOWYX^K\]_KZYV´^SMKNO
]OQ_\KX”K O KNKZ^£VK K _W PS\OaKVV @YM ^O\£ _WK SX^\YN_”ÁY O
NOZYS] ^O\£ [_O ZO][_S]K\ ]_K] NOWKXNK] O]ZOM´PSMK] =ÁY ^KX^Y] Y]
MOX£\SY] ZY]]´`OS] [_O Y ^OWK ^Y\XK]O SXO]QY^£`OV$ _WK ZO[_OXK
\ONO NYW¤]^SMY Y_ _W ZO[_OXY O]M\S^¥\SY [_O ]O MYXOM^K K 3X^O\XO^
`SK ZZZ% _WK \ONO MYW _W \Y^OKNY\ MYXOM^KNY K 3X^O\XO^% _WK \ONO
W¤NSK MYW NYS] PS\OaKVV] O^M O^M .K\OWY] K[_S Y] MYXMOS^Y]
Z\SXMSZKS]NK]PO\\KWOX^K]]O_]MYWKXNY]YZ”ÉO]O_^SVSdK”ÁY
?W PS\OaKVV ¤ SWZVOWOX^KNY XY 6SX_b OW X´`OV NO UO\XOV ZY\ S]]Y
^YNY Y ^Ob^Y ]YL\O Y ^OWK MYWO”K MYW K] YZ”ÉO] ZK\K \OMYWZSVK\ Y
UO\XOV=OWN¦`SNKZK\K^O\WY]_WPS\OaKVVXY6SX_bXOMO]]S^KWY]NO
]_KRKLSVS^K”ÁYXYUO\XOV7K]S]]YXÁY]OPKdXOMO]]£\SYZYS]Y<ON
2K^ b T£ `OW MYW Y UO\XOV ZK\K PS\OaKVVSXQ ^KX^Y [_KX^Y Y =_=/
b ZY\ ObOWZVY Y 9ZOX6SX_b NK -KVNO\K ` ZY\ ]O\ WKS]
`YV^KNYZK\K_W]S]^OWKNO]U^YZXÁYZY]]_S_WUO\XOVMYWZSVKNYZK\K
PS\OaKVV +SXNK K]]SW ]O NO]OTK\ MROMK\ ]O ]_K] W£[_SXK] O]^ÁY
RKLSVS^KNK] ZK\K PS\OaKVV NSQS^O$ €V] Z\YMXO^SZIPaMRKSX]€ ]O
^KV K\[_S`Y O]^S`O\ K´ YU ^OWY] PS\OaKVV +ZOXK] MYWY SXPY\WK”ÁY
VS]^KWY] KLKSbY K] YZӃO] K ]O\OW RKLSVS^KNK] O NO]KLSVS^KNK] X_W
UO\XOV\OMYWZSVKNYZK\KPS\OaKVV$
Em 'general setup':
1. turn networking support => ATIVO
Em 'networking options':
1. turn network firewalls => ATIVO
4
O Linux IPCHAINS-HOWTO por exemplo apresenta 4 diferentes cenários possíveis.
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
15
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
2. turn TCP/IP networking => ATIVO
3. turn IP forwarding/gatewaying => ATIVO
4. turn IP firewalling => ATIVO
5. turn IP firewall packet logging => ATIVO
6. turn IP masquerading => ATIVO
7. turn IP accounting => ATIVO
8. turn IP tunneling => DESATIVO
9. turn IP aliasing => ATIVO (pode-se optar por seu uso modular...)
10. turn IP (PC/TCP mode) => DESATIVO
11. turn IP (reverse ARP) => DESATIVO
12. turn drop source routed frames => ATIVO
Em 'network device support':
1. turn network device support => ATIVO
2. turn net driver support => ATIVO
3. turn ethernet (10/100 mbit.) => ATIVO
2.4 A filtragem de pacotes
+] SXPY\WK”ÉO] [_O K^\K`O]]KW _WK \ONO ]ÁY NO]WOWL\KNK] O OX`SKNK]
XK PY\WK NO ZKMY^O] Y_ NK^KQ\KWK] >KS] ZKMY^O] ^ W _W PY\WK^Y [_O
SXMV_S _W MKLO”KVRY O _W MY\ZY NO NKNY] 8Y MKLO”KVRY NY ZKMY^O 3:
OXMYX^\KWY]KVQ_WK]SXPY\WKӃO]^KS]MYWY$
KOXNO\O”YNOY\SQOW
LOXNO\O”YNONO]^SXY
:Y\MYX]OQ_SX^O_WPSV^\YNOZKMY^O]€ZY]]_SKRKLSVSNKNONOYVR£
VY] [_KXNY OVO] ZK]]KW O K]]SW NOMSNS\ Y ]O_ NO]^SXY :YNOXNY
O]MYVRO\ ZY\ XOQK\ NOXc _W ZKMY^O NO]MK\^KXNYY ^Y^KVWOX^O
KMOS^K\KMMOZ^YZKMY^ONOSbKXNYYZK]]K\Y_ ZY\ PSW\OTOS^K\
\OTOM^ Y ZKMY^O ZY\¤W \O^Y\XKXNY _WK WOX]KQOW KY OXNO\O”Y NO
Y\SQOW /S] K´ ^\ ] MYXMOS^Y] P_XNKWOX^KS] OW [_KV[_O\ ]YP^aK\O NO
PS\OaKVV
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
16
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
» ZY\ O]]K] MK\KM^O\´]^SMK] [_O _W PS\OaKVV ZYNO XY] QK\KX^S\
]OQ_\KX”KOMYX^\YVOX_WK\ONOYKNWSXS]^\KNY\ZY\O`S^K\YOX`SY
NO ZKMY^O] ZK\K PY\K NK \ONO Y_ OX^ÁY [_O ZKMY^O NO PY\K OX^\O OW
MO\^K]ZK\^O]NKSX^\KXO^
2.5 IPCHAINS (The Enhanced IP Firewalling Chains Software for Linux)
O Ipchains5, escrito por Rusty Russel ([email protected]), tem a habilidade de filtrar os pacotes que passam pelo
kernel. Não é um software simples, mas conhecendo o seu mecanismo e seus conceitos o administrador de rede pode
escolher a política de segurança de sua rede. A versão trabalhada aqui será a 1.3.8 (ipchains-1.3.8-3.i386.rpm).
Para lidar com um pacote o kernel do Linux possui três regras principais, que o Ipchains chama de firewall chains ou
chains - não usaremos tradução para a palavra chains/chain, iremos portanto conservá-la em inglês. São elas:
IP INPUT CHAIN: quando um pacote entra ...
IP OUTPUT CHAIN: quando um pacote sai ...
IP FORWARD CHAIN: quando um pacote é roteado para
outra máquina ...
» XO]^O ^\SZ¤ [_O ]O P_XNKWOX^K K MYX]^\_”ÁY NO XY]]Y PS\OaKVV
7YX^K]OZY\^KX^YK]\OQ\K]ZK\KQO\S\O]]O]MRKSX]Z\SXMSZKS]$_W
ZKMY^O OX^\K ZY]]Y \OM_]£VY NO ^KV OXNO\O”Y NO Y\SQOW KMOS^£VY
ZK\K^KVNO]^SXYWK]]OK^\K`O]]KWO_PS\OaKVVOWNS\O”ÁYK^KVY_
[_KVNO]^SXY\OM_]YO^M
+] [_K^\Y YZO\K”ÉO] WKS] L£]SMK] O MYW_X] XY 3ZMRKSX] ]ÁY$
KM\O]MOX^K\KZZOXN_WKXY`K\OQ\KMYWKPVKQ+ObMV_S\NOVO^O
_WK\OQ\KMYWKPVKQ.%OVS]^K\K]\OQ\K]ObS]^OX^O]MYWKPVKQ
6OVSWZK\PV_]RSXNS]M\SWSXKNKWOX^O^YNK]K]\OQ\K]MYWKPVKQ
0
5
Uma questão terminológica: o aluno não deve confundir ipchains com o antigo ipfwadm: o primeiro está em
distribuições com o kernel 2.2.x e o último no kernel 2.0.x; os parâmetros são essencialmente diferentes, portanto não
servem os scripts feitos para o ipfwadm.
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
17
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
@OTKWY]KVQ_X]MKWSXRY]MYWY3ZMRKSX]OWK”ÁY»M_\SY]YXY^K\[_O
^YNK Z_LVSMK”ÁY OX]SXKXNY _WK VSXQ_KQOW NO Z\YQ\KWK”ÁY OW QO\KV
MYWOMO WY]^\KXNY MYWY QO\K\ XO]^K VSXQ_KQOW _WK P\K]O NY ^SZY
v2OVVY AY\VNv 8Y MK]Y NK] \OQ\K] NY PS\OaKVV MYWO”KWY]
WY]^\KXNY MYWY SWZONS\ Y ZSXQ ZK\K K SX^O\PKMO NO VYYZLKMU€ VY
^O\´KWY]Y]OQ_SX^O$
LSFKDLQV $ LQSXW V S LFPS M '(1<
/V_MSNKXNYY]ZK\ŸWO^\Y_]KNY]$
+SXZ_^ÂKM\O]MOX^KWY]_WK\OQ\KZK\KKOX^\KNK
]ÂOS]YOXNO\O”YNOY\SQOX]NY]ZKMY^O]
ZÂYZ\Y^YMYVY_]KNY3-7:
T./8CÂY[_OPK\OWY]MYWYZKMY^OT_WZ^Y$K[_SXOQKWY]
+QY\K]OObOM_^KWY]_WZSXQZK\KYOXNO\O”YNOVYYZLKMUS\OWY]`O\
K ^\KNSMSYXKV WOX]KQOW NO v ZKMUO^ VY]]v + \OQ\K [_O
O]^KLOVOMOWY]NSd[_ONO`O]OXOQK\^YNY]ZKMY^O] 3-7: [_O MROQK\OW
NYOXNO\O”Y!YZK\ŸWO^\Y./8C¤MRKWKNY^OMXSMKWOX^ONO
KV`Y (target).
@OTKWY] Y_^\Y ObOWZVY KQY\K X_WK SX^O\PKMO NO \ONO /W XY]]Y
MOX£\SY NO]OTKWY] POMRK\ K] ZY\^K] O NY XY]]Y RY]^ KVZRK
# "ZK\KLO^K# "%OW]_WK$LO^KXÁYZYNO\£_]K\
^KS] ]O\`S”Y] NK W£[_SXK KVZRK /]^K] ]ÁY K] ZY\^K] ZKN\ÁY ZK\K
>OVXO^ O 0>: XY Z\Y^YMYVY >-: =OQ_XNY K V¥QSMK NK ]_S^O NO
Z\Y^YMYVY] >-:3: XOMO]]S^KWY] KV¤W NY OXNO\O”Y 3: NO _W Y_^\Y
X´`OVNOK^\SL_S”ÁYNOOXNO\O”Y][_O¤MRKWKNYZY\^KNOK ¤ OVK [_O NS\OMSYXK Y] NKNY] [_O MROQKW ZOVY OXNO\O”Y 3: ZK\K _W
NO^O\WSXKNY ]O\`S”Y .O PY\WK [_O ZYNO]O WKX^O\ _W X¦WO\Y NO
MYXObÉO] ]SW_V^ŸXOK] O KY WO]WY ^OWZY ]OZK\KNK] +] ZY\^K] ]ÁY
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
18
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
]OZK\KNK] OW NYS] Q\_ZY] NS]^SX^Y]$ NO K ]ÁY K] ZY\^K]
Z\S`SVOQSKNK]€ ]ÁY _]KNK] ZY\ NKOWYX] MYXPS£`OS] O MYW Z\S`SV¤QSY]
NO \YY^ +] \O]^KX^O] NO K^¤ ]ÁY MRKWKNK] NO XÁY
Z\S`SVOQSKNK]€ O ]ÁY _]KNK] VS`\OWOX^O :Y\ S]]Y KY WYX^K\ _W
PS\OaKVV ^YNK K K^OX”ÁY MYW Y] WY`SWOX^Y] NO ZY\^K] XÁY
Z\S`SVOQSKNK] +LKSbY O]^£ _WK VS]^K \O]_WSNK MYW Y] Z\SXMSZKS]
]O\`S”Y]]O_]ZY\^K]ZKN\ÁYOYZ\Y^YMYVYMY\\O]ZYXNOX^O$
SERVIÇO
PORTA
PROTOCOLO
netstat
15
tcp
ftp
21
tcp
ssh
22
tcp/udp
telnet
23
tcp
smtp
25
tcp
whois
43
tcp
finger
79
tcp
www
80
tcp
pop-3
110
tcp/udp
https
443
tcp/udp
=OO]^S`O\MYXP_]Y]YL\O[_KVYX¦WO\Y[_OMY\\O]ZYXNOK^KVY_[_KV
]O\`S”Y O ^KWL¤W NO]OTK\ _WK VS]^KQOW WKS] MYWZVO^K MYX]_V^O Y
K\[_S`YvO^M]O\`SMO]v ¤ OVO [_O K\WKdOXK K MY\\O]ZYXN XMSK OX^\O
Y XYWO NY ]O\`S”Y >OVXO^ O Y X¦WO\Y NK ZY\^K O ^KWL¤W Y
Z\Y^YMYVY[_O¤_]KNY>-: 9L]O\`OOX^ÁYXY]]YObOWZVY$
>URRW#DOSKD @ LSFKDLQV $ LQSXW V G S WFS - '(1<
>URRW#DOSKD @ LSFKDLQV $ LQSXW V G S WFS - '(1<
-YWO]]K]\OQ\K]XOQKWY]./8CKOX^\KNKNOZKMY^O]NYOXNO\O”YNO
Y\SQOW ]Y_\MO KNN\O]] v]v # " ZK\K Y OXNO\O”Y NO
NO]^SXY vNv # " XK] ZY\^K] O XY Z\Y^YMYVY >-:
9U]OWWOX]KQOX]NOO\\YXY]]K]\OQ\K]PY\KWKMOS^K]>OX^OKQY\K
6
Pode-se consultar também o RFC 177 para uma lista completa das portas.
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
19
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
KL\S\ _WK ]O]]ÁY >OVXO^ Y_ 0>: NK W£[_SXK LO^K K ^OX^K^S`K
YL`SKWOX^O ]O\£ ]OW ]_MO]]Y K ZY\^K O]^£ POMRKNK ZK\K O]^K
W£[_SXK + PVKQ 4 O]ZOM´PSMK _W KV`Y K[_S _]KWY] ./8C% Y] Y_^\Y]
KV`Y]WKS]SWZY\^KX^O]]ÁY+--/:></4/->O7+=;9]NYS]Z\SWOS\Y]
T£WOXMSYXKWY]KX^O\SY\WOX^O_WKMOS^KKOX^\KNKOY\OTOS^KZY\¤W
\O]ZYXNOXNYKYOXNO\O”YNOY\SQOWT£YKV`Y7+=;]¥¤_]KNY[_KXNY
_]KWY] Y MRKSX PY\aK\N vSZMRKSX] + PY\aK\Nv NOSbK Y ZKMY^O
ZK]]K\ZY\¤W_]KXNYK^¤MXSMKNYWK]MK\KWOX^Y
0OS^Y S]]Y `KWY] OX^\K\ Y_^\K YZ”ÁY NY 3ZMRKSX]$ `KWY] ZONS\ _WK
VS]^KPVKQ6NOXY]]K]\OQ\K]$
>URRW#DOSKD @ LSFKDLQV /
&KDLQ LQSXW SROLF\ $&&(37
WDUJHW
SURW RSW
VRXUFH
'(1<
WFS EHWDFLSVJDRUJEU
'(1<
WFS EHWDFLSVJDRUJEU
&KDLQ IRUZDUG SROLF\ $&&(37
&KDLQ RXWSXW SROLF\ $&&(37
GHVWLQDWLRQ
DOSKDFLSVJDRUJEU
DOSKDFLSVJDRUJEU
SRUWV
DQ\ !
DQ\ !
WHOQHW
IWS
+ ]K´NK [_O YL^OWY] NK ^OVK ¤ W_S^Y OV_MSNK^S`K O ^KWL¤W W_S^Y
MVK\K .O SX´MSY NO`OWY] YL]O\`K\ [_O OVO ]OZK\K Y] ^\ ] MRKSX]
Z\SXMSZKS] SXZ_^ PY\aK\N O Y_^Z_^ O XY] WY]^\K [_KS] \OQ\K]
SWZVOWOX^KWY] ZK\K OVO]% YL]O\`O [_O vSXZ_^v O vPY\aK\Nv O]^ÁY
`KdSY] ZYS] XKNK SWZVOWOX^KWY] KSXNK 9_^\Y NO^KVRO K ]O\
YL]O\`KNY$KZ\O]OX”KNKObZ\O]]ÁYOX^\OZK\ X^O]O]vZYVSMc+--/:>v
3]^Y [_O\ NSdO\ [_O K ZYV´^SMK NOPK_V^ NO XY]]Y PS\OaKVV ¤ KMOS^K\
ZKMY^O]% Y [_O ¤ POS^Y ZOVK PVKQ : KY NSQS^K\WY] ZY\ ObOWZVY$
vSZMRKSX]:SXZ_^./8CvY_KSXNK$vSZMRKSX]:Y_^Z_^</4/->v8Y
]OQ_XNY MK]Y ]O XKNK PY\ O]ZOMSPSMKNY Y UO\XOV ZY\ ZKN\ÁY
\OTOS^K\£K]K´NKNO[_KV[_O\ZKMY^O
=OQ_OWOWMYV_XK]K]MK\KM^O\´]^SMK][_OO]MYVROWY]@OTKWY]$
9 KV`Y
:\Y^ Y
Z\Y^YMYVY
9Z^ K]
YZӃO]
;_KV KV`Y
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
=Y_\MO
.O]^SXK^SYX +] ZY\^K]
9 OXNO\O”Y 9 OXNO\O”Y
9 ]O\`S”Y
+] ZY\^K] 9]
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
20
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
_]KWY]
NO Y\SQOW
[_O PYS
^\KN_dSNY
ZK\K _W
0;.8
9 Z\Y^YMYVY 8OXR_WK
YZ”ÁY
[_O
O]MYVROWY] O]ZOM´PSMK
PYS
_]KNK
NO NO]^SXY OW TYQY ]O\`S”Y]
[_O PYS
8Y ]OX^SNY ^\KN_dSNY]
vZY\^K]v
^\KN_dSNY
NO ½ ZK\K NO
ZK\K ]O_
ZK\K _W
XYWO
0;.8
*Fully Qualified Domain Name
@KWY]YL]O\`K\KQY\KMYWYZYNOWY]ObMV_S\K]\OQ\K][_OM\SKWY]2£
Z\SWOS\KWOX^O _WK ]YV_”ÁY NSQKWY] \KNSMKV :YNOWY] ]SWZVO]WOX^O
KZVSMK\ Y ZK\ŸWO^\Y vPV_]Rv S]^Y ¤ VSWZKWY] ^Y^KVWOX^O K] N_K]
\OQ\K]O]^KLOVOMSNK]$
>URRW#DOSKD @ LSFKDLQV )
>URRW#DOSKD @ LSFKDLQV /
&KDLQ LQSXW SROLF\ $&&(37
&KDLQ IRUZDUG SROLF\ $&&(37
&KDLQ RXWSXW SROLF\ $&&(37
.OZYS]NYPV_]R`SWY]KXY]]KVS]^KOOVKO]^£`KdSK
/X^\O^KX^Y S]]Y XÁY ]O\SK _WK ]YV_”ÁY ]O NO]OTK\WY] KZ\Y`OS^K\
Y_^\K]\OQ\K]O]^KLOVOMSNK]8YXY]]YObOWZVY^OWY] N_K] \OQ\K] +
Z\SWOS\KPOMRKKZY\^K>OVXO^OT£K]OQ_XNKPOMRKKZY\^K
0>::YNOWY]NO\\_LK\KZOXK]KZ\SWOS\K\OQ\K$
>URRW#DOSKD @ LSFKDLQV ' LQSXW /NOZYS]ZK\KXY]MO\^SPSMK\WY]NSQS^KWY]$
>URRW#DOSKD @ LSFKDLQV /
&KDLQ LQSXW SROLF\ $&&(37
WDUJHW
SURW RSW
VRXUFH
'(1<
WFS O EHWDFLSVJDRUJEU
&KDLQ IRUZDUG SROLF\ $&&(37
&KDLQ RXWSXW SROLF\ $&&(37
GHVWLQDWLRQ
DOSKDFLSVJDRUJEU
SRUWV
DQ\ !
IWS
=¥XY]\O]^KOX^ÁY_WK\OQ\KKNKZY\^KNO0>:»SWZY\^KX^OK[_SY
KV_XY ZO\MOLO\ K PVKQ SXZ_^ ZYS] ¤ OVK [_O NOPSXO [_O [_O\OWY]
OVSWSXK\ K \OQ\K NY] PS\OaKVV MRKSX] NO OX^\KNK O XÁY NO ]K´NK
Y_^Z_^O^M
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
21
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
?W Y_^\Y ObOWZVY /]^KLOVOMOWY] POMRK\ K MYXObÁY `SK >-: ]OW
O]ZOMSPSMK\ ZY\^K XOW OXNO\O”Y NO Y\SQOW K^OX”ÁY ZK\K O]]O]
NO^KVRO] / SQ_KVWOX^O XOQKWY] [_KV[_O\ MYXObÁY 0>: NK W£[_SXK
KVZRK]OTKZK\K[_KVNO]^SXYPY\@OTKVOWL\KXNY$KVZRK'# "
OLO^K'# "$
>URRW#DOSKD @ LSFKDLQV $ LQSXW G S WFS - '(1<
>URRW#DOSKD @ LSFKDLQV $ RXWSXW V S WFS - '(1<
>URRW#DOSKD @ LSFKDLQV /
&KDLQ LQSXW SROLF\ $&&(37
WDUJHW
SURW RSW
VRXUFH
GHVWLQDWLRQ
SRUWV
'(1<
WFS DQ\ZKHUH
DOSKDFLSVJDRUJEU
DQ\ !
DQ\
&KDLQ IRUZDUG SROLF\ $&&(37
&KDLQ RXWSXW SROLF\ $&&(37
WDUJHW
SURW RSW
VRXUFH
GHVWLQDWLRQ
SRUWV
'(1<
WFS DOSKDFLSVJDRUJEU
DQ\ZKHUH
IWS !
DQ\
;_O\OWY] OX^ÁY VSLO\K\ K] MYXObÉO] NO 0>: NK W£[_SXK # ")
=SWZVO]$vSZMRKSX].Y_^Z_^v
-YW O]]O MOX£\SY KMSWK ]O _]K\WY] _WK PO\\KWOX^K NO `K\\ON_\K NO
ZY\^K]^O\OWY]_W[_KN\YSX^O\O]]KX^O:YNOWY]_]K\YXWKZ8O^aY\U
/bZVY\K^SYX >YYV KXN =OM_\S^c =MKXXO\ O]M\S^Y ZY\ 0cYNY\ `O\]ÁY
LO^K aaaSX]OM_\OY\QXWKZ OVO XY] WY]^\K K] ZY\^K]
KLO\^K] OY_ PSV^\KNK] O WO]WY ]O XY]]K MYXObÁY PYS ^Y^KVWOX^O
NO\\_LKNK 8O]^K ^OVK OVO XY] WY]^\K Y] ]YMUO^] [_O Y 3ZMRKSX]
PSV^\Y_OY][_ONOSbKWY]KLO\^Y]$
>URRW#DOSKD @XVUORFDOELQQPDS Y DOSKDFLSVJDRUJEU
6WDUWLQJ QPDS 9 %(7$ E\ )\RGRU I\RGRU#GKSFRP ZZZLQVHFXUHRUJQPDS
+RVW DOSKDFLSVJDRUJEU DSSHDUV WR EH XS JRRG
,QLWLDWLQJ 7&3 FRQQHFW VFDQ DJDLQVW DOSKDFLSVJDRUJEU $GGLQJ 7&3 SRUW VWDWH 2SHQ
$GGLQJ 7&3 SRUW VWDWH 2SHQ
HFRDP WRGDV DV SRUWDV LQYHVWLJDGDV
7KH 7&3 FRQQHFW VFDQ WRRN VHFRQGV WR VFDQ SRUWV
,QWHUHVWLQJ SRUWV RQ DOSKDFLSVJDRUJEU 3RUW
6WDWH
3URWRFRO 6HUYLFH
ILOWHUHG
WFS
WFSPX[
ILOWHUHG
WFS
FRPSUHVVQHW
ILOWHUHG
WFS
FRPSUHVVQHW
ILOWHUHG
WFS
XQNQRZQ
ILOWHUHG
WFS
UMH
ILOWHUHG
WFS
XQNQRZQ
ILOWHUHG
WFS
HFKR
ILOWHUHG
WFS
XQNQRZQ
ILOWHUHG
WFS
GLVFDUG
ILOWHUHG
WFS
XQNQRZQ
ILOWHUHG
WFS
V\VWDW
ILOWHUHG
WFS
XQNQRZQ
ILOWHUHG
WFS
GD\WLPH
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
22
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
ILOWHUHG
ILOWHUHG
ILOWHUHG
ILOWHUHG
ILOWHUHG
ILOWHUHG
ILOWHUHG
RSHQ
RSHQ
RSHQ
RSHQ
RSHQ
RSHQ
RSHQ
RSHQ
RSHQ
RSHQ
RSHQ
RSHQ
RSHQ
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
QHWVWDW
XQNQRZQ
TRWG
PVS
FKDUJHQ
IWSGDWD
IWS
VVK
WHOQHW
VPWS
ILQJHU
KWWS
VXQUSF
DXWK
QHWELRVVVQ
KWWSV
ORJLQ
VKHOO
SULQWHU
VTXLGKWWS
1PDS UXQ FRPSOHWHG ,3 DGGUHVV KRVW XS VFDQQHG LQ VHFRQGV
+QY\K [_O OX^\KWY] MYW K \OQ\K ZK\K NO\\_LK\ K] MYXObÉO] >-: Y
]YP^aK\OXY]\OVK^K$
>URRW#DOSKD @XVUORFDOELQQPDS Y DOSKDFLSVJDRUJEU
6WDUWLQJ QPDS 9 %(7$ E\ )\RGRU I\RGRU#GKSFRP ZZZLQVHFXUHRUJQPDS
+RVW DOSKDFLSVJDRUJEU DSSHDUV WR EH XS JRRG
,QLWLDWLQJ 7&3 FRQQHFW VFDQ DJDLQVW DOSKDFLSVJDRUJEU 7KH 7&3 FRQQHFW VFDQ WRRN VHFRQGV WR VFDQ SRUWV
,QWHUHVWLQJ SRUWV RQ DOSKDFLSVJDRUJEU 3RUWV VFDQQHG EXW QRW VKRZQ EHORZ DUH LQ VWDWH ILOWHUHG
3RUW
6WDWH
3URWRFRO 6HUYLFH
Õ
1PDS UXQ FRPSOHWHG ,3 DGGUHVV KRVW XS VFDQQHG LQ VHFRQGV
+VSXRKNOPVKQ]NY3ZMRKSX]¤LK]^KX^OWKVO£`OVOKZOXK]MYWO_]Y
OYNOL_QMYX]^KX^ONK]\OQ\K][_OYKNWSXS]^\KNY\SWZVOWOX^K¤[_O
]OZYNONYWSX£VK]:OVYWOXY]K^¤YUO\XOV
<OVOWL\KXNYKVQ_WK]PVKQ]`SWY][_OZYNOWY]_]K\XYZK\ŸWO^\Y]Y_
N ^KX^Y Y 0;.8 Y_ Y OXNO\O”Y 3: ObZ\O]]Y X_WO\SMKWOX^O 8K
O]ZOMSPSMK”ÁYNK]ZY\^K]ZYNOWY]_]K\YX¦WO\YY_YXYWONY]O\`S”Y$
^OVXO^Y_]]RY_O^M:YNOWY]SQ_KVWOX^OO]ZOMSPSMK\PKSbK]
\KXQ] NO ZY\^K]$ vN # " $v Y_ ]OTK WKXOTKWY] K[_S
^YNK] K] ZY\^K] NO K^¤ SXMV_]S`O :YNOWY] O]M\O`O\ v]
# " $v Y_ v] QKWKMSZ]QKY\QL\ ]]Rv 9 WO]WY ]O ZK]]K
MYW Y] OXNO\O”Y] 3: [_O ZYNOWY] WKXOTK\ ZYNOWY] _]K\ PKSbK]
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
23
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
SXMV_]S`K] ZY\ ObOWZVY$ vZ ^MZ # " $v SXMV_´WY]
MYWS]]YY]3:]NObbbK^¤# "
9_^\Y\OM_\]YP_XNKWOX^KV¤YNKSX`O\]ÁY;_KXNY_]KWY]KPVKQvv
/VK^OWY]OX^SNYXOQK^S`Y%[_KXNYY_]KWY]NO`OWY]VO\WOX^KVWOX^O$
v^YNY b WOXY] cv +]]SW$ vZ ^MZ ] # " aaav ]SQXSPSMK$
^YNK]K]ZY\^K]>-:WOXY]K"AAA
/bOWZVY.SQS^KWY]XYMYX]YVONKW£[_SXKKVZRK$
LSFKDLQV $ LQSXW V VVK G VVK S WFS M 5(-(&7
-YW S]]Y POMRKWY] ^YNK] K] ZY\^K] >-: WK] NOSbKWY] K ZK\K Y
=OM_\O=ROVVYZO\K\=O^OX^KWY]_W>OVXO^XY]]KMYXObÁYYL`SKWOX^O
PKVRK\£7K]Y]]RZYNOO]^KLOVOMO\]_K]O]]ÁY\OWY^K]OWZ\YLVOWK]
?WKVS]^KQOWXKW£[_SXKXY]WY]^\K$
>URRW#DOSKD @ LSFKDLQV /
&KDLQ LQSXW SROLF\ $&&(37
WDUJHW
SURW
RSW
VRXUFH
'(1<
WFS
EHWDFLSVJDRUJEU
&KDLQ IRUZDUG SROLF\ $&&(37
&KDLQ RXWSXW SROLF\ '(1<
GHVWLQDWLRQ
DOSKDFLSVJDRUJEU
SRUWV
VVK ! VVK
×
+MYXROMSNKPVKQv6vO]MVK\OMO[_OYZ\Y^YMYVY>-:^OWO]^K\./8C
WK] XÁY K] ZY\^K] NY ]]R YL]O\`O K] ]O^K] :YNOWY] _]K\ Y vv
XKO]ZOMSPSMK”ÁYNOOXNO\O”Y]3:XY]Z\Y^YMYVY]ObMO^YMYWY3-7:
O XK] SX^O\PKMO] NO \ONO :YNO\´KWY] MYXPSQ_\K\ K \OTOS”ÁY NO
ZKMY^O]NO[_KV[_O\Z\Y^YMYVYWOXY]Y?.:$vZ_NZv9_KSXNK$v+
SXZ_^ Z ^MZ N # " aaa T +--/:>v% O]ZOMSPSMKWY] MYW
S]]Y[_OKMOS^KWY]KOX^\KNKNO[_KV[_O\ZKMY^O>-:ZK\KKZY\^K"
WOXY]NKW£[_SXK# "[_OPSMKObMV_´NK-YX^_NY$v+SXZ_^
Z ^MZ N # " aaa T +--/:>v ¤ O]]OXMSKVWOX^O
NSPO\OX^O +QY\K KMOS^KWY] [_KV[_O\ MYXObÁY >-: NK W£[_SXK
# "WOXY]KNKZY\^KAOL
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
24
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
+MSWK PSdOWY] WOX”ÁY K] SX^O\PKMO] NO \ONO XO^aY\U SX^O\PKMO7 9
3ZMRKSX]ZYNOQO\S\^YNK]K]SX^O\PKMO]NY]S]^OWKZK\KS]]Y_]KWY]
KPVKQvSv:YNOWY]_]K\vSO^RvK]_KZ\SWOS\KZVKMKO^RO\XO^
Y_ vS ZZZv K MYXObÁY NO WYNOW `SK ZZZN ZK\K XY] K^O\WY] OW
ObOWZVY]WKS]_]_KS];_KXNY_WKW£[_SXKNOXY]]K\ONOYL^¤WKMO]]Y
KSX^O\XO^`SKNSKV_ZYZK\ŸWO^\Y¤P_XNKWOX^KV=OXNY[_OZYNOWY]
WO]WY O]ZOMSPSMK\ _WK SX^O\PKMO [_O XÁY O]^£ K^S`K Y [_O [_K]O
]OWZ\O¤YMK]YNKSX^O\PKMOZZZ;_KXNYMYXOM^KWY]XY]]KZ\Y`ONY\K
K SX^O\PKMO ZZZ O]^£ Z\O]OX^O Y SPMYXPSQ VS]^K ]_K Z\O]OX”K
;_KXNY NO]PKdOWY] K MYXObÁY K SX^O\PKMO NO]KZK\OMO :YNO]O ^KWL¤W
_]K\ _W M_\SXQK XK YZ”ÁY S VKX”KXNY WÁY NY ]´WLYVY vv$ O^R
NO]SQXK [_KV[_O\ SX^O\PKMO ZY]]´`OV O^R O^R O^M + \OQ\K
vSZMRKSX]+Y_^Z_^N# "#Z_NZSO^RT./8CvKZVSMK]O
K[_KV[_O\SX^O\PKMOO^RO\XO^NOXY]]KW£[_SXK
/bS]^O _WK PO\\KWOX^K NO MYXPSQ_\K”ÁY MRKWKNK 6SX_bMYXP /VK O]^£
Z\O]OX^O OW [_K]O XK] NS]^\SL_S”ÉO] NK <ON 2K^ O OW V´XQ_K
ZY\^_Q_O]KXY-YXOM^S`K6SX_b»_WKSX^O\PKMO Q\£PSMK [_O P_XMSYXK
NOX^\YNYBASXNYaZK\KONS^K\OQO\S\K]P_XӃO]NY]S]^OWK]6SX_b
-YWY ^YNY \OM_\]Y 1?3 ZYNO §] `OdO] MYXP_XNS\ PKMSVSNKNO MYW
NO]MYXROMSWOX^Y =¥ NO`OWY] XY] RKLSVS^K\ K _]K\ ^KS] PO\\KWOX^K]
ZY\^KX^Y [_KXNY ^OWY] _W MYXROMSWOX^Y MYXMOS^_KV NK[_SVY [_O `KWY]
XY] YM_ZK\ @KWY] NK\ _WK \£ZSNK YVRKNK XK SX^O\PKMO NOX^\Y NK]
P_XӃO] NY 6SX_bMYXP ZK\K KV^O\K\ K] \OQ\K] NY PS\OaKVV 8_WK
TKXOVK NY b^O\W MRKWK Y Z\YQ\KWK$ vVSX_bMYXP v 8K ^OVK [_O ]_\QO
O]MYVRK v+WLSOX^O NO \ONOv O NOZYS] K Q_SK vPS\OaKVVv >OWY]
]OQ_SX^O^OVKT£MYWYK]O[_S`KV XMSK]KZYX^KNK]$
7
Consulte a documentação sobre o tema, principalmente sobre o comando ifconfig, que configura e lista as interfaces
existentes num host.
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
25
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
.O]^KMKWY] Y] ^\ ] LY^ÉO] [_O \OZ\O]OX^KW Y ^\SZ¤ vSXZ_^PY\aK\N
Y_^Z_^v NO ^YNK] K] \OQ\K] NO PS\OaKVVSXQ » K[_S [_O `YM OX^\K\£
MYWK]\OQ\K]NYPS\OaKVV@KWY]ONS^K\Y]SZMRKSX]Y_^Z_^XY^O]O
[_O M_\SY]KWOX^O SXZ_^ PYS ^\KN_dSNY ZY\ LVY[_OSY MVS[_O XY
LY^ÁYv]K´NKvOKZK\OMO\£O]^O[_KN\YNONS£VYQY$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
26
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
-VS[_O OX^ÁY XY LY^ÁY vKNSMSYXK\v >O\OWY] Y [_KN\Y ]OQ_SX^O [_O
ZYNO XY] Z\YZY\MSYXK\ K ZY]]SLSVSNKNO NO W¦V^SZVK] ONS”ÉO] NY
SZMRKSX]$
8ÁY R£ NKNY] XY`Y] XO]]K ^OVK NY 6SX_bMYXP + ¦XSMK MYS]K [_O XÁY
^YMKWY] KSXNK PYS K OX^\KNK ZK\K K XO^WK]U W£]MK\K NO \ONO [_O ¤
O]ZOMSPSMKNK KY VKNY NY OXNO\O”Y 3: +^OX^K ZK\K Y] KV`Y] KMOS^K\
\OTOS^K\ O LVY[_OK\ Y ./8C >\KN_dSXNY Y] MKWZY] NK TKXOVK
^O\´KWY]$ vSZMRKSX] + Y_^Z_^ ] # " ]
# "Z_NZSO^RT\OTOM^v/X^ÁYWK\MKWY]
Y[_KN\KNSXRYvK^S`YvOKMOS^KWY]K\OQ\K :K\K NO]K^S`£VK _]KWY]
KWO]WKSX^O\PKMO
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
27
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
9_^\K YZ”ÁY ZK\K Q\K`K\ K] \OQ\K] [_O M\SKWY] ]ÁY Y] ]M\SZ^] NO
SXSMSKVSdK”ÁY^\KNSMSYXKVWOX^OQ_K\NKNY]XYNS\O^¥\SY\MN>O]^K]O
ObK_]^S`KWOX^O K] \OQ\K] ObOM_^K]O Y NOL_Q O OX^ÁY M\SKWY] _W
]M\SZ^ [_O MK\\OQK K] \OQ\K] NO PS\OaKVV XK ZK\^SNK NY 6SX_b
MYX]_V^O]OKNYM_WOX^K”ÁYObS]^OX^OZK\KYZO\K\^KS]KV^O\K”ÉO]OW
]O_ ]S]^OWK 2£ NYS] ]M\SZ^] [_O KT_NKW W_S^Y Y =c]KNWSX K WYX^K\
]O_PS\OaKVV$YSZMRKSX]]K`OOYSZMRKSX]\O]^Y\O9Z\SWOS\YQ\K`K
X_W K\[_S`Y `SK \ONS\OMSYXKWOX^Y K] \OQ\K] [_O `YM M\SY_$ ZY\
ObOWZVY vSZMRKSX]]K`O ( hPS\OaKVV^O]^KNYv O`SNOX^OWOX^O `YM ZYNO _]K\ Y XYWO [_O NO]OTK\ 4£ Y SZMRKSX]\O]^Y\O \O]^K_\K K]
\OQ\K] Q\K`KNK] ZOVY SZMRKSX]]K`O$ vSZMRKSX]\O]^Y\O & hPS\OaKVV
^O]^KNYv :K\K ObOM_^£VY] ¤ XOMO]]£\SY Y] Z\S`SV¤QSY] NO _]_£\SY
\YY^9_^\Y\OM_\]YW_S^Y¦^SV¤KMKZKMSNKNONY3ZMRKSX]NOKQ\_ZK\
`£\SK] \OQ\K] X_W MRKSX -YWY `SWY] Y Z\YQ\KWK ^OW ^\ ] MRKSX]
L£]SMY] MRKWKNY] L_SV^SX MRKSX] O]^ÁY OWL_^SNY] XY Z\YQ\KWK ]O
K]]SWZYNOWY]^\KN_dS\+PVKQ_]KNK¤v8v.SQS^KWY]$
>URRW#DOSKD
>URRW#DOSKD
>URRW#DOSKD
>URRW#DOSKD
@
@
@
@
LSFKDLQV
LSFKDLQV
LSFKDLQV
LSFKDLQV
1
$
$
$
QDRXGS
LQSXW L HWK M QDRXGS
QDRXGS S XGS V M '(1<
QDRXGS S XGS V M 5(-(&7
HWF
HWF
+]]SWKQ\_ZKWY]]YLYXYWOvXKY_NZv_WMYXT_X^YNO\OQ\K]:YNOWY]
MYWYSZMRKSX]]K`OMYWY`SWY]Q\K`£VK]OOXPSW\O]^K_\£VK]
/XMO\\KXNY @KWY] KXKVS]K\ _W MOX£\SY MV£]]SMY OW \ONO] W¤NSK]
W_S^Y Z\O]OX^O XY] NSK] K^_KS] >OXRK OW WOX^O _WK SX^\KXO^ MYW _W
]O\`SNY\ YPO\OMOXNY `£\SY] ]O\`S”Y] ^´ZSMY] AOL 0>: O^M
MYXOM^KNY] K _WK W£[_SXK PS\OaKVV 6SX_b O O]^O ZY\ ]_K `Od K _W
\Y^OKNY\ MYW _WK VSXRK NONSMKNK 9L]O\`O Y] 3:] XK XY]]K
\OZ\O]OX^K”ÁY$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
28
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
ROTEADOR - 200.255.210.0 =>
FIREWALL - 200.255.210.1
¦
SERVIDOR Linux {[eth0] 200.255.210.2
{[eth1] 172.16.0.0
¦
INTRANET
{ 192.168.0.1, 192.168.0.2 , etc.}
@OTKWY]K]MYXPSQ_\KӃO]$
No Firewall...
Desligamos os serviços desnecessários, deixando o SSH para conexão remota com
o servidor somente. E vamos proteger nossa intranet...
ipchains -A input -p tcp -s 172.16.0.0 -j DENY
ipchains -A input -p tcp -s 192.168.0.1/10 -j DENY
ipchains -A input -p tcp -s ! 200.255.210.2 ssh -j DENY
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
29
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
No Servidor...
Como nosso servidor irá ter serviços da Internet públicos precisamos liberálos...
ipchains -A input -p tcp -s 0.0.0.0/0 -d 255.210.02 www -j ACCEPT
ipchains -A input -p tcp -s 0.0.0.0/0- -d 255.210.02 ftp -j ACCEPT
Inclua aqui todos
os serviços que serão oferecidos...
ipchains -A input -p tcp -s 192.168.0.1/10 -j DENY
(Fechando nossa intranet...)
ipchains -A input -p tcp -i lo -j ACCEPT
(Abrindo interface 'lo'...)
ipchains -P forward DENY
ipchains -A forward -s 192.168.0.1/10 -d 200.255.210.2 -j MASQ
(Usando a técnica do mascaramento de IPs...)
-Ou seja: qualquer faixa de IPs...
?WKZKVK`\K]YL\OY^¥ZSMYNOWK]MK\KWOX^YNO3:]3:WK][_O\KNSXQ
+Y MYXPSQ_\K\WY] Y 3ZMRKSX] ZK\K _]K\ Y KV`Y 7+=; MYW K PVKQ vT
7+=;v ZY]]SLSVS^KWY] [_O _W Y_ WKS] OXNO\O”Y] 3:] PKV]Y]€ Y_
Z\S`K^S`Y]ZY]]KW]O\_]KNY]XKOb^\KXO^8YXY]]YObOWZVY^YNY]Y]
OXNO\O”Y] NO XY]]K SX^\KXO^ KZK\OMOW _]KXNY Y 3: NY ]O\`SNY\
:K\K ^KX^Y XÁY ]O O][_O”K NO MYXPSQ_\K\ Y K\[_S`Y
O^M]c]MYXPSQ KNSMSYXKXNY vPY\aK\NISZ` ' cO]v =O `YM XÁY ONS^K\
YK\[_S`Y^O\£[_OKMSYXK\Y3:PY\aK\NSXQWKX_KVWOX^O/bOWZVY]O
^OX^K\ OPO^S`K\ Y 3: MRKSX] PY\aK\N ]OW K VSXRK KM\O]MSNK ^O\OS Y
]OQ_SX^OOWWSXRK^OVK$
>URRW#DOSKD @ LSFKDLQV $ IRUZDUG S WFS V G M $&&(37
:DUQLQJ \RX PXVW HQDEOH ,3 IRUZDUGLQJ IRU SDFNHWV WR EH IRUZDUGHG DW DOO
8VH HFKR ! SURFV\VQHWLSYLSBIRUZDUG
Õ
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
30
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
>URRW#DOSKD @
Basta seguir a orientação (observe a seta). Este comando irá ativar o IP forwarding. E, então, os
ZKMY^O] ZYNO\ÁY ZK]]K\ K^\K`¤] NY RY]^ KVZRK ZK\K Y NO]^SXY
NO]OTKNY/]^K]^¤MXSMK]^Y\XKW]OZYNO\Y]K][_KXNYO]^KLOVOMSNK]OW
MYXT_X^YMYWK]\Y^K]NO\ONOQK^OaKc]O^M:Y\¤W]ÁY^¥ZSMY][_O
PYQOWNYO]MYZYNO]^ONYM_WOX^Y
+LKSbY_WKVS]^KNK]YZӃO]NY]YP^aK\O3ZMRKSX]:K\K_WKVS]^KQOW
MYWZVO^K_]OYv3:-RKSX];_SMU<OPO\OXMOvNO=,\YX]YXPOS^YOW
:Y]^=M\SZ^ O [_O ZYNO ]O\ ^\KdSNY NK Z£QSXK AOL YPSMSKV OW
R^^Z$aaaKNOVKSNOXO^K_h\_]^MY\ZVSX_bSZMRKSX]
8VR
LSFKDLQV
LSFKDLQV
LSFKDLQV
LSFKDLQV
LSFKDLQV
LSFKDLQV
LSFKDLQV
>$'&@ FKDLQ UHJUDHVSHFLILFDGD >RSo}HV@
>5,@ FKDLQ QžGDUHJUD UHJUDHVSHFLILFDGD >RSo}HV@
' FKDLQ QžGDUHJUD >RSo}HV@
>/)=1;@ >FKDLQ@ >RSo}HV@
3 FKDLQ DOYR >RSo}HV@
0 > / _ 6 @ >RSo}HV@
K >LFPS@ PRVWUD LQIRUPDomR GH DMXGD RX OLVWD ,&03
&RPDQGRV
3HUPLWHVH
DGG
GHOHWH
GHOHWH
D IRUPD ORQJD RX FXUWD
$ FKDLQ
$FUHVFHQWD FKDLQ
' FKDLQ
([FOXL UHJUD
' FKDLQ QžGDUHJUD
H[FOXL UHJUD QžGDUHJUD SULPHLUD GR FKDLQ
LQVHUW , FKDLQ >QžGDUHJUD@
,QVHUH QR FKDLQ FRPR QžGDUHJUD SDGUmR SULPHLUR
UHSODFH 5 FKDLQ QžGDUHJUD
6XEVWLWXL UHJUD QžGDUHJUD SULPHLUD QR FKDLQ
OLVW
/ >FKDLQ@
/LVWD UHEUDV QXP FKDLQ RX WRGRV RV FKDLQV
IOXVK ) >FKDLQ@
([FOXL WRGDV UHJUDV QR FKDLQ RU WRGRV RV FKDLQV
]HUR
= >FKDLQ@
=HUD RV FKDLQV
FKHFN & FKDLQ
7HVWD XP SDFRWH QXP FKDLQ
QHZ
1 FKDLQ
&ULD XP QRYR XVHUGHILQHG FKDLQ
GHOHWHFKDLQ
; FKDLQ
([FOXL XP XVHUGHILQHG FKDLQ
SROLF\ 3 FKDLQ DOYR
0XGD D SROtWLFD QXP FKDLQ SDUD WDO DOYR
PDVTXHUDGH 0 /
/LVWD DV FRQH[}HV PDVFDUDGDV DWXDLV
VHW
0 6 WFS WFSILQ XGS
3}H YDORUHV GH WLPHRXW
SDUD PDVFDUDPHQWR
2So}HV
ELGLUHFWLRQDO E
LQVHUH GXDV UHJUDV XPD FRP V G LQYHUWLGR
SURWR S >@ SURWR
SURWRFROR SHOR Qž RU QRPH H[ CWFS
VRXUFH V >@ HQGHUHoR>PDVF@ >@ >SRUWD>SRUWD@@
RULJHP HVSHFLILFDomR
VRXUFHSRUW >@ >SRUWD>SRUWD@@
RULJHP SRUWD HVSHFLILFDomR
GHVWLQDWLRQ G >@ HQGHUHoR>PDVF@ >@ >SRUWD>SRUWD@@
GHVWLQR HVSHFLILFDomR
GHVWLQDWLRQSRUW >@ >SRUWD>SRUWD@@
GHVWLQR SRUWD HVSHFLILFDomR
LFPSW\SH >@ WLSR HVSHFLILFD WLSR GH ,&03
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
31
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
LQWHUIDFH
MXPS
M
PDUN
P
QXPHULF Q
ORJ
RXWSXW R
726
YHUERVH Y
H[DFW [
>@ IUDJPHQW
>@ V\Q \
>@ YHUVLRQ
L >@ QRPH>@
QRPH GD LQWHUIDFH GH UHGH >@ SDUD FXULQJD
DOYR >SRUWD@
DOYR SDUD D UHJUD >SRUWD@ SDUD 5(',5(&7
>@PDUN Qž SDUD PDUN
QR SDFRWH FRUUHVSRQGHQWH
VDtGD QXPHULFD GH HQGHUHoRV H SRUWDV
O
KDELOLWD UHJLVWUR ORJ QR NHUQHO
>WDPDQKRPD[@ VDtGD GH SDFRWH SDUD GLVSRVLWLYR QHWOLQN
W H [RU H[RU PDVFiUDV SDUD 726
PRGR YHUERVH
H[SDQGH Q~PHURV PRVWUD YDORUHV H[DWRV
I
FRPELQD VRPHQWH R VHJXQGR RX PDLV IUDJPHQWRV
FRPELQD SDFRWHV 7&3 VRPHQWH TXDQGR FRQILJXUD 6<1
9
PRVWUD YHUVmR
2.6 The SINUS Firewall - a TCP/IP packet filter for Linux
@O\OWY] KQY\K _WK Y_^\K ]YV_”ÁY NO QO\OXMSKWOX^Y NO PS\OaKVV OW
KWLSOX^O6SX_b8ÁYPK\OWY]MYWZK\K”ÉO]OX^\OY3ZMRKSX]OY=38?=
9Z\SWOS\YT£_WZ\YN_^YZ\YX^YZK\KP_XMSYXK\Y]OQ_XNY_WZ\YN_^Y
OW KWZVY NO]OX`YV`SWOX^Y :OVY WOXY] K `O\]ÁY [_O PYS
NO]OX`YV`SNK ZK\K Y UO\XOV b NY 6SX_b" 9 =38?= 0S\OaKVV ]P
0S\OaKVV¤_WZ\YTO^YNK?XS`O\]SNKNONOD_\S[_OMYWYMYXM_\]YNK
=A3>-2 NK >OVOU_\] :Kc]O\` +1 O NK />2 D®\SMR NO]OX`YV`SNY ZY\
<YLO\^ 7_MR]OV <YVKXN =MRWSN 3XPY\WKӃO] ]YL\O Y Z\YTO^Y O
NYaXVYKNNYZ\YQ\KWKO]^ÁYOW$
http://www.ifi.unizh.ch/ikm/SINUS/firewall.html
ftp://ftp.ifi.unizh.ch/pub/security/firewall
9] NO]OX`YV`ONY\O] KN`O\^OW NY O]^KNY NO NO]OX`YV`SWOX^Y NY
]YP^aK\O :Y\^KX^Y OVO XÁY ]O\ _]KNY KSXNK ZK\K K ]OQ_\KX”K NO
\ONO] MYW NKNY] M\´^SMY] +N`O\^OW KSXNK$ _]OY ZK\K KZ\OXNSdKNY O
]O`YM XÁY^OWXOXR_WPS\OaKVVY_XÁYMYXPSKXY[_O^OW
1
Há uma versão estável para versões de kernel mais antigos.
9]K]ZOM^Y]ZY]S^S`Y]NYZ\YQ\KWKO]^ÁYXY]O_WYNYNOK^_K”ÁY/VO
^\KLKVRK
MYW
_W
K\[_S`Y
NO
MYXPSQ_\K”ÁY
vO^MPS\OaKVVNPS\OaKVVMYXPv%KYMK\\OQK\OVOV K]MYXPSQ_\KӃO]
K´O]^YMKNK]2£KSXNKMYWYZKMY^O ]SPS^K\Qd _W ]O\`SNY\
Y ]YP^aK\O ZK\K PS\OaKVV Z\YZ\SKWOX^O NS^Y O _W MVSOX^O O]M\S^Y
8
Há uma versão estável para versões de kernel mais antigos.
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
32
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
OW 4K`K _WK SX^O\PKMO ZK\K PKMSVS^K\ K ONS”ÁY NY PS\OaKVVMYXP
MRKWKNY 0S\OaKVV -YX^\YV :KXOV 2£ Y_^\Y]]SW K MYX^\SL_S”ÁY NO
,OXONSM^ >\OPdO\ ZK\K K VOS^_\K] NY] VYQ] QO\KNY] ZOVY =38?= ?WK
PO\\KWOX^KLK]OKNKOW2>76OW=;6
-YWY XÁY R£ ZKMY^O] <:7 XOW LSX£\SY] >+<1D3: MYW =38?= ^O\OWY]
[_O ZK]]K\ Y] ZK]]Y] NO MYWZSVK”ÁY NY ]YP^aK\O 7O]WY ZY\[_O R£
NO^KVRO][_OXÁYZYNOW]O\XOQVSQOXMSKNY]ZOVYKV_XY
4£`SWY][_O_WPS\OaKVVXY6SX_b¤SWZVOWOX^KNYOWX´`OVNOUO\XOV
9 K\[_S`Y v</+.7/v NY =38?= KN`O\^O Y _]_£\SY NK XOMO]]SNKNO NO
\OMYWZSVK”ÁY
NY
UO\XOV
>KWL¤W
T£
WOXMSYXKWY]
[_O
`£\SK]
NS]^\SL_S”ÉO] 6SX_b T£ `OW MYW Y UO\XOV Z\YX^Y] ZK\K PS\OaKVVSXQ
:Y\MYX]OQ_SX^OMO\^Y]NS]]YXÁY]OPKdXOMO]]£\SY\OMYWZSVK\^YNY
Y UO\XOV 8Y OX^KX^Y ZK\K K MYWZSVK”ÁY NY =38?= Z\OMS]KWY] NO
]YWOX^O _W K\[_S`Y NK] PYX^O] NY UO\XOV ?W YLTOM^ PSVO _]KNY XY
vVSXUv ZK\K QO\K\ Y ObOM_^£`OV NY Z\YQ\KWK ]OW OVO K MYWZSVK”ÁY
PKVRK\£7K]^OWY]_WKNSMKZK\K\O]YV`O\YZ\YLVOWK%
-O\^SPS[_O]O [_O `YM ^OW OW ]_K W£[_SXK _W KWLSOX^O NO
NO]OX`YV`SWOX^Y SX]^KVKNY QMM ROKNO\] PSVO] O^M .OZYS]
SX]^KVO Y K\[_S`Y [_O `OW MYW K] PYX^O] NY UO\XOV$ UO\XOV]Y_\MO
S" \ZW.SQS^OY]OQ_SX^O$
>URRW#DOSKD
>URRW#DOSKD
>URRW#DOSKD
>URRW#DOSKD
@ FG XVUOLEOLQX[DUFKLOLE
OLE@ JFF 'BB$66(0%/<BB WUDGLWLRQDO F FKHFNVXP6
OLE@ OV F
OLE@ FKHFNVXP6 FKHFNVXPR
Õ [atenção]
×
9L]O\`O K ObS]^ XMSK NY K\[_S`Y [_O NO]OTKWY]$ Y vMROMU]_WYv9
+QY\K ZYNOWY] NO]MYWZKM^K\ Y K\[_S`Y MYW K] PYX^O] NY =38?= ]_Z\K
MS^KNY /]MYVRK _W NS\O^¥\SY K ]O_ QY]^Y =O `YM ZY]]_S Y 4.5
b O Y ZKMY^O =A381 R^^Z$aaaTK`K]_XMYW ZYNO MYWZSVK\ Y
9
Se você optar por recompilar o kernel, não execute o 'make clean' no fim do processo! Pois sabidamente ele apagará
todos os arquivos *.o gerados...
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
33
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
]P -YX^\YV :KXOV =O NO]OTK\ ONS^O Y] ZK^R] XY NS\O^¥\SY
vMVSOX^7KUOPSVOSXv ZK\K KT_]^K\ Y MKWSXRY ZK\K K] MVK]]O] 4K`K
2£
_WK
`O\]ÁY
XÁYYPSMSKV
T£
MYWZSVKNK
XK
Z£QSXK
R^^Z$aaa]SX_]PS\OaKVVY\Q NY MVSOX^O NY -YX^\YV :KXOV ZYNO ]O\
_WK LYK YZ”ÁY ]O `YM ^S`O\ Z\YLVOWK] MYW Y 4.5 MYW K] MVK]]O]
=A381Y_WO]WY]OXÁYNO]OTK\MYWZSVK\OWKWLSOX^O4K`K
/bOM_^OOX^ÁYXYNS\O^¥\SYKYXNO`YM SX]^KVY_K]PYX^O]$
MYXPSQ_\O
WKUOevWKUOMVSOX^v]YWOX^OQO\K\£Y]P-YX^\YV:KXOV
evWKUO]O\`O\v]YWOX^OQO\K\£Y]O\`SNY\
+X^O] NY WKUO SX]^KVV `YM NO`O M\SK\ _W XY`Y v_]_£\SYv MRKWKNY
PS\OaKVV KNSMSYXKXNY K ]OQ_SX^O VSXRK OW ]O_ K\[_S`Y vO^MZK]]aNv
_]O_W_]O\SNOQ\Y_ZSNNO]YM_ZKNY]$
firewall:x:888:888::/dev/null:/bin/false
+Z¥] M\SO _W XY`Y Q\_ZY ^KWL¤W MRKWKNY PS\OaKVV KNSMSYXKXNY O]^K]
VSXRK] XY ]O_ K\[_S`Y vO^MQ\Y_Zv XÁY ]O O][_O”K NO OPO^_K\ _W
LKMU_ZXY]K\[_S`Y]KV^O\KNY]$
firewall:x:888:
0OS^YS]]YKSX]^KVK”ÁYZYNO]OQ_S\
WKUOSX]^KVVeZYNO]O\vWKUO]O\`O\ISX]^KVVv
9?vWKUOMVSOX^ISX]^KVVv
+ SX]^KVK”ÁY ZY\ ZKN\ÁY O ^KWL¤W ]O K MYWZSVK”ÁY ^\KX]MY\\O_
XY\WKVWOX^O ZÉO Y] ]OQ_SX^O] K\[_S`Y] NY ]O\`SNY\ XY WYWOX^Y
XY]YM_ZK\OWY]MYWOVO]KZOXK]XO]^O]NS\O^¥\SY]$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
34
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
_]\VYMKV]LSX]PMKMMY_X^
_]\VYMKV]LSX]PMÖYNKOWYX
`K\VYQPS\OaKVV
{ 'LOGS': arquivos de registros...
`K\VYQPS\OaKVV]Zc
`K\VYQPS\OaKVV\OZY\^
O^MPS\OaKVVNe\O]O\`KNYZK\KY]K\[_S`Y]PS\OaKVVMYXP
OPS\OaKVVZK]]aN
VSLWYN_VO]WS]M]PYÖ_WWYN_VYSX]^KV£`OV
@KWY] SXSMSK\ Y =38?= 0S\OaKVV :K\K S]]Y Z\OMS]KWY] NO _WK
MYXPSQ_\K”ÁY ZYS] Y NS\O^¥\SY vO^MPS\OaKVVNv O]^£ `KdSY KZ¥] Y
vWKUOSX]^KVVvPKV^KYK\[_S`YPS\OaKVVMYXP.OZYS][_OONS^K\_WK
MYXPSQ_\K”ÁYKYXY]]YQY]^YOXOMO]]SNKNO]SX]^KVKWY]YWYN_VY10MYW
vSX]WYNVSLWYN_VO]WS]M]PYv.OZYS]NKWY]ZK\^SNKXYNKOWYX$
>URRW#DOSKD @ LQVPRG OLEPRGXOHVPLVFVIR
>URRW#DOSKD @ XVUORFDOVELQVIF VWDUW
,QLWLDOL]LQJ GDHPRQ
1R VRFNHW VHFXULW\ ILUHZDOOWRILUHZDOO FRPPXQLFDWLRQ GLVDEOH
B
>URRW#DOSKD @
;_KXNY Y NKOWYX v]PMv N£ ZK\^SNK OVO V K ]_K MYXPSQ_\K”ÁY O
ObOM_^KK]\OQ\K]NO]OTKNK]NOPS\OaKVV?W K]ZOM^Y SX^O\O]]KX^O NY
Z\YQ\KWK NKOWYX ¤ [_O OVO MROMK K] SXMYX]S]^ XMSK] ZY]]´`OS]
MYX^SNK] XY PS\OaKVVMYXP$ ^KX^Y NO \OQ\K] [_KX^Y O\\Y] NO
NSQS^K”ÁY=OS]]YKMYX^OMO\OVOZ£\KONO`YV`O_WZK\]OO\\Y\€KY
_]_£\SY -RO[_O ^KS] SXMYXQ\_ XMSK] O \OZS^K Y Z\YMO]]Y ;_KX^Y K
10
Consulte a documentação diponível a respeito dos módulos instaláveis no Linux, ou mesmo as páginas manuais ('man
lsmod', 'man insmod', 'man rmmod').
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
35
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
WOX]KQOWOMYKNKXY]YMUO^]OM_\S^c€XÁY]OZ\OYM_ZOOVKKZK\OMO
[_KXNYY=38?=¤MYWZSVKNY]OWYZ\YQ\KWK/8]USZ/VOZY]]SLSVS^KK
MYXObÁY M\SZ^YQ\KPKNK OX^\O PS\OaKVV] 7K] MYWY ^OWY] Y ==2 ZK\K
O]]O SX^OX^Y ZYNOWY] KL\S\ NO ^KV ]_ZY\^O 2£ ^KWL¤W ]¤\SY]
Z\YLVOWK]
NO
MYWZSVK”ÁY
NY
/X]USZ
P^Z$P^Z^SUOOO^RdMRZ_LZKMUKQO]]USZXY6SX_b
:K\KNO]VSQK\Y=38?=\OWY`KYWYN_VYNKWOW¥\SKv\WWYN]PYvO
ZK\OYNKOWYXMYWYMYWKXNYv_]\VYMKV]LSX]PM]^YZv
;_KXNYNYNOL_QNOXY]]KMYXPSQ_\K”ÁYO]^S`O\Z\YX^YOO]^S`O\WY]
]K^S]POS^Y] MYW K WYX^KQOW NK] \OQ\K] NY PS\OaKVV ZYNOWY] _]K\ _W
]M\SZ^ZK\KSXSMSK\YXY]]YNKOWYXv]PMv+LKSbYO]^£_WObOWZVYNO
_W ]M\SZ^ [_O _]KWY] OW XY]]K \ONO ZYNO]O KNKZ^£VY §] WKS]
NS`O\]K]]S^_KӃO]$
6FULSW SDUD LQLFLDU GDHPRQ GR 6,186 )LUHZDOO‹
H LQVWDODU PRGXOR VIR
-DQHLUR GH 8VDGR QXP 6LVWHPD /LQX[ 5HG +DW NHUQHO -=--=- -=--=--=--=--=--=--=--= --= HWFUFGLQLWGIXQFWLRQV ,QLFLD DTXL R VFULSW IXQFWLRQV
FDVH LQ
VWDUW
JSULQWI 6WDUWLQJ V VI )LUHZDOO
LI WHVW U YDUUXQVIFSLG NLOO CFDW YDUUXQVIFSLGC
WKHQ
JSULQWI V H[LVWV V DOUHDG\ UXQQLQJ?Q ?
YDUUXQVIFSLG VIF
HOVH VELQLQVPRG OLEPRGXOHVPLVFVIR XVUORFDOVELQVIF VWDUW
HFKR VIF
IL
WRXFK YDUORFNVXEV\VVIF
VWRS
JSULQWI 6WRSSLQJ V VI )LUHZDOO
XVUORFDOVELQVIF VWRS
JSULQWI 5HPRYLQJ 6,186 PRGXOH
VELQUPPRG VI
UP I YDUUXQVIFSLG
UP I YDUORFNVXEV\VVIF
HFKR VIF
UHVWDUW
VWRS
VWDUW
VWDWXV
VWDWXV VIF
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
36
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
HVDF
XVUORFDOVELQVIF VKRZ
JSULQWI 8VDJH V ^VWDUW_VWRS_VWDWXV_UHVWDUW`?Q VIF
H[LW H[LW @KWY]KQY\KKXKVS]K\KMYX]^\_”ÁYNOXY]]K]\OQ\K]NOPS\OaKVV[_O
PSMK\KW MYX^SNK] XY PS\OaKVVMYXP 9] K_^Y\O] MYVYMKW XY NS\O^¥\SY
v]KWZVO]v[_K^\YK\[_S`Y]NOMYXPSQ_\K”ÁY§^´^_VYNOObOWZVYZK\K
[_OYKNWSXS]^\KNY\O]^_NOY]$
¬ CheswickBellovin.conf
¬ MediumEnterprise.conf
¬ SimpleSample.conf
¬ SmallBusiness.conf
-YX]_V^OY] NOZYS] NO NYWSXK\ K] ^¤MXSMK] NO PS\OaKVVSXQ 9] XYWO]
NY]K\[_S`Y]T£NOWYX]^\KWY]O_SX^OX^Y=YWOX^OYZ\SWOS\Y^KV`Od
XÁY Y ]OTK ;_OW XÁY O]^£ PKWSVSK\SdKNY MYW K LSLVSYQ\KPSK ]YL\O
]OQ_\KX”K ZYNO XÁY MYXROM VY]$ A < -RO]aSMU O = 7 ,OVVY`SX
]ÁY K_^Y\O] NO _W MV£]]SMY ]YL\O Y ^OWK MRKWKNY 0S\OaKVV] KXN
3X^O\XO^ =OM_\S^c$ <OZOVVSXQ ^RO ASVc 2KMUO\ 9 Z\SWOS\Y K\[_S`Y]
^OX^KKZVSMK\Y]Z\OMOS^Y]NO]M\S^Y]XO]^OVS`\Y
@KWY] _]K\ K[_S _W PS\OaKVVMYXP KV^O\XK^S`Y LOW ]SWZVO] ZK\K
O]^_NK\ K NSXŸWSMK NY =38?= 0S\OaKVV /VO O]^£ XY WKX_KV NY
Z\YQ\KWK Y KV_XY Y OXMYX^\K\£ OW PY\WK^Y R^WV XY NS\O^¥\SY
vNYMR^WVSXNObR^WVv NK NS]^\SL_S”ÁY 7YNSPSMKWY] KVQ_WK] ZK\^O]
WK]OW]´X^O]OOVOO]^£K´@OTKWY]$
_ 6DPSOH FRQILJXUDWLRQ IRU WKH VI )LUHZDOO_
VHWXS
LQWHUQDOQHWV PDLOBGHIDXOW URRW#ORFDOKRVW
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
37
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
UXOHV
EORFN WFS WR SRUW OLQN SRUW VXSGXS QRWLILFDWLRQBOHYHO EORFN RSWLRQV ORRVHBVRXUFHBURXWH VWULFWBVRXUFHBURXWH DOO
QRWLILFDWLRQBOHYHO GHWHFWD URWDV VHFXQGiULDV SDUD D ,QWHUQHW
EORFN ULS IURP LQVLGH QRWLILFDWLRQBOHYHO 3HUPLWH D HQWUDGD GH UHTXLVLo}HV )73 SDUD QRVVR VHUYLGRU )73
DFFHSW WFS WR SRUW QRWLILFDWLRQBOHYHO DFFHSW WFS WR SRUW QRWLILFDWLRQBOHYHO 3HUPLWH D HQWUDGD GH UHTXLVLo}HV )73 SDUD R VHUYLGRU 7HOQHW/RJLQ
DFFHSW WFS WR SRUW QRWLILFDWLRQBOHYHO DFFHSW WFS WR SRUW QRWLILFDWLRQBOHYHO DFFHSW DOO IURP WR QRWLILFDWLRQBOHYHO EORTXHLD
TXDOTXHU RXWUD UHTXLVLomR 7&3 H VRD R DODUPH
EORFN WFS QRWLILFDWLRQBOHYHO QRWLILFDWLRQ
OHYHO UHJLVWUD WRGDV DV FKHJDGDV GH FRQH[mR )73 SHUPLWLGDV PHVVDJH 5HTXLVLFDR GH FRQH[DR )73
OHYHO UHJLVWUD WRGDV DV FKHJDGDV GH FRQH[mR 7HOQHW SHUPLWLGDV PHVVDJH 5HTXLVLFDR GH FRQH[DR 7HOQHW
OHYHO UHJLVWUD WRGDV DV FKHJDGDV GH FRQH[mR ::: SHUPLWLGDV
PHVVDJH 5HTXLVLFDR GH FRQH[DR :::
OHYHO UHJLVWUD WRGDV DV FKHJDGDV GH FRQH[mR 66+ SHUPLWLGDV
PHVVDJH 5HTXLVLFDR GH 6HFXUH VKHOO
OHYHO PHVVDJH 5HGLUHFLRQDPHQWR ,&03 UHFHELGR
OHYHO PHVVDJH +D XPD URWD VHFXQGiULD SDUD D ,QWHUQHW
OHYHO PHVVDJH 3DFRWH ,3 FRP RSFDR BVRXUFH URXWHB GHWHFWDGD
OHW VUVRXUFHKRVW VUVRXUFHKRVW WLPHRXW LI VUVRXUFHKRVW
WKHQ
PHVVDJH 3DFRWH ,3 FRP RSFDR BVRXUFH URXWHB GHWHFWDGD
VS\
HQGLI
OHYHO PHVVDJH &RQH[DR 7&3 LOHJDO
OHW LOOWFSVRXUFHKRVW LOOWFSVRXUFHKRVW WLPHRXW LI LOOWFSVRXUFHKRVW
WKHQ
PHVVDJH &RQH[DR 7&3 LOHJDO
PDLO
VS\
HQGLI
OHYHO 'HVOLJD ,17(5)$&( (7+ H[HF LIFRQILJ HWK GRZQ
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
38
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
HQG
9PS\OaKVVMYXPZY]]_S^\ ]LVYMY]NOMYXPSQ_\K”ÁY]ÁYOVO]$
¾ SETUP
¾ RULES
(pode-se usar também PRIMARY_RULES)
¾ NOTIFICATION
/X^\OY]LVYMY]NOMYXPSQ_\K”ÁYZYNOWY]^O\ MYWOX^£\SY] KMOS^KXNY Y
]´WLYVYY_K]LK\\K]^\KNSMSYXKS]NY-
9 LVYMY =/>?: ¤ LOW M_\^Y K´ MYVYMKWY] K SXPY\WK”ÁY ]YL\O XY]]K
^YZYVYQSK NO \ONO SX^O\XKVXO^] ZK\K ^\KLKVRK\ MYX^\K Y SZ
]ZYYPSXQVS]^KXNYK]]SWXY]]KSX^\KXO^9]3:] NO`OW ]O\ ]OZK\KNY]
ZY\`´\Q_VK]O^O\WSXKNY]MYWv%v:YNO]OK[_S^KWL¤WO]ZOMSPSMK\Y
XO^WK]U$ v# " WK]U v =OQ_O]O NOZYS] K
SXPY\WK”ÁYNY]OXNO\O”Y]_]KNY]WKSVINOPK_V^ZOVY=38?=ZK\K
Y O`OX^_KV OX`SY NO OWKSV] MYVY[_O [_KX^Y] NO]OTK\ ]OZK\KXNYY]
ZY\`´\Q_VK]
9 LVYMY <?6/= ¤ Y Z\SXMSZKV NY K\[_S`Y 8O]^K ]O”ÁY K] VSXRK]
MYWO”KW YL\SQK^Y\SKWOX^O MYW K] ZKVK`\K]$+--/:> KMOS^K Y] ZKMY^O]
OX`SKNY],69-59MY\\O]ZYXNOX^OKY./8CNY 3ZMRKSX] KLKXNYXK Y]
ZKMY^O] ]OW WKSY\O] MYX]SNO\KӃO] </4/-> \OTOS^K QO\KXNY
T_]^SPSMK^S`KO9,=/<@/MYX]^\_´NKZK\KQO\S\Y]VYQ]NY=38?=+
\SQY\ XÁY KMOS^K XOW \OM_]K WK] NOSbK K NOMS]ÁY ZK\K K Z\¥bSWK
\OQ\K :Y\ PSW K \OQ\K] ]ÁY NS\OMSYXKNK] ZK\K _W X´`OV NO
XY^SPSMK”ÁY€ [_O ]O OXMYX^\K XY ¦V^SWY LVYMY O ^O\WSXKNK] MYW _W
v%v9]MYXMOS^Y]]ÁYLK]SMKWOX^OY]WO]WY]NY3ZMRKSX]O`YM NO`O
^\KdO\ Y] ]O_] MYXROMSWOX^Y] 9 [_O W_NK ¤ ]SX^KbO XK] VSXRK] NO
MYXPSQ_\K”ÁY:YNO\]OSK\O]_WSVKK]]SW$
[regra] proto. IP (de) porta XX IP (para) porta XX -> nível de notificação
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
39
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
<O^S\KXNY_WObOWZVYNOXY]]YK\[_S`YOXMYX^\KWY]$
DFFHSW WFS WR SRUW QRWLILFDWLRQBOHYHO ;_KV \OQ\K O]^KLOVOMO]O K[_S) +MOS^KWY] ZKMY^O] >-: NY 3:
# " Z\Y`OXSOX^O] NK ZY\^K O ]O OX^\KW Y] ZKMY^O]
ObOM_^K]OYXY^SPSMK^SYXIVO`OVNOX¦WO\Y;_OO]^KLOVOMO$
OHYHO PHVVDJH 5HTXLVLFDR GH 6HFXUH VKHOO
/X`SKZK\KYK\[_S`YNO\OQS]^\YNY=38?=OWv`K\VYQPS\OaKVVvK
SXPY\WK”ÁY[_ORY_`O_WK\O[_S]S”ÁYXKZY\^K
+VQ_WK] YL]O\`K”ÉO] KSXNK ]YL\O Y] ZK\ŸWO^\Y] NY K\[_S`Y$ ZYNOWY]
O]^KLOVOMO\ _WK \OQ\K ZK\K ^YNY] Y] Z\Y^YMYVY] KMOS^Y] MYW K PVKQ
vKVVv^KWL¤WO]^KLOVOMO\PKSbK]NOZY\^K]bbbbOMYXPSQ_\K\K]
PKSbK] NO OXNO\O”Y] _]KXNY v^Y P\YWv vNY 3: ^KV ZK\K Y 3:
^KVv/bOWZVY$
EORFN
DOO
WR
QRWLILFDWLRQBOHYHO SRUW
IURP
9_^\YZK\ŸWO^\YSWZY\^KX^´]]SWY¤vSX]SNOv[_OXÁY KZK\OMO OW XY]]Y
K\[_S`YObOWZVY 3X]SNO ¤ XY]]K SX^\KXO^ NOPSXSNK MYWY `SWY] XK
PVKQSX^O\XKVXO^]/VO¤MYWLSXKNYMYWYZK\ŸWO^\Yv^YP\YWv
/OX^ÁY]OO]^KLOVO”YZY\ObOWZVY$
EORFN WFS IURP LQVLGH WR SRUW QRWLILFDWLRQBOHYHO ,VY[_OSY [_KV[_O\ ZKMY^O >-: NO WSXRK SX^\KXO^ ZK\K Y 3:
:Y]]Y SX`O\^O\ vSX]SNOv _]KXNY vY_^]SNOv S]^Y ¤
[_KV[_O\3:PY\KNOWSXRKSX^\KXO^
EORFN WFS IURP RXWVLGH WR SRUW QRWLILFDWLRQBOHYHO &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
40
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
:Y\PSWYLVYMY89>303-+>3988O]^K]O”ÁYMKNKX´`OVNOXY^SPSMK”ÁY
]O\£O]^KLOVOMSNYX_WZK\£Q\KPY3XSMSKXNY]OMYWKZKVK`\KvVO`OVv
]OQ_SNY NO _W X¦WO\Y SNOX^SPSMKNY\ O v$v :YNO]O O]ZOMSPSMK\ K]
K”ÉO] XOMO]]£\SK] K ]O\OW SWZVKX^KNK] 9 X´`OV NO XY^SPSMK”ÁY
P_XMSYXKOWX´`OVNO]M\SZ^/WZ]O_NYM¥NSQYPSMK\SK$
SE
determinadas circunstâncias ocorrem...
Mande uma MENSAGEM...
E CHAMA (call) o Nível 900
Ø
NÍVEL 900
Se as circunstâncias ocorrem 10 vezes
DESLIGUE A INTERFACE ETH0!
» MVK\Y [_O NOWY] _W ObOWZVY \KNSMKV @OTKWY] Y_^\Y MK]Y >YNY
KMO]]YKYWO_]O\`SNY\>OVXO^OW_WKY_WKS]RY]^]\ONS\OMSYXYZK\K
_WX´`OVNOXY^SPSMK”ÁY$
OHYHO PHVVDJH ´6ROLFLWDFDR GH VHVVDR 7(/1(7 QD SRUWD µ
FDOO -YWKVSXRKvMKVV"v\OOX`SYZK\K_WK]_L\Y^SXKYvVO`OV"v
OWWO_PS\OaKVVMYXP9XNO$
OHYHO OHW FRQQHFWLRQVVRXUFHKRVW FRQQHFWLRQVVRXUFHKRVW WLPHRXW LI FRQQHFWLRQVVRXUFHKRVW ! WKHQ
UHSRUW
PHVVDJH ´$OJXHP HVWD WHQWDQGR DWLYDU PDLV GH FRQH[RHV 7HOQHWµ
´%ORTXHDQGR DFHVVR SRU VHJXQGRVµ
EORFN DOO IURP VRXUFHKRVW QRWLILFDWLRQBOHYHO WLPHRXW FDOO HQGLI
/]MVK\OMOXNY$ K ZKVK`\K vVO^v [_O SXSMSK K P\K]O ZYNO O]^KLOVOMO\
Y_
W_NK\
Y
`KVY\
NO
_WK
`K\S£`OV
8K
]OX^OX”K
vMYXXOM^SYX]$]Y_\MORY]^vYZ\SWOS\Y^O\WY¤K`K\S£`OVO]Y_\MORY]^
^KX^Y [_KX^Y NO]^RY]^ P_XMSYXK MYWY _W [_KVSPSMKNY\ -YXPSQ_\KWY]
[_O ]O XY]]Y ]O\`SNY\ \OMOLO\ WKS] NY ( MSX[_OX^K MYXObÉO] NO
_W OXNO\O”Y 3: Y ]Y_\MORY]^$ OX`SY WOX]KQOW KY VYQ LVY[_OSY NO
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
41
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
KMO]]YKYOXNO\O”Y3:NOY\SQOWZY\]OQ_XNY]O`KWY]ZK\KK]_L
\Y^SXK9KV_XYZYNOMYX]_V^K\YWKX_KV2>76[_OXY]\OPO\SWY]
ZK\K MROMK\ K] SX^O\O]]KX^O] YZӃO] NO ]M\SZ^ [_O Y =38?= YPO\OMO
=ÁY O]^K] K] YZ”ÉO] NO ]M\SZ^ [_O ZYNOW ]O\ _]KNK] XY LVYMY
XY^SPSMK^SYXIVO`OV$
7/==+1/$
.OPSXOKWOX]KQOWK]O\OX`SKNKZK\KYK\[_S`YNO\OQS]^\YO^KWL¤W
¤_]KNYXYOWKSVO]ZOMSPSMKNYXYLVYMYv]O^_Zv+]WOX]KQOX]NO`OW
]O\O]M\S^K]OX^\OK]ZK]
=C=691$
-YVYMKY\OQS]^\YMY\\OX^O^KWL¤WXYvVYQvNY]S]^OWK
</:9<>$
-YZSKY\OQS]^\YMY\\OX^OZK\KYK\[_S`YvPS\OaKVV\OZY\^v
7+36$
/X`SKOWKSVZK\KY]OXNO\O”Y]O]ZOMSPSMKNY]XKMYXPSQ_\K”ÁY
=:C$
3^OW W_S^Y SX^O\O]]KX^O 8K NOPSXS”ÁY NO 7_MR]OV =MRWSN K
NOMVK\K”ÁY v]Zcv SXSMSK _W MY_X^O\ SX^OVVSQOXMO€ =O_ YLTO^S`Y ¤
ZK\K ]O\ MVK\Y O]ZSYXK\ Y RY]^ O Y _]_£\SY [_O O]^£ ObOM_^KXNY _WK
K”ÁY NK [_KV ]O NO]MYXPSK 8Y XY]]Y ObOWZVY _W _]_£\SY OW _W RY]^
^OX^Y_ PKdO\ MYXObÉO] X_W MO\^Y Z\KdY NO ^OWZY OW XY]]Y ^OVXO^
]O\`O\:YNO\´KWY]^O\MYXPSQ_\KNYMYWv]Zcv`OTKWY]$
LI FRQQHFWLRQVVRXUFHKRVW ! WKHQ
VS\
UHSRUW
Õ
3]^Y ¤ ]O RY_`O\ WKS] NO MYXObÉO] OX^ÁY MYWOMO Y v]Zcv 9
v]Zcv¤_WZ\YMO]]YNOSNOX^SPSMK”ÁYNO_WRY]^_]_£\SY_]KXNYY.8=
ZK\K YL^O\ Y XYWO NY RY]^ Y Z\Y^YMYVY SNOX^ `£VSNY ]YWOX^O OW
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
42
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
MYXObÉO] >-: PSXQO\ O \_]O\] + MYVO^K NO]]K SXPY\WK”ÉO] ^OXRK
OVK bS^Y Y_ XÁY `ÁY ZK\K Y VYQ MYWY PYS MYXPSQ_\KNY MYW Y
v\OZY\^v ZYNO\]OSK _^SVSdK\ ^KWL¤W WKSV O OX`SK\ ZY\ K´ Y]
\O]_V^KNY]NY]Zc
RELEVEL:
Muda o nível de notificação para a regra que causou a ação.
EXEC:
Declaração bastante poderosa. Pois pode abrir um shell local e executar um comando. Assim, na certeza de um ataque
efetivo podemos desligar a nossa interface de rede (eth0, eth1, etc.) com a seguinte declaração 'exec':
H[HF LIFRQILJ HWK GRZQ
-+66$
-RKWKY_^\YX´`OVNOObOM_”ÁYOYObOM_^K
LET:
Esta declaração pode mudar o valor de uma variável. O valor de timeout (em segundos) pode ser especificado no fim da
declaração 'let'. Observe o exemplo abaixo:
DFFHSW LFPS LFPSBHFKR WR LQVLGH QRWLILFDWLRQBOHYHO Ø
QRWLILFDWLRQ
OHYHO OHW SLQJFRXQWVRXUFHKRVW SLQJFRXQWVRXUFHKRVW WLPHRXW LI SLQJFRXQWVRXUFHKRVW ! WKHQ
EORFN DOO IURP VRXUFHKRVW QRWLILFDWLRQBOHYHO WLPHRXW HQGLI
?WW£[_SXK^OX^Y__WvZSXQvZK\KKVQ_WKW£[_SXKNOXY]]KSX^\KXO^Y
Z\Y^YMYVY¤3-7:/VO¤_]KNYZK\KNSKQX¥]^SMY]OMYXNS”ÉO]NOO\\Y
X_WK \ONO 7K] O]^K W£[_SXK ObOM_^Y_ Y vZSXQv `OdO] ( NOX^\Y MYW Y ^OWZY W£bSWY NO ]OQ_XNY] ^SWOY_^ K MKNK vZSXQ]v:Y\^KX^YLVY[_OSK]OKMYXObÁYZY\ ]OQ_XNY]
IF (if ... then ... endif):
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
43
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
Use como num shell script: para executar um fluxo de ações, se tal ou qual condição acontece.
9 Z\YQ\KWK ]P 0S\OaKVV -YX^\YV :KXOV `O\]ÁY ZYNO ]O\ _]KNY
ZK\K K ONS”ÁY NY PS\OaKVVMYXP +] WO]WK] KN`O\^ XMSK] POS^K] XK]
VS”ÉO] ]YL\O Y 3ZMRKSX] O ]_K ONS”ÁY `SK 6SX_bMYXP `KVOW K[_S ?W
Z\YQ\KWK1?3MYWY]P-YX^\YV:KXOVZYNOKT_NK\WK]¤Z\OMS]Y]KLO\
Y [_O O]^£ PKdOXNY MYXROMO\ Y] MYXMOS^Y] O Y] P_XNKWOX^Y] NO _W
PS\OaKVV OW QO\KV O NK Z\YZY]^K NY =38?= OW ZK\^SM_VK\ 9 ]P
-YX^\YV :KXOV ¤ _W Z\YQ\KWK POS^Y OW 4K`K XÁY Y _^SVSdKWY] XY
ASXNYa]Y_OW[_KV[_O\Y_^\KZVK^KPY\WK.OWKXOS\K[_OXÁYZYNOWY]
PKdO\_WKK`KVSK”ÁYNO]O_]\O]_V^KNY]
9 K\[_S`Y v\_Xv [_O MRKWK Y Z\YQ\KWK ¤ _W ]M\SZ^ [_O KT_]^K Y
MVK]]ZK^R 4K`K ZK\K ZY]]SLSVS^K\ K ObOM_”ÁY NY Z\YQ\KWK 0K”K Y]
KT_]^O] ]O PY\OW XOMO]]£\SY] KL\O _WK ]O]]ÁY B^O\W O Y ObOM_^O NY
NS\O^¥\SYYXNOOVOPYSSX]^KVKNY$v\_Xv+]P_X”ÉO]NY]P-YX^\YV
]ÁY LK]SMKWOX^O K_^YObZVSMK^S`K] 9 SX^O\O]]KX^O NY ]YP^aK\O ¤ ]_K
MKZKMSNKNO NO K_^YMYXPSQ_\K”ÁY€ Y_ ]OTK `YM WYX^K\ _WK
^YZYVYQSK NO \ONO ONS^K\RY]^ Y RY]^ PS\OaKVV K \ONO OW ]S O Y
KMO]]Y K 3X^O\XO^ / NOZYS] ]KV`K\ X_W K\[_S`Y O KXKVS]£VY MYW Y]
ZY]^O\SY\O]KT_]^O]@YM ZYNOKL\S\K]_KW£[_SXKPS\OaKVVZOVY]P
-YX^\YV S]]Y ]O ^S`O\ MYWZSVKNY Y ]O\`SNY\ =38?= MYW Y ZKMY^O NK
/8]USZZYNOXNYO]^ÁY_]K\YZ\Y^YMYVY0S\OaKVV^Y0S\OaKVV
+] YZO\K”ÉO] MYW Y =P -YX^\YV MYWO”KW MYW K ONS”ÁY NK ^YZYVYQSK NO
\ONO:K\KS]]Y]OO]MYVROXYWOX_KYZ”ÁY/NS^^YZYVYQc€$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
44
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
45
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
.OZYS]¤XOMO]]£\SYWYX^K\K^YZYVYQSKZ\YZ\SKWOX^ONS^KO]MYVROXNY
K] _XSNKNO] K ]O\OW MYXPSQ_\KNK] 8K ^OVK KMSWK O]^£ _W ObOWZVY NK
MYXPSQ_\K”ÁY NO _WK W£[_SXK PS\OaKVV :YNOWY] MYW _W RY]^ ]O\`SNY\
MYXPSQ_\£VY MYW `£\SY] ]O\`S”Y] ZY]]´`OS] 0>: =OM_\O AAA ]O\`O\
==2]O\`O\O^MVSLO\KXNYY_XÁYZK\KYKMO]]YZ¦LVSMY/XMO\\KNK
K SNOX^SPSMK”ÁY NO XY]]K \ONO ]K´WY] NY vWYNY ^YZYVYQSKv XO]]O
SX]^KX^O Y ]P -YX^\YV K`KVSK ]O R£ SXMYX]S]^ XMSK] OW XY]]K
^YZYVYQSK=O^_NYO]^£YUZYNOWY]O]MYVRO\ Y vK_^YMYXPSQv .OZYS]
ZYNOWY] \O`O\ MYXPY\WO XY]]Y QY]^Y K] MYXPSQ_\KӃO] 8K ^OVK
]OQ_SX^OO]^KWY]ONS^KXNYYLVYMYNO]O^_Zv\_VO]v$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
46
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
+QY\K `KWY] `O\ Y WOMKXS]WY NO \OQS]^\Y NY =38?= 0S\OaKVV =OW
N¦`SNK _W NY] ZYX^Y] PY\^O] NY ]YP^aK\O 4£ [_O K WYX^KQOW NO _W
PS\OaKVV ]SQXSPSMK OW Q\KXNO ZK\^O `SQSVŸXMSK +]]SW \OQS]^\K\ OW
K\[_S`Y] ]OQ_\Y] Y WY`SWOX^Y NO OX^\KNK O ]K´NK NO ZKMY^O] O KV¤W
NYWKS]Q\K”K]§MKZKMSNKNONO]M\SZ^NYZ\YQ\KWKObOM_^K\K”ÉO]¤
P_XNKWOX^KVZK\KYKNWSXS]^\KNY\NO_WK\ONO
4£ `SWY] [_O Y K\[_S`Y NO VYQ P_XNKWOX^KV NY =38?= MRKWK]O
v`K\VYQPS\OaKVVv @YM NO`O SX`O]^SQ£VY ]OWZ\O ZYS] ^YNY Y
WY`SWOX^Y NO ZKMY^O] ¤ XOVO Q\K`KNY K]]SW MYWY K] YZO\K”ÉO]
MYXPSQ_\KNK]XYXY^SPSMK^SYXIVO`OV=OK]_K\ONO¤NOQ\KXNOZY\^O
OZY\^KX^Y\OMOLO_W^\£POQYW_S^YSX^OX]Y¤KMYX]OVR£`OV_]K\_WK
ZK\^S”ÁY ]OZK\KNK ZK\K Y NS\O^¥\SY v`K\VYQv -YW OPOS^Y ZYNOWY]
_]K\YMYWKXNYv^KSVvZK\KSX]ZOMSYXK\YVYQQ\K`KNYXYK\[_S`YMYW
Y KM\¤]MSWY NK PVKQ P ZK\K PY\”K\ K VOS^_\K NY PSW NY K\[_S`Y
:Y\ObOWZVY$
>URRW#DOSKD ORFDO@ WDLO I YDUORJILUHZDOO
)HE V DFFHSW 7&3 !WHOQHW
)HE 7HOQHW FRQQHFWLRQ UHTXHVW
)HE V EORFN 7&3 !ZZZ
)HE ,OOHJDO 7&3 FRQQHFWLRQ
)HE VHQGLQJ PDLO WR URRW
)HE VWDUWHG FRXQWHU LQWHOOLJHQFH DJDLQVW KRVW )HE V EORFN 7&3 !DXWK
)HE ,OOHJDO 7&3 FRQQHFWLRQ
)HE VHQGLQJ PDLO WR URRW
)HE V EORFN 7&3 !DXWK
)HE ,OOHJDO 7&3 FRQQHFWLRQ
)HE V EORFN 7&3 !ILQJHU
)HE ,OOHJDO 7&3 FRQQHFWLRQ
)HE V EORFN 7&3 !ILQJHU
)HE ,OOHJDO 7&3 FRQQHFWLRQ
)HE V EORFN 7&3 !DXWK
)HE ,OOHJDO 7&3 FRQQHFWLRQ
)HE V EORFN 7&3 !ILQJHU
)HE ,OOHJDO 7&3 FRQQHFWLRQ
6HJXH
>OWY] K[_S _WK WY]^\K NK ]O[_ XMSK NO OX^\KNK] \OQS]^\KNK] MYW Y
W ]YNSKKRY\KKKN`O\^ XMSKYMY\\SNKOXNO\O”Y]3:Z\Y^YMYVY]
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
47
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
OW [_O]^ÁY O^M 2£ N_K] OX^\KNK] NO OX`SY NO WKSV ZK\K Y _]_£\SY
\YY^ VSXRK] O # 9 MYXROMSNY VOS^Y\ NO WKSV] :38/ KM_]K Y
\OMOLSWOX^YNKWOX]KQOW$
9 MYWKXNY ^KSV _]KNY K]]SW ]O\`O MYWY _WK `S]ÁY€ SX]^KX^ŸXOK NK
^\£POQYNO\ONOOVOOMYK\£]OWZK\K\Y]VYQ]MYX^SNY]OWPS\OaKVV
K^¤[_OObOM_^O]O_Wv-YX^\YV-v+PY\WKWKS]Z\YN_^S`K¤_]K\Y]
^O\WSXKS] `S\^_KS] ZY\ ObOWZVY ! O " [_O ]KLSNKWOX^O ]ÁY
KVMKX”KNY] MYW v+6>0!vY_ _]O Y ^O\WSXKV [_O NO]OTK\ :K\K
^KX^YONS^OYK\[_S`YSXS^^KLONS^OK]]OQ_SX^O]VSXRK]$
À 7:2345:respawn:/usr/bin/tail -f /var/log/firewall > /dev/tty7
@YM ZYNO^KWL¤W[_O\O\VO\€Y]O_v`K\VYQWO]]KQO]vX_W^O\WSXKV
`S\^_KV_]OY"ZY\^KX^Y+6>0"` VY$
À 8:2345:respawn:/usr/bin/tail -f /var/log/messages > /dev/tty8
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
48
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
+MYX]OVRKWY] ^KWL¤W Y _]Y NO _W ¥^SWY ]M\SZ^ OW :O\V O]M\S^Y ZY\
7SMRKOV,KLMYMUR^^Z$aaaVSX_b]_ZZY\^VSXOMYWhZQZVSX_bMRKWKNY
6YQMYVY\S]O VYQMYVY\S]O!^K\Qd ¤ K `O\]ÁY [_O _]KWY] /VO
^OW K MKZKMSNKNO NO Z¡\ MY\O] XY] K\[_S`Y] NO VYQ NO WKXOS\K [_O
ZYNOKMOX^_K\NO^O\WSXKNK]ZKVK`\K]O]ZOM´PSMK]
=O`YM NO]OTK\`O\€Y]VYQ]QO\KNY]WK]SXSMSK\Y]O_]S]^OWKOW
vSXS^ v Y_ WO]WY O]^S`O\ ]OWZ\O OW KWLSOX^O Q\£PSMY O XÁY
NO]OTK\ ]KS\ NOVO ZYNO _]K\ K Y Z\YQ\KWK bMYX]YVO Z\O]OX^O XK
[_K]O ^Y^KVSNKNO NK] NS]^\SL_SӃO] 6SX_b 9 bMYX]YVO WYXS^Y\K K]
WOX]KQOX]NYMYX]YVOXYBASXNYa@YM ZYNO_]K\XY]O_vbSXS^\MvY
MYWKXNY$
tail -f /var/log/firewall > /dev/console &
/OX^ÁY$
xconsole -exitOnFail &
8O]^K^OVK`OWY]_WObOWZVYNOObOM_”ÁYXYbMYX]YVO$
9 NKOWYX NY =38?= v]PMv KMOS^K KVQ_WK] SWZY\^KX^O] YZӃO] XK ]_K
VSXRKNOMYWKXNY=ÁYOVK]$
11
Portanto, para usá-lo você precisa de Perl em seu sistema (5.x)...
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
49
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
VWDUW >FRQILJ@
,QLFLD R GDHPRQ XVDQGR SRU SDGUmR R DUTXLYR
HWFILUHZDOOGILUHZDOO
HQWUH FRP RXWUR
DUTXLYR VH TXLVHU H[HPSOR VIF VWDUW XVU
ORFDOWPSILUHZDOOWHVWH
VWRS
'HVOLJD R GDHPRQ PDV QmR GHVFDUUHJD R PRGXOR
UHFRQILJ >FRQILJ@
'HVOLJD R GDHPRQ H UHLQLFLDR FRP XP QRYR
>IOXVK RX IOXVKBDOO@ DUTXLYR GH FRQILJXUDomR
CUHFRQILJ
QmR SDUDOLVD DV FRQH[}HV 7&3
DR PHQRV TXH VH XVH IOXVK
RX IOXVKBDOO
CIOXVK
GHVWUyL WRGDV DV FRQH[}HV TXH QmR
VmR SHUPLWLGDV QD QRYD FRQILJXUDomR Mi
CIOXVKBDOO
GHVWUyL WRGDV DV FRQH[}HV 7&3
H[LVWHQWHV
FKHFNFRQILJ >FRQILJ@
&KHFD R DUTXLYR GH FRQILJXUDomR
SRU HUURV GH VLQWD[H
3DGUmR HWFILUHZDOOGILUHZDOOFRQI
VKRZ
0RVWUD D FRQILJXUDomR XVDGD H DV FRQH[}HV 7&3
VKRZWFS
0RVWUD DSHQDV DV FRQH[}HV 7&3
NLOO LGNH\FULDGR
0DWD FRQH[mR 7&3 HVSHFLILFDGD
NLOODOO
0DWD WRGDV DV FRQH[}HV 7&3
NLOOLGOH PLQXWRV
0DWD WRGDV DV FRQH[}HV 7&3 RFLRVDV SRU ; PLQXWRV
UHVHWXVDJH
5HVHW XVDJH FRXQWHUV
/]^K] YZ”ÉO] ]ÁY W_S^Y SWZY\^KX^O] =YL\O^_NY XK MYX]^\_”ÁY NY
XY^SPSMK^SYXIVO`OV :YNOWY] MYX]^\_S\ SX^O\O]]KX^O] O]^\K^¤QSK]
_]KXNY K NOMVK\K”ÁY vObOMv OW MYXT_X^Y MYW O]^K] PVKQ] ?WK YZ”ÁY
NO`O\K] SWZY\^KX^O ¤ K ]K´NK ZY]]SLSVS^KNK ZY\ v]PM ]RYav KV¤W NO
VS]^K\ XY]]K MYXPSQ_\K”ÁY XY O]]OXMSKV VS]^K K] MYXObÉO] K^S`K]
WY]^\K] ]_K] vSNUOc]v [_O ZYNO\OWY] _]K\ ZK\K NO\\_LK\ MYXObÉO]
[_O ]O WY]^\OW ZO\SQY]K] /S] _WK ]K´NK NY NKOWYX YL]O\`O MYW K]
SXPY\WK”ÉO]]ÁYPKMSVWOX^OSNOX^SPSMKNK]$
>URRW#DOSKD DGP@ XVUORFDOVIF VKRZ
$FWLYH UXOHV XVDJH FRXQWHUV ODVW UHVHW DW 6DW )HE &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
50
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
OLQH VWDWLF XVDJH WLPHV
EORFN QRWLILFDWLRQ OHYHO SURWRFRO 7&3
WR
SRUW OLQN
SRUW VXSGXS
OLQH VWDWLF XVDJH WLPHV
EORFN QRWLILFDWLRQ OHYHO DOO SURWRFROV
RSWLRQV CORRVH VRXUFH URXWH
CVWULFW VRXUFH URXWH
OLQH VWDWLF XVDJH WLPHV
EORFN QRWLILFDWLRQ OHYHO SURWRFRO 5,3
IURP
OLQH VWDWLF XVDJH WLPH E\WHV
DFFHSW QRWLILFDWLRQ OHYHO SURWRFRO 7&3 CIWSBDOO
WR
SRUW VVK
OLQH VWDWLF XVDJH WLPHV
DFFHSW QRWLILFDWLRQ OHYHO SURWRFRO 7&3 CIWSBDOO
WR
SRUW IWS
OLQH VWDWLF XVDJH WLPH E\WHV
DFFHSW QRWLILFDWLRQ OHYHO SURWRFRO 7&3 CIWSBDOO
WR
SRUW WHOQHW
OLQH VWDWLF XVDJH WLPHV
DFFHSW QRWLILFDWLRQ OHYHO SURWRFRO 7&3 CIWSBDOO
WR
SRUW ZZZ
OLQH VWDWLF XVDJH WLPHV E\WHV
DFFHSW QRWLILFDWLRQ OHYHO DOO SURWRFROV CIWSBDOO
IURP
WR
OLQH VWDWLF XVDJH WLPHV E\WHV
EORFN QRWLILFDWLRQ OHYHO SURWRFRO 7&3
7&3 FRQQHFWLRQV DW LGNH\ FUHDWHG ODVW XVH WLPHRXW
G GF QRQH
IE H I QRQH
VWDWHKRVWV FOLHQW
VHUYHU
VHTXHQFH ZLQGRZ VHTXHQFH ZLQGRZ
(67$%/,6+(' !WHOQHW
(67$%/,6+(' !VVK
9DULDEOHV
VU
LOOWFS WLPHRXW )HE KRVW WLPHRXW )HE :YNO\]OSK NS`SNS\ O]^O ]K´NK NO ]^K^_] NY NKOWYX OW NYS] Q\KXNO]
LVYMY] 9 Z\SWOS\Y ¤ Y O]]OXMSKV NO XY]]K MYXPSQ_\K”ÁY 3]^Y ¤ K]
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
51
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
\OQ\K] K^S`K] ]OZK\KNK] OW # NS`S]ÉO] 3NOX^SPSMKXNY SXMV_]S`O K
VSXRKNYPS\OaKVVMYXPYXNO]OOXMYX^\KWK] \OQ\K] >KWL¤W VS]^K]O
YX´`OVNOXY^SPSMK”ÁY[_O¤MRKWKNYOYX¦WO\YNO`OdO]NOKMO]]Y
OY]Lc^O]_]KNY]ZY\ObOWZVYXKVSXRK€^OWY]$v_]KQO$^SWO
Lc^O]v
8Y ]OQ_XNY LVYMY OXMYX^\KWY] K] vMYXObÉO] >-:v 6S]^KW]O ^YNK] K]
MYXObÉO]K^S`K]MRKWKNK]v/=>+,63=2/.vY]O\`SNY\O Y MVSOX^O K
ZY\^K _^SVSdKNK _]KXNY]O Y XYWO NY ]O\`S”Y O KY PSXKV ^YNK]
MYXObÉO] MYX]SNO\KNK] SVOQKS]€ vSVV^MZv + VSXRK NO MYXObÉO]
K^S`K] Q_K\NK ^\ ] NKNY] SWZY\^KX^O] ZK\K Y _]Y NK PVKQ vUSVVv
NO`O]O VOWL\K\ [_O O]^K ¤ _WK RKLSVSNKNO [_O Y 3ZMRKSX] XÁY
ZY]]_S ]KV`Y SXPY\WK”ÁY MYX^\£\SK -YW Y _]Y NO v]PM USVVKVVv
WK^KWY] ^YNK O [_KV[_O\ MYXObÁY >-: K^S`K OW XY]]K \ONO ]OW
NS]M\SWSXK”ÁY KVQ_WK -YW v]PM USVVSNVO BBBIWSX_^Y]v ZYNOWY] WK^K\
[_KV[_O\MYXObÁY[_OO]^OTKYMSY]YZY\NSQKWY]WSX_^Y]7K]v]PM
USVVSNUOcM\SKNYvWK]_WKOX^\O^KX^K]MYXObÉO]OWXY]]K\ONO]O
_WKMYXObÁY]OWY]^\KZO\SQY]KZY\KVQ_WK\KdÁY7K]YUSVV]YWOX^O
P_XMSYXK MYW K] ^\ ] SXPY\WK”ÉO] MYWY _WK WONSNK NO Z\OYM_ZK”ÁY
]OQ_XNY \OVK^Y NY] Z\¥Z\SY] NO]OX`YV`ONY\O] -YWY SNOX^SPSM£VK])
@OTKWY]$
LGNH\
FUHDWHG
G
ODVW XVH
GF
WLPHRXW
QRQH
VWDWHKRVWV FOLHQW
VHUYHU
VHTXHQFH ZLQGRZ VHTXHQFH ZLQGRZ
(67$%/,6+(' !WHOQHW
×
¤Y3.#¤Y5/C!N#"!¤Y-</+>/.
:K\K WK^K\WY] ^KV MYXObÁY O]^KLOVOMSNK OW XY]]K \ONO _]K\´KWY]
OX^ÁY$
>URRW#DOSKD @ XVUORFDOVELQVIF NLOO G
6HDUFKLQJ IRU 7&3 FRQQHFWLRQ G
&RQQHFWLRQ WHUPLQDWHG
>URRW#DOSKD @
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
52
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
+ YZ”ÁY NO ^SWOY_^ OW MYXT_X^Y MYW K ZY]]SLSVSNKNO NO NO\\_LK\ K]
MYXObÉO] >-: K^S`K] ¤ _WK SWZY\^KX^O PO\\KWOX^K NY =38?= :YNOWY]
ZY\ ObOWZVY WYXS^Y\K\ K] MYXObÉO] OW XY]]Y ]O\`SNY\ AOL O`S^KXNY
[_KV[_O\ ^OX^K^S`K NO .Y= v.OXSKV YP =O\`SMOv K^\K`¤] NO _W =C8
0VYYNSXQ@OTKWY];_KXNY_WKW£[_SXKObOM_^K_WKMYXObÁYOVKOX`SK
_W ZKMY^O MRKWKNY =C8 NO ]cXMR\YXS]O [_KXNY _W =O\`SNY\ AOL MYWY OW XY]]Y ObOWZVY \OMOLO XY]]Y ZKMY^O =C8 OVO \O]ZYXNO MYW
_W =C8+-5 _W ZKMY^O [_O ZY]]_S _WK ]O[_ XMSK X_W¤\SMK NO `KVY\
\KXN¡WSMY ;_KXNY XY]]Y RY]^ \OMOLO Y =C8+-5 KM\ONS^KWY] XY
\OMYXROMSWOX^Y KMUXYaVONQO O OX^ÁY \O]ZYXNOWY] MYW _W +-5
:Y\¤W _W ]O\`SNY\ KZ¥] OX`SK\ _W =C8+-5 O]ZO\K MO\MK NO ]OQ_XNY] ZOVY +-5 NO \O]ZY]^K ]O OVO XÁY MROQK MKXMOVK]O K
MYXObÁY/^KWL¤W]YWOX^OYS^YW£[_SXK]ZYNOW^OX^K\KMYXObÁYMYW
Y]O\`SNY\KYWO]WY^OWZY9=C80VYYNSXQMYX]S]^OOWOX`SK\`£\SY]
ZKMY^O]MYWvOXNO\O”Y]NOY\SQOWvSWKQSX£\SY]]_MO]]S`KWOX^O;_KXNY
Y ]O\`SNY\ \OMOLO Y =C8 \O]ZYXNO WK] MYWY Y OXNO\O”Y XÁY ObS]^O
XÁY \OMOLO \O]ZY]^K /]ZO\K ]OQ_XNY] O MKXMOVK K MYXObÁY =O K
MKNK]OQ_XNY]MROQKWZKMY^O]=C8SXObS]^OX^O]NOYS^YMYXObÉO]_W
]O\`SNY\ Z\K^SMKWOX^O Z£\K NO P_XMSYXK\ :YNO\´KWY] O][_OWK^SdK\
OW^\ ]WYWOX^Y]$
n
Î
CLIENTE
SYN
SERVIDOR
SYN-ACK ... 40 segs.
o
SERVIDOR
ACK
p
12
CLIENTE
Î
Î
CLIENTE
SERVIDOR
Flooding em inglês quer dizer inundação...
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
53
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
?W Y_^\Y ^´ZSMY K^K[_O LK]OKNY OW =C8+-5 PYS NO]M\S^Y XY VS`\Y
>]_^YW_=RSWYW_\K8YOX^KX^YYYLTO^S`YNYSX`K]Y\XÁYO\KYZO\K\
]SWZVO]WOX^O _W .Y= =O_ SX^OX^Y O\K ZOXO^\K\ X_WK \ONO Z\S`KNK
PSXQSXNY]O]O\_W^\_]^ONRY]^MYWY`O\OWY]_]KXNY_WKY_^\K
^¤MXSMK$ Y 3: =ZYYPSXQ ^Y ]ZYYP€ Y_ ]OTK V_NSL\SK\ OXQKXK\
;_O¤]OQ_XNYNO]M\S”ÁYNYO]ZOMSKVS]^K=,OVVY`SX$
“Um dos mais fascinantes buracos na segurança, e que foi primeiramente descrito por Morris. Em suma: usa-se uma
predição dos números de sequência TCP para construir uma sequência de pacote TCP sem em qualquer momento ter
recebido qualquer resposta do servidor. Isto lhe permite enganar (spoof) um host confiável numa rede local.”
:K\K^KX^YYSX`K]Y\KX_VY__WKNK]W£[_SXK]MYW`£\SY]=C8]NO
WKXOS\K[_OOVKXÁYZYNO\O]ZYXNO\K_WY_^\YRY]^MYXPS£`OV+
W£[_SXK OX^ÁY \OMOLO_ _WK ]¤\SO NO =C8] Y RKMUO\ O]^_NY_ K
]O[_ XMSK X_W¤\SMK _]KNK O \O]ZYXNO_ MY\\O^KWOX^O XY V_QK\ NK
W£[_SXK KSXNK ZK\KNK 0KdOXNY]O ZK]]K\ ZOVK W£[_SXK NK
SX^\KXO^ OX`SY_ Y ]SWZVO] MYWKXNY vOMRY ( \RY]^]v NO]^\_SXNY
[_KV[_O\ MYX^\YVO NO KMO]]Y KY RY]^ + RS]^¥\SK ¤ K]]SW MYX^KNK O
NOPY\WKKSXNKWKS]NO^KVRKNKZOVYK_^Y\OW]O_VS`\Y
.O`O]O NSdO\ ZY\ PSW [_O Y KV_XY XÁY NO`O MYXP_XNS\ K ^\YMK NO
=C8+-5 [_O YMY\\O OX^\O _W ]O\`SNY\ O _W MVSOX^O MYW _W Z\YMO]]Y
NO K_^OX^SMK”ÁY » S]^Y ]SW _WK ]SXM\YXSdK”ÁY 9 Z\Y^YMYVY >-:
NSPO\OX^OWOX^O NY ?.: [_O Z\SWK ZOVK `OVYMSNKNO ¤ MK\KM^O\SdKNY
ZOVKMYXPSKLSVSNKNOXKOX^\OQKNY]ZKMY^O]Y[_OZY\^KX^Y^OW_W
M_]^Y .OX^\Y NO _W ZKMY^O >-: KV¤W NK] SXPY\WK”ÉO] ]YL\O K ZY\^K
NO Y\SQOW O NK NO]^SXY NO _W MROMU]_W O^M R£ KVQ_WK] PVKQ] [_O
QK\KX^OW K MYXPSKLSVSNKNO NK MYXObÁY =C8 O +-5 ]ÁY N_K] NO]]K]
PVKQ] v<=>v ZY\ ObOWZVY \OSXSMSK K MYXObÁY Y_ 038 [_O OXMO\\K K
MYXObÁY /W ]_WK ZK\K [_O K MYXObÁY ]OTK MYXPS£`OV ¤ XOMO]]£\SY
[_ORKTKM\S^¤\SY]ZK\KK^\YMKNONKNY]OX^\ONYS]RY]^
13
Contra-Ataque. A História da captura do Pirata Cibernético mais procurado dos Estados Unidos. Ed. Companhia da
Letras, 1996, p. 104 ss.
14
“Security Problems in the TCP/IP Protocol Suite”. Computer Communication Review, Vol. 19, nº2, p. 32.
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
54
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
55
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
3 Monitoração da rede
3.1 Os scanners de rede
.OZYS]NOWYX^KNYYXY]]YPS\OaKVVXOMO]]S^KWY] NO PO\\KWOX^K] XÁY
]YWOX^OZK\K`KVSN£VYMYWYZK\KKNOZ_\K”ÁY XOMO]]£\SK +]]SW MYWY
ZK\KX_WO`OX^_KVPKVRKNOXY]]KZYV´^SMKNO^OM^K\WY]Y]SX^\_]Y]OW
XY]]K\ONO
9KWLSOX^O6SX_bNS]ZÉONO_WQ\KXNOX¦WO\YNOPO\\KWOX^K]`O\OWY]
K]]SWKVQ_WK]NOVK][_O§]`OdO]M_WZ\OWKWO]WKP_X”ÁYZY\¤WMYW
]_K]ZK\^SM_VK\SNKNO]
1Y]^K\´KWY] NO `YV^K\ KY PSW NY MKZ´^_VY KX^O\SY\ :K\K ^YWK\WY] Y
ObOWZVYMS^KNYXYVS`\YNO>]_^YW_=RSWYW_\K@SWY]V£[_OYSX`K]Y\
Z¡NOK^\K`¤]NO_W3:PVYYNSXQOXQKXK\K\ONOOOX^\K\MYWY_WRY]^
MYXPS£`OV/VOO]^_NY_K]O[_ XMSKOWS^SNKZY\_WNY]RY]^]OOX^ÁY
POd K \O]ZY]^K ObK^K -YWY S]]Y PYS ZY]]´`OV) + Z\SY\S KN`O\^SWY]
[_OYZ\YMO]]YNO\OMYXROMSWOX^YNY=C8+-5XÁY¤_WKK_^OX^SMK”ÁY
WK]]SW_WKXOQYMSK”ÁYOXN^YOXNOX^\ORY]^][_O¤MY\\O^KWOX^O
MRKWKNK NO ^MZ RKXN]RKUSXQ€ Y [_O ]SQXSPSMK VS^O\KVWOX^O _WK
O]Z¤MSO NO KZO\^Y NO WÁY]€ 7_S^Y ZOVY MYX^\£\SY ¤ LK]OKNY X_WK
]O[_ XMSK V¥QSMK [_O S\OWY] OX^OXNO\ MYW PKMSVSNKNO 9] X¦WO\Y]
]O[_OXMSKS] XÁY ]ÁY KVQY K]]SW MYWY ]OXRK]€ XÁY \OMOLOW XOXR_WK
O]Z¤MSO NO M\SZ^YQ\KPSK ?W Z\YQ\KWK NY ^SZY ]XSPPO\ NO ^Y ]XSPP$
PK\OTK\ ZYNO SX`O]^SQK\ Y] NKNY] NO _W MKLO”KVRY >-: O ObOM_^K\
K]WKXYL\K]XOMO]]£\SK]`S]KXNYK\_Z^_\KNK]OQ_\KX”K
:\OMS]KWY]KQY\K`S]_KVSdK\Z\SWOS\KWOX^O_WMKLO”KVRY>-:OZK\K
_WKMYX^\KZY]S”ÁY_WMKLO”KVRY?.:
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
56
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
0Y\WK^Y NO _W MKLO”KVRY >-:15
_
6RXUFH 3RUW
_
'HVWLQDWLRQ 3RUW
_
_
6HTXHQFH 1XPEHU
_
_
$FNQRZOHGJPHQW 1XPEHU
_
_ 'DWD _
_8_$_3_5_6_)_
_
_ 2IIVHW_ 5HVHUYHG _5_&_6_6_<_,_
:LQGRZ
_
_
_
_*_._+_7_1_1_
_
_
&KHFNVXP
_
8UJHQW 3RLQWHU
_
_
2SWLRQV
_
3DGGLQJ
_
_
GDWD
_
8Y^O KQY\K K NSPO\OX”K ZK\K _W MKLO”KVRY ?.: LOW WKS] ]SWZVO]
_
6RXUFH
_
'HVWLQDWLRQ
_
_
3RUW
_
3RUW
_
_
_
_
_
/HQJWK
_
&KHFNVXP
_
_
_
GDWD RFWHWV 9 WY^S`Y Z\SXMSZKV O]^£ XK XK^_\OdK WO]WK NY] Z\Y^YMYVY] +
MYWZVObSNKNONYMKLO”KVRY>-:O]^£OW]_K XOMO]]SNKNO O]^KLOVOMO\ K
MYXPSKLSVSNKNONKMYXObÁYNONKNY]
8Y] MKWZY] SXSMSKS] ZYNOWY] YL]O\`K\ K SXNSMK”ÁY ZK\K K] ZY\^K] NO
Y\SQOW O NO NO]^SXY ^KX^Y XY >-: [_KX^Y XY ?.: NSPO\OX^OWOX^O NO
15
0YX^O]$ <0- !# ZK\K Y MKLO”KVRY >-: O <0- ! " ZK\K Y ?.:
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
57
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
_WMKLO”KVRY3:[_O^\KdY]OXNO\O”Y]3:>\ ]MKWZY]XYMKLO”KVRY
>-: XY] SWZY\^KW NO SWONSK^Y$ ]O[_OXMO X_WLO\ X¦WO\Y ]O[_OXMSKV
KMUXYaVONQWOX^X_WLO\X¦WO\YNO\OMYXROMSWOX^YOK]]OS]PVKQ]X_W
^Y^KVNO LS^]$?<1+-5:=2<=>=C8O038=ÁY^KS]PVKQ][_O
MYX^\YVKW K ^\KX]WS]]ÁY NO NKNY] NO PY\WK MYXPS£`OV / ]ÁY K´
SQ_KVWOX^O[_O]OO]MYXNOWL_\KMY]XK]OQ_\KX”K
<OVOWL\KXNY$ `SWY] KX^O\SY\WOX^O [_O _W MVSOX^O [_KXNY ]O MYXOM^K
MYW _W ]O\`SNY\ OX`SK ZKMY^O YXNO XY ]O_ MKLO”KVRY K PVKQ =C8 ¤
WK\MKNK/VO]YVSMS^K_WKMYXObÁY=OQ_OWY=C8+-5NY]O\`SNY\O
Y+-5YL^OXNYKMYXObÁYKPVKQ038WK\MKYOXMO\\KWOX^YNOOX`SYNO
NKNY] 7K] [_KXNY O]^O] MKLO”KVRY] ]ÁY ^\YMKNY] K XOQYMSK”ÁY€ ]O
N£ ^KWL¤W XY] MKWZY] [_O K]]SXKVKW Y] vX¦WO\Y] ]O[_OXMSKS]v O Y
vX¦WO\Y NO \OMYXROMSWOX^Yv 4£ YL]O\`KWY] [_O ¤ _WK ]O[_ XMSK
V¥QSMK /VO KMYX^OMO OW SXM\OWOX^Y] NO _WK _XSNKNO 9L]O\`O Y
]OQ_SX^OO][_OWK$
=C8
-VSOX^O '''''''''''''(( =O\`SNY\
=O[ X_WLO\$ <+8.98 !
+MU X_WLO\$ =C8+-5
-VSOX^O &&''''''''''''' =O\`SNY\
=O[ X_WLO\$ <+8.98 #
+MU 8_WLO\$ ! ' "
+-5
-VSOX^ '''''''''''''(( =O\`SNY\
=O[ X_WLO\$ "
+MU 8_WLO\$ # ' +]]SWYRY]^+ZONO_WK]O]]ÁY>OVXO^MYWYRY]^,Y]O\`SNY\8Y
MKWZY ]O[_OXMO X_WLO\ NY RY]^ + [_O OX`SK Y =C8 O ¤ O]MYVRSNY
KVOK^Y\SKWOX^O _W X¦WO\Y OW XY]]Y ObOWZVY ! 9 MKWZY
KMUXYaVONQWOX^X_WLO\O]^£YL`SKWOX^OdO\KNY O RY]^,\O]ZYXNOMYW
_W =C8+-5 O O]MYVRO KVOK^Y\SKWOX^O XY ]O[_OXMO X_WLO\ _W X¦WO\Y
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
58
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
#WK]T£XYMKWZYNYX¦WO\YNO\OMYXROMSWOX^YSXM\OWOX^K$]YWK
Y ]O[_OXMO X_WLO\ NY MVSOX^O WKS] \O]_V^KXNY " 8Y +-5 OX`SKNY
ZOVY RY]^ + `OWY] XY ]O[_OXMO X_WLO\ " S]^Y ¤ K ]YWK NY ¦V^SWY
KMUXYaVONQWOX^X_WLO\OXY]O_X¦WO\YNO\OMYXROMSWOX^YO]^£K]YWK
NY ]O[_OXMO X_WLO\ WKS] 9L]O\`O Y O][_OWK KX^O\SY\ [_O O]^K
]O[_ XMSKPSMK\£WKS]MVK\K0YSK]]SW[_OYSX`K]Y\ZYNOOX^\K\XK
\ONOZ\S`KNKPKdOXNY]OZK]]K\ZY\_WKW£[_SXKMYXPS£`OV
@OTKWY] _W ObOWZVY \OKV >\ ] PO\\KWOX^K] ]ÁY ¦^OS] XO]]O Z\YMO]]Y
NOWYXS^Y\K”ÁY-KNK_W^OW]_K][_KVSNKNO]OPSMK[_K]OXYO]^SVY
NY KNWSXS]^\KNY\ YZ^K\ ZY\ O]^O Y_ K[_OVO ]YP^aK\O =ÁY OVO]$
>MZN_WZ
NK
6Ka\OXMO
,O\UOVOc
8K^SYXKV
6KLY\K^Y\c
P^Z$P^ZOOVLVQY` Y 3:>\KP O]M\S^Y ZY\ 1O\KVN 4K`K [_O O]^ÁY
Z\O]OX^O] OW [_K]O ^YNK] K] NS]^\SL_SӃO] 6SX_b O Y +:= +N`KXMON
:KMUO^ =XSPPO\ `O\]ÁY O]M\S^Y ZY\ -R\S]^SKX =MR_V^O
http://www.swrtec.de)
9 +:= XY] ZY]]SLSVS^K _WK \KNSYQ\KPSK MYWZVO^K NY MKLO”KVRY NO _W
ZKMY^O>-:Y_?.:\OMOLSNY:YNOWY]MYWOVO`S]V_WL\K\YK\\KXTYNO
X¦WO\Y]]O[_OXMSKS][_OObZVSMKWY]=_K]YZ”ÉO]]ÁY$
KZ]EYZӃO]GEZ&NKIZY\^K(&ZK\KIZY\^K(GEY&^SZY(G
9XNOv^SZYvO`SNOXMSKY^SZYP\KWO]O]WLK\Z^MZ_NZO^M8K]
vYZӃO]v ZYNOWY] \O]^\SXQS\ NOMS]S`KWOX^O Y] ZKMY^O] K ]O\OW
WY]^\KNY]$ XÁY WY]^\K\ Y] OXNO\O”Y] 3: XÁY WY]^\K\ Y] OXNO\O”Y]
O^RO\XO^ XÁY WY]^\K\ ^KV Y_ [_KV PKSbK NO ZY\^K] O^M 9 MYWKXNY
vKZ] ROVZv VS]^K Y] ZK\ŸWO^\Y] NO]OTKNY] =O MRKWKWY] Y Z\YQ\KWK
]OW YZ”ÉO] Y_ \O]^\S”ÉO] OVO ZÉO]O ]SWZVO]WOX^O K WYXS^Y\K\ K
\ONO @KWY] \OKVSdK\ MYWY _W ^O]^O _WK ]SWZVO] MYXObÁY >OVXO^
Z\Y^YMYVY >-: ZY\^K +[_S Y RY]^ # " ¤ MVSOX^O O
# "¤Y]O\`SNY\8ÁYR£]OX^SNYOW]OWY]^\K\^YNKK]K´NK
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
59
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
[_OY]XSPPO\XY]Z\YZY\MSYXKZYS]¤NOWK]SKNYVYXQK-YXQOVKWY]Y]
^\ ]WYWOX^Y]]SQXSPSMK^S`Y]@OTKWY]$
n
+:$''5 EEDGF ! FGIHF
,3$''5 ! ,39HU __ +HDG[D E\WHV __ 6HUYLFH726 __ /HQJWK RYHU DOO
)UDJPHQWDWLRQ ,'[E )ODJV 2IIVHW
77/ __ 3URWRNROO 7&3
__ +HDGHU&5&[F
7&3+($'(5
3RUWV ! WHOQHW 6HT$FN 1U[DEI [
'DWD2IIVHW[D 5HVHUYHG%LW )ODJVXUJDFNSVKUVW6<1ILQ
:LQGRZ[G &5&[ 8UJHQW3RLQWHU[
Õ
Õ
o
+:$''5 FGIHF ! EEDGF
,3$''5 ! ,39HU __ +HDG[D E\WHV __ 6HUYLFH726 __ /HQJWK RYHU DOO
)UDJPHQWDWLRQ ,'[F )ODJV 2IIVHW
77/ __ 3URWRNROO 7&3
__ +HDGHU&5&[G
7&3+($'(5
3RUWV ! WHOQHW 6HT$FN 1U[GD [DEI
'DWD2IIVHW[D 5HVHUYHG%LW )ODJVXUJ$&.SVKUVW6<1ILQ
:LQGRZ[G &5&[ 8UJHQW3RLQWHU[
Õ
Õ
p
+:$''5 EEDGF ! FGIHF
,3$''5 ! ,39HU __ +HDG[D E\WHV __ 6HUYLFH726 __ /HQJWK RYHU DOO
)UDJPHQWDWLRQ ,'[F )ODJV 2IIVHW
77/ __ 3URWRNROO 7&3
__ +HDGHU&5&[
7&3+($'(5
3RUWV ! WHOQHW 6HT$FN 1U[DEI [GD
'DWD2IIVHW[ 5HVHUYHG%LW )ODJVXUJ$&.SVKUVWV\QILQ
:LQGRZ[G &5&[HGF 8UJHQW3RLQWHU[
Õ
Õ
+]]SXKVKWY]MYWK]O^KK]VSXRK][_OXY]SX^O\O]]KWK[_S8Y^OMYWY
K] PVKQ] ]_MONOW]O MYWY PYS ObZVSMKNY /VK] ]ÁY Q\SPKNK] ZOVY +:=
OWVO^\K]WKS¦]M_VK]$
8Y[_KN\Y`OWY]$
)ODJVXUJDFNSVKUVW6<1ILQ
Î
8P 6<1 HQYLDGR
8Y[_KN\Y`OWY]$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
60
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
XUJ$&.SVKUVW6<1ILQ
8Y[_KN\Y`OWY]$
XUJ$&.SVKUVWV\QILQ
Î
8P 6<1$&. UHVSRQGLGR
Î
( ILQDOPHQWH XP $&. 9KV_XYNO`O^KWL¤WXY^K\K]_MO]]ÁYNY]]O[_OXMOOKMUXYaVONQWOX^]
X_WLO\] 9L]O\`O MYWY YMY\\O Y SXM\OWOX^Y [_O PYS ObZVSMKNY
KX^O\SY\WOX^O$
1R6<1
6HT$FN 1U
1U[DEI [
1~PHUR GH UHFRQKHFLPHQWR ]HUDGR ­
1R6<1$&.
6HT$FN 1U
1U[GD [DEI
5DQGRP
6HT 1U $QWHULRU ­
­
1R$FN
6HT$FN 1U
1U[DEI [GD
$FN 1U
6HT 1U $QWHULRU DQWHULRU
­
­
9 Z\YQ\KWK +:= ¤ ]OW N¦`SNK _W NY] WKS] ¦^OS] ]XSPPO\] ZK\K Y
KMYWZKXRKWOX^Y NO \ONO » MVK\Y [_O Z\YQ\KWK] NO]^O ^SZY SXMV_Y
K[_S Y ^MZN_WZ ObOM_^KW _W N_WZSXQ MYWZVO^Y O ]OWZ\O ObK_]^S`Y NY
^\£POQY NO \ONO ?W \ONS\OMSYXKWOX^Y ZK\K _W K\[_S`YVYQ X_WK
ZO[_OXKSX^\KXO^N_\KX^OZY_MY]WSX_^Y]QO\K\£K\[_S`Y]OXY\WO]/
XÁY R£ Y_^\K ]YV_”ÁY ZK\K Y O]^_NY NO WYXS^Y\KWOX^Y O ZK\K K
WYX^KQOW NO _W 3.= OPO^S`Y ]OXÁY Y O]^_NY M_SNKNY]Y NY] \OQS]^\Y]
OW ^Ob^Y ;_O XY] KT_]NK\£ K OXMYX^\K\ K] ZOQKNK] NOSbKNK] ZY\ _WK
SX`K]ÁY
9 ^MZN_WZ ^\KLKVRK MYWY Y +:= ZY\¤W ]O_] VKcY_^] ]ÁY NSPO\OX^O]
@OTKWY] OX^ÁY 9 Z\YQ\KWK KMOS^K NS`O\]K] YZ”ÉO] \O]^\S^S`K] O
SXMV_]S`K]XKVSXRKNOMYWKXNYMYX]_V^OKZ£QSXKWKX_KV=_K]K´NK
ZY]]_SY]OQ_SX^OPY\WK^YOWZKMY^O]>-:$
(QG RULJHP ! (QG GHVWLQR IODJV VHTQXPEHU DFNQXPEHU WDPDQKRBGHBMDQHOD XUJHQW RSo}HV
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
61
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
4£XY]ZKMY^O]?.:OWQO\KV$
(QG RULJHP ! (QG GHVWLQR SURWRFROR WDPDQKR
+[_S^OWY]_WK]K´NK^´ZSMKNY^MZN_WZ9L]O\`KWY]_WKMYXObÁY>-:
KL\SXNY_WK]O]]ÁY0>:$
! IWS 6 ZLQ PVV VDFN2.WLPHVWDPS QRSZVFDOH ! ')
DUS ZKRKDV WHOO DUS UHSO\ EEDGF LVDW EEDGF
FGIHF
IWS ! 6 DFN ZLQ PVV VDFN2.WLPHVWDPS QRSZVFDOH !
')
! IWS DFN ZLQ QRSQRSWLPHVWDPS ! ')
8Y^O [_O K ]K´NK NY ^MZN_WZ XÁY K]]SXKVK ObZVSMS^KWOX^O KY] =C8
+-5] / SQ_KVWOX^O XY ]O[_OXMO X_WLO\ SXSMSKV 3=8 OVO XÁY dO\K
WK]\OZO^OY]`KVY\O]8O]^KMYXObÁYK]]SXKVKNK OW XOQ\S^Y ^OWY]
¤¥L`SYK\OZO^S”ÁYNKV¥QSMKNO]SXM\YXSdK”ÁYNY]ZKMY^O]>-:
9 ]YP^aK\O 3:^\KP ^\Kd K MYWYNSNKNO NO _WK SX^O\PKMO POS^K OW
XM_\]O] :YNOWY] \YVK\ K ^OVK ZY\ ObOWZVY ZK\K _WK `S]ÁY
SX]^KX^ŸXOK NY ^\£POQY NO \ONO +V¤W NS]]Y Y 3ZP\KP ]OZK\K Y
^\£POQY ?.: NY >-: 2£ NS`O\]K] Y_^\K] YZ”ÉO] NO WYXS^Y\KWOX^Y 8Y
WOX_NOKLO\^_\K^OWY]VS]^KNK]^KS]YZӃO]$
,37UDI _ ,3 WUDIILF PRQLWRU
_
_ *HQHUDO LQWHUIDFH VWDWLVWLFV
_
_ 'HWDLOHG LQWHUIDFH VWDWLVWLFV
_
_ 7&38'3 VHUYLFH PRQLWRU
_
_ (WKHUQHW VWDWLRQ PRQLWRU
_
_ 7&3 GLVSOD\ ILOWHUV
_
_ 2WKHU SURWRFRO ILOWHUV
_
_ (WKHUQHW KRVW GHVFULSWLRQV
_
_ 2SWLRQV
_
_ ([LW
_
'LVSOD\V FXUUHQW ,3 WUDIILF LQIRUPDWLRQ
8S'RZQ0RYH VHOHFWRU (QWHUH[HFXWH
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
62
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
+ Z\SWOS\K YZ”ÁY v3: ^\KPPSM WYXS^Y\v WY]^\K\ OW N_K] ^OVK] K
OX^\KNKO]K´NKNOZKMY^O]>/6+8YKV^YY^\£POQY>-:OWLKSbY
Y^\£POQY?.:K[_S_WK]O]]ÁY80=8Y^O]O[_OK]O]]ÁY^OVXO^T£
OWM_\]YZY]]_SXYPVKQ]KVO^\K+Y_]OTK+-5@OWY]^KWL¤WY]
OXNO\O”Y] 3: O K] ZY\^K] _]KNK] Y MVSOX^O MYW _WK ZY\^K XÁY
Z\S`SVOQSKNKMYXOM^KXNYKZY\^KOY]ZKMY^O]OLc^O]OWM_\]YO
K SX^O\PKMO _]KNK O^R 9_^\Y YZ”ÁY SX^O\O]]KX^O >/6+ ZK\K
MROMK\ K \ONO ¤ K O]^K^´]^SMK NO XY]]K SX^O\PKMO WOX_$ v.O^KSVON
SX^O\PKMO ]^K^S]^SM]v :YNOWY] YL]O\`K\ Y] Z\Y^YMYVY] OW _]Y K
W¤NSKNOK^S`SNKNOY]O\\Y]OXMYX^\KNY]O^M
7(/$ ,37UDI 6RXUFH 'HVWLQDWLRQ 3DFNHWV %\WHV )ODJV ,IDFH _
! $ HWK_
_
! $ HWK_
_
_
_
_
_
_
_
_
_
_
_
_
_
_
_
_
7&3 HQWULHV $FWLYH _ 8'3 IURP WR RQ HWK
_
_ 8'3 IURP WR RQ HWK
_
_ 8'3 IURP WR RQ HWK
_
_ 8'3 IURP WR RQ HWK
_
_ 8'3 IURP WR RQ HWK
_
_ 8'3 IURP WR RQ HWK
_
%RWWRP(ODSVHG WLPH ,3 7&3 8'3 ,&03 1RQ,3 8S'Q3J8S3J'QVFUO DFWY ZLQ :FKJ DFWY ZLQ 0PRUH 7&3 LQIR ;&WUO;([LW
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
63
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
7(/$ ,37UDI 6WDWLVWLFV IRU HWK _
_
_ 3DFNHWV
%\WHV
_
_ 7RWDO _
_ ,3 _
_ 7&3 $FWLYLW\
NELWVVHF _
_ 8'3 SDFNHWVVHF
_
_ ,&03 _
_ 2WKHU ,3
,3 &KHFNVXP (UURUV _
_ 1RQ,3
_
_
_
_
_
_ 3NW 6L]H E\WHV
&RXQW 3NW 6L]H E\WHV
&RXQW
_
_ WR WR _
_ WR WR _
_ WR WR _
_ WR WR _
_ WR WR _
_ WR WR _
_ WR WR _
_ WR _
_
_
(ODSVHG WLPH ;&WUO;([LW
+QY\KZYNOWY]§^´^_VYNOObOWZVYWYXS^Y\K\_WK]SW_VK”ÁYNO=C8
PVYYNSXQ X_WK SX^\KXO^ / YL]O\`£VY OW XY]]Y] Z\YQ\KWK] +:= O
3:^\KP ?]K\OWY] _W ]YP^aK\O MRKWKNY =cXU Y M¥NSQY ¤ O]M\S^Y ZY\
_WRKMUO\MRKWKNYDKUK^R=O_]ZK\ŸWO^\Y]]ÁY]SWZVO]$
]cXUOXNINOIY\SQOWOXNINOINO]^SXYZY\^KZY\^K
:YNO]OYZ^K\XKPVKQvOXNINOIY\SQOWvZY\Y[_OPK\£[_OY]=C8]
]OTKWNONSPO\OX^O]OKVOK^¥\SY]OXNO\O”Y]3: v:Y\^Kv O v:Y\^Kv
MYWY MRKWKWY] \OPO\OW]O §] ZY\^K] K ]O\OW MYX]O[_OX^OWOX^O
QO\KNK]% ZY\ ObOWZVY$ ]O O]MYVROWY] K] ZY\^K] K WKXNK\OWY]
ZKMY^O] NK ZY\^K K^¤ K ZY\^K 9] ZKMY^O] ]ÁY K]]SW OX`SKNY]
NO PY\WK SX^O\WS^OX^O K^¤ K SX^O\\_Z”ÁY ZOVY _]_£\SY MYW _W
-YX^\YV-Y_-YX^\YVL\OKU
7Y]^\KWY] K[_S Y 3:^\KP NO^OM^KXNY _W =C8PVYYNSXQ XY^O MYWY Y]
OXNO\O”Y] 3: ]ÁY QO\KNY] KVOK^Y\SKWOX^O O MYWY K] ZY\^K] ]ÁY
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
64
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
`K\\SNK]OW]O[_ XMSKK^OX”ÁY$R£^KWL¤W_WKMYXObÁY>OVXO^\OQ_VK\
]OXNYWY]^\KNKXKVSXRK#XY^O^KWL¤WKPVKQ=C8WK\MKNKMYW_W
=$
,37UDI
6RXUFH 'HVWLQDWLRQ 3DFNHWV %\WHV )ODJV ,IDFH æ
6
HWK æ
æ
HWK æ
æ
6
HWK æ
æ
HWK æ
æ
6
HWK æ
æ
HWK æ
æ
6
HWK æ
æ
HWK æ
æ
!
3$
HWK æ
æ
!
$
HWK æ
æ
6
HWK æ
æ
HWK æ
7&3 HQWULHV $FWLYH æ 8'3 E\WHV IURP WR RQ HWK
æ
æ 8'3 E\WHV IURP WR RQ HWK
æ
æ $53 E\WHV IURP EEDGF WR FGIHF RQ HWK
æ
æ $53 E\WHV IURP FGIHF WR EEDGF RQ HWK
æ
æ
æ
æ
æ
7RS (ODSVHG WLPH
,3
7&3
8'3
,&03
1RQ,3
8S'Q3J8S3J'QVFUO DFWY ZLQ :FKJ DFWY ZLQ 0PRUH 7&3 LQIR ;&WUO;([LW
+QY\K_WK^K[_ONYWO]WY^SZYOMYKXNYXO]^KMKZ^_\KNY+:=$
+:$''5 EEDGF ! FGIHF
,3$''5 ! ,39HU __ +HDG[D E\WHV __ 6HUYLFH726 __ /HQJWK RYHU DOO
)UDJPHQWDWLRQ ,'[GD )ODJV 2IIVHW
77/ __ 3URWRNROO 7&3
__ +HDGHU&5&[
7&3+($'(5
3RUWV ! WHOQHW 6HT$FN 1U[ [
'DWD2IIVHW[ 5HVHUYHG%LW )ODJVXUJDFNSVKUVW6<1ILQ
:LQGRZ[IIII &5&[I 8UJHQW3RLQWHU[
+:$''5 EEDGF ! FGIHF
,3$''5 ! ,39HU __ +HDG[D E\WHV __ 6HUYLFH726 __ /HQJWK RYHU DOO
)UDJPHQWDWLRQ ,'[EG )ODJV 2IIVHW
77/ __ 3URWRNROO 7&3
__ +HDGHU&5&[
7&3+($'(5
3RUWV ! XQNQRZQ 6HT$FN 1U[ [
'DWD2IIVHW[ 5HVHUYHG%LW )ODJVXUJDFNSVKUVW6<1ILQ
:LQGRZ[IIII &5&[IDG 8UJHQW3RLQWHU[
+:$''5 EEDGF ! FGIHF
,3$''5 ! ,39HU __ +HDG[D E\WHV __ 6HUYLFH726 __ /HQJWK RYHU DOO
)UDJPHQWDWLRQ ,'[H )ODJV 2IIVHW
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
65
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
77/ __ 3URWRNROO 7&3
__ +HDGHU&5&[
7&3+($'(5
3RUWV ! VPWS 6HT$FN 1U[ [
'DWD2IIVHW[ 5HVHUYHG%LW )ODJVXUJDFNSVKUVW6<1ILQ
:LQGRZ[IIII &5&[GI 8UJHQW3RLQWHU[
+:$''5 EEDGF ! FGIHF
,3$''5 ! ,39HU __ +HDG[D E\WHV __ 6HUYLFH726 __ /HQJWK RYHU DOO
)UDJPHQWDWLRQ ,'[EE )ODJV 2IIVHW
77/ __ 3URWRNROO 7&3
__ +HDGHU&5&[GGE
7&3+($'(5
3RUWV ! XQNQRZQ 6HT$FN 1U[ [
'DWD2IIVHW[ 5HVHUYHG%LW )ODJVXUJDFNSVKUVW6<1ILQ
:LQGRZ[IIII &5&[EIE 8UJHQW3RLQWHU[
+:$''5 EEDGF ! FGIHF
,3$''5 ! ,39HU __ +HDG[D E\WHV __ 6HUYLFH726 __ /HQJWK RYHU DOO
)UDJPHQWDWLRQ ,'[E )ODJV 2IIVHW
77/ __ 3URWRNROO 7&3
__ +HDGHU&5&[F
7&3+($'(5
3RUWV ! QVZIH 6HT$FN 1U[ [
'DWD2IIVHW[ 5HVHUYHG%LW )ODJVXUJDFNSVKUVW6<1ILQ
:LQGRZ[IIII &5&[DH 8UJHQW3RLQWHU[
8ÁYZYNO\´KWY]NOSbK\NOWOXMSYXK\_WKPO\\KWOX^K Z\O]OX^O OW [_K]O
^YNY]Y]]S]^OWK]?83BMRKWKNKvXO^]^K^v-YWYT£NOWY]X^\KYXYWO
^\K^K]O _W Z\YQ\KWK ZK\K WY]^\K\ K] O]^K^´]^SMK] OW XY]]K \ONO
:Y\¤W NSPO\OX^OWOX^O NY] Y_^\Y] ]YP^aK\O] Y XO^]^K^ ¤ NO MO\^K
PY\WKO]^£^SMY€ZYS]XY]WY]^\KY]O]^KNYK^_KVNO_WSX^O\PKMONO
\ONO]OQ_XNYYZ\Y^YMYVYNOXY]]KO]MYVRK:Y\ObOWZVY^OWY]K[_S
_W=C8PVYYNSXQMKZ^KNYZOVYXO^]^K^$
>URRW#DOSKD ELQ@ QHWVWDW Q W
$FWLYH ,QWHUQHW FRQQHFWLRQV ZR VHUYHUV
3URWR 5HFY4 6HQG4 /RFDO $GGUHVV
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
)RUHLJQ $GGUHVV
6WDWH
(67$%/,6+('
(67$%/,6+('
(67$%/,6+('
(67$%/,6+('
(67$%/,6+('
(67$%/,6+('
(67$%/,6+('
(67$%/,6+('
(67$%/,6+('
(67$%/,6+('
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
66
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
WFS
9,3V IDOVRV
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
6<1B5(&9
96<1V
8ÁY]ONO`OO]^\KXRK\KObZ\O]]ÁY_]KNK=C8</-@€9XO^]^K^MYWY
PKVKWY] ¤ _WK PO\\KWOX^K ^\KNSMSYXKV NY] =S]^OWK] YZO\KMSYXKS]
?83BZY\S]]Y_]KKObZ\O]]ÁYMKX¡XSMKZ\O]OX^OXY<0-!#+VS_WK
MYXObÁY >-: PYS SX^O\Z\O^KNK MYWY _WK Z\YQ\O]]ÁY NO O]^KNY] MYW
NSPO\OX^O] ]SQXSPSMKNY] YXNO =C8</-/3@/. ¤ _W NOVO] ^KS] MYWY
63=>/8 O]ZO\K ZY\ _WK MYXObÁY /=>+,63=2/. O]^KLOVOMSWOX^Y NK
MYXObÁY>-:038A+3>O]ZO\KZOVY^¤\WSXYNKMYXObÁYO^M
/X^\O^KX^Y K KX£VS]O NO ^KS] PO\\KWOX^K] NO WYXS^Y\K”ÁY XÁY XY]
\O]ZYXNOW]OQ_\KWOX^O_WK[_O]^ÁYNO_WK^K[_O3:]ZYYPSXQ_WZYX^Y
ZO\WKXOMO KLO\^Y ;_KV ]OTK MYWY Y SX`K]Y\ ZYNO OX`SK\ _W ZKMY^O
MYW_WOXNO\O”YNO_WRY]^MYXPS£`OVOKV¤WNYWKS]\O]ZYXNOXNYK
_W=C8+-5)-YWYWYX^K\_W]O[_OXMOX_WLO\Y__WKMUX_WLO\)
?W ]YP^aK\O KLO\^Y MRKWKNY =OXN3: `O\]ÁY NO 7SUO <SMRK\N]
WSUO*OK\^RVS M\SKNY NOX^\Y NY MRKWKNY :\YTOM^ :_\ZVO
R^^Z$aaaOK\^RVSZY\ObOWZVYZYNOPKdO\^KVYZO\K”ÁY]OXNY
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
67
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
_WK SWZY\^KX^´]]SWK PO\\KWOX^K NO NOL_Q O KNWSXS]^\K”ÁY NO \ONO O
PS\OaKVV
9=OXN3:KMOS^KSX¦WO\K]YZ”ÉO]XKVSXRKNOMYWKXNY-YL\SXNY[_K]O
^YNK]K]YZӃO]ObS]^OX^O]XY]Z\Y^YMYVY]?.:>-:O3-7:@OTKWY]$
]OXNSZ &RY]^XKWO( Z &^SZY( N &NKNY]( &YZӃO](
&RY]^XKWO( S] ^RO XKWO YP ^RO RY]^ ^Y ]OXN ^RO ZKMUO^ ^Y NOPK_V^] ^Y
VYMKVRY]^
&^cZO( S] ^RO ZKMUO^ ^cZO$ M_\\OX^Vc ?.: >-: Y\ 3-7: NOPK_V^] ^Y 3:
&NK^K( S] ^RO NK^K ZKcVYKN YP ^RO ZKMUO^ K] K ]^\SXQ YP RObKNOMSWKV
X_WLO\] NOPK_V^] ^Y Lc^O] YP ]
9:“À9
./=-<3“À9
:+.<À9
9ZӃO] NO ]Y[_O^O$
]N
.OL_Q
]\
8ÁY \Y^OK\
SO NY \Y_^O
]L
:O\WS^O L\YKNMK]^ 9ZӃO] 3:$
S]
3: NO Y\SQOW
SN
3: NO NO]^SXY
SR
>KWKXRY NO MKLO”KVRY
Sc
v>cZO YP ]O\`SMOv
SV
>KWKXRY
SS
3NOX^SPSMK”ÁY
SP\
0VKQ \O]O\`KNK
SPN
8ÁY P\KQWOX^K
SPW
7KS] P\KQWOX^Y]
SP
v0\KQ YPP]O^v
S^
>>6
SZ
:\Y^YMYVY
SM
v-ROMU]_Wv
!
-Y\\O^Y
-Y\\O^Y
`O\ <0-!#
-Y\\O^Y
+VOK^¥\SY
-Y\\O^Y ZK\K Y ^SZY
-Y\\O^Y
9ZӃO] 3-7:$
M^
>SZY
MN
-¥NSQY
MM
v-ROMU]_Wv
" @O\ <0-!#
@O\ <0-!#
-Y\\O^Y
9ZӃO] ?.:$
_]
:Y\^K NO 9\SQOW
_N
:Y\^K NO .O]^SXY
_V
>KWKXRY
_M
v-ROMU]_Wv
-Y\\O^Y
-Y\\O^Y
9ZӃO] >-:$
^]
:Y\^K NO 9\SQOW
^N
:Y\^K NO .O]^SXY
^X
v=O[_OXMO X_WLO\v
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
+VOK^¥\SY
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
68
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
^K
^^
^\
^P_
^PK
^PZ
^P\
^P]
^PP
^a
^M
^_
v+MUXYaVONQOWOX^v
v.K^K YPP]O^v
<O]O\`KNY
-YXP v_\Q LS^v
-YXP vKMU LS^v
-YXP vZ]R LS^v
-YXP v\]^ LS^v
-YXP v]cX LS^v
-YXP vPSX LS^v
4KXOVK
v-ROMU]_Wv
3XNSMKNY\?\Q XMSK
-Y\\O^Y
K WOXY] [_O ^_ ]OTK O]ZOMSPSMKNY
K WOXY] [_O ^K ]OTK O]ZOMSPSMKNY
-Y\\O^Y
:YNOWY] KQY\K OX`SK\ _W ZKMY^O >-: K XY]]K O]MYVRK ZK\K _W RY]^
[_KV[_O\ NO XY]]K \ONO O OX^ÁY KXKVS]K\ MYW Y +:= O Y 3:^\KP Y
MYX^O¦NYNYZKMY^O0K\OWY]MYWK]]OQ_SX^O]YZ”ÉO]$
]OXNSZ # " Z ^MZ S] ^] ^N ªMYX^ ^K^_
9 Z\SWOS\Y OXNO\O”Y 3: ¤ Y RY]^ [_O NO]OTKWY] OX`SK\ Y ZKMY^O Y
Z\Y^YMYVY>-:YOXNO\O”YNO_W]O\`SNY\[_O_]K\OWY]ZK\K]ZYYPSXQ
KW£[_SXK[_OO]^KOX`SKXNY¤Y\SQSXKVWOX^O# "=OQ_OW]O
K]YZ”ÉO]^´ZSMK]NYZ\Y^YMYVY$v^]vZY\^KNOY\SQOW`KVY\v
^Nv ZY\^K NO]^SXY ]]R v^Kv Y X¦WO\Y NO \OMYXROMSWOX^Y
PY\TKNY$vvOWNOMSWKS]OZY\PSWWK\MKWY]OOX^ÁYK^S`KWY]
MYWvvKPVKQ?<1NYMKLO”KVRY
-YWY+:=WYXS^Y\KXNYXY]]YRY]^OVOXY]\OZY\^K$
+N`KXMON:KMUO^=XSPPO\ @
-98031.+>/$ $"$#
-YZc\SQR^ - ### -R\S]^SKX =MR_V^O NQX]a*]K^_\XP\KXUOXNO
>RS] Z\YQ\KW S] P\OO ]YP^aK\O% cY_ MKX \ONS]^\SL_^O S^ KXNY\ WYNSPc
S^ _XNO\ ^RO ^O\W] YP ^RO 18? 1OXO\KV :_LVSM 6SMOX]O K] Z_LVS]RON Lc
^RO 0\OO =YP^aK\O 0Y_XNK^SYX
2A+..<$ $$L$L$K#$NM ( $M$NP$O$$M
3:+..<$ ( # "
3:@O\ ff 2OKN$bK Lc^O] ff =O\`SMO>9=$ ff 6OXQ^R Y`O\ KVV$
0\KQWOX^K^SYX$ 3.$b ! 0VKQ]$ 9PP]O^$
>>6$ ff :\Y^YUYVV$ >-: ff 2OKNO\-<-$bL
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
69
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
>-:2/+./<$
:Y\^]$ ( XOaKMM^ =O[+MU 8\$bM !L b##
.K^K9PP]O^$b <O]O\`ON ,S^$ 0VKQ]$?<1+-5Z]R\]^=C8PSX
ASXNYa$bPPPP -<-$b ?\QOX^:YSX^O\$b
2A+..<$ $$L$L$K#$NM ( $M$NP$O$$M
+<:$ 3:(/^RO\XO^
<O[_O]^ P\YW # " 2A$$$L$L$K#$NM
1YO]
^Y # " 2A$$$$$$
2A+..<$ $M$NP$O$$M ( $$L$L$K#$NM
+<:$ 3:(/^RO\XO^
+X]aO\ P\YW # " 2A$$M$NP$O$$M
1YO]
^Y # " 2A$$$L$L$K#$NM
+QY\KXY3:^\KPZYNOWY]SQ_KVWOX^OYL]O\`K\$
Ø
,37UDI 6RXUFH 'HVWLQDWLRQ 3DFNHWV %\WHV )ODJV ,IDFH _
! 6$8 HWK _
_
! HWK _
_
_
_
_
_
_
_
_
_
_
_
_
_
_
_
_
7&3 HQWULHV $FWLYH _
_
_
_
_
_
_
_
_
_
_
_
%RWWRP(ODSVHG WLPH ,3 7&3 8'3 ,&03 1RQ,3 8S'Q3J8S3J'QVFUO DFWY ZLQ :FKJ DFWY ZLQ 0PRUH 7&3 LQIR ;&WUO;([LW
+[_S YL]O\`KWY] OW KWLK] K] ^OVK] _W ¦XSMY ZKMY^O O ObK^KWOX^O
MYWY]`KVY\O][_OM\SKWY]9]MKWZY]OWNO]^K[_OXY]WY]^\KWS]]Y
+ VOS^_\K NY MKLO”KVRY XY] WY]^\K PKMSVWOX^O Y] LS^] NO _\Q XMSK
WK\MKNY] O Y =C8+-5 NY ZKMY^O ^KWL¤W Y +:= ZYNO XY] WY]^\K\ Y
X¦WO\Y NO \OMYXROMSWOX^Y [_O O]^KLOVOMOWY] vv ObZ\O]]Y OW
RObKNOMSWKS]vb##v
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
70
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
9_^\Y NO^KVRO K ]O\ XY^KNY ¤ K \O[_S]S”ÁY +<: +NN\O]] <O]YV_^SYX
:\Y^YMYV 9] ZKMY^O] +<:] XÁY ]ÁY Ob^\OWKWOX^O SWZY\^KX^O] OW
^O\WY] NO ]OQ_\KX”K :YS] O]^KWY] X_W X´`OV WKS] LKSbY NK ZSVRK
>-:3:7K]ZY\Y_^\YVKNYZYNO\O`OVK\ KVQ_X] ^\K”Y] SWZY\^KX^O]
ZK\K Y WYXS^Y\KWOX^Y NK \ONO @OTKWY] +<: ¤ _W Z\Y^YMYVY [_O VSQK
_W OXNO\O”Y O^RO\XO^ MRKWKNY MYW_WOX^O NO 7ONSK +MMO]] -YX^\YV
7+- Y_ OXNO\O”Y NO RK\NaK\O O^RO\XO^ K _W OXNO\O”Y 3:
K^\SL_´NY=OQ_XNYKNOPSXS”ÁYZ\OMS]KNO.Y_QVK]-YWLO\$
+<:¤_WZ\Y^YMYVYNOLKSbYX´`OV[_OKL]^\KSYOXNO\O”KWOX^Y
P´]SMYZO\WS^SXNY[_O]OTKK^\SL_´NY_WOXNO\O”Y3:ZK\KMKNK
W£[_SXK3NOKVSdKWY]+<:MYWYZK\^OP´]SMKNY]S]^OWKNO\ONO]O
XÁYMYWYZK\^ONYZ\Y^YMYVYNOSX^O\VSQK”ÁYOW\ONO]€16
;_KXNY _W RY]^ NK \ONO NO]OTK ]KLO\ Y 7+- NO _W Y_^\Y RY]^ OVO
OX`SK _WK \O[_S]S”ÁY Y_ _W ZKMY^O +<: ZY\ L\YKNMK]^ ZO\Q_X^KXNY
[_KV Y OXNO\O”Y NO RK\NaK\O NK W£[_SXK MYW 3: ZY\ ObOWZVY
v# "v)€>YNK]K]W£[_SXK]KMOS^KWYZKMY^O+<:WK]MYWY]¥
R£_WKW£[_SXKMYW^KVOXNO\O”KWOX^Y]YWOX^O OVK \O]ZYXNO OX`SKNY
]O_ 7+- .O]ZYS] ¤ PY\WKNY _W MKMRO MYW _WK VS]^KQOW MYW Y]
OXNO\O”Y] 3Z] O Y] OXNO\O”Y] NO RK\NaK\O 9 MYWKXNY K\Z X`€ ZYNO
WY]^\K\YMKMROM\SKNY$
>URRW#EHWD ELQ@ DUS QY
$GGUHVV
+ZW\SH
HWKHU
HWKHU
+ZDGGUHVV
)))
))))
)ODJV
&
&
0DVN
,IDFH
HWK
HWK
97+-¤_WOXNO\O”Y¦XSMY9_]OTKMKNKKNKZ^KNY\NO\ONOZY]]_S_W
OXNO\O”Y ]SXQ_VK\ XY PY\WK^Y NO " LS^] Lc^O] O]M\S^Y OW
RObKNOMSWKS] O ]OZK\KNY] ZY\ $€ Y_ € 9] ^\ ] Z\SWOS\Y] Lc^O]
16
-97,/< . 3X^O\VSQK”ÁY OW <ONO MYW >-:3: <SY NO 4KXOS\Y ON -KWZ_] ##" Z
"
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
71
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
NO]SQXKW Y M¥NSQY NY PKL\SMKX^O NK ZVKMK NO^O\WSXKNY ZOVK 3///
3X]^S^_^O YP /VO^\SMKV KXN /VOM^\YXSM] /WQSXOO\] 9 7+- NO ]_K
ZVKMK NO \ONO ZYNO ]O\ WY]^\KNY MYW Y MYWKXNY vSPMYXPSQv% XK
Z\SWOS\KNKVSXRKNKSX^O\PKMOO^RO\XO^ZYNO]O YL]O\`K\ K OX^\KNK
2AKNN\ B$B$B$B$B$€ /W XY]]Y ObOWZVY OXMYX^\KWY] _WK ZVKMK NK
OWZ\O]K-97]O_7+-¤$
$$,$,$+#$.ªM¥N NK OWZ\O]K -97
+SXNK OW XY]]Y ObOWZVY `SWY] [_O K W£[_SXK [_O OX`SY_ ZKMY^O]
]ZYYPSXQNOSbK\£MYWMO\^OdK\K]^\Y]+\O[_S]S”ÁY+<:O]^£ObZ\O]]K
XY+:=XK]]OQ_SX^O]VSXRK] :
2A+..<$ $$L$L$K#$NM ( $M$NP$O$$M
+<:$ 3:(/^RO\XO^
<O[_O]^ P\YW # " 2A$$$L$L$K#$NM
1YO]
^Y # " 2A$$$$$$
­ OXNO\O”Y KSXNK NO]MYXROMSNY
2A+..<$ $M$NP$O$$M ( $$L$L$K#$NM
+<:$ 3:(/^RO\XO^
+X]aO\ P\YW # " 2A$$M$NP$O$$M
1YO]
^Y # " 2A$$$L$L$K#$NM
­\O[_S]S”ÁY MYWZVO^KNK
9 ZKMY^O ]ZYYPSXQ PYS OX`SKNY ZOVY RY]^ # " WK] WO]WK K
W£[_SXK [_O OX`SY_ Y ZKMY^O K\^SPSMSKV€ SWONSK^KWOX^O OX`SK _W
ZKMY^O+<:/KY_^\KW£[_SXK\O]ZYXNOMK]KXNYYOXNO\O”Y3:MYWY
7+-
3.2 Saint: Security Administrator's Integrated Network Tool
@KWY] KQY\K KXKVS]K\ K PO\\KWOX^K =KSX^ =OM_\S^c +NWSXS]^\K^Y\v]
3X^OQ\K^ON8O^aY\U>YYV`O\]ÁY\OVOK]O!_W]YP^aK\OKLO\^YO
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
72
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
W_S^Y ZYNO\Y]Y NO]OX`YV`SNY ZOVK AY\VN ASNO .SQS^KV =OM_\S^c
R^^Z$aaaaaN]SMYW]KSX^ /VO P_XMSYXK OW [_K]O ^YNY] Y]
]S]^OWK] ?83B ZK\K ]_K _^SVSdK”ÁY XOMO]]S^K NK VSXQ_KQOW :O\V
`O\]ÁY Y_ ]_ZO\SY\% O ZY\ \YNK\ NOX^\Y NO _W L\Ya]O\
XOMO]]S^K O`SNOX^OWOX^O NO [_KV[_O\ ^SZY NO L\Ya]O\ ZK\K AOL K^¤
WO]WYY]OWWYNY^Ob^Y^KVMYWYY6cXbZYNOW]O\_]KNY]9=KSX^
¤_WKO`YV_”ÁYNKMYXROMSNKPO\\KWOX^K=K^KXO]M\S^KZY\.0K\WO\
A @OXOWK O ZY]]_S WO]WY Q\KXNO] ZY\ӃO] NO MYZc\SQR^ NO]^O
]YP^aK\O 7K] ]OW N¦`SNK Y =KSX^ O]^£ LOW WOVRY\ KNKZ^KNY §]
NS]^\SL_SӃO] 6SX_b ;_OW ^OX^Y_ MYWZSVK\ Y =K^KX XY 6SX_b Y_
bO]^K\£NOKMY\NYMYXY]MY
8OW ^YNK] K] NS]^\SL_S”ÉO] 6SX_b SXMV_OW _WK `O\]ÁY NY =KSX^ +
ObMO”ÁY ^KV`Od ]OTK K NK =_=/ ` [_O T£ NS]^\SL_S Y ZKMY^O
MYWZSVKNY:K\KPKd VYObOM_^OY]]OQ_SX^O]ZK]]Y]$
.SQS^OvWKUOVSX_bvZK\KKMYWZSVK”ÁYNY]LSX£\SY]
.OZYS] KT_]^O Y] ZK^R] ZK\K Y] ]M\SZ^] OW :O\V MYW vZO\V
\OMYXPSQvMYWS]]Y^KWL¤WY=KSX^OXMYX^\K\£KKT_]^K\£YZK^RZK\K
YL\Ya]O\NS]ZYX´`OVXY]S]^OWK]ONO]OTK\KV^O\£VYONS^OYK\[_S`Y
vMYXPSQZK^R]ZVv
@YM XOMO]]S^KNO]VSQK\Y]O\`SNY\Z\Ybc[_KXNYPY\_]K\Y=KSX^
ZYS]OVOZ\OMS]KNOKMO]]YNS\O^YKY]RY]^]NK\ONO@YM ZYNOPKdO\
ONS^KXNY K ]_K `K\S£`OV NO KWLSOX^O KVQY NY ^SZY R^^ZIZ\Ybc O
^KWL¤W NO]PKdOXNY Y _]Y NY Z\Ybc XY XO^]MKZO =OW O]]O KT_]^O Y
=KSX^XÁYP_XMSYXK\£
+QY\KT£ZYNOWY]VKX”K\Y=KSX^=O_]K\WY]_WL\Ya]O\Q\£PSMYMYWY
Y XO^]MKZO Y_ Y 8=-+ WY]KSM Z\OMS]KWY] O]^K\ XY BASXNYa] .O _WK
TKXOVK NY ^O\WSXKV Q\£PSMY Y B^O\W ZY\ ObOWZVY MK\\OQKWY] Y
Z\YQ\KWKKZK\^S\NY]O_NS\O^¥\SY$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
73
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
MN_]\VYMKV]KSX^
OOX^ÁY$
]KSX^
+^OVKSXSMSKVWY]^\K_WWOX_NOP_X”ÉO]NYZ\YQ\KWK9=KSX^XÁY¤
KZOXK]_W]YP^aK\ONOQO\OXMSKWOX^YNO\ONO7K]]SW_WZ\YQ\KWKNO
KX£VS]O O \OVK^¥\SY NO NSKQX¥]^SMY] NO XY]]K \ONO O ]O_] RY]^] 9
=KSX^ Z\YM_\K `_VXO\KLSVSNKNO] O OX^ÁY K] \OZY\^K PY\WK^KXNYK]
X_WKZ£QSXK2^WV
@OTKWY]Y]O_WOX_NOKLO\^_\K$
.+>+
7+8+1/7/8>
Ö
MYXPSQ_\K
Y
K\[_S`Y
Y
ZKN\ÁY
¤$
`K\]KSX^]KSX^NK^K YXNO Y Z\YQ\KWK S\£ \OQS]^\K\ ]_K] KX£VS]O]
O \O]_V^KNY]% Y Y_^\Y S^OW 7O\QO aS^R ObS]^SXQ =+38> NK^K LK]O€ ¤
_]KNYZK\KP_XNS\NYS]K\[_S`Y]NONKNY]Z\YN_dSNY]ZOVY=KSX^
>+<1/> =/6/->398 Ö MYXPSQ_\K Y RY]^ Y_ Y] RY]^] NO _WK ]_L\ONO
Z\SW£\SK +[_S ]O\ÁY O]MYVRSNK] K] P_X”ÉO] L£]SMK] NY Z\YQ\KWK [_O
S\OWY]NO^KVRK\§P\OX^O
.+>+ +8+6C=3= Ö WY]^\K Y] \OVK^¥\SY] O KX£VS]O] NOZYS] NK
SX`O]^SQK”ÁYNO_WRY]^
-98031?<+>398 71> WKXKQOWOX^ Ö » _WK Z£QSXK [_O QO\OXMSK K]
MYXPSQ_\KӃO]QO\KS]NY=KSX^ONS^KXNYYK\[_S`YvMYXPSQ]KSX^MPv
>KS]MYWYYK\[_S`Y]NONKNY]YvX´`OVNOZO][_S]KvVO`OVZ\YLO
Y `KVY\ NO ^SWOY_^ [_KS] ]_PSbY] S\OWY] ObMV_S\ NK ZO][_S]K WSV
QY`ZY\ObOWZVY]O_]KWY]_W.8=O^M
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
74
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
.9-?7/8>+>398 O ><9?,6/=299>381 Ö ]ÁY VSXU] ZK\K K NYM_WOX^K”ÁY
K\WKdOXKNKVYMKVWOX^O
+ SX^O\PKMO MYX]^\_´NK MYWY _WK Z£QSXK AOL ¤ LK]^KX^O K_^Y
ObZVSMK^S`K -YWO”K\OWY] MYW K O]MYVRK NO _W RY]^ NO XY]]K \ONO O
]OQ_S\OWY] Y] ZK]]Y] NY Z\YQ\KWK /]MYVROWY] XY WOX_$ ^K\QO^
]OVOM^SYX€ O Z\OOXMROWY] MYW Y OXNO\O”Y NY RY]^ :YNOWY] `K\\O\€
^YNKKXY]]K\ONO^KWL¤W]OO]^S`O\WY]X_WKW£[_SXKMYWLK]^KX^O
\OM_\]Y NO WOW¥\SK 9_ ZYNOWY] O]MYVRO\ K ObOM_”ÁY NO _W .OXSKV 9P
=O\`SMO +LKSbY OXMYX^\KWY] K ]OVO”ÁY NY ]MKXXSXQ VO`OV€$ VO`O
XY\WKV ZO]KNY O`S^KXNY ZY\^K] Z\YLVOW£^SMK] NY ASXNYa] 8> O Y
¦V^SWY X´`OV Y vROK`cv XÁY O`S^KXNY K] ZY\^K] Z\YLVOW£^SMK] NY
ASXNYa] 8> 8K O]MYVRK PSXKV RKLSVS^KWY] Y_ XÁY Y PS\OaKVV XK
W£[_SXKK]O\SX`O]^SQKNK
0OS^Y]Y]KT_]^OSXSMSKWY]KSX`O]^SQK”ÁY$=^K\^^RO]MKX€
+]]SW Y =KSX^ MYWO”K ]_K `K\\ON_\K XY RY]^ O K ]_L]O[_OX^O MYVO^K
NO NKNY] NOZOXNOXNY NY ^\£POQY NO \ONO O WO]WY NY RK\NaK\O NY
O[_SZKWOX^YZYNO]OVO`K\_WMO\^Y^OWZYK^¤PSXKVSdK\K`K\\ON_\K
+ Z£QSXK NO `K\\ON_\K S\£ WY]^\K\ K] ZY\^K] O Y] ]O\`S”Y]
OXMYX^\KNY]K^¤KX_XMSK\YPSWNK^K\OPK$=KSX^\_XMYWZVO^ON€
@OWY]K[_SYZ\YMO]]YNO`K\\ON_\KNY=KSX^X_WRY]^$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
75
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
/VOXY]WY]^\K^YNY]Y]]O\`S”Y]O]_K]\O]ZOM^S`K]ZY\^K]»_W
WKZK MYWZVO^Y NK] ZY\^K] [_O O]^ÁY KLO\^K] X_W RY]^ NO XY]]K \ONO
\O]^KXY]MROMK\]OO]^OO]^KNYNOMYS]K]¤MY\\O^YY_XÁY
/]MYVROWY] KQY\K K YZ”ÁY -YX^SX_O aS^R \OZY\^ KXN KXKVc]S]€ -YW
O]]K YZ”ÁY Y =KSX^ S\£ KXKVS]K\ Y [_KN\Y OXMYX^\KNY XK W£[_SXK
# "
+ ^OVK LKSbY WY]^\K K] YZ”ÉO] YPO\OMSNK] ZOVY ]YP^aK\O =ÁY ^\ ]
LVYMY] NO YZӃO]$ v@_VXO\KLSVSNKNO]v v3XPY\WKӃO] ]YL\O YRY]^v O
ZY\ PSW _WK VS]^KQOW NO v>\_]^ON RY]^]v =OW N¦`SNK Y Z\SWOS\Y
LVYMY¤YWKS]SWZY\^KX^ONYZYX^YNO`S]^KNK]OQ_\KX”K9]OQ_XNY
OY^O\MOS\Y]ÁYWKS]SXPY\WK^S`Y]
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
76
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
» ZY\ MYX]OQ_SX^O XY X´`OV 3 v,c +ZZ\YbSWK^O .KXQO\ 6O`OVv NK]
@_VXO\KLSVSNKNO]€ [_O Y =KSX^ S\£ PKdO\ Z\SWOS\KWOX^O _WK KX£VS]O
W_S^K\SMKNY]Z\YLVOWK]ZY^OXMSKS]OXMYX^\KNY]]OOVOZY\`OX^_\K
Y] OXMYX^\K\ +[_S MYWY T£ KX_XMSK Y WOX_ OVO VS]^K Y] Z\YLVOWK]
]OQ_XNYYX´`OVNOZO\SQYKZ\YbSWKNY9]Z\YLVOWK]ZYNOW]O\Y]WKS]
NS`O\]Y] ZY]]´`OS] /VO PK\£ _WK Z\YM_\K ObK_]^S`K O MYVYMK\£ _WK
ZO[_OXK LYVK `O\WOVRK ZK\K K]]SXKVK\ K ObS]^ XMSK NO Z\YLVOWK]
M\´^SMY] [_O ZY]]KW ]O\ OXMYX^\KNY] +Y WO]WY ^OWZY ]ÁY WYX^KNY]
SX^O\O]]KX^O] VSXU] ZK\K ObZVSMKӃO] LK]^KX^O Z\Y`OS^Y]K] [_O
O]^ÁYOWK\[_S`Y]OWNS\O^¥\SY]VYMKS]
8YS^OWKLKSbYX´`OV33,c>cZO YP @_VXO\KLSVS^c€ OXMYX^\KWY]
_WK
VS]^K
NY]
Z\YLVOWK]
OXMYX^\KNY]
]OQ_XNY
Y
^SZY
`_VXO\KLSVSNKNO€-YWYWY]^\KK^OVKKLKSbY$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
77
NO
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
9 RY]^ OW [_O]^ÁY ¤ _WK W£[_SXK \YNKXNY Y ASXNYa] 8> aY\U]^K^SYX9=KSX^KZYX^K^\ ]VSXU]$
+N`O\^O ZK\K Z\YLVOWK] NO .Y= MK\KM^O\´]^SMY] NO ]S]^OWK]
ASXNYa]
9 K\[_S`Y ObZY\^ NY 80= \YNKXNY XY ASXNYa] 8> XÁY SWZÉO
\O]^\S”ÉO]ZK\KNS\O^¥\SY]OK\[_S`Y]
/VO SWKQSXOW NO^OM^K O VS]^K Y Z\¥Z\SY ASXNYa] MYWY _W
Z\YLVOWK
9 VSXU O LK]SMKWOX^O KN`O\^OW ZK\K Y _]Y NO ZK^MRO] ZK\K
MY\\SQS\Z\YLVOWK]NO.Y=XYKWLSOX^OASXNYa]
+]]SW ]O NO\WY] _W MVS[_O OW v:Y]]SLVO .Y= Z\YLVOWv Y_ vASXNYa]
NO^OM^ONv OXMYX^\K\OWY] _WK ^OVK MYW Y] OXNO\O”Y] NY]
RY]^]O]O]OQ_SWY]OX^ÁYYVSXUOXMYX^\K\OWY]Y]OQ_SX^O$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
78
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
+ LYVK `O\WOVRK WK\MK _W Z\YLVOWK M\´^SMY K ]KLO\ Y NS\O^¥\SY
vN\S`OMv NK W£[_SXK 8> ZYNO ]O\ WYX^KNY ZY\ [_KV[_O\ _]_£\SY
SXNS]M\SWSXKNKWOX^O 0OS^K K KN`O\^ XMSK \O]^K KY KNWSXS]^\KNY\ NK
\ONO^YWK\K]WONSKNK]XOMO]]£\SK]_WKNSMK¦^SVK[_S¤MYXPO\S\Y
K\[_S`Y v\_VO]N\YZv KVS ZYNOWY] MYXPSQ_\K\ PK^Y]€ K ]O\OW
XOQVSQOXMSKNY] ZOVY =KSX^ /bOWZVY$ ¤ LK]^KX^O MYW_W XK] \ONO] [_O
_]KW 80= VSLO\K\OW K WYX^KQOW NO _XSNKNO] NO -.<97 XY] ]O_]
K\[_S`Y]O^MObZY\^]ZYNOWY]MYXPSQ_\K\OX^ÁYZK\K[_OY=KSX^XÁY
\OZY\^O^KVPK^YMYWY_WZ\YLVOWK
+]LYVK]WK\\YX]v3]cY_\RY]^K.Y=^R\OK^)vOY]OQ_SX^O
MYWYNS]]OWY]KX^O\SY\WOX^OO]MVK\OMOWXY]NKXOMO]]SNKNONO
MY\\OӃO]MYX^\KK]KӃO].Y=
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
79
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
+8/B9=
+XObY +$ 9 K\[_S`Y vO^MZ\Y^YMYV]v
+XObY ,$ 9 K\[_S`Y vO^M]O\`SMO]v
+XObY -$ ?W v]M\SZ^v ZK\K 3:-2+38=
+XObY .$ 9] MKLO”KVRY] NO ZKMY^O] 3: 3-7: >-: ?.: O +<:
+XObY /$ -YWY _W ZKMY^O `SKTK K^\K`¤] NK ZSVRK >-:3:)
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
80
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
+8/B9+$
Z\Y^YMYV] >RS] PSVO NO]M\SLO] ^RO `K\SY_] Z\Y^YMYV] ^RK^ K\O
K`KSVKLVO P\YW ^RO >-:3: ]_L]c]^OW 3^ ]RY_VN LO
MYX]_V^ON SX]^OKN YP _]SXQ ^RO X_WLO\] SX ^RO +<:+
SXMV_NO PSVO] Y\ aY\]O T_]^ Q_O]]SXQ ^ROW
SZ
SMWZ
SQWZ
QQZ
^MZ
Z_Z
_NZ
SNZ
\Ka
!
3:
3-7:
317:
11:
>-:
:?:
?.:
3.:
<+A
SX^O\XO^ Z\Y^YMYV Z]O_NY Z\Y^YMYV X_WLO\
SX^O\XO^ MYX^\YV WO]]KQO Z\Y^YMYV
SX^O\XO^ Q\Y_Z W_V^SMK]^ Z\Y^YMYV
QK^OaKcQK^OaKc Z\Y^YMYV
^\KX]WS]]SYX MYX^\YV Z\Y^YMYV
:+<- _XS`O\]KV ZKMUO^ Z\Y^YMYV
_]O\ NK^KQ\KW Z\Y^YMYV
ARK^]>RS])
<+A 3: SX^O\PKMO
/XN
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
81
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
+8/B9,$
8O^aY\U ]O\`SMO] 3X^O\XO^ ]^cVO
8Y^O ^RK^ S^ S] Z\O]OX^Vc ^RO ZYVSMc YP 3+8+ ^Y K]]SQX K ]SXQVO aOVVUXYaX
ZY\^ X_WLO\ PY\ LY^R >-: KXN ?.:% ROXMO WY]^ OX^\SO] RO\O RK`O ^aY OX^\SO]
O`OX SP ^RO Z\Y^YMYV NYO]Xv^ ]_ZZY\^ ?.: YZO\K^SYX]
>RS] VS]^ MY_VN LO PY_XN YX$
R^^Z$aaaS]SON_SXXY^O]SKXKK]]SQXWOX^]ZY\^X_WLO\]
8Y^ KVV ZY\^] K\O SXMV_NON YXVc ^RO WY\O MYWWYX YXO]
^MZ
<O]O\`ON
_NZ
<O]O\`ON
^MZW_b
^MZ
>-: :Y\^ =O\`SMO 7_V^SZVObO\
^MZW_b
_NZ
>-: :Y\^ =O\`SMO 7_V^SZVObO\
MYWZ\O]]XO^
^MZ
7KXKQOWOX^ ?^SVS^c
MYWZ\O]]XO^
_NZ
7KXKQOWOX^ ?^SVS^c
MYWZ\O]]XO^
^MZ
-YWZ\O]]SYX :\YMO]]
MYWZ\O]]XO^
_NZ
-YWZ\O]]SYX :\YMO]]
\TO
^MZ
<OWY^O 4YL /X^\c
\TO
_NZ
<OWY^O 4YL /X^\c
OMRY
!^MZ
/MRY
OMRY
!_NZ
/MRY
NS]MK\N
#^MZ
.S]MK\N ]SXU X_VV
NS]MK\N
#_NZ
.S]MK\N ]SXU X_VV
]c]^K^
^MZ
_]O\]
+M^S`O ?]O\]
]c]^K^
_NZ
_]O\]
+M^S`O ?]O\]
NKc^SWO
^MZ
.Kc^SWO
<0- " !
NKc^SWO
_NZ
.Kc^SWO
<0- " !
XO^]^K^
^MZ
?XK]]SQXON EaK] XO^]^K^G
[Y^N
!^MZ
[_Y^O
;_Y^O YP ^RO .Kc
[Y^N
!_NZ
[_Y^O
;_Y^O YP ^RO .Kc
W]Z
"^MZ
7O]]KQO =OXN :\Y^YMYV
W]Z
"_NZ
7O]]KQO =OXN :\Y^YMYV
MRK\QOX
#^MZ
^^c^]^ ]Y_\MO
-RK\KM^O\ 1OXO\K^Y\
MRK\QOX
#_NZ
^^c^]^ ]Y_\MO
-RK\KM^O\ 1OXO\K^Y\
P^ZNK^K
^MZ
0SVO >\KX]PO\ E.OPK_V^ .K^KG
P^ZNK^K
_NZ
0SVO >\KX]PO\ E.OPK_V^ .K^KG
P^Z
^MZ
0SVO >\KX]PO\ E-YX^\YVG
P]Z
_NZ
]]R
^MZ
==2 <OWY^O 6YQSX :\Y^YMYV
]]R
_NZ
==2 <OWY^O 6YQSX :\Y^YMYV
^OVXO^
^MZ
>OVXO^
^OVXO^
_NZ
>OVXO^
^MZ
KXc Z\S`K^O WKSV ]c]^OW
_NZ
KXc Z\S`K^O WKSV ]c]^OW
]W^Z
^MZ
WKSV
=SWZVO 7KSV >\KX]PO\
]W^Z
_NZ
WKSV
=SWZVO 7KSV >\KX]PO\
X]aPO
!^MZ
8=A ?]O\ =c]^OW 0/
X]aPO
!_NZ
8=A ?]O\ =c]^OW 0/
W]QSMZ
#^MZ
7=1 3-:
W]QSMZ
#_NZ
7=1 3-:
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
82
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
W]QK_^R
W]QK_^R
N]Z
N]Z
^SWO
^SWO
\KZ
\KZ
\VZ
\VZ
Q\KZRSM]
Q\KZRSM]
XKWO
XKWO
XKWO]O\`O\
XKWO]O\`O\
XSMXKWO
XSMXKWO
aRYS]
aRYS]
WZWPVKQ]
WZWPVKQ]
WZW
WZW
WZW]XN
WZW]XN
XSP^Z
XSP^Z
K_NS^N
K_NS^N
^KMKM]
^KMKM]
\OWKSVMU
\OWKSVMU
VKWKSX^
VKWKSX^
bX]^SWO
bX]^SWO
NYWKSX
NYWKSX
bX]MR
bX]MR
S]SQV
S]SQV
bX]K_^R
bX]K_^R
bX]WKSV
bX]WKSV
XSWKSV
XSWKSV
KMK]
KMK]
^MZ
_NZ
^MZ
_NZ
^MZ
_NZ
!^MZ
!_NZ
"^MZ
"_NZ
#^MZ
#_NZ
^MZ
_NZ
^MZ
_NZ
^MZ
_NZ
^MZ
_NZ
^MZ
_NZ
^MZ
_NZ
^MZ
_NZ
^MZ
_NZ
!^MZ
!_NZ
"^MZ
"_NZ
#^MZ
#_NZ
^MZ
_NZ
^MZ
_NZ
^MZ
_NZ
^MZ
_NZ
^MZ
_NZ
^MZ
_NZ
^MZ
_NZ
!^MZ
!_NZ
"^MZ
"_NZ
#^MZ
#_NZ
^MZ
_NZ
^MZ
_NZ
7=1 +_^ROX^SMK^SYX
7=1 +_^ROX^SMK^SYX
.S]ZVKc =_ZZY\^ :\Y^YMYV
.S]ZVKc =_ZZY\^ :\Y^YMYV
KXc Z\S`K^O Z\SX^O\ ]O\`O\
KXc Z\S`K^O Z\SX^O\ ]O\`O\
>SWO ^SWO]O\`O\
>SWO ^SWO]O\`O\
<Y_^O +MMO]] :\Y^YMYV
<Y_^O +MMO]] :\Y^YMYV
\O]Y_\MO
<O]Y_\MO 6YMK^SYX :\Y^YMYV
\O]Y_\MO
<O]Y_\MO 6YMK^SYX :\Y^YMYV
1\KZRSM]
1\KZRSM]
2Y]^ 8KWO =O\`O\
2Y]^ 8KWO =O\`O\
2Y]^ 8KWO =O\`O\
2Y]^ 8KWO =O\`O\
ARY 3]
ARY 3]
ARY 3]
ARY 3]
7:7 06+1= :\Y^YMYV
7:7 06+1= :\Y^YMYV
7O]]KQO :\YMO]]SXQ 7YN_VO E\OM`G
7O]]KQO :\YMO]]SXQ 7YN_VO E\OM`G
7:7 ENOPK_V^ ]OXNG
7:7 ENOPK_V^ ]OXNG
83 0>:
83 0>:
.SQS^KV +_NS^ .KOWYX
.SQS^KV +_NS^ .KOWYX
6YQSX 2Y]^ :\Y^YMYV >+-+-=
6YQSX 2Y]^ :\Y^YMYV >+-+-=
<OWY^O 7KSV -ROMUSXQ :\Y^YMYV
<OWY^O 7KSV -ROMUSXQ :\Y^YMYV
37: 6YQSMKV +NN\O]] 7KSX^OXKXMO
37: 6YQSMKV +NN\O]] 7KSX^OXKXMO
B8= >SWO :\Y^YMYV
B8= >SWO :\Y^YMYV
.YWKSX 8KWO =O\`O\
.YWKSX 8KWO =O\`O\
B8= -VOK\SXQRY_]O
B8= -VOK\SXQRY_]O
3=3 1\KZRSM] 6KXQ_KQO
3=3 1\KZRSM] 6KXQ_KQO
B8= +_^ROX^SMK^SYX
B8= +_^ROX^SMK^SYX
KXc Z\S`K^O ^O\WSXKV KMMO]]
KXc Z\S`K^O ^O\WSXKV KMMO]]
B8= 7KSV
B8= 7KSV
KXc Z\S`K^O PSVO ]O\`SMO
KXc Z\S`K^O PSVO ]O\`SMO
83 7+36
83 7+36
+-+ =O\`SMO]
+-+ =O\`SMO]
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
83
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
aRYS]
aRYS]
MY`SK
MY`SK
^KMKM]N]
^KMKM]N]
][VXO^
][VXO^
LYY^Z]
LYY^Z]
LYY^ZM
LYY^ZM
^P^Z
^P^Z
QYZRO\
QYZRO\
XO^\T]
XO^\T]
XO^\T]
XO^\T]
XO^\T]
XO^\T]
XO^\T]
XO^\T]
NOY]
NOY]
`O^^MZ
`O^^MZ
PSXQO\
PSXQO\
R^^Z
R^^Z
aaa
aaa
aaaR^^Z
aaaR^^Z
RY]^]X]
RY]^]X]
bPO\
bPO\
WS^WVNO`
WS^WVNO`
M^P
M^P
WS^WVNO`
WS^WVNO`
WPMYLYV
WPMYLYV
UO\LO\Y]
UO\LO\Y]
]_WS^^Q
]_WS^^Q
^MZ
_NZ
^MZ
_NZ
^MZ
_NZ
^MZ
_NZ
!^MZ
!_NZ
"^MZ
"_NZ
#^MZ
#_NZ
!^MZ
!_NZ
!^MZ
!_NZ
!^MZ
!_NZ
!^MZ
!_NZ
!^MZ
!_NZ
!^MZ
!_NZ
! ^MZ
! _NZ
!!^MZ
!!_NZ
!"^MZ
!"_NZ
!#^MZ
!#_NZ
"^MZ
"_NZ
"^MZ
"_NZ
"^MZ
"_NZ
"^MZ
"_NZ
"^MZ
"_NZ
"^MZ
"_NZ
"^MZ
"_NZ
"^MZ
"_NZ
" ^MZ
" _NZ
"!^MZ
"!_NZ
""^MZ
""_NZ
"#^MZ
"#_NZ
aRYS]
aRYS]
KXc Z\S`K^O
KXc Z\S`K^O
KXc Z\S`K^O
KXc Z\S`K^O
`O^^MZ
`O^^MZ
0SXQO\
0SXQO\
-YWW_XSMK^SYX] 3X^OQ\K^Y\ -3
-YWW_XSMK^SYX] 3X^OQ\K^Y\ -3
>+-+-=.K^KLK]O =O\`SMO
>+-+-=.K^KLK]O =O\`SMO
9\KMVO =;68/>
9\KMVO =;68/>
,YY^]^\KZ :\Y^YMYV =O\`O\
,YY^]^\KZ :\Y^YMYV =O\`O\
,YY^]^\KZ :\Y^YMYV -VSOX^
,YY^]^\KZ :\Y^YMYV -VSOX^
>\S`SKV 0SVO >\KX]PO\
>\S`SKV 0SVO >\KX]PO\
1YZRO\
1YZRO\
<OWY^O 4YL =O\`SMO
<OWY^O 4YL =O\`SMO
<OWY^O 4YL =O\`SMO
<OWY^O 4YL =O\`SMO
<OWY^O 4YL =O\`SMO
<OWY^O 4YL =O\`SMO
<OWY^O 4YL =O\`SMO
<OWY^O 4YL =O\`SMO
NSKV Y_^ ]O\`SMO
NSKV Y_^ ]O\`SMO
.S]^\SL_^ON /b^O\XKV 9LTOM^ =^Y\O
.S]^\SL_^ON /b^O\XKV 9LTOM^ =^Y\O
<4/ ]O\`SMO
<4/ ]O\`SMO
AY\VN ASNO AOL 2>>:
AY\VN ASNO AOL 2>>:
AY\VN ASNO AOL 2>>:
AY\VN ASNO AOL 2>>:
AY\VN ASNO AOL 2>>:
AY\VN ASNO AOL 2>>:
29=>= 8KWO =O\`O\
29=>= 8KWO =O\`O\
B0/< ?^SVS^c
B0/< ?^SVS^c
73> 76 .O`SMO
73> 76 .O`SMO
-YWWYX >\KMO 0KMSVS^c
-YWWYX >\KMO 0KMSVS^c
73> 76 .O`SMO
73> 76 .O`SMO
7SM\Y 0YM_] -YLYV
7SM\Y 0YM_] -YLYV
KXc Z\S`K^O ^O\WSXKV VSXU
KXc Z\S`K^O ^O\WSXKV VSXU
5O\LO\Y]
5O\LO\Y]
=?73> >OVXO^ 1K^OaKc
=?73> >OVXO^ 1K^OaKc
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
84
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
NX]Sb
NX]Sb
WS^NY`
WS^NY`
XZZ
XZZ
NMZ
NMZ
YLTMKVV
YLTMKVV
]_ZN_Z
]_ZN_Z
NSbSO
NSbSO
]aSP^\`P
]aSP^\`P
^KMXOa]
^KMXOa]
WO^KQ\KW
WO^KQ\KW
XOaKMM^
RY]^XKWO]
S]Y^]KZ
M]XO^X]
M]XO^X]
\^OVXO^
\^OVXO^
ZYZ
ZYZ
ZYZ
ZYZ
]_X\ZM
]_X\ZM
K_^R
]P^Z
__MZZK^R
XX^Z
X^Z
X^Z
XO^LSY]X]
XO^LSY]X]
XO^LSY]NQW
XO^LSY]NQW
XO^LSY]]]X
XO^LSY]]]X
SWKZ
SWKZ
]XWZ
]XWZ^\KZ
MWSZWKX
MWSZWKX
MWSZKQOX^
MWSZKQOX^
bNWMZ
bNWMZ
XOb^]^OZ
XOb^]^OZ
#^MZ
#_NZ
#^MZ
#_NZ
#^MZ
#_NZ
#^MZ
#_NZ
#^MZ
#_NZ
#^MZ
#_NZ
# ^MZ
# _NZ
#!^MZ
#!_NZ
#"^MZ
#"_NZ
##^MZ
##_NZ
^MZ
^MZ
^MZ
^MZ
_NZ
!^MZ
!_NZ
#^MZ
#_NZ
^MZ
_NZ
^MZ
_NZ
^MZ
^MZ
!^MZ
#^MZ
^MZ
_NZ
!^MZ
!_NZ
"^MZ
"_NZ
#^MZ
#_NZ
^MZ
_NZ
_NZ
_NZ
^MZ
_NZ
^MZ
_NZ
!!^MZ
!!_NZ
!"^MZ
!"_NZ
.8=3B =OM_\S^ +^^\SL_^O >YUOX 7KZ
.8=3B =OM_\S^ +^^\SL_^O >YUOX 7KZ
73> .Y`O\ =ZYYVO\
73> .Y`O\ =ZYYVO\
8O^aY\U :\SX^SXQ :\Y^YMYV
8O^aY\U :\SX^SXQ :\Y^YMYV
.O`SMO -YX^\YV :\Y^YMYV
.O`SMO -YX^\YV :\Y^YMYV
>S`YVS 9LTOM^ .S]ZK^MRO\
>S`YVS 9LTOM^ .S]ZK^MRO\
=?:.?:
=?:.?:
.3B3/ :\Y^YMYV =ZOMSPSMK^SYX
.3B3/ :\Y^YMYV =ZOMSPSMK^SYX
=aSP^ <OWY^O @S\^_\KV 0SVO :\Y^YMYV
=aSP^ <OWY^O @S\^_\KV 0SVO :\Y^YMYV
>+- 8Oa]
>+- 8Oa]
7O^KQ\KW <OVKc
7O^KQ\KW <OVKc
E_XK_^RY\SdON _]OG
RY]^XKWO
_]_KVVc P\YW ]\SXSM
^]KZ
ZK\^ YP 3=9./
M]YX]
KV]Y _]ON Lc -=9 XKWO ]O\`O\
M]YX]
<OWY^O >OVXO^
ZY]^YPPSMO :9: `O\]SYX :9: `O\]SYX ^KZ SNOX^ K_^ROX^SMK^SYX
\OKNXOa] _X^Z
?=/8/> 8Oa] >\KX]PO\ :\Y^YMYV
8O^aY\U >SWO :\Y^YMYV
8/>,39= 8KWO =O\`SMO
8/>,39= .K^KQ\KW =O\`SMO
8/>,39= ]O]]SYX ]O\`SMO
SWKZ SWKZ SWKZ SWKZ
]XWZ^\KZ
3X^O\SW 7KSV +MMO]] :\Y^Y `
=SWZVO 8O^ 7QW^ :\Y^Y
>\KZ] PY\ =87:
3=9 WQW^ Y`O\ 3: -79>
B .S]ZVKc 7Q\ -YX^\YV :\Y^Y
8OB>=^OZ 8Ob^=^OZ 8OB>=^OZ aSXNYa
8OB>=^OZ 8Ob^=^OZ ]O\`O\
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
85
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
LQZ
!#^MZ
,Y\NO\ 1K^OaKc :\Y^Y
LQZ
!#_NZ
Z\Y]ZO\Y
#^MZ
-VSPP 8O_WKXv] :\Y]ZO\Y
Z\Y]ZO\Y
#_NZ
S\M
#^MZ
3X^O\XO^ <OVKc -RK^
S\M
#_NZ
]W_b
##^MZ
=87: ?XSb 7_V^SZVObO\
]W_b
##_NZ
K^\^WZ
^MZ
+ZZVO>KVU \Y_^SXQ
K^\^WZ
_NZ
K^XLZ
^MZ
+ZZVO>KVU XKWO LSXNSXQ
K^XLZ
_NZ
K^OMRY
^MZ
+ZZVO>KVU OMRY
K^OMRY
_NZ
K^dS]
^MZ
+ZZVO>KVU dYXO SXPY\WK^SYX
K^dS]
_NZ
d#
^MZ
aKS]
83=9 D# NK^KLK]O
d#
_NZ
aKS]
SZb
^MZ
3:B
SZb
_NZ
SWKZ
^MZ
3X^O\KM^S`O 7KSV +MMO]]
SWKZ
_NZ
:\Y^YMYV `
_VS]^]O\` !^MZ
?83B 6S]^]O\`
_VS]^]O\` !_NZ
R^^Z]
^MZ
R^^Z Z\Y^YMYV Y`O\ >6===6
R^^Z]
_NZ
R^^Z Z\Y^YMYV Y`O\ >6===6
?83B ]ZOMSPSM ]O\`SMO]
ObOM
^MZ
LSPP
_NZ
MYW]K^
VYQSX
^MZ
aRY
_NZ
aRYN
]ROVV
^MZ
MWN
XY ZK]]aY\N] _]ON
]c]VYQ
_NZ
Z\SX^O\
^MZ
]ZYYVO\
VSXO Z\SX^O\ ]ZYYVO\
^KVU
!_NZ
X^KVU
"_NZ
\Y_^O
_NZ
\Y_^O\ \Y_^ON
<3:
^SWON
_NZ
^SWO]O\`O\
^OWZY
^MZ
XOaNK^O
MY_\SO\
^MZ
\ZM
MYXPO\OXMO ^MZ
MRK^
XO^XOa]
^MZ
\OKNXOa]
XO^aKVV
_NZ
PY\ OWO\QOXMc L\YKNMK]^]
__MZ
^MZ
__MZN
__MZ NKOWYX
\OWY^OP]
^MZ
\P]I]O\`O\ \P]
,\_XRYPP \OWY^O PSVO]c]^OW
UVYQSX
^MZ
5O\LO\SdON ‰\VYQSXv `
U]ROVV
^MZ
5O\LO\SdON ‰\]Rv `
UO\LO\Y]KNW
!#^MZ
5O\LO\Y] ‰UKNWSXv `
aOL]^O\
! ^MZ
8O^aY\U NSM^SYXK\c
aOL]^O\
! _NZ
0\YW ‰‰+]]SQXON 8_WLO\]vv$
( >RO <OQS]^O\ON :Y\^] K\O XY^ MYX^\YVVON Lc ^RO 3+8+ KXN YX WY]^ ]c]^OW]
( MKX LO _]ON Lc Y\NSXK\c _]O\ Z\YMO]]O] Y\ Z\YQ\KW] ObOM_^ON Lc Y\NSXK\c
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
86
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
( _]O\]
( :Y\^] K\O _]ON SX ^RO >-: E G ^Y XKWO ^RO OXN] YP VYQSMKV
( MYXXOM^SYX] aRSMR MK\\c VYXQ ^O\W MYX`O\]K^SYX] 0Y\ ^RO Z_\ZY]O YP
( Z\Y`SNSXQ ]O\`SMO] ^Y _XUXYaX MKVVO\] K ]O\`SMO MYX^KM^ ZY\^ S]
( NOPSXON >RS] VS]^ ]ZOMSPSO] ^RO ZY\^ _]ON Lc ^RO ]O\`O\ Z\YMO]] K] S^]
( MYX^KM^ ZY\^ ARSVO ^RO 3+8+ MKX XY^ MYX^\YV _]O] YP ^RO]O ZY\^] S^
( NYO] \OQS]^O\ Y\ VS]^ _]O] YP ^RO]O ZY\^] K] K MYX`SOXOXMO ^Y ^RO
( MYWW_XS^c
SXQ\O]VYMU ^MZ
SXQ\O]VYMU _NZ
Z\Y]ZO\YXZ ^MZ
:\Y]ZO\Y XYXZ\S`SVOQON
Z\Y]ZO\YXZ _NZ
\PO
^MZ
<KNSY 0\OO /^RO\XO^
\PO
_NZ
+M^_KVVc _]O] ?.: YXVc
5O\LO\Y] :\YTOM^ +^ROXK73> ]O\`SMO]
8Y^O ^RK^ ^RO]O K\O PY\ 5O\LO\Y] ` KXN K\O _XYPPSMSKV =S^O] \_XXSXQ
` ]RY_VN _XMYWWOX^ ^RO]O KXN MYWWOX^ Y_^ ^RO ` OX^\SO] KLY`O
UO\LO\Y] !_NZ
UNM 5O\LO\Y] ]O\`O\ _NZ
UO\LO\Y] !^MZ
UNM 5O\LO\Y] ]O\`O\ ^MZ
U\L_ZNK^O ! ^MZ
U\OQ 5O\LO\Y] \OQS]^\K^SYX
UZK]]aN
! ^MZ
UZaN 5O\LO\Y] ZK]]aN
UVYQSX
^MZ
5O\LO\Y] \VYQSX
OUVYQSX
^MZ
5O\LO\Y] OXM\cZ^ON \VYQSX
U]ROVV
^MZ
U\MWN 5O\LO\Y] \OWY^O ]ROVV
?XYPPSMSKV L_^ XOMO]]K\c PY\ 8O^,=. ]O\`SMO]
]XZZ
^MZ
=SWZVO 8O^aY\U :KQSXQ :\Y^YMYV
]_ZPSVO]\` "!^MZ
=?: ]O\`O\
]_ZPSVONLQ !^MZ
=?: NOL_QQSXQ
RcVKPKb
#^MZ
2cVK0+B MVSOX^]O\`O\ Z\Y^YMYV
KbXO^
#^MZ
+ZZVSb =O\`O\
KKQ^ac
#^MZ
+ZZVSb +XcaK\O
\ZVKc
_NZ
R^^Z\WKX
!^MZ
WKX ^Y R^WV YX ^RO PVc
][V
!^MZ
KNKLK]N \OWY^O ][V
L^b
^MZ MOZ^N
`LYbN
^MZ
PY\ `LYb NKOWYX
`LYbN
_NZ
S]NXVYQ
^MZ
S]NXVYQ
68B.,7=
^MZ
WSNSXO^
^MZ
WSNSXO^N
]O\`SMO] PY\ RZ OVY[_OXMO
\_X]\`
"^MZ
OVY[]N
"^MZ
OVY[NL
"^MZ
OVY[NL
"^MZ
]YP^aK\O
2:
2:
2:
2:
/VY[_OXMO
/VY[_OXMO
/VY[_OXMO
/VY[_OXMO
<?8=<@ ASXNYa] SX^OQ\K^SYX
+ OVY[]N ]O\`O\
+ NK^K LK]O ]O\`O\
+ /69;., ]O\`O\
]O\`SMO] PY\ KWKXNK LKMU_Z ]YP^aK\O
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
87
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
KWKXNK
KWKXNKSNb
KWSNb^KZO
"_NZ
"^MZ
"^MZ
]O\`SMO] PY\ \KNS_] ]YP^aK\O
\KNS_]
_NZ
\KNS_]N
\KNKMM^
_NZ
WKUO KZZVO ^KVU WY\O P\SOXNVc
\^WZ
NNZ
<Y_^SXQ >KLVO 7KSX^OXKXMO :\Y^YMYV
XLZ
NNZ
8KWO ,SXNSXQ :\Y^YMYV
OMRY
NNZ
+ZZVO>KVU /MRY :\Y^YMYV
dSZ
NNZ
DYXO 3XPY\WK^SYX :\Y^YMYV
+ZZVO^KVU
KPZY`O\^MZ "^MZ
KPZY`O\^MZ "_NZ
+0: Y`O\ >-:
+0: Y`O\ ?-:
7c=;6 .KOWYX
Wc][V
^MZ
Wc][V
_NZ
^RO \]cXM NKOWYX
\]cXM
"!^MZ
XO^ZVKX
XO^ZVKX
^MZ
]aK^ S] ^RO =KWLK AOL +NWSXS]^\K^SYX >YYV
]aK^
#^MZ
/X^\SO] PY\ 3,7 ., .K^KLK]O
NLMNLSX]^
^MZ
-YXXOM^SYX ZY\^ PY\ ., SX]^KXMO NLSX]^
NLSNLSX]^
^MZ
3X^O\\_Z^ ZY\^ PY\ ., SX]^KXMO NLSX]^
/X^\c PY\ 7SWO\ NK^KLK]O
WSWO\
^MZ
7SWO\ .K^KLK]O =O\`O\
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
88
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
89
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
+8/B9-$
EY ]´WLYVY
]M\SZ^G
ª
WK\MK K MYX^SX_K”ÁY NK VSXRK% Y] KMOX^Y] PY\KW ]_Z\SWSNY] NY
LSX]R
-YX^\YVK MY\O] XK ^OVK LYVN'‰^Z_^ ]W]Y‰
YPPLYVN'‰^Z_^ \W]Y‰
,96.98']O^^O\W LYVN YX
,96.900']O^^O\W LYVN YPP
1<//8']O^^O\W PY\OQ\Y_XN Q\OOX
./0']O^^O\W NOPK_V^
MVOK\
PSW 3X^O\PKMO
-YVY[_O K[_S K SX^O\PKMO NO]OTKNK
O^R O^R ZZZ O^M
69-+630'O^R
6YMKVSdKMKY NY SZMRKSX]
3:-2+38=']LSXSZMRKSX]
<O^S\K OXNO\OMY] K ZK\^S\ NY SPMYXPSQ 8KY KV^O\O
69-+63:'‰SPMYXPSQ 69-+630 f Q\OZ SXO^ f M_^ N $ P f M_^ N F P ‰
69-+67+=5'‰SPMYXPSQ 69-+630 f Q\OZ 7K]U f M_^ N $ P ‰
69-+68/>'69-+63:69-+67+=5
OMRY bb
OMRY eLYVNgE0S\OaKVVGeYPPLYVNg 3:$ 69-+68/>
</79>/8/>'
6SWZK ^YNK] K] \OQ\K] NO PS\OaKVV PVKQ v0v
OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg 6SWZKXNY \OQ\K]
:KMY^O] [_O MROQKW INO PY\KI NK \ONO
3:-2+38= 0 SXZ_^
OMRY X &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
90
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
:KMY^O] [_O ]KOW NK SX^\KXO^
3:-2+38= 0 Y_^Z_^
OMRY X 1<//8
OMRY >O\WSXKNY
./0
OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg 3X^O\PKMO vVYv
3:-2+38= + SXZ_^ S VY ] N T +--/:>
3:-2+38= + Y_^Z_^ S VY ] N T +--/:>
OMRY X 1<//8
OMRY >O\WSXKNY
./0
-YXPSQ_\K ^OVXO^ AAA O 0>: MYW _W Z\KdY WSXSWY WKXSZ_VKXNY Y] LS^] NO >9= NY
ZKMY^O
+>/8-+9 .O`O]O ^O\ RKLSVS^KNY XY UO\XOV K YZMKY -98031I3:I<9?>/I>9=
@O\ 3ZMRKSX] 2Ya>Y€ Z "
9] MRKWKNY] >9= LS^] KPO^KW K PY\WK MYWY Y] ZKMY^O] ]KY ^\K^KNY] +]
MYXPSQ_\KMYO] ZY]]S`OS] ]KY$
vWKbSW_W NOVKcv
vWKbSW_W ^R\Y_QRZ_^v
vWKbSW_W \OVSKLSVS^cv
vWSXSW_W MY]^v
OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg >cZO 9P =O\`SMO PVKQ]
3:-2+38= + Y_^Z_^ Z ^MZ N aaa ^ b b
3:-2+38= + Y_^Z_^ Z ^MZ N ^OVXO^ ^ b b
3:-2+38= + Y_^Z_^ Z ^MZ N P^Z ^ b b
OMRY X -YXPSQ_\K P^ZNK^K ZK\K Y WKbSWY NO v]KSNKv
3:-2+38= + Y_^Z_^ Z ^MZ N P^ZNK^K ^ b b"
OMRY X 1<//8
OMRY >O\WSXKNY
./0
:YO \OQ\K] ZK\K ZO\WS^S\ MYXObYO] NO \ONO] O RY]^] MYXPSK`OS]
OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg <ONO] MYXPSK`OS]
3:-2+38= + SXZ_^ ] E3:] RY]^XO^G N 69-+68/> &ZY\^]( T +--/:>
OMRY X &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
91
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
1<//8
OMRY >O\WSXKNY
./0
:YO \OQ\K] ZK\K SWZONS\ MYXObYO] MYW \ONO] O RY]^] XKYMYXPSK`OS] 9]
ZKMY^O] ]KY \OQS]^\KNY]
OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg <ONO] XKYMYXPSK`OS]
3:-2+38= + SXZ_^ V ] E3:] RY]^XO^G N 69-+68/> &ZY\^]( T ./8C
OMRY X <OQ\K ZK\K SWZONS\ K^K[_O] 3-7:
3:-2+38= + SXZ_^ V L S 69-+630 Z SMWZ ] E3:]G N 69-+68/> T
ª./8C
OMRY X 1<//8
OMRY >O\WSXKNY
./0
OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg =O\`SMY] NS`O\]Y]
3:-2+38= + SXZ_^
+--/:>
3:-2+38= + SXZ_^
+--/:>
3:-2+38= + SXZ_^
+--/:>
3:-2+38= + SXZ_^
+--/:>
OMRY X ª$ T
WKSVMSZ]QKY\QL\ N 69-+68/> ª$ T
aaaMSZ]QKY\QL\ N 69-+68/> $ ªT
Z\YbcMSZ]QKY\QL\ N 69-+68/> ª$ T
Z ^MZ ] KVZRKMSZ]QKY\QL\ N 69-+68/>
Z ^MZ ]
Z ^MZ ]
Z ^MZ ]
:Y]]Y _]K\ Y] OXNO\OMY] KLKSbY] ZK\K WKXOTK\ WO_ .8= .8=29=>' ZY\ ObOWZVY
3:-2+38= + SXZ_^ Z ^MZ ] .8=29=> N 69-+68/> $ T
3:-2+38= + SXZ_^ Z ^MZ ] .8=29=> N 69-+68/> $ T
OMRY X ª+--/:>
ª+--/:>
?]O O]]O O]ZKMY ZK\K XOQK\ KMO]]Y K \ONO K WK[_SXK Y_ Q\_ZY NO WK[_SXK]
3:-2+38= + SXZ_^ V ] E3:]G N 69-+68/> T ./8C
OMRY X 1<//8
OMRY >O\WSXKNY
./0
/]^K ZK\^O XOQK KMO]]Y K ]O\`SMY] O ZY\^K] ]KLSNKWOX^O Z\YLVOWK^SMK]
ZK\K PY\K NK \ONO VYMKV &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
92
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg :Y\^K] XOQKNK]
8O^,/?3=KWLK
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> # T ./8C
3:-2+38= + SXZ_^ Z _NZ ] </79>/8/> N 69-+68/> # T ./8C
OMRY X 7SM\Y]YP^ =;6
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T ./8C
3:-2+38= + SXZ_^ Z _NZ ] </79>/8/> N 69-+68/> T ./8C
OMRY X :Y]^Q\O] =;6
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T ./8C
3:-2+38= + SXZ_^ Z _NZ ] </79>/8/> N 69-+68/> T ./8C
OMRY X 8O^aY\U 0SVO =c]^OW 80=
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> # T ./8C
3:-2+38= + SXZ_^ Z _NZ ] </79>/8/> N 69-+68/> # T ./8C
OMRY X BASXNYa] .S]ZVKc] $$
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> ###$ T ./8C
3:-2+38= + SXZ_^ Z _NZ ] </79>/8/> N 69-+68/> ###$ T ./8C
OMRY X B 0YX^ =O\`O\ $$
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> ! T ./8C
3:-2+38= + SXZ_^ Z _NZ ] </79>/8/> N 69-+68/> ! T ./8C
OMRY X ,KMU 9\SPSMO <OQS]^\KNY 0VKQ V
3:-2+38= + SXZ_^ V Z ^MZ ] </79>/8/> N 69-+68/> ! T ./8C
3:-2+38= + SXZ_^ V Z _NZ ] </79>/8/> N 69-+68/> ! T ./8C
OMRY X 8O^,_] <OQS]^\KNY 0VKQ V
3:-2+38= + SXZ_^ V Z ^MZ ] </79>/8/> N 69-+68/> $ T
3:-2+38= + SXZ_^ V Z _NZ ] </79>/8/> N 69-+68/> $ T
OMRY X ª./8C
ª./8C
1<//8
OMRY >O\WSXKNY
./0
>KS] ZY\^K] ]KY KLO\^K] ZK\K ZO\WS^S\ ]Y[_O^O] M\SKNY ZY\ MYXObYO]
ZO\WS^SNK] ZOVY SZMRKSX]
OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg :Y\^K] vKV^K]v O XKYªZ\S`SVKQSKNK]
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> $ T
3:-2+38= + SXZ_^ Z _NZ ] </79>/8/> N 69-+68/> $ T
OMRY X &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
ª+--/:>
ª+--/:>
3iJLQD
93
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
1<//8
OMRY >O\WSXKNY
./0
=O\`SMY] NO MK\K^O\ LK]SMY
OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg =O\`SMY]
P^ZNK^K KXN P^Z 3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T +--/:>
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T +--/:>
OMRY X ]]R 3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T +--/:>
OMRY X ^OVXO^ 3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T +--/:>
OMRY X ]W^Z 3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T +--/:>
OMRY X .8= 3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T +--/:>
3:-2+38= + SXZ_^ Z _NZ ] </79>/8/> N 69-+68/> T +--/:>
OMRY X .2-: NY VKNY NK <ONO 6YMKV ^Y WKUO *2YWO .2-: aY\U ! "
3:-2+38= + SXZ_^ S 69-+630 Z _NZ ] </79>/8/> N ª ! T +--/:>
3:-2+38= + Y_^Z_^ S 69-+630 Z _NZ ] </79>/8/> N ª "
T +--/:>
OMRY X R^^Z "
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> " T +--/:>
OMRY X :9: 3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T +--/:>
OMRY X SNOX^N 3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T </4/->
OMRY X XX^Z #
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> # T +--/:>
OMRY X R^^Z] 3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T +--/:>
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
94
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
OMRY X 3-; =O\`SMO] 3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T +--/:>
OMRY X 1<//8
OMRY >O\WSXKNY
./0
OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg <OQ\K] 3-7:
?]O S]]Y ZK\K XOQK\ K^K[_O] 3-7: NO OXNO\OMY] O]ZOMSPSMY]
3:-2+38= + SXZ_^ L S /B>/<8+630 Z SMWZ ] &KNN\O]]( N T
OMRY X ª./8C
:O\WS^O K MROQKNK NO ZKMY^O] 3-7:
3:-2+38= + SXZ_^ Z SMWZ ] </79>/8/> N 69-+68/> T +--/:>
3:-2+38= + SXZ_^ Z SMWZ ] </79>/8/> N 69-+68/> T +--/:>
OMRY X :O\WS^O K ]KSNK NO ZKMY^O] 3-7:
3:-2+38= + Y_^Z_^ Z SMWZ ] 69-+68/> N </79>/8/> T +--/:>
3:-2+38= + Y_^Z_^ Z SMWZ ] 69-+68/> N </79>/8/> T +--/:>
OMRY X 1<//8
OMRY >O\WSXKNY
./0
-YXPSQ_\K ZYVS^SMK ZKN\KY
3:-2+38= + SXZ_^ T ./8C
3:-2+38= + Y_^Z_^ T +--/:>
OMRY ,96.98
OMRY eLYVNgE0S\OaKVVGeYPPLYVNg /]^KLOVOMSWOX^Y NO PS\OaKVV
,96.900
OMRY bb
./0
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ªMYWZVO^Y
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
95
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
+XObY.$
K 9 MKLO”KVRY 3:$
! " # ! " # ! " # f@O\]SYXf 326 f>cZO YP =O\`SMOf
>Y^KV 6OXQ^R
f
f
3NOX^SPSMK^SYX
f0VKQ]f
0\KQWOX^ 9PP]O^
f
f >SWO ^Y 6S`O f
:\Y^YMYV f
2OKNO\ -ROMU]_W
f
f
=Y_\MO +NN\O]]
f
f
.O]^SXK^SYX +NN\O]]
f
f
9Z^SYX]
f
:KNNSXQ
f
K 9 MKLO”KVRY 3-7:
! " # ! " # ! " # f
>cZO
f
-YNO
f
-ROMU]_W
f
f
_X_]ON
f
f
3X^O\XO^ 2OKNO\ LS^] YP 9\SQSXKV .K^K .K^KQ\KW
f
-KWZY] 3-7:$
>cZO
-YNO
'
'
'
'
'
'
XO^ _X\OKMRKLVO%
RY]^ _X\OKMRKLVO%
Z\Y^YMYV _X\OKMRKLVO%
ZY\^ _X\OKMRKLVO%
P\KQWOX^K^SYX XOONON KXN .0 ]O^%
]Y_\MO \Y_^O PKSVON
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
96
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
K 9 MKLO”KVRY >-:$
! " # ! " # ! " # f
=Y_\MO :Y\^
f
.O]^SXK^SYX :Y\^
f
f
=O[_OXMO 8_WLO\
f
f
+MUXYaVONQWOX^ 8_WLO\
f
f .K^K f
f?f+f:f<f=f0f
f
f 9PP]O^f <O]O\`ON f<f-f=f=fCf3f
ASXNYa
f
f
f
f1f5f2f>f8f8f
f
f
-ROMU]_W
f
?\QOX^ :YSX^O\
f
f
9Z^SYX]
f
:KNNSXQ
f
f
NK^K
f
K 9 MKLO”KVRY ?.:$
! "
f
=Y_\MO
f .O]^SXK^SYX f
f
:Y\^
f
:Y\^
f
f
f
f
f
6OXQ^R
f
-ROMU]_W
f
f
f
NK^K YM^O^] &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
97
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
K 9 MKLO”KVRY +<:
! " # ! " # ! " # f
>cZO 2K\NaK\O
f
>cZO :\Y^YMYV
f
f
26/8
f :6/8
f
9ZO\K^SYX
f
f
=/8./< 2+
f
f
=/8./< 2+
f
=/8./< 3:
f
f
=/8./< 3:
f
>+<1/> 2+
f
f
>+<1/> 2+
f
f
>+<1/> 3:
f
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
98
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
+XObY/$*
-YWY _W ZKMY^O `SKTK K^\K`¤] NO _W KZVSMK^S`Y MVSOX^O K^¤ Y RY]^ ]O\`SNY\)
8Y NSKQ\KWK KLKSbY X¥] YL]O\`KWY] _W RY]^ MVSOX^O KL\SXNY _WK MYXObÁY `SK \VYQSX
MYW Y_^\Y RY]^ ]O\`SNY\$
*
0YX^O$ >-:3: KXN .K^K -YWW_XSMK^SYX] +NWSXS]^\K^SYX 1_SNO =_X 7SM\Y]c]^OW]
3XM YM^YLO\ ##" Z &XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
99
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
,SLVSYQ\KPSKQO\KV
+<8/>> 7 O^ KVSS .O]`OXNKXNY Y >-:3: <SY NO 4KXOS\Y ON -KWZ_] ##!
,/669@38 = .OPOXNSXQ +QKSX]^ =O[_OXMO 8_WLO\ +^^KMU] <0- #"
IIIIIIIIIII =OM_\S^c :\YLVOW] SX ^RO
-YWW_XSMK^SYX <O`SOa `YV # XÙ #"#
>-:3:
:\Y^YMYV
=_S^O€
-YWZ_^O\
-97/< . / 3X^O\VSQK”ÁY OW <ONO MYW >-:3: @YV_WO 3$ :\SXM´ZSY] :\Y^YMYVY] O
+\[_S^O^_\K <SY NO 4KXOS\Y ON -KWZ_] Ø ONS”ÁY ##"
-<3=-?969 : .S]^\SL_^ON .OXSKV YP =O\`SMO >\SX >\SLO 0VYYN 8O^aY\U >\SLO
0VYYN 8O^aY\U KXN =^KMROVN\KR^ -3+-# .OZK\^KWOX^ YP /XO\Qc 6686
POL\_K\c .+A=98 > 8/> 29A>9 ` WK\MR ##!
.C=98 : .SMSYX£\SY NO <ONO] <SY NO 4KXOS\Y ON -KWZ_] 8Y`OVV :\O]] ##
0+<7/< . ASO^]O @ 3WZ\Y`SXQ ^RO =OM_\S^c YP cY_\ =S^O Lc ,\OKUSXQ SX^Y S^
## PYX^O$ vP^Z$P^ZaSX^_OXVv
0/8D3 5 A</=53 . 6SX_b =OM_\S^c29A>9 `# WKc ##"
0<+=/< , =S^O =OM_\S^c 2KXNLYYU <0- 2?8> < 3X^O\XO^3X^\KXO^ 0S\OaKVV =OM_\S^c :YVSMc
>\KX]KM^SYX =O\`SMO]€ -YWZ_^O\ -YWW_XSMK^SYX] ##"
+\MRSM^O^S\O
KXN
7+<-/69 + 3X^\KXO^ OW +WLSOX^O 6SX_b <SY NO 4KXOS\Y ,<+=:9<> ###
7?-2=/6 < ]P 0S\OaKVV =YP^aK\O @O\]SYX POL ##!
89<>2-?>> = -YWY .O^OM^K\ 3X`K]ÁY OW <ONO ?W 1_SK ZK\K +XKVS]^K] <SY NO
4KXOS\Y ON -S XMSK 7YNO\XK 963@/3<+ A 4 2KMUO\$ 3X`K]ÁY O :\Y^O”ÁY 0VY\SKX¥ZYVS] @S]_KV ,YYU] ###
:9=>/6 4 ON >\K]WS]]SYX -YX^\YV :\Y^YMYV .+<:+ 3X^O\XO^ :\YQ\KW :\Y^YMYV
=ZOMSPSMK^SYX <0- !#
:9=>/6 4 ?]O\ .K^KQ\KW :\Y^YMYV <0- ! "
<?==/6 : 6SX_b 3:-2+38=29A>9 ` TKX ###
=-9 9ZOX=O\`O\q 3X^O\XO^ =O\`SMO] ` WKc ##!
=/<C : 0O\\KWOX^K] :YNO\Y]K] ZK\K <ONO] OW 6SX_b <SY NO 4KXOS\Y -S XMSK
7YNO\XK ##"
=23797?<+ > 7+<5900 4 -YX^\K+^K[_O$ K 2S]^¥\SK NK -KZ^_\K NY :S\K^K
-SLO\X¤^SMY WKS] :\YM_\KNY NY] /?+ =ÁY :K_VY -YWZKXRSK NK] 6O^\K] ## =?8 7SM\Y]c]^OW]q >-:3: KXN .K^K -YWW_XSMK^SYX] +NWSXS]^\K^SYX 1_SNO :KVY +V^Y
YM^ ##"
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
100
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
=_=/ 6SX_bq 3X]^KVVK^SYX -YXPSQ_\K^SYX KXN 0S\]^ =^OZ] 8®\XLO\Q Ø ONS”ÁY
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
101
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
Sobre o autor da Apostila
(VWDDSRVWLODpGHDXWRULDGH5HQDWR0DUWLQLUPDUWLQL#FLSVJDRUJEU!GRXWRUHP)LORVRILD
SHOD 3RQWLItFLD 8QLYHUVLGDGH &DWyOLFD GR 5LR GH -DQHLUR RQGH OHFLRQRX DV GLVFLSOLQDV GH
)LORVRILD GD &LrQFLD H /yJLFD SDUD R &7& )RL EROVLVWD GR &13T DR ORQJR GRV DQRV SyV
JUDGXDomR 8VXiULR H HQWXVLDVWD Ki PDLV GH DQRV GR /LQX[ PDV HVVHQFLDOPHQWH FRPR
XP 6LVWHPD 2SHUDFLRQDO YROWDGR SDUD 5HGH H LJXDOPHQWH DSWR DR FRQKHFLPHQWR H DRV
GHVDILRVDFDGrPLFRVHSHGDJyJLFRVGHQRVVRSDtV
'HVHQYROYH QR PRPHQWR XP VLWH VREUH 6HJXUDQoD HP 5HGHV /LQX[ TXH VHUi KRVSHGDGR
SHOR&,36*$7DPEpPSDUWLFLSDGRGHVHQYROYLPHQWRGHXP
VQLIIHU
R$36VRERVWHUPRV
GD*18*3/FRP&KULVWLDQ6FKXOWH
1XPD HVFROD GD 6HFUHWDULD GH (GXFDomR GR 5LR GH -DQHLUR HP 1LWHUyL GHVHQYROYH XP
/DERUDWyULRFRPXPD5HGH/LQX[SDUDRHQVLQRLQWURGXWyULRGH/LQX[H5HGHVSDUDMRYHQV
GRHQVLQRPpGLR
6HXSURMHWRIXWXURGHHQVLQRWDPEpPpXP&XUVRTXHSURSRQKDDLQWHJUDomRGR/LQX[FRP
RVRXWURV6LVWHPDV2SHUDFLRQDLV81,;WUDGLFLRQDLVWDLVFRPR6&22SHQ6HUYHUR6RODULVHR
)UHH%6'
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
102
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
*18)UHH'RFXPHQWDWLRQ/LFHQVH
9HUVLRQ 0DUFK &RS\ULJKW & )UHH 6RIWZDUH )RXQGDWLRQ ,QF
7HPSOH 3ODFH 6XLWH %RVWRQ 0$ 86$
(YHU\RQH LV SHUPLWWHG WR FRS\ DQG GLVWULEXWH YHUEDWLP FRSLHV
RI WKLV OLFHQVH GRFXPHQW EXW FKDQJLQJ LW LV QRW DOORZHG
35($0%/(
7KH SXUSRVH RI WKLV /LFHQVH LV WR PDNH D PDQXDO WH[WERRN RU RWKHU ZULWWHQ GRFXPHQW IUHH LQ WKH VHQVH RI
IUHHGRP WR DVVXUH HYHU\RQH WKH HIIHFWLYH IUHHGRP WR FRS\ DQG UHGLVWULEXWH LW ZLWK RU ZLWKRXW PRGLI\LQJ LW
HLWKHU FRPPHUFLDOO\ RU QRQFRPPHUFLDOO\ 6HFRQGDULO\ WKLV /LFHQVH SUHVHUYHV IRU WKH DXWKRU DQG SXEOLVKHU D ZD\
WR JHW FUHGLW IRU WKHLU ZRUN ZKLOH QRW EHLQJ FRQVLGHUHG UHVSRQVLEOH IRU PRGLILFDWLRQV PDGH E\ RWKHUV
7KLV /LFHQVH LV D NLQG RI FRS\OHIW ZKLFK PHDQV WKDW GHULYDWLYH ZRUNV RI WKH GRFXPHQW PXVW WKHPVHOYHV EH
IUHH LQ WKH VDPH VHQVH ,W FRPSOHPHQWV WKH *18 *HQHUDO 3XEOLF /LFHQVH ZKLFK LV D FRS\OHIW OLFHQVH GHVLJQHG
IRU IUHH VRIWZDUH
:H KDYH GHVLJQHG WKLV /LFHQVH LQ RUGHU WR XVH LW IRU PDQXDOV IRU IUHH VRIWZDUH EHFDXVH IUHH
VRIWZDUH QHHGV IUHH GRFXPHQWDWLRQ D IUHH SURJUDP VKRXOG FRPH ZLWK PDQXDOV SURYLGLQJ WKH VDPH IUHHGRPV
WKDW WKH VRIWZDUH GRHV %XW WKLV /LFHQVH LV QRW OLPLWHG WR VRIWZDUH PDQXDOV LW FDQ EH XVHG IRU DQ\ WH[WXDO ZRUN
UHJDUGOHVV RI VXEMHFW PDWWHU RU ZKHWKHU LW LV SXEOLVKHG DV D SULQWHG ERRN :H UHFRPPHQG WKLV /LFHQVH
SULQFLSDOO\ IRU ZRUNV ZKRVH SXUSRVH LV LQVWUXFWLRQ RU UHIHUHQFH
$33/,&$%,/,7< $1' '(),1,7,216
7KLV /LFHQVH DSSOLHV WR DQ\ PDQXDO RU RWKHU ZRUN WKDW FRQWDLQV D QRWLFH SODFHG E\ WKH FRS\ULJKW KROGHU VD\LQJ LW
FDQ EH GLVWULEXWHG XQGHU WKH WHUPV RI WKLV /LFHQVH 7KH 'RFXPHQW EHORZ UHIHUV WR DQ\ VXFK PDQXDO RU ZRUN
$Q\ PHPEHU RI WKH SXEOLF LV D OLFHQVHH DQG LV DGGUHVVHG DV \RX
$ 0RGLILHG 9HUVLRQ RI WKH 'RFXPHQW PHDQV DQ\ ZRUN FRQWDLQLQJ WKH 'RFXPHQW RU D SRUWLRQ RI LW HLWKHU
FRSLHG YHUEDWLP RU ZLWK PRGLILFDWLRQV DQGRU WUDQVODWHG LQWR DQRWKHU ODQJXDJH
$ 6HFRQGDU\ 6HFWLRQ LV D QDPHG DSSHQGL[ RU D IURQWPDWWHU VHFWLRQ RI WKH 'RFXPHQW WKDW GHDOV H[FOXVLYHO\
ZLWK WKH UHODWLRQVKLS RI WKH SXEOLVKHUV RU DXWKRUV RI WKH 'RFXPHQW WR WKH 'RFXPHQW
V RYHUDOO VXEMHFW RU WR
UHODWHG PDWWHUV DQG FRQWDLQV QRWKLQJ WKDW FRXOG IDOO GLUHFWO\ ZLWKLQ WKDW RYHUDOO VXEMHFW )RU H[DPSOH LI WKH
'RFXPHQW LV LQ SDUW D WH[WERRN RI PDWKHPDWLFV D 6HFRQGDU\ 6HFWLRQ PD\ QRW H[SODLQ DQ\ PDWKHPDWLFV 7KH
UHODWLRQVKLS FRXOG EH D PDWWHU RI KLVWRULFDO FRQQHFWLRQ ZLWK WKH VXEMHFW RU ZLWK UHODWHG PDWWHUV RU RI OHJDO
FRPPHUFLDO SKLORVRSKLFDO HWKLFDO RU SROLWLFDO SRVLWLRQ UHJDUGLQJ WKHP
7KH ,QYDULDQW 6HFWLRQV DUH FHUWDLQ 6HFRQGDU\ 6HFWLRQV ZKRVH WLWOHV DUH GHVLJQDWHG DV EHLQJ WKRVH RI
,QYDULDQW 6HFWLRQV LQ WKH QRWLFH WKDW VD\V WKDW WKH 'RFXPHQW LV UHOHDVHG XQGHU WKLV /LFHQVH
7KH &RYHU 7H[WV DUH FHUWDLQ VKRUW SDVVDJHV RI WH[W WKDW DUH OLVWHG DV )URQW&RYHU 7H[WV RU
%DFN&RYHU 7H[WV LQ WKH QRWLFH WKDW VD\V WKDW WKH 'RFXPHQW LV UHOHDVHG XQGHU WKLV /LFHQVH
$ 7UDQVSDUHQW FRS\ RI WKH 'RFXPHQW PHDQV D PDFKLQHUHDGDEOH FRS\ UHSUHVHQWHG LQ D IRUPDW ZKRVH
VSHFLILFDWLRQ LV DYDLODEOH WR WKH JHQHUDO SXEOLF ZKRVH FRQWHQWV FDQ EH YLHZHG DQG HGLWHG GLUHFWO\ DQG
VWUDLJKWIRUZDUGO\ ZLWK JHQHULF WH[W HGLWRUV RU IRU LPDJHV FRPSRVHG RI SL[HOV JHQHULF SDLQW SURJUDPV RU IRU
GUDZLQJV VRPH ZLGHO\ DYDLODEOH GUDZLQJ HGLWRU DQG WKDW LV VXLWDEOH IRU LQSXW WR WH[W IRUPDWWHUV RU IRU
DXWRPDWLF WUDQVODWLRQ WR D YDULHW\ RI IRUPDWV VXLWDEOH IRU LQSXW WR WH[W IRUPDWWHUV $ FRS\ PDGH LQ DQ RWKHUZLVH
7UDQVSDUHQW ILOH IRUPDW ZKRVH PDUNXS KDV EHHQ GHVLJQHG WR WKZDUW RU GLVFRXUDJH VXEVHTXHQW PRGLILFDWLRQ E\
UHDGHUV LV QRW 7UDQVSDUHQW $ FRS\ WKDW LV QRW 7UDQVSDUHQW LV FDOOHG 2SDTXH
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
103
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
([DPSOHV RI VXLWDEOH IRUPDWV IRU 7UDQVSDUHQW FRSLHV LQFOXGH SODLQ $6&,, ZLWKRXW PDUNXS 7H[LQIR LQSXW IRUPDW
/D7H; LQSXW IRUPDW 6*0/ RU ;0/ XVLQJ D SXEOLFO\ DYDLODEOH '7' DQG
VWDQGDUGFRQIRUPLQJ VLPSOH +70/ GHVLJQHG IRU KXPDQ PRGLILFDWLRQ 2SDTXH IRUPDWV LQFOXGH 3RVW6FULSW 3')
SURSULHWDU\ IRUPDWV WKDW FDQ EH UHDG DQG HGLWHG RQO\ E\ SURSULHWDU\ ZRUG SURFHVVRUV 6*0/ RU ;0/ IRU ZKLFK
WKH '7' DQGRU SURFHVVLQJ WRROV DUH QRW JHQHUDOO\ DYDLODEOH DQG WKH PDFKLQHJHQHUDWHG +70/ SURGXFHG E\
VRPH ZRUG SURFHVVRUV IRU RXWSXW SXUSRVHV RQO\
7KH 7LWOH 3DJH PHDQV IRU D SULQWHG ERRN WKH WLWOH SDJH LWVHOI SOXV VXFK IROORZLQJ SDJHV DV DUH QHHGHG WR
KROG OHJLEO\ WKH PDWHULDO WKLV /LFHQVH UHTXLUHV WR DSSHDU LQ WKH WLWOH SDJH
)RU ZRUNV LQ IRUPDWV ZKLFK GR QRW KDYH DQ\ WLWOH SDJH DV VXFK 7LWOH 3DJH PHDQV WKH WH[W QHDU WKH PRVW
SURPLQHQW DSSHDUDQFH RI WKH ZRUN
V WLWOH SUHFHGLQJ WKH EHJLQQLQJ RI WKH ERG\ RI WKH WH[W
9(5%$7,0 &23<,1*
<RX PD\ FRS\ DQG GLVWULEXWH WKH 'RFXPHQW LQ DQ\ PHGLXP HLWKHU FRPPHUFLDOO\ RU QRQFRPPHUFLDOO\ SURYLGHG
WKDW WKLV /LFHQVH WKH FRS\ULJKW QRWLFHV DQG WKH OLFHQVH QRWLFH VD\LQJ WKLV /LFHQVH DSSOLHV WR WKH 'RFXPHQW DUH
UHSURGXFHG LQ DOO FRSLHV DQG WKDW \RX DGG QR RWKHU FRQGLWLRQV ZKDWVRHYHU WR WKRVH RI WKLV /LFHQVH <RX PD\
QRW XVH WHFKQLFDO PHDVXUHV WR REVWUXFW RU FRQWURO WKH UHDGLQJ RU IXUWKHU FRS\LQJ RI WKH FRSLHV \RX PDNH RU
GLVWULEXWH +RZHYHU \RX PD\ DFFHSW FRPSHQVDWLRQ LQ H[FKDQJH IRU FRSLHV ,I \RX GLVWULEXWH D ODUJH HQRXJK
QXPEHU RI FRSLHV \RX PXVW DOVR IROORZ WKH FRQGLWLRQV LQ VHFWLRQ <RX PD\ DOVR OHQG FRSLHV XQGHU WKH VDPH FRQGLWLRQV VWDWHG DERYH DQG \RX PD\ SXEOLFO\ GLVSOD\ FRSLHV
&23<,1* ,1 48$17,7<
,I \RX SXEOLVK SULQWHG FRSLHV RI WKH 'RFXPHQW QXPEHULQJ PRUH WKDQ DQG WKH 'RFXPHQW
V OLFHQVH QRWLFH
UHTXLUHV &RYHU 7H[WV \RX PXVW HQFORVH WKH FRSLHV LQ FRYHUV WKDW FDUU\ FOHDUO\ DQG OHJLEO\ DOO WKHVH &RYHU
7H[WV )URQW&RYHU 7H[WV RQ WKH IURQW FRYHU DQG %DFN&RYHU 7H[WV RQ WKH EDFN FRYHU %RWK FRYHUV PXVW DOVR
FOHDUO\ DQG OHJLEO\ LGHQWLI\ \RX DV WKH SXEOLVKHU RI WKHVH FRSLHV 7KH IURQW FRYHU PXVW SUHVHQW WKH IXOO WLWOH ZLWK
DOO ZRUGV RI WKH WLWOH HTXDOO\ SURPLQHQW DQG YLVLEOH <RX PD\ DGG RWKHU PDWHULDO RQ WKH FRYHUV LQ DGGLWLRQ
&RS\LQJ ZLWK FKDQJHV OLPLWHG WR WKH FRYHUV DV ORQJ DV WKH\ SUHVHUYH WKH WLWOH RI WKH 'RFXPHQW DQG VDWLVI\
WKHVH FRQGLWLRQV FDQ EH WUHDWHG DV YHUEDWLP FRS\LQJ LQ RWKHU UHVSHFWV
,I WKH UHTXLUHG WH[WV IRU HLWKHU FRYHU DUH WRR YROXPLQRXV WR ILW OHJLEO\ \RX VKRXOG SXW WKH ILUVW RQHV OLVWHG DV
PDQ\ DV ILW UHDVRQDEO\ RQ WKH DFWXDO FRYHU DQG FRQWLQXH WKH UHVW RQWR
DGMDFHQW SDJHV
,I \RX SXEOLVK RU GLVWULEXWH 2SDTXH FRSLHV RI WKH 'RFXPHQW QXPEHULQJ PRUH WKDQ \RX PXVW HLWKHU LQFOXGH
D PDFKLQHUHDGDEOH 7UDQVSDUHQW FRS\ DORQJ ZLWK HDFK 2SDTXH FRS\ RU VWDWH LQ RU ZLWK HDFK 2SDTXH FRS\ D
SXEOLFO\DFFHVVLEOH FRPSXWHUQHWZRUN ORFDWLRQ FRQWDLQLQJ D FRPSOHWH 7UDQVSDUHQW FRS\ RI WKH 'RFXPHQW IUHH
RI DGGHG PDWHULDO ZKLFK WKH JHQHUDO QHWZRUNXVLQJ SXEOLF KDV DFFHVV WR GRZQORDG DQRQ\PRXVO\ DW QR FKDUJH
XVLQJ SXEOLFVWDQGDUG QHWZRUN SURWRFROV ,I \RX XVH WKH ODWWHU RSWLRQ \RX PXVW WDNH UHDVRQDEO\ SUXGHQW VWHSV
ZKHQ \RX EHJLQ GLVWULEXWLRQ RI 2SDTXH FRSLHV LQ TXDQWLW\ WR HQVXUH WKDW WKLV 7UDQVSDUHQW FRS\ ZLOO UHPDLQ WKXV
DFFHVVLEOH DW WKH VWDWHG ORFDWLRQ XQWLO DW OHDVW RQH \HDU DIWHU WKH ODVW WLPH \RX GLVWULEXWH DQ 2SDTXH FRS\
GLUHFWO\ RU WKURXJK \RXU DJHQWV RU UHWDLOHUV RI WKDW HGLWLRQ WR WKH SXEOLF
,W LV UHTXHVWHG EXW QRW UHTXLUHG WKDW \RX FRQWDFW WKH DXWKRUV RI WKH 'RFXPHQW ZHOO EHIRUH UHGLVWULEXWLQJ DQ\
ODUJH QXPEHU RI FRSLHV WR JLYH WKHP D FKDQFH WR SURYLGH \RX ZLWK DQ XSGDWHG YHUVLRQ RI WKH 'RFXPHQW
02',),&$7,216
<RX PD\ FRS\ DQG GLVWULEXWH D 0RGLILHG 9HUVLRQ RI WKH 'RFXPHQW XQGHU WKH FRQGLWLRQV RI VHFWLRQV DQG DERYH SURYLGHG WKDW \RX UHOHDVH WKH 0RGLILHG 9HUVLRQ XQGHU SUHFLVHO\ WKLV /LFHQVH ZLWK WKH 0RGLILHG 9HUVLRQ
ILOOLQJ WKH UROH RI WKH 'RFXPHQW WKXV OLFHQVLQJ GLVWULEXWLRQ DQG PRGLILFDWLRQ RI WKH 0RGLILHG 9HUVLRQ WR ZKRHYHU
SRVVHVVHV D FRS\ RI LW ,Q DGGLWLRQ \RX PXVW GR WKHVH WKLQJV LQ WKH 0RGLILHG 9HUVLRQ
$
8VH LQ WKH 7LWOH 3DJH DQG RQ WKH FRYHUV LI DQ\ D WLWOH GLVWLQFW IURP WKDW RI WKH 'RFXPHQW DQG IURP WKRVH
RI SUHYLRXV YHUVLRQV ZKLFK VKRXOG LI WKHUH ZHUH DQ\ EH OLVWHG LQ WKH +LVWRU\ VHFWLRQ RI WKH 'RFXPHQW
<RX PD\ XVH WKH VDPH WLWOH DV D SUHYLRXV YHUVLRQ LI WKH RULJLQDO SXEOLVKHU RI WKDW YHUVLRQ JLYHV SHUPLVVLRQ
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
104
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
%
/LVW RQ WKH 7LWOH 3DJH DV DXWKRUV RQH RU PRUH SHUVRQV RU HQWLWLHV UHVSRQVLEOH IRU
DXWKRUVKLS RI WKH
PRGLILFDWLRQV LQ WKH 0RGLILHG 9HUVLRQ WRJHWKHU ZLWK DW OHDVW ILYH RI WKH SULQFLSDO DXWKRUV RI WKH 'RFXPHQW
DOO RI LWV SULQFLSDO DXWKRUV LI LW KDV OHVV WKDQ ILYH
&
6WDWH RQ WKH 7LWOH SDJH WKH QDPH RI WKH SXEOLVKHU RI WKH 0RGLILHG 9HUVLRQ DV WKH SXEOLVKHU
'
3UHVHUYH DOO WKH FRS\ULJKW QRWLFHV RI WKH 'RFXPHQW
(
$GG DQ DSSURSULDWH FRS\ULJKW QRWLFH IRU \RXU PRGLILFDWLRQV DGMDFHQW WR WKH RWKHU FRS\ULJKW QRWLFHV
)
,QFOXGH LPPHGLDWHO\ DIWHU WKH FRS\ULJKW QRWLFHV D OLFHQVH QRWLFH JLYLQJ WKH SXEOLF SHUPLVVLRQ WR XVH WKH
0RGLILHG 9HUVLRQ XQGHU WKH WHUPV RI WKLV /LFHQVH LQ WKH IRUP VKRZQ LQ WKH $GGHQGXP EHORZ
*
3UHVHUYH LQ WKDW OLFHQVH QRWLFH WKH IXOO OLVWV RI ,QYDULDQW 6HFWLRQV DQG UHTXLUHG &RYHU 7H[WV JLYHQ LQ WKH
'RFXPHQW
V OLFHQVH QRWLFH
+
,QFOXGH DQ XQDOWHUHG FRS\ RI WKLV /LFHQVH
,
3UHVHUYH WKH VHFWLRQ HQWLWOHG +LVWRU\ DQG LWV WLWOH DQG DGG WR LW DQ LWHP VWDWLQJ DW OHDVW WKH WLWOH \HDU
QHZ DXWKRUV DQG SXEOLVKHU RI WKH 0RGLILHG 9HUVLRQ DV JLYHQ RQ WKH 7LWOH 3DJH ,I WKHUH LV QR VHFWLRQ
HQWLWOHG +LVWRU\ LQ WKH 'RFXPHQW FUHDWH RQH VWDWLQJ WKH WLWOH \HDU DXWKRUV DQG SXEOLVKHU RI WKH
'RFXPHQW DV JLYHQ RQ LWV 7LWOH 3DJH WKHQ DGG DQ LWHP GHVFULELQJ WKH 0RGLILHG 9HUVLRQ DV VWDWHG LQ WKH
SUHYLRXV VHQWHQFH
-
3UHVHUYH WKH QHWZRUN ORFDWLRQ LI DQ\ JLYHQ LQ WKH 'RFXPHQW IRU SXEOLF DFFHVV WR D 7UDQVSDUHQW FRS\ RI WKH
'RFXPHQW DQG OLNHZLVH WKH QHWZRUN ORFDWLRQV JLYHQ LQ WKH 'RFXPHQW IRU SUHYLRXV YHUVLRQV LW ZDV EDVHG RQ
7KHVH PD\ EH SODFHG LQ WKH +LVWRU\ VHFWLRQ <RX PD\ RPLW D QHWZRUN ORFDWLRQ IRU D ZRUN WKDW ZDV
SXEOLVKHG DW OHDVW IRXU \HDUV EHIRUH WKH 'RFXPHQW LWVHOI RU LI WKH RULJLQDO SXEOLVKHU RI WKH YHUVLRQ LW UHIHUV
WR JLYHV SHUPLVVLRQ
.
,Q DQ\ VHFWLRQ HQWLWOHG $FNQRZOHGJHPHQWV RU 'HGLFDWLRQV SUHVHUYH WKH VHFWLRQ
V WLWOH DQG SUHVHUYH LQ
WKH VHFWLRQ DOO WKH VXEVWDQFH DQG WRQH RI HDFK RI WKH FRQWULEXWRU DFNQRZOHGJHPHQWV DQGRU GHGLFDWLRQV
JLYHQ WKHUHLQ
/
3UHVHUYH DOO WKH ,QYDULDQW 6HFWLRQV RI WKH 'RFXPHQW XQDOWHUHG LQ WKHLU WH[W DQG LQ WKHLU WLWOHV 6HFWLRQ
QXPEHUV RU WKH HTXLYDOHQW DUH QRW FRQVLGHUHG SDUW RI WKH VHFWLRQ WLWOHV
0 'HOHWH DQ\ VHFWLRQ HQWLWOHG (QGRUVHPHQWV 6XFK D VHFWLRQ PD\ QRW EH LQFOXGHG LQ WKH 0RGLILHG 9HUVLRQ
1
1 'R QRW UHWLWOH DQ\ H[LVWLQJ VHFWLRQ DV (QGRUVHPHQWV RU WR FRQIOLFW LQ WLWOH ZLWK DQ\ ,QYDULDQW 6HFWLRQ
2 ,I WKH 0RGLILHG 9HUVLRQ LQFOXGHV QHZ IURQWPDWWHU VHFWLRQV RU DSSHQGLFHV WKDW TXDOLI\ DV 6HFRQGDU\ 6HFWLRQV
DQG FRQWDLQ QR PDWHULDO FRSLHG IURP WKH 'RFXPHQW \RX PD\ DW \RXU RSWLRQ GHVLJQDWH VRPH RU DOO RI WKHVH
VHFWLRQV DV LQYDULDQW 7R GR WKLV DGG WKHLU WLWOHV WR WKH OLVW RI ,QYDULDQW 6HFWLRQV LQ WKH 0RGLILHG 9HUVLRQ
V
OLFHQVH QRWLFH 7KHVH WLWOHV PXVW EH GLVWLQFW IURP DQ\ RWKHU VHFWLRQ WLWOHV
<RX PD\ DGG D VHFWLRQ HQWLWOHG (QGRUVHPHQWV SURYLGHG LW FRQWDLQV QRWKLQJ EXW HQGRUVHPHQWV RI \RXU
0RGLILHG 9HUVLRQ E\ YDULRXV SDUWLHVIRU H[DPSOH VWDWHPHQWV RI SHHU UHYLHZ RU WKDW WKH WH[W KDV EHHQ DSSURYHG
E\ DQ RUJDQL]DWLRQ DV WKH DXWKRULWDWLYH GHILQLWLRQ RI D VWDQGDUG
<RX PD\ DGG D SDVVDJH RI XS WR ILYH ZRUGV DV D )URQW&RYHU 7H[W DQG D SDVVDJH RI XS WR ZRUGV DV D %DFN
&RYHU 7H[W WR WKH HQG RI WKH OLVW RI &RYHU 7H[WV LQ WKH 0RGLILHG 9HUVLRQ 2QO\ RQH SDVVDJH RI )URQW&RYHU 7H[W
DQG RQH RI %DFN&RYHU 7H[W PD\ EH DGGHG E\ RU WKURXJK DUUDQJHPHQWV PDGH E\ DQ\ RQH HQWLW\ ,I WKH
'RFXPHQW DOUHDG\ LQFOXGHV D FRYHU WH[W IRU WKH VDPH FRYHU SUHYLRXVO\ DGGHG E\ \RX RU E\ DUUDQJHPHQW PDGH
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
105
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
E\ WKH VDPH HQWLW\ \RX DUH DFWLQJ RQ EHKDOI RI \RX PD\ QRW DGG DQRWKHU EXW \RX PD\ UHSODFH WKH ROG RQH RQ
H[SOLFLW SHUPLVVLRQ IURP WKH SUHYLRXV SXEOLVKHU WKDW DGGHG WKH ROG RQH
7KH DXWKRUV DQG SXEOLVKHUV RI WKH 'RFXPHQW GR QRW E\ WKLV /LFHQVH JLYH SHUPLVVLRQ WR XVH WKHLU QDPHV IRU
SXEOLFLW\ IRU RU WR DVVHUW RU LPSO\ HQGRUVHPHQW RI DQ\ 0RGLILHG 9HUVLRQ
&20%,1,1* '2&80(176
<RX PD\ FRPELQH WKH 'RFXPHQW ZLWK RWKHU GRFXPHQWV UHOHDVHG XQGHU WKLV /LFHQVH XQGHU WKH WHUPV GHILQHG LQ
VHFWLRQ DERYH IRU PRGLILHG YHUVLRQV SURYLGHG WKDW \RX LQFOXGH LQ WKH FRPELQDWLRQ DOO RI WKH ,QYDULDQW 6HFWLRQV
RI DOO RI WKH RULJLQDO GRFXPHQWV XQPRGLILHG DQG OLVW WKHP DOO DV ,QYDULDQW 6HFWLRQV RI \RXU FRPELQHG ZRUN LQ LWV
OLFHQVH QRWLFH
7KH FRPELQHG ZRUN QHHG RQO\ FRQWDLQ RQH FRS\ RI WKLV /LFHQVH DQG PXOWLSOH LGHQWLFDO ,QYDULDQW 6HFWLRQV PD\
EH UHSODFHG ZLWK D VLQJOH FRS\ ,I WKHUH DUH PXOWLSOH ,QYDULDQW 6HFWLRQV ZLWK WKH VDPH QDPH EXW GLIIHUHQW
FRQWHQWV PDNH WKH WLWOH RI HDFK VXFK VHFWLRQ XQLTXH E\ DGGLQJ DW WKH HQG RI LW LQ SDUHQWKHVHV WKH QDPH RI WKH
RULJLQDO DXWKRU RU SXEOLVKHU RI WKDW VHFWLRQ LI NQRZQ RU HOVH D XQLTXH QXPEHU 0DNH WKH VDPH DGMXVWPHQW WR
WKH VHFWLRQ WLWOHV LQ WKH OLVW RI ,QYDULDQW 6HFWLRQV LQ WKH OLFHQVH QRWLFH RI WKH FRPELQHG ZRUN
,Q WKH FRPELQDWLRQ \RX PXVW FRPELQH DQ\ VHFWLRQV HQWLWOHG +LVWRU\ LQ WKH YDULRXV RULJLQDO GRFXPHQWV
IRUPLQJ RQH VHFWLRQ HQWLWOHG +LVWRU\ OLNHZLVH FRPELQH DQ\ VHFWLRQV HQWLWOHG $FNQRZOHGJHPHQWV DQG DQ\
VHFWLRQV HQWLWOHG 'HGLFDWLRQV <RX PXVW GHOHWH DOO VHFWLRQV HQWLWOHG (QGRUVHPHQWV
&2//(&7,216 2) '2&80(176
<RX PD\ PDNH D FROOHFWLRQ FRQVLVWLQJ RI WKH 'RFXPHQW DQG RWKHU GRFXPHQWV UHOHDVHG XQGHU WKLV /LFHQVH DQG
UHSODFH WKH LQGLYLGXDO FRSLHV RI WKLV /LFHQVH LQ WKH YDULRXV GRFXPHQWV ZLWK D VLQJOH FRS\ WKDW LV LQFOXGHG LQ WKH
FROOHFWLRQ SURYLGHG WKDW \RX IROORZ WKH UXOHV RI WKLV /LFHQVH IRU YHUEDWLP FRS\LQJ RI HDFK RI WKH GRFXPHQWV LQ
DOO RWKHU UHVSHFWV
<RX PD\ H[WUDFW D VLQJOH GRFXPHQW IURP VXFK D FROOHFWLRQ DQG GLVWULEXWH LW LQGLYLGXDOO\ XQGHU WKLV /LFHQVH
SURYLGHG \RX LQVHUW D FRS\ RI WKLV /LFHQVH LQWR WKH H[WUDFWHG GRFXPHQW DQG IROORZ WKLV /LFHQVH LQ DOO RWKHU
UHVSHFWV UHJDUGLQJ YHUEDWLP FRS\LQJ RI WKDW GRFXPHQW
$**5(*$7,21 :,7+ ,1'(3(1'(17 :25.6
$ FRPSLODWLRQ RI WKH 'RFXPHQW RU LWV GHULYDWLYHV ZLWK RWKHU VHSDUDWH DQG LQGHSHQGHQW GRFXPHQWV RU ZRUNV LQ
RU RQ D YROXPH RI D VWRUDJH RU GLVWULEXWLRQ PHGLXP GRHV QRW DV D ZKROH FRXQW DV D 0RGLILHG 9HUVLRQ RI WKH
'RFXPHQW SURYLGHG QR FRPSLODWLRQ FRS\ULJKW LV FODLPHG IRU WKH FRPSLODWLRQ 6XFK D FRPSLODWLRQ LV FDOOHG DQ
DJJUHJDWH DQG WKLV WKLV /LFHQVH GRHV QRW DSSO\ WR WKH RWKHU VHOIFRQWDLQHG ZRUNV WKXV FRPSLOHG ZLWK WKH
'RFXPHQW RQ DFFRXQW RI WKHLU EHLQJ WKXV FRPSLOHG LI WKH\ DUH QRW WKHPVHOYHV GHULYDWLYH ZRUNV RI WKH
'RFXPHQW ,I WKH &RYHU 7H[W UHTXLUHPHQW RI VHFWLRQ LV DSSOLFDEOH WR WKHVH FRSLHV RI WKH 'RFXPHQW WKHQ LI WKH
'RFXPHQW LV OHVV WKDQ RQH TXDUWHU RI WKH HQWLUH DJJUHJDWH WKH 'RFXPHQW
V &RYHU 7H[WV PD\ EH SODFHG RQ
FRYHUV WKDW VXUURXQG RQO\ WKH 'RFXPHQW ZLWKLQ WKH DJJUHJDWH 2WKHUZLVH WKH\ PXVW DSSHDU RQ FRYHUV DURXQG
WKH ZKROH DJJUHJDWH
75$16/$7,21
7UDQVODWLRQ LV FRQVLGHUHG D NLQG RI PRGLILFDWLRQ VR \RX PD\ GLVWULEXWH WUDQVODWLRQV RI WKH
'RFXPHQW XQGHU WKH WHUPV RI VHFWLRQ 5HSODFLQJ ,QYDULDQW 6HFWLRQV ZLWK WUDQVODWLRQV UHTXLUHV HVSHFLDO
SHUPLVVLRQ IURP WKHLU FRS\ULJKW KROGHUV EXW \RX PD\ LQFOXGH WUDQVODWLRQV RI VRPH RU DOO ,QYDULDQW 6HFWLRQV LQ
DGGLWLRQ WR WKH RULJLQDO YHUVLRQV RI WKHVH ,QYDULDQW 6HFWLRQV <RX PD\ LQFOXGH D WUDQVODWLRQ RI WKLV /LFHQVH
SURYLGHG WKDW \RX DOVR LQFOXGH WKH RULJLQDO (QJOLVK YHUVLRQ RI WKLV /LFHQVH ,Q FDVH RI D GLVDJUHHPHQW EHWZHHQ
WKH WUDQVODWLRQ DQG WKH RULJLQDO (QJOLVK YHUVLRQ RI WKLV /LFHQVH WKH RULJLQDO (QJOLVK YHUVLRQ ZLOO SUHYDLO
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
106
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
7(50,1$7,21
<RX PD\ QRW FRS\ PRGLI\ VXEOLFHQVH RU GLVWULEXWH WKH 'RFXPHQW H[FHSW DV H[SUHVVO\ SURYLGHG IRU XQGHU WKLV
/LFHQVH $Q\ RWKHU DWWHPSW WR FRS\ PRGLI\ VXEOLFHQVH RU GLVWULEXWH WKH 'RFXPHQW LV YRLG DQG ZLOO
DXWRPDWLFDOO\ WHUPLQDWH \RXU ULJKWV XQGHU WKLV /LFHQVH +RZHYHU SDUWLHV ZKR KDYH UHFHLYHG FRSLHV RU ULJKWV
IURP \RX XQGHU WKLV /LFHQVH ZLOO QRW KDYH WKHLU OLFHQVHV WHUPLQDWHG VR ORQJ DV VXFK SDUWLHV UHPDLQ LQ IXOO
FRPSOLDQFH
)8785( 5(9,6,216 2) 7+,6 /,&(16(
7KH )UHH 6RIWZDUH )RXQGDWLRQ PD\ SXEOLVK QHZ UHYLVHG YHUVLRQV RI WKH *18 )UHH 'RFXPHQWDWLRQ /LFHQVH IURP
WLPH WR WLPH 6XFK QHZ YHUVLRQV ZLOO EH VLPLODU LQ VSLULW WR WKH SUHVHQW YHUVLRQ EXW PD\ GLIIHU LQ GHWDLO WR
DGGUHVV QHZ SUREOHPV RU FRQFHUQV 6HH KWWSZZZJQXRUJFRS\OHIW
(DFK YHUVLRQ RI WKH /LFHQVH LV JLYHQ D GLVWLQJXLVKLQJ YHUVLRQ QXPEHU ,I WKH 'RFXPHQW VSHFLILHV WKDW D SDUWLFXODU
QXPEHUHG YHUVLRQ RI WKLV /LFHQVH RU DQ\ ODWHU YHUVLRQ DSSOLHV WR LW \RX KDYH WKH RSWLRQ RI IROORZLQJ WKH WHUPV
DQG FRQGLWLRQV HLWKHU RI WKDW VSHFLILHG YHUVLRQ RU RI DQ\ ODWHU YHUVLRQ WKDW KDV EHHQ SXEOLVKHG QRW DV D GUDIW
E\ WKH )UHH 6RIWZDUH )RXQGDWLRQ ,I WKH 'RFXPHQW GRHV QRW VSHFLI\ D YHUVLRQ QXPEHU RI WKLV /LFHQVH \RX PD\
FKRRVH DQ\ YHUVLRQ HYHU SXEOLVKHG QRW DV D GUDIW E\ WKH )UHH 6RIWZDUH )RXQGDWLRQ
+RZ WR XVH WKLV /LFHQVH IRU \RXU GRFXPHQWV
7R XVH WKLV /LFHQVH LQ D GRFXPHQW \RX KDYH ZULWWHQ LQFOXGH D FRS\ RI WKH /LFHQVH LQ WKH GRFXPHQW DQG SXW WKH
IROORZLQJ FRS\ULJKW DQG OLFHQVH QRWLFHV MXVW DIWHU WKH WLWOH SDJH
&RS\ULJKW F <($5 <285 1$0(
3HUPLVVLRQ LV JUDQWHG WR FRS\ GLVWULEXWH DQGRU PRGLI\ WKLV GRFXPHQW
XQGHU WKH WHUPV RI WKH *18 )UHH 'RFXPHQWDWLRQ /LFHQVH 9HUVLRQ RU DQ\ ODWHU YHUVLRQ SXEOLVKHG E\ WKH )UHH 6RIWZDUH )RXQGDWLRQ
ZLWK WKH ,QYDULDQW 6HFWLRQV EHLQJ /,67 7+(,5 7,7/(6 ZLWK WKH
)URQW&RYHU 7H[WV EHLQJ /,67 DQG ZLWK WKH %DFN&RYHU 7H[WV EHLQJ /,67
$ FRS\ RI WKH OLFHQVH LV LQFOXGHG LQ WKH VHFWLRQ HQWLWOHG *18
)UHH 'RFXPHQWDWLRQ /LFHQVH
,I \RX KDYH QR ,QYDULDQW 6HFWLRQV ZULWH ZLWK QR ,QYDULDQW 6HFWLRQV LQVWHDG RI VD\LQJ ZKLFK
RQHV DUH LQYDULDQW ,I \RX KDYH QR )URQW&RYHU 7H[WV ZULWH QR )URQW&RYHU 7H[WV LQVWHDG RI
)URQW&RYHU
7H[WV EHLQJ /,67 OLNHZLVH IRU %DFN&RYHU 7H[WV
,I \RXU GRFXPHQW FRQWDLQV QRQWULYLDO H[DPSOHV RI SURJUDP FRGH ZH UHFRPPHQG UHOHDVLQJ WKHVH H[DPSOHV LQ
SDUDOOHO XQGHU \RXU FKRLFH RI IUHH VRIWZDUH OLFHQVH VXFK DV WKH *18 *HQHUDO 3XEOLF /LFHQVH WR SHUPLW WKHLU XVH
LQ IUHH VRIWZDUH
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
107
&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
&RPLWrGH,QFHQWLYRD3URGXomRGR
6RIWZDUH*UDWXLWRH$OWHUQDWLYR
Fundado em 29 de janeiro de 1999.
1ª Diretoria
Djalma Valois Filho
'LUHWRU([HFXWLYR
[email protected]
José Luiz Nunes Poyares
Diretor Administrativo
Paulo Roberto Ribeiro Guimarães
Diretor Institucional
CIPSGA
Rua Professora Ester de Melo, numero 202,
Parte, Benfica, Rio de Janeiro, RJ, CEP. 20930-010;
Telefone (Fax/Dados): 021-5564201;
e-mail: [email protected]
CNPJ: 03179614-0001/70
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[
ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU
3iJLQD
108

Documentos relacionados

REVISTA 07 EDIÇÃO

REVISTA 07 EDIÇÃO R¥]ZONO]LOWO[_SZKNY][_OSXMV_OW]_´^O]K]]SWMYWYK]:\O]SNOXMSKS]O:OX^RY_]O]SNOKS]ZK\KO]^KNSK] Z\YVYXQKNK] :\YTO^KNYZK\K]O]OX^S\MYWYOW_WK\O]SN XMSKNY?ZZO\/K]^=SNOK]...

Leia mais

Kali Karpoora Stotram

Kali Karpoora Stotram Kk§e¢k icõixÇõ sûkek ktyZI s CÉ¡ pxix±y j¡°I gzRI ¥Z ixZ¤kZZ§ öZye¡ktkpc¡I öZyrÜ£ZI ¥j ReÇy | ¥ZrxI Mbõxdy ebõxdy P i¡LK¡tkxZ§ Dmøs¥ÇõppxP: sûPâÉI - cûxÇcxkxck - k¡Pyk¡Py¥k skûsyÆyI MZxdxI || 1 || ...

Leia mais

The the SA RS is I was unaware of the situation

The the SA RS is I was unaware of the situation your life, and the SAR S sequelae it is another in a long-term disaster. Fang Bo: (contracted) The the SA RS is I was unaware of the situation, that is terrible,abercrombie france, a short time, I ...

Leia mais