--- /dev/null
+# 2026-07-07 22:00:08 by RouterOS 7.23.1\r
+# software id = A8L5-07YF\r
+#\r
+# model = RB952Ui-5ac2nD\r
+# serial number = D3D50CEDCD38\r
+/interface bridge\r
+add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\\r
+ "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\\r
+ Bridge-LAN port-cost-mode=short\r
+/interface ethernet\r
+set [ find default-name=ether1 ] comment=Unet-cable loop-protect=off name=\\r
+ Unet-ether1 rx-flow-control=auto tx-flow-control=auto\r
+set [ find default-name=ether2 ] comment=LAN-2\r
+set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\\r
+ -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3\r
+set [ find default-name=ether4 ] comment=LAN-4\r
+set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\\r
+ -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \\r
+ loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto\r
+/interface wireless\r
+# managed by CAPsMAN\r
+# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding\r
+set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \\r
+ ssid=vados wireless-protocol=802.11\r
+# managed by CAPsMAN\r
+# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding\r
+set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \\r
+ ssid=vados5g wireless-protocol=802.11\r
+/interface wireguard\r
+add comment=WG listen-port=13231 mtu=1320 name=WG\r
+add comment="WG interface for Amnezia route" disabled=yes listen-port=33033 \\r
+ mtu=1360 name=wg-nuc\r
+/interface list\r
+add include=static name=LAN\r
+add name=Internet\r
+add include=Internet name=WAN\r
+/interface wireless security-profiles\r
+set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\\r
+ dynamic-keys supplicant-identity=MikroTik\r
+/iot wiliot servers\r
+set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East"\r
+/ip dhcp-server option\r
+add code=12 name=HostName\r
+add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00"\r
+/ip dhcp-server option sets\r
+add name=HP1505n options=HostName\r
+add name=StartLife1 options=HostName\r
+add name=amsterDev options=HostName\r
+add name=MiTV options=HostName\r
+add name=miller options=HostName\r
+add name=amster options=HostName\r
+add name=garage options=HostName\r
+add name=domain-search-set options=domain-search-list\r
+add name=VADOS-LEN options=HostName\r
+add name=VADOS-NUC options=HostName\r
+add name=MikroNUC options=HostName\r
+add name=master options=HostName\r
+add name=MikroYellow options=HostName\r
+add name="=\"Client ID\"" options=HostName\r
+add name=iVados options=HostName\r
+/ip dns forwarders\r
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no\r
+add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \\r
+ verify-doh-cert=no\r
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no\r
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no\r
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\\r
+ no\r
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\\r
+ no\r
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no\r
+#error exporting "/ip/ipsec/policy/group" (timeout)\r
+/ip ipsec proposal\r
+set [ find default=yes ] disabled=yes\r
+/ip pool\r
+add name=dhcp ranges=10.30.30.83-10.30.30.254\r
+/ip dhcp-server\r
+add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \\r
+ dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \\r
+ name=masterDHCP server-address=10.30.30.81\r
+/ip smb users\r
+set [ find default=yes ] disabled=yes\r
+add disabled=yes name=vados\r
+/ipv6 dhcp-client option\r
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"\r
+add code=12 name=HostName value="\$(HOSTNAME)"\r
+add code=61 name=DUID value=0x00030001488f5a8e1abc\r
+add code=61 name=clientid\r
+/ipv6 dhcp-server option\r
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"\r
+add code=12 name=HostName value="\$(HOSTNAME)"\r
+add code=61 name=CLIENT_DUID\r
+add code=61 name=CLIENT_MAC\r
+/ppp profile\r
+set *FFFFFFFE use-upnp=no\r
+/routing bgp template\r
+set default disabled=no output.network=bgp-networks\r
+/routing table\r
+add disabled=no fib name=To-VPN\r
+add disabled=no fib name=r_to_vpn\r
+/system logging action\r
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email\r
+/system script\r
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\\r
+ global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\\r
+ \n\r\\r
+ \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\\r
+ 0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\\r
+ \n\r\\r
+ \n#:local Script AM-setup\\r
+ \n;\r\\r
+ \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\\r
+ heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\\r
+ sc\") output=user as-value ]->\"data\");\r\\r
+ \n\\r
+ \n#/usb1/mikro_bak_rsa.pub\\r
+ \n\\r
+ \n\r\\r
+ \n#\\r
+ \n\r\\r
+ \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\\r
+ 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\\r
+ \n\r\\r
+ \n#\r\\r
+ \n\\r
+ \n#root.mnuc.backuper\\r
+ \n\\r
+ \n\r\\r
+ \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\\r
+ .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\\r
+ \n\\r
+ \n#:local Script AM-GlobalConfig;\\r
+ \n\r\\r
+ \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\\r
+ heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\\r
+ sc\") output=user as-value ]->\"data\");\r\\r
+ \n\\r
+ \n#/usb1/mikro_bak_rsa.pub\\r
+ \n#:local FetchFile AM-DOHCert.rsc\\r
+ \n\\r
+ \n\r\\r
+ \n\r\\r
+ \n#\\r
+ \n:global MkDir;\\r
+ \n\r\\r
+ \n\\r
+ \n#:local FetchFile Binary.backup\\r
+ \n:local localDir \"\";\\r
+ \n\\r
+ \n\r\\r
+ \n#\$MkDir \$localDir;\r\\r
+ \n\\r
+ \n#\\r
+ \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\\r
+ \$localDir . \$FetchFile);\r\\r
+ \n"\r
+add comment="Global Config Script" dont-require-permissions=no name=\\r
+ AM-GlobalConfig owner=AM-GlobalConfig policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\\r
+ !rsc by Vados\r\\r
+ \n# RouterOS script: AM-GlobalConfig\r\\r
+ \n# Script comment: Global Config Script\r\\r
+ \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\\r
+ \n#\r\\r
+ \n#\r\\r
+ \n# Warning: Dont touch this line!\r\\r
+ \n:global Identity [/system/identity/get name];\r\\r
+ \n:global GlobalConfReady false;\r\\r
+ \n#\r\\r
+ \n#\r\\r
+ \n# Global Url For Amster scripts to fetch\r\\r
+ \n# most be defined in AM-Init-Script or AM-setup scripts\r\\r
+ \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\\r
+ \n:global ScriptsUrlSuffix (a);\r\\r
+ \n:global CheckSumsVerify true;\r\\r
+ \n\r\\r
+ \n:global ScriptUpdatesCRLF true;\r\\r
+ \n:global CommentsInScripts true;\r\\r
+ \n\r\\r
+ \n# Debug output:\r\\r
+ \n:global PrintDebug true; #false;\r\\r
+ \n\r\\r
+ \n# Debug output for specific script:\r\\r
+ \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\\r
+ \n\r\\r
+ \n# Debug logs\r\\r
+ \n# Other actions (disk, email, remote or support) can be used as well.\r\\r
+ \n# I do not recommend using echo - use debug output instead (https://rsc.\\r
+ eworm.de/main/DEBUG.html#debug-output).\r\\r
+ \n#/system/logging/add topics=script,debug action=memory;\r\\r
+ \n\r\\r
+ \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\\r
+ \n:global Domain \"WORKGROUP\";\r\\r
+ \n\r\\r
+ \n:global EmailGeneralTo \"vados@vados.ru\";\r\\r
+ \n#:global EmailGeneralCc \"\";\r\\r
+ \n\r\\r
+ \n# \$ScriptInstallUpdate mod/notification-telegram\r\\r
+ \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\\r
+ \";\r\\r
+ \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\\r
+ \n# Use this to send notifications to a specific topic in group.\r\\r
+ \n#:global TelegramThreadId \"30\";\r\\r
+ \n# Using telegram-chat you have to define trusted chat ids (not group ids\\r
+ !)\r\\r
+ \n# or user names. Groups allow to chat with devices simultaneously.\r\\r
+ \n:global TelegramChatIdsTrusted {\r\\r
+ \n \"454403445\"\r\\r
+ \n \"-1003631309063\"\r\\r
+ \n \"-5124482807\"\r\\r
+ \n \"1087968824\";\r\\r
+ \n};\r\\r
+ \n# \"-5294757340\";\r\\r
+ \n\r\\r
+ \n:global TelegramChatGroups \"(all)\";\r\\r
+ \n#:global TelegramChatGroups \"(all|home|office)\";\r\\r
+ \n\r\\r
+ \n:global NotificationFunctions {\r\\r
+ \n \"email\"\r\\r
+ \n \"telegram\";\r\\r
+ \n};\r\\r
+ \n# Toggle this to disable symbols in notifications.\r\\r
+ \n:global NotificationsWithSymbols true;\r\\r
+ \n:global TerminalColorOutput true;\r\\r
+ \n\r\\r
+ \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\\r
+ \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\\r
+ \n\r\\r
+ \n## Update channel. Possible values: stable, long-term, testing, developm\\r
+ ent\r\\r
+ \n:global updateChannel \"stable\";\r\\r
+ \n\r\\r
+ \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\\r
+ \");\r\\r
+ \n:global CertRenewTime 2w;\r\\r
+ \n:global CertRenewPass (a); #{\r\\r
+ \n# \"\";\r\\r
+ \n# \"v3ry-s3cr3t\";\r\\r
+ \n# \"4n0th3r-s3cr3t\";\r\\r
+ \n#};\r\\r
+ \n:global CertWarnTime 1w;\r\\r
+ \n:global CertIssuedExportPass (a); # {\r\\r
+ \n# \"\";\r\\r
+ \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\\r
+ \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\\r
+ \n#};\r\\r
+ \n\r\\r
+ \n# Script BackupAndUpdate mode, possible values: backup,\r\\r
+ \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\\r
+ n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\\r
+ \n# osupdate - Update if available and creates backups before/after update\\r
+ \_(ignores `forceBackup`)\r\\r
+ \n# Set `forceBackup` to true to always create backups, even\\r
+ \_without updates\r\\r
+ \n# osnotify - Set `forceBackup` to always create backups on every run\r\\r
+ \n:global DevInfoIncludeIP true;\r\\r
+ \n:global BackupAndUpdateMode \"osnotify\"\r\\r
+ \n\r\\r
+ \n:global forceBackup true;\r\\r
+ \n:global BackupPassword \"Peskar55\";\r\\r
+ \n\r\\r
+ \n# SFTP Backup Variables\r\\r
+ \n:global BackupRandomDelay 0;\r\\r
+ \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\\r
+ \n:global BackupUploadUser \$Identity;\r\\r
+ \n:global BackupUploadPass \"root.mnuc.backuper\";\r\\r
+ \n\r\\r
+ \n:global BackupSendBinary true;\r\\r
+ \n:global BackupSendExport true;\r\\r
+ \n:global BackupSendGlobalConfig true;\r\\r
+ \n:global BackupSendScripts true;\r\\r
+ \n\r\\r
+ \n# Remove local file after uploading if no errors\r\\r
+ \n:global BackupRmLocal true;\r\\r
+ \n\r\\r
+ \n# Local Backups Root Directory \r\\r
+ \n:global BackupLocalRoot \"tmpfs\";\r\\r
+ \n\r\\r
+ \n# Encrypt Backup\r\\r
+ \n:global BackupEncrypt true;\r\\r
+ \n\r\\r
+ \n# Sensitive information in Backups\r\\r
+ \n:global BackupSens true;\r\\r
+ \n\r\\r
+ \n# User Export\r\\r
+ \n:global BackupUser true;\r\\r
+ \n\r\\r
+ \n# License Export (not for CHR, will silently skip)\r\\r
+ \n:global BackupLicense false;\r\\r
+ \n\r\\r
+ \n# SSH Keys\r\\r
+ \n:global BackupSshKeys true;\r\\r
+ \n\r\\r
+ \n# Certificate Export\r\\r
+ \n:global BackupCerts true;\r\\r
+ \n\r\\r
+ \n# Certificate Password\r\\r
+ \n:global BackupCertsPasswd \"\";\r\\r
+ \n\r\\r
+ \n# User-Manager Export\r\\r
+ \n:global BackupUserMan false;\r\\r
+ \n\r\\r
+ \n# The Dude Export\r\\r
+ \n:global BackupDude false;\r\\r
+ \n\r\\r
+ \n# User Files to export, comma-separated string or array of strings\r\\r
+ \n# User Files are not removed on backup\r\\r
+ \n# Any directory paths will be removed (/ -> _) on remote file\r\\r
+ \n# Nonpresent files are silently skipped\r\\r
+ \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\\r
+ \n\r\\r
+ \n# load functions and any custom scripts\r\\r
+ \n# [ /system/script/find where name=\"global-config-ov\\r
+ erlay\" ], \\\r\\r
+ \n# [ /system/script/find where name~\"^global-config-o\\r
+ verlay\\\\.d/.\" ]\r\\r
+ \n#\r\\r
+ \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\\r
+ ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\\r
+ \r\\r
+ \n# :onerror Err {\r\\r
+ \n# /system/script/run \$Script;\r\\r
+ \n# } do={\r\\r
+ \n# :log error (\"Loading configuration from configs and functions\"\\r
+ \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\\r
+ \n# }\r\\r
+ \n#}\r\\r
+ \n#:log info \"\\ndevMode = \$devMode\";\r\\r
+ \n#:log info \"\\ndevRunning = \$devRunning\";\r\\r
+ \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \\r
+ GlobalRUN\\r\?\\n\" ] do={\r\\r
+ \n :onerror Err {\r\\r
+ \n /system/script/run \$Script;\r\\r
+ \n } do={\r\\r
+ \n :log error (\"Run script \" . [ /system/script/get \$Script name \\r
+ ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n# signal we are ready\r\\r
+ \n:set GlobalConfReady true;\r\\r
+ \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\\r
+ \n"\r
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \\r
+ owner=AM-GlobalFunc policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\\r
+ !rsc by Vados\r\\r
+ \n# RouterOS script: AM-GglobalFunc\r\\r
+ \n# Script comment: Global functions\r\\r
+ \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\\r
+ \n#\r\\r
+ \n#\r\\r
+ \n# requires RouterOS, version=7.19\r\\r
+ \n# requires device-mode, fetch, scheduler\r\\r
+ \n:local ExitOK false;\r\\r
+ \n:local ScriptName [ :jobname ];\r\\r
+ \n#:global checkRunJob \$SriptName;\r\\r
+ \n#:global fixCRLF;\r\\r
+ \n#:if (\$fixCRLF != false) do={\r\\r
+ \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\\r
+ ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\\r
+ }\r\\r
+ \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\\r
+ et \$fixScript source ] ] \$fixScript};};\r\\r
+ \n#}\r\\r
+ \n:global GlobalFuncReady false;\r\\r
+ \n\r\\r
+ \n# Git commit id & info, expected configuration version\r\\r
+ \n:global CommitId \"main/729/f42d43ae\";\r\\r
+ \n:global CommitTAG \"unknown\";\r\\r
+ \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\\r
+ r: root, in 00:05:03 01.07.2026.\";\r\\r
+ \n\r\\r
+ \n# The variables are received right here.\r\\r
+ \n:global GlobalConfVersion 140;\r\\r
+ \n\r\\r
+ \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\\r
+ \n\r\\r
+ \n:global Identity [/system/identity/get name];\r\\r
+ \n:global IdentityShort [:pick \$Identity 0 18];\r\\r
+ \n\r\\r
+ \n:global devBoardName [/system/resource/get board-name];\r\\r
+ \n:global devMode [/system/device-mode/get mode];\r\\r
+ \n:global devCurArch [/system/resource/get architecture-name];\r\\r
+ \n:global devCurVersion [/system/resource/get version];\r\\r
+ \n\r\\r
+ \n# Variables defined in AM-GlobalConfig.rsc\r\\r
+ \n:global TerminalColorOutput;\r\\r
+ \n:global CommentsInScripts;\r\\r
+ \n:global DetectIpAddrDefault;\r\\r
+ \n:global DetectIpAddrFallback;\r\\r
+ \n:global updateChannel;\r\\r
+ \n:global Domain;\r\\r
+ \n:global EmailGeneralTo;\r\\r
+ \n:global BackupAndUpdateMode;\r\\r
+ \n\r\\r
+ \n# Single functions, without nested functions.\r\\r
+ \n:global MiniDateTimeStamp;\r\\r
+ \n:global MicroDateTimeStamp;\r\\r
+ \n\r\\r
+ \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\\r
+ \n:global LogPrint;\r\\r
+ \n\r\\r
+ \n# DeviceInfo and Updates\r\\r
+ \n:global IsCheckUpdates;\r\\r
+ \n:global WaitCheckUpdates;\r\\r
+ \n:global GetPubIp;\r\\r
+ \n\r\\r
+ \n:global GetArrDeviceInfo;\r\\r
+ \n:global WaitArrDeviceInfo;\r\\r
+ \n\r\\r
+ \n:global devModel;\r\\r
+ \n:global devRunningMode;\r\\r
+ \n\r\\r
+ \n:global devRbRevision;\r\\r
+ \n:global devRbSerialNumber;\r\\r
+ \n:global devRbVerAvail;\r\\r
+ \n\r\\r
+ \n:global runningChannelVersion;\r\\r
+ \n:global runningChannel;\r\\r
+ \n:global runningVersion;\r\\r
+ \n\r\\r
+ \n:global devBuildTime;\r\\r
+ \n:global ROsVerAvail;\r\\r
+ \n:global PkgUpdStatus;\r\\r
+ \n:global currentUpdateChannel;\r\\r
+ \n\r\\r
+ \n:global ScriptInstallUpdate;\r\\r
+ \n\r\\r
+ \n:global DeviceInfo;\r\\r
+ \n\r\\r
+ \n:global OldMode;\r\\r
+ \n\r\\r
+ \n:global ParseKeyValueStore;\r\\r
+ \n:global RandomDelay;\r\\r
+ \n:global GetRandomNumber;\r\\r
+ \n:global EscapeForRegEx;\r\\r
+ \n:global CharacterMultiply;\r\\r
+ \n:global CharacterReplace;\r\\r
+ \n:global CleanFilePath;\r\\r
+ \n:global CleanName;\r\\r
+ \n\r\\r
+ \n:global CommitBrief;\r\\r
+ \n\r\\r
+ \n:global EitherOr;\r\\r
+ \n:global FormatLine;\r\\r
+ \n:global GetRandom20CharAlNum;\r\\r
+ \n:global GetRandom20CharHex;\r\\r
+ \n:global GetRandomNumber;\r\\r
+ \n:global Grep;\r\\r
+ \n:global IfThenElse;\r\\r
+ \n:global MAX;\r\\r
+ \n:global MIN;\r\\r
+ \n:global HumanReadableNum;\r\\r
+ \n\r\\r
+ \n:global IsFullyConnected;\r\\r
+ \n:global IsDNSResolving;\r\\r
+ \n:global IsTimeSync;\r\\r
+ \n:global IsTimeSyncCached;\r\\r
+ \n:global IsTimeSyncResetNtp;\r\\r
+ \n\r\\r
+ \n:global MkDir;\r\\r
+ \n:global RmDir;\r\\r
+ \n:global RmFile;\r\\r
+ \n:global FileGet;\r\\r
+ \n:global Unix2Dos;\r\\r
+ \n:global UrlEncode;\r\\r
+ \n:global WaitForFile;\r\\r
+ \n:global ScriptLock;\r\\r
+ \n:global SendTelegram;\r\\r
+ \n:global NotificationFunctions;\r\\r
+ \n:global SendNotification;\r\\r
+ \n:global SendNotification2;\r\\r
+ \n:global SymbolForNotification;\r\\r
+ \n:global SymbolByUnicodeName;\r\\r
+ \n:global ValidateSyntax;\r\\r
+ \n:global CheckSumsVerify;\r\\r
+ \n:global GlobalConfChanges;\r\\r
+ \n:global GlobalConfMigration;\r\\r
+ \n:global VersionToNum;\r\\r
+ \n:global RequiredRouterOS;\r\\r
+ \n:global ExitError;\r\\r
+ \n:global ExitOnError;\r\\r
+ \n\r\\r
+ \n:global FetchHugeFiles;\r\\r
+ \n:global FetchUserAgentStr;\r\\r
+ \n:global FileExists;\r\\r
+ \n:global CertificateAvailable;\r\\r
+ \n:global CertificateDownload;\r\\r
+ \n:global CertificateNameByCN;\r\\r
+ \n:global CharacterMultiply;\r\\r
+ \n\r\\r
+ \n:global InspectVar;\r\\r
+ \n:global InspectVarRet;\r\\r
+ \n:global ParseCustom;\r\\r
+ \n\r\\r
+ \n:set IsCheckUpdates do={\r\\r
+ \n :local isInfo [:tobool \$1];\r\\r
+ \n :global updateChannel;\r\\r
+ \n :global PkgUpdStatus;\r\\r
+ \n :global currentUpdateChannel;\r\\r
+ \n :global ROsVerAvail;\r\\r
+ \n :global arrDeviceInfo;\r\\r
+ \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\\r
+ \n :local CurrentChannel [ /system/package/update/get channel ];\r\\r
+ \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\\r
+ el) do={\r\\r
+ \n :retry command={/system/package/update set channel=\$updateChannel} \\r
+ \_delay=300ms max=5 on-error={};\r\\r
+ \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\\r
+ \n }\r\\r
+ \n :local Update [ /system/package/update/get ];\r\\r
+ \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\\r
+ \n :set currentUpdateChannel \$Channel;\r\\r
+ \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\\r
+ \n :local StatusPkg \"undefined\";\r\\r
+ \n :log info (\$0 . \" Checking for updates...\");\r\\r
+ \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\\r
+ dates without-paging as-value]->\"status\")} \\\r\\r
+ \n delay=300ms max=5 on-error={};\r\\r
+ \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\\r
+ \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\\r
+ s true; } else={ :set PkgUpdStatus false; }\r\\r
+ \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \\r
+ ] ];\r\\r
+ \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\\r
+ \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\\r
+ \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\\r
+ \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\\r
+ \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\\r
+ \n }\r\\r
+ \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\\r
+ kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\\r
+ \n :return true;\r\\r
+ \n } else={\r\\r
+ \n :return \$PkgUpdStatus;\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set WaitCheckUpdates do={\r\\r
+ \n :global IsCheckUpdates;\r\\r
+ \n :global PkgUpdStatus;\r\\r
+ \n :global currentUpdateChannel;\r\\r
+ \n :global ROsVerAvail;\r\\r
+ \n :global arrDeviceInfo;\r\\r
+ \n :local Status \"\";\r\\r
+ \n :local Update;\r\\r
+ \n :local WaitCount 0;\r\\r
+ \n :if ([ \$IsCheckUpdates true ] = false) do={\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\\r
+ \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\\r
+ \") && \$WaitCount < 60) do={\r\\r
+ \n :delay 1s;\r\\r
+ \n :set WaitCount (\$WaitCount + 1);\r\\r
+ \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\\r
+ \n }\r\\r
+ \n :set Update [ /system/package/update/get ];\r\\r
+ \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\\r
+ \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\\r
+ \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\\r
+ \n :set PkgUpdStatus true;\r\\r
+ \n } else={\r\\r
+ \n :set PkgUpdStatus false;\r\\r
+ \n }\r\\r
+ \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\\r
+ \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\\r
+ \n }\r\\r
+ \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\\r
+ \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \\r
+ do={\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set WaitArrDeviceInfo do={\r\\r
+ \n :global GetArrDeviceInfo;\r\\r
+ \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\\r
+ \n :delay 1s;\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set GetArrDeviceInfo do={\r\\r
+ \n :global LogPrint;\r\\r
+ \n :global arrDeviceInfo;\r\\r
+ \n :global devBoardName;\r\\r
+ \n :global devModel;\r\\r
+ \n :global devRunning;\r\\r
+ \n :global devCurArch;\r\\r
+ \n :global devRbRevision;\r\\r
+ \n :global devRbSerialNumber;\r\\r
+ \n :global devBuildTime;\r\\r
+ \n :global runningChannelVersion;\r\\r
+ \n :global runningChannel;\r\\r
+ \n :global runningVersion;\r\\r
+ \n :global currentUpdateChannel;\r\\r
+ \n :global ROsVerAvail;\r\\r
+ \n\r\\r
+ \n :local DeviceInfo;\r\\r
+ \n :local Resource [/system/resource/get];\r\\r
+ \n :local Update [ /system/package/update/get ];\r\\r
+ \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\\r
+ \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\\r
+ \n :local RouterBoard;\r\\r
+ \n :local IsRouterBoard false;\r\\r
+ \n :local RunningMode \"\";\r\\r
+ \n\r\\r
+ \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\\r
+ \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\\r
+ \n :set runningChannelVersion \$VersionString;\r\\r
+ \n :set runningVersion \$VersionString;\r\\r
+ \n :set runningChannel \"\";\r\\r
+ \n\r\\r
+ \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\\r
+ {\r\\r
+ \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\\r
+ \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\\r
+ len \$VersionString ] ];\r\\r
+ \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\\r
+ \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\\r
+ \r\\r
+ \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\\r
+ \_3] != \"x86\") do={\r\\r
+ \n :do {\r\\r
+ \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\\r
+ \n# :set RouterBoard [ /system/routerboard/get ];\r\\r
+ \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\\r
+ \n :set IsRouterBoard true;\r\\r
+ \n }\r\\r
+ \n } on-error={}\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :do {\r\\r
+ \n :set RunningMode [ /system/device-mode/get mode ];\r\\r
+ \n } on-error={\r\\r
+ \n :do {\r\\r
+ \n :set RunningMode [ /system/device-mode/get running ];\r\\r
+ \n } on-error={\r\\r
+ \n :set RunningMode \"\";\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :set devRunning \$RunningMode;\r\\r
+ \n\r\\r
+ \n :if (\$IsRouterBoard = true) do={\r\\r
+ \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\\r
+ \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\\r
+ \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \\r
+ ];\r\\r
+ \n } else={\r\\r
+ \n :set devModel \$devBoardName;\r\\r
+ \n :set devRbRevision \"\";\r\\r
+ \n :set devRbSerialNumber \"\";\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\\r
+ \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\\r
+ \n\r\\r
+ \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\\r
+ \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\\r
+ \n :set (\$DeviceInfo->\"model\") \$devModel;\r\\r
+ \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\\r
+ \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\\r
+ \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\\r
+ \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\\r
+ \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\\r
+ ion;\r\\r
+ \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\\r
+ \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\\r
+ \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\\r
+ \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\\r
+ current-firmware\") ];\r\\r
+ \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\\r
+ upgrade-firmware\") ];\r\\r
+ \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\\r
+ \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\\r
+ alled-version\") ];\r\\r
+ \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\\r
+ \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\\r
+ ) ];\r\\r
+ \n\r\\r
+ \n :set arrDeviceInfo \$DeviceInfo;\r\\r
+ \n :return \$DeviceInfo;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set DeviceInfo do={\r\\r
+ \n :global GetArrDeviceInfo;\r\\r
+ \n :global GlobalConfVersion;\r\\r
+ \n :global Identity;\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :global FormatLine;\r\\r
+ \n :global CommitBrief;\r\\r
+ \n\r\\r
+ \n :local License [/system/license/get];\r\\r
+ \n :local Snmp [ /snmp/get ];\r\\r
+ \n :local Info [ \$GetArrDeviceInfo ];\r\\r
+ \n\r\\r
+ \n :if ([ :typeof \$Info ] != \"array\") do={\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :return ( \\\r\\r
+ \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\\r
+ \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\\r
+ \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\\r
+ \_. \\\r\\r
+ \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\\r
+ \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\\r
+ \_\\\r\\r
+ \n \"Hardware:\\n\" . \\\r\\r
+ \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \\r
+ \\\r\\r
+ \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\\r
+ n\" . \\\r\\r
+ \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\\r
+ \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\\r
+ \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\\r
+ \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\\r
+ \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\\r
+ \\n\") ] . \\\r\\r
+ \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\\r
+ \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\\r
+ \")) ] . \"\\n\") ] . \\\r\\r
+ \n \"RouterOS:\\n\" . \\\r\\r
+ \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\\r
+ \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\\r
+ \")) ] . \"\\n\") ] . \\\r\\r
+ \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\\r
+ \\n\" . \\\r\\r
+ \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\\r
+ \_\"\\n\" . \\\r\\r
+ \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\\r
+ \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \\r
+ \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\\r
+ \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \\r
+ \"\\n\") ] . \\\r\\r
+ \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\\r
+ \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\\r
+ \_\\\r\\r
+ \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\\r
+ \_\"\\n\") ] . \\\r\\r
+ \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\\r
+ \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\\r
+ ) \\\r\\r
+ \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\\r
+ \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\\r
+ \n \"RouterOS-Scripts:\\n\" . \\\r\\r
+ \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\\r
+ \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\\r
+ tionFunctions ({})}\r\\r
+ \n\r\\r
+ \n:set GetRandom20CharAlNum do={\r\\r
+ \n :global EitherOr;\r\\r
+ \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\\r
+ FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\\r
+ \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\\r
+ \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\\r
+ \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\\r
+ \n\r\\r
+ \n:global checkRunJob;\r\\r
+ \n:set checkRunJob do={\r\\r
+ \n :local Script [ :tostr \$1 ];\r\\r
+ \n :global ScriptLock; \r\\r
+ \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\\r
+ \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\\r
+ :set Job [ /system/script/job/get \$Job ];\r\\r
+ \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\\r
+ stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\\r
+ \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\\r
+ lse; \r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set InspectVar do={\r\\r
+ \n :global InspectVarRet;\r\\r
+ \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set CommitBrief do={\r\\r
+ \n :global CommitId;\r\\r
+ \n :global CommitInfo;\r\\r
+ \n :if (\$CommitId = \"unknown\") do={\r\\r
+ \n :return \"unknown\";\r\\r
+ \n }\r\\r
+ \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set InspectVarRet do={\r\\r
+ \n :local Input \$1;\r\\r
+ \n :local Level (0 + [ :tonum \$2 ]);\r\\r
+ \n :global CharacterReplace;\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :global InspectVarRet;\r\\r
+ \n :local IndentReturn do={\r\\r
+ \n :local Prefix [ :tostr \$1 ];\r\\r
+ \n :local Value [ :tostr \$2 ];\r\\r
+ \n :local Level [ :tonum \$3 ];\r\\r
+ \n :global CharacterMultiply;\r\\r
+ \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\\r
+ fix . \"-> \" . \$Value);\r\\r
+ \n }\r\\r
+ \n :local TypeOf [ :typeof \$Input ];\r\\r
+ \n :local Len [ :len \$Input ];\r\\r
+ \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\\r
+ \n :if (\$TypeOf = \"array\") do={\r\\r
+ \n :foreach Key,Value in=\$Input do={\r\\r
+ \n :set \$Return (\$Return . \"\\n\" . \\\r\\r
+ \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\\r
+ \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\\r
+ \n }\r\\r
+ \n } else={\r\\r
+ \n :if (\$TypeOf = \"str\") do={\r\\r
+ \n :set \$Return (\$Return . \"\\n\" . \\\r\\r
+ \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\\r
+ \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\\r
+ \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\\r
+ \n }\r\\r
+ \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\\r
+ \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if (\$TypeOf != \"nothing\") do={\r\\r
+ \n :set \$Return (\$Return . \"\\n\" . \\\r\\r
+ \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\\r
+ \_\\\r\\r
+ \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set GetPubIp do={\r\\r
+ \n :global DetectIpAddrDefault;\r\\r
+ \n :global DetectIpAddrFallback;\r\\r
+ \n\r\\r
+ \n :local PubIpAddr false;\r\\r
+ \n :local Url \$DetectIpAddrDefault;\r\\r
+ \n :local JobName [ :jobname ];\r\\r
+ \n\r\\r
+ \n :do {\r\\r
+ \n :log debug (\$0 . \" Trying to detect public IP using default serv\\r
+ ice: \" . \$Url . \"...\");\r\\r
+ \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\\r
+ \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\\r
+ )} \\\r\\r
+ \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \\r
+ detect public IP using default service: \" . \$Url . \".\")}\r\\r
+ \n } on-error={\r\\r
+ \n :log error (\$0 . \" Failed to detect public IP using default serv\\r
+ ice: \" . \$Url . \".\");\r\\r
+ \n :set Url \$DetectIpAddrFallBack;\r\\r
+ \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\\r
+ vice: \" . \$Url . \"...\");\r\\r
+ \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\\r
+ \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\\r
+ )} \\\r\\r
+ \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\\r
+ \_detect public IP using fallback service: \" . \$Url . \".\")}\r\\r
+ \n };\r\\r
+ \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\\r
+ \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\\r
+ {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\\r
+ \n :return \$PubIpAddr;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set FormatLine do={\r\\r
+ \n :local Key [ :tostr \$1 ];\r\\r
+ \n :local Value [ :tostr \$2 ];\r\\r
+ \n :local Indent [ :tonum \$3 ];\r\\r
+ \n :local Spaces;\r\\r
+ \n :local Return \"\";\r\\r
+ \n :global CharacterMultiply;\r\\r
+ \n :global EitherOr;\r\\r
+ \n :set Indent [ \$EitherOr \$Indent 16 ];\r\\r
+ \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\\r
+ \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\\r
+ \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\\r
+ n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\\r
+ \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \\r
+ \$Return ]) ] . \$Value)}\r\\r
+ \n :return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set ParseCustom do={\r\\r
+ \n :local Str [ :tostr \$1 ];\r\\r
+ \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\\r
+ \n :local End [ :tostr \$3 ];\r\\r
+ \n :local Num [ :tonum \$4 ];\r\\r
+ \n :local Return;\r\\r
+ \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\\r
+ \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\\r
+ \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\\r
+ lse={\r\\r
+ \n :set End [:find \$rest \$End];\r\\r
+ \n :set Return [:pick \$rest 0 \$End];\r\\r
+ \n }\r\\r
+ \n:return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set LogPrint do={\r\\r
+ \n :local Severity [ :tostr \$1 ];\r\\r
+ \n :local Name [ :tostr \$2 ];\r\\r
+ \n :local Message [ :tostr \$3 ];\r\\r
+ \n :global PrintDebug;\r\\r
+ \n :global PrintDebugOverride;\r\\r
+ \n :global EitherOr;\r\\r
+ \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \\r
+ ];\r\\r
+ \n :local PrintSeverity do={\r\\r
+ \n :global TerminalColorOutput;\r\\r
+ \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\\r
+ \n :local Color { debug=96; info=97; warning=93; error=91 };\r\\r
+ \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\\r
+ \n}\r\\r
+ \n :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\\r
+ \r\\r
+ \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\\r
+ \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\\r
+ \n :if (\$Severity = \"error\") do={:log error \$Log}\r\\r
+ \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\\r
+ \n } else={:log warning \$Log; :set Severity \"warning\"}\r\\r
+ \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\\r
+ erity \$Severity ] . \": \" . \$Message)}\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set CertificateAvailable do={\r\\r
+ \n :local CommonName [ :tostr \$1 ];\r\\r
+ \n :local UseFor [ :tostr \$2 ];\r\\r
+ \n\r\\r
+ \n :global CertificateDownload;\r\\r
+ \n :global ParseKeyValueStore;\r\\r
+ \n\r\\r
+ \n :if ([ :len \$UseFor ] = 0) do={\r\\r
+ \n :log warning (\$0 . \"The intended use is undefined!\");\r\\r
+ \n :set UseFor \"undefined\";\r\\r
+ \n }\r\\r
+ \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\\r
+ \n [ /certificate/settings/get crl-download ] = true && \\\r\\r
+ \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\\r
+ \n :log warning (\$0 . \"This system has low free flash space but \" . \\r
+ \\\r\\r
+ \n \"is configured to download certificate CRLs to system!\");\r\\r
+ \n }\r\\r
+ \n :if ([ :len \$CommonName ] = 0) do={\r\\r
+ \n :log warning (\$0 . \"No CommonName given!\");\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :local CertSettings [ /certificate/settings/get ];\r\\r
+ \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\\r
+ \r\\r
+ \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\\r
+ \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\\r
+ \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\\r
+ \_] ] > 0) do={\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\\r
+ ) do={\r\\r
+ \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \\r
+ \"' not available.\");\r\\r
+ \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\\r
+ ) do={\r\\r
+ \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\\r
+ \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\\r
+ e ] ];\r\\r
+ \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\\r
+ ertVal->\"skid\")) do={\r\\r
+ \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\\r
+ \_= 0) do={\r\\r
+ \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\\r
+ >\"CN\");\r\\r
+ \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \\r
+ is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\\r
+ \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\\r
+ \") ] ];\r\\r
+ \n }\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set CertificateDownload do={\r\\r
+ \n :local CommonName [ :tostr \$1 ];\r\\r
+ \n :global ScriptUpdatesBaseUrl;\r\\r
+ \n :global ScriptUpdatesUrlSuffix;\r\\r
+ \n :global CertificateNameByCN;\r\\r
+ \n :global CleanName;\r\\r
+ \n :global FetchUserAgentStr;\r\\r
+ \n :global RmFile;\r\\r
+ \n :global WaitForFile;\r\\r
+ \n\r\\r
+ \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\\r
+ \r\\r
+ \n \"CommonName '\" . \$CommonName . \"'.\");\r\\r
+ \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\\r
+ \n :do {\r\\r
+ \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\\r
+ -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\\r
+ \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\\r
+ sUrlSuffix) \\\r\\r
+ \n dst-path=\$FileName as-value;\r\\r
+ \n \$WaitForFile \$FileName;\r\\r
+ \n } on-error={\r\\r
+ \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\\r
+ e '\" . \$CommonName . \\\r\\r
+ \n \"' from repository! Trying fallback to mkcert.org...\");\r\\r
+ \n :do {\r\\r
+ \n :local CertSettings [ /certificate/settings/get ];\r\\r
+ \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\\r
+ \_] ] = 0 && \\\r\\r
+ \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \\r
+ || \\\r\\r
+ \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\r
+ \\\r\\r
+ \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\\r
+ \r\\r
+ \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\\r
+ \_Root X1\" ] ] > 0)) do={\r\\r
+ \n :log error (\$0 . \" Required certificate is not available.\");\\r
+ \r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\\r
+ er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\\r
+ \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\\r
+ n ({ \$CommonName }) ] \\\r\\r
+ \n dst-path=\$FileName as-value;\r\\r
+ \n \$WaitForFile \$FileName;\r\\r
+ \n :if ([ /file/get \$FileName size ] = 0) do={\r\\r
+ \n \$RmFile \$FileName;\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n } on-error={\r\\r
+ \n :log error (\$0 . \" Failed downloading certificate with CommonNam\\r
+ e '\" . \$CommonName . \"'!\");\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\\r
+ \n :delay 1s;\r\\r
+ \n \$RmFile \$FileName;\r\\r
+ \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\\r
+ ) do={\r\\r
+ \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\\r
+ +\\\$\") ];\r\\r
+ \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\\r
+ e . \"' still unavailable!\");\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \\r
+ \"_[0-9]+\\\$\") ] do={\r\\r
+ \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\\r
+ \n }\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set CertificateNameByCN do={\r\\r
+ \n :local Match [ :tostr \$1 ];\r\\r
+ \n :global CleanName;\r\\r
+ \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\\r
+ rint=\$Match or name=\$Match) ]->0);\r\\r
+ \n :if ([ :len \$Cert ] = 0) do={\r\\r
+ \n :log warning (\$0 .\" No matching certificate found.\");\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :local CommonName [ /certificate/get \$Cert common-name ];\r\\r
+ \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set CharacterMultiply do={\r\\r
+ \n :local Str [ :tostr \$1 ];\r\\r
+ \n :local Num [ :tonum \$2 ];\r\\r
+ \n :if (\$Num = 0) do={:return \"\"}\r\\r
+ \n :local Return \"\";\r\\r
+ \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\\r
+ \n :return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set FileExists do={\r\\r
+ \n :local FileName [ :tostr \$1 ];\r\\r
+ \n :local Type [ :tostr \$2 ];\r\\r
+ \n :global FileGet;\r\\r
+ \n :local FileVal [ \$FileGet \$FileName ];\r\\r
+ \n :if (\$FileVal = false) do={ :return false; }\r\\r
+ \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\\r
+ \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\\r
+ \_true; }\r\\r
+ \n :return false;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set Grep do={\r\\r
+ \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\\r
+ \n :local Pattern [ :tostr \$2 ];\r\\r
+ \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\\r
+ }\r\\r
+ \n :do {\r\\r
+ \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\\r
+ \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \\r
+ \$Line}\r\\r
+ \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\\r
+ Input ] ];\r\\r
+ \n } while=([ :len \$Input ] > 0);\r\\r
+ \n :return [];\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set HumanReadableNum do={\r\\r
+ \n :local Input [ :tonum \$1 ];\r\\r
+ \n :local Base [ :tonum \$2 ];\r\\r
+ \n :global EitherOr;\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :local Prefix \"kMGTPE\";\r\\r
+ \n :local Pow 1;\r\\r
+ \n :set Base [ \$EitherOr \$Base 1024 ];\r\\r
+ \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\\r
+ \n :if (\$Input < \$Base) do={:return \$Input}\r\\r
+ \n :for I from=0 to=[ :len \$Prefix ] do={\r\\r
+ \n :set Pow (\$Pow * \$Base);\r\\r
+ \n :if (\$Input / \$Base < \$Pow) do={\r\\r
+ \n :set Prefix [ :pick \$Prefix \$I ];\r\\r
+ \n :local Tmp1 (\$Input * 100 / \$Pow);\r\\r
+ \n :local Tmp2 (\$Tmp1 / 100);\r\\r
+ \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\\r
+ \n :return (\$Tmp2 . \".\" . \\\r\\r
+ \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\\r
+ 2 ] + 1) ] . \\\r\\r
+ \n \$Prefix . \$Bin);\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set CleanFilePath do={\r\\r
+ \n :local Path [ :tostr \$1 ];\r\\r
+ \n :global CharacterReplace;\r\\r
+ \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \\r
+ \"//\" \"/\" ]; }\r\\r
+ \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\\r
+ n \$Path ] ]; }\r\\r
+ \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \\r
+ :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\\r
+ \n :return \$Path;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set CleanName do={\r\\r
+ \n :local Input [ :tostr \$1 ];\r\\r
+ \n :local Return \"\";\r\\r
+ \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\\r
+ \n :local Char [ :pick \$Input \$I ];\r\\r
+ \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\\r
+ stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\\r
+ \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\\r
+ \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\\r
+ ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\\r
+ \n };\r\\r
+ \n :set Return (\$Return . \$Char)};\r\\r
+ \n :return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set RandomDelay do={\r\\r
+ \n :local Time [ :tonum \$1 ];\r\\r
+ \n :local Unit [ :tostr \$2 ];\r\\r
+ \n :global EitherOr;\r\\r
+ \n :global GetRandomNumber;\r\\r
+ \n :global MAX;\r\\r
+ \n :if (\$Time = 0) do={:return false}\r\\r
+ \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \\r
+ [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set EscapeForRegEx do={\r\\r
+ \n :local Input [ :tostr \$1 ];\r\\r
+ \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\\r
+ \n :local Return \"\";\r\\r
+ \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\\r
+ \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\\r
+ \n :local Char [ :pick \$Input \$I ];\r\\r
+ \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\\r
+ \n :set Return (\$Return . \$Char);\r\\r
+ \n }\r\\r
+ \n :return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set ExitError do={\r\\r
+ \n :local ExitOK [ :tostr \$1 ];\r\\r
+ \n :local Name [ :tostr \$2 ];\r\\r
+ \n :local Error [ :tostr \$3 ];\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :if (\$ExitOK = \"false\") do={\r\\r
+ \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \\r
+ \\\r\\r
+ \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\\r
+ ror\" . \\\r\\r
+ \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \\r
+ \$Error) \".\" ]);\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set ExitOnError do={\r\\r
+ \n :local Name [ :tostr \$1 ];\r\\r
+ \n :local Error [ :tostr \$2 ];\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\r
+ \\\$\") \\\r\\r
+ \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\\r
+ r\" . \\\r\\r
+ \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\\r
+ rror) \".\" ]);\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set MiniDateTimeStamp do={\r\\r
+ \n :local mikro [ :tobool \$1 ];\r\\r
+ \n /system/clock;\r\\r
+ \n :local vdate [get date];\r\\r
+ \n :local vtime [get time];\r\\r
+ \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\\r
+ \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\\r
+ \n :local M [:tonum \$MM];\r\\r
+ \n :if (\$vdate ~ \".../../....\") do={\r\\r
+ \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\\r
+ \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\\r
+ PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\\r
+ \n :if (\$M>12) do={:set M (\$M - 12)}\r\\r
+ \n :set MM [:pick (100 + \$M) 1 3];\r\\r
+ \n }\r\\r
+ \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\\r
+ \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\\r
+ \n :local HH [:pick \$vtime 0 2];\r\\r
+ \n :local mm [:pick \$vtime 3 5];\r\\r
+ \n :local ss [:pick \$vtime 6 8];\r\\r
+ \n :local Return;\r\\r
+ \n :if (\$mikro = true) do={\r\\r
+ \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\\r
+ \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\\r
+ \n } else={\r\\r
+ \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\\r
+ \r\\r
+ \n }\r\\r
+ \n :return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set WaitForFile do={\r\\r
+ \n :local FileName [ :tostr \$1 ];\r\\r
+ \n :local WaitTime [ :totime \$2 ];\r\\r
+ \n :global CleanFilePath;\r\\r
+ \n :global EitherOr;\r\\r
+ \n :global MAX;\r\\r
+ \n :set FileName [ \$CleanFilePath \$FileName ];\r\\r
+ \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\\r
+ \n :do {\r\\r
+ \n :retry {\r\\r
+ \n /file/get \$FileName;\r\\r
+ \n :return true;\r\\r
+ \n } delay=\$Delay max=10;\r\\r
+ \n } on-error={ }\r\\r
+ \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\\r
+ \n :do {\r\\r
+ \n /file/get \$FileName;\r\\r
+ \n :return true;\r\\r
+ \n } on-error={ }\r\\r
+ \n :delay \$Delay;\r\\r
+ \n :set Delay (\$Delay * 3 / 2);\r\\r
+ \n }\r\\r
+ \n :return false;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set FileGet do={\r\\r
+ \n :local FileName [ :tostr \$1 ];\r\\r
+ \n :global WaitForFile;\r\\r
+ \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :local FileVal false;\r\\r
+ \n :do {\r\\r
+ \n :set FileVal [ /file/get \$FileName ];\r\\r
+ \n } on-error={ }\r\\r
+ \n :return \$FileVal;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set RmDir do={\r\\r
+ \n :local DirName [ :tostr \$1 ];\r\\r
+ \n :global FileGet;\r\\r
+ \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\\r
+ \n :local DirVal [ \$FileGet \$DirName ];\r\\r
+ \n :if (\$DirVal = false) do={\r\\r
+ \n :log debug (\$0 . \" ... which does not exist.\");\r\\r
+ \n :return true;\r\\r
+ \n };\r\\r
+ \n :if (\$DirVal->\"type\" != \"directory\") do={\r\\r
+ \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\\r
+ ory.\");\r\\r
+ \n :return false;\r\\r
+ \n };\r\\r
+ \n :onerror Err {\r\\r
+ \n /file/remove \$DirName;\r\\r
+ \n } do={\r\\r
+ \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\\r
+ : \" . \$Err);\r\\r
+ \n :return false;\r\\r
+ \n };\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set RmFile do={\r\\r
+ \n :local FileName [ :tostr \$1 ];\r\\r
+ \n :global FileGet;\r\\r
+ \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\\r
+ \n :local FileVal [ \$FileGet \$FileName ];\r\\r
+ \n :if (\$FileVal = false) do={\r\\r
+ \n :log debug (\$0 . \" ... which does not exist.\");\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\\r
+ sk\") do={\r\\r
+ \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\\r
+ \r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :onerror Err {\r\\r
+ \n /file/remove \$FileName;\r\\r
+ \n } do={\r\\r
+ \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\\r
+ \_. \$Err); :return false;\r\\r
+ \n }\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set MkDir do={\r\\r
+ \n :local Path [ :tostr \$1 ];\r\\r
+ \n :global CleanFilePath;\r\\r
+ \n :global FileGet;\r\\r
+ \n :global RmDir;\r\\r
+ \n :global WaitForFile;\r\\r
+ \n\r\\r
+ \n :local MkTmpfs do={\r\\r
+ \n :global WaitForFile;\r\\r
+ \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\\r
+ \n :if ([ :len \$TmpFs ] = 1) do={\r\\r
+ \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\\r
+ \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\\r
+ \n /disk/enable \$TmpFs;\r\\r
+ \n }\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\\r
+ \n \$RmDir \"tmpfs\";\r\\r
+ \n :onerror Err {\r\\r
+ \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\\r
+ /get total-memory ] / 3);\r\\r
+ \n \$WaitForFile \"tmpfs\";\r\\r
+ \n } do={\r\\r
+ \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\\r
+ Err);\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :set Path [ \$CleanFilePath \$Path ];\r\\r
+ \n :if (\$Path = \"\") do={\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\\r
+ \n :local PathVal [ \$FileGet \$Path ];\r\\r
+ \n :if (\$PathVal->\"type\" = \"directory\") do={\r\\r
+ \n :log debug (\$0 . \" ... which already exists.\");\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\\r
+ \n :if ([ \$MkTmpfs ] = false) do={\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :onerror Err {\r\\r
+ \n /file/add type=\"directory\" name=\$Path;\r\\r
+ \n \$WaitForFile \$Path;\r\\r
+ \n } do={\r\\r
+ \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \\r
+ \" . \$Err);\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\\r
+ \n :return \$2;\r\\r
+ \n}\r\\r
+ \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\\r
+ \n :return \$2;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set CharacterMultiply do={\r\\r
+ \n :local Str [ :tostr \$1 ];\r\\r
+ \n :local Num [ :tonum \$2 ];\r\\r
+ \n :if (\$Num = 0) do={:return \"\"}\r\\r
+ \n :local Return \"\";\r\\r
+ \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\\r
+ \n :return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set CharacterReplace do={\r\\r
+ \n :local String [ :tostr \$1 ];\r\\r
+ \n :local ReplaceFrom [ :tostr \$2 ];\r\\r
+ \n :local ReplaceWith [ :tostr \$3 ];\r\\r
+ \n :local Return \"\";\r\\r
+ \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\\r
+ \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\\r
+ \r\\r
+ \n :local Pos [ :find \$String \$ReplaceFrom ];\r\\r
+ \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\\r
+ \r\\r
+ \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\\r
+ \_\$String ] ];\r\\r
+ \n }\r\\r
+ \n :return (\$Return . \$String);\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set IfThenElse do={\r\\r
+ \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \\r
+ \$2};\r\\r
+ \n :return \$3;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set EitherOr do={\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \\r
+ \$1 \$2 ]}\r\\r
+ \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\\r
+ \_\$1 \$2 ]}\r\\r
+ \n# this works for boolean values, literal ones with parentheses\r\\r
+ \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set ParseKeyValueStore do={\r\\r
+ \n :local Source \$1;\r\\r
+ \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\\r
+ \n :do {\r\\r
+ \n :return [ :deserialize from=json \$Source ];\r\\r
+ \n } on-error={ }\r\\r
+ \n } \r\\r
+ \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\\r
+ }\r\\r
+ \n :local Result ({});\r\\r
+ \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\\r
+ \n :if ([ :find \$KeyValue \"=\" ]) do={\r\\r
+ \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\\r
+ \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\\r
+ \_:len \$KeyValue ] ];\r\\r
+ \n :if (\$Value=\"true\") do={:set Value true}\r\\r
+ \n :if (\$Value=\"false\") do={:set Value false}\r\\r
+ \n :set (\$Result->\$Key) \$Value;\r\\r
+ \n } else={:set (\$Result->\$KeyValue) true}\r\\r
+ \n }\r\\r
+ \n :return \$Result;\r\\r
+ \n}\r\\r
+ \n:set RequiredRouterOS do={\r\\r
+ \n :local Caller [ :tostr \$1 ];\r\\r
+ \n :local Required [ :tostr \$2 ];\r\\r
+ \n :local Warn [ :tostr \$3 ];\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :global VersionToNum;\r\\r
+ \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\\r
+ \\\$\")) do={\r\\r
+ \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\\r
+ e/update/get installed-version ] ]) do={\r\\r
+ \n :if (\$Warn = \"true\") do={\r\\r
+ \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \\r
+ 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\\r
+ \n \" '\" . \$Caller . \"' (at least specific functionality) requir\\r
+ es RouterOS \" . \$Required . \". Please update!\");\r\\r
+ \n }\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set ValidateSyntax do={\r\\r
+ \n :local Code [ :tostr \$1 ];\r\\r
+ \n :global LogPrint;\r\\r
+ \n :onerror Err {\r\\r
+ \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\\r
+ \n } do={\r\\r
+ \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set VersionToNum do={\r\\r
+ \n :local Input [ :tostr \$1 ];\r\\r
+ \n :local Multi 0x1000000;\r\\r
+ \n :local Return 0;\r\\r
+ \n :global CharacterReplace;\r\\r
+ \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\\r
+ \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\\r
+ \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\\r
+ \r\\r
+ \n }\r\\r
+ \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\\r
+ \n :local Num [ :tonum \$Value ];\r\\r
+ \n :if (\$Multi = 0x100) do={\r\\r
+ \n :if ([ :typeof \$Num ] = \"num\") do={\r\\r
+ \n :set Return (\$Return + 0xff00);\r\\r
+ \n :set Multi (\$Multi / 0x100);\r\\r
+ \n } else={\r\\r
+ \n :if (\$Value = \"zero\") do={ }\r\\r
+ \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \\r
+ }\r\\r
+ \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\\r
+ \r\\r
+ \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\\r
+ lue * \$Multi)); }\r\\r
+ \n :set Multi (\$Multi / 0x100);\r\\r
+ \n }\r\\r
+ \n :return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set ScriptLock do={\r\\r
+ \n :local Script [ :tostr \$1 ];\r\\r
+ \n :local WaitMax [ :totime \$2 ];\r\\r
+ \n :global GetRandom20CharAlNum;\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :global ScriptLockOrder;\r\\r
+ \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\\r
+ \n :set ScriptLockOrder ({});\r\\r
+ \n }\r\\r
+ \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\\r
+ \n :set (\$ScriptLockOrder->\$Script) ({});\r\\r
+ \n }\r\\r
+ \n :local JobCount do={\r\\r
+ \n :local Script [ :tostr \$1 ];\r\\r
+ \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\\r
+ \r\\r
+ \n }\r\\r
+ \n :local TicketCount do={\r\\r
+ \n :local Script [ :tostr \$1 ];\r\\r
+ \n :global ScriptLockOrder;\r\\r
+ \n :local Count 0;\r\\r
+ \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\\r
+ \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \\r
+ + 1)}\r\\r
+ \n }\r\\r
+ \n :return \$Count;\r\\r
+ \n }\r\\r
+ \n :local IsFirstTicket do={\r\\r
+ \n :local Script [ :tostr \$1 ];\r\\r
+ \n :local Check [ :tostr \$2 ];\r\\r
+ \n :global ScriptLockOrder;\r\\r
+ \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\\r
+ \n :if (\$Ticket = \$Check) do={:return true}\r\\r
+ \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\\r
+ o={:return false}\r\\r
+ \n }\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :local AddTicket do={\r\\r
+ \n :local Script [ :tostr \$1 ];\r\\r
+ \n :local Add [ :tostr \$2 ];\r\\r
+ \n :global ScriptLockOrder;\r\\r
+ \n :while (true) do={\r\\r
+ \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\\r
+ \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\\r
+ \n :delay 10ms;\r\\r
+ \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\\r
+ e}\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :local RemoveTicket do={\r\\r
+ \n :local Script [ :tostr \$1 ];\r\\r
+ \n :local Remove [ :tostr \$2 ];\r\\r
+ \n :global ScriptLockOrder;\r\\r
+ \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\\r
+ \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\\r
+ \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\\r
+ \n :delay 10ms;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :local CleanupTickets do={\r\\r
+ \n :local Script [ :tostr \$1 ];\r\\r
+ \n :global ScriptLockOrder;\r\\r
+ \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\\r
+ \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\\r
+ \n }\r\\r
+ \n :set (\$ScriptLockOrder->\$Script) ({});\r\\r
+ \n }\r\\r
+ \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\\r
+ \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\\r
+ \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\\r
+ ist!\");\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n :if ([ \$JobCount \$Script ] = 0) do={\r\\r
+ \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\\r
+ );\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\\r
+ \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\\r
+ t . \"', resetting!\");\r\\r
+ \n :set (\$ScriptLockOrder->\$Script) ({});\r\\r
+ \n /system/script/job/remove [ find where script=\$Script ];\r\\r
+ \n }\r\\r
+ \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\\r
+ \n \$AddTicket \$Script \$MyTicket;\r\\r
+ \n :local WaitInterval (\$WaitMax / 20);\r\\r
+ \n :local WaitTime \$WaitMax;\r\\r
+ \n :while (\$WaitTime > 0 && \\\r\\r
+ \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\\r
+ \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\\r
+ \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\\r
+ \n :delay \$WaitInterval;\r\\r
+ \n }\r\\r
+ \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\\r
+ \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\\r
+ \n \$RemoveTicket \$Script \$MyTicket;\r\\r
+ \n \$CleanupTickets \$Script;\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n \$RemoveTicket \$Script \$MyTicket;\r\\r
+ \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \\r
+ once\" . \\\r\\r
+ \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\\r
+ \_lock\" \"\" ] . \"...\");\r\\r
+ \n :return false;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set SendNotification do={ :onerror Err {\r\\r
+ \n :global SendNotification2;\r\\r
+ \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\\r
+ \_silent=\$4 });\r\\r
+ \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set SendNotification2 do={\r\\r
+ \n :local Notification \$1;\r\\r
+ \n :global NotificationFunctions;\r\\r
+ \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\\r
+ \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\\r
+ ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set SymbolByUnicodeName do={\r\\r
+ \n :local Name [ :tostr \$1 ];\r\\r
+ \n :global EitherOr;\r\\r
+ \n :global SymbolsExtra;\r\\r
+ \n :local Symbols ({\r\\r
+ \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\\r
+ \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\\r
+ \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\\r
+ \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\\r
+ \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\\r
+ \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\\r
+ \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\\r
+ \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\\r
+ \n \"cloud\"=\"\\E2\\98\\81\";\r\\r
+ \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\\r
+ \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\\r
+ \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\\r
+ \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\\r
+ \n \"gear\"=\"\\E2\\9A\\99\";\r\\r
+ \n \"heart\"=\"\\E2\\99\\A5\";\r\\r
+ \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\\r
+ \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\\r
+ \n \"information\"=\"\\E2\\84\\B9\";\r\\r
+ \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\\r
+ \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\\r
+ \n \"link\"=\"\\F0\\9F\\94\\97\";\r\\r
+ \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\\r
+ \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\\r
+ \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\\r
+ \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\\r
+ \n \"scissors\"=\"\\E2\\9C\\82\";\r\\r
+ \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\\r
+ \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\\r
+ \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\\r
+ \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\\r
+ \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\\r
+ \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\\r
+ \n \"star\"=\"\\E2\\AD\\90\";\r\\r
+ \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\\r
+ \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\\r
+ \n }, \$SymbolsExtra);\r\\r
+ \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\\r
+ \n :local Special {\r\\r
+ \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\\r
+ \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\\r
+ \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\\r
+ \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\\r
+ \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\\r
+ \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\\r
+ '!\");\r\\r
+ \n :return \"\";\r\\r
+ \n }\r\\r
+ \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\\r
+ me) ] . \"\\EF\\B8\\8F\");\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set SymbolForNotification do={\r\\r
+ \n :global NotificationsWithSymbols;\r\\r
+ \n :global SymbolByUnicodeName;\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\\r
+ \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\\r
+ \n :local Return \"\";\r\\r
+ \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\\r
+ mbolByUnicodeName \$Symbol ])}\r\\r
+ \n :return (\$Return . \" \");\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\\r
+ \n:set UrlEncode do={\r\\r
+ \n :local Input [ :tostr \$1 ];\r\\r
+ \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\\r
+ \n :local Return \"\";\r\\r
+ \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\\r
+ \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\\r
+ %24\"; \"%25\"; \"%26\"; \"%27\";\r\\r
+ \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \\r
+ \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\\r
+ \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \\r
+ \"%7C\"; \"%7D\"; \"%7E\" };\r\\r
+ \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\\r
+ \n :local Char [ :pick \$Input \$I ];\r\\r
+ \n :local Replace [ :find \$Chars \$Char ];\r\\r
+ \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\\r
+ ce)}\r\\r
+ \n :set Return (\$Return . \$Char);\r\\r
+ \n }\r\\r
+ \n :return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set IsDNSResolving do={\r\\r
+ \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set IsFullyConnected do={\r\\r
+ \n :global IsDNSResolving;\r\\r
+ \n :global IsTimeSync;\r\\r
+ \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\\r
+ \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set IsTimeSync do={\r\\r
+ \n :global IsTimeSyncCached;\r\\r
+ \n :global IsTimeSyncResetNtp;\r\\r
+ \n :if (\$IsTimeSyncCached = true) do={:return true}\r\\r
+ \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\\r
+ \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\\r
+ \n :set IsTimeSyncCached true;\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :local Uptime [ /system/resource/get uptime ];\r\\r
+ \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\\r
+ \n :set IsTimeSyncResetNtp \$Uptime;\r\\r
+ \n }\r\\r
+ \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\\r
+ \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\\r
+ ;\r\\r
+ \n :set IsTimeSyncResetNtp \$Uptime;\r\\r
+ \n /system/ntp/client/set enabled=no;\r\\r
+ \n :delay 20ms;\r\\r
+ \n /system/ntp/client/set enabled=yes;\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\\r
+ \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\\r
+ \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\\r
+ ee license and x86.\";\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :if ([ /ip/cloud/get update-time ] = true) do={\r\\r
+ \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\\r
+ \n :set IsTimeSyncCached true;\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :log debug \"\$0 No time source configured! Returning gracefully...\";\\r
+ \r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set FetchHugeFiles do={\r\\r
+ \n :local ScriptName [ :tostr \$1 ];\r\\r
+ \n :local Url [ :tostr \$2 ];\r\\r
+ \n :local CheckCert [ :tostr \$3 ];\r\\r
+ \n\r\\r
+ \n :global CleanName;\r\\r
+ \n :global FetchUserAgentStr;\r\\r
+ \n :global GetRandom20CharAlNum;\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :global LogPrint;\r\\r
+ \n :global MkDir;\r\\r
+ \n :global RmDir;\r\\r
+ \n :global RmFile;\r\\r
+ \n :global WaitForFile;\r\\r
+ \n\r\\r
+ \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\\r
+ ithout-crl\" ];\r\\r
+ \n\r\\r
+ \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\\r
+ \n :if ([ \$MkDir \$DirName ] = false) do={\r\\r
+ \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \\r
+ \$GetRandom20CharAlNum ]);\r\\r
+ \n :onerror Err {\r\\r
+ \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \\r
+ \\\r\\r
+ \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\\r
+ lue;\r\\r
+ \n } do={\r\\r
+ \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\\r
+ \n \$RmFile \$FileName;\r\\r
+ \n }\r\\r
+ \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\\r
+ \_. \$Err);\r\\r
+ \n \$RmDir \$DirName;\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\\r
+ \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\\r
+ \_not show up.\");\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :local FileSize [ /file/get \$FileName size ];\r\\r
+ \n :local Return \"\";\r\\r
+ \n :local VarSize 0;\r\\r
+ \n :while (\$VarSize != \$FileSize) do={\r\\r
+ \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\\r
+ 768 file=\$FileName as-value ]->\"data\"));\r\\r
+ \n :set FileSize [ /file/get \$FileName size ];\r\\r
+ \n :set VarSize [ :len \$Return ];\r\\r
+ \n :if (\$VarSize > \$FileSize) do={\r\\r
+ \n :delay 100ms;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n \$RmDir \$DirName;\r\\r
+ \n :return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set FetchUserAgentStr do={\r\\r
+ \n :local Caller [ :tostr \$1 ];\r\\r
+ \n :global GlobalScriptsUrl;\r\\r
+ \n :global CommitBrief;\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :local Resource [ /system/resource/get ];\r\\r
+ \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\\r
+ \_\$Resource->\"architecture-name\" . \\\r\\r
+ \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\\r
+ CommitBrief ] . \")\");\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set ScriptInstallUpdate do={ :onerror Err {\r\\r
+ \n :local Scripts [ :toarray \$1 ];\r\\r
+ \n :local NewComment [ :tostr \$2 ];\r\\r
+ \n :global InitSetup;\r\\r
+ \n\r\\r
+ \n :global CommitId;\r\\r
+ \n :global ScriptUpdatesCRLF;\r\\r
+ \n :global GlobalConfVersion;\r\\r
+ \n :global Identity;\r\\r
+ \n :global CertificateAvailable;\r\\r
+ \n :global CheckSumsVerify;\r\\r
+ \n :global GlobalScriptsUrl;\r\\r
+ \n :global SumsDirAndFileName;\r\\r
+ \n :global GlobalScriptsUrlSuffix;\r\\r
+ \n :global EitherOr;\r\\r
+ \n :global FetchUserAgentStr;\r\\r
+ \n :global Grep;\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :global LogPrint;\r\\r
+ \n :global ParseKeyValueStore;\r\\r
+ \n :global RequiredRouterOS;\r\\r
+ \n :global SendNotification2;\r\\r
+ \n :global SymbolForNotification;\r\\r
+ \n :global ValidateSyntax;\r\\r
+ \n :global CommentsInScripts;\r\\r
+ \n\r\\r
+ \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\\r
+ \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\\r
+ hout.\");\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :foreach Script in=\$Scripts do={\r\\r
+ \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\\r
+ \r\\r
+ \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\\r
+ \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \\r
+ Vados\\n\" comment=\$NewComment;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :local CommitIdBefore \$CommitId;\r\\r
+ \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\\r
+ \n :local ReloadGlobal false;\r\\r
+ \n :local DeviceMode [ /system/device-mode/get ];\r\\r
+ \n\r\\r
+ \n :if (\$CheckSumsVerify = true) do={\r\\r
+ \n :local CheckSums ({});\r\\r
+ \n :do {\r\\r
+ \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\\r
+ iptsUrlSuffix);\r\\r
+ \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\\r
+ \r\\r
+ \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\\r
+ ficate=yes-without-crl \\\r\\r
+ \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\\r
+ =user as-value ]->\"data\") ];\r\\r
+ \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\\r
+ s\" ] do={\r\\r
+ \n :local ScriptVal [ /system/script/get \$Script ];\r\\r
+ \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \\r
+ ];\r\\r
+ \n :local SourceNew;\r\\r
+ \n\r\\r
+ \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\\r
+ \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\\r
+ \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\\r
+ \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\\r
+ \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\\r
+ iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \\r
+ \"'!\");\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :do {\r\\r
+ \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\\r
+ \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\\r
+ e\" . \"', as requested.\");\r\\r
+ \n :error true;\r\\r
+ \n }\r\\r
+ \n :if (\$CheckSumsVerify = true) do={\r\\r
+ \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\\r
+ \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\\r
+ ptInfo->\"url-suffix\") ] = 0 && \\\r\\r
+ \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\\r
+ rce\") ] ] = \$CheckSum) do={\r\\r
+ \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\\r
+ >\"name\" . \"' matches, ignoring.\");\r\\r
+ \n :error true;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\\r
+ \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\\r
+ fetch\" ] = false) do={\r\\r
+ \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\\r
+ ng without.\");\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :onerror Err {\r\\r
+ \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\\r
+ lScriptsUrl ];\r\\r
+ \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\\r
+ lobalScriptsUrlSuffix ];\r\\r
+ \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\\r
+ Suffix);\r\\r
+ \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\\r
+ name\") . \"' from url: \" . \$Url);\r\\r
+ \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\\r
+ \r\\r
+ \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\\r
+ ut=user as-value ];\r\\r
+ \n :if (\$Result->\"status\" = \"finished\") do={\r\\r
+ \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\\r
+ \n } \r\\r
+ \n } do={\r\\r
+ \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\\r
+ al->\"name\" . \"': \" . \$Err);\r\\r
+ \n :if (\$Err != \"Fetch failed with status 404\") do={\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\\r
+ \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\\r
+ \?\");\r\\r
+ \n /system/script/remove \$Script;\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n :if (\$CheckSumsVerify = true) do={\r\\r
+ \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\\r
+ riptInfo->\"url-suffix\") ] = 0 && \\\r\\r
+ \n [ :len \$CheckSum ] = 0) do={\r\\r
+ \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\\r
+ pdates with 'ignore=true' in comment.\");\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :if ([ :len \$SourceNew ] = 0) do={\r\\r
+ \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\\r
+ >\"name\") . \"'.\");\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\\r
+ \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\\r
+ lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\\r
+ \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\\r
+ \$ScriptVal->\"source\")) do={\r\\r
+ \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \\r
+ . \"' source did not change. End of lines set to CRLF.\");\r\\r
+ \n if (\$ScriptUpdatesCRLF = false) do={\r\\r
+ \n :put [ :tolf \$SourceNew ];\r\\r
+ \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\\r
+ ) . \"' source update end of lines to LF.\");\r\\r
+ \n }\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\\r
+ \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\\r
+ l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\\r
+ );\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :if (\$CommentsInScripts = true) do={\r\\r
+ \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\\r
+ \_\") ];\r\\r
+ \n :if ([ :len \$CommentLine ] = 0) do={\r\\r
+ \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\\r
+ iptVal->\"name\") . \"' for comment in script body, is not found result Ig\\r
+ noring!\");\r\\r
+ \n :error false;\r\\r
+ \n } else={\r\\r
+ \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\\r
+ ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\\r
+ ] + 2) [ :len \$CommentLine] ]) do={\r\\r
+ \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\\r
+ \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\\r
+ ;\r\\r
+ \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\\r
+ ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\\r
+ \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\\r
+ omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\\r
+ ded!\");\r\\r
+ \n } else={\r\\r
+ \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\\r
+ al->\"name\") . \"' did not change.\");\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n } \r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\\r
+ \"\\23 requires RouterOS, \") ] ]->version);\r\\r
+ \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\\r
+ \_false ] = false) do={\r\\r
+ \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\\r
+ \") . \"' requires RouterOS \" . \\\r\\r
+ \n \$RequiredROS . \", which is not met by your installation. I\\r
+ gnoring!\");\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\\r
+ \\23 requires device-mode, \") ] ];\r\\r
+ \n :local MissingDM ({});\r\\r
+ \n :foreach Feature,Value in=\$RequiredDM do={\r\\r
+ \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\\r
+ ceMode->\$Feature) = false) do={\r\\r
+ \n :set MissingDM (\$MissingDM, \$Feature);\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if ([ :len \$MissingDM ] > 0) do={\r\\r
+ \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\\r
+ \") . \"' requires disabled \" . \\\r\\r
+ \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\\r
+ gnoring!\");\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\\r
+ \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\\r
+ ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n \r\\r
+ \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\\r
+ ript comment: \" . (\$ScriptVal->\"comment\"));\r\\r
+ \n\r\\r
+ \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\\r
+ Val->\"comment\") \\\r\\r
+ \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\\r
+ F \$SourceNew ] \$Script;\r\\r
+ \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\\r
+ \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\\r
+ \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\\r
+ o={\r\\r
+ \n :set ReloadGlobal true;\r\\r
+ \n }\r\\r
+ \n } on-error={ }\r\\r
+ \n }\r\\r
+ \n :if (\$ReloadGlobal = true) do={\r\\r
+ \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\\r
+ \");\r\\r
+ \n :onerror Err {\r\\r
+ \n :global InitSetup (a);\r\\r
+ \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\\r
+ \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\\r
+ ctions failed! \" . \$Err)}\r\\r
+ \n }\r\\r
+ \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\\r
+ \n \$LogPrint warning \$0 (\"The configuration version decreased from \\r
+ \" . \\\r\\r
+ \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\\r
+ \n \". Installed an older version\?\");\r\\r
+ \n }\r\\r
+ \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\\r
+ \n :global GlobalConfChanges;\r\\r
+ \n :global GlobalConfMigration;\r\\r
+ \n :local ChangeLogCode;\r\\r
+ \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\\r
+ \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\\r
+ \n :onerror Err {\r\\r
+ \n [ :parse \$ChangeLogCode ];\r\\r
+ \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \\r
+ . \$Err)}\r\\r
+ \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\\r
+ dation!\")}\r\\r
+ \n }\r\\r
+ \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\\r
+ \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\\r
+ \_do={\r\\r
+ \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\\r
+ \n :do {\r\\r
+ \n :if ([ :typeof \$Migration ] != \"str\") do={\r\\r
+ \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\\r
+ \_\" is not available.\");\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\\r
+ \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\\r
+ \_. \" failed syntax validation!\");\r\\r
+ \n :error false}\r\\r
+ \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \\r
+ . \": \" . \$Migration);\r\\r
+ \n :onerror Err {\r\\r
+ \n [ :parse \$Migration ];\r\\r
+ \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\\r
+ \_\$I . \" failed to run: \" . \$Err)}\r\\r
+ \n } on-error={ }\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :local NotificationMessage (\"The configuration version on \" . \$Id\\r
+ entity . \" increased \" . \\\r\\r
+ \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\\r
+ d modification. \" . \\\r\\r
+ \n \"Please review and update global-config-overlay, then re-run glo\\r
+ bal-config.\");\r\\r
+ \n \$LogPrint info \$0 (\$NotificationMessage);\r\\r
+ \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\\r
+ \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\\r
+ \");\r\\r
+ \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\\r
+ \_do={\r\\r
+ \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\\r
+ \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\\r
+ \r\\r
+ \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\\r
+ \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\\r
+ \n }\r\\r
+ \n } else={\r\\r
+ \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\\r
+ \_changes are not available.\");\r\\r
+ \n\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \\r
+ } else={ :global GlobalConfChanges (a); }\r\\r
+ \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\\r
+ on; } else={ :global GlobalConfMigration (a); }\r\\r
+ \n }\r\\r
+ \n} do={\r\\r
+ \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\\r
+ \n} }\r\\r
+ \n\r\\r
+ \n# load modules\r\\r
+ \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\\r
+ ns\\\\.d|mod)/.\" ] do={\r\\r
+ \n :local ScriptVal [ /system/script/get \$Script ];\r\\r
+ \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\\r
+ \n :onerror Err {\r\\r
+ \n /system/script/run \$Script;\r\\r
+ \n } do={\r\\r
+ \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\\r
+ ailed to run: \" . \$Err);\r\\r
+ \n }\r\\r
+ \n } else={\r\\r
+ \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\\r
+ led syntax validation, skipping.\");\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n# Add and fix global scheduler\r\\r
+ \n:put \"Add or/and fix Global scheduler...\";\r\\r
+ \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\\r
+ ; }\";\r\\r
+ \n:local Comment \"Every Day Set Global Environment Variables\";\r\\r
+ \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \\r
+ = 0) do={\r\\r
+ \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\\r
+ ent=\$OnEvent start-time=startup;\r\\r
+ \n}\r\\r
+ \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\\r
+ \_do={\r\\r
+ \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\\r
+ \n}\r\\r
+ \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\\r
+ ) do={\r\\r
+ \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\\r
+ \n}\r\\r
+ \n# Add Update Script scheduler\r\\r
+ \n:put \"Add or/and fix Update Script scheduler\";\r\\r
+ \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\\r
+ \r\\r
+ \n:set Comment \"Every Day Check For Update Scripts\";\r\\r
+ \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\\r
+ \" ] ] = 0) do={\r\\r
+ \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \\r
+ start-time=startup interval=1d on-event=\$OnEvent;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:onerror Err {\r\\r
+ \n :global GlobalConfReady;\r\\r
+ \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\\r
+ \_not ready.\"); }; } delay=100ms max=5;\r\\r
+ \n\r\\r
+ \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\\r
+ \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \\r
+ \") ] . \\\r\\r
+ \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\\r
+ \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\\r
+ \n # signal we are ready\r\\r
+ \n:set GlobalFuncReady true;\r\\r
+ \n:set ExitOK true;\r\\r
+ \n\r\\r
+ \n:log info (\$0 . \"Global configs ready!\");\r\\r
+ \n} do={\r\\r
+ \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\\r
+ \n}\r\\r
+ \n"\r
+add comment=\\r
+ "Lookup IP addresses for RKN list and add them to firewall address-list" \\r
+ dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \\r
+ policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \\r
+ source="#!rsc by Vados\r\\r
+ \n# RouterOS script: AM-RKN-dnsLookup\r\\r
+ \n# Script comment: Lookup IP addresses for RKN list and add them to firew\\r
+ all address-list\r\\r
+ \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\\r
+ \n#\r\\r
+ \n#\r\\r
+ \n# requires RouterOS, version=7.19\r\\r
+ \n# requires device-mode, fetch\r\\r
+ \n#\r\\r
+ \n# Script description: This script is intended to be run periodically, e.\\r
+ g. once a day, to update the IP addresses in the firewall address-list bas\\r
+ ed on the RKN list.\r\\r
+ \n# It resolves the domain names in the RKN list and a\\r
+ dds the corresponding IP addresses to the specified firewall address-list.\\r
+ \r\\r
+ \n# The script also handles CNAME records by following\\r
+ \_them until it finds A records.\r\\r
+ \n# Usage:\r\\r
+ \n# /system/script { run AM-RKN-dnsLookup; }\r\\r
+ \n:local ScriptName [ :jobname ];\r\\r
+ \n\r\\r
+ \n:global dnsLookupReady false;\r\\r
+ \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\\r
+ \_true; }\r\\r
+ \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\\r
+ \n:set dnsLookupReady false;\r\\r
+ \n\r\\r
+ \n:local arrRKN {\r\\r
+ \n \"telegra.ph\"\r\\r
+ \n \"grani.ru\"\r\\r
+ \n \"xhamster.com\"\r\\r
+ \n \"lostfilm.tv\"\r\\r
+ \n \"rutracker.org\"\r\\r
+ \n \"lurkmore.to\"\r\\r
+ \n \"dou.ua\"\r\\r
+ \n \"youporn.com\"\r\\r
+ \n \"pornolab.net\"\r\\r
+ \n \"crimerussia.com\"\r\\r
+ \n \"telegram.org\"\r\\r
+ \n \"api.telegram.org\"\r\\r
+ \n \"facebook.com\"\r\\r
+ \n \"instagram.com\"\r\\r
+ \n \"x.com\"\r\\r
+ \n \"twitter.com\"\r\\r
+ \n \"youtube.com\"\r\\r
+ \n \"googleapis.com\"\r\\r
+ \n \"youtu.be\"\r\\r
+ \n \"googlevideo.com\"\r\\r
+ \n \"gstatic.com\"\r\\r
+ \n \"googleusercontent.com\"\r\\r
+ \n \"nhacmp3youtube.com\"\r\\r
+ \n \"telegram.me\"\r\\r
+ \n \"t.me\";}\r\\r
+ \n\r\\r
+ \n:local ListRKN \"RKN-dnsLookup\";\r\\r
+ \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\\r
+ \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\\r
+ ={\r\\r
+ \n /ip firewall address-list remove \$aListItem;\r\\r
+ \n}\r\\r
+ \n:foreach aItem in=\$arrRKN do={\r\\r
+ \n# :do {\r\\r
+ \n :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\\r
+ ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\\r
+ \n# } on-error={\r\\r
+ \n# :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\\r
+ \n# }\r\\r
+ \n :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \\r
+ do={\r\\r
+ \n :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\\r
+ \n :local newAddress [/ip dns cache all get \$dnsRecord data];\\r
+ \r\\r
+ \n :do {\r\\r
+ \n /ip firewall address-list add list=\$ListRKN address=\$newA\\r
+ ddress comment=\$aItem;\r\\r
+ \n :log warning \"Successfully adding ip to list A record: \\r
+ \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\\r
+ \n } on-error={\r\\r
+ \n :log error \"error when adding ip to list A record: \$dn\\r
+ sRecord, address: \$newAddress domain: \$aItem\";\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\\r
+ \n :local cname;\r\\r
+ \n :local nextCname;\r\\r
+ \n :local cnameAddress;\r\\r
+ \n :set cname [/ip dns cache all find where (name=\$aItem && ty\\r
+ pe=\"CNAME\")];\r\\r
+ \n :set nextCname [/ip dns cache all find where (name=[/ip dns \\r
+ cache all get \$cname data] && type=\"CNAME\")];\r\\r
+ \n :while (\$nextCname != \"\") do={\r\\r
+ \n :set cname \$nextCname;\r\\r
+ \n :set nextCname [/ip dns cache all find where (name=[/ip \\r
+ dns cache all get \$cname data] && type=\"CNAME\")];\r\\r
+ \n }\r\\r
+ \n :foreach aRecord in=[/ip dns cache all find where (name=[/ip\\r
+ \_dns cache all get \$cname data] && type=\"A\")] do={\r\\r
+ \n :do {\r\\r
+ \n :set cnameAddress [/ip dns cache all get \$aRecord d\\r
+ ata];\r\\r
+ \n /ip firewall address-list add list=\$ListRKN address\\r
+ =\$cnameAddress comment=\$aItem;\r\\r
+ \n :log warning \"Succesfully adding ip to list CNAME r\\r
+ ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \\r
+ \$aItem.\";\r\\r
+ \n# /ip firewall raw add action=add-dst-to-address-list\\r
+ \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\\r
+ g comment=\$aItem content=\$aItem;\r\\r
+ \n } on-error={\r\\r
+ \n :log error \"error when adding ip to list CNAME reco\\r
+ rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\\r
+ tem.\";\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\\r
+ ={\r\\r
+ \n :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\\r
+ ptName . \" is NOT SET! Fix It Now!\");\r\\r
+ \n /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \\r
+ run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\\r
+ olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\\r
+ \_start-time=startup;\r\\r
+ \n }\r\\r
+ \n:set dnsLookupReady true;\r\\r
+ \ndelay 2s; \r\\r
+ \n:global dnsLookupReady (a);\r\\r
+ \n"\r
+add dont-require-permissions=no name="renameLists " owner=vados policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\\r
+ local oldName \"Test\";\\r
+ \n:local newName \"Test-IP\";\\r
+ \n/ip firewall address-list\\r
+ \n:foreach i in=[find list=\$oldName] do={\\r
+ \nset \$i list=\$newName;\\r
+ \n}\\r
+ \n"\r
+add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\\r
+ #############Script Settings##################\\r
+ \n\\r
+ \n:local \"IF-TUN\" \"6to4-tun\"\\r
+ \n:local \"IF-LOC\" \"Bridge-LAN\"\\r
+ \n:local \"POOL-6TO4\" \"poolV6-local\"\\r
+ \n:local \"force-update\" false\\r
+ \n############ use then static ip #######################\\r
+ \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \\r
+ address]\\r
+ \n#:local \"interface\" \"ext\"\\r
+ \n:local bound 0\\r
+ \n\\r
+ \n###############################################\\r
+ \n\\r
+ \n:local 6to4prefix do={\\r
+ \n :global dec2hex\\r
+ \n :local ipv4 \$1\\r
+ \n :local ipv6 \"2002:\"\\r
+ \n :for i from=0 to=2 step=1 do={ \\r
+ \n :if ( \$i = 2) do={\\r
+ \n :set ipv6 (\$ipv6.\":\")\\r
+ \n }\\r
+ \n :local fp [:find \$ipv4 \".\"]\\r
+ \n :if ( \$fp > 0 ) do={\\r
+ \n :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\\r
+ \n :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\\r
+ \n }\\r
+ \n }\\r
+ \n :return (\$ipv6.[\$dec2hex \$ipv4])\\r
+ \n}\\r
+ \n:local \"str_replace\" do={\\r
+ \n :local \"str-pos\" [:find \$1 \$2]\\r
+ \n :local \"str-len\" [:len \$2]\\r
+ \n :local str \"\"\\r
+ \n :local rest \$1\\r
+ \n :while (\$\"str-pos\" >= 0) do={\\r
+ \n :local t [:pick \$rest 0 \$\"str-pos\"]\\r
+ \n :if ( \$4 > 0 ) do={\\r
+ \n :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\\r
+ \n :set str (\$str.\$5)\\r
+ \n }\\r
+ \n }\\r
+ \n :set str (\$str.\$t.\$3)\\r
+ \n :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\\r
+ st]]\\r
+ \n :set \"str-pos\" [:find \$rest \$2]\\r
+ \n }\\r
+ \n :return (\$str.\$rest)\\r
+ \n}\\r
+ \n\\r
+ \n:if (\$bound=1) do={\\r
+ \n :local t [:find \$\"lease-address\" \"/\"]\\r
+ \n\\r
+ \n :if ( \$t >= 0 ) do={\\r
+ \n :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\\r
+ \n }\\r
+ \n\\r
+ \n :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\\r
+ ) do={\\r
+ \n /interface 6to4 add !keepalive local-address=\$\"lease-address\"\\r
+ \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\\r
+ \n :set \"force-update\" true\\r
+ \n }\\r
+ \n\\r
+ \n :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\\r
+ cal-address];\\r
+ \n\\r
+ \n :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \\r
+ true) do={\\r
+ \n /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\\r
+ ease-address\"\\r
+ \n /ipv6 address remove [find interface=\$\"IF-TUN\"]\\r
+ \n /ipv6 address remove [find interface=\$\"IF-LOC\"]\\r
+ \n /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\\r
+ \"::/0\"]\\r
+ \n :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\\r
+ \n :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\\r
+ \_0) do={ \\r
+ \n /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\\r
+ \".\":1::/64\") prefix-length=64\\r
+ \n } else={\\r
+ \n /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \\r
+ prefix=(\$\"pool-prefix\".\":1::/64\")\\r
+ \n }\\r
+ \n /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\\r
+ \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\\r
+ ace=\$\"IF-TUN\" advertise=no\\r
+ \n /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\\r
+ =\$\"IF-LOC\" advertise=yes\\r
+ \n /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\\r
+ \"IF-TUN\")\\r
+ \n :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\\r
+ s]\\r
+ \n :set t [:pick \$t 0 [:find \$t \"/\"]]\\r
+ \n :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\\r
+ \_= 0) do={\\r
+ \n /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\\r
+ [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\\r
+ \n } else={\\r
+ \n /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \\r
+ where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\\r
+ \n }\\r
+ \n :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\\r
+ -LOC\"] = 0) do={\\r
+ \n /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\\r
+ on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\\r
+ \n }\\r
+ \n :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \\r
+ 0) do={\\r
+ \n /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\\r
+ onfiguration=yes\\r
+ \n }\\r
+ \n }\\r
+ \n}"\r
+add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\\r
+ global MAC2EUI64 do={\\r
+ \n :local EUI64 \"\"\\r
+ \n :local MAC \$1\\r
+ \n :local HEX2DEC \"0123456789ABCDEF\"\\r
+ \n :for i from=0 to=5 step=1 do={\\r
+ \n :if ( \$i = 0 ) do={\\r
+ \n :set EUI64 [:pick \$MAC 0]\\r
+ \n :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\\r
+ \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\\r
+ \n }\\r
+ \n :if ( \$i = 1 || \$i = 3) do={\\r
+ \n :set EUI64 (\$EUI64.\":\")\\r
+ \n }\\r
+ \n :if ( \$i = 2 ) do={\\r
+ \n :set EUI64 (\$EUI64.\"FF:FE\")\\r
+ \n }\\r
+ \n :if ( [:find \$MAC \":\"] = 2 ) do={\\r
+ \n :set MAC [:pick \$MAC 3 [:len \$MAC]]\\r
+ \n :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\\r
+ \n }\\r
+ \n }\\r
+ \n :return (\$EUI64)\\r
+ \n}\\r
+ \n\\r
+ \n:global dec2hex do={\\r
+ \n :local hex \"\"\\r
+ \n :local dec [:tonum \$1]\\r
+ \n :for i from=0 to=4 step=4 do={\\r
+ \n :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\\r
+ c>>\$i)&0xf)+1)].\$hex)\\r
+ \n }\\r
+ \n :return ([:tostr \$hex])\\r
+ \n}"\r
+add comment=Generator dont-require-permissions=no name=proxySet owner=vados \\r
+ policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \\r
+ source="# 2. WireGuard interface\r\\r
+ \n/interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDg\\r
+ uMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=21641\r\\r
+ \n/interface/wireguard/peers/add interface=wg-VDSina public-key=\"o5IgCl1/\\r
+ G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcYQnD9\\r
+ N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=10.30.30.33 endpoint-port=518\\r
+ 20 allowed-address=0.0.0.0/0 persistent-keepalive=11\r\\r
+ \n/ip/address/add address=10.9.0.3/32 interface=wg-VDSina\r\\r
+ \n\r\\r
+ \n# 3. DNS\r\\r
+ \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\\r
+ n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\\r
+ \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /system/script/add name=VDS\\r
+ ina-prev-dns comment=\"\$prevDNS\" source=\"\" }\r\\r
+ \n/ip/dns/set servers=8.8.4.4\r\\r
+ \n/ip/route/add dst-address=8.8.4.4/32 gateway=wg-VDSina distance=1 commen\\r
+ t=VDSina-dns\r\\r
+ \n\r\\r
+ \n# 4. Enable WireGuard\r\\r
+ \n/interface/wireguard/enable wg-VDSina\r\\r
+ \n"\r
+add dont-require-permissions=no name=AM-Telegram-Send owner=vados policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\\r
+ !rsc by Vados\\r
+ \n# RouterOS script: AM-Telegram-Send\\r
+ \n# Script comment: Mini script for send messages to admin Telegram chat\\r
+ \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\\r
+ \n#\\r
+ \n#\\r
+ \n# requires RouterOS, version=7.19\\r
+ \n# requires device-mode, fetch\\r
+ \n#\\r
+ \n# Script description: \\r
+ \n#\\r
+ \n#\\r
+ \n# Usage:\\r
+ \n# /system/script { run AM-Telegram-Send \"Message here )))\"; }\\r
+ \n\\r
+ \n/system/script\\r
+ \nadd name=telegram-send dont-require-permissions=no source={\\r
+ \n :global TelegramTokenId;\\r
+ \n :global TelegramChatId;\\r
+ \n :local message [:tostr \$1];\\r
+ \n :local identity [/system/identity/get name];\\r
+ \n :local sendMsg (\"[\".\$identity.\"] \".\$message)\\r
+ \n /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\\r
+ \n \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\\r
+ \n \"&text=\".\$sendMsg.\\\\r
+ \n \"&parse_mode=HTML\") \\\\r
+ \n mode=https keep-result=no\\r
+ \n}"\r
+add dont-require-permissions=no name=telegram-send owner=vados policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\\r
+ \n :global TelegramTokenId;\\r
+ \n :global TelegramChatId;\\r
+ \n :local message [:tostr \$1];\\r
+ \n :local identity [/system/identity/get name];\\r
+ \n :local sendMsg (\"[\".\$identity.\"] \".\$message)\\r
+ \n /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\\r
+ \n \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\\r
+ \n \"&text=\".\$sendMsg.\\\\r
+ \n \"&parse_mode=HTML\") \\\\r
+ \n mode=https keep-result=no\\r
+ \n"\r
+/user group\r
+add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\\r
+ t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon"\r
+/ip smb\r
+set enabled=no interfaces=lo\r
+/interface bridge port\r
+add bridge=Bridge-LAN interface=ether5\r
+add bridge=Bridge-LAN interface=ether2\r
+add bridge=Bridge-LAN interface=ether4 trusted=yes\r
+add bridge=Bridge-LAN interface=ether3\r
+add bridge=Bridge-LAN interface=wlan2\r
+add bridge=Bridge-LAN interface=wlan1\r
+/interface bridge settings\r
+set use-ip-firewall=yes\r
+/ip firewall connection tracking\r
+set udp-timeout=10s\r
+/ip neighbor discovery-settings\r
+set discover-interface-list=LAN lldp-med=no lldp-poe-power=no\r
+/ip settings\r
+set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\\r
+ 8192\r
+/ipv6 settings\r
+set disable-ipv6=yes disable-link-local-address=yes forward=no \\r
+ max-neighbor-entries=8192 multipath-hash-policy=l4\r
+/interface detect-internet\r
+set detect-interface-list=WAN internet-interface-list=Internet \\r
+ lan-interface-list=LAN request-interval=1m wan-interface-list=WAN\r
+/interface l2tp-server server\r
+set authentication=mschap2 use-ipsec=yes\r
+/interface list member\r
+add interface=Unet-ether1 list=Internet\r
+add interface=WG list=WAN\r
+add interface=Bridge-LAN list=LAN\r
+add interface=Unet-ether1 list=WAN\r
+/interface wireguard peers\r
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\\r
+ 109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \\r
+ persistent-keepalive=10s public-key=\\r
+ "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4="\r
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 disabled=yes \\r
+ endpoint-address=10.30.30.33 endpoint-port=55055 interface=wg-nuc name=\\r
+ NUC persistent-keepalive=11s public-key=\\r
+ "+OvzAjLC45Td52hjkQPmpGvC3RGhZ+Q2CDMJ1U/D4Rw="\r
+/interface wireless cap\r
+# \r
+set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \\r
+ caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\\r
+ CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\\r
+ wlan2,wlan1 lock-to-caps-man=yes\r
+/ip address\r
+add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0\r
+add address=10.8.0.2/24 interface=WG network=10.8.0.0\r
+add address=192.168.33.2/24 disabled=yes interface=wg-nuc network=\\r
+ 192.168.33.0\r
+/ip cloud\r
+set update-time=no\r
+/ip dhcp-client\r
+add add-default-route=special-classless check-gateway=arp comment=Unet-client \\r
+ default-route-distance=2 default-route-tables=main:2 dhcp-options=\\r
+ hostname,clientid_duid interface=Unet-ether1 name=UnetDHCP use-peer-dns=\\r
+ no use-peer-ntp=no\r
+/ip dhcp-server config\r
+set accounting=no\r
+/ip dhcp-server lease\r
+add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\\r
+ 48:8F:5A:8E:EE:A8 server=masterDHCP\r
+add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\\r
+ F0:DE:F1:91:0D:1E server=masterDHCP\r
+add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\\r
+ 00:80:77:EC:43:86 server=masterDHCP\r
+add address=10.30.30.70 dhcp-option=domain-search-list,HostName \\r
+ dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP\r
+add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\\r
+ 04:7C:16:36:F5:37 server=masterDHCP\r
+add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\\r
+ 10:2D:41:2C:20:C2 server=masterDHCP\r
+add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\\r
+ 10:08:C1:81:59:5F server=masterDHCP\r
+add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\\r
+ 10:38:1F:D2:5F:13 server=masterDHCP\r
+add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\\r
+ 10:B1:DF:E9:D0:D5 server=masterDHCP\r
+add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\\r
+ FE:02:52:BE:3F:16 server=masterDHCP\r
+add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\\r
+ D4:6D:6D:FD:E5:49 server=masterDHCP\r
+add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\\r
+ CC:42:10:12:46:94 server=masterDHCP\r
+add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\\r
+ 50:CC:F8:85:96:0A server=masterDHCP\r
+add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\\r
+ E4:18:6B:58:34:AB server=masterDHCP\r
+add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\\r
+ 00:27:15:41:97:A9 server=masterDHCP\r
+add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \\r
+ mac-address=C4:82:E1:03:49:10 server=masterDHCP\r
+add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\\r
+ 10:38:1F:82:81:F2 server=masterDHCP\r
+add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \\r
+ dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP\r
+add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \\r
+ dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP\r
+add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \\r
+ server=masterDHCP\r
+add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\\r
+ MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP\r
+add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \\r
+ mac-address=F0:75:5D:1E:5F:71 server=masterDHCP\r
+add address=10.30.30.100 client-id=iVados dhcp-option=HostName \\r
+ dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP\r
+add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\\r
+ ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \\r
+ dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \\r
+ use-src-mac=yes\r
+/ip dhcp-server network\r
+add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\\r
+ domain-search-list dhcp-option-set=domain-search-set dns-server=\\r
+ 10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\\r
+ 24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98\r
+/ip dns\r
+set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \\r
+ doh-max-server-connections=20 servers=8.8.8.8 verify-doh-cert=yes\r
+/ip dns static\r
+add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \\r
+ type=A\r
+add address=109.107.177.79 name=vds.vados.ru type=A\r
+add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \\r
+ regexp=*.vados.ru type=NS\r
+add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\\r
+ "\".*\\\\.vados\\\\.ru\"" type=FWD\r
+add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\\r
+ 10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\\r
+ FWD\r
+add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\\r
+ ns.vados.ru.local type=A\r
+add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\\r
+ vados.ru ns=ns.vados.ru.local type=NS\r
+add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A\r
+add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\\r
+ dns.google type=A\r
+add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A\r
+add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A\r
+add address=10.30.30.33 name=ros.vados.ru type=A\r
+add address=10.30.30.95 name=vados-nuc type=A\r
+add address=10.30.30.33 name=amster-nuc type=A\r
+add address=10.30.30.33 name=amster type=A\r
+add address=10.30.30.33 name=amster-reg type=A\r
+add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A\r
+add address=10.30.30.33 name=mgr.vados.ru type=A\r
+add address=10.30.30.33 name=prt.vados.ru type=A\r
+add address=10.30.30.33 disabled=yes match-subdomain=yes name=\\r
+ mikrots.vados.ru type=A\r
+add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A\r
+add address=10.30.30.30 name=MILLER-LEN type=A\r
+add address=10.30.30.30 name=miller type=A\r
+add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\\r
+ security.cloudflare-dns.com type=A\r
+add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\\r
+ security.cloudflare-dns.com type=A\r
+add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\\r
+ dns.quad9.net type=A\r
+add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\\r
+ dns.quad9.net type=A\r
+add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \\r
+ type=A\r
+add address=10.30.30.81 comment=LocalNet name=MikroVados type=A\r
+add address=10.30.30.10 name=MikroNUC type=A\r
+add address=10.30.30.86 disabled=yes name=MikroYellow type=A\r
+add address=10.30.30.85 disabled=yes name=MikroMic type=A\r
+add address=10.30.30.95 name=VADOS-NUC type=A\r
+add address=10.30.30.98 name=VADOS-LEN type=A\r
+add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\\r
+ A\r
+add address=10.30.30.20 disabled=yes name=garage type=A\r
+/ip firewall address-list\r
+add address=91.215.120.206 list=TRUSTED\r
+add address=185.71.70.78 disabled=yes list=TRUSTED\r
+add address=176.53.203.171 disabled=yes list=TRUSTED\r
+add address=176.53.203.170 disabled=yes list=TRUSTED\r
+add address=176.53.202.194 disabled=yes list=TRUSTED\r
+add address=8.8.4.0/24 list=YouTube\r
+add address=8.8.8.0/24 list=YouTube\r
+add address=8.34.208.0/20 list=YouTube\r
+add address=8.35.192.0/20 list=YouTube\r
+add address=23.236.48.0/20 list=YouTube\r
+add address=23.251.128.0/19 list=YouTube\r
+add address=34.0.0.0/15 list=YouTube\r
+add address=34.2.0.0/16 list=YouTube\r
+add address=34.3.0.0/23 list=YouTube\r
+add address=34.3.3.0/24 list=YouTube\r
+add address=34.3.4.0/24 list=YouTube\r
+add address=34.3.8.0/21 list=YouTube\r
+add address=34.3.16.0/20 list=YouTube\r
+add address=34.3.32.0/19 list=YouTube\r
+add address=34.3.64.0/18 list=YouTube\r
+add address=34.4.0.0/14 list=YouTube\r
+add address=34.8.0.0/13 list=YouTube\r
+add address=34.16.0.0/12 list=YouTube\r
+add address=34.32.0.0/11 list=YouTube\r
+add address=34.64.0.0/10 list=YouTube\r
+add address=34.128.0.0/10 list=YouTube\r
+add address=35.184.0.0/13 list=YouTube\r
+add address=35.192.0.0/14 list=YouTube\r
+add address=35.196.0.0/15 list=YouTube\r
+add address=35.198.0.0/16 list=YouTube\r
+add address=35.199.0.0/17 list=YouTube\r
+add address=35.199.128.0/18 list=YouTube\r
+add address=35.200.0.0/13 list=YouTube\r
+add address=35.208.0.0/12 list=YouTube\r
+add address=35.224.0.0/12 list=YouTube\r
+add address=35.240.0.0/13 list=YouTube\r
+add address=57.140.192.0/18 list=YouTube\r
+add address=64.15.112.0/20 list=YouTube\r
+add address=64.233.160.0/19 list=YouTube\r
+add address=66.22.228.0/23 list=YouTube\r
+add address=66.102.0.0/20 list=YouTube\r
+add address=66.249.64.0/19 list=YouTube\r
+add address=70.32.128.0/19 list=YouTube\r
+add address=72.14.192.0/18 list=YouTube\r
+add address=74.125.0.0/16 list=YouTube\r
+add address=104.154.0.0/15 list=YouTube\r
+add address=104.196.0.0/14 list=YouTube\r
+add address=104.237.160.0/19 list=YouTube\r
+add address=107.167.160.0/19 list=YouTube\r
+add address=107.178.192.0/18 list=YouTube\r
+add address=108.59.80.0/20 list=YouTube\r
+add address=108.170.192.0/18 list=YouTube\r
+add address=108.177.0.0/17 list=YouTube\r
+add address=130.211.0.0/16 list=YouTube\r
+add address=136.22.160.0/20 list=YouTube\r
+add address=136.22.176.0/21 list=YouTube\r
+add address=136.22.184.0/23 list=YouTube\r
+add address=136.22.186.0/24 list=YouTube\r
+add address=142.250.0.0/15 list=YouTube\r
+add address=146.148.0.0/17 list=YouTube\r
+add address=152.65.208.0/22 list=YouTube\r
+add address=152.65.214.0/23 list=YouTube\r
+add address=152.65.218.0/23 list=YouTube\r
+add address=152.65.222.0/23 list=YouTube\r
+add address=152.65.224.0/19 list=YouTube\r
+add address=162.120.128.0/17 list=YouTube\r
+add address=162.216.148.0/22 list=YouTube\r
+add address=162.222.176.0/21 list=YouTube\r
+add address=172.110.32.0/21 list=YouTube\r
+add address=172.217.0.0/16 list=YouTube\r
+add address=172.253.0.0/16 list=YouTube\r
+add address=173.194.0.0/16 list=YouTube\r
+add address=173.255.112.0/20 list=YouTube\r
+add address=192.158.28.0/22 list=YouTube\r
+add address=192.178.0.0/15 list=YouTube\r
+add address=193.186.4.0/24 list=YouTube\r
+add address=199.36.154.0/23 list=YouTube\r
+add address=199.36.156.0/24 list=YouTube\r
+add address=199.192.112.0/22 list=YouTube\r
+add address=199.223.232.0/21 list=YouTube\r
+add address=207.223.160.0/20 list=YouTube\r
+add address=208.65.152.0/22 list=YouTube\r
+add address=208.68.108.0/22 list=YouTube\r
+add address=208.81.188.0/22 list=YouTube\r
+add address=208.117.224.0/19 list=YouTube\r
+add address=209.85.128.0/17 list=YouTube\r
+add address=216.58.192.0/19 list=YouTube\r
+add address=216.73.80.0/20 list=YouTube\r
+add address=216.239.32.0/19 list=YouTube\r
+add address=2ip.ru list=Test-IP\r
+add address=wg.vados.ru comment=VDSIna list=TRUSTED\r
+add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED\r
+add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina\r
+add address=love.ru comment=love.ru list=NoVdsina\r
+add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina\r
+add address=pochta.ru comment=pochta.ru list=NoVdsina\r
+add address=vdsina.com list=NoVdsina\r
+add address=vdsina.ru list=NoVdsina\r
+add address=youla.ru list=NoVdsina\r
+add address=kupiprodai.ru list=NoVdsina\r
+add address=myip.ru list=Test-IP\r
+add address=geoip.co list=NoVdsina\r
+add address=comp-lenta.ru list=NoVdsina\r
+add address=128.85.102.70 comment=update.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=wu-b-net.trafficmanager.net. comment=\\r
+ ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist\r
+add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\\r
+ ctldl.windowsupdate.com list=windowsupdateslist\r
+add address=redir.update.msft.com.trafficmanager.net. comment=\\r
+ update.microsoft.com list=windowsupdateslist\r
+add address=geo.prod.do.dsp.trafficmanager.net. comment=\\r
+ geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist\r
+add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\\r
+ kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist\r
+add address=e12437.d.akamaiedge.net. comment=\\r
+ kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist\r
+add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\\r
+ displaycatalog.mp.microsoft.com list=windowsupdateslist\r
+add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \\r
+ comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\\r
+ windowsupdateslist\r
+add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \\r
+ list=windowsupdateslist\r
+add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\\r
+ sls.update.microsoft.com list=windowsupdateslist\r
+add address=fe3.delivery.mp.microsoft.com. comment=\\r
+ fe3cr.delivery.mp.microsoft.com list=windowsupdateslist\r
+add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\\r
+ fe3.delivery.mp.microsoft.com list=windowsupdateslist\r
+add address=fe2cr.update.msft.com.trafficmanager.net. comment=\\r
+ fe2cr.update.microsoft.com list=windowsupdateslist\r
+add address=download.windowsupdate.com.delivery.microsoft.com. comment=\\r
+ download.windowsupdate.com list=windowsupdateslist\r
+add address=wu-f-net.trafficmanager.net. comment=\\r
+ download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist\r
+add address=tsfe.trafficmanager.net. comment=\\r
+ tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist\r
+add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \\r
+ comment=9.au.download.windowsupdate.com list=windowsupdateslist\r
+add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \\r
+ list=windowsupdateslist\r
+add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\\r
+ au.download.windowsupdate.com list=windowsupdateslist\r
+add address=a767.dspw65.akamai.net. comment=\\r
+ download.windowsupdate.com.edgesuite.net list=windowsupdateslist\r
+add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \\r
+ comment=licensing.mp.microsoft.com list=windowsupdateslist\r
+add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\\r
+ consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\\r
+ windowsupdateslist\r
+add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \\r
+ comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist\r
+add address=cdp-f-nlu-net.trafficmanager.net. comment=\\r
+ star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \\r
+ comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist\r
+add address=cdp-f-tlu-net.trafficmanager.net. comment=\\r
+ star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=storeedgefd.xbetservices.akadns.net. comment=\\r
+ storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist\r
+add address=\\r
+ storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \\r
+ comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\\r
+ windowsupdateslist\r
+add address=e16646.dscg.akamaiedge.net. comment=\\r
+ storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\\r
+ windowsupdateslist\r
+add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=bg.microsoft.map.fastly.net. comment=\\r
+ 3.au.download.windowsupdate.com list=windowsupdateslist\r
+add list=windowsupdateslist\r
+add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \\r
+ comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\\r
+ star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=a2033.dscd.akamai.net. comment=\\r
+ star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\\r
+ windowsupdateslist\r
+add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\\r
+ dl.delivery.mp.microsoft.com list=windowsupdateslist\r
+add address=dcat-f-nlu-net.trafficmanager.net. comment=\\r
+ dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \\r
+ comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist\r
+add address=dcat-b-tlu-net.trafficmanager.net. comment=\\r
+ 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=a122.dscg3.akamai.net. comment=\\r
+ tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist\r
+add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\\r
+ geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist\r
+add address=e10370.d.akamaiedge.net. comment=\\r
+ geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist\r
+add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=a1683.dscd.akamai.net. comment=\\r
+ dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist\r
+add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \\r
+ comment=collections.mp.microsoft.com list=windowsupdateslist\r
+add address=a1847.dscd.akamai.net. comment=\\r
+ wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\\r
+ windowsupdateslist\r
+add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=au.download.windowsupdate.com.edgesuite.net. comment=\\r
+ 2.au.download.windowsupdate.com list=windowsupdateslist\r
+add address=a767.dscg3.akamai.net. comment=\\r
+ au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist\r
+add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\\r
+ 4.au.download.windowsupdate.com list=windowsupdateslist\r
+add address=cl-glcb907925.gcdn.co. comment=\\r
+ 4.au.download.windowsupdate.com.delivery.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \\r
+ list=windowsupdateslist\r
+add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \\r
+ comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist\r
+add address=ts-frontend.trafficmanager.net. comment=\\r
+ tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=sds.trafficmanager.net. comment=software-download.microsoft.com \\r
+ list=windowsupdateslist\r
+add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \\r
+ list=windowsupdateslist\r
+add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=e12671.dscd.akamaiedge.net. comment=\\r
+ download.microsoft.com.edgekey.net list=windowsupdateslist\r
+add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \\r
+ list=windowsupdateslist\r
+add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\\r
+ kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist\r
+add address=e12358.d.akamaiedge.net. comment=\\r
+ kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist\r
+add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\\r
+ tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist\r
+add address=dcat-f-tlu-net.trafficmanager.net. comment=\\r
+ tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=a1856.dspw65.akamai.net. comment=\\r
+ tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist\r
+add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \\r
+ list=windowsupdateslist\r
+add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\\r
+ kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist\r
+add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\\r
+ consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\\r
+ windowsupdateslist\r
+add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \\r
+ list=windowsupdateslist\r
+add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \\r
+ list=windowsupdateslist\r
+add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina\r
+add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \\r
+ list=windowsupdateslist\r
+add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=purchase.md.mp.microsoft.com.akadns.net. comment=\\r
+ purchase.mp.microsoft.com list=windowsupdateslist\r
+add address=e110219.a.akamaiedge.net. comment=\\r
+ purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist\r
+add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.141 list=windowsupdateslist\r
+add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=storesdk.xbetservices.akadns.net. comment=\\r
+ storesdk.dsx.mp.microsoft.com list=windowsupdateslist\r
+add address=e16646.g.akamaiedge.net. comment=\\r
+ storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist\r
+add address=software-download.microsoft.com.delivery.microsoft.com. comment=\\r
+ software-download.microsoft.com list=windowsupdateslist\r
+add address=download.prss.microsoft.com.akamaized.net. comment=\\r
+ software-download.microsoft.com.delivery.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina\r
+add address=87.250.250.50 comment=YandexDisk list=NoVdsina\r
+add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\\r
+ displaycatalog.mp.microsoft.com list=windowsupdateslist\r
+add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\\r
+ purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist\r
+add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\\r
+ purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist\r
+add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\\r
+ cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist\r
+add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \\r
+ comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist\r
+add address=a1996.dscd.akamai.net. comment=\\r
+ wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\\r
+ windowsupdateslist\r
+add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\\r
+ cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist\r
+add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\\r
+ tas02.sls.update.microsoft.com list=windowsupdateslist\r
+add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\\r
+ cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist\r
+add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \\r
+ comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \\r
+ comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist\r
+add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\\r
+ star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\\r
+ paymentinstruments.mp.microsoft.com list=windowsupdateslist\r
+add address=10.30.30.33 comment=amster list=NoWG\r
+add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG\r
+add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG\r
+add address=wg.vados.ru comment=VDSina-vpn list=VDSina\r
+add address=80.85.244.9 list=TRUSTED\r
+add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\\r
+ disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist\r
+add address=185.71.70.78 disabled=yes list=TRUSTED\r
+add address=176.53.203.171 disabled=yes list=TRUSTED\r
+add address=176.53.203.170 disabled=yes list=TRUSTED\r
+add address=176.53.202.194 disabled=yes list=TRUSTED\r
+add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina\r
+add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS\r
+add address=dns.google comment=Google-dns list=Trusted-DNS\r
+add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\\r
+ Trusted-DNS\r
+add address=time.google.com comment=Google-time list=Trusted-NTP\r
+add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\\r
+ Trusted-NTP\r
+add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP\r
+add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\\r
+ Trusted-NTP\r
+add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\\r
+ Trusted-NTP\r
+add address=cp.vdsina.com comment=VDSina-vpn list=VDSina\r
+add address=vdsina.ru comment=VDSina-vpn list=VDSina\r
+add address=ns.vados.ru comment=VDSina-vpn list=VDSina\r
+add address=vdsina.com comment=VDSina-vpn list=VDSina\r
+add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina\r
+add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina\r
+add address=10.30.30.0/24 comment="Local Network" list=Local-Net\r
+add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net\r
+add address=146.120.64.208/29 comment="External Net" list=Unet\r
+add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina\r
+add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina\r
+add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina\r
+add address=10.30.30.30 comment=miller disabled=yes list=NoWG\r
+add address=10.30.30.33 comment="Direct connet to DNS servers" list=\\r
+ Direct-DNS\r
+add address=109.107.177.79 list=VPN-Server\r
+add address=10.0.0.0/8 list=RFC1918\r
+add address=172.16.0.0/12 list=RFC1918\r
+add address=192.168.0.0/16 list=RFC1918\r
+add address=8.8.4.4 disabled=yes list=to_vpn\r
+add address=myip.ru disabled=yes list=to_vpn\r
+add address=10.30.30.98 disabled=yes list=to_vpn\r
+/ip firewall filter\r
+add action=add-src-to-address-list address-list="Honeypot Hacker" \\r
+ address-list-timeout=12h chain=input comment="block honeypot DNS" \\r
+ connection-state=new dst-port=53 in-interface=Unet-ether1 protocol=udp \\r
+ src-address-list=!Trusted-DNS\r
+add action=add-src-to-address-list address-list="Honeypot Hacker" \\r
+ address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \\r
+ in-interface=Unet-ether1 protocol=tcp src-address-list=!Trusted-DNS\r
+add action=add-src-to-address-list address-list="Honeypot Hacker" \\r
+ address-list-timeout=4w2d chain=input comment=\\r
+ "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \\r
+ in-interface=Unet-ether1 protocol=tcp src-address-list=!TRUSTED\r
+add action=add-src-to-address-list address-list="Honeypot Hacker" \\r
+ address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \\r
+ connection-state=new dst-port=5060 in-interface=Unet-ether1 protocol=udp\r
+add action=add-src-to-address-list address-list="Honeypot Hacker" \\r
+ address-list-timeout=4w2d chain=input comment="block honeypot NTP" \\r
+ connection-state=new dst-port=123 in-interface=Unet-ether1 protocol=udp\r
+add action=fasttrack-connection chain=forward comment=\\r
+ "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \\r
+ connection-state=established,related,new disabled=yes\r
+add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \\r
+ protocol=tcp\r
+add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \\r
+ protocol=udp\r
+add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \\r
+ dst-port=53 protocol=tcp src-address=10.30.30.0/24\r
+add action=accept chain=input comment="udp Accept input DNS queries" \\r
+ dst-port=53 protocol=udp src-address=10.30.30.0/24\r
+add action=accept chain=output comment="accept WireGuard" disabled=yes \\r
+ dst-address-list=VPN-Server out-interface=Unet-ether1 protocol=udp \\r
+ src-port=13231\r
+add action=accept chain=output disabled=yes dst-address-list=VPN-Server \\r
+ dst-port=29185 out-interface=Unet-ether1 protocol=udp\r
+add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \\r
+ connection-state=established,related,new disabled=yes routing-mark=\\r
+ !To-VPN\r
+add action=accept chain=output disabled=yes protocol=tcp src-port=443\r
+add action=accept chain=output disabled=yes src-address=127.0.0.1\r
+add action=accept chain=forward comment="defconf: accept in ipsec policy" \\r
+ disabled=yes ipsec-policy=in,ipsec\r
+add action=accept chain=forward comment="defconf: accept out ipsec policy" \\r
+ disabled=yes ipsec-policy=out,ipsec\r
+add action=accept chain=forward comment=\\r
+ "defconf: accept established,related, untracked" connection-state=\\r
+ established,related,untracked disabled=yes\r
+add action=drop chain=forward comment="defconf: drop invalid" \\r
+ connection-state=invalid in-interface=Unet-ether1 src-address=\\r
+ !10.30.30.0/24\r
+add action=drop chain=forward comment=\\r
+ "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \\r
+ connection-state=new in-interface=Unet-ether1 src-address-list=!VDSina\r
+add action=accept chain=input in-interface=Unet-ether1 protocol=icmp \\r
+ src-address-list=VDSina\r
+add action=accept chain=input connection-state=established\r
+add action=accept chain=input connection-state=related\r
+/ip firewall mangle\r
+add action=accept chain=prerouting comment=RFC1918 dst-address-list=RFC1918 \\r
+ in-interface-list=!WAN\r
+add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \\r
+ new-routing-mark=main passthrough=no src-address-list=NoWG\r
+add action=mark-routing chain=prerouting comment=\\r
+ "Mark Routing main for NoVdsina" disabled=yes dst-address-list=NoVdsina \\r
+ new-routing-mark=main passthrough=no src-address=10.30.30.0/24\r
+add action=mark-connection chain=prerouting comment=\\r
+ "Transit for address-list \"to_vpn\"" connection-mark=no-mark disabled=\\r
+ yes dst-address-list=to_vpn in-interface-list=!WAN new-connection-mark=\\r
+ to-vpn-conn routing-mark=!main\r
+add action=mark-routing chain=prerouting comment=\\r
+ "Find routing over table r_to_vpn" connection-mark=to-vpn-conn disabled=\\r
+ yes in-interface-list=!WAN new-routing-mark=r_to_vpn\r
+add action=mark-routing chain=prerouting comment=\\r
+ "Mark Routing main for VDSina" dst-address-list=VPN-Server \\r
+ new-routing-mark=main passthrough=no src-address=10.30.30.0/24\r
+add action=mark-routing chain=prerouting comment=\\r
+ "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \\r
+ new-routing-mark=main src-address=10.30.30.0/24\r
+add action=mark-routing chain=prerouting comment=\\r
+ "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\\r
+ Unet new-routing-mark=main passthrough=no\r
+add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \\r
+ dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\\r
+ To-VPN src-address=10.30.30.0/24\r
+add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \\r
+ dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \\r
+ new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24\r
+add action=mark-routing chain=prerouting comment="WG for all" \\r
+ dst-address-list=!NoVdsina new-routing-mark=To-VPN src-address=\\r
+ 10.30.30.0/24\r
+add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \\r
+ out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\\r
+ 1381-65535\r
+add action=mark-connection chain=prerouting comment=\\r
+ "Mark VPN connections to exclude from FastTrack" disabled=yes \\r
+ new-connection-mark=VPN_No_FastTrack routing-mark=To-VPN\r
+add action=mark-routing chain=prerouting comment="VPN Network" disabled=yes \\r
+ dst-address=10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24\r
+add action=mark-connection chain=output comment="For this router" \\r
+ connection-mark=no-mark disabled=yes dst-address-list=to_vpn \\r
+ new-connection-mark=to-vpn-conn-local\r
+add action=mark-routing chain=output comment="For this router" \\r
+ connection-mark=to-vpn-conn-local disabled=yes new-routing-mark=r_to_vpn\r
+/ip firewall nat\r
+add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\\r
+ yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\\r
+ !NoWG to-addresses=10.30.30.33 to-ports=53\r
+add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\\r
+ yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\\r
+ !NoWG to-addresses=10.30.30.33 to-ports=53\r
+add action=masquerade chain=srcnat comment=\\r
+ "Nat Addresses for routing mark r_to_vpn" disabled=yes routing-mark=\\r
+ r_to_vpn\r
+add action=dst-nat chain=dstnat comment=\\r
+ "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \\r
+ in-interface=Unet-ether1 protocol=tcp src-address-list=VPN-Server \\r
+ to-addresses=10.30.30.33 to-ports=53\r
+add action=dst-nat chain=dstnat comment=\\r
+ "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\\r
+ udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53\r
+add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\\r
+ Unet-ether1 protocol=udp src-address=!10.30.30.0/24 to-addresses=\\r
+ 10.30.30.33 to-ports=44333\r
+add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \\r
+ routing-mark=To-VPN\r
+add action=masquerade chain=srcnat comment="Default NAT" out-interface=\\r
+ Unet-ether1 routing-mark=!To-VPN src-address=10.30.30.0/24\r
+add action=dst-nat chain=dstnat dst-port=44044 in-interface=Unet-ether1 \\r
+ protocol=udp src-address=109.107.177.79 to-addresses=10.30.30.33 \\r
+ to-ports=44044\r
+add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \\r
+ fragment=no in-interface=Unet-ether1 protocol=tcp routing-mark=main \\r
+ to-addresses=10.30.30.33 to-ports=443\r
+add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \\r
+ dst-port=80 in-interface=Unet-ether1 protocol=tcp to-addresses=\\r
+ 10.30.30.33 to-ports=80\r
+add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \\r
+ dst-port=2904 in-interface=Unet-ether1 protocol=tcp to-addresses=\\r
+ 10.30.30.33 to-ports=2904\r
+add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\\r
+ 5000 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \\r
+ to-ports=5000\r
+add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\\r
+ 2377 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \\r
+ to-ports=2377\r
+add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\\r
+ Unet-ether1 protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \\r
+ to-ports=81\r
+add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\\r
+ Unet-ether1 protocol=tcp src-address-list=TRUSTED to-addresses=\\r
+ 10.30.30.33 to-ports=22\r
+add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \\r
+ dst-port=2377 in-interface=Unet-ether1 protocol=tcp to-addresses=\\r
+ 10.30.30.33 to-ports=2377\r
+add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\\r
+ Unet-ether1 protocol=tcp routing-mark=!To-VPN to-addresses=10.30.30.33 \\r
+ to-ports=22\r
+add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \\r
+ dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \\r
+ time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3\r
+add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\\r
+ Bridge-LAN protocol=tcp src-address-list=KIDS time=\\r
+ 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3\r
+/ip firewall raw\r
+add action=drop chain=prerouting comment="Drop Honeypot Hackers" \\r
+ in-interface=Unet-ether1 src-address-list="Honeypot Hacker"\r
+add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \\r
+ in-interface-list=WAN src-address-list=Trusted-DNS\r
+add action=add-dst-to-address-list address-list=NoVdsina \\r
+ address-list-timeout=none-dynamic chain=prerouting comment=\\r
+ extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes\r
+add action=add-dst-to-address-list address-list=NoVdsina \\r
+ address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \\r
+ content=linux.duke.edu disabled=yes\r
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\\r
+ none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \\r
+ disabled=yes\r
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\\r
+ none-dynamic chain=prerouting comment="YouTube raw" content=\\r
+ googleapis.com disabled=yes\r
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\\r
+ none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \\r
+ disabled=yes\r
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\\r
+ none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \\r
+ disabled=yes\r
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\\r
+ none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \\r
+ disabled=yes\r
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\\r
+ none-dynamic chain=prerouting comment="YouTube raw" content=\\r
+ googlevideo.com disabled=yes\r
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\\r
+ none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \\r
+ disabled=yes\r
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\\r
+ none-dynamic chain=prerouting comment="YouTube raw" content=\\r
+ googleusercontent.com disabled=yes\r
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\\r
+ none-dynamic chain=prerouting comment="YouTube raw" content=\\r
+ nhacmp3youtube.com disabled=yes\r
+add action=add-dst-to-address-list address-list=NoVdsina \\r
+ address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \\r
+ content=rutube.ru disabled=yes\r
+add action=add-dst-to-address-list address-list=NoVdsina \\r
+ address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \\r
+ content=me.com disabled=yes\r
+add action=add-dst-to-address-list address-list=NoVdsina \\r
+ address-list-timeout=none-dynamic chain=prerouting comment=\\r
+ "icloud.com raw" content=icloud.com disabled=yes\r
+add action=add-dst-to-address-list address-list=NoVdsina \\r
+ address-list-timeout=none-dynamic chain=prerouting comment=\\r
+ "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes\r
+add action=add-dst-to-address-list address-list=NoVdsina \\r
+ address-list-timeout=none-dynamic chain=prerouting comment=\\r
+ "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \\r
+ disabled=yes\r
+add action=add-dst-to-address-list address-list=NoVdsina \\r
+ address-list-timeout=none-dynamic chain=prerouting comment=\\r
+ "api.db-ip.com raw" content=api.db-ip.com disabled=yes\r
+add action=add-dst-to-address-list address-list=NoVdsina \\r
+ address-list-timeout=none-dynamic chain=prerouting comment=\\r
+ esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes\r
+add action=add-dst-to-address-list address-list=NoVdsina \\r
+ address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \\r
+ content=gosuslugi.ru disabled=yes\r
+/ip firewall service-port\r
+set ftp disabled=yes\r
+set tftp disabled=yes\r
+set irc disabled=no\r
+set sip disabled=yes\r
+set pptp disabled=yes\r
+set rtsp disabled=no\r
+/ip ipsec settings\r
+set accounting=no\r
+/ip ipsec policy\r
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0\r
+/ip ipsec profile\r
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5\r
+/ip proxy\r
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\\r
+ 0.0.0.0\r
+/ip route\r
+add check-gateway=none comment=WG-Default disabled=no distance=1 dst-address=\\r
+ 0.0.0.0/0 gateway=WG routing-table=To-VPN scope=30 target-scope=10\r
+/ip service\r
+set ftp disabled=yes\r
+set telnet disabled=yes\r
+set reverse-proxy disabled=yes\r
+set ssh address=10.30.30.0/24 port=2222\r
+set winbox address=10.30.30.0/24\r
+set api address=10.30.30.0/24\r
+set api-ssl address=10.30.30.0/24 disabled=yes\r
+set www-ssl certificate=Root-YE port=18443\r
+set www address=10.30.30.0/24 disabled=yes port=18880\r
+/ip service webserver\r
+set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\\r
+ no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \\r
+ webfig-secure=no\r
+/ip ssh\r
+set forwarding-enabled=both publickey-authentication-options=verify-required\r
+/ip upnp\r
+set enabled=yes\r
+/ip upnp interfaces\r
+add interface=Bridge-LAN type=internal\r
+add forced-ip=146.120.64.211 interface=Unet-ether1 type=external\r
+add forced-ip=109.107.177.79 interface=*E type=external\r
+add interface=lo type=internal\r
+add interface=wlan2 type=internal\r
+add interface=wlan1 type=internal\r
+/ipv6 dhcp-client\r
+add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\\r
+ info use-interface-duid=yes validate-server-duid=no\r
+/ipv6 dhcp-server option sets\r
+add name=domain-search-set options=domain-search-list\r
+add name="=\"Client ID\"" options=HostName\r
+/ipv6 firewall address-list\r
+add address=::/128 comment="defconf: unspecified address" list=bad_ipv6\r
+add address=::1/128 comment="defconf: lo" list=bad_ipv6\r
+add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6\r
+add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6\r
+add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6\r
+add address=100::/64 comment="defconf: discard only " list=bad_ipv6\r
+add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6\r
+add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6\r
+add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6\r
+/ipv6 firewall filter\r
+add action=accept chain=input comment=\\r
+ "defconf: accept established,related,untracked" connection-state=\\r
+ established,related,untracked\r
+add action=drop chain=input comment="defconf: drop invalid" connection-state=\\r
+ invalid\r
+add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\\r
+ icmpv6\r
+add action=accept chain=input comment="defconf: accept UDP traceroute" \\r
+ dst-port=33434-33534 protocol=udp\r
+add action=accept chain=input comment=\\r
+ "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\\r
+ udp src-address=fe80::/10\r
+add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \\r
+ protocol=udp\r
+add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\\r
+ ipsec-ah\r
+add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\\r
+ ipsec-esp\r
+add action=accept chain=input comment=\\r
+ "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec\r
+add action=drop chain=input comment=\\r
+ "defconf: drop everything else not coming from LAN" in-interface-list=\\r
+ !LAN\r
+add action=accept chain=forward comment=\\r
+ "defconf: accept established,related,untracked" connection-state=\\r
+ established,related,untracked\r
+add action=drop chain=forward comment="defconf: drop invalid" \\r
+ connection-state=invalid\r
+add action=drop chain=forward comment=\\r
+ "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6\r
+add action=drop chain=forward comment=\\r
+ "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6\r
+add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \\r
+ hop-limit=equal:1 protocol=icmpv6\r
+add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\\r
+ icmpv6\r
+add action=accept chain=forward comment="defconf: accept HIP" protocol=139\r
+add action=accept chain=forward comment="defconf: accept IKE" dst-port=\\r
+ 500,4500 protocol=udp\r
+add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\\r
+ ipsec-ah\r
+add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\\r
+ ipsec-esp\r
+add action=accept chain=forward comment=\\r
+ "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec\r
+add action=drop chain=forward comment=\\r
+ "defconf: drop everything else not coming from LAN" in-interface-list=\\r
+ !LAN\r
+/ipv6 nd\r
+set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \\r
+ managed-address-configuration=yes other-configuration=yes pref64=::/64\r
+/ipv6 nd prefix\r
+add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none\r
+/ipv6 nd prefix default\r
+set dhcp6-pd-preferred=yes\r
+/ipv6 nd proxy\r
+add disabled=yes interface=lo\r
+/ipv6 nd settings\r
+set router-advertisement-route-distance=100\r
+/routing settings\r
+set single-process=no\r
+/system clock\r
+set time-zone-name=Europe/Moscow\r
+/system clock manual\r
+set time-zone=+03:00\r
+/system identity\r
+set name=MikroMaster\r
+/system logging\r
+add action=email disabled=yes regex="* added|changed|removed *" topics=\\r
+ system,info\r
+/system ntp client\r
+set enabled=yes\r
+/system ntp server\r
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes\r
+/system ntp client servers\r
+add address=0.ru.pool.ntp.org\r
+add address=1.ru.pool.ntp.org\r
+add address=2.ru.pool.ntp.org\r
+add address=3.ru.pool.ntp.org\r
+add address=time.google.com disabled=yes\r
+/system package update\r
+set check-certificate=yes-without-crl ip-version=ipv4\r
+/system scheduler\r
+add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \\r
+ on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \\r
+ policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \\r
+ start-time=startup\r
+add comment="Every Day Check For Update Scripts" interval=1d name=\\r
+ AM-ScriptInstallUpdate on-event=\\r
+ ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \\r
+ start-time=startup\r
+add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\\r
+ AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \\r
+ policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \\r
+ start-time=startup\r
+/system watchdog\r
+set watchdog-timer=no\r
+/tool e-mail\r
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \\r
+ server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com\r
+/tool mac-server\r
+set allowed-interface-list=LAN\r
+/tool mac-server mac-winbox\r
+set allowed-interface-list=LAN\r
+/tool netwatch\r
+add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\\r
+ -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\\r
+ e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \\r
+ interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\\r
+ https-get up-script=""\r
+add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\\r
+ flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\\r
+ oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \\r
+ name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \\r
+ up-script=""\r
+add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\\r
+ 8.8.8.8 down-script="" host=dns.google http-codes="" name=\\r
+ "Google-DNS IPv4" test-script="" type=dns up-script=""\r
+add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\\r
+ rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\\r
+ -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \\r
+ http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\\r
+ "" test-script="" type=dns up-script=""\r
+add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \\r
+ dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \\r
+ interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \\r
+ test-script="" timeout=800ms type=dns up-script=""\r
+add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\\r
+ ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \\r
+ down-script="" host=149.112.112.112 http-codes="" interval=10s name=\\r
+ "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script=""\r
+add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \\r
+ down-script="" host=91.192.189.2 http-codes="" interval=10s name=\\r
+ ns1.unet.ws test-script="" type=simple up-script=""\r
+add check-certificate=yes comment=\\r
+ "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \\r
+ disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\\r
+ vds.vados.ru port=443 test-script="" type=https-get up-script=""\r
+add comment="WireGuard NAT " disabled=yes down-script="/log info \"[WG-Monitor\\r
+ ] WireGuard is NOT running - reverting rules\"\\r
+ \n/ip firewall nat remove [find comment=\"Redirect to Router\"]\\r
+ \n/ip dns set servers=8.8.8.8\\r
+ \n/ip dns cache flush\\r
+ \n/ip route remove [find comment=\"wg-auto-route\"]\\r
+ \n" host=10.8.0.1 http-codes="" interval=15s name=WG test-script="" \\r
+ timeout=5s type=simple up-script="/log info \"[WG-Monitor] WireGuard is RU\\r
+ NNING - applying rules\";\\r
+ \n:local routeFile \"ips.txt\";\\r
+ \n:local routeDefAddr \"0.0.0.0/0\";\\r
+ \n:local routeGateway \"10.8.0.1\";\\r
+ \n:local routeIF \"WG\";\\r
+ \n:local routeTable \"To-VPN\";\\r
+ \n:local routeComment \"wg-auto-route\";\\r
+ \n/ip dns cache flush;\\r
+ \n:if ([:len [/ip firewall nat find comment=\"Redirect to Router\"]] > 0) \\r
+ do={\\r
+ \n /ip firewall nat remove [find comment=\"Redirect to Router\"];\\r
+ \n}\\r
+ \n/ip firewall nat add action=redirect chain=dstnat src-address-list=\"Red\\r
+ irectDNS\" dst-port=53 protocol=udp comment=\"Redirect to Router\";\\r
+ \n/ip dns set servers=\$routeGateway;\\r
+ \n:local content [/file get \$routeFile contents];\\r
+ \n:if ([:len \$content] > 0) do={\\r
+ \n :local line \"\";\\r
+ \n :for i from=0 to=([:len \$content] - 1) do={\\r
+ \n :local char [:pick \$content \$i];\\r
+ \n :if (\$char != \"\\r\" && \$char != \"\\n\") do={\\r
+ \n :set line (\$line . \$char);\\r
+ \n } else={\\r
+ \n :if ([:len \$line] > 5) do={\\r
+ \n :do { /ip route add disabled=no dst-address=\$routeDefAd\\r
+ dr gateway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$r\\r
+ outeTable comment=\$routeComment check-gateway=none } on-error={}\\r
+ \n }\\r
+ \n :set line \"\";\\r
+ \n }\\r
+ \n }\\r
+ \n :if ([:len \$line] > 5) do={\\r
+ \n# :do { /ip route add dst-address=\$line gateway=\$routeGateway \\r
+ distance=1 comment=\$routeComment } on-error={}\\r
+ \n :do { /ip route add disabled=no dst-address=\$routeDefAddr ga\\r
+ teway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$routeT\\r
+ able comment=\$routeComment check-gateway=none } on-error={}\\r
+ \n }\\r
+ \n}\\r
+ \n:local dotPos [:find \$routeGateway \".\"];\\r
+ \n:if (\$dotPos != \"\") do={\\r
+ \n :local firstOctet [:pick \$routeGateway 0 \$dotPos];\\r
+ \n :local derivedDstAddress (\$firstOctet . \".30.0.0/15\");\\r
+ \n :do { /ip route add dst-address=\$derivedDstAddress gateway=\$routeG\\r
+ ateway distance=1 comment=\$routeComment } on-error={}\\r
+ \n}\\r
+ \n\\r
+ \n"\r
+add comment=WG-Default disabled=yes down-script=\\r
+ "/ip route disable [find comment=\"WG-Default\"];" host=10.8.0.1 \\r
+ interval=15s name=WG packet-count=20 test-script="" thr-loss-count=5 \\r
+ type=icmp up-script="/ip route enable [find comment=\"WG-Default\"];"\r
+/user aaa\r
+set accounting=no\r
--- /dev/null
+# 2026-07-07 22:20:02 by RouterOS 7.23.1\r
+# system id = NmJcEM+8XAP\r
+#\r
+/caps-man channel\r
+add band=2ghz-g/n extension-channel=disabled frequency=2422 name=2G-3 \\r
+ reselect-interval=20m save-selected=yes\r
+add band=5ghz-a/n/ac extension-channel=XXXX frequency=5660 name=5G-5660 \\r
+ save-selected=yes\r
+add band=5ghz-a/n/ac extension-channel=XXXXXXXX frequency=5160,5200,5280 \\r
+ name=5G-5160-5280 reselect-interval=30m save-selected=yes\r
+add band=5ghz-n/ac extension-channel=XXXX frequency=5180 name=5G-36 \\r
+ reselect-interval=30m save-selected=yes\r
+add band=5ghz-n/ac extension-channel=XXXX frequency=5200 name=5G-40 \\r
+ reselect-interval=30m save-selected=yes\r
+add band=5ghz-n/ac extension-channel=XXXX frequency=5220 name=5G-44 \\r
+ reselect-interval=30m save-selected=yes\r
+add band=5ghz-n/ac extension-channel=XXXX frequency=5240 name=5G-48 \\r
+ reselect-interval=30m save-selected=yes\r
+add band=2ghz-g/n extension-channel=disabled frequency=2442 name=2G-7 \\r
+ reselect-interval=20m save-selected=yes\r
+add band=2ghz-g/n extension-channel=disabled frequency=2462 name=2G-11 \\r
+ reselect-interval=20m save-selected=yes\r
+/interface bridge\r
+add name=Bridge-LAN\r
+add name=bridge1\r
+/interface ethernet\r
+set [ find default-name=ether1 ] disable-running-check=no\r
+/interface wireguard\r
+add comment="Interface for Master Connection" disabled=yes listen-port=22022 \\r
+ mtu=1360 name=MASTER\r
+add listen-port=21641 mtu=1420 name=wg-VDSina\r
+/caps-man security\r
+add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \\r
+ group-key-update=30m name=xs-Sec\r
+add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \\r
+ group-key-update=30m name=WPA2\r
+/disk\r
+add slot=ram tmpfs-max-size=100000000 type=tmpfs\r
+/interface list\r
+add include=dynamic,static name=LAN\r
+add exclude=LAN name=WAN\r
+add exclude=LAN include=WAN name=Internet\r
+/interface wireless security-profiles\r
+set [ find default=yes ] supplicant-identity=MikroMIC\r
+/iot wiliot servers\r
+set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East"\r
+/ip dhcp-server option\r
+add code=12 name=HostName\r
+add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00"\r
+/ip dhcp-server option sets\r
+add name=P1505n options=HostName\r
+add name=StartLife1 options=HostName\r
+add name=amsterDev options=HostName\r
+add name=MiTV options=HostName\r
+add name=miller options=HostName\r
+add name=amster options=HostName\r
+add name=garage options=HostName\r
+add name=domain-search-set options=domain-search-list\r
+/ip pool\r
+add name=dhcp ranges=10.30.30.150-10.30.30.200\r
+/system logging action\r
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email\r
+/system script\r
+add dont-require-permissions=no name=test owner=vados policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\\r
+ \r\\r
+ \n#:local ScriptName [ :jobname ];\r\\r
+ \n:local expSrc;\r\\r
+ \n:local FileName;\r\\r
+ \n:local FilePath;\r\\r
+ \n:local DirPath \"tmpfs/\";\r\\r
+ \n:global WaitForFile;\r\\r
+ \n:global IfThenElse;\r\\r
+ \n\r\\r
+ \n:foreach Script in=([ /system/script find where name~\"Amster-GlobalConf\\r
+ *\" ]) do={\r\\r
+ \n:local ScriptVal [ /system/script/get \$Script ];\r\\r
+ \n\r\\r
+ \n:local expName [ (\$ScriptVal->\"name\") ];\r\\r
+ \n#[/system/script get \$expScript name];\r\\r
+ \n:delay 2s;\r\\r
+ \n\r\\r
+ \n:set expSrc [/system/script print where name=\$expName];\r\\r
+ \n/system/script print where name=\$expName;\r\\r
+ \n#[:put [/system/script get \$expScript source]];\r\\r
+ \n:put [\$expSrc];\r\\r
+ \n:delay 2s;\r\\r
+ \n:set FileName \$expName;\r\\r
+ \n:set FilePath (\$DirPath . \$FileName);\r\\r
+ \n\r\\r
+ \n#:log warning \"\\n----------------------\\n\\\$expSrc = \$expSrc\\n____\\r
+ ______________________________\";\r\\r
+ \n:log info \"\\n\\\$FileName = '\$FileName'\";\r\\r
+ \n:log info \"\\n\\\$FilePath = \$FilePath\";\r\\r
+ \n#:log warning {/system/script/get source=[/system/script/get \$expScript\\r
+ \_source];};\r\\r
+ \n\r\\r
+ \n#\$[/system script get [/system script find name=\"\$FileName\"] source]\\r
+ \r\\r
+ \n\r\\r
+ \n#:local gettingScript \"\$FileName\";\r\\r
+ \n#:execute script=\"[[:parse \\\"[:parse { :put (\"\$[/system script get \\r
+ [/system script find name=\$FileName] source]\"); } \\\"]]\"; \\\r\\r
+ \n\r\\r
+ \n#:execute script={:put \"[:parse \\\"[:parse [/system/script get [/syste\\r
+ m/script find name=\$gettingScript] source];\\\"]]\";} \\\r\\r
+ \n# file=(\$FilePath . \".rsc\\00\");\r\\r
+ \n:do {\r\\r
+ \n:local fName (\$FilePath . \".rsc\");\r\\r
+ \n#:delay 3s;\r\\r
+ \n#/file add name=\$fName;\r\\r
+ \n:put [:tostr [\$expSrc]];\r\\r
+ \n/file set \$fName contents=[:put [\$expSrc]];\r\\r
+ \n:delay 3s;\r\\r
+ \n\$WaitForFile \$fName;\r\\r
+ \n(\$FilePath . \".rsc\");\r\\r
+ \n#:delay 2s;\r\\r
+ \n\r\\r
+ \n} on-error={\r\\r
+ \n:log error \"\\nERROR \\\$FilePath = \$FilePath\";\r\\r
+ \n}\r\\r
+ \n#\$WaitForFile (\$FilePath . \".rsc\");\r\\r
+ \n#:execute script={ :put [/system/script get [:put \$FileName] source]; }\\r
+ ;\r\\r
+ \n#/system/script export \$Sscript file=\$FilePath;\r\\r
+ \n#/system/script/export [:put [/system/script/get \$expScript source]] fi\\r
+ le=\$FilePath;\r\\r
+ \n#:execute script={ :put [/system/script/get \$expScript source]; } \\\r\\r
+ \n\r\\r
+ \n#:log warning \"\\n\\\$expScript = \$expScript\";\r\\r
+ \n# \\\r\\r
+ \n# file=(\$FilePath . \".rsc\\00\");\r\\r
+ \n#script={:put [/system/script/get \$FileName source];} file=(\$FilePath\\r
+ \_. \".rsc\\00\");\r\\r
+ \n#/system script export \$src file=(\$FilePath . \$FileName);\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:log warning \"\\nComplete!\";\r\\r
+ \n\r\\r
+ \n # :execute script={ :put [ /system/script/get Amster-GlobalConfig sou\\r
+ rce ]; } \\\r\\r
+ \n # file=(\$FilePath . \".conf\\00\");\r\\r
+ \n # \$WaitForFile (\$FilePath . \".conf\");\r\\r
+ \n # :onerror Err {\r\\r
+ \n # /tool/fetch upload=yes url=(\$BackupUploadUrl . \"/\" . \$FileName\\r
+ \_. \".conf\") \\\r\\r
+ \n # user=\$BackupUploadUser password=\$BackupUploadPass src-path=(\\r
+ \$FilePath . \".conf\");\r\\r
+ \n # :set ConfigFile [ /file/get (\$FilePath . \".conf\") ];\r\\r
+ \n # :set (\$ConfigFile->\"name\") (\$FileName . \".conf\");\r\\r
+ \n "\r
+add dont-require-permissions=no name=test1 owner=vados policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\\r
+ \r\\r
+ \n#:local runningVer [:find [/system/resource/get version] \"(\"];\r\\r
+ \n\r\\r
+ \n:local runningChannel;\r\\r
+ \n:local runningVersion;\r\\r
+ \n:local ParseCustom;\r\\r
+ \n\r\\r
+ \n:set ParseCustom do={\r\\r
+ \n :local Str [ :tostr \$1 ];\r\\r
+ \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\\r
+ \n :local End [ :tostr \$3 ];\r\\r
+ \n :local Num [ :tonum \$4 ];\r\\r
+ \n :local Return;\r\\r
+ \n\r\\r
+ \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\\r
+ \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\\r
+ \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\\r
+ lse={\r\\r
+ \n :set End [:find \$rest \$End];\r\\r
+ \n :set Return [:pick \$rest 0 \$End];\r\\r
+ \n }\r\\r
+ \n:return \$Return;\r\\r
+ \n}\r\\r
+ \n \r\\r
+ \n:global runningChannel [\$ParseCustom [/system/resource/get version] \"(\\r
+ \" \")\" 1];\r\\r
+ \n:log warning [\$runningChannel];\r\\r
+ \n:set runningVersion [\$ParseCustom [/system/resource/get version] \" \" \\r
+ \")\" 2];\r\\r
+ \n:log warning [\$runningVersion];\r\\r
+ \n\r\\r
+ \n\r\\r
+ \n\r\\r
+ \n# :if ([:len \$open] = 0) do={\r\\r
+ \n# :log error \"\$SMP Could not extract installed OS channel from vers\\r
+ ion string: `\$runningOsAndChannel`.\";\r\\r
+ \n# :error \"\$SMP error, check logs\";\r\\r
+ \n# }\r\\r
+ \n# :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOs\\r
+ AndChannel]];\r\\r
+ \n# :local close [:find \$rest \")\"];\r\\r
+ \n# :local channel [:pick \$rest 0 \$close];\r\\r
+ \n# :return \$channel;\r\\r
+ \n#}"\r
+add dont-require-permissions=no name=01-Amster-Init-Script owner=vados \\r
+ policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \\r
+ source="# Amster Initial Script\r\\r
+ \n#\r\\r
+ \n#:global GlobalEnvRemove true; /system/script {run Amster-GlobalEnvRemov\\r
+ e; };\r\\r
+ \n#:delay 1s;\r\\r
+ \n:#global ReloadGlobal true; \r\\r
+ \n\r\\r
+ \n:global AmScriptsUrl \"https://ros.vados.ru/\";\r\\r
+ \n:global defOwner \"vados\";\r\\r
+ \n:global AmFirstRun;\r\\r
+ \n\r\\r
+ \n:set AmFirstRun do={\r\\r
+ \n :global AmScriptsUrl;\r\\r
+ \n :global defOwner;\r\\r
+ \n #:global ParseKeyValueStore;\r\\r
+ \n #:local AmUpdCRLF true;\r\\r
+ \n #:local IfThenElse;\r\\r
+ \n #:set IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1\\r
+ \_] = true) do={:return \$2}; :return \$3}\r\\r
+ \n #/certificate/settings/set builtin-trust-store=fetch;\r\\r
+ \n #/tool/fetch \"\$scriptsUrl/certs/Root-YE.pem\" dst-path=\"root-ye.p\\r
+ em\";\r\\r
+ \n #/certificate/import file-name=\"root-ye.pem\" passphrase=\"\";\r\\r
+ \n # For basic verification we rename the certificate and print it by f\\r
+ ingerprint. Make sure exactly this one certificate (\"Root-YE\") is shown.\\r
+ \r\\r
+ \n #/certificate/set name=\"Root-YE\" [ find where common-name=\"Root Y\\r
+ E\" ];\r\\r
+ \n #/certificate/print proplist=name,fingerprint where fingerprint=\"e1\\r
+ 4ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666\";\r\\r
+ \n #:log info \"\\nAmScriptsUrl = \$AmScriptsUrl\";\r\\r
+ \n :local Scripts {\r\\r
+ \n \"Amster-GlobalConfig\"\r\\r
+ \n \"Amster-GlobalFunc\";\r\\r
+ \n# \"Amster-SFTP-backup\"\r\\r
+ \n# \"Amster-BkpEmail-and-upd\";\r\\r
+ \n };\r\\r
+ \n# /system/script/set owner=(\$ScriptVal->\"name\") \\\r\\r
+ \n# source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRLF \$S\\r
+ ourceNew ] \$Script;\r\\r
+ \n :foreach Script in=\$Scripts do={\r\\r
+ \n :put \"Installing \$Script...\";\r\\r
+ \n /system/script/remove [ find where name=\$Script ];\r\\r
+ \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\\r
+ l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\\r
+ >\"data\");\r\\r
+ \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\\r
+ Script;\r\\r
+ \n };\r\\r
+ \n /system/script { run Amster-GlobalConfig; run Amster-GlobalFunc; }\r\\r
+ \n}\r\\r
+ \n:global AmUpdRun;\r\\r
+ \n:set AmUpdRun do={\r\\r
+ \n #:local UpdScript [ :tostr \$1 ];\r\\r
+ \n #:global ParseKeyValueStore;\r\\r
+ \n :global AmScriptsUrl;\r\\r
+ \n :global defOwner;\r\\r
+ \n :local Scripts {\r\\r
+ \n# \"Amster-GlobalConfig\"\r\\r
+ \n# \"Amster-GlobalFunc\"\r\\r
+ \n# \"Amster-GlobalRemove\"\r\\r
+ \n \"Amster-backup-SFTP\"\r\\r
+ \n \"Amster-SFTP-backup\"\r\\r
+ \n \"Amster-BkpEmail-and-upd\"\r\\r
+ \n \"Amster-TG-Bot\"\r\\r
+ \n \"Amster-TG-Notification\";\r\\r
+ \n };\r\\r
+ \n :foreach Script in=\$Scripts do={\r\\r
+ \n :put \"updating \$Script...\";\r\\r
+ \n /system/script/remove [ find where name=\$Script ];\r\\r
+ \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\\r
+ l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\\r
+ >\"data\");\r\\r
+ \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\\r
+ Script;\r\\r
+ \n };\r\\r
+ \n# /system/script/add name=\$Script owner=\$AmOwner source=([ /tool/fe\\r
+ tch check-certificate=yes-without-crl (\"\$AmScriptsUrl\" . \$Script . \".\\r
+ rsc\") output=user as-value ]->\"data\"); };\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n\$AmFirstRun;\r\\r
+ \n#\$AmUpdRun;\r\\r
+ \n\r\\r
+ \n#\$setUpdExist;\r\\r
+ \n#:global setUpdExist;\r\\r
+ \n#:global ParseKeyValueStore;\r\\r
+ \n#:set setUpdExist do={\r\\r
+ \n#:do {\r\\r
+ \n#:global ParseKeyValueStore;\r\\r
+ \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\\r
+ os\\r\?\\n#comment=*\" ] do={\r\\r
+ \n# :local ScriptVal [ /system/script/get \$Script ];\r\\r
+ \n# :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"#comment\"\\r
+ ) ];\r\\r
+ \n# :local scriptName (\$ScriptVal->\"name\");\r\\r
+ \n#:log warning (\"\\n\\\$scriptName = \". \$scriptName);\r\\r
+ \n#: log warning (\"\\n\\\$ScriptInfo = \". \$ScriptInfo);\r\\r
+ \n# }\r\\r
+ \n#} on-error={}\r\\r
+ \n#}\r\\r
+ \n#\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run\\r
+ -count;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;\r\\r
+ \n#;(evl / (evl /docommand=;(evl / (evl /foreachcounter=\$Script;do=;(evl \\r
+ / (evl /localname=\$ScriptVal;value=(evl (evl /system/script/getnumber=\$S\\r
+ cript))) (evl /localname=\$ScriptInfo;value=(evl (<%% \$ParseKeyValueStore\\r
+ \_(> \$ParseKeyValueStore);(-> \$ScriptVal comment)))) (evl /localname=\$s\\r
+ criptName) (evl /setname=\$scriptName;value=(-> #\$ScriptVal name)) (evl /\\r
+ log/errormessage=(. \r\\r
+ \n# \$ ScriptInfo = \$ScriptInfo)));in=(evl (evl /system/script/findwhere\\r
+ =\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run-c\\r
+ ount;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;(~ \$so\\r
+ urce (. ^#!rsc by Vados \r\\r
+ \n# \? \r\\r
+ \n#));5))));on-error=;(evl /)))\r\\r
+ \n"\r
+add dont-require-permissions=no name="Download cAP's Packages" owner=vados \\r
+ policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \\r
+ source="# +------------------------------+\r\\r
+ \n# | |\r\\r
+ \n# | Mikrotik RouterOS Scripts |\r\\r
+ \n# | _Download cAP's Packages_ |\r\\r
+ \n# | |\r\\r
+ \n# +------------------------------+\r\\r
+ \n# https://github.com/sebastian13/mikrotik-routeros-scripts\r\\r
+ \n#\r\\r
+ \n\r\\r
+ \n# Set a directory path providing the required space\r\\r
+ \n# Add a microSD card https://wiki.mikrotik.com/wiki/Manual:System/Disks\\r
+ \r\\r
+ \n# or setup a RAM-Disk via '/disk/add type=tmpfs tmpfs-max-size=20M slot=\\r
+ ram'\r\\r
+ \n:local dir \"/tmpfs/capsman-packages\";\r\\r
+ \n\r\\r
+ \n\r\\r
+ \n# Set Package Path if required, set policy to none if using 'upgrade-cap\\r
+ s' script\r\\r
+ \n/interface/wifi/capsman/set package-path=\$dir upgrade-policy=none;\r\\r
+ \n/caps-man/manager/set package-path=\$dir upgrade-policy=none;\r\\r
+ \n#require-same-version;\r\\r
+ \n\r\\r
+ \n:local installed [/system package get value-name=version [find where nam\\r
+ e=\"routeros\"]]\r\\r
+ \n\r\\r
+ \n# Delete old downloads\r\\r
+ \n# /file/remove [ find type=package name~\"capsman*\" ]\r\\r
+ \n\r\\r
+ \n# Starting from RouterOS version 7.13, drivers for older wireless and 60\\r
+ GHz interfaces are\r\\r
+ \n# part of the separate \"wireless\" package. The existing \"wifiwave2\" \\r
+ package has been divided\r\\r
+ \n# into distinct packages: \"wifi-qcom\" and \"wifi-qcom-ac\".\r\\r
+ \n# RouterOS >=7.12 is required to upgrade to 7.13.\r\\r
+ \n# https://forum.mikrotik.com/viewtopic.php\?t=202423\r\\r
+ \n\r\\r
+ \n:foreach architecture in={ \"arm\";\r\\r
+ \n# \"arm64\";\r\\r
+ \n \"x86_64\";\r\\r
+ \n \"mipsbe\"} do={\r\\r
+ \n :foreach package in={ \"routeros\";\r\\r
+ \n# \"wifi-qcom-ac\";\r\\r
+ \n# \"wifi-qcom\";\r\\r
+ \n \"container\";\r\\r
+ \n \"wireless\"} do={ :do {\r\\r
+ \n :put \"\"\r\\r
+ \n :put \"Download \$package \$installed for \$architecture\"\r\\r
+ \n /tool fetch mode=https \\\r\\r
+ \n url=\"https://download.mikrotik.com/routeros/\$installed/\$packa\\r
+ ge-\$installed-\$architecture.npk\" \\\r\\r
+ \n dst-path=\"\$dir/\$package-\$installed-\$architecture.npk\"\r\\r
+ \n } on-error={ :put \"Error downloading the file. On a 404, note t\\r
+ hat the package may not exist for the specified architecture!\" }\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n"\r
+add comment="Script for setup routeros script system" \\r
+ dont-require-permissions=no name=AM-setup owner=AM-setup policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\\r
+ !rsc by Vados\r\\r
+ \n# RouterOS script: AM-setup\r\\r
+ \n# Script comment: Script for setup routeros script system\r\\r
+ \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\\r
+ \n#\r\\r
+ \n#\r\\r
+ \n# requires RouterOS, version=7.19\r\\r
+ \n# requires device-mode, fetch\r\\r
+ \n#\r\\r
+ \n# :local ScriptName [ :jobname ];\r\\r
+ \n# Additional commands:\r\\r
+ \n#\r\\r
+ \n# For scripts:\r\\r
+ \n#:global NewScript \"script_name\"; \r\\r
+ \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\\r
+ \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\\r
+ tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \\r
+ \".rsc\") output=user as-value ]->\"data\");\r\\r
+ \n#:global NewScript (a);\r\\r
+ \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\\r
+ \n#\r\\r
+ \n# For run from terminal:\r\\r
+ \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\\r
+ eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\\r
+ ut=user as-value ]->\"data\");\r\\r
+ \n#\r\\r
+ \n\r\\r
+ \n:global ScriptUpdatesCRLF \"LF\";\r\\r
+ \n#:if (\$ScriptUpdatesCRLF != false) do={\r\\r
+ \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\\r
+ os\" ] do={\r\\r
+ \n# if (\$ScriptUpdatesCRLF = true) do={\r\\r
+ \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\\r
+ cript;\r\\r
+ \n# } else={\r\\r
+ \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\\r
+ ipt;\r\\r
+ \n# }\r\\r
+ \n# }\r\\r
+ \n#}\r\\r
+ \n\r\\r
+ \n# /import verbose=no \$ScriptName\r\\r
+ \n:global Identity [/system/identity/get name];\r\\r
+ \n:global SetupScript [ :jobname ];\r\\r
+ \n:global RemoveMe true;\r\\r
+ \n:global RunOnce (a);\r\\r
+ \n:global InitSetup true;\r\\r
+ \n:global tmpfs false;\r\\r
+ \n\r\\r
+ \n{\r\\r
+ \n :local RmMe [:tobool \$1];\r\\r
+ \n\r\\r
+ \n :global GlobalScriptsUrl;\r\\r
+ \n :global SetupScript;\r\\r
+ \n :global RemoveMe;\r\\r
+ \n :global InitSetup;\r\\r
+ \n :global tmpfs;\r\\r
+ \n\r\\r
+ \n :local UrlSuffix \$Identity;\r\\r
+ \n :local UrlDir \"certs/\";\r\\r
+ \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \\r
+ \r\\r
+ \n :local CertCommonName \"Root YE\";\r\\r
+ \n :local CertFileName \"Root-YE.pem\";\r\\r
+ \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\\r
+ f852f02a708aa5d5666\";\r\\r
+ \n\r\\r
+ \n :if (\$SetupScript = false) do={\r\\r
+ \n :global SetupScript \"AM-setup\";\r\\r
+ \n }\r\\r
+ \n :if (\$RemoveMe != false) do={\r\\r
+ \n :set RemoveMe true;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\\r
+ \n \r\\r
+ \n\r\\r
+ \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\\r
+ \_\\\r\\r
+ \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\\r
+ \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\\r
+ \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\\r
+ onName ] ] > 0)) do={\r\\r
+ \n :put \"Importing certificate...\";\r\\r
+ \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\\r
+ \_as-value;\r\\r
+ \n :delay 1s;\r\\r
+ \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\\r
+ \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\\r
+ t YE\" ];\r\\r
+ \n :delay 1s;\r\\r
+ \n };\r\\r
+ \n :local CertSettings [ /certificate/settings/get ];\r\\r
+ \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \\r
+ ] != 1) do={\r\\r
+ \n :error \"Something is wrong with your certificates!\";\r\\r
+ \n };\r\\r
+ \n\r\\r
+ \n:local MkTmpfs do={\r\\r
+ \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\\r
+ \n :if ([ :len \$TmpFs ] = 1) do={\r\\r
+ \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\\r
+ \n :log info (\"The tmpfs is disabled, enabling.\");\r\\r
+ \n /disk/enable \$TmpFs;\r\\r
+ \n }\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :log info (\"Try to removing directory 'tmpfs'.\");\r\\r
+ \n :do {\r\\r
+ \n :retry {\r\\r
+ \n /file/remove tmpfs;\r\\r
+ \n :return true;\r\\r
+ \n } delay=100ms max=10;\r\\r
+ \n } on-error={ }\r\\r
+ \n# \$RmDir \"tmpfs\";\r\\r
+ \n :onerror Err {\r\\r
+ \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\\r
+ et total-memory ] / 3);\r\\r
+ \n :do {\r\\r
+ \n :retry {\r\\r
+ \n /file/get tmpfs;\r\\r
+ \n :return true;\r\\r
+ \n } delay=222ms max=10;\r\\r
+ \n } on-error={ }\r\\r
+ \n } do={\r\\r
+ \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n# :return true;\r\\r
+ \n}\r\\r
+ \n:if (\$tmpfs = true) do={\r\\r
+ \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\\r
+ \";\r\\r
+ \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\\r
+ \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\\r
+ \n :return \$true;\r\\r
+ \n } else={\r\\r
+ \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\\r
+ \n :if ([ \$MkTmpfs ] = false) do={\r\\r
+ \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\\r
+ \n :return false;\r\\r
+ \n } else={\r\\r
+ \n :onerror Err {\r\\r
+ \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\\r
+ \n :do {\r\\r
+ \n :retry {\r\\r
+ \n /file/get /tmpfs/scripts;\r\\r
+ \n :return true;\r\\r
+ \n } delay=100ms max=10;\r\\r
+ \n } on-error={ }\r\\r
+ \n } do={\r\\r
+ \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\\r
+ Err);\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n# :return true;\r\\r
+ \n# [ /file/get \$FileName ]\r\\r
+ \n }\r\\r
+ \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\\r
+ \_global variable tmpfs!\");\r\\r
+ \n# :global tmpfs (a);\r\\r
+ \n# return false;\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\\r
+ \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \\r
+ . [ /system/clock/get time ] . \".rsc\");\r\\r
+ \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\\r
+ fig\" ];\r\\r
+ \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\\r
+ \n :put \"Installing \$Script...\";\r\\r
+ \n /system/script/remove [ find where name=\$Script ];\r\\r
+ \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\\r
+ h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \\r
+ \".rsc\") output=user as-value ]->\"data\");\r\\r
+ \n \r\\r
+ \n /system/script run \$Script;\r\\r
+ \n :delay 2s;\r\\r
+ \n };\r\\r
+ \n\r\\r
+ \n :local Script \"mod/AM-Certs-By-Ident\";\r\\r
+ \n \r\\r
+ \n :put \"Installing \$Script...\";\r\\r
+ \n /system/script/remove [ find where name=\$Script ];\r\\r
+ \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \\r
+ check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\\r
+ rsc\") output=user as-value ]->\"data\");\r\\r
+ \n /system/script run \$Script;\r\\r
+ \n :global tmpAddCerts;\r\\r
+ \n :while ([ \$tmpAddCerts ] = true) do={\r\\r
+ \n :delay 1s;\r\\r
+ \n }\r\\r
+ \n :delay 1s;\r\\r
+ \n :put \"Removing \$Script...\";\r\\r
+ \n /system/script/remove [ find where name=\$Script ];\r\\r
+ \n\r\\r
+ \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \\r
+ ] > 0) do={\r\\r
+ \n :put \"Renaming certificate by its common-name...\";\r\\r
+ \n :global CertificateNameByCN;\r\\r
+ \n \$CertificateNameByCN \$CertFingerprint;\r\\r
+ \n };\r\\r
+ \n\r\\r
+ \n :if (\$RemoveMe = true) do={\r\\r
+ \n :put \"Add Scheduler for remove this script...\";\r\\r
+ \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \\r
+ where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\\r
+ \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\\r
+ \"_RemoveSetup\\\" ];\\n\" . \\\r\\r
+ \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\\r
+ \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\\r
+ \";\r\\r
+ \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\\r
+ time=startup interval=30s on-event=\$OnEvent;\r\\r
+ \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\\r
+ . I'm leaving.\\nThere will be an error below, this is normal.\");\r\\r
+ \n }\r\\r
+ \n :delay 1;\r\\r
+ \n :put \"Loading configuration and functions...\";\r\\r
+ \n :do { \r\\r
+ \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\\r
+ \n :put \"Normal removing temporary global environment variables.\";\\r
+ \r\\r
+ \n :global SetupScript (a);\r\\r
+ \n :global InitSetup (a);\r\\r
+ \n :global RemoveMe (a);\r\\r
+ \n } on-error={\r\\r
+ \n :local ErrorMsg \"Loading configuration and functions error!\";\r\\r
+ \n :log error (\$0 . \$ErrorMsg . :error);\r\\r
+ \n :error \$ErrorMsg;\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n"\r
+add comment="Global Config Script" dont-require-permissions=no name=\\r
+ AM-GlobalConfig owner=AM-GlobalConfig policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\\r
+ !rsc by Vados\r\\r
+ \n# RouterOS script: AM-GlobalConfig\r\\r
+ \n# Script comment: Global Config Script\r\\r
+ \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\\r
+ \n#\r\\r
+ \n#\r\\r
+ \n# Warning: Dont touch this line!\r\\r
+ \n:global Identity [/system/identity/get name];\r\\r
+ \n:global GlobalConfReady false;\r\\r
+ \n#\r\\r
+ \n#\r\\r
+ \n# Global Url For Amster scripts to fetch\r\\r
+ \n# most be defined in AM-Init-Script or AM-setup scripts\r\\r
+ \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\\r
+ \n:global ScriptsUrlSuffix (a);\r\\r
+ \n:global CheckSumsVerify true;\r\\r
+ \n\r\\r
+ \n:global ScriptUpdatesCRLF true;\r\\r
+ \n:global CommentsInScripts true;\r\\r
+ \n\r\\r
+ \n# Debug output:\r\\r
+ \n:global PrintDebug true; #false;\r\\r
+ \n\r\\r
+ \n# Debug output for specific script:\r\\r
+ \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\\r
+ \n\r\\r
+ \n# Debug logs\r\\r
+ \n# Other actions (disk, email, remote or support) can be used as well.\r\\r
+ \n# I do not recommend using echo - use debug output instead (https://rsc.\\r
+ eworm.de/main/DEBUG.html#debug-output).\r\\r
+ \n#/system/logging/add topics=script,debug action=memory;\r\\r
+ \n\r\\r
+ \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\\r
+ \n:global Domain \"WORKGROUP\";\r\\r
+ \n\r\\r
+ \n:global EmailGeneralTo \"vados@vados.ru\";\r\\r
+ \n#:global EmailGeneralCc \"\";\r\\r
+ \n\r\\r
+ \n# \$ScriptInstallUpdate mod/notification-telegram\r\\r
+ \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\\r
+ \";\r\\r
+ \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\\r
+ \n# Use this to send notifications to a specific topic in group.\r\\r
+ \n#:global TelegramThreadId \"30\";\r\\r
+ \n# Using telegram-chat you have to define trusted chat ids (not group ids\\r
+ !)\r\\r
+ \n# or user names. Groups allow to chat with devices simultaneously.\r\\r
+ \n:global TelegramChatIdsTrusted {\r\\r
+ \n \"454403445\"\r\\r
+ \n \"-1003631309063\"\r\\r
+ \n \"-5124482807\"\r\\r
+ \n \"1087968824\";\r\\r
+ \n};\r\\r
+ \n# \"-5294757340\";\r\\r
+ \n\r\\r
+ \n:global TelegramChatGroups \"(all)\";\r\\r
+ \n#:global TelegramChatGroups \"(all|home|office)\";\r\\r
+ \n\r\\r
+ \n:global NotificationFunctions {\r\\r
+ \n \"email\"\r\\r
+ \n \"telegram\";\r\\r
+ \n};\r\\r
+ \n# Toggle this to disable symbols in notifications.\r\\r
+ \n:global NotificationsWithSymbols true;\r\\r
+ \n:global TerminalColorOutput true;\r\\r
+ \n\r\\r
+ \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\\r
+ \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\\r
+ \n\r\\r
+ \n## Update channel. Possible values: stable, long-term, testing, developm\\r
+ ent\r\\r
+ \n:global updateChannel \"stable\";\r\\r
+ \n\r\\r
+ \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\\r
+ \");\r\\r
+ \n:global CertRenewTime 2w;\r\\r
+ \n:global CertRenewPass (a); #{\r\\r
+ \n# \"\";\r\\r
+ \n# \"v3ry-s3cr3t\";\r\\r
+ \n# \"4n0th3r-s3cr3t\";\r\\r
+ \n#};\r\\r
+ \n:global CertWarnTime 1w;\r\\r
+ \n:global CertIssuedExportPass (a); # {\r\\r
+ \n# \"\";\r\\r
+ \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\\r
+ \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\\r
+ \n#};\r\\r
+ \n\r\\r
+ \n# Script BackupAndUpdate mode, possible values: backup,\r\\r
+ \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\\r
+ n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\\r
+ \n# osupdate - Update if available and creates backups before/after update\\r
+ \_(ignores `forceBackup`)\r\\r
+ \n# Set `forceBackup` to true to always create backups, even\\r
+ \_without updates\r\\r
+ \n# osnotify - Set `forceBackup` to always create backups on every run\r\\r
+ \n:global DevInfoIncludeIP true;\r\\r
+ \n:global BackupAndUpdateMode \"osnotify\"\r\\r
+ \n\r\\r
+ \n:global forceBackup true;\r\\r
+ \n:global BackupPassword \"Peskar55\";\r\\r
+ \n\r\\r
+ \n# SFTP Backup Variables\r\\r
+ \n:global BackupRandomDelay 0;\r\\r
+ \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\\r
+ \n:global BackupUploadUser \$Identity;\r\\r
+ \n:global BackupUploadPass \"root.mnuc.backuper\";\r\\r
+ \n\r\\r
+ \n:global BackupSendBinary true;\r\\r
+ \n:global BackupSendExport true;\r\\r
+ \n:global BackupSendGlobalConfig true;\r\\r
+ \n:global BackupSendScripts true;\r\\r
+ \n\r\\r
+ \n# Remove local file after uploading if no errors\r\\r
+ \n:global BackupRmLocal true;\r\\r
+ \n\r\\r
+ \n# Local Backups Root Directory \r\\r
+ \n:global BackupLocalRoot \"tmpfs\";\r\\r
+ \n\r\\r
+ \n# Encrypt Backup\r\\r
+ \n:global BackupEncrypt true;\r\\r
+ \n\r\\r
+ \n# Sensitive information in Backups\r\\r
+ \n:global BackupSens true;\r\\r
+ \n\r\\r
+ \n# User Export\r\\r
+ \n:global BackupUser true;\r\\r
+ \n\r\\r
+ \n# License Export (not for CHR, will silently skip)\r\\r
+ \n:global BackupLicense false;\r\\r
+ \n\r\\r
+ \n# SSH Keys\r\\r
+ \n:global BackupSshKeys true;\r\\r
+ \n\r\\r
+ \n# Certificate Export\r\\r
+ \n:global BackupCerts true;\r\\r
+ \n\r\\r
+ \n# Certificate Password\r\\r
+ \n:global BackupCertsPasswd \"\";\r\\r
+ \n\r\\r
+ \n# User-Manager Export\r\\r
+ \n:global BackupUserMan false;\r\\r
+ \n\r\\r
+ \n# The Dude Export\r\\r
+ \n:global BackupDude false;\r\\r
+ \n\r\\r
+ \n# User Files to export, comma-separated string or array of strings\r\\r
+ \n# User Files are not removed on backup\r\\r
+ \n# Any directory paths will be removed (/ -> _) on remote file\r\\r
+ \n# Nonpresent files are silently skipped\r\\r
+ \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\\r
+ \n\r\\r
+ \n# load functions and any custom scripts\r\\r
+ \n# [ /system/script/find where name=\"global-config-ov\\r
+ erlay\" ], \\\r\\r
+ \n# [ /system/script/find where name~\"^global-config-o\\r
+ verlay\\\\.d/.\" ]\r\\r
+ \n#\r\\r
+ \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\\r
+ ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\\r
+ \r\\r
+ \n# :onerror Err {\r\\r
+ \n# /system/script/run \$Script;\r\\r
+ \n# } do={\r\\r
+ \n# :log error (\"Loading configuration from configs and functions\"\\r
+ \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\\r
+ \n# }\r\\r
+ \n#}\r\\r
+ \n#:log info \"\\ndevMode = \$devMode\";\r\\r
+ \n#:log info \"\\ndevRunning = \$devRunning\";\r\\r
+ \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \\r
+ GlobalRUN\\r\?\\n\" ] do={\r\\r
+ \n :onerror Err {\r\\r
+ \n /system/script/run \$Script;\r\\r
+ \n } do={\r\\r
+ \n :log error (\"Run script \" . [ /system/script/get \$Script name \\r
+ ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n# signal we are ready\r\\r
+ \n:set GlobalConfReady true;\r\\r
+ \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\\r
+ \n"\r
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \\r
+ owner=AM-GlobalFunc policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\\r
+ !rsc by Vados\r\\r
+ \n# RouterOS script: AM-GglobalFunc\r\\r
+ \n# Script comment: Global functions\r\\r
+ \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\\r
+ \n#\r\\r
+ \n#\r\\r
+ \n# requires RouterOS, version=7.19\r\\r
+ \n# requires device-mode, fetch, scheduler\r\\r
+ \n:local ExitOK false;\r\\r
+ \n:local ScriptName [ :jobname ];\r\\r
+ \n#:global checkRunJob \$SriptName;\r\\r
+ \n#:global fixCRLF;\r\\r
+ \n#:if (\$fixCRLF != false) do={\r\\r
+ \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\\r
+ ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\\r
+ }\r\\r
+ \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\\r
+ et \$fixScript source ] ] \$fixScript};};\r\\r
+ \n#}\r\\r
+ \n:global GlobalFuncReady false;\r\\r
+ \n\r\\r
+ \n# Git commit id & info, expected configuration version\r\\r
+ \n:global CommitId \"main/729/f42d43ae\";\r\\r
+ \n:global CommitTAG \"unknown\";\r\\r
+ \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\\r
+ r: root, in 00:05:03 01.07.2026.\";\r\\r
+ \n\r\\r
+ \n# The variables are received right here.\r\\r
+ \n:global GlobalConfVersion 140;\r\\r
+ \n\r\\r
+ \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\\r
+ \n\r\\r
+ \n:global Identity [/system/identity/get name];\r\\r
+ \n:global IdentityShort [:pick \$Identity 0 18];\r\\r
+ \n\r\\r
+ \n:global devBoardName [/system/resource/get board-name];\r\\r
+ \n:global devMode [/system/device-mode/get mode];\r\\r
+ \n:global devCurArch [/system/resource/get architecture-name];\r\\r
+ \n:global devCurVersion [/system/resource/get version];\r\\r
+ \n\r\\r
+ \n# Variables defined in AM-GlobalConfig.rsc\r\\r
+ \n:global TerminalColorOutput;\r\\r
+ \n:global CommentsInScripts;\r\\r
+ \n:global DetectIpAddrDefault;\r\\r
+ \n:global DetectIpAddrFallback;\r\\r
+ \n:global updateChannel;\r\\r
+ \n:global Domain;\r\\r
+ \n:global EmailGeneralTo;\r\\r
+ \n:global BackupAndUpdateMode;\r\\r
+ \n\r\\r
+ \n# Single functions, without nested functions.\r\\r
+ \n:global MiniDateTimeStamp;\r\\r
+ \n:global MicroDateTimeStamp;\r\\r
+ \n\r\\r
+ \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\\r
+ \n:global LogPrint;\r\\r
+ \n\r\\r
+ \n# DeviceInfo and Updates\r\\r
+ \n:global IsCheckUpdates;\r\\r
+ \n:global WaitCheckUpdates;\r\\r
+ \n:global GetPubIp;\r\\r
+ \n\r\\r
+ \n:global GetArrDeviceInfo;\r\\r
+ \n:global WaitArrDeviceInfo;\r\\r
+ \n\r\\r
+ \n:global devModel;\r\\r
+ \n:global devRunningMode;\r\\r
+ \n\r\\r
+ \n:global devRbRevision;\r\\r
+ \n:global devRbSerialNumber;\r\\r
+ \n:global devRbVerAvail;\r\\r
+ \n\r\\r
+ \n:global runningChannelVersion;\r\\r
+ \n:global runningChannel;\r\\r
+ \n:global runningVersion;\r\\r
+ \n\r\\r
+ \n:global devBuildTime;\r\\r
+ \n:global ROsVerAvail;\r\\r
+ \n:global PkgUpdStatus;\r\\r
+ \n:global currentUpdateChannel;\r\\r
+ \n\r\\r
+ \n:global ScriptInstallUpdate;\r\\r
+ \n\r\\r
+ \n:global DeviceInfo;\r\\r
+ \n\r\\r
+ \n:global OldMode;\r\\r
+ \n\r\\r
+ \n:global ParseKeyValueStore;\r\\r
+ \n:global RandomDelay;\r\\r
+ \n:global GetRandomNumber;\r\\r
+ \n:global EscapeForRegEx;\r\\r
+ \n:global CharacterMultiply;\r\\r
+ \n:global CharacterReplace;\r\\r
+ \n:global CleanFilePath;\r\\r
+ \n:global CleanName;\r\\r
+ \n\r\\r
+ \n:global CommitBrief;\r\\r
+ \n\r\\r
+ \n:global EitherOr;\r\\r
+ \n:global FormatLine;\r\\r
+ \n:global GetRandom20CharAlNum;\r\\r
+ \n:global GetRandom20CharHex;\r\\r
+ \n:global GetRandomNumber;\r\\r
+ \n:global Grep;\r\\r
+ \n:global IfThenElse;\r\\r
+ \n:global MAX;\r\\r
+ \n:global MIN;\r\\r
+ \n:global HumanReadableNum;\r\\r
+ \n\r\\r
+ \n:global IsFullyConnected;\r\\r
+ \n:global IsDNSResolving;\r\\r
+ \n:global IsTimeSync;\r\\r
+ \n:global IsTimeSyncCached;\r\\r
+ \n:global IsTimeSyncResetNtp;\r\\r
+ \n\r\\r
+ \n:global MkDir;\r\\r
+ \n:global RmDir;\r\\r
+ \n:global RmFile;\r\\r
+ \n:global FileGet;\r\\r
+ \n:global Unix2Dos;\r\\r
+ \n:global UrlEncode;\r\\r
+ \n:global WaitForFile;\r\\r
+ \n:global ScriptLock;\r\\r
+ \n:global SendTelegram;\r\\r
+ \n:global NotificationFunctions;\r\\r
+ \n:global SendNotification;\r\\r
+ \n:global SendNotification2;\r\\r
+ \n:global SymbolForNotification;\r\\r
+ \n:global SymbolByUnicodeName;\r\\r
+ \n:global ValidateSyntax;\r\\r
+ \n:global CheckSumsVerify;\r\\r
+ \n:global GlobalConfChanges;\r\\r
+ \n:global GlobalConfMigration;\r\\r
+ \n:global VersionToNum;\r\\r
+ \n:global RequiredRouterOS;\r\\r
+ \n:global ExitError;\r\\r
+ \n:global ExitOnError;\r\\r
+ \n\r\\r
+ \n:global FetchHugeFiles;\r\\r
+ \n:global FetchUserAgentStr;\r\\r
+ \n:global FileExists;\r\\r
+ \n:global CertificateAvailable;\r\\r
+ \n:global CertificateDownload;\r\\r
+ \n:global CertificateNameByCN;\r\\r
+ \n:global CharacterMultiply;\r\\r
+ \n\r\\r
+ \n:global InspectVar;\r\\r
+ \n:global InspectVarRet;\r\\r
+ \n:global ParseCustom;\r\\r
+ \n\r\\r
+ \n:set IsCheckUpdates do={\r\\r
+ \n :local isInfo [:tobool \$1];\r\\r
+ \n :global updateChannel;\r\\r
+ \n :global PkgUpdStatus;\r\\r
+ \n :global currentUpdateChannel;\r\\r
+ \n :global ROsVerAvail;\r\\r
+ \n :global arrDeviceInfo;\r\\r
+ \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\\r
+ \n :local CurrentChannel [ /system/package/update/get channel ];\r\\r
+ \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\\r
+ el) do={\r\\r
+ \n :retry command={/system/package/update set channel=\$updateChannel} \\r
+ \_delay=300ms max=5 on-error={};\r\\r
+ \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\\r
+ \n }\r\\r
+ \n :local Update [ /system/package/update/get ];\r\\r
+ \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\\r
+ \n :set currentUpdateChannel \$Channel;\r\\r
+ \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\\r
+ \n :local StatusPkg \"undefined\";\r\\r
+ \n :log info (\$0 . \" Checking for updates...\");\r\\r
+ \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\\r
+ dates without-paging as-value]->\"status\")} \\\r\\r
+ \n delay=300ms max=5 on-error={};\r\\r
+ \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\\r
+ \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\\r
+ s true; } else={ :set PkgUpdStatus false; }\r\\r
+ \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \\r
+ ] ];\r\\r
+ \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\\r
+ \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\\r
+ \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\\r
+ \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\\r
+ \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\\r
+ \n }\r\\r
+ \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\\r
+ kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\\r
+ \n :return true;\r\\r
+ \n } else={\r\\r
+ \n :return \$PkgUpdStatus;\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set WaitCheckUpdates do={\r\\r
+ \n :global IsCheckUpdates;\r\\r
+ \n :global PkgUpdStatus;\r\\r
+ \n :global currentUpdateChannel;\r\\r
+ \n :global ROsVerAvail;\r\\r
+ \n :global arrDeviceInfo;\r\\r
+ \n :local Status \"\";\r\\r
+ \n :local Update;\r\\r
+ \n :local WaitCount 0;\r\\r
+ \n :if ([ \$IsCheckUpdates true ] = false) do={\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\\r
+ \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\\r
+ \") && \$WaitCount < 60) do={\r\\r
+ \n :delay 1s;\r\\r
+ \n :set WaitCount (\$WaitCount + 1);\r\\r
+ \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\\r
+ \n }\r\\r
+ \n :set Update [ /system/package/update/get ];\r\\r
+ \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\\r
+ \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\\r
+ \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\\r
+ \n :set PkgUpdStatus true;\r\\r
+ \n } else={\r\\r
+ \n :set PkgUpdStatus false;\r\\r
+ \n }\r\\r
+ \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\\r
+ \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\\r
+ \n }\r\\r
+ \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\\r
+ \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \\r
+ do={\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set WaitArrDeviceInfo do={\r\\r
+ \n :global GetArrDeviceInfo;\r\\r
+ \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\\r
+ \n :delay 1s;\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set GetArrDeviceInfo do={\r\\r
+ \n :global LogPrint;\r\\r
+ \n :global arrDeviceInfo;\r\\r
+ \n :global devBoardName;\r\\r
+ \n :global devModel;\r\\r
+ \n :global devRunning;\r\\r
+ \n :global devCurArch;\r\\r
+ \n :global devRbRevision;\r\\r
+ \n :global devRbSerialNumber;\r\\r
+ \n :global devBuildTime;\r\\r
+ \n :global runningChannelVersion;\r\\r
+ \n :global runningChannel;\r\\r
+ \n :global runningVersion;\r\\r
+ \n :global currentUpdateChannel;\r\\r
+ \n :global ROsVerAvail;\r\\r
+ \n\r\\r
+ \n :local DeviceInfo;\r\\r
+ \n :local Resource [/system/resource/get];\r\\r
+ \n :local Update [ /system/package/update/get ];\r\\r
+ \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\\r
+ \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\\r
+ \n :local RouterBoard;\r\\r
+ \n :local IsRouterBoard false;\r\\r
+ \n :local RunningMode \"\";\r\\r
+ \n\r\\r
+ \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\\r
+ \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\\r
+ \n :set runningChannelVersion \$VersionString;\r\\r
+ \n :set runningVersion \$VersionString;\r\\r
+ \n :set runningChannel \"\";\r\\r
+ \n\r\\r
+ \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\\r
+ {\r\\r
+ \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\\r
+ \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\\r
+ len \$VersionString ] ];\r\\r
+ \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\\r
+ \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\\r
+ \r\\r
+ \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\\r
+ \_3] != \"x86\") do={\r\\r
+ \n :do {\r\\r
+ \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\\r
+ \n# :set RouterBoard [ /system/routerboard/get ];\r\\r
+ \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\\r
+ \n :set IsRouterBoard true;\r\\r
+ \n }\r\\r
+ \n } on-error={}\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :do {\r\\r
+ \n :set RunningMode [ /system/device-mode/get mode ];\r\\r
+ \n } on-error={\r\\r
+ \n :do {\r\\r
+ \n :set RunningMode [ /system/device-mode/get running ];\r\\r
+ \n } on-error={\r\\r
+ \n :set RunningMode \"\";\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :set devRunning \$RunningMode;\r\\r
+ \n\r\\r
+ \n :if (\$IsRouterBoard = true) do={\r\\r
+ \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\\r
+ \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\\r
+ \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \\r
+ ];\r\\r
+ \n } else={\r\\r
+ \n :set devModel \$devBoardName;\r\\r
+ \n :set devRbRevision \"\";\r\\r
+ \n :set devRbSerialNumber \"\";\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\\r
+ \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\\r
+ \n\r\\r
+ \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\\r
+ \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\\r
+ \n :set (\$DeviceInfo->\"model\") \$devModel;\r\\r
+ \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\\r
+ \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\\r
+ \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\\r
+ \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\\r
+ \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\\r
+ ion;\r\\r
+ \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\\r
+ \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\\r
+ \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\\r
+ \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\\r
+ current-firmware\") ];\r\\r
+ \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\\r
+ upgrade-firmware\") ];\r\\r
+ \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\\r
+ \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\\r
+ alled-version\") ];\r\\r
+ \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\\r
+ \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\\r
+ ) ];\r\\r
+ \n\r\\r
+ \n :set arrDeviceInfo \$DeviceInfo;\r\\r
+ \n :return \$DeviceInfo;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set DeviceInfo do={\r\\r
+ \n :global GetArrDeviceInfo;\r\\r
+ \n :global GlobalConfVersion;\r\\r
+ \n :global Identity;\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :global FormatLine;\r\\r
+ \n :global CommitBrief;\r\\r
+ \n\r\\r
+ \n :local License [/system/license/get];\r\\r
+ \n :local Snmp [ /snmp/get ];\r\\r
+ \n :local Info [ \$GetArrDeviceInfo ];\r\\r
+ \n\r\\r
+ \n :if ([ :typeof \$Info ] != \"array\") do={\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :return ( \\\r\\r
+ \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\\r
+ \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\\r
+ \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\\r
+ \_. \\\r\\r
+ \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\\r
+ \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\\r
+ \_\\\r\\r
+ \n \"Hardware:\\n\" . \\\r\\r
+ \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \\r
+ \\\r\\r
+ \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\\r
+ n\" . \\\r\\r
+ \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\\r
+ \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\\r
+ \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\\r
+ \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\\r
+ \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\\r
+ \\n\") ] . \\\r\\r
+ \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\\r
+ \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\\r
+ \")) ] . \"\\n\") ] . \\\r\\r
+ \n \"RouterOS:\\n\" . \\\r\\r
+ \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\\r
+ \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\\r
+ \")) ] . \"\\n\") ] . \\\r\\r
+ \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\\r
+ \\n\" . \\\r\\r
+ \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\\r
+ \_\"\\n\" . \\\r\\r
+ \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\\r
+ \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \\r
+ \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\\r
+ \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \\r
+ \"\\n\") ] . \\\r\\r
+ \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\\r
+ \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\\r
+ \_\\\r\\r
+ \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\\r
+ \_\"\\n\") ] . \\\r\\r
+ \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\\r
+ \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\\r
+ ) \\\r\\r
+ \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\\r
+ \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\\r
+ \n \"RouterOS-Scripts:\\n\" . \\\r\\r
+ \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\\r
+ \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\\r
+ tionFunctions ({})}\r\\r
+ \n\r\\r
+ \n:set GetRandom20CharAlNum do={\r\\r
+ \n :global EitherOr;\r\\r
+ \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\\r
+ FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\\r
+ \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\\r
+ \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\\r
+ \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\\r
+ \n\r\\r
+ \n:global checkRunJob;\r\\r
+ \n:set checkRunJob do={\r\\r
+ \n :local Script [ :tostr \$1 ];\r\\r
+ \n :global ScriptLock; \r\\r
+ \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\\r
+ \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\\r
+ :set Job [ /system/script/job/get \$Job ];\r\\r
+ \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\\r
+ stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\\r
+ \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\\r
+ lse; \r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set InspectVar do={\r\\r
+ \n :global InspectVarRet;\r\\r
+ \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set CommitBrief do={\r\\r
+ \n :global CommitId;\r\\r
+ \n :global CommitInfo;\r\\r
+ \n :if (\$CommitId = \"unknown\") do={\r\\r
+ \n :return \"unknown\";\r\\r
+ \n }\r\\r
+ \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set InspectVarRet do={\r\\r
+ \n :local Input \$1;\r\\r
+ \n :local Level (0 + [ :tonum \$2 ]);\r\\r
+ \n :global CharacterReplace;\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :global InspectVarRet;\r\\r
+ \n :local IndentReturn do={\r\\r
+ \n :local Prefix [ :tostr \$1 ];\r\\r
+ \n :local Value [ :tostr \$2 ];\r\\r
+ \n :local Level [ :tonum \$3 ];\r\\r
+ \n :global CharacterMultiply;\r\\r
+ \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\\r
+ fix . \"-> \" . \$Value);\r\\r
+ \n }\r\\r
+ \n :local TypeOf [ :typeof \$Input ];\r\\r
+ \n :local Len [ :len \$Input ];\r\\r
+ \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\\r
+ \n :if (\$TypeOf = \"array\") do={\r\\r
+ \n :foreach Key,Value in=\$Input do={\r\\r
+ \n :set \$Return (\$Return . \"\\n\" . \\\r\\r
+ \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\\r
+ \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\\r
+ \n }\r\\r
+ \n } else={\r\\r
+ \n :if (\$TypeOf = \"str\") do={\r\\r
+ \n :set \$Return (\$Return . \"\\n\" . \\\r\\r
+ \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\\r
+ \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\\r
+ \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\\r
+ \n }\r\\r
+ \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\\r
+ \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if (\$TypeOf != \"nothing\") do={\r\\r
+ \n :set \$Return (\$Return . \"\\n\" . \\\r\\r
+ \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\\r
+ \_\\\r\\r
+ \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set GetPubIp do={\r\\r
+ \n :global DetectIpAddrDefault;\r\\r
+ \n :global DetectIpAddrFallback;\r\\r
+ \n\r\\r
+ \n :local PubIpAddr false;\r\\r
+ \n :local Url \$DetectIpAddrDefault;\r\\r
+ \n :local JobName [ :jobname ];\r\\r
+ \n\r\\r
+ \n :do {\r\\r
+ \n :log debug (\$0 . \" Trying to detect public IP using default serv\\r
+ ice: \" . \$Url . \"...\");\r\\r
+ \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\\r
+ \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\\r
+ )} \\\r\\r
+ \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \\r
+ detect public IP using default service: \" . \$Url . \".\")}\r\\r
+ \n } on-error={\r\\r
+ \n :log error (\$0 . \" Failed to detect public IP using default serv\\r
+ ice: \" . \$Url . \".\");\r\\r
+ \n :set Url \$DetectIpAddrFallBack;\r\\r
+ \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\\r
+ vice: \" . \$Url . \"...\");\r\\r
+ \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\\r
+ \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\\r
+ )} \\\r\\r
+ \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\\r
+ \_detect public IP using fallback service: \" . \$Url . \".\")}\r\\r
+ \n };\r\\r
+ \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\\r
+ \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\\r
+ {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\\r
+ \n :return \$PubIpAddr;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set FormatLine do={\r\\r
+ \n :local Key [ :tostr \$1 ];\r\\r
+ \n :local Value [ :tostr \$2 ];\r\\r
+ \n :local Indent [ :tonum \$3 ];\r\\r
+ \n :local Spaces;\r\\r
+ \n :local Return \"\";\r\\r
+ \n :global CharacterMultiply;\r\\r
+ \n :global EitherOr;\r\\r
+ \n :set Indent [ \$EitherOr \$Indent 16 ];\r\\r
+ \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\\r
+ \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\\r
+ \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\\r
+ n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\\r
+ \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \\r
+ \$Return ]) ] . \$Value)}\r\\r
+ \n :return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set ParseCustom do={\r\\r
+ \n :local Str [ :tostr \$1 ];\r\\r
+ \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\\r
+ \n :local End [ :tostr \$3 ];\r\\r
+ \n :local Num [ :tonum \$4 ];\r\\r
+ \n :local Return;\r\\r
+ \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\\r
+ \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\\r
+ \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\\r
+ lse={\r\\r
+ \n :set End [:find \$rest \$End];\r\\r
+ \n :set Return [:pick \$rest 0 \$End];\r\\r
+ \n }\r\\r
+ \n:return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set LogPrint do={\r\\r
+ \n :local Severity [ :tostr \$1 ];\r\\r
+ \n :local Name [ :tostr \$2 ];\r\\r
+ \n :local Message [ :tostr \$3 ];\r\\r
+ \n :global PrintDebug;\r\\r
+ \n :global PrintDebugOverride;\r\\r
+ \n :global EitherOr;\r\\r
+ \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \\r
+ ];\r\\r
+ \n :local PrintSeverity do={\r\\r
+ \n :global TerminalColorOutput;\r\\r
+ \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\\r
+ \n :local Color { debug=96; info=97; warning=93; error=91 };\r\\r
+ \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\\r
+ \n}\r\\r
+ \n :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\\r
+ \r\\r
+ \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\\r
+ \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\\r
+ \n :if (\$Severity = \"error\") do={:log error \$Log}\r\\r
+ \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\\r
+ \n } else={:log warning \$Log; :set Severity \"warning\"}\r\\r
+ \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\\r
+ erity \$Severity ] . \": \" . \$Message)}\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set CertificateAvailable do={\r\\r
+ \n :local CommonName [ :tostr \$1 ];\r\\r
+ \n :local UseFor [ :tostr \$2 ];\r\\r
+ \n\r\\r
+ \n :global CertificateDownload;\r\\r
+ \n :global ParseKeyValueStore;\r\\r
+ \n\r\\r
+ \n :if ([ :len \$UseFor ] = 0) do={\r\\r
+ \n :log warning (\$0 . \"The intended use is undefined!\");\r\\r
+ \n :set UseFor \"undefined\";\r\\r
+ \n }\r\\r
+ \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\\r
+ \n [ /certificate/settings/get crl-download ] = true && \\\r\\r
+ \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\\r
+ \n :log warning (\$0 . \"This system has low free flash space but \" . \\r
+ \\\r\\r
+ \n \"is configured to download certificate CRLs to system!\");\r\\r
+ \n }\r\\r
+ \n :if ([ :len \$CommonName ] = 0) do={\r\\r
+ \n :log warning (\$0 . \"No CommonName given!\");\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :local CertSettings [ /certificate/settings/get ];\r\\r
+ \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\\r
+ \r\\r
+ \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\\r
+ \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\\r
+ \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\\r
+ \_] ] > 0) do={\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\\r
+ ) do={\r\\r
+ \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \\r
+ \"' not available.\");\r\\r
+ \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\\r
+ ) do={\r\\r
+ \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\\r
+ \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\\r
+ e ] ];\r\\r
+ \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\\r
+ ertVal->\"skid\")) do={\r\\r
+ \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\\r
+ \_= 0) do={\r\\r
+ \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\\r
+ >\"CN\");\r\\r
+ \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \\r
+ is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\\r
+ \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\\r
+ \") ] ];\r\\r
+ \n }\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set CertificateDownload do={\r\\r
+ \n :local CommonName [ :tostr \$1 ];\r\\r
+ \n :global ScriptUpdatesBaseUrl;\r\\r
+ \n :global ScriptUpdatesUrlSuffix;\r\\r
+ \n :global CertificateNameByCN;\r\\r
+ \n :global CleanName;\r\\r
+ \n :global FetchUserAgentStr;\r\\r
+ \n :global RmFile;\r\\r
+ \n :global WaitForFile;\r\\r
+ \n\r\\r
+ \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\\r
+ \r\\r
+ \n \"CommonName '\" . \$CommonName . \"'.\");\r\\r
+ \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\\r
+ \n :do {\r\\r
+ \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\\r
+ -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\\r
+ \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\\r
+ sUrlSuffix) \\\r\\r
+ \n dst-path=\$FileName as-value;\r\\r
+ \n \$WaitForFile \$FileName;\r\\r
+ \n } on-error={\r\\r
+ \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\\r
+ e '\" . \$CommonName . \\\r\\r
+ \n \"' from repository! Trying fallback to mkcert.org...\");\r\\r
+ \n :do {\r\\r
+ \n :local CertSettings [ /certificate/settings/get ];\r\\r
+ \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\\r
+ \_] ] = 0 && \\\r\\r
+ \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \\r
+ || \\\r\\r
+ \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\r
+ \\\r\\r
+ \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\\r
+ \r\\r
+ \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\\r
+ \_Root X1\" ] ] > 0)) do={\r\\r
+ \n :log error (\$0 . \" Required certificate is not available.\");\\r
+ \r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\\r
+ er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\\r
+ \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\\r
+ n ({ \$CommonName }) ] \\\r\\r
+ \n dst-path=\$FileName as-value;\r\\r
+ \n \$WaitForFile \$FileName;\r\\r
+ \n :if ([ /file/get \$FileName size ] = 0) do={\r\\r
+ \n \$RmFile \$FileName;\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n } on-error={\r\\r
+ \n :log error (\$0 . \" Failed downloading certificate with CommonNam\\r
+ e '\" . \$CommonName . \"'!\");\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\\r
+ \n :delay 1s;\r\\r
+ \n \$RmFile \$FileName;\r\\r
+ \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\\r
+ ) do={\r\\r
+ \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\\r
+ +\\\$\") ];\r\\r
+ \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\\r
+ e . \"' still unavailable!\");\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \\r
+ \"_[0-9]+\\\$\") ] do={\r\\r
+ \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\\r
+ \n }\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set CertificateNameByCN do={\r\\r
+ \n :local Match [ :tostr \$1 ];\r\\r
+ \n :global CleanName;\r\\r
+ \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\\r
+ rint=\$Match or name=\$Match) ]->0);\r\\r
+ \n :if ([ :len \$Cert ] = 0) do={\r\\r
+ \n :log warning (\$0 .\" No matching certificate found.\");\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :local CommonName [ /certificate/get \$Cert common-name ];\r\\r
+ \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set CharacterMultiply do={\r\\r
+ \n :local Str [ :tostr \$1 ];\r\\r
+ \n :local Num [ :tonum \$2 ];\r\\r
+ \n :if (\$Num = 0) do={:return \"\"}\r\\r
+ \n :local Return \"\";\r\\r
+ \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\\r
+ \n :return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set FileExists do={\r\\r
+ \n :local FileName [ :tostr \$1 ];\r\\r
+ \n :local Type [ :tostr \$2 ];\r\\r
+ \n :global FileGet;\r\\r
+ \n :local FileVal [ \$FileGet \$FileName ];\r\\r
+ \n :if (\$FileVal = false) do={ :return false; }\r\\r
+ \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\\r
+ \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\\r
+ \_true; }\r\\r
+ \n :return false;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set Grep do={\r\\r
+ \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\\r
+ \n :local Pattern [ :tostr \$2 ];\r\\r
+ \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\\r
+ }\r\\r
+ \n :do {\r\\r
+ \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\\r
+ \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \\r
+ \$Line}\r\\r
+ \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\\r
+ Input ] ];\r\\r
+ \n } while=([ :len \$Input ] > 0);\r\\r
+ \n :return [];\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set HumanReadableNum do={\r\\r
+ \n :local Input [ :tonum \$1 ];\r\\r
+ \n :local Base [ :tonum \$2 ];\r\\r
+ \n :global EitherOr;\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :local Prefix \"kMGTPE\";\r\\r
+ \n :local Pow 1;\r\\r
+ \n :set Base [ \$EitherOr \$Base 1024 ];\r\\r
+ \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\\r
+ \n :if (\$Input < \$Base) do={:return \$Input}\r\\r
+ \n :for I from=0 to=[ :len \$Prefix ] do={\r\\r
+ \n :set Pow (\$Pow * \$Base);\r\\r
+ \n :if (\$Input / \$Base < \$Pow) do={\r\\r
+ \n :set Prefix [ :pick \$Prefix \$I ];\r\\r
+ \n :local Tmp1 (\$Input * 100 / \$Pow);\r\\r
+ \n :local Tmp2 (\$Tmp1 / 100);\r\\r
+ \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\\r
+ \n :return (\$Tmp2 . \".\" . \\\r\\r
+ \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\\r
+ 2 ] + 1) ] . \\\r\\r
+ \n \$Prefix . \$Bin);\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set CleanFilePath do={\r\\r
+ \n :local Path [ :tostr \$1 ];\r\\r
+ \n :global CharacterReplace;\r\\r
+ \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \\r
+ \"//\" \"/\" ]; }\r\\r
+ \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\\r
+ n \$Path ] ]; }\r\\r
+ \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \\r
+ :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\\r
+ \n :return \$Path;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set CleanName do={\r\\r
+ \n :local Input [ :tostr \$1 ];\r\\r
+ \n :local Return \"\";\r\\r
+ \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\\r
+ \n :local Char [ :pick \$Input \$I ];\r\\r
+ \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\\r
+ stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\\r
+ \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\\r
+ \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\\r
+ ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\\r
+ \n };\r\\r
+ \n :set Return (\$Return . \$Char)};\r\\r
+ \n :return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set RandomDelay do={\r\\r
+ \n :local Time [ :tonum \$1 ];\r\\r
+ \n :local Unit [ :tostr \$2 ];\r\\r
+ \n :global EitherOr;\r\\r
+ \n :global GetRandomNumber;\r\\r
+ \n :global MAX;\r\\r
+ \n :if (\$Time = 0) do={:return false}\r\\r
+ \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \\r
+ [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set EscapeForRegEx do={\r\\r
+ \n :local Input [ :tostr \$1 ];\r\\r
+ \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\\r
+ \n :local Return \"\";\r\\r
+ \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\\r
+ \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\\r
+ \n :local Char [ :pick \$Input \$I ];\r\\r
+ \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\\r
+ \n :set Return (\$Return . \$Char);\r\\r
+ \n }\r\\r
+ \n :return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set ExitError do={\r\\r
+ \n :local ExitOK [ :tostr \$1 ];\r\\r
+ \n :local Name [ :tostr \$2 ];\r\\r
+ \n :local Error [ :tostr \$3 ];\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :if (\$ExitOK = \"false\") do={\r\\r
+ \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \\r
+ \\\r\\r
+ \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\\r
+ ror\" . \\\r\\r
+ \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \\r
+ \$Error) \".\" ]);\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set ExitOnError do={\r\\r
+ \n :local Name [ :tostr \$1 ];\r\\r
+ \n :local Error [ :tostr \$2 ];\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\r
+ \\\$\") \\\r\\r
+ \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\\r
+ r\" . \\\r\\r
+ \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\\r
+ rror) \".\" ]);\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set MiniDateTimeStamp do={\r\\r
+ \n :local mikro [ :tobool \$1 ];\r\\r
+ \n /system/clock;\r\\r
+ \n :local vdate [get date];\r\\r
+ \n :local vtime [get time];\r\\r
+ \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\\r
+ \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\\r
+ \n :local M [:tonum \$MM];\r\\r
+ \n :if (\$vdate ~ \".../../....\") do={\r\\r
+ \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\\r
+ \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\\r
+ PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\\r
+ \n :if (\$M>12) do={:set M (\$M - 12)}\r\\r
+ \n :set MM [:pick (100 + \$M) 1 3];\r\\r
+ \n }\r\\r
+ \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\\r
+ \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\\r
+ \n :local HH [:pick \$vtime 0 2];\r\\r
+ \n :local mm [:pick \$vtime 3 5];\r\\r
+ \n :local ss [:pick \$vtime 6 8];\r\\r
+ \n :local Return;\r\\r
+ \n :if (\$mikro = true) do={\r\\r
+ \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\\r
+ \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\\r
+ \n } else={\r\\r
+ \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\\r
+ \r\\r
+ \n }\r\\r
+ \n :return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set WaitForFile do={\r\\r
+ \n :local FileName [ :tostr \$1 ];\r\\r
+ \n :local WaitTime [ :totime \$2 ];\r\\r
+ \n :global CleanFilePath;\r\\r
+ \n :global EitherOr;\r\\r
+ \n :global MAX;\r\\r
+ \n :set FileName [ \$CleanFilePath \$FileName ];\r\\r
+ \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\\r
+ \n :do {\r\\r
+ \n :retry {\r\\r
+ \n /file/get \$FileName;\r\\r
+ \n :return true;\r\\r
+ \n } delay=\$Delay max=10;\r\\r
+ \n } on-error={ }\r\\r
+ \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\\r
+ \n :do {\r\\r
+ \n /file/get \$FileName;\r\\r
+ \n :return true;\r\\r
+ \n } on-error={ }\r\\r
+ \n :delay \$Delay;\r\\r
+ \n :set Delay (\$Delay * 3 / 2);\r\\r
+ \n }\r\\r
+ \n :return false;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set FileGet do={\r\\r
+ \n :local FileName [ :tostr \$1 ];\r\\r
+ \n :global WaitForFile;\r\\r
+ \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :local FileVal false;\r\\r
+ \n :do {\r\\r
+ \n :set FileVal [ /file/get \$FileName ];\r\\r
+ \n } on-error={ }\r\\r
+ \n :return \$FileVal;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set RmDir do={\r\\r
+ \n :local DirName [ :tostr \$1 ];\r\\r
+ \n :global FileGet;\r\\r
+ \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\\r
+ \n :local DirVal [ \$FileGet \$DirName ];\r\\r
+ \n :if (\$DirVal = false) do={\r\\r
+ \n :log debug (\$0 . \" ... which does not exist.\");\r\\r
+ \n :return true;\r\\r
+ \n };\r\\r
+ \n :if (\$DirVal->\"type\" != \"directory\") do={\r\\r
+ \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\\r
+ ory.\");\r\\r
+ \n :return false;\r\\r
+ \n };\r\\r
+ \n :onerror Err {\r\\r
+ \n /file/remove \$DirName;\r\\r
+ \n } do={\r\\r
+ \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\\r
+ : \" . \$Err);\r\\r
+ \n :return false;\r\\r
+ \n };\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set RmFile do={\r\\r
+ \n :local FileName [ :tostr \$1 ];\r\\r
+ \n :global FileGet;\r\\r
+ \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\\r
+ \n :local FileVal [ \$FileGet \$FileName ];\r\\r
+ \n :if (\$FileVal = false) do={\r\\r
+ \n :log debug (\$0 . \" ... which does not exist.\");\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\\r
+ sk\") do={\r\\r
+ \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\\r
+ \r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :onerror Err {\r\\r
+ \n /file/remove \$FileName;\r\\r
+ \n } do={\r\\r
+ \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\\r
+ \_. \$Err); :return false;\r\\r
+ \n }\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set MkDir do={\r\\r
+ \n :local Path [ :tostr \$1 ];\r\\r
+ \n :global CleanFilePath;\r\\r
+ \n :global FileGet;\r\\r
+ \n :global RmDir;\r\\r
+ \n :global WaitForFile;\r\\r
+ \n\r\\r
+ \n :local MkTmpfs do={\r\\r
+ \n :global WaitForFile;\r\\r
+ \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\\r
+ \n :if ([ :len \$TmpFs ] = 1) do={\r\\r
+ \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\\r
+ \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\\r
+ \n /disk/enable \$TmpFs;\r\\r
+ \n }\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\\r
+ \n \$RmDir \"tmpfs\";\r\\r
+ \n :onerror Err {\r\\r
+ \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\\r
+ /get total-memory ] / 3);\r\\r
+ \n \$WaitForFile \"tmpfs\";\r\\r
+ \n } do={\r\\r
+ \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\\r
+ Err);\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :set Path [ \$CleanFilePath \$Path ];\r\\r
+ \n :if (\$Path = \"\") do={\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\\r
+ \n :local PathVal [ \$FileGet \$Path ];\r\\r
+ \n :if (\$PathVal->\"type\" = \"directory\") do={\r\\r
+ \n :log debug (\$0 . \" ... which already exists.\");\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\\r
+ \n :if ([ \$MkTmpfs ] = false) do={\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :onerror Err {\r\\r
+ \n /file/add type=\"directory\" name=\$Path;\r\\r
+ \n \$WaitForFile \$Path;\r\\r
+ \n } do={\r\\r
+ \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \\r
+ \" . \$Err);\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\\r
+ \n :return \$2;\r\\r
+ \n}\r\\r
+ \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\\r
+ \n :return \$2;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set CharacterMultiply do={\r\\r
+ \n :local Str [ :tostr \$1 ];\r\\r
+ \n :local Num [ :tonum \$2 ];\r\\r
+ \n :if (\$Num = 0) do={:return \"\"}\r\\r
+ \n :local Return \"\";\r\\r
+ \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\\r
+ \n :return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set CharacterReplace do={\r\\r
+ \n :local String [ :tostr \$1 ];\r\\r
+ \n :local ReplaceFrom [ :tostr \$2 ];\r\\r
+ \n :local ReplaceWith [ :tostr \$3 ];\r\\r
+ \n :local Return \"\";\r\\r
+ \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\\r
+ \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\\r
+ \r\\r
+ \n :local Pos [ :find \$String \$ReplaceFrom ];\r\\r
+ \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\\r
+ \r\\r
+ \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\\r
+ \_\$String ] ];\r\\r
+ \n }\r\\r
+ \n :return (\$Return . \$String);\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set IfThenElse do={\r\\r
+ \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \\r
+ \$2};\r\\r
+ \n :return \$3;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set EitherOr do={\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \\r
+ \$1 \$2 ]}\r\\r
+ \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\\r
+ \_\$1 \$2 ]}\r\\r
+ \n# this works for boolean values, literal ones with parentheses\r\\r
+ \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set ParseKeyValueStore do={\r\\r
+ \n :local Source \$1;\r\\r
+ \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\\r
+ \n :do {\r\\r
+ \n :return [ :deserialize from=json \$Source ];\r\\r
+ \n } on-error={ }\r\\r
+ \n } \r\\r
+ \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\\r
+ }\r\\r
+ \n :local Result ({});\r\\r
+ \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\\r
+ \n :if ([ :find \$KeyValue \"=\" ]) do={\r\\r
+ \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\\r
+ \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\\r
+ \_:len \$KeyValue ] ];\r\\r
+ \n :if (\$Value=\"true\") do={:set Value true}\r\\r
+ \n :if (\$Value=\"false\") do={:set Value false}\r\\r
+ \n :set (\$Result->\$Key) \$Value;\r\\r
+ \n } else={:set (\$Result->\$KeyValue) true}\r\\r
+ \n }\r\\r
+ \n :return \$Result;\r\\r
+ \n}\r\\r
+ \n:set RequiredRouterOS do={\r\\r
+ \n :local Caller [ :tostr \$1 ];\r\\r
+ \n :local Required [ :tostr \$2 ];\r\\r
+ \n :local Warn [ :tostr \$3 ];\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :global VersionToNum;\r\\r
+ \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\\r
+ \\\$\")) do={\r\\r
+ \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\\r
+ e/update/get installed-version ] ]) do={\r\\r
+ \n :if (\$Warn = \"true\") do={\r\\r
+ \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \\r
+ 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\\r
+ \n \" '\" . \$Caller . \"' (at least specific functionality) requir\\r
+ es RouterOS \" . \$Required . \". Please update!\");\r\\r
+ \n }\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set ValidateSyntax do={\r\\r
+ \n :local Code [ :tostr \$1 ];\r\\r
+ \n :global LogPrint;\r\\r
+ \n :onerror Err {\r\\r
+ \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\\r
+ \n } do={\r\\r
+ \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set VersionToNum do={\r\\r
+ \n :local Input [ :tostr \$1 ];\r\\r
+ \n :local Multi 0x1000000;\r\\r
+ \n :local Return 0;\r\\r
+ \n :global CharacterReplace;\r\\r
+ \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\\r
+ \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\\r
+ \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\\r
+ \r\\r
+ \n }\r\\r
+ \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\\r
+ \n :local Num [ :tonum \$Value ];\r\\r
+ \n :if (\$Multi = 0x100) do={\r\\r
+ \n :if ([ :typeof \$Num ] = \"num\") do={\r\\r
+ \n :set Return (\$Return + 0xff00);\r\\r
+ \n :set Multi (\$Multi / 0x100);\r\\r
+ \n } else={\r\\r
+ \n :if (\$Value = \"zero\") do={ }\r\\r
+ \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \\r
+ }\r\\r
+ \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\\r
+ \r\\r
+ \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\\r
+ lue * \$Multi)); }\r\\r
+ \n :set Multi (\$Multi / 0x100);\r\\r
+ \n }\r\\r
+ \n :return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set ScriptLock do={\r\\r
+ \n :local Script [ :tostr \$1 ];\r\\r
+ \n :local WaitMax [ :totime \$2 ];\r\\r
+ \n :global GetRandom20CharAlNum;\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :global ScriptLockOrder;\r\\r
+ \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\\r
+ \n :set ScriptLockOrder ({});\r\\r
+ \n }\r\\r
+ \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\\r
+ \n :set (\$ScriptLockOrder->\$Script) ({});\r\\r
+ \n }\r\\r
+ \n :local JobCount do={\r\\r
+ \n :local Script [ :tostr \$1 ];\r\\r
+ \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\\r
+ \r\\r
+ \n }\r\\r
+ \n :local TicketCount do={\r\\r
+ \n :local Script [ :tostr \$1 ];\r\\r
+ \n :global ScriptLockOrder;\r\\r
+ \n :local Count 0;\r\\r
+ \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\\r
+ \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \\r
+ + 1)}\r\\r
+ \n }\r\\r
+ \n :return \$Count;\r\\r
+ \n }\r\\r
+ \n :local IsFirstTicket do={\r\\r
+ \n :local Script [ :tostr \$1 ];\r\\r
+ \n :local Check [ :tostr \$2 ];\r\\r
+ \n :global ScriptLockOrder;\r\\r
+ \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\\r
+ \n :if (\$Ticket = \$Check) do={:return true}\r\\r
+ \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\\r
+ o={:return false}\r\\r
+ \n }\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :local AddTicket do={\r\\r
+ \n :local Script [ :tostr \$1 ];\r\\r
+ \n :local Add [ :tostr \$2 ];\r\\r
+ \n :global ScriptLockOrder;\r\\r
+ \n :while (true) do={\r\\r
+ \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\\r
+ \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\\r
+ \n :delay 10ms;\r\\r
+ \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\\r
+ e}\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :local RemoveTicket do={\r\\r
+ \n :local Script [ :tostr \$1 ];\r\\r
+ \n :local Remove [ :tostr \$2 ];\r\\r
+ \n :global ScriptLockOrder;\r\\r
+ \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\\r
+ \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\\r
+ \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\\r
+ \n :delay 10ms;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :local CleanupTickets do={\r\\r
+ \n :local Script [ :tostr \$1 ];\r\\r
+ \n :global ScriptLockOrder;\r\\r
+ \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\\r
+ \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\\r
+ \n }\r\\r
+ \n :set (\$ScriptLockOrder->\$Script) ({});\r\\r
+ \n }\r\\r
+ \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\\r
+ \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\\r
+ \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\\r
+ ist!\");\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n :if ([ \$JobCount \$Script ] = 0) do={\r\\r
+ \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\\r
+ );\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\\r
+ \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\\r
+ t . \"', resetting!\");\r\\r
+ \n :set (\$ScriptLockOrder->\$Script) ({});\r\\r
+ \n /system/script/job/remove [ find where script=\$Script ];\r\\r
+ \n }\r\\r
+ \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\\r
+ \n \$AddTicket \$Script \$MyTicket;\r\\r
+ \n :local WaitInterval (\$WaitMax / 20);\r\\r
+ \n :local WaitTime \$WaitMax;\r\\r
+ \n :while (\$WaitTime > 0 && \\\r\\r
+ \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\\r
+ \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\\r
+ \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\\r
+ \n :delay \$WaitInterval;\r\\r
+ \n }\r\\r
+ \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\\r
+ \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\\r
+ \n \$RemoveTicket \$Script \$MyTicket;\r\\r
+ \n \$CleanupTickets \$Script;\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n \$RemoveTicket \$Script \$MyTicket;\r\\r
+ \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \\r
+ once\" . \\\r\\r
+ \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\\r
+ \_lock\" \"\" ] . \"...\");\r\\r
+ \n :return false;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set SendNotification do={ :onerror Err {\r\\r
+ \n :global SendNotification2;\r\\r
+ \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\\r
+ \_silent=\$4 });\r\\r
+ \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set SendNotification2 do={\r\\r
+ \n :local Notification \$1;\r\\r
+ \n :global NotificationFunctions;\r\\r
+ \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\\r
+ \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\\r
+ ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set SymbolByUnicodeName do={\r\\r
+ \n :local Name [ :tostr \$1 ];\r\\r
+ \n :global EitherOr;\r\\r
+ \n :global SymbolsExtra;\r\\r
+ \n :local Symbols ({\r\\r
+ \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\\r
+ \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\\r
+ \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\\r
+ \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\\r
+ \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\\r
+ \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\\r
+ \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\\r
+ \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\\r
+ \n \"cloud\"=\"\\E2\\98\\81\";\r\\r
+ \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\\r
+ \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\\r
+ \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\\r
+ \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\\r
+ \n \"gear\"=\"\\E2\\9A\\99\";\r\\r
+ \n \"heart\"=\"\\E2\\99\\A5\";\r\\r
+ \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\\r
+ \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\\r
+ \n \"information\"=\"\\E2\\84\\B9\";\r\\r
+ \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\\r
+ \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\\r
+ \n \"link\"=\"\\F0\\9F\\94\\97\";\r\\r
+ \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\\r
+ \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\\r
+ \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\\r
+ \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\\r
+ \n \"scissors\"=\"\\E2\\9C\\82\";\r\\r
+ \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\\r
+ \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\\r
+ \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\\r
+ \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\\r
+ \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\\r
+ \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\\r
+ \n \"star\"=\"\\E2\\AD\\90\";\r\\r
+ \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\\r
+ \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\\r
+ \n }, \$SymbolsExtra);\r\\r
+ \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\\r
+ \n :local Special {\r\\r
+ \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\\r
+ \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\\r
+ \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\\r
+ \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\\r
+ \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\\r
+ \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\\r
+ '!\");\r\\r
+ \n :return \"\";\r\\r
+ \n }\r\\r
+ \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\\r
+ me) ] . \"\\EF\\B8\\8F\");\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set SymbolForNotification do={\r\\r
+ \n :global NotificationsWithSymbols;\r\\r
+ \n :global SymbolByUnicodeName;\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\\r
+ \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\\r
+ \n :local Return \"\";\r\\r
+ \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\\r
+ mbolByUnicodeName \$Symbol ])}\r\\r
+ \n :return (\$Return . \" \");\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\\r
+ \n:set UrlEncode do={\r\\r
+ \n :local Input [ :tostr \$1 ];\r\\r
+ \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\\r
+ \n :local Return \"\";\r\\r
+ \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\\r
+ \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\\r
+ %24\"; \"%25\"; \"%26\"; \"%27\";\r\\r
+ \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \\r
+ \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\\r
+ \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \\r
+ \"%7C\"; \"%7D\"; \"%7E\" };\r\\r
+ \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\\r
+ \n :local Char [ :pick \$Input \$I ];\r\\r
+ \n :local Replace [ :find \$Chars \$Char ];\r\\r
+ \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\\r
+ ce)}\r\\r
+ \n :set Return (\$Return . \$Char);\r\\r
+ \n }\r\\r
+ \n :return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set IsDNSResolving do={\r\\r
+ \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set IsFullyConnected do={\r\\r
+ \n :global IsDNSResolving;\r\\r
+ \n :global IsTimeSync;\r\\r
+ \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\\r
+ \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set IsTimeSync do={\r\\r
+ \n :global IsTimeSyncCached;\r\\r
+ \n :global IsTimeSyncResetNtp;\r\\r
+ \n :if (\$IsTimeSyncCached = true) do={:return true}\r\\r
+ \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\\r
+ \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\\r
+ \n :set IsTimeSyncCached true;\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :local Uptime [ /system/resource/get uptime ];\r\\r
+ \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\\r
+ \n :set IsTimeSyncResetNtp \$Uptime;\r\\r
+ \n }\r\\r
+ \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\\r
+ \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\\r
+ ;\r\\r
+ \n :set IsTimeSyncResetNtp \$Uptime;\r\\r
+ \n /system/ntp/client/set enabled=no;\r\\r
+ \n :delay 20ms;\r\\r
+ \n /system/ntp/client/set enabled=yes;\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\\r
+ \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\\r
+ \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\\r
+ ee license and x86.\";\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :if ([ /ip/cloud/get update-time ] = true) do={\r\\r
+ \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\\r
+ \n :set IsTimeSyncCached true;\r\\r
+ \n :return true;\r\\r
+ \n }\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :log debug \"\$0 No time source configured! Returning gracefully...\";\\r
+ \r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set FetchHugeFiles do={\r\\r
+ \n :local ScriptName [ :tostr \$1 ];\r\\r
+ \n :local Url [ :tostr \$2 ];\r\\r
+ \n :local CheckCert [ :tostr \$3 ];\r\\r
+ \n\r\\r
+ \n :global CleanName;\r\\r
+ \n :global FetchUserAgentStr;\r\\r
+ \n :global GetRandom20CharAlNum;\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :global LogPrint;\r\\r
+ \n :global MkDir;\r\\r
+ \n :global RmDir;\r\\r
+ \n :global RmFile;\r\\r
+ \n :global WaitForFile;\r\\r
+ \n\r\\r
+ \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\\r
+ ithout-crl\" ];\r\\r
+ \n\r\\r
+ \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\\r
+ \n :if ([ \$MkDir \$DirName ] = false) do={\r\\r
+ \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \\r
+ \$GetRandom20CharAlNum ]);\r\\r
+ \n :onerror Err {\r\\r
+ \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \\r
+ \\\r\\r
+ \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\\r
+ lue;\r\\r
+ \n } do={\r\\r
+ \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\\r
+ \n \$RmFile \$FileName;\r\\r
+ \n }\r\\r
+ \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\\r
+ \_. \$Err);\r\\r
+ \n \$RmDir \$DirName;\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\\r
+ \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\\r
+ \_not show up.\");\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :local FileSize [ /file/get \$FileName size ];\r\\r
+ \n :local Return \"\";\r\\r
+ \n :local VarSize 0;\r\\r
+ \n :while (\$VarSize != \$FileSize) do={\r\\r
+ \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\\r
+ 768 file=\$FileName as-value ]->\"data\"));\r\\r
+ \n :set FileSize [ /file/get \$FileName size ];\r\\r
+ \n :set VarSize [ :len \$Return ];\r\\r
+ \n :if (\$VarSize > \$FileSize) do={\r\\r
+ \n :delay 100ms;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n \$RmDir \$DirName;\r\\r
+ \n :return \$Return;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set FetchUserAgentStr do={\r\\r
+ \n :local Caller [ :tostr \$1 ];\r\\r
+ \n :global GlobalScriptsUrl;\r\\r
+ \n :global CommitBrief;\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :local Resource [ /system/resource/get ];\r\\r
+ \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\\r
+ \_\$Resource->\"architecture-name\" . \\\r\\r
+ \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\\r
+ CommitBrief ] . \")\");\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:set ScriptInstallUpdate do={ :onerror Err {\r\\r
+ \n :local Scripts [ :toarray \$1 ];\r\\r
+ \n :local NewComment [ :tostr \$2 ];\r\\r
+ \n :global InitSetup;\r\\r
+ \n\r\\r
+ \n :global CommitId;\r\\r
+ \n :global ScriptUpdatesCRLF;\r\\r
+ \n :global GlobalConfVersion;\r\\r
+ \n :global Identity;\r\\r
+ \n :global CertificateAvailable;\r\\r
+ \n :global CheckSumsVerify;\r\\r
+ \n :global GlobalScriptsUrl;\r\\r
+ \n :global SumsDirAndFileName;\r\\r
+ \n :global GlobalScriptsUrlSuffix;\r\\r
+ \n :global EitherOr;\r\\r
+ \n :global FetchUserAgentStr;\r\\r
+ \n :global Grep;\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :global LogPrint;\r\\r
+ \n :global ParseKeyValueStore;\r\\r
+ \n :global RequiredRouterOS;\r\\r
+ \n :global SendNotification2;\r\\r
+ \n :global SymbolForNotification;\r\\r
+ \n :global ValidateSyntax;\r\\r
+ \n :global CommentsInScripts;\r\\r
+ \n\r\\r
+ \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\\r
+ \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\\r
+ hout.\");\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :foreach Script in=\$Scripts do={\r\\r
+ \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\\r
+ \r\\r
+ \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\\r
+ \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \\r
+ Vados\\n\" comment=\$NewComment;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :local CommitIdBefore \$CommitId;\r\\r
+ \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\\r
+ \n :local ReloadGlobal false;\r\\r
+ \n :local DeviceMode [ /system/device-mode/get ];\r\\r
+ \n\r\\r
+ \n :if (\$CheckSumsVerify = true) do={\r\\r
+ \n :local CheckSums ({});\r\\r
+ \n :do {\r\\r
+ \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\\r
+ iptsUrlSuffix);\r\\r
+ \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\\r
+ \r\\r
+ \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\\r
+ ficate=yes-without-crl \\\r\\r
+ \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\\r
+ =user as-value ]->\"data\") ];\r\\r
+ \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\\r
+ s\" ] do={\r\\r
+ \n :local ScriptVal [ /system/script/get \$Script ];\r\\r
+ \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \\r
+ ];\r\\r
+ \n :local SourceNew;\r\\r
+ \n\r\\r
+ \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\\r
+ \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\\r
+ \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\\r
+ \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\\r
+ \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\\r
+ iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \\r
+ \"'!\");\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :do {\r\\r
+ \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\\r
+ \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\\r
+ e\" . \"', as requested.\");\r\\r
+ \n :error true;\r\\r
+ \n }\r\\r
+ \n :if (\$CheckSumsVerify = true) do={\r\\r
+ \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\\r
+ \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\\r
+ ptInfo->\"url-suffix\") ] = 0 && \\\r\\r
+ \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\\r
+ rce\") ] ] = \$CheckSum) do={\r\\r
+ \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\\r
+ >\"name\" . \"' matches, ignoring.\");\r\\r
+ \n :error true;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\\r
+ \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\\r
+ fetch\" ] = false) do={\r\\r
+ \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\\r
+ ng without.\");\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :onerror Err {\r\\r
+ \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\\r
+ lScriptsUrl ];\r\\r
+ \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\\r
+ lobalScriptsUrlSuffix ];\r\\r
+ \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\\r
+ Suffix);\r\\r
+ \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\\r
+ name\") . \"' from url: \" . \$Url);\r\\r
+ \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\\r
+ \r\\r
+ \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\\r
+ ut=user as-value ];\r\\r
+ \n :if (\$Result->\"status\" = \"finished\") do={\r\\r
+ \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\\r
+ \n } \r\\r
+ \n } do={\r\\r
+ \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\\r
+ al->\"name\" . \"': \" . \$Err);\r\\r
+ \n :if (\$Err != \"Fetch failed with status 404\") do={\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\\r
+ \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\\r
+ \?\");\r\\r
+ \n /system/script/remove \$Script;\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n :if (\$CheckSumsVerify = true) do={\r\\r
+ \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\\r
+ riptInfo->\"url-suffix\") ] = 0 && \\\r\\r
+ \n [ :len \$CheckSum ] = 0) do={\r\\r
+ \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\\r
+ pdates with 'ignore=true' in comment.\");\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :if ([ :len \$SourceNew ] = 0) do={\r\\r
+ \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\\r
+ >\"name\") . \"'.\");\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\\r
+ \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\\r
+ lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\\r
+ \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\\r
+ \$ScriptVal->\"source\")) do={\r\\r
+ \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \\r
+ . \"' source did not change. End of lines set to CRLF.\");\r\\r
+ \n if (\$ScriptUpdatesCRLF = false) do={\r\\r
+ \n :put [ :tolf \$SourceNew ];\r\\r
+ \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\\r
+ ) . \"' source update end of lines to LF.\");\r\\r
+ \n }\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\\r
+ \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\\r
+ l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\\r
+ );\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :if (\$CommentsInScripts = true) do={\r\\r
+ \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\\r
+ \_\") ];\r\\r
+ \n :if ([ :len \$CommentLine ] = 0) do={\r\\r
+ \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\\r
+ iptVal->\"name\") . \"' for comment in script body, is not found result Ig\\r
+ noring!\");\r\\r
+ \n :error false;\r\\r
+ \n } else={\r\\r
+ \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\\r
+ ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\\r
+ ] + 2) [ :len \$CommentLine] ]) do={\r\\r
+ \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\\r
+ \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\\r
+ ;\r\\r
+ \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\\r
+ ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\\r
+ \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\\r
+ omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\\r
+ ded!\");\r\\r
+ \n } else={\r\\r
+ \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\\r
+ al->\"name\") . \"' did not change.\");\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n } \r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\\r
+ \"\\23 requires RouterOS, \") ] ]->version);\r\\r
+ \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\\r
+ \_false ] = false) do={\r\\r
+ \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\\r
+ \") . \"' requires RouterOS \" . \\\r\\r
+ \n \$RequiredROS . \", which is not met by your installation. I\\r
+ gnoring!\");\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\\r
+ \\23 requires device-mode, \") ] ];\r\\r
+ \n :local MissingDM ({});\r\\r
+ \n :foreach Feature,Value in=\$RequiredDM do={\r\\r
+ \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\\r
+ ceMode->\$Feature) = false) do={\r\\r
+ \n :set MissingDM (\$MissingDM, \$Feature);\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if ([ :len \$MissingDM ] > 0) do={\r\\r
+ \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\\r
+ \") . \"' requires disabled \" . \\\r\\r
+ \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\\r
+ gnoring!\");\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\\r
+ \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\\r
+ ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n \r\\r
+ \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\\r
+ ript comment: \" . (\$ScriptVal->\"comment\"));\r\\r
+ \n\r\\r
+ \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\\r
+ Val->\"comment\") \\\r\\r
+ \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\\r
+ F \$SourceNew ] \$Script;\r\\r
+ \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\\r
+ \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\\r
+ \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\\r
+ o={\r\\r
+ \n :set ReloadGlobal true;\r\\r
+ \n }\r\\r
+ \n } on-error={ }\r\\r
+ \n }\r\\r
+ \n :if (\$ReloadGlobal = true) do={\r\\r
+ \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\\r
+ \");\r\\r
+ \n :onerror Err {\r\\r
+ \n :global InitSetup (a);\r\\r
+ \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\\r
+ \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\\r
+ ctions failed! \" . \$Err)}\r\\r
+ \n }\r\\r
+ \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\\r
+ \n \$LogPrint warning \$0 (\"The configuration version decreased from \\r
+ \" . \\\r\\r
+ \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\\r
+ \n \". Installed an older version\?\");\r\\r
+ \n }\r\\r
+ \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\\r
+ \n :global GlobalConfChanges;\r\\r
+ \n :global GlobalConfMigration;\r\\r
+ \n :local ChangeLogCode;\r\\r
+ \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\\r
+ \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\\r
+ \n :onerror Err {\r\\r
+ \n [ :parse \$ChangeLogCode ];\r\\r
+ \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \\r
+ . \$Err)}\r\\r
+ \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\\r
+ dation!\")}\r\\r
+ \n }\r\\r
+ \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\\r
+ \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\\r
+ \_do={\r\\r
+ \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\\r
+ \n :do {\r\\r
+ \n :if ([ :typeof \$Migration ] != \"str\") do={\r\\r
+ \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\\r
+ \_\" is not available.\");\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\\r
+ \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\\r
+ \_. \" failed syntax validation!\");\r\\r
+ \n :error false}\r\\r
+ \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \\r
+ . \": \" . \$Migration);\r\\r
+ \n :onerror Err {\r\\r
+ \n [ :parse \$Migration ];\r\\r
+ \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\\r
+ \_\$I . \" failed to run: \" . \$Err)}\r\\r
+ \n } on-error={ }\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :local NotificationMessage (\"The configuration version on \" . \$Id\\r
+ entity . \" increased \" . \\\r\\r
+ \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\\r
+ d modification. \" . \\\r\\r
+ \n \"Please review and update global-config-overlay, then re-run glo\\r
+ bal-config.\");\r\\r
+ \n \$LogPrint info \$0 (\$NotificationMessage);\r\\r
+ \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\\r
+ \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\\r
+ \");\r\\r
+ \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\\r
+ \_do={\r\\r
+ \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\\r
+ \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\\r
+ \r\\r
+ \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\\r
+ \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\\r
+ \n }\r\\r
+ \n } else={\r\\r
+ \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\\r
+ \_changes are not available.\");\r\\r
+ \n\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \\r
+ } else={ :global GlobalConfChanges (a); }\r\\r
+ \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\\r
+ on; } else={ :global GlobalConfMigration (a); }\r\\r
+ \n }\r\\r
+ \n} do={\r\\r
+ \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\\r
+ \n} }\r\\r
+ \n\r\\r
+ \n# load modules\r\\r
+ \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\\r
+ ns\\\\.d|mod)/.\" ] do={\r\\r
+ \n :local ScriptVal [ /system/script/get \$Script ];\r\\r
+ \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\\r
+ \n :onerror Err {\r\\r
+ \n /system/script/run \$Script;\r\\r
+ \n } do={\r\\r
+ \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\\r
+ ailed to run: \" . \$Err);\r\\r
+ \n }\r\\r
+ \n } else={\r\\r
+ \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\\r
+ led syntax validation, skipping.\");\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n# Add and fix global scheduler\r\\r
+ \n:put \"Add or/and fix Global scheduler...\";\r\\r
+ \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\\r
+ ; }\";\r\\r
+ \n:local Comment \"Every Day Set Global Environment Variables\";\r\\r
+ \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \\r
+ = 0) do={\r\\r
+ \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\\r
+ ent=\$OnEvent start-time=startup;\r\\r
+ \n}\r\\r
+ \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\\r
+ \_do={\r\\r
+ \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\\r
+ \n}\r\\r
+ \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\\r
+ ) do={\r\\r
+ \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\\r
+ \n}\r\\r
+ \n# Add Update Script scheduler\r\\r
+ \n:put \"Add or/and fix Update Script scheduler\";\r\\r
+ \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\\r
+ \r\\r
+ \n:set Comment \"Every Day Check For Update Scripts\";\r\\r
+ \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\\r
+ \" ] ] = 0) do={\r\\r
+ \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \\r
+ start-time=startup interval=1d on-event=\$OnEvent;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:onerror Err {\r\\r
+ \n :global GlobalConfReady;\r\\r
+ \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\\r
+ \_not ready.\"); }; } delay=100ms max=5;\r\\r
+ \n\r\\r
+ \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\\r
+ \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \\r
+ \") ] . \\\r\\r
+ \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\\r
+ \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\\r
+ \n # signal we are ready\r\\r
+ \n:set GlobalFuncReady true;\r\\r
+ \n:set ExitOK true;\r\\r
+ \n\r\\r
+ \n:log info (\$0 . \"Global configs ready!\");\r\\r
+ \n} do={\r\\r
+ \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\\r
+ \n}\r\\r
+ \n"\r
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\\r
+ \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\\r
+ 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\\r
+ \n#\\r
+ \n#root.mnuc.backuper\\r
+ \n\\r
+ \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\\r
+ 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\\r
+ \n#:local Script AM-GlobalConfig;\\r
+ \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\\r
+ heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\\r
+ sc\") output=user as-value ]->\"data\");\\r
+ \n#/usb1/mikro_bak_rsa.pub\\r
+ \n#:local FetchFile AM-DOHCert.rsc\\r
+ \n\\r
+ \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\\r
+ \n:global MkDir;\\r
+ \n\\r
+ \n:local FetchFile Manager@id_rsa.pub\\r
+ \n:local localDir \"/\";\\r
+ \n\\r
+ \n\$MkDir \$localDir;\\r
+ \n\\r
+ \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\\r
+ \$localDir . \$FetchFile);\\r
+ \n"\r
+add dont-require-permissions=yes name=MkTmpfs owner=vados policy=\\r
+ ftp,read,write,policy,test,sniff,sensitive source=\\r
+ ":global MkDir;\r\\r
+ \n\r\\r
+ \n\$MkDir /usb1/tmpfs;"\r
+add dont-require-permissions=no name=CreateContainer owner=vados policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\\r
+ local contIF \"veth1\";\r\\r
+ \n:local contIP \"10.10.10.10/24\";\r\\r
+ \n:local contGW \"10.10.10.1\";\r\\r
+ \n#/interface/veth/add name=\$contIF address=\$contIP gateway=\$contGW;\r\\r
+ \n:local contBridgeIF \"Bridge-DOC\";\r\\r
+ \n:local contBridgeIP \"10.10.10.1/24\";\r\\r
+ \n/interface/bridge/add name=\$contBridgeIF;\r\\r
+ \n/ip/address/add address=\$contBridgeIP interface=\$contBridgeIF;\r\\r
+ \n/interface/bridge/port/add bridge=\$contBridgeIF interface=\$contIF;\r\\r
+ \n/container/config/set ram-high=768M registry-url=https://registry-1.dock\\r
+ er.io tmpdir=sata1/tmp\r\\r
+ \n"\r
+add dont-require-permissions=no name=carkeeperbot owner=vados policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\\r
+ container/mounts/add list=carkeeper_configs/.profile src=sata1/carkeeper/c\\r
+ onfigs/.profile dst=/root/.ashrc;\r\\r
+ \n/container/mounts/add list=carkeeper_configs/php.ini src=sata1/carkeeper\\r
+ /configs/php.ini dst=/etc/php82/php.ini;\r\\r
+ \n#/container/mounts/add list=carkeeper_configs src=sata1/carkeeper/config\\r
+ s dst=/configs;\r\\r
+ \n/container/mounts/add list=carkeeper_app src=sata1/carkeeper/app dst=/ap\\r
+ p;\r\\r
+ \n/container/mounts/add list=carkeeper_scripts src=sata1/carkeeper/scripts\\r
+ \_dst=/scripts;\r\\r
+ \n/container/mounts/add list=carkeeper_configs/sshd_config src=sata1/carke\\r
+ eper/configs/sshd_config dst=/etc/ssh/sshd_config;\r\\r
+ \n\r\\r
+ \n/container/mounts/add list=carkeeper_tmp src=sata1/carkeeper/tmp dst=/va\\r
+ r/tmp;\r\\r
+ \n/container/mounts/add list=carkeeper_sync src=sata1/carkeeper/sync dst=/\\r
+ var/sync;\r\\r
+ \n"\r
+add comment="Enable or disable ip addresses based on bridge port state" \\r
+ dont-require-permissions=no name=mod/AM-IPbridge owner=mod/AM-IPbridge \\r
+ policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \\r
+ source="#!rsc by Vados\r\\r
+ \n# RouterOS script: mod/AM-IPbridge\r\\r
+ \n# Script comment: Enable or disable ip addresses based on bridge port st\\r
+ ate\r\\r
+ \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\\r
+ \n#\r\\r
+ \n#\r\\r
+ \n# requires RouterOS, version=7.19\r\\r
+ \n# requires device-mode, fetch\r\\r
+ \n#\r\\r
+ \n:local ScriptName [ :jobname ];\r\\r
+ \n\r\\r
+ \n# Add this Script scheduler\r\\r
+ \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\\r
+ ={\r\\r
+ \n:log warning (\"SystemScheduler for script: \" . \$ScriptName . \" is NO\\r
+ T SET! Fix It Now!\");\r\\r
+ \n:local OnEvent \"/system/script/run \$ScriptName;\";\r\\r
+ \n:local Comment \"Every Day Check For Fake Bridges\";\r\\r
+ \n/system/scheduler/add name=\$ScriptName comment=\$Comment start-time=sta\\r
+ rtup interval=1d on-event=\$OnEvent;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:foreach Bridge in=[ /interface/bridge/find ] do={\r\\r
+ \n :local BrName [ /interface/bridge/get \$Bridge name ];\r\\r
+ \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName ] ] > \\r
+ 0) do={\r\\r
+ \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName and \\r
+ inactive=no ] ] = 0) do={\r\\r
+ \n /ip/address/disable [ find where !dynamic interface=\$BrName ];\r\\r
+ \n } else={\r\\r
+ \n /ip/address/enable [ find where !dynamic interface=\$BrName ];\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n"\r
+add comment="Use Telegram to chat with your Router and send commands" \\r
+ dont-require-permissions=no name=mod/AM-TG-Bot owner=mod/AM-TG-Bot \\r
+ policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \\r
+ source="#!rsc by Vados\r\\r
+ \n# RouterOS script: mod/AM-TG-Bot\r\\r
+ \n# Script comment: Use Telegram to chat with your Router and send command\\r
+ s\r\\r
+ \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\\r
+ \n#\r\\r
+ \n#\r\\r
+ \n# requires RouterOS, version=7.19\r\\r
+ \n# requires device-mode, fetch\r\\r
+ \n:local ExitOK false;\r\\r
+ \n:onerror Err {\r\\r
+ \n :global GlobalConfReady; :global GlobalFuncReady;\r\\r
+ \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \\r
+ \\\r\\r
+ \n do={ :error (\"Global config and/or functions not ready.\"); }; } \\r
+ delay=500ms max=50;\r\\r
+ \n :local ScriptName [ :jobname ];\r\\r
+ \n\r\\r
+ \n :global Identity;\r\\r
+ \n :global TelegramChatActive;\r\\r
+ \n :global TelegramChatGroups;\r\\r
+ \n :global TelegramChatId;\r\\r
+ \n :global TelegramChatIdsTrusted;\r\\r
+ \n :global TelegramChatOffset;\r\\r
+ \n :global TelegramChatRunTime;\r\\r
+ \n :global TelegramMessageIDs;\r\\r
+ \n :global TelegramRandomDelay;\r\\r
+ \n :global TelegramTokenId;\r\\r
+ \n\r\\r
+ \n :global CertificateAvailable;\r\\r
+ \n :global EitherOr;\r\\r
+ \n :global EscapeForRegEx;\r\\r
+ \n :global FileExists;\r\\r
+ \n :global GetRandom20CharAlNum;\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :global LogPrint;\r\\r
+ \n :global LogPrintVerbose;\r\\r
+ \n :global MAX;\r\\r
+ \n :global MIN;\r\\r
+ \n :global MkDir;\r\\r
+ \n :global RandomDelay;\r\\r
+ \n :global RmDir;\r\\r
+ \n :global ScriptLock;\r\\r
+ \n :global SendTelegram2;\r\\r
+ \n :global SymbolForNotification;\r\\r
+ \n :global ValidateSyntax;\r\\r
+ \n :global WaitForFile;\r\\r
+ \n :global WaitFullyConnected;\r\\r
+ \n\r\\r
+ \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\\r
+ \n :set ExitOK true;\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n \$WaitFullyConnected;\r\\r
+ \n\r\\r
+ \n :if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) \\r
+ do={\r\\r
+ \n /system/scheduler/add start-time=startup interval=30s name=\$ScriptN\\r
+ ame on-event=\"/system/script/run \$ScriptName;\" comment=\"Telegram Chat \\r
+ Bot\";\r\\r
+ \n }\r\\r
+ \n :if ([ :typeof \$TelegramChatOffset ] != \"array\") do={\r\\r
+ \n :set TelegramChatOffset { 0; 0; 0 };\r\\r
+ \n }\r\\r
+ \n :if ([ :typeof \$TelegramRandomDelay ] != \"num\") do={\r\\r
+ \n :set TelegramRandomDelay 0;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \\r
+ G2\" \"fetch\" ] = false) do={\r\\r
+ \n \$LogPrint warning \$ScriptName (\"Downloading required certificate \\r
+ failed.\");\r\\r
+ \n :set ExitOK true;\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n \$RandomDelay \$TelegramRandomDelay;\r\\r
+ \n\r\\r
+ \n :local Data false;\r\\r
+ \n :for I from=1 to=4 do={\r\\r
+ \n :if (\$Data = false) do={\r\\r
+ \n :onerror Err {\r\\r
+ \n :set Data ([ /tool/fetch check-certificate=yes-without-crl outpu\\r
+ t=user \\\r\\r
+ \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/get\\r
+ Updates\?offset=\" . \\\r\\r
+ \n \$TelegramChatOffset->0 . \"&allowed_updates=%5B%22message%22%\\r
+ 5D\") as-value ]->\"data\");\r\\r
+ \n :set TelegramRandomDelay [ \$MAX 0 (\$TelegramRandomDelay - 1) ]\\r
+ ;\r\\r
+ \n } do={\r\\r
+ \n :if (\$I < 4) do={\r\\r
+ \n \$LogPrint debug \$ScriptName (\"Fetch failed, \" . \$I . \". \\r
+ try: \" . \$Err);\r\\r
+ \n :set TelegramRandomDelay [ \$MIN 15 (\$TelegramRandomDelay + 5\\r
+ ) ];\r\\r
+ \n :delay ((\$I * \$I) . \"s\");\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :if (\$Data = false) do={\r\\r
+ \n \$LogPrint warning \$ScriptName (\"Failed getting updates.\");\r\\r
+ \n :set ExitOK true;\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :local JSON [ :deserialize from=json value=\$Data ];\r\\r
+ \n :local UpdateID 0;\r\\r
+ \n :local Uptime [ /system/resource/get uptime ];\r\\r
+ \n :foreach Update in=(\$JSON->\"result\") do={\r\\r
+ \n :set UpdateID (\$Update->\"update_id\");\r\\r
+ \n \$LogPrintVerbose debug \$ScriptName (\"Update \" . \$UpdateID . \":\\r
+ \_\" . [ :serialize to=json \$Update ]);\r\\r
+ \n\r\\r
+ \n :local Message (\$Update->\"message\");\r\\r
+ \n :local IsAnyReply ([ :typeof (\$Message->\"reply_to_message\") ] = \\r
+ \"array\");\r\\r
+ \n :local IsMyReply (\$TelegramMessageIDs->[ :tostr (\$Message->\"reply\\r
+ _to_message\"->\"message_id\") ]);\r\\r
+ \n :if ((\$IsMyReply = 1 || \$TelegramChatOffset->0 > 0 || \$Uptime > 5\\r
+ m) && \$UpdateID >= \$TelegramChatOffset->2) do={\r\\r
+ \n :local Trusted false;\r\\r
+ \n :local Chat (\$Message->\"chat\");\r\\r
+ \n :local From (\$Message->\"from\");\r\\r
+ \n :local Command (\$Message->\"text\");\r\\r
+ \n :local ThreadId [ \$IfThenElse (\$Message->\"is_topic_message\") (\\r
+ \$Message->\"message_thread_id\") \"\" ];\r\\r
+ \n\r\\r
+ \n :foreach IdsTrusted in=(\$TelegramChatId, \$TelegramChatIdsTrusted\\r
+ ) do={\r\\r
+ \n :if (\$From->\"id\" = \$IdsTrusted || \\\r\\r
+ \n \$From->\"username\" = \$IdsTrusted || \\\r\\r
+ \n \$Chat->\"id\" = \$IdsTrusted) do={\r\\r
+ \n :set Trusted true;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :if (\$Trusted = true) do={\r\\r
+ \n :local Done false;\r\\r
+ \n :if (\$Command = \"\?\") do={\r\\r
+ \n \$LogPrint info \$ScriptName (\"Sending notice for update \" .\\r
+ \_\$UpdateID . \".\");\r\\r
+ \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\\r
+ ); silent=true; \\\r\\r
+ \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\\r
+ \r\\r
+ \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\\r
+ Telegram Chat\"); \\\r\\r
+ \n message=([ \$IfThenElse ([ :len (\$From->\"first_name\") ] >\\r
+ \_0) (\"Hello \" . (\$From->\"first_name\") . \"!\\n\\n\") ] . \\\r\\r
+ \n \"Online\" . [ \$IfThenElse \$TelegramChatActive \" (and a\\r
+ ctive!)\" ] . \", awaiting your commands!\") });\r\\r
+ \n :set Done true;\r\\r
+ \n }\r\\r
+ \n :if (\$Done = false && [ :pick \$Command 0 1 ] = \"!\") do={\r\\r
+ \n :if (\$Command ~ (\"^! *(\" . [ \$EscapeForRegEx \$Identity ] \\r
+ . \"|@\" . \$TelegramChatGroups . \")\\\$\")) do={\r\\r
+ \n :set TelegramChatActive true;\r\\r
+ \n } else={\r\\r
+ \n :set TelegramChatActive false;\r\\r
+ \n }\r\\r
+ \n \$LogPrint info \$ScriptName (\"Now \" . [ \$IfThenElse \$Tele\\r
+ gramChatActive \"active\" \"passive\" ] . \\\r\\r
+ \n \" from update \" . \$UpdateID . \"!\");\r\\r
+ \n :set Done true;\r\\r
+ \n }\r\\r
+ \n :if (\$Done = false && (\$IsMyReply = 1 || (\$IsAnyReply = false\\r
+ \_&& \\\r\\r
+ \n \$TelegramChatActive = true)) && [ :len \$Command ] > 0) do\\r
+ ={\r\\r
+ \n :if ([ \$ValidateSyntax \$Command ] = true) do={\r\\r
+ \n :local State \"\";\r\\r
+ \n :local File (\"tmpfs/telegram-chat/\" . [ \$GetRandom20CharA\\r
+ lNum 6 ]);\r\\r
+ \n :if ([ \$MkDir \"tmpfs/telegram-chat\" ] = false) do={\r\\r
+ \n \$LogPrint error \$ScriptName (\"Failed creating directory\\r
+ !\");\r\\r
+ \n :set ExitOK true;\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n \$LogPrint info \$ScriptName (\"Running command from update \\r
+ \" . \$UpdateID . \": \" . \$Command);\r\\r
+ \n :execute script=(\":do {\\n\" . \$Command . \"\\n} on-error=\\r
+ { /file/add name=\\\"\" . \$File . \".failed\\\" };\" . \\\r\\r
+ \n \"/file/add name=\\\"\" . \$File . \".done\\\"\") file=(\$\\r
+ File . \"\\00\");\r\\r
+ \n :if ([ \$WaitForFile (\$File . \".done\") [ \$EitherOr \$Tel\\r
+ egramChatRunTime 20s ] ] = false) do={\r\\r
+ \n :set State ([ \$SymbolForNotification \"warning-sign\" ] .\\r
+ \_\"The command did not finish, still running in background.\\n\\n\");\r\\r
+ \n }\r\\r
+ \n :if ([ \$FileExists (\$File . \".failed\") ] = true) do={\r\\r
+ \n :set State ([ \$SymbolForNotification \"cross-mark\" ] . \\r
+ \"The command failed with an error!\\n\\n\");\r\\r
+ \n }\r\\r
+ \n :local Content ([ /file/read chunk-size=32768 file=\$File as\\r
+ -value ]->\"data\");\r\\r
+ \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\\r
+ \"); silent=true; \\\r\\r
+ \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\r
+ \\\r\\r
+ \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \\r
+ \"Telegram Chat\"); \\\r\\r
+ \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\\r
+ \\n\" . \$Command . \"\\n\\n\" . \\\r\\r
+ \n \$State . [ \$IfThenElse ([ :len \$Content ] > 0) \\\r\\r
+ \n ([ \$SymbolForNotification \"memo\" ] . \"Output:\\n\" .\\r
+ \_\$Content) \\\r\\r
+ \n ([ \$SymbolForNotification \"memo\" ] . \"No output.\") \\r
+ ]) });\r\\r
+ \n \$RmDir \"tmpfs/telegram-chat\";\r\\r
+ \n } else={\r\\r
+ \n \$LogPrint info \$ScriptName (\"The command from update \" .\\r
+ \_\$UpdateID . \" failed syntax validation!\");\r\\r
+ \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\\r
+ \"); silent=false; \\\r\\r
+ \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\r
+ \\\r\\r
+ \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \\r
+ \"Telegram Chat\"); \\\r\\r
+ \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\\r
+ \\n\" . \$Command . \"\\n\\n\" . \\\r\\r
+ \n [ \$SymbolForNotification \"cross-mark\" ] . \"The comma\\r
+ nd failed syntax validation!\") });\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n } else={\r\\r
+ \n :local MessageText (\"Received a message from untrusted contact \\r
+ \" . \\\r\\r
+ \n [ \$IfThenElse ([ :len (\$From->\"username\") ] = 0) \"without\\r
+ \_username\" (\"'\" . \$From->\"username\" . \"'\") ] . \\\r\\r
+ \n \" (ID \" . \$From->\"id\" . \") in update \" . \$UpdateID . \\r
+ \"!\");\r\\r
+ \n :if (\$Command ~ (\"^! *\" . [ \$EscapeForRegEx \$Identity ] . \\r
+ \"\\\$\")) do={\r\\r
+ \n \$LogPrint warning \$ScriptName \$MessageText;\r\\r
+ \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\\r
+ ); silent=false; \\\r\\r
+ \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\\r
+ \r\\r
+ \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\\r
+ Telegram Chat\"); \\\r\\r
+ \n message=(\"You are not trusted.\") });\r\\r
+ \n } else={\r\\r
+ \n \$LogPrint info \$ScriptName \$MessageText;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n } else={\r\\r
+ \n \$LogPrint debug \$ScriptName (\"Already handled update \" . \$Upd\\r
+ ateID . \".\");\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :set TelegramChatOffset ([ :pick \$TelegramChatOffset 1 3 ], \\\r\\r
+ \n [ \$IfThenElse (\$UpdateID >= \$TelegramChatOffset->2) (\$UpdateID +\\r
+ \_1) (\$TelegramChatOffset->2) ]);\r\\r
+ \n} do={\r\\r
+ \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\\r
+ \n}\r\\r
+ \n"\r
+add comment="Script send Notifications in Telegram" dont-require-permissions=\\r
+ no name=mod/AM-TG-Notifications owner=mod/AM-TG-Notifications policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\\r
+ !rsc by Vados\r\\r
+ \n# RouterOS script: mod/AM-TG-Notifications\r\\r
+ \n# Script comment: Script send Notifications in Telegram\r\\r
+ \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\\r
+ \n#\r\\r
+ \n#\r\\r
+ \n# requires RouterOS, version=7.19\r\\r
+ \n# requires device-mode, fetch, scheduler\r\\r
+ \n:global FlushTelegramQueue;\r\\r
+ \n:global GetTelegramChatId;\r\\r
+ \n:global NotificationFunctions;\r\\r
+ \n:global PurgeTelegramQueue;\r\\r
+ \n:global SendTelegram;\r\\r
+ \n:global SendTelegram2;\r\\r
+ \n# flush telegram queue\r\\r
+ \n:set FlushTelegramQueue do={ :onerror Err {\r\\r
+ \n :global TelegramQueue;\r\\r
+ \n :global TelegramMessageIDs;\r\\r
+ \n :global CertificateAvailable;\r\\r
+ \n :global IsFullyConnected;\r\\r
+ \n :global LogPrint;\r\\r
+ \n :if ([ \$IsFullyConnected ] = false) do={\r\\r
+ \n \$LogPrint debug \$0 (\"System is not fully connected, not flushing.\\r
+ \");\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \\r
+ G2\" \"fetch\" ] = false) do={\r\\r
+ \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\\r
+ );\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :local AllDone true;\r\\r
+ \n :local QueueLen [ :len \$TelegramQueue ];\r\\r
+ \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueue\\r
+ \" ] ] > 0 && \$QueueLen = 0) do={\r\\r
+ \n \$LogPrint warning \$0 (\"Flushing Telegram messages from scheduler,\\r
+ \_but queue is empty.\");\r\\r
+ \n }\r\\r
+ \n :foreach Id,Message in=\$TelegramQueue do={\r\\r
+ \n :if ([ :typeof \$Message ] = \"array\" ) do={\r\\r
+ \n :onerror Err {\r\\r
+ \n :local Data ([ /tool/fetch check-certificate=yes-without-crl out\\r
+ put=user http-method=post \\\r\\r
+ \n (\"https://api.telegram.org/bot\" . (\$Message->\"tokenid\") .\\r
+ \_\"/sendMessage\") \\\r\\r
+ \n http-data=(\$Message->\"http-data\") as-value ]->\"data\");\r\\r
+ \n :set (\$TelegramQueue->\$Id);\r\\r
+ \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json v\\r
+ alue=\$Data ]->\"result\"->\"message_id\") ]) 1;\r\\r
+ \n } do={\r\\r
+ \n \$LogPrint debug \$0 (\"Sending queued Telegram message failed: \\r
+ \" . \$Err);\r\\r
+ \n :set AllDone false;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if (\$AllDone = true && \$QueueLen = [ :len \$TelegramQueue ]) do={\r\\r
+ \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ]\\r
+ ;\r\\r
+ \n :set TelegramQueue;\r\\r
+ \n }\r\\r
+ \n} do={\r\\r
+ \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\\r
+ \n} }\r\\r
+ \n# get the chat id\r\\r
+ \n:set GetTelegramChatId do={ :onerror Err {\r\\r
+ \n :global TelegramTokenId;\r\\r
+ \n :global CertificateAvailable;\r\\r
+ \n :global LogPrint;\r\\r
+ \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \\r
+ G2\" \"fetch\" ] = false) do={\r\\r
+ \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\\r
+ );\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :local Data;\r\\r
+ \n :onerror Err {\r\\r
+ \n :set Data ([ /tool/fetch check-certificate=yes-without-crl output=us\\r
+ er \\\r\\r
+ \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/getUpd\\r
+ ates\?offset=0\" . \\\r\\r
+ \n \"&allowed_updates=%5B%22message%22%5D\") as-value ]->\"data\");\\r
+ \r\\r
+ \n } do={\r\\r
+ \n \$LogPrint warning \$0 (\"Fetching data failed: \" . \$Err);\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :local JSON [ :deserialize from=json value=\$Data ];\r\\r
+ \n :local Count [ :len (\$JSON->\"result\") ];\r\\r
+ \n :if (\$Count = 0) do={\r\\r
+ \n \$LogPrint info \$0 (\"No message received.\");\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :local Message (\$JSON->\"result\"->(\$Count - 1)->\"message\");\r\\r
+ \n \$LogPrint info \$0 (\"The chat id is: \" . (\$Message->\"chat\"->\"id\\r
+ \"));\r\\r
+ \n :if ((\$Message->\"is_topic_message\") = true) do={\r\\r
+ \n \$LogPrint info \$0 (\"The thread id is: \" . (\$Message->\"message_\\r
+ thread_id\"));\r\\r
+ \n }\r\\r
+ \n} do={\r\\r
+ \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\\r
+ \n} }\r\\r
+ \n# send notification via telegram - expects one array argument\r\\r
+ \n:set (\$NotificationFunctions->\"telegram\") do={\r\\r
+ \n :local Notification \$1;\r\\r
+ \n :global Identity;\r\\r
+ \n :global IdentityExtra;\r\\r
+ \n :global TelegramChatId;\r\\r
+ \n :global TelegramChatIdOverride;\r\\r
+ \n :global TelegramMessageIDs;\r\\r
+ \n :global TelegramQueue;\r\\r
+ \n :global TelegramThreadId;\r\\r
+ \n :global TelegramThreadIdOverride;\r\\r
+ \n :global TelegramTokenId;\r\\r
+ \n :global TelegramTokenIdOverride;\r\\r
+ \n :global CertificateAvailable;\r\\r
+ \n :global CharacterReplace;\r\\r
+ \n :global EitherOr;\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :global LogPrint;\r\\r
+ \n :global ProtocolStrip;\r\\r
+ \n :global SymbolForNotification;\r\\r
+ \n :global UrlEncode;\r\\r
+ \n :local EscapeMD do={\r\\r
+ \n :local Text [ :tostr \$1 ];\r\\r
+ \n :local Mode [ :tostr \$2 ];\r\\r
+ \n :local Excl [ :tostr \$3 ];\r\\r
+ \n :global CharacterReplace;\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :local Chars {\r\\r
+ \n \"body\"={ \"\\\\\"; \"`\" };\r\\r
+ \n \"plain\"={ \"_\"; \"*\"; \"[\"; \"]\"; \"(\"; \")\"; \"~\"; \"`\"\\r
+ ; \">\";\r\\r
+ \n \"#\"; \"+\"; \"-\"; \"=\"; \"|\"; \"{\"; \"}\"; \".\"; \\r
+ \"!\" };\r\\r
+ \n }\r\\r
+ \n :foreach Char in=(\$Chars->\$Mode) do={\r\\r
+ \n :if ([ :typeof [ :find \$Excl \$Char ] ] = \"nil\") do={\r\\r
+ \n :set Text [ \$CharacterReplace \$Text \$Char (\"\\\\\" . \$Char)\\r
+ \_];\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if (\$Mode = \"body\") do={:return (\"```\\n\" . \$Text . \"\\n```\\r
+ \")}\r\\r
+ \n :return \$Text;\r\\r
+ \n }\r\\r
+ \n :local ChatId [ \$EitherOr (\$Notification->\"chatid\") \\\r\\r
+ \n [ \$EitherOr (\$TelegramChatIdOverride->(\$Notification->\"origin\")\\r
+ ) \$TelegramChatId ] ];\r\\r
+ \n :local ThreadId [ \$EitherOr (\$Notification->\"threadid\") \\\r\\r
+ \n [ \$EitherOr (\$TelegramThreadIdOverride->(\$Notification->\"origin\\r
+ \")) \\\r\\r
+ \n [ \$IfThenElse ([ :len (\$TelegramChatIdOverride->(\$Notification->\\r
+ \"origin\")) ] = 0) \$TelegramThreadId ] ] ];\r\\r
+ \n :local TokenId [ \$EitherOr (\$TelegramTokenIdOverride->(\$Notificatio\\r
+ n->\"origin\")) \$TelegramTokenId ];\r\\r
+ \n :if ([ :len \$TokenId ] = 0 || [ :len \$ChatId ] = 0) do={:return fals\\r
+ e}\r\\r
+ \n :if ([ :typeof \$TelegramMessageIDs ] = \"nothing\") do={:set Telegram\\r
+ MessageIDs ({})}\r\\r
+ \n :local Truncated false;\r\\r
+ \n :local Text (\"*__\" . [ \$EscapeMD (\"[\" . \$IdentityExtra . \$Ident\\r
+ ity . \"] \" . \\\r\\r
+ \n (\$Notification->\"subject\")) \"plain\" ] . \"__*\\n\\n\");\r\\r
+ \n :local LenSubject [ :len \$Text ];\r\\r
+ \n :local LenMessage [ :len (\$Notification->\"message\") ];\r\\r
+ \n :local LenLink ([ :len (\$Notification->\"link\") ] * 2);\r\\r
+ \n :local LenSum (\$LenSubject + \$LenMessage + \$LenLink);\r\\r
+ \n :if (\$LenSum > 3968) do={\r\\r
+ \n :set Text (\$Text . [ \$EscapeMD ([ :pick (\$Notification->\"message\\r
+ \") 0 (3840 - \$LenSubject - \$LenLink) ] . \"...\") \"body\" ]);\r\\r
+ \n :set Truncated true;\r\\r
+ \n } else={:set Text (\$Text . [ \$EscapeMD (\$Notification->\"message\")\\r
+ \_\"body\" ])}\r\\r
+ \n :if (\$LenLink > 0) do={\r\\r
+ \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"link\" ] .\\r
+ \_\\\r\\r
+ \n \"[\" . [ \$EscapeMD [ \$ProtocolStrip (\$Notification->\"link\") \\r
+ ] \"plain\" ] . \"]\" . \\\r\\r
+ \n \"(\" . [ \$EscapeMD (\$Notification->\"link\") \"plain\" ] . \")\\r
+ \");\r\\r
+ \n }\r\\r
+ \n :if (\$Truncated = true) do={\r\\r
+ \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"scissors\"\\r
+ \_] . \\\r\\r
+ \n [ \$EscapeMD (\"The message was too long and has been truncated, c\\r
+ ut off _\" . \\\r\\r
+ \n ((\$LenSum - [ :len \$Text ]) * 100 / \$LenSum) . \"%_!\") \"plain\\r
+ \" \"_\" ]);\r\\r
+ \n }\r\\r
+ \n :local HTTPData (\"chat_id=\" . \$ChatId . \"&disable_notification=\" \\r
+ . (\$Notification->\"silent\") . \\\r\\r
+ \n \"&reply_to_message_id=\" . (\$Notification->\"replyto\") . \"&mes\\r
+ sage_thread_id=\" . \$ThreadId . \\\r\\r
+ \n \"&disable_web_page_preview=true&parse_mode=MarkdownV2\");\r\\r
+ \n :onerror Err {\r\\r
+ \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority \\r
+ - G2\" \"fetch\" ] = false) do={\r\\r
+ \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\\r
+ \");\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n :local Data ([ /tool/fetch check-certificate=yes-without-crl output=\\r
+ user http-method=post \\\r\\r
+ \n (\"https://api.telegram.org/bot\" . \$TokenId . \"/sendMessage\") \\r
+ \\\r\\r
+ \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) as-va\\r
+ lue ]->\"data\");\r\\r
+ \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json value\\r
+ =\$Data ]->\"result\"->\"message_id\") ]) 1;\r\\r
+ \n } do={\r\\r
+ \n \$LogPrint info \$0 (\"Failed sending Telegram notification: \" . \$\\r
+ Err . \" - Queuing...\");\r\\r
+ \n :if ([ :typeof \$TelegramQueue ] = \"nothing\") do={:set TelegramQue\\r
+ ue ({})}\r\\r
+ \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"alarm-cloc\\r
+ k\" ] . \\\r\\r
+ \n [ \$EscapeMD (\"This message was queued since _\" . [ /system/cloc\\r
+ k/get date ] . \\\r\\r
+ \n \" \" . [ /system/clock/get time ] . \"_ and may be obsolete.\") \\r
+ \"plain\" \"_\" ]);\r\\r
+ \n :set (\$TelegramQueue->[ :len \$TelegramQueue ]) { tokenid=\$TokenId\\r
+ ;\r\\r
+ \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) };\r\\r
+ \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueu\\r
+ e\" ] ] = 0) do={\r\\r
+ \n /system/scheduler/add name=\"_FlushTelegramQueue\" interval=1m sta\\r
+ rt-time=startup \\\r\\r
+ \n on-event=(\":global FlushTelegramQueue; \\\$FlushTelegramQueue;\\r
+ \");\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n# purge the Telegram queue\r\\r
+ \n:set PurgeTelegramQueue do={\r\\r
+ \n :global TelegramQueue;\r\\r
+ \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ];\\r
+ \r\\r
+ \n :set TelegramQueue;\r\\r
+ \n}\r\\r
+ \n# send notification via telegram - expects at least two string arguments\\r
+ \r\\r
+ \n:set SendTelegram do={ :onerror Err {\r\\r
+ \n :global SendTelegram2;\r\\r
+ \n \$SendTelegram2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3; sil\\r
+ ent=\$4 });\r\\r
+ \n} do={\r\\r
+ \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\\r
+ \n} }\r\\r
+ \n# send notification via telegram - expects one array argument\r\\r
+ \n:set SendTelegram2 do={\r\\r
+ \n :local Notification \$1;\r\\r
+ \n :global NotificationFunctions;\r\\r
+ \n (\$NotificationFunctions->\"telegram\") (\"\\\$NotificationFunctions->\\r
+ \\\"telegram\\\"\") \$Notification;\r\\r
+ \n}\r\\r
+ \n"\r
+add dont-require-permissions=no name=testIfThenElseAndEitherOr owner=vados \\r
+ policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \\r
+ source=":local ExitOK false;\r\\r
+ \n:local ScriptName [ :jobname ];\r\\r
+ \n\r\\r
+ \n:local ExitError;\r\\r
+ \n#:local IfThenElse;\r\\r
+ \n#:local EitherOr;\r\\r
+ \n\r\\r
+ \n:local one 11;\r\\r
+ \n:local two 8;\r\\r
+ \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\\r
+ \n:local Test; # [ :totime \"22s\" ];\r\\r
+ \n\r\\r
+ \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \\r
+ = true) do={:return \$2}; :return \$3;}\r\\r
+ \n:local EitherOr do={\r\\r
+ \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\\r
+ n \$1} else={:return \$2};}\r\\r
+ \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\\r
+ rn \$1} else={:return \$2};}\r\\r
+ \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\\r
+ \r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\\r
+ \n\r\\r
+ \n:set Test [ \$EitherOr \$Test \"<unknown>\" ];\r\\r
+ \n:log warning (\"\\\$ Test = \" . \$Test);\r\\r
+ \n\r\\r
+ \n:set ExitError do={\r\\r
+ \n :local ExitOK [ :tostr \$1 ];\r\\r
+ \n :local Name [ :tostr \$2 ];\r\\r
+ \n :local Error [ :tostr \$3 ];\r\\r
+ \n :local IfThenElse;\r\\r
+ \n :if (\$ExitOK = \"false\") do={\r\\r
+ \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \\r
+ \\\r\\r
+ \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\\r
+ ror\" . \\\r\\r
+ \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \\r
+ \$Error) \".\" ]);\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n\r\\r
+ \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\\r
+ \n\r\\r
+ \n:set ExitOK true;\r\\r
+ \n\$ExitError \$ExitOK \$ScriptName \"Err test custom\";"\r
+add comment="Update and Backup send notification to EMail" \\r
+ dont-require-permissions=no name=AM-Backup-UpdateEmail owner=\\r
+ AM-Backup-UpdateEmail policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\\r
+ !rsc by Vados\r\\r
+ \n# RouterOS script: AM-Backup-UpdateEmail\r\\r
+ \n# Script comment: Update and Backup send notification to EMail\r\\r
+ \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\\r
+ \n#\r\\r
+ \n#\r\\r
+ \n# requires RouterOS, version>=6.43.7\r\\r
+ \n# requires device-mode, fetch\r\\r
+ \n#\r\\r
+ \n# Updated: 15/04/2025\r\\r
+ \n# Website: https://github.com/beeyev\r\\r
+ \n# Notification e-mail (Make sure you have configured Email settings in T\\r
+ ools -> Email)\r\\r
+ \n:local ExitOK false;\r\\r
+ \n:onerror Err {\r\\r
+ \n :global GlobalConfReady; :global GlobalFuncReady;\r\\r
+ \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \\r
+ \\\r\\r
+ \n do={ :error (\"Global config and/or functions not ready.\"); }; } \\r
+ delay=500ms max=50;\r\\r
+ \n :local ScriptName [ :jobname ];\r\\r
+ \n\r\\r
+ \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \\r
+ = true) do={:return \$2}; :return \$3;}\r\\r
+ \n:local EitherOr do={\r\\r
+ \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\\r
+ n \$1} else={:return \$2};}\r\\r
+ \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\\r
+ rn \$1} else={:return \$2};}\r\\r
+ \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\\r
+ \r\\r
+ \n}\r\\r
+ \n:local ExitError do={\r\\r
+ \n :local ExitOK [ :tostr \$1 ];\r\\r
+ \n :local Name [ :tostr \$2 ];\r\\r
+ \n :local Error [ :tostr \$3 ];\r\\r
+ \n :if (\$ExitOK = \"false\") do={:log error (\$Name [ \$IfThenElse ([ :p\\r
+ ick \$Name 0 1 ] = \"\\\$\") \\\r\\r
+ \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\\r
+ ror\" . \\\r\\r
+ \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \\r
+ \$Error) \".\" ]);}\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:global LogPrint;\r\\r
+ \n:global EditSchedulers;\r\\r
+ \n:global DevInfoIncludeIP;\r\\r
+ \n\r\\r
+ \n:local SchedInterval \"7d\";\r\\r
+ \n:local SchedStartTime \"03:41:27\";\r\\r
+ \n:local SchedComment \"Every 7 Day Check For Update and Backup send notif\\r
+ ication to EMail.\";\r\\r
+ \n\r\\r
+ \n# Function to add or edit schedulers for scripts, to ensure they are set\\r
+ \_up correctly\r\\r
+ \n# How to use:\r\\r
+ \n# Call this function with the following parameters:\r\\r
+ \n# 1. \$1 - Scheduler name (usually same as script name) [*]\r\\r
+ \n# 2. \$2 - Interval (e.g. \"1d\" (default is \"1d\")) [**]\r\\r
+ \n# 3. \$3 - Start Time (e.g. \"00:00:00\", default is current time) [**]\\r
+ \r\\r
+ \n# 4. \$4 - Comment (optional, default: \"Scheduler for script: <name>\")\\r
+ \_[**]\r\\r
+ \n# 5. \$5 - On Event command (e.g. \"/system/script { run <name>; }\" (de\\r
+ fault is \"/system/script { run \$SchedName; }\")) [**]\r\\r
+ \n# 6. \$6 - Policy (e.g. \"ftp,reboot,read,write,policy,test,password,sni\\r
+ ff,sensitive,romon\" (default is the same)) [**]\r\\r
+ \n# 7. \$7 - Start Date (e.g. \"jan/01/1970\", default is current date) [*\\r
+ *]\r\\r
+ \n# Notes:\r\\r
+ \n# * - Scheduler name is required, and is used to identify the scheduler\\r
+ \_to create or edit. It is usually the same as the script name (\$ScriptNa\\r
+ me).\r\\r
+ \n# ** - If optional parameters are not provided, default values will be u\\r
+ sed.\r\\r
+ \n# This allows for quick setup with minimal parameters, while still \\r
+ providing flexibility for customization.\r\\r
+ \n# Example usage:\r\\r
+ \n# :if ([ \$EditSchedulers \"my-script\" ] = false) do={:set ExitOK false\\r
+ ; :error true;}\r\\r
+ \n# :if ([ \$EditSchedulers \"my-script\" \"1d\" \"03:41:27\" \"My custom \\r
+ scheduler comment\" false false \"jan/01/1970\" ] = false) do={:set ExitOK\\r
+ \_false; :error true;}\r\\r
+ \n\r\\r
+ \n:set EditSchedulers do={\r\\r
+ \n :local SchedName [ :tostr \$1 ];\r\\r
+ \n :if ([ :len \$SchedName ] = 0) do={ :return false; }\r\\r
+ \n :local Interval [ :tostr \$2 ];\r\\r
+ \n :if ([ :len \$Interval ] = 0) do={ :set Interval \"1d\"; }\r\\r
+ \n :local StartTime [ :tostr \$3 ];\r\\r
+ \n :if ([ :len \$StartTime ] = 0) do={ :set StartTime [/system/clock/get \\r
+ time]; }\r\\r
+ \n :local Comment [ :tostr \$4 ];\r\\r
+ \n :if ([ :len \$Comment ] = 0) do={ :set Comment \"Scheduler for script:\\r
+ \_\$SchedName\"; }\r\\r
+ \n :local OnEvent [ :tostr \$5 ];\r\\r
+ \n :if ([ :len \$OnEvent ] = 0) do={ :set OnEvent \"/system/script { run \\r
+ \$SchedName; }\"; }\r\\r
+ \n :local Policy [ :tostr \$6 ];\r\\r
+ \n :if ([ :len \$Policy ] = 0) do={ :set Policy \"ftp,reboot,read,write,p\\r
+ olicy,test,password,sniff,sensitive,romon\"; }\r\\r
+ \n :local StartDate [ :tostr \$7 ];\r\\r
+ \n :if ([ :len \$StartDate ] = 0) do={ :set StartDate [/system/clock/get \\r
+ date]; }\r\\r
+ \n\r\\r
+ \n :onerror Err {\r\\r
+ \n # Check if scheduler exists, if not - create it\r\\r
+ \n :if ([ :len [ /system/scheduler/find where name=\$SchedName ] ] = 0)\\r
+ \_do={\r\\r
+ \n :log warning (\$SchedName . \"System Scheduler for script: \" . \$\\r
+ SchedName . \" is NOT SET! Fix It Now!\");\r\\r
+ \n /system/scheduler/add comment=\$Comment interval=\$Interval name=\\r
+ \$SchedName on-event=\$OnEvent policy=\$Policy start-date=\$StartDate star\\r
+ t-time=\$StartTime;\r\\r
+ \n }\r\\r
+ \n # Check if scheduler parameters are correct, if not - fix them\r\\r
+ \n :if ([ /system/scheduler/get \$SchedName comment ] != \$Comment) do=\\r
+ {\r\\r
+ \n /system/scheduler/set \$SchedName comment=\$Comment;\r\\r
+ \n }\r\\r
+ \n :if ([ /system/scheduler/get \$SchedName interval ] != \$Interval) d\\r
+ o={\r\\r
+ \n /system/scheduler/set \$SchedName interval=\$Interval;\r\\r
+ \n }\r\\r
+ \n :if ([ /system/scheduler/get \$SchedName on-event ] != \$OnEvent) do\\r
+ ={\r\\r
+ \n /system/scheduler/set \$SchedName on-event=\$OnEvent;\r\\r
+ \n }\r\\r
+ \n :if ([ /system/scheduler/get \$SchedName policy ] != \$Policy) do={\\r
+ \r\\r
+ \n /system/scheduler/set \$SchedName policy=\$Policy;\r\\r
+ \n }\r\\r
+ \n :if ([ /system/scheduler/get \$SchedName start-date ] != \$StartDate\\r
+ ) do={\r\\r
+ \n /system/scheduler/set \$SchedName start-date=\$StartDate;\r\\r
+ \n }\r\\r
+ \n :if ([ /system/scheduler/get \$SchedName start-time ] != \$StartTime\\r
+ ) do={\r\\r
+ \n /system/scheduler/set \$SchedName start-time=\$StartTime;\r\\r
+ \n }\r\\r
+ \n } do={:log error (\$SchedName . \"Failed to add/modify scheduler for '\\r
+ \" . \$SchedName . \"' failed: \" . \$Err); :return false};\r\\r
+ \n :return true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n:if ([ \$EditSchedulers \$ScriptName \$SchedInterval \$SchedStartTime \$\\r
+ SchedComment ] = false) do={\r\\r
+ \n :log error (\$ScriptName . \"Failed to add/modify scheduler for \" . \\r
+ \$ScriptName . \"!\");\r\\r
+ \n :set ExitOK true;\r\\r
+ \n :error true;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n# Local Function CheckOSUpdateMode\r\\r
+ \n:local CheckOSUpdateMode;\r\\r
+ \n:set CheckOSUpdateMode do={\r\\r
+ \n :local NewMode [ :tostr \$1 ];\r\\r
+ \n :if ([ :len \$NewMode ] = 0) do={\r\\r
+ \n :log error (\$0 . \"/nFunction /\$CheckOSUpdateMode received empty v\\r
+ alue!\");\r\\r
+ \n :return false;\r\\r
+ \n :error true;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :global BackupAndUpdateMode;\r\\r
+ \n :global OldMode [ :tostr \$BackupAndUpdateMode ];\r\\r
+ \n :if (\$NewMode != \$BackupAndUpdateMode && \$NewMode = \"updateOnce\")\\r
+ \_do={\r\\r
+ \n :set BackupAndUpdateMode [ :tostr \$NewMode ];\r\\r
+ \n :log info (\$0 . \"/nOk. /\$BackupAndUpdateMode set to: '\" . \$NewM\\r
+ ode . \"'.\\nYou're a good boy! ))\\nI'm launching the update in 5 seconds\\r
+ .\");\r\\r
+ \n :delay 5;\r\\r
+ \n /system/script { run \$ScriptName; };\r\\r
+ \n } else={\r\\r
+ \n :log warning (\$0 . \"/nFunction /\$CheckOSUpdateMode received value: \\r
+ '\" . \$NewMode . \"', but is may be only \\\"updateOnce\\\"!\");\r\\r
+ \n :return false;\r\\r
+ \n }\r\\r
+ \n :return true;\r\\r
+ \n :error false;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n# :if ([ :len [ /system/scheduler/find where name=\"running-from-backup\\r
+ -partition\" ] ] > 0) do={\r\\r
+ \n# \$LogPrint warning \$ScriptName (\"Running from backup partition, r\\r
+ efusing to act.\");\r\\r
+ \n# :set ExitOK true;\r\\r
+ \n# :error false;\r\\r
+ \n# }\r\\r
+ \n\r\\r
+ \n:global EmailGeneralTo;\r\\r
+ \n:global BackupAndUpdateMode;\r\\r
+ \n:global forceBackup;\r\\r
+ \n:global BackupPassword;\r\\r
+ \n:global BackupSens;\r\\r
+ \n:global updateChannel;\r\\r
+ \n\r\\r
+ \n:global DevInfoIncludeIP;\r\\r
+ \n\r\\r
+ \n# Installs patch updates only (BackupAndUpdateMode = \"osupdate\").\r\\r
+ \n# Works for `stable` and `long-term` channels.\r\\r
+ \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\\r
+ 1 skipped).\r\\r
+ \n# Sends info if a newer (non-patch) version is found.\r\\r
+ \n:local installOnlyPatchUpdates false;\r\\r
+ \n:local scriptVersion \"26.04.30\";\r\\r
+ \n:local copyrightUrl \"https://www.github.com/vados-dev/\";\r\\r
+ \n#Script messages prefix\r\\r
+ \n:local SMP \"BkpAndUpdate:\";\r\\r
+ \n\r\\r
+ \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\\r
+ heck logs for more details.\";\r\\r
+ \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \\r
+ update\\\" v.\$scriptVersion started.\";\r\\r
+ \n:log info \"\$SMP Script Mode: `\$BackupAndUpdateMode`, Update channel: \\r
+ `\$updateChannel`, Force backup: `\$forceBackup`, Install only patch updat\\r
+ es: `\$installOnlyPatchUpdates`\";\r\\r
+ \n\r\\r
+ \n## vv FUNCTIONS vv ##\r\\r
+ \n:global WaitCheckUpdates; \$WaitCheckUpdates;\r\\r
+ \n:global MiniDateTimeStamp;\r\\r
+ \n:local MDTSFix [\$MiniDateTimeStamp];\r\\r
+ \n:global Identity;\r\\r
+ \n:global IdentityShort;\r\\r
+ \n:global devBoardName;\r\\r
+ \n:global runningVersion;\r\\r
+ \n:global runningChannel;\r\\r
+ \n:global devModel;\r\\r
+ \n:global devRbSerialNumber;\r\\r
+ \n:global ROsVerAvail;\r\\r
+ \n:global PkgUpdStatus;\r\\r
+ \n\r\\r
+ \n# Checks if two RouterOS version strings differ only by the patch versio\\r
+ n\r\\r
+ \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"] # Output: true\r\\r
+ \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"] # Output: false\r\\r
+ \n:local FuncIsPatchUpdateOnly do={\r\\r
+ \n :local ver1 \$1;\r\\r
+ \n :local ver2 \$2;\r\\r
+ \n # Extract the major and minor components from a version\r\\r
+ \n :local extractMajorMinor do={\r\\r
+ \n :local ver \$1;\r\\r
+ \n :local dot1 [:find \$ver \".\"];\r\\r
+ \n :if (\$dot1 = -1) do={:return \$ver}\r\\r
+ \n :local major [:pick \$ver 0 \$dot1];\r\\r
+ \n :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]];\r\\r
+ \n :local dot2 [:find \$rest \".\"];\r\\r
+ \n :local minor \$rest;\r\\r
+ \n :if (\$dot2 >= 0) do={:set minor [:pick \$rest 0 \$dot2]}\r\\r
+ \n :return (\$major . \".\" . \$minor);\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n# Compare the major and minor components of both version strings\r\\r
+ \n:if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={:r\\r
+ eturn true}\r\\r
+ \n :return false;\r\\r
+ \n}\r\\r
+ \n# Creates backups and returns array of names\r\\r
+ \n# Possible arguments:\r\\r
+ \n# \$1 - file name, without extension\r\\r
+ \n# \$2 - password (optional)\r\\r
+ \n# \$3 - sensitive data in config (optional, default: false)\r\\r
+ \n# Example:\r\\r
+ \n#:put [\$FuncCreateBackups \$backupName]\r\\r
+ \n:local FuncCreateBackups do={\r\\r
+ \n :local backupName [ :tostr \$1 ];\r\\r
+ \n :local BackPass \$2;\r\\r
+ \n :local BackSens \$3;\r\\r
+ \n\r\\r
+ \n #Script messages prefix\r\\r
+ \n :local SMP \"BkpAndUpdate:\";\r\\r
+ \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\\r
+ \_check logs for more details.\";\r\\r
+ \n :log info (\"\$SMP global function `FuncCreateBackups` started, input:\\r
+ \_`\$backupName`\");\r\\r
+ \n\r\\r
+ \n # validate required parameter: backupName\r\\r
+ \n :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\\r
+ {\r\\r
+ \n :log error \"\$SMP parameter 'backupName' is required and must be a \\r
+ non-empty string\";\r\\r
+ \n# :log warning \"\$SMP parameter '\\\$backupName' is required and mus\\r
+ t be a non-empty string.\\nI set '\\\$backupName' to 'default-backup'\";\r\\r
+ \n# :set \$backupName \"default-backup\";\r\\r
+ \n :error \$exitErrorMessage;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :local backupFileSys \"\$backupName.backup\";\r\\r
+ \n :local backupFileConfig \"\$backupName.rsc\";\r\\r
+ \n :local backupNames {\$backupFileSys;\$backupFileConfig};\r\\r
+ \n\r\\r
+ \n ## Perform system backup\r\\r
+ \n :if ([:len \$BackPass] = 0) do={\r\\r
+ \n :log info (\"\$SMP starting backup without password, backup name: `\\r
+ \$backupName`\");\r\\r
+ \n /system backup save dont-encrypt=yes name=\$backupName;\r\\r
+ \n } else={\r\\r
+ \n :log info (\"\$SMP starting backup with password, backup name: `\$ba\\r
+ ckupName`\");\r\\r
+ \n /system backup save password=\$BackPass name=\$backupName;\r\\r
+ \n }\r\\r
+ \n :log info (\"\$SMP system backup created: `\$backupFileSys`\");\r\\r
+ \n ## Export config file\r\\r
+ \n :if (\$BackSens = true) do={\r\\r
+ \n :log info (\"\$SMP starting export config with sensitive data, backu\\r
+ p name: `\$backupName`\");\r\\r
+ \n # Since RouterOS v7 it needs to be explicitly set that we want to ex\\r
+ port sensitive data\r\\r
+ \n :if ([:pick [/system resource get version] 0 1] < 7) do={\r\\r
+ \n :execute \"/export compact terse file=\$backupName\";\r\\r
+ \n } else={\r\\r
+ \n :execute \"/export compact show-sensitive terse file=\$backupName\\r
+ \";\r\\r
+ \n }\r\\r
+ \n } else={\r\\r
+ \n :log info (\"\$SMP starting export config without sensitive data, ba\\r
+ ckup name: `\$backupName`\");\r\\r
+ \n /export compact hide-sensitive terse file=\$backupName;\r\\r
+ \n }\r\\r
+ \n :log info (\"\$SMP Config export complete: `\$backupFileConfig`\");\r\\r
+ \n :log info (\"\$SMP Waiting a little to ensure backup files are written\\r
+ \");\r\\r
+ \n :delay 20;\r\\r
+ \n :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\\r
+ \n :log info (\"\$SMP system backup file successfully saved to the file\\r
+ \_system: `\$backupFileSys`\");\r\\r
+ \n } else={\r\\r
+ \n :log error (\"\$SMP system backup was not created, file does not exi\\r
+ st: `\$backupFileSys`\");\r\\r
+ \n :error \$exitErrorMessage;\r\\r
+ \n }\r\\r
+ \n :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\\r
+ \n :log info (\"\$SMP config backup file successfully saved to the file\\r
+ \_system: `\$backupFileConfig`\");\r\\r
+ \n } else={\r\\r
+ \n :log error (\"\$SMP config backup was not created, file does not exi\\r
+ st: `\$backupFileConfig`\");\r\\r
+ \n :error \$exitErrorMessage;\r\\r
+ \n }\r\\r
+ \n :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\\r
+ ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\\r
+ \n :return \$backupNames;\r\\r
+ \n}\r\\r
+ \n# Sends an email\r\\r
+ \n# Parameters:\r\\r
+ \n# \$1 - to (email address)\r\\r
+ \n# \$2 - subject\r\\r
+ \n# \$3 - body\r\\r
+ \n# \$4 - file attachments (optional; pass \"\" if not needed)\r\\r
+ \n#\r\\r
+ \n# Example:\r\\r
+ \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\\r
+ lete.\" \"backup1.backup\"\r\\r
+ \n:local FuncSendEmailSafe do={\r\\r
+ \n :global EmailGeneralTo;\r\\r
+ \n :local emailSubject \$2;\r\\r
+ \n :local emailBody \$3;\r\\r
+ \n :local emailAttachments \$4;\r\\r
+ \n :local SMP \"Bkp&Upd:\";\r\\r
+ \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\\r
+ \_check logs for more details.\";\r\\r
+ \n :log info \"\$SMP Attempting to send email to `\$EmailGeneralTo`\";\r\\r
+ \n # SAFETY: wait for any previously queued email to finish\r\\r
+ \n :local waitTimeoutPre 60;\r\\r
+ \n :local waitCounterPre 0;\r\\r
+ \n :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \\r
+ e-mail get last-status] = \"in-progress\")) do={\r\\r
+ \n :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\\r
+ \n :log error \"\$SMP Email send aborted: previous send did not compl\\r
+ ete after \$waitTimeoutPre seconds\";\r\\r
+ \n :error \$exitErrorMessage;\r\\r
+ \n }\r\\r
+ \n :log info \"\$SMP Waiting for previous email to finish (status: \$[/\\r
+ tool e-mail get last-status])...\";\r\\r
+ \n :delay 1; \r\\r
+ \n :set waitCounterPre (\$waitCounterPre + 1);\r\\r
+ \n }\r\\r
+ \n # Send the email\r\\r
+ \n :do {\r\\r
+ \n /tool e-mail send to=\$EmailGeneralTo subject=\$emailSubject body=\$\\r
+ emailBody file=\$emailAttachments;\r\\r
+ \n } on-error={\r\\r
+ \n :log error \"\$SMP Email send command failed to execute. Check logs \\r
+ and verify email settings.\";\r\\r
+ \n :error \$exitErrorMessage;\r\\r
+ \n }\r\\r
+ \n # Wait for send status to change from \"in-progress\" / \"resolving-dn\\r
+ s\"\r\\r
+ \n :local waitTimeout 60;\r\\r
+ \n :local waitCounter 0;\r\\r
+ \n :local emailStatus \"\";\r\\r
+ \n :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\\r
+ out` seconds...\";\r\\r
+ \n :while (\$waitCounter < \$waitTimeout) do={\r\\r
+ \n :set emailStatus [/tool e-mail get last-status];\r\\r
+ \n :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\\r
+ ng-dns\") do={\r\\r
+ \n :log info \"\$SMP Email send status received: \$emailStatus\";\r\\r
+ \n # exit loop\r\\r
+ \n :set waitCounter \$waitTimeout;\r\\r
+ \n } else={:delay 1; :set waitCounter (\$waitCounter + 1)}\r\\r
+ \n }\r\\r
+ \n # Final decision based on last status\r\\r
+ \n :if (\$emailStatus = \"succeeded\") do={\r\\r
+ \n :log info \"\$SMP Email successfully sent to `\$EmailGeneralTo`\";\\r
+ \r\\r
+ \n } else={\r\\r
+ \n :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\\r
+ eck logs for more details and verify email settings.\";\r\\r
+ \n :error \$exitErrorMessage;\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n# Global variable to track current update step\r\\r
+ \n# They need to be initialized here first to be available in the script\r\\r
+ \n:global buGlobalVarTargetOsVersion;\r\\r
+ \n:global buGlobalVarScriptStep;\r\\r
+ \n:local scriptStep \$buGlobalVarScriptStep;\r\\r
+ \n:do {\r\\r
+ \n /system/script/environment remove buGlobalVarScriptStep;\r\\r
+ \n} on-error={}\r\\r
+ \n:if ([:len \$scriptStep] = 0) do={\r\\r
+ \n :set scriptStep 1;\r\\r
+ \n}\r\\r
+ \n## ^^ FUNCTIONS ^^ ##\r\\r
+ \n#\r\\r
+ \n# Initial validation\r\\r
+ \n## Check email settings\r\\r
+ \n:if ([:len \$EmailGeneralTo] < 3) do={\r\\r
+ \n :log error (\"\$SMP Parameter `\\\$EmailGeneralTo` is not set, or cont\\r
+ ains invalid value. Script stopped.\");\r\\r
+ \n :error \$exitErrorMessage;\r\\r
+ \n}\r\\r
+ \n# Values will be defined later in the script\r\\r
+ \n:local emailServer \"\";\r\\r
+ \n:local emailFromAddress [/tool e-mail get from];\r\\r
+ \n:log info \"\$SMP Validating email settings...\";\r\\r
+ \n:do {\r\\r
+ \n :set emailServer [/tool e-mail get server];\r\\r
+ \n} on-error={\r\\r
+ \n # This is a workaround for the RouterOS v7.12 and older versions\r\\r
+ \n :set emailServer [/tool e-mail get address];\r\\r
+ \n}\r\\r
+ \n:if (\$emailServer = \"0.0.0.0\") do={\r\\r
+ \n :log error (\"\$SMP Email server address is not correct: `\$emailServe\\r
+ r`, check `Tools -> Email`. Script stopped.\");\r\\r
+ \n :error \$exitErrorMessage;\r\\r
+ \n}\r\\r
+ \n:if ([:len \$emailFromAddress] < 3) do={\r\\r
+ \n :log error (\"\$SMP Email configuration FROM address is not correct: `\\r
+ \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\\r
+ \n :error \$exitErrorMessage;\r\\r
+ \n}\r\\r
+ \n# Script mode validation\r\\r
+ \n:if (\$BackupAndUpdateMode != \"backup\" and \$BackupAndUpdateMode != \"\\r
+ osupdate\" and \$BackupAndUpdateMode != \"updateOnce\" and \$BackupAndUpda\\r
+ teMode != \"osnotify\") do={\r\\r
+ \n :log error (\"\$SMP Script parameter `\\\$BackupAndUpdateMode` is not \\r
+ set, or contains invalid value: `\$BackupAndUpdateMode`. Script stopped.\"\\r
+ );\r\\r
+ \n :error \$exitErrorMessage;\r\\r
+ \n}\r\\r
+ \n# Update channel validation\r\\r
+ \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \\r
+ and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\\r
+ \_do={\r\\r
+ \n :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\\r
+ r contains invalid value: `\$updateChannel`. Script stopped.\");\r\\r
+ \n :error \$exitErrorMessage;\r\\r
+ \n}\r\\r
+ \n# Verify if script is set to install patch updates and if the update cha\\r
+ nnel is valid\r\\r
+ \n:if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \"\\r
+ updateOnce\") and \$installOnlyPatchUpdates = true) do={\r\\r
+ \n :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\\r
+ \") do={\r\\r
+ \n :log error (\"\$SMP Patch-only updates enabled, but update channel `\\r
+ \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \\r
+ Script stopped\");\r\\r
+ \n :error \$exitErrorMessage;\r\\r
+ \n }\r\\r
+ \n \r\\r
+ \n :if (\$runningChannel != \"stable\" and \$runningChannel != \"long-ter\\r
+ m\") do={\r\\r
+ \n :log error (\"\$SMP Script is set to install only patch updates, but\\r
+ \_the installed RouterOS version is not from `stable` or `long-term` chann\\r
+ el: `\$runningChannel`. Script stopped\");\r\\r
+ \n :error \$exitErrorMessage;\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n#\r\\r
+ \n\r\\r
+ \n:local rawTime [/system clock get time];\r\\r
+ \n:local rawDate [/system clock get date];\r\\r
+ \n\r\\r
+ \n:local deviceOsVerAndChannelRunning [/system/resource/get version];\r\\r
+ \n\r\\r
+ \n:local backupNameTemplate (\"backup_v\" . \$runningVersion . \"_\" .\\r
+ \_\$runningChannel . \"_\" . \$MDTSFix);\r\\r
+ \n:local backupNameBeforeUpdate (\$backupNameTemplate . \"_before_update\"\\r
+ );\r\\r
+ \n:local backupNameAfterUpdate (\$backupNameTemplate . \"_after_update\")\\r
+ ;\r\\r
+ \n\r\\r
+ \n## Email body template\r\\r
+ \n:local mailSubjectPrefix \"\$SMP Device - `\$IdentityShort`\";\r\\r
+ \n:local mailBodyCopyright \"Mikrotik RouterOS automatic backup & update \\r
+ (ver. \$scriptVersion) \\n\$copyrightUrl\";\r\\r
+ \n:local changelogUrl \"Check RouterOS changelog: https://mikrotik.com\\r
+ /download/changelogs/\";\r\\r
+ \n:local mailBodyDeviceInfo \"\";\r\\r
+ \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\\r
+ ;\r\\r
+ \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\\r
+ --\");\r\\r
+ \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$Identity\")\\r
+ ;\r\\r
+ \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$devModel\"\\r
+ );\r\\r
+ \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$devBoardNa\\r
+ me\");\r\\r
+ \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\\r
+ vRbSerialNumber\");\r\\r
+ \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\\r
+ \$deviceOsVerAndChannelRunning\");\r\\r
+ \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\\r
+ tem/resource/get build-time]\");\r\\r
+ \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW Avai\\r
+ lable: \$ROsVerAvail\");\r\\r
+ \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \\r
+ \$rawDate \$rawTime (\$[/system/clock/get time-zone-name ])\");\r\\r
+ \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system/\\r
+ resource/get uptime]\");\r\\r
+ \n## IP address detection\r\\r
+ \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\\r
+ \n :global GetPubIp;\r\\r
+ \n :local PublicIpAddress [ \$GetPubIp ];\r\\r
+ \n :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP address\\r
+ : \" . \$PublicIpAddress . \".\");\r\\r
+ \n :log info \"\$SMP Public IP address detected: \$PublicIpAddress\";\r\\r
+ \n} \r\\r
+ \n\r\\r
+ \n:local mailAttachments [:toarray \"\"];\r\\r
+ \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\\r
+ \n :if (\$scriptStep = 3) do={\r\\r
+ \n :log info (\"\$SMP Waiting for one minute before continuing to the f\\r
+ inal step.\");\r\\r
+ \n :delay 1m;\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n## STEP 1: Create backups, check for new RouterOS, and send email\r\\r
+ \n## Steps 2\C3\A23 run only if auto-update is enabled and a new version i\\r
+ s available\r\\r
+ \n:if (\$scriptStep = 1) do={\r\\r
+ \n :global BackupPassword;\r\\r
+ \n :global BackupSens;\r\\r
+ \n :local isNewOsUpdateAvailable false;\r\\r
+ \n :local isLatestOsAlreadyInstalled true;\r\\r
+ \n :local isOsNeedsToBeUpdated false;\r\\r
+ \n :local isUpdateCheckSucceeded false;\r\\r
+ \n :local isEmailNeedsToBeSent false;\r\\r
+ \n :local mailSubjectPartAction \"\";\r\\r
+ \n :local mailPtBodyAction \"\";\r\\r
+ \n :local mailPtSubjectBackup \"\";\r\\r
+ \n :local mailPtBodyBackup \"\";\r\\r
+ \n # Checking for new version\r\\r
+ \n :if (\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \\r
+ \"osnotify\" or \$BackupAndUpdateMode = \"updateOnce\") do={\r\\r
+ \n :log info (\"\$SMP Setting update channel to `\$updateChannel`\");\r\\r
+ \n /system/package/update/set channel=\$updateChannel;\r\\r
+ \n :log info (\"\$SMP Checking for new RouterOS version. Current instal\\r
+ led version is: `\$runningVersion`\");\r\\r
+ \n \$LogPrint debug \$ScriptName (\"Checking for updates...\");\r\\r
+ \n \r\\r
+ \n# /system/package/update/check-for-updates without-paging as-value;\\r
+ \r\\r
+ \n# /system/package/update check-for-updates;\r\\r
+ \n :delay 5s;\r\\r
+ \n :set PkgUpdStatus [ /system/package/update/get status ];\r\\r
+ \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\\r
+ \n :set ROsVerAvail [/system/package/update/get latest-version];\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\\r
+ \n :log info (\"\$SMP New RouterOS version is available: `\$ROsVerAva\\r
+ il`\");\r\\r
+ \n :set isNewOsUpdateAvailable true;\r\\r
+ \n :set isLatestOsAlreadyInstalled false;\r\\r
+ \n :set isUpdateCheckSucceeded true;\r\\r
+ \n :set isEmailNeedsToBeSent true;\r\\r
+ \n :set mailSubjectPartAction \"New RouterOS available\";\r\\r
+ \n :set mailPtBodyAction \"New RouterOS version is available, curren\\r
+ t version: v\$runningVersion, new version: v\$ROsVerAvail. \\n\$changelogU\\r
+ rl\";\r\\r
+ \n } else={\r\\r
+ \n :if (\$PkgUpdStatus = \"System is already up to date\") do={\r\\r
+ \n :log info (\"\$SMP No new RouterOS version is available, the lat\\r
+ est version is already installed: `v\$runningVersion`\");\r\\r
+ \n :set isUpdateCheckSucceeded true;\r\\r
+ \n :set mailSubjectPartAction \"No os update available\";\r\\r
+ \n :set mailPtBodyAction \"No new RouterOS version is available, t\\r
+ he latest version is already installed: `v\$runningVersion`\";\r\\r
+ \n } else={\r\\r
+ \n :log error (\"\$SMP Failed to check for new RouterOS version. Pa\\r
+ ckage check status: `\$PkgUpdStatus`\");\r\\r
+ \n :set isEmailNeedsToBeSent true;\r\\r
+ \n :set mailSubjectPartAction \"Error unable to check new os versio\\r
+ n\";\r\\r
+ \n :set mailPtBodyAction \"An error occurred while checking for a \\r
+ new RouterOS version.\\nStatus returned: `\$PkgUpdStatus`\\n\\nPlease revi\\r
+ ew the logs on the device for more details and verify internet connectivit\\r
+ y.\";\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n # Checking if the script needs to install new os version\r\\r
+ \n :if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \\r
+ \"updateOnce\") and \$isNewOsUpdateAvailable = true) do={\r\\r
+ \n :if (\$installOnlyPatchUpdates = true) do={\r\\r
+ \n :if ([\$FuncIsPatchUpdateOnly \$runningVersion \$ROsVerAvail] = tr\\r
+ ue) do={\r\\r
+ \n :log info \"\$SMP New RouterOS version is available, and it is a\\r
+ \_patch update. Current version: v\$runningVersion, new version: v\$ROsVer\\r
+ Avail\";\r\\r
+ \n :set isOsNeedsToBeUpdated true;\r\\r
+ \n } else={\r\\r
+ \n :log info \"\$SMP The script will not install this update, becau\\r
+ se it is not a patch update. Current version: v\$runningVersion, new versi\\r
+ on: v\$ROsVerAvail\";\r\\r
+ \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\\r
+ l not be installed, because the script is set to install only patch update\\r
+ s.\");\r\\r
+ \n }\r\\r
+ \n } else={\r\\r
+ \n :set isOsNeedsToBeUpdated true;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n # Checking If the script needs to create a backup\r\\r
+ \n :if (\$forceBackup = true or \$BackupAndUpdateMode = \"backup\" or \$i\\r
+ sOsNeedsToBeUpdated = true) do={\r\\r
+ \n :log info (\"\$SMP Starting backup process.\");\r\\r
+ \n :set isEmailNeedsToBeSent true;\r\\r
+ \n :local backupName \$backupNameTemplate;\r\\r
+ \n # This means it's the first step where we create a backup before the\\r
+ \_update process\r\\r
+ \n :if (\$isOsNeedsToBeUpdated = true) do={\r\\r
+ \n :set backupName \$backupNameBeforeUpdate;\r\\r
+ \n #Email body if the purpose of the script is to update the device\r\\r
+ \n :set mailSubjectPartAction \"Update preparation\";\r\\r
+ \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\\r
+ s for device '\$Identity' is scheduled to upgrade RouterOS from version v.\\r
+ \$runningVersion to version v.\$ROsVerAvail (Update channel: \$updateChann\\r
+ el)\");\r\\r
+ \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \\r
+ update will proceed only after a successful backup.\");\r\\r
+ \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\\r
+ th detailed information will be sent once the update process is completed.\\r
+ \");\r\\r
+ \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\\r
+ eive a second email within the next 10 minutes, there may be an issue. Ple\\r
+ ase check your device logs for further information.\");\r\\r
+ \n }\r\\r
+ \n :do {\r\\r
+ \n :set mailAttachments [\$FuncCreateBackups \$backupName \$BackupPas\\r
+ sword \$BackupSens];\r\\r
+ \n :set mailPtSubjectBackup \"Backup created\";\r\\r
+ \n :set mailPtBodyBackup \"System backups have been successfully crea\\r
+ ted and attached to this email.\";\r\\r
+ \n } on-error={\r\\r
+ \n :set isOsNeedsToBeUpdated false;\r\\r
+ \n :set mailPtSubjectBackup \"Backup failed\";\r\\r
+ \n :set mailPtBodyBackup \"The script failed to create backups. Pleas\\r
+ e check device logs for more details.\";\r\\r
+ \n :log warning \"\$SMP Backup creation failed. Update process will b\\r
+ e canceled if automatic update is enabled\";\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if (\$isEmailNeedsToBeSent = true) do={\r\\r
+ \n :log info \"\$SMP Preparing to send email...\";\r\\r
+ \n :local mailStep1Subject \$mailSubjectPrefix;\r\\r
+ \n :local mailStep1Body \"\";\r\\r
+ \n # subject\r\\r
+ \n :if (\$mailSubjectPartAction != \"\") do={:set mailStep1Subject (\$\\r
+ mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\\r
+ \n :if (\$mailPtSubjectBackup != \"\") do={:set mailStep1Subject (\$ma\\r
+ ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\\r
+ \n # body\r\\r
+ \n :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\\r
+ Body . \$mailPtBodyAction . \"\\n\\n\")}\r\\r
+ \n :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\\r
+ Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\\r
+ \n :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n__\\r
+ ________\\n\" . \$mailBodyCopyright);\r\\r
+ \n :set mailStep1Body (\$mailStep1Body . \"\\n[*** TEST START ***]\\n\\\\r
+ \$DeviceInfo: \" . [ \$DeviceInfo ] . \"\\n[*** TEST END ***]\\n\");\r\\r
+ \n # Send email with backups\r\\r
+ \n :do {\$FuncSendEmailSafe \$EmailGeneralTo \$mailStep1Subject \$mailS\\r
+ tep1Body \$mailAttachments} on-error={\r\\r
+ \n :set isOsNeedsToBeUpdated false;\r\\r
+ \n :log error \"\$SMP The script will not proceed with the update pro\\r
+ cess, because the email was not sent.\";\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if ([:len \$mailAttachments] > 0) do={\r\\r
+ \n :log info \"\$SMP Cleaning up backup files from the file system...\"\\r
+ ;\r\\r
+ \n /file remove \$mailAttachments;\r\\r
+ \n :delay 2s;\r\\r
+ \n }\r\\r
+ \n :if (\$isOsNeedsToBeUpdated = true) do={\r\\r
+ \n :global OldMode;\r\\r
+ \n :log info \"\$SMP everything is ready to install new RouterOS, going\\r
+ \_to start the update process and reboot the device.\";\r\\r
+ \n :do {\r\\r
+ \n :local nextStep 2;\r\\r
+ \n :if (\$isCloudHostedRouter = true) do={\r\\r
+ \n :log info \"\$SMP The device is a cloud hosted router, the secon\\r
+ d step updating the Routerboard firmware will be skipped.\";\r\\r
+ \n :set nextStep 3;\r\\r
+ \n }\r\\r
+ \n :local scheduledCommand (\":delay 5s; /system/scheduler remove BKP\\r
+ UPD-NEXT-BOOT-TASK; \\\r\\r
+ \n :global buGlobalVarScriptStep \$nextStep; :global buGlobalVarTarg\\r
+ etOsVersion \\\"\$ROsVerAvail\\\"; \\\r\\r
+ \n :delay 10s; /system/script { run \$ScriptName; }\");\r\\r
+ \n /system/scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\\r
+ ledCommand start-time=startup interval=0;\r\\r
+ \n /system/package/update install;\r\\r
+ \n } on-error={\r\\r
+ \n # Failed to install new os version, remove the task and variables\\r
+ \r\\r
+ \n :do {\r\\r
+ \n /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\r\\r
+ \n :set BackupAndUpdateMode \$OldMode;\r\\r
+ \n :delay 2;\r\\r
+ \n :do {\r\\r
+ \n :global buGlobalVarTargetOsVersion (a);\r\\r
+ \n } on-error={\r\\r
+ \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \"ERROR Remove\\r
+ \_global variable \\\$buGlobalVarTargetOsVersion failed!\");\r\\r
+ \n }\r\\r
+ \n# :if ([ :len \$OldMode ] > 0) do={\r\\r
+ \n# :do {\r\\r
+ \n# :global OldMode (a);\r\\r
+ \n# } on-error={\r\\r
+ \n# :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Re\\r
+ move global variable \\\$OldMode failed!\");\r\\r
+ \n# }\r\\r
+ \n# }\r\\r
+ \n } on-error={\r\\r
+ \n :log error \"\$SMP Failed to install new RouterOS version. Pleas\\r
+ e check device logs for more details. \\\r\\r
+ \n \\nAnd Failed to remove task and variables! Check it!\";\r\\r
+ \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove \\r
+ task and global variables!\");\r\\r
+ \n }\r\\r
+ \n :log error \"\$SMP Failed to install new RouterOS version. Please \\r
+ check device logs for more details.\";\r\\r
+ \n :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\\r
+ ailed\");\r\\r
+ \n :local mailUpdateErrorBody \"The script was unable to install new \\r
+ RouterOS version. Please check device logs for more details.\";\r\\r
+ \n # Send email with error\r\\r
+ \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailUpdateErrorSubject \$ma\\r
+ ilUpdateErrorBody \"\";\r\\r
+ \n :error \$exitErrorMessage;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n}\r\\r
+ \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\\r
+ \n## Runs only if auto-update is enabled and a new RouterOS version was fo\\r
+ und\r\\r
+ \n:if (\$scriptStep = 2) do={\r\\r
+ \n :log info \"\$SMP The script is in the second step, updating Routerboa\\r
+ rd firmware.\";\r\\r
+ \n :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\\r
+ entFw to v.\$deviceRbUpgradeFw\";\r\\r
+ \n /system routerboard upgrade;\r\\r
+ \n :delay 2;\r\\r
+ \n :log info \"\$SMP routerboard upgrade process was completed, going to \\r
+ reboot in a moment!\";\r\\r
+ \n ## Set task to send final report on the next boot\r\\r
+ \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 2; \\r
+ :global buGlobalVarScriptStep 3; \\\r\\r
+ \n :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersion\\\\r
+ \"; :delay 10s; /system/script { run \$ScriptName; }; \\ \r\\r
+ \n :delay 5s; /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\" start-ti\\r
+ me=startup interval=0;\r\\r
+ \n :delay 2;\r\\r
+ \n /system reboot;\r\\r
+ \n}\r\\r
+ \n\r\\r
+ \n## STEP 3: Final report (after second reboot, with delay).\r\\r
+ \n## Runs only if auto-update is enabled and a new RouterOS version was fo\\r
+ und.\r\\r
+ \n:if (\$scriptStep = 3) do={\r\\r
+ \n :log info (\"\$SMP The script is in the third step, sending final repo\\r
+ rt.\");\r\\r
+ \n :local targetOsVersion \$buGlobalVarTargetOsVersion;\r\\r
+ \n :do {\r\\r
+ \n# /system/script/environment remove [find name=\"buGlobalVarTargetOsV\\r
+ ersion\"];\r\\r
+ \n :global buGlobalVarTargetOsVersion (a);\r\\r
+ \n } on-error={\r\\r
+ \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove glob\\r
+ al variable \\\$buGlobalVarTargetOsVersion failed!\");\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :if ([ :len \$OldMode ] != 0) do={\r\\r
+ \n :do {\r\\r
+ \n# /system/script/environment remove [find name=\"OldMode\"];\r\\r
+ \n :global OldMode (a);\r\\r
+ \n } on-error={\r\\r
+ \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR! Remove\\r
+ \_global variable \\\$OldMode failed!\");\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if ([:len \$targetOsVersion] = 0) do={\r\\r
+ \n :log warning \"\$SMP Something is wrong, the script was unable to ge\\r
+ t the target updated OS version from the global variable.\";\r\\r
+ \n }\r\\r
+ \n :local mailStep3Subject \$mailSubjectPrefix;\r\\r
+ \n :local mailStep3Body \"\";\r\\r
+ \n :if (\$targetOsVersion = \$runningVersion) do={\r\\r
+ \n :log info \"\$SMP Successfully verified new RouterOS version: target\\r
+ : `\$targetOsVersion`, current: `\$runningVersion`\";\r\\r
+ \n :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \\r
+ Backup created\");\r\\r
+ \n :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\\r
+ rade process was completed\");\r\\r
+ \n :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\\r
+ \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\");\r\\r
+ \n :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \\r
+ of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\\r
+ yDeviceInfo\\n\\n\$mailBodyCopyright\");\r\\r
+ \n :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\\r
+ BackupPassword \$BackupSens];\r\\r
+ \n } else={\r\\r
+ \n :log error \"\$SMP Failed to verify new RouterOS version: target: `\\r
+ \$targetOsVersion`, current: `\$runningVersion`\";\r\\r
+ \n :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\");\r\\r
+ \n :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\\r
+ ify that the new RouterOS version was installed, target version: `\$target\\r
+ OsVersion`, current version: `\$runningVersion`\\nCheck device logs for mo\\r
+ re details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\");\r\\r
+ \n }\r\\r
+ \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailStep3Subject \$mailStep3Bod\\r
+ y \$mailAttachments;\r\\r
+ \n :if ([:len \$mailAttachments] > 0) do={\r\\r
+ \n :log info \"\$SMP Cleaning up backup files from the file system...\"\\r
+ ;\r\\r
+ \n /file remove \$mailAttachments;\r\\r
+ \n :delay 2;\r\\r
+ \n }\r\\r
+ \n :log info (\"\$SMP Final report email sent successfully, and the scrip\\r
+ t has finished.\");\r\\r
+ \n}\r\\r
+ \n:log info (\"\$SMP the script has finished, script step: `\$scriptStep` \\r
+ \\n\\n\");\r\\r
+ \n\r\\r
+ \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\\r
+ \n"\r
+add dont-require-permissions=no name=testGetPubIP owner=vados policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\\r
+ global DevInfoIncludeIP;\r\\r
+ \n:global CharacterReplace;\r\\r
+ \n:global EscapeForRegEx;\r\\r
+ \n:global UrlEncode;\r\\r
+ \n\r\\r
+ \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\\r
+ \n :global GetPubIp;\r\\r
+ \n :local Char (\"\\n\\r\");\r\\r
+ \n :local PublicIpAddress [\$GetPubIp];\r\\r
+ \n# :if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 2) ] = \\r
+ \"\\n\") do={:error true}; :set error falseon-error={:set PublicIpAddress \\r
+ (\$PublicIpAddress . Char)};\r\\r
+ \n#:if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 1) ] = \"/\\r
+ n\") do={\r\\r
+ \n#:log warning \"N is = //n\"; \r\\r
+ \n# :set PublicIpAddress [ \$CharacterReplace \$PublicIpAddress \$Char \"\\r
+ \" ];\r\\r
+ \n#}\r\\r
+ \n# :set PublicIpAddress [ \$UrlEncode \$PublicIpAddress ];\r\\r
+ \n#:local IpLen ([ :len \$PublicIpAddress ] -1);\r\\r
+ \n#:set PublicIpAddress [:pick \$PublicIpAddress 0 \$IpLen];\r\\r
+ \n :log warning \"Public IP address detected: \$PublicIpAddress , len = \\r
+ \$IpLen\";\r\\r
+ \n}\r\\r
+ \n"\r
+add comment="download, import and update firewall address-lists" \\r
+ dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \\r
+ policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \\r
+ source="#!rsc by Vados\r\\r
+ \n# RouterOS script: AM-FwAddrLists\r\\r
+ \n# Script comment: download, import and update firewall address-lists\r\\r
+ \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\\r
+ \n#\r\\r
+ \n#\r\\r
+ \n# requires RouterOS, version=7.19\r\\r
+ \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\\r
+ \n:local ExitOK false;\r\\r
+ \n:onerror Err {\r\\r
+ \n :global GlobalConfReady; :global GlobalFuncReady;\r\\r
+ \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \\r
+ \\\r\\r
+ \n do={ :error (\"Global config and/or functions not ready.\"); }; } \\r
+ delay=500ms max=50;\r\\r
+ \n :local ScriptName [ :jobname ];\r\\r
+ \n\r\\r
+ \n :global GlobalScriptsUrl;\r\\r
+ \n :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\\r
+ e ] . \"/\");\r\\r
+ \n :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\\r
+ \n :local ListsIndex \"index.lst\";\r\\r
+ \n :local AddrListsTimeOut 1d;\r\\r
+ \n :local CheckCerts false;\r\\r
+ \n\r\\r
+ \n :global CertificateAvailable;\r\\r
+ \n :global EitherOr;\r\\r
+ \n :global FetchHugeFiles;\r\\r
+ \n :global HumanReadableNum;\r\\r
+ \n :global IfThenElse;\r\\r
+ \n :global LogPrint;\r\\r
+ \n :global NetMask4;\r\\r
+ \n :global NetMask6;\r\\r
+ \n :global ScriptLock;\r\\r
+ \n \r\\r
+ \n :local FindDelim do={\r\\r
+ \n :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\\r
+ jklmnopqrstuvwxyz-\";\r\\r
+ \n :for I from=0 to=[ :len \$1 ] do={\r\\r
+ \n :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \\r
+ ] != \"num\") do={\r\\r
+ \n :return \$I;\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :local GetBranch do={\r\\r
+ \n :global EitherOr;\r\\r
+ \n :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\\r
+ therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\\r
+ \n }\r\\r
+ \n \r\\r
+ \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\\r
+ \n :set ExitOK true;\r\\r
+ \n :error false;\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :local ListComment (\"managed by \" . \$ScriptName);\r\\r
+ \n :local Url (\$ListsUrl . \$ListsIndex);\r\\r
+ \n :local tmpIndex false;\r\\r
+ \n\r\\r
+ \n :for I from=1 to=5 do={\r\\r
+ \n :if (\$tmpIndex = false) do={\r\\r
+ \n :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\\r
+ kCerts ] ];\r\\r
+ \n :if (\$tmpIndex = false && \$I < 5) do={\r\\r
+ \n :log warning (\$ScriptName . \" Failed downloading address-list \\r
+ index, \" . \$I . \". try from: \" . \$Url);\r\\r
+ \n :delay ((\$I * \$I) . \"s\");\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n :if (\$tmpIndex = false) do={\r\\r
+ \n :log warning (\$ScriptName . \" Failed downloading address-list inde\\r
+ x from: \" . \$Url);\r\\r
+ \n :set tmpIndex \"\";\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \\r
+ options=dsv.plain ] do={\r\\r
+ \n# :set List (\$List->0);\r\\r
+ \n :local ListName;\r\\r
+ \n :local Delim [ \$FindDelim \$List ];\r\\r
+ \n :if (\$Delim = 0) do={ :set List \"\"; };\r\\r
+ \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\\r
+ \_. \$List);\r\\r
+ \n :if ([ :len \$List ] = 0) do={\r\\r
+ \n :log error (\$ScriptName . \" Failed parsing address-list index en\\r
+ try: \" . \$List);\r\\r
+ \n } else={\r\\r
+ \n :set ListName [ :pick \$List 0 \$Delim ];\r\\r
+ \n }\r\\r
+ \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\\r
+ \_. \$ListName . \" - Ok.\");\r\\r
+ \n :local ListUrl (\$ListsUrl . \$ListName);\r\\r
+ \n :local CntAdd 0;\r\\r
+ \n :local CntRenew 0;\r\\r
+ \n :local CntRemove 0;\r\\r
+ \n :local IPv4Addresses ({});\r\\r
+ \n :local IPv6Addresses ({});\r\\r
+ \n :local Failure false;\r\\r
+ \n :local Data false;\r\\r
+ \n :local TimeOut \$AddrListTimeOut;\r\\r
+ \n\r\\r
+ \n :for I from=1 to=5 do={\r\\r
+ \n :if (\$Data = false) do={\r\\r
+ \n :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\\r
+ eckCerts ] ];\r\\r
+ \n :if (\$Data = false && \$I < 5) do={\r\\r
+ \n :log warning (\$ScriptName . \" Failed downloading for list '\\r
+ \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\\r
+ \n :delay ((\$I * \$I) . \"s\");\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :if (\$Data = false) do={\r\\r
+ \n :set Data \"\";\r\\r
+ \n :set Failure true;\r\\r
+ \n :log warning (\$ScriptName . \" Failed downloading for list '\" . \\r
+ \$ListName . \"' from: \" . \$ListUrl);\r\\r
+ \n } else={\r\\r
+ \n :log warning (\$ScriptName . \" Downloaded \" . [ \$HumanReadableN\\r
+ um [ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" .\\r
+ \_\$ListUrl);\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\\r
+ tions=dsv.plain ] do={\r\\r
+ \n :set Line (\$Line->0);\r\\r
+ \n :local Address;\r\\r
+ \n :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\\r
+ \_] - 1) ] = \"}\") do={\r\\r
+ \n :do {\r\\r
+ \n :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\\r
+ dr\") ];\r\\r
+ \n } on-error={ }\r\\r
+ \n } else={\r\\r
+ \n :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\\r
+ ist->\"cidr\"));\r\\r
+ \n }\r\\r
+ \n :do {\r\\r
+ \n :local Branch;\r\\r
+ \n :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\\r
+ .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\\r
+ \n :local Net \$Address;\r\\r
+ \n :local CIDR 32;\r\\r
+ \n :local Slash [ :find \$Address \"/\" ];\r\\r
+ \n :if ([ :typeof \$Slash ] = \"num\") do={\r\\r
+ \n :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\\r
+ \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\\r
+ \_];\r\\r
+ \n :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\\r
+ R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\\r
+ \n }\r\\r
+ \n :set Branch [ \$GetBranch \$Address ];\r\\r
+ \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\\r
+ \n }\r\\r
+ \n :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\\r
+ \?\\\$\") do={\r\\r
+ \n :local Net \$Address;\r\\r
+ \n :local CIDR 128;\r\\r
+ \n :local Slash [ :find \$Address \"/\" ];\r\\r
+ \n :if ([ :typeof \$Slash ] = \"num\") do={\r\\r
+ \n :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\\r
+ \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\\r
+ \_];\r\\r
+ \n }\r\\r
+ \n :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\\r
+ \" . \$CIDR);\r\\r
+ \n :set Branch [ \$GetBranch \$Address ];\r\\r
+ \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\\r
+ \n }\r\\r
+ \n :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\\r
+ o={\r\\r
+ \n :set Branch [ \$GetBranch \$Address ];\r\\r
+ \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\\r
+ \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\\r
+ \n }\r\\r
+ \n } on-error={ }\r\\r
+ \n }\r\\r
+ \n \r\\r
+ \n\r\\r
+ \n :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\\r
+ \n list=\$ListName comment=\$ListComment ] do={\r\\r
+ \n :local Address [ /ip/firewall/address-list/get \$Entry address ];\\r
+ \r\\r
+ \n :local Branch [ \$GetBranch \$Address ];\r\\r
+ \n :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\\r
+ \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\\r
+ \n :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\\r
+ ress . \\\r\\r
+ \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\\r
+ \");\r\\r
+ \n /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\\r
+ \n :set (\$IPv4Addresses->\$Branch->\$Address);\r\\r
+ \n :set CntRenew (\$CntRenew + 1);\r\\r
+ \n } else={\r\\r
+ \n :if (\$Failure = false) do={\r\\r
+ \n :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\\r
+ ddress . \\\r\\r
+ \n \" from list '\" . \$ListName . \".\");\r\\r
+ \n /ip/firewall/address-list/remove \$Entry;\r\\r
+ \n :set CntRemove (\$CntRemove + 1);\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\\r
+ \n list=\$ListName comment=\$ListComment ] do={\r\\r
+ \n :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\\r
+ ;\r\\r
+ \n :local Branch [ \$GetBranch \$Address ];\r\\r
+ \n :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\\r
+ \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\\r
+ \n :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\\r
+ ress . \\\r\\r
+ \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\\r
+ \");\r\\r
+ \n /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\\r
+ \n :set (\$IPv6Addresses->\$Branch->\$Address);\r\\r
+ \n :set CntRenew (\$CntRenew + 1);\r\\r
+ \n } else={\r\\r
+ \n :if (\$Failure = false) do={\r\\r
+ \n :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\\r
+ ddress . \\\r\\r
+ \n \" from list '\" . \$ListName . \".\");\r\\r
+ \n /ipv6/firewall/address-list/remove \$Entry;\r\\r
+ \n :set CntRemove (\$CntRemove + 1);\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :foreach BranchName,Branch in=\$IPv4Addresses do={\r\\r
+ \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\\r
+ );\r\\r
+ \n :foreach Address,Timeout in=\$Branch do={\r\\r
+ \n :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\\r
+ ss . \\\r\\r
+ \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\\r
+ \");\r\\r
+ \n :onerror Err {\r\\r
+ \n /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\\r
+ mment \\\r\\r
+ \n address=\$Address timeout=\$Timeout;\r\\r
+ \n :set CntAdd (\$CntAdd + 1);\r\\r
+ \n } do={\r\\r
+ \n :log warning (\$ScriptName . \" Failed to add IPv4 address \" \\r
+ . \$Address . \\\r\\r
+ \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :foreach BranchName,Branch in=\$IPv6Addresses do={\r\\r
+ \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\\r
+ );\r\\r
+ \n :foreach Address,Timeout in=\$Branch do={\r\\r
+ \n :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\\r
+ ss . \\\r\\r
+ \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\\r
+ \");\r\\r
+ \n :onerror Err {\r\\r
+ \n /ipv6/firewall/address-list/add list=\$ListName comment=\$List\\r
+ Comment \\\r\\r
+ \n address=\$Address timeout=\$Timeout;\r\\r
+ \n :set CntAdd (\$CntAdd + 1);\r\\r
+ \n } do={\r\\r
+ \n :log warning (\$ScriptName . \" Failed to add IPv6 address \" \\r
+ . \$Address . \\\r\\r
+ \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n }\r\\r
+ \n\r\\r
+ \n :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\\r
+ \n \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \\r
+ \")\" . \\\r\\r
+ \n \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\\r
+ \n \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\\r
+ \n \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\\r
+ \n }\r\\r
+ \n} do={\r\\r
+ \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\\r
+ \n}\r\\r
+ \n"\r
+add dont-require-permissions=no name=awg-env owner=vados policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\\r
+ container/envs/add list=awg-proxy-env key=AWG_LISTEN value=\":55055\"\\r
+ \n/container/envs/add list=awg-proxy-env key=AWG_REMOTE value=\"109.107.17\\r
+ 7.79:55055\"\\r
+ \n/container/envs/add list=awg-proxy-env key=AWG_JC value=\"9\"\\r
+ \n/container/envs/add list=awg-proxy-env key=AWG_JMIN value=\"105\"\\r
+ \n/container/envs/add list=awg-proxy-env key=AWG_JMAX value=\"920\"\\r
+ \n/container/envs/add list=awg-proxy-env key=AWG_S1 value=\"90\"\\r
+ \n/container/envs/add list=awg-proxy-env key=AWG_S2 value=\"136\"\\r
+ \n/container/envs/add list=awg-proxy-env key=AWG_S3 value=\"45\"\\r
+ \n/container/envs/add list=awg-proxy-env key=AWG_S4 value=\"27\"\\r
+ \n/container/envs/add list=awg-proxy-env key=AWG_H1 value=\"472437748-4724\\r
+ 38637\"\\r
+ \n/container/envs/add list=awg-proxy-env key=AWG_H2 value=\"707808381-7078\\r
+ 09250\"\\r
+ \n/container/envs/add list=awg-proxy-env key=AWG_H3 value=\"1609078552-160\\r
+ 9079495\"\\r
+ \n/container/envs/add list=awg-proxy-env key=AWG_H4 value=\"1012329484-101\\r
+ 2329741\"\\r
+ \n/container/envs/add list=awg-proxy-env key=AWG_I1 value=\"<b 0x000100142\\r
+ 112a442><r 12><b 0x80220008636f7475726e2d3480280004><r 4>\"\\r
+ \n/container/envs/add list=awg-proxy-env key=AWG_I2 value=\"<r 32><t>\"\\r
+ \n/container/envs/add list=awg-proxy-env key=AWG_I3 value=\"<rd 16><r 24>\\r
+ \"\\r
+ \n/container/envs/add list=awg-proxy-env key=AWG_I4 value=\"<t><rc 20>\"\\r
+ \n/container/envs/add list=awg-proxy-env key=AWG_I5 value=\"<r 38>\"\\r
+ \n/container/envs/add list=awg-proxy-env key=AWG_SERVER_PUB value=\"o5IgCl\\r
+ 1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\\r
+ \n/container/envs/add list=awg-proxy-env key=AWG_CLIENT_PUB value=[/interf\\r
+ ace/wireguard/get [find name=wg-awg-proxy] public-key]"\r
+add dont-require-permissions=no name=awg-container-add owner=vados policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\\r
+ container/add file=sata1/tmp/awg-proxy-amd64.tar.gz interface=veth-awg-pro\\r
+ xy envlist=awg-proxy-env \\\\r
+ \n hostname=awg-proxy root-dir=sata1/awg-proxy logging=yes shm-size=4M \\r
+ start-on-boot=yes\\r
+ \n/container/start [find where tag~\"awg-proxy\"]"\r
+add dont-require-permissions=yes name=awg2-webui owner=vados policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\\r
+ put \"Download image, and save him to usb1/tmp\"\\r
+ \n/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-chr.tar\" dst-p\\r
+ ath=sata1/tmp/awg2-webui.tar\\r
+ \n\\r
+ \n:put \"1. Create veth interface\"\\r
+ \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\\r
+ \n\\r
+ \n:put \"2. Create bridge and add veth\"\\r
+ \n/interface bridge add name=br-awg\\r
+ \n/interface bridge port add bridge=br-awg interface=veth-awg\\r
+ \n\\r
+ \n:put \"3. Assign IP to bridge\"\\r
+ \n/ip address add address=10.9.9.1/24 interface=br-awg\\r
+ \n\\r
+ \n:put \"4. NAT: masquerade container traffic\"\\r
+ \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\\r
+ ade\\r
+ \n\\r
+ \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\\r
+ \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 action=dst-n\\r
+ at to-addresses=10.9.9.2 to-ports=55055 in-interface=ether1\\r
+ \n\\r
+ \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\\r
+ \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 action=dst-\\r
+ nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether1\\r
+ \n\\r
+ \n:put \"Create environment list..\"\\r
+ \n/container envs add list=awgui-env key=WEB_USER value=vados\\r
+ \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\\r
+ \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\\r
+ mboLs2325272931q\\r
+ \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\\r
+ 3\\r
+ \n\\r
+ \n:put \"Load and start container...\"\\r
+ \n/container add file=sata1/tmp/awg2-webui.tar interface=veth-awg hostname\\r
+ =awg2-webui \\\\r
+ \nroot-dir=sata1/awg2-webui layer-dir=sata1/docker/awg2-webu/ envlist=awgu\\r
+ i-env start-on-boot=yes logging=yes shm-size=4M\\r
+ \n\\r
+ \n:put \"Start...\"\\r
+ \n/container start 0\\r
+ \n\\r
+ \n:put \"Verify...\"\\r
+ \n/container print\\r
+ \n\\r
+ \n:put \"Should show: status=running\"\\r
+ \n\\r
+ \n/log print where topics~\"container\"\\r
+ \n\\r
+ \n:put \"Should show: AWG started, nginx running\"\\r
+ \n"\r
+add dont-require-permissions=no name=awg-proxy-go-Client owner=vados policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\\r
+ \n:put \"[::::::::::::::: START :::::::::::::::]\"\\r
+ \n:put \"\"\\r
+ \n:put \"Add ram disk tmpfs\"\\r
+ \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\\r
+ \n\\r
+ \n:put \"veth and network:\"\\r
+ \n /interface/bridge add name=docker port-cost-mode=short\\r
+ \n /ip/address/add address=192.168.100.1/24 interface=docker\\r
+ \n\\r
+ \n /interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\\r
+ =awg-proxy-go-client\\r
+ \n /interface/bridge/port add bridge=docker interface=awg-proxy-go-client\\r
+ \n\\r
+ \n:put \"add config-client.json\"\\r
+ \n/file/add name=sata1/mounts/awg-proxy-go/config-client.json\\r
+ \n/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json d\\r
+ st=/app/config.json list=awgcfg-client\\r
+ \n\\r
+ \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\\r
+ d64.tar.gz\"\\r
+ \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\\r
+ 4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\\r
+ \n\\r
+ \n:put \"Add container\"\\r
+ \n/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interface\\r
+ =awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-proxy\\r
+ -client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pro\\r
+ xy-go-client\" mountlists=awgcfg-client\\r
+ \n\\r
+ \n:put \"Start container\"\\r
+ \n#/container/start awg-proxy-go-client\\r
+ \n\\r
+ \n:put \"Add user:\"\\r
+ \n /user/add address=192.168.100.2 group=write name=awg-proxy-go password=\\r
+ peskar55\\r
+ \n\\r
+ \n:put \"Add forwarding port web-ui\"\\r
+ \n /ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\\r
+ face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\\r
+ \n\\r
+ \n:put \"Add native WireGuard-server wg-awg, add address.\"\\r
+ \n /interface/wireguard/add name=wg-awg-client\\r
+ \n /ip/address/add address=172.17.0.1/24 interface=wg-awg-client\\r
+ \n\\r
+ \n:put \"\"\\r
+ \n:put \"[::::::::::::::: END :::::::::::::::]\"\\r
+ \n"\r
+add comment=awg2wg dont-require-permissions=no name=awg2wg-uninstall owner=\\r
+ Manager policy=ftp,read,write,policy source="\r\\r
+ \n :put \"Uninstalling AmneziaWG...\"\r\\r
+ \n :log info \"Uninstalling AmneziaWG...\"\r\\r
+ \n /ip/route/remove [find where comment=awg2wg-tunnel]\r\\r
+ \n :do { /tool/netwatch/remove [find where comment=Monitor-AWG2WG] } on-e\\r
+ rror={}\r\\r
+ \n :do { /ip/route/remove [find where comment=Monitor-AWG2WG] } on-error=\\r
+ {}\r\\r
+ \n /container/stop [find where interface=veth-awg2wg]\r\\r
+ \n :delay 7s\r\\r
+ \n /interface/list/member/remove [find where interface=wg-awg2wg]\r\\r
+ \n /container/remove [find where interface=veth-awg2wg]\r\\r
+ \n /container/envs/remove [find where list=\"awg2wg-env\"]\r\\r
+ \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg2wg\"]\r\\r
+ \n /ip/address/remove [find where address=\"172.20.0.1/30\"]\r\\r
+ \n /interface/veth/remove [find where name=\"veth-awg2wg\"]\r\\r
+ \n /interface/wireguard/peers/remove [find where interface=\"wg-awg2wg\"]\\r
+ \r\\r
+ \n /ip/address/remove [find where interface=\"wg-awg2wg\"]\r\\r
+ \n /interface/wireguard/remove [find where name=\"wg-awg2wg\"]\r\\r
+ \n :do { /file/remove [find where name~\"awg2wg.+tar\"] } on-error={}\r\\r
+ \n :do { /file/remove [find where name=\"disk1/awg2wg\"] } on-error={}\r\\r
+ \n :put \"Uninstall AmneziaWG Proxy complete!\"\r\\r
+ \n :log info \"Uninstall AmneziaWG Proxy complete!\"\r\\r
+ \n /system/script/remove [find where name=awg2wg-uninstall]\r\\r
+ \n"\r
+add dont-require-permissions=no name=amneziawg-mikrotik-c owner=vados policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\\r
+ \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\\r
+ \n:global imagesPath \"amneziawg/img/\";\\r
+ \n:local Image \"awg-proxy-amd64-7.20-Docker.tar.gz\";\\r
+ \n\\r
+ \n:global DstDir \"sata1/dst/\";\\r
+ \n\\r
+ \n:local Url=(\$GlobalScriptsUrl . \$ImagesPath . \$Image);\\r
+ \n\\r
+ \n\\r
+ \n\\r
+ \n\\r
+ \n\\r
+ \n\\r
+ \n\\r
+ \n\\r
+ \n\\r
+ \n\\r
+ \n\\r
+ \n\\r
+ \n\\r
+ \n\\r
+ \n\\r
+ \n\\r
+ \n\\r
+ \n\\r
+ \n\\r
+ \n\\r
+ \n"\r
+add comment=Generator dont-require-permissions=no name=awg-VDSina owner=vados \\r
+ policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \\r
+ source="# ============================================================\\r
+ \n# AWG Proxy -- MikroTik RouterOS (protocol: v2)\\r
+ \n# 2026-06-30 22:08:12\\r
+ \n# ============================================================\\r
+ \n\\r
+ \n# 0. Check prerequisites\\r
+ \n:if ([:len [/system/package/find where name=\"container\" disabled=no]] \\r
+ = 0) do={\\r
+ \n :put \"Container package is not installed or disabled. Install it and \\r
+ reboot.\"\\r
+ \n :error \"Usage: /system/device-mode/update container=yes\"\\r
+ \n}\\r
+ \n\\r
+ \n# Auto-detect storage\\r
+ \n:global awgDisk \"disk1\"\\r
+ \n{\\r
+ \n :local usbFree 0\\r
+ \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] free] \\r
+ } on-error={}\\r
+ \n :if (\$usbFree > 0) do={\\r
+ \n :set awgDisk \"usb1\"\\r
+ \n :put (\"Using USB: usb1 (\" . (\$usbFree / 1048576) . \" MB free)\")\\r
+ \n } else={\\r
+ \n :if ([:len [/disk/find where slot=\"usb1\"]] > 0) do={\\r
+ \n :put \"USB found but not mounted. Format as ext4\?\"\\r
+ \n :put \"Press 'y' to confirm:\"\\r
+ \n :local key [/terminal/inkey timeout=30]\\r
+ \n :if (\$key = 121 || \$key = 89) do={\\r
+ \n /disk/format-drive usb1 file-system=ext4 label=usb1\\r
+ \n :delay 3s\\r
+ \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] \\r
+ free] } on-error={}\\r
+ \n :if (\$usbFree > 0) do={\\r
+ \n :set awgDisk \"usb1\"\\r
+ \n } else={ :put \"Format failed, using disk1\" }\\r
+ \n } else={ :put \"Using disk1\" }\\r
+ \n } else={ :put \"No USB, using disk1\" }\\r
+ \n }\\r
+ \n}\\r
+ \n\\r
+ \n# 1. Uninstall script\\r
+ \n/system/script/add name=awg-VDSina-uninstall comment=awg-VDSina source={\\r
+ \n :put \"Uninstallimg AmneziaWG...\"\\r
+ \n :log info \"Uninstallimg AmneziaWG...\"\\r
+ \n :local prevDNS \"\"\\r
+ \n :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\\r
+ env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\\r
+ \n :local storageDisk \"disk1\"\\r
+ \n :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\\r
+ ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\\r
+ \n :local prevTmpdir \"\"\\r
+ \n :if (\$storageDisk != \"disk1\") do={\\r
+ \n :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\\r
+ Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\\r
+ \n }\\r
+ \n /ip/route/remove [find where comment=awg-VDSina-tunnel]\\r
+ \n /ip/route/remove [find where comment=awg-VDSina-dns]\\r
+ \n /container/stop [find where interface=veth-awg-VDSina]\\r
+ \n :delay 7s\\r
+ \n /container/remove [find where interface=veth-awg-VDSina]\\r
+ \n /container/envs/remove [find where list=\"awg-VDSina-env\"]\\r
+ \n :if (\$prevDNS != \"\") do={\\r
+ \n :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\\r
+ \n :put (\"DNS restored to: \$prevDNS\")\\r
+ \n }\\r
+ \n :if (\$storageDisk != \"disk1\") do={\\r
+ \n /container/config set tmpdir=\$prevTmpdir\\r
+ \n :put (\"Container tmpdir restored to: \$prevTmpdir\")\\r
+ \n }\\r
+ \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\\r
+ \n /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\\r
+ \n /ip/address/remove [find where address=\"172.19.75.209/30\"]\\r
+ \n /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\\r
+ \n /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\\r
+ a\"]\\r
+ \n /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\\r
+ \n /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\\r
+ \n :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\\r
+ \n :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\\r
+ \_} on-error={}\\r
+ \n :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\\r
+ out.rsc\")] } on-error={}\\r
+ \n :if (\$storageDisk != \"disk1\") do={\\r
+ \n :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\\r
+ n-error={}\\r
+ \n }\\r
+ \n :put \"Uninstall AmneziaWG Proxy complete!\"\\r
+ \n :log info \"Uninstall AmneziaWG Proxy complete!\"\\r
+ \n /system/script/remove [find where name=awg-VDSina-uninstall]\\r
+ \n}\\r
+ \n\\r
+ \n# 2. Network infrastructure\\r
+ \n/interface/veth/add name=veth-awg-VDSina address=172.19.75.210/30 gatewa\\r
+ y=172.19.75.209\\r
+ \n/ip/address/add address=172.19.75.209/30 interface=veth-awg-VDSina\\r
+ \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.19.7\\r
+ 5.208/30\\r
+ \n\\r
+ \n# 3. WireGuard interface (MikroTik derives the public key automatically)\\r
+ \n/interface/wireguard/add name=wg-awg-VDSina private-key=\"4CHyNhbOs923/E\\r
+ yNDguMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=14710 disabled=yes\\r
+ \n/interface/wireguard/peers/add interface=wg-awg-VDSina public-key=\"o5Ig\\r
+ Cl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcY\\r
+ QnD9N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=172.19.75.210 endpoint-po\\r
+ rt=51820 allowed-address=0.0.0.0/0 persistent-keepalive=10\\r
+ \n/ip/address/add address=10.9.0.3/32 interface=wg-awg-VDSina\\r
+ \n\\r
+ \n# 4. Container environment variables\\r
+ \n/container/envs/add list=awg-VDSina-env key=AWG_LISTEN value=\":51820\"\\r
+ \n/container/envs/add list=awg-VDSina-env key=AWG_REMOTE value=\"109.107.1\\r
+ 77.79:55055\"\\r
+ \n/container/envs/add list=awg-VDSina-env key=AWG_JC value=\"9\"\\r
+ \n/container/envs/add list=awg-VDSina-env key=AWG_JMIN value=\"105\"\\r
+ \n/container/envs/add list=awg-VDSina-env key=AWG_JMAX value=\"920\"\\r
+ \n/container/envs/add list=awg-VDSina-env key=AWG_S1 value=\"90\"\\r
+ \n/container/envs/add list=awg-VDSina-env key=AWG_S2 value=\"136\"\\r
+ \n/container/envs/add list=awg-VDSina-env key=AWG_H1 value=\"472437748-472\\r
+ 438637\"\\r
+ \n/container/envs/add list=awg-VDSina-env key=AWG_H2 value=\"707808381-707\\r
+ 809250\"\\r
+ \n/container/envs/add list=awg-VDSina-env key=AWG_H3 value=\"1609078552-16\\r
+ 09079495\"\\r
+ \n/container/envs/add list=awg-VDSina-env key=AWG_H4 value=\"1012329484-10\\r
+ 12329741\"\\r
+ \n/container/envs/add list=awg-VDSina-env key=AWG_SERVER_PUB value=\"o5IgC\\r
+ l1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\\r
+ \n/container/envs/add list=awg-VDSina-env key=AWG_CLIENT_PUB value=[/inter\\r
+ face/wireguard/get [find name=wg-awg-VDSina] public-key]\\r
+ \n/container/envs/add list=awg-VDSina-env key=AWG_S3 value=\"45\"\\r
+ \n/container/envs/add list=awg-VDSina-env key=AWG_S4 value=\"27\"\\r
+ \n/container/envs/add list=awg-VDSina-env key=AWG_I1 value=\"<b 0x00010014\\r
+ 2112a442><r 12><b 0x80220008636f7475726e2d3480280004><r 4>\"\\r
+ \n/container/envs/add list=awg-VDSina-env key=AWG_I2 value=\"<r 32><t>\"\\r
+ \n/container/envs/add list=awg-VDSina-env key=AWG_I3 value=\"<rd 16><r 24>\\r
+ \"\\r
+ \n/container/envs/add list=awg-VDSina-env key=AWG_I4 value=\"<t><rc 20>\"\\r
+ \n/container/envs/add list=awg-VDSina-env key=AWG_I5 value=\"<r 38>\"\\r
+ \n\\r
+ \n# 5. DNS\\r
+ \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\\r
+ n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\\r
+ \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /container/envs/add list=aw\\r
+ g-VDSina-env key=AWG_PREV_DNS value=\"\$prevDNS\" }\\r
+ \n# NOTE: replaces existing DNS configuration\\r
+ \n/ip/dns/set servers=109.107.177.79\\r
+ \n/ip/route/add dst-address=109.107.177.79/32 gateway=wg-awg-VDSina distan\\r
+ ce=1 comment=awg-VDSina-dns\\r
+ \n\\r
+ \n# 6. Download, create and start container\\r
+ \n/container/envs/add list=awg-VDSina-env key=AWG_STORAGE value=\$awgDisk\\r
+ \n:if (\$awgDisk != \"disk1\") do={\\r
+ \n :local tmpPath (\$awgDisk . \"/pull\")\\r
+ \n /container/envs/add list=awg-VDSina-env key=AWG_PREV_TMPDIR value=[/co\\r
+ ntainer/config/get tmpdir]\\r
+ \n /container/config set tmpdir=\$tmpPath memory-high=200M\\r
+ \n}\\r
+ \n{\\r
+ \n :local arch [/system/resource/get architecture-name]\\r
+ \n :local ver [/system/resource/get version]\\r
+ \n :local dotPos [:find \$ver \".\"]\\r
+ \n :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\\r
+ \n :local endPos [:find \$rest \".\"]\\r
+ \n :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \" \\r
+ \"] }\\r
+ \n :local minor [:tonum [:pick \$rest 0 \$endPos]]\\r
+ \n :local suffix \"\"\\r
+ \n :if (\$minor <= 20) do={ :set suffix \"-7.20-Docker\" }\\r
+ \n :local file \"\"\\r
+ \n :if (\$arch = \"arm64\") do={ :set file (\"awg-proxy-arm64\" . \$suffi\\r
+ x . \".tar.gz\") }\\r
+ \n :if (\$arch = \"arm\") do={ :set file (\"awg-proxy-arm\" . \$suffix . \\r
+ \".tar.gz\") }\\r
+ \n :if (\$arch ~ \"x86\") do={ :set file (\"awg-proxy-amd64\" . \$suffix \\r
+ . \".tar.gz\") }\\r
+ \n :if (\$file = \"\") do={ :error \"Unsupported architecture: \$arch\" }\\r
+ \n :local url \"https://github.com/timbrs/amneziawg-mikrotik-c/releases/l\\r
+ atest/download/\$file\"\\r
+ \n :local filePath \$file\\r
+ \n :if (\$awgDisk != \"disk1\") do={\\r
+ \n :set filePath (\$awgDisk . \"/pull/\" . \$file)\\r
+ \n :do { /file/make-directory (\$awgDisk . \"/pull\") } on-error={}\\r
+ \n }\\r
+ \n :if ([:len [/file/find where name=\$filePath]] = 0) do={\\r
+ \n :local freeStorage 0\\r
+ \n :if (\$awgDisk = \"disk1\") do={\\r
+ \n :set freeStorage [/system/resource/get free-hdd-space]\\r
+ \n } else={\\r
+ \n :do { :set freeStorage [/disk/get [find where mount-point=\$awgDis\\r
+ k] free] } on-error={}\\r
+ \n }\\r
+ \n :if (\$freeStorage < 262144) do={\\r
+ \n :put (\"WARNING: Low disk space (\" . (\$freeStorage / 1024) . \"K\\r
+ B free). Need at least 256KB.\")\\r
+ \n :put \"See: https://github.com/timbrs/amneziawg-mikrotik-c#insuffi\\r
+ cient-disk-space\"\\r
+ \n :error \"Insufficient disk space\"\\r
+ \n }\\r
+ \n :put (\"Fetching: \$url -> \" . \$filePath)\\r
+ \n /tool/fetch url=\$url dst-path=\$filePath http-max-redirect-count=10\\r
+ \n } else={\\r
+ \n :put (\"File already exists: \" . \$filePath)\\r
+ \n }\\r
+ \n :local rootDir (\$awgDisk . \"/awg-VDSina\")\\r
+ \n /container/add file=\$filePath interface=veth-awg-VDSina envlist=awg-V\\r
+ DSina-env hostname=awg-VDSina root-dir=\$rootDir logging=no start-on-boot=\\r
+ yes comment=awg-VDSina\\r
+ \n :if (\$minor > 20) do={ [:parse \"/container/set [find where interface\\r
+ =veth-awg-VDSina] shm-size=4M\"] }\\r
+ \n /file/remove \$filePath\\r
+ \n :local freeMem [/system/resource/get free-memory]\\r
+ \n :if (\$freeMem < 16777216) do={\\r
+ \n :put (\"WARNING: Low memory (\" . (\$freeMem / 1048576) . \"MB free)\\r
+ . 16MB+ recommended.\")\\r
+ \n }\\r
+ \n /container/start [find where interface=veth-awg-VDSina]\\r
+ \n :do { /file/remove [find where name=\"console-dump.txt\"] } on-error={\\r
+ }\\r
+ \n :put \"Waiting for container to start...\"\\r
+ \n :delay 5s\\r
+ \n /interface/wireguard/enable wg-awg-VDSina\\r
+ \n :put \"WireGuard interface enabled\"\\r
+ \n :put \"Installation complete!\"\\r
+ \n :put \"Ping test: 109.107.177.79 via AmneziaWG tunnel. repeat 10 times\\r
+ \"\\r
+ \n /ping 109.107.177.79 count=10 interval=1\\r
+ \n :put \"\"\\r
+ \n :put \"======= NEXT STEPS =======\"\\r
+ \n :put \"\"\\r
+ \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\\r
+ \n :put \"\"\\r
+ \n :put \" Route a single host:\"\\r
+ \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-awg-VDSina \\r
+ comment=awg-VDSina-tunnel\"\\r
+ \n :put \"\"\\r
+ \n :put \" Route a subnet:\"\\r
+ \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-awg-VDSina\\r
+ \_comment=awg-VDSina-tunnel\"\\r
+ \n :put \"\"\\r
+ \n :put \" Remove a route:\"\\r
+ \n :put \" /ip/route/remove [find where comment=awg-VDSina-tunnel dst-\\r
+ address=8.8.8.8/32]\"\\r
+ \n :put \"\"\\r
+ \n :put \" Show all tunnel routes:\"\\r
+ \n :put \" /ip/route/print where comment=awg-VDSina-tunnel\"\\r
+ \n :put \"\"\\r
+ \n :put \" Uninstall:\"\\r
+ \n :put \" /system/script/run awg-VDSina-uninstall\"\\r
+ \n :put \"=========================\"\\r
+ \n}\\r
+ \n\\r
+ \n# 7. Verification\\r
+ \n# /container/print\\r
+ \n# /interface/wireguard/print\\r
+ \n# /interface/wireguard/peers/print\\r
+ \n"\r
+add comment="wg2awg GH repo in client mode" dont-require-permissions=no name=\\r
+ "wg2awg client" owner=vados policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\\r
+ \n:local Arch \"amd64\";\\r
+ \n:local Version \"v0.0.1\";\\r
+ \n:local Name wg2awg;\\r
+ \n:local WorkDisk \"sata1\";\\r
+ \n:local WorkDir (\$WorkDisk . \"/\" . \$Name);\\r
+ \n:local Bridge (\"Bridge-\" . \$Name);\\r
+ \n:local VetchMTU \"1280\";\\r
+ \n:local Vetch (\"vetch-\" . \$Name);\\r
+ \n:local VetchNet \"10.9.0.0\";\\r
+ \n:local VetchGate \"10.9.0.1\";\\r
+ \n:local VetchAddr \"10.9.0.3/32\";\\r
+ \n:local Env (\$Name . \"-env\");\\r
+ \n:local ConfDir (\"/etc/\" . \$Name . \"/\");\\r
+ \n:local ConfFile (\$Name . \".conf\");\\r
+ \n:local Mounts (\$WorkDisk . \"/mounts/\" . \$Name . \"/\");\\r
+ \n:local RootDir (\$WorkDisk . \"/\" . \$Name);\\r
+ \n:local Registry \"https://registry-1.docker.io\";\\r
+ \n:local FetchFile (\$Name . \"-\" . \$Arch . \"-oci.tar\");\\r
+ \n:local FetchUrl (\"https://github.com/vados-dev/wg2awg/releases/download\\r
+ /\" . \$Version . \"/\" . \$FetchFile);\\r
+ \n:local FetchDir (\$WorkDisk . \"/dst/\");\\r
+ \n:local AwgListen \":44044\";\\r
+ \n:local AwgRemote \"109.107.177.79\";\\r
+ \n\\r
+ \n#:put \"\"\\r
+ \n#put \"Add ram disk tmpfs\"\\r
+ \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\\r
+ \n\\r
+ \n\\r
+ \n:log warning \"[::::::::::::::: START :::::::::::::::]\"\\r
+ \n:log warning \"Add veth and nat...\";\\r
+ \n\\r
+ \n/interface/veth/add name=\$Vetch address=\$VetchAddr gateway=\$VetchGate\\r
+ ;\\r
+ \n\\r
+ \n:do {\\r
+ \n:log warning (\"Remove interface: name=\" . \$Vetch . \", address=\" . \\r
+ \$VetchAddr . \", gateway=\" . \$VetchGate);\\r
+ \n/interface/veth/remove [find name=\$Vetch];\\r
+ \n:log warning (\"Add interface: name=\" . \$Vetch . \", address=\" . \$Ve\\r
+ tchAddr . \", gateway=\" . \$VetchGate);\\r
+ \n/interface/veth/add name=\$Vetch address=\$VetchAddr gateway=\$VetchGate\\r
+ ;\\r
+ \n:log warning (\"Remove ip address: address=\" . \$VetchGate . \", interf\\r
+ ace=\" . \$Vetch);\\r
+ \n/ip/address/remove [find address=\$VetchGate interface=\$Vetch];\\r
+ \n:log warning (\"Add ip address: address=\" . \$VetchGate . \", interface\\r
+ =\" . \$Vetch);\\r
+ \n/ip/address/add address=\$VetchGate interface=\$Vetch;\\r
+ \n:log warning (\"Remove firewall nat rule: chain=srcnat action=masquerade\\r
+ \_src-address=\" . \$VetchNet . \"/24\");\\r
+ \n/ip/firewall/nat/remove [find chain=srcnat action=masquerade src-address\\r
+ =(\$VetchNet . \"/24\")];\\r
+ \n:log warning (\"Add firewall nat rule: chain=srcnat action=masquerade sr\\r
+ c-address=\" . \$VetchNet . \"/24\");\\r
+ \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=(\$VethN\\r
+ et . \"/24\");\\r
+ \n} on-error={}\\r
+ \n\\r
+ \n#:do {\\r
+ \n#/file add type=directory name=\$Mounts\\r
+ \n#} on-error={}\\r
+ \n\\r
+ \n\\r
+ \n:do {\\r
+ \n:log warning (\"Remove WorkDir: \" . \$WorkDir . \"...\");\\r
+ \n/file remove [find name=\$WorkDir];\\r
+ \n:log warning (\"Add WorkDir: \" . \$WorkDir . \"...\");\\r
+ \n/file add type=directory name=\$WorkDir;\\r
+ \n:log warning (\"Remove config file \" . \$Mounts . \$ConfFile . \"...\")\\r
+ ;\\r
+ \n/file remove [find name=(\$Mounts . \$ConfFile)];\\r
+ \n:log warning (\"Add config file \" . \$Mounts . \$ConfFile . \"...\");\\r
+ \n/file add type=file name=(\$Mounts . \$ConfFile) contents=\"[Interface]\\r
+ \nPrivateKey = 4CHyNhbOs923/EyNDguMXJXdghL2I3UyzXPwrANVgHs=\\r
+ \nAddress = \$VetchAddr\\r
+ \nMTU = \$VetchMTU\\r
+ \nDNS = 109.107.177.79\\r
+ \nPreUp = ip route add 109.107.177.79/32 via \$VetchGate dev \$Vetch\\r
+ \nPostDown = ip route del 109.107.177.79/32 via \$VetchGate dev \$Vetch\\r
+ \nJc = 9\\r
+ \nJmin = 105\\r
+ \nJmax = 920\\r
+ \nS1 = 90\\r
+ \nS2 = 136\\r
+ \nS3 = 45\\r
+ \nS4 = 27\\r
+ \nH1 = 472437748-472438637\\r
+ \nH2 = 707808381-707809250\\r
+ \nH3 = 1609078552-1609079495\\r
+ \nH4 = 1012329484-1012329741\\r
+ \nI1 = <b 0x000100142112a442><r 12><b 0x80220008636f7475726e2d3480280004><\\r
+ r 4>\\r
+ \nI2 = <r 32><t>\\r
+ \nI3 = <rd 16><r 24>\\r
+ \nI4 = <t><rc 20>\\r
+ \nI5 = <r 38>\\r
+ \n\\r
+ \n[Peer]\\r
+ \nPublicKey = o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\\r
+ \nAllowedIPs = 0.0.0.0/0\\r
+ \nEndpoint = \$AwgRemote\\r
+ \nPersistentKeepalive = 10\\r
+ \nPresharedKey = RNvF7T1cg5tyXcYQnD9N5BEp6e20vVJQTv0GMjyvHU0=\";\\r
+ \n} on-error={}\\r
+ \n\\r
+ \n\\r
+ \n:do {\\r
+ \n:log warning (\"Remove mounts list \$Env...\");\\r
+ \n/container/mounts/remove [find list=\$Env];\\r
+ \n:log warning (\"Add mounts list \$Env...\");\\r
+ \n/container/mounts/add src=(\$Mounts . \$ConfFile) dst=(\$ConfDir . \$Con\\r
+ fFile) list=\$Env mode=ro;\\r
+ \n:log warning (\"Remove Environment keys.\");\\r
+ \n/container/envs/remove [find list=\$Env];\\r
+ \n:log warning (\"Add Environment keys.\");\\r
+ \n/container/envs/add list=\$Env key=AWG_CONFIG value=(\$ConfDir . \$ConfF\\r
+ ile);\\r
+ \n/container/envs/add list=\$Env key=AWG_LISTEN value=\$AwgListen\\r
+ \n/container/envs/add list=\$Env key=AWG_REMOTE value=\$AwgRemote\\r
+ \n/container/envs/add list=\$Env key=AWG_MODE value=client\\r
+ \n} on-error={}\\r
+ \n\\r
+ \n:do {\\r
+ \n:log warning (\"Remove \" . \$WorkDisk . \"/tmp\");\\r
+ \n/file remove [find name=(\$WorkDisk . \"/tmp\")];\\r
+ \n:log warning (\"Add \" . \$WorkDisk . \"/tmp\");\\r
+ \n/file add type=directory name=(\$WorkDisk . \"/tmp\");\\r
+ \n:log warning (\"Container add tmpdir \" . \$WorkDisk . \"/tmp\");\\r
+ \n/container config set tmpdir=(\$WorkDisk . \"/tmp\");\\r
+ \n} on-error={}\\r
+ \n\\r
+ \n:do {\\r
+ \n:log warning (\"Remove \" . \$FetchDir . \$FetchFile . \".\");\\r
+ \n/file remove [find name=(\$FetchDir . \$FetchFile)];\\r
+ \n:log warning (\"Download image from \" . \$FetchUrl . \" and save him to\\r
+ \_\" . \$FetchDir . \$FetchFile . \".\");\\r
+ \n/tool/fetch url=\$FetchUrl dst-path=(\$FetchDir . \$FetchFile);\\r
+ \n} on-error={}\\r
+ \n\\r
+ \n#:log warning (\"Container set registry \" . \$Registry . \" tmpdir= \" \\r
+ . \$WorkDisk . \"/tmp\");\\r
+ \n#/container/config/set registry-url=\$Registry tmpdir=(\$WorkDisk . \"/t\\r
+ mp\");\\r
+ \n\\r
+ \n#:do {\\r
+ \n:log warning (\"Container add width: file=\" . \$FetchDir . \$FetchFile \\r
+ . \", interface=\" . \$Vetch . \", hostname=\" . \$Name . \", mountlists=\\r
+ \" . \$Env . \", envlist=\" . \$Env . \", root-dir=\" . \$RootDir . \", wo\\r
+ rkdir=\" . \$WorkDir . \", name=\" . \$Name . \", logging=yes, start-on-bo\\r
+ ot=yes\");\\r
+ \n/container/add file=(\$FetchDir . \$FetchFile) interface=\$Vetch hostnam\\r
+ e=\$Name mountlists=\$Env envlist=\$Env root-dir=\$RootDir workdir=\$WorkD\\r
+ ir name=\$Name logging=yes start-on-boot=yes;\\r
+ \n#} on-error={}\\r
+ \n\\r
+ \n\\r
+ \n#/container/start [find where interface=\$Vetch];\\r
+ \n\\r
+ \n#/interface/bridge add name=\$Bridge port-cost-mode=short;\\r
+ \n#/ip/address/add address=192.168.100.1/24 interface=\$Bridge;\\r
+ \n\\r
+ \n#/interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\\r
+ =awg-proxy-go-client\\r
+ \n#/interface/bridge/port add bridge=docker interface=awg-proxy-go-client\\r
+ \n\\r
+ \n#:put \"add config-client.json\"\\r
+ \n#/file/add name=sata1/mounts/awg-proxy-go/config-client.json\\r
+ \n#/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json \\r
+ dst=/app/config.json list=awgcfg-client\\r
+ \n\\r
+ \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\\r
+ d64.tar.gz\"\\r
+ \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\\r
+ 4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\\r
+ \n\\r
+ \n#:put \"Add container\"\\r
+ \n#/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interfac\\r
+ e=awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-prox\\r
+ y-client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pr\\r
+ oxy-go-client\" mountlists=awgcfg-client\\r
+ \n\\r
+ \n#:put \"Start container\"\\r
+ \n#/container/start awg-proxy-go-client\\r
+ \n\\r
+ \n#:put \"Add user:\"\\r
+ \n#/user/add address=192.168.100.2 group=write name=awg-proxy-go password=\\r
+ peskar55\\r
+ \n\\r
+ \n#:put \"Add forwarding port web-ui\"\\r
+ \n#/ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\\r
+ face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\\r
+ \n\\r
+ \n#:put \"Add native WireGuard-server wg-awg, add address.\"\\r
+ \n#/interface/wireguard/add name=wg-awg-client\\r
+ \n#/ip/address/add address=172.17.0.1/24 interface=wg-awg-client\\r
+ \n\\r
+ \n:put \"\"\\r
+ \n:put \"[::::::::::::::: END :::::::::::::::]\"\\r
+ \n"\r
+add dont-require-permissions=no name=tmp_print owner=vados policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\\r
+ interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDguMX\\r
+ JXdghL2I3UyzXPwrANVgHs=\" listen-port=21641 \\r
+ \n :put \"======= AWG PROXY SETUP =======\"\\r
+ \n :put \"\"\\r
+ \n :put \"Run awg-proxy on your external device (10.30.30.33).\"\\r
+ \n :put \"\"\\r
+ \n :put \"1. Download the binary for your platform:\"\\r
+ \n :put \" Linux arm64: https://github.com/timbrs/amneziawg-mikrotik-c/\\r
+ releases/latest/download/awg-proxy-linux-arm64\"\\r
+ \n :put \" Linux arm: https://github.com/timbrs/amneziawg-mikrotik-c/\\r
+ releases/latest/download/awg-proxy-linux-arm\"\\r
+ \n :put \" Linux amd64: https://github.com/timbrs/amneziawg-mikrotik-c/\\r
+ releases/latest/download/awg-proxy-linux-amd64\"\\r
+ \n :put \"\"\\r
+ \n :put \"2. Set environment variables and run:\"\\r
+ \n :put \"export AWG_LISTEN=\\\":51820\\\"\"\\r
+ \n :put \"export AWG_REMOTE=\\\"109.107.177.79:55055\\\"\"\\r
+ \n :put \"export AWG_JC=\\\"9\\\"\"\\r
+ \n :put \"export AWG_JMIN=\\\"105\\\"\"\\r
+ \n :put \"export AWG_JMAX=\\\"920\\\"\"\\r
+ \n :put \"export AWG_S1=\\\"90\\\"\"\\r
+ \n :put \"export AWG_S2=\\\"136\\\"\"\\r
+ \n :put \"export AWG_H1=\\\"472437748-472438637\\\"\"\\r
+ \n :put \"export AWG_H2=\\\"707808381-707809250\\\"\"\\r
+ \n :put \"export AWG_H3=\\\"1609078552-1609079495\\\"\"\\r
+ \n :put \"export AWG_H4=\\\"1012329484-1012329741\\\"\"\\r
+ \n :put \"export AWG_SERVER_PUB=\\\"o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+\\r
+ v0b9jU=\\\"\"\\r
+ \n :put (\"export AWG_CLIENT_PUB=\\\"\" . [/interface/wireguard/get [find\\r
+ \_name=wg-VDSina] public-key] . \"\\\"\")\\r
+ \n :put \"export AWG_S3=\\\"45\\\"\"\\r
+ \n :put \"export AWG_S4=\\\"27\\\"\"\\r
+ \n :put \"export AWG_I1=\\\"<b 0x000100142112a442><r 12><b 0x80220008636f\\r
+ 7475726e2d3480280004><r 4>\\\"\"\\r
+ \n :put \"export AWG_I2=\\\"<r 32><t>\\\"\"\\r
+ \n :put \"export AWG_I3=\\\"<rd 16><r 24>\\\"\"\\r
+ \n :put \"export AWG_I4=\\\"<t><rc 20>\\\"\"\\r
+ \n :put \"export AWG_I5=\\\"<r 38>\\\"\"\\r
+ \n :put \"\"\\r
+ \n :put \"chmod +x awg-proxy-linux-* && ./awg-proxy-linux-<arch>\"\\r
+ \n :put \"\"\\r
+ \n :put \"3. (Optional) Create a systemd service for auto-start.\"\\r
+ \n :put \"\"\\r
+ \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\\r
+ \n :put \"\"\\r
+ \n :put \" Route a single host:\"\\r
+ \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-VDSina comm\\r
+ ent=VDSina-tunnel\"\\r
+ \n :put \"\"\\r
+ \n :put \" Route a subnet:\"\\r
+ \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-VDSina com\\r
+ ment=VDSina-tunnel\"\\r
+ \n :put \"\"\\r
+ \n :put \" Remove a route:\"\\r
+ \n :put \" /ip/route/remove [find where comment=VDSina-tunnel dst-addr\\r
+ ess=8.8.8.8/32]\"\\r
+ \n :put \"\"\\r
+ \n :put \" Show all tunnel routes:\"\\r
+ \n :put \" /ip/route/print where comment=VDSina-tunnel\"\\r
+ \n :put \"\"\\r
+ \n :put \" Uninstall:\"\\r
+ \n :put \" /system/script/run VDSina-uninstall\"\\r
+ \n :put \"================================\""\r
+/user group\r
+add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\\r
+ !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api"\r
+add name=manager policy="local,ssh,ftp,read,write,policy,api,rest-api,!telnet,\\r
+ !reboot,!test,!winbox,!password,!web,!sniff,!sensitive,!romon"\r
+/app\r
+set cinny firewall-redirects=8094:80:tcp:web\r
+set goaway container-command-lines=goaway:none:docker.io/pommee/goaway:latest\r
+set home-assistant container-command-lines=\\r
+ home-assistant:none:lscr.io/linuxserver/homeassistant\r
+set n8n firewall-redirects=5678:5678:tcp:web\r
+set nextcloud container-command-lines="db:none:docker.io/postgres:17,redis:non\\r
+ e:docker.io/valkey/valkey:/bin/sh -c 'valkey-server --port 6379 --appendon\\r
+ ly yes --requirepass \$VALKEY_PASSWORD',server:none:docker.io/nextcloud:ap\\r
+ ache"\r
+set pihole environment="pihole:FTLCONF_dns_listeningMode=all,pihole:FTLCONF_we\\r
+ bserver_api_password=password"\r
+set redlib firewall-redirects=8087:8080:tcp:web\r
+set solr container-command-lines=solr:none:docker.io/solr:latest\r
+set uptime-kuma container-command-lines=\\r
+ uptime-kuma:none:docker.io/louislam/uptime-kuma:1\r
+/app settings\r
+set auto-update=yes disk=*7 lan-bridge=*3 registry-mirrors="https://reg.vados.\\r
+ ru:5000/:https://reg.vados.ru/,https://registry-1.docker.io"\r
+/caps-man aaa\r
+set called-format=ssid\r
+/caps-man access-list\r
+add action=reject allow-signal-out-of-range=10s disabled=no interface=all \\r
+ signal-range=-120..-80 ssid-regexp=""\r
+add action=accept allow-signal-out-of-range=10s disabled=no interface=all \\r
+ signal-range=-79..120 ssid-regexp=""\r
+/caps-man configuration\r
+add channel.band=2ghz-b/g/n country=no_country_set datapath=xs-DataPath mode=\\r
+ ap name=xs-2G rx-chains=0,1,2,3 security=xs-Sec ssid=vados tx-chains=\\r
+ 0,1,2,3\r
+add channel.band=5ghz-a/n/ac country=no_country_set datapath=xs-DataPath \\r
+ installation=any mode=ap name=xs-5G rx-chains=0,1,2,3 security=xs-Sec \\r
+ ssid=vados5g tx-chains=0,1,2,3\r
+add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\\r
+ XX .frequency=2422,2442,2462 .reselect-interval=20m country=belarus \\r
+ datapath=DataPath datapath.client-to-client-forwarding=yes \\r
+ .local-forwarding=yes hw-protection-mode=rts-cts installation=any name=2G \\r
+ rx-chains=0,1,2,3 security=WPA2 ssid=vados tx-chains=0,1,2,3\r
+add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\\r
+ XXXX .frequency=5180,5200,5220,5240,5260 .reselect-interval=20m \\r
+ .skip-dfs-channels=yes country=belarus datapath=DataPath \\r
+ datapath.client-to-client-forwarding=yes .local-forwarding=yes \\r
+ hw-protection-mode=rts-cts installation=any name=5G security=WPA2 ssid=\\r
+ vados5g\r
+/caps-man datapath\r
+add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\\r
+ xs-DataPath\r
+add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\\r
+ DataPath\r
+/caps-man manager\r
+set ca-certificate=CAPsMAN-CA-51B25E507D07 certificate=CAPsMAN-51B25E507D07 \\r
+ enabled=yes require-peer-certificate=yes\r
+/caps-man manager interface\r
+set [ find default=yes ] forbid=yes\r
+add disabled=no interface=Bridge-LAN\r
+/caps-man provisioning\r
+add action=create-dynamic-enabled hw-supported-modes=g,gn,b \\r
+ master-configuration=2G name-format=prefix-identity name-prefix=2G\r
+add action=create-dynamic-enabled hw-supported-modes=an,ac,a \\r
+ master-configuration=5G name-format=prefix-identity name-prefix=5G\r
+add action=create-dynamic-enabled disabled=yes hw-supported-modes=ac,an,a \\r
+ master-configuration=2G name-format=prefix-identity name-prefix=5ghz-ac\r
+add action=create-dynamic-enabled disabled=yes hw-supported-modes=an \\r
+ master-configuration=5G name-format=prefix-identity name-prefix=5ghz-an\r
+/certificate settings\r
+set crl-store=system\r
+/container config\r
+set layer-dir=/sata1/docker/layers memory-high=200.0MiB memory-max=4096.0MiB \\r
+ registry-url=https://registry-1.docker.io tmpdir=/sata1/tmp username=\\r
+ amsternl\r
+/container envs\r
+add key=AWG_CONFIG list=wg2awg-env value=/etc/wg2awg/wg2awg.conf\r
+add key=AWG_LISTEN list=wg2awg-env value=:44044\r
+add key=AWG_MODE list=wg2awg-env value=client\r
+add key=AWG_REMOTE list=wg2awg-env value=109.107.177.79\r
+/container mounts\r
+add dst=/etc/wg2awg/wg2awg.conf list=wg2awg-env mode=ro src=\\r
+ /sata1/mounts/wg2awg/wg2awg.conf\r
+/ip smb\r
+set enabled=no\r
+/interface bridge port\r
+add bridge=Bridge-LAN interface=*136\r
+add bridge=Bridge-LAN interface=ether1\r
+/ipv6 settings\r
+set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes\r
+/interface detect-internet\r
+set detect-interface-list=WAN internet-interface-list=Internet \\r
+ lan-interface-list=LAN wan-interface-list=WAN\r
+/interface list member\r
+add interface=ether1 list=WAN\r
+add interface=Bridge-LAN list=LAN\r
+/interface wifi cap\r
+set discovery-interfaces=*DF\r
+/interface wifi capsman\r
+set package-path=/tmpfs/capsman-packages upgrade-policy=none\r
+/interface wireguard peers\r
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 comment=\\r
+ "Peer for MikroMaster connection" endpoint-address=10.30.30.81 \\r
+ endpoint-port=33033 interface=MASTER name=MASTER persistent-keepalive=10s \\r
+ public-key="zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4="\r
+/ip address\r
+add address=10.30.30.10/24 interface=Bridge-LAN network=10.30.30.0\r
+add address=10.10.0.2 interface=MASTER network=10.10.0.0\r
+/ip dhcp-client\r
+add disabled=yes interface=ether1 name=client1\r
+/ip dhcp-server\r
+add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \\r
+ dhcp-option-set=domain-search-set disabled=yes interface=*3 lease-script=\\r
+ lease-script lease-time=10m name=nucDHCP server-address=10.30.30.10\r
+/ip dns\r
+set allow-remote-requests=yes doh-max-concurrent-queries=100 \\r
+ doh-max-server-connections=20 servers=10.30.30.33,109.107.177.79 \\r
+ verify-doh-cert=yes\r
+/ip firewall service-port\r
+set ftp disabled=yes\r
+set tftp disabled=yes\r
+set sip disabled=yes\r
+set pptp disabled=yes\r
+set rtsp disabled=no\r
+/ip route\r
+add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\\r
+ 10.30.30.81 routing-table=main scope=30 target-scope=10\r
+/ip service\r
+set ftp disabled=yes\r
+set reverse-proxy disabled=yes\r
+set ssh port=2222\r
+set www-ssl port=4443\r
+set api-ssl disabled=yes\r
+/ip service webserver\r
+set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\\r
+ no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \\r
+ webfig-secure=no\r
+/ip ssh\r
+set forwarding-enabled=both publickey-authentication-options=verify-required \\r
+ strong-crypto=yes\r
+/ip upnp\r
+set enabled=yes\r
+/ip upnp interfaces\r
+add interface=*3 type=external\r
+add interface=*B5 type=internal\r
+/ipv6 firewall address-list\r
+add address=2400:cb00::/32 list=CLOUDFLARE-IP-Address\r
+add address=2606:4700::/32 list=CLOUDFLARE-IP-Address\r
+add address=2803:f800::/32 list=CLOUDFLARE-IP-Address\r
+add address=2405:b500::/32 list=CLOUDFLARE-IP-Address\r
+add address=2405:8100::/32 list=CLOUDFLARE-IP-Address\r
+add address=2a06:98c0::/29 list=CLOUDFLARE-IP-Address\r
+add address=2c0f:f248::/32 list=CLOUDFLARE-IP-Address\r
+/special-login\r
+add port=serial0\r
+/system clock\r
+set time-zone-autodetect=no time-zone-name=Europe/Moscow\r
+/system gps\r
+set set-system-time=yes\r
+/system identity\r
+set name=MikroNUC\r
+/system note\r
+set show-at-login=no\r
+/system ntp client\r
+set enabled=yes\r
+/system ntp server\r
+set enabled=yes manycast=yes multicast=yes\r
+/system ntp client servers\r
+add address=10.30.30.81\r
+add address=0.ru.pool.ntp.org\r
+add address=1.ru.pool.ntp.org\r
+add address=2.ru.pool.ntp.org\r
+add address=3.ru.pool.ntp.org\r
+/system scheduler\r
+add comment="Every Day Set Global Environment Variables" disabled=yes name=\\r
+ AM-SetGlobalEnv on-event=\\r
+ "/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \\r
+ start-time=startup\r
+add comment="Every Day Check For Update Scripts" disabled=yes interval=1d \\r
+ name=AM-ScriptInstallUpdate on-event=\\r
+ ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \\r
+ start-time=startup\r
+add comment="Every Day Check For Fake Bridges" disabled=yes interval=1d name=\\r
+ mod/AM-IPbridge on-event="/system/script/run mod/AM-IPbridge;" policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \\r
+ start-time=startup\r
+add comment="Telegram Chat Bot" disabled=yes interval=30s name=mod/AM-TG-Bot \\r
+ on-event="/system/script/run mod/AM-TG-Bot;" policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \\r
+ start-time=startup\r
+add comment=\\r
+ "Every 7 Day Check For Update and Backup send notification to EMail." \\r
+ disabled=yes interval=1w name=AM-Backup-UpdateEmail on-event=\\r
+ "/system/script { run AM-Backup-UpdateEmail; }" policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \\r
+ start-date=2026-06-25 start-time=03:41:27\r
+/tool e-mail\r
+set certificate-verification=no from=MikroNUC<vadossio@icloud.com> port=587 \\r
+ server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com\r
+/user aaa\r
+set accounting=no\r
git.vados.ru / Mikrotiks / backups.git / commitdiff
