<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML xmlns="http://www.w3.org/TR/REC-html40" xmlns:v =
"urn:schemas-microsoft-com:vml" xmlns:o =
"urn:schemas-microsoft-com:office:office" xmlns:w =
"urn:schemas-microsoft-com:office:word" xmlns:x =
"urn:schemas-microsoft-com:office:excel" xmlns:p =
"urn:schemas-microsoft-com:office:powerpoint" xmlns:a =
"urn:schemas-microsoft-com:office:access" xmlns:dt =
"uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:s =
"uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" xmlns:rs =
"urn:schemas-microsoft-com:rowset" xmlns:z = "#RowsetSchema" xmlns:b =
"urn:schemas-microsoft-com:office:publisher" xmlns:ss =
"urn:schemas-microsoft-com:office:spreadsheet" xmlns:c =
"urn:schemas-microsoft-com:office:component:spreadsheet" xmlns:odc =
"urn:schemas-microsoft-com:office:odc" xmlns:oa =
"urn:schemas-microsoft-com:office:activation" xmlns:html =
"http://www.w3.org/TR/REC-html40" xmlns:q =
"http://schemas.xmlsoap.org/soap/envelope/" xmlns:rtc =
"http://microsoft.com/officenet/conferencing" XMLNS:D = "DAV:" XMLNS:Repl =
"http://schemas.microsoft.com/repl/" xmlns:mt =
"http://schemas.microsoft.com/sharepoint/soap/meetings/" xmlns:x2 =
"http://schemas.microsoft.com/office/excel/2003/xml" xmlns:ppda =
"http://www.passport.com/NameSpace.xsd" xmlns:ois =
"http://schemas.microsoft.com/sharepoint/soap/ois/" xmlns:dir =
"http://schemas.microsoft.com/sharepoint/soap/directory/" xmlns:ds =
"http://www.w3.org/2000/09/xmldsig#" xmlns:dsp =
"http://schemas.microsoft.com/sharepoint/dsp" xmlns:udc =
"http://schemas.microsoft.com/data/udc" xmlns:xsd =
"http://www.w3.org/2001/XMLSchema" xmlns:sub =
"http://schemas.microsoft.com/sharepoint/soap/2002/1/alerts/" xmlns:ec =
"http://www.w3.org/2001/04/xmlenc#" xmlns:sp =
"http://schemas.microsoft.com/sharepoint/" xmlns:sps =
"http://schemas.microsoft.com/sharepoint/soap/" xmlns:xsi =
"http://www.w3.org/2001/XMLSchema-instance" xmlns:udcs =
"http://schemas.microsoft.com/data/udc/soap" xmlns:udcxf =
"http://schemas.microsoft.com/data/udc/xmlfile" xmlns:udcp2p =
"http://schemas.microsoft.com/data/udc/parttopart" xmlns:wf =
"http://schemas.microsoft.com/sharepoint/soap/workflow/" xmlns:dsss =
"http://schemas.microsoft.com/office/2006/digsig-setup" xmlns:dssi =
"http://schemas.microsoft.com/office/2006/digsig" xmlns:mdssi =
"http://schemas.openxmlformats.org/package/2006/digital-signature" xmlns:mver =
"http://schemas.openxmlformats.org/markup-compatibility/2006" xmlns:m =
"http://schemas.microsoft.com/office/2004/12/omml" xmlns:mrels =
"http://schemas.openxmlformats.org/package/2006/relationships" xmlns:spwp =
"http://microsoft.com/sharepoint/webpartpages" xmlns:ex12t =
"http://schemas.microsoft.com/exchange/services/2006/types" xmlns:ex12m =
"http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:pptsl =
"http://schemas.microsoft.com/sharepoint/soap/SlideLibrary/" xmlns:spsl =
"http://microsoft.com/webservices/SharePointPortalServer/PublishedLinksService"
XMLNS:Z = "urn:schemas-microsoft-com:" xmlns:st = ""><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.6000.17063" name=GENERATOR>
<STYLE>
<!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";
color:black;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";
color:black;}
span.longtext
{mso-style-name:long_text;}
span.normaltext
{mso-style-name:normaltext;}
span.shorttext
{mso-style-name:short_text;}
span.EmailStyle22
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle23
{mso-style-type:personal;
font-family:"Tahoma","sans-serif";
color:#1F497D;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
span.EmailStyle24
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
-->
</STYLE>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></HEAD>
<BODY lang=EN-US vLink=purple link=blue bgColor=white>
<DIV dir=ltr align=left>
<DIV dir=ltr align=left><FONT face="Courier New" size=2><SPAN
class=166150513-15072010>
<DIV dir=ltr align=left><FONT face="Comic Sans MS" size=2><SPAN
class=166150513-15072010>The following command on the Cisco CMTS controls the
number of DHCP LEASEQUERY request messages that are sent for unknown IP
addresses per each service ID (SID) on an
upstream:</SPAN></FONT></SPAN></FONT></DIV></DIV>
<DIV dir=ltr align=left><FONT face="Courier New" size=2><SPAN
class=166150513-15072010><STRONG></STRONG></SPAN></FONT> </DIV>
<DIV dir=ltr align=left><FONT face="Courier New" size=2><SPAN
class=166150513-15072010><STRONG>cable source-verify leasequery-filter
upstream</STRONG></SPAN></FONT></DIV>
<DIV><FONT face="Comic Sans MS" size=2></FONT> </DIV>
<DIV dir=ltr align=left><FONT face="Comic Sans MS" size=2><A
href="blocked::http://www.ciscosystems.cg/en/US/docs/ios/cable/command/reference/cbl_08_cable_s.html#wp1050476">http://www.ciscosystems.cg/en/US/docs/ios/cable/command/reference/cbl_08_cable_s.html#wp1050476</A></FONT></DIV>
<DIV dir=ltr align=left><FONT face="Comic Sans MS" size=2></FONT> </DIV>
<DIV dir=ltr align=left><FONT face="Comic Sans MS"><FONT size=2>Keith
</FONT></FONT></DIV></DIV><BR>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B>
dhcp-users-bounces+keith.perry=sciatl.com@lists.isc.org
[mailto:dhcp-users-bounces+keith.perry=sciatl.com@lists.isc.org] <B>On Behalf Of
</B>Patricio Latini<BR><B>Sent:</B> Thursday, July 15, 2010 4:23
PM<BR><B>To:</B> frnkblk@iname.com; daniel@dgnetwork.com.br; 'Users of ISC
DHCP'<BR><B>Subject:</B> RE: DISCOVERY STORM DoS ?<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV class=WordSection1>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri','sans-serif'">On
the Arris C4 it is<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri','sans-serif'"><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri','sans-serif'">configure
cable proto-throttle dhcp <o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri','sans-serif'">configure
cable proto-throttle interval <INT> <o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri','sans-serif'">configure
cable proto-throttle max-burst <INT><o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri','sans-serif'"><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri','sans-serif'">Patricio<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri','sans-serif'"><o:p> </o:p></SPAN></P>
<DIV>
<DIV
style="BORDER-RIGHT: medium none; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; PADDING-LEFT: 0in; PADDING-BOTTOM: 0in; BORDER-LEFT: medium none; PADDING-TOP: 3pt; BORDER-BOTTOM: medium none">
<P class=MsoNormal><B><SPAN
style="FONT-SIZE: 10pt; COLOR: windowtext; FONT-FAMILY: 'Tahoma','sans-serif'">From:</SPAN></B><SPAN
style="FONT-SIZE: 10pt; COLOR: windowtext; FONT-FAMILY: 'Tahoma','sans-serif'">
Frank Bulk - iName.com [mailto:frnkblk@iname.com] <BR><B>Sent:</B> Thursday,
July 15, 2010 1:02 AM<BR><B>To:</B> daniel@dgnetwork.com.br; 'Users of ISC
DHCP'; Patricio Latini<BR><B>Cc:</B> dhcp-users@isc.org<BR><B>Subject:</B> RE:
DISCOVERY STORM DoS ?<o:p></o:p></SPAN></P></DIV></DIV>
<P class=MsoNormal><o:p> </o:p></P>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 10pt; COLOR: #1f497d; FONT-FAMILY: 'Tahoma','sans-serif'">We
have a Moto BSR64000, and I’ve never seen any DHCP rate-limiting, either.
Just a “max-hosts”.<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 10pt; COLOR: #1f497d; FONT-FAMILY: 'Tahoma','sans-serif'"><o:p> </o:p></SPAN></P>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 10pt; COLOR: #1f497d; FONT-FAMILY: 'Tahoma','sans-serif'">Frank<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 10pt; COLOR: #1f497d; FONT-FAMILY: 'Tahoma','sans-serif'"><o:p> </o:p></SPAN></P>
<DIV>
<DIV
style="BORDER-RIGHT: medium none; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; PADDING-LEFT: 0in; PADDING-BOTTOM: 0in; BORDER-LEFT: medium none; PADDING-TOP: 3pt; BORDER-BOTTOM: medium none">
<P class=MsoNormal><B><SPAN
style="FONT-SIZE: 10pt; COLOR: windowtext; FONT-FAMILY: 'Tahoma','sans-serif'">From:</SPAN></B><SPAN
style="FONT-SIZE: 10pt; COLOR: windowtext; FONT-FAMILY: 'Tahoma','sans-serif'">
dhcp-users-bounces+frnkblk=iname.com@lists.isc.org
[mailto:dhcp-users-bounces+frnkblk=iname.com@lists.isc.org] <B>On Behalf Of
</B>"Daniel D. Gonçalves"<BR><B>Sent:</B> Wednesday, July 14, 2010 12:29
PM<BR><B>To:</B> Patricio Latini<BR><B>Cc:</B>
dhcp-users@isc.org<BR><B>Subject:</B> Re: DISCOVERY STORM DoS
?<o:p></o:p></SPAN></P></DIV></DIV>
<P class=MsoNormal><o:p> </o:p></P>
<P class=MsoNormal>My CMTS is a Cisco UBR 10K, but I didn't found
information about rate limit.<BR> <BR>Patricio Latini escreveu:
<o:p></o:p></P>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri','sans-serif'">Daniel,
you should activate dhcp throttling in your CMTS. Advanced CMTSs support rate
limiting features that limit the quantity of DHCP DISCOVERS/REQUESTSs in order
to avoid this kind of DoS attacks</SPAN><o:p></o:p></P>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri','sans-serif'"> </SPAN><o:p></o:p></P>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri','sans-serif'">Patricio</SPAN><o:p></o:p></P>
<P class=MsoNormal><SPAN
style="FONT-SIZE: 11pt; COLOR: #1f497d; FONT-FAMILY: 'Calibri','sans-serif'"> </SPAN><o:p></o:p></P>
<DIV>
<DIV
style="BORDER-RIGHT: medium none; PADDING-RIGHT: 0in; BORDER-TOP: windowtext 1pt solid; PADDING-LEFT: 0in; PADDING-BOTTOM: 0in; BORDER-LEFT: medium none; PADDING-TOP: 3pt; BORDER-BOTTOM: medium none">
<P class=MsoNormal><B><SPAN
style="FONT-SIZE: 10pt; COLOR: windowtext; FONT-FAMILY: 'Tahoma','sans-serif'">From:</SPAN></B><SPAN
style="FONT-SIZE: 10pt; COLOR: windowtext; FONT-FAMILY: 'Tahoma','sans-serif'">
<A
href="mailto:dhcp-users-bounces+p_latini=hotmail.com@lists.isc.org">dhcp-users-bounces+p_latini=hotmail.com@lists.isc.org</A>
[<A
href="mailto:dhcp-users-bounces+p_latini=hotmail.com@lists.isc.org">mailto:dhcp-users-bounces+p_latini=hotmail.com@lists.isc.org</A>]
<B>On Behalf Of </B>"Daniel D. Gonçalves"<BR><B>Sent:</B> Monday, July 12, 2010
5:39 PM<BR><B>To:</B> <A
href="mailto:dhcp-users@isc.org">dhcp-users@isc.org</A><BR><B>Subject:</B>
DISCOVERY STORM DoS ?</SPAN><o:p></o:p></P></DIV></DIV>
<P class=MsoNormal> <o:p></o:p></P>
<P class=MsoNormal><SPAN class=longtext><SPAN style="BACKGROUND: white">I'm
having the following problem, a client begins randomly sending a storm of
requests DISCOVERY, and DHCP responds with a OFFER, but </SPAN>nothing more than
that<SPAN style="BACKGROUND: white">. </SPAN>These requests cause denial of
service on DHCP. <SPAN style="BACKGROUND: white">Even removing the MAC from
DHCP, the DISCOVERY continuing.</SPAN></SPAN><SPAN class=shorttext><SPAN
style="BACKGROUND: white"> I tried these versions </SPAN></SPAN>V3.1.1 and
4.1.1-P1<SPAN class=shorttext><SPAN style="BACKGROUND: white">, both have the
same problem. </SPAN></SPAN><SPAN style="BACKGROUND: white"><BR><SPAN
class=shorttext>The IP 10.40.0.1 is a Cisco CMTS with dhcp relay
activated.</SPAN></SPAN><BR><BR>Jul 12 12:03:03 gw dhcpd: DHCPDISCOVER from
08:10:74:33:3a:af (Router) via 10.14.0.1<BR>Jul 12 12:03:03 gw dhcpd: DHCPOFFER
on 200.XX.XX.XX to 08:10:74:33:3a:af (Router) via 10.14.0.1<BR>Jul 12 12:03:03
gw dhcpd: DHCPDISCOVER from 08:10:74:33:3a:af (Router) via 10.14.0.1<BR>Jul 12
12:03:03 gw dhcpd: DHCPOFFER on 200.XX.XX.XX to 08:10:74:33:3a:af (Router) via
10.14.0.1<BR>Jul 12 12:03:03 gw dhcpd: DHCPDISCOVER from 08:10:74:33:3a:af
(Router) via 10.14.0.1<BR>Jul 12 12:03:03 gw dhcpd: DHCPOFFER on 200.XX.XX.XX to
08:10:74:33:3a:af (Router) via 10.14.0.1<BR>Jul 12 12:03:03 gw dhcpd:
DHCPDISCOVER from 08:10:74:33:3a:af (Router) via 10.14.0.1<BR>Jul 12 12:03:03 gw
dhcpd: DHCPOFFER on 200.XX.XX.XX to 08:10:74:33:3a:af (Router) via
10.14.0.1<BR>Jul 12 12:03:03 gw dhcpd: DHCPDISCOVER from 08:10:74:33:3a:af
(Router) via 10.14.0.1<BR>Jul 12 12:03:03 gw dhcpd: DHCPOFFER on 200.XX.XX.XX to
08:10:74:33:3a:af (Router) via 10.14.0.1<BR>Jul 12 12:03:03 gw dhcpd:
DHCPDISCOVER from 08:10:74:33:3a:af (Router) via 10.14.0.1<BR>Jul 12 12:03:03 gw
dhcpd: DHCPOFFER on 200.XX.XX.XX to 08:10:74:33:3a:af (Router) via
10.14.0.1<BR>Jul 12 12:03:03 gw dhcpd: DHCPDISCOVER from 08:10:74:33:3a:af
(Router) via 10.14.0.1<BR>Jul 12 12:03:03 gw dhcpd: DHCPOFFER on 200.XX.XX.XX to
08:10:74:33:3a:af (Router) via 10.14.0.1<BR>Jul 12 12:03:03 gw dhcpd:
DHCPDISCOVER from 08:10:74:33:3a:af (Router) via 10.14.0.1<BR>Jul 12 12:03:03 gw
dhcpd: DHCPOFFER on 200.XX.XX.XX to 08:10:74:33:3a:af (Router) via
10.14.0.1<BR>Jul 12 12:03:03 gw dhcpd: DHCPDISCOVER from 08:10:74:33:3a:af
(Router) via 10.14.0.1<BR>Jul 12 12:03:03 gw dhcpd: DHCPOFFER on 200.XX.XX.XX to
08:10:74:33:3a:af (Router) via 10.14.0.1<BR>Jul 12 12:03:03 gw dhcpd:
DHCPDISCOVER from 08:10:74:33:3a:af (Router) via 10.14.0.1<BR>Jul 12 12:03:03 gw
dhcpd: DHCPOFFER on 200.XX.XX.XX to 08:10:74:33:3a:af (Router) via
10.14.0.1<BR>Jul 12 12:03:03 gw dhcpd: DHCPDISCOVER from 08:10:74:33:3a:af
(Router) via 10.14.0.1<BR>Jul 12 12:03:03 gw dhcpd: DHCPOFFER on 200.XX.XX.XX to
08:10:74:33:3a:af (Router) via 10.14.0.1<BR>Jul 12 12:03:03 gw dhcpd:
DHCPDISCOVER from 08:10:74:33:3a:af (Router) via 10.14.0.1<BR>Jul 12 12:03:03 gw
dhcpd: DHCPOFFER on 200.XX.XX.XX to 08:10:74:33:3a:af (Router) via
10.14.0.1<BR>Jul 12 12:03:03 gw dhcpd: DHCPDISCOVER from 08:10:74:33:3a:af
(Router) via 10.14.0.1<BR>Jul 12 12:03:03 gw dhcpd: DHCPOFFER on 200.XX.XX.XX to
08:10:74:33:3a:af (Router) via 10.14.0.1<BR>Jul 12 12:03:03 gw dhcpd:
DHCPDISCOVER from 08:10:74:33:3a:af (Router) via 10.14.0.1<BR>Jul 12 12:03:03 gw
dhcpd: DHCPOFFER on 200.XX.XX.XX to 08:10:74:33:3a:af (Router) via
10.14.0.1<BR>Jul 12 12:03:03 gw dhcpd: DHCPDISCOVER from 08:10:74:33:3a:af
(Router) via 10.14.0.1<BR>Jul 12 12:03:03 gw dhcpd: DHCPOFFER on 200.XX.XX.XX to
08:10:74:33:3a:af (Router) via 10.14.0.1<BR>Jul 12 12:03:03 gw dhcpd:
DHCPDISCOVER from 08:10:74:33:3a:af (Router) via 10.14.0.1<BR>Jul 12 12:03:03 gw
dhcpd: DHCPOFFER on 200.XX.XX.XX to 08:10:74:33:3a:af (Router) via
10.14.0.1<BR>Jul 12 12:03:03 gw dhcpd: DHCPDISCOVER from 08:10:74:33:3a:af
(Router) via 10.14.0.1<BR>Jul 12 12:03:03 gw dhcpd: DHCPOFFER on 200.XX.XX.XX to
08:10:74:33:3a:af (Router) via 10.14.0.1<BR>Jul 12 12:03:03 gw dhcpd:
DHCPDISCOVER from 08:10:74:33:3a:af (Router) via 10.14.0.1<BR>Jul 12 12:03:03 gw
dhcpd: DHCPOFFER on 200.XX.XX.XX to 08:10:74:33:3a:af (Router) via
10.14.0.1<BR>Jul 12 12:03:03 gw dhcpd: DHCPDISCOVER from 08:10:74:33:3a:af
(Router) via 10.14.0.1<BR><BR>Thanks.<BR><BR>Daniel<BR><BR><BR><BR>__________
Information from ESET Smart Security, version of virus signature database 5267
(20100710) __________<BR><BR>The message was checked by ESET Smart
Security.<BR><BR><A
href="http://www.eset.com">http://www.eset.com</A><o:p></o:p></P>
<P class=MsoNormal><BR><BR>__________ Information from ESET Smart Security,
version of virus signature database 5267 (20100710) __________<BR><BR>The
message was checked by ESET Smart Security.<BR><BR><A
href="http://www.eset.com">http://www.eset.com</A><o:p></o:p></P>
<P class=MsoNormal><o:p> </o:p></P>
<P class=MsoNormal><SPAN style="COLOR: windowtext"><BR><BR>__________
Information from ESET Smart Security, version of virus signature database 5267
(20100710) __________<BR><BR>The message was checked by ESET Smart
Security.<BR><BR><A
href="http://www.eset.com">http://www.eset.com</A><o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN style="COLOR: windowtext"><BR><BR>__________
Information from ESET Smart Security, version of virus signature database 5267
(20100710) __________<BR><BR>The message was checked by ESET Smart
Security.<BR><BR><A
href="http://www.eset.com">http://www.eset.com</A><o:p></o:p></SPAN></P></DIV><BR><BR>__________
Information from ESET Smart Security, version of virus signature database 5267
(20100710) __________<BR><BR>The message was checked by ESET Smart
Security.<BR><BR><A
href="http://www.eset.com">http://www.eset.com</A><BR></BODY></HTML>