Okay, we're now recording the meeting and 602 we call the meeting to order are there any additions or changes to the agenda? Okay, hearing none. Is there any public comment? Okay, I have two. Oh, John. I see your hand is up.  Okay, there Okay Just letting members of the board know that I think tomorrow I will be sending you all a request to Take the the post that we had on front porch forum on Monday and repost it sometime this week In your own community We get the one post for free. It's a reminder about our webinar next week And we'd like to reinforce that as much as we can so if you can I will send the text you can Personalize it if you want or put it up on front porch forum in your community That's what I'm asking and I'm done Thanks John Michael Gray, you have your hand up sir. Yes, I just wonder if this is an appropriate time for me to introduce myself But it's absolutely perfect time. Okay for it. So I am a New rep to CV fiber. I'm a Woodbury alternative rep So and I want to apologize for the town for the lack of Representative from Woodbury we thought people were attending the meetings until recently had a had a meeting about CV fiber So And I also want to let you know that I have a conflict on Tuesday evenings the second Tuesday of every month I'm also the Woodbury rep to the Central Vermont Regional Planning Commission and their meeting starts in half an hour so I'm planning on attending this meeting till 7 or a little after and then jumping out and maybe jumping back in and The town is going to be working on trying to solve that conflict For me by either finding someone else to be the rep to CV fiber or someone else to be the rep to the Regional Planning Commission Thank you. Thanks Michael. That's that's excellent and Also, if there's any backfill you'd like to do by going back and forth with me for questions, you know We can always do that one-on-one if you know if you if you look at the minutes And you say well, what was that that happened when I wasn't there? We also have another New delegate is that Ted Barnett is is that your hand that's up sir? Ted you're on mute. Maybe I can't hear Ted. Can anybody else here Ted? I Don't I don't see you being on mute, but you are You're you yeah, he is Now you're on you symbol next to that Ted you may want to call in Yep, or turn your mic on but it looks like you're muted right now If you look to unmute if you look in the upper left-hand corner of your of your team's window The third icon from the left should be a mic icon and if you click on that it should unmute you Yes, just check You're still you're still you're still you're still muted Ted But we'll we'll move on and you jump in when you when you when you when you get that figured out We'll move on to the meeting minutes approval Jeremy you want to take that? just a sec Yeah, so a motion to approve the August 9th 2022 meeting minutes as drafted second Okay, I see a second by Siobhan I also see a hand up from Alan Yeah, I wanted to propose a revision to the third bullet item under policy committee recommendations on page two Okay, bring that back up Just a small addition that I think we should do so the revision is to add after the phrase developed by the policy committee Add a phrase based on a proposal from Ray Pelletier and Christopher Schenck So the full sentence would read Alan Gilbert presented a governing board delegate attendance rule developed by the policy committee and Then based on a proposal from Ray Pelletier and Christopher Schenck I just wanted to to to get in there who the who the authors of the original Proposal were So let me just so can you see my screen Alan? Yes, I can so we're on page so it would be right here Is my cursor at the right place? I think so if I can see it. It's pretty small Yeah, no, that's right place. You got it Developed by the policy committee and then based on a proposal from Ray Pelletier and Christopher Schenck I'll stop sharing my screen before people get mad at me. Not remembering All right, so I should be proposal you should be proposal from instead of bye. Oh Proposal from okay Yeah, I would accept that as a friendly amendment Alright I've got another This is just a really small typo on page three There's a typo in the indebted bullet section at the bottom of the page in the third line of the indebted section The word key at the end of the line should be plural keys Just want to make sure that oh, yeah, this doesn't you yeah Just so people when they're reading it ten years from now for history though. They won't stumble over it They don't think we have bad grammar Thanks, so I would also accept that as a friendly amendment. Are you okay with those Siobhan?  We have the two friendly amendments. Thank you Alan We always appreciate that. Let's get it right Any additional discussion on these minutes? Are there any opposed then to the modified motion the friendly amendment included Hearing none opposed any abstaining None opposed none abstaining The motion is approved Thank you very much very much appreciate that We have rave rave from the Finance community and Mary Beth our treasurer. Do we have a treasurer's report for this evening? Lori Beth does the treasure report Thank you very best. I just tried to head to get the mute button to work Yes, I had I'd sent out a treasurer's report. We recently paid sixty two thousand four hundred and sixty two dollars and ninety nine cents in checks that were paid out all of them were accepted and approved by Janelle and There wasn't anything that's outstanding that needs to be approved or accepted by anyone else At the moment she just sent in another batch That'll be paid probably with this sometime this week for thirteen thousand four hundred and eighty four eighty five dollars and fifty seven cents So that will be going out again this week as well Before the ones that at the end of September 9th when they paid the lat the first checks this month There was a balance in the account of 20 of two million five hundred and seventy eight thousand twenty six dollars and fifty two cents and I sent out the Financial pay Pages financial statements the profit and loss the balance sheets and also the grant sheet the grants update and Also sent out The the accounts payable there were some invoices sent out that I understand Janelle generated There we came across one era so that has been Apparently rectified and it there the town of Worcester is getting a new invoice. They had been invoiced for fifty thousand It should have been a fifth. Yeah, and it should have been fifty three thousand so Janelle has issued that or asked a batch elder to reissue that invoice and we're double checking to make sure there aren't any others errors I Think that's all we had a little bit of a discussion with batch elder about their timing and paying and the new girl Who's been handling it wanted to hold everything for two? basically it was going to be two weeks and She didn't want you she wanted Janelle to hold them for a week Then she wanted to hold them for a week and because you all know it takes another week And I I told Janelle and I explained to her in detail why I said that's just not acceptable I said we are a new entity We don't need these companies getting nervous if we're behind on our schedule and the rents Of course have to be paid by the 10th of the month, so I told her I said no I said that's not acceptable so she has passed that on to their new bookkeeper Thank You Laurie Beth And thank you for watching out for us in that way. That's much appreciated Well, yeah Alan also helped me he brought it up because he'd gone to the town of Worcester and he let me know so then I chased it down Thank you Yes, thank you any any any comment on the treasurer's report before we move on So I've asked Janelle to cover three areas For today's executives director report the make ready the materials and our warehouse Situation to bring everybody up to date Janelle do you want to take over?  You're on mute. Sorry Janelle is still on mute. We seem to be having mute issues Did she She did up off where'd you go? I don't know. Look it looks looks like she's here. What if she had internet issues? She had a camera on And now I don't see her so she may have been kicked off, but well, there is some weather passing through connected people Yeah, here's some point why we need Well we can We can we can move on to the to the town ARPA funds and and come back Yeah, it seems like a number of folks are having a Are having trouble here So Let's let's let's let's move let's move on to uh Let's move on to the next item and then we can we can we can come back when janelle gets back on and those I just got back on i'm on the phone uh my computer is Acting strange right now and I can't get my microphone or my camera Okay, are you are you able to uh move on with your discussion of make ready materials and warehouse? Yes Okay, go ahead So we have uh installed a fence at um at our locations in montpelier And we have received plenty of materials And we're working on securing, uh, we're working on securing um security systems as well and We're working with nrtc toward Uh truing up the bomb. That's the bill of materials For our equipment that we've ordered for the first 400 miles and actually I think andrew might be on our Um call andrew our nrtc project manager. Are you on andrew? Yes, I am here I haven't introduced myself to the group yet though, but Okay, that's cool. So yeah, so what we thought we would like to do is um Is to introduce some of our partners who we're working with Every month and nrtc is our design partner and andrew is One of the project managers on our crew and I I wanted to ask andrew to give a Five-minute high-level description of what we've been doing together for the past several months so that everyone here can Get some exposure to what we have been doing as far as design goes. Maybe that 10 000 foot Overview of what we're doing and maybe a bit about the construction schedule. Is that something you can talk to andrew? Yeah, yeah, I think so Again, I'll do a quick intro I'm from the the central vermont area. I'm from uh, barry town actually I went to school in high school and at norwich. So spend a lot of time in the central vermont community and Moved west and I started working on telecom about A little bit over a decade ago now. I think I'm in my my 12th year. So I've been doing this for for quite a while um, I was really excited to Have the opportunity to work on these projects Specifically cv5 or you folks are Uh, you know, my parents still live in in barry. So it's it's an exciting project to be part of I'm glad to be here. So uh, yeah, real quick I can share out some of the information that we have Organized for you folks and really the uh the high level view and I don't want to go too far into detail um What we're trying to do for cv5 or is follow the the pmi standards. So What that really means is we want to make sure that we're a good steward of of the funds We're making the best use of The resources that are available to us to build as much as we can as fast as we can And make sure that these communities get connected. So What that looks like Down in the weeds and again, I don't want to go too deep So I'll let jerry and janiel put the brakes on if I go in Um, we have a project schedule that we try to follow and that has a lot of the milestones that We'll work on a lot of them will be the same for each of the communities within cv fiber We've divided up the The cv fiber Footprint if you will each of your communities Uh in the mapping system called gis so many folks are probably familiar with GIS mapping tools. It looks a lot like google maps But allows us to basically draw circles around communities and design it so we can determine How big the fiber needs to be that we're we're going to put up for you folks and Where it's going to attach where it's going to go Down into the dirt down underground Um and allows us to assign materials for each each attachment along the way. So we know exactly In the plan what it's going to take to uh to build the network out and that's that's really what nrtc is Brings to the table for you folks And I I think what I might do and jerry and janiel let me know if i'm going too far I'll bring up my screen share and I wanted to um to share the fielding map real quick if that's acceptable to the group Sure go ahead and Okay, fantastic And I think at this point a lot of this it's not Proprietary, I think it's pretty much, you know public knowledge what we're building and where we're building it. So Just give me one moment to get that Any questions so far? I I looked around the room. I don't recognize Anybody here, but that doesn't mean they I've seen everybody I don't see it yet Andrew Yep, it's coming right up here Okay, I'm getting it. I'm getting an error message from it, but Okay, we got you now Andrew Right, and I I did just get an error from a mapping system. I'm I just pulled this up in real time. I didn't have it loaded before I I did my uh my screen share so Bear with me for a minute here a live demo. That's brave Yeah, I'm I'm willing to go for it here and that's it's going to crash on me Yeah, let me just a sec. I'll try to pull up another data set We were we were working in here just a little bit ago From our call this afternoon. I might have to close out my browser session to get it get it up fresh But this one's still running and it's because I didn't close my browser out, but What you'll notice here and you'll probably see your communities Um, and I'm hoping it doesn't throw an error around me here as I zoom out and it might It will unfortunately Well, there we go so This looks like gobbledygook. There's a lot of notes on here, but really the impression I want to Leave you folks with these the amount of work that's going on out in the field right now within the cv fiber territory You'll probably have seen some of the nrtc trucks Driving around through you through your communities. Some of them have the cv fiber door magnets on them now a little bit of a color clash their Red dodge pickup trucks and some of our folks will be on foot And what they're doing is they're looking at the infrastructure that's in place out there across cv fiber And they're taking notes about What it's what it's going to take to put in the network. So what types of changes are we going to need to make? Uh, and really it's it's a ton of data collection and we organize it using a mapping system Um with gps coordinates. So we can go to a telephone pole Out there in marsh field or callus or wherever and Our folks that are out there in the field can load pictures add notes and and really Get the sense for what it's going to take to make this design happen for cv fiber. So That's really the work we've been doing here over the last few months This level of of collection, you know, as soon as the weather turns a little We'll continue to to collect as long as we can but At a certain point you can imagine the snow banks get so high We might have to to pause our field collection because we can't Get a correct height with the snow banks. They're adding to the the depth when we're doing our measurements. So Um Yeah, that's that's really what we've been up to for the most part. Um You know each one of these dots and I again, let me know how far you want to go jerry. I don't want to go too deep Um, yeah, you don't need to go to you don't need to go too deep andrew because we can You could make a semester's class out of out of just what's on this page Yep Yeah, but really I guess the impression I want to leave you folks with is we're engineering it all the way down to the nuts and bolts So, um, the very finest details is how far down The design is going and that bomb or bill of materials that janelle just talked about What that is is we can take a collection of all of this data And when we'd extract it we put it into a spreadsheet form And you can look at it in aggregate. So you get all the counts of all the bolts all the washers And all the footages and that can drive you, you know through your materials procurement process So what janelle's doing is taking those outputs from the map all those units are folks are putting in She's getting the list at the end making the purchase and then we're chewing it up against The final nrtc design. So That's how we achieve the level of accuracy and we're we're good stewards of of the resources you folks have for building Any any questions, I know it's this is real high level. I'm trying not to go too deep Just sort of give you a An impression of the amount of work it it takes to build one of these networks Rd. I see you've got your hand up Yes, I wonder if we can get am I unmuted I wonder if we can get get the fielding map Via email I can't read it but the information is most interesting and Um, I'd certainly like to be able to share it If if it's appropriate to do so with my select board So they can see what action is taking place on the ground I see Ray say no I'm not sure the fielding maps are exactly what you're looking for Uh, we do we we could do a graphic presentation of the of the eligible Addresses, uh, we could do some kind of graphic representation of the roads that are I mean, you really don't want those fielding maps It's what you're looking at is a gigabyte more worth of data. You you you really don't You don't want that you want the visual Well, I this is true. I certainly and I certainly don't want to reveal any information That's not appropriate to be shared and I don't want to put anybody to a great deal extra effort I would just like to be able to share some of this information With my select board to show them what work is actually taking place on the ground Yeah, no, that's that's that's that's that's a that's a good one rd. We uh We should we should Put that aside for a deeper discussion and come up with something that would be appropriate That not only you but others could could could share in a timely in a timely manner and and some of that will be discussed at the webinar Um as well, which we'll talk about in a little bit um Alan I see you've got your hand up Andrew, uh, I'm Alan Gilbert. I'm from Worcester of glad Glad glad you're on the team having somebody from barriers a real plus Um, so thank you for working here Has anything come up? For nrtc in this project that's been really unusual and a real problem to solve or are we sort of just Another project that's going along just as fine as it can And we shouldn't worry that things are going to get done as quickly as they possibly can That's a good question. I think uh, what's unique about vermont is the uh, the cud environment That is uh unique to vermont most of the most the nrtc projects are typically, uh utility companies that are looking to Uh, satisfied demand from their existing clientele. They're usually a rural electric cooperatives and They see the need their folks are asking for it and They have the ability to use their existing infrastructure to rapidly deploy a fiber optic network and really for them they're usually You know trained on how to do The type of construction it takes to put up a network. So yeah, that's that's really the the uniqueness that I'd say vermont has is the communities are are behind this more so than maybe the the utility companies are Thank you Walker, I see you have your hand up, sir Thank you, uh related to the fact that the utilities the electric utilities aren't entirely You know doing the poll work Um, have you do you have challenges around the amount of off-grid people in vermont and could you comment on that design work? Um, I think that might be in the cv fiber wheelhouse. I think there's um Yeah, we we can we I can address that and then others can chime in or our our uh requirement for the for the grant funds that we get are for folks that are Have 911 addresses that are on the grid So we we recognize that there are off-grid folks and we we we have Built capacity in the system to be able to get out to off-grid folks but going out to folks that are Uh off the grid is is is not the immediate charge of cv fiber So we've built a system to handle that at some point But the the grant funds that we have right now Are for the unserved and underserved that are already Um on the grid with e911 addresses. I'm talking about people have e911 addresses and copper pole grid access not Oh, oh, oh, yeah, well, that's Yeah, that's that's it depends on their it depends on their level of service Most likely if it's copper wire service, then they're eligible for for cv fiber and and they're in our plans Uh, as we as we deploy Okay, good The exception might be those Uh, those areas jerry were I again, hopefully I'm not giving up too much information but those areas where maybe comcast or another cable provider has One of those d slams and it's fiber fed But then they have their their basic Short distributions out from that cabinet and in copper like a cable tv area Then they could be served at 100 and those Those are a little bit different Right, so that that's the asterisk to the answer I gave Yeah And I remember that coming from from a cv fiber Source I think originally when we first looked at that so yep, I want to make sure we cover that asterisk So are there are there, uh, other questions for janiel or for andrew, um before we move on through the agenda Andrew, I really want to thank you for being here and and and And apart from that, uh, just thanks for being a part of the team because I mean even even considering some of the solutions We came up with today on figure now how to get from a to c because we didn't realize b was in the way is uh You know that kind of thing is happening on a daily basis and I certainly appreciate it. So thank you Yep, my pleasure I'd like to move on to town arpa funds And I am going to share my screen if I can it should be as simple as a click or two Let's see. Am I sharing my screen? Do you see a word document? No, not yet. No Not yet. Okay. It's trying Okay, hold on. Let me go back Let me go back. Um, oh share Share content. Okay, bear with me So I want to share my screen How about that? Can you can you see? There we go My word document Yes Yes Excellent. Okay So this is The status of our town arpa funds Uh to date And this is something that I I I pulled together from multiple sources, um Uh, just just before this meeting I haven't even totaled it up, but I'm looking at 400 500 600 Almost $700,000. Did I just do that right? Um, and this will be matched dollar for dollar Uh, but there's something that we need to do Uh in advance of of getting this done two things we need to do first of all I need to thank everybody that worked so extremely hard To make this happen Uh, this is this is just phenomenal that the towns have recognized the importance of what we are doing and are willing to Uh support it and put the money where their mouth is and that is Uh incredibly important and it is very much appreciated And we uh, we are going to spend that money and we are going to get people hooked up to fiber internet throughout central vermont And this is another step towards it But in order to make this happen I need to sign some mo use and There's also a possibility that even though we are very close to the deadline There will be additional mo use that will follow up That I will need to sign so that we can we can codify these agreements and move forward to spend the money in these towns And i'm going to uh stop presenting here And what I What I am going to do here is I'm I'm going to make a motion And this motion is going to ask that the chair be allowed to Sign the mo use as they come in from the towns With the ones that we have in front of us and the ones that are very potentially going to come in in the In the following weeks and maybe months if there's an extension granted Which is a possibility I am going to ask for the Authority to sign those mo use and get them out the door These in a lump sum that I'll do tonight tomorrow morning get them out and then future ones as they come So I would like to uh read a motion And then I'll wait for a second and if there's a second we can have discussion on it And uh, you know who my mentor Was in putting together motions as I go through this Where as the american rescue plan act of 2021 arpa Don't make me laugh provides the state of vermont funds to develop community broadband networks And whereas arpa provides funds directly to towns for the provision of government services including community broadband networks And whereas the vermont community broadband board has set aside state arpa funds to be used as a dollar for dollar match for town arpa funds committed to CUDs And whereas cb fiber and its member towns have collaborated on identifying the potential use of town arpa funds And the associated state arpa fund match It is moved that see that the cb fiber chair Be authorized to enter into agreements between cb fiber and member towns committing cb fiber to use town arpa funds And associated state matching funds within the town as determined by the negotiated agreement Oh, I believe that was shavon, but wow You heard linda, I'll I'll I'll defer to that I I There's I'll defer to that. That's fine. Um Any any any discussion on this? I I think it's important to do this in one shot and get all the mo used present and future in here so that we can just knock these out I should have an mo you tomorrow jerry I'll I'll I'll email this to you jeremy Or to christopher Or to christian. Yeah, no christian. That's right. I'll email this to christian. Thank you. Uh, henry I see your hand up Yes, um, what's the timeline for getting the mo use? well the the so the the The vcbb is asked for a commitment So if the and the commitment so far is by the by the 15th An mo you is certainly a commitment Uh, a vote of the select board. I would consider a commitment a letter of commitment is a commitment So anything along those lines, but certainly the sooner we have an mo you that can be signed the better But I think if the if the select board's already voted henry, which I believe is is your situation Right. We have a matter of commitment, but we don't have an mo you yet, and I'm just wondering When do we need to do that part two? Part two would be done as soon as possible But the letter of commitment gets you in the door and and and you've got your matching funds as far as the vcbb is concerned Okay, thanks, so There's no particular timeline for us to make I mean we we need to do an mo you in addition to our letter of commitment, but there's no deadline for that Um pending There's no hard deadline, but certainly as soon as possible because we we we we have We want to be able to spend these ARPA funds and and and not have any uh hiccups and on the road to do in that And our uh, is genio going to be following up with the request for example for duxbury to Do the mo you Absolutely Okay, very good. Thank you. Absolutely. Henry. Thank you Any other discussion? on this Thank you again with everybody who's been working so hard ted go ahead, please sir Can you hear me now? Yeah Hey ted all right Perfect. Um, it's great to meet you also first of all i'm sat under the new williams down delegate Uh, I the reason uh, it was good that I went to the select board because I learned that they have about $369,000 with the ARPA funds that they have not allocated yet So is there any I mean, I'm assuming even without the match, right cv fiber would take Some number of ARPA funds and what is the is there kind of any sort of guidelines in terms of a request amount or Well, the I I would I would Recommend to the to the town that as much of that as they can spare would go and get be matched by cv fiber By excuse me by the state funds Uh to double the amount that cv fiber would be able to spend in the town We can get you a letter of commitment a draft letter of commitment or a Template letter of commitment that you can take to the select board Um, I know that september the 15th is the deadline, but if we've got something in the works Um, I would certainly lobby to at least on an individual basis have that extended If something happening on the on the 15th Is uh is impossible, but at the close of this meeting. I will email you a Template on the uh on the letter of commitment. That's the easiest fastest thing thing to do Perfect.  I I would say that it would be able to get on the agenda before the 11th of october Okay, well, we will we'll do it. We'll do what we can and let the vcb be know that that is in the works Great Okay, excellent Uh additional discussion on this on the motion that's been seconded and is on the floor Are there any opposed to the motion Are there any abstentions Hearing none the motion passes unanimously. Thank you very much uh, we just Gained at least 700 thousand dollars in in funds. Thank you. Thank you all Excellent fantastic job Fantastic job Uh, I will um and jeremy I will email this out to christian As as soon as we're finished um, I'd also I'd like to move now to if if if there's uh No opposition to this I'd like to move on and talk a little bit about the webinar update That's coming up because I I want to make sure that there's nothing in our webinar update that would surprise a board member um, and I went and looked back at What we had said we were going to do and where we were at the last webinar, which you may remember was um in the middle of june and Fortunately We have really moved forward on every front that we presented in june. So it's it's a it's a positive report that we're going to bring with this with this with this new web with the upcoming webinar and Some of the some of the key items that I want to bring up are first of all We're on track for our fall construction start It's not We haven't started but we're on track for our fall construction start our materials have been Purchased they have not all been received and as as janiel had mentioned and andrew had mentioned we are Uh as we learn more about what we need as we move forward We're going back and checking our purchases to make sure that we haven't missed anything um We also have our warehouse and our outside space Secured, you know that we we have a wet web at a warehouse at pioneer center in montpellier And then basically right behind Just north of uh of bar hill Uh distillery we we have an outdoor fenced in space where we have our Where we have our some of our Fiber and the rest of our fiber is being held at wex facility Um, we have a construction grant that has been awarded so that we can pay for construction Uh, we have a construction master services agreement and scope of work For the fall work to be done that is under review And and and soon to be negotiated Uh, we have contractors that we've talked with that are willing to work through the fall and into the winter and really don't see the Seasonal change as a problem other than things do slow down But there's no reason to come to a multi-month dead stop Is what we've heard so far. We'll see how that goes Uh our make ready is ongoing and has been quite successful for the most part And in in areas where we've run into make ready problems. We've come up with some solutions Uh, which is an extremely uh important aspect of the way we're moving forward is that when we see problems we get them solved Uh, we also have permits and easements that are that are necessary and that are under development Again, we're somewhat fortunate for these areas that we're looking to start in the fall They're relatively light on the permits and the easements where we're not we're not crossing any any interstate highways We're not crossing any railroads the things that are our long pole items Uh in the tent we're we're fortunately avoiding in these in these uh in these first areas Siobhan go ahead. I see your hands up I was just uh speaking of easements and polls made me wonder about mr. Childs and how that's going I've got just just for the board's information I've got a constituent and orange who Has issues with the easements across his land. He's got rather a large parcel and uh We we've been trying to research what's going what what the legal requirements are Or we may want to discuss it offline nevermind Well, I would I would I um No, that's that's that's that's a good point and and The the situation that we have here is not going to be unique It may be singular in that it's jumped up at us at the moment But is it certainly not going to be not going to be uh unique Which is why I brought it up Yeah, let let me let me uh, let me say for the for the public aspect of the meeting is that we are certainly looking into it And and want to make sure that we understand all the facts before we move forward in any way I would also add that In in from the perspective of the webinar that we're presenting and our full construction This issue is not an item That that inhibits our full construction or impacts our full construction. This would be this would be uh In in the in the next construction season that all of this needs to be of course resolved in advance But but it it isn't impacting our our full construction And you know if we uh, if it if it comes up later if we end up in executive session We can talk about it a little bit more than if we need to Um, is that is that sufficient for you now shavon? Yeah, oh, yeah, yeah, I just brought it up because I didn't know if it was Unique and I know that there are members of the public who care. So yep, that's fine Yeah, it's it's it's not going to be unique Um, and we all we all care about it Um, I'll move on to linda. You have a question Could you tell us if there's what the critical path item is in our construction? Is it make ready? We're there. We're there only one critical path item um Ever ever everything that I've mentioned so far is a critical Path item all these things need to be aligned Resolved designs need to be final All all poles We we need to have the approvals for for licenses for every pole that we touch We need to have every permit and every easement fully resolved and satisfied We need to have the the the the the contractors On board Ready to go to start on time. They need to have all the materials they need on hand In order to move forward And everything needs to be there a couple of weeks before it actually needs to hit the street So everything everything I've I've I've mentioned um Is is a critical path item now some risks some are more somewhere higher risk than others in the sense that they may be further from being resolved but um, any any one of these things goes awry and Things things have to uh things either have to stop or we need to figure out a workaround Sounds like we're juggling We well that we're we're we're we're yeah, we're building Um, David. I see David Lawrence. I see you have your hand up, sir Hi, as long as we were talking constituent stuff I just wanted to um bring up a constituent concern that I don't think is actually a question I mean, it is ultimately a question, but I don't think it's one we can answer right now and that is um one of my uh middle sex people lives up a very long driveway that does not he wants to um finish his last mile so to speak it's not full mile but In the metaphor sense, um with a a wireless signal, right? And so he's basically interested to know if we could you know, um I don't know exactly what he's picturing as far as who's provisioning the equipment for that But I know that um, he's thinking of he wants to term out at the pole by the road rather than Trying he can't afford the trenching to go all the way up to his place and so on so That's just something to apparently when he talked to I'd have to look in my email, but a different provider Um, they were just totally not Interested they wouldn't allow it, right? And so he's hoping that we'll have the flexibility to allow for that type of setup Well, that's Really interesting. Um I I am not going to make a commitment at this point because we certainly need more information and we need, you know Detailed field information We also need to coordinate with weightsfield telecom who are the folks that will be doing drops And and and you know, we'll be our isp To see if they've run into this kind of a thing before um So yeah, we'll have to we will have to look into that. It is certainly our intention To bring high speed internet to everyone In in in our district that doesn't have high speed internet I'm happy to provide to him right now that it just has not been fully reviewed yet But that we were definitely open to looking into that as possible We're absolutely open to looking at it. I just I don't want to make any promises without having more detailed information Oh, I am with you on that Okay, thank you. Thank you, David uh So I'd like to move on a little bit because I talk the the uh, June webinar is going to talk about the moving forward on the construction front But then we've also been moving forward on building our subscriber base We've been coordinating ever more closely with weightsfield telecom We now have regular meetings with them so that we we are we are working together We have been developing Uh ours our subscription fees and if we uh, if we end up in executive session We may talk about that a little bit more detail later on We've also been working on the the affordability and equal access programs Um, we're we're looking very deeply into that one as cv fiber and also in concert with weightsfield telecom that has been doing this for a long time and has a lot of history in this and we uh You know, we're definitely not going to reinvent the wheel But we sure see some spokes that are busted in this Program that we would that we would like to see fixed We I don't know if they're in our purview to do that or not But certainly affordability and equal access is a is a very big aspect of what we're looking at for our subscribers um, we also have Our marketing contract msa and scope of work. They are also uh under review So we uh We are moving forward on that front as we had announced that we were starting to move forward in our june webinar Where we're getting close to being able to sign off on that and then the last thing I would mention about our subscriber base Um, and maybe this isn't exactly correct place to put it but we have our town opera funds and we can talk about the uh the funds that we've received And hopefully with an extension the ability to receive additional funds from towns that still want to get on board um, and you know, I Always want to be concerned about overselling and sounding too rosy There are some risk items that that will still play a play into what we're doing there's always the potential for materials delays And you know, we're we're trying to address that problem by taking partial deliveries So if we've ordered 10, but we only need two for the fall We're more than happy to just take the two. We don't need the other eight for another few months Uh, we're also looking at alternative sources Um to see if maybe another cud has One extra for the time being that we don't need and we might be able to use Some of their equipment to be paid back in kind in kind over time So we're trying to address the materials delay problem uh, there's also of course contracting issues um and manpower issues and having the having the boots on the ground actually do the work at the right time Um, we're trying to address this with advanced planning letting letting the contractors know what our plans are Letting them know where they'll be working so they they can get out there and take a look at the at the area We're looking at Even potentially flexible deployment where if there's one spot that is it is lagging Perhaps we can we can switch our deployment around a little bit and let that one happen in week eight instead of week two So that everybody keeps working and we don't have to come to a stop Because something jumped up that we have to deal with So for all these risk items also make ready is is is always another one That could pose a problem for us and we've been looking at potentially coming up with design alternatives Um, or we've come up looking at alternative sources for some of the materials that might be needed for make ready so Even though even though there are risk items. We we don't let them just stand at risk items We hope to address them With some risk management well to the extent that we that we can So, you know, these are the things I want to talk about in the in the june webinar I don't want to over promise, but I want to let folks know that we've moved forward on the items that we Identified in june here. It is september. We move forward. We'll likely have another webinar probably in two months Because I think things are moving so quickly that we'll have we'll have even more to present In in in two months and maybe we'll follow that one up with something in the beginning of the new year And and get set up for because things are happening so quickly We'll see if uh, if we can keep on a two month track as we get our construction um moving forward So that that's that's just something that I I wanted the board to know about my intention is to Send out the webinar in advance So that folks can take a look at it and and and make a comment Uh, I see that linda has her hand up. Go ahead linda I would just like to mention that the senior citizen center in waterberry Has generously offered their facility Um and opened it up to the public on wednesday night the 21st So that uh people who don't have internet can come and watch the webinar And also to run it again at their wednesday luncheon the week after Uh, they're going to put up the video. I'm going to go over and run a replay of the video at the senior citizen center So I'd like to just uh put it out to the public How generous the senior citizen center has been offering their facility for us to use Thank you Well, that's that's absolutely marvelous linda and You know that that that kind of outreach with organizations such as the senior center are I think going to be invaluable as we move forward, uh Because we we need to do we need to do outreach in multiple ways and Using existing organizations like that is a really good way to do that So thank you again for leveraging that if I can use such a vulgar term that that that's a really helpful thing to do Thank you Any other discussion on the on the webinar? so I have the construction schedule on the calendar here I on the agenda I I feel like we've talked about it a fair amount, but let me go to henry henry. You have a question, sir Uh, yeah, I typed it into the chat At last night at the ducks very select board meeting they wanted to know if customers were Responsible for paying for the customer drops or what that situation is currently being You know considered as Well, ducks very Um Didn't did I just see on my list that ducks berry has allocated 20 000 of the of its opera funds Yes I I I I hope that when we when we sign the mo you that's those opera funds will be able to be used towards drops um The more general question is Um, is there going to be an individual resident requirement to pay for drops? And what what is the current? You know consideration for that So at the at the moment that has not been finalized uh, there there will be a a threshold standard drop that will that will be uh Not impacted not impacting the uh the the subscriber And then we don't know what that number is. There will also be Town opera funds that will then also be used to support Drops uh within that that town, right? So each town that that town opera money will only be spent in that town Um, but so far it looks like the lion's share of that money is going to be spent on drops Um, and then then there's the you know, there are folks that may fall outside of that Description that I've just laid out and some of that uh Responsibility may fall on May likely fall on the subscriber, but it all depends on What that threshold is and it's typically a distance threshold if we're talking aerial It'll it'll be a distance threshold With no impact to the subscriber and then there'll be additional funds available From the town hopefully And then after that it would it would typically typically be the subscriber kicking in to make up whatever delta Might be there. So that's the way it looks now. Uh, have I misspoken? Let me go across the room there is Did I get that right? I believe that's where we're at with Yeah We're still working on the details And we have an operator who's going to actually be doing the drops for us a waste field will be So part of this depends on our negotiations with them as well as It's a distance from the last poll to the service location. So it is to be determined But but let me add that I've recognized for a long time that I don't well, I'll I'll make this personal, but I think this this goes out to to others as well I don't I don't want the the the drop to be a barrier To entry for anybody that that that wants to get cv5 Uh, it really it really shouldn't be a a barrier that can't be overcome for someone to get Their service. So we will we we are looking to reduce that burden on the subscriber To the fullest extent we can and and we will do that So that's right, you know that kind of rounds out that answer Thank you Yeah, of course Henry Uh, let's see. Is it are there any other questions on the construction schedule? I put this in here But I feel like I've I've touched on it multiple times. We're we're on track to start Certainly on two of our Uh design areas in this in this upcoming fall and hopefully We'll be able to get through that approximate hundred miles Uh and start getting folks signed up in the winter So next we have our 2023 budget And I'm going to turn this over to the chair of our Finance committee and we will determine if and when we may need to get into Executive session to talk about the details here Ray, would you like to take this over please? You're on mute ray. Yeah. Yeah, you can hear me. Okay. Okay. You can hear me now though Okay, so um, let me before we go into executive session Let me say start off with what the schedule is right in october the board takes action and approves the budget Um, and that's october 13th somewhere on the october 12th and and then it goes to the towns for their review And their their comments come back to us. I don't think we've I think there have been some comments that have come back But not usually not in november. We have a public hearing On that on that budget And then in december the board actually adopts the budget and that's our budget for 2023. Okay um And of course on the budget during the course of the 23 year Can be adjusted and can be changed when it can be moved from one account to another line items can be added to it, etc And certainly whatever happens between october and december If we become More informed about one thing or another the budget may change from the one that you The board has approved in october and so whereas We're going to be talking about instructions schedule strategic planning and the budget So what we need to do if you need a motion for strategic planning. I mean for going executive session And I just wanted to pull uh jerry's chain there a little bit He did such a good job on that though. I appreciated the morning and by me first It was it was usual And so Is there's two parts there's only one motion But there's kind of two parts to it the first part is why we're going to executive session The second part has is inviting people into the executive session And that would include um our treasurer Uh delegates and alternates delegates, of course are Are invited but delegates and alternates and vice chairs of committees And I'd like to know if I am I leaving anybody out besides uh christian mayor who who's here from orc from our pc right for no minutes And uh, is there anybody else Here that doesn't come under one of those one or more of those Criteria and janila staff so she she's invited So so we don't have to kick anybody off the call Jerry And so here we go Move that we enter executive session discuss records that are confidential pursuant to one vsa section 313 alpha 6 specifically construction and budgeting details that relate to our strategic planning and that all alternates got committee vice chairs And um our our treasurer Are are invited as they have information that is needed in accordance with one vsa section 313 bravo All right second Okay, the second by jeremy Any discussion on this And andrew you could leave yeah gavies Yes, I was I was just getting ready to exit stage right. Thanks everyone. Um, oh, I look forward to working with you on this project It's it's very exciting Thanks. Thanks andrew. Bye bye andrew All right, uh any additional discussion Any opposed to the motion Any abstentions Hearing none the motion passes unanimously, please give me a minute as I stop recording And we are going to go into executive session at 707 and I am stopping the recording


In the light of recent agitations by the Academic Staff Union of the University's Vice-President Yamio Shibangio has said the federal government is plotting to review the university autonomy laws. This comes weeks after as the cold of an eight-month strike which saw its members demanding improved welfare, vitalisation of public universities and academic autonomy amongst Shibangio was represented by the Secretary to the Government of the Federation, boss Mostifer, at an event organised by the National University's Commission in Abuja to mark the 60th anniversary of the NUC and launch of the core curricular minimum academic standards. The Vice-President stated that one of the major issues with Devlin University education in Nigeria was the incessant strike actions by various unions and public investors. The federal government has been supporting and will continue to support university education through statutory appropriation and special interventions from government agencies such as State Farm and facilitates similar interventions with other strategic partners and international agencies such as the World Bank. Government is aware of the challenges that NUC faces due to the overlap of regulatory roles by various professional bodies particularly in the agritation of professional programs. Hereby reiterate that the Commission is the sole regulator agency of university education empowered by the constitution while professional bodies are to regulate professional practices. Hello hope you enjoyed the news please do subscribe to our youtube channel and don't forget to hit the notification button so you get notified about fresh news updates


Hello, and welcome back to the craft box. My name is Brent and today we are on a game that Apparently, I'm doing a video a bait basically every month on a still somehow So a lot has happened since my last pirate 101 video, which is now the most popular video on my channel and I feel really bad for clickbaiting you, but I Also don't at the same time, but I mean it gets my point across kind of in the title Of that video, but that is not about that video today. We are discussing the Kind of the Sort of updates that I would like to see in pirate 101 In Kings are alive. I just watched it just then it's gonna come out on YouTube over the weekend. I Just watched the first bit the news, but which is the only really important bit in my opinion And during the pirate 101 section they said that I would have loved to show something this last Kings are alive, which was last month, but like the one that's just been and But they couldn't because not everything is ready, which is a shame But they kind of made me think what do I want to see in Pirate 101 like what would I like to see what what new features would I like if it's not? I don't think it's gonna be a World update. I don't know why I just don't have high hopes And I mean I don't blame me for not having high hopes, but um, you know, you know, whatever But I kind of thought what what would I want to see if it's not a world update? What what will it be? Um So I kind of came up with this list kind of that isn't really a list, but I'm just some thoughts of mine So one of them would definitely be crafting I love crafting and was a 101 and I think that it could be very very very Well done in pirate 101 crafting gear and such and whatnot and so on so forth I think we could have like a whole bunch of New reagents ones that you can like collect out in the skyways More than on land because I think I think they'll be really cool if we could like get more reason to go out onto the skyways Every single time and like collect things just for fun out in the skyways that we don't have to collect just because we're on the Quest to collect that I think that would be really cool Personally, but then I mean other people may have other opinions I think they'll be really really really really really sick If crafting was in the game, I would definitely try and craft absolutely everything Obviously, I'm trying to do that on I was a 101, but like pirate 101. That would be so cool So yeah Another thing I would like would be fishing. I mean that just suits Pirate 101 so well Just really really really well Um So yeah fishing would be cool fishing off of your boat imagine that that would be really really really cool like not even and was it one of one we have to go to areas like on land that are that are Like thing and stuff and stuff. I've got a full backpack because I'm not member So don't yell at me. Don't yell at me. Please. I'm like we need to do something exciting. So we're gonna Look at Finn because why not? I don't know Fishing off your boat would be so cool. Um, I don't think it should be done on land I think it should be only done in the skyways. So maybe if crafting isn't done on the skyways, then fishing definitely should be Because it makes sense like why wouldn't you fish in the skyway because that's where the fish are so like What I mean, I would probably try and catch all the fish there Which is what I'm trying to do secretly secretly on was a 101 as well but Yeah, and I've only read I haven't really thought about this much but the third and final thing that I would like that is in I Mean is it I mean this is it's really hard like thinking of what I would like to like have But definitely I would like to see more uses for Companions like when they're not doing things as you know, you can give your companions orders And I mean if I think we I think there needs to be more like if you could do more that would be really cool I'm not really a fan of the new companion system, which I mean isn't new anymore But when it came out, it's like the gen 2 companions I'm not really a fan of the whole waiting in mobile game isk sort of like let's wait timers because that's fun, right? I'm not really a fan of that But I think that they could definitely expand what your companions do since they are very very very Intrigal to your character. I really Hope that they could like expand on what they could do Like yeah They can already get like nautical expires were basically the thing that I use currently. I've just got them collecting pet Pet stuff and gold and whatnot. I've done all of the training terms. I've got 20 training terms nearly so yeah I mean, I think companions could do could use like something else that they can do instead of fights If they're not gonna have a new world. I really think they need to work on more of the side systems Obviously bringing your ship PvP into ranked would be really cool Anything really just to get players back into the game like ranked shit PvP would be really really really cool I think that would definitely encourage a lot of people to come into the game And I think at this point Kings are really needs to go into damage control mode and sort of like push this game Make people want to play this game more Because obviously kind of just show them that just because we don't giving your storyline updates There's still like things you can do when there's nothing to do really So like when you've finished the storyline update like me and your max level You can do something like there is ranked PvP, but at the moment personally for me I'm not really a fan of PvP and competitive play But that's just me But I don't think there's like a real need per se to do PvP. I haven't really checked out the The like weapons the What is it like the the ranked weapons for PvP? I'd not a hundred percent sure if you can use an outside of PvP if they're good Like I haven't been on this game and like like actually physically played played this game in forever But yeah, I honestly think That they definitely need to add things that will bring people in So like side systems are good like crafting would be really really really cool Crafting gear for PvP in fact so they could like push PvP into something better because obviously Obviously one one really good thing about this game is It's strategic based gameplay with companions and whatnot and you control basically your whole crew to fight against everyone else And I really when this game first came out I really thought this was like a big turning point for like the gaming industry especially especially like I honestly thought it could Do well for e-sports like I'm not even gonna joke about like it could and they just need to like really push it out and Get it out there more than they have currently Yeah, and if they have to provide more content for that then I think they should be doing that to be honest Let's see. What are these like? So these are the These are the things level 60 plus Is there really was Kings are please where's the 70 stuff? Maybe they're at the back. Maybe they were lazy to put them at the back 65 plus why is They go out of order as well. Good job Kings off. Good job. You're so good So like this is the max level Staff for summer because obviously it's summer right now The summer season and that gives some in fire increased base will increase base resist apparently You can use it everywhere. So I mean it's actually not too bad. It gives less It gives less Power but I mean it has a longer range which is always nice and it also increases Will and whatnot as well. So yeah, if you'd like me to do some PvP on pirate I wouldn't be like against that. I wouldn't be good, but like I mean I wouldn't be against doing that What is it? I would probably have to get like Membership is free. Oh, I have to look into it. But if you want me to do stuff on pirate one-on-one, please Let me know down in the comments Because I do really want to play this game again and give it more of a spotlight because I mean everybody's Legitimately everybody has abandoned this game and I can understand why And I mean, yeah, I understand why but I really do love this game so much and I would love to like play it but Yeah, if you want to if you want to see me do PvP you should definitely let me know in the comments below and On that note if you have any other suggestions for things that pirate one-on-one have could add if you've played it Or if you haven't Let me know now in the comments below. I'd love to hear your thoughts on this Kind of like two discussion videos in a week It's a bit weird. I know But yeah, anyway, thank you for watching. We're going to deliver like and subscribe if you've already subscribed press the wee little bell So you know exactly when I post another video and a member crafts outside the box


The point we tried to finish on in the last lecture was that when we have a default policy of drop, and a default policy of drop is good, it's good for security. We should drop everything and then we just allow the things in that we want. That's a good approach because if we make a mistake, let's say I forget to add a rule, the attacker still can't get in because their packets will be dropped. It may mean our normal users can't do something, but that's just an inconvenience. It's not a security violation. So it's a good to have a default policy of drop. But we saw in our very simple case, when we have a default policy of drop, we need two rules to allow an application to work. We need a rule that allows the packets to go out and a rule really for the opposite direction for the packets to come back. Because our applications, we don't send data in just one direction, it's bi-directional communications. So it makes setting up the firewall table a little bit more complex, because for everything that we want to do, we need two rules, not one. More chances to make a mistake or forget something. But not only that, with the two rules that we created, we said that there's a potential security flaw, because using the second rule, it allows someone outside to send a specially crafted packet, where the source port is 80, and it's going to computer 12. And it will get through the firewall, which was not our intention.  We only want the responses to our web requests to get to computer 12. So we need maybe some extra information to say, only allow these packets if there's some responses. And it starts to get more complicated about how to set up those rules. We have to give more conditions. So to overcome that complexity, most firewalls today have an extra feature called Stateful Packet Inspection. And the concept is quite easy. We create one rule that allows the first packet to go out, the first packet of the exchange to be accepted. And when that happens, the firewall keeps track of some information saying, all subsequent packets related to that first one are automatically accepted. So with a Stateful Packet Inspection based firewall, what we will do is we'll create the top rule. We will accept everything going out to destination port 80. The first packet in our exchange, when this goes through the firewall, the firewalls will see this packet and see, the rules as accept, good, we'll let it go out. In addition, the firewall will keep track and realize, because I just let this TCP sync go out, I expect to get a TCP sync from 333.35. So I'll keep track of that and I will allow that sync to come back. The important thing is that the firewall does that automatically. The administrator doesn't have to configure the firewall to allow the reverse packets to come back. And that's what Stateful Packet Inspection does. It maintains a record of the connections that have been accepted by that first packet. So let's see how SPI, Stateful Packet Inspection, works. It makes setting up the firewall much easier, because we are dealing with connections in many cases, in particular TCP connections. We know with TCP it's always at the start. SIN, SINAC, ACC, and then data. So there's this typical flow. Rather than the administrator having to create rules to allow all of those packets, the administrator creates one rule to allow the first packet, and then the SPI component of the firewall allows subsequent packets. So it keeps track of the connections which have been accepted. And a TCP connection is uniquely identified by the source and destination IP address, who sent it, who did it go to, which computer, the source and destination port, so that's the applications communicating. We can also use sequence numbers, because we know with TCP there's a sequence number involved. We can think the first, we have some initialized sequence numbers, and then we increment the data. And with TCP, we also have a connection state. And you may not have seen them described in detail, at least in my courses, but we go through a process when we use TCP. We initially don't have a connection. When we send the SIN and get the SINAC and the final ACC, we've established a connection. We exchange some data. And when we want to stop sending data, we close the connection. So we can say the connection goes through a series of states. And our firewall will keep track of those states. Let's see what the states look like. I'll draw a new picture to get rid of this one. Let's consider a generic TCP connection and look at the states that we go through. With TCP, we have a client and a server. The client initiates the communications. The first message which is sent is the TCP SIN. So the sequence of TCP packets, the first one is a SIN message to synchronize sequence numbers. The next one is a SINAC, then a final ACC, and that's the three-way handshake to establish the connection. Then we send data. We may send data in both directions. Now, there are a number of named states that each side goes through, depending upon what's happened so far. We can think that initially both sides are idle. They haven't done anything. When the TCP client sends the SIN packet, it changes state. Now it's in the SIN SENT packet, a SIN SENT state. That is, the client has just sent the SIN packet. It's in the SIN SENT state. What's the client expect to get next? What does the client think will happen next in the normal case? It expects to get the SINAC message. So we keep track of what we've done in the past because based upon what we've done, we expect something in the normal case to happen. And if that happens, we would like our firewall to automatically allow those packets through. Similar to the server, the server is idle. It has SIN received, and then after it sends the response, SINAC SENT. And when the SINAC is received, of course, the client is SINAC received. And after the server receives the AC, what state are we in? Anyone want to give it a name? After the server receives the AC. Well, note that that's the end of the connection establishment. This procedure of sending three messages, SIN, SINAC, AC, the idea is to establish a connection. So we say the connection is established at that stage. And similar from the client's perspective, after it sends the AC, the connection is established. We send some data, the connection is still established. While the connection is established, we can exchange data. We'll not draw all the details. There are ways to close the connection. Eventually, we may send some packets and it changes states to, it's a little bit complex for closing, but eventually we may see something like time wait. We're waiting for the connection to finally close and then closed. And there are some other states as well in special cases. But each side goes through a set of states normally. Now what our firewall will do is keep track of the state from what it's seen of the packets. So the firewall is in the middle. So the client, maybe our computer inside the network, the server is a computer out on the external network. The firewall is in the middle and sees these packets going past. So when the firewall sees the very first SIN packet go past, it realizes this client is trying to communicate with this server. And the administrator of the firewall allows this SIN packet to go out. So it needs to be a rule to accept this SIN packet. If there is, then the firewall keeps track and thinks, okay, this client and server wants to communicate. Currently, the SIN has been sent by the client. So if a SIN act comes back in the reverse direction and a SIN has just been sent, then I will allow that SIN act come in. I'll automatically allow it without checking the rules in the firewall. And then the firewall, once it sees the SIN act go through, it knows that the SIN act has been received. So the next thing the firewall expects is to see the act coming in the reverse direction, back from client to server. And if it sees this act, the firewall will automatically accept this act. And finally, when the act has got passed through the firewall, the firewall knows the connection is now established. And now, if there's any TCP SIN packet coming from this client to this server, same IP addresses, same port numbers, and the connection is already established from the firewall's perspective, the firewall automatically allows it through. And same in the opposite direction because we're allowed to send data in both directions. And eventually, the client or server will send a special message to finish the connection and they'll go through some states to close the connection. The key point is the firewall, the administrator sets one rule to allow the very first packet and the firewall keeps track of that and then will automatically accept all subsequent packets related to that connection. And that's done in the stateful packet inspection table. And it's mainly relevant for TCP. It can be done for UDP and others, but it's primarily used for TCP because TCP goes through states, UDP doesn't. It's more complicated. So let's see what it would look like in a couple of examples. We'll return to our example network, if I can find it. Come back to our network, here it is. Here's our network, where's our firewall? Just remind ourselves, here's our firewall, same as the previous examples. We have, we want to allow computer 12 to access one of the web servers on network three. That was our previous example. And we had to create two rows in the firewall to do that. Let's do it with stateful packet inspection. So the same aim as before, we want to let this computer to access the websites on these external computers. So first, we need a rule in our firewall table that says we allow the first packet out. And this is the same as we did in the firewall before. We have a rule that says, so this is the firewall table. We have source address, destination address. And to save some space, we'll write both the IP address and the port number together. So we'll not have two separate columns. I'll show you how. We have the protocol and the action. This is our firewall table. And what we say is we want to allow the packet to go out. So that if the source is 111.12, port number, and I'll write the colon followed by the port number. If you remember back to our previous example, any port number. And the destination we said was 3330 slash 24, port number 80. Protocol six for TCP, the action will be accept. Remember, we are using a default action of drop, the default policy we refer to it. This is in fact the first rule we created in the previous example. Computer 12 using any port can send our packet out to anyone on network three. And in the previous example, we had a second rule that says that the response packet should be accepted. But with stateful packet inspection, we don't need that. We don't need the second rule. Instead, what happens using just this rule, we have stateful packet inspection enabled. We in fact have a second data structure stored in the firewall, the SPI table I'll refer to it as. What happens when we communicate from computer 12 to computer 36, for example, we send a packet. Think of the very first packet sent from computer 12, we could draw it as this. It's an IP packet and a TCP inside that. Some of the field values in this packet, the source address, it's coming from computer 12 and the destination, going to computer 36. Protocol number, because we're using TCP, it's number six. And in the TCP header, we have a source port and that would be assigned to that computer 12 application. Let's just make up a number, 48037. Destination port, what's the value? We're trying to create a TCP connection to the web server from 12 to 36. This is the very first packet sent by computer 12. What's the destination port? Browser to web server. Destination port is 80. So destination port 80. Source port was assigned randomly to the browser. I just made up a number. Source and destination IP of those two computers. So computer 12 creates this packet. Destination port 80. This packet sent by computer 12, it gets to the firewall. What happens at the firewall? Well, what the firewall does is it first checks the stateful packet inspection table, but there's nothing in there at the moment. So there's nothing to do there. So now it checks that packet against the firewall rule. We only have one rule, very easy to check. Does it match? Yes or no? Hands up for yes. Does our packet match the rule? Hands up for yes. Right, it does. Source in the rule, 11112, yes. Source port. So I've shortened the way to write the IP address and port number. Source port, any value? Yes, it's some value. Destination is network 3330, which includes 33336. So yes. Port 80, yes. Protocol 6, yes. All the conditions match in the rule. So we accept the packet. So this is the normal behavior. This packet is accepted through. The firewall sends it out. It will go to computer 36. But when we accept that packet, the firewall does something else. It starts to add an entry to the stateful packet inspection table. Because it knows this is the first TCP SIN, and maybe I should have written on here, in the TCP header. There's a flag that says this is a SIN segment. It's inside the header, a field saying this is a SIN segment. The firewall says, ah, this is a SIN segment. In the normal case, if a SIN segment is going out, I'd expect a SIN act to come back. So it adds an entry to the stateful packet inspection table, keeping track that these two applications are communicating. So let's add that entry to the table. It's a different data structure. And we keep track of, if we can fit it in, we keep track of a source, destination, protocol, and the state. And the source, the one that sent the packet, we know, 1, 1, 1, 12. Port number, we know. So the firewall knows it used port 48037. Let's record that. Destination, we know, was 3336, port 80. Protocol was 6. And the state, what's the state from the firewall's perspective of this TCP connection? Go up to the top picture. The firewall has just seen the TCP SIN come from client to server. So we can think the state is SIN sent. We know the SIN has been sent from the client's perspective SIN sent. And eventually, it will be SIN received by the server. So we record the state that say the SIN has been sent. Actually, the state from the client's perspective is SIN sent. The state from the server's perspective will be SIN received. What the firewall normally does, it assumes, of course, if the firewall lets it through, the SIN will be received. So it records the receiver's state. SIN received. Let's write it down. Just records those values for future use. What happens next? The server receives the packet. It sends a reply. What does the reply look like? Let's draw it up the top. IP header, TCP header. Let's be complete for this packet. Source, destination, protocol, source port, which is in the TCP header. Destination port in the TCP header. And the flag, flags. What are the values? This is the return packet. That is, what we're drawing here is this one. The first one was accepted, received by the server. So it sends back, eventually, a response. What are the values in that response? Fill them in. Fill in the values. What's the value of the source IP? This is the response. What is it? Source IP. There's only really two to choose from. What's the source IP? We've just, the very first packet I drew was from the client to the server, from 12 to 36. The server receives that packet, sends back a response. So the address has changed. So the source of this packet is computer 36. Destination is computer 12. Protocol is still TCP. And the source ports. And the destination port are the opposite of what we had here. It's coming from port 80, going to port 483037. And the flags, just going back up, SINAC. SINAC are the flags here. That's the next packet in the sequence. This packet was sent from 36 to 12. It eventually gets to the firewall.  And the way that it checks, it sees in the SPI table, the computer 12 with 483037 is communicated with computer 36, port 80. And the previous state was SIN received. So now I've seen a packet belonging to those two. Even though the source and destination are swapped, it's part of the connection. Because we expect it to change when the return comes. So even though we record the source address as 12, and this packet has source address of 36, it's still the part of the same connection. Because the connection is identified by those ports and IP addresses. They all match, which are just swapped. The previous state was SIN received. Now I see a SINAC. Ah, that makes sense. Previously, the SIN went past. Now a SINAC is coming back. Let's accept this packet. This packet is automatically accepted. And that's using the SPI table. And the state changes. It was SIN received before. Now the SINAC goes back. So the SINAC is received. And you won't be able to, hopefully you can fit it in better than I can. The state changes. It's now SINAC received. So the key point here is that we didn't need a second rule to allow this return packet to come back. The stateful packet inspection table deals with that automatically. What happens next? The AC comes back, the third packet. All right, this client sends back the AC. I will not draw it. It looks similar to the one on the left. Same source and destination values. Same protocol. The flag will not be seen. It will be AC. It comes back. It goes via the firewall. The firewall sees it and checks. I previously recorded a SINAC was received between this pair. Now I see an AC. Let's automatically accept it through. We accept that AC through and the state changes to what? What's the new state? The state will be established. The connection is established. When the AC goes through, we're finished with this connection establishment. So the state changes to established. What happens next? Either of the sides send data. 12 cents data to 36 or 36 cents data to 12. The connection is established. When the connection is established, if the firewall sees a packet with this combination of IP address port, IP address port in either direction. So 12 doesn't have to be the source. 33336 can be the source. So we accept both directions. Then since the connection is established, if we see data going through, just let it through the firewall. No need to check the rules. Just let it through. And that keeps going. And at changes state, there's actually a final connection close packets come to change it to a state. It actually change it to an intermediate close state, not a final close. And it waits for maybe a couple of minutes and then it really closes the connection. So there's some extra details of how to close connections. Once the connection is closed, this entry is removed. The SPI table doesn't keep track of this pair. Any packet belonging to these two will not be automatically accepted. We'll need to process them with our original firewall rules. So we only accept packets between this pair while we have an entry in the SPI table. Any questions on SPI so far? The benefits and how it works, okay? Be careful that when we draw the SPI table, we identify the source and destination. But when a packet comes and is processed, we can accept in either order. So the second packet, the source was 36, destination 12, source port 80, destination 48037, that matches this entry because we accept both orders. Any questions before another example? Most firewalls would use stateful packet inspection today because it simplifies things greatly. The administrator creates one rule to let the first packet in. Everything else is accepted automatically. The administrator doesn't have to care about SINACs and the closing of the state. The firewall will handle that for you. So what the admin needs to do is says, all right, I need to allow computer 12 to access web servers on this subnet, create that one rule and the SPI table will deal with the rest. You have seen these states probably when we use netstat as a command line tool. As a quick example, when we use netstat, it shows us the TCP connections from this computer or this IP port 22 to this one and the state is established. Let's finish with one example of a quiz question from previous years. We'll go through this example question and see how the firewall in that stateful packet inspection table is used. You may not have this in your handouts. I can't remember if I included it. No, you'll see this picture in the quiz when you take on firewalls. So this is one grabbed from the quizzes. So we'll just step through it. At the top is our network topology. We have some subnets, quite simply one, one, one, zero, subnet two, three and four and in this case, the firewall, I think the question said the firewall was on, where was the firewall? Let's say the firewall is on router A. So assume subnets one and two are internal and three and four are outside and the firewall is on router A and I'll show you an example of the firewall table. Firewall is here. In the quiz, there are two different variations but the question gives you an existing firewall table. Let's have a look at the firewall table. So the administrators added these five rules already. So they wanted to achieve some aims. The first rule says that source IP 3336, any source port consent to the secure shell server on computer 1112, protocol TCP, let's accept that. Default policy has dropped and there are five rules in total which have been added. Some allow for specific computers to communicate. Some are entire subnets. So that's some rules which have been added just for this example. In addition, in this question, we assume that some of those, some connections have been established in the past. So there is a stateful packet inspection table as well in the firewall. This records the current state of connections and we're assuming that established connections. It says there's eight currently established connections. There's a connection between 3336 and 1112, specifically using port 44981 to port 22. And there's also a connection between that same pair of computers but using a different source port. Look at the connection one and two in the stateful packet inspection table. What do you think that means? What's happened? Looking at one and two, what has happened recently? How did computer 336 communicate with 1112? What application was used according to SPI rule one? Port 22 is secure shell. So someone on computer 336 has secure shelled into computer 1112. Twice. Well, it turns out three times. The SPI connection one, two, and three, same IP addresses, same destination port, secure shell, secure shell, secure shell, different source ports. So maybe they've opened up three terminals and they've secure shelled in the same destination three times. That's what's happened here. And there's some other connections already established. So this is the current state of the firewall. Now the firewall receives a packet. I'll write down the packet conditions and we'll see what happens. A packet comes into the firewall and it has these characteristics. We'll draw the packet. There's an IP header, TCP, and some data. We don't care what the data is in this packet filtering firewall. And the address values, source port is 23. Destination port is 44981 and the source IP and destination IP source is 1112. 3335 is the destination. This packet comes into the firewall. What happens? What does a firewall do with this packet? Two answers, except or drop. And then the more interesting question, what rule or what entry, one to five in the firewall table or one to eight in the SPI table, which entry causes that action to take place? So what we do is we go through the tables and check the packet values against the table values. First we check the SPI table. Doesn't match any of those rows, any of those eight SPI entries. First one, well, no, we must match the IP addresses. So it's between 1112 and 3335. So 12 and three do not match because 12 and three are with 3336. So no match there, this is 3335. This one doesn't match, five does not match. So just checking the IP addresses, you can quickly see, do any of them match? None of them match here. So this packet is not related to an ongoing connection, an established connection. Maybe it's a new packet, a new connection. But we know because we haven't seen this connection before, so this is not an ongoing connection we've observed. So we now compare this against the firewall rules. Does it match any of our rules? Hands up for yes. Does this packet match any of our five firewall rules? Source IP 1112, this is even easier to check. 1112, source, no, no, no, no, no. What happens with our packet? Default policy drop, okay? It matches nothing in the SPI table, nothing in the firewall rule table, so we take the default action, the packet's not allowed through. So that's a simple case, but note we check the SPI table first and then the firewall table. Now let's try a different packet. And I will not draw the entire packet, I'll just write down the values. Source IP 4447, destination IP, and you can check as we go through, as I write them down, find the answer. What happens? 2223, source port 44981, destination port 80. Well we check the SPI table first. Do they match? Does this packet match any of the existing established TCP connections? Which one? Five, six, hands up for one, two, three, four. Does it match five, six? Does it match six? Why does it match six? Source IP of our packet is 4447, source port 44981, destination 222380. It does match this rule because the SPI table we allow in either direction. So be careful here. So yes, it is a match because with SPI, even though we list them as source and destination, it's the original packet that it was a source of. That very first syn, the source was 2223, 44981. So we check in both directions. So yes, it does match here. So row six of the SPI table matches. What happens to our packet? Accept or drop? Accept. If we have a match in the SPI table, it's automatically accepted. So that one's allowed through. We don't even check the firewall rules. So that packet belonged to an existing connection. If it didn't match any of those rules, any of the SPI entries, then we'd go through here, check normally whether it matches. If it did match one of these, it'll be accepted. In addition, we would add an entry to the SPI table. Okay, so if we get a match in one of our five rules from the firewall table, we accept the packet, plus we add a new row, the ninth SPI entry in the SPI table, and then subsequent packets would be matched. And if we will not see it in the example, if eventually a pair closed the connection, the row from the SPI table will be automatically deleted. So this is updated over time by the firewall. Stateful packet inspection is a key feature for most packet filtering tables today. It makes things much simpler because we just need to set up a rule to allow the initial packet through.


Do you want us to read it to John, or do you want to do it that way? I'm trying to do it even for me or any of opening, because when I finally get to close it, y'all aren't there. We got how we can make this work out so we can get an EV. We've got a couple of IUS mill functions that we're using. I think the final sharp is that inspection is one place for it. And so the inner hatch, that's all it says. That's it. Think of it in terms of what Eisenhower's directions for invading Jeremy were like. You get to un-lapse that way for certain. And it says then hatch, pull, and rotate about that. And it'll move first toward the right as you rotate up. That's your question that I always see happening here. In the real orbiter, do you have one of these? It's got to come out all the way. It'll move to the right first. It sort of arcs up. It doesn't go straight up, it arcs around. So you got to get out of this tongue in the slot. So you're actually moving it to starboard. You want to go by that one. Well, I was going to go in there just to wreck it. But you're right. You can go straight by it as your point. You don't need to rest. And where is that at? The tip pin is an on-flight, right? I don't believe so. Probably don't need it. Then remove the lower torso storage bags. Where is it? Ingress or go in. Check your sock pressure and gauge between 58 and 6400. That goes out. Yeah, it used to be all right. Check the wrist disconnects to open. Don, the thumb loose. It's going to be basically lined up.  I'm going to line the yellow stripes and the hole with the... Wow. It locks it in. It looks like that's real good. You got to press that gold piece down. Pull it out and move it to your left. If it doesn't go easy, it's not what it goes. If it goes and then springs back and then keeps it... What are you supposed to do? That's it. What's that made of? Are you moving? I've got them in here. I'll give them to you any time you want them. John, the gloves have little dots on the inside of the gun. You just push. Or if you hold it there, I'll just push in. There we go. That's good. That's my job. Just make sure you don't catch anything. Like a bleak is like when a baby is delivered, you know, top of the head first. Check one. I think I did it right. I always worry about my... Here's the other one. All right, my nose will heal. I can't function without it. Now what? Now fill it back. Let's get perfect. Perfect. But one small tip for putting on the helmet, that's apparently not a good thing to do because of the weak structure. If you pull down by the visor handles, the rotating knobs, that's a better idea. Hey, why don't you all give me a 1 and 2? Do you want it to test? Just a 1 and 2. This is Houston, how do you read it? Blackler. Okay, CBS has been themed up. They're trying to do a live interview with you. Good luck. How do you read it? Loud and clear. ABC's down here. They're mad because we didn't beam them up. Deep press valve's going to 5. Okay, and we can expect an alert tone here, and you want to be ready to take it back to close when we get your suit pressure to 5.5. Okay. Less than 5. Alert tone. The pressure's down to 6. Okay, Mike says it's down to 6 now. So, boom, boom, boom. Okay, when it's at 5, take your airlock deep press valve to close. All right, it's closed. Expect an alert, get another alert. What's the pressure doing here? It's not holding 5? It dropped 0.5 TSI. Okay, let me go to my page here before you start. Yeah. This one they just read off and verify that it matches. The one they record is at vacuum. This is just a preliminary stop at 5 to make sure everything's okay. It's not necessary, you can if you want. You'd read off all your data from time EV down the gauge. Okay. And Bob, from time EV down the gauge. Right. And when you've done it, expect an alert tone. Okay. Okay, we're bleeding down to vacuum now. Check your suit gauge, less than 5.5. Hang it in there. Figure your waste tethers for egress. Okay, we do that. I tell it to you. Verify the EVA-COM config. Com verified. Okay. Both of y'all airlock the PDT-0. Expect an alert tone when you get there. Get there. Okay, when the outer hatch delta P is less than 0.5, the outer hatch to open and stow. Okay, in progress. Check your mode A. On mode A. Bob, check your mode B. Mode B. Both of you power and battery. Expect a warning tone. I'm recording an MAT. PDT-0 starts now. That's right. Battery starts PT-0. Okay, on 18 hotel. Power. Battery. Power. Battery. Charger. EMU-1 and 2. Bus like twos to off. Complete. That's on the airlock panel. Yeah.