Curso de Seguranca em Redes Linux PDF

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$
&8562'(
6(*85$1d$(0
5('(6/,18;
$XWRU5HQDWR0DUWLQL
UPDUWLQL#FLSVJDRUJEU
0DUoRGH
&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 1

&XUVRGH6HJXUDQoDHP5HGHV
&RPLWHGH,QFHQWLYRD3URGXomR
GR6RIWZDUH*UDWXLWRH$OWHUQDWLYR
&,36*$
$XWRU
5HQDWR0DUWLQL
UPDUWLQL#FLSVJDRUJEU
0DUoRGH
&RS\ULJKW F 5HQDWR 0DUWLQL

3HUPLVVLRQ LV JUDQWHG WR FRS\ GLVWULEXWH DQGRU PRGLI\ WKLV GRFXPHQW XQGHU WKH WHUPV RI WKH *18 )UHH
'RFXPHQWDWLRQ /LFHQVH 9HUVLRQ RU DQ\ ODWHU YHUVLRQ SXEOLVKHG E\ WKH )UHH 6RIWZDUH )RXQGDWLRQ ZLWK WKH
,QYDULDQW 6HFWLRQV EHLQJ /,67 7+(,5 7,7/(6 ZLWK WKH )URQW&RYHU 7H[WV EHLQJ /,67 DQG ZLWK WKH %DFN&RYHU
7H[WV EHLQJ /,67
$ FRS\ RI WKH OLFHQVH LV LQFOXGHG LQ WKH VHFWLRQ HQWLWOHG *18 )UHH 'RFXPHQWDWLRQ /LFHQVH
&RS\ULJKW F 5HQDWR 0DUWLQL

( JDUDQWLGD D SHUPLVVmR SDUD FRSLDU GLVWULEXLU HRX PRGLILFDU HVWH GRFXPHQWR VRE RV WHUPRV GD *18 )UHH 'RFXPHQWDWLRQ /LFHQVH
YHUVmR RX TXDOTXHU RXWUD YHUVmR SRVWHULRU SXEOLFDGD SHOD )UHH 6RIWZDUH )RXQGDWLRQ VHP REULJDWRULHGDGH GH 6Ho}HV ,QYDULDQWHV QD
DEHUWXUD H DR ILQDO GRV WH[WRV
8PD FRSLD GD OLFHQoD GHYH VHU LQFOXtGD QD VHomR LQWLWXODGD *18 )UHH 'RFXPHQWDWLRQ /LFHQVH

ËQGLFH
1 SEGURANÇA: FUNDAMENTOS ......................................................................................................................................... 4
1.1 Introdução ................................................................................................................................................................ 4
1.2 Segurança: o conceito .............................................................................................................................................. 4
1.3 Segurança e as ferramentas de rede......................................................................................................................... 6
1.4 Nosso objetivo .......................................................................................................................................................... 7
2 0 FIREWALL: DUAS SOLUÇÕES EM AMBIENTE LINUX...................................................................................................... 9
2.1 Uma palavra inicial sobre firewalls ......................................................................................................................... 9
2.2 Firewalls e acesso remoto: o Secure Shell ............................................................................................................. 10
2.3 Firewalls: solução Linux ........................................................................................................................................ 15
2.4 A filtragem de pacotes ............................................................................................................................................ 16
2.5 IPCHAINS (The Enhanced IP Firewalling Chains Software for Linux) ................................................................ 17
2.6 The SINUS Firewall - a TCP/IP packet filter for Linux ......................................................................................... 32
3 MONITORAÇÃO DA REDE ............................................................................................................................................... 56
3.1 Os scanners de rede................................................................................................................................................ 56
3.2 Saint: Security Administrator's Integrated Network Tool....................................................................................... 72
+8/B9= ................................................................................................................................................. 80
+8/B9 +$ ....................................................................................................................................................................... 81
+8/B9 ,$ ....................................................................................................................................................................... 82
+8/B9 -$ ....................................................................................................................................................................... 90
+8/B9 .$ ......................................................................................................................................................................... 96
+8/B9 /$ ......................................................................................................................................................................... 99
,3,6391<+03+ 1/<+6 ..................................................................................................................... 100
SOBRE O AUTOR DA APOSTILA .................................................................................................... 102
*18 )5(( '2&80(17$7,21 /,&(16( ....................................................................................... 103

1 Segurança: Fundamentos
1.1 Introdução
9 YLTO^S`Y NO]Ô NYM_WOX^Y ¤ WY]^\K\ MYWY Y 6SX_b YPO\OMO _WK

]YV_ÁYMYWZVO^KZK\KYZ\YLVOWKNK]OQ_\KXK9L]O\Ò]OK[_S[_O
]O PKVKWY] ]YV_ÁY XÁY ]SQXSPSMK K ObS]^ XMSK NO _W ]S]ÔWK
KL]YV_^KWOXÔ ]OQ_\Y 9 6SX_b YPO\OMO S]^Y ]SW K] PO\\KWOX^K]
XOMO]]£\SK] ZK\K K QO]^ÁY NK ]OQ_\KXK X_W WSM\Y S]YVKNKWOXÔ Y_
X_WKSX^\KXOÔOX^ÁY^KVSX^\KXO^MYXOM^KNK§1\KXNO<ONO/]Ô
NYM_WOX^YNO]M\OÒSX^\YN_^Y\SKWOXÔ^KS]PO\\KWOX^K]OZ\YLVOWK]NO
]OQ_\KXK
1.2 Segurança: o conceito
>\K^K\OWY] ]OQ_\KXK MYWY ]OXNY K \O]^\SÁY NY] \OM_\]Y] NO _W

WSM\YMYWZ_^KNY\ Y_ NO _WK \ONO Y_ NO ZY\ÉO] NO]^K \ONO ZK\K
Y_^\Y] _]_£\SY] Y_ MYWZ_^KNY\O] =OQ_\KXK XKNK WKS] ¤ NY [_O K
QO]^ÁYNO^KV\O]^\SÁYY[_OMYX]^S^_SZY\^KX^Y_WKZYV´^SMKNO
]OQ_\KXK Y_ MYWY ]O NSd OW SXQV ]$ ]OM_\S^c ZYVSMc 9 [_O
]SQXSPSMK ^ÁY]YWOXÔ [_O X_WK \ONO R£ NOÔ\WSXKNY] \OM_\]Y]
K\[_S`Y] NS]ZY]S^S`Y] NO RK\NaK\O O^M [_O O]^ÁY NS]ZYX´ÒS]
ZK\K O]Ô MYWZ_^KNY\ Y_ ^SZY NO _]_£\SY WK] [_O ZY\ Y_^\Y VKNY
PSMKW\O]^\S^Y]K^KVY_[_KVMYWZ_^KNY\O]ÔTKOVOPY\KY_NOX^\Y
NK\ONO
7O]WY _W ]S]ÔWK MYWY Y KX^SQY .9= SWZVOWOX^K`K _W ^SZY NO

]OQ_\KXK MVK\Y [_O ]SXQOVK P\OXÔ KY] =9 W_V^S_]_£\SY] MYWY Y
6SX_b Y_ [_KV[_O\ ^SZY NO ]S]ÔWK ?83B 8Y .9= R£ NOÔ\WSXKNY]
K\[_S`Y]YM_V^Y]R£K\[_S`Y]MYWK^\SL_^Y]ZK\K[_O]OZO\WS^K[_O
O]Ô ]YWOXÔ ]OTK VSNY O^M :Y\ MYX]OQ_SXÔ R£ \O]^\SÁY NO

£\OK]NY=9-VK\Y[_O^_NYS]]YX_W]S]ÔWK.9=Y_WO]WYXK]_K
]O[_ XMSK RS]^¥\SMK Y ASXNYa] #b ZY]]_OW \O]^\SÉO] [_O
PKMSVWOXÔL_\VKWY]7K]Y.9=ASXNYa]XÁYPY\KWPOS^Y]ZK\K\ONO9
\OM_\]Y NY XOâY\USXQ XÁY ¤ OWL_^SNY L_SV^SX SX^\´X]OMY KY
ASXNYa]ZY\S]]YWO]WY^YNY]Y]OWLK\KY][_O]O_]_]_£\SY]ZY]]_OW
KYYZO\K\OWXK3XÔ\XO^MYWYZY\ObOWZVYXYPKWY]Y,KMU9\SPSMO
96SX_b¤_W]S]ÔWKW_V^S_]_£\SYO]]OXMSKVWOXÔ _W =9 MKZKMS^KNY

ZK\KK]<ONO]XÁY¤_W\OM_\]Y[_OVROPYSKM\O]MSNYObÔ\XKWOXÔ
/^YNY=9NO\ONOO]^KLOVOMOZ\S`SV¤QSY]MYWYPY\WKNO]OQ_\KXK$R£
_]_£\SY] O]ZOMSKS] XK XYWOXMVK^_\K MY\\O^K =_ZO\?]_£\SY] Y_
_]_£\SY <YY^ [_O ZYNOW KVÔ\K\ K\[_S`Y] O]ZOMSKS] NY ]S]ÔWK
WYX^K\ ZK\^SÉO] ]OTKW VYMKS] Y_ \OWY^K] NO]VSQK\ K \ONO O^M 9
_]_£\SYMYW_W]OWZ\S`SV¤QSY]XÁYZYNOPKd VY :Y\¤W [_KXNY XY]
NO]VYMKWY] NK ¥^SMK NO _W MYWZ_^KNY\ ZOX]KNY S]YVKNKWOXÔ S]^Y ¤
_WK ¦XSMK O]^KÁY NO ^\KLKVRY _]KNY ZY\ _WK] ZO]]YK] NSQKWY]
ÒWY] [_O ]O MYVYMK ]OW N¦`SNK Y ÔWK NK ]OQ_\KXK 7K] [_KXNY
YL]O\`KWY]_WK\ONOVYMKVK]OQ_\KXK¤_WÔWKKSXNKWKS]_\QOXÔ
8_WK SX^\KXO^ §] ÒdO] NSÒ\]Y] \OM_\]Y] NO `£\SY] WSM\Y] O]^ÁY
SXÔ\NS^KNY] NO _W NOZK\^KWOX^Y ZY\ ObOWZVY / ]YL\O^_NY [_KXNY
O]^K SX^\KXO^ MYXOM^K]O K 3XÔ\XO^ Y [_O ¤ [_K]O SXO`S^£ÒV K
]OQ_\KXK^Y\XK]OKSXNKWKS]_\QOXÔOP_XNKWOX^KV
:YNO\´KWY]O][_OWK^SdK\K]]SW$
<ONO'''''''''''''''''''' INTERNET!
6YMKVf0S\OaKVVf
''''''''''''''''''''

1.3 Segurança e as ferramentas de rede
8_W ¦XSMY WSM\Y Y_ X_WK \ONO VYMKV NO ZO[_OXY W¤NSY Y_ Q\KXNO
ZY\Ô O K]]SW [_KXNY O]^K \ONO O]^£ MYXOM^KNK XK 1\KXNO <ONO K
]OQ_\KXKÔW[_O]O\QO\SNKOVYQYÒ\OWY]Y6SX_bÔW^YNK]K]
PO\\KWOX^K]OKNYM_WOX^KÁYXOMO]]£\SK]ZK\KS]]Y
.OÒ]OVOWL\K\[_O^KS]PO\\KWOX^K]]ÁYSX¦ÔS] ]O Y KNWSXS]^\KNY\

XÁY ^SÒ\ _WK ZYV´^SMK NO ]OQ_\KXK 8ÁY MYX]^S^_S YLTO^S`Y NO]Ô
NYM_WOX^Y ^\K^K\ ObZVSMS^KWOXÔ NY ÔWK 6OS^_\K] SXSMSK]
YL\SQK^¥\SK] ZK\K ^KX^Y ]ÁY$ Y <0- # SX^S^_VKNY NO =SÔ
=OM_\S^c2KXNLYYUR^^Z$aaa\PMONS^Y\Y\QO]M\S^YZY\,0\K]O\
]OÔWL\Y NO ##!% O Y 6SX_b =OM_\S^c 29A>9
P^Z$]_X]SÔ_XMON_Z_L6SX_bNYM]29A>9NO50OXdSO.A\O]US
WKSY NO ##"% O Y VS`\Y NO :K_V =O\c 0O\\KWOX^K] :YNO\Y]K] ZK\K
<ONO] OW 6SX_b ON -S XMSK 7YNO\XK +VS Y VOS^Y\ OXMYX^\K\£ ZY\
MO\^Y Y] OX]SXKWOX^Y] SXSMSKS] ZK\K K MYX]^\_ÁY NK ZYV´^SMK NO
]OQ_\KXK NO ]_K \ONO O [_O Y <0- # Z\YZ\SKWOXÔ NOPSXO MYWY
_WK NOMVK\KÁY PY\WKV NO \OQ\K] [_O MYXMONOW KMO]]Y K \OM_\]Y] NO
SXPY\WKÁY O ÔMXYVYQSK O [_O VYQY NOÒW ]O\ M_WZ\SNK] .OÒWY]
VOWL\K\ KSXNK [_O Y KV_XY ZYNO\£ OXMYX^\K\ _WK \O_XSÁY LK]^KXÔ
KL\KXQOXÔNOPO\\KWOX^K]ZK\K^YNY]Y]]KLY\O]NO]S]ÔWK]?83B
XY ]SÔ R^^Z$aaa]OM_\S^cPYM_]MYW `S]S^K YL\SQK^¥\SK ZK\K ^YNY
K[_OVO[_O]OYM_ZKMYW]OQ_\KXK
1Y]^K\´KWY] NO \O]_WS\ K[_S KVQ_X] ZYX^Y] NY 6SX_b =OM_\S^c 29A>9
ARK^ K\O cY_ ^\cSXQ ^Y Z\YÔM^) / Y .OÒVYZSXQ K
]OM_\S^c ZYVSMc O OVO] NOÒW ]O\ VO`KNY] OW MYX]SNO\KÁY KXÔ]
WO]WY NO ]O M\SK\ _WK ZYV´^SMK NO ]OQ_\KXK ZK\K K ]_K \ONO +XÔ]
NO Z\YÔQO\ ]O_ ]S]ÔWK `YM NOÒ ]KLO\ NO [_O ^SZY NO KWOKK ]O

O]^£ ÔX^KXNY Z\YÔQO\ ]O K^KMKNY Y [_O O]^£ OW TYQY @OTKWY]
OX^ÁY$
*O risco é a possibilidade que um intruso possa ter sucesso ao tentar invadir seus computadores. Um intruso pode, ao
acessar seus arquivos, danificar dados críticos? Não se esqueça, também, que ao possuir uma conta de sua rede, o
intruso pode se passar por você.
*As ameaças serão sempre no sentido de se obter acesso não-autorizado em sua rede ou computador. Há portanto
vários tipos de intrusos e, então, diferentes tipos de ameaça a sua rede.
*Há o curioso: esse tipo de intruso se interessa pelo tipo de dado e sistema você possui.
*Há o malicioso: esse quer em síntese derrubar o seu sistema, destruir dados, destruir os documento publicados no
seu Web server, etc. É o chamado cracker.
*Há o intruso de “alto-nível” (High-Profile): ele quer obter popularidade mostrando suas habilidades ao invadir seu
sistema.
*Há o competidor: esse que conhecer seus dados para obter algum ganho com isso.
*Por fim, “vulnerabilidade” descreve o quão bem protegido é seu computador, e o que se perderá se alguém obter
acesso não-autorizado a algum(ns) computador(res).
Portanto, crie uma política de segurança para sua rede que seja simples e genérica e que todos os usuários
possam prontamente compreender e seguir. Você pode proteger dados tanto quanto respeitar a privacidade dos
usuários
1.4 Nosso objetivo
/W]_WKXY]]KSXÔX^Y¤WY]^\K\MYWYT£NS]]OWY]K]PO\\KWOX^K]
XOMO]]£\SK] ZK\K K MYX]^\_ÁY O QO\ XMSK NO _WK ZYV´^SMK NO
]OQ_\KXKOWKWLSOXÔ6SX_b>YNY]]ÁY]YPâK\O] KLO\^Y] O MYLO\^Y]
ZOVK1:61OXO\KV:_LVSM6SMOX]ONK18?K]]SWMYWYKNYM_WOX^KÁY
NS]ZYX´ÒV:K\K^KX^YXY]]YMKWSXRYXÁYMYWOK\£NK]OQ_\KXKVYMKV
1
RFC é o acrônimo de Request for Comments, um enorme conjunto de documentos organizados pela INTERNIC reunindo

Y_]OTK_WK\ONOSXÔ\XK]OQ_XNYKXYWOXMVK^_\KNY=SÔ=OM_\S^c
2KXNLYYU OW NS\OÁY § ]OQ_\KXK Ob^\KXO^ \ONO ObÔ\XK
-YX^\K\SKWOXÔ S\OWY] NK ]OQ_\KXK ObÔ\XK ZK]]KXNY YL`SKWOXÔ
ZOVK][_O]^ÁYNO]OQ_\KXKXK\ONOSX^\KXO^ZYS]YPS\OaKVV^KWL¤W
YM_ZK]OMYWO]ÔZYX^YZK\KK]OQ_\KXKSXÔ\XK
informações sobre TCP/IP e outros protocolos, assim como Redes, segurança, correio eletrônico, etc.

2 0 Firewall: duas soluções em ambiente Linux
2.1 Uma palavra inicial sobre firewalls
0S\OaKVV ¤ _WK ZK\ONO [_O ]OZK\K ]_K SX^\KXO^ NY W_XNY ObÔ\SY\
S]^Y ¤ K SXÔ\XO^ 7K] ^KWL¤W _W PS\OaKVV ZYNO ]O\ _]KNY
OPSMSOXÔWOXÔX_WKSX^\KXO^[_OXÁYMROQKKÔ\KMO]]Y§SXÔ\XO^
:YS] ZYNO PSV^\K\ ZKMYÔ] [_O ZK]]KW NO _WK W£[_SXK K Y_^\K X_WK
SX^\KXO^
Definindo:
Um firewall é todo sistema conjunto de hardware e software que
é elaborado para proteger uma intranet de usuários
potencialmente perigosos, visto que não autorizados.
/X^\O^KX^Y K MKZKMSNKNO OPO^S`K NO MYX^\YVO NO _W PS\OaKVV ¤

SWZVOWOX^KNK KY Z¡\]O OX^\O K \ONO VYMKV O K SXÔ\XO^ NO PY\WK K
O`S^K\ [_O Y W_XNY ÔXRK KMO]]Y K NKNY] ZK\^SM_VK\O] 7K] XÁY
O]^KWY] PKMO K PKMO MYW KVQY K]]SW MYWY _W Z\YQ\KWK P£MSV O
]SWZVO] NO ObOM_^K\ :YS] MYWY T£ `SWY] _W PS\OaKVV ÔW
SX[_O]^SYXKÒVWOXÔ_WKXK^_\OdKKL\KXQOXÔ
8ÁY RKÒ\SK Z\YLVOWK] NO ]OQ_\KXK ]O `YM MYWY [_O S]YVK]]O ]O_]
MYWZ_^KNY\O] Y_ ]_K \ONO NY W_XNY 7K] _WK SX^\KXO^ ¤
P_XNKWOX^KVWOXÔ _WK \ONO SXÔ\XK [_O _]K ÔMXYVYQSK] AY\VN ASNO
AOL ZK\K ZK\^SVRK\ ^K\OPK] O SXPY\WKÉO] OX^\O NOZK\^KWOX^Y] OY_
VYMKS]\OWY^Y]8ÁYZY]]YSX]^KVK\_W]O\`SNY\+ZKMROX_WKW£[_SXK
O POMRK\ Y KMO]]Y K ]O_] NKNY] OW WO_ PS\OaKVV ^ÁY ZY_MY ZY]]Y
POMRK\YKMO]]YK^YNY]Y]MYWZ_^KNY\O][_OPY\WKWK\ONOW_XNSKV
2
Definiçao retirada de SCO OpenServer© Internet Services (v.5.0.4 may 1997), p. 11.

/]ÔO][_OWKWY]^\KKSWZVOWOX^KÁY]SWZVO]NO_WPS\OaKVV$
>YNK`SK NOÒ\´KWY] XY^K\ OW XY]]Y O][_OWK [_O XY]]K \ONO ÔW [_O
ZY]]_S\_WRY]^_WLK]^SYXRY]^[_OVSQKNYKY\YÔKNY\XY]ZÉOOW
MYX^K^YMYWYW_XNY»LK]^KXÔMYX]OX]_KV[_O^KVW£[_SXKNOÒÔ\
]O_] ]O\`SY] NO]VSQKNY] Y W´XSWY NO ZY\^K] NOÒW O]^K\ K^S`K]
:K\K^KX^YYKV_XYNOÒ]OQ_S\K]Y\SOX^KÉO]L£]SMK]ZK\KNO]VSQK\
]O\`SY] XY ]O_ SXO^N 9 6SX_b NK <ON 2K^ ZY]]_S _WK PO\\KWOX^K NO
]O^_ZOWWYNYÔb^Y:YNO]O_]£VKMYWY_WKSXÔ\PKMO`KVSY]KZK\K
NO]VSQK\]O\`SY]MYWYP^Z^P^ZÔVXOÔ^M@YM ZYNOMRKW£VKXY
MYX]YVO K ZK\^S\ NY MYWKXNY ]O^_Z Y_ MRKWK\ NS\O^KWOXÔ ZOVY
MYWKXNYXO^]c]`ZYS]KPO\\KWOX^K]O^_Z¤KZOXK]_WKSXÔ\PKMOZK\K
NSÒ\]Y] Y_^\Y] Z\YQ\KWK] NO MYXPSQ_\KÁY 3Q_KVWOXÔ XÁY ]O PKd
XOMO]]£\SYKSX]^KVKÁYNY]S]ÔWKQ\£PSMYBP\OO9RY]^\O]ZYX]£ÒV
ZOVY PS\OaKVV NO XY]]K \ONO NOÒ ]O\ _WK W£[_SXK OXb_^K MYW K
Z\SY\SNKNO¥L`SKNOM_WZ\S\K]P_XÉO]NOPS\OaKVV
2.2 Firewalls e acesso remoto: o Secure Shell

:K\K Y KMO]]Y \OWY^Y KY XY]]Y PS\OaKVV NOÒWY] _]K\ Y ]YPâK\O ==2
=OM_\O =ROVV ]]R$ R^^Z$aaa]]RY\Q O XÁY ÔVXO^ Y_ \]R Y_
\VYQSX WO]WY ZY\[_O T£ ^\K^KWY] NO NO]VSQ£VY] 9 ]]R ¤ _W ZKMYÔ
MYWZVO^Y ZK\K VYQSX \OWY^Y [_O ÔW K MKZKMSNKNO NO M\SZ^YQ\KPK\
_^SVSdKXNY]ONKK_ÔX^SMKÁYPY\Ô<=+KMYW_XSMKÁYOX^\O\ONO]O
RY]^] XÁYMYXPS£ÒS] +]]SW ]OXNY ^YNK] K] MYW_XSMKÉO] ]ÁY

M\SZ^YQ\KPKNK] + <=+ ¤ _]KNK ZK\K _W SXÔ\MWLSY NO MRKÒ] X_W

O][_OWKNOMRKÒ]Z¦LVSMK]OZ\S`KNK]O_WW¤^YNYNOM\SZ^YQ\KPSK
3./+ ,VYaPS]R O^M ¤ _]KNY ^KWL¤W ZK\K M\SZ^YQ\KPK\ K ]O]]ÁY
\OWY^K K ]O\ KLO\^K 9 [_O ¤ SWZY\^KXÔ XY ]]R ¤ [_O Y ]YPâK\O
NS]ZK\K K M\SZ^YQ\KPSK KXÔ] NY Z\YMO]]Y NO K_ÔX^SMKÁY Y_ ]OTK
KXÔ]NKMROMKQOWNK]]OXRK]:Y\^KX^YXOXR_WK]OXRK¤OX`SKNKZOVK
\ONOOWKLO\^Y]OWM\SZ^YQ\KPSK
+WKSY\ZK\ÔNK]NS]^\SL_SÉO]K^_KS]NY6SX_bT£ÒWMYWKÒ\]ÁY
!NO]ÔZ\YQ\KWKK¦V^SWKÒ\]ÁY¤KMRKWKNKNO]]R
=O MYX]OQ_S\ Y ]]R K^\K`¤] NO _W ZKMYÔ <:7 LK]^K SX]^KV£VY MYW Y
MYWKXNY\ZWS`R/VOSX]^KVK\£Y]]OQ_SXÔ]K\[_S`Y]$
$UTXLYRV 'HVFULomR
VVKG 'DHPRQ TXH URGD QD PiTXLQDVHUYLGRU
HVSHUD R SHGLGR GR FOLHQWH VVK DXWHQWLFD D
FRQH[mR H LQLFLD D VHVVmR
VVKRXVORJLQ &OLHQWH SURJUDPD XVDGR SDUD ORJLQ H H[HFXomR

GH RXWURV FRPDQGRV
VFS 8VDGR SDUD FRSLDU DUTXLYRV GH XP FRPSXWDGRU

SDUD RXWUR HP VHJXUDQoD
VVKNH\JHQ 8VDGR SDUD FULDU FKDYHV 56$
VVKDJHQW $JHQWH SDUD D DXWHQWLFDomR GDV FKDYHV
VVKDGG 8VDGR SDUD UHJLVWUDU QRYDV FKDYHV
PDNHVVKNQRZQKRVWV 6FULSW SHUO XVDGR SDUD FULDU R DUTXLYR

HWFVVKBNQRZQBKRVWV D VHU XVDGR SHOR '16
<OKVSdKNKKSX]^KVKÁYMYW bS^Y`KWY]QO\KWY]OX^ÁY_WKMRKÒ<=+
ZK\KY_]_£\SY\YY^X_WRY]^MRKWKNYKVZRK_]KXNYYMYWKXNYNO]M\S^Y
KMSWK]]RUOcQOX/XMYX^\K\´KWY]ZY\ObOWZVYK]OQ_SXÔ]KŃK$
>URRW#DOSKD @ VVKNH\JHQ

,QLWLDOL]LQJ UDQGRP QXPEHU JHQHUDWRU
*HQHUDWLQJ S GLVWDQFH
*HQHUDWLQJ T GLVWDQFH
&RPSXWLQJ WKH NH\V
7HVWLQJ WKH NH\V
.H\ JHQHUDWLRQ FRPSOHWH
(QWHU ILOH LQ ZKLFK WR VDYH WKH NH\ URRWVVKLGHQWLW\
(QWHU SDVVSKUDVH HQWUH FRP D VHQKD QDGD VHUi HFRDGR
3
A autenticação RSA é baseada numa chave pública de criptografia. Uma chave para criptografar e a outra para
descriptografar. A chave pública é usada para criptografar, e a chave para descriptografar por sua vez é privada, mas
jamais poderemos derivar esta chave de descriptografar da outra.

(QWHU WKH VDPH SDVVSKUDVH DJDLQ LGHP

<RXU LGHQWLILFDWLRQ KDV EHHQ VDYHG LQ URRWVVKLGHQWLW\
<RXU SXEOLF NH\ LV

URRW#FLSVJDRUJEU
<RXU SXEOLF NH\ KDV EHHQ VDYHG LQ URRWVVKLGHQWLW\SXE
.OZYS] NO QO\K\WY] XY]]K] MRKÒ] K Z¦LVSMK O K Z\S`KNK O O]^K]
]O\OW Q\K`KNK] XY NS\O^¥\SY NO XY]]K O]MYVRK K[_S KMOS^KWY] K
WOVRY\YZÁYKNOPK_V^NY]]RUOcQOX`KWY]ÔX^K\KL\S\_WK]O]]ÁY
]OQ_\K 7K] KXÔ] ÔWY] NO MK\\OQK\ Y Z\YQ\KWK ]O\`SNY\ NY ]]R Y
]]RN /bOM_^K\OWY] ]]RN WKX_KVWOXÔ ZK\K ^KX^Y Y KV_XY NOÒ
NSQS^K\$ O^M\MNSXS^N]]RN ¤ MYW O]]O ]M\SZ^ [_O Y <ON 2K^
6SX_b ]KLSNKWOXÔ MK\\OQK OW ^YNK SXSMSKVSdKÁY Y NKOWYX ]OW
ZY\^KX^Y K XOMO]]SNKNO NO _WK ObOM_ÁY WKX_KV .OZYS] KV_XY NOÒ
Ò\SPSMK\MYWKPO\\KWOX^KXO^]c]`NY<ON2K^]OY]]RNO]^£WK\MKNY
ZK\K ObOM_ÁY K_^YW£^SMK .OÒ ]O Ô\ KÔXÁY ZK\K ^KV NO^KVRO
ZY\[_O ]O Y ]]R Y MVSOXÔ XÁY OXMYX^\K\ Y ]]RN \YNKXNY OVO
YPO\OMO K ZY]]SLSVSNKNO NO _WK ]O]]ÁY XÁY]OQ_\K `SK \]R -YWY XY
ObOWZVYKLKSbY$
>URRW#EHWD URRW@ VVK DOSKD

6HFXUH FRQQHFWLRQ WR DOSKD UHIXVHG UHYHUWLQJ WR LQVHFXUH PHWKRG
8VLQJ UVK :$51,1* &RQQHFWLRQ ZLOO QRW EH HQFU\SWHG
HQFU\SWHG Õ
3DVVZRUG
+]]SW MO\^Y] [_O Y ]]RN O]^£ K^S`Y XY RY]^ KVZRK X_WK Y_^\K
W£[_SXK[_OMRKWKWY]LO^KMK\\OQKWY]YMVSOXÔ]]RZK\KMYXOM^K\MYW
YRY]^KVZRKÒTKWY]$
>URRW#EHWD @ VVK DOSKDFLSVJDRUJEU

+RVW NH\ QRW IRXQG IURP WKH OLVW RI NQRZQ KRVWV
$UH \RX VXUH \RX ZDQW WR FRQWLQXH FRQQHFWLQJ \HVQR" <HV
+RVW
EHWDFLSVJDRUJEU
DGGHG WR WKH OLVW RI NQRZQ KRVWV
&UHDWLQJ UDQGRP VHHG ILOH aVVKUDQGRPBVHHG 7KLV PD\ WDNH D ZKLOH
URRW#DOSKDFLSVJDRUJEU
V SDVVZRUG >HQWUD FRP VHQKD QDGD p HFRDGR@
/DVW ORJLQ IURP 6DW -DQ IURP DOSKD
>URRW#DOSKD URRW@
@KWY]OXÔXNO\K]WOX]KQOX]NKÔVK;_KXNYY]O\`SNY\]]RNXYRY]^
KVZRK \OMOLO_ K ]YVSMS^KÁY OVO XY] KNÒ\^S_ XÁY Ô\ OXMYX^\KNY K
RY]^ UOc NK VS]^K NO RY]^] MYXROMSNY] KSXNK K]]SW KMOS^KWY]

MYX^SX_K\KMYXObÁYOVOZÉOKW£[_SXKLO^KXKVS]^KOMYX^SX_KMYW
K K_ÔX^SMKÁY NOZYS] [_O OVK ¤ ObOM_^KNK MYW bS^Y \OMOLOWY] Y
Ô\WSXKV`S\^_KV=O\OKVSdK\WY]YVYQY_ÔXY`KWOXÔOX^\K\MYW_W
ZONSNYNO]O]]ÁY]]RYNKOWYXV YK\[_S`Yh]]R\KXNYXI]OONOXY]
ZO\WSÔK]O]]ÁY]OQ_\KOKK_ÔX^SMKÁYZKN\ÁYNY]S]ÔWK:Y\¤WY
KV_XYNOÒO]MYVRO\OX^\OO]ÔW¤^YNYYSWZY\^K\]_KMRKÒZ¦LVSMK
K\WKdOXKNK XY K\[_S`Y SNOX^S^cZ_L ZK\K K W£[_SXK \OWY^K 3]]Y
ZY]]SLSVS^K\£KYZ\YQ\KWK_]K\KK_ÔX^SMKÁYLK]OKNKOW<=+-YWY
XY]]K W£[_SXK RKLSVS^KNK ZK\K PS\OaKVV XÁY XY] ZY]]SLSVS^K
^\KX]PO\ XMSKNOK\[_S`YP^Z80=O^M_]K\OWY]YÒVRYNS][_OÔ
_]KXNY _W Z\YQ\KWK NK] PO\\KWOX^K] W^YYV] Y WMYZc -YVY[_O _W
NS][_OÔ XK _XSNKNO XK O NSQSÔ$ WMYZc h]]RZ_L K$ -YW S]]Y
MYZSK\OWY] ZK\K Y NS\O^¥\SY \OWY^Y h]]R XY]]K MRKÒ Z¦LVSMK
KÔXÁY$ ]¥ VO`KWY] XY]]K MRKÒ Z¦LVSMK + MRKÒ Z\S`KNK XÁY NOÒ
]O\ NS`_VQKNK WK] KQY\K MYW _W XY`Y XYWO K ]O\ _^SVSdKNY XK]
MYXObÉO] K ]KLO\ K_^RY\SdONIUOc] >KV K\[_S`Y MY\\O]ZYXNO KY
MYXÒXMSYXKV K\[_S`Y \RY]^]% OVO ZY]]_S _WK MRKÒ ZY\ VSXRK
]_ZY\^KXNY ZY\^KX^Y NSÒ\]K] MRKÒ] Z¦LVSMK] NO NSPO\OXÔ] _]_£\SY]
O RY]^] +ÔXÁY ZK\K XÁY ^\_XMK\ Y K\[_S`Y ZYS] K] MRKÒ] ]ÁY
VYXQK] O NOÒW OX^\K\ X_WK ¦XSMK VSXRK 6YQY NOZYS] NS]]Y Y
_]_£\SYZYNOObOM_^K\YVYQSX]OWKK_ÔX^SMKÁYZKN\ÁYWK]KZOXK]
NKXNYYZK]]ZR\K]ONKMRKÒ<=+[_O¤]YL\OWKXOS\KWKS]]OQ_\Y
-YWKM\SKÁYNYK_^RY\SdONIUOc][_KXNYKL\S\WY]KXY`K]O]]ÁYMYW
YMVSOXÔ]]RÒ\OWY]Z\SWOS\KWOXÔOX^ÁY$
>URRW#DOSKD@VVK EHWD
+RVW NH\ QRW IRXQG IURP WKH OLVW RI NQRZQ KRVWV
$UH \RX VXUH \RX ZDQW WR FRQWLQXH FRQQHFWLQJ \HVQR" <HV
+RVW
EHWD
DGGHG WR WKH OLVW RI NQRZQ KRVWV
(QWHU WKH SDVVSKUDVH IRU 56$ NH\
QDGD HFRD
/DVW ORJLQ 6XQ -DQ RQ WW\
<RX KDYH PDLO
>URRW#EHWD URRW@
8_WKZY]Ô\SY\MYXObÁYOXMYX^\K\OWY]Y]OQ_SXÔMOX£\SY$

>URRW#DOSKD @VVK EHWD

(QWHU WKH SDVVSKUDVH IRU 56$ NH\
QDGD HFRD
/DVW ORJLQ 6XQ -DQ IURP DOSKD
<RX KDYH PDLO
>URRW#EHWD URRW@
+]]SWYKV_XYOX^\KMYWK]_KZK]]ZR\K]OK]MRKÒ]]ÁYMROMKNK]OK
]O]]ÁY]OQ_\KM\SZ^YQ\KPKNK¤ZY]^KOWKÁY
9_^\Y W¤\S^Y SXNS]M_^´ÒV NY =OM_\O =ROVV ¤ Y PK^Y NY MVSOXÔ ZK\K
KMO]]Y \OWY^Y T£ O]^K\ ZY\^KNY ZK\K NSÒ\]K] ZVK^KPY\WK] ?83B
9=ASXO^MY[_O¤LK]^KXÔSWZY\^KXÔ[_KXNYÔWY]\ONO]
R´L\SNK]@S]SÔY]SÔP^Z$P^ZM]R_^PSZ_L]]RZK\K_WK`S]ÁY
NO Ò\]ÉO] NS]ZYX´ÒS] :YNOWY] ]_QO\S\ KY KV_XY ZO][_S]K\ K]
]OQ_SXÔ]Ò\]ÉO]XÁYMYWO\MSKS]ZK\KASXO9=\O]ZOM^S`KWOXÔ$
Âhttp://www.chiark.greenend.org.uk/~sgtatham/putty/ (PuTTY é uma versão livre para telnet e SSH).

R^^Z$NYWOaOOQ_SYaKON_Z_LNYWO]^SM]Y]ZY\^]]]R!McQaSXL^K\Ld
@O\]ÁY MVSOXÔ O ]O\`SNY\ ==2 NOX^\Y NY Z\YTO^Y -cQX_]
ÂP^Z$P^ZM]R_^PSZ_L]]RY]]]RY]dSZ @O\]ÁY ==2 ZK\K 9= b
8O]^KÔVKÒ\OWY]_WMVSOXÔMYWZSVKNYO\YNKXNYX_WKW£[_SXK?83B
=-9 9ZOX=O\Ò\ ` R^^Z$aaa]MYMYW O KL\SXNY _WK MYXObÁY
]]RMYWMROMKQOWNKMRKÒ<=+X_WRY]^6SX_b$

2.3 Firewalls: solução Linux
8ÁYNS]M_^S\OWY]K[_SKSWZVOWOX^KÁYP´]SMKNO_WPS\OaKVV8Y]]Y¤
YLTO^S`Y¤WY]^\K\K]PO\\KWOX^K]NS]ZYX´ÒS]XY6SX_b9KV_XYÔW
[_OÔ\OWWOXÔ^KWL¤W[_OXÁYObS]Ô_WK]YV_ÁY¦XSMKOWÔ\WY]
NO PS\OaKVV @YM ÔW [_O MYXROMO\ K] PO\\KWOX^K] O OX^ÁY KNKZ^£
VK]§]XOMO]]SNKNO]O]ZOM´PSMK]NO]_K\ONOWYX^K\]_KZYV´^SMKNO
]OQ_\KXK O KNKZ^£VK K _W PS\OaKVV @YM Ô\£ _WK SX^\YN_ÁY O
NOZYS] Ô\£ [_O ZO][_S]K\ ]_K] NOWKXNK] O]ZOM´PSMK] =ÁY ^KX^Y] Y]
MOX£\SY] ZY]]´ÒS] [_O Y ÔWK ^Y\XK]O SXO]QY^£ÒV$ _WK ZO[_OXK
\ONO NYW¤]^SMY Y_ _W ZO[_OXY O]M\S^¥\SY [_O ]O MYXOM^K K 3XÔ\XO^
`SK ZZZ% _WK \ONO MYW _W \YÔKNY\ MYXOM^KNY K 3XÔ\XO^% _WK \ONO
W¤NSK MYW NYS] PS\OaKVV] O^M O^M .K\OWY] K[_S Y] MYXMOS^Y]
Z\SXMSZKS]NK]PO\\KWOX^K]]O_]MYWKXNY]YZÉO]O_^SVSdKÁY
?W PS\OaKVV ¤ SWZVOWOX^KNY XY 6SX_b OW X´ÒV NO UO\XOV ZY\ S]]Y
^YNY Y Ôb^Y ]YL\O Y ÔWK MYWOK MYW K] YZÉO] ZK\K \OMYWZSVK\ Y
UO\XOV=OWN¦`SNKZK\KÔ\WY]_WPS\OaKVVXY6SX_bXOMO]]S^KWY]NO
]_KRKLSVS^KÁYXYUO\XOV7K]S]]YXÁY]OPKdXOMO]]£\SYZYS]Y<ON
2K^ b T£ ÒW MYW Y UO\XOV ZK\K PS\OaKVVSXQ ^KX^Y [_KX^Y Y =_=/
b ZY\ ObOWZVY Y 9ZOX6SX_b NK -KVNO\K ` ZY\ ]O\ WKS]
`YV^KNYZK\K_W]S]ÔWKNO]U^YZXÁYZY]]_S_WUO\XOVMYWZSVKNYZK\K
PS\OaKVV +SXNK K]]SW ]O NO]OTK\ MROMK\ ]O ]_K] W£[_SXK] O]^ÁY
RKLSVS^KNK] ZK\K PS\OaKVV NSQSÔ$ V] Z\YMXO^SZIPaMRKSX] ]O
^KV K\[_S`Y O]^SÒ\ K´ YU ÔWY] PS\OaKVV +ZOXK] MYWY SXPY\WKÁY
VS]^KWY] KLKSbY K] YZÉO] K ]O\OW RKLSVS^KNK] O NO]KLSVS^KNK] X_W
UO\XOV\OMYWZSVKNYZK\KPS\OaKVV$
Em 'general setup':
1. turn networking support => ATIVO
Em 'networking options':
1. turn network firewalls => ATIVO
4
O Linux IPCHAINS-HOWTO por exemplo apresenta 4 diferentes cenários possíveis.

2. turn TCP/IP networking => ATIVO

3. turn IP forwarding/gatewaying => ATIVO
4. turn IP firewalling => ATIVO
5. turn IP firewall packet logging => ATIVO
6. turn IP masquerading => ATIVO
7. turn IP accounting => ATIVO
8. turn IP tunneling => DESATIVO
9. turn IP aliasing => ATIVO (pode-se optar por seu uso modular...)
10. turn IP (PC/TCP mode) => DESATIVO
11. turn IP (reverse ARP) => DESATIVO
12. turn drop source routed frames => ATIVO
Em 'network device support':

1. turn network device support => ATIVO
2. turn net driver support => ATIVO
3. turn ethernet (10/100 mbit.) => ATIVO
2.4 A filtragem de pacotes
+] SXPY\WKÉO] [_O K^\KÒ]]KW _WK \ONO ]ÁY NO]WOWL\KNK] O OX`SKNK]

XK PY\WK NO ZKMYÔ] Y_ NK^KQ\KWK] >KS] ZKMYÔ] ^ W _W PY\WK^Y [_O
SXMV_S _W MKLOKVRY O _W MY\ZY NO NKNY] 8Y MKLOKVRY NY ZKMYÔ 3:
OXMYX^\KWY]KVQ_WK]SXPY\WKÉO]^KS]MYWY$
KOXNO\OYNOY\SQOW
LOXNO\OYNONO]^SXY
:Y\MYX]OQ_SXÔ_WPSV^\YNOZKMYÔ]ZY]]_SKRKLSVSNKNONOYVR£
VY] [_KXNY OVO] ZK]]KW O K]]SW NOMSNS\ Y ]O_ NO]^SXY :YNOXNY
O]MYVRO\ ZY\ XOQK\ NOXc _W ZKMYÔ NO]MK\^KXNYY ^Y^KVWOXÔ
KMOS^K\KMMOZ^YZKMYÔNOSbKXNYYZK]]K\Y_ ZY\ PSW\OTOS^K\
\OTOM^ Y ZKMYÔ ZY\¤W \O^Y\XKXNY _WK WOX]KQOW KY OXNO\OY NO
Y\SQOW /S] K´ ^\ ] MYXMOS^Y] P_XNKWOX^KS] OW [_KV[_O\ ]YPâK\O NO
PS\OaKVV

» ZY\ O]]K] MK\KMÔ\´]^SMK] [_O _W PS\OaKVV ZYNO XY] QK\KX^S\

]OQ_\KXKOMYX^\YVOX_WK\ONOYKNWSXS]^\KNY\ZY\O`S^K\YOX`SY
NO ZKMYÔ] ZK\K PY\K NK \ONO Y_ OX^ÁY [_O ZKMYÔ NO PY\K OX^\O OW
MO\^K]ZK\Ô]NKSX^\KXO^
2.5 IPCHAINS (The Enhanced IP Firewalling Chains Software for Linux)

O Ipchains5, escrito por Rusty Russel (ipchains@rustcorp.com), tem a habilidade de filtrar os pacotes que passam pelo
kernel. Não é um software simples, mas conhecendo o seu mecanismo e seus conceitos o administrador de rede pode
escolher a política de segurança de sua rede. A versão trabalhada aqui será a 1.3.8 (ipchains-1.3.8-3.i386.rpm).
Para lidar com um pacote o kernel do Linux possui três regras principais, que o Ipchains chama de firewall chains ou
chains - não usaremos tradução para a palavra chains/chain, iremos portanto conservá-la em inglês. São elas:
IP INPUT CHAIN: quando um pacote entra ...

IP OUTPUT CHAIN: quando um pacote sai ...
IP FORWARD CHAIN: quando um pacote é roteado para
outra máquina ...
» XO]Ô ^\SZ¤ [_O ]O P_XNKWOX^K K MYX]^\_ÁY NO XY]]Y PS\OaKVV

7YX^K]OZY\^KX^YK]\OQ\K]ZK\KQO\S\O]]O]MRKSX]Z\SXMSZKS]$_W
ZKMYÔ OX^\K ZY]]Y \OM_]£VY NO ^KV OXNO\OY NO Y\SQOW KMOS^£VY
ZK\K^KVNO]^SXYWK]]OK^\KÒ]]KWO_PS\OaKVVOWNS\OÁYK^KVY_
[_KVNO]^SXY\OM_]YO^M
+] [_K^\Y YZO\KÉO] WKS] L£]SMK] O MYW_X] XY 3ZMRKSX] ]ÁY$

KM\O]MOX^K\KZZOXN_WKXY`K\OQ\KMYWKPVKQ+ObMV_S\NOVOÔ
_WK\OQ\KMYWKPVKQ.%OVS]^K\K]\OQ\K]ObS]ÔXÔ]MYWKPVKQ
6OVSWZK\PV_]RSXNS]M\SWSXKNKWOXÔ^YNK]K]\OQ\K]MYWKPVKQ
0
5
Uma questão terminológica: o aluno não deve confundir ipchains com o antigo ipfwadm: o primeiro está em
distribuições com o kernel 2.2.x e o último no kernel 2.0.x; os parâmetros são essencialmente diferentes, portanto não
servem os scripts feitos para o ipfwadm.

@OTKWY]KVQ_X]MKWSXRY]MYWY3ZMRKSX]OWKÁY»M_\SY]YXY^K\[_O
^YNK Z_LVSMKÁY OX]SXKXNY _WK VSXQ_KQOW NO Z\YQ\KWKÁY OW QO\KV
MYWOMO WY]^\KXNY MYWY QO\K\ XO]^K VSXQ_KQOW _WK P\K]O NY ^SZY
v2OVVY AY\VNv 8Y MK]Y NK] \OQ\K] NY PS\OaKVV MYWOKWY]
WY]^\KXNY MYWY SWZONS\ Y ZSXQ ZK\K K SXÔ\PKMO NO VYYZLKMU VY
Ô\´KWY]Y]OQ_SXÔ$
LSFKDLQV $ LQSXW V S LFPS M '(1<
/V_MSNKXNYY]ZK\WO^\Y_]KNY]$
+SXZ_^ÂKM\O]MOX^KWY]_WK\OQ\KZK\KKOX^\KNK
]ÂOS]YOXNO\OYNOY\SQOX]NY]ZKMYÔ]
ZÂYZ\Y^YMYVY_]KNY3-7:
T./8CÂY[_OPK\OWY]MYWYZKMYÔT_WZ^Y$K[_SXOQKWY]
+QY\K]OObOM_^KWY]_WZSXQZK\KYOXNO\OYNOVYYZLKMUS\OWY]Ò\
K ^\KNSMSYXKV WOX]KQOW NO v ZKMUO^ VY]]v + \OQ\K [_O
O]^KLOVOMOWY]NSd[_ONOÒ]OXOQK\^YNY]ZKMYÔ] 3-7: [_O MROQK\OW
NYOXNO\OY!YZK\WO^\Y./8C¤MRKWKNYÔMXSMKWOXÔNO
KV`Y (target).
@OTKWY] Y_^\Y ObOWZVY KQY\K X_WK SXÔ\PKMO NO \ONO /W XY]]Y
MOX£\SY NO]OTKWY] POMRK\ K] ZY\^K] O NY XY]]Y RY]^ KVZRK
# "ZK\KLO^K# "%OW]_WK$LO^KXÁYZYNO\£_]K\
^KS] ]O\`SY] NK W£[_SXK KVZRK /]^K] ]ÁY K] ZY\^K] ZKN\ÁY ZK\K
>OVXO^ O 0>: XY Z\Y^YMYVY >-: =OQ_XNY K V¥QSMK NK ]_SÔ NO
Z\Y^YMYVY] >-:3: XOMO]]S^KWY] KV¤W NY OXNO\OY 3: NO _W Y_^\Y
X´ÒVNOK^\SL_SÁYNOOXNO\OY][_O¤MRKWKNYZY\^KNOK
¤ OVK [_O NS\OMSYXK Y] NKNY] [_O MROQKW ZOVY OXNO\OY 3: ZK\K _W
NOÔ\WSXKNY ]O\`SY .O PY\WK [_O ZYNO]O WKXÔ\ _W X¦WO\Y NO
MYXObÉO] ]SW_V^XOK] O KY WO]WY ÔWZY ]OZK\KNK] +] ZY\^K] ]ÁY

]OZK\KNK] OW NYS] Q\_ZY] NS]^SX^Y]$ NO K ]ÁY K] ZY\^K]
Z\S`SVOQSKNK] ]ÁY _]KNK] ZY\ NKOWYX] MYXPS£ÒS] O MYW Z\S`SV¤QSY]
NO \YY^ +] \O]^KXÔ] NO K^¤ ]ÁY MRKWKNK] NO XÁY
Z\S`SVOQSKNK] O ]ÁY _]KNK] VS`\OWOXÔ :Y\ S]]Y KY WYX^K\ _W
PS\OaKVV ^YNK K KÔXÁY MYW Y] WY`SWOX^Y] NO ZY\^K] XÁY
Z\S`SVOQSKNK] +LKSbY O]^£ _WK VS]^K \O]_WSNK MYW Y] Z\SXMSZKS]
]O\`SY]]O_]ZY\^K]ZKN\ÁYOYZ\Y^YMYVYMY\\O]ZYXNOXÔ$
SERVIÇO PORTA PROTOCOLO

netstat 15 tcp
ftp 21 tcp
ssh 22 tcp/udp
telnet 23 tcp
smtp 25 tcp
whois 43 tcp
finger 79 tcp
www 80 tcp
pop-3 110 tcp/udp
https 443 tcp/udp
=OO]^SÒ\MYXP_]Y]YL\O[_KVYX¦WO\Y[_OMY\\O]ZYXNOK^KVY_[_KV
]O\`SY O ^KWL¤W NO]OTK\ _WK VS]^KQOW WKS] MYWZVO^K MYX]_VÔ Y
K\[_S`YvO^M]O\`SMO]v ¤ OVO [_O K\WKdOXK K MY\\O]ZYXN XMSK OX^\O
Y XYWO NY ]O\`SY >OVXO^ O Y X¦WO\Y NK ZY\^K O ^KWL¤W Y
Z\Y^YMYVY[_O¤_]KNY>-:
9L]O\ÒOX^ÁYXY]]YObOWZVY$
>URRW#DOSKD @ LSFKDLQV $ LQSXW V G S WFS - '(1<

>URRW#DOSKD @ LSFKDLQV $ LQSXW V G S WFS - '(1<
-YWO]]K]\OQ\K]XOQKWY]./8CKOX^\KNKNOZKMYÔ]NYOXNO\OYNO
Y\SQOW ]Y_\MO KNN\O]] v]v # " ZK\K Y OXNO\OY NO
NO]^SXY vNv # " XK] ZY\^K] O XY Z\Y^YMYVY >-:
9U]OWWOX]KQOX]NOO\\YXY]]K]\OQ\K]PY\KWKMOS^K]>OXÔKQY\K
6
Pode-se consultar também o RFC 177 para uma lista completa das portas.

KL\S\ _WK ]O]]ÁY >OVXO^ Y_ 0>: NK W£[_SXK LO^K K ÔX^K^S`K
YL`SKWOXÔ ]O\£ ]OW ]_MO]]Y K ZY\^K O]^£ POMRKNK ZK\K O]^K
W£[_SXK + PVKQ 4 O]ZOM´PSMK _W KV`Y K[_S _]KWY] ./8C% Y] Y_^\Y]
KV`Y]WKS]SWZY\^KXÔ]]ÁY+--/:></4/->O7+=;9]NYS]Z\SWOS\Y]
T£WOXMSYXKWY]KXÔ\SY\WOXÔ_WKMOS^KKOX^\KNKOY\OTOS^KZY\¤W
\O]ZYXNOXNYKYOXNO\OYNOY\SQOWT£YKV`Y7+=;]¥¤_]KNY[_KXNY
_]KWY] Y MRKSX PY\aK\N vSZMRKSX] + PY\aK\Nv NOSbK Y ZKMYÔ
ZK]]K\ZY\¤W_]KXNYK^¤MXSMKNYWK]MK\KWOX^Y
0OS^Y S]]Y `KWY] OX^\K\ Y_^\K YZÁY NY 3ZMRKSX]$ `KWY] ZONS\ _WK
VS]^KPVKQ6NOXY]]K]\OQ\K]$
>URRW#DOSKD @ LSFKDLQV /

&KDLQ LQSXW SROLF\ $&&(37
WDUJHW SURW RSW VRXUFH GHVWLQDWLRQ SRUWV
'(1< WFS EHWDFLSVJDRUJEU DOSKDFLSVJDRUJEU DQ\ ! WHOQHW
'(1< WFS EHWDFLSVJDRUJEU DOSKDFLSVJDRUJEU DQ\ ! IWS
&KDLQ IRUZDUG SROLF\ $&&(37
&KDLQ RXWSXW SROLF\ $&&(37
+ ]KŃK [_O YLÔWY] NK ÔVK ¤ W_S^Y OV_MSNK^S`K O ^KWL¤W W_S^Y

MVK\K .O SX´MSY NOÒWY] YL]O\`K\ [_O OVO ]OZK\K Y] ^\ ] MRKSX]
Z\SXMSZKS] SXZ_^ PY\aK\N O Y_^Z_^ O XY] WY]^\K [_KS] \OQ\K]
SWZVOWOX^KWY] ZK\K OVO]% YL]O\Ò [_O vSXZ_^v O vPY\aK\Nv O]^ÁY
`KdSY] ZYS] XKNK SWZVOWOX^KWY] KSXNK 9_^\Y NO^KVRO K ]O\
YL]O\`KNY$KZ\O]OXKNKObZ\O]]ÁYOX^\OZK\ XÔ]O]vZYVSMc+--/:>v
3]^Y [_O\ NSdO\ [_O K ZYV´^SMK NOPK_V^ NO XY]]Y PS\OaKVV ¤ KMOS^K\
ZKMYÔ]% Y [_O ¤ POS^Y ZOVK PVKQ : KY NSQS^K\WY] ZY\ ObOWZVY$
vSZMRKSX]:SXZ_^./8CvY_KSXNK$vSZMRKSX]:Y_^Z_^</4/->v8Y
]OQ_XNY MK]Y ]O XKNK PY\ O]ZOMSPSMKNY Y UO\XOV ZY\ ZKN\ÁY
\OTOS^K\£K]KŃKNO[_KV[_O\ZKMYÔ
=OQ_OWOWMYV_XK]K]MK\KMÔ\´]^SMK][_OO]MYVROWY]@OTKWY]$
9 KV`Y :\Y^ Y 9Z^ K] =Y_\MO .O]^SXK^SYX +] ZY\^K] 9 ]O\`SY

Z\Y^YMYVY YZÉO]
;_KV KV`Y 9 OXNO\OY 9 OXNO\OY +] ZY\^K] 9]

_]KWY] 9 Z\Y^YMYVY 8OXR_WK NO Y\SQOW NO NO]^SXY OW TYQY ]O\`SY]

[_O YZÁY [_O PYS [_O PYS 8Y ]OX^SNY ^\KN_dSNY]
O]MYVROWY] O]ZOM´PSMK ^\KN_dSNY ^\KN_dSNY NO ½ ZK\K NO
vZY\^K]v
PYS ZK\K _W ZK\K _W ZK\K ]O_
_]KNK 0;.8 0;.8 XYWO
*Fully Qualified Domain Name
@KWY]YL]O\`K\KQY\KMYWYZYNOWY]ObMV_S\K]\OQ\K][_OM\SKWY]2£
Z\SWOS\KWOXÔ _WK ]YV_ÁY NSQKWY] \KNSMKV :YNOWY] ]SWZVO]WOXÔ
KZVSMK\ Y ZK\WO^\Y vPV_]Rv S]^Y ¤ VSWZKWY] ^Y^KVWOXÔ K] N_K]
\OQ\K]O]^KLOVOMSNK]$
>URRW#DOSKD @ LSFKDLQV )

.OZYS]NYPV_]R`SWY]KXY]]KVS]^KOOVKO]^£`KdSK
/X^\O^KX^Y S]]Y XÁY ]O\SK _WK ]YV_ÁY ]O NO]OTK\WY] KZ\YÒS^K\
Y_^\K]\OQ\K]O]^KLOVOMSNK]8YXY]]YObOWZVYÔWY] N_K] \OQ\K] +
Z\SWOS\KPOMRKKZY\^K>OVXOÔT£K]OQ_XNKPOMRKKZY\^K
0>::YNOWY]NO\\_LK\KZOXK]KZ\SWOS\K\OQ\K$
>URRW#DOSKD @ LSFKDLQV ' LQSXW
/NOZYS]ZK\KXY]MO\^SPSMK\WY]NSQS^KWY]$

'(1< WFS O EHWDFLSVJDRUJEU DOSKDFLSVJDRUJEU DQ\ ! IWS
=¥XY]\O]^KOX^ÁY_WK\OQ\KKNKZY\^KNO0>:»SWZY\^KXÔK[_SY
KV_XY ZO\MOLO\ K PVKQ SXZ_^ ZYS] ¤ OVK [_O NOPSXO [_O [_O\OWY]
OVSWSXK\ K \OQ\K NY] PS\OaKVV MRKSX] NO OX^\KNK O XÁY NO ]KŃK
Y_^Z_Ô^M

?W Y_^\Y ObOWZVY /]^KLOVOMOWY] POMRK\ K MYXObÁY `SK >-: ]OW

O]ZOMSPSMK\ ZY\^K XOW OXNO\OY NO Y\SQOW KÔXÁY ZK\K O]]O]
NO^KVRO] / SQ_KVWOXÔ XOQKWY] [_KV[_O\ MYXObÁY 0>: NK W£[_SXK
KVZRK]OTKZK\K[_KVNO]^SXYPY\@OTKVOWL\KXNY$KVZRK'# "
OLO^K'# "$
>URRW#DOSKD @ LSFKDLQV $ LQSXW G S WFS - '(1<

>URRW#DOSKD @ LSFKDLQV $ RXWSXW V S WFS - '(1<
'(1< WFS DQ\ZKHUH DOSKDFLSVJDRUJEU DQ\ ! DQ\
'(1< WFS DOSKDFLSVJDRUJEU DQ\ZKHUH IWS ! DQ\
;_O\OWY] OX^ÁY VSLO\K\ K] MYXObÉO] NO 0>: NK W£[_SXK # ")
=SWZVO]$vSZMRKSX].Y_^Z_^v
-YW O]]O MOX£\SY KMSWK ]O _]K\WY] _WK PO\\KWOX^K NO `K\\ON_\K NO
ZY\^K]Ô\OWY]_W[_KN\YSXÔ\O]]KXÔ:YNOWY]_]K\YXWKZ8OâY\U
/bZVY\K^SYX >YYV KXN =OM_\S^c =MKXXO\ O]M\S^Y ZY\ 0cYNY\ Ò\]ÁY
LO^K aaaSX]OM_\OY\QXWKZ OVO XY] WY]^\K K] ZY\^K]
KLO\^K] OY_ PSV^\KNK] O WO]WY ]O XY]]K MYXObÁY PYS ^Y^KVWOXÔ
NO\\_LKNK 8O]^K ÔVK OVO XY] WY]^\K Y] ]YMUO^] [_O Y 3ZMRKSX]
PSV^\Y_OY][_ONOSbKWY]KLO\^Y]$
>URRW#DOSKD @XVUORFDOELQQPDS Y DOSKDFLSVJDRUJEU

6WDUWLQJ QPDS 9 %(7$ E\ )\RGRU I\RGRU#GKSFRP ZZZLQVHFXUHRUJQPDS
+RVW DOSKDFLSVJDRUJEU DSSHDUV WR EH XS JRRG
,QLWLDWLQJ 7&3 FRQQHFW VFDQ DJDLQVW DOSKDFLSVJDRUJEU
$GGLQJ 7&3 SRUW VWDWH 2SHQ
$GGLQJ 7&3 SRUW VWDWH 2SHQ
HFRDP WRGDV DV SRUWDV LQYHVWLJDGDV
7KH 7&3 FRQQHFW VFDQ WRRN VHFRQGV WR VFDQ SRUWV
,QWHUHVWLQJ SRUWV RQ DOSKDFLSVJDRUJEU
3RUW 6WDWH 3URWRFRO 6HUYLFH
ILOWHUHG WFS WFSPX[
ILOWHUHG WFS FRPSUHVVQHW
ILOWHUHG WFS FRPSUHVVQHW
ILOWHUHG WFS XQNQRZQ
ILOWHUHG WFS UMH
ILOWHUHG WFS HFKR
ILOWHUHG WFS GLVFDUG
ILOWHUHG WFS V\VWDW
ILOWHUHG WFS GD\WLPH

ILOWHUHG WFS QHWVWDW

ILOWHUHG WFS TRWG
ILOWHUHG WFS PVS
ILOWHUHG WFS FKDUJHQ
ILOWHUHG WFS IWSGDWD
ILOWHUHG WFS IWS
RSHQ WFS VVK
RSHQ WFS WHOQHW
RSHQ WFS VPWS
RSHQ WFS ILQJHU
RSHQ WFS KWWS
RSHQ WFS VXQUSF
RSHQ WFS DXWK
RSHQ WFS QHWELRVVVQ
RSHQ WFS KWWSV
RSHQ WFS ORJLQ
RSHQ WFS VKHOO
RSHQ WFS SULQWHU
RSHQ WFS VTXLGKWWS
1PDS UXQ FRPSOHWHG ,3 DGGUHVV KRVW XS VFDQQHG LQ VHFRQGV
+QY\K [_O OX^\KWY] MYW K \OQ\K ZK\K NO\\_LK\ K] MYXObÉO] >-: Y
]YPâK\OXY]\OVK^K$
>URRW#DOSKD @XVUORFDOELQQPDS Y DOSKDFLSVJDRUJEU

6WDUWLQJ QPDS 9 %(7$ E\ )\RGRU I\RGRU#GKSFRP ZZZLQVHFXUHRUJQPDS
+RVW DOSKDFLSVJDRUJEU DSSHDUV WR EH XS JRRG
,QLWLDWLQJ 7&3 FRQQHFW VFDQ DJDLQVW DOSKDFLSVJDRUJEU
7KH 7&3 FRQQHFW VFDQ WRRN VHFRQGV WR VFDQ SRUWV
,QWHUHVWLQJ SRUWV RQ DOSKDFLSVJDRUJEU
3RUWV VFDQQHG EXW QRW VKRZQ EHORZ DUH LQ VWDWH ILOWHUHG Õ
3RUW 6WDWH 3URWRFRO 6HUYLFH
1PDS UXQ FRPSOHWHG ,3 DGGUHVV KRVW XS VFDQQHG LQ VHFRQGV
+VSXRKNOPVKQ]NY3ZMRKSX]¤LK]^KXÔWKVO£ÒVOKZOXK]MYWO_]Y
OYNOL_QMYX]^KXÔNK]\OQ\K][_OYKNWSXS]^\KNY\SWZVOWOX^K¤[_O
]OZYNONYWSX£VK]:OVYWOXY]K^¤YUO\XOV
<OVOWL\KXNYKVQ_WK]PVKQ]`SWY][_OZYNOWY]_]K\XYZK\WO^\Y]Y_
N ^KX^Y Y 0;.8 Y_ Y OXNO\OY 3: ObZ\O]]Y X_WO\SMKWOXÔ 8K
O]ZOMSPSMKÁYNK]ZY\^K]ZYNOWY]_]K\YX¦WO\YY_YXYWONY]O\`SY$
ÔVXO^Y_]]RY_O^M:YNOWY]SQ_KVWOXÔO]ZOMSPSMK\PKSbK]
\KXQ] NO ZY\^K]$ vN # " $v Y_ ]OTK WKXOTKWY] K[_S
^YNK] K] ZY\^K] NO K^¤ SXMV_]SÒ :YNOWY] O]M\OÒ\ v]
# " $v Y_ v] QKWKMSZ]QKY\QL\ ]]Rv 9 WO]WY ]O ZK]]K
MYW Y] OXNO\OY] 3: [_O ZYNOWY] WKXOTK\ ZYNOWY] _]K\ PKSbK]

SXMV_]S`K] ZY\ ObOWZVY$ vZ ^MZ # " $v SXMV_´WY]

MYWS]]YY]3:]NObbbK^¤# "
9_^\Y\OM_\]YP_XNKWOX^KV¤YNKSXÒ\]ÁY;_KXNY_]KWY]KPVKQvv
/VKÔWY]OX^SNYXOQK^S`Y%[_KXNYY_]KWY]NOÒWY]VO\WOX^KVWOXÔ$
v^YNY b WOXY] cv +]]SW$ vZ ^MZ ] # " aaav ]SQXSPSMK$
^YNK]K]ZY\^K]>-:WOXY]K"AAA
/bOWZVY.SQS^KWY]XYMYX]YVONKW£[_SXKKVZRK$
LSFKDLQV $ LQSXW V VVK G VVK S WFS M 5(-(&7
-YW S]]Y POMRKWY] ^YNK] K] ZY\^K] >-: WK] NOSbKWY] K ZK\K Y
=OM_\O=ROVVYZO\K\=OÔX^KWY]_W>OVXO^XY]]KMYXObÁYYL`SKWOXÔ
PKVRK\£7K]Y]]RZYNOO]^KLOVOMO\]_K]O]]ÁY\OWY^K]OWZ\YLVOWK]
?WKVS]^KQOWXKW£[_SXKXY]WY]^\K$

'(1< WFS EHWDFLSVJDRUJEU DOSKDFLSVJDRUJEU VVK ! VVK
&KDLQ RXWSXW SROLF\ '(1< ×
+MYXROMSNKPVKQv6vO]MVK\OMO[_OYZ\Y^YMYVY>-:ÔWO]^K\./8C
WK] XÁY K] ZY\^K] NY ]]R YL]O\Ò K] ]O^K] :YNOWY] _]K\ Y vv
XKO]ZOMSPSMKÁYNOOXNO\OY]3:XY]Z\Y^YMYVY]ObMO^YMYWY3-7:
O XK] SXÔ\PKMO] NO \ONO :YNO\´KWY] MYXPSQ_\K\ K \OTOSÁY NO
ZKMYÔ]NO[_KV[_O\Z\Y^YMYVYWOXY]Y?.:$vZ_NZv9_KSXNK$v+
SXZ_^ Z ^MZ N # " aaa T +--/:>v% O]ZOMSPSMKWY] MYW
S]]Y[_OKMOS^KWY]KOX^\KNKNO[_KV[_O\ZKMYÔ>-:ZK\KKZY\^K"
WOXY]NKW£[_SXK# "[_OPSMKObMV_ŃK-YX^_NY$v+SXZ_^
Z ^MZ N # " aaa T +--/:>v ¤ O]]OXMSKVWOXÔ
NSPO\OXÔ +QY\K KMOS^KWY] [_KV[_O\ MYXObÁY >-: NK W£[_SXK
# "WOXY]KNKZY\^KAOL

+MSWK PSdOWY] WOXÁY K] SXÔ\PKMO] NO \ONO XOâY\U SXÔ\PKMO7 9

3ZMRKSX]ZYNOQO\S\^YNK]K]SXÔ\PKMO]NY]S]ÔWKZK\KS]]Y_]KWY]
KPVKQvSv:YNOWY]_]K\vSO^RvK]_KZ\SWOS\KZVKMKO^RO\XO^
Y_ vS ZZZv K MYXObÁY NO WYNOW `SK ZZZN ZK\K XY] KÔ\WY] OW
ObOWZVY]WKS]_]_KS];_KXNY_WKW£[_SXKNOXY]]K\ONOYL^¤WKMO]]Y
KSXÔ\XO^`SKNSKV_ZYZK\WO^\Y¤P_XNKWOX^KV=OXNY[_OZYNOWY]
WO]WY O]ZOMSPSMK\ _WK SXÔ\PKMO [_O XÁY O]^£ K^S`K Y [_O [_K]O
]OWZ\O¤YMK]YNKSXÔ\PKMOZZZ;_KXNYMYXOM^KWY]XY]]KZ\YÒNY\K
K SXÔ\PKMO ZZZ O]^£ Z\O]OXÔ Y SPMYXPSQ VS]^K ]_K Z\O]OXK
;_KXNY NO]PKdOWY] K MYXObÁY K SXÔ\PKMO NO]KZK\OMO :YNO]O ^KWL¤W
_]K\ _W M_\SXQK XK YZÁY S VKXKXNY WÁY NY ]´WLYVY vv$ O^R
NO]SQXK [_KV[_O\ SXÔ\PKMO ZY]]´ÒV O^R O^R O^M + \OQ\K
vSZMRKSX]+Y_^Z_^N# "#Z_NZSO^RT./8CvKZVSMK]O
K[_KV[_O\SXÔ\PKMOO^RO\XO^NOXY]]KW£[_SXK
/bS]Ô _WK PO\\KWOX^K NO MYXPSQ_\KÁY MRKWKNK 6SX_bMYXP /VK O]^£

Z\O]OXÔ OW [_K]O XK] NS]^\SL_SÉO] NK <ON 2K^ O OW V´XQ_K
ZY\^_Q_O]KXY-YXOM^S`K6SX_b»_WKSXÔ\PKMO Q\£PSMK [_O P_XMSYXK
NOX^\YNYBASXNYaZK\KONS^K\OQO\S\K]P_XÉO]NY]S]ÔWK]6SX_b
-YWY ^YNY \OM_\]Y 1?3 ZYNO §] ÒdO] MYXP_XNS\ PKMSVSNKNO MYW
NO]MYXROMSWOX^Y =¥ NOÒWY] XY] RKLSVS^K\ K _]K\ ^KS] PO\\KWOX^K]
ZY\^KX^Y [_KXNY ÔWY] _W MYXROMSWOX^Y MYXMOS^_KV NK[_SVY [_O `KWY]
XY] YM_ZK\ @KWY] NK\ _WK \£ZSNK YVRKNK XK SXÔ\PKMO NOX^\Y NK]
P_XÉO] NY 6SX_bMYXP ZK\K KVÔ\K\ K] \OQ\K] NY PS\OaKVV 8_WK
TKXOVK NY bÔ\W MRKWK Y Z\YQ\KWK$ vVSX_bMYXP v 8K ÔVK [_O ]_\QO
O]MYVRK v+WLSOXÔ NO \ONOv O NOZYS] K Q_SK vPS\OaKVVv >OWY]
]OQ_SXÔÔVKT£MYWYK]O[_S`KV XMSK]KZYX^KNK]$
7
Consulte a documentação sobre o tema, principalmente sobre o comando ifconfig, que configura e lista as interfaces
existentes num host.

.O]^KMKWY] Y] ^\ ] LY^ÉO] [_O \OZ\O]OX^KW Y ^\SZ¤ vSXZ_^PY\aK\N

Y_^Z_^v NO ^YNK] K] \OQ\K] NO PS\OaKVVSXQ » K[_S [_O `YM OX^\K\£
MYWK]\OQ\K]NYPS\OaKVV@KWY]ONS^K\Y]SZMRKSX]Y_^Z_^XYÔ]O
[_O M_\SY]KWOXÔ SXZ_^ PYS ^\KN_dSNY ZY\ LVY[_OSY MVS[_O XY
LY^ÁYv]KŃKvOKZK\OMO\£O]Ô[_KN\YNONS£VYQY$

-VS[_O OX^ÁY XY LY^ÁY vKNSMSYXK\v >O\OWY] Y [_KN\Y ]OQ_SXÔ [_O

ZYNO XY] Z\YZY\MSYXK\ K ZY]]SLSVSNKNO NO W¦V^SZVK] ONSÉO] NY
SZMRKSX]$
8ÁY R£ NKNY] XY`Y] XO]]K ÔVK NY 6SX_bMYXP + ¦XSMK MYS]K [_O XÁY
^YMKWY] KSXNK PYS K OX^\KNK ZK\K K XO^WK]U W£]MK\K NO \ONO [_O ¤
O]ZOMSPSMKNK KY VKNY NY OXNO\OY 3: +ÔX^K ZK\K Y] KV`Y] KMOS^K\
\OTOS^K\ O LVY[_OK\ Y ./8C >\KN_dSXNY Y] MKWZY] NK TKXOVK
Ô\´KWY]$ vSZMRKSX] + Y_^Z_^ ] # " ]
# "Z_NZSO^RT\OTOM^v/X^ÁYWK\MKWY]
Y[_KN\KNSXRYvK^S`YvOKMOS^KWY]K\OQ\K :K\K NO]K^S`£VK _]KWY]
KWO]WKSXÔ\PKMO

9_^\K YZÁY ZK\K Q\K`K\ K] \OQ\K] [_O M\SKWY] ]ÁY Y] ]M\SZ^] NO
SXSMSKVSdKÁY^\KNSMSYXKVWOXÔQ_K\NKNY]XYNS\O^¥\SY\MN>O]^K]O
ObK_]^S`KWOXÔ K] \OQ\K] ObOM_^K]O Y NOL_Q O OX^ÁY M\SKWY] _W
]M\SZ^ [_O MK\\OQK K] \OQ\K] NO PS\OaKVV XK ZK\^SNK NY 6SX_b
MYX]_VÔ]OKNYM_WOX^KÁYObS]ÔXÔZK\KYZO\K\^KS]KVÔ\KÉO]OW
]O_ ]S]ÔWK 2£ NYS] ]M\SZ^] [_O KT_NKW W_S^Y Y =c]KNWSX K WYX^K\
]O_PS\OaKVV$YSZMRKSX]]KÒOYSZMRKSX]\O]^Y\O9Z\SWOS\YQ\K`K
X_W K\[_S`Y `SK \ONS\OMSYXKWOX^Y K] \OQ\K] [_O `YM M\SY_$ ZY\
ObOWZVY vSZMRKSX]]KÒ ( hPS\OaKVVÔ]^KNYv O`SNOXÔWOXÔ `YM
ZYNO _]K\ Y XYWO [_O NO]OTK\ 4£ Y SZMRKSX]\O]^Y\O \O]^K_\K K]
\OQ\K] Q\K`KNK] ZOVY SZMRKSX]]KÒ$ vSZMRKSX]\O]^Y\O & hPS\OaKVV
Ô]^KNYv :K\K ObOM_^£VY] ¤ XOMO]]£\SY Y] Z\S`SV¤QSY] NO _]_£\SY
\YY^9_^\Y\OM_\]YW_S^Y¦^SV¤KMKZKMSNKNONY3ZMRKSX]NOKQ\_ZK\
`£\SK] \OQ\K] X_W MRKSX -YWY `SWY] Y Z\YQ\KWK ÔW ^\ ] MRKSX]
L£]SMY] MRKWKNY] L_SV^SX MRKSX] O]^ÁY OWL_^SNY] XY Z\YQ\KWK ]O
K]]SWZYNOWY]^\KN_dS\+PVKQ_]KNK¤v8v.SQS^KWY]$
>URRW#DOSKD @ LSFKDLQV 1 QDRXGS

>URRW#DOSKD @ LSFKDLQV $ LQSXW L HWK M QDRXGS
>URRW#DOSKD @ LSFKDLQV $ QDRXGS S XGS V M '(1<
>URRW#DOSKD @ LSFKDLQV $ QDRXGS S XGS V M 5(-(&7 HWF
HWF
+]]SWKQ\_ZKWY]]YLYXYWOvXKY_NZv_WMYXT_X^YNO\OQ\K]:YNOWY]
MYWYSZMRKSX]]KÒMYWY`SWY]Q\K`£VK]OOXPSW\O]^K_\£VK]
/XMO\\KXNY @KWY] KXKVS]K\ _W MOX£\SY MV£]]SMY OW \ONO] W¤NSK]

W_S^Y Z\O]OXÔ XY] NSK] K^_KS] >OXRK OW WOXÔ _WK SX^\KXO^ MYW _W
]O\`SNY\ YPO\OMOXNY `£\SY] ]O\`SY] ^´ZSMY] AOL 0>: O^M
MYXOM^KNY] K _WK W£[_SXK PS\OaKVV 6SX_b O O]Ô ZY\ ]_K Òd K _W
\YÔKNY\ MYW _WK VSXRK NONSMKNK 9L]O\Ò Y] 3:] XK XY]]K
\OZ\O]OX^KÁY$

ROTEADOR - 200.255.210.0 => FIREWALL - 200.255.210.1

¦
SERVIDOR Linux {[eth0] 200.255.210.2
{[eth1] 172.16.0.0
¦

INTRANET
{ 192.168.0.1, 192.168.0.2 , etc.}
@OTKWY]K]MYXPSQ_\KÉO]$
No Firewall...
Desligamos os serviços desnecessários, deixando o SSH para conexão remota com
o servidor somente. E vamos proteger nossa intranet...
ipchains -A input -p tcp -s 172.16.0.0 -j DENY

ipchains -A input -p tcp -s 192.168.0.1/10 -j DENY
ipchains -A input -p tcp -s ! 200.255.210.2 ssh -j DENY

No Servidor...
Como nosso servidor irá ter serviços da Internet públicos precisamos liberá-
los...
ipchains -A input -p tcp -s 0.0.0.0/0 -d 255.210.02 www -j ACCEPT

ipchains -A input -p tcp -s 0.0.0.0/0- -d 255.210.02 ftp -j ACCEPT
Inclua aqui todos
os serviços que serão oferecidos...
ipchains -A input -p tcp -s 192.168.0.1/10 -j DENY

(Fechando nossa intranet...)
ipchains -A input -p tcp -i lo -j ACCEPT
(Abrindo interface 'lo'...)
ipchains -P forward DENY
ipchains -A forward -s 192.168.0.1/10 -d 200.255.210.2 -j MASQ
(Usando a técnica do mascaramento de IPs...)
-Ou seja: qualquer faixa de IPs...
?WKZKVK`\K]YL\OY^¥ZSMYNOWK]MK\KWOX^YNO3:]3:WK][_O\KNSXQ
+Y MYXPSQ_\K\WY] Y 3ZMRKSX] ZK\K _]K\ Y KV`Y 7+=; MYW K PVKQ vT
7+=;v ZY]]SLSVS^KWY] [_O _W Y_ WKS] OXNO\OY] 3:] PKV]Y] Y_
Z\S`K^S`Y]ZY]]KW]O\_]KNY]XKOb^\KXO^8YXY]]YObOWZVY^YNY]Y]
OXNO\OY] NO XY]]K SX^\KXO^ KZK\OMOW _]KXNY Y 3: NY ]O\`SNY\
:K\K ^KX^Y XÁY ]O O][_OK NO MYXPSQ_\K\ Y K\[_S`Y
O^M]c]MYXPSQ KNSMSYXKXNY vPY\aK\NISZ` ' cO]v =O `YM XÁY ONS^K\
YK\[_S`YÔ\£[_OKMSYXK\Y3:PY\aK\NSXQWKX_KVWOXÔ/bOWZVY]O
ÔX^K\ OPO^S`K\ Y 3: MRKSX] PY\aK\N ]OW K VSXRK KM\O]MSNK Ô\OS Y
]OQ_SXÔOWWSXRKÔVK$
>URRW#DOSKD @ LSFKDLQV $ IRUZDUG S WFS V G M $&&(37

:DUQLQJ \RX PXVW HQDEOH ,3 IRUZDUGLQJ IRU SDFNHWV WR EH IRUZDUGHG DW DOO
8VH
HFKR ! SURFV\VQHWLSYLSBIRUZDUG
Õ
>URRW#DOSKD @
Basta seguir a orientação (observe a seta). Este comando irá ativar o IP forwarding. E, então, os
ZKMYÔ] ZYNO\ÁY ZK]]K\ K^\K`¤] NY RY]^ KVZRK ZK\K Y NO]^SXY
NO]OTKNY/]^K]^¤MXSMK]^Y\XKW]OZYNO\Y]K][_KXNYO]^KLOVOMSNK]OW
MYXT_X^YMYWK]\Y^K]NO\ONOQKÔaKc]O^M:Y\¤W]ÁY^¥ZSMY][_O
PYQOWNYO]MYZYNO]ÔNYM_WOX^Y
+LKSbY_WKVS]^KNK]YZÉO]NY]YPâK\O3ZMRKSX]:K\K_WKVS]^KQOW
MYWZVO^K_]OYv3:-RKSX];_SMU<OPO\OXMOvNO=,\YX]YXPOS^YOW
:Y]^=M\SZ^ O [_O ZYNO ]O\ ^\KdSNY NK Z£QSXK AOL YPSMSKV OW
R^^Z$aaaKNOVKSNOXO^K_h\_]^MY\ZVSX_bSZMRKSX]
8VR LSFKDLQV >$'&@ FKDLQ UHJUDHVSHFLILFDGD >RSo}HV@

LSFKDLQV >5,@ FKDLQ QGDUHJUD UHJUDHVSHFLILFDGD >RSo}HV@
LSFKDLQV ' FKDLQ QGDUHJUD >RSo}HV@
LSFKDLQV >/)=1;@ >FKDLQ@ >RSo}HV@
LSFKDLQV 3 FKDLQ DOYR >RSo}HV@
LSFKDLQV 0 > / _ 6 @ >RSo}HV@
LSFKDLQV K >LFPS@ PRVWUD LQIRUPDomR GH DMXGD RX OLVWD ,&03
&RPDQGRV
3HUPLWHVH D IRUPD ORQJD RX FXUWD
DGG $ FKDLQ $FUHVFHQWD FKDLQ
GHOHWH ' FKDLQ ([FOXL UHJUD
GHOHWH ' FKDLQ QGDUHJUD
H[FOXL UHJUD QGDUHJUD SULPHLUD GR FKDLQ
LQVHUW , FKDLQ >QGDUHJUD@
,QVHUH QR FKDLQ FRPR QGDUHJUD SDGUmR SULPHLUR
UHSODFH 5 FKDLQ QGDUHJUD
6XEVWLWXL UHJUD QGDUHJUD SULPHLUD QR FKDLQ
OLVW / >FKDLQ@ /LVWD UHEUDV QXP FKDLQ RX WRGRV RV FKDLQV
IOXVK ) >FKDLQ@ ([FOXL WRGDV UHJUDV QR FKDLQ RU WRGRV RV FKDLQV
]HUR = >FKDLQ@ =HUD RV FKDLQV
FKHFN & FKDLQ 7HVWD XP SDFRWH QXP FKDLQ
QHZ 1 FKDLQ &ULD XP QRYR
XVHUGHILQHG FKDLQ
GHOHWHFKDLQ
; FKDLQ ([FOXL XP
XVHUGHILQHG FKDLQ
SROLF\ 3 FKDLQ DOYR

0XGD D SROtWLFD QXP FKDLQ SDUD WDO DOYR
PDVTXHUDGH 0 / /LVWD DV FRQH[}HV PDVFDUDGDV DWXDLV
VHW 0 6 WFS WFSILQ XGS
3}H YDORUHV GH
WLPHRXW
SDUD PDVFDUDPHQWR
2So}HV
ELGLUHFWLRQDO E LQVHUH GXDV UHJUDV XPD FRP V G LQYHUWLGR
SURWR S >@ SURWR SURWRFROR SHOR Q RU QRPH H[ CWFS
VRXUFH V >@ HQGHUHoR>PDVF@ >@ >SRUWD>SRUWD@@

RULJHP HVSHFLILFDomR
VRXUFHSRUW >@ >SRUWD>SRUWD@@
RULJHP SRUWD HVSHFLILFDomR
GHVWLQDWLRQ G >@ HQGHUHoR>PDVF@ >@ >SRUWD>SRUWD@@
GHVWLQR HVSHFLILFDomR
GHVWLQDWLRQSRUW >@ >SRUWD>SRUWD@@
GHVWLQR SRUWD HVSHFLILFDomR
LFPSW\SH >@ WLSR HVSHFLILFD WLSR GH ,&03

LQWHUIDFH L >@ QRPH>@

QRPH GD LQWHUIDFH GH UHGH >@ SDUD FXULQJD
MXPS M DOYR >SRUWD@
DOYR SDUD D UHJUD >SRUWD@ SDUD 5(',5(&7
PDUN P >@PDUN Q SDUD
PDUN
QR SDFRWH FRUUHVSRQGHQWH
QXPHULF Q VDtGD QXPHULFD GH HQGHUHoRV H SRUWDV
ORJ O KDELOLWD UHJLVWUR ORJ QR NHUQHO
RXWSXW R >WDPDQKRPD[@ VDtGD GH SDFRWH SDUD GLVSRVLWLYR
QHWOLQN
726 W H [RU H[RU PDVFiUDV SDUD 726

YHUERVH Y PRGR
YHUERVH
H[DFW [ H[SDQGH Q~PHURV PRVWUD YDORUHV H[DWRV

>@ IUDJPHQW I FRPELQD VRPHQWH R VHJXQGR RX PDLV IUDJPHQWRV
>@ V\Q \ FRPELQD SDFRWHV 7&3 VRPHQWH TXDQGR FRQILJXUD
6<1
>@ YHUVLRQ 9 PRVWUD YHUVmR
2.6 The SINUS Firewall - a TCP/IP packet filter for Linux

@O\OWY] KQY\K _WK Y_^\K ]YV_ÁY NO QO\OXMSKWOX^Y NO PS\OaKVV OW
KWLSOXÔ6SX_b8ÁYPK\OWY]MYWZK\KÉO]OX^\OY3ZMRKSX]OY=38?=
9Z\SWOS\YT£_WZ\YN_^YZ\YX^YZK\KP_XMSYXK\Y]OQ_XNY_WZ\YN_^Y
OW KWZVY NO]OX`YV`SWOX^Y :OVY WOXY] K Ò\]ÁY [_O PYS
NO]OX`YV`SNK ZK\K Y UO\XOV b NY 6SX_b" 9 =38?= 0S\OaKVV ]P
0S\OaKVV¤_WZ\YTO^YNK?XSÒ\]SNKNONOD_\S[_OMYWYMYXM_\]YNK
=A3>-2 NK >OVOU_\] :Kc]O\` +1 O NK />2 D®\SMR NO]OX`YV`SNY ZY\
<YLO\^ 7_MR]OV <YVKXN =MRWSN 3XPY\WKÉO] ]YL\O Y Z\YTO^Y O
NYaXVYKNNYZ\YQ\KWKO]^ÁYOW$
http://www.ifi.unizh.ch/ikm/SINUS/firewall.html
ftp://ftp.ifi.unizh.ch/pub/security/firewall
9] NO]OX`YVÒNY\O] KNÒ\ÔW NY O]^KNY NO NO]OX`YV`SWOX^Y NY
]YPâK\O :Y\^KX^Y OVO XÁY ]O\ _]KNY KSXNK ZK\K K ]OQ_\KXK NO
\ONO] MYW NKNY] M\´^SMY] +NÒ\ÔW KSXNK$ _]OY ZK\K KZ\OXNSdKNY O
]O`YM XÁYÔWXOXR_WPS\OaKVVY_XÁYMYXPSKXY[_OÔW
1
Há uma versão estável para versões de kernel mais antigos.
9]K]ZOM^Y]ZY]S^S`Y]NYZ\YQ\KWKO]^ÁYXY]O_WYNYNOK^_KÁY/VO
^\KLKVRK MYW _W K\[_S`Y NO MYXPSQ_\KÁY
vO^MPS\OaKVVNPS\OaKVVMYXPv%KYMK\\OQK\OVOV K]MYXPSQ_\KÉO]
KÓ]^YMKNK]2£KSXNKMYWYZKMYÔ ]SPS^K\Qd _W ]O\`SNY\
Y ]YPâK\O ZK\K PS\OaKVV Z\YZ\SKWOXÔ NS^Y O _W MVSOXÔ O]M\S^Y
8
Há uma versão estável para versões de kernel mais antigos.

OW 4K`K _WK SXÔ\PKMO ZK\K PKMSVS^K\ K ONSÁY NY PS\OaKVVMYXP

MRKWKNY 0S\OaKVV -YX^\YV :KXOV 2£ Y_^\Y]]SW K MYX^\SL_SÁY NO
,OXONSM^ >\OPdO\ ZK\K K VOS^_\K] NY] VYQ] QO\KNY] ZOVY =38?= ?WK
PO\\KWOX^KLK]OKNKOW2>76OW=;6
-YWY XÁY R£ ZKMYÔ] <:7 XOW LSX£\SY] >+<1D3: MYW =38?= Ô\OWY]
[_O ZK]]K\ Y] ZK]]Y] NO MYWZSVKÁY NY ]YPâK\O 7O]WY ZY\[_O R£
NO^KVRO][_OXÁYZYNOW]O\XOQVSQOXMSKNY]ZOVYKV_XY
4£`SWY][_O_WPS\OaKVVXY6SX_b¤SWZVOWOX^KNYOWX´ÒVNOUO\XOV
9 K\[_S`Y v</+.7/v NY =38?= KNÒ\Ô Y _]_£\SY NK XOMO]]SNKNO NO
\OMYWZSVKÁY NY UO\XOV >KWL¤W T£ WOXMSYXKWY] [_O `£\SK]
NS]^\SL_SÉO] 6SX_b T£ ÒW MYW Y UO\XOV Z\YX^Y] ZK\K PS\OaKVVSXQ
:Y\MYX]OQ_SXÔMO\^Y]NS]]YXÁY]OPKdXOMO]]£\SY\OMYWZSVK\^YNY
Y UO\XOV 8Y OX^KX^Y ZK\K K MYWZSVKÁY NY =38?= Z\OMS]KWY] NO
]YWOXÔ _W K\[_S`Y NK] PYXÔ] NY UO\XOV ?W YLTOM^ PSVO _]KNY XY
vVSXUv ZK\K QO\K\ Y ObOM_^£ÒV NY Z\YQ\KWK ]OW OVO K MYWZSVKÁY
PKVRK\£7K]ÔWY]_WKNSMKZK\K\O]YVÒ\YZ\YLVOWK%
-O\^SPS[_O]O [_O `YM ÔW OW ]_K W£[_SXK _W KWLSOXÔ NO

NO]OX`YV`SWOX^Y SX]^KVKNY QMM ROKNO\] PSVO] O^M .OZYS]
SX]^KVO Y K\[_S`Y [_O ÒW MYW K] PYXÔ] NY UO\XOV$ UO\XOV]Y_\MO
S" \ZW.SQSÔY]OQ_SXÔ$
>URRW#DOSKD @ FG XVUOLEOLQX[DUFKLOLE

>URRW#DOSKD OLE@ JFF 'BB$66(0%/<BB WUDGLWLRQDO F FKHFNVXP6 Õ [atenção]
>URRW#DOSKD OLE@ OV F
>URRW#DOSKD OLE@ FKHFNVXP6 FKHFNVXPR
×
9L]O\Ò K ObS]^ XMSK NY K\[_S`Y [_O NO]OTKWY]$ Y vMROMU]_WYv9
+QY\K ZYNOWY] NO]MYWZKM^K\ Y K\[_S`Y MYW K] PYXÔ] NY =38?= ]_Z\K
MS^KNY /]MYVRK _W NS\O^¥\SY K ]O_ QY]^Y =O `YM ZY]]_S Y 4.5
b O Y ZKMYÔ =A381 R^^Z$aaaTK`K]_XMYW ZYNO MYWZSVK\ Y
9
Se você optar por recompilar o kernel, não execute o 'make clean' no fim do processo! Pois sabidamente ele apagará
todos os arquivos *.o gerados...

]P -YX^\YV :KXOV =O NO]OTK\ ONSÔ Y] ZK^R] XY NS\O^¥\SY
vMVSOX^7KUOPSVOSXv ZK\K KT_]^K\ Y MKWSXRY ZK\K K] MVK]]O] 4K`K
2£ _WK Ò\]ÁY XÁYYPSMSKV T£ MYWZSVKNK XK Z£QSXK
R^^Z$aaa]SX_]PS\OaKVVY\Q NY MVSOXÔ NY -YX^\YV :KXOV ZYNO ]O\
_WK LYK YZÁY ]O `YM ^SÒ\ Z\YLVOWK] MYW Y 4.5 MYW K] MVK]]O]
=A381Y_WO]WY]OXÁYNO]OTK\MYWZSVK\OWKWLSOXÔ4K`K
/bOM_ÔOX^ÁYXYNS\O^¥\SYKYXNO`YM SX]^KVY_K]PYXÔ]$
MYXPSQ_\O
WKUOevWKUOMVSOX^v]YWOXÔQO\K\£Y]P-YX^\YV:KXOV
evWKUO]O\Ò\v]YWOXÔQO\K\£Y]O\`SNY\
+XÔ] NY WKUO SX]^KVV `YM NOÒ M\SK\ _W XY`Y v_]_£\SYv MRKWKNY
PS\OaKVV KNSMSYXKXNY K ]OQ_SXÔ VSXRK OW ]O_ K\[_S`Y vO^MZK]]aNv
_]O_W_]O\SNOQ\Y_ZSNNO]YM_ZKNY]$
firewall:x:888:888::/dev/null:/bin/false
+Z¥] M\SO _W XY`Y Q\_ZY ^KWL¤W MRKWKNY PS\OaKVV KNSMSYXKXNY O]^K]
VSXRK] XY ]O_ K\[_S`Y vO^MQ\Y_Zv XÁY ]O O][_OK NO OPO^_K\ _W
LKMU_ZXY]K\[_S`Y]KVÔ\KNY]$
firewall:x:888:
0OS^YS]]YKSX]^KVKÁYZYNO]OQ_S\
WKUOSX]^KVVeZYNO]O\vWKUO]O\Ò\ISX]^KVVv
9?vWKUOMVSOXÎSX]^KVVv
+ SX]^KVKÁY ZY\ ZKN\ÁY O ^KWL¤W ]O K MYWZSVKÁY ^\KX]MY\\O_

XY\WKVWOXÔ ZÉO Y] ]OQ_SXÔ] K\[_S`Y] NY ]O\`SNY\ XY WYWOX^Y
XY]YM_ZK\OWY]MYWOVO]KZOXK]XO]Ô]NS\O^¥\SY]$

_]\VYMKV]LSX]PMKMMY_X^
_]\VYMKV]LSX]PMÖYNKOWYX
`K\VYQPS\OaKVV { 'LOGS': arquivos de registros...

`K\VYQPS\OaKVV]Zc
`K\VYQPS\OaKVV\OZY\^
O^MPS\OaKVVNe\O]O\`KNYZK\KY]K\[_S`Y]PS\OaKVVMYXP
OPS\OaKVVZK]]aN
VSLWYN_VO]WS]M]PYÖ_WWYN_VYSX]^KV£ÒV
@KWY] SXSMSK\ Y =38?= 0S\OaKVV :K\K S]]Y Z\OMS]KWY] NO _WK

MYXPSQ_\KÁY ZYS] Y NS\O^¥\SY vO^MPS\OaKVVNv O]^£ `KdSY KZ¥] Y
vWKUOSX]^KVVvPKV^KYK\[_S`YPS\OaKVVMYXP.OZYS][_OONS^K\_WK
MYXPSQ_\KÁYKYXY]]YQY]^YOXOMO]]SNKNO]SX]^KVKWY]YWYN_VY10MYW
vSX]WYNVSLWYN_VO]WS]M]PYv.OZYS]NKWY]ZK\^SNKXYNKOWYX$
>URRW#DOSKD @ LQVPRG OLEPRGXOHVPLVFVIR

>URRW#DOSKD @ XVUORFDOVELQVIF VWDUW
,QLWLDOL]LQJ GDHPRQ
1R VRFNHW VHFXULW\ ILUHZDOOWRILUHZDOO FRPPXQLFDWLRQ GLVDEOH
B
>URRW#DOSKD @
;_KXNY Y NKOWYX v]PMv N£ ZK\^SNK OVO V K ]_K MYXPSQ_\KÁY O

ObOM_^KK]\OQ\K]NO]OTKNK]NOPS\OaKVV?W K]ZOM^Y SXÔ\O]]KXÔ NY
Z\YQ\KWK NKOWYX ¤ [_O OVO MROMK K] SXMYX]S]^ XMSK] ZY]]´ÒS]
MYX^SNK] XY PS\OaKVVMYXP$ ^KX^Y NO \OQ\K] [_KX^Y O\\Y] NO
NSQS^KÁY=OS]]YKMYXÔMO\OVOZ£\KONO`YVÒ_WZK\]OO\\Y\KY
_]_£\SY -RO[_O ^KS] SXMYXQ\_ XMSK] O \OZS^K Y Z\YMO]]Y ;_KX^Y K
10
Consulte a documentação diponível a respeito dos módulos instaláveis no Linux, ou mesmo as páginas manuais ('man
lsmod', 'man insmod', 'man rmmod').

WOX]KQOWOMYKNKXY]YMUO^]OM_\S^cXÁY]OZ\OYM_ZOOVKKZK\OMO
[_KXNYY=38?=¤MYWZSVKNY]OWYZ\YQ\KWK/8]USZ/VOZY]]SLSVS^KK
MYXObÁY M\SZ^YQ\KPKNK OX^\O PS\OaKVV] 7K] MYWY ÔWY] Y ==2 ZK\K
O]]O SXÔX^Y ZYNOWY] KL\S\ NO ^KV ]_ZY\Ô 2£ ^KWL¤W ]¤\SY]
Z\YLVOWK] NO MYWZSVKÁY NY /X]USZ
P^Z$P^Z^SUOOO^RdMRZ_LZKMUKQO]]USZXY6SX_b
:K\KNO]VSQK\Y=38?=\OWY`KYWYN_VYNKWOW¥\SKv\WWYN]PYvO
ZK\OYNKOWYXMYWYMYWKXNYv_]\VYMKV]LSX]PM]^YZv
;_KXNYNYNOL_QNOXY]]KMYXPSQ_\KÁYO]^SÒ\Z\YX^YOO]^SÒ\WY]
]K^S]POS^Y] MYW K WYX^KQOW NK] \OQ\K] NY PS\OaKVV ZYNOWY] _]K\ _W
]M\SZ^ZK\KSXSMSK\YXY]]YNKOWYXv]PMv+LKSbYO]^£_WObOWZVYNO
_W ]M\SZ^ [_O _]KWY] OW XY]]K \ONO ZYNO]O KNKZ^£VY §] WKS]
NSÒ\]K]]S^_KÉO]$

6FULSW SDUD LQLFLDU GDHPRQ GR 6,186 )LUHZDOO
H LQVWDODU PRGXOR
VIR
-DQHLUR GH
8VDGR QXP 6LVWHPD /LQX[ 5HG +DW NHUQHO
-=--=- -=--=--=--=--=--=--=--= --=-
HWFUFGLQLWGIXQFWLRQV ,QLFLD DTXL R VFULSW
IXQFWLRQV

FDVH LQ
VWDUW
JSULQWI 6WDUWLQJ V VI )LUHZDOO
LI WHVW U YDUUXQVIFSLG NLOO CFDW YDUUXQVIFSLGC
WKHQ
JSULQWI V H[LVWV V DOUHDG\ UXQQLQJ?Q ?
YDUUXQVIFSLG VIF
HOVH VELQLQVPRG OLEPRGXOHVPLVFVIR XVUORFDOVELQVIF VWDUW
HFKR VIF
IL
WRXFK YDUORFNVXEV\VVIF

VWRS
JSULQWI 6WRSSLQJ V VI )LUHZDOO
XVUORFDOVELQVIF VWRS
JSULQWI 5HPRYLQJ 6,186 PRGXOH
VELQUPPRG VI
UP I YDUUXQVIFSLG
UP I YDUORFNVXEV\VVIF
HFKR VIF

UHVWDUW
VWRS
VWDUW

VWDWXV
VWDWXV VIF

XVUORFDOVELQVIF VKRZ

JSULQWI 8VDJH V ^VWDUW_VWRS_VWDWXV_UHVWDUW`?Q VIF
H[LW
HVDF
H[LW
@KWY]KQY\KKXKVS]K\KMYX]^\_ÁYNOXY]]K]\OQ\K]NOPS\OaKVV[_O
PSMK\KW MYX^SNK] XY PS\OaKVVMYXP 9] K_^Y\O] MYVYMKW XY NS\O^¥\SY
v]KWZVO]v[_K^\YK\[_S`Y]NOMYXPSQ_\KÁY§^´^_VYNOObOWZVYZK\K
[_OYKNWSXS]^\KNY\O]^_NOY]$
¬ CheswickBellovin.conf
¬ MediumEnterprise.conf
¬ SimpleSample.conf
¬ SmallBusiness.conf
-YX]_VÔY] NOZYS] NO NYWSXK\ K] ^¤MXSMK] NO PS\OaKVVSXQ 9] XYWO]
NY]K\[_S`Y]T£NOWYX]^\KWY]O_SXÔX^Y=YWOXÔYZ\SWOS\Y^KVÒd
XÁY Y ]OTK ;_OW XÁY O]^£ PKWSVSK\SdKNY MYW K LSLVSYQ\KPSK ]YL\O
]OQ_\KXK ZYNO XÁY MYXROM VY]$ A < -RO]aSMU O = 7 ,OVVY`SX
]ÁY K_^Y\O] NO _W MV£]]SMY ]YL\O Y ÔWK MRKWKNY 0S\OaKVV] KXN
3XÔ\XO^ =OM_\S^c$ <OZOVVSXQ ^RO ASVc 2KMUO\ 9 Z\SWOS\Y K\[_S`Y]
ÔX^KKZVSMK\Y]Z\OMOS^Y]NO]M\S^Y]XO]ÔVS`\Y
@KWY] _]K\ K[_S _W PS\OaKVVMYXP KVÔ\XK^S`Y LOW ]SWZVO] ZK\K

O]^_NK\ K NSXWSMK NY =38?= 0S\OaKVV /VO O]^£ XY WKX_KV NY
Z\YQ\KWK Y KV_XY Y OXMYX^\K\£ OW PY\WK^Y R^WV XY NS\O^¥\SY
vNYMR^WVSXNObR^WVv NK NS]^\SL_SÁY 7YNSPSMKWY] KVQ_WK] ZK\Ô]
WK]OW]´XÔ]OOVOO]^£K´@OTKWY]$

_ 6DPSOH FRQILJXUDWLRQ IRU WKH VI )LUHZDOO_

VHWXS
LQWHUQDOQHWV
PDLOBGHIDXOW URRW#ORFDOKRVW

UXOHV
EORFN WFS WR SRUW OLQN
SRUW VXSGXS
QRWLILFDWLRQBOHYHO
EORFN RSWLRQV ORRVHBVRXUFHBURXWH VWULFWBVRXUFHBURXWH DOO
QRWLILFDWLRQBOHYHO
GHWHFWD URWDV VHFXQGiULDV SDUD D ,QWHUQHW
EORFN ULS IURP LQVLGH QRWLILFDWLRQBOHYHO
3HUPLWH D HQWUDGD GH UHTXLVLo}HV )73 SDUD QRVVR VHUYLGRU )73
DFFHSW WFS WR SRUW QRWLILFDWLRQBOHYHO
3HUPLWH D HQWUDGD GH UHTXLVLo}HV )73 SDUD R VHUYLGRU 7HOQHW/RJLQ
DFFHSW DOO IURP WR QRWLILFDWLRQBOHYHO
EORTXHLD TXDOTXHU RXWUD UHTXLVLomR 7&3 H VRD R DODUPH
EORFN WFS QRWLILFDWLRQBOHYHO
QRWLILFDWLRQ
OHYHO UHJLVWUD WRGDV DV FKHJDGDV GH FRQH[mR )73 SHUPLWLGDV
PHVVDJH 5HTXLVLFDR GH FRQH[DR )73
OHYHO UHJLVWUD WRGDV DV FKHJDGDV GH FRQH[mR 7HOQHW SHUPLWLGDV
PHVVDJH 5HTXLVLFDR GH FRQH[DR 7HOQHW
OHYHO UHJLVWUD WRGDV DV FKHJDGDV GH FRQH[mR ::: SHUPLWLGDV
PHVVDJH 5HTXLVLFDR GH FRQH[DR :::
OHYHO UHJLVWUD WRGDV DV FKHJDGDV GH FRQH[mR 66+ SHUPLWLGDV
PHVVDJH 5HTXLVLFDR GH 6HFXUH VKHOO
OHYHO
PHVVDJH 5HGLUHFLRQDPHQWR ,&03 UHFHELGR
OHYHO
PHVVDJH +D XPD URWD VHFXQGiULD SDUD D ,QWHUQHW
OHYHO
PHVVDJH 3DFRWH ,3 FRP RSFDR BVRXUFH URXWHB GHWHFWDGD
OHW VUVRXUFHKRVW VUVRXUFHKRVW WLPHRXW
LI VUVRXUFHKRVW WKHQ
PHVVDJH 3DFRWH ,3 FRP RSFDR BVRXUFH URXWHB GHWHFWDGD
VS\
HQGLI
OHYHO
PHVVDJH &RQH[DR 7&3 LOHJDO
OHW LOOWFSVRXUFHKRVW LOOWFSVRXUFHKRVW WLPHRXW
LI LOOWFSVRXUFHKRVW WKHQ
PHVVDJH &RQH[DR 7&3 LOHJDO
PDLO
VS\
HQGLI
OHYHO 'HVOLJD ,17(5)$&( (7+
H[HF LIFRQILJ HWK GRZQ

HQG
9PS\OaKVVMYXPZY]]_S^\ ]LVYMY]NOMYXPSQ_\KÁY]ÁYOVO]$
¾ SETUP
¾ RULES (pode-se usar também PRIMARY_RULES)
¾ NOTIFICATION
/X^\OY]LVYMY]NOMYXPSQ_\KÁYZYNOWY]Ô\ MYWOX^£\SY] KMOS^KXNY Y

]´WLYVY Y_K]LK\\K]^\KNSMSYXKS]NY-
9 LVYMY =/>?: ¤ LOW M_\^Y K´ MYVYMKWY] K SXPY\WKÁY ]YL\O XY]]K

^YZYVYQSK NO \ONO SXÔ\XKVXO^] ZK\K ^\KLKVRK\ MYX^\K Y SZ
]ZYYPSXQVS]^KXNYK]]SWXY]]KSX^\KXO^9]3:] NOÒW ]O\ ]OZK\KNY]
ZY\`´\Q_VK]OÔ\WSXKNY]MYWv%v:YNO]OK[_S^KWL¤WO]ZOMSPSMK\Y
XO^WK]U$ v# " WK]U v =OQ_O]O NOZYS] K
SXPY\WKÁYNY]OXNO\OY]_]KNY]WKSVINOPK_V^ZOVY=38?=ZK\K
Y OÒX^_KV OX`SY NO OWKSV] MYVY[_O [_KX^Y] NO]OTK\ ]OZK\KXNYY]
ZY\`´\Q_VK]
9 LVYMY <?6/= ¤ Y Z\SXMSZKV NY K\[_S`Y 8O]^K ]OÁY K] VSXRK]

MYWOKW YL\SQK^Y\SKWOXÔ MYW K] ZKVK`\K]$+--/:> KMOS^K Y] ZKMYÔ]
OX`SKNY],69-59MY\\O]ZYXNOXÔKY./8CNY 3ZMRKSX] KLKXNYXK Y]
ZKMYÔ] ]OW WKSY\O] MYX]SNO\KÉO] </4/-> \OTOS^K QO\KXNY
T_]^SPSMK^S`KO9,=/<@/MYX]^\_ŃKZK\KQO\S\Y]VYQ]NY=38?=+
\SQY\ XÁY KMOS^K XOW \OM_]K WK] NOSbK K NOMS]ÁY ZK\K K Z\¥bSWK
\OQ\K :Y\ PSW K \OQ\K] ]ÁY NS\OMSYXKNK] ZK\K _W X´ÒV NO
XY^SPSMKÁY [_O ]O OXMYX^\K XY ¦V^SWY LVYMY O Ô\WSXKNK] MYW _W
v%v9]MYXMOS^Y]]ÁYLK]SMKWOXÔY]WO]WY]NY3ZMRKSX]O`YM NOÒ
^\KdO\ Y] ]O_] MYXROMSWOX^Y] 9 [_O W_NK ¤ ]SX^KbO XK] VSXRK] NO
MYXPSQ_\KÁY:YNO\]OSK\O]_WSVKK]]SW$
[regra] proto. IP (de) porta XX IP (para) porta XX -> nível de notificação

<O^S\KXNY_WObOWZVYNOXY]]YK\[_S`YOXMYX^\KWY]$
;_KV \OQ\K O]^KLOVOMO]O K[_S) +MOS^KWY] ZKMYÔ] >-: NY 3:

# " Z\YÒXSOXÔ] NK ZY\^K O ]O OX^\KW Y] ZKMYÔ]
ObOM_^K]OYXY^SPSMK^SYXIVOÒVNOX¦WO\Y;_OO]^KLOVOMO$
OHYHO
PHVVDJH 5HTXLVLFDR GH 6HFXUH VKHOO
/X`SKZK\KYK\[_S`YNO\OQS]^\YNY=38?=OWv`K\VYQPS\OaKVVvK
SXPY\WKÁY[_ORY_Ò_WK\O[_S]SÁYXKZY\^K
+VQ_WK] YL]O\`KÉO] KSXNK ]YL\O Y] ZK\WO^\Y] NY K\[_S`Y$ ZYNOWY]

O]^KLOVOMO\ _WK \OQ\K ZK\K ^YNY] Y] Z\Y^YMYVY] KMOS^Y] MYW K PVKQ
vKVVv^KWL¤WO]^KLOVOMO\PKSbK]NOZY\^K]bbbbOMYXPSQ_\K\K]
PKSbK] NO OXNO\OY] _]KXNY v^Y P\YWv vNY 3: ^KV ZK\K Y 3:
^KVv/bOWZVY$
EORFN DOO WR SRUW IURP

QRWLILFDWLRQBOHYHO
9_^\YZK\WO^\YSWZY\^KX^´]]SWY¤vSX]SNOv[_OXÁY KZK\OMO OW XY]]Y

K\[_S`YObOWZVY 3X]SNO ¤ XY]]K SX^\KXO^ NOPSXSNK MYWY `SWY] XK
PVKQSXÔ\XKVXO^]/VO¤MYWLSXKNYMYWYZK\WO^\Yv^YP\YWv
/OX^ÁY]OO]^KLOVOYZY\ObOWZVY$
EORFN WFS IURP LQVLGH WR SRUW QRWLILFDWLRQBOHYHO
,VY[_OSY [_KV[_O\ ZKMYÔ >-: NO WSXRK SX^\KXO^ ZK\K Y 3:

:Y]]Y SXÒ\Ô\ vSX]SNOv _]KXNY vY_^]SNOv S]^Y ¤
[_KV[_O\3:PY\KNOWSXRKSX^\KXO^
EORFN WFS IURP RXWVLGH WR SRUW QRWLILFDWLRQBOHYHO

:Y\PSWYLVYMY89>303-+>3988O]^K]OÁYMKNKX´ÒVNOXY^SPSMKÁY
]O\£O]^KLOVOMSNYX_WZK\£Q\KPY3XSMSKXNY]OMYWKZKVK`\KvVOÒVv
]OQ_SNY NO _W X¦WO\Y SNOX^SPSMKNY\ O v$v :YNO]O O]ZOMSPSMK\ K]
KÉO] XOMO]]£\SK] K ]O\OW SWZVKX^KNK] 9 X´ÒV NO XY^SPSMKÁY
P_XMSYXKOWX´ÒVNO]M\SZ^/WZ]O_NYM¥NSQYPSMK\SK$
SE
determinadas circunstâncias ocorrem...
Mande uma MENSAGEM...
E CHAMA (call) o Nível 900
Ø
NÍVEL 900
Se as circunstâncias ocorrem 10 vezes
DESLIGUE A INTERFACE ETH0!
» MVK\Y [_O NOWY] _W ObOWZVY \KNSMKV @OTKWY] Y_^\Y MK]Y >YNY
KMO]]YKYWO_]O\`SNY\>OVXOÔW_WKY_WKS]RY]^]\ONS\OMSYXYZK\K
_WX´ÒVNOXY^SPSMKÁY$
OHYHO
PHVVDJH ´6ROLFLWDFDR GH VHVVDR 7(/1(7 QD SRUWD µ
FDOO

-YWKVSXRKvMKVV"v\OOX`SYZK\K_WK]_L\Y^SXKYvVOÒV"v
OWWO_PS\OaKVVMYXP9XNO$
OHYHO
OHW FRQQHFWLRQVVRXUFHKRVW FRQQHFWLRQVVRXUFHKRVW WLPHRXW
LI FRQQHFWLRQVVRXUFHKRVW ! WKHQ
UHSRUW
PHVVDJH ´$OJXHP HVWD WHQWDQGR DWLYDU PDLV GH FRQH[RHV 7HOQHWµ
´%ORTXHDQGR DFHVVR SRU VHJXQGRVµ
EORFN DOO IURP VRXUFHKRVW QRWLILFDWLRQBOHYHO WLPHRXW
FDOO
HQGLI
/]MVK\OMOXNY$ K ZKVK`\K vVO^v [_O SXSMSK K P\K]O ZYNO O]^KLOVOMO\

Y_ W_NK\ Y `KVY\ NO _WK `K\S£ÒV 8K ]OXÔXK
vMYXXOM^SYX]$]Y_\MORY]^vYZ\SWOS\YÔ\WY¤K`K\S£ÒVO]Y_\MORY]^
^KX^Y [_KX^Y NO]^RY]^ P_XMSYXK MYWY _W [_KVSPSMKNY\ -YXPSQ_\KWY]
[_O ]O XY]]Y ]O\`SNY\ \OMOLO\ WKS] NY ( MSX[_OX^K MYXObÉO] NO
_W OXNO\OY 3: Y ]Y_\MORY]^$ OX`SY WOX]KQOW KY VYQ LVY[_OSY NO

KMO]]YKYOXNO\OY3:NOY\SQOWZY\]OQ_XNY]O`KWY]ZK\KK]_L
\Y^SXK9KV_XYZYNOMYX]_V^K\YWKX_KV2>76[_OXY]\OPO\SWY]
ZK\K MROMK\ K] SXÔ\O]]KXÔ] YZÉO] NO ]M\SZ^ [_O Y =38?= YPO\OMO
=ÁY O]^K] K] YZÉO] NO ]M\SZ^ [_O ZYNOW ]O\ _]KNK] XY LVYMY
XY^SPSMK^SYXIVOÒV$
7/==+1/$
.OPSXOKWOX]KQOWK]O\OX`SKNKZK\KYK\[_S`YNO\OQS]^\YO^KWL¤W
¤_]KNYXYOWKSVO]ZOMSPSMKNYXYLVYMYv]O^_Zv+]WOX]KQOX]NOÒW
]O\O]M\S^K]OX^\OK]ZK]
=C=691$
-YVYMKY\OQS]^\YMY\\OXÔ^KWL¤WXYvVYQvNY]S]ÔWK
</:9<>$
-YZSKY\OQS]^\YMY\\OXÔZK\KYK\[_S`YvPS\OaKVV\OZY\^v
7+36$
/X`SKOWKSVZK\KY]OXNO\OY]O]ZOMSPSMKNY]XKMYXPSQ_\KÁY
=:C$
3ÔW W_S^Y SXÔ\O]]KXÔ 8K NOPSXSÁY NO 7_MR]OV =MRWSN K
NOMVK\KÁY v]Zcv SXSMSK _W MY_XÔ\ SXÔVVSQOXMO =O_ YLTO^S`Y ¤
ZK\K ]O\ MVK\Y O]ZSYXK\ Y RY]^ O Y _]_£\SY [_O O]^£ ObOM_^KXNY _WK
KÁY NK [_KV ]O NO]MYXPSK 8Y XY]]Y ObOWZVY _W _]_£\SY OW _W RY]^
ÔX^Y_ PKdO\ MYXObÉO] X_W MO\^Y Z\KdY NO ÔWZY OW XY]]Y ÔVXO^
]O\Ò\:YNO\´KWY]Ô\MYXPSQ_\KNYMYWv]ZcvÒTKWY]$
LI FRQQHFWLRQVVRXUFHKRVW ! WKHQ
VS\ Õ
UHSRUW
3]^Y ¤ ]O RY_Ò\ WKS] NO MYXObÉO] OX^ÁY MYWOMO Y v]Zcv 9
v]Zcv¤_WZ\YMO]]YNOSNOX^SPSMKÁYNO_WRY]^_]_£\SY_]KXNYY.8=
ZK\K YLÔ\ Y XYWO NY RY]^ Y Z\Y^YMYVY SNOX^ `£VSNY ]YWOXÔ OW

MYXObÉO] >-: PSXQO\ O \_]O\] + MYVO^K NO]]K SXPY\WKÉO] ÔXRK

OVK bS^Y Y_ XÁY `ÁY ZK\K Y VYQ MYWY PYS MYXPSQ_\KNY MYW Y
v\OZY\^v ZYNO\]OSK _^SVSdK\ ^KWL¤W WKSV O OX`SK\ ZY\ K´ Y]
\O]_V^KNY]NY]Zc
RELEVEL:
Muda o nível de notificação para a regra que causou a ação.
EXEC:
Declaração bastante poderosa. Pois pode abrir um shell local e executar um comando. Assim, na certeza de um ataque
efetivo podemos desligar a nossa interface de rede (eth0, eth1, etc.) com a seguinte declaração 'exec':
H[HF LIFRQILJ HWK GRZQ
-+66$
-RKWKY_^\YX´ÒVNOObOM_ÁYOYObOM_^K
LET:
Esta declaração pode mudar o valor de uma variável. O valor de timeout (em segundos) pode ser especificado no fim da
declaração 'let'. Observe o exemplo abaixo:
DFFHSW LFPS LFPSBHFKR WR LQVLGH QRWLILFDWLRQBOHYHO
Ø
QRWLILFDWLRQ
OHYHO
OHW SLQJFRXQWVRXUFHKRVW SLQJFRXQWVRXUFHKRVW WLPHRXW
LI SLQJFRXQWVRXUFHKRVW ! WKHQ
EORFN DOO IURP VRXUFHKRVW QRWLILFDWLRQBOHYHO WLPHRXW
HQGLI
?WW£[_SXKÔX^Y__WvZSXQvZK\KKVQ_WKW£[_SXKNOXY]]KSX^\KXO^Y
Z\Y^YMYVY¤3-7:/VO¤_]KNYZK\KNSKQX¥]^SMY]OMYXNSÉO]NOO\\Y
X_WK \ONO 7K] O]^K W£[_SXK ObOM_^Y_ Y vZSXQv ÒdO] (
NOX^\Y MYW Y ÔWZY W£bSWY NO ]OQ_XNY] ^SWOY_^ K MKNK
vZSXQ]v:Y\^KX^YLVY[_OSK]OKMYXObÁYZY\ ]OQ_XNY]
IF (if ... then ... endif):

Use como num shell script: para executar um fluxo de ações, se tal ou qual condição acontece.
9 Z\YQ\KWK ]P 0S\OaKVV -YX^\YV :KXOV Ò\]ÁY ZYNO ]O\ _]KNY
ZK\K K ONSÁY NY PS\OaKVVMYXP +] WO]WK] KNÒ\^ XMSK] POS^K] XK]
VSÉO] ]YL\O Y 3ZMRKSX] O ]_K ONSÁY `SK 6SX_bMYXP `KVOW K[_S ?W
Z\YQ\KWK1?3MYWY]P-YX^\YV:KXOVZYNOKT_NK\WK]¤Z\OMS]Y]KLO\
Y [_O O]^£ PKdOXNY MYXROMO\ Y] MYXMOS^Y] O Y] P_XNKWOX^Y] NO _W
PS\OaKVV OW QO\KV O NK Z\YZY]^K NY =38?= OW ZK\^SM_VK\ 9 ]P
-YX^\YV :KXOV ¤ _W Z\YQ\KWK POS^Y OW 4K`K XÁY Y _^SVSdKWY] XY
ASXNYa]Y_OW[_KV[_O\Y_^\KZVK^KPY\WK.OWKXOS\K[_OXÁYZYNOWY]
PKdO\_WKK`KVSKÁYNO]O_]\O]_V^KNY]
9 K\[_S`Y v\_Xv [_O MRKWK Y Z\YQ\KWK ¤ _W ]M\SZ^ [_O KT_]^K Y

MVK]]ZK^R 4K`K ZK\K ZY]]SLSVS^K\ K ObOM_ÁY NY Z\YQ\KWK 0KK Y]
KT_]Ô] ]O PY\OW XOMO]]£\SY] KL\O _WK ]O]]ÁY BÔ\W O Y ObOM_Ô NY
NS\O^¥\SYYXNOOVOPYSSX]^KVKNY$v\_Xv+]P_XÉO]NY]P-YX^\YV
]ÁY LK]SMKWOXÔ K_^YObZVSMK^S`K] 9 SXÔ\O]]KXÔ NY ]YPâK\O ¤ ]_K
MKZKMSNKNO NO K_^YMYXPSQ_\KÁY Y_ ]OTK `YM WYX^K\ _WK
^YZYVYQSK NO \ONO ONS^K\RY]^ Y RY]^ PS\OaKVV K \ONO OW ]S O Y
KMO]]Y K 3XÔ\XO^ / NOZYS] ]KV`K\ X_W K\[_S`Y O KXKVS]£VY MYW Y]
ZY]Ô\SY\O]KT_]Ô]@YM ZYNOKL\S\K]_KW£[_SXKPS\OaKVVZOVY]P
-YX^\YV S]]Y ]O ^SÒ\ MYWZSVKNY Y ]O\`SNY\ =38?= MYW Y ZKMYÔ NK
/8]USZZYNOXNYO]^ÁY_]K\YZ\Y^YMYVY0S\OaKVV^Y0S\OaKVV
+] YZO\KÉO] MYW Y =P -YX^\YV MYWOKW MYW K ONSÁY NK ^YZYVYQSK NO
\ONO:K\KS]]Y]OO]MYVROXYWOX_KYZÁY/NS^^YZYVYQc$


.OZYS]¤XOMO]]£\SYWYX^K\K^YZYVYQSKZ\YZ\SKWOXÔNS^KO]MYVROXNY
K] _XSNKNO] K ]O\OW MYXPSQ_\KNK] 8K ÔVK KMSWK O]^£ _W ObOWZVY NK
MYXPSQ_\KÁY NO _WK W£[_SXK PS\OaKVV :YNOWY] MYW _W RY]^ ]O\`SNY\
MYXPSQ_\£VY MYW `£\SY] ]O\`SY] ZY]]´ÒS] 0>: =OM_\O AAA ]O\Ò\
==2]O\Ò\O^MVSLO\KXNYY_XÁYZK\KYKMO]]YZ¦LVSMY/XMO\\KNK
K SNOX^SPSMKÁY NO XY]]K \ONO ]K´WY] NY vWYNY ^YZYVYQSKv XO]]O
SX]^KXÔ Y ]P -YX^\YV K`KVSK ]O R£ SXMYX]S]^ XMSK] OW XY]]K
^YZYVYQSK=O^_NYO]^£YUZYNOWY]O]MYVRO\ Y vK_^YMYXPSQv .OZYS]
ZYNOWY] \OÒ\ MYXPY\WO XY]]Y QY]^Y K] MYXPSQ_\KÉO] 8K ÔVK
]OQ_SXÔO]^KWY]ONS^KXNYYLVYMYNO]O^_Zv\_VO]v$

+QY\K `KWY] Ò\ Y WOMKXS]WY NO \OQS]^\Y NY =38?= 0S\OaKVV =OW
N¦`SNK _W NY] ZYX^Y] PY\Ô] NY ]YPâK\O 4£ [_O K WYX^KQOW NO _W
PS\OaKVV ]SQXSPSMK OW Q\KXNO ZK\Ô `SQSVXMSK +]]SW \OQS]^\K\ OW
K\[_S`Y] ]OQ_\Y] Y WY`SWOX^Y NO OX^\KNK O ]KŃK NO ZKMYÔ] O KV¤W
NYWKS]Q\KK]§MKZKMSNKNONO]M\SZ^NYZ\YQ\KWKObOM_^K\KÉO]¤
P_XNKWOX^KVZK\KYKNWSXS]^\KNY\NO_WK\ONO
4£ `SWY] [_O Y K\[_S`Y NO VYQ P_XNKWOX^KV NY =38?= MRKWK]O
v`K\VYQPS\OaKVVv @YM NOÒ SXÒ]^SQ£VY ]OWZ\O ZYS] ^YNY Y
WY`SWOX^Y NO ZKMYÔ] ¤ XOVO Q\K`KNY K]]SW MYWY K] YZO\KÉO]
MYXPSQ_\KNK]XYXY^SPSMK^SYXIVOÒV=OK]_K\ONO¤NOQ\KXNOZY\Ô
OZY\^KX^Y\OMOLO_W^\£POQYW_S^YSXÔX]Y¤KMYX]OVR£ÒV_]K\_WK
ZK\^SÁY ]OZK\KNK ZK\K Y NS\O^¥\SY v`K\VYQv -YW OPOS^Y ZYNOWY]
_]K\YMYWKXNYv^KSVvZK\KSX]ZOMSYXK\YVYQQ\K`KNYXYK\[_S`YMYW
Y KM\¤]MSWY NK PVKQ P ZK\K PY\K\ K VOS^_\K NY PSW NY K\[_S`Y
:Y\ObOWZVY$
>URRW#DOSKD ORFDO@ WDLO I YDUORJILUHZDOO

)HE V DFFHSW 7&3 !WHOQHW
)HE 7HOQHW FRQQHFWLRQ UHTXHVW
)HE V EORFN 7&3 !ZZZ
)HE ,OOHJDO 7&3 FRQQHFWLRQ
)HE VHQGLQJ PDLO WR URRW
)HE VWDUWHG FRXQWHU LQWHOOLJHQFH DJDLQVW KRVW
)HE V EORFN 7&3 !DXWK
)HE VHQGLQJ PDLO WR URRW
)HE V EORFN 7&3 !ILQJHU
6HJXH
>OWY] K[_S _WK WY]^\K NK ]O[_ XMSK NO OX^\KNK] \OQS]^\KNK] MYW Y
W ]YNSKKRY\KKKNÒ\^ XMSKYMY\\SNKOXNO\OY]3:Z\Y^YMYVY]

OW [_O]^ÁY O^M 2£ N_K] OX^\KNK] NO OX`SY NO WKSV ZK\K Y _]_£\SY
\YY^ VSXRK] O # 9 MYXROMSNY VOS^Y\ NO WKSV] :38/ KM_]K Y
\OMOLSWOX^YNKWOX]KQOW$
9 MYWKXNY ^KSV _]KNY K]]SW ]O\Ò MYWY _WK `S]ÁY SX]^KX^XOK NK

^\£POQYNO\ONOOVOOMYK\£]OWZK\K\Y]VYQ]MYX^SNY]OWPS\OaKVV
K^¤[_OObOM_Ô]O_Wv-YX^\YV-v+PY\WKWKS]Z\YN_^S`K¤_]K\Y]
Ô\WSXKS] `S\^_KS] ZY\ ObOWZVY ! O " [_O ]KLSNKWOXÔ ]ÁY
KVMKXKNY] MYW v+6>0!vY_ _]O Y Ô\WSXKV [_O NO]OTK\ :K\K
^KX^YONSÔYK\[_S`YSXS^^KLONSÔK]]OQ_SXÔ]VSXRK]$
À 7:2345:respawn:/usr/bin/tail -f /var/log/firewall > /dev/tty7

@YM ZYNO^KWL¤W[_O\O\VO\Y]O_v`K\VYQWO]]KQO]vX_WÔ\WSXKV
`S\^_KV_]OY"ZY\^KX^Y+6>0"` VY$
À 8:2345:respawn:/usr/bin/tail -f /var/log/messages > /dev/tty8

+MYX]OVRKWY] ^KWL¤W Y _]Y NO _W ¥^SWY ]M\SZ^ OW :O\V O]M\S^Y ZY\
7SMRKOV,KLMYMUR^^Z$aaaVSX_b]_ZZY\^VSXOMYWhZQZVSX_bMRKWKNY
6YQMYVY\S]O VYQMYVY\S]O!^K\Qd ¤ K Ò\]ÁY [_O _]KWY] /VO
ÔW K MKZKMSNKNO NO Z¡\ MY\O] XY] K\[_S`Y] NO VYQ NO WKXOS\K [_O
ZYNOKMOX^_K\NOÔ\WSXKNK]ZKVK`\K]O]ZOM´PSMK]
=O`YM NO]OTK\Ò\Y]VYQ]QO\KNY]WK]SXSMSK\Y]O_]S]ÔWKOW
vSXS^ v Y_ WO]WY O]^SÒ\ ]OWZ\O OW KWLSOXÔ Q\£PSMY O XÁY
NO]OTK\ ]KS\ NOVO ZYNO _]K\ K Y Z\YQ\KWK bMYX]YVO Z\O]OXÔ XK
[_K]O ^Y^KVSNKNO NK] NS]^\SL_SÉO] 6SX_b 9 bMYX]YVO WYXS^Y\K K]
WOX]KQOX]NYMYX]YVOXYBASXNYa@YM ZYNO_]K\XY]O_vbSXS^\MvY
MYWKXNY$
tail -f /var/log/firewall > /dev/console &
/OX^ÁY$
xconsole -exitOnFail &
8O]^KÔVKÒWY]_WObOWZVYNOObOM_ÁYXYbMYX]YVO$
9 NKOWYX NY =38?= v]PMv KMOS^K KVQ_WK] SWZY\^KXÔ] YZÉO] XK ]_K
VSXRKNOMYWKXNY=ÁYOVK]$
11
Portanto, para usá-lo você precisa de Perl em seu sistema (5.x)...

VWDUW >FRQILJ@ ,QLFLD R GDHPRQ XVDQGR SRU SDGUmR R DUTXLYR

HWFILUHZDOOGILUHZDOO
HQWUH FRP RXWUR
DUTXLYR VH TXLVHU H[HPSOR
VIF VWDUW XVU
ORFDOWPSILUHZDOOWHVWH

VWRS 'HVOLJD R GDHPRQ PDV QmR GHVFDUUHJD R PRGXOR
UHFRQILJ >FRQILJ@ 'HVOLJD R GDHPRQ H UHLQLFLDR FRP XP QRYR

>IOXVK RX IOXVKBDOO@ DUTXLYR GH FRQILJXUDomR
CUHFRQILJ
QmR SDUDOLVD DV FRQH[}HV 7&3
DR PHQRV TXH VH XVH
IOXVK
RX
IOXVKBDOO
CIOXVK
GHVWUyL WRGDV DV FRQH[}HV TXH QmR
VmR SHUPLWLGDV QD QRYD FRQILJXUDomR Mi
CIOXVKBDOO
GHVWUyL WRGDV DV FRQH[}HV 7&3
H[LVWHQWHV
FKHFNFRQILJ >FRQILJ@ &KHFD R DUTXLYR GH FRQILJXUDomR
SRU HUURV GH VLQWD[H
3DGUmR HWFILUHZDOOGILUHZDOOFRQI
VKRZ 0RVWUD D FRQILJXUDomR XVDGD H DV FRQH[}HV 7&3
VKRZWFS 0RVWUD DSHQDV DV FRQH[}HV 7&3
NLOO LGNH\FULDGR 0DWD FRQH[mR 7&3 HVSHFLILFDGD
NLOODOO 0DWD WRGDV DV FRQH[}HV 7&3
NLOOLGOH PLQXWRV 0DWD WRGDV DV FRQH[}HV 7&3 RFLRVDV SRU ; PLQXWRV
UHVHWXVDJH
5HVHW XVDJH FRXQWHUV

/]^K] YZÉO] ]ÁY W_S^Y SWZY\^KXÔ] =YL\O^_NY XK MYX]^\_ÁY NY

XY^SPSMK^SYXIVOÒV :YNOWY] MYX]^\_S\ SXÔ\O]]KXÔ] O]^\K^¤QSK]
_]KXNY K NOMVK\KÁY vObOMv OW MYXT_X^Y MYW O]^K] PVKQ] ?WK YZÁY
NOÒ\K] SWZY\^KXÔ ¤ K ]KŃK ZY]]SLSVS^KNK ZY\ v]PM ]RYav KV¤W NO
VS]^K\ XY]]K MYXPSQ_\KÁY XY O]]OXMSKV VS]^K K] MYXObÉO] K^S`K]
WY]^\K] ]_K] vSNUOc]v [_O ZYNO\OWY] _]K\ ZK\K NO\\_LK\ MYXObÉO]
[_O ]O WY]^\OW ZO\SQY]K] /S] _WK ]KŃK NY NKOWYX YL]O\Ò MYW K]
SXPY\WKÉO]]ÁYPKMSVWOXÔSNOX^SPSMKNK]$
>URRW#DOSKD DGP@ XVUORFDOVIF VKRZ

$FWLYH UXOHV XVDJH FRXQWHUV ODVW UHVHW DW 6DW )HE


OLQH VWDWLF XVDJH WLPHV

EORFN QRWLILFDWLRQ OHYHO
SURWRFRO 7&3
WR SRUW OLQN
SRUW VXSGXS
DOO SURWRFROV
RSWLRQV CORRVH VRXUFH URXWH
CVWULFW VRXUFH URXWH

SURWRFRO 5,3
IURP
OLQH VWDWLF XVDJH WLPH E\WHV
DFFHSW QRWLILFDWLRQ OHYHO
SURWRFRO 7&3 CIWSBDOO
WR SRUW VVK

WR SRUW IWS

OLQH VWDWLF XVDJH WLPH E\WHV
WR SRUW WHOQHW

WR SRUW ZZZ

OLQH VWDWLF XVDJH WLPHV E\WHV
DOO SURWRFROV CIWSBDOO
IURP
WR
OLQH VWDWLF XVDJH WLPHV E\WHV
SURWRFRO 7&3
7&3 FRQQHFWLRQV DW

LGNH\ FUHDWHG ODVW XVH WLPHRXW VWDWHKRVWV FOLHQW VHUYHU
VHTXHQFH ZLQGRZ VHTXHQFH ZLQGRZ
G GF (67$%/,6+('
QRQH !WHOQHW
IE H (67$%/,6+('
I QRQH !VVK
9DULDEOHV

VU
LOOWFS WLPHRXW )HE
KRVW WLPHRXW )HE
:YNO\]OSK NS`SNS\ O]Ô ]KŃK NO ]^K^_] NY NKOWYX OW NYS] Q\KXNO]
LVYMY] 9 Z\SWOS\Y ¤ Y O]]OXMSKV NO XY]]K MYXPSQ_\KÁY 3]^Y ¤ K]

\OQ\K] K^S`K] ]OZK\KNK] OW # NS`S]ÉO] 3NOX^SPSMKXNY SXMV_]SÒ K

VSXRKNYPS\OaKVVMYXPYXNO]OOXMYX^\KWK] \OQ\K] >KWL¤W VS]^K]O
YX´ÒVNOXY^SPSMKÁY[_O¤MRKWKNYOYX¦WO\YNOÒdO]NOKMO]]Y
OY]LcÔ]_]KNY]ZY\ObOWZVYXKVSXRKÔWY]$v_]KQO$^SWO
LcÔ]v
8Y ]OQ_XNY LVYMY OXMYX^\KWY] K] vMYXObÉO] >-:v 6S]^KW]O ^YNK] K]

MYXObÉO]K^S`K]MRKWKNK]v/=>+,63=2/.vY]O\`SNY\O Y MVSOXÔ K
ZY\^K _^SVSdKNK _]KXNY]O Y XYWO NY ]O\`SY O KY PSXKV ^YNK]
MYXObÉO] MYX]SNO\KNK] SVOQKS] vSVV^MZv + VSXRK NO MYXObÉO]
K^S`K] Q_K\NK ^\ ] NKNY] SWZY\^KXÔ] ZK\K Y _]Y NK PVKQ vUSVVv
NOÒ]O VOWL\K\ [_O O]^K ¤ _WK RKLSVSNKNO [_O Y 3ZMRKSX] XÁY
ZY]]_S ]KV`Y SXPY\WKÁY MYX^\£\SK -YW Y _]Y NO v]PM USVVKVVv
WK^KWY] ^YNK O [_KV[_O\ MYXObÁY >-: K^S`K OW XY]]K \ONO ]OW
NS]M\SWSXKÁY KVQ_WK -YW v]PM USVVSNVO BBBIWSX_^Y]v ZYNOWY] WK^K\
[_KV[_O\MYXObÁY[_OO]ÔTKYMSY]YZY\NSQKWY]WSX_^Y]7K]v]PM
USVVSNUOcM\SKNYvWK]_WKOX^\O^KX^K]MYXObÉO]OWXY]]K\ONO]O
_WKMYXObÁY]OWY]^\KZO\SQY]KZY\KVQ_WK\KdÁY7K]YUSVV]YWOXÔ
P_XMSYXK MYW K] ^\ ] SXPY\WKÉO] MYWY _WK WONSNK NO Z\OYM_ZKÁY
]OQ_XNY \OVK^Y NY] Z\¥Z\SY] NO]OX`YVÒNY\O] -YWY SNOX^SPSM£VK])
@OTKWY]$
LGNH\ FUHDWHG ODVW XVH WLPHRXW VWDWHKRVWV FOLHQW VHUYHU

VHTXHQFH ZLQGRZ VHTXHQFH ZLQGRZ
G GF (67$%/,6+('
QRQH !WHOQHW
×
¤Y3.#¤Y5/C!N#"!¤Y-</+>/.
:K\K WK^K\WY] ^KV MYXObÁY O]^KLOVOMSNK OW XY]]K \ONO _]K\´KWY]

OX^ÁY$

>URRW#DOSKD @ XVUORFDOVELQVIF NLOO G
6HDUFKLQJ IRU 7&3 FRQQHFWLRQ G
&RQQHFWLRQ WHUPLQDWHG
>URRW#DOSKD @

+ YZÁY NO ^SWOY_^ OW MYXT_X^Y MYW K ZY]]SLSVSNKNO NO NO\\_LK\ K]

MYXObÉO] >-: K^S`K] ¤ _WK SWZY\^KXÔ PO\\KWOX^K NY =38?= :YNOWY]
ZY\ ObOWZVY WYXS^Y\K\ K] MYXObÉO] OW XY]]Y ]O\`SNY\ AOL O`S^KXNY
[_KV[_O\ ÔX^K^S`K NO .Y= v.OXSKV YP =O\`SMOv K^\K`¤] NO _W =C8
0VYYNSXQ@OTKWY];_KXNY_WKW£[_SXKObOM_^K_WKMYXObÁYOVKOX`SK
_W ZKMYÔ MRKWKNY =C8 NO ]cXMR\YXS]O [_KXNY _W =O\`SNY\ AOL
MYWY OW XY]]Y ObOWZVY \OMOLO XY]]Y ZKMYÔ =C8 OVO \O]ZYXNO MYW
_W =C8+-5 _W ZKMYÔ [_O ZY]]_S _WK ]O[_ XMSK X_W¤\SMK NO `KVY\
\KXN¡WSMY ;_KXNY XY]]Y RY]^ \OMOLO Y =C8+-5 KM\ONS^KWY] XY
\OMYXROMSWOX^Y KMUXYaVONQO O OX^ÁY \O]ZYXNOWY] MYW _W +-5
:Y\¤W _W ]O\`SNY\ KZ¥] OX`SK\ _W =C8+-5 O]ZO\K MO\MK NO
]OQ_XNY] ZOVY +-5 NO \O]ZY]^K ]O OVO XÁY MROQK MKXMOVK]O K
MYXObÁY/^KWL¤W]YWOXÔYS^YW£[_SXK]ZYNOWÔX^K\KMYXObÁYMYW
Y]O\`SNY\KYWO]WYÔWZY9=C80VYYNSXQMYX]S]ÔOWOX`SK\`£\SY]
ZKMYÔ]MYWvOXNO\OY]NOY\SQOWvSWKQSX£\SY]]_MO]]S`KWOXÔ;_KXNY
Y ]O\`SNY\ \OMOLO Y =C8 \O]ZYXNO WK] MYWY Y OXNO\OY XÁY ObS]Ô
XÁY \OMOLO \O]ZY]^K /]ZO\K ]OQ_XNY] O MKXMOVK K MYXObÁY =O K
MKNK]OQ_XNY]MROQKWZKMYÔ]=C8SXObS]ÔXÔ]NOYS^YMYXObÉO]_W
]O\`SNY\ Z\K^SMKWOXÔ Z£\K NO P_XMSYXK\ :YNO\´KWY] O][_OWK^SdK\
OW^\ ]WYWOX^Y]$
SYN
n CLIENTE Î SERVIDOR
SYN-ACK ... 40 segs.
o SERVIDOR Î CLIENTE
ACK
p CLIENTE Î SERVIDOR
12
Flooding em inglês quer dizer inundação...

?W Y_^\Y ^´ZSMY K^K[_O LK]OKNY OW =C8+-5 PYS NO]M\S^Y XY VS`\Y
>]_^YW_=RSWYW_\K8YOX^KX^YYYLTO^S`YNYSX`K]Y\XÁYO\KYZO\K\
]SWZVO]WOXÔ _W .Y= =O_ SXÔX^Y O\K ZOXO^\K\ X_WK \ONO Z\S`KNK
PSXQSXNY]O]O\_W^\_]ÔNRY]^MYWYÒ\OWY]_]KXNY_WKY_^\K
^¤MXSMK$ Y 3: =ZYYPSXQ ^Y ]ZYYP Y_ ]OTK V_NSL\SK\ OXQKXK\
;_O¤]OQ_XNYNO]M\SÁYNYO]ZOMSKVS]^K=,OVVY`SX$
“Um dos mais fascinantes buracos na segurança, e que foi primeiramente descrito por Morris. Em suma: usa-se uma
predição dos números de sequência TCP para construir uma sequência de pacote TCP sem em qualquer momento ter
recebido qualquer resposta do servidor. Isto lhe permite enganar (spoof) um host confiável numa rede local.”
:K\K^KX^YYSX`K]Y\KX_VY__WKNK]W£[_SXK]MYW`£\SY]=C8]NO
WKXOS\K[_OOVKXÁYZYNO\O]ZYXNO\K_WY_^\YRY]^MYXPS£ÒV+
W£[_SXK OX^ÁY \OMOLO_ _WK ]¤\SO NO =C8] Y RKMUO\ O]^_NY_ K
]O[_ XMSK X_W¤\SMK _]KNK O \O]ZYXNO_ MY\\O^KWOXÔ XY V_QK\ NK
W£[_SXK KSXNK ZK\KNK 0KdOXNY]O ZK]]K\ ZOVK W£[_SXK NK
SX^\KXO^ OX`SY_ Y ]SWZVO] MYWKXNY vOMRY ( \RY]^]v NO]^\_SXNY
[_KV[_O\ MYX^\YVO NO KMO]]Y KY RY]^ + RS]^¥\SK ¤ K]]SW MYX^KNK O
NOPY\WKKSXNKWKS]NO^KVRKNKZOVYK_^Y\OW]O_VS`\Y
.OÒ]O NSdO\ ZY\ PSW [_O Y KV_XY XÁY NOÒ MYXP_XNS\ K ^\YMK NO
=C8+-5 [_O YMY\\O OX^\O _W ]O\`SNY\ O _W MVSOXÔ MYW _W Z\YMO]]Y
NO K_ÔX^SMKÁY » S]^Y ]SW _WK ]SXM\YXSdKÁY 9 Z\Y^YMYVY >-:
NSPO\OXÔWOXÔ NY ?.: [_O Z\SWK ZOVK ÒVYMSNKNO ¤ MK\KMÔ\SdKNY
ZOVKMYXPSKLSVSNKNOXKOX^\OQKNY]ZKMYÔ]Y[_OZY\^KX^YÔW_W
M_]^Y .OX^\Y NO _W ZKMYÔ >-: KV¤W NK] SXPY\WKÉO] ]YL\O K ZY\^K
NO Y\SQOW O NK NO]^SXY NO _W MROMU]_W O^M R£ KVQ_WK] PVKQ] [_O
QK\KXÔW K MYXPSKLSVSNKNO NK MYXObÁY =C8 O +-5 ]ÁY N_K] NO]]K]
PVKQ] v<=>v ZY\ ObOWZVY \OSXSMSK K MYXObÁY Y_ 038 [_O OXMO\\K K
MYXObÁY /W ]_WK ZK\K [_O K MYXObÁY ]OTK MYXPS£ÒV ¤ XOMO]]£\SY
[_ORKTKM\S^¤\SY]ZK\KK^\YMKNONKNY]OX^\ONYS]RY]^
13
Contra-Ataque. A História da captura do Pirata Cibernético mais procurado dos Estados Unidos. Ed. Companhia da
Letras, 1996, p. 104 ss.
14
“Security Problems in the TCP/IP Protocol Suite”. Computer Communication Review, Vol. 19, nº2, p. 32.


3 Monitoração da rede
3.1 Os scanners de rede
.OZYS]NOWYX^KNYYXY]]YPS\OaKVVXOMO]]S^KWY] NO PO\\KWOX^K] XÁY

]YWOXÔZK\K`KVSN£VYMYWYZK\KKNOZ_\KÁY XOMO]]£\SK +]]SW MYWY
ZK\KX_WOÒX^_KVPKVRKNOXY]]KZYV´^SMKNOÔM^K\WY]Y]SX^\_]Y]OW
XY]]K\ONO
9KWLSOXÔ6SX_bNS]ZÉONO_WQ\KXNOX¦WO\YNOPO\\KWOX^K]Ò\OWY]
K]]SWKVQ_WK]NOVK][_O§]ÒdO]M_WZ\OWKWO]WKP_XÁYZY\¤WMYW
]_K]ZK\^SM_VK\SNKNO]
1Y]^K\´KWY] NO `YV^K\ KY PSW NY MKZ´^_VY KXÔ\SY\ :K\K ^YWK\WY] Y
ObOWZVYMS^KNYXYVS`\YNO>]_^YW_=RSWYW_\K@SWY]V£[_OYSX`K]Y\
Z¡NOK^\K`¤]NO_W3:PVYYNSXQOXQKXK\K\ONOOOX^\K\MYWY_WRY]^
MYXPS£ÒV/VOO]^_NY_K]O[_ XMSKOWS^SNKZY\_WNY]RY]^]OOX^ÁY
POd K \O]ZY]^K ObK^K -YWY S]]Y PYS ZY]]´ÒV) + Z\SY\S KNÒ\^SWY]
[_OYZ\YMO]]YNO\OMYXROMSWOX^YNY=C8+-5XÁY¤_WKK_ÔX^SMKÁY
WK]]SW_WKXOQYMSKÁYOXN^YOXNOX^\ORY]^][_O¤MY\\O^KWOXÔ
MRKWKNK NO ^MZ RKXN]RKUSXQ Y [_O ]SQXSPSMK VSÔ\KVWOXÔ _WK
O]Z¤MSO NO KZO\^Y NO WÁY] 7_S^Y ZOVY MYX^\£\SY ¤ LK]OKNY X_WK
]O[_ XMSK V¥QSMK [_O S\OWY] OXÔXNO\ MYW PKMSVSNKNO 9] X¦WO\Y]
]O[_OXMSKS] XÁY ]ÁY KVQY K]]SW MYWY ]OXRK] XÁY \OMOLOW XOXR_WK
O]Z¤MSO NO M\SZ^YQ\KPSK ?W Z\YQ\KWK NY ^SZY ]XSPPO\ NO ^Y ]XSPP$
PK\OTK\ ZYNO SXÒ]^SQK\ Y] NKNY] NO _W MKLOKVRY >-: O ObOM_^K\
K]WKXYL\K]XOMO]]£\SK]`S]KXNYK\_Z^_\KNK]OQ_\KXK
:\OMS]KWY]KQY\K`S]_KVSdK\Z\SWOS\KWOXÔ_WMKLOKVRY>-:OZK\K
_WKMYX^\KZY]SÁY_WMKLOKVRY?.:

0Y\WK^Y NO _W MKLOKVRY >-:15

_ 6RXUFH 3RUW _ 'HVWLQDWLRQ 3RUW _

_ 6HTXHQFH 1XPEHU _

_ $FNQRZOHGJPHQW 1XPEHU _

_ 'DWD _ _8_$_3_5_6_)_ _
_ 2IIVHW_ 5HVHUYHG _5_&_6_6_<_,_ :LQGRZ _
_ _ _*_._+_7_1_1_ _

_ &KHFNVXP _ 8UJHQW 3RLQWHU _

_ 2SWLRQV _ 3DGGLQJ _

_ GDWD _

8YÔ KQY\K K NSPO\OXK ZK\K _W MKLOKVRY ?.: LOW WKS] ]SWZVO]

_ 6RXUFH _ 'HVWLQDWLRQ _
_ 3RUW _ 3RUW _

_ _ _
_ /HQJWK _ &KHFNVXP _

_
_ GDWD RFWHWV

9 WY^S`Y Z\SXMSZKV O]^£ XK XK^_\OdK WO]WK NY] Z\Y^YMYVY] +

MYWZVObSNKNONYMKLOKVRY>-:O]^£OW]_K XOMO]]SNKNO O]^KLOVOMO\ K
MYXPSKLSVSNKNONKMYXObÁYNONKNY]
8Y] MKWZY] SXSMSKS] ZYNOWY] YL]O\`K\ K SXNSMKÁY ZK\K K] ZY\^K] NO

Y\SQOW O NO NO]^SXY ^KX^Y XY >-: [_KX^Y XY ?.: NSPO\OXÔWOXÔ NO
15
0YXÔ]$ <0- !# ZK\K Y MKLOKVRY >-: O <0- ! " ZK\K Y ?.:
_WMKLOKVRY3:[_O^\KdY]OXNO\OY]3:>\ ]MKWZY]XYMKLOKVRY
>-: XY] SWZY\^KW NO SWONSK^Y$ ]O[_OXMO X_WLO\ X¦WO\Y ]O[_OXMSKV
KMUXYaVONQWOX^X_WLO\X¦WO\YNO\OMYXROMSWOX^YOK]]OS]PVKQ]X_W
^Y^KVNO LS^]$?<1+-5:=2<=>=C8O038=ÁY^KS]PVKQ][_O
MYX^\YVKW K ^\KX]WS]]ÁY NO NKNY] NO PY\WK MYXPS£ÒV / ]ÁY K´
SQ_KVWOXÔ[_O]OO]MYXNOWL_\KMY]XK]OQ_\KXK
<OVOWL\KXNY$ `SWY] KXÔ\SY\WOXÔ [_O _W MVSOXÔ [_KXNY ]O MYXOM^K

MYW _W ]O\`SNY\ OX`SK ZKMYÔ YXNO XY ]O_ MKLOKVRY K PVKQ =C8 ¤
WK\MKNK/VO]YVSMS^K_WKMYXObÁY=OQ_OWY=C8+-5NY]O\`SNY\O
Y+-5YLÔXNYKMYXObÁYKPVKQ038WK\MKYOXMO\\KWOX^YNOOX`SYNO
NKNY] 7K] [_KXNY O]Ô] MKLOKVRY] ]ÁY ^\YMKNY] K XOQYMSKÁY ]O
N£ ^KWL¤W XY] MKWZY] [_O K]]SXKVKW Y] vX¦WO\Y] ]O[_OXMSKS]v O Y
vX¦WO\Y NO \OMYXROMSWOX^Yv 4£ YL]O\`KWY] [_O ¤ _WK ]O[_ XMSK
V¥QSMK /VO KMYXÔMO OW SXM\OWOX^Y] NO _WK _XSNKNO 9L]O\Ò Y
]OQ_SXÔO][_OWK$
=C8
-VSOXÔ '''''''''''''(( =O\`SNY\
=O[ X_WLO\$ <+8.98 !
+MU X_WLO\$
=C8+-5
-VSOXÔ &&''''''''''''' =O\`SNY\
=O[ X_WLO\$ <+8.98 #
+MU 8_WLO\$ ! ' "
+-5
-VSOX^ '''''''''''''(( =O\`SNY\
=O[ X_WLO\$ "
+MU 8_WLO\$ # '
+]]SWYRY]^+ZONO_WK]O]]ÁY>OVXO^MYWYRY]^,Y]O\`SNY\8Y
MKWZY ]O[_OXMO X_WLO\ NY RY]^ + [_O OX`SK Y =C8 O ¤ O]MYVRSNY
KVOK^Y\SKWOXÔ _W X¦WO\Y OW XY]]Y ObOWZVY ! 9 MKWZY
KMUXYaVONQWOX^X_WLO\O]^£YL`SKWOXÔdO\KNY O RY]^,\O]ZYXNOMYW
_W =C8+-5 O O]MYVRO KVOK^Y\SKWOXÔ XY ]O[_OXMO X_WLO\ _W X¦WO\Y

#WK]T£XYMKWZYNYX¦WO\YNO\OMYXROMSWOX^YSXM\OWOX^K$]YWK
Y ]O[_OXMO X_WLO\ NY MVSOXÔ WKS] \O]_V^KXNY " 8Y +-5 OX`SKNY
ZOVY RY]^ + ÒWY] XY ]O[_OXMO X_WLO\ " S]^Y ¤ K ]YWK NY ¦V^SWY
KMUXYaVONQWOX^X_WLO\OXY]O_X¦WO\YNO\OMYXROMSWOX^YO]^£K]YWK
NY ]O[_OXMO X_WLO\ WKS] 9L]O\Ò Y O][_OWK KXÔ\SY\ [_O O]^K
]O[_ XMSKPSMK\£WKS]MVK\K0YSK]]SW[_OYSX`K]Y\ZYNOOX^\K\XK
\ONOZ\S`KNKPKdOXNY]OZK]]K\ZY\_WKW£[_SXKMYXPS£ÒV
@OTKWY] _W ObOWZVY \OKV >\ ] PO\\KWOX^K] ]ÁY ¦ÔS] XO]]O Z\YMO]]Y
NOWYXS^Y\KÁY-KNK_WÔW]_K][_KVSNKNO]OPSMK[_K]OXYO]^SVY
NY KNWSXS]^\KNY\ YZ^K\ ZY\ O]Ô Y_ K[_OVO ]YPâK\O =ÁY OVO]$
>MZN_WZ NK 6Ka\OXMO ,O\UOVOc 8K^SYXKV 6KLY\K^Y\c
P^Z$P^ZOOVLVQY` Y 3:>\KP O]M\S^Y ZY\ 1O\KVN 4K`K [_O O]^ÁY
Z\O]OXÔ] OW [_K]O ^YNK] K] NS]^\SL_SÉO] 6SX_b O Y +:= +N`KXMON
:KMUO^ =XSPPO\ Ò\]ÁY O]M\S^Y ZY\ -R\S]^SKX =MR_VÔ
http://www.swrtec.de)
9 +:= XY] ZY]]SLSVS^K _WK \KNSYQ\KPSK MYWZVO^K NY MKLOKVRY NO _W

ZKMYÔ>-:Y_?.:\OMOLSNY:YNOWY]MYWOVO`S]V_WL\K\YK\\KXTYNO
X¦WO\Y]]O[_OXMSKS][_OObZVSMKWY]=_K]YZÉO]]ÁY$
KZ]EYZÉO]GEZ&NKIZY\^K(&ZK\KIZY\^K(GEY&^SZY(G
9XNOv^SZYvO`SNOXMSKY^SZYP\KWO]O]WLK\Z^MZ_NZO^M8K]
vYZÉO]v ZYNOWY] \O]^\SXQS\ NOMS]S`KWOXÔ Y] ZKMYÔ] K ]O\OW
WY]^\KNY]$ XÁY WY]^\K\ Y] OXNO\OY] 3: XÁY WY]^\K\ Y] OXNO\OY]
O^RO\XO^ XÁY WY]^\K\ ^KV Y_ [_KV PKSbK NO ZY\^K] O^M 9 MYWKXNY
vKZ] ROVZv VS]^K Y] ZK\WO^\Y] NO]OTKNY] =O MRKWKWY] Y Z\YQ\KWK
]OW YZÉO] Y_ \O]^\SÉO] OVO ZÉO]O ]SWZVO]WOXÔ K WYXS^Y\K\ K
\ONO @KWY] \OKVSdK\ MYWY _W Ô]Ô _WK ]SWZVO] MYXObÁY >OVXO^
Z\Y^YMYVY >-: ZY\^K +[_S Y RY]^ # " ¤ MVSOXÔ O
# "¤Y]O\`SNY\8ÁYR£]OX^SNYOW]OWY]^\K\^YNKK]KŃK

[_OY]XSPPO\XY]Z\YZY\MSYXKZYS]¤NOWK]SKNYVYXQK-YXQOVKWY]Y]
^\ ]WYWOX^Y]]SQXSPSMK^S`Y]@OTKWY]$
+:$''5 EEDGF ! FGIHF

,3$''5 !
,39HU __ +HDG[D E\WHV __ 6HUYLFH726 __ /HQJWK RYHU DOO
)UDJPHQWDWLRQ ,'[E )ODJV 2IIVHW
77/ __ 3URWRNROO 7&3 __ +HDGHU&5&[F
7&3+($'(5
3RUWV ! WHOQHW 6HT$FN 1U[DEI [ Õ
'DWD2IIVHW[D 5HVHUYHG%LW )ODJVXUJDFNSVKUVW6<1ILQ Õ
:LQGRZ[G &5&[ 8UJHQW3RLQWHU[
+:$''5 FGIHF ! EEDGF

,3$''5 !
)UDJPHQWDWLRQ ,'[F )ODJV 2IIVHW
77/ __ 3URWRNROO 7&3 __ +HDGHU&5&[G
7&3+($'(5
3RUWV ! WHOQHW 6HT$FN 1U[GD [DEI Õ
'DWD2IIVHW[D 5HVHUYHG%LW )ODJVXUJ$&.SVKUVW6<1ILQ Õ
:LQGRZ[G &5&[ 8UJHQW3RLQWHU[

,3$''5 !
)UDJPHQWDWLRQ ,'[F )ODJV 2IIVHW
77/ __ 3URWRNROO 7&3 __ +HDGHU&5&[
7&3+($'(5
3RUWV ! WHOQHW 6HT$FN 1U[DEI [GD Õ
'DWD2IIVHW[ 5HVHUYHG%LW )ODJVXUJ$&.SVKUVWV\QILQ Õ
:LQGRZ[G &5&[HGF 8UJHQW3RLQWHU[
+]]SXKVKWY]MYWK]O^KK]VSXRK][_OXY]SXÔ\O]]KWK[_S8YÔMYWY
K] PVKQ] ]_MONOW]O MYWY PYS ObZVSMKNY /VK] ]ÁY Q\SPKNK] ZOVY +:=
OWVO^\K]WKS¦]M_VK]$
8Y[_KN\YÒWY]$
)ODJVXUJDFNSVKUVW6<1ILQ Î 8P 6<1 HQYLDGR
8Y[_KN\YÒWY]$

XUJ$&.SVKUVW6<1ILQ Î 8P 6<1$&. UHVSRQGLGR
8Y[_KN\YÒWY]$
XUJ$&.SVKUVWV\QILQ Î ( ILQDOPHQWH XP $&.
9KV_XYNOÒ^KWL¤WXY^K\K]_MO]]ÁYNY]]O[_OXMOOKMUXYaVONQWOX^]
X_WLO\] 9L]O\Ò MYWY YMY\\O Y SXM\OWOX^Y [_O PYS ObZVSMKNY
KXÔ\SY\WOXÔ$
1R6<1
6HT$FN 1U
1U[DEI [

1~PHUR GH UHFRQKHFLPHQWR ]HUDGR
1R6<1$&.
6HT$FN 1U
1U[GD [DEI
5DQGRP
6HT 1U $QWHULRU
1R$FN
6HT$FN 1U
1U[DEI [GD
$FN 1U
DQWHULRU

6HT 1U $QWHULRU
9 Z\YQ\KWK +:= ¤ ]OW N¦`SNK _W NY] WKS] ¦ÔS] ]XSPPO\] ZK\K Y
KMYWZKXRKWOX^Y NO \ONO » MVK\Y [_O Z\YQ\KWK] NO]Ô ^SZY SXMV_Y
K[_S Y ^MZN_WZ ObOM_^KW _W N_WZSXQ MYWZVO^Y O ]OWZ\O ObK_]^S`Y NY
^\£POQY NO \ONO ?W \ONS\OMSYXKWOX^Y ZK\K _W K\[_S`YVYQ X_WK
ZO[_OXKSX^\KXO^N_\KXÔZY_MY]WSX_^Y]QO\K\£K\[_S`Y]OXY\WO]/
XÁY R£ Y_^\K ]YV_ÁY ZK\K Y O]^_NY NO WYXS^Y\KWOX^Y O ZK\K K
WYX^KQOW NO _W 3.= OPO^S`Y ]OXÁY Y O]^_NY M_SNKNY]Y NY] \OQS]^\Y]
OW Ôb^Y ;_O XY] KT_]NK\£ K OXMYX^\K\ K] ZOQKNK] NOSbKNK] ZY\ _WK
SX`K]ÁY
9 ^MZN_WZ ^\KLKVRK MYWY Y +:= ZY\¤W ]O_] VKcY_^] ]ÁY NSPO\OXÔ]

@OTKWY] OX^ÁY 9 Z\YQ\KWK KMOS^K NSÒ\]K] YZÉO] \O]^\S^S`K] O
SXMV_]S`K]XKVSXRKNOMYWKXNYMYX]_VÔKZ£QSXKWKX_KV=_K]KŃK
ZY]]_SY]OQ_SXÔPY\WK^YOWZKMYÔ]>-:$
(QG RULJHP ! (QG GHVWLQR IODJV VHTQXPEHU DFNQXPEHU WDPDQKRBGHBMDQHOD XUJHQW RSo}HV

4£XY]ZKMYÔ]?.:OWQO\KV$
(QG RULJHP ! (QG GHVWLQR SURWRFROR WDPDQKR
+[_SÔWY]_WK]KŃK^´ZSMKNY^MZN_WZ9L]O\`KWY]_WKMYXObÁY>-:
KL\SXNY_WK]O]]ÁY0>:$
! IWS 6

ZLQ PVV VDFN2.WLPHVWDPS QRSZVFDOH ! ')
DUS ZKRKDV WHOO
DUS UHSO\ EEDGF LVDW EEDGF
FGIHF
IWS ! 6
DFN ZLQ PVV VDFN2.WLPHVWDPS QRSZVFDOH !
')
! IWS
DFN ZLQ QRSQRSWLPHVWDPS ! ')
8YÔ [_O K ]KŃK NY ^MZN_WZ XÁY K]]SXKVK ObZVSMS^KWOXÔ KY] =C8
+-5] / SQ_KVWOXÔ XY ]O[_OXMO X_WLO\ SXSMSKV 3=8 OVO XÁY dO\K
WK]\OZOÔY]`KVY\O]8O]^KMYXObÁYK]]SXKVKNK OW XOQ\S^Y ÔWY]
¤¥L`SYK\OZO^SÁYNKV¥QSMKNO]SXM\YXSdKÁYNY]ZKMYÔ]>-:
9 ]YPâK\O 3:^\KP ^\Kd K MYWYNSNKNO NO _WK SXÔ\PKMO POS^K OW

XM_\]O] :YNOWY] \YVK\ K ÔVK ZY\ ObOWZVY ZK\K _WK `S]ÁY
SX]^KX^XOK NY ^\£POQY NO \ONO +V¤W NS]]Y Y 3ZP\KP ]OZK\K Y
^\£POQY ?.: NY >-: 2£ NSÒ\]K] Y_^\K] YZÉO] NO WYXS^Y\KWOX^Y 8Y
WOX_NOKLO\^_\KÔWY]VS]^KNK]^KS]YZÉO]$
,37UDI

_ ,3 WUDIILF PRQLWRU _
_ *HQHUDO LQWHUIDFH VWDWLVWLFV _
_ 'HWDLOHG LQWHUIDFH VWDWLVWLFV _
_ 7&38'3 VHUYLFH PRQLWRU _
_ (WKHUQHW VWDWLRQ PRQLWRU _
_ 7&3 GLVSOD\ ILOWHUV _
_ 2WKHU SURWRFRO ILOWHUV _
_ (WKHUQHW KRVW GHVFULSWLRQV _
_ 2SWLRQV _
_ ([LW _

'LVSOD\V FXUUHQW ,3 WUDIILF LQIRUPDWLRQ
8S'RZQ0RYH VHOHFWRU (QWHUH[HFXWH

+ Z\SWOS\K YZÁY v3: ^\KPPSM WYXS^Y\v WY]^\K\ OW N_K] ÔVK] K

OX^\KNKO]KŃKNOZKMYÔ]>/6+8YKV^YY^\£POQY>-:OWLKSbY
Y^\£POQY?.:K[_S_WK]O]]ÁY80=8YÔ]O[_OK]O]]ÁYÔVXO^T£
OWM_\]YZY]]_SXYPVKQ]KVO^\K+Y_]OTK+-5@OWY]^KWL¤WY]
OXNO\OY] 3: O K] ZY\^K] _]KNK] Y MVSOXÔ MYW _WK ZY\^K XÁY
Z\S`SVOQSKNKMYXOM^KXNYKZY\^KOY]ZKMYÔ]OLcÔ]OWM_\]YO
K SXÔ\PKMO _]KNK O^R 9_^\Y YZÁY SXÔ\O]]KXÔ >/6+ ZK\K
MROMK\ K \ONO ¤ K O]^K^´]^SMK NO XY]]K SXÔ\PKMO WOX_$ v.O^KSVON
SXÔ\PKMO ]^K^S]^SM]v :YNOWY] YL]O\`K\ Y] Z\Y^YMYVY] OW _]Y K
W¤NSKNOK^S`SNKNOY]O\\Y]OXMYX^\KNY]O^M
7(/$
,37UDI
6RXUFH 'HVWLQDWLRQ 3DFNHWV %\WHV )ODJV ,IDFH
_ ! $ HWK_
_ ! $ HWK_
_ _
_ _
_ _
_ _
_ _
_ _
_ _
_ _
7&3 HQWULHV $FWLYH

_ 8'3 IURP WR RQ HWK _
%RWWRP(ODSVHG WLPH
,3 7&3 8'3 ,&03 1RQ,3
8S'Q3J8S3J'QVFUO DFWY ZLQ :FKJ DFWY ZLQ 0PRUH 7&3 LQIR ;&WUO;([LW

7(/$
,37UDI
6WDWLVWLFV IRU HWK
_ _
_ 3DFNHWV %\WHV _
_ 7RWDO _
_ ,3 _
_ 7&3 $FWLYLW\ NELWVVHF _
_ 8'3 SDFNHWVVHF _
_ ,&03 _
_ 2WKHU ,3 ,3 &KHFNVXP (UURUV _
_ 1RQ,3 _
_ _
_ _
_ 3NW 6L]H E\WHV &RXQW 3NW 6L]H E\WHV &RXQW _
_ WR WR _
_ WR WR _
_ WR WR _
_ WR WR _
_ WR WR _
_ WR WR _
_ WR WR _
_ WR _
_ _
(ODSVHG WLPH
;&WUO;([LW
+QY\KZYNOWY]§^´^_VYNOObOWZVYWYXS^Y\K\_WK]SW_VKÁYNO=C8
PVYYNSXQ X_WK SX^\KXO^ / YL]O\`£VY OW XY]]Y] Z\YQ\KWK] +:= O
3:^\KP ?]K\OWY] _W ]YPâK\O MRKWKNY =cXU Y M¥NSQY ¤ O]M\S^Y ZY\
_WRKMUO\MRKWKNYDKUK^R=O_]ZK\WO^\Y]]ÁY]SWZVO]$
]cXUOXNINOIY\SQOWOXNINOINO]^SXYZY\^KZY\^K
:YNO]OYZ^K\XKPVKQvOXNINOIY\SQOWvZY\Y[_OPK\£[_OY]=C8]
]OTKWNONSPO\OXÔ]OKVOK^¥\SY]OXNO\OY]3: v:Y\^Kv O v:Y\^Kv
MYWY MRKWKWY] \OPO\OW]O §] ZY\^K] K ]O\OW MYX]O[_OXÔWOXÔ
QO\KNK]% ZY\ ObOWZVY$ ]O O]MYVROWY] K] ZY\^K] K WKXNK\OWY]
ZKMYÔ] NK ZY\^K K^¤ K ZY\^K 9] ZKMYÔ] ]ÁY K]]SW OX`SKNY]
NO PY\WK SXÔ\WSÔXÔ K^¤ K SXÔ\\_ZÁY ZOVY _]_£\SY MYW _W
-YX^\YV-Y_-YX^\YVL\OKU
7Y]^\KWY] K[_S Y 3:^\KP NOÔM^KXNY _W =C8PVYYNSXQ XYÔ MYWY Y]

OXNO\OY] 3: ]ÁY QO\KNY] KVOK^Y\SKWOXÔ O MYWY K] ZY\^K] ]ÁY

`K\\SNK]OW]O[_ XMSKKÔXÁY$R£^KWL¤W_WKMYXObÁY>OVXO^\OQ_VK\
]OXNYWY]^\KNKXKVSXRK#XYÔ^KWL¤WKPVKQ=C8WK\MKNKMYW_W
=$
,37UDI
æ 6 HWK æ
æ HWK æ
æ 6 HWK æ
æ HWK æ
æ 6 HWK æ
æ HWK æ
æ 6 HWK æ
æ HWK æ
æ ! 3$ HWK æ
æ ! $ HWK æ
æ 6 HWK æ
æ HWK æ
7&3 HQWULHV $FWLYH

æ 8'3 E\WHV IURP WR RQ HWK æ
æ 8'3 E\WHV IURP WR RQ HWK æ
æ $53 E\WHV IURP EEDGF WR FGIHF RQ HWK æ
æ $53 E\WHV IURP FGIHF WR EEDGF RQ HWK æ
æ æ
æ æ
7RS (ODSVHG WLPH
,3 7&3 8'3 ,&03 1RQ,3
+QY\K_WK^K[_ONYWO]WY^SZYOMYKXNYXO]^KMKZ^_\KNY+:=$

,3$''5 !
)UDJPHQWDWLRQ ,'[GD )ODJV 2IIVHW
77/ __ 3URWRNROO 7&3 __ +HDGHU&5&[
7&3+($'(5
3RUWV ! WHOQHW 6HT$FN 1U[ [
'DWD2IIVHW[ 5HVHUYHG%LW )ODJVXUJDFNSVKUVW6<1ILQ
:LQGRZ[IIII &5&[I 8UJHQW3RLQWHU[

,3$''5 !
)UDJPHQWDWLRQ ,'[EG )ODJV 2IIVHW
77/ __ 3URWRNROO 7&3 __ +HDGHU&5&[
7&3+($'(5
3RUWV ! XQNQRZQ 6HT$FN 1U[ [
:LQGRZ[IIII &5&[IDG 8UJHQW3RLQWHU[

,3$''5 !
)UDJPHQWDWLRQ ,'[H )ODJV 2IIVHW

77/ __ 3URWRNROO 7&3 __ +HDGHU&5&[

7&3+($'(5
3RUWV ! VPWS 6HT$FN 1U[ [
:LQGRZ[IIII &5&[GI 8UJHQW3RLQWHU[

,3$''5 !
)UDJPHQWDWLRQ ,'[EE )ODJV 2IIVHW
77/ __ 3URWRNROO 7&3 __ +HDGHU&5&[GGE
7&3+($'(5
3RUWV ! XQNQRZQ 6HT$FN 1U[ [
:LQGRZ[IIII &5&[EIE 8UJHQW3RLQWHU[

,3$''5 !
)UDJPHQWDWLRQ ,'[E )ODJV 2IIVHW
77/ __ 3URWRNROO 7&3 __ +HDGHU&5&[F
7&3+($'(5
3RUWV ! QVZIH 6HT$FN 1U[ [
:LQGRZ[IIII &5&[DH 8UJHQW3RLQWHU[

8ÁYZYNO\´KWY]NOSbK\NOWOXMSYXK\_WKPO\\KWOX^K Z\O]OXÔ OW [_K]O

^YNY]Y]]S]ÔWK]?83BMRKWKNKvXO^]^K^v-YWYT£NOWY]X^\KYXYWO
^\K^K]O _W Z\YQ\KWK ZK\K WY]^\K\ K] O]^K^´]^SMK] OW XY]]K \ONO
:Y\¤W NSPO\OXÔWOXÔ NY] Y_^\Y] ]YPâK\O] Y XO^]^K^ ¤ NO MO\^K
PY\WKO]^£^SMYZYS]XY]WY]^\KY]O]^KNYK^_KVNO_WSXÔ\PKMONO
\ONO]OQ_XNYYZ\Y^YMYVYNOXY]]KO]MYVRK:Y\ObOWZVYÔWY]K[_S
_W=C8PVYYNSXQMKZ^KNYZOVYXO^]^K^$
>URRW#DOSKD ELQ@ QHWVWDW Q W

$FWLYH ,QWHUQHW FRQQHFWLRQV ZR VHUYHUV
3URWR 5HFY4 6HQG4 /RFDO $GGUHVV )RUHLJQ $GGUHVV 6WDWH
WFS (67$%/,6+('
WFS (67$%/,6+('
WFS (67$%/,6+('
WFS (67$%/,6+('
WFS (67$%/,6+('
WFS (67$%/,6+('
WFS (67$%/,6+('
WFS (67$%/,6+('
WFS (67$%/,6+('
WFS (67$%/,6+('
WFS 6<1B5(&9
WFS 6<1B5(&9
WFS 6<1B5(&9
WFS 6<1B5(&9

WFS 6<1B5(&9

WFS 6<1B5(&9
WFS 6<1B5(&9
WFS 6<1B5(&9
WFS 6<1B5(&9
WFS 6<1B5(&9
WFS 6<1B5(&9
WFS 6<1B5(&9
WFS 6<1B5(&9
WFS 6<1B5(&9
WFS 6<1B5(&9
WFS 6<1B5(&9
WFS 6<1B5(&9
WFS 6<1B5(&9
WFS 6<1B5(&9
WFS 6<1B5(&9
WFS 6<1B5(&9
WFS 6<1B5(&9
WFS 6<1B5(&9
WFS 6<1B5(&9
WFS 6<1B5(&9
WFS 6<1B5(&9
WFS 6<1B5(&9
WFS 6<1B5(&9
WFS 6<1B5(&9
WFS 6<1B5(&9
WFS 6<1B5(&9
WFS 6<1B5(&9
WFS 6<1B5(&9
WFS 6<1B5(&9
9,3V
IDOVRV
96<1V
8ÁY]ONOÒO]^\KXRK\KObZ\O]]ÁY_]KNK=C8</-@9XO^]^K^MYWY
PKVKWY] ¤ _WK PO\\KWOX^K ^\KNSMSYXKV NY] =S]ÔWK] YZO\KMSYXKS]
?83BZY\S]]Y_]KKObZ\O]]ÁYMKX¡XSMKZ\O]OXÔXY<0-!#+VS_WK
MYXObÁY >-: PYS SXÔ\Z\O^KNK MYWY _WK Z\YQ\O]]ÁY NO O]^KNY] MYW
NSPO\OXÔ] ]SQXSPSMKNY] YXNO =C8</-/3@/. ¤ _W NOVO] ^KS] MYWY
63=>/8 O]ZO\K ZY\ _WK MYXObÁY /=>+,63=2/. O]^KLOVOMSWOX^Y NK
MYXObÁY>-:038A+3>O]ZO\KZOVY^¤\WSXYNKMYXObÁYO^M
/X^\O^KX^Y K KX£VS]O NO ^KS] PO\\KWOX^K] NO WYXS^Y\KÁY XÁY XY]

\O]ZYXNOW]OQ_\KWOXÔ_WK[_O]^ÁYNO_WK^K[_O3:]ZYYPSXQ_WZYX^Y
ZO\WKXOMO KLO\^Y ;_KV ]OTK MYWY Y SX`K]Y\ ZYNO OX`SK\ _W ZKMYÔ
MYW_WOXNO\OYNO_WRY]^MYXPS£ÒVOKV¤WNYWKS]\O]ZYXNOXNYK
_W=C8+-5)-YWYWYX^K\_W]O[_OXMOX_WLO\Y__WKMUX_WLO\)
?W ]YPâK\O KLO\^Y MRKWKNY =OXN3: Ò\]ÁY NO 7SUO <SMRK\N]
WSUO*OK\^RVS M\SKNY NOX^\Y NY MRKWKNY :\YTOM^ :_\ZVO
R^^Z$aaaOK\^RVSZY\ObOWZVYZYNOPKdO\^KVYZO\KÁY]OXNY

_WK SWZY\^KX^´]]SWK PO\\KWOX^K NO NOL_Q O KNWSXS]^\KÁY NO \ONO O

PS\OaKVV
9=OXN3:KMOS^KSX¦WO\K]YZÉO]XKVSXRKNOMYWKXNY-YL\SXNY[_K]O
^YNK]K]YZÉO]ObS]ÔXÔ]XY]Z\Y^YMYVY]?.:>-:O3-7:@OTKWY]$
]OXNSZ &RY]^XKWO( Z &^SZY( N &NKNY]( &YZÉO](
&RY]^XKWO( S] ^RO XKWO YP ^RO RY]^ ^Y ]OXN ^RO ZKMUO^ ^Y NOPK_V^] ^Y
VYMKVRY]^
&^cZO( S] ^RO ZKMUO^ ^cZO$ M_\\OX^Vc ?.: >-: Y\ 3-7: NOPK_V^] ^Y 3:
&NK^K( S] ^RO NK^K ZKcVYKN YP ^RO ZKMUO^ K] K ]^\SXQ YP RObKNOMSWKV
X_WLO\] NOPK_V^] ^Y LcÔ] YP ]
9:À9 ./=-<3À9 :+.<À9
9ZÉO] NO ]Y[_OÔ$
]N .OL_Q
]\ 8ÁY \YÔK\ SO NY \Y_Ô
]L :O\WSÔ L\YKNMK]^
9ZÉO] 3:$
S] 3: NO Y\SQOW !
SN 3: NO NO]^SXY -Y\\O^Y
SR >KWKXRY NO MKLOKVRY -Y\\O^Y
Sc v>cZO YP ]O\`SMOv Ò\ <0-!#
SV >KWKXRY -Y\\O^Y
SS 3NOX^SPSMKÁY +VOK^¥\SY
SP\ 0VKQ \O]O\`KNK
SPN 8ÁY P\KQWOX^K
SPW 7KS] P\KQWOX^Y]
SP v0\KQ YPP]O^v
S^ >>6
SZ :\Y^YMYVY -Y\\O^Y ZK\K Y ^SZY
SM v-ROMU]_Wv -Y\\O^Y
9ZÉO] 3-7:$
M^ >SZY " @O\ <0-!#
MN -¥NSQY @O\ <0-!#
MM v-ROMU]_Wv -Y\\O^Y
9ZÉO] ?.:$
_] :Y\^K NO 9\SQOW
_N :Y\^K NO .O]^SXY
_V >KWKXRY -Y\\O^Y
_M v-ROMU]_Wv -Y\\O^Y
9ZÉO] >-:$
^] :Y\^K NO 9\SQOW
^N :Y\^K NO .O]^SXY
^X v=O[_OXMO X_WLO\v +VOK^¥\SY

^K v+MUXYaVONQOWOX^v
^^ v.K^K YPP]O^v -Y\\O^Y
^\ <O]O\`KNY
^P_ -YXP v_\Q LS^v K WOXY] [_O ^_ ]OTK O]ZOMSPSMKNY
^PK -YXP vKMU LS^v K WOXY] [_O ^K ]OTK O]ZOMSPSMKNY
^PZ -YXP vZ]R LS^v
^P\ -YXP v\]^ LS^v
^P] -YXP v]cX LS^v
^PP -YXP vPSX LS^v
â 4KXOVK
^M v-ROMU]_Wv -Y\\O^Y
^_ 3XNSMKNY\?\Q XMSK
:YNOWY] KQY\K OX`SK\ _W ZKMYÔ >-: K XY]]K O]MYVRK ZK\K _W RY]^
[_KV[_O\ NO XY]]K \ONO O OX^ÁY KXKVS]K\ MYW Y +:= O Y 3:^\KP Y
MYXÔ¦NYNYZKMYÔ0K\OWY]MYWK]]OQ_SXÔ]YZÉO]$
]OXNSZ # " Z ^MZ S] ^] ^N
ªMYX^ ^K^_
9 Z\SWOS\Y OXNO\OY 3: ¤ Y RY]^ [_O NO]OTKWY] OX`SK\ Y ZKMYÔ Y

Z\Y^YMYVY>-:YOXNO\OYNO_W]O\`SNY\[_O_]K\OWY]ZK\K]ZYYPSXQ
KW£[_SXK[_OO]^KOX`SKXNY¤Y\SQSXKVWOXÔ# "=OQ_OW]O
K]YZÉO]^´ZSMK]NYZ\Y^YMYVY$v^]vZY\^KNOY\SQOW`KVY\v
^Nv ZY\^K NO]^SXY ]]R v^Kv Y X¦WO\Y NO \OMYXROMSWOX^Y
PY\TKNY$vvOWNOMSWKS]OZY\PSWWK\MKWY]OOX^ÁYK^S`KWY]
MYWvvKPVKQ?<1NYMKLOKVRY
-YWY+:=WYXS^Y\KXNYXY]]YRY]ÔVOXY]\OZY\^K$
+N`KXMON:KMUO^=XSPPO\ @ -98031.+>/$ $"$#

-YZc\SQR^ - ### -R\S]^SKX =MR_VÔ NQX]a*]K^_\XP\KXUOXNO
>RS] Z\YQ\KW S] P\OO ]YPâK\O% cY_ MKX \ONS]^\SL_Ô S^ KXNY\ WYNSPc
S^ _XNO\ ^RO Ô\W] YP ^RO 18? 1OXO\KV :_LVSM 6SMOX]O K] Z_LVS]RON Lc
^RO 0\OO =YPâK\O 0Y_XNK^SYX
2A+..<$ $$L$L$K#$NM ( $M$NP$O$$M
3:+..<$ ( # "
3:@O\ ff 2OKN$bK LcÔ] ff =O\`SMO>9=$ ff 6OXQ^R YÒ\ KVV$
0\KQWOX^K^SYX$ 3.$b ! 0VKQ]$ 9PP]O^$
>>6$ ff :\Y^YUYVV$ >-: ff 2OKNO\-<-$bL

>-:2/+./<$
:Y\^]$ ( XOaKMM^ =O[+MU 8\$bM !L b##
.K^K9PP]O^$b <O]O\ÒN ,S^$ 0VKQ]$?<1+-5Z]R\]^=C8PSX
ASXNYa$bPPPP -<-$b ?\QOX^:YSXÔ\$b

2A+..<$ $$L$L$K#$NM ( $M$NP$O$$M
+<:$ 3:(/^RO\XO^
<O[_O]^ P\YW # " 2A$$$L$L$K#$NM
1YO] ^Y # " 2A$$$$$$

2A+..<$ $M$NP$O$$M ( $$L$L$K#$NM
+<:$ 3:(/^RO\XO^
+X]aO\ P\YW # " 2A$$M$NP$O$$M
1YO] ^Y # " 2A$$$L$L$K#$NM

+QY\KXY3:^\KPZYNOWY]SQ_KVWOXÔYL]O\`K\$
Ø
,37UDI
_ ! 6$8 HWK _
_ ! HWK _
_ _
_ _
_ _
_ _
_ _
_ _
_ _
_ _
7&3 HQWULHV $FWLYH

_ _
_ _
_ _
_ _
_ _
_ _
%RWWRP(ODSVHG WLPH
,3 7&3 8'3 ,&03 1RQ,3
+[_S YL]O\`KWY] OW KWLK] K] ÔVK] _W ¦XSMY ZKMYÔ O ObK^KWOXÔ
MYWY]`KVY\O][_OM\SKWY]9]MKWZY]OWNO]^K[_OXY]WY]^\KWS]]Y
+ VOS^_\K NY MKLOKVRY XY] WY]^\K PKMSVWOXÔ Y] LS^] NO _\Q XMSK
WK\MKNY] O Y =C8+-5 NY ZKMYÔ ^KWL¤W Y +:= ZYNO XY] WY]^\K\ Y
X¦WO\Y NO \OMYXROMSWOX^Y [_O O]^KLOVOMOWY] vv ObZ\O]]Y OW
RObKNOMSWKS]vb##v

9_^\Y NO^KVRO K ]O\ XY^KNY ¤ K \O[_S]SÁY +<: +NN\O]] <O]YV_^SYX

:\Y^YMYV 9] ZKMYÔ] +<:] XÁY ]ÁY Ob^\OWKWOXÔ SWZY\^KXÔ] OW
Ô\WY] NO ]OQ_\KXK :YS] O]^KWY] X_W X´ÒV WKS] LKSbY NK ZSVRK
>-:3:7K]ZY\Y_^\YVKNYZYNO\OÒVK\ KVQ_X] ^\KY] SWZY\^KXÔ]
ZK\K Y WYXS^Y\KWOX^Y NK \ONO @OTKWY] +<: ¤ _W Z\Y^YMYVY [_O VSQK
_W OXNO\OY O^RO\XO^ MRKWKNY MYW_WOXÔ NO 7ONSK +MMO]] -YX^\YV
7+- Y_ OXNO\OY NO RK\NaK\O O^RO\XO^ K _W OXNO\OY 3:
K^\SL_ŃY=OQ_XNYKNOPSXSÁYZ\OMS]KNO.Y_QVK]-YWLO\$
+<:¤_WZ\Y^YMYVYNOLKSbYX´ÒV[_OKL]^\KSYOXNO\OKWOX^Y
P´]SMYZO\WS^SXNY[_O]OTKK^\SL_ŃY_WOXNO\OY3:ZK\KMKNK
W£[_SXK3NOKVSdKWY]+<:MYWYZK\ÔP´]SMKNY]S]ÔWKNO\ONO]O
XÁYMYWYZK\ÔNYZ\Y^YMYVYNOSXÔ\VSQKÁYOW\ONO]16
;_KXNY _W RY]^ NK \ONO NO]OTK ]KLO\ Y 7+- NO _W Y_^\Y RY]^ OVO
OX`SK _WK \O[_S]SÁY Y_ _W ZKMYÔ +<: ZY\ L\YKNMK]^ ZO\Q_X^KXNY
[_KV Y OXNO\OY NO RK\NaK\O NK W£[_SXK MYW 3: ZY\ ObOWZVY
v# "v)>YNK]K]W£[_SXK]KMOS^KWYZKMYÔ+<:WK]MYWY]¥
R£_WKW£[_SXKMYW^KVOXNO\OKWOX^Y]YWOXÔ OVK \O]ZYXNO OX`SKNY
]O_ 7+- .O]ZYS] ¤ PY\WKNY _W MKMRO MYW _WK VS]^KQOW MYW Y]
OXNO\OY] 3Z] O Y] OXNO\OY] NO RK\NaK\O 9 MYWKXNY K\Z X` ZYNO
WY]^\K\YMKMROM\SKNY$
>URRW#EHWD ELQ@ DUS QY

$GGUHVV +ZW\SH +ZDGGUHVV )ODJV 0DVN ,IDFH
HWKHU ))) & HWK
HWKHU )))) & HWK

97+-¤_WOXNO\OY¦XSMY9_]OTKMKNKKNKZ^KNY\NO\ONOZY]]_S_W
OXNO\OY ]SXQ_VK\ XY PY\WK^Y NO " LS^] LcÔ] O]M\S^Y OW
RObKNOMSWKS] O ]OZK\KNY] ZY\ $ Y_ 9] ^\ ] Z\SWOS\Y] LcÔ]
16
-97,/< . 3XÔ\VSQKÁY OW <ONO MYW >-:3: <SY NO 4KXOS\Y ON -KWZ_] ##" Z
"

NO]SQXKW Y M¥NSQY NY PKL\SMKXÔ NK ZVKMK NOÔ\WSXKNY ZOVK 3///

3X]^S^_Ô YP /VO^\SMKV KXN /VOM^\YXSM] /WQSXOO\] 9 7+- NO ]_K
ZVKMK NO \ONO ZYNO ]O\ WY]^\KNY MYW Y MYWKXNY vSPMYXPSQv% XK
Z\SWOS\KNKVSXRKNKSXÔ\PKMOO^RO\XO^ZYNO]O YL]O\`K\ K OX^\KNK
2AKNN\ B$B$B$B$B$ /W XY]]Y ObOWZVY OXMYX^\KWY] _WK ZVKMK NK
OWZ\O]K-97]O_7+-¤$
$$,$,$+#$.-
ªM¥N NK OWZ\O]K -97
+SXNK OW XY]]Y ObOWZVY `SWY] [_O K W£[_SXK [_O OX`SY_ ZKMYÔ]
]ZYYPSXQNOSbK\£MYWMO\ÔdK\K]^\Y]+\O[_S]SÁY+<:O]^£ObZ\O]]K
XY+:=XK]]OQ_SXÔ]VSXRK] :
2A+..<$ $$L$L$K#$NM ( $M$NP$O$$M

+<:$ 3:(/^RO\XO^
<O[_O]^ P\YW # " 2A$$$L$L$K#$NM
1YO] ^Y # " 2A$$$$$$
OXNO\OY KSXNK NO]MYXROMSNY

2A+..<$ $M$NP$O$$M ( $$L$L$K#$NM
+<:$ 3:(/^RO\XO^
+X]aO\ P\YW # " 2A$$M$NP$O$$M
1YO] ^Y # " 2A$$$L$L$K#$NM
\O[_S]SÁY MYWZVO^KNK
9 ZKMYÔ ]ZYYPSXQ PYS OX`SKNY ZOVY RY]^ # " WK] WO]WK K
W£[_SXK [_O OX`SY_ Y ZKMYÔ K\^SPSMSKV SWONSK^KWOXÔ OX`SK _W
ZKMYÔ+<:/KY_^\KW£[_SXK\O]ZYXNOMK]KXNYYOXNO\OY3:MYWY
7+-
3.2 Saint: Security Administrator's Integrated Network Tool
@KWY] KQY\K KXKVS]K\ K PO\\KWOX^K =KSX^ =OM_\S^c +NWSXS]^\K^Y\v]

3XÔQ\KÔN8OâY\U>YYVÒ\]ÁY\OVOK]O!_W]YPâK\OKLO\^YO

W_S^Y ZYNO\Y]Y NO]OX`YV`SNY ZOVK AY\VN ASNO .SQS^KV =OM_\S^c

R^^Z$aaaaaN]SMYW]KSX^ /VO P_XMSYXK OW [_K]O ^YNY] Y]
]S]ÔWK] ?83B ZK\K ]_K _^SVSdKÁY XOMO]]S^K NK VSXQ_KQOW :O\V
Ò\]ÁY Y_ ]_ZO\SY\% O ZY\ \YNK\ NOX^\Y NO _W L\Ya]O\
XOMO]]S^K O`SNOXÔWOXÔ NO [_KV[_O\ ^SZY NO L\Ya]O\ ZK\K AOL K^¤
WO]WYY]OWWYNYÔb^Y^KVMYWYY6cXbZYNOW]O\_]KNY]9=KSX^
¤_WKO`YV_ÁYNKMYXROMSNKPO\\KWOX^K=K^KXO]M\S^KZY\.0K\WO\
A @OXOWK O ZY]]_S WO]WY Q\KXNO] ZY\ÉO] NO MYZc\SQR^ NO]Ô
]YPâK\O 7K] ]OW N¦`SNK Y =KSX^ O]^£ LOW WOVRY\ KNKZ^KNY §]
NS]^\SL_SÉO] 6SX_b ;_OW ÔX^Y_ MYWZSVK\ Y =K^KX XY 6SX_b Y_
bO]^K\£NOKMY\NYMYXY]MY
8OW ^YNK] K] NS]^\SL_SÉO] 6SX_b SXMV_OW _WK Ò\]ÁY NY =KSX^ +
ObMOÁY ^KVÒd ]OTK K NK =_=/ ` [_O T£ NS]^\SL_S Y ZKMYÔ
MYWZSVKNY:K\KPKd VYObOM_ÔY]]OQ_SXÔ]ZK]]Y]$
.SQSÔvWKUOVSX_bvZK\KKMYWZSVKÁYNY]LSX£\SY]
.OZYS] KT_]Ô Y] ZK^R] ZK\K Y] ]M\SZ^] OW :O\V MYW vZO\V
\OMYXPSQvMYWS]]Y^KWL¤WY=KSXÔXMYX^\K\£KKT_]^K\£YZK^RZK\K
YL\Ya]O\NS]ZYX´ÒVXY]S]ÔWK]ONO]OTK\KVÔ\£VYONSÔYK\[_S`Y
vMYXPSQZK^R]ZVv
@YM XOMO]]S^KNO]VSQK\Y]O\`SNY\Z\Ybc[_KXNYPY\_]K\Y=KSX^
ZYS]OVOZ\OMS]KNOKMO]]YNS\O^YKY]RY]^]NK\ONO@YM ZYNOPKdO\
ONS^KXNY K ]_K `K\S£ÒV NO KWLSOXÔ KVQY NY ^SZY R^^ZIZ\Ybc O
^KWL¤W NO]PKdOXNY Y _]Y NY Z\Ybc XY XO^]MKZO =OW O]]O KT_]Ô Y
=KSX^XÁYP_XMSYXK\£
+QY\KT£ZYNOWY]VKXK\Y=KSX^=O_]K\WY]_WL\Ya]O\Q\£PSMYMYWY
Y XO^]MKZO Y_ Y 8=-+ WY]KSM Z\OMS]KWY] O]^K\ XY BASXNYa] .O _WK
TKXOVK NY Ô\WSXKV Q\£PSMY Y BÔ\W ZY\ ObOWZVY MK\\OQKWY] Y
Z\YQ\KWKKZK\^S\NY]O_NS\O^¥\SY$

MN_]\VYMKV]KSX^
OOX^ÁY$
]KSX^
+ÔVKSXSMSKVWY]^\K_WWOX_NOP_XÉO]NYZ\YQ\KWK9=KSX^XÁY¤
KZOXK]_W]YPâK\ONOQO\OXMSKWOX^YNO\ONO7K]]SW_WZ\YQ\KWKNO
KX£VS]O O \OVK^¥\SY NO NSKQX¥]^SMY] NO XY]]K \ONO O ]O_] RY]^] 9
=KSX^ Z\YM_\K `_VXO\KLSVSNKNO] O OX^ÁY K] \OZY\^K PY\WK^KXNYK]
X_WKZ£QSXK2^WV
@OTKWY]Y]O_WOX_NOKLO\^_\K$
.+>+ 7+8+1/7/8> Ö MYXPSQ_\K Y K\[_S`Y Y ZKN\ÁY ¤$

`K\]KSX^]KSX^NK^K YXNO Y Z\YQ\KWK S\£ \OQS]^\K\ ]_K] KX£VS]O]
O \O]_V^KNY]% Y Y_^\Y SÔW 7O\QO aS^R ObS]^SXQ =+38> NK^K LK]O ¤
_]KNYZK\KP_XNS\NYS]K\[_S`Y]NONKNY]Z\YN_dSNY]ZOVY=KSX^
>+<1/> =/6/->398 Ö MYXPSQ_\K Y RY]^ Y_ Y] RY]^] NO _WK ]_L\ONO
Z\SW£\SK +[_S ]O\ÁY O]MYVRSNK] K] P_XÉO] L£]SMK] NY Z\YQ\KWK [_O
S\OWY]NO^KVRK\§P\OXÔ
.+>+ +8+6C=3= Ö WY]^\K Y] \OVK^¥\SY] O KX£VS]O] NOZYS] NK

SXÒ]^SQKÁYNO_WRY]^
-98031?<+>398 71> WKXKQOWOX^ Ö » _WK Z£QSXK [_O QO\OXMSK K]

MYXPSQ_\KÉO]QO\KS]NY=KSXÔNS^KXNYYK\[_S`YvMYXPSQ]KSX^MPv
>KS]MYWYYK\[_S`Y]NONKNY]YvX´ÒVNOZO][_S]KvVOÒVZ\YLO
Y `KVY\ NO ^SWOY_^ [_KS] ]_PSbY] S\OWY] ObMV_S\ NK ZO][_S]K WSV
QY`ZY\ObOWZVY]O_]KWY]_W.8=O^M

.9-?7/8>+>398 O ><9?,6/=299>381 Ö ]ÁY VSXU] ZK\K K NYM_WOX^KÁY

K\WKdOXKNKVYMKVWOXÔ
+ SXÔ\PKMO MYX]^\_ŃK MYWY _WK Z£QSXK AOL ¤ LK]^KXÔ K_^Y

ObZVSMK^S`K -YWOK\OWY] MYW K O]MYVRK NO _W RY]^ NO XY]]K \ONO O
]OQ_S\OWY] Y] ZK]]Y] NY Z\YQ\KWK /]MYVROWY] XY WOX_$ ^K\QO^
]OVOM^SYX O Z\OOXMROWY] MYW Y OXNO\OY NY RY]^ :YNOWY] `K\\O\
^YNKKXY]]K\ONO^KWL¤W]OO]^SÒ\WY]X_WKW£[_SXKMYWLK]^KXÔ
\OM_\]Y NO WOW¥\SK 9_ ZYNOWY] O]MYVRO\ K ObOM_ÁY NO _W .OXSKV 9P
=O\`SMO +LKSbY OXMYX^\KWY] K ]OVOÁY NY ]MKXXSXQ VOÒV$ VOÒ
XY\WKV ZO]KNY O`S^KXNY ZY\^K] Z\YLVOW£^SMK] NY ASXNYa] 8> O Y
¦V^SWY X´ÒV Y vROK`cv XÁY O`S^KXNY K] ZY\^K] Z\YLVOW£^SMK] NY
ASXNYa] 8> 8K O]MYVRK PSXKV RKLSVS^KWY] Y_ XÁY Y PS\OaKVV XK
W£[_SXKK]O\SXÒ]^SQKNK
0OS^Y]Y]KT_]ÔSXSMSKWY]KSXÒ]^SQKÁY$=^K\^^RO]MKX
+]]SW Y =KSX^ MYWOK ]_K `K\\ON_\K XY RY]^ O K ]_L]O[_OXÔ MYVO^K

NO NKNY] NOZOXNOXNY NY ^\£POQY NO \ONO O WO]WY NY RK\NaK\O NY
O[_SZKWOX^YZYNO]OVO`K\_WMO\^YÔWZYK^¤PSXKVSdK\K`K\\ON_\K
+ Z£QSXK NO `K\\ON_\K S\£ WY]^\K\ K] ZY\^K] O Y] ]O\`SY]
OXMYX^\KNY]K^¤KX_XMSK\YPSWNK^K\OPK$=KSX^\_XMYWZVOÔN
@OWY]K[_SYZ\YMO]]YNO`K\\ON_\KNY=KSX^X_WRY]^$

/VOXY]WY]^\K^YNY]Y]]O\`SY]O]_K]\O]ZOM^S`K]ZY\^K]»_W
WKZK MYWZVO^Y NK] ZY\^K] [_O O]^ÁY KLO\^K] X_W RY]^ NO XY]]K \ONO
\O]^KXY]MROMK\]OO]ÔO]^KNYNOMYS]K]¤MY\\O^YY_XÁY
/]MYVROWY] KQY\K K YZÁY -YX^SX_O aS^R \OZY\^ KXN KXKVc]S] -YW
O]]K YZÁY Y =KSX^ S\£ KXKVS]K\ Y [_KN\Y OXMYX^\KNY XK W£[_SXK
# "
+ ÔVK LKSbY WY]^\K K] YZÉO] YPO\OMSNK] ZOVY ]YPâK\O =ÁY ^\ ]
LVYMY] NO YZÉO]$ v@_VXO\KLSVSNKNO]v v3XPY\WKÉO] ]YL\O YRY]^v O
ZY\ PSW _WK VS]^KQOW NO v>\_]ÔN RY]^]v =OW N¦`SNK Y Z\SWOS\Y
LVYMY¤YWKS]SWZY\^KXÔNYZYX^YNO`S]^KNK]OQ_\KXK9]OQ_XNY
OYÔ\MOS\Y]ÁYWKS]SXPY\WK^S`Y]

» ZY\ MYX]OQ_SXÔ XY X´ÒV 3 v,c +ZZ\YbSWKÔ .KXQO\ 6OÒVv NK]
@_VXO\KLSVSNKNO] [_O Y =KSX^ S\£ PKdO\ Z\SWOS\KWOXÔ _WK KX£VS]O
W_S^K\SMKNY]Z\YLVOWK]ZYÔXMSKS]OXMYX^\KNY]]OOVOZY\ÒX^_\K
Y] OXMYX^\K\ +[_S MYWY T£ KX_XMSK Y WOX_ OVO VS]^K Y] Z\YLVOWK]
]OQ_XNYYX´ÒVNOZO\SQYKZ\YbSWKNY9]Z\YLVOWK]ZYNOW]O\Y]WKS]
NSÒ\]Y] ZY]]´ÒS] /VO PK\£ _WK Z\YM_\K ObK_]^S`K O MYVYMK\£ _WK
ZO[_OXK LYVK Ò\WOVRK ZK\K K]]SXKVK\ K ObS]^ XMSK NO Z\YLVOWK]
M\´^SMY] [_O ZY]]KW ]O\ OXMYX^\KNY] +Y WO]WY ÔWZY ]ÁY WYX^KNY]
SXÔ\O]]KXÔ] VSXU] ZK\K ObZVSMKÉO] LK]^KXÔ Z\YÒS^Y]K] [_O
O]^ÁYOWK\[_S`Y]OWNS\O^¥\SY]VYMKS]
8YSÔWKLKSbYX´ÒV33,c>cZO YP @_VXO\KLSVS^c OXMYX^\KWY]

_WK VS]^K NY] Z\YLVOWK] OXMYX^\KNY] ]OQ_XNY Y ^SZY NO
`_VXO\KLSVSNKNO-YWYWY]^\KKÔVKKLKSbY$

9 RY]^ OW [_O]^ÁY ¤ _WK W£[_SXK \YNKXNY Y ASXNYa] 8>

aY\U]^K^SYX9=KSX^KZYX^K^\ ]VSXU]$
+NÒ\Ô ZK\K Z\YLVOWK] NO .Y= MK\KMÔ\´]^SMY] NO ]S]ÔWK]

ASXNYa]
9 K\[_S`Y ObZY\^ NY 80= \YNKXNY XY ASXNYa] 8> XÁY SWZÉO
\O]^\SÉO]ZK\KNS\O^¥\SY]OK\[_S`Y]
/VO SWKQSXOW NOÔM^K O VS]^K Y Z\¥Z\SY ASXNYa] MYWY _W

Z\YLVOWK
9 VSXU O LK]SMKWOXÔ KNÒ\ÔW ZK\K Y _]Y NO ZK^MRO] ZK\K

MY\\SQS\Z\YLVOWK]NO.Y=XYKWLSOXÔASXNYa]
+]]SW ]O NO\WY] _W MVS[_O OW v:Y]]SLVO .Y= Z\YLVOWv Y_ vASXNYa]
NOÔMÔNv OXMYX^\K\OWY] _WK ÔVK MYW Y] OXNO\OY] NY]
RY]^]O]O]OQ_SWY]OX^ÁYYVSXUOXMYX^\K\OWY]Y]OQ_SXÔ$

+ LYVK Ò\WOVRK WK\MK _W Z\YLVOWK M\´^SMY K ]KLO\ Y NS\O^¥\SY

vN\SÒMv NK W£[_SXK 8> ZYNO ]O\ WYX^KNY ZY\ [_KV[_O\ _]_£\SY
SXNS]M\SWSXKNKWOXÔ 0OS^K K KNÒ\^ XMSK \O]^K KY KNWSXS]^\KNY\ NK
\ONO^YWK\K]WONSKNK]XOMO]]£\SK]_WKNSMK¦^SVK[_S¤MYXPO\S\Y
K\[_S`Y v\_VO]N\YZv KVS ZYNOWY] MYXPSQ_\K\ PK^Y] K ]O\OW
XOQVSQOXMSKNY] ZOVY =KSX^ /bOWZVY$ ¤ LK]^KXÔ MYW_W XK] \ONO] [_O
_]KW 80= VSLO\K\OW K WYX^KQOW NO _XSNKNO] NO -.<97 XY] ]O_]
K\[_S`Y]O^MObZY\^]ZYNOWY]MYXPSQ_\K\OX^ÁYZK\K[_OY=KSX^XÁY
\OZY\Ô^KVPK^YMYWY_WZ\YLVOWK
+]LYVK]WK\\YX]v3]cY_\RY]^K.Y=^R\OK^)vOY]OQ_SXÔ
MYWYNS]]OWY]KXÔ\SY\WOXÔO]MVK\OMOWXY]NKXOMO]]SNKNONO
MY\\OÉO]MYX^\KK]KÉO].Y=

+8/B9=
+XObY +$ 9 K\[_S`Y vO^MZ\Y^YMYV]v
+XObY ,$ 9 K\[_S`Y vO^M]O\`SMO]v
+XObY -$ ?W v]M\SZ^v ZK\K 3:-2+38=
+XObY .$ 9] MKLOKVRY] NO ZKMYÔ] 3: 3-7: >-: ?.: O +<:
+XObY /$ -YWY _W ZKMYÔ `SKTK K^\K`¤] NK ZSVRK >-:3:)

+8/B9+$

Z\Y^YMYV] >RS] PSVO NO]M\SLO] ^RO `K\SY_] Z\Y^YMYV] ^RK^ K\O
K`KSVKLVO P\YW ^RO >-:3: ]_L]c]ÔW 3^ ]RY_VN LO
MYX]_VÔN SX]ÔKN YP _]SXQ ^RO X_WLO\] SX ^RO +<:+
SXMV_NO PSVO] Y\ aY\]O T_]^ Q_O]]SXQ ^ROW

SZ 3: SXÔ\XO^ Z\Y^YMYV Z]O_NY Z\Y^YMYV X_WLO\
SMWZ 3-7: SXÔ\XO^ MYX^\YV WO]]KQO Z\Y^YMYV
SQWZ 317: SXÔ\XO^ Q\Y_Z W_V^SMK]^ Z\Y^YMYV
QQZ 11: QKÔaKcQKÔaKc Z\Y^YMYV
^MZ >-: ^\KX]WS]]SYX MYX^\YV Z\Y^YMYV
Z_Z :?: :+<- _XSÒ\]KV ZKMUO^ Z\Y^YMYV
_NZ ! ?.: _]O\ NK^KQ\KW Z\Y^YMYV
SNZ 3.: ARK^]>RS])
\Ka <+A <+A 3: SXÔ\PKMO
/XN

+8/B9,$

8OâY\U ]O\`SMO] 3XÔ\XO^ ]^cVO

8YÔ ^RK^ S^ S] Z\O]OX^Vc ^RO ZYVSMc YP 3+8+ ^Y K]]SQX K ]SXQVO aOVVUXYaX
ZY\^ X_WLO\ PY\ LY^R >-: KXN ?.:% ROXMO WY]^ OX^\SO] RO\O RKÒ âY OX^\SO]
OÒX SP ^RO Z\Y^YMYV NYO]Xv^ ]_ZZY\^ ?.: YZO\K^SYX]

>RS] VS]^ MY_VN LO PY_XN YX$
R^^Z$aaaS]SON_SXXYÔ]SKXKK]]SQXWOX^]ZY\^X_WLO\]

8Y^ KVV ZY\^] K\O SXMV_NON YXVc ^RO WY\O MYWWYX YXO]

^MZ <O]O\ÒN
_NZ <O]O\ÒN
^MZW_b ^MZ >-: :Y\^ =O\`SMO 7_V^SZVObO\
^MZW_b _NZ >-: :Y\^ =O\`SMO 7_V^SZVObO\
MYWZ\O]]XO^ ^MZ 7KXKQOWOX^ ?^SVS^c
MYWZ\O]]XO^ _NZ 7KXKQOWOX^ ?^SVS^c
MYWZ\O]]XO^ ^MZ -YWZ\O]]SYX :\YMO]]
MYWZ\O]]XO^ _NZ -YWZ\O]]SYX :\YMO]]
\TO ^MZ <OWYÔ 4YL /X^\c
\TO _NZ <OWYÔ 4YL /X^\c
OMRY !^MZ /MRY
OMRY !_NZ /MRY
NS]MK\N #^MZ .S]MK\N ]SXU X_VV
NS]MK\N #_NZ .S]MK\N ]SXU X_VV
]c]^K^ ^MZ _]O\] +M^SÒ ?]O\]
]c]^K^ _NZ _]O\] +M^SÒ ?]O\]
NKc^SWO ^MZ .Kc^SWO <0- " !
NKc^SWO _NZ .Kc^SWO <0- " !
XO^]^K^ ^MZ ?XK]]SQXON EaK] XO^]^K^G
[Y^N !^MZ [_YÔ ;_YÔ YP ^RO .Kc
[Y^N !_NZ [_YÔ ;_YÔ YP ^RO .Kc
W]Z "^MZ 7O]]KQO =OXN :\Y^YMYV
W]Z "_NZ 7O]]KQO =OXN :\Y^YMYV
MRK\QOX #^MZ ^^c^]^ ]Y_\MO -RK\KMÔ\ 1OXO\K^Y\
MRK\QOX #_NZ ^^c^]^ ]Y_\MO -RK\KMÔ\ 1OXO\K^Y\
P^ZNK^K ^MZ 0SVO >\KX]PO\ E.OPK_V^ .K^KG
P^ZNK^K _NZ 0SVO >\KX]PO\ E.OPK_V^ .K^KG
P^Z ^MZ 0SVO >\KX]PO\ E-YX^\YVG
P]Z _NZ
]]R ^MZ ==2 <OWYÔ 6YQSX :\Y^YMYV
]]R _NZ ==2 <OWYÔ 6YQSX :\Y^YMYV
ÔVXO^ ^MZ >OVXO^
ÔVXO^ _NZ >OVXO^
^MZ KXc Z\S`KÔ WKSV ]c]ÔW
_NZ KXc Z\S`KÔ WKSV ]c]ÔW
]W^Z ^MZ WKSV =SWZVO 7KSV >\KX]PO\
]W^Z _NZ WKSV =SWZVO 7KSV >\KX]PO\
X]aPO !^MZ 8=A ?]O\ =c]ÔW 0/
X]aPO !_NZ 8=A ?]O\ =c]ÔW 0/
W]QSMZ #^MZ 7=1 3-:
W]QSMZ #_NZ 7=1 3-:

W]QK_^R ^MZ 7=1 +_^ROX^SMK^SYX

W]QK_^R _NZ 7=1 +_^ROX^SMK^SYX
N]Z ^MZ .S]ZVKc =_ZZY\^ :\Y^YMYV
N]Z _NZ .S]ZVKc =_ZZY\^ :\Y^YMYV
^MZ KXc Z\S`KÔ Z\SXÔ\ ]O\Ò\
_NZ KXc Z\S`KÔ Z\SXÔ\ ]O\Ò\
^SWO !^MZ >SWO ^SWO]O\Ò\
^SWO !_NZ >SWO ^SWO]O\Ò\
\KZ "^MZ <Y_Ô +MMO]] :\Y^YMYV
\KZ "_NZ <Y_Ô +MMO]] :\Y^YMYV
\VZ #^MZ \O]Y_\MO <O]Y_\MO 6YMK^SYX :\Y^YMYV
\VZ #_NZ \O]Y_\MO <O]Y_\MO 6YMK^SYX :\Y^YMYV
Q\KZRSM] ^MZ 1\KZRSM]
Q\KZRSM] _NZ 1\KZRSM]
XKWO ^MZ 2Y]^ 8KWO =O\Ò\
XKWO _NZ 2Y]^ 8KWO =O\Ò\
XKWO]O\Ò\ ^MZ 2Y]^ 8KWO =O\Ò\
XKWO]O\Ò\ _NZ 2Y]^ 8KWO =O\Ò\
XSMXKWO ^MZ ARY 3]
XSMXKWO _NZ ARY 3]
aRYS] ^MZ ARY 3]
aRYS] _NZ ARY 3]
WZWPVKQ] ^MZ 7:7 06+1= :\Y^YMYV
WZWPVKQ] _NZ 7:7 06+1= :\Y^YMYV
WZW ^MZ 7O]]KQO :\YMO]]SXQ 7YN_VO E\OM`G
WZW _NZ 7O]]KQO :\YMO]]SXQ 7YN_VO E\OM`G
WZW]XN ^MZ 7:7 ENOPK_V^ ]OXNG
WZW]XN _NZ 7:7 ENOPK_V^ ]OXNG
XSP^Z !^MZ 83 0>:
XSP^Z !_NZ 83 0>:
K_NS^N "^MZ .SQS^KV +_NS^ .KOWYX
K_NS^N "_NZ .SQS^KV +_NS^ .KOWYX
^KMKM] #^MZ 6YQSX 2Y]^ :\Y^YMYV >+-+-=
^KMKM] #_NZ 6YQSX 2Y]^ :\Y^YMYV >+-+-=
\OWKSVMU ^MZ <OWYÔ 7KSV -ROMUSXQ :\Y^YMYV
\OWKSVMU _NZ <OWYÔ 7KSV -ROMUSXQ :\Y^YMYV
VKWKSX^ ^MZ 37: 6YQSMKV +NN\O]] 7KSXÔXKXMO
VKWKSX^ _NZ 37: 6YQSMKV +NN\O]] 7KSXÔXKXMO
bX]^SWO ^MZ B8= >SWO :\Y^YMYV
bX]^SWO _NZ B8= >SWO :\Y^YMYV
NYWKSX ^MZ .YWKSX 8KWO =O\Ò\
NYWKSX _NZ .YWKSX 8KWO =O\Ò\
bX]MR ^MZ B8= -VOK\SXQRY_]O
bX]MR _NZ B8= -VOK\SXQRY_]O
S]SQV ^MZ 3=3 1\KZRSM] 6KXQ_KQO
S]SQV _NZ 3=3 1\KZRSM] 6KXQ_KQO
bX]K_^R ^MZ B8= +_^ROX^SMK^SYX
bX]K_^R _NZ B8= +_^ROX^SMK^SYX
!^MZ KXc Z\S`KÔ Ô\WSXKV KMMO]]
!_NZ KXc Z\S`KÔ Ô\WSXKV KMMO]]
bX]WKSV "^MZ B8= 7KSV
bX]WKSV "_NZ B8= 7KSV
#^MZ KXc Z\S`KÔ PSVO ]O\`SMO
#_NZ KXc Z\S`KÔ PSVO ]O\`SMO
XSWKSV ^MZ 83 7+36
XSWKSV _NZ 83 7+36
KMK] ^MZ +-+ =O\`SMO]
KMK] _NZ +-+ =O\`SMO]

aRYS] ^MZ aRYS]

aRYS] _NZ aRYS]
MY`SK ^MZ -YWW_XSMK^SYX] 3XÔQ\K^Y\ -3
MY`SK _NZ -YWW_XSMK^SYX] 3XÔQ\K^Y\ -3
^KMKM]N] ^MZ >+-+-=.K^KLK]O =O\`SMO
^KMKM]N] _NZ >+-+-=.K^KLK]O =O\`SMO
][VXO^ ^MZ 9\KMVO =;68/>
][VXO^ _NZ 9\KMVO =;68/>
LYY^Z] !^MZ ,YY^]^\KZ :\Y^YMYV =O\Ò\
LYY^Z] !_NZ ,YY^]^\KZ :\Y^YMYV =O\Ò\
LYY^ZM "^MZ ,YY^]^\KZ :\Y^YMYV -VSOX^
LYY^ZM "_NZ ,YY^]^\KZ :\Y^YMYV -VSOX^
^P^Z #^MZ >\S`SKV 0SVO >\KX]PO\
^P^Z #_NZ >\S`SKV 0SVO >\KX]PO\
QYZRO\ !^MZ 1YZRO\
QYZRO\ !_NZ 1YZRO\
XO^\T] !^MZ <OWYÔ 4YL =O\`SMO
XO^\T] !_NZ <OWYÔ 4YL =O\`SMO
!^MZ KXc Z\S`KÔ NSKV Y_^ ]O\`SMO
!_NZ KXc Z\S`KÔ NSKV Y_^ ]O\`SMO
NOY] ! ^MZ .S]^\SL_ÔN /bÔ\XKV 9LTOM^ =^Y\O
NOY] ! _NZ .S]^\SL_ÔN /bÔ\XKV 9LTOM^ =^Y\O
!!^MZ KXc Z\S`KÔ <4/ ]O\`SMO
!!_NZ KXc Z\S`KÔ <4/ ]O\`SMO
Ò^^MZ !"^MZ Ò^^MZ
Ò^^MZ !"_NZ Ò^^MZ
PSXQO\ !#^MZ 0SXQO\
PSXQO\ !#_NZ 0SXQO\
R^^Z "^MZ AY\VN ASNO AOL 2>>:
R^^Z "_NZ AY\VN ASNO AOL 2>>:
aaa "^MZ AY\VN ASNO AOL 2>>:
aaa "_NZ AY\VN ASNO AOL 2>>:
aaaR^^Z "^MZ AY\VN ASNO AOL 2>>:
aaaR^^Z "_NZ AY\VN ASNO AOL 2>>:
RY]^]X] "^MZ 29=>= 8KWO =O\Ò\
RY]^]X] "_NZ 29=>= 8KWO =O\Ò\
bPO\ "^MZ B0/< ?^SVS^c
bPO\ "_NZ B0/< ?^SVS^c
WS^WVNO` "^MZ 73> 76 .O`SMO
WS^WVNO` "_NZ 73> 76 .O`SMO
M^P "^MZ -YWWYX >\KMO 0KMSVS^c
M^P "_NZ -YWWYX >\KMO 0KMSVS^c
WS^WVNO` "^MZ 73> 76 .O`SMO
WS^WVNO` "_NZ 73> 76 .O`SMO
WPMYLYV " ^MZ 7SM\Y 0YM_] -YLYV
WPMYLYV " _NZ 7SM\Y 0YM_] -YLYV
"!^MZ KXc Z\S`KÔ Ô\WSXKV VSXU
"!_NZ KXc Z\S`KÔ Ô\WSXKV VSXU
UO\LO\Y] ""^MZ 5O\LO\Y]
UO\LO\Y] ""_NZ 5O\LO\Y]
]_WS^^Q "#^MZ =?73> >OVXO^ 1KÔaKc
]_WS^^Q "#_NZ =?73> >OVXO^ 1KÔaKc

NX]Sb #^MZ .8=3B =OM_\S^ +^^\SL_Ô >YUOX 7KZ

NX]Sb #_NZ .8=3B =OM_\S^ +^^\SL_Ô >YUOX 7KZ
WS^NY` #^MZ 73> .YÒ\ =ZYYVO\
WS^NY` #_NZ 73> .YÒ\ =ZYYVO\
XZZ #^MZ 8OâY\U :\SX^SXQ :\Y^YMYV
XZZ #_NZ 8OâY\U :\SX^SXQ :\Y^YMYV
NMZ #^MZ .O`SMO -YX^\YV :\Y^YMYV
NMZ #_NZ .O`SMO -YX^\YV :\Y^YMYV
YLTMKVV #^MZ >S`YVS 9LTOM^ .S]ZK^MRO\
YLTMKVV #_NZ >S`YVS 9LTOM^ .S]ZK^MRO\
]_ZN_Z #^MZ =?:.?:
]_ZN_Z #_NZ =?:.?:
NSbSO # ^MZ .3B3/ :\Y^YMYV =ZOMSPSMK^SYX
NSbSO # _NZ .3B3/ :\Y^YMYV =ZOMSPSMK^SYX
]aSP^\`P #!^MZ =aSP^ <OWYÔ @S\^_\KV 0SVO :\Y^YMYV
]aSP^\`P #!_NZ =aSP^ <OWYÔ @S\^_\KV 0SVO :\Y^YMYV
^KMXOa] #"^MZ >+- 8Oa]
^KMXOa] #"_NZ >+- 8Oa]
WO^KQ\KW ##^MZ 7O^KQ\KW <OVKc
WO^KQ\KW ##_NZ 7O^KQ\KW <OVKc
XOaKMM^ ^MZ E_XK_^RY\SdON _]OG
RY]^XKWO] ^MZ RY]^XKWO _]_KVVc P\YW ]\SXSM
S]Y^]KZ ^MZ ^]KZ ZK\^ YP 3=9./
M]XO^X] ^MZ M]YX] KV]Y _]ON Lc -=9 XKWO ]O\Ò\
M]XO^X] _NZ M]YX]
\ÔVXO^ !^MZ <OWYÔ >OVXO^
\ÔVXO^ !_NZ
ZYZ #^MZ ZY]^YPPSMO :9: Ò\]SYX
ZYZ #_NZ
ZYZ ^MZ :9: Ò\]SYX
ZYZ _NZ
]_X\ZM ^MZ
]_X\ZM _NZ
K_^R ^MZ ^KZ SNOX^ K_^ROX^SMK^SYX
]P^Z ^MZ
__MZZK^R !^MZ
XX^Z #^MZ \OKNXOa] _X^Z ?=/8/> 8Oa] >\KX]PO\ :\Y^YMYV
X^Z ^MZ
X^Z _NZ 8OâY\U >SWO :\Y^YMYV
XO^LSY]X] !^MZ 8/>,39= 8KWO =O\`SMO
XO^LSY]X] !_NZ
XO^LSY]NQW "^MZ 8/>,39= .K^KQ\KW =O\`SMO
XO^LSY]NQW "_NZ
XO^LSY]]]X #^MZ 8/>,39= ]O]]SYX ]O\`SMO
XO^LSY]]]X #_NZ
SWKZ ^MZ SWKZ SWKZ 3XÔ\SW 7KSV +MMO]] :\Y^Y `
SWKZ _NZ SWKZ SWKZ
]XWZ _NZ =SWZVO 8O^ 7QW^ :\Y^Y
]XWZ^\KZ _NZ ]XWZ^\KZ >\KZ] PY\ =87:
MWSZWKX ^MZ 3=9 WQW^ YÒ\ 3: -79>
MWSZWKX _NZ
MWSZKQOX^ ^MZ
MWSZKQOX^ _NZ
bNWMZ !!^MZ B .S]ZVKc 7Q\ -YX^\YV :\Y^Y
bNWMZ !!_NZ
XOb^]ÔZ !"^MZ 8OB>=ÔZ 8Ob^=ÔZ 8OB>=ÔZ aSXNYa
XOb^]ÔZ !"_NZ 8OB>=ÔZ 8Ob^=ÔZ ]O\Ò\

LQZ !#^MZ ,Y\NO\ 1KÔaKc :\Y^Y

LQZ !#_NZ
Z\Y]ZO\Y #^MZ -VSPP 8O_WKXv] :\Y]ZO\Y
Z\Y]ZO\Y #_NZ
S\M #^MZ 3XÔ\XO^ <OVKc -RK^
S\M #_NZ
]W_b ##^MZ =87: ?XSb 7_V^SZVObO\
]W_b ##_NZ
K^\^WZ ^MZ +ZZVO>KVU \Y_^SXQ
K^\^WZ _NZ
K^XLZ ^MZ +ZZVO>KVU XKWO LSXNSXQ
K^XLZ _NZ
KÔMRY ^MZ +ZZVO>KVU OMRY
KÔMRY _NZ
K^dS] ^MZ +ZZVO>KVU dYXO SXPY\WK^SYX
K^dS] _NZ
d# ^MZ aKS] 83=9 D# NK^KLK]O
d# _NZ aKS]
SZb ^MZ 3:B
SZb _NZ
SWKZ ^MZ 3XÔ\KM^SÒ 7KSV +MMO]]
SWKZ _NZ :\Y^YMYV `
_VS]^]O\` !^MZ ?83B 6S]^]O\`
_VS]^]O\` !_NZ
R^^Z] ^MZ R^^Z Z\Y^YMYV YÒ\ >6===6
R^^Z] _NZ R^^Z Z\Y^YMYV YÒ\ >6===6

?83B ]ZOMSPSM ]O\`SMO]

ObOM ^MZ
LSPP _NZ MYW]K^
VYQSX ^MZ
aRY _NZ aRYN
]ROVV ^MZ MWN XY ZK]]aY\N] _]ON
]c]VYQ _NZ
Z\SXÔ\ ^MZ ]ZYYVO\ VSXO Z\SXÔ\ ]ZYYVO\
^KVU !_NZ
X^KVU "_NZ
\Y_Ô _NZ \Y_Ô\ \Y_ÔN <3:
^SWON _NZ ^SWO]O\Ò\
ÔWZY ^MZ XOaNKÔ
MY_\SO\ ^MZ \ZM
MYXPO\OXMO ^MZ MRK^
XO^XOa] ^MZ \OKNXOa]
XOâKVV _NZ PY\ OWO\QOXMc L\YKNMK]^]
__MZ ^MZ __MZN __MZ NKOWYX
\OWYÔP] ^MZ \P]I]O\Ò\ \P] ,\_XRYPP \OWYÔ PSVO]c]ÔW
UVYQSX ^MZ 5O\LO\SdON \VYQSXv `
U]ROVV ^MZ 5O\LO\SdON \]Rv `
UO\LO\Y]KNW !#^MZ 5O\LO\Y] UKNWSXv `

aOL]Ô\ ! ^MZ 8OâY\U NSM^SYXK\c
aOL]Ô\ ! _NZ

0\YW +]]SQXON 8_WLO\]vv$

( >RO <OQS]Ô\ON :Y\^] K\O XY^ MYX^\YVVON Lc ^RO 3+8+ KXN YX WY]^ ]c]ÔW]
( MKX LO _]ON Lc Y\NSXK\c _]O\ Z\YMO]]O] Y\ Z\YQ\KW] ObOM_ÔN Lc Y\NSXK\c

( _]O\]

( :Y\^] K\O _]ON SX ^RO >-: E G ^Y XKWO ^RO OXN] YP VYQSMKV
( MYXXOM^SYX] aRSMR MK\\c VYXQ Ô\W MYXÒ\]K^SYX] 0Y\ ^RO Z_\ZY]O YP
( Z\Y`SNSXQ ]O\`SMO] ^Y _XUXYaX MKVVO\] K ]O\`SMO MYX^KM^ ZY\^ S]
( NOPSXON >RS] VS]^ ]ZOMSPSO] ^RO ZY\^ _]ON Lc ^RO ]O\Ò\ Z\YMO]] K] S^]
( MYX^KM^ ZY\^ ARSVO ^RO 3+8+ MKX XY^ MYX^\YV _]O] YP ^RO]O ZY\^] S^
( NYO] \OQS]Ô\ Y\ VS]^ _]O] YP ^RO]O ZY\^] K] K MYX`SOXOXMO ^Y ^RO
( MYWW_XS^c

SXQ\O]VYMU ^MZ
SXQ\O]VYMU _NZ
Z\Y]ZO\YXZ ^MZ :\Y]ZO\Y XYXZ\S`SVOQON
Z\Y]ZO\YXZ _NZ
\PO ^MZ <KNSY 0\OO /^RO\XO^
\PO _NZ +M^_KVVc _]O] ?.: YXVc

5O\LO\Y] :\YTOM^ +^ROXK73> ]O\`SMO]
8YÔ ^RK^ ^RO]O K\O PY\ 5O\LO\Y] ` KXN K\O _XYPPSMSKV =SÔ] \_XXSXQ
` ]RY_VN _XMYWWOX^ ^RO]O KXN MYWWOX^ Y_^ ^RO ` OX^\SO] KLYÒ

UO\LO\Y] !_NZ UNM 5O\LO\Y] ]O\Ò\ _NZ
UO\LO\Y] !^MZ UNM 5O\LO\Y] ]O\Ò\ ^MZ
U\L_ZNKÔ ! ^MZ U\OQ 5O\LO\Y] \OQS]^\K^SYX
UZK]]aN ! ^MZ UZaN 5O\LO\Y] ZK]]aN
UVYQSX ^MZ 5O\LO\Y] \VYQSX
OUVYQSX ^MZ 5O\LO\Y] OXM\cZÔN \VYQSX
U]ROVV ^MZ U\MWN 5O\LO\Y] \OWYÔ ]ROVV

?XYPPSMSKV L_^ XOMO]]K\c PY\ 8O^,=. ]O\`SMO]

]XZZ ^MZ =SWZVO 8OâY\U :KQSXQ :\Y^YMYV
]_ZPSVO]\` "!^MZ =?: ]O\Ò\
]_ZPSVONLQ !^MZ =?: NOL_QQSXQ
RcVKPKb #^MZ 2cVK0+B MVSOX^]O\Ò\ Z\Y^YMYV
KbXO^ #^MZ +ZZVSb =O\Ò\
KKQâc #^MZ +ZZVSb +XcaK\O
\ZVKc _NZ
R^^Z\WKX !^MZ WKX ^Y R^WV YX ^RO PVc
][V !^MZ KNKLK]N \OWYÔ ][V
L^b ^MZ MOZ^N
`LYbN ^MZ PY\ `LYb NKOWYX
`LYbN _NZ
S]NXVYQ ^MZ S]NXVYQ
68B.,7= ^MZ
WSNSXO^ ^MZ WSNSXO^N

]O\`SMO] PY\ RZ OVY[_OXMO ]YPâK\O

\_X]\` "^MZ 2: /VY[_OXMO <?8=<@ ASXNYa] SXÔQ\K^SYX
OVY[]N "^MZ 2: /VY[_OXMO + OVY[]N ]O\Ò\
OVY[NL "^MZ 2: /VY[_OXMO + NK^K LK]O ]O\Ò\
OVY[NL "^MZ 2: /VY[_OXMO + /69;., ]O\Ò\

]O\`SMO] PY\ KWKXNK LKMU_Z ]YPâK\O


KWKXNK "_NZ
KWKXNKSNb "^MZ
KWSNb^KZO "^MZ

]O\`SMO] PY\ \KNS_] ]YPâK\O

\KNS_] _NZ \KNS_]N
\KNKMM^ _NZ

WKUO KZZVO ^KVU WY\O P\SOXNVc

\^WZ NNZ <Y_^SXQ >KLVO 7KSXÔXKXMO :\Y^YMYV
XLZ NNZ 8KWO ,SXNSXQ :\Y^YMYV
OMRY NNZ +ZZVO>KVU /MRY :\Y^YMYV
dSZ NNZ DYXO 3XPY\WK^SYX :\Y^YMYV

+ZZVO^KVU

KPZYÒ\^MZ "^MZ +0: YÒ\ >-:
KPZYÒ\^MZ "_NZ +0: YÒ\ ?-:

7c=;6 .KOWYX

Wc][V ^MZ
Wc][V _NZ

^RO \]cXM NKOWYX

\]cXM "!^MZ

XO^ZVKX

XO^ZVKX ^MZ

]aK^ S] ^RO =KWLK AOL +NWSXS]^\K^SYX >YYV

]aK^ #^MZ

/X^\SO] PY\ 3,7 ., .K^KLK]O

NLMNLSX]^ ^MZ -YXXOM^SYX ZY\^ PY\ ., SX]^KXMO NLSX]^
NLSNLSX]^ ^MZ 3XÔ\\_Z^ ZY\^ PY\ ., SX]^KXMO NLSX]^

/X^\c PY\ 7SWO\ NK^KLK]O

WSWO\ ^MZ 7SWO\ .K^KLK]O =O\Ò\


+8/B9-$
EY ]´WLYVY ª WK\MK K MYX^SX_KÁY NK VSXRK% Y] KMOX^Y] PY\KW ]_Z\SWSNY] NY
]M\SZ^G
LSX]R
-YX^\YVK MY\O] XK ÔVK
LYVN'^Z_^ ]W]Y
YPPLYVN'^Z_^ \W]Y
,96.98']O^Ô\W LYVN YX
,96.900']O^Ô\W LYVN YPP
1<//8']O^Ô\W PY\OQ\Y_XN Q\OOX
./0']O^Ô\W NOPK_V^
MVOK\
PSW

3XÔ\PKMO
-YVY[_O K[_S K SXÔ\PKMO NO]OTKNK
O^R O^R ZZZ O^M
69-+630'O^R

6YMKVSdKMKY NY SZMRKSX]
3:-2+38=']LSXSZMRKSX]
<O^S\K OXNO\OMY] K ZK\^S\ NY SPMYXPSQ 8KY KVÔ\O
69-+63:'SPMYXPSQ 69-+630 f Q\OZ SXO^ f M_^ N $ P f M_^ N F P
69-+67+=5'SPMYXPSQ 69-+630 f Q\OZ 7K]U f M_^ N $ P
69-+68/>'69-+63:69-+67+=5
OMRY bb
OMRY eLYVNgE0S\OaKVVGeYPPLYVNg 3:$ 69-+68/>
</79>/8/>'

6SWZK ^YNK] K] \OQ\K] NO PS\OaKVV PVKQ v0v
OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg 6SWZKXNY \OQ\K]
:KMYÔ] [_O MROQKW INO PY\KI NK \ONO

3:-2+38= 0 SXZ_^
OMRY X

:KMYÔ] [_O ]KOW NK SX^\KXO^

3:-2+38= 0 Y_^Z_^
OMRY X
1<//8
OMRY >O\WSXKNY
./0

OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg 3XÔ\PKMO vVYv
3:-2+38= + SXZ_^ S VY ] N T +--/:>
3:-2+38= + Y_^Z_^ S VY ] N T +--/:>
OMRY X
1<//8
OMRY >O\WSXKNY
./0

-YXPSQ_\K ÔVXO^ AAA O 0>: MYW _W Z\KdY WSXSWY WKXSZ_VKXNY Y] LS^] NO >9= NY
ZKMYÔ
+>/8-+9 .OÒ]O Ô\ RKLSVS^KNY XY UO\XOV K YZMKY -98031I3:I<9?>/I>9=
@O\ 3ZMRKSX] 2Ya>Y Z "
9] MRKWKNY] >9= LS^] KPO^KW K PY\WK MYWY Y] ZKMYÔ] ]KY ^\K^KNY] +]
MYXPSQ_\KMYO] ZY]]SÒS] ]KY$
vWKbSW_W NOVKcv
vWKbSW_W ^R\Y_QRZ_^v
vWKbSW_W \OVSKLSVS^cv
vWSXSW_W MY]^v
OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg >cZO 9P =O\`SMO PVKQ]
3:-2+38= + Y_^Z_^ Z ^MZ N aaa ^ b b
3:-2+38= + Y_^Z_^ Z ^MZ N ÔVXO^ ^ b b
3:-2+38= + Y_^Z_^ Z ^MZ N P^Z ^ b b
OMRY X
-YXPSQ_\K P^ZNK^K ZK\K Y WKbSWY NO v]KSNKv
3:-2+38= + Y_^Z_^ Z ^MZ N P^ZNK^K ^ b b"
OMRY X
1<//8
OMRY >O\WSXKNY
./0

:YO \OQ\K] ZK\K ZO\WS^S\ MYXObYO] NO \ONO] O RY]^] MYXPSKÒS]
OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg <ONO] MYXPSKÒS]

3:-2+38= + SXZ_^ ] E3:] RY]^XO^G N 69-+68/> &ZY\^]( T +--/:>
OMRY X

1<//8
OMRY >O\WSXKNY
./0

:YO \OQ\K] ZK\K SWZONS\ MYXObYO] MYW \ONO] O RY]^] XKYMYXPSKÒS] 9]
ZKMYÔ] ]KY \OQS]^\KNY]
OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg <ONO] XKYMYXPSKÒS]

3:-2+38= + SXZ_^ V ] E3:] RY]^XO^G N 69-+68/> &ZY\^]( T ./8C
OMRY X
<OQ\K ZK\K SWZONS\ K^K[_O] 3-7:
3:-2+38= + SXZ_^ V L S 69-+630 Z SMWZ ] E3:]G N 69-+68/> T
ª./8C
OMRY X
1<//8
OMRY >O\WSXKNY
./0

OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg =O\`SMY] NSÒ\]Y]
3:-2+38= + SXZ_^ Z ^MZ ] KVZRKMSZ]QKY\QL\ N 69-+68/> ª$ T

+--/:>
3:-2+38= + SXZ_^ Z ^MZ ] WKSVMSZ]QKY\QL\ N 69-+68/> ª$ T
+--/:>
3:-2+38= + SXZ_^ Z ^MZ ] aaaMSZ]QKY\QL\ N 69-+68/> $ ªT
+--/:>
3:-2+38= + SXZ_^ Z ^MZ ] Z\YbcMSZ]QKY\QL\ N 69-+68/> ª$ T
+--/:>
OMRY X
:Y]]Y _]K\ Y] OXNO\OMY] KLKSbY] ZK\K WKXOTK\ WO_ .8=
.8=29=>' ZY\ ObOWZVY
3:-2+38= + SXZ_^ Z ^MZ ] .8=29=> N 69-+68/> $ T ª+--/:>
3:-2+38= + SXZ_^ Z ^MZ ] .8=29=> N 69-+68/> $ T ª+--/:>
OMRY X
?]O O]]O O]ZKMY ZK\K XOQK\ KMO]]Y K \ONO K WK[_SXK Y_ Q\_ZY NO WK[_SXK]
3:-2+38= + SXZ_^ V ] E3:]G N 69-+68/> T ./8C
OMRY X
1<//8
OMRY >O\WSXKNY
./0

/]^K ZK\Ô XOQK KMO]]Y K ]O\`SMY] O ZY\^K] ]KLSNKWOXÔ Z\YLVOWK^SMK]
ZK\K PY\K NK \ONO VYMKV

OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg :Y\^K] XOQKNK]

8O^,/?3=KWLK
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> # T ./8C
3:-2+38= + SXZ_^ Z _NZ ] </79>/8/> N 69-+68/> # T ./8C
OMRY X
7SM\Y]YP^ =;6
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T ./8C
3:-2+38= + SXZ_^ Z _NZ ] </79>/8/> N 69-+68/> T ./8C
OMRY X
:Y]^Q\O] =;6
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T ./8C
3:-2+38= + SXZ_^ Z _NZ ] </79>/8/> N 69-+68/> T ./8C
OMRY X
8OâY\U 0SVO =c]ÔW 80=
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> # T ./8C
3:-2+38= + SXZ_^ Z _NZ ] </79>/8/> N 69-+68/> # T ./8C
OMRY X
BASXNYa] .S]ZVKc] $$
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> ###$ T ./8C
3:-2+38= + SXZ_^ Z _NZ ] </79>/8/> N 69-+68/> ###$ T ./8C
OMRY X
B 0YX^ =O\Ò\ $$
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> ! T ./8C
3:-2+38= + SXZ_^ Z _NZ ] </79>/8/> N 69-+68/> ! T ./8C
OMRY X
,KMU 9\SPSMO <OQS]^\KNY 0VKQ V
3:-2+38= + SXZ_^ V Z ^MZ ] </79>/8/> N 69-+68/> ! T ./8C
3:-2+38= + SXZ_^ V Z _NZ ] </79>/8/> N 69-+68/> ! T ./8C
OMRY X
8O^,_] <OQS]^\KNY 0VKQ V
3:-2+38= + SXZ_^ V Z ^MZ ] </79>/8/> N 69-+68/> $ T ª./8C
3:-2+38= + SXZ_^ V Z _NZ ] </79>/8/> N 69-+68/> $ T ª./8C
OMRY X
1<//8
OMRY >O\WSXKNY
./0

>KS] ZY\^K] ]KY KLO\^K] ZK\K ZO\WS^S\ ]Y[_OÔ] M\SKNY ZY\ MYXObYO]
ZO\WS^SNK] ZOVY SZMRKSX]
OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg :Y\^K] vKV^K]v O XKYªZ\S`SVKQSKNK]

3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> $ T ª+--/:>
3:-2+38= + SXZ_^ Z _NZ ] </79>/8/> N 69-+68/> $ T ª+--/:>
OMRY X

1<//8
OMRY >O\WSXKNY
./0

=O\`SMY] NO MK\KÔ\ LK]SMY
OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg =O\`SMY]

P^ZNK^K KXN P^Z
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T +--/:>
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T +--/:>
OMRY X
]]R
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T +--/:>
OMRY X
ÔVXO^
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T +--/:>
OMRY X
]W^Z
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T +--/:>
OMRY X
.8=
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T +--/:>
3:-2+38= + SXZ_^ Z _NZ ] </79>/8/> N 69-+68/> T +--/:>
OMRY X
.2-: NY VKNY NK <ONO 6YMKV ^Y WKUO *2YWO .2-: aY\U ! "
3:-2+38= + SXZ_^ S 69-+630 Z _NZ ] </79>/8/> N ª !
T +--/:>
3:-2+38= + Y_^Z_^ S 69-+630 Z _NZ ] </79>/8/> N ª "
T +--/:>
OMRY X
R^^Z "
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> " T +--/:>
OMRY X
:9:
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T +--/:>
OMRY X
SNOX^N
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T </4/->
OMRY X
XX^Z #
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> # T +--/:>
OMRY X
R^^Z]
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T +--/:>

OMRY X
3-; =O\`SMO]
3:-2+38= + SXZ_^ Z ^MZ ] </79>/8/> N 69-+68/> T +--/:>
OMRY X
1<//8
OMRY >O\WSXKNY
./0

OMRY X eLYVNgE0S\OaKVVGeYPPLYVNg <OQ\K] 3-7:
?]O S]]Y ZK\K XOQK\ K^K[_O] 3-7: NO OXNO\OMY] O]ZOMSPSMY]
3:-2+38= + SXZ_^ L S /B>/<8+630 Z SMWZ ] &KNN\O]]( N T ª./8C
OMRY X
:O\WSÔ K MROQKNK NO ZKMYÔ] 3-7:
3:-2+38= + SXZ_^ Z SMWZ ] </79>/8/> N 69-+68/> T +--/:>
3:-2+38= + SXZ_^ Z SMWZ ] </79>/8/> N 69-+68/> T +--/:>
OMRY X
:O\WSÔ K ]KSNK NO ZKMYÔ] 3-7:
3:-2+38= + Y_^Z_^ Z SMWZ ] 69-+68/> N </79>/8/> T +--/:>
3:-2+38= + Y_^Z_^ Z SMWZ ] 69-+68/> N </79>/8/> T +--/:>
OMRY X
1<//8
OMRY >O\WSXKNY
./0

-YXPSQ_\K ZYVS^SMK ZKN\KY
3:-2+38= + SXZ_^ T ./8C

3:-2+38= + Y_^Z_^ T +--/:>
OMRY
,96.98
OMRY eLYVNgE0S\OaKVVGeYPPLYVNg /]^KLOVOMSWOX^Y NO PS\OaKVV ªMYWZVO^Y
,96.900
OMRY bb
./0

+XObY.$
K 9 MKLOKVRY 3:$

! " # ! " # ! " #

f@O\]SYXf 326 f>cZO YP =O\`SMOf >Y^KV 6OXQ^R f

f 3NOX^SPSMK^SYX f0VKQ]f 0\KQWOX^ 9PP]O^ f

f >SWO ^Y 6SÒ f :\Y^YMYV f 2OKNO\ -ROMU]_W f

f =Y_\MO +NN\O]] f

f .O]^SXK^SYX +NN\O]] f

f 9Z^SYX] f :KNNSXQ f

K 9 MKLOKVRY 3-7:

! " # ! " # ! " #

f >cZO f -YNO f -ROMU]_W f

f _X_]ON f

f 3XÔ\XO^ 2OKNO\ LS^] YP 9\SQSXKV .K^K .K^KQ\KW f

-KWZY] 3-7:$
>cZO

-YNO
' XO^ _X\OKMRKLVO%
' RY]^ _X\OKMRKLVO%
' Z\Y^YMYV _X\OKMRKLVO%
' ZY\^ _X\OKMRKLVO%
' P\KQWOX^K^SYX XOONON KXN .0 ]O^%
' ]Y_\MO \Y_Ô PKSVON

K 9 MKLOKVRY >-:$

! " # ! " # ! " #

f =Y_\MO :Y\^ f .O]^SXK^SYX :Y\^ f

f =O[_OXMO 8_WLO\ f

f +MUXYaVONQWOX^ 8_WLO\ f

f .K^K f f?f+f:f<f=f0f f
f 9PP]O^f <O]O\ÒN f<f-f=f=fCf3f ASXNYa f
f f f1f5f2f>f8f8f f

f -ROMU]_W f ?\QOX^ :YSXÔ\ f

f 9Z^SYX] f :KNNSXQ f

f NK^K f

K 9 MKLOKVRY ?.:$
! "

f =Y_\MO f .O]^SXK^SYX f
f :Y\^ f :Y\^ f

f f f
f 6OXQ^R f -ROMU]_W f

f
f NK^K YMÔ^]


K 9 MKLOKVRY +<:

! " # ! " # ! " #

f >cZO 2K\NaK\O f >cZO :\Y^YMYV f

f 26/8 f :6/8 f 9ZO\K^SYX f

f =/8./< 2+ f

f =/8./< 2+ f =/8./< 3: f

f =/8./< 3: f >+<1/> 2+ f

f >+<1/> 2+ f

f >+<1/> 3: f


+XObY/$*
-YWY _W ZKMYÔ `SKTK K^\K`¤] NO _W KZVSMK^S`Y MVSOXÔ K^¤ Y RY]^ ]O\`SNY\)
8Y NSKQ\KWK KLKSbY X¥] YL]O\`KWY] _W RY]^ MVSOXÔ KL\SXNY _WK MYXObÁY `SK \VYQSX
MYW Y_^\Y RY]^ ]O\`SNY\$
*
0YXÔ$ >-:3: KXN .K^K -YWW_XSMK^SYX] +NWSXS]^\K^SYX 1_SNO =_X 7SM\Y]c]ÔW]
3XM YM^YLO\ ##" Z

,SLVSYQ\KPSKQO\KV
+<8/>> 7 O^ KVSS .O]ÒXNKXNY Y >-:3: <SY NO 4KXOS\Y ON -KWZ_] ##!

,/669@38 = .OPOXNSXQ +QKSX]^ =O[_OXMO 8_WLO\ +^^KMU] <0- #"
IIIIIIIIIII =OM_\S^c :\YLVOW] SX ^RO >-:3: :\Y^YMYV =_SÔ -YWZ_Ô\
-YWW_XSMK^SYX <O`SOa `YV # XÙ #"#
-97/< . / 3XÔ\VSQKÁY OW <ONO MYW >-:3: @YV_WO 3$ :\SXM´ZSY] :\Y^YMYVY] O
+\[_SÔ^_\K <SY NO 4KXOS\Y ON -KWZ_] Ø ONSÁY ##"
-<3=-?969 : .S]^\SL_ÔN .OXSKV YP =O\`SMO >\SX >\SLO 0VYYN 8OâY\U >\SLO
0VYYN 8OâY\U KXN =^KMROVN\KR^ -3+-# .OZK\^KWOX^ YP /XO\Qc 6686
POL\_K\c
.+A=98 > 8/> 29A>9 ` WK\MR ##!
.C=98 : .SMSYX£\SY NO <ONO] <SY NO 4KXOS\Y ON -KWZ_] 8YÒVV :\O]] ##
0+<7/< . ASO^]O @ 3WZ\Y`SXQ ^RO =OM_\S^c YP cY_\ =SÔ Lc ,\OKUSXQ SX^Y S^
## PYXÔ$ vP^Z$P^ZaSX^_OXVv
0/8D3 5 A</=53 . 6SX_b =OM_\S^c29A>9 `# WKc ##"
0<+=/< , =SÔ =OM_\S^c 2KXNLYYU <0-
2?8> < 3XÔ\XO^3X^\KXO^ 0S\OaKVV =OM_\S^c :YVSMc +\MRSMÔ^S\O KXN
>\KX]KM^SYX =O\`SMO] -YWZ_Ô\ -YWW_XSMK^SYX] ##"
7+<-/69 + 3X^\KXO^ OW +WLSOXÔ 6SX_b <SY NO 4KXOS\Y ,<+=:9<> ###
7?-2=/6 < ]P 0S\OaKVV =YPâK\O @O\]SYX POL ##!
89<>2-?>> = -YWY .OÔM^K\ 3X`K]ÁY OW <ONO ?W 1_SK ZK\K +XKVS]^K] <SY NO
4KXOS\Y ON -S XMSK 7YNO\XK
963@/3<+ A 4 2KMUO\$ 3X`K]ÁY O :\YÔÁY 0VY\SKX¥ZYVS] @S]_KV ,YYU] ###
:9=>/6 4 ON >\K]WS]]SYX -YX^\YV :\Y^YMYV .+<:+ 3XÔ\XO^ :\YQ\KW :\Y^YMYV
=ZOMSPSMK^SYX <0- !#
:9=>/6 4 ?]O\ .K^KQ\KW :\Y^YMYV <0- ! "
<?==/6 : 6SX_b 3:-2+38=29A>9 ` TKX ###
=-9 9ZOX=O\Ò\q 3XÔ\XO^ =O\`SMO] ` WKc ##!
=/<C : 0O\\KWOX^K] :YNO\Y]K] ZK\K <ONO] OW 6SX_b <SY NO 4KXOS\Y -S XMSK
7YNO\XK ##"
=23797?<+ > 7+<5900 4 -YX^\K+^K[_O$ K 2S]^¥\SK NK -KZ^_\K NY :S\K^K
-SLO\X¤^SMY WKS] :\YM_\KNY NY] /?+ =ÁY :K_VY -YWZKXRSK NK] 6O^\K] ##
=?8 7SM\Y]c]ÔW]q >-:3: KXN .K^K -YWW_XSMK^SYX] +NWSXS]^\K^SYX 1_SNO :KVY +V^Y
YM^ ##"

=_=/ 6SX_bq 3X]^KVVK^SYX -YXPSQ_\K^SYX KXN 0S\]^ =ÔZ] 8®\XLO\Q Ø ONSÁY

Sobre o autor da Apostila
(VWDDSRVWLODpGHDXWRULDGH5HQDWR0DUWLQLUPDUWLQL#FLSVJDRUJEU!GRXWRUHP)LORVRILD
SHOD 3RQWLItFLD 8QLYHUVLGDGH &DWyOLFD GR 5LR GH -DQHLUR RQGH OHFLRQRX DV GLVFLSOLQDV GH
)LORVRILD GD &LrQFLD H /yJLFD SDUD R &7& )RL EROVLVWD GR &13T DR ORQJR GRV DQRV SyV
JUDGXDomR 8VXiULR H HQWXVLDVWD Ki PDLV GH DQRV GR /LQX[ PDV HVVHQFLDOPHQWH FRPR
XP 6LVWHPD 2SHUDFLRQDO YROWDGR SDUD 5HGH H LJXDOPHQWH DSWR DR FRQKHFLPHQWR H DRV
GHVDILRVDFDGrPLFRVHSHGDJyJLFRVGHQRVVRSDtV
'HVHQYROYH QR PRPHQWR XP VLWH VREUH 6HJXUDQoD HP 5HGHV /LQX[ TXH VHUi KRVSHGDGR
SHOR&,36*$7DPEpPSDUWLFLSDGRGHVHQYROYLPHQWRGHXP
VQLIIHU
R$36VRERVWHUPRV
GD*18*3/FRP&KULVWLDQ6FKXOWH
1XPD HVFROD GD 6HFUHWDULD GH (GXFDomR GR 5LR GH -DQHLUR HP 1LWHUyL GHVHQYROYH XP
/DERUDWyULRFRPXPD5HGH/LQX[SDUDRHQVLQRLQWURGXWyULRGH/LQX[H5HGHVSDUDMRYHQV
GRHQVLQRPpGLR
6HXSURMHWRIXWXURGHHQVLQRWDPEpPpXP&XUVRTXHSURSRQKDDLQWHJUDomRGR/LQX[FRP
RVRXWURV6LVWHPDV2SHUDFLRQDLV81,;WUDGLFLRQDLVWDLVFRPR6&22SHQ6HUYHUR6RODULVHR
)UHH%6'

*18)UHH'RFXPHQWDWLRQ/LFHQVH
9HUVLRQ 0DUFK
&RS\ULJKW & )UHH 6RIWZDUH )RXQGDWLRQ ,QF

7HPSOH 3ODFH 6XLWH %RVWRQ 0$ 86$
(YHU\RQH LV SHUPLWWHG WR FRS\ DQG GLVWULEXWH YHUEDWLP FRSLHV
RI WKLV OLFHQVH GRFXPHQW EXW FKDQJLQJ LW LV QRW DOORZHG
35($0%/(
7KH SXUSRVH RI WKLV /LFHQVH LV WR PDNH D PDQXDO WH[WERRN RU RWKHU ZULWWHQ GRFXPHQW IUHH LQ WKH VHQVH RI
IUHHGRP WR DVVXUH HYHU\RQH WKH HIIHFWLYH IUHHGRP WR FRS\ DQG UHGLVWULEXWH LW ZLWK RU ZLWKRXW PRGLI\LQJ LW
HLWKHU FRPPHUFLDOO\ RU QRQFRPPHUFLDOO\ 6HFRQGDULO\ WKLV /LFHQVH SUHVHUYHV IRU WKH DXWKRU DQG SXEOLVKHU D ZD\
WR JHW FUHGLW IRU WKHLU ZRUN ZKLOH QRW EHLQJ FRQVLGHUHG UHVSRQVLEOH IRU PRGLILFDWLRQV PDGH E\ RWKHUV
7KLV /LFHQVH LV D NLQG RI FRS\OHIW ZKLFK PHDQV WKDW GHULYDWLYH ZRUNV RI WKH GRFXPHQW PXVW WKHPVHOYHV EH
IUHH LQ WKH VDPH VHQVH ,W FRPSOHPHQWV WKH *18 *HQHUDO 3XEOLF /LFHQVH ZKLFK LV D FRS\OHIW OLFHQVH GHVLJQHG
IRU IUHH VRIWZDUH
:H KDYH GHVLJQHG WKLV /LFHQVH LQ RUGHU WR XVH LW IRU PDQXDOV IRU IUHH VRIWZDUH EHFDXVH IUHH
VRIWZDUH QHHGV IUHH GRFXPHQWDWLRQ D IUHH SURJUDP VKRXOG FRPH ZLWK PDQXDOV SURYLGLQJ WKH VDPH IUHHGRPV
WKDW WKH VRIWZDUH GRHV %XW WKLV /LFHQVH LV QRW OLPLWHG WR VRIWZDUH PDQXDOV LW FDQ EH XVHG IRU DQ\ WH[WXDO ZRUN
UHJDUGOHVV RI VXEMHFW PDWWHU RU ZKHWKHU LW LV SXEOLVKHG DV D SULQWHG ERRN :H UHFRPPHQG WKLV /LFHQVH
SULQFLSDOO\ IRU ZRUNV ZKRVH SXUSRVH LV LQVWUXFWLRQ RU UHIHUHQFH
$33/,&$%,/,7< $1' '(),1,7,216

7KLV /LFHQVH DSSOLHV WR DQ\ PDQXDO RU RWKHU ZRUN WKDW FRQWDLQV D QRWLFH SODFHG E\ WKH FRS\ULJKW KROGHU VD\LQJ LW
FDQ EH GLVWULEXWHG XQGHU WKH WHUPV RI WKLV /LFHQVH 7KH 'RFXPHQW EHORZ UHIHUV WR DQ\ VXFK PDQXDO RU ZRUN
$Q\ PHPEHU RI WKH SXEOLF LV D OLFHQVHH DQG LV DGGUHVVHG DV \RX
$ 0RGLILHG 9HUVLRQ RI WKH 'RFXPHQW PHDQV DQ\ ZRUN FRQWDLQLQJ WKH 'RFXPHQW RU D SRUWLRQ RI LW HLWKHU
FRSLHG YHUEDWLP RU ZLWK PRGLILFDWLRQV DQGRU WUDQVODWHG LQWR DQRWKHU ODQJXDJH
$ 6HFRQGDU\ 6HFWLRQ LV D QDPHG DSSHQGL[ RU D IURQWPDWWHU VHFWLRQ RI WKH 'RFXPHQW WKDW GHDOV H[FOXVLYHO\
ZLWK WKH UHODWLRQVKLS RI WKH SXEOLVKHUV RU DXWKRUV RI WKH 'RFXPHQW WR WKH 'RFXPHQW
V RYHUDOO VXEMHFW RU WR
UHODWHG PDWWHUV DQG FRQWDLQV QRWKLQJ WKDW FRXOG IDOO GLUHFWO\ ZLWKLQ WKDW RYHUDOO VXEMHFW )RU H[DPSOH LI WKH
'RFXPHQW LV LQ SDUW D WH[WERRN RI PDWKHPDWLFV D 6HFRQGDU\ 6HFWLRQ PD\ QRW H[SODLQ DQ\ PDWKHPDWLFV 7KH
UHODWLRQVKLS FRXOG EH D PDWWHU RI KLVWRULFDO FRQQHFWLRQ ZLWK WKH VXEMHFW RU ZLWK UHODWHG PDWWHUV RU RI OHJDO
FRPPHUFLDO SKLORVRSKLFDO HWKLFDO RU SROLWLFDO SRVLWLRQ UHJDUGLQJ WKHP
7KH ,QYDULDQW 6HFWLRQV DUH FHUWDLQ 6HFRQGDU\ 6HFWLRQV ZKRVH WLWOHV DUH GHVLJQDWHG DV EHLQJ WKRVH RI
,QYDULDQW 6HFWLRQV LQ WKH QRWLFH WKDW VD\V WKDW WKH 'RFXPHQW LV UHOHDVHG XQGHU WKLV /LFHQVH
7KH &RYHU 7H[WV DUH FHUWDLQ VKRUW SDVVDJHV RI WH[W WKDW DUH OLVWHG DV )URQW&RYHU 7H[WV RU
%DFN&RYHU 7H[WV LQ WKH QRWLFH WKDW VD\V WKDW WKH 'RFXPHQW LV UHOHDVHG XQGHU WKLV /LFHQVH
$ 7UDQVSDUHQW FRS\ RI WKH 'RFXPHQW PHDQV D PDFKLQHUHDGDEOH FRS\ UHSUHVHQWHG LQ D IRUPDW ZKRVH
VSHFLILFDWLRQ LV DYDLODEOH WR WKH JHQHUDO SXEOLF ZKRVH FRQWHQWV FDQ EH YLHZHG DQG HGLWHG GLUHFWO\ DQG
VWUDLJKWIRUZDUGO\ ZLWK JHQHULF WH[W HGLWRUV RU IRU LPDJHV FRPSRVHG RI SL[HOV JHQHULF SDLQW SURJUDPV RU IRU
GUDZLQJV VRPH ZLGHO\ DYDLODEOH GUDZLQJ HGLWRU DQG WKDW LV VXLWDEOH IRU LQSXW WR WH[W IRUPDWWHUV RU IRU
DXWRPDWLF WUDQVODWLRQ WR D YDULHW\ RI IRUPDWV VXLWDEOH IRU LQSXW WR WH[W IRUPDWWHUV $ FRS\ PDGH LQ DQ RWKHUZLVH
7UDQVSDUHQW ILOH IRUPDW ZKRVH PDUNXS KDV EHHQ GHVLJQHG WR WKZDUW RU GLVFRXUDJH VXEVHTXHQW PRGLILFDWLRQ E\
UHDGHUV LV QRW 7UDQVSDUHQW $ FRS\ WKDW LV QRW 7UDQVSDUHQW LV FDOOHG 2SDTXH

([DPSOHV RI VXLWDEOH IRUPDWV IRU 7UDQVSDUHQW FRSLHV LQFOXGH SODLQ $6&,, ZLWKRXW PDUNXS 7H[LQIR LQSXW IRUPDW
/D7H; LQSXW IRUPDW 6*0/ RU ;0/ XVLQJ D SXEOLFO\ DYDLODEOH '7' DQG
VWDQGDUGFRQIRUPLQJ VLPSOH +70/ GHVLJQHG IRU KXPDQ PRGLILFDWLRQ 2SDTXH IRUPDWV LQFOXGH 3RVW6FULSW 3')
SURSULHWDU\ IRUPDWV WKDW FDQ EH UHDG DQG HGLWHG RQO\ E\ SURSULHWDU\ ZRUG SURFHVVRUV 6*0/ RU ;0/ IRU ZKLFK
WKH '7' DQGRU SURFHVVLQJ WRROV DUH QRW JHQHUDOO\ DYDLODEOH DQG WKH PDFKLQHJHQHUDWHG +70/ SURGXFHG E\
VRPH ZRUG SURFHVVRUV IRU RXWSXW SXUSRVHV RQO\
7KH 7LWOH 3DJH PHDQV IRU D SULQWHG ERRN WKH WLWOH SDJH LWVHOI SOXV VXFK IROORZLQJ SDJHV DV DUH QHHGHG WR
KROG OHJLEO\ WKH PDWHULDO WKLV /LFHQVH UHTXLUHV WR DSSHDU LQ WKH WLWOH SDJH
)RU ZRUNV LQ IRUPDWV ZKLFK GR QRW KDYH DQ\ WLWOH SDJH DV VXFK 7LWOH 3DJH PHDQV WKH WH[W QHDU WKH PRVW
SURPLQHQW DSSHDUDQFH RI WKH ZRUN
V WLWOH SUHFHGLQJ WKH EHJLQQLQJ RI WKH ERG\ RI WKH WH[W
9(5%$7,0 &23<,1*
<RX PD\ FRS\ DQG GLVWULEXWH WKH 'RFXPHQW LQ DQ\ PHGLXP HLWKHU FRPPHUFLDOO\ RU QRQFRPPHUFLDOO\ SURYLGHG
WKDW WKLV /LFHQVH WKH FRS\ULJKW QRWLFHV DQG WKH OLFHQVH QRWLFH VD\LQJ WKLV /LFHQVH DSSOLHV WR WKH 'RFXPHQW DUH
UHSURGXFHG LQ DOO FRSLHV DQG WKDW \RX DGG QR RWKHU FRQGLWLRQV ZKDWVRHYHU WR WKRVH RI WKLV /LFHQVH <RX PD\
QRW XVH WHFKQLFDO PHDVXUHV WR REVWUXFW RU FRQWURO WKH UHDGLQJ RU IXUWKHU FRS\LQJ RI WKH FRSLHV \RX PDNH RU
GLVWULEXWH +RZHYHU \RX PD\ DFFHSW FRPSHQVDWLRQ LQ H[FKDQJH IRU FRSLHV ,I \RX GLVWULEXWH D ODUJH HQRXJK
QXPEHU RI FRSLHV \RX PXVW DOVR IROORZ WKH FRQGLWLRQV LQ VHFWLRQ
<RX PD\ DOVR OHQG FRSLHV XQGHU WKH VDPH FRQGLWLRQV VWDWHG DERYH DQG \RX PD\ SXEOLFO\ GLVSOD\ FRSLHV
&23<,1* ,1 48$17,7<
,I \RX SXEOLVK SULQWHG FRSLHV RI WKH 'RFXPHQW QXPEHULQJ PRUH WKDQ DQG WKH 'RFXPHQW
V OLFHQVH QRWLFH
UHTXLUHV &RYHU 7H[WV \RX PXVW HQFORVH WKH FRSLHV LQ FRYHUV WKDW FDUU\ FOHDUO\ DQG OHJLEO\ DOO WKHVH &RYHU
7H[WV )URQW&RYHU 7H[WV RQ WKH IURQW FRYHU DQG %DFN&RYHU 7H[WV RQ WKH EDFN FRYHU %RWK FRYHUV PXVW DOVR
FOHDUO\ DQG OHJLEO\ LGHQWLI\ \RX DV WKH SXEOLVKHU RI WKHVH FRSLHV 7KH IURQW FRYHU PXVW SUHVHQW WKH IXOO WLWOH ZLWK
DOO ZRUGV RI WKH WLWOH HTXDOO\ SURPLQHQW DQG YLVLEOH <RX PD\ DGG RWKHU PDWHULDO RQ WKH FRYHUV LQ DGGLWLRQ
&RS\LQJ ZLWK FKDQJHV OLPLWHG WR WKH FRYHUV DV ORQJ DV WKH\ SUHVHUYH WKH WLWOH RI WKH 'RFXPHQW DQG VDWLVI\
WKHVH FRQGLWLRQV FDQ EH WUHDWHG DV YHUEDWLP FRS\LQJ LQ RWKHU UHVSHFWV
,I WKH UHTXLUHG WH[WV IRU HLWKHU FRYHU DUH WRR YROXPLQRXV WR ILW OHJLEO\ \RX VKRXOG SXW WKH ILUVW RQHV OLVWHG DV
PDQ\ DV ILW UHDVRQDEO\ RQ WKH DFWXDO FRYHU DQG FRQWLQXH WKH UHVW RQWR
DGMDFHQW SDJHV
,I \RX SXEOLVK RU GLVWULEXWH 2SDTXH FRSLHV RI WKH 'RFXPHQW QXPEHULQJ PRUH WKDQ \RX PXVW HLWKHU LQFOXGH
D PDFKLQHUHDGDEOH 7UDQVSDUHQW FRS\ DORQJ ZLWK HDFK 2SDTXH FRS\ RU VWDWH LQ RU ZLWK HDFK 2SDTXH FRS\ D
SXEOLFO\DFFHVVLEOH FRPSXWHUQHWZRUN ORFDWLRQ FRQWDLQLQJ D FRPSOHWH 7UDQVSDUHQW FRS\ RI WKH 'RFXPHQW IUHH
RI DGGHG PDWHULDO ZKLFK WKH JHQHUDO QHWZRUNXVLQJ SXEOLF KDV DFFHVV WR GRZQORDG DQRQ\PRXVO\ DW QR FKDUJH
XVLQJ SXEOLFVWDQGDUG QHWZRUN SURWRFROV ,I \RX XVH WKH ODWWHU RSWLRQ \RX PXVW WDNH UHDVRQDEO\ SUXGHQW VWHSV
ZKHQ \RX EHJLQ GLVWULEXWLRQ RI 2SDTXH FRSLHV LQ TXDQWLW\ WR HQVXUH WKDW WKLV 7UDQVSDUHQW FRS\ ZLOO UHPDLQ WKXV
DFFHVVLEOH DW WKH VWDWHG ORFDWLRQ XQWLO DW OHDVW RQH \HDU DIWHU WKH ODVW WLPH \RX GLVWULEXWH DQ 2SDTXH FRS\
GLUHFWO\ RU WKURXJK \RXU DJHQWV RU UHWDLOHUV RI WKDW HGLWLRQ WR WKH SXEOLF
,W LV UHTXHVWHG EXW QRW UHTXLUHG WKDW \RX FRQWDFW WKH DXWKRUV RI WKH 'RFXPHQW ZHOO EHIRUH UHGLVWULEXWLQJ DQ\
ODUJH QXPEHU RI FRSLHV WR JLYH WKHP D FKDQFH WR SURYLGH \RX ZLWK DQ XSGDWHG YHUVLRQ RI WKH 'RFXPHQW
02',),&$7,216
<RX PD\ FRS\ DQG GLVWULEXWH D 0RGLILHG 9HUVLRQ RI WKH 'RFXPHQW XQGHU WKH FRQGLWLRQV RI VHFWLRQV DQG
DERYH SURYLGHG WKDW \RX UHOHDVH WKH 0RGLILHG 9HUVLRQ XQGHU SUHFLVHO\ WKLV /LFHQVH ZLWK WKH 0RGLILHG 9HUVLRQ
ILOOLQJ WKH UROH RI WKH 'RFXPHQW WKXV OLFHQVLQJ GLVWULEXWLRQ DQG PRGLILFDWLRQ RI WKH 0RGLILHG 9HUVLRQ WR ZKRHYHU
SRVVHVVHV D FRS\ RI LW ,Q DGGLWLRQ \RX PXVW GR WKHVH WKLQJV LQ WKH 0RGLILHG 9HUVLRQ
$ 8VH LQ WKH 7LWOH 3DJH DQG RQ WKH FRYHUV LI DQ\ D WLWOH GLVWLQFW IURP WKDW RI WKH 'RFXPHQW DQG IURP WKRVH
RI SUHYLRXV YHUVLRQV ZKLFK VKRXOG LI WKHUH ZHUH DQ\ EH OLVWHG LQ WKH +LVWRU\ VHFWLRQ RI WKH 'RFXPHQW
<RX PD\ XVH WKH VDPH WLWOH DV D SUHYLRXV YHUVLRQ LI WKH RULJLQDO SXEOLVKHU RI WKDW YHUVLRQ JLYHV SHUPLVVLRQ

% /LVW RQ WKH 7LWOH 3DJH DV DXWKRUV RQH RU PRUH SHUVRQV RU HQWLWLHV UHVSRQVLEOH IRU DXWKRUVKLS RI WKH
PRGLILFDWLRQV LQ WKH 0RGLILHG 9HUVLRQ WRJHWKHU ZLWK DW OHDVW ILYH RI WKH SULQFLSDO DXWKRUV RI WKH 'RFXPHQW
DOO RI LWV SULQFLSDO DXWKRUV LI LW KDV OHVV WKDQ ILYH
& 6WDWH RQ WKH 7LWOH SDJH WKH QDPH RI WKH SXEOLVKHU RI WKH 0RGLILHG 9HUVLRQ DV WKH SXEOLVKHU
' 3UHVHUYH DOO WKH FRS\ULJKW QRWLFHV RI WKH 'RFXPHQW
( $GG DQ DSSURSULDWH FRS\ULJKW QRWLFH IRU \RXU PRGLILFDWLRQV DGMDFHQW WR WKH RWKHU FRS\ULJKW QRWLFHV
) ,QFOXGH LPPHGLDWHO\ DIWHU WKH FRS\ULJKW QRWLFHV D OLFHQVH QRWLFH JLYLQJ WKH SXEOLF SHUPLVVLRQ WR XVH WKH
0RGLILHG 9HUVLRQ XQGHU WKH WHUPV RI WKLV /LFHQVH LQ WKH IRUP VKRZQ LQ WKH $GGHQGXP EHORZ
* 3UHVHUYH LQ WKDW OLFHQVH QRWLFH WKH IXOO OLVWV RI ,QYDULDQW 6HFWLRQV DQG UHTXLUHG &RYHU 7H[WV JLYHQ LQ WKH
'RFXPHQW
V OLFHQVH QRWLFH
+ ,QFOXGH DQ XQDOWHUHG FRS\ RI WKLV /LFHQVH
, 3UHVHUYH WKH VHFWLRQ HQWLWOHG +LVWRU\ DQG LWV WLWOH DQG DGG WR LW DQ LWHP VWDWLQJ DW OHDVW WKH WLWOH \HDU
QHZ DXWKRUV DQG SXEOLVKHU RI WKH 0RGLILHG 9HUVLRQ DV JLYHQ RQ WKH 7LWOH 3DJH ,I WKHUH LV QR VHFWLRQ
HQWLWOHG +LVWRU\ LQ WKH 'RFXPHQW FUHDWH RQH VWDWLQJ WKH WLWOH \HDU DXWKRUV DQG SXEOLVKHU RI WKH
'RFXPHQW DV JLYHQ RQ LWV 7LWOH 3DJH WKHQ DGG DQ LWHP GHVFULELQJ WKH 0RGLILHG 9HUVLRQ DV VWDWHG LQ WKH
SUHYLRXV VHQWHQFH
- 3UHVHUYH WKH QHWZRUN ORFDWLRQ LI DQ\ JLYHQ LQ WKH 'RFXPHQW IRU SXEOLF DFFHVV WR D 7UDQVSDUHQW FRS\ RI WKH
'RFXPHQW DQG OLNHZLVH WKH QHWZRUN ORFDWLRQV JLYHQ LQ WKH 'RFXPHQW IRU SUHYLRXV YHUVLRQV LW ZDV EDVHG RQ
7KHVH PD\ EH SODFHG LQ WKH +LVWRU\ VHFWLRQ <RX PD\ RPLW D QHWZRUN ORFDWLRQ IRU D ZRUN WKDW ZDV
SXEOLVKHG DW OHDVW IRXU \HDUV EHIRUH WKH 'RFXPHQW LWVHOI RU LI WKH RULJLQDO SXEOLVKHU RI WKH YHUVLRQ LW UHIHUV
WR JLYHV SHUPLVVLRQ
. ,Q DQ\ VHFWLRQ HQWLWOHG $FNQRZOHGJHPHQWV RU 'HGLFDWLRQV SUHVHUYH WKH VHFWLRQ

V WLWOH DQG SUHVHUYH LQ
WKH VHFWLRQ DOO WKH VXEVWDQFH DQG WRQH RI HDFK RI WKH FRQWULEXWRU DFNQRZOHGJHPHQWV DQGRU GHGLFDWLRQV
JLYHQ WKHUHLQ
/ 3UHVHUYH DOO WKH ,QYDULDQW 6HFWLRQV RI WKH 'RFXPHQW XQDOWHUHG LQ WKHLU WH[W DQG LQ WKHLU WLWOHV 6HFWLRQ
QXPEHUV RU WKH HTXLYDOHQW DUH QRW FRQVLGHUHG SDUW RI WKH VHFWLRQ WLWOHV
0 'HOHWH DQ\ VHFWLRQ HQWLWOHG (QGRUVHPHQWV 6XFK D VHFWLRQ PD\ QRW EH LQFOXGHG LQ WKH 0RGLILHG 9HUVLRQ
1 1 'R QRW UHWLWOH DQ\ H[LVWLQJ VHFWLRQ DV (QGRUVHPHQWV RU WR FRQIOLFW LQ WLWOH ZLWK DQ\ ,QYDULDQW 6HFWLRQ
2 ,I WKH 0RGLILHG 9HUVLRQ LQFOXGHV QHZ IURQWPDWWHU VHFWLRQV RU DSSHQGLFHV WKDW TXDOLI\ DV 6HFRQGDU\ 6HFWLRQV
DQG FRQWDLQ QR PDWHULDO FRSLHG IURP WKH 'RFXPHQW \RX PD\ DW \RXU RSWLRQ GHVLJQDWH VRPH RU DOO RI WKHVH
VHFWLRQV DV LQYDULDQW 7R GR WKLV DGG WKHLU WLWOHV WR WKH OLVW RI ,QYDULDQW 6HFWLRQV LQ WKH 0RGLILHG 9HUVLRQ
V
OLFHQVH QRWLFH 7KHVH WLWOHV PXVW EH GLVWLQFW IURP DQ\ RWKHU VHFWLRQ WLWOHV
<RX PD\ DGG D VHFWLRQ HQWLWOHG (QGRUVHPHQWV SURYLGHG LW FRQWDLQV QRWKLQJ EXW HQGRUVHPHQWV RI \RXU
0RGLILHG 9HUVLRQ E\ YDULRXV SDUWLHVIRU H[DPSOH VWDWHPHQWV RI SHHU UHYLHZ RU WKDW WKH WH[W KDV EHHQ DSSURYHG
E\ DQ RUJDQL]DWLRQ DV WKH DXWKRULWDWLYH GHILQLWLRQ RI D VWDQGDUG
<RX PD\ DGG D SDVVDJH RI XS WR ILYH ZRUGV DV D )URQW&RYHU 7H[W DQG D SDVVDJH RI XS WR ZRUGV DV D %DFN
&RYHU 7H[W WR WKH HQG RI WKH OLVW RI &RYHU 7H[WV LQ WKH 0RGLILHG 9HUVLRQ 2QO\ RQH SDVVDJH RI )URQW&RYHU 7H[W
DQG RQH RI %DFN&RYHU 7H[W PD\ EH DGGHG E\ RU WKURXJK DUUDQJHPHQWV PDGH E\ DQ\ RQH HQWLW\ ,I WKH
'RFXPHQW DOUHDG\ LQFOXGHV D FRYHU WH[W IRU WKH VDPH FRYHU SUHYLRXVO\ DGGHG E\ \RX RU E\ DUUDQJHPHQW PDGH

E\ WKH VDPH HQWLW\ \RX DUH DFWLQJ RQ EHKDOI RI \RX PD\ QRW DGG DQRWKHU EXW \RX PD\ UHSODFH WKH ROG RQH RQ
H[SOLFLW SHUPLVVLRQ IURP WKH SUHYLRXV SXEOLVKHU WKDW DGGHG WKH ROG RQH
7KH DXWKRUV DQG SXEOLVKHUV RI WKH 'RFXPHQW GR QRW E\ WKLV /LFHQVH JLYH SHUPLVVLRQ WR XVH WKHLU QDPHV IRU
SXEOLFLW\ IRU RU WR DVVHUW RU LPSO\ HQGRUVHPHQW RI DQ\ 0RGLILHG 9HUVLRQ
&20%,1,1* '2&80(176
<RX PD\ FRPELQH WKH 'RFXPHQW ZLWK RWKHU GRFXPHQWV UHOHDVHG XQGHU WKLV /LFHQVH XQGHU WKH WHUPV GHILQHG LQ
VHFWLRQ DERYH IRU PRGLILHG YHUVLRQV SURYLGHG WKDW \RX LQFOXGH LQ WKH FRPELQDWLRQ DOO RI WKH ,QYDULDQW 6HFWLRQV
RI DOO RI WKH RULJLQDO GRFXPHQWV XQPRGLILHG DQG OLVW WKHP DOO DV ,QYDULDQW 6HFWLRQV RI \RXU FRPELQHG ZRUN LQ LWV
OLFHQVH QRWLFH
7KH FRPELQHG ZRUN QHHG RQO\ FRQWDLQ RQH FRS\ RI WKLV /LFHQVH DQG PXOWLSOH LGHQWLFDO ,QYDULDQW 6HFWLRQV PD\
EH UHSODFHG ZLWK D VLQJOH FRS\ ,I WKHUH DUH PXOWLSOH ,QYDULDQW 6HFWLRQV ZLWK WKH VDPH QDPH EXW GLIIHUHQW
FRQWHQWV PDNH WKH WLWOH RI HDFK VXFK VHFWLRQ XQLTXH E\ DGGLQJ DW WKH HQG RI LW LQ SDUHQWKHVHV WKH QDPH RI WKH
RULJLQDO DXWKRU RU SXEOLVKHU RI WKDW VHFWLRQ LI NQRZQ RU HOVH D XQLTXH QXPEHU 0DNH WKH VDPH DGMXVWPHQW WR
WKH VHFWLRQ WLWOHV LQ WKH OLVW RI ,QYDULDQW 6HFWLRQV LQ WKH OLFHQVH QRWLFH RI WKH FRPELQHG ZRUN
,Q WKH FRPELQDWLRQ \RX PXVW FRPELQH DQ\ VHFWLRQV HQWLWOHG +LVWRU\ LQ WKH YDULRXV RULJLQDO GRFXPHQWV
IRUPLQJ RQH VHFWLRQ HQWLWOHG +LVWRU\ OLNHZLVH FRPELQH DQ\ VHFWLRQV HQWLWOHG $FNQRZOHGJHPHQWV DQG DQ\
VHFWLRQV HQWLWOHG 'HGLFDWLRQV <RX PXVW GHOHWH DOO VHFWLRQV HQWLWOHG (QGRUVHPHQWV
&2//(&7,216 2) '2&80(176
<RX PD\ PDNH D FROOHFWLRQ FRQVLVWLQJ RI WKH 'RFXPHQW DQG RWKHU GRFXPHQWV UHOHDVHG XQGHU WKLV /LFHQVH DQG
UHSODFH WKH LQGLYLGXDO FRSLHV RI WKLV /LFHQVH LQ WKH YDULRXV GRFXPHQWV ZLWK D VLQJOH FRS\ WKDW LV LQFOXGHG LQ WKH
FROOHFWLRQ SURYLGHG WKDW \RX IROORZ WKH UXOHV RI WKLV /LFHQVH IRU YHUEDWLP FRS\LQJ RI HDFK RI WKH GRFXPHQWV LQ
DOO RWKHU UHVSHFWV
<RX PD\ H[WUDFW D VLQJOH GRFXPHQW IURP VXFK D FROOHFWLRQ DQG GLVWULEXWH LW LQGLYLGXDOO\ XQGHU WKLV /LFHQVH
SURYLGHG \RX LQVHUW D FRS\ RI WKLV /LFHQVH LQWR WKH H[WUDFWHG GRFXPHQW DQG IROORZ WKLV /LFHQVH LQ DOO RWKHU
UHVSHFWV UHJDUGLQJ YHUEDWLP FRS\LQJ RI WKDW GRFXPHQW
$**5(*$7,21 :,7+ ,1'(3(1'(17 :25.6

$ FRPSLODWLRQ RI WKH 'RFXPHQW RU LWV GHULYDWLYHV ZLWK RWKHU VHSDUDWH DQG LQGHSHQGHQW GRFXPHQWV RU ZRUNV LQ
RU RQ D YROXPH RI D VWRUDJH RU GLVWULEXWLRQ PHGLXP GRHV QRW DV D ZKROH FRXQW DV D 0RGLILHG 9HUVLRQ RI WKH
'RFXPHQW SURYLGHG QR FRPSLODWLRQ FRS\ULJKW LV FODLPHG IRU WKH FRPSLODWLRQ 6XFK D FRPSLODWLRQ LV FDOOHG DQ
DJJUHJDWH DQG WKLV WKLV /LFHQVH GRHV QRW DSSO\ WR WKH RWKHU VHOIFRQWDLQHG ZRUNV WKXV FRPSLOHG ZLWK WKH
'RFXPHQW RQ DFFRXQW RI WKHLU EHLQJ WKXV FRPSLOHG LI WKH\ DUH QRW WKHPVHOYHV GHULYDWLYH ZRUNV RI WKH
'RFXPHQW ,I WKH &RYHU 7H[W UHTXLUHPHQW RI VHFWLRQ LV DSSOLFDEOH WR WKHVH FRSLHV RI WKH 'RFXPHQW WKHQ LI WKH
'RFXPHQW LV OHVV WKDQ RQH TXDUWHU RI WKH HQWLUH DJJUHJDWH WKH 'RFXPHQW
V &RYHU 7H[WV PD\ EH SODFHG RQ
FRYHUV WKDW VXUURXQG RQO\ WKH 'RFXPHQW ZLWKLQ WKH DJJUHJDWH 2WKHUZLVH WKH\ PXVW DSSHDU RQ FRYHUV DURXQG
WKH ZKROH DJJUHJDWH
75$16/$7,21
7UDQVODWLRQ LV FRQVLGHUHG D NLQG RI PRGLILFDWLRQ VR \RX PD\ GLVWULEXWH WUDQVODWLRQV RI WKH
'RFXPHQW XQGHU WKH WHUPV RI VHFWLRQ 5HSODFLQJ ,QYDULDQW 6HFWLRQV ZLWK WUDQVODWLRQV UHTXLUHV HVSHFLDO
SHUPLVVLRQ IURP WKHLU FRS\ULJKW KROGHUV EXW \RX PD\ LQFOXGH WUDQVODWLRQV RI VRPH RU DOO ,QYDULDQW 6HFWLRQV LQ
DGGLWLRQ WR WKH RULJLQDO YHUVLRQV RI WKHVH ,QYDULDQW 6HFWLRQV <RX PD\ LQFOXGH D WUDQVODWLRQ RI WKLV /LFHQVH
SURYLGHG WKDW \RX DOVR LQFOXGH WKH RULJLQDO (QJOLVK YHUVLRQ RI WKLV /LFHQVH ,Q FDVH RI D GLVDJUHHPHQW EHWZHHQ
WKH WUDQVODWLRQ DQG WKH RULJLQDO (QJOLVK YHUVLRQ RI WKLV /LFHQVH WKH RULJLQDO (QJOLVK YHUVLRQ ZLOO SUHYDLO

7(50,1$7,21
<RX PD\ QRW FRS\ PRGLI\ VXEOLFHQVH RU GLVWULEXWH WKH 'RFXPHQW H[FHSW DV H[SUHVVO\ SURYLGHG IRU XQGHU WKLV
/LFHQVH $Q\ RWKHU DWWHPSW WR FRS\ PRGLI\ VXEOLFHQVH RU GLVWULEXWH WKH 'RFXPHQW LV YRLG DQG ZLOO
DXWRPDWLFDOO\ WHUPLQDWH \RXU ULJKWV XQGHU WKLV /LFHQVH +RZHYHU SDUWLHV ZKR KDYH UHFHLYHG FRSLHV RU ULJKWV
IURP \RX XQGHU WKLV /LFHQVH ZLOO QRW KDYH WKHLU OLFHQVHV WHUPLQDWHG VR ORQJ DV VXFK SDUWLHV UHPDLQ LQ IXOO
FRPSOLDQFH
)8785( 5(9,6,216 2) 7+,6 /,&(16(

7KH )UHH 6RIWZDUH )RXQGDWLRQ PD\ SXEOLVK QHZ UHYLVHG YHUVLRQV RI WKH *18 )UHH 'RFXPHQWDWLRQ /LFHQVH IURP
WLPH WR WLPH 6XFK QHZ YHUVLRQV ZLOO EH VLPLODU LQ VSLULW WR WKH SUHVHQW YHUVLRQ EXW PD\ GLIIHU LQ GHWDLO WR
DGGUHVV QHZ SUREOHPV RU FRQFHUQV 6HH KWWSZZZJQXRUJFRS\OHIW
(DFK YHUVLRQ RI WKH /LFHQVH LV JLYHQ D GLVWLQJXLVKLQJ YHUVLRQ QXPEHU ,I WKH 'RFXPHQW VSHFLILHV WKDW D SDUWLFXODU
QXPEHUHG YHUVLRQ RI WKLV /LFHQVH RU DQ\ ODWHU YHUVLRQ DSSOLHV WR LW \RX KDYH WKH RSWLRQ RI IROORZLQJ WKH WHUPV
DQG FRQGLWLRQV HLWKHU RI WKDW VSHFLILHG YHUVLRQ RU RI DQ\ ODWHU YHUVLRQ WKDW KDV EHHQ SXEOLVKHG QRW DV D GUDIW
E\ WKH )UHH 6RIWZDUH )RXQGDWLRQ ,I WKH 'RFXPHQW GRHV QRW VSHFLI\ D YHUVLRQ QXPEHU RI WKLV /LFHQVH \RX PD\
FKRRVH DQ\ YHUVLRQ HYHU SXEOLVKHG QRW DV D GUDIW E\ WKH )UHH 6RIWZDUH )RXQGDWLRQ
+RZ WR XVH WKLV /LFHQVH IRU \RXU GRFXPHQWV

7R XVH WKLV /LFHQVH LQ D GRFXPHQW \RX KDYH ZULWWHQ LQFOXGH D FRS\ RI WKH /LFHQVH LQ WKH GRFXPHQW DQG SXW WKH
IROORZLQJ FRS\ULJKW DQG OLFHQVH QRWLFHV MXVW DIWHU WKH WLWOH SDJH
&RS\ULJKW F <($5 <285 1$0(

3HUPLVVLRQ LV JUDQWHG WR FRS\ GLVWULEXWH DQGRU PRGLI\ WKLV GRFXPHQW
XQGHU WKH WHUPV RI WKH *18 )UHH 'RFXPHQWDWLRQ /LFHQVH 9HUVLRQ
RU DQ\ ODWHU YHUVLRQ SXEOLVKHG E\ WKH )UHH 6RIWZDUH )RXQGDWLRQ
ZLWK WKH ,QYDULDQW 6HFWLRQV EHLQJ /,67 7+(,5 7,7/(6 ZLWK WKH
)URQW&RYHU 7H[WV EHLQJ /,67 DQG ZLWK WKH %DFN&RYHU 7H[WV EHLQJ /,67
$ FRS\ RI WKH OLFHQVH LV LQFOXGHG LQ WKH VHFWLRQ HQWLWOHG *18
)UHH 'RFXPHQWDWLRQ /LFHQVH
,I \RX KDYH QR ,QYDULDQW 6HFWLRQV ZULWH ZLWK QR ,QYDULDQW 6HFWLRQV LQVWHDG RI VD\LQJ ZKLFK
RQHV DUH LQYDULDQW ,I \RX KDYH QR )URQW&RYHU 7H[WV ZULWH QR )URQW&RYHU 7H[WV LQVWHDG RI )URQW&RYHU
7H[WV EHLQJ /,67 OLNHZLVH IRU %DFN&RYHU 7H[WV
,I \RXU GRFXPHQW FRQWDLQV QRQWULYLDO H[DPSOHV RI SURJUDP FRGH ZH UHFRPPHQG UHOHDVLQJ WKHVH H[DPSOHV LQ
SDUDOOHO XQGHU \RXU FKRLFH RI IUHH VRIWZDUH OLFHQVH VXFK DV WKH *18 *HQHUDO 3XEOLF /LFHQVH WR SHUPLW WKHLU XVH
LQ IUHH VRIWZDUH

&RPLWrGH,QFHQWLYRD3URGXomRGR
6RIWZDUH*UDWXLWRH$OWHUQDWLYR
Fundado em 29 de janeiro de 1999.
1ª Diretoria
Djalma Valois Filho
'LUHWRU([HFXWLYR
dvalois@cxpostal.com
José Luiz Nunes Poyares Paulo Roberto Ribeiro Guimarães

Diretor Administrativo Diretor Institucional
CIPSGA
Rua Professora Ester de Melo, numero 202,
Parte, Benfica, Rio de Janeiro, RJ, CEP. 20930-010;
Telefone (Fax/Dados): 021-5564201;
e-mail: administracao@cipsga.org.br
CNPJ: 03179614-0001/70

Curso de Seguranca em Redes Linux PDF

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Curso de Seguranca em Redes Linux PDF

Uploaded by

Copyright:

Available Formats

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH *UDWXLWR H $OWHUQDWLYR ± &,36*$

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[  ZZZFLSVJDRUJEU  FXUVRV#FLSVJDRUJEU  3iJLQD 1

&RS\ULJKW F  5HQDWR 0DUWLQL

&RS\ULJKW F  5HQDWR 0DUWLQL

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[  ZZZFLSVJDRUJEU  FXUVRV#FLSVJDRUJEU  3iJLQD 2

SOBRE O AUTOR DA APOSTILA .................................................................................................... 102

*18 )5(( '2&80(17$7,21 /,&(16( ....................................................................................... 103

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[  ZZZFLSVJDRUJEU  FXUVRV#FLSVJDRUJEU  3iJLQD 3

9 YLTO^S`Y NO]^O NYM_WOX^Y ¤ WY]^\K\ MYWY Y 6SX_b YPO\OMO _WK

1.2 Segurança: o conceito

>\K^K\OWY] ]OQ_\KXK MYWY ]OXNY K \O]^\SÁY NY] \OM_\]Y] NO _W

7O]WY _W ]S]^OWK MYWY Y KX^SQY .9= SWZVOWOX^K`K _W ^SZY NO

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[  ZZZFLSVJDRUJEU  FXUVRV#FLSVJDRUJEU  3iJLQD 4

96SX_b¤_W]S]^OWKW_V^S_]_£\SYO]]OXMSKVWOX^O _W =9 MKZKMS^KNY

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[  ZZZFLSVJDRUJEU  FXUVRV#FLSVJDRUJEU  3iJLQD 5

1.3 Segurança e as ferramentas de rede

.O`O]OVOWL\K\[_O^KS]PO\\KWOX^K]]ÁYSX¦^OS] ]O Y KNWSXS]^\KNY\

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[  ZZZFLSVJDRUJEU  FXUVRV#FLSVJDRUJEU  3iJLQD 6

1.4 Nosso objetivo

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[  ZZZFLSVJDRUJEU  FXUVRV#FLSVJDRUJEU  3iJLQD 7

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[  ZZZFLSVJDRUJEU  FXUVRV#FLSVJDRUJEU  3iJLQD 8

2 0 Firewall: duas soluções em ambiente Linux

2.1 Uma palavra inicial sobre firewalls

/X^\O^KX^Y K MKZKMSNKNO OPO^S`K NO MYX^\YVO NO _W PS\OaKVV ¤

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[  ZZZFLSVJDRUJEU  FXUVRV#FLSVJDRUJEU  3iJLQD 9

2.2 Firewalls e acesso remoto: o Secure Shell

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[  ZZZFLSVJDRUJEU  FXUVRV#FLSVJDRUJEU  3iJLQD 10

M\SZ^YQ\KPKNK] + <=+ ¤ _]KNK ZK\K _W SX^O\MWLSY NO MRK`O] X_W

VVKRXVORJLQ &OLHQWH SURJUDPD XVDGR SDUD ORJLQ H H[HFXomR

VFS 8VDGR SDUD FRSLDU DUTXLYRV GH XP FRPSXWDGRU

VVKNH\JHQ 8VDGR SDUD FULDU FKDYHV 56$

VVKDJHQW $JHQWH SDUD D DXWHQWLFDomR GDV FKDYHV

VVKDGG 8VDGR SDUD UHJLVWUDU QRYDV FKDYHV

PDNHVVKNQRZQKRVWV 6FULSW SHUO XVDGR SDUD FULDU R DUTXLYR

>URRW#DOSKD @ VVKNH\JHQ

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[  ZZZFLSVJDRUJEU  FXUVRV#FLSVJDRUJEU  3iJLQD 11

(QWHU WKH VDPH SDVVSKUDVH DJDLQ LGHP

>URRW#EHWD URRW@ VVK DOSKD

>URRW#EHWD @ VVK DOSKDFLSVJDRUJEU

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[  ZZZFLSVJDRUJEU  FXUVRV#FLSVJDRUJEU  3iJLQD 12

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[  ZZZFLSVJDRUJEU  FXUVRV#FLSVJDRUJEU  3iJLQD 13

>URRW#DOSKD @VVK EHWD

Âhttp://www.chiark.greenend.org.uk/~sgtatham/putty/ (PuTTY é uma versão livre para telnet e SSH).

ÂP^Z$P^ZM]R_^PSZ_L]]RY]]]RY]dSZ @O\]ÁY ==2 ZK\K 9= b

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[  ZZZFLSVJDRUJEU  FXUVRV#FLSVJDRUJEU  3iJLQD 14

2.3 Firewalls: solução Linux

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[  ZZZFLSVJDRUJEU  FXUVRV#FLSVJDRUJEU  3iJLQD 15

2. turn TCP/IP networking => ATIVO

Em 'network device support':

2.4 A filtragem de pacotes

+] SXPY\WKÉO] [_O K^\K`O]]KW _WK \ONO ]ÁY NO]WOWL\KNK] O OX`SKNK]

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[  ZZZFLSVJDRUJEU  FXUVRV#FLSVJDRUJEU  3iJLQD 16

» ZY\ O]]K] MK\KM^O\´]^SMK] [_O _W PS\OaKVV ZYNO XY] QK\KX^S\

2.5 IPCHAINS (The Enhanced IP Firewalling Chains Software for Linux)

IP INPUT CHAIN: quando um pacote entra ...

» XO]^O ^\SZ¤ [_O ]O P_XNKWOX^K K MYX]^\_ÁY NO XY]]Y PS\OaKVV

+] [_K^\Y YZO\KÉO] WKS] L£]SMK] O MYW_X] XY 3ZMRKSX] ]ÁY$

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[  ZZZFLSVJDRUJEU  FXUVRV#FLSVJDRUJEU  3iJLQD 17

LSFKDLQV $ LQSXW V  S LFPS M '(1<

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[  ZZZFLSVJDRUJEU  FXUVRV#FLSVJDRUJEU  3iJLQD 18

SERVIÇO PORTA PROTOCOLO

>URRW#DOSKD @ LSFKDLQV $ LQSXW V  G   S WFS - '(1<

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[  ZZZFLSVJDRUJEU  FXUVRV#FLSVJDRUJEU  3iJLQD 19

&RPLWr GH ,QFHQWLYR D 3URGXomR GR 6RIWZDUH UDWXLWR H $OWHUQDWLYR ± &,36$

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 1

&RS\ULJKW F 5HQDWR 0DUWLQL

&RS\ULJKW F 5HQDWR 0DUWLQL

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 2

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 3

>\K^K\OWY] ]OQ_\KXK MYWY ]OXNY K \O]^\SÁY NY] \OM_\]Y] NO _W

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 4

96SX_b¤_W]S]^OWKW_V^S_]_£\SYO]]OXMSKVWOX^O _W =9 MKZKMS^KNY

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 5

.O`O]OVOWL\K\[_O^KS]PO\\KWOX^K]]ÁYSX¦^OS] ]O Y KNWSXS]^\KNY\

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 6

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 7

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 8

/X^\O^KX^Y K MKZKMSNKNO OPO^S`K NO MYX^\YVO NO _W PS\OaKVV ¤

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 9

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 10

M\SZ^YQ\KPKNK] + <=+ ¤ _]KNK ZK\K _W SX^O\MWLSY NO MRK`O] X_W

VVKRXVORJLQ &OLHQWH SURJUDPD XVDGR SDUD ORJLQ H H[HFXomR

VVKNH\JHQ 8VDGR SDUD FULDU FKDYHV 56$

VVKDJHQW $JHQWH SDUD D DXWHQWLFDomR GDV FKDYHV

VVKDGG 8VDGR SDUD UHJLVWUDU QRYDV FKDYHV

PDNHVVKNQRZQKRVWV 6FULSW SHUO XVDGR SDUD FULDU R DUTXLYR

>URRW#DOSKD @ VVKNH\JHQ

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 11

(QWHU WKH VDPH SDVVSKUDVH DJDLQ LGHP

>URRW#EHWD URRW@ VVK DOSKD

>URRW#EHWD @ VVK DOSKDFLSVJDRUJEU

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 12

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 13

>URRW#DOSKD @VVK EHWD

ÂP^Z$P^ZM]R_^PSZ_L]]RY]]]RY]dSZ @O\]ÁY ==2 ZK\K 9= b

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 14

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 15

+] SXPY\WKÉO] [_O K^\K`O]]KW _WK \ONO ]ÁY NO]WOWL\KNK] O OX`SKNK]

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 16

» XO]^O ^\SZ¤ [_O ]O P_XNKWOX^K K MYX]^\_ÁY NO XY]]Y PS\OaKVV

+] [_K^\Y YZO\KÉO] WKS] L£]SMK] O MYW_X] XY 3ZMRKSX] ]ÁY$

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 17

LSFKDLQV $ LQSXW V S LFPS M '(1<

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 18

>URRW#DOSKD @ LSFKDLQV $ LQSXW V G S WFS - '(1<

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 19

>URRW#DOSKD @ LSFKDLQV /

9 KV`Y :\Y^ Y 9Z^ K] =Y_\MO .O]^SXK^SYX +] ZY\^K] 9 ]O\`SY

;_KV KV`Y 9 OXNO\OY 9 OXNO\OY +] ZY\^K] 9]

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 20

_]KWY] 9 Z\Y^YMYVY 8OXR_WK NO Y\SQOW NO NO]^SXY OW TYQY ]O\`SY]

>URRW#DOSKD @ LSFKDLQV )

>URRW#DOSKD @ LSFKDLQV ' LQSXW

>URRW#DOSKD @ LSFKDLQV /

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 21

?W Y_^\Y ObOWZVY /]^KLOVOMOWY] POMRK\ K MYXObÁY `SK >-: ]OW

>URRW#DOSKD @ LSFKDLQV $ LQSXW G S WFS - '(1<

>URRW#DOSKD @XVUORFDOELQQPDS Y DOSKDFLSVJDRUJEU

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 22

ILOWHUHG WFS QHWVWDW

>URRW#DOSKD @XVUORFDOELQQPDS Y DOSKDFLSVJDRUJEU

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 23

SXMV_]S`K] ZY\ ObOWZVY$ vZ ^MZ # " $v SXMV_´WY]

LSFKDLQV $ LQSXW V VVK G VVK S WFS M 5(-(&7

>URRW#DOSKD @ LSFKDLQV /

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 24

+MSWK PSdOWY] WOXÁY K] SXÔ\PKMO] NO \ONO XOâY\U SXÔ\PKMO7 9

/bS]^O _WK PO\\KWOX^K NO MYXPSQ_\KÁY MRKWKNK 6SX_bMYXP /VK O]^£

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 25

.O]^KMKWY] Y] ^\ ] LY^ÉO] [_O \OZ\O]OX^KW Y ^\SZ¤ vSXZ_^PY\aK\N

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 26

-VS[_O OX^ÁY XY LY^ÁY vKNSMSYXK\v >O\OWY] Y [_KN\Y ]OQ_SX^O [_O

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 27

>URRW#DOSKD @ LSFKDLQV 1 QDRXGS

/XMO\\KXNY @KWY] KXKVS]K\ _W MOX£\SY MV£]]SMY OW \ONO] W¤NSK]

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 28

ROTEADOR - 200.255.210.0 => FIREWALL - 200.255.210.1

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 29

>URRW#DOSKD @ LSFKDLQV $ IRUZDUG S WFS V G M $&&(37

8VR LSFKDLQV >$'&@ FKDLQ UHJUDHVSHFLILFDGD >RSo}HV@

SROLF\ 3 FKDLQ DOYR

VRXUFH V >@ HQGHUHoR>PDVF@ >@ >SRUWD>SRUWD@@

&XUVR GH 6HJXUDQoD HP 5HGHV /LQX[ ZZZFLSVJDRUJEU FXUVRV#FLSVJDRUJEU 3iJLQD 31