--- /dev/null
+# 2026-09-17 20:40:03 by RouterOS 7.23.3\r
+# software id = 2961-C4ZZ\r
+#\r
+# model = RBD52G-5HacD2HnD\r
+# serial number = HCX084RAVFA\r
+/interface bridge\r
+add name=Bridge-Lan\r
+/interface wireless\r
+# managed by CAPsMAN\r
+set [ find default-name=wlan1 ] mode=ap-bridge ssid=vados wireless-protocol=\\r
+ 802.11\r
+# managed by CAPsMAN\r
+# channel: 5200/20-eCee/ac/P(20dBm), SSID: vados5g, local forwarding\r
+set [ find default-name=wlan2 ] disabled=no mode=ap-bridge ssid=vados5g \\r
+ wireless-protocol=802.11\r
+/interface ethernet\r
+set [ find default-name=ether1 ] mac-address=48:8F:5A:8E:1A:BC name=\\r
+ "ether1 - Unet"\r
+/interface veth\r
+add address=172.19.14.102/30 container-mac-address=30:C8:D7:A4:6C:D6 dhcp=no \\r
+ gateway=172.19.14.101 gateway6="" mac-address=30:C8:D7:A4:6C:D5 name=\\r
+ veth-awg3vds\r
+/interface wireguard\r
+add listen-port=60585 mtu=1280 name=WARP\r
+add listen-port=41430 mtu=1320 name=wg-awg3vds\r
+add disabled=yes listen-port=32252 mtu=1420 name=wg1\r
+/interface list\r
+add comment=defconf name=WAN\r
+add comment=defconf name=LAN\r
+add exclude=LAN include=WAN name=Internet\r
+/interface wireless security-profiles\r
+set [ find default=yes ] supplicant-identity=MikroTik\r
+/ip dhcp-server option\r
+add code=12 name=HostName\r
+add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00"\r
+/ip dhcp-server option sets\r
+add name=HP1505n options=HostName\r
+add name=StartLife1 options=HostName\r
+add name=amsterDev options=HostName\r
+add name=MiTV options=HostName\r
+add name=miller options=HostName\r
+add name=amster options=HostName\r
+add name=garage options=HostName\r
+add name=domain-search-set options=domain-search-list\r
+add name=VADOS-LEN options=HostName\r
+add name=VADOS-NUC options=HostName\r
+add name=MikroNUC options=HostName\r
+add name=master options=HostName\r
+add name=MikroYellow options=HostName\r
+add name="=\"Client ID\"" options=HostName\r
+/ip dns forwarders\r
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=blsp.at verify-doh-cert=no\r
+add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \\r
+ verify-doh-cert=no\r
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no\r
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no\r
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\\r
+ no\r
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\\r
+ no\r
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no\r
+/ip pool\r
+add name=dhcp ranges=10.30.30.150-10.30.30.200\r
+/ip dhcp-server\r
+add address-pool=dhcp bootp-support=dynamic dhcp-option-set=domain-search-set \\r
+ interface=Bridge-Lan name=masterDHCP server-address=10.30.30.81\r
+/ip smb users\r
+set [ find default=yes ] disabled=yes\r
+add disabled=yes name=vados\r
+/routing bgp template\r
+set default as=64999 disabled=yes multihop=yes\r
+/routing table\r
+add disabled=no fib name=To-VPN\r
+add disabled=no name=warp_table\r
+/system script\r
+add dont-require-permissions=no name=fetchCustom owner=admin policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\\r
+ \n\\r
+ \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\\r
+ .30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\\r
+ \n\\r
+ \n\\r
+ \n#\\r
+ \n\\r
+ \n#root.mnuc.backuper\\r
+ \n\\r
+ \n\\r
+ \n\\r
+ \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\\r
+ .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\\r
+ \n\\r
+ \n\\r
+ \n#:local Script AM-GlobalConfig;\\r
+ \n\\r
+ \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\\r
+ heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\\r
+ sc\") output=user as-value ]->\"data\");\\r
+ \n\\r
+ \n#/usb1/mikro_bak_rsa.pub\\r
+ \n\\r
+ \n\\r
+ \n#:local FetchFile AM-DOHCert.rsc\\r
+ \n\\r
+ \n\\r
+ \n\\r
+ \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\\r
+ \n\\r
+ \n:global MkDir;\\r
+ \n\\r
+ \n\\r
+ \n:local FetchFile Manager@id_rsa.pub\\r
+ \n:local localDir \"/\";\\r
+ \n\\r
+ \n\\r
+ \n\\r
+ \n\$MkDir \$localDir;\\r
+ \n\\r
+ \n\\r
+ \n\\r
+ \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\\r
+ \$localDir . \$FetchFile);\\r
+ \n"\r
+add comment="Global Config Script" dont-require-permissions=no name=\\r
+ AM-GlobalConfig-2026-09-1211:58:18.rsc owner=AM-GlobalConfig policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\\r
+ !rsc by Vados\r\\r
+ \n# RouterOS script: AM-GlobalConfig\r\\r
+ \n# Script comment: Global Config Script\r\\r
+ \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\\r
+ \n#\r\\r
+ \n#\r\\r
+ \n# Warning: Dont touch this line!\r\\r
+ \n:global Identity [/system/identity/get name];\r\\r
+ \n:global GlobalConfReady false;\r\\r
+ \n#\r\\r
+ \n#\r\\r
+ \n# Global Url For Amster scripts to fetch\r\\r
+ \n# most be defined in AM-Init-Script or AM-setup scripts\r\\r
+ \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\\r
+ \n:global ScriptsUrlSuffix (a);\r\\r
+ \n:global CheckSumsVerify true;\r\\r
+ \n\r\\r
+ \n:global ScriptUpdatesCRLF true;\r\\r
+ \n:global CommentsInScripts true;\r\\r
+ \n\r\\r
+ \n# Debug output:\r\\r
+ \n:global PrintDebug true; #false;\r\\r
+ \n\r\\r
+ \n# Debug output for specific script:\r\\r
+ \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\\r
+ \n\r\\r
+ \n# Debug logs\r\\r
+ \n# Other actions (disk, email, remote or support) can be used as well.\r\\r
+ \n# I do not recommend using echo - use debug output instead (https://rsc.\\r
+ eworm.de/main/DEBUG.html#debug-output).\r\\r
+ \n#/system/logging/add topics=script,debug action=memory;\r\\r
+ \n\r\\r
+ \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\\r
+ \n:global Domain \"WORKGROUP\";\r\\r
+ \n\r\\r
+ \n:global EmailGeneralTo \"vados@vados.ru\";\r\\r
+ \n#:global EmailGeneralCc \"\";\r\\r
+ \n\r\\r
+ \n# \$ScriptInstallUpdate mod/notification-telegram\r\\r
+ \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\\r
+ \";\r\\r
+ \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\\r
+ \n# Use this to send notifications to a specific topic in group.\r\\r
+ \n#:global TelegramThreadId \"30\";\r\\r
+ \n# Using telegram-chat you have to define trusted chat ids (not group ids\\r
+ !)\r\\r
+ \n# or user names. Groups allow to chat with devices simultaneously.\r\\r
+ \n:global TelegramChatIdsTrusted {\r\\r
+ \n \"454403445\"\r\\r
+ \n \"-1003631309063\"\r\\r
+ \n \"-5124482807\"\r\\r
+ \n \"1087968824\";\r\\r
+ \n};\r\\r
+ \n# \"-5294757340\";\r\\r
+ \n\r\\r
+ \n:global TelegramChatGroups \"(all)\";\r\\r
+ \n#:global TelegramChatGroups \"(all|home|office)\";\r\\r
+ \n\r\\r
+ \n:global NotificationFunctions {\r\\r
+ \n \"email\"\r\\r
+ \n \"telegram\";\r\\r
+ \n};\r\\r
+ \n# Toggle this to disable symbols in notifications.\r\\r
+ \n:global NotificationsWithSymbols true;\r\\r
+ \n:global TerminalColorOutput true;\r\\r
+ \n\r\\r
+ \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\\r
+ \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\\r
+ \n\r\\r
+ \n## Update channel. Possible values: stable, long-term, testing, developm\\r
+ ent\r\\r
+ \n:global updateChannel \"stable\";\r\\r
+ \n\r\\r
+ \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\\r
+ \");\r\\r
+ \n:global CertRenewTime 2w;\r\\r
+ \n:global CertRenewPass (a); #{\r\\r
+ \n# \"\";\r\\r
+ \n# \"v3ry-s3cr3t\";\r\\r
+ \n# \"4n0th3r-s3cr3t\";\r\\r
+ \n#};\r\\r
+ \n:global CertWarnTime 1w;\r\\r
+ \n:global CertIssuedExportPass (a); # {\r\\r
+ \n# \"\";\r\\r
+ \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\\r
+ \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\\r
+ \n#};\r\\r
+ \n\r\\r
+ \n# Script BackupAndUpdate mode, possible values: backup,\r\\r
+ \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\\r
+ n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\\r
+ \n# osupdate - Update if available and creates backups before/after update\\r
+ \_(ignores `forceBackup`)\r\\r
+ \n# Set `forceBackup` to true to always create backups, even\\r
+ \_without updates\r\\r
+ \n# osnotify - Set `forceBackup` to always create backups on every run\r\\r
+ \n:global DevInfoIncludeIP true;\r\\r
+ \n:global BackupAndUpdateMode \"osnotify\"\r\\r
+ \n\r\\r
+ \n:global forceBackup true;\r\\r
+ \n:global BackupPassword \"Peskar55\";\r\\r
+ \n\r\\r
+ \n# SFTP Backup Variables\r\\r
+ \n:global BackupRandomDelay 0;\r\\r
+ \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\\r
+ \n:global BackupUploadUser \$Identity;\r\\r
+ \n:global BackupUploadPass \"root.mnuc.backuper\";\r\\r
+ \n\r\\r
+ \n:global BackupSendBinary true;\r\\r
+ \n:global BackupSendExport true;\r\\r
+ \n:global BackupSendGlobalConfig true;\r\\r
+ \n:global BackupSendScripts true;\r\\r
+ \n\r\\r
+ \n# Remove local file after uploading if no errors\r\\r
+ \n:global BackupRmLocal true;\r\\r
+ \n\r\\r
+ \n# Local Backups Root Directory \r\\r
+ \n:global BackupLocalRoot \"tmpfs\";\r\\r
+ \n\r\\r
+ \n# Encrypt Backup\r\\r
+ \n:global BackupEncrypt true;\r\\r
+ \n\r\\r
+ \n# Sensitive information in Backups\r\\r
+ \n:global BackupSens true;\r\\r
+ \n\r\\r
+ \n# User Export\r\\r
+ \n:global BackupUser true;\r\\r
+ \n\r\\r
+ \n# License Export (not for CHR, will silently skip)\r\\r
+ \n:global BackupLicense false;\r\\r
+ \n\r\\r
+ \n# SSH Keys\r\\r
+ \n:global BackupSshKeys true;\r\\r
+ \n\r\\r
+ \n# Certificate Export\r\\r
+ \n:global BackupCerts true;\r\\r
+ \n\r\\r
+ \n# Certificate Password\r\\r
+ \n:global BackupCertsPasswd \"\";\r\\r
+ \n\r\\r
+ \n# User-Manager Export\r\\r
+ \n:global BackupUserMan false;\r\\r
+ \n\r\\r
+ \n# The Dude Export\r\\r
+ \n:global BackupDude false;\r\\r
+ \n\r\\r
+ \n# User Files to export, comma-separated string or array of strings\r\\r
+ \n# User Files are not removed on backup\r\\r
+ \n# Any directory paths will be removed (/ -> _) on remote file\r\\r
+ \n# Nonpresent files are silently skipped\r\\r
+ \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\\r
+ \n\r\\r
+ \n# load functions and any custom scripts\r\\r
+ \n# [ /system/script/find where name=\"global-config-ov\\r
+ erlay\" ], \\\r\\r
+ \n# [ /system/script/find where name~\"^global-config-o\\r
+ verlay\\\\.d/.\" ]\r\\r
+ \n#\r\\r
+ \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\\r
+ ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\\r
+ \r\\r
+ \n# :onerror Err {\r\\r
+ \n# /system/script/run \$Script;\r\\r
+ \n# } do={\r\\r
+ \n# :log error (\"Loading configuration from configs and functions\"\\r
+ \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\\r
+ \n# }\r\\r
+ \n#}\r\\r
+ \n#:log info \"\\ndevMode = \$devMode\";\r\\r
+ \n#:log info \"\\ndevRunning = \$devRunning\";\r\\r
+ \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \\r
+ GlobalRUN\\r\?\\n\" ] do={\r\\r
+ \n :onerror Err {\r\\r
+ \n /system/script/run \$Script;\r\\r
+ \n } do={\r\\r
+ \n :log error (\"Run script \" . [ /system/script/get \$Script name \\r
+ ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n# signal we are ready\r\\r
+ \n:set GlobalConfReady true;\r\\r
+ \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\\r
+ \n"\r
+add dont-require-permissions=no name=AM-Fetch-Generator owner=vados policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\\r
+ \n:local srcFile \"AM-Awg-Generator.rsc\";\\r
+ \n:local dstFile \$srcFile;\\r
+ \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"/\$srcFile\") dst-pat\\r
+ h=\"/\$dstFile\";\\r
+ \n\\r
+ \nexit 0\\r
+ \n#\\r
+ \n\\r
+ \n#root.mnuc.backuper\\r
+ \n\\r
+ \n\\r
+ \n\\r
+ \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\\r
+ .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\\r
+ \n\\r
+ \n\\r
+ \n#:local Script AM-GlobalConfig;\\r
+ \n\\r
+ \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\\r
+ heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\\r
+ sc\") output=user as-value ]->\"data\");\\r
+ \n\\r
+ \n#/usb1/mikro_bak_rsa.pub\\r
+ \n\\r
+ \n\\r
+ \n#:local FetchFile AM-DOHCert.rsc\\r
+ \n\\r
+ \n\\r
+ \n\\r
+ \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\\r
+ \n\\r
+ \n:global MkDir;\\r
+ \n\\r
+ \n\\r
+ \n:local FetchFile Manager@id_rsa.pub\\r
+ \n:local localDir \"/\";\\r
+ \n\\r
+ \n\\r
+ \n\\r
+ \n\$MkDir \$localDir;\\r
+ \n\\r
+ \n\\r
+ \n\\r
+ \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\\r
+ \$localDir . \$FetchFile);\\r
+ \n"\r
+add comment=awg2vds dont-require-permissions=no name=awg2vds-uninstall owner=\\r
+ vados policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\\r
+ \n :put \"Uninstallimg AmneziaWG...\"\\r
+ \n :log info \"Uninstallimg AmneziaWG...\"\\r
+ \n :local prevDNS \"\"\\r
+ \n :do { :set prevDNS [/container/envs/get [find where list=\"awg2vds-env\\r
+ \" key=\"AWG_PREV_DNS\"] value] } on-error={}\\r
+ \n :local prevTmpdir \"\"\\r
+ \n :do { :set prevTmpdir [/container/envs/get [find where list=\"awg2vds-\\r
+ env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\\r
+ \n /ip/route/remove [find where comment=awg2vds-tunnel]\\r
+ \n /ip/route/remove [find where comment=awg2vds-dns]\\r
+ \n /container/stop [find where interface=veth-awg2vds]\\r
+ \n :delay 7s\\r
+ \n /container/remove [find where interface=veth-awg2vds]\\r
+ \n /container/envs/remove [find where list=\"awg2vds-env\"]\\r
+ \n :if (\$prevDNS != \"\") do={\\r
+ \n :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\\r
+ \n :put (\"DNS restored to: \$prevDNS\")\\r
+ \n }\\r
+ \n /container/config set tmpdir=\$prevTmpdir\\r
+ \n :put (\"Container tmpdir restored to: \$prevTmpdir\")\\r
+ \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg2vds\"]\\r
+ \n /ip/firewall/nat/remove [find where src-address=\"172.20.200.68/30\"]\\r
+ \n /ip/address/remove [find where address=\"172.20.200.69/30\"]\\r
+ \n /interface/veth/remove [find where name=\"veth-awg2vds\"]\\r
+ \n /interface/wireguard/peers/remove [find where interface=\"wg-awg2vds\"\\r
+ ]\\r
+ \n /ip/address/remove [find where interface=\"wg-awg2vds\"]\\r
+ \n /interface/wireguard/remove [find where name=\"wg-awg2vds\"]\\r
+ \n :do { /file/remove [find where name~\"awg2vds.+tar\"] } on-error={}\\r
+ \n :do { /file/remove [find where name=\"usb1/awg2vds\"] } on-error={}\\r
+ \n :do { /file/remove [find where name=\"usb1/ru_ranges_timeout.rsc\"] } \\r
+ on-error={}\\r
+ \n :do { /file/remove [find where name~\"usb1/pull\"] } on-error={}\\r
+ \n :put \"Uninstall AmneziaWG Proxy complete!\"\\r
+ \n :log info \"Uninstall AmneziaWG Proxy complete!\"\\r
+ \n /system/script/remove [find where name=awg2vds-uninstall]\\r
+ \n"\r
+add comment="Global Config Script" dont-require-permissions=no name=\\r
+ AM-GlobalConfig owner=AM-GlobalConfig policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\\r
+ !rsc by Vados\r\\r
+ \n# RouterOS script: AM-GlobalConfig\r\\r
+ \n# Script comment: Global Config Script\r\\r
+ \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\\r
+ \n#\r\\r
+ \n#\r\\r
+ \n# Warning: Dont touch this line!\r\\r
+ \n:global Identity [/system/identity/get name];\r\\r
+ \n:global GlobalConfReady false;\r\\r
+ \n#\r\\r
+ \n#\r\\r
+ \n# Global Url For Amster scripts to fetch\r\\r
+ \n# most be defined in AM-Init-Script or AM-setup scripts\r\\r
+ \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\\r
+ \n:global ScriptsUrlSuffix (a);\r\\r
+ \n:global CheckSumsVerify true;\r\\r
+ \n\r\\r
+ \n:global ScriptUpdatesCRLF true;\r\\r
+ \n:global CommentsInScripts true;\r\\r
+ \n\r\\r
+ \n# Debug output:\r\\r
+ \n:global PrintDebug true; #false;\r\\r
+ \n\r\\r
+ \n# Debug output for specific script:\r\\r
+ \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\\r
+ \n\r\\r
+ \n# Debug logs\r\\r
+ \n# Other actions (disk, email, remote or support) can be used as well.\r\\r
+ \n# I do not recommend using echo - use debug output instead (https://rsc.\\r
+ eworm.de/main/DEBUG.html#debug-output).\r\\r
+ \n#/system/logging/add topics=script,debug action=memory;\r\\r
+ \n\r\\r
+ \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\\r
+ \n:global Domain \"WORKGROUP\";\r\\r
+ \n\r\\r
+ \n:global EmailGeneralTo \"vados@vados.ru\";\r\\r
+ \n#:global EmailGeneralCc \"\";\r\\r
+ \n\r\\r
+ \n# \$ScriptInstallUpdate mod/notification-telegram\r\\r
+ \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\\r
+ \";\r\\r
+ \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\\r
+ \n# Use this to send notifications to a specific topic in group.\r\\r
+ \n#:global TelegramThreadId \"30\";\r\\r
+ \n# Using telegram-chat you have to define trusted chat ids (not group ids\\r
+ !)\r\\r
+ \n# or user names. Groups allow to chat with devices simultaneously.\r\\r
+ \n:global TelegramChatIdsTrusted {\r\\r
+ \n \"454403445\"\r\\r
+ \n \"-1003631309063\"\r\\r
+ \n \"-5124482807\"\r\\r
+ \n \"1087968824\";\r\\r
+ \n};\r\\r
+ \n# \"-5294757340\";\r\\r
+ \n\r\\r
+ \n:global TelegramChatGroups \"(all)\";\r\\r
+ \n#:global TelegramChatGroups \"(all|home|office)\";\r\\r
+ \n\r\\r
+ \n:global NotificationFunctions {\r\\r
+ \n \"email\"\r\\r
+ \n \"telegram\";\r\\r
+ \n};\r\\r
+ \n# Toggle this to disable symbols in notifications.\r\\r
+ \n:global NotificationsWithSymbols true;\r\\r
+ \n:global TerminalColorOutput true;\r\\r
+ \n\r\\r
+ \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\\r
+ \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\\r
+ \n\r\\r
+ \n## Update channel. Possible values: stable, long-term, testing, developm\\r
+ ent\r\\r
+ \n:global updateChannel \"stable\";\r\\r
+ \n\r\\r
+ \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\\r
+ \");\r\\r
+ \n:global CertRenewTime 2w;\r\\r
+ \n:global CertRenewPass (a); #{\r\\r
+ \n# \"\";\r\\r
+ \n# \"v3ry-s3cr3t\";\r\\r
+ \n# \"4n0th3r-s3cr3t\";\r\\r
+ \n#};\r\\r
+ \n:global CertWarnTime 1w;\r\\r
+ \n:global CertIssuedExportPass (a); # {\r\\r
+ \n# \"\";\r\\r
+ \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\\r
+ \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\\r
+ \n#};\r\\r
+ \n\r\\r
+ \n# Script BackupAndUpdate mode, possible values: backup,\r\\r
+ \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\\r
+ n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\\r
+ \n# osupdate - Update if available and creates backups before/after update\\r
+ \_(ignores `forceBackup`)\r\\r
+ \n# Set `forceBackup` to true to always create backups, even\\r
+ \_without updates\r\\r
+ \n# osnotify - Set `forceBackup` to always create backups on every run\r\\r
+ \n:global DevInfoIncludeIP true;\r\\r
+ \n:global BackupAndUpdateMode \"osnotify\"\r\\r
+ \n\r\\r
+ \n:global forceBackup true;\r\\r
+ \n:global BackupPassword \"Peskar55\";\r\\r
+ \n\r\\r
+ \n# SFTP Backup Variables\r\\r
+ \n:global BackupRandomDelay 0;\r\\r
+ \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\\r
+ \n:global BackupUploadUser \$Identity;\r\\r
+ \n:global BackupUploadPass \"root.mnuc.backuper\";\r\\r
+ \n\r\\r
+ \n:global BackupSendBinary true;\r\\r
+ \n:global BackupSendExport true;\r\\r
+ \n:global BackupSendGlobalConfig true;\r\\r
+ \n:global BackupSendScripts true;\r\\r
+ \n\r\\r
+ \n# Remove local file after uploading if no errors\r\\r
+ \n:global BackupRmLocal true;\r\\r
+ \n\r\\r
+ \n# Local Backups Root Directory \r\\r
+ \n:global BackupLocalRoot \"tmpfs\";\r\\r
+ \n\r\\r
+ \n# Encrypt Backup\r\\r
+ \n:global BackupEncrypt true;\r\\r
+ \n\r\\r
+ \n# Sensitive information in Backups\r\\r
+ \n:global BackupSens true;\r\\r
+ \n\r\\r
+ \n# User Export\r\\r
+ \n:global BackupUser true;\r\\r
+ \n\r\\r
+ \n# License Export (not for CHR, will silently skip)\r\\r
+ \n:global BackupLicense false;\r\\r
+ \n\r\\r
+ \n# SSH Keys\r\\r
+ \n:global BackupSshKeys true;\r\\r
+ \n\r\\r
+ \n# Certificate Export\r\\r
+ \n:global BackupCerts true;\r\\r
+ \n\r\\r
+ \n# Certificate Password\r\\r
+ \n:global BackupCertsPasswd \"\";\r\\r
+ \n\r\\r
+ \n# User-Manager Export\r\\r
+ \n:global BackupUserMan false;\r\\r
+ \n\r\\r
+ \n# The Dude Export\r\\r
+ \n:global BackupDude false;\r\\r
+ \n\r\\r
+ \n# User Files to export, comma-separated string or array of strings\r\\r
+ \n# User Files are not removed on backup\r\\r
+ \n# Any directory paths will be removed (/ -> _) on remote file\r\\r
+ \n# Nonpresent files are silently skipped\r\\r
+ \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\\r
+ \n\r\\r
+ \n# load functions and any custom scripts\r\\r
+ \n# [ /system/script/find where name=\"global-config-ov\\r
+ erlay\" ], \\\r\\r
+ \n# [ /system/script/find where name~\"^global-config-o\\r
+ verlay\\\\.d/.\" ]\r\\r
+ \n#\r\\r
+ \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\\r
+ ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\\r
+ \r\\r
+ \n# :onerror Err {\r\\r
+ \n# /system/script/run \$Script;\r\\r
+ \n# } do={\r\\r
+ \n# :log error (\"Loading configuration from configs and functions\"\\r
+ \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\\r
+ \n# }\r\\r
+ \n#}\r\\r
+ \n#:log info \"\\ndevMode = \$devMode\";\r\\r
+ \n#:log info \"\\ndevRunning = \$devRunning\";\r\\r
+ \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \\r
+ GlobalRUN\\r\?\\n\" ] do={\r\\r
+ \n :onerror Err {\r\\r
+ \n /system/script/run \$Script;\r\\r
+ \n } do={\r\\r
+ \n :log error (\"Run script \" . [ /system/script/get \$Script name \\r
+ ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n# signal we are ready\r\\r
+ \n:set GlobalConfReady true;\r\\r
+ \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\\r
+ \n"\r
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \\r
+ owner=AM-GlobalFunc policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\\r
+ !rsc by Vados\r\\r
+ \n# RouterOS script: AM-GglobalFunc\r\\r
+ \n# Script comment: Global functions\r\\r
+ \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\\r
+ \n#\r\\r
+ \n#\r\\r
+ \n# requires RouterOS, version=7.19\r\\r
+ \n# requires device-mode, fetch, scheduler\r\\r
+ \n:local ExitOK false;\r\\r
+ \n:local ScriptName [ :jobname ];\r\\r
+ \n#:global checkRunJob \$SriptName;\r\\r
+ \n#:global fixCRLF;\r\\r
+ \n#:if (\$fixCRLF != false) do={\r\\r
+ \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\\r
+ ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\\r
+ }\r\\r
+ \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\\r
+ et \$fixScript source ] ] \$fixScript};};\r\\r
+ \n#}\r\\r
+ \n:global GlobalFuncReady false;\r\\r
+ \n\r\\r
+ \n# Git commit id & info, expected configuration version\r\\r
+ \n:global CommitId \"main/18038/819287c3\";\r\\r
+ \n:global CommitTAG \"unknown\";\r\\r
+ \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\\r
+ r: root, in 02:20:04 17.09.2026.\";\r\\r
+ \n\r\\r
+ \n# The variables are received right here.\r\\r
+ \n:global GlobalConfVersion 140;\r\\r
+ \n\r\\r
+ \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\\r
+ \n\r\\r
+ \n:global Identity [/system/identity/get name];\r\\r
+ \n:global IdentityShort [:pick \$Identity 0 18];\r\\r
+ \n\r\\r
+ \n:global devBoardName [/system/resource/get board-name];\r\\r
+ \n:global devMode [/system/device-mode/get mode];\r\\r
+ \n:global devCurArch [/system/resource/get architecture-name];\r\\r
+ \n:global devCurVersion [/system/resource/get version];\r\\r
+ \n\r\\r
+ \n# Variables defined in AM-GlobalConfig.rsc\r\\r
+ \n:global TerminalColorOutput;\r\\r
+ \n:global CommentsInScripts;\r\\r
+ \n:global DetectIpAddrDefault;\r\\r
+ \n:global DetectIpAddrFallback;\r\\r
+ \n:global updateChannel;\r\\r
+ \n:global Domain;\r\\r
+ \n:global EmailGeneralTo;\r\\r
+ \n:global BackupAndUpdateMode;\r\\r
+ \n\r\\r
+ \n# Single functions, without nested functions.\r\\r
+ \n:global MiniDateTimeStamp;\r\\r
+ \n:global MicroDateTimeStamp;\r\\r
+ \n\r\\r
+ \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\\r
+ \n:global LogPrint;\r\\r
+ \n\r\\r
+ \n# DeviceInfo and Updates\r\\r
+ \n:global IsCheckUpdates;\r\\r
+ \n:global WaitCheckUpdates;\r\\r
+ \n:global GetPubIp;\r\\r
+ \n\r\\r
+ \n:global GetArrDeviceInfo;\r\\r
+ \n:global WaitArrDeviceInfo;\r\\r
+ \n\r\\r
+ \n:global devModel;\r\\r
+ \n:global devRunningMode;\r\\r
+ \n\r\\r
+ \n:global devRbRevision;\r\\r
+ \n:global devRbSerialNumber;\r\\r
+ \n:global devRbVerAvail;\r\\r
+ \n\r\\r
+ \n:global runningChannelVersion;\r\\r
+ \n:global runningChannel;\r\\r
+ \n:global runningVersion;\r\\r
+ \n\r\\r
+ \n:global devBuildTime;\r\\r
+ \n:global ROsVerAvail;\r\\r
+ \n:global PkgUpdStatus;\r\\r
+ \n:global currentUpdateChannel;\r\\r
+ \n\r\\r
+ \n:global ScriptInstallUpdate;\r\\r
+ \n\r\\r
+ \n:global DeviceInfo;\r\\r
+ \n\r\\r
+ \n:global OldMode;\r\\r
+ \n\r\\r
+ \n:global ParseKeyValueStore;\r\\r
+ \n:global RandomDelay;\r\\r
+ \n:global GetRandomNumber;\r\\r
+ \n:global EscapeForRegEx;\r\\r
+ \n:global CharacterMultiply;\r\\r
+ \n:global CharacterReplace;\r\\r
+ \n:global CleanFilePath;\r\\r
+ \n:global CleanName;\r\\r
+ \n\r\\r
+ \n:global CommitBrief;\r\\r
+ \n\r\\r
+ \n:global EitherOr;\r\\r
+ \n:global FormatLine;\r\\r
+ \n:global GetRandom20CharAlNum;\r\\r
+ \n:global GetRandom20CharHex;\r\\r
+ \n:global GetRandomNumber;\r\\r
+ \n:global Grep;\r\\r
+ \n:global IfThenElse;\r\\r
+ \n:global MAX;\r\\r
+ \n:global MIN;\r\\r
+ \n:global HumanReadableNum;\r\\r
+ \n\r\\r
+ \n:global IsFullyConnected;\r\\r
+ \n:global IsDNSResolving;\r\\r
+ \n:global IsTimeSync;\r\\r
+ \n:global IsTimeSyncCached;\r\\r
+ \n:global IsTimeSyncResetNtp;\r\\r
+ \n\r\\r
+ \n:global MkDir;\r\\r
+ \n:global RmDir;\r\\r
+ \n:global RmFile;\r\\r
+ \n:global FileGet;\r\\r
+ \n:global Unix2Dos;\r\\r
+ \n:global UrlEncode;\r\\r
+ \n:global WaitForFile;\r\\r
+ \n:global ScriptLock;\r\\r
+ \n:global SendTelegram;\r\\r
+ \n:global NotificationFunctions;\r\\r
+ \n:global SendNotification;\r\\r
+ \n:global SendNotification2;\r\\r
+ \n:global SymbolForNotification;\r\\r
+ \n:global SymbolByUnicodeName;\r\\r
+ \n:global ValidateSyntax;\r\\r
+ \n:global CheckSumsVerify;\r\\r
+ \n:global GlobalConfChanges;\r\\r
+ \n:global GlobalConfMigration;\r\\r
+ \n:global VersionToNum;\r\\r
+ \n:global RequiredRouterOS;\r\\r
+ \n:global ExitError;\r\\r
+ \n:global ExitOnError;\r\\r
+ \n\r\\r
+ \n:global FetchHugeFiles;\r\\r
+ \n:global FetchUserAgentStr;\r\\r
+ \n:global FileExists;\r\\r
+ \n:global CertificateAvailable;\r\\r
+ \n:global CertificateDownload;\r\\r
+ \n:global CertificateNameByCN;\r\\r
+ \n:global CharacterMultiply;\r\\r
+ \n\r\\r
+ \n:global InspectVar;\r\\r
+ \n:global InspectVarRet;\r\\r
+ \n:global ParseCustom;\r\\r
+ \n\r\\r
+ \n:set IsCheckUpdates do={\r\\r
+ \n :local isInfo [:tobool \$1];\r\\r
+ \n :global updateChannel;\r\\r
+ \n :global PkgUpdStatus;\r\\r
+ \n :global currentUpdateChannel;\r\\r
+ \n :global ROsVerAvail;\r\\r
+ \n :global arrDeviceInfo;\r\\r
+ \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\\r
+ \n :local CurrentChannel [ /system/package/update/get channel ];\r\\r
+ \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\\r
+ el) do={\r\\r
+ \n :retry command={/system/package/update set channel=\$updateChannel} \\r
+ \_delay=300ms max=5 on-error={};\r\\r
+ \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\\r
+ \n }\r\\r
+ \n :local Update [ /system/package/update/get ];\r\\r
+ \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\\r
+ \n :set currentUpdateChannel \$Channel;\r\\r
+ \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\\r
+ \n :local StatusPkg \"undefined\";\r\\r
+ \n :log info (\$0 . \" Checking for updates...\");\r\\r
+ \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\\r
+ dates without-paging as-value]->\"status\")} \\\r\\r
+ \n delay=300ms max=5 on-error={};\r\\r
+ \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\\r
+ \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\\r
+ s true; } else={ :set PkgUpdStatus false; }\r\\r
+ \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \\r
+ ] ];\r\\r
+ \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\\r
+ \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\\r
+ \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\\r
+ \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\\r
+ \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\\r
+ \n }\r\\r
+ \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\\r
+ kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\\r
+ \n :return true;\r\\r
+ \n } else={\r\\r
+ \n :return \$PkgUpdStatus;\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set WaitCheckUpdates do={\r\\r
+ \n :global IsCheckUpdates;\r\\r
+ \n :global PkgUpdStatus;\r\\r
+ \n :global currentUpdateChannel;\r\\r
+ \n :global ROsVerAvail;\r\\r
+ \n :global arrDeviceInfo;\r\\r
+ \n :local Status \"\";\r\\r
+ \n :local Update;\r\\r
+ \n :local WaitCount 0;\r\\r
+ \n :if ([ \$IsCheckUpdates true ] = false) do={\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\\r
+ \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\\r
+ \") && \$WaitCount < 60) do={\r\\r
+ \n :delay 1s;\r\\r
+ \n :set WaitCount (\$WaitCount + 1);\r\\r
+ \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\\r
+ \n }\r\\r
+ \n :set Update [ /system/package/update/get ];\r\\r
+ \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\\r
+ \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\\r
+ \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\\r
+ \n :set PkgUpdStatus true;\r\\r
+ \n } else={\r\\r
+ \n :set PkgUpdStatus false;\r\\r
+ \n }\r\\r
+ \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\\r
+ \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\\r
+ \n }\r\\r
+ \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\\r
+ \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \\r
+ do={\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set WaitArrDeviceInfo do={\r\\r
+ \n :global GetArrDeviceInfo;\r\\r
+ \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\\r
+ \n :delay 1s;\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set GetArrDeviceInfo do={\r\\r
+ \n :global LogPrint;\r\\r
+ \n :global arrDeviceInfo;\r\\r
+ \n :global devBoardName;\r\\r
+ \n :global devModel;\r\\r
+ \n :global devRunning;\r\\r
+ \n :global devCurArch;\r\\r
+ \n :global devRbRevision;\r\\r
+ \n :global devRbSerialNumber;\r\\r
+ \n :global devBuildTime;\r\\r
+ \n :global runningChannelVersion;\r\\r
+ \n :global runningChannel;\r\\r
+ \n :global runningVersion;\r\\r
+ \n :global currentUpdateChannel;\r\\r
+ \n :global ROsVerAvail;\r\\r
+ \n\r\\r
+ \n :local DeviceInfo;\r\\r
+ \n :local Resource [/system/resource/get];\r\\r
+ \n :local Update [ /system/package/update/get ];\r\\r
+ \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\\r
+ \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\\r
+ \n :local RouterBoard;\r\\r
+ \n :local IsRouterBoard false;\r\\r
+ \n :local RunningMode \"\";\r\\r
+ \n\r\\r
+ \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\\r
+ \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\\r
+ \n :set runningChannelVersion \$VersionString;\r\\r
+ \n :set runningVersion \$VersionString;\r\\r
+ \n :set runningChannel \"\";\r\\r
+ \n\r\\r
+ \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\\r
+ {\r\\r
+ \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\\r
+ \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\\r
+ len \$VersionString ] ];\r\\r
+ \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\\r
+ \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\\r
+ \r\\r
+ \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\\r
+ \_3] != \"x86\") do={\r\\r
+ \n :do {\r\\r
+ \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\\r
+ \n# :set RouterBoard [ /system/routerboard/get ];\r\\r
+ \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\\r
+ \n :set IsRouterBoard true;\r\\r
+ \n }\r\\r
+ \n } on-error={}\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :do {\r\\r
+ \n :set RunningMode [ /system/device-mode/get mode ];\r\\r
+ \n } on-error={\r\\r
+ \n :do {\r\\r
+ \n :set RunningMode [ /system/device-mode/get running ];\r\\r
+ \n } on-error={\r\\r
+ \n :set RunningMode \"\";\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :set devRunning \$RunningMode;\r\\r
+ \n\r\\r
+ \n :if (\$IsRouterBoard = true) do={\r\\r
+ \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\\r
+ \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\\r
+ \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \\r
+ ];\r\\r
+ \n } else={\r\\r
+ \n :set devModel \$devBoardName;\r\\r
+ \n :set devRbRevision \"\";\r\\r
+ \n :set devRbSerialNumber \"\";\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\\r
+ \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\\r
+ \n\r\\r
+ \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\\r
+ \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\\r
+ \n :set (\$DeviceInfo->\"model\") \$devModel;\r\\r
+ \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\\r
+ \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\\r
+ \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\\r
+ \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\\r
+ \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\\r
+ ion;\r\\r
+ \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\\r
+ \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\\r
+ \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\\r
+ \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\\r
+ current-firmware\") ];\r\\r
+ \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\\r
+ upgrade-firmware\") ];\r\\r
+ \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\\r
+ \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\\r
+ alled-version\") ];\r\\r
+ \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\\r
+ \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\\r
+ ) ];\r\\r
+ \n\r\\r
+ \n :set arrDeviceInfo \$DeviceInfo;\r\\r
+ \n :return \$DeviceInfo;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set DeviceInfo do={\r\\r
+ \n :global GetArrDeviceInfo;\r\\r
+ \n :global GlobalConfVersion;\r\\r
+ \n :global Identity;\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :global FormatLine;\r\\r
+ \n :global CommitBrief;\r\\r
+ \n\r\\r
+ \n :local License [/system/license/get];\r\\r
+ \n :local Snmp [ /snmp/get ];\r\\r
+ \n :local Info [ \$GetArrDeviceInfo ];\r\\r
+ \n\r\\r
+ \n :if ([ :typeof \$Info ] != \"array\") do={\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :return ( \\\r\\r
+ \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\\r
+ \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\\r
+ \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\\r
+ \_. \\\r\\r
+ \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\\r
+ \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\\r
+ \_\\\r\\r
+ \n \"Hardware:\\n\" . \\\r\\r
+ \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \\r
+ \\\r\\r
+ \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\\r
+ n\" . \\\r\\r
+ \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\\r
+ \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\\r
+ \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\\r
+ \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\\r
+ \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\\r
+ \\n\") ] . \\\r\\r
+ \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\\r
+ \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\\r
+ \")) ] . \"\\n\") ] . \\\r\\r
+ \n \"RouterOS:\\n\" . \\\r\\r
+ \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\\r
+ \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\\r
+ \")) ] . \"\\n\") ] . \\\r\\r
+ \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\\r
+ \\n\" . \\\r\\r
+ \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\\r
+ \_\"\\n\" . \\\r\\r
+ \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\\r
+ \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \\r
+ \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\\r
+ \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \\r
+ \"\\n\") ] . \\\r\\r
+ \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\\r
+ \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\\r
+ \_\\\r\\r
+ \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\\r
+ \_\"\\n\") ] . \\\r\\r
+ \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\\r
+ \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\\r
+ ) \\\r\\r
+ \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\\r
+ \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\\r
+ \n \"RouterOS-Scripts:\\n\" . \\\r\\r
+ \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\\r
+ \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\\r
+ tionFunctions ({})}\r\\r
+ \n\r\\r
+ \n:set GetRandom20CharAlNum do={\r\\r
+ \n :global EitherOr;\r\\r
+ \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\\r
+ FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\\r
+ \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\\r
+ \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\\r
+ \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\\r
+ \n\r\\r
+ \n:global checkRunJob;\r\\r
+ \n:set checkRunJob do={\r\\r
+ \n :local Script [ :tostr \$1 ];\r\\r
+ \n :global ScriptLock; \r\\r
+ \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\\r
+ \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\\r
+ :set Job [ /system/script/job/get \$Job ];\r\\r
+ \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\\r
+ stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\\r
+ \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\\r
+ lse; \r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set InspectVar do={\r\\r
+ \n :global InspectVarRet;\r\\r
+ \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set CommitBrief do={\r\\r
+ \n :global CommitId;\r\\r
+ \n :global CommitInfo;\r\\r
+ \n :if (\$CommitId = \"unknown\") do={\r\\r
+ \n :return \"unknown\";\r\\r
+ \n }\r\\r
+ \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set InspectVarRet do={\r\\r
+ \n :local Input \$1;\r\\r
+ \n :local Level (0 + [ :tonum \$2 ]);\r\\r
+ \n :global CharacterReplace;\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :global InspectVarRet;\r\\r
+ \n :local IndentReturn do={\r\\r
+ \n :local Prefix [ :tostr \$1 ];\r\\r
+ \n :local Value [ :tostr \$2 ];\r\\r
+ \n :local Level [ :tonum \$3 ];\r\\r
+ \n :global CharacterMultiply;\r\\r
+ \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\\r
+ fix . \"-> \" . \$Value);\r\\r
+ \n }\r\\r
+ \n :local TypeOf [ :typeof \$Input ];\r\\r
+ \n :local Len [ :len \$Input ];\r\\r
+ \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\\r
+ \n :if (\$TypeOf = \"array\") do={\r\\r
+ \n :foreach Key,Value in=\$Input do={\r\\r
+ \n :set \$Return (\$Return . \"\\n\" . \\\r\\r
+ \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\\r
+ \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\\r
+ \n }\r\\r
+ \n } else={\r\\r
+ \n :if (\$TypeOf = \"str\") do={\r\\r
+ \n :set \$Return (\$Return . \"\\n\" . \\\r\\r
+ \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\\r
+ \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\\r
+ \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\\r
+ \n }\r\\r
+ \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\\r
+ \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if (\$TypeOf != \"nothing\") do={\r\\r
+ \n :set \$Return (\$Return . \"\\n\" . \\\r\\r
+ \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\\r
+ \_\\\r\\r
+ \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set GetPubIp do={\r\\r
+ \n :global DetectIpAddrDefault;\r\\r
+ \n :global DetectIpAddrFallback;\r\\r
+ \n\r\\r
+ \n :local PubIpAddr false;\r\\r
+ \n :local Url \$DetectIpAddrDefault;\r\\r
+ \n :local JobName [ :jobname ];\r\\r
+ \n\r\\r
+ \n :do {\r\\r
+ \n :log debug (\$0 . \" Trying to detect public IP using default serv\\r
+ ice: \" . \$Url . \"...\");\r\\r
+ \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\\r
+ \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\\r
+ )} \\\r\\r
+ \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \\r
+ detect public IP using default service: \" . \$Url . \".\")}\r\\r
+ \n } on-error={\r\\r
+ \n :log error (\$0 . \" Failed to detect public IP using default serv\\r
+ ice: \" . \$Url . \".\");\r\\r
+ \n :set Url \$DetectIpAddrFallBack;\r\\r
+ \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\\r
+ vice: \" . \$Url . \"...\");\r\\r
+ \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\\r
+ \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\\r
+ )} \\\r\\r
+ \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\\r
+ \_detect public IP using fallback service: \" . \$Url . \".\")}\r\\r
+ \n };\r\\r
+ \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\\r
+ \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\\r
+ {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\\r
+ \n :return \$PubIpAddr;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set FormatLine do={\r\\r
+ \n :local Key [ :tostr \$1 ];\r\\r
+ \n :local Value [ :tostr \$2 ];\r\\r
+ \n :local Indent [ :tonum \$3 ];\r\\r
+ \n :local Spaces;\r\\r
+ \n :local Return \"\";\r\\r
+ \n :global CharacterMultiply;\r\\r
+ \n :global EitherOr;\r\\r
+ \n :set Indent [ \$EitherOr \$Indent 16 ];\r\\r
+ \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\\r
+ \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\\r
+ \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\\r
+ n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\\r
+ \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \\r
+ \$Return ]) ] . \$Value)}\r\\r
+ \n :return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set ParseCustom do={\r\\r
+ \n :local Str [ :tostr \$1 ];\r\\r
+ \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\\r
+ \n :local End [ :tostr \$3 ];\r\\r
+ \n :local Num [ :tonum \$4 ];\r\\r
+ \n :local Return;\r\\r
+ \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\\r
+ \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\\r
+ \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\\r
+ lse={\r\\r
+ \n :set End [:find \$rest \$End];\r\\r
+ \n :set Return [:pick \$rest 0 \$End];\r\\r
+ \n }\r\\r
+ \n:return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set LogPrint do={\r\\r
+ \n :local Severity [ :tostr \$1 ];\r\\r
+ \n :local Name [ :tostr \$2 ];\r\\r
+ \n :local Message [ :tostr \$3 ];\r\\r
+ \n :global PrintDebug;\r\\r
+ \n :global PrintDebugOverride;\r\\r
+ \n :global EitherOr;\r\\r
+ \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \\r
+ ];\r\\r
+ \n :local PrintSeverity do={\r\\r
+ \n :global TerminalColorOutput;\r\\r
+ \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\\r
+ \n :local Color { debug=96; info=97; warning=93; error=91 };\r\\r
+ \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\\r
+ \n}\r\\r
+ \n :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\\r
+ \r\\r
+ \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\\r
+ \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\\r
+ \n :if (\$Severity = \"error\") do={:log error \$Log}\r\\r
+ \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\\r
+ \n } else={:log warning \$Log; :set Severity \"warning\"}\r\\r
+ \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\\r
+ erity \$Severity ] . \": \" . \$Message)}\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set CertificateAvailable do={\r\\r
+ \n :local CommonName [ :tostr \$1 ];\r\\r
+ \n :local UseFor [ :tostr \$2 ];\r\\r
+ \n\r\\r
+ \n :global CertificateDownload;\r\\r
+ \n :global ParseKeyValueStore;\r\\r
+ \n\r\\r
+ \n :if ([ :len \$UseFor ] = 0) do={\r\\r
+ \n :log warning (\$0 . \"The intended use is undefined!\");\r\\r
+ \n :set UseFor \"undefined\";\r\\r
+ \n }\r\\r
+ \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\\r
+ \n [ /certificate/settings/get crl-download ] = true && \\\r\\r
+ \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\\r
+ \n :log warning (\$0 . \"This system has low free flash space but \" . \\r
+ \\\r\\r
+ \n \"is configured to download certificate CRLs to system!\");\r\\r
+ \n }\r\\r
+ \n :if ([ :len \$CommonName ] = 0) do={\r\\r
+ \n :log warning (\$0 . \"No CommonName given!\");\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :local CertSettings [ /certificate/settings/get ];\r\\r
+ \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\\r
+ \r\\r
+ \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\\r
+ \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\\r
+ \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\\r
+ \_] ] > 0) do={\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\\r
+ ) do={\r\\r
+ \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \\r
+ \"' not available.\");\r\\r
+ \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\\r
+ ) do={\r\\r
+ \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\\r
+ \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\\r
+ e ] ];\r\\r
+ \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\\r
+ ertVal->\"skid\")) do={\r\\r
+ \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\\r
+ \_= 0) do={\r\\r
+ \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\\r
+ >\"CN\");\r\\r
+ \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \\r
+ is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\\r
+ \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\\r
+ \") ] ];\r\\r
+ \n }\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set CertificateDownload do={\r\\r
+ \n :local CommonName [ :tostr \$1 ];\r\\r
+ \n :global ScriptUpdatesBaseUrl;\r\\r
+ \n :global ScriptUpdatesUrlSuffix;\r\\r
+ \n :global CertificateNameByCN;\r\\r
+ \n :global CleanName;\r\\r
+ \n :global FetchUserAgentStr;\r\\r
+ \n :global RmFile;\r\\r
+ \n :global WaitForFile;\r\\r
+ \n\r\\r
+ \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\\r
+ \r\\r
+ \n \"CommonName '\" . \$CommonName . \"'.\");\r\\r
+ \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\\r
+ \n :do {\r\\r
+ \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\\r
+ -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\\r
+ \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\\r
+ sUrlSuffix) \\\r\\r
+ \n dst-path=\$FileName as-value;\r\\r
+ \n \$WaitForFile \$FileName;\r\\r
+ \n } on-error={\r\\r
+ \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\\r
+ e '\" . \$CommonName . \\\r\\r
+ \n \"' from repository! Trying fallback to mkcert.org...\");\r\\r
+ \n :do {\r\\r
+ \n :local CertSettings [ /certificate/settings/get ];\r\\r
+ \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\\r
+ \_] ] = 0 && \\\r\\r
+ \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \\r
+ || \\\r\\r
+ \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\r
+ \\\r\\r
+ \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\\r
+ \r\\r
+ \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\\r
+ \_Root X1\" ] ] > 0)) do={\r\\r
+ \n :log error (\$0 . \" Required certificate is not available.\");\\r
+ \r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\\r
+ er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\\r
+ \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\\r
+ n ({ \$CommonName }) ] \\\r\\r
+ \n dst-path=\$FileName as-value;\r\\r
+ \n \$WaitForFile \$FileName;\r\\r
+ \n :if ([ /file/get \$FileName size ] = 0) do={\r\\r
+ \n \$RmFile \$FileName;\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n } on-error={\r\\r
+ \n :log error (\$0 . \" Failed downloading certificate with CommonNam\\r
+ e '\" . \$CommonName . \"'!\");\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\\r
+ \n :delay 1s;\r\\r
+ \n \$RmFile \$FileName;\r\\r
+ \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\\r
+ ) do={\r\\r
+ \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\\r
+ +\\\$\") ];\r\\r
+ \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\\r
+ e . \"' still unavailable!\");\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \\r
+ \"_[0-9]+\\\$\") ] do={\r\\r
+ \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\\r
+ \n }\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set CertificateNameByCN do={\r\\r
+ \n :local Match [ :tostr \$1 ];\r\\r
+ \n :global CleanName;\r\\r
+ \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\\r
+ rint=\$Match or name=\$Match) ]->0);\r\\r
+ \n :if ([ :len \$Cert ] = 0) do={\r\\r
+ \n :log warning (\$0 .\" No matching certificate found.\");\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :local CommonName [ /certificate/get \$Cert common-name ];\r\\r
+ \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set CharacterMultiply do={\r\\r
+ \n :local Str [ :tostr \$1 ];\r\\r
+ \n :local Num [ :tonum \$2 ];\r\\r
+ \n :if (\$Num = 0) do={:return \"\"}\r\\r
+ \n :local Return \"\";\r\\r
+ \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\\r
+ \n :return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set FileExists do={\r\\r
+ \n :local FileName [ :tostr \$1 ];\r\\r
+ \n :local Type [ :tostr \$2 ];\r\\r
+ \n :global FileGet;\r\\r
+ \n :local FileVal [ \$FileGet \$FileName ];\r\\r
+ \n :if (\$FileVal = false) do={ :return false; }\r\\r
+ \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\\r
+ \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\\r
+ \_true; }\r\\r
+ \n :return false;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set Grep do={\r\\r
+ \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\\r
+ \n :local Pattern [ :tostr \$2 ];\r\\r
+ \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\\r
+ }\r\\r
+ \n :do {\r\\r
+ \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\\r
+ \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \\r
+ \$Line}\r\\r
+ \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\\r
+ Input ] ];\r\\r
+ \n } while=([ :len \$Input ] > 0);\r\\r
+ \n :return [];\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set HumanReadableNum do={\r\\r
+ \n :local Input [ :tonum \$1 ];\r\\r
+ \n :local Base [ :tonum \$2 ];\r\\r
+ \n :global EitherOr;\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :local Prefix \"kMGTPE\";\r\\r
+ \n :local Pow 1;\r\\r
+ \n :set Base [ \$EitherOr \$Base 1024 ];\r\\r
+ \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\\r
+ \n :if (\$Input < \$Base) do={:return \$Input}\r\\r
+ \n :for I from=0 to=[ :len \$Prefix ] do={\r\\r
+ \n :set Pow (\$Pow * \$Base);\r\\r
+ \n :if (\$Input / \$Base < \$Pow) do={\r\\r
+ \n :set Prefix [ :pick \$Prefix \$I ];\r\\r
+ \n :local Tmp1 (\$Input * 100 / \$Pow);\r\\r
+ \n :local Tmp2 (\$Tmp1 / 100);\r\\r
+ \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\\r
+ \n :return (\$Tmp2 . \".\" . \\\r\\r
+ \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\\r
+ 2 ] + 1) ] . \\\r\\r
+ \n \$Prefix . \$Bin);\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set CleanFilePath do={\r\\r
+ \n :local Path [ :tostr \$1 ];\r\\r
+ \n :global CharacterReplace;\r\\r
+ \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \\r
+ \"//\" \"/\" ]; }\r\\r
+ \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\\r
+ n \$Path ] ]; }\r\\r
+ \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \\r
+ :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\\r
+ \n :return \$Path;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set CleanName do={\r\\r
+ \n :local Input [ :tostr \$1 ];\r\\r
+ \n :local Return \"\";\r\\r
+ \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\\r
+ \n :local Char [ :pick \$Input \$I ];\r\\r
+ \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\\r
+ stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\\r
+ \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\\r
+ \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\\r
+ ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\\r
+ \n };\r\\r
+ \n :set Return (\$Return . \$Char)};\r\\r
+ \n :return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set RandomDelay do={\r\\r
+ \n :local Time [ :tonum \$1 ];\r\\r
+ \n :local Unit [ :tostr \$2 ];\r\\r
+ \n :global EitherOr;\r\\r
+ \n :global GetRandomNumber;\r\\r
+ \n :global MAX;\r\\r
+ \n :if (\$Time = 0) do={:return false}\r\\r
+ \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \\r
+ [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set EscapeForRegEx do={\r\\r
+ \n :local Input [ :tostr \$1 ];\r\\r
+ \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\\r
+ \n :local Return \"\";\r\\r
+ \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\\r
+ \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\\r
+ \n :local Char [ :pick \$Input \$I ];\r\\r
+ \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\\r
+ \n :set Return (\$Return . \$Char);\r\\r
+ \n }\r\\r
+ \n :return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set ExitError do={\r\\r
+ \n :local ExitOK [ :tostr \$1 ];\r\\r
+ \n :local Name [ :tostr \$2 ];\r\\r
+ \n :local Error [ :tostr \$3 ];\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :if (\$ExitOK = \"false\") do={\r\\r
+ \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \\r
+ \\\r\\r
+ \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\\r
+ ror\" . \\\r\\r
+ \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \\r
+ \$Error) \".\" ]);\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set ExitOnError do={\r\\r
+ \n :local Name [ :tostr \$1 ];\r\\r
+ \n :local Error [ :tostr \$2 ];\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\r
+ \\\$\") \\\r\\r
+ \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\\r
+ r\" . \\\r\\r
+ \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\\r
+ rror) \".\" ]);\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set MiniDateTimeStamp do={\r\\r
+ \n :local mikro [ :tobool \$1 ];\r\\r
+ \n /system/clock;\r\\r
+ \n :local vdate [get date];\r\\r
+ \n :local vtime [get time];\r\\r
+ \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\\r
+ \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\\r
+ \n :local M [:tonum \$MM];\r\\r
+ \n :if (\$vdate ~ \".../../....\") do={\r\\r
+ \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\\r
+ \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\\r
+ PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\\r
+ \n :if (\$M>12) do={:set M (\$M - 12)}\r\\r
+ \n :set MM [:pick (100 + \$M) 1 3];\r\\r
+ \n }\r\\r
+ \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\\r
+ \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\\r
+ \n :local HH [:pick \$vtime 0 2];\r\\r
+ \n :local mm [:pick \$vtime 3 5];\r\\r
+ \n :local ss [:pick \$vtime 6 8];\r\\r
+ \n :local Return;\r\\r
+ \n :if (\$mikro = true) do={\r\\r
+ \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\\r
+ \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\\r
+ \n } else={\r\\r
+ \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\\r
+ \r\\r
+ \n }\r\\r
+ \n :return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set WaitForFile do={\r\\r
+ \n :local FileName [ :tostr \$1 ];\r\\r
+ \n :local WaitTime [ :totime \$2 ];\r\\r
+ \n :global CleanFilePath;\r\\r
+ \n :global EitherOr;\r\\r
+ \n :global MAX;\r\\r
+ \n :set FileName [ \$CleanFilePath \$FileName ];\r\\r
+ \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\\r
+ \n :do {\r\\r
+ \n :retry {\r\\r
+ \n /file/get \$FileName;\r\\r
+ \n :return true;\r\\r
+ \n } delay=\$Delay max=10;\r\\r
+ \n } on-error={ }\r\\r
+ \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\\r
+ \n :do {\r\\r
+ \n /file/get \$FileName;\r\\r
+ \n :return true;\r\\r
+ \n } on-error={ }\r\\r
+ \n :delay \$Delay;\r\\r
+ \n :set Delay (\$Delay * 3 / 2);\r\\r
+ \n }\r\\r
+ \n :return false;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set FileGet do={\r\\r
+ \n :local FileName [ :tostr \$1 ];\r\\r
+ \n :global WaitForFile;\r\\r
+ \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :local FileVal false;\r\\r
+ \n :do {\r\\r
+ \n :set FileVal [ /file/get \$FileName ];\r\\r
+ \n } on-error={ }\r\\r
+ \n :return \$FileVal;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set RmDir do={\r\\r
+ \n :local DirName [ :tostr \$1 ];\r\\r
+ \n :global FileGet;\r\\r
+ \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\\r
+ \n :local DirVal [ \$FileGet \$DirName ];\r\\r
+ \n :if (\$DirVal = false) do={\r\\r
+ \n :log debug (\$0 . \" ... which does not exist.\");\r\\r
+ \n :return true;\r\\r
+ \n };\r\\r
+ \n :if (\$DirVal->\"type\" != \"directory\") do={\r\\r
+ \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\\r
+ ory.\");\r\\r
+ \n :return false;\r\\r
+ \n };\r\\r
+ \n :onerror Err {\r\\r
+ \n /file/remove \$DirName;\r\\r
+ \n } do={\r\\r
+ \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\\r
+ : \" . \$Err);\r\\r
+ \n :return false;\r\\r
+ \n };\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set RmFile do={\r\\r
+ \n :local FileName [ :tostr \$1 ];\r\\r
+ \n :global FileGet;\r\\r
+ \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\\r
+ \n :local FileVal [ \$FileGet \$FileName ];\r\\r
+ \n :if (\$FileVal = false) do={\r\\r
+ \n :log debug (\$0 . \" ... which does not exist.\");\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\\r
+ sk\") do={\r\\r
+ \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\\r
+ \r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :onerror Err {\r\\r
+ \n /file/remove \$FileName;\r\\r
+ \n } do={\r\\r
+ \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\\r
+ \_. \$Err); :return false;\r\\r
+ \n }\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set MkDir do={\r\\r
+ \n :local Path [ :tostr \$1 ];\r\\r
+ \n :global CleanFilePath;\r\\r
+ \n :global FileGet;\r\\r
+ \n :global RmDir;\r\\r
+ \n :global WaitForFile;\r\\r
+ \n\r\\r
+ \n :local MkTmpfs do={\r\\r
+ \n :global WaitForFile;\r\\r
+ \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\\r
+ \n :if ([ :len \$TmpFs ] = 1) do={\r\\r
+ \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\\r
+ \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\\r
+ \n /disk/enable \$TmpFs;\r\\r
+ \n }\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\\r
+ \n \$RmDir \"tmpfs\";\r\\r
+ \n :onerror Err {\r\\r
+ \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\\r
+ /get total-memory ] / 3);\r\\r
+ \n \$WaitForFile \"tmpfs\";\r\\r
+ \n } do={\r\\r
+ \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\\r
+ Err);\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :set Path [ \$CleanFilePath \$Path ];\r\\r
+ \n :if (\$Path = \"\") do={\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\\r
+ \n :local PathVal [ \$FileGet \$Path ];\r\\r
+ \n :if (\$PathVal->\"type\" = \"directory\") do={\r\\r
+ \n :log debug (\$0 . \" ... which already exists.\");\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\\r
+ \n :if ([ \$MkTmpfs ] = false) do={\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :onerror Err {\r\\r
+ \n /file/add type=\"directory\" name=\$Path;\r\\r
+ \n \$WaitForFile \$Path;\r\\r
+ \n } do={\r\\r
+ \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \\r
+ \" . \$Err);\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\\r
+ \n :return \$2;\r\\r
+ \n}\r\\r
+ \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\\r
+ \n :return \$2;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set CharacterMultiply do={\r\\r
+ \n :local Str [ :tostr \$1 ];\r\\r
+ \n :local Num [ :tonum \$2 ];\r\\r
+ \n :if (\$Num = 0) do={:return \"\"}\r\\r
+ \n :local Return \"\";\r\\r
+ \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\\r
+ \n :return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set CharacterReplace do={\r\\r
+ \n :local String [ :tostr \$1 ];\r\\r
+ \n :local ReplaceFrom [ :tostr \$2 ];\r\\r
+ \n :local ReplaceWith [ :tostr \$3 ];\r\\r
+ \n :local Return \"\";\r\\r
+ \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\\r
+ \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\\r
+ \r\\r
+ \n :local Pos [ :find \$String \$ReplaceFrom ];\r\\r
+ \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\\r
+ \r\\r
+ \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\\r
+ \_\$String ] ];\r\\r
+ \n }\r\\r
+ \n :return (\$Return . \$String);\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set IfThenElse do={\r\\r
+ \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \\r
+ \$2};\r\\r
+ \n :return \$3;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set EitherOr do={\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \\r
+ \$1 \$2 ]}\r\\r
+ \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\\r
+ \_\$1 \$2 ]}\r\\r
+ \n# this works for boolean values, literal ones with parentheses\r\\r
+ \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set ParseKeyValueStore do={\r\\r
+ \n :local Source \$1;\r\\r
+ \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\\r
+ \n :do {\r\\r
+ \n :return [ :deserialize from=json \$Source ];\r\\r
+ \n } on-error={ }\r\\r
+ \n } \r\\r
+ \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\\r
+ }\r\\r
+ \n :local Result ({});\r\\r
+ \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\\r
+ \n :if ([ :find \$KeyValue \"=\" ]) do={\r\\r
+ \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\\r
+ \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\\r
+ \_:len \$KeyValue ] ];\r\\r
+ \n :if (\$Value=\"true\") do={:set Value true}\r\\r
+ \n :if (\$Value=\"false\") do={:set Value false}\r\\r
+ \n :set (\$Result->\$Key) \$Value;\r\\r
+ \n } else={:set (\$Result->\$KeyValue) true}\r\\r
+ \n }\r\\r
+ \n :return \$Result;\r\\r
+ \n}\r\\r
+ \n:set RequiredRouterOS do={\r\\r
+ \n :local Caller [ :tostr \$1 ];\r\\r
+ \n :local Required [ :tostr \$2 ];\r\\r
+ \n :local Warn [ :tostr \$3 ];\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :global VersionToNum;\r\\r
+ \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\\r
+ \\\$\")) do={\r\\r
+ \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\\r
+ e/update/get installed-version ] ]) do={\r\\r
+ \n :if (\$Warn = \"true\") do={\r\\r
+ \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \\r
+ 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\\r
+ \n \" '\" . \$Caller . \"' (at least specific functionality) requir\\r
+ es RouterOS \" . \$Required . \". Please update!\");\r\\r
+ \n }\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set ValidateSyntax do={\r\\r
+ \n :local Code [ :tostr \$1 ];\r\\r
+ \n :global LogPrint;\r\\r
+ \n :onerror Err {\r\\r
+ \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\\r
+ \n } do={\r\\r
+ \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set VersionToNum do={\r\\r
+ \n :local Input [ :tostr \$1 ];\r\\r
+ \n :local Multi 0x1000000;\r\\r
+ \n :local Return 0;\r\\r
+ \n :global CharacterReplace;\r\\r
+ \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\\r
+ \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\\r
+ \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\\r
+ \r\\r
+ \n }\r\\r
+ \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\\r
+ \n :local Num [ :tonum \$Value ];\r\\r
+ \n :if (\$Multi = 0x100) do={\r\\r
+ \n :if ([ :typeof \$Num ] = \"num\") do={\r\\r
+ \n :set Return (\$Return + 0xff00);\r\\r
+ \n :set Multi (\$Multi / 0x100);\r\\r
+ \n } else={\r\\r
+ \n :if (\$Value = \"zero\") do={ }\r\\r
+ \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \\r
+ }\r\\r
+ \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\\r
+ \r\\r
+ \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\\r
+ lue * \$Multi)); }\r\\r
+ \n :set Multi (\$Multi / 0x100);\r\\r
+ \n }\r\\r
+ \n :return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set ScriptLock do={\r\\r
+ \n :local Script [ :tostr \$1 ];\r\\r
+ \n :local WaitMax [ :totime \$2 ];\r\\r
+ \n :global GetRandom20CharAlNum;\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :global ScriptLockOrder;\r\\r
+ \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\\r
+ \n :set ScriptLockOrder ({});\r\\r
+ \n }\r\\r
+ \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\\r
+ \n :set (\$ScriptLockOrder->\$Script) ({});\r\\r
+ \n }\r\\r
+ \n :local JobCount do={\r\\r
+ \n :local Script [ :tostr \$1 ];\r\\r
+ \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\\r
+ \r\\r
+ \n }\r\\r
+ \n :local TicketCount do={\r\\r
+ \n :local Script [ :tostr \$1 ];\r\\r
+ \n :global ScriptLockOrder;\r\\r
+ \n :local Count 0;\r\\r
+ \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\\r
+ \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \\r
+ + 1)}\r\\r
+ \n }\r\\r
+ \n :return \$Count;\r\\r
+ \n }\r\\r
+ \n :local IsFirstTicket do={\r\\r
+ \n :local Script [ :tostr \$1 ];\r\\r
+ \n :local Check [ :tostr \$2 ];\r\\r
+ \n :global ScriptLockOrder;\r\\r
+ \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\\r
+ \n :if (\$Ticket = \$Check) do={:return true}\r\\r
+ \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\\r
+ o={:return false}\r\\r
+ \n }\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :local AddTicket do={\r\\r
+ \n :local Script [ :tostr \$1 ];\r\\r
+ \n :local Add [ :tostr \$2 ];\r\\r
+ \n :global ScriptLockOrder;\r\\r
+ \n :while (true) do={\r\\r
+ \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\\r
+ \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\\r
+ \n :delay 10ms;\r\\r
+ \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\\r
+ e}\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :local RemoveTicket do={\r\\r
+ \n :local Script [ :tostr \$1 ];\r\\r
+ \n :local Remove [ :tostr \$2 ];\r\\r
+ \n :global ScriptLockOrder;\r\\r
+ \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\\r
+ \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\\r
+ \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\\r
+ \n :delay 10ms;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :local CleanupTickets do={\r\\r
+ \n :local Script [ :tostr \$1 ];\r\\r
+ \n :global ScriptLockOrder;\r\\r
+ \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\\r
+ \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\\r
+ \n }\r\\r
+ \n :set (\$ScriptLockOrder->\$Script) ({});\r\\r
+ \n }\r\\r
+ \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\\r
+ \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\\r
+ \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\\r
+ ist!\");\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n :if ([ \$JobCount \$Script ] = 0) do={\r\\r
+ \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\\r
+ );\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\\r
+ \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\\r
+ t . \"', resetting!\");\r\\r
+ \n :set (\$ScriptLockOrder->\$Script) ({});\r\\r
+ \n /system/script/job/remove [ find where script=\$Script ];\r\\r
+ \n }\r\\r
+ \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\\r
+ \n \$AddTicket \$Script \$MyTicket;\r\\r
+ \n :local WaitInterval (\$WaitMax / 20);\r\\r
+ \n :local WaitTime \$WaitMax;\r\\r
+ \n :while (\$WaitTime > 0 && \\\r\\r
+ \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\\r
+ \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\\r
+ \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\\r
+ \n :delay \$WaitInterval;\r\\r
+ \n }\r\\r
+ \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\\r
+ \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\\r
+ \n \$RemoveTicket \$Script \$MyTicket;\r\\r
+ \n \$CleanupTickets \$Script;\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n \$RemoveTicket \$Script \$MyTicket;\r\\r
+ \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \\r
+ once\" . \\\r\\r
+ \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\\r
+ \_lock\" \"\" ] . \"...\");\r\\r
+ \n :return false;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set SendNotification do={ :onerror Err {\r\\r
+ \n :global SendNotification2;\r\\r
+ \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\\r
+ \_silent=\$4 });\r\\r
+ \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set SendNotification2 do={\r\\r
+ \n :local Notification \$1;\r\\r
+ \n :global NotificationFunctions;\r\\r
+ \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\\r
+ \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\\r
+ ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set SymbolByUnicodeName do={\r\\r
+ \n :local Name [ :tostr \$1 ];\r\\r
+ \n :global EitherOr;\r\\r
+ \n :global SymbolsExtra;\r\\r
+ \n :local Symbols ({\r\\r
+ \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\\r
+ \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\\r
+ \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\\r
+ \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\\r
+ \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\\r
+ \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\\r
+ \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\\r
+ \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\\r
+ \n \"cloud\"=\"\\E2\\98\\81\";\r\\r
+ \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\\r
+ \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\\r
+ \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\\r
+ \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\\r
+ \n \"gear\"=\"\\E2\\9A\\99\";\r\\r
+ \n \"heart\"=\"\\E2\\99\\A5\";\r\\r
+ \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\\r
+ \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\\r
+ \n \"information\"=\"\\E2\\84\\B9\";\r\\r
+ \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\\r
+ \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\\r
+ \n \"link\"=\"\\F0\\9F\\94\\97\";\r\\r
+ \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\\r
+ \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\\r
+ \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\\r
+ \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\\r
+ \n \"scissors\"=\"\\E2\\9C\\82\";\r\\r
+ \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\\r
+ \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\\r
+ \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\\r
+ \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\\r
+ \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\\r
+ \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\\r
+ \n \"star\"=\"\\E2\\AD\\90\";\r\\r
+ \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\\r
+ \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\\r
+ \n }, \$SymbolsExtra);\r\\r
+ \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\\r
+ \n :local Special {\r\\r
+ \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\\r
+ \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\\r
+ \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\\r
+ \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\\r
+ \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\\r
+ \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\\r
+ '!\");\r\\r
+ \n :return \"\";\r\\r
+ \n }\r\\r
+ \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\\r
+ me) ] . \"\\EF\\B8\\8F\");\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set SymbolForNotification do={\r\\r
+ \n :global NotificationsWithSymbols;\r\\r
+ \n :global SymbolByUnicodeName;\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\\r
+ \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\\r
+ \n :local Return \"\";\r\\r
+ \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\\r
+ mbolByUnicodeName \$Symbol ])}\r\\r
+ \n :return (\$Return . \" \");\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\\r
+ \n:set UrlEncode do={\r\\r
+ \n :local Input [ :tostr \$1 ];\r\\r
+ \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\\r
+ \n :local Return \"\";\r\\r
+ \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\\r
+ \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\\r
+ %24\"; \"%25\"; \"%26\"; \"%27\";\r\\r
+ \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \\r
+ \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\\r
+ \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \\r
+ \"%7C\"; \"%7D\"; \"%7E\" };\r\\r
+ \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\\r
+ \n :local Char [ :pick \$Input \$I ];\r\\r
+ \n :local Replace [ :find \$Chars \$Char ];\r\\r
+ \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\\r
+ ce)}\r\\r
+ \n :set Return (\$Return . \$Char);\r\\r
+ \n }\r\\r
+ \n :return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set IsDNSResolving do={\r\\r
+ \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set IsFullyConnected do={\r\\r
+ \n :global IsDNSResolving;\r\\r
+ \n :global IsTimeSync;\r\\r
+ \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\\r
+ \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set IsTimeSync do={\r\\r
+ \n :global IsTimeSyncCached;\r\\r
+ \n :global IsTimeSyncResetNtp;\r\\r
+ \n :if (\$IsTimeSyncCached = true) do={:return true}\r\\r
+ \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\\r
+ \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\\r
+ \n :set IsTimeSyncCached true;\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :local Uptime [ /system/resource/get uptime ];\r\\r
+ \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\\r
+ \n :set IsTimeSyncResetNtp \$Uptime;\r\\r
+ \n }\r\\r
+ \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\\r
+ \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\\r
+ ;\r\\r
+ \n :set IsTimeSyncResetNtp \$Uptime;\r\\r
+ \n /system/ntp/client/set enabled=no;\r\\r
+ \n :delay 20ms;\r\\r
+ \n /system/ntp/client/set enabled=yes;\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\\r
+ \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\\r
+ \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\\r
+ ee license and x86.\";\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :if ([ /ip/cloud/get update-time ] = true) do={\r\\r
+ \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\\r
+ \n :set IsTimeSyncCached true;\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :log debug \"\$0 No time source configured! Returning gracefully...\";\\r
+ \r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set FetchHugeFiles do={\r\\r
+ \n :local ScriptName [ :tostr \$1 ];\r\\r
+ \n :local Url [ :tostr \$2 ];\r\\r
+ \n :local CheckCert [ :tostr \$3 ];\r\\r
+ \n\r\\r
+ \n :global CleanName;\r\\r
+ \n :global FetchUserAgentStr;\r\\r
+ \n :global GetRandom20CharAlNum;\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :global LogPrint;\r\\r
+ \n :global MkDir;\r\\r
+ \n :global RmDir;\r\\r
+ \n :global RmFile;\r\\r
+ \n :global WaitForFile;\r\\r
+ \n\r\\r
+ \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\\r
+ ithout-crl\" ];\r\\r
+ \n\r\\r
+ \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\\r
+ \n :if ([ \$MkDir \$DirName ] = false) do={\r\\r
+ \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \\r
+ \$GetRandom20CharAlNum ]);\r\\r
+ \n :onerror Err {\r\\r
+ \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \\r
+ \\\r\\r
+ \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\\r
+ lue;\r\\r
+ \n } do={\r\\r
+ \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\\r
+ \n \$RmFile \$FileName;\r\\r
+ \n }\r\\r
+ \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\\r
+ \_. \$Err);\r\\r
+ \n \$RmDir \$DirName;\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\\r
+ \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\\r
+ \_not show up.\");\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :local FileSize [ /file/get \$FileName size ];\r\\r
+ \n :local Return \"\";\r\\r
+ \n :local VarSize 0;\r\\r
+ \n :while (\$VarSize != \$FileSize) do={\r\\r
+ \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\\r
+ 768 file=\$FileName as-value ]->\"data\"));\r\\r
+ \n :set FileSize [ /file/get \$FileName size ];\r\\r
+ \n :set VarSize [ :len \$Return ];\r\\r
+ \n :if (\$VarSize > \$FileSize) do={\r\\r
+ \n :delay 100ms;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n \$RmDir \$DirName;\r\\r
+ \n :return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set FetchUserAgentStr do={\r\\r
+ \n :local Caller [ :tostr \$1 ];\r\\r
+ \n :global GlobalScriptsUrl;\r\\r
+ \n :global CommitBrief;\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :local Resource [ /system/resource/get ];\r\\r
+ \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\\r
+ \_\$Resource->\"architecture-name\" . \\\r\\r
+ \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\\r
+ CommitBrief ] . \")\");\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set ScriptInstallUpdate do={ :onerror Err {\r\\r
+ \n :local Scripts [ :toarray \$1 ];\r\\r
+ \n :local NewComment [ :tostr \$2 ];\r\\r
+ \n :global InitSetup;\r\\r
+ \n\r\\r
+ \n :global CommitId;\r\\r
+ \n :global ScriptUpdatesCRLF;\r\\r
+ \n :global GlobalConfVersion;\r\\r
+ \n :global Identity;\r\\r
+ \n :global CertificateAvailable;\r\\r
+ \n :global CheckSumsVerify;\r\\r
+ \n :global GlobalScriptsUrl;\r\\r
+ \n :global SumsDirAndFileName;\r\\r
+ \n :global GlobalScriptsUrlSuffix;\r\\r
+ \n :global EitherOr;\r\\r
+ \n :global FetchUserAgentStr;\r\\r
+ \n :global Grep;\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :global LogPrint;\r\\r
+ \n :global ParseKeyValueStore;\r\\r
+ \n :global RequiredRouterOS;\r\\r
+ \n :global SendNotification2;\r\\r
+ \n :global SymbolForNotification;\r\\r
+ \n :global ValidateSyntax;\r\\r
+ \n :global CommentsInScripts;\r\\r
+ \n\r\\r
+ \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\\r
+ \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\\r
+ hout.\");\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :foreach Script in=\$Scripts do={\r\\r
+ \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\\r
+ \r\\r
+ \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\\r
+ \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \\r
+ Vados\\n\" comment=\$NewComment;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :local CommitIdBefore \$CommitId;\r\\r
+ \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\\r
+ \n :local ReloadGlobal false;\r\\r
+ \n :local DeviceMode [ /system/device-mode/get ];\r\\r
+ \n\r\\r
+ \n :if (\$CheckSumsVerify = true) do={\r\\r
+ \n :local CheckSums ({});\r\\r
+ \n :do {\r\\r
+ \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\\r
+ iptsUrlSuffix);\r\\r
+ \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\\r
+ \r\\r
+ \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\\r
+ ficate=yes-without-crl \\\r\\r
+ \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\\r
+ =user as-value ]->\"data\") ];\r\\r
+ \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\\r
+ s\" ] do={\r\\r
+ \n :local ScriptVal [ /system/script/get \$Script ];\r\\r
+ \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \\r
+ ];\r\\r
+ \n :local SourceNew;\r\\r
+ \n\r\\r
+ \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\\r
+ \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\\r
+ \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\\r
+ \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\\r
+ \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\\r
+ iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \\r
+ \"'!\");\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :do {\r\\r
+ \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\\r
+ \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\\r
+ e\" . \"', as requested.\");\r\\r
+ \n :error true;\r\\r
+ \n }\r\\r
+ \n :if (\$CheckSumsVerify = true) do={\r\\r
+ \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\\r
+ \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\\r
+ ptInfo->\"url-suffix\") ] = 0 && \\\r\\r
+ \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\\r
+ rce\") ] ] = \$CheckSum) do={\r\\r
+ \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\\r
+ >\"name\" . \"' matches, ignoring.\");\r\\r
+ \n :error true;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\\r
+ \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\\r
+ fetch\" ] = false) do={\r\\r
+ \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\\r
+ ng without.\");\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :onerror Err {\r\\r
+ \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\\r
+ lScriptsUrl ];\r\\r
+ \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\\r
+ lobalScriptsUrlSuffix ];\r\\r
+ \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\\r
+ Suffix);\r\\r
+ \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\\r
+ name\") . \"' from url: \" . \$Url);\r\\r
+ \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\\r
+ \r\\r
+ \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\\r
+ ut=user as-value ];\r\\r
+ \n :if (\$Result->\"status\" = \"finished\") do={\r\\r
+ \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\\r
+ \n } \r\\r
+ \n } do={\r\\r
+ \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\\r
+ al->\"name\" . \"': \" . \$Err);\r\\r
+ \n :if (\$Err != \"Fetch failed with status 404\") do={\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\\r
+ \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\\r
+ \?\");\r\\r
+ \n /system/script/remove \$Script;\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n :if (\$CheckSumsVerify = true) do={\r\\r
+ \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\\r
+ riptInfo->\"url-suffix\") ] = 0 && \\\r\\r
+ \n [ :len \$CheckSum ] = 0) do={\r\\r
+ \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\\r
+ pdates with 'ignore=true' in comment.\");\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :if ([ :len \$SourceNew ] = 0) do={\r\\r
+ \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\\r
+ >\"name\") . \"'.\");\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\\r
+ \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\\r
+ lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\\r
+ \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\\r
+ \$ScriptVal->\"source\")) do={\r\\r
+ \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \\r
+ . \"' source did not change. End of lines set to CRLF.\");\r\\r
+ \n if (\$ScriptUpdatesCRLF = false) do={\r\\r
+ \n :put [ :tolf \$SourceNew ];\r\\r
+ \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\\r
+ ) . \"' source update end of lines to LF.\");\r\\r
+ \n }\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\\r
+ \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\\r
+ l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\\r
+ );\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :if (\$CommentsInScripts = true) do={\r\\r
+ \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\\r
+ \_\") ];\r\\r
+ \n :if ([ :len \$CommentLine ] = 0) do={\r\\r
+ \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\\r
+ iptVal->\"name\") . \"' for comment in script body, is not found result Ig\\r
+ noring!\");\r\\r
+ \n :error false;\r\\r
+ \n } else={\r\\r
+ \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\\r
+ ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\\r
+ ] + 2) [ :len \$CommentLine] ]) do={\r\\r
+ \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\\r
+ \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\\r
+ ;\r\\r
+ \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\\r
+ ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\\r
+ \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\\r
+ omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\\r
+ ded!\");\r\\r
+ \n } else={\r\\r
+ \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\\r
+ al->\"name\") . \"' did not change.\");\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n } \r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\\r
+ \"\\23 requires RouterOS, \") ] ]->version);\r\\r
+ \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\\r
+ \_false ] = false) do={\r\\r
+ \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\\r
+ \") . \"' requires RouterOS \" . \\\r\\r
+ \n \$RequiredROS . \", which is not met by your installation. I\\r
+ gnoring!\");\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\\r
+ \\23 requires device-mode, \") ] ];\r\\r
+ \n :local MissingDM ({});\r\\r
+ \n :foreach Feature,Value in=\$RequiredDM do={\r\\r
+ \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\\r
+ ceMode->\$Feature) = false) do={\r\\r
+ \n :set MissingDM (\$MissingDM, \$Feature);\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if ([ :len \$MissingDM ] > 0) do={\r\\r
+ \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\\r
+ \") . \"' requires disabled \" . \\\r\\r
+ \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\\r
+ gnoring!\");\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\\r
+ \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\\r
+ ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n \r\\r
+ \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\\r
+ ript comment: \" . (\$ScriptVal->\"comment\"));\r\\r
+ \n\r\\r
+ \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\\r
+ Val->\"comment\") \\\r\\r
+ \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\\r
+ F \$SourceNew ] \$Script;\r\\r
+ \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\\r
+ \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\\r
+ \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\\r
+ o={\r\\r
+ \n :set ReloadGlobal true;\r\\r
+ \n }\r\\r
+ \n } on-error={ }\r\\r
+ \n }\r\\r
+ \n :if (\$ReloadGlobal = true) do={\r\\r
+ \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\\r
+ \");\r\\r
+ \n :onerror Err {\r\\r
+ \n :global InitSetup (a);\r\\r
+ \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\\r
+ \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\\r
+ ctions failed! \" . \$Err)}\r\\r
+ \n }\r\\r
+ \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\\r
+ \n \$LogPrint warning \$0 (\"The configuration version decreased from \\r
+ \" . \\\r\\r
+ \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\\r
+ \n \". Installed an older version\?\");\r\\r
+ \n }\r\\r
+ \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\\r
+ \n :global GlobalConfChanges;\r\\r
+ \n :global GlobalConfMigration;\r\\r
+ \n :local ChangeLogCode;\r\\r
+ \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\\r
+ \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\\r
+ \n :onerror Err {\r\\r
+ \n [ :parse \$ChangeLogCode ];\r\\r
+ \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \\r
+ . \$Err)}\r\\r
+ \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\\r
+ dation!\")}\r\\r
+ \n }\r\\r
+ \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\\r
+ \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\\r
+ \_do={\r\\r
+ \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\\r
+ \n :do {\r\\r
+ \n :if ([ :typeof \$Migration ] != \"str\") do={\r\\r
+ \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\\r
+ \_\" is not available.\");\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\\r
+ \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\\r
+ \_. \" failed syntax validation!\");\r\\r
+ \n :error false}\r\\r
+ \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \\r
+ . \": \" . \$Migration);\r\\r
+ \n :onerror Err {\r\\r
+ \n [ :parse \$Migration ];\r\\r
+ \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\\r
+ \_\$I . \" failed to run: \" . \$Err)}\r\\r
+ \n } on-error={ }\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :local NotificationMessage (\"The configuration version on \" . \$Id\\r
+ entity . \" increased \" . \\\r\\r
+ \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\\r
+ d modification. \" . \\\r\\r
+ \n \"Please review and update global-config-overlay, then re-run glo\\r
+ bal-config.\");\r\\r
+ \n \$LogPrint info \$0 (\$NotificationMessage);\r\\r
+ \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\\r
+ \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\\r
+ \");\r\\r
+ \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\\r
+ \_do={\r\\r
+ \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\\r
+ \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\\r
+ \r\\r
+ \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\\r
+ \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\\r
+ \n }\r\\r
+ \n } else={\r\\r
+ \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\\r
+ \_changes are not available.\");\r\\r
+ \n\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \\r
+ } else={ :global GlobalConfChanges (a); }\r\\r
+ \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\\r
+ on; } else={ :global GlobalConfMigration (a); }\r\\r
+ \n }\r\\r
+ \n} do={\r\\r
+ \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\\r
+ \n} }\r\\r
+ \n\r\\r
+ \n# load modules\r\\r
+ \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\\r
+ ns\\\\.d|mod)/.\" ] do={\r\\r
+ \n :local ScriptVal [ /system/script/get \$Script ];\r\\r
+ \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\\r
+ \n :onerror Err {\r\\r
+ \n /system/script/run \$Script;\r\\r
+ \n } do={\r\\r
+ \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\\r
+ ailed to run: \" . \$Err);\r\\r
+ \n }\r\\r
+ \n } else={\r\\r
+ \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\\r
+ led syntax validation, skipping.\");\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n# Add and fix global scheduler\r\\r
+ \n:put \"Add or/and fix Global scheduler...\";\r\\r
+ \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\\r
+ ; }\";\r\\r
+ \n:local Comment \"Every Day Set Global Environment Variables\";\r\\r
+ \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \\r
+ = 0) do={\r\\r
+ \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\\r
+ ent=\$OnEvent start-time=startup;\r\\r
+ \n}\r\\r
+ \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\\r
+ \_do={\r\\r
+ \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\\r
+ \n}\r\\r
+ \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\\r
+ ) do={\r\\r
+ \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\\r
+ \n}\r\\r
+ \n# Add Update Script scheduler\r\\r
+ \n:put \"Add or/and fix Update Script scheduler\";\r\\r
+ \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\\r
+ \r\\r
+ \n:set Comment \"Every Day Check For Update Scripts\";\r\\r
+ \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\\r
+ \" ] ] = 0) do={\r\\r
+ \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \\r
+ start-time=startup interval=1d on-event=\$OnEvent;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:onerror Err {\r\\r
+ \n :global GlobalConfReady;\r\\r
+ \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\\r
+ \_not ready.\"); }; } delay=100ms max=5;\r\\r
+ \n\r\\r
+ \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\\r
+ \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \\r
+ \") ] . \\\r\\r
+ \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\\r
+ \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\\r
+ \n # signal we are ready\r\\r
+ \n:set GlobalFuncReady true;\r\\r
+ \n:set ExitOK true;\r\\r
+ \n\r\\r
+ \n:log info (\$0 . \"Global configs ready!\");\r\\r
+ \n} do={\r\\r
+ \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\\r
+ \n}\r\\r
+ \n"\r
+add comment="awg3vds installer" dont-require-permissions=no name=\\r
+ AM-awg3vdsInstall owner=AM-awg3vdsInstall policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\\r
+ !rsc by Vados\r\\r
+ \n# RouterOS script: AM-awg3vdsInstall\r\\r
+ \n# Script comment: awg3vds installer\r\\r
+ \n#\r\\r
+ \n#\r\\r
+ \n# requires RouterOS, version=7.19\r\\r
+ \n# requires device-mode, fetch, scheduler\r\\r
+ \n# ============================================================\r\\r
+ \n# AWG Proxy -- MikroTik RouterOS (protocol: v3)\r\\r
+ \n# 2026-09-12 08:41:48\r\\r
+ \n# ============================================================\r\\r
+ \n# 0. Check prerequisites\r\\r
+ \n:if ([:len [/system/package/find where name=\"container\" disabled=no]] \\r
+ = 0) do={\r\\r
+ \n :put \"Container package is not installed or disabled. Install it and \\r
+ reboot.\"\r\\r
+ \n :error \"Usage: /system/device-mode/update container=yes\"\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n# Check storage device\r\\r
+ \n{\r\\r
+ \n :local targetDisk \"usb1\"\r\\r
+ \n :local diskFree 0\r\\r
+ \n :do { :set diskFree [/disk/get [find where mount-point=\$targetDisk] f\\r
+ ree] } on-error={}\r\\r
+ \n :if (\$diskFree = 0) do={\r\\r
+ \n :local baseDisk \$targetDisk\r\\r
+ \n :local dashPos [:find \$targetDisk \"-part\"]\r\\r
+ \n :if ([:typeof \$dashPos] != \"nil\") do={ :set baseDisk [:pick \$tar\\r
+ getDisk 0 \$dashPos] }\r\\r
+ \n :if ([:len [/disk/find where slot=\$baseDisk]] > 0) do={\r\\r
+ \n :put (\"Device \$baseDisk found but \$targetDisk is not available.\\r
+ \")\r\\r
+ \n :put \"Format \$baseDisk as ext4\? ALL DATA WILL BE ERASED!\"\r\\r
+ \n :put \"Press 'y' to confirm, any other key to cancel:\"\r\\r
+ \n :local key [/terminal/inkey timeout=30]\r\\r
+ \n :if (\$key = 121 || \$key = 89) do={\r\\r
+ \n :put \"Formatting \$baseDisk as ext4...\"\r\\r
+ \n /disk/format-drive \$baseDisk file-system=ext4 label=\$baseDisk\\r
+ \r\\r
+ \n :delay 3s\r\\r
+ \n :do { :set diskFree [/disk/get [find where mount-point=\$targetD\\r
+ isk] free] } on-error={}\r\\r
+ \n :if (\$diskFree = 0) do={\r\\r
+ \n :put (\"ERROR: \$targetDisk not found after formatting.\")\r\\r
+ \n :put \"Check mount point: /disk/print\"\r\\r
+ \n :error (\"Mount point \$targetDisk not found after formatting\\r
+ \")\r\\r
+ \n }\r\\r
+ \n :put (\"Formatted OK. Free: \" . (\$diskFree / 1048576) . \" MB\\r
+ \")\r\\r
+ \n } else={\r\\r
+ \n :error \"Formatting cancelled\"\r\\r
+ \n }\r\\r
+ \n } else={\r\\r
+ \n :put (\"ERROR: Storage device \$targetDisk not found.\")\r\\r
+ \n :put \"Check available disks: /disk/print\"\r\\r
+ \n :error (\"Storage not found: \" . \$targetDisk)\r\\r
+ \n }\r\\r
+ \n } else={\r\\r
+ \n :put (\"Storage OK: \$targetDisk (\" . (\$diskFree / 1048576) . \" M\\r
+ B free)\")\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n# 1. Uninstall and update scripts\r\\r
+ \n/system/script/add name=awg3vds-uninstall comment=awg3vds source={\r\\r
+ \n :put \"Uninstallimg AmneziaWG...\"\r\\r
+ \n :log info \"Uninstallimg AmneziaWG...\"\r\\r
+ \n :local prevDNS \"\"\r\\r
+ \n :do { :set prevDNS [/container/envs/get [find where list=\"awg3vds-env\\r
+ \" key=\"AWG_PREV_DNS\"] value] } on-error={}\r\\r
+ \n :local prevTmpdir \"\"\r\\r
+ \n :do { :set prevTmpdir [/container/envs/get [find where list=\"awg3vds-\\r
+ env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\r\\r
+ \n /ip/route/remove [find where comment=awg3vds-tunnel]\r\\r
+ \n /ip/route/remove [find where comment=awg3vds-dns]\r\\r
+ \n :do { /system/scheduler/remove [find where comment~\"awg3vds\"] } on-e\\r
+ rror={}\r\\r
+ \n :do { /system/script/remove [find where comment~\"awg3vds\" and name!=\\r
+ \"awg3vds-uninstall\"] } on-error={}\r\\r
+ \n /container/stop [find where interface=veth-awg3vds]\r\\r
+ \n :delay 7s\r\\r
+ \n /container/remove [find where interface=veth-awg3vds]\r\\r
+ \n /container/envs/remove [find where list=\"awg3vds-env\"]\r\\r
+ \n :if (\$prevDNS != \"\") do={\r\\r
+ \n :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\r\\r
+ \n :put (\"DNS restored to: \$prevDNS\")\r\\r
+ \n }\r\\r
+ \n /container/config set tmpdir=\$prevTmpdir\r\\r
+ \n :put (\"Container tmpdir restored to: \$prevTmpdir\")\r\\r
+ \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg3vds\"]\r\\r
+ \n /ip/firewall/nat/remove [find where src-address=\"172.19.14.100/30\"]\\r
+ \r\\r
+ \n /ip/address/remove [find where address=\"172.19.14.101/30\"]\r\\r
+ \n :do { /ipv6/firewall/nat/remove [find where comment=awg3vds-v6-nat] } \\r
+ on-error={}\r\\r
+ \n :do { /ipv6/firewall/nat/remove [find where comment=awg3vds-dstnat6] }\\r
+ \_on-error={}\r\\r
+ \n :do { /ipv6/firewall/filter/remove [find where comment=awg3vds-v6-out]\\r
+ \_} on-error={}\r\\r
+ \n :do { /ipv6/firewall/filter/remove [find where comment=awg3vds-awg-in6\\r
+ ] } on-error={}\r\\r
+ \n :do { /ipv6/nd/remove [find where interface=veth-awg3vds] } on-error={\\r
+ }\r\\r
+ \n :do { /ipv6/nd/prefix/remove [find where interface=veth-awg3vds] } on-\\r
+ error={}\r\\r
+ \n :do { /ipv6/address/remove [find where comment=awg3vds-v6] } on-error=\\r
+ {}\r\\r
+ \n /interface/veth/remove [find where name=\"veth-awg3vds\"]\r\\r
+ \n /interface/wireguard/peers/remove [find where interface=\"wg-awg3vds\"\\r
+ ]\r\\r
+ \n /ip/address/remove [find where interface=\"wg-awg3vds\"]\r\\r
+ \n /interface/wireguard/remove [find where name=\"wg-awg3vds\"]\r\\r
+ \n :do { /file/remove [find where name~\"awg3vds.+tar\"] } on-error={}\r\\r
+ \n :do { /file/remove [find where name=\"usb1/awg3vds\"] } on-error={}\r\\r
+ \n :do { /file/remove [find where name=\"usb1/ru_ranges_timeout.rsc\"] } \\r
+ on-error={}\r\\r
+ \n :do { /file/remove [find where name=\"usb1/ru_ranges.rsc\"] } on-error\\r
+ ={}\r\\r
+ \n :do { /file/remove [find where name~\"usb1/pull\"] } on-error={}\r\\r
+ \n :put \"Uninstall AmneziaWG Proxy complete!\"\r\\r
+ \n :log info \"Uninstall AmneziaWG Proxy complete!\"\r\\r
+ \n# /system/script/remove [find where name=awg3vds-uninstall]\r\\r
+ \n}\r\\r
+ \n/system/script/add name=awg3vds-update comment=awg3vds source={\r\\r
+ \n :local cids [/container/find where interface=veth-awg3vds and !stopped\\r
+ ]\r\\r
+ \n :if ([:len \$cids] = 0) do={ :set cids [/container/find where interfac\\r
+ e=veth-awg3vds and start-on-boot=yes] }\r\\r
+ \n :if ([:len \$cids] = 0) do={ :set cids [/container/find where interfac\\r
+ e=veth-awg3vds] }\r\\r
+ \n :if ([:len \$cids] = 0) do={\r\\r
+ \n :put \"Container awg3vds not found\"\r\\r
+ \n :log warning \"awg3vds-update: container not found\"\r\\r
+ \n } else={\r\\r
+ \n :local cid [:pick \$cids ([:len \$cids] - 1)]\r\\r
+ \n :local img [/container/get \$cid remote-image]\r\\r
+ \n :local ver [/system/resource/get version]\r\\r
+ \n :local dotPos [:find \$ver \".\"]\r\\r
+ \n :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\r\\r
+ \n :local endPos [:find \$rest \".\"]\r\\r
+ \n :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \"\\r
+ \_\"] }\r\\r
+ \n :local minor [:tonum [:pick \$rest 0 \$endPos]]\r\\r
+ \n :local wantRunning true\r\\r
+ \n :do { :if ([/container/get \$cid start-on-boot] != true) do={ :set w\\r
+ antRunning false } } on-error={}\r\\r
+ \n :local healthy true\r\\r
+ \n :if ([:len [/container/get \$cid image-id]] = 0) do={ :set healthy f\\r
+ alse }\r\\r
+ \n :if (\$wantRunning) do={\r\\r
+ \n :do { :if ([/container/get \$cid stopped] = true) do={ :set health\\r
+ y false } } on-error={}\r\\r
+ \n }\r\\r
+ \n :if (!\$healthy && \$wantRunning && [:len [/container/get \$cid imag\\r
+ e-id]] > 0) do={\r\\r
+ \n :put \"Container is down - trying to start it\"\r\\r
+ \n :do { /container/start \$cid } on-error={}\r\\r
+ \n :delay 8s\r\\r
+ \n :set healthy true\r\\r
+ \n :do { :if ([/container/get \$cid stopped] = true) do={ :set health\\r
+ y false } } on-error={}\r\\r
+ \n :if (\$healthy) do={\r\\r
+ \n :put \"Container is back up\"\r\\r
+ \n :log info \"awg3vds: container restarted by the update script\"\\r
+ \r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if (\$img = \"\" && \$minor >= 22 && !\$healthy) do={\r\\r
+ \n :local imgTag \"latest\"\r\\r
+ \n :local rbModel \"\"\r\\r
+ \n :do { :set rbModel [[:parse \":return [/system/routerboard/get mod\\r
+ el]\"]] } on-error={}\r\\r
+ \n :local bName [/system/resource/get board-name]\r\\r
+ \n :if (\$rbModel~\"E50UG\" || \$rbModel~\"E60iUGS\" || \$bName~\"E50\\r
+ UG\" || \$bName~\"E60iUGS\" || \$bName~\"^hEX\") do={\r\\r
+ \n :set imgTag \"latest-armv5\"\r\\r
+ \n }\r\\r
+ \n :set img (\"ghcr.io/timbrs/awg-proxy:\" . \$imgTag)\r\\r
+ \n :put (\"Container is down and was installed from a file - pointing\\r
+ \_it at \" . \$img)\r\\r
+ \n :log warning \"awg3vds-update: broken file install, switching to t\\r
+ he registry\"\r\\r
+ \n :do { /container/set \$cid remote-image=\$img } on-error={}\r\\r
+ \n }\r\\r
+ \n :if (\$img = \"\") do={\r\\r
+ \n :put \"Installed from a local image file - /container/repull only \\r
+ updates registry installs.\"\r\\r
+ \n :put \"Reinstall with the configurator on RouterOS 7.22+ to switch\\r
+ \_to one-command updates.\"\r\\r
+ \n } else={\r\\r
+ \n :if (\$minor < 22) do={\r\\r
+ \n :put (\"/container/repull needs RouterOS 7.22+, this router runs\\r
+ \_\" . \$ver)\r\\r
+ \n :if (!\$healthy) do={ :log error (\"awg3vds-update: container is\\r
+ \_down, and \" . \$ver . \" has no /container/repull\") }\r\\r
+ \n } else={\r\\r
+ \n :local rootDir [/container/get \$cid root-dir]\r\\r
+ \n :if ([:pick \$rootDir 0 1] = \"/\") do={ :set rootDir [:pick \$r\\r
+ ootDir 1 [:len \$rootDir]] }\r\\r
+ \n :local rootDirOrig \$rootDir\r\\r
+ \n :local slashPos [:find \$rootDir \"/\"]\r\\r
+ \n :local disk \$rootDir\r\\r
+ \n :if ([:typeof \$slashPos] != \"nil\") do={ :set disk [:pick \$ro\\r
+ otDir 0 \$slashPos] }\r\\r
+ \n :local verPath \"awg-update-check.json\"\r\\r
+ \n :if (\$disk != \"disk1\") do={\r\\r
+ \n :do { /file/make-directory (\$disk . \"/pull\") } on-error={}\\r
+ \r\\r
+ \n /container/config set tmpdir=(\$disk . \"/pull\")\r\\r
+ \n :set verPath (\$disk . \"/pull/awg-update-check.json\")\r\\r
+ \n }\r\\r
+ \n :local newVer \"\"\r\\r
+ \n :do {\r\\r
+ \n /tool/fetch url=\"https://api.github.com/repos/timbrs/amneziaw\\r
+ g-mikrotik-c/releases/latest\" dst-path=\$verPath http-max-redirect-count=\\r
+ 10\r\\r
+ \n :local relJson [/file/get [find where name=\$verPath] contents\\r
+ ]\r\\r
+ \n :local tagPos [:find \$relJson \"\\\"tag_name\\\":\\\"\"]\r\\r
+ \n :if ([:typeof \$tagPos] != \"nil\") do={\r\\r
+ \n :local tagRest [:pick \$relJson (\$tagPos + 12) [:len \$relJ\\r
+ son]]\r\\r
+ \n :set newVer [:pick \$tagRest 0 [:find \$tagRest \"\\\"\"]]\r\\r
+ \n }\r\\r
+ \n :do { /file/remove [find where name=\$verPath] } on-error={}\r\\r
+ \n } on-error={ :put \"Could not read the published version\" }\r\\r
+ \n :local curVer \"\"\r\\r
+ \n :do { :set curVer [/container/envs/get [find where list=\"awg3vd\\r
+ s-env\" key=\"AWG_IMAGE_VER\"] value] } on-error={}\r\\r
+ \n :local doPull true\r\\r
+ \n :if (\$healthy) do={\r\\r
+ \n :if (\$newVer = \"\") do={\r\\r
+ \n :set doPull false\r\\r
+ \n :put \"Published version unknown - leaving the healthy conta\\r
+ iner alone\"\r\\r
+ \n }\r\\r
+ \n :if (\$newVer != \"\" && \$newVer = \$curVer) do={\r\\r
+ \n :set doPull false\r\\r
+ \n :put (\"Already on \" . \$curVer . \" - nothing to pull, tun\\r
+ nel untouched\")\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if (\$doPull) do={\r\\r
+ \n :if (!\$healthy) do={\r\\r
+ \n :put \"Container is not healthy - pulling the image again\"\\r
+ \r\\r
+ \n :log warning \"awg3vds-update: container unhealthy, forcing \\r
+ a pull\"\r\\r
+ \n }\r\\r
+ \n :put (\"Updating \" . \$img . \" ...\")\r\\r
+ \n :log info \"awg3vds: repull started\"\r\\r
+ \n :do { /file/remove [find where name~(\$disk . \"/awg3vds.backu\\r
+ p\")] } on-error={}\r\\r
+ \n :do { [:parse \"/container/set \$cid ignore-remote-image-chang\\r
+ e=yes\"] } on-error={}\r\\r
+ \n /container/repull \$cid\r\\r
+ \n :local waited 0\r\\r
+ \n :while ([:len [/container/get \$cid image-id]] = 0 && \$waited\\r
+ \_< 180) do={\r\\r
+ \n :delay 3s\r\\r
+ \n :set waited (\$waited + 3)\r\\r
+ \n }\r\\r
+ \n :if ([:len [/container/get \$cid image-id]] = 0) do={\r\\r
+ \n :put \"Pull failed - retrying once in 15s\"\r\\r
+ \n :delay 15s\r\\r
+ \n /container/repull \$cid\r\\r
+ \n :set waited 0\r\\r
+ \n :while ([:len [/container/get \$cid image-id]] = 0 && \$wait\\r
+ ed < 180) do={\r\\r
+ \n :delay 3s\r\\r
+ \n :set waited (\$waited + 3)\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :local backUp false\r\\r
+ \n :if ([:len [/container/get \$cid image-id]] > 0) do={\r\\r
+ \n :set backUp true\r\\r
+ \n :if (\$wantRunning) do={\r\\r
+ \n :delay 3s\r\\r
+ \n :do { /container/start \$cid } on-error={}\r\\r
+ \n :delay 8s\r\\r
+ \n :set backUp false\r\\r
+ \n :do { :if ([/container/get \$cid stopped] != true) do={ :s\\r
+ et backUp true } } on-error={}\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if (!\$backUp) do={\r\\r
+ \n :put \"Container did not come back up - rebuilding it from t\\r
+ he registry\"\r\\r
+ \n :log warning \"awg3vds-update: container did not come back, \\r
+ rebuilding\"\r\\r
+ \n :do { /container/stop \$cid } on-error={}\r\\r
+ \n :delay 5s\r\\r
+ \n :do { /container/remove \$cid } on-error={}\r\\r
+ \n :delay 3s\r\\r
+ \n :do { /file/remove [find where name~(\$disk . \"/awg3vds.bac\\r
+ kup\")] } on-error={}\r\\r
+ \n :do { /container/add remote-image=\$img interface=veth-awg3v\\r
+ ds envlist=awg3vds-env hostname=awg3vds root-dir=\$rootDirOrig logging=no \\r
+ start-on-boot=yes comment=awg3vds } on-error={}\r\\r
+ \n :set waited 0\r\\r
+ \n :local newCids [/container/find where interface=veth-awg3vds\\r
+ \_and start-on-boot=yes]\r\\r
+ \n :if ([:len \$newCids] = 0) do={ :set newCids [/container/fin\\r
+ d where interface=veth-awg3vds] }\r\\r
+ \n :while ([:len \$newCids] > 0 && [:len [/container/get [:pick\\r
+ \_\$newCids ([:len \$newCids] - 1)] image-id]] = 0 && \$waited < 180) do={\\r
+ \r\\r
+ \n :delay 3s\r\\r
+ \n :set waited (\$waited + 3)\r\\r
+ \n }\r\\r
+ \n :if ([:len \$newCids] > 0 && [:len [/container/get [:pick \$\\r
+ newCids ([:len \$newCids] - 1)] image-id]] > 0) do={\r\\r
+ \n :do { /container/set [:pick \$newCids ([:len \$newCids] - \\r
+ 1)] shm-size=4M } on-error={}\r\\r
+ \n :do { [:parse \"/container/set [find where interface=veth-\\r
+ awg3vds] ignore-remote-image-change=yes\"] } on-error={}\r\\r
+ \n :do { [:parse \"/container/set [find where interface=veth-\\r
+ awg3vds] restart-policy=on-failure restart-interval=30s restart-max-count=\\r
+ 10\"] } on-error={}\r\\r
+ \n :do { /container/start [:pick \$newCids ([:len \$newCids] \\r
+ - 1)] } on-error={}\r\\r
+ \n :delay 8s\r\\r
+ \n :do { :if ([/container/get [:pick \$newCids ([:len \$newCi\\r
+ ds] - 1)] stopped] != true) do={ :set backUp true } } on-error={}\r\\r
+ \n }\r\\r
+ \n :if (\$backUp) do={\r\\r
+ \n :put \"Container rebuilt\"\r\\r
+ \n :log info \"awg3vds: container rebuilt after update\"\r\\r
+ \n } else={\r\\r
+ \n :put \"Rebuild failed - the tunnel is down. Netwatch keeps\\r
+ \_the router online meanwhile.\"\r\\r
+ \n :put \"This script runs again on the next schedule and wil\\r
+ l retry.\"\r\\r
+ \n :log error \"awg3vds-update: rebuild failed, tunnel is dow\\r
+ n\"\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if (\$backUp && \$newVer != \"\") do={\r\\r
+ \n :do { /container/envs/remove [find where list=\"awg3vds-env\\r
+ \" key=\"AWG_IMAGE_VER\"] } on-error={}\r\\r
+ \n :do { /container/envs/add list=awg3vds-env key=AWG_IMAGE_VER\\r
+ \_value=\$newVer } on-error={}\r\\r
+ \n }\r\\r
+ \n :do { /file/remove [find where name~(\$disk . \"/awg3vds.backu\\r
+ p\")] } on-error={}\r\\r
+ \n :if (\$backUp) do={\r\\r
+ \n :put (\"Update done: \" . \$img)\r\\r
+ \n :log info \"awg3vds: update done\"\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n# Daily update check. Skipped if scheduler is not allowed by device-mode\\r
+ \r\\r
+ \n{\r\\r
+ \n :local schedOk true\r\\r
+ \n :do { :set schedOk [/system/device-mode/get scheduler] } on-error={}\r\\r
+ \n :if (\$schedOk) do={\r\\r
+ \n /system/scheduler/add name=awg3vds-update on-event=\"/system/script/\\r
+ run awg3vds-update\" start-time=04:30:00 interval=1d comment=awg3vds\r\\r
+ \n } else={\r\\r
+ \n :put \"WARNING: scheduler not allowed by device-mode, no daily updat\\r
+ e check.\"\r\\r
+ \n :put \"Update by hand: /system/script/run awg3vds-update\"\r\\r
+ \n :put \"To allow it: /system/device-mode/update scheduler=yes\"\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n# 2. Network infrastructure\r\\r
+ \n/interface/veth/add name=veth-awg3vds address=172.19.14.102/30 gateway=1\\r
+ 72.19.14.101\r\\r
+ \n/ip/address/add address=172.19.14.101/30 interface=veth-awg3vds\r\\r
+ \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.19.1\\r
+ 4.100/30\r\\r
+ \n\r\\r
+ \n# 3. WireGuard interface (MikroTik derives the public key automatically)\\r
+ \r\\r
+ \n/interface/wireguard/add name=wg-awg3vds private-key=\"AEU+diR7SCIEOtwOW\\r
+ SWR3pEpkw6v0Qro2LRF0SnPpnw=\" listen-port=41430 mtu=1320 disabled=yes\r\\r
+ \n/interface/wireguard/peers/add interface=wg-awg3vds public-key=\"MMWjD/T\\r
+ PNpupCvhXLCAw0xHXV4N6jgtQkg9Pl6pcQhU=\" preshared-key=\"r9B13bB7gUTqde6zgB\\r
+ DfffFIUN6puP2gOWdK5zVS3nw=\" endpoint-address=172.19.14.102 endpoint-port=\\r
+ 51820 allowed-address=10.31.31.0/24,0.0.0.0/0 persistent-keepalive=14\r\\r
+ \n/ip/address/add address=10.31.31.2/24 interface=wg-awg3vds\r\\r
+ \n\r\\r
+ \n# 4. Container environment variables\r\\r
+ \n/container/envs/add list=awg3vds-env key=AWG_LISTEN value=\":51820\"\r\\r
+ \n/container/envs/add list=awg3vds-env key=AWG_REMOTE value=\"89.110.101.1\\r
+ 7:31031\"\r\\r
+ \n/container/envs/add list=awg3vds-env key=AWG_JC value=\"5\"\r\\r
+ \n/container/envs/add list=awg3vds-env key=AWG_JMIN value=\"510\"\r\\r
+ \n/container/envs/add list=awg3vds-env key=AWG_JMAX value=\"952\"\r\\r
+ \n/container/envs/add list=awg3vds-env key=AWG_S1 value=\"138\"\r\\r
+ \n/container/envs/add list=awg3vds-env key=AWG_S2 value=\"105\"\r\\r
+ \n/container/envs/add list=awg3vds-env key=AWG_H1 value=\"457615290-457646\\r
+ 150\"\r\\r
+ \n/container/envs/add list=awg3vds-env key=AWG_H2 value=\"1307355386-13073\\r
+ 63580\"\r\\r
+ \n/container/envs/add list=awg3vds-env key=AWG_H3 value=\"2441734303-24417\\r
+ 81787\"\r\\r
+ \n/container/envs/add list=awg3vds-env key=AWG_H4 value=\"3719180788-37191\\r
+ 95844\"\r\\r
+ \n/container/envs/add list=awg3vds-env key=AWG_SERVER_PUB value=\"MMWjD/TP\\r
+ NpupCvhXLCAw0xHXV4N6jgtQkg9Pl6pcQhU=\"\r\\r
+ \n/container/envs/add list=awg3vds-env key=AWG_CLIENT_PUB value=[/interfac\\r
+ e/wireguard/get [find name=wg-awg3vds] public-key]\r\\r
+ \n/container/envs/add list=awg3vds-env key=AWG_S3 value=\"51\"\r\\r
+ \n/container/envs/add list=awg3vds-env key=AWG_S4 value=\"22\"\r\\r
+ \n/container/envs/add list=awg3vds-env key=AWG_I1 value=\"<b 0x281f0100000\\r
+ 1000000000000><rc 7><rd 2><r 109>\"\r\\r
+ \n/container/envs/add list=awg3vds-env key=AWG_I2 value=\"<rc 13><b 0xf077\\r
+ 3b61e8e9e015129b><t><r 63><rd 6>\"\r\\r
+ \n/container/envs/add list=awg3vds-env key=AWG_I3 value=\"<rc 6><b 0x021b4\\r
+ d><t><r 47><rd 8>\"\r\\r
+ \n/container/envs/add list=awg3vds-env key=AWG_I4 value=\"<rc 15><b 0x0329\\r
+ d6><t><r 52><rd 8>\"\r\\r
+ \n/container/envs/add list=awg3vds-env key=AWG_I5 value=\"<rc 13><b 0x2204\\r
+ 83a81a8cd7e37e66><t><r 22><rd 4>\"\r\\r
+ \n/container/envs/add list=awg3vds-env key=AWG_HEADER_PROTECTION_KEY value\\r
+ =\"FkGxbrW6ds3YPWNl48OWFEccrLC4tF94z9MnoKUZUsM=\"\r\\r
+ \n/container/envs/add list=awg3vds-env key=AWG_CONTENT_PADDING value=\"54-\\r
+ 119\"\r\\r
+ \n/container/envs/add list=awg3vds-env key=AWG_REKEY_AFTER value=\"102-130\\r
+ \"\r\\r
+ \n/container/envs/add list=awg3vds-env key=AWG_REKEY_TIMEOUT value=\"6-8\"\\r
+ \r\\r
+ \n/container/envs/add list=awg3vds-env key=AWG_REJECT_AFTER value=\"174-19\\r
+ 5\"\r\\r
+ \n/container/envs/add list=awg3vds-env key=AWG_KEEPALIVE_TIMEOUT value=\"1\\r
+ 4-21\"\r\\r
+ \n/container/envs/add list=awg3vds-env key=AWG_MAX_HANDSHAKE_ATTEMPTS valu\\r
+ e=\"12-14\"\r\\r
+ \n/container/envs/add list=awg3vds-env key=AWG_NO_DF value=\"1\"\r\\r
+ \n# Perf: give each forwarding thread its own core (4+ core routers)\r\\r
+ \n{ :if ([/system/resource/get cpu-count] >= 4) do={ /container/envs/add l\\r
+ ist=awg3vds-env key=AWG_CPU_C2S value=\"1\"; /container/envs/add list=awg3\\r
+ vds-env key=AWG_CPU_S2C value=\"2\" } }\r\\r
+ \n# NOTE on MTU: the value above assumes this tunnel is the last hop.\r\\r
+ \n# If the server forwards your traffic into another tunnel, subtract\r\\r
+ \n# that tunnel's overhead too, or every packet leaves in two fragments.\\r
+ \r\\r
+ \n\r\\r
+ \n# 5. DNS\r\\r
+ \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\\r
+ n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\\r
+ \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /container/envs/add list=aw\\r
+ g3vds-env key=AWG_PREV_DNS value=\"\$prevDNS\" }\r\\r
+ \n# NOTE: replaces existing DNS configuration\r\\r
+ \n/ip/dns/set servers=89.110.101.17,8.8.4.4\r\\r
+ \n# DNS 89.110.101.17 \D0\B8\D0\B4\D1\91\D1\82 \D0\BE\D0\B1\D1\89\D0\B8\D0\\r
+ \BC \D0\BC\D0\B0\D1\80\D1\88\D1\80\D1\83\D1\82\D0\BE\D0\BC (\D0\B2 \D0\B0\\r
+ \D0\BA\D1\82\D0\B8\D0\B2\D0\BD\D1\8B\D0\B9 \D1\82\D1\83\D0\BD\D0\BD\D0\B5\\r
+ \D0\BB\D1\8C / default),\r\\r
+ \n# \D0\B1\D0\B5\D0\B7 \D0\BF\D1\80\D0\B8\D0\B2\D1\8F\D0\B7\D0\BA\D0\B8 \\r
+ \D0\BA wg-awg3vds: \D0\B8\D0\BD\D0\B0\D1\87\D0\B5 \D0\BF\D0\B0\D0\B4\D0\B5\\r
+ \D0\BD\D0\B8\D0\B5 \D1\82\D1\83\D0\BD\D0\BD\D0\B5\D0\BB\D1\8F \D1\83\D0\BD\\r
+ \D0\BE\D1\81\D0\B8\D1\82 \D1\81 \D1\81\D0\BE\D0\B1\D0\BE\D0\B9 \D1\80\D0\\r
+ \B5\D0\B7\D0\BE\D0\BB\D0\B2.\r\\r
+ \n# DNS 8.8.4.4 \D0\B8\D0\B4\D1\91\D1\82 \D0\BE\D0\B1\D1\89\D0\B8\D0\BC \\r
+ \D0\BC\D0\B0\D1\80\D1\88\D1\80\D1\83\D1\82\D0\BE\D0\BC (\D0\B2 \D0\B0\D0\\r
+ \BA\D1\82\D0\B8\D0\B2\D0\BD\D1\8B\D0\B9 \D1\82\D1\83\D0\BD\D0\BD\D0\B5\D0\\r
+ \BB\D1\8C / default),\r\\r
+ \n# \D0\B1\D0\B5\D0\B7 \D0\BF\D1\80\D0\B8\D0\B2\D1\8F\D0\B7\D0\BA\D0\B8 \\r
+ \D0\BA wg-awg3vds: \D0\B8\D0\BD\D0\B0\D1\87\D0\B5 \D0\BF\D0\B0\D0\B4\D0\B5\\r
+ \D0\BD\D0\B8\D0\B5 \D1\82\D1\83\D0\BD\D0\BD\D0\B5\D0\BB\D1\8F \D1\83\D0\BD\\r
+ \D0\BE\D1\81\D0\B8\D1\82 \D1\81 \D1\81\D0\BE\D0\B1\D0\BE\D0\B9 \D1\80\D0\\r
+ \B5\D0\B7\D0\BE\D0\BB\D0\B2.\r\\r
+ \n\r\\r
+ \n# 6. Download, create and start container\r\\r
+ \n:local prevTmpdir [/container/config/get tmpdir]\r\\r
+ \n/container/envs/add list=awg3vds-env key=AWG_PREV_TMPDIR value=\$prevTmp\\r
+ dir\r\\r
+ \n/container/config set tmpdir=usb1/pull memory-high=200M\r\\r
+ \n{\r\\r
+ \n :local arch [/system/resource/get architecture-name]\r\\r
+ \n :local ver [/system/resource/get version]\r\\r
+ \n :local dotPos [:find \$ver \".\"]\r\\r
+ \n :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\r\\r
+ \n :local endPos [:find \$rest \".\"]\r\\r
+ \n :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \" \\r
+ \"] }\r\\r
+ \n :local minor [:tonum [:pick \$rest 0 \$endPos]]\r\\r
+ \n :local suffix \"\"\r\\r
+ \n :if (\$minor <= 20) do={ :set suffix \"-7.20-Docker\" }\r\\r
+ \n :local file \"\"\r\\r
+ \n :local imgTag \"latest\"\r\\r
+ \n :if (\$arch = \"arm64\") do={ :set file (\"awg-proxy-arm64\" . \$suffi\\r
+ x . \".tar.gz\") }\r\\r
+ \n :if (\$arch = \"arm\") do={\r\\r
+ \n :set file (\"awg-proxy-arm\" . \$suffix . \".tar.gz\")\r\\r
+ \n :local rbModel \"\"\r\\r
+ \n :do { :set rbModel [[:parse \":return [/system/routerboard/get model\\r
+ ]\"]] } on-error={}\r\\r
+ \n :local bName [/system/resource/get board-name]\r\\r
+ \n :if (\$rbModel~\"E50UG\" || \$rbModel~\"E60iUGS\" || \$bName~\"E50UG\\r
+ \" || \$bName~\"E60iUGS\" || \$bName~\"^hEX\") do={\r\\r
+ \n :set file (\"awg-proxy-armv5\" . \$suffix . \".tar.gz\")\r\\r
+ \n :set imgTag \"latest-armv5\"\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if (\$arch ~ \"x86\") do={ :set file (\"awg-proxy-amd64\" . \$suffix \\r
+ . \".tar.gz\") }\r\\r
+ \n :if (\$file = \"\") do={ :error \"Unsupported architecture: \$arch\" }\\r
+ \r\\r
+ \n :local url \"https://github.com/timbrs/amneziawg-mikrotik-c/releases/l\\r
+ atest/download/\$file\"\r\\r
+ \n :local filePath (\"usb1/pull/\" . \$file)\r\\r
+ \n :local altPath (\"usb1/\" . \$file)\r\\r
+ \n :local rootDir \"usb1/awg3vds\"\r\\r
+ \n :do { /file/make-directory usb1/pull } on-error={}\r\\r
+ \n :if ([:len [/file/find where name=\$filePath]] = 0 && [:len [/file/fin\\r
+ d where name=\$altPath]] > 0) do={\r\\r
+ \n :set filePath \$altPath\r\\r
+ \n }\r\\r
+ \n :local added false\r\\r
+ \n :local fetched false\r\\r
+ \n :if ([:len [/file/find where name=\$filePath]] > 0) do={\r\\r
+ \n :put (\"Using image already on the router: \" . \$filePath)\r\\r
+ \n /container/add file=\$filePath interface=veth-awg3vds envlist=awg3vd\\r
+ s-env hostname=awg3vds root-dir=\$rootDir logging=no start-on-boot=yes com\\r
+ ment=awg3vds\r\\r
+ \n :set added true\r\\r
+ \n }\r\\r
+ \n :if (!\$added && \$minor >= 22) do={\r\\r
+ \n :local img (\"ghcr.io/timbrs/awg-proxy:\" . \$imgTag)\r\\r
+ \n :put (\"Pulling \" . \$img)\r\\r
+ \n /container/add remote-image=\$img interface=veth-awg3vds envlist=awg\\r
+ 3vds-env hostname=awg3vds root-dir=\$rootDir logging=no start-on-boot=yes \\r
+ comment=awg3vds\r\\r
+ \n :local cids [/container/find where interface=veth-awg3vds]\r\\r
+ \n :local waited 0\r\\r
+ \n :while ([:len \$cids] > 0 && [:len [/container/get [:pick \$cids 0] \\r
+ image-id]] = 0 && \$waited < 120) do={\r\\r
+ \n :delay 2s\r\\r
+ \n :set waited (\$waited + 2)\r\\r
+ \n }\r\\r
+ \n :if ([:len \$cids] > 0 && [:len [/container/get [:pick \$cids 0] ima\\r
+ ge-id]] > 0) do={\r\\r
+ \n :set added true\r\\r
+ \n :put (\"Pulled from registry in \" . \$waited . \"s\")\r\\r
+ \n :do {\r\\r
+ \n :local verPath (\$filePath . \".rel\")\r\\r
+ \n /tool/fetch url=\"https://api.github.com/repos/timbrs/amneziawg-\\r
+ mikrotik-c/releases/latest\" dst-path=\$verPath http-max-redirect-count=10\\r
+ \r\\r
+ \n :local relJson [/file/get [find where name=\$verPath] contents]\\r
+ \r\\r
+ \n :local tagPos [:find \$relJson \"\\\"tag_name\\\":\\\"\"]\r\\r
+ \n :local tagRest [:pick \$relJson (\$tagPos + 12) [:len \$relJson]\\r
+ ]\r\\r
+ \n /container/envs/add list=awg3vds-env key=AWG_IMAGE_VER value=[:p\\r
+ ick \$tagRest 0 [:find \$tagRest \"\\\"\"]]\r\\r
+ \n /file/remove [find where name=\$verPath]\r\\r
+ \n } on-error={}\r\\r
+ \n } else={\r\\r
+ \n :put \"Registry unavailable, falling back to the release archive\"\\r
+ \r\\r
+ \n :do { /container/remove \$cids } on-error={}\r\\r
+ \n :delay 2s\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if (!\$added) do={\r\\r
+ \n :local freeStorage 0\r\\r
+ \n :do { :set freeStorage [/disk/get [find where mount-point=\"usb1\"] \\r
+ free] } on-error={}\r\\r
+ \n :if (\$freeStorage < 262144) do={\r\\r
+ \n :put (\"WARNING: Low disk space (\" . (\$freeStorage / 1024) . \"K\\r
+ B free). Need at least 256KB.\")\r\\r
+ \n :put \"See: https://github.com/timbrs/amneziawg-mikrotik-c#insuffi\\r
+ cient-disk-space\"\r\\r
+ \n :error \"Insufficient disk space\"\r\\r
+ \n }\r\\r
+ \n :put (\"Fetching: \$url -> \" . \$filePath)\r\\r
+ \n /tool/fetch url=\$url dst-path=\$filePath http-max-redirect-count=10\\r
+ \r\\r
+ \n /container/add file=\$filePath interface=veth-awg3vds envlist=awg3vd\\r
+ s-env hostname=awg3vds root-dir=\$rootDir logging=no start-on-boot=yes com\\r
+ ment=awg3vds\r\\r
+ \n :set fetched true\r\\r
+ \n }\r\\r
+ \n :if (\$minor > 20) do={ [:parse \"/container/set [find where interface\\r
+ =veth-awg3vds] shm-size=4M\"] }\r\\r
+ \n :do { [:parse \"/container/set [find where interface=veth-awg3vds] ign\\r
+ ore-remote-image-change=yes\"] } on-error={}\r\\r
+ \n :do { [:parse \"/container/set [find where interface=veth-awg3vds] res\\r
+ tart-policy=on-failure restart-interval=30s restart-max-count=10\"] } on-e\\r
+ rror={}\r\\r
+ \n :if (\$fetched) do={ /file/remove \$filePath }\r\\r
+ \n :local freeMem [/system/resource/get free-memory]\r\\r
+ \n :if (\$freeMem < 16777216) do={\r\\r
+ \n :put (\"WARNING: Low memory (\" . (\$freeMem / 1048576) . \"MB free)\\r
+ . 16MB+ recommended.\")\r\\r
+ \n }\r\\r
+ \n /container/start [find where interface=veth-awg3vds]\r\\r
+ \n :do { /file/remove [find where name=\"console-dump.txt\"] } on-error={\\r
+ }\r\\r
+ \n :put \"Waiting for container to start...\"\r\\r
+ \n :delay 5s\r\\r
+ \n /interface/wireguard/enable wg-awg3vds\r\\r
+ \n :put \"WireGuard interface enabled\"\r\\r
+ \n :put \"Installation complete!\"\r\\r
+ \n :put \"Ping test: 89.110.101.17 via AmneziaWG tunnel. repeat 10 times\\r
+ \"\r\\r
+ \n /ping 89.110.101.17 count=10 interval=1\r\\r
+ \n :put \"\"\r\\r
+ \n :put \"======= NEXT STEPS =======\"\r\\r
+ \n :put \"\"\r\\r
+ \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\r\\r
+ \n :put \"\"\r\\r
+ \n :put \" Route a single host:\"\r\\r
+ \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-awg3vds com\\r
+ ment=awg3vds-tunnel\"\r\\r
+ \n :put \"\"\r\\r
+ \n :put \" Route a subnet:\"\r\\r
+ \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-awg3vds co\\r
+ mment=awg3vds-tunnel\"\r\\r
+ \n :put \"\"\r\\r
+ \n :put \" Remove a route:\"\r\\r
+ \n :put \" /ip/route/remove [find where comment=awg3vds-tunnel dst-add\\r
+ ress=8.8.8.8/32]\"\r\\r
+ \n :put \"\"\r\\r
+ \n :put \" Show all tunnel routes:\"\r\\r
+ \n :put \" /ip/route/print where comment=awg3vds-tunnel\"\r\\r
+ \n :put \"\"\r\\r
+ \n :put \" Update the container:\"\r\\r
+ \n :put \" /system/script/run awg3vds-update\"\r\\r
+ \n :put \"\"\r\\r
+ \n :put \" Uninstall:\"\r\\r
+ \n :put \" /system/script/run awg3vds-uninstall\"\r\\r
+ \n :put \"=========================\"\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n# 7. Verification\r\\r
+ \n# /container/print\r\\r
+ \n# /interface/wireguard/print\r\\r
+ \n# /interface/wireguard/peers/print\r\\r
+ \n"\r
+add comment=awg3vds dont-require-permissions=no name=awg3vds-uninstall owner=\\r
+ vados policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\\r
+ \r\\r
+ \n :put \"Uninstallimg AmneziaWG...\"\r\\r
+ \n :log info \"Uninstallimg AmneziaWG...\"\r\\r
+ \n :local prevDNS \"\"\r\\r
+ \n :do { :set prevDNS [/container/envs/get [find where list=\"awg3vds-env\\r
+ \" key=\"AWG_PREV_DNS\"] value] } on-error={}\r\\r
+ \n :local prevTmpdir \"\"\r\\r
+ \n :do { :set prevTmpdir [/container/envs/get [find where list=\"awg3vds-\\r
+ env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\r\\r
+ \n /ip/route/remove [find where comment=awg3vds-tunnel]\r\\r
+ \n /ip/route/remove [find where comment=awg3vds-dns]\r\\r
+ \n :do { /system/scheduler/remove [find where comment~\"awg3vds\"] } on-e\\r
+ rror={}\r\\r
+ \n :do { /system/script/remove [find where comment~\"awg3vds\" and name!=\\r
+ \"awg3vds-uninstall\"] } on-error={}\r\\r
+ \n /container/stop [find where interface=veth-awg3vds]\r\\r
+ \n :delay 7s\r\\r
+ \n /container/remove [find where interface=veth-awg3vds]\r\\r
+ \n /container/envs/remove [find where list=\"awg3vds-env\"]\r\\r
+ \n :if (\$prevDNS != \"\") do={\r\\r
+ \n :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\r\\r
+ \n :put (\"DNS restored to: \$prevDNS\")\r\\r
+ \n }\r\\r
+ \n /container/config set tmpdir=\$prevTmpdir\r\\r
+ \n :put (\"Container tmpdir restored to: \$prevTmpdir\")\r\\r
+ \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg3vds\"]\r\\r
+ \n /ip/firewall/nat/remove [find where src-address=\"172.19.14.100/30\"]\\r
+ \r\\r
+ \n /ip/address/remove [find where address=\"172.19.14.101/30\"]\r\\r
+ \n :do { /ipv6/firewall/nat/remove [find where comment=awg3vds-v6-nat] } \\r
+ on-error={}\r\\r
+ \n :do { /ipv6/firewall/nat/remove [find where comment=awg3vds-dstnat6] }\\r
+ \_on-error={}\r\\r
+ \n :do { /ipv6/firewall/filter/remove [find where comment=awg3vds-v6-out]\\r
+ \_} on-error={}\r\\r
+ \n :do { /ipv6/firewall/filter/remove [find where comment=awg3vds-awg-in6\\r
+ ] } on-error={}\r\\r
+ \n :do { /ipv6/nd/remove [find where interface=veth-awg3vds] } on-error={\\r
+ }\r\\r
+ \n :do { /ipv6/nd/prefix/remove [find where interface=veth-awg3vds] } on-\\r
+ error={}\r\\r
+ \n :do { /ipv6/address/remove [find where comment=awg3vds-v6] } on-error=\\r
+ {}\r\\r
+ \n /interface/veth/remove [find where name=\"veth-awg3vds\"]\r\\r
+ \n /interface/wireguard/peers/remove [find where interface=\"wg-awg3vds\"\\r
+ ]\r\\r
+ \n /ip/address/remove [find where interface=\"wg-awg3vds\"]\r\\r
+ \n /interface/wireguard/remove [find where name=\"wg-awg3vds\"]\r\\r
+ \n :do { /file/remove [find where name~\"awg3vds.+tar\"] } on-error={}\r\\r
+ \n :do { /file/remove [find where name=\"usb1/awg3vds\"] } on-error={}\r\\r
+ \n :do { /file/remove [find where name=\"usb1/ru_ranges_timeout.rsc\"] } \\r
+ on-error={}\r\\r
+ \n :do { /file/remove [find where name=\"usb1/ru_ranges.rsc\"] } on-error\\r
+ ={}\r\\r
+ \n :do { /file/remove [find where name~\"usb1/pull\"] } on-error={}\r\\r
+ \n :put \"Uninstall AmneziaWG Proxy complete!\"\r\\r
+ \n :log info \"Uninstall AmneziaWG Proxy complete!\"\r\\r
+ \n# /system/script/remove [find where name=awg3vds-uninstall]\r\\r
+ \n"\r
+add comment=awg3vds dont-require-permissions=no name=awg3vds-update owner=\\r
+ vados policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\\r
+ \r\\r
+ \n :local cids [/container/find where interface=veth-awg3vds and !stopped\\r
+ ]\r\\r
+ \n :if ([:len \$cids] = 0) do={ :set cids [/container/find where interfac\\r
+ e=veth-awg3vds and start-on-boot=yes] }\r\\r
+ \n :if ([:len \$cids] = 0) do={ :set cids [/container/find where interfac\\r
+ e=veth-awg3vds] }\r\\r
+ \n :if ([:len \$cids] = 0) do={\r\\r
+ \n :put \"Container awg3vds not found\"\r\\r
+ \n :log warning \"awg3vds-update: container not found\"\r\\r
+ \n } else={\r\\r
+ \n :local cid [:pick \$cids ([:len \$cids] - 1)]\r\\r
+ \n :local img [/container/get \$cid remote-image]\r\\r
+ \n :local ver [/system/resource/get version]\r\\r
+ \n :local dotPos [:find \$ver \".\"]\r\\r
+ \n :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\r\\r
+ \n :local endPos [:find \$rest \".\"]\r\\r
+ \n :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \"\\r
+ \_\"] }\r\\r
+ \n :local minor [:tonum [:pick \$rest 0 \$endPos]]\r\\r
+ \n :local wantRunning true\r\\r
+ \n :do { :if ([/container/get \$cid start-on-boot] != true) do={ :set w\\r
+ antRunning false } } on-error={}\r\\r
+ \n :local healthy true\r\\r
+ \n :if ([:len [/container/get \$cid image-id]] = 0) do={ :set healthy f\\r
+ alse }\r\\r
+ \n :if (\$wantRunning) do={\r\\r
+ \n :do { :if ([/container/get \$cid stopped] = true) do={ :set health\\r
+ y false } } on-error={}\r\\r
+ \n }\r\\r
+ \n :if (!\$healthy && \$wantRunning && [:len [/container/get \$cid imag\\r
+ e-id]] > 0) do={\r\\r
+ \n :put \"Container is down - trying to start it\"\r\\r
+ \n :do { /container/start \$cid } on-error={}\r\\r
+ \n :delay 8s\r\\r
+ \n :set healthy true\r\\r
+ \n :do { :if ([/container/get \$cid stopped] = true) do={ :set health\\r
+ y false } } on-error={}\r\\r
+ \n :if (\$healthy) do={\r\\r
+ \n :put \"Container is back up\"\r\\r
+ \n :log info \"awg3vds: container restarted by the update script\"\\r
+ \r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if (\$img = \"\" && \$minor >= 22 && !\$healthy) do={\r\\r
+ \n :local imgTag \"latest\"\r\\r
+ \n :local rbModel \"\"\r\\r
+ \n :do { :set rbModel [[:parse \":return [/system/routerboard/get mod\\r
+ el]\"]] } on-error={}\r\\r
+ \n :local bName [/system/resource/get board-name]\r\\r
+ \n :if (\$rbModel~\"E50UG\" || \$rbModel~\"E60iUGS\" || \$bName~\"E50\\r
+ UG\" || \$bName~\"E60iUGS\" || \$bName~\"^hEX\") do={\r\\r
+ \n :set imgTag \"latest-armv5\"\r\\r
+ \n }\r\\r
+ \n :set img (\"ghcr.io/timbrs/awg-proxy:\" . \$imgTag)\r\\r
+ \n :put (\"Container is down and was installed from a file - pointing\\r
+ \_it at \" . \$img)\r\\r
+ \n :log warning \"awg3vds-update: broken file install, switching to t\\r
+ he registry\"\r\\r
+ \n :do { /container/set \$cid remote-image=\$img } on-error={}\r\\r
+ \n }\r\\r
+ \n :if (\$img = \"\") do={\r\\r
+ \n :put \"Installed from a local image file - /container/repull only \\r
+ updates registry installs.\"\r\\r
+ \n :put \"Reinstall with the configurator on RouterOS 7.22+ to switch\\r
+ \_to one-command updates.\"\r\\r
+ \n } else={\r\\r
+ \n :if (\$minor < 22) do={\r\\r
+ \n :put (\"/container/repull needs RouterOS 7.22+, this router runs\\r
+ \_\" . \$ver)\r\\r
+ \n :if (!\$healthy) do={ :log error (\"awg3vds-update: container is\\r
+ \_down, and \" . \$ver . \" has no /container/repull\") }\r\\r
+ \n } else={\r\\r
+ \n :local rootDir [/container/get \$cid root-dir]\r\\r
+ \n :if ([:pick \$rootDir 0 1] = \"/\") do={ :set rootDir [:pick \$r\\r
+ ootDir 1 [:len \$rootDir]] }\r\\r
+ \n :local rootDirOrig \$rootDir\r\\r
+ \n :local slashPos [:find \$rootDir \"/\"]\r\\r
+ \n :local disk \$rootDir\r\\r
+ \n :if ([:typeof \$slashPos] != \"nil\") do={ :set disk [:pick \$ro\\r
+ otDir 0 \$slashPos] }\r\\r
+ \n :local verPath \"awg-update-check.json\"\r\\r
+ \n :if (\$disk != \"disk1\") do={\r\\r
+ \n :do { /file/make-directory (\$disk . \"/pull\") } on-error={}\\r
+ \r\\r
+ \n /container/config set tmpdir=(\$disk . \"/pull\")\r\\r
+ \n :set verPath (\$disk . \"/pull/awg-update-check.json\")\r\\r
+ \n }\r\\r
+ \n :local newVer \"\"\r\\r
+ \n :do {\r\\r
+ \n /tool/fetch url=\"https://api.github.com/repos/timbrs/amneziaw\\r
+ g-mikrotik-c/releases/latest\" dst-path=\$verPath http-max-redirect-count=\\r
+ 10\r\\r
+ \n :local relJson [/file/get [find where name=\$verPath] contents\\r
+ ]\r\\r
+ \n :local tagPos [:find \$relJson \"\\\"tag_name\\\":\\\"\"]\r\\r
+ \n :if ([:typeof \$tagPos] != \"nil\") do={\r\\r
+ \n :local tagRest [:pick \$relJson (\$tagPos + 12) [:len \$relJ\\r
+ son]]\r\\r
+ \n :set newVer [:pick \$tagRest 0 [:find \$tagRest \"\\\"\"]]\r\\r
+ \n }\r\\r
+ \n :do { /file/remove [find where name=\$verPath] } on-error={}\r\\r
+ \n } on-error={ :put \"Could not read the published version\" }\r\\r
+ \n :local curVer \"\"\r\\r
+ \n :do { :set curVer [/container/envs/get [find where list=\"awg3vd\\r
+ s-env\" key=\"AWG_IMAGE_VER\"] value] } on-error={}\r\\r
+ \n :local doPull true\r\\r
+ \n :if (\$healthy) do={\r\\r
+ \n :if (\$newVer = \"\") do={\r\\r
+ \n :set doPull false\r\\r
+ \n :put \"Published version unknown - leaving the healthy conta\\r
+ iner alone\"\r\\r
+ \n }\r\\r
+ \n :if (\$newVer != \"\" && \$newVer = \$curVer) do={\r\\r
+ \n :set doPull false\r\\r
+ \n :put (\"Already on \" . \$curVer . \" - nothing to pull, tun\\r
+ nel untouched\")\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if (\$doPull) do={\r\\r
+ \n :if (!\$healthy) do={\r\\r
+ \n :put \"Container is not healthy - pulling the image again\"\\r
+ \r\\r
+ \n :log warning \"awg3vds-update: container unhealthy, forcing \\r
+ a pull\"\r\\r
+ \n }\r\\r
+ \n :put (\"Updating \" . \$img . \" ...\")\r\\r
+ \n :log info \"awg3vds: repull started\"\r\\r
+ \n :do { /file/remove [find where name~(\$disk . \"/awg3vds.backu\\r
+ p\")] } on-error={}\r\\r
+ \n :do { [:parse \"/container/set \$cid ignore-remote-image-chang\\r
+ e=yes\"] } on-error={}\r\\r
+ \n /container/repull \$cid\r\\r
+ \n :local waited 0\r\\r
+ \n :while ([:len [/container/get \$cid image-id]] = 0 && \$waited\\r
+ \_< 180) do={\r\\r
+ \n :delay 3s\r\\r
+ \n :set waited (\$waited + 3)\r\\r
+ \n }\r\\r
+ \n :if ([:len [/container/get \$cid image-id]] = 0) do={\r\\r
+ \n :put \"Pull failed - retrying once in 15s\"\r\\r
+ \n :delay 15s\r\\r
+ \n /container/repull \$cid\r\\r
+ \n :set waited 0\r\\r
+ \n :while ([:len [/container/get \$cid image-id]] = 0 && \$wait\\r
+ ed < 180) do={\r\\r
+ \n :delay 3s\r\\r
+ \n :set waited (\$waited + 3)\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :local backUp false\r\\r
+ \n :if ([:len [/container/get \$cid image-id]] > 0) do={\r\\r
+ \n :set backUp true\r\\r
+ \n :if (\$wantRunning) do={\r\\r
+ \n :delay 3s\r\\r
+ \n :do { /container/start \$cid } on-error={}\r\\r
+ \n :delay 8s\r\\r
+ \n :set backUp false\r\\r
+ \n :do { :if ([/container/get \$cid stopped] != true) do={ :s\\r
+ et backUp true } } on-error={}\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if (!\$backUp) do={\r\\r
+ \n :put \"Container did not come back up - rebuilding it from t\\r
+ he registry\"\r\\r
+ \n :log warning \"awg3vds-update: container did not come back, \\r
+ rebuilding\"\r\\r
+ \n :do { /container/stop \$cid } on-error={}\r\\r
+ \n :delay 5s\r\\r
+ \n :do { /container/remove \$cid } on-error={}\r\\r
+ \n :delay 3s\r\\r
+ \n :do { /file/remove [find where name~(\$disk . \"/awg3vds.bac\\r
+ kup\")] } on-error={}\r\\r
+ \n :do { /container/add remote-image=\$img interface=veth-awg3v\\r
+ ds envlist=awg3vds-env hostname=awg3vds root-dir=\$rootDirOrig logging=no \\r
+ start-on-boot=yes comment=awg3vds } on-error={}\r\\r
+ \n :set waited 0\r\\r
+ \n :local newCids [/container/find where interface=veth-awg3vds\\r
+ \_and start-on-boot=yes]\r\\r
+ \n :if ([:len \$newCids] = 0) do={ :set newCids [/container/fin\\r
+ d where interface=veth-awg3vds] }\r\\r
+ \n :while ([:len \$newCids] > 0 && [:len [/container/get [:pick\\r
+ \_\$newCids ([:len \$newCids] - 1)] image-id]] = 0 && \$waited < 180) do={\\r
+ \r\\r
+ \n :delay 3s\r\\r
+ \n :set waited (\$waited + 3)\r\\r
+ \n }\r\\r
+ \n :if ([:len \$newCids] > 0 && [:len [/container/get [:pick \$\\r
+ newCids ([:len \$newCids] - 1)] image-id]] > 0) do={\r\\r
+ \n :do { /container/set [:pick \$newCids ([:len \$newCids] - \\r
+ 1)] shm-size=4M } on-error={}\r\\r
+ \n :do { [:parse \"/container/set [find where interface=veth-\\r
+ awg3vds] ignore-remote-image-change=yes\"] } on-error={}\r\\r
+ \n :do { [:parse \"/container/set [find where interface=veth-\\r
+ awg3vds] restart-policy=on-failure restart-interval=30s restart-max-count=\\r
+ 10\"] } on-error={}\r\\r
+ \n :do { /container/start [:pick \$newCids ([:len \$newCids] \\r
+ - 1)] } on-error={}\r\\r
+ \n :delay 8s\r\\r
+ \n :do { :if ([/container/get [:pick \$newCids ([:len \$newCi\\r
+ ds] - 1)] stopped] != true) do={ :set backUp true } } on-error={}\r\\r
+ \n }\r\\r
+ \n :if (\$backUp) do={\r\\r
+ \n :put \"Container rebuilt\"\r\\r
+ \n :log info \"awg3vds: container rebuilt after update\"\r\\r
+ \n } else={\r\\r
+ \n :put \"Rebuild failed - the tunnel is down. Netwatch keeps\\r
+ \_the router online meanwhile.\"\r\\r
+ \n :put \"This script runs again on the next schedule and wil\\r
+ l retry.\"\r\\r
+ \n :log error \"awg3vds-update: rebuild failed, tunnel is dow\\r
+ n\"\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if (\$backUp && \$newVer != \"\") do={\r\\r
+ \n :do { /container/envs/remove [find where list=\"awg3vds-env\\r
+ \" key=\"AWG_IMAGE_VER\"] } on-error={}\r\\r
+ \n :do { /container/envs/add list=awg3vds-env key=AWG_IMAGE_VER\\r
+ \_value=\$newVer } on-error={}\r\\r
+ \n }\r\\r
+ \n :do { /file/remove [find where name~(\$disk . \"/awg3vds.backu\\r
+ p\")] } on-error={}\r\\r
+ \n :if (\$backUp) do={\r\\r
+ \n :put (\"Update done: \" . \$img)\r\\r
+ \n :log info \"awg3vds: update done\"\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n"\r
+/user group\r
+add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\\r
+ !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api"\r
+add name=manager policy="local,ssh,ftp,read,write,policy,api,rest-api,!telnet,\\r
+ !reboot,!test,!winbox,!password,!web,!sniff,!sensitive,!romon"\r
+/certificate settings\r
+set builtin-trust-store=\\r
+ capsman,fetch,email,netwatch,container,dns,www,api,reverse-proxy,logging\r
+/container\r
+add comment=awg3vds envlists=awg3vds-env file=usb1/pull/awg-proxy-arm.tar.gz \\r
+ hostname=awg3vds ignore-remote-image-change=yes interface=veth-awg3vds \\r
+ layer-dir="" name=awg-proxy-arm restart-interval=30s restart-max-count=10 \\r
+ restart-policy=on-failure root-dir=/usb1/awg3vds shm-size=4096.0KiB \\r
+ start-on-boot=yes\r
+/container config\r
+set memory-high=200.0MiB tmpdir=/usb1/pull\r
+/container envs\r
+add key=AWG_CLIENT_PUB list=awg3vds-env value=\\r
+ "LnLYVichmfWj/lDZqn2tk7pj2XII/1tnyZaOjf40Tl8="\r
+add key=AWG_CONTENT_PADDING list=awg3vds-env value=54-119\r
+add key=AWG_CPU_C2S list=awg3vds-env value=1\r
+add key=AWG_CPU_S2C list=awg3vds-env value=2\r
+add key=AWG_H1 list=awg3vds-env value=457615290-457646150\r
+add key=AWG_H2 list=awg3vds-env value=1307355386-1307363580\r
+add key=AWG_H3 list=awg3vds-env value=2441734303-2441781787\r
+add key=AWG_H4 list=awg3vds-env value=3719180788-3719195844\r
+add key=AWG_HEADER_PROTECTION_KEY list=awg3vds-env value=\\r
+ "FkGxbrW6ds3YPWNl48OWFEccrLC4tF94z9MnoKUZUsM="\r
+add key=AWG_I1 list=awg3vds-env value=\\r
+ "<b 0x281f01000001000000000000><rc 7><rd 2><r 109>"\r
+add key=AWG_I2 list=awg3vds-env value=\\r
+ "<rc 13><b 0xf0773b61e8e9e015129b><t><r 63><rd 6>"\r
+add key=AWG_I3 list=awg3vds-env value="<rc 6><b 0x021b4d><t><r 47><rd 8>"\r
+add key=AWG_I4 list=awg3vds-env value="<rc 15><b 0x0329d6><t><r 52><rd 8>"\r
+add key=AWG_I5 list=awg3vds-env value=\\r
+ "<rc 13><b 0x220483a81a8cd7e37e66><t><r 22><rd 4>"\r
+add key=AWG_JC list=awg3vds-env value=5\r
+add key=AWG_JMAX list=awg3vds-env value=952\r
+add key=AWG_JMIN list=awg3vds-env value=510\r
+add key=AWG_KEEPALIVE_TIMEOUT list=awg3vds-env value=14-21\r
+add key=AWG_LISTEN list=awg3vds-env value=:51820\r
+add key=AWG_MAX_HANDSHAKE_ATTEMPTS list=awg3vds-env value=12-14\r
+add key=AWG_NO_DF list=awg3vds-env value=1\r
+add key=AWG_PREV_DNS list=awg3vds-env value=10.30.30.33,8.8.4.4\r
+add key=AWG_PREV_TMPDIR list=awg3vds-env value=/usb1/pull\r
+add key=AWG_REJECT_AFTER list=awg3vds-env value=174-195\r
+add key=AWG_REKEY_AFTER list=awg3vds-env value=102-130\r
+add key=AWG_REKEY_TIMEOUT list=awg3vds-env value=6-8\r
+add key=AWG_REMOTE list=awg3vds-env value=89.110.101.17:31031\r
+add key=AWG_S1 list=awg3vds-env value=138\r
+add key=AWG_S2 list=awg3vds-env value=105\r
+add key=AWG_S3 list=awg3vds-env value=51\r
+add key=AWG_S4 list=awg3vds-env value=22\r
+add key=AWG_SERVER_PUB list=awg3vds-env value=\\r
+ "MMWjD/TPNpupCvhXLCAw0xHXV4N6jgtQkg9Pl6pcQhU="\r
+/disk settings\r
+set auto-media-interface=Bridge-Lan\r
+/ip smb\r
+set domain=WORKGROUP enabled=no interfaces=lo\r
+/interface bridge port\r
+add bridge=Bridge-Lan interface=ether2\r
+add bridge=Bridge-Lan interface=ether3\r
+add bridge=Bridge-Lan interface=ether4\r
+add bridge=Bridge-Lan interface=ether5\r
+add bridge=Bridge-Lan interface=wlan1\r
+add bridge=Bridge-Lan interface=wlan2\r
+/interface bridge settings\r
+set allow-fast-path=no use-ip-firewall=yes\r
+/ip neighbor discovery-settings\r
+set discover-interface-list=LAN\r
+/ip settings\r
+set accept-redirects=yes allow-fast-path=no\r
+/ipv6 settings\r
+set accept-router-advertisements-on=none allow-fast-path=no disable-ipv6=yes \\r
+ disable-link-local-address=yes\r
+/interface detect-internet\r
+set detect-interface-list=WAN internet-interface-list=Internet \\r
+ lan-interface-list=LAN wan-interface-list=WAN\r
+/interface list member\r
+add interface="ether1 - Unet" list=WAN\r
+add interface=Bridge-Lan list=LAN\r
+add interface=wg-awg3vds list=WAN\r
+/interface wireguard peers\r
+add allowed-address=10.31.31.0/24,0.0.0.0/0 endpoint-address=172.19.14.102 \\r
+ endpoint-port=51820 interface=wg-awg3vds name=peer1 persistent-keepalive=\\r
+ 14s public-key="MMWjD/TPNpupCvhXLCAw0xHXV4N6jgtQkg9Pl6pcQhU="\r
+add allowed-address=0.0.0.0/0,::/0 client-allowed-address=::/0 \\r
+ endpoint-address=engage.cloudflareclient.com endpoint-port=2408 \\r
+ interface=WARP name=CloudFlare public-key=\\r
+ "bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo="\r
+/interface wireless cap\r
+# \r
+set bridge=Bridge-Lan caps-man-addresses=10.30.30.10 \\r
+ caps-man-certificate-common-names=CAPsMAN-2C900E832E04 certificate=\\r
+ CAP-18FD746E5814 discovery-interfaces=Bridge-Lan enabled=yes interfaces=\\r
+ wlan1,wlan2 lock-to-caps-man=yes\r
+/ip address\r
+add address=10.30.30.81/24 interface=Bridge-Lan network=10.30.30.0\r
+add address=172.19.14.101/30 interface=veth-awg3vds network=172.19.14.100\r
+add address=10.31.31.2/24 interface=wg-awg3vds network=10.31.31.0\r
+add address=172.16.0.2/24 interface=WARP network=172.16.0.0\r
+/ip cloud\r
+set ddns-enabled=yes\r
+/ip dhcp-client\r
+add add-default-route=special-classless default-route-distance=2 \\r
+ default-route-tables=main:2 dhcp-options=clientid,clientid_duid \\r
+ interface="ether1 - Unet" name=client1 use-peer-dns=no use-peer-ntp=no\r
+/ip dhcp-server config\r
+set accounting=no\r
+/ip dhcp-server lease\r
+add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\\r
+ 48:8F:5A:8E:EE:A8 server=masterDHCP\r
+add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\\r
+ F0:DE:F1:91:0D:1E server=masterDHCP\r
+add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\\r
+ 00:80:77:EC:43:86 server=masterDHCP\r
+add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\\r
+ 04:7C:16:36:F5:37 server=masterDHCP\r
+add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\\r
+ 10:2D:41:2C:20:C2 server=masterDHCP\r
+add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\\r
+ 10:08:C1:81:59:5F server=masterDHCP\r
+add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\\r
+ 10:38:1F:D2:5F:13 server=masterDHCP\r
+add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\\r
+ 10:B1:DF:E9:D0:D5 server=masterDHCP\r
+add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\\r
+ FE:02:52:BE:3F:16 server=masterDHCP\r
+add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\\r
+ D4:6D:6D:FD:E5:49 server=masterDHCP\r
+add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\\r
+ CC:42:10:12:46:94 server=masterDHCP\r
+add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\\r
+ 50:CC:F8:85:96:0A server=masterDHCP\r
+add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\\r
+ E4:18:6B:58:34:AB server=masterDHCP\r
+add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\\r
+ 00:27:15:41:97:A9 server=masterDHCP\r
+add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \\r
+ mac-address=C4:82:E1:03:49:10 server=masterDHCP\r
+add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\\r
+ 10:38:1F:82:81:F2 server=masterDHCP\r
+add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \\r
+ server=masterDHCP\r
+add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\\r
+ MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP\r
+/ip dhcp-server network\r
+add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\\r
+ domain-search-list dhcp-option-set=domain-search-set dns-server=\\r
+ 10.30.30.81 domain=WORKGROUP gateway=10.30.30.81 netmask=24 ntp-server=\\r
+ 10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98\r
+/ip dns\r
+set allow-remote-requests=yes servers=10.30.30.33,8.8.4.4\r
+/ip dns static\r
+add address=10.30.30.81 comment=defconf name=router.lan type=A\r
+add address=10.30.30.81 comment=defconf name=master type=A\r
+add address=10.30.30.33 comment=amster name=amster.vados.ru type=A\r
+add address=8.8.8.8 name=dns.google type=A\r
+add address=8.8.4.4 name=dns.google type=A\r
+add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\\r
+ security.cloudflare-dns.com type=A\r
+add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\\r
+ security.cloudflare-dns.com type=A\r
+add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\\r
+ dns.quad9.net type=A\r
+add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\\r
+ dns.quad9.net type=A\r
+add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\\r
+ A\r
+add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\\r
+ A\r
+/ip firewall address-list\r
+add address=10.0.0.0/8 list=RFC1918\r
+add address=172.16.0.0/12 list=RFC1918\r
+add address=192.168.0.0/16 list=RFC1918\r
+add address=91.215.120.206 list=TRUSTED\r
+add address=185.71.70.78 disabled=yes list=TRUSTED\r
+add address=176.53.203.171 disabled=yes list=TRUSTED\r
+add address=176.53.203.170 disabled=yes list=TRUSTED\r
+add address=176.53.202.194 disabled=yes list=TRUSTED\r
+add address=8.8.4.4 disabled=yes list=to_vpn\r
+add address=10.30.30.98 comment=vados-len list=Local2Vpn\r
+add address=89.110.101.17 list=VDS\r
+add address=109.107.177.79 list=TRUSTED\r
+add address=185.71.70.78 disabled=yes list=TRUSTED\r
+add address=176.53.203.171 disabled=yes list=TRUSTED\r
+add address=176.53.203.170 disabled=yes list=TRUSTED\r
+add address=176.53.202.194 disabled=yes list=TRUSTED\r
+add address=2ip.ru list=Test\r
+add address=89.110.101.17 comment=VDSIna list=TRUSTED\r
+add address=10.8.0.0/24 comment="WG VDSIna" list=TRUSTED\r
+add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina\r
+add address=love.ru comment=love.ru list=NoVdsina\r
+add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina\r
+add address=pochta.ru comment=pochta.ru list=NoVdsina\r
+add address=vdsina.com comment=vdsina.com list=NoVdsina\r
+add address=vdsina.ru comment=vdsina.ru list=NoVdsina\r
+add address=youla.ru comment=youla.ru list=NoVdsina\r
+add address=kupiprodai.ru comment=kupiprodai.ru list=NoVdsina\r
+add address=myip.ru list=Test\r
+add address=geoip.co comment=geoip.co list=NoVdsina\r
+add address=x.com list=Twitter\r
+add address=facebook.com list=facebook\r
+add address=fbcd.net list=facebook\r
+add address=comp-lenta.ru comment=comp-lenta.ru list=NoVdsina\r
+add address=128.85.102.70 comment=update.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=wu-b-net.trafficmanager.net. comment=\\r
+ ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist\r
+add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\\r
+ ctldl.windowsupdate.com list=windowsupdateslist\r
+add address=redir.update.msft.com.trafficmanager.net. comment=\\r
+ update.microsoft.com list=windowsupdateslist\r
+add address=geo.prod.do.dsp.trafficmanager.net. comment=\\r
+ geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist\r
+add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\\r
+ kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist\r
+add address=e12437.d.akamaiedge.net. comment=\\r
+ kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist\r
+add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\\r
+ displaycatalog.mp.microsoft.com list=windowsupdateslist\r
+add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \\r
+ comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\\r
+ windowsupdateslist\r
+add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \\r
+ list=windowsupdateslist\r
+add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\\r
+ sls.update.microsoft.com list=windowsupdateslist\r
+add address=fe3.delivery.mp.microsoft.com. comment=\\r
+ fe3cr.delivery.mp.microsoft.com list=windowsupdateslist\r
+add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\\r
+ fe3.delivery.mp.microsoft.com list=windowsupdateslist\r
+add address=fe2cr.update.msft.com.trafficmanager.net. comment=\\r
+ fe2cr.update.microsoft.com list=windowsupdateslist\r
+add address=download.windowsupdate.com.delivery.microsoft.com. comment=\\r
+ download.windowsupdate.com list=windowsupdateslist\r
+add address=wu-f-net.trafficmanager.net. comment=\\r
+ download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist\r
+add address=tsfe.trafficmanager.net. comment=\\r
+ tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist\r
+add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \\r
+ comment=9.au.download.windowsupdate.com list=windowsupdateslist\r
+add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \\r
+ list=windowsupdateslist\r
+add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\\r
+ au.download.windowsupdate.com list=windowsupdateslist\r
+add address=a767.dspw65.akamai.net. comment=\\r
+ download.windowsupdate.com.edgesuite.net list=windowsupdateslist\r
+add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \\r
+ comment=licensing.mp.microsoft.com list=windowsupdateslist\r
+add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\\r
+ consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\\r
+ windowsupdateslist\r
+add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \\r
+ comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist\r
+add address=cdp-f-nlu-net.trafficmanager.net. comment=\\r
+ star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \\r
+ comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist\r
+add address=cdp-f-tlu-net.trafficmanager.net. comment=\\r
+ star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=storeedgefd.xbetservices.akadns.net. comment=\\r
+ storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist\r
+add address=\\r
+ storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \\r
+ comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\\r
+ windowsupdateslist\r
+add address=e16646.dscg.akamaiedge.net. comment=\\r
+ storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\\r
+ windowsupdateslist\r
+add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=bg.microsoft.map.fastly.net. comment=\\r
+ 3.au.download.windowsupdate.com list=windowsupdateslist\r
+add list=windowsupdateslist\r
+add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \\r
+ comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\\r
+ star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=a2033.dscd.akamai.net. comment=\\r
+ star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\\r
+ windowsupdateslist\r
+add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\\r
+ dl.delivery.mp.microsoft.com list=windowsupdateslist\r
+add address=dcat-f-nlu-net.trafficmanager.net. comment=\\r
+ dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \\r
+ comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist\r
+add address=dcat-b-tlu-net.trafficmanager.net. comment=\\r
+ 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=a122.dscg3.akamai.net. comment=\\r
+ tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist\r
+add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\\r
+ geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist\r
+add address=e10370.d.akamaiedge.net. comment=\\r
+ geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist\r
+add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=a1683.dscd.akamai.net. comment=\\r
+ dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist\r
+add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \\r
+ comment=collections.mp.microsoft.com list=windowsupdateslist\r
+add address=a1847.dscd.akamai.net. comment=\\r
+ wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\\r
+ windowsupdateslist\r
+add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=au.download.windowsupdate.com.edgesuite.net. comment=\\r
+ 2.au.download.windowsupdate.com list=windowsupdateslist\r
+add address=a767.dscg3.akamai.net. comment=\\r
+ au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist\r
+add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\\r
+ 4.au.download.windowsupdate.com list=windowsupdateslist\r
+add address=cl-glcb907925.gcdn.co. comment=\\r
+ 4.au.download.windowsupdate.com.delivery.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \\r
+ list=windowsupdateslist\r
+add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \\r
+ comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist\r
+add address=ts-frontend.trafficmanager.net. comment=\\r
+ tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=sds.trafficmanager.net. comment=software-download.microsoft.com \\r
+ list=windowsupdateslist\r
+add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \\r
+ list=windowsupdateslist\r
+add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=e12671.dscd.akamaiedge.net. comment=\\r
+ download.microsoft.com.edgekey.net list=windowsupdateslist\r
+add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \\r
+ list=windowsupdateslist\r
+add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\\r
+ kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist\r
+add address=e12358.d.akamaiedge.net. comment=\\r
+ kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist\r
+add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\\r
+ tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist\r
+add address=dcat-f-tlu-net.trafficmanager.net. comment=\\r
+ tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=a1856.dspw65.akamai.net. comment=\\r
+ tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist\r
+add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \\r
+ list=windowsupdateslist\r
+add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\\r
+ kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist\r
+add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\\r
+ consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\\r
+ windowsupdateslist\r
+add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \\r
+ list=windowsupdateslist\r
+add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \\r
+ list=windowsupdateslist\r
+add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=82.202.162.184 comment=comp-lenta.ru list=NoWG\r
+add address=smtp.mail.me.com.akadns.net. comment=smtp.mail.me.com list=NoWG\r
+add address=17.57.155.37 comment=smtp.mail.me.com.akadns.net list=NoWG\r
+add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina\r
+add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \\r
+ list=windowsupdateslist\r
+add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=purchase.md.mp.microsoft.com.akadns.net. comment=\\r
+ purchase.mp.microsoft.com list=windowsupdateslist\r
+add address=e110219.a.akamaiedge.net. comment=\\r
+ purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist\r
+add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.141 list=windowsupdateslist\r
+add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=storesdk.xbetservices.akadns.net. comment=\\r
+ storesdk.dsx.mp.microsoft.com list=windowsupdateslist\r
+add address=e16646.g.akamaiedge.net. comment=\\r
+ storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist\r
+add address=software-download.microsoft.com.delivery.microsoft.com. comment=\\r
+ software-download.microsoft.com list=windowsupdateslist\r
+add address=download.prss.microsoft.com.akamaized.net. comment=\\r
+ software-download.microsoft.com.delivery.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina\r
+add address=87.250.250.50 comment=YandexDisk list=NoVdsina\r
+add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\\r
+ displaycatalog.mp.microsoft.com list=windowsupdateslist\r
+add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\\r
+ purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist\r
+add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\\r
+ purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist\r
+add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\\r
+ cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist\r
+add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \\r
+ comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist\r
+add address=a1996.dscd.akamai.net. comment=\\r
+ wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\\r
+ windowsupdateslist\r
+add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\\r
+ cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist\r
+add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\\r
+ tas02.sls.update.microsoft.com list=windowsupdateslist\r
+add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\\r
+ cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist\r
+add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \\r
+ comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \\r
+ comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist\r
+add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\\r
+ star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\\r
+ paymentinstruments.mp.microsoft.com list=windowsupdateslist\r
+add address=10.30.30.33 comment=NUC disabled=yes list=NoWG\r
+add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG\r
+add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG\r
+add address=wg.vados.ru comment=VDSina-vpn list=Trusted-VPN\r
+add address=80.85.244.9 list=TRUSTED\r
+add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\\r
+ disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist\r
+add address=185.71.70.78 disabled=yes list=TRUSTED\r
+add address=176.53.203.171 disabled=yes list=TRUSTED\r
+add address=176.53.203.170 disabled=yes list=TRUSTED\r
+add address=176.53.202.194 disabled=yes list=TRUSTED\r
+add address=vdsina.vados.ru comment="!!!VDSina Server!!!" list=NoVdsina\r
+add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS\r
+add address=dns.google comment=Google-dns list=Trusted-DNS\r
+add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\\r
+ Trusted-DNS\r
+add address=time.google.com comment=Google-time list=Trusted-NTP\r
+add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\\r
+ Trusted-NTP\r
+add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP\r
+add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\\r
+ Trusted-NTP\r
+add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\\r
+ Trusted-NTP\r
+add address=cp.vdsina.com comment=VDSina-vpn list=Trusted-VPN\r
+add address=vdsina.ru comment=VDSina-vpn list=Trusted-VPN\r
+add address=ns.vados.ru comment=VDSina-vpn list=Trusted-VPN\r
+add address=vdsina.com comment=VDSina-vpn list=Trusted-VPN\r
+add address=cp.vdsina.ru comment=VDSina-vpn list=Trusted-VPN\r
+add address=ns1.vdsina.ru comment=VDSina-vpn list=Trusted-VPN\r
+add address=ghcr.io comment=GitHub list=Trusted-VPN\r
+add address=github.com comment=GitHub list=Trusted-VPN\r
+add address=149.154.164.13 comment=telegra.ph list=FuckRKN\r
+add address=194.85.61.76 comment=grani.ru list=FuckRKN\r
+add address=109.70.26.37 comment=grani.ru list=FuckRKN\r
+add address=104.16.4.81 comment=xhamster.com list=FuckRKN\r
+add address=104.16.3.81 comment=xhamster.com list=FuckRKN\r
+add address=188.114.96.1 comment=lostfilm.tv list=FuckRKN\r
+add address=188.114.97.1 comment=lostfilm.tv list=FuckRKN\r
+add address=172.67.182.196 comment=rutracker.org list=FuckRKN\r
+add address=104.21.32.39 comment=rutracker.org list=FuckRKN\r
+add address=104.247.81.99 comment=lurkmore.to list=FuckRKN\r
+add address=8.47.69.6 comment=dou.ua list=FuckRKN\r
+add address=8.6.112.6 comment=dou.ua list=FuckRKN\r
+add address=66.254.114.79 comment=youporn.com list=FuckRKN\r
+add address=185.110.92.40 comment=pornolab.net list=FuckRKN\r
+add address=185.110.92.41 comment=pornolab.net list=FuckRKN\r
+add address=104.21.71.238 comment=crimerussia.com list=FuckRKN\r
+add address=172.67.172.95 comment=crimerussia.com list=FuckRKN\r
+add address=149.154.167.99 comment=telegram.org list=FuckRKN\r
+add address=149.154.166.110 comment=api.telegram.org list=FuckRKN\r
+add address=myip.ru comment="!!! Check IP (MYIP.RU) !!!" disabled=yes list=\\r
+ NoVdsina\r
+add address=ipinfo.io comment="!!! Check IP (IPINFO.IO) !!!" list=NoVdsina\r
+add address=cian.ru comment=cian.ru list=NoVdsina\r
+add address=hh.ru comment=hh.ru list=NoVdsina\r
+add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina\r
+add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina\r
+add address=spb.hh.ru comment=spb.hh.ru list=NoVdsina\r
+/ip firewall filter\r
+add action=add-src-to-address-list address-list="Honeypot Hacker" \\r
+ address-list-timeout=12h chain=input comment="block honeypot DNS UDP" \\r
+ connection-state=new dst-port=53 in-interface="ether1 - Unet" protocol=\\r
+ udp src-address-list=!VDS\r
+add action=add-src-to-address-list address-list="Honeypot Hacker" \\r
+ address-list-timeout=4w2d chain=input comment="block honeypot DNS TCP" \\r
+ connection-state=new dst-port=53 in-interface="ether1 - Unet" protocol=\\r
+ tcp src-address-list=!VDS\r
+add action=add-src-to-address-list address-list="Honeypot Hacker" \\r
+ address-list-timeout=4w2d chain=input comment="block honeypot NTP" \\r
+ connection-state=new dst-port=123 in-interface="ether1 - Unet" protocol=\\r
+ udp\r
+add action=add-src-to-address-list address-list="Honeypot Hacker" \\r
+ address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \\r
+ connection-state=new dst-port=5060 in-interface="ether1 - Unet" protocol=\\r
+ udp\r
+add action=add-src-to-address-list address-list="Honeypot Hacker" \\r
+ address-list-timeout=4w2d chain=input comment=\\r
+ "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \\r
+ in-interface-list=WAN protocol=tcp src-address-list=!TRUSTED\r
+add action=accept chain=input comment=\\r
+ "defconf: accept established,related,untracked" connection-state=\\r
+ established,related,untracked\r
+add action=drop chain=input comment="defconf: drop invalid" connection-state=\\r
+ invalid\r
+add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp\r
+add action=accept chain=input comment=\\r
+ "defconf: accept to local loopback (for CAPsMAN)" disabled=yes \\r
+ dst-address=127.0.0.1 in-interface=lo src-address=127.0.0.1\r
+add action=drop chain=input comment="defconf: drop all not coming from LAN" \\r
+ in-interface-list=!LAN\r
+add action=accept chain=forward comment="defconf: accept in ipsec policy" \\r
+ disabled=yes ipsec-policy=in,ipsec\r
+add action=accept chain=forward comment="defconf: accept out ipsec policy" \\r
+ disabled=yes ipsec-policy=out,ipsec\r
+add action=accept chain=forward comment=\\r
+ "defconf: accept established,related, untracked" connection-state=\\r
+ established,related,untracked\r
+add action=drop chain=forward comment="defconf: drop invalid" \\r
+ connection-state=invalid\r
+add action=drop chain=forward comment=\\r
+ "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \\r
+ in-interface-list=WAN\r
+/ip firewall mangle\r
+add action=accept chain=prerouting dst-address-list=RFC1918 \\r
+ in-interface-list=!WAN\r
+add action=mark-connection chain=prerouting comment="NO VPN" \\r
+ dst-address-list=NoVdsina in-interface-list=!WAN new-connection-mark=\\r
+ To-ISP src-address=10.30.30.0/24\r
+add action=mark-routing chain=prerouting comment=All2vpn connection-mark=\\r
+ !To-ISP dst-address=!89.110.101.17 dst-address-list=!NoVdsina \\r
+ new-routing-mark=To-VPN src-address=10.30.30.0/24 src-address-list=!NoWG\r
+add action=change-mss chain=forward comment="MSS on WG" connection-mark=\\r
+ !To-ISP in-interface-list=!WAN new-mss=1380 protocol=tcp tcp-flags=syn \\r
+ tcp-mss=1381-65535\r
+add action=mark-routing chain=prerouting connection-mark=to-vpn-conn \\r
+ disabled=yes new-routing-mark=To-VPN routing-mark=To-VPN src-address=\\r
+ 10.30.30.0/24\r
+add action=mark-connection chain=prerouting comment=\\r
+ "Mark VPN connections to exclude from FastTrack" in-interface=\\r
+ veth-awg3vds log-prefix=Mark-VPN-FT new-connection-mark=VPN_No_FastTrack\r
+add action=accept chain=prerouting comment="SSH To ME" disabled=yes \\r
+ dst-address=10.30.30.81 dst-port=2222 in-interface-list=!WAN protocol=tcp \\r
+ src-address=10.30.30.0/24\r
+add action=mark-routing chain=prerouting comment="VPN Network" disabled=yes \\r
+ dst-address=10.8.0.0/24 log-prefix=VPN-Net new-routing-mark=To-VPN \\r
+ src-address=10.30.30.0/24\r
+/ip firewall nat\r
+add action=masquerade chain=srcnat comment="Default NAT" ipsec-policy=\\r
+ out,none out-interface="ether1 - Unet" src-address=10.30.30.0/24\r
+add action=masquerade chain=srcnat comment="NAT for VPN" routing-mark=To-VPN\r
+add action=dst-nat chain=dstnat comment="dst-nat for acme" dst-port=80 \\r
+ in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \\r
+ to-ports=80\r
+add action=dst-nat chain=dstnat comment="dst-nat for amster HTTPS" dst-port=\\r
+ 443 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \\r
+ to-ports=443\r
+add action=dst-nat chain=dstnat comment="dst-nat for amster ssh" disabled=yes \\r
+ dst-port=22 protocol=tcp src-address-list=VDS to-addresses=10.30.30.33 \\r
+ to-ports=22\r
+add action=dst-nat chain=dstnat comment="dst-nat for amster DNS (TCP)" \\r
+ dst-port=53 in-interface="ether1 - Unet" protocol=tcp src-address-list=\\r
+ VDS to-addresses=10.30.30.33 to-ports=53\r
+add action=dst-nat chain=dstnat comment="dst-nat for amster DNS (UDP)" \\r
+ dst-port=53 in-interface="ether1 - Unet" protocol=udp src-address-list=\\r
+ VDS to-addresses=10.30.30.33 to-ports=53\r
+add action=masquerade chain=srcnat disabled=yes src-address=172.20.200.68/30\r
+add action=masquerade chain=srcnat src-address=172.19.14.100/30\r
+/ip firewall raw\r
+add action=add-dst-to-address-list address-list=NoVdsina \\r
+ address-list-timeout=none-static chain=prerouting content=spb.hh.ru\r
+add action=drop chain=prerouting src-address-list="Honeypot Hacker"\r
+/ip firewall service-port\r
+set ftp disabled=yes\r
+set tftp disabled=yes\r
+set irc disabled=no\r
+set sip disabled=yes\r
+set pptp disabled=yes\r
+set rtsp disabled=no\r
+/ip hotspot user profile\r
+set [ find default=yes ] address-pool=dhcp\r
+/ip route\r
+add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=wg-awg3vds@main \\r
+ routing-table=To-VPN scope=30 target-scope=10\r
+/ip service\r
+set ftp disabled=yes\r
+set telnet disabled=yes\r
+set www disabled=yes port=188\r
+set reverse-proxy disabled=yes\r
+set ssh port=2222\r
+set www-ssl port=4433\r
+set api disabled=yes\r
+set api-ssl disabled=yes\r
+/ip service webserver\r
+set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\\r
+ no index-secure=no rest-plain=no rest-secure=no scep-plain=no \\r
+ webfig-plain=no webfig-secure=no\r
+/ip ssh\r
+set forwarding-enabled=both publickey-authentication-options=verify-required \\r
+ strong-crypto=yes\r
+/ip upnp\r
+set enabled=yes\r
+/ip upnp interfaces\r
+add interface="ether1 - Unet" type=external\r
+add interface=Bridge-Lan type=internal\r
+/ipv6 firewall filter\r
+add action=accept chain=input comment=\\r
+ "defconf: accept established,related,untracked" connection-state=\\r
+ established,related,untracked disabled=yes\r
+add action=drop chain=input comment="defconf: drop invalid" connection-state=\\r
+ invalid disabled=yes\r
+add action=accept chain=input comment="defconf: accept ICMPv6" disabled=yes \\r
+ protocol=icmpv6\r
+add action=accept chain=input comment="defconf: accept UDP traceroute" \\r
+ disabled=yes dst-port=33434-33534 protocol=udp\r
+add action=accept chain=input comment=\\r
+ "defconf: accept DHCPv6-Client prefix delegation." disabled=yes dst-port=\\r
+ 546 protocol=udp src-address=fe80::/10\r
+add action=accept chain=input comment="defconf: accept IKE" disabled=yes \\r
+ dst-port=500,4500 protocol=udp\r
+add action=accept chain=input comment="defconf: accept ipsec AH" disabled=yes \\r
+ protocol=ipsec-ah\r
+add action=accept chain=input comment="defconf: accept ipsec ESP" disabled=\\r
+ yes protocol=ipsec-esp\r
+add action=accept chain=input comment=\\r
+ "defconf: accept all that matches ipsec policy" disabled=yes \\r
+ ipsec-policy=in,ipsec\r
+add action=drop chain=input comment=\\r
+ "defconf: drop everything else not coming from LAN" disabled=yes \\r
+ in-interface-list=!LAN\r
+add action=fasttrack-connection chain=forward comment="defconf: fasttrack6" \\r
+ connection-state=established,related\r
+add action=accept chain=forward comment=\\r
+ "defconf: accept established,related,untracked" connection-state=\\r
+ established,related,untracked\r
+add action=drop chain=forward comment="defconf: drop invalid" \\r
+ connection-state=invalid\r
+add action=drop chain=forward comment=\\r
+ "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6\r
+add action=drop chain=forward comment=\\r
+ "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6\r
+add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \\r
+ hop-limit=equal:1 protocol=icmpv6\r
+add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\\r
+ icmpv6\r
+add action=accept chain=forward comment="defconf: accept HIP" protocol=139\r
+add action=accept chain=forward comment="defconf: accept IKE" dst-port=\\r
+ 500,4500 protocol=udp\r
+add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\\r
+ ipsec-ah\r
+add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\\r
+ ipsec-esp\r
+add action=accept chain=forward comment=\\r
+ "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec\r
+add action=drop chain=forward comment=\\r
+ "defconf: drop everything else not coming from LAN" in-interface-list=\\r
+ !LAN\r
+/routing bgp template\r
+add as=64999 disabled=yes hold-time=4m multihop=yes name=warp routing-table=\\r
+ *C8 use-bfd=yes\r
+/routing filter community-list\r
+add communities=65444:900,65445:643 disabled=no list=COUNTRY_RU\r
+add communities=65444:900,65445:112 disabled=no list=COUNTRY_BY\r
+/routing filter rule\r
+add chain=200 disabled=no rule=""\r
+/system clock\r
+set time-zone-autodetect=no time-zone-name=Europe/Moscow\r
+/system identity\r
+set name=MikroMaster\r
+/system ntp client\r
+set enabled=yes\r
+/system ntp server\r
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes\r
+/system ntp client servers\r
+add address=time.google.com\r
+/system scheduler\r
+add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \\r
+ on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \\r
+ policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \\r
+ start-time=startup\r
+add comment="Every Day Check For Update Scripts" interval=1d name=\\r
+ AM-ScriptInstallUpdate on-event=\\r
+ ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \\r
+ start-time=startup\r
+add comment=awg3vds interval=1d name=awg3vds-update on-event=\\r
+ "/system/script/run awg3vds-update" policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \\r
+ start-date=2026-09-12 start-time=04:30:00\r
+/tool e-mail\r
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \\r
+ server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com\r
+/tool netwatch\r
+add comment="doh-fallback, doh-url=https://security.cloudflare-dns.com/dns-que\\r
+ ry, doh-cert=DigiCert Global Root CA, notify, name=CloudFlare-doh IPv4 1" \\r
+ disabled=yes host=1.1.1.1 type=simple\r
+add comment="doh, doh-url=https://security.cloudflare-dns.com/dns-query, doh-c\\r
+ ert=DigiCert Global Root CA, notify, name=CloudFlare-doh IPv4 2" \\r
+ disabled=yes host=1.0.0.1 type=simple\r
+add comment="doh-fallback, dns-fallback, doh-url=https://dns.google/dns-query,\\r
+ \_doh-cert=DigiCert Global Root G2, notify, name=Google-doh IPv4 1" \\r
+ disabled=yes host=8.8.8.8 type=simple\r
+add comment="doh-fallback, dns-fallback, doh-url=https://dns.google/dns-query,\\r
+ \_doh-cert=DigiCert Global Root G2, notify, name=Google-doh IPv4 2" \\r
+ disabled=yes host=8.8.4.4 type=simple\r
+add comment="doh-fallback, dns-fallback, doh-url=https://dns.quad9.net/dns-que\\r
+ ry, doh-cert=DigiCert Global Root G3, notify, name=Cuad9-doh IPv4 1" \\r
+ disabled=yes host=9.9.9.9 type=simple\r
+add comment="doh-fallback, dns-fallback, doh-url=https://dns.quad9.net/dns-que\\r
+ ry, doh-cert=DigiCert Global Root G3, notify, name=Cuad9-doh IPv4 2" \\r
+ disabled=yes host=149.112.112.112 type=simple\r
+add comment="dns, notify, name=ns1.unet.ws" disabled=yes host=91.192.189.2 \\r
+ type=simple\r
+/user aaa\r
+set accounting=no\r
git.vados.ru / Mikrotiks / backups.git / commitdiff
