--- /dev/null
+# 2026-05-13 19:20:02 by RouterOS 7.23beta5\r
+# software id = A8L5-07YF\r
+#\r
+# model = RB952Ui-5ac2nD\r
+# serial number = D3D50CEDCD38\r
+/interface bridge\r
+add name=Bridge-LAN\r
+/interface ethernet\r
+set [ find default-name=ether1 ] comment="WAN - Unet" name="ether1 - Unet"\r
+set [ find default-name=ether3 ] comment=LEN\r
+set [ find default-name=ether4 ] comment=NUC\r
+/interface l2tp-server\r
+add comment=Server disabled=yes name=l2tp-in1 user=vados\r
+/interface l2tp-client\r
+add comment="Starless 2 MikroSPb" connect-to=176.53.203.171 name=l2tp-EoIP \\r
+ user=vados\r
+add allow=mschap2 allow-fast-path=yes comment=Starless connect-to=\\r
+ vpn.starless.ru max-mru=1280 name=l2tp-vpn use-ipsec=yes use-peer-dns=yes \\r
+ user=vados\r
+/interface wireless\r
+# managed by CAPsMAN\r
+# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding\r
+set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \\r
+ ssid=vados wireless-protocol=802.11\r
+# managed by CAPsMAN\r
+# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding\r
+set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \\r
+ ssid=vados5g wireless-protocol=802.11\r
+/interface wireguard\r
+add listen-port=13231 mtu=1280 name=WG\r
+/interface list\r
+add name=WAN\r
+add name=LAN\r
+/interface wireless security-profiles\r
+set [ find default=yes ] supplicant-identity=MikroTik\r
+/ip dhcp-server option\r
+add code=12 name=HostName\r
+add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00"\r
+/ip dhcp-server option sets\r
+add name=HP1505n options=HostName\r
+add name=StartLife1 options=HostName\r
+add name=amsterDev options=HostName\r
+add name=MiTV options=HostName\r
+add name=miller options=HostName\r
+add name=amster options=HostName\r
+add name=garage options=HostName\r
+add name=domain-search-set options=domain-search-list\r
+add name=VADOS-LEN options=HostName\r
+add name=VADOS-NUC options=HostName\r
+add name=MikroNUC options=HostName\r
+add name=master options=HostName\r
+add name=MikroYellow options=HostName\r
+add name="=\"Client ID\"" options=HostName\r
+/ip dns forwarders\r
+add dns-servers=1.1.1.1,1.0.0.1 name=blsp.at verify-doh-cert=no\r
+add comment=Kra dns-servers=1.0.0.1,1.1.1.1 name=slon2.to verify-doh-cert=no\r
+add dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no\r
+add dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no\r
+add dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=no\r
+add dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=no\r
+add dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no\r
+/ip ipsec proposal\r
+set [ find default=yes ] disabled=yes\r
+/ip pool\r
+add name=dhcp ranges=10.30.30.83-10.30.30.254\r
+/ip dhcp-server\r
+add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \\r
+ dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \\r
+ name=masterDHCP server-address=10.30.30.81\r
+/ip smb users\r
+set [ find default=yes ] disabled=yes\r
+add disabled=yes name=vados\r
+/ppp profile\r
+set *FFFFFFFE use-upnp=no\r
+/routing bgp template\r
+set default disabled=no output.network=bgp-networks\r
+/routing table\r
+add disabled=no fib name=To-VPN\r
+/system logging action\r
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email\r
+/system script\r
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\\r
+ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\\r
+ global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\\r
+ \n\r\\r
+ \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\\r
+ 0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\\r
+ \n\r\\r
+ \n#:local Script AM-setup\\r
+ \n;\r\\r
+ \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\\r
+ heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\\r
+ sc\") output=user as-value ]->\"data\");\r\\r
+ \n\\r
+ \n#/usb1/mikro_bak_rsa.pub\\r
+ \n\\r
+ \n\r\\r
+ \n#\\r
+ \n\r\\r
+ \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\\r
+ 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\\r
+ \n\r\\r
+ \n#\r\\r
+ \n\\r
+ \n#root.mnuc.backuper\\r
+ \n\\r
+ \n\r\\r
+ \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\\r
+ .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\\r
+ \n\\r
+ \n#:local Script AM-GlobalConfig;\\r
+ \n\r\\r
+ \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\\r
+ heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\\r
+ sc\") output=user as-value ]->\"data\");\r\\r
+ \n\\r
+ \n#/usb1/mikro_bak_rsa.pub\\r
+ \n#:local FetchFile AM-DOHCert.rsc\\r
+ \n\\r
+ \n\r\\r
+ \n\r\\r
+ \n#\\r
+ \n:global MkDir;\\r
+ \n\r\\r
+ \n\\r
+ \n#:local FetchFile Binary.backup\\r
+ \n:local localDir \"\";\\r
+ \n\\r
+ \n\r\\r
+ \n#\$MkDir \$localDir;\r\\r
+ \n\\r
+ \n#\\r
+ \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\\r
+ \$localDir . \$FetchFile);\r\\r
+ \n"\r
+/user group\r
+add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\\r
+ !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api"\r
+/certificate settings\r
+set builtin-trust-store="ipsec,wpa-eap,capsman,fetch,sstp,ovpn,radius,userman,\\r
+ openflow,tr069,dot1x,www,api,reverse-proxy,logging" crl-store=system\r
+/interface bridge port\r
+add bridge=Bridge-LAN interface=ether5\r
+add bridge=Bridge-LAN interface=ether2\r
+add bridge=Bridge-LAN interface=ether4\r
+add bridge=Bridge-LAN interface=ether3\r
+add bridge=Bridge-LAN interface=wlan2\r
+add bridge=Bridge-LAN interface=wlan1\r
+/ip firewall connection tracking\r
+set udp-timeout=10s\r
+/ip neighbor discovery-settings\r
+set discover-interface-list=LAN\r
+/ip settings\r
+set max-neighbor-entries=8192 secure-redirects=no\r
+/ipv6 settings\r
+set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes \\r
+ forward=no max-neighbor-entries=8192\r
+/interface detect-internet\r
+set detect-interface-list=WAN internet-interface-list=WAN lan-interface-list=\\r
+ LAN wan-interface-list=WAN\r
+/interface l2tp-server server\r
+set authentication=mschap2 use-ipsec=yes\r
+/interface list member\r
+add interface=Bridge-LAN list=LAN\r
+add interface="ether1 - Unet" list=WAN\r
+/interface wireguard peers\r
+add allowed-address=0.0.0.0/0,::/0 client-allowed-address=::/0 \\r
+ endpoint-address=89.110.101.17 endpoint-port=29185 interface=WG name=\\r
+ MikroVados persistent-keepalive=10s public-key=\\r
+ "64Y25EUZQQt8EIeAJYD8qWt+te8qvGEepnswdBgmzlY="\r
+/interface wireless cap\r
+# \r
+set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \\r
+ caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\\r
+ CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\\r
+ wlan1,wlan2 lock-to-caps-man=yes\r
+/ip address\r
+add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0\r
+add address=10.8.0.2/24 interface=WG network=10.8.0.0\r
+/ip dhcp-client\r
+add interface="ether1 - Unet" name=client1\r
+/ip dhcp-server config\r
+set accounting=no\r
+/ip dhcp-server lease\r
+add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\\r
+ 48:8F:5A:8E:EE:A8 server=masterDHCP\r
+add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\\r
+ F0:DE:F1:91:0D:1E server=masterDHCP\r
+add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\\r
+ 00:80:77:EC:43:86 server=masterDHCP\r
+add address=10.30.30.70 dhcp-option=domain-search-list,HostName \\r
+ dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP\r
+add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\\r
+ 04:7C:16:36:F5:37 server=masterDHCP\r
+add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\\r
+ 10:2D:41:2C:20:C2 server=masterDHCP\r
+add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\\r
+ 10:08:C1:81:59:5F server=masterDHCP\r
+add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\\r
+ 10:38:1F:D2:5F:13 server=masterDHCP\r
+add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\\r
+ 10:B1:DF:E9:D0:D5 server=masterDHCP\r
+add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\\r
+ FE:02:52:BE:3F:16 server=masterDHCP\r
+add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\\r
+ D4:6D:6D:FD:E5:49 server=masterDHCP\r
+add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\\r
+ CC:42:10:12:46:94 server=masterDHCP\r
+add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\\r
+ 50:CC:F8:85:96:0A server=masterDHCP\r
+add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\\r
+ E4:18:6B:58:34:AB server=masterDHCP\r
+add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\\r
+ 00:27:15:41:97:A9 server=masterDHCP\r
+add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \\r
+ mac-address=C4:82:E1:03:49:10 server=masterDHCP\r
+add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\\r
+ 10:38:1F:82:81:F2 server=masterDHCP\r
+add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \\r
+ dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP\r
+add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \\r
+ dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP\r
+add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \\r
+ server=masterDHCP\r
+add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\\r
+ MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP\r
+add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \\r
+ mac-address=F0:75:5D:1E:5F:71 server=masterDHCP\r
+add address=10.30.30.100 client-id=iVados dhcp-option=HostName \\r
+ dhcp-option-set="=\"Client ID\"" mac-address=DE:4D:72:F3:1A:9F server=\\r
+ masterDHCP\r
+/ip dhcp-server network\r
+add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\\r
+ domain-search-list dhcp-option-set=domain-search-set dns-server=\\r
+ 10.30.30.81 domain=WORKGROUP gateway=10.30.30.81 netmask=24 ntp-server=\\r
+ 10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98\r
+/ip dns\r
+set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \\r
+ doh-max-server-connections=20 servers=8.8.8.8,8.8.4.4 verify-doh-cert=yes\r
+/ip dns static\r
+add address=10.30.30.33 name=ros.vados.ru type=A\r
+add address=10.30.30.95 name=vados-nuc type=A\r
+add address=10.30.30.33 name=amster-nuc type=A\r
+add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A\r
+add address=10.30.30.33 name=amster type=A\r
+add address=10.30.30.33 name=amster-reg type=A\r
+add address=10.30.30.33 name=mng.vados.ru type=A\r
+add address=10.30.30.33 name=mgr.vados.ru type=A\r
+add address=10.30.30.33 name=prt.vados.ru type=A\r
+add address=10.30.30.33 name=reg.vados.ru type=A\r
+add address=10.30.30.33 match-subdomain=yes name=mikrots.vados.ru type=A\r
+add address=10.30.30.33 name=oxidized.vados.ru type=A\r
+add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A\r
+add address=8.8.8.8 comment="Google-dns IPv4 1" name=dns.google type=A\r
+add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A\r
+add address=10.30.30.30 name=MILLER-LEN type=A\r
+add address=10.30.30.30 name=miller type=A\r
+add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" name=\\r
+ security.cloudflare-dns.com type=A\r
+add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" name=\\r
+ security.cloudflare-dns.com type=A\r
+add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\\r
+ dns.quad9.net type=A\r
+add address=149.112.112.112 comment="Cuad9-dns IPv4 2" name=dns.quad9.net \\r
+ type=A\r
+add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\\r
+ A\r
+add address=10.30.30.81 comment=LocalNet name=MikroVados type=A\r
+add address=10.30.30.10 name=MikroNUC type=A\r
+add address=10.30.30.86 name=MikroYellow type=A\r
+add address=10.30.30.85 name=MikroMic type=A\r
+add address=10.30.30.95 name=VADOS-NUC type=A\r
+add address=10.30.30.98 name=VADOS-LEN type=A\r
+add address=10.30.30.20 name=garage type=A\r
+add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\\r
+ dns.quad9.net type=A\r
+add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\\r
+ A\r
+/ip firewall address-list\r
+add address=91.215.120.206 list=TRUSTED\r
+add address=185.71.70.78 disabled=yes list=TRUSTED\r
+add address=176.53.203.171 disabled=yes list=TRUSTED\r
+add address=176.53.203.170 disabled=yes list=TRUSTED\r
+add address=176.53.202.194 disabled=yes list=TRUSTED\r
+add address=10.30.30.100-255 list=KIDS\r
+add address=8.8.4.0/24 list=YouTube\r
+add address=8.8.8.0/24 list=YouTube\r
+add address=8.34.208.0/20 list=YouTube\r
+add address=8.35.192.0/20 list=YouTube\r
+add address=23.236.48.0/20 list=YouTube\r
+add address=23.251.128.0/19 list=YouTube\r
+add address=34.0.0.0/15 list=YouTube\r
+add address=34.2.0.0/16 list=YouTube\r
+add address=34.3.0.0/23 list=YouTube\r
+add address=34.3.3.0/24 list=YouTube\r
+add address=34.3.4.0/24 list=YouTube\r
+add address=34.3.8.0/21 list=YouTube\r
+add address=34.3.16.0/20 list=YouTube\r
+add address=34.3.32.0/19 list=YouTube\r
+add address=34.3.64.0/18 list=YouTube\r
+add address=34.4.0.0/14 list=YouTube\r
+add address=34.8.0.0/13 list=YouTube\r
+add address=34.16.0.0/12 list=YouTube\r
+add address=34.32.0.0/11 list=YouTube\r
+add address=34.64.0.0/10 list=YouTube\r
+add address=34.128.0.0/10 list=YouTube\r
+add address=35.184.0.0/13 list=YouTube\r
+add address=35.192.0.0/14 list=YouTube\r
+add address=35.196.0.0/15 list=YouTube\r
+add address=35.198.0.0/16 list=YouTube\r
+add address=35.199.0.0/17 list=YouTube\r
+add address=35.199.128.0/18 list=YouTube\r
+add address=35.200.0.0/13 list=YouTube\r
+add address=35.208.0.0/12 list=YouTube\r
+add address=35.224.0.0/12 list=YouTube\r
+add address=35.240.0.0/13 list=YouTube\r
+add address=57.140.192.0/18 list=YouTube\r
+add address=64.15.112.0/20 list=YouTube\r
+add address=64.233.160.0/19 list=YouTube\r
+add address=66.22.228.0/23 list=YouTube\r
+add address=66.102.0.0/20 list=YouTube\r
+add address=66.249.64.0/19 list=YouTube\r
+add address=70.32.128.0/19 list=YouTube\r
+add address=72.14.192.0/18 list=YouTube\r
+add address=74.125.0.0/16 list=YouTube\r
+add address=104.154.0.0/15 list=YouTube\r
+add address=104.196.0.0/14 list=YouTube\r
+add address=104.237.160.0/19 list=YouTube\r
+add address=107.167.160.0/19 list=YouTube\r
+add address=107.178.192.0/18 list=YouTube\r
+add address=108.59.80.0/20 list=YouTube\r
+add address=108.170.192.0/18 list=YouTube\r
+add address=108.177.0.0/17 list=YouTube\r
+add address=130.211.0.0/16 list=YouTube\r
+add address=136.22.160.0/20 list=YouTube\r
+add address=136.22.176.0/21 list=YouTube\r
+add address=136.22.184.0/23 list=YouTube\r
+add address=136.22.186.0/24 list=YouTube\r
+add address=142.250.0.0/15 list=YouTube\r
+add address=146.148.0.0/17 list=YouTube\r
+add address=152.65.208.0/22 list=YouTube\r
+add address=152.65.214.0/23 list=YouTube\r
+add address=152.65.218.0/23 list=YouTube\r
+add address=152.65.222.0/23 list=YouTube\r
+add address=152.65.224.0/19 list=YouTube\r
+add address=162.120.128.0/17 list=YouTube\r
+add address=162.216.148.0/22 list=YouTube\r
+add address=162.222.176.0/21 list=YouTube\r
+add address=172.110.32.0/21 list=YouTube\r
+add address=172.217.0.0/16 list=YouTube\r
+add address=172.253.0.0/16 list=YouTube\r
+add address=173.194.0.0/16 list=YouTube\r
+add address=173.255.112.0/20 list=YouTube\r
+add address=192.158.28.0/22 list=YouTube\r
+add address=192.178.0.0/15 list=YouTube\r
+add address=193.186.4.0/24 list=YouTube\r
+add address=199.36.154.0/23 list=YouTube\r
+add address=199.36.156.0/24 list=YouTube\r
+add address=199.192.112.0/22 list=YouTube\r
+add address=199.223.232.0/21 list=YouTube\r
+add address=207.223.160.0/20 list=YouTube\r
+add address=208.65.152.0/22 list=YouTube\r
+add address=208.68.108.0/22 list=YouTube\r
+add address=208.81.188.0/22 list=YouTube\r
+add address=208.117.224.0/19 list=YouTube\r
+add address=209.85.128.0/17 list=YouTube\r
+add address=216.58.192.0/19 list=YouTube\r
+add address=216.73.80.0/20 list=YouTube\r
+add address=216.239.32.0/19 list=YouTube\r
+add address=2ip.ru list=Test\r
+add address=157.240.247.174 list=Instagram\r
+add address=46.53.178.107 list=Instagram\r
+add address=179.60.195.174 list=Instagram\r
+add address=157.240.205.174 list=Instagram\r
+add address=31.13.24.0/21 list=Instagram\r
+add address=31.13.64.0/18 list=Instagram\r
+add address=45.64.40.0/22 list=Instagram\r
+add address=66.220.144.0/20 list=Instagram\r
+add address=69.63.176.0/20 list=Instagram\r
+add address=69.171.224.0/19 list=Instagram\r
+add address=74.119.76.0/22 list=Instagram\r
+add address=103.4.96.0/22 list=Instagram\r
+add address=129.134.0.0/16 list=Instagram\r
+add address=157.240.0.0/16 list=Instagram\r
+add address=173.252.64.0/18 list=Instagram\r
+add address=179.60.192.0/22 list=Instagram\r
+add address=185.60.216.0/22 list=Instagram\r
+add address=204.15.20.0/22 list=Instagram\r
+add address=157.240.200.63 list=Instagram\r
+add address=185.60.219.63 list=Instagram\r
+add address=129.134.31.12 list=Instagram\r
+add address=66.81.203.132 list=Instagram\r
+add address=185.89.218.12 list=Instagram\r
+add address=31.13.66.63 list=Instagram\r
+add address=84.15.65.162 list=Instagram\r
+add address=68.66.224.28 list=Instagram\r
+add address=157.240.253.63 list=Instagram\r
+add address=83.174.11.224 list=Instagram\r
+add address=157.240.9.52 list=Instagram\r
+add address=157.240.252.174 list=Instagram\r
+add address=157.240.195.63 list=Instagram\r
+add address=31.13.71.52 list=Instagram\r
+add address=57.144.110.192 list=Instagram\r
+add address=157.240.252.17 list=Instagram\r
+add address=84.15.66.97 list=Instagram\r
+add address=217.168.6.33 list=Instagram\r
+add address=31.13.83.52 list=Instagram\r
+add address=157.240.241.63 list=Instagram\r
+add address=129.134.30.12 list=Instagram\r
+add address=185.89.219.12 list=Instagram\r
+add address=157.240.252.10 list=Instagram\r
+add address=157.240.201.63 list=Instagram\r
+add address=66.81.203.197 list=Instagram\r
+add address=179.60.195.52 list=Instagram\r
+add address=66.81.203.7 list=Instagram\r
+add address=216.40.34.41 list=Instagram\r
+add address=157.240.202.63 list=Instagram\r
+add address=157.240.229.63 list=Instagram\r
+add address=157.240.252.63 list=Instagram\r
+add address=31.13.72.53 list=Instagram\r
+add address=124.108.16.224 list=Instagram\r
+add address=157.240.205.63 list=Instagram\r
+add address=92.46.37.96 list=Instagram\r
+add address=157.240.247.63 list=Instagram\r
+add address=157.240.234.63 list=Instagram\r
+add address=157.240.235.63 list=Instagram\r
+add address=87.245.208.97 list=Instagram\r
+add address=216.58.192.0/19 list=Instagram\r
+add address=209.85.128.0/17 list=Instagram\r
+add address=198.105.240.0/20 list=Instagram\r
+add address=173.194.0.0/16 list=Instagram\r
+add address=172.217.0.0/16 list=Instagram\r
+add address=142.250.0.0/15 list=Instagram\r
+add address=108.177.0.0/17 list=Instagram\r
+add address=87.245.197.140 list=Instagram\r
+add address=74.125.0.0/16 list=Instagram\r
+add address=64.233.160.0/19 list=Instagram\r
+add address=157.240.0.1 list=Instagram\r
+add address=157.240.238.63 list=Instagram\r
+add address=157.240.238.174 list=Instagram\r
+add address=157.240.0.63 list=Instagram\r
+add address=157.240.224.63 list=Instagram\r
+add address=157.240.224.174 list=Instagram\r
+add address=157.240.251.36 list=Instagram\r
+add address=157.240.253.12 list=Instagram\r
+add address=157.240.253.35 list=Instagram\r
+add address=157.240.238.13 list=Instagram\r
+add address=157.240.238.56 list=Instagram\r
+add address=157.240.238.175 list=Instagram\r
+add address=57.144.112.141 list=Instagram\r
+add address=157.240.251.60 list=Instagram\r
+add address=157.240.251.128 list=Instagram\r
+add address=157.240.238.5 list=Instagram\r
+add address=157.240.253.13 list=Instagram\r
+add address=157.240.253.5 list=Instagram\r
+add address=157.240.238.2 list=Instagram\r
+add address=157.240.238.37 list=Instagram\r
+add address=157.240.251.5 list=Instagram\r
+add address=157.240.251.34 list=Instagram\r
+add address=57.144.112.1 list=Instagram\r
+add address=157.240.238.54 list=Instagram\r
+add address=129.134.26.123 list=Instagram\r
+add address=157.240.252.3 list=Instagram\r
+add address=31.13.84.4 list=Instagram\r
+add address=157.240.224.12 list=Instagram\r
+add address=157.240.238.4 list=Instagram\r
+add address=157.240.0.13 list=Instagram\r
+add address=3.33.139.32 list=Instagram\r
+add address=157.240.0.35 list=Instagram\r
+add address=157.240.238.14 list=Instagram\r
+add address=157.240.238.60 list=Instagram\r
+add address=57.144.112.145 list=Instagram\r
+add address=157.240.251.35 list=Instagram\r
+add address=151.101.84.159 list=Twitter\r
+add address=pbs.twimg.com list=Twitter\r
+add address=89.110.101.17 comment=VDSIna list=TRUSTED\r
+add address=10.8.0.0/24 comment="WG VDSIna" list=TRUSTED\r
+add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina\r
+add address=love.ru comment=love.ru list=NoVdsina\r
+add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina\r
+add address=pochta.ru comment=pochta.ru list=NoVdsina\r
+add address=vdsina.com list=NoVdsina\r
+add address=vdsina.ru list=NoVdsina\r
+add address=youla.ru list=NoVdsina\r
+add address=kupiprodai.ru list=NoVdsina\r
+add address=myip.ru list=Test\r
+add address=geoip.co list=NoVdsina\r
+add address=x.com list=Twitter\r
+add address=facebook.com list=facebook\r
+add address=fbcd.net list=facebook\r
+add address=comp-lenta.ru list=NoVdsina\r
+add address=128.85.102.70 comment=update.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=wu-b-net.trafficmanager.net. comment=\\r
+ ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist\r
+add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\\r
+ ctldl.windowsupdate.com list=windowsupdateslist\r
+add address=redir.update.msft.com.trafficmanager.net. comment=\\r
+ update.microsoft.com list=windowsupdateslist\r
+add address=geo.prod.do.dsp.trafficmanager.net. comment=\\r
+ geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist\r
+add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\\r
+ kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist\r
+add address=e12437.d.akamaiedge.net. comment=\\r
+ kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist\r
+add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\\r
+ displaycatalog.mp.microsoft.com list=windowsupdateslist\r
+add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \\r
+ comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\\r
+ windowsupdateslist\r
+add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \\r
+ list=windowsupdateslist\r
+add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\\r
+ sls.update.microsoft.com list=windowsupdateslist\r
+add address=fe3.delivery.mp.microsoft.com. comment=\\r
+ fe3cr.delivery.mp.microsoft.com list=windowsupdateslist\r
+add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\\r
+ fe3.delivery.mp.microsoft.com list=windowsupdateslist\r
+add address=fe2cr.update.msft.com.trafficmanager.net. comment=\\r
+ fe2cr.update.microsoft.com list=windowsupdateslist\r
+add address=download.windowsupdate.com.delivery.microsoft.com. comment=\\r
+ download.windowsupdate.com list=windowsupdateslist\r
+add address=wu-f-net.trafficmanager.net. comment=\\r
+ download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist\r
+add address=tsfe.trafficmanager.net. comment=\\r
+ tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist\r
+add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \\r
+ comment=9.au.download.windowsupdate.com list=windowsupdateslist\r
+add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \\r
+ list=windowsupdateslist\r
+add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\\r
+ au.download.windowsupdate.com list=windowsupdateslist\r
+add address=a767.dspw65.akamai.net. comment=\\r
+ download.windowsupdate.com.edgesuite.net list=windowsupdateslist\r
+add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \\r
+ comment=licensing.mp.microsoft.com list=windowsupdateslist\r
+add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\\r
+ consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\\r
+ windowsupdateslist\r
+add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \\r
+ comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist\r
+add address=cdp-f-nlu-net.trafficmanager.net. comment=\\r
+ star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \\r
+ comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist\r
+add address=cdp-f-tlu-net.trafficmanager.net. comment=\\r
+ star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=storeedgefd.xbetservices.akadns.net. comment=\\r
+ storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist\r
+add address=\\r
+ storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \\r
+ comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\\r
+ windowsupdateslist\r
+add address=e16646.dscg.akamaiedge.net. comment=\\r
+ storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\\r
+ windowsupdateslist\r
+add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=bg.microsoft.map.fastly.net. comment=\\r
+ 3.au.download.windowsupdate.com list=windowsupdateslist\r
+add list=windowsupdateslist\r
+add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \\r
+ comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\\r
+ star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=a2033.dscd.akamai.net. comment=\\r
+ star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\\r
+ windowsupdateslist\r
+add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\\r
+ dl.delivery.mp.microsoft.com list=windowsupdateslist\r
+add address=dcat-f-nlu-net.trafficmanager.net. comment=\\r
+ dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \\r
+ comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist\r
+add address=dcat-b-tlu-net.trafficmanager.net. comment=\\r
+ 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=a122.dscg3.akamai.net. comment=\\r
+ tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist\r
+add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\\r
+ geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist\r
+add address=e10370.d.akamaiedge.net. comment=\\r
+ geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist\r
+add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=a1683.dscd.akamai.net. comment=\\r
+ dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist\r
+add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \\r
+ comment=collections.mp.microsoft.com list=windowsupdateslist\r
+add address=a1847.dscd.akamai.net. comment=\\r
+ wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\\r
+ windowsupdateslist\r
+add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=au.download.windowsupdate.com.edgesuite.net. comment=\\r
+ 2.au.download.windowsupdate.com list=windowsupdateslist\r
+add address=a767.dscg3.akamai.net. comment=\\r
+ au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist\r
+add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\\r
+ 4.au.download.windowsupdate.com list=windowsupdateslist\r
+add address=cl-glcb907925.gcdn.co. comment=\\r
+ 4.au.download.windowsupdate.com.delivery.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \\r
+ list=windowsupdateslist\r
+add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \\r
+ comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist\r
+add address=ts-frontend.trafficmanager.net. comment=\\r
+ tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=sds.trafficmanager.net. comment=software-download.microsoft.com \\r
+ list=windowsupdateslist\r
+add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \\r
+ list=windowsupdateslist\r
+add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=e12671.dscd.akamaiedge.net. comment=\\r
+ download.microsoft.com.edgekey.net list=windowsupdateslist\r
+add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \\r
+ list=windowsupdateslist\r
+add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\\r
+ kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist\r
+add address=e12358.d.akamaiedge.net. comment=\\r
+ kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist\r
+add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\\r
+ tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist\r
+add address=dcat-f-tlu-net.trafficmanager.net. comment=\\r
+ tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=a1856.dspw65.akamai.net. comment=\\r
+ tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist\r
+add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \\r
+ list=windowsupdateslist\r
+add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\\r
+ kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist\r
+add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\\r
+ consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\\r
+ windowsupdateslist\r
+add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \\r
+ list=windowsupdateslist\r
+add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \\r
+ list=windowsupdateslist\r
+add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=82.202.162.184 comment=comp-lenta.ru list=NoWG\r
+add address=smtp.mail.me.com.akadns.net. comment=smtp.mail.me.com list=NoWG\r
+add address=17.57.155.37 comment=smtp.mail.me.com.akadns.net list=NoWG\r
+add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina\r
+add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \\r
+ list=windowsupdateslist\r
+add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=purchase.md.mp.microsoft.com.akadns.net. comment=\\r
+ purchase.mp.microsoft.com list=windowsupdateslist\r
+add address=e110219.a.akamaiedge.net. comment=\\r
+ purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist\r
+add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.141 list=windowsupdateslist\r
+add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=storesdk.xbetservices.akadns.net. comment=\\r
+ storesdk.dsx.mp.microsoft.com list=windowsupdateslist\r
+add address=e16646.g.akamaiedge.net. comment=\\r
+ storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist\r
+add address=software-download.microsoft.com.delivery.microsoft.com. comment=\\r
+ software-download.microsoft.com list=windowsupdateslist\r
+add address=download.prss.microsoft.com.akamaized.net. comment=\\r
+ software-download.microsoft.com.delivery.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina\r
+add address=87.250.250.50 comment=YandexDisk list=NoVdsina\r
+add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\\r
+ displaycatalog.mp.microsoft.com list=windowsupdateslist\r
+add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\\r
+ purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist\r
+add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\\r
+ purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist\r
+add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\\r
+ cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist\r
+add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \\r
+ comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist\r
+add address=a1996.dscd.akamai.net. comment=\\r
+ wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\\r
+ windowsupdateslist\r
+add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\\r
+ cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist\r
+add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\\r
+ tas02.sls.update.microsoft.com list=windowsupdateslist\r
+add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\\r
+ cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist\r
+add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \\r
+ comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \\r
+ comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist\r
+add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\\r
+ star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\\r
+ windowsupdateslist\r
+add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\\r
+ paymentinstruments.mp.microsoft.com list=windowsupdateslist\r
+add address=10.30.30.33 comment=NUC disabled=yes list=NoWG\r
+add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG\r
+add address=89.110.101.17 comment=!!!VDSINA!!!! list=NoWG\r
+add address=wg.vados.ru comment=VDSina-vpn list=Trusted-VPN\r
+add address=80.85.244.9 list=TRUSTED\r
+add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\\r
+ disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist\r
+add address=185.71.70.78 disabled=yes list=TRUSTED\r
+add address=176.53.203.171 disabled=yes list=TRUSTED\r
+add address=176.53.203.170 disabled=yes list=TRUSTED\r
+add address=176.53.202.194 disabled=yes list=TRUSTED\r
+add address=89.110.101.17 comment="!!!VDSina Server!!!" disabled=yes list=\\r
+ NoVdsina\r
+add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS\r
+add address=dns.google comment=Google-dns list=Trusted-DNS\r
+add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\\r
+ Trusted-DNS\r
+add address=time.google.com comment=Google-time list=Trusted-NTP\r
+add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\\r
+ Trusted-NTP\r
+add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP\r
+add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\\r
+ Trusted-NTP\r
+add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\\r
+ Trusted-NTP\r
+add address=cp.vdsina.com comment=VDSina-vpn list=Trusted-VPN\r
+add address=vdsina.ru comment=VDSina-vpn list=Trusted-VPN\r
+add address=ns.vados.ru comment=VDSina-vpn list=Trusted-VPN\r
+add address=vdsina.com comment=VDSina-vpn list=Trusted-VPN\r
+add address=cp.vdsina.ru comment=VDSina-vpn list=Trusted-VPN\r
+add address=ns1.vdsina.ru comment=VDSina-vpn list=Trusted-VPN\r
+add address=ghcr.io comment=GitHub list=Trusted-VPN\r
+add address=github.com comment=GitHub list=Trusted-VPN\r
+add address=149.154.164.13 comment=telegra.ph list=FuckRKN\r
+add address=109.70.26.37 comment=grani.ru list=FuckRKN\r
+add address=194.85.61.76 comment=grani.ru list=FuckRKN\r
+add address=104.16.4.81 comment=xhamster.com list=FuckRKN\r
+add address=104.16.3.81 comment=xhamster.com list=FuckRKN\r
+add address=188.114.97.1 comment=lostfilm.tv list=FuckRKN\r
+add address=188.114.96.1 comment=lostfilm.tv list=FuckRKN\r
+add address=172.67.182.196 comment=rutracker.org list=FuckRKN\r
+add address=104.21.32.39 comment=rutracker.org list=FuckRKN\r
+add address=104.247.81.99 comment=lurkmore.to list=FuckRKN\r
+add address=104.20.28.254 comment=dou.ua list=FuckRKN\r
+add address=172.66.164.200 comment=dou.ua list=FuckRKN\r
+add address=66.254.114.79 comment=youporn.com list=FuckRKN\r
+add address=185.110.92.41 comment=pornolab.net list=FuckRKN\r
+add address=185.110.92.40 comment=pornolab.net list=FuckRKN\r
+add address=172.67.172.95 comment=crimerussia.com list=FuckRKN\r
+add address=104.21.71.238 comment=crimerussia.com list=FuckRKN\r
+add address=149.154.167.99 comment=telegram.org list=FuckRKN\r
+add address=149.154.166.110 comment=api.telegram.org list=FuckRKN\r
+add address=github.io comment=github.io list=Trusted-VPN\r
+/ip firewall filter\r
+add action=add-src-to-address-list address-list="Honeypot Hacker" \\r
+ address-list-timeout=12h chain=input comment="block honeypot DNS" \\r
+ connection-state=new dst-port=53 in-interface-list=WAN protocol=udp \\r
+ src-address=!10.30.30.0/24 src-address-list=!Trusted-DNS\r
+add action=add-src-to-address-list address-list="Honeypot Hacker" \\r
+ address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \\r
+ in-interface-list=WAN protocol=tcp src-address=!10.30.30.0/24 \\r
+ src-address-list=!Trusted-DNS\r
+add action=add-src-to-address-list address-list="Honeypot Hacker" \\r
+ address-list-timeout=4w2d chain=input comment=\\r
+ "block honeypot ssh rdp winbox" connection-state=new dst-port=\\r
+ 22,8291,2222 in-interface-list=WAN protocol=tcp src-address-list=!TRUSTED\r
+add action=add-src-to-address-list address-list="Honeypot Hacker" \\r
+ address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \\r
+ connection-state=new dst-port=5060 in-interface-list=WAN protocol=udp \\r
+ src-address-list=!TRUSTED\r
+add action=add-src-to-address-list address-list="Honeypot Hacker" \\r
+ address-list-timeout=5d chain=input comment="block honeypot NTP" \\r
+ connection-state=new dst-port=123 in-interface-list=WAN protocol=udp \\r
+ src-address=!10.30.30.0/24 src-address-list=!Trusted-NTP\r
+add action=fasttrack-connection chain=forward comment=\\r
+ "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \\r
+ connection-state=established,related,new disabled=yes\r
+add action=accept chain=output comment="Accept Rule for Trusted-NTP Servers" \\r
+ dst-address-list=Trusted-NTP dst-port=123 out-interface-list=WAN \\r
+ protocol=udp\r
+add action=accept chain=input comment=\\r
+ "accept NTP clients on local area network" disabled=yes dst-port=123 \\r
+ in-interface-list=LAN protocol=udp src-address=10.30.30.0/24\r
+add action=accept chain=output comment="accept WireGuard" disabled=yes \\r
+ dst-address-list=VPN-Server dst-port=13231 out-interface="ether1 - Unet" \\r
+ protocol=udp\r
+add action=accept chain=output disabled=yes dst-address-list=VPN-Server \\r
+ dst-port=29185 out-interface="ether1 - Unet" protocol=udp\r
+add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \\r
+ connection-state=established,related,new disabled=yes routing-mark=\\r
+ !To-VPN\r
+add action=accept chain=input disabled=yes dst-port=443 in-interface=\\r
+ "ether1 - Unet" protocol=tcp\r
+add action=accept chain=output disabled=yes protocol=tcp src-port=443\r
+add action=accept chain=input comment=\\r
+ "defconf: accept established,related,untracked" connection-state=\\r
+ established,related,untracked\r
+add action=drop chain=input comment="defconf: drop invalid" connection-state=\\r
+ invalid\r
+add action=accept chain=input comment="defconf: accept ICMP" disabled=yes \\r
+ protocol=icmp\r
+add action=accept chain=input comment=\\r
+ "defconf: accept to local loopback (for CAPsMAN)" disabled=yes \\r
+ dst-address=127.0.0.1\r
+add action=accept chain=output disabled=yes src-address=127.0.0.1\r
+add action=accept chain=forward comment="defconf: accept in ipsec policy" \\r
+ ipsec-policy=in,ipsec\r
+add action=accept chain=forward comment="defconf: accept out ipsec policy" \\r
+ ipsec-policy=out,ipsec\r
+add action=accept chain=forward comment=\\r
+ "defconf: accept established,related, untracked" connection-state=\\r
+ established,related,untracked\r
+add action=drop chain=forward comment="defconf: drop invalid" \\r
+ connection-state=invalid\r
+add action=drop chain=forward comment=\\r
+ "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \\r
+ connection-state=new in-interface="ether1 - Unet"\r
+add action=accept chain=input connection-state=established disabled=yes\r
+add action=accept chain=input connection-state=related disabled=yes\r
+add action=drop chain=input disabled=yes in-interface-list=!LAN\r
+add action=drop chain=forward comment=\\r
+ "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\\r
+ facebook\r
+add action=drop chain=forward comment=\\r
+ "Filter Rule to block YOUTUBE address LIST : )" disabled=yes \\r
+ dst-address-list=YouTube\r
+/ip firewall mangle\r
+add action=mark-routing chain=prerouting comment="Test sites" disabled=yes \\r
+ dst-address=!10.30.30.0/24 dst-address-list=Test new-routing-mark=To-VPN \\r
+ src-address=10.30.30.0/24\r
+add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \\r
+ dst-address-list=FuckRKN new-routing-mark=To-VPN passthrough=no \\r
+ src-address=10.30.30.0/24 src-address-list=!NoWG\r
+add action=mark-routing chain=prerouting comment=Instagram dst-address-list=\\r
+ Instagram new-routing-mark=To-VPN src-address=10.30.30.0/24 \\r
+ src-address-list=!NoWG\r
+add action=mark-routing chain=prerouting comment=Twitter dst-address-list=\\r
+ Twitter new-routing-mark=To-VPN src-address=10.30.30.0/24 \\r
+ src-address-list=!NoWG\r
+add action=mark-routing chain=prerouting comment=YouTube dst-address-list=\\r
+ YouTube new-routing-mark=To-VPN src-address=10.30.30.0/24 \\r
+ src-address-list=!NoWG\r
+add action=mark-routing chain=prerouting comment=facebook dst-address-list=\\r
+ facebook new-routing-mark=To-VPN src-address=10.30.30.0/24 \\r
+ src-address-list=!NoWG\r
+add action=mark-routing chain=prerouting comment="VDSIna for All sites" \\r
+ dst-address=!10.30.30.0/24 dst-address-list=!Trusted-VPN log-prefix=\\r
+ VPN-all new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24\r
+add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \\r
+ out-interface=WG passthrough=no protocol=tcp routing-mark=To-VPN \\r
+ tcp-flags=syn tcp-mss=1381-65535\r
+add action=mark-connection chain=prerouting comment=\\r
+ "Mark VPN connections to exclude from FastTrack" disabled=yes \\r
+ in-interface=WG log-prefix=Mark-VPN-FT new-connection-mark=\\r
+ VPN_No_FastTrack passthrough=no\r
+add action=mark-routing chain=prerouting comment="VPN Network" dst-address=\\r
+ 10.8.0.0/24 log-prefix=VPN-Net new-routing-mark=To-VPN passthrough=no \\r
+ src-address=10.30.30.0/24\r
+/ip firewall nat\r
+add action=redirect chain=dstnat comment=\\r
+ "FORCE DNS TO LOCAL MIKROTIK DNS SERVER" dst-port=53 protocol=tcp \\r
+ src-address=10.30.30.0/24 to-ports=53\r
+add action=redirect chain=dstnat dst-port=53 protocol=udp src-address=\\r
+ 10.30.30.0/24 to-ports=53\r
+add action=masquerade chain=srcnat comment="masquerade Default" ipsec-policy=\\r
+ out,none out-interface="ether1 - Unet"\r
+add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \\r
+ log-prefix=WG-nat out-interface=WG\r
+add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \\r
+ in-interface="ether1 - Unet" log-prefix=2Amster protocol=tcp \\r
+ routing-mark=!To-VPN to-addresses=10.30.30.33 to-ports=443\r
+add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\\r
+ "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\\r
+ 10.30.30.33 to-ports=81\r
+add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \\r
+ dst-port=80 in-interface="ether1 - Unet" protocol=tcp routing-mark=\\r
+ !To-VPN to-addresses=10.30.30.33 to-ports=80\r
+add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\\r
+ "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\\r
+ 10.30.30.33 to-ports=22\r
+add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \\r
+ dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \\r
+ time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3\r
+add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\\r
+ Bridge-LAN protocol=tcp src-address-list=KIDS time=\\r
+ 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3\r
+/ip firewall raw\r
+add action=drop chain=prerouting comment="Drop Honeypot Hackers" \\r
+ in-interface="ether1 - Unet" src-address-list="Honeypot Hacker"\r
+add action=add-dst-to-address-list address-list=NoVdsina \\r
+ address-list-timeout=none-dynamic chain=prerouting comment=\\r
+ extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes\r
+add action=add-dst-to-address-list address-list=NoVdsina \\r
+ address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \\r
+ content=linux.duke.edu disabled=yes\r
+add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \\r
+ in-interface-list=WAN src-address-list=Trusted-DNS\r
+add action=add-dst-to-address-list address-list=NoVdsina \\r
+ address-list-timeout=none-dynamic chain=prerouting comment=vk.com \\r
+ content=vk.com\r
+add action=add-dst-to-address-list address-list=NoVdsina \\r
+ address-list-timeout=none-dynamic chain=prerouting comment=ok.ru content=\\r
+ ok.ru\r
+add action=add-dst-to-address-list address-list=Instagram \\r
+ address-list-timeout=none-dynamic chain=prerouting comment=Instagram \\r
+ content=instagram.com\r
+add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\\r
+ none-dynamic chain=prerouting comment=Twitter content=twimg.com\r
+add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\\r
+ none-dynamic chain=prerouting content=x.com\r
+add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\\r
+ none-dynamic chain=prerouting content=twitter.com\r
+add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\\r
+ none-dynamic chain=prerouting comment=YouTube content=youtube.com\r
+add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\\r
+ none-dynamic chain=prerouting content=googleapis.com\r
+add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\\r
+ none-dynamic chain=prerouting content=ggpht.com\r
+add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\\r
+ none-dynamic chain=prerouting content=youtu.be\r
+add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\\r
+ none-dynamic chain=prerouting content=ytimg.com\r
+add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\\r
+ none-dynamic chain=prerouting content=googlevideo.com\r
+add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\\r
+ none-dynamic chain=prerouting content=gstatic.com\r
+add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\\r
+ none-dynamic chain=prerouting content=googleusercontent.com\r
+add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\\r
+ none-dynamic chain=prerouting content=nhacmp3youtube.com\r
+add action=add-dst-to-address-list address-list=NoVdsina \\r
+ address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \\r
+ content=rutube.ru\r
+add action=add-dst-to-address-list address-list=NoVdsina \\r
+ address-list-timeout=none-dynamic chain=prerouting comment=me.com \\r
+ content=me.com\r
+add action=add-dst-to-address-list address-list=NoVdsina \\r
+ address-list-timeout=none-dynamic chain=prerouting comment=icloud.com \\r
+ content=icloud.com\r
+add action=add-dst-to-address-list address-list=facebook \\r
+ address-list-timeout=none-dynamic chain=prerouting comment=facebook \\r
+ content=fbcd.net\r
+add action=add-dst-to-address-list address-list=facebook \\r
+ address-list-timeout=none-dynamic chain=prerouting content=facebook.com\r
+add action=add-dst-to-address-list address-list=NoVdsina \\r
+ address-list-timeout=none-dynamic chain=prerouting comment=comp-lenta.ru \\r
+ content=comp-lenta.ru\r
+add action=add-dst-to-address-list address-list=NoVdsina \\r
+ address-list-timeout=none-dynamic chain=prerouting comment=\\r
+ smtp.mail.me.com content=smtp.mail.me.com\r
+add action=add-dst-to-address-list address-list=NoVdsina \\r
+ address-list-timeout=none-dynamic chain=prerouting comment=gov.ru \\r
+ content=gov.ru\r
+add action=add-dst-to-address-list address-list=NoVdsina \\r
+ address-list-timeout=none-dynamic chain=prerouting comment=\\r
+ r78.fssp.gov.ru content=r78.fssp.gov.ru\r
+add action=add-dst-to-address-list address-list=NoVdsina \\r
+ address-list-timeout=none-dynamic chain=prerouting comment=api.db-ip.com \\r
+ content=api.db-ip.com\r
+add action=add-dst-to-address-list address-list=NoVdsina \\r
+ address-list-timeout=none-dynamic chain=prerouting comment=\\r
+ api.telegram.org content=api.telegram.org\r
+/ip firewall service-port\r
+set ftp disabled=yes\r
+set tftp disabled=yes\r
+set irc disabled=no\r
+set sip disabled=yes\r
+set pptp disabled=yes\r
+set rtsp disabled=no\r
+/ip ipsec settings\r
+set accounting=no\r
+/ip ipsec policy\r
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0\r
+/ip ipsec profile\r
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5\r
+/ip proxy\r
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\\r
+ 0.0.0.0\r
+/ip route\r
+add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn\r
+add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn\r
+add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn\r
+add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn\r
+add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=WG routing-table=\\r
+ To-VPN scope=30 target-scope=10\r
+add disabled=no distance=2 dst-address=0.0.0.0/0 gateway=146.120.64.209 \\r
+ routing-table=main scope=30 target-scope=10\r
+/ip service\r
+set ftp disabled=yes\r
+set telnet disabled=yes\r
+set reverse-proxy disabled=yes\r
+set ssh address=10.30.30.0/24 port=2222\r
+set winbox address=10.30.30.0/24\r
+set api address=10.30.30.0/24 disabled=yes\r
+set api-ssl address=10.30.30.0/24 disabled=yes\r
+set www-ssl port=18443\r
+set www address=10.30.30.0/24 disabled=yes port=18880\r
+/ip service webserver\r
+set graphs-plain=no rest-plain=no webfig-plain=no\r
+/ip ssh\r
+set forwarding-enabled=both publickey-authentication-options=verify-required \\r
+ strong-crypto=yes\r
+/ip upnp\r
+set enabled=yes\r
+/ip upnp interfaces\r
+add interface=Bridge-LAN type=internal\r
+add interface="ether1 - Unet" type=external\r
+add disabled=yes forced-ip=89.110.101.17 interface=WG type=external\r
+/system clock\r
+set time-zone-autodetect=no time-zone-name=Europe/Moscow\r
+/system clock manual\r
+set time-zone=+03:00\r
+/system identity\r
+set name=MikroMaster\r
+/system logging\r
+add action=email disabled=yes regex="* added|changed|removed *" topics=\\r
+ system,info\r
+/system ntp client\r
+set enabled=yes\r
+/system ntp server\r
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes\r
+/system ntp client servers\r
+add address=0.ru.pool.ntp.org\r
+add address=1.ru.pool.ntp.org\r
+add address=2.ru.pool.ntp.org\r
+add address=3.ru.pool.ntp.org\r
+add address=time.google.com disabled=yes\r
+/system watchdog\r
+set watchdog-timer=no\r
+/tool e-mail\r
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \\r
+ server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com\r
+/tool mac-server\r
+set allowed-interface-list=LAN\r
+/tool mac-server mac-winbox\r
+set allowed-interface-list=LAN\r
+/tool netwatch\r
+add comment="doh, doh-url=https://security.cloudflare-dns.com/dns-query, notif\\r
+ y, name=CloudFlare-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 \\r
+ http-codes="" test-script="" type=simple up-script=""\r
+add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\\r
+ flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\\r
+ oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \\r
+ port=443 test-script="" type=simple up-script=""\r
+add comment="dns-fallback, notify, name=Google-DNS IPv4" disabled=yes \\r
+ down-script="" host=8.8.8.8 http-codes="" test-script="" type=simple \\r
+ up-script=""\r
+add comment="doh-fallback, doh-url=https://dns.google/dns-query, doh-cert=GTS \\r
+ Root R1, notify, name=Google-DOH IPv4" disabled=yes down-script="" host=\\r
+ 8.8.4.4 http-codes="" test-script="" type=simple up-script=""\r
+add comment="dns, notify, name=Cuad9-DOH IPv4" disabled=yes down-script="" \\r
+ host=9.9.9.9 http-codes="" test-script="" type=simple up-script=""\r
+add comment="doh-fallback, doh-url=https://dns.quad9.net/dns-query, name=Cuad9\\r
+ -DOH IPv4" disabled=yes down-script="" host=149.112.112.112 http-codes="" \\r
+ test-script="" type=simple up-script=""\r
+add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \\r
+ down-script="" host=91.192.189.2 http-codes="" test-script="" type=simple \\r
+ up-script=""\r
+/user aaa\r
+set accounting=no\r
git.vados.ru / Mikrotiks / backups.git / commitdiff
