Autocommit in repo: ros.vados.ru, generated by owner: root, in 10:25:03 15.05.2026.

diff --git a/html/AM-GlobalFunc.rsc b/html/AM-GlobalFunc.rsc
index 5f30986ea6be8dbd84f8cfbb738bf98ae40267bb..e36d470d01c14077b7b8b2559406c6ccad2b8f9e 100644 (file)
--- a/html/AM-GlobalFunc.rsc
+++ b/html/AM-GlobalFunc.rsc
@@ -17,9 +17,9 @@
 :global GlobalFuncReady false;
 
 # Git commit id & info, expected configuration version
-:global CommitId "main/636/1e86a8d7";
+:global CommitId "main/637/99006ec3";
 :global CommitTAG "unknown";
-:global CommitInfo "Autocommit in repo: ros.vados.ru, generated by owner: root, in 09:15:03 15.05.2026.";
+:global CommitInfo "Autocommit in repo: ros.vados.ru, generated by owner: root, in 10:25:03 15.05.2026.";
 
 # The variables are received right here.
 :global GlobalConfVersion 140;

diff --git a/html/AM-RKN-dnsLookup.rsc b/html/AM-RKN-dnsLookup.rsc
index 6776a0374ca4bd7ac5c0020c5df5464abdcf3fe9..21232ec56ffd05aebebf0a02b482dbfac23ca3de 100644 (file)
--- a/html/AM-RKN-dnsLookup.rsc
+++ b/html/AM-RKN-dnsLookup.rsc
@@ -1,85 +1,85 @@
-#!rsc by Vados
-# RouterOS script: AM-RKN-dnsLookup
-# Script comment: Lookup IP addresses for RKN list and add them to firewall address-list
-# Copyright (c) 2007-2026 Vados <vados@vados.ru>
-#
-#
-# requires RouterOS, version=7.19
-# requires device-mode, fetch
-#
-# Script description: This script is intended to be run periodically, e.g. once a day, to update the IP addresses in the firewall address-list based on the RKN list.
-#                     It resolves the domain names in the RKN list and adds the corresponding IP addresses to the specified firewall address-list.
-#                     The script also handles CNAME records by following them until it finds A records.
-# Usage:
-# /system/script { run AM-RKN-dnsLookup; }
-:local ScriptName [ :jobname ];
-
-:global dnsLookupReady false;
-:if ([:typeof $dnsLookupReady] != "boolean") do={ :set dnsLookupReady true; }
-while (!$dnsLookupReady) do={ :nothing; }
-:set dnsLookupReady false;
-
-:local arrRKN {
-  "telegra.ph"
-  "grani.ru"
-  "xhamster.com"
-  "kasparov.ru"
-  "lostfilm.tv"
-  "rutracker.org"
-  "lurkmore.to"
-  "dou.ua"
-  "youporn.com"
-  "pornolab.net"
-  "crimerussia.com"
-  "telegram.org"
-  "api.telegram.org"
-  "telegram.me"
-  "t.me";}
-
-:local ListRKN "RKN-dnsLookup";
-:local ListComment ("ListRKN managed by " . $ScriptName);
-:foreach aListItem in=[/ip/firewall/address-list find list=$ListRKN] do={
-    /ip firewall address-list remove $aListItem;
-}
-:foreach aItem in=$arrRKN do={
-    :do {
-        :resolve $aItem;
-    } on-error={
-        :log error "dns resolve failure [ ip - resolve ip ]";
-    }
-    :foreach dnsRecord in=[/ip dns cache all find where (name=$aItem)] do={
-        :if ([/ip dns cache all get $dnsRecord type]="A") do={
-            :local newAddress [/ip dns cache all get $dnsRecord data];
-            :do {
-                /ip firewall address-list add list=$ListRKN address=$newAddress comment=$aItem;
-            } on-error={
-                :log error "error when adding ip to list: $newAddress";
-            }
-        }
-        :if ([/ip dns cache all get $dnsRecord type]="CNAME") do={
-            :local cname;
-            :local nextCname;
-            :set cname [/ip dns cache all find where (name=$aItem && type="CNAME")];
-            :set nextCname [/ip dns cache all find where (name=[/ip dns cache all get $cname data] && type="CNAME")];
-            :while ($nextCname != "") do={
-                :set cname $nextCname;
-                :set nextCname [/ip dns cache all find where (name=[/ip dns cache all get $cname data] && type="CNAME")];
-            }
-            :foreach aRecord in=[/ip dns cache all find where (name=[/ip dns cache all get $cname data] && type="A")] do={
-                :do {
-                    /ip firewall address-list add list=$ListRKN address=[/ip dns cache all get $aRecord data] comment=$aItem;
-                } on-error={
-                    :log error "error when adding ip to list: $newAddress";
-                }
-            }
-        }
-    }
-}
-
-:if ([ :len [ /system/scheduler/find where name=$ScriptName ] ] = 0) do={
-   :log error ($ScriptName . "System Scheduler for script: " . $ScriptName . " is NOT SET! Fix It Now!");
-    /system/scheduler/add name=$ScriptName on-event="/system/script { run $ScriptName; }" comment="Update RKN DNS Looup" interval=00:20:00 policy="ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon" start-time=startup;
-  }
-:set dnsLookupReady true;
-delay 5s;  
-:global dnsLookupReady (a);
+#!rsc by Vados\r
+# RouterOS script: AM-RKN-dnsLookup\r
+# Script comment: Lookup IP addresses for RKN list and add them to firewall address-list\r
+# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r
+#\r
+#\r
+# requires RouterOS, version=7.19\r
+# requires device-mode, fetch\r
+#\r
+# Script description: This script is intended to be run periodically, e.g. once a day, to update the IP addresses in the firewall address-list based on the RKN list.\r
+#                     It resolves the domain names in the RKN list and adds the corresponding IP addresses to the specified firewall address-list.\r
+#                     The script also handles CNAME records by following them until it finds A records.\r
+# Usage:\r
+# /system/script { run AM-RKN-dnsLookup; }\r
+:local ScriptName [ :jobname ];\r
+\r
+:global dnsLookupReady false;\r
+:if ([:typeof $dnsLookupReady] != "boolean") do={ :set dnsLookupReady true; }\r
+while (!$dnsLookupReady) do={ :nothing; }\r
+:set dnsLookupReady false;\r
+\r
+:local arrRKN {\r
+  "telegra.ph"\r
+  "grani.ru"\r
+  "xhamster.com"\r
+  "kasparov.ru"\r
+  "lostfilm.tv"\r
+  "rutracker.org"\r
+  "lurkmore.to"\r
+  "dou.ua"\r
+  "youporn.com"\r
+  "pornolab.net"\r
+  "crimerussia.com"\r
+  "telegram.org"\r
+  "api.telegram.org"\r
+  "telegram.me"\r
+  "t.me";}\r
+\r
+:local ListRKN "RKN-dnsLookup";\r
+:local ListComment ("ListRKN managed by " . $ScriptName);\r
+:foreach aListItem in=[/ip/firewall/address-list find list=$ListRKN] do={\r
+    /ip firewall address-list remove $aListItem;\r
+}\r
+:foreach aItem in=$arrRKN do={\r
+    :do {\r
+        :resolve $aItem;\r
+    } on-error={\r
+        :log error "dns resolve failure [ ip - resolve ip ]";\r
+    }\r
+    :foreach dnsRecord in=[/ip dns cache all find where (name=$aItem)] do={\r
+        :if ([/ip dns cache all get $dnsRecord type]="A") do={\r
+            :local newAddress [/ip dns cache all get $dnsRecord data];\r
+            :do {\r
+                /ip firewall address-list add list=$ListRKN address=$newAddress comment=$aItem;\r
+            } on-error={\r
+                :log error "error when adding ip to list: $newAddress";\r
+            }\r
+        }\r
+        :if ([/ip dns cache all get $dnsRecord type]="CNAME") do={\r
+            :local cname;\r
+            :local nextCname;\r
+            :set cname [/ip dns cache all find where (name=$aItem && type="CNAME")];\r
+            :set nextCname [/ip dns cache all find where (name=[/ip dns cache all get $cname data] && type="CNAME")];\r
+            :while ($nextCname != "") do={\r
+                :set cname $nextCname;\r
+                :set nextCname [/ip dns cache all find where (name=[/ip dns cache all get $cname data] && type="CNAME")];\r
+            }\r
+            :foreach aRecord in=[/ip dns cache all find where (name=[/ip dns cache all get $cname data] && type="A")] do={\r
+                :do {\r
+                    /ip firewall address-list add list=$ListRKN address=[/ip dns cache all get $aRecord data] comment=$aItem;\r
+                } on-error={\r
+                    :log error "error when adding ip to list: $newAddress";\r
+                }\r
+            }\r
+        }\r
+    }\r
+}\r
+\r
+:if ([ :len [ /system/scheduler/find where name=$ScriptName ] ] = 0) do={\r
+   :log error ($ScriptName . "System Scheduler for script: " . $ScriptName . " is NOT SET! Fix It Now!");\r
+    /system/scheduler/add name=$ScriptName on-event="/system/script { run $ScriptName; }" comment="Update RKN DNS Looup" interval=00:20:00 policy="ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon" start-time=startup;\r
+  }\r
+:set dnsLookupReady true;\r
+delay 5s;  \r
+:global dnsLookupReady (a);\r

diff --git a/html/mod/AM-Certs-By-Ident.rsc b/html/mod/AM-Certs-By-Ident.rsc
index 43a1d1142550571dbdfd93cd87f6ff22f7b141b4..db3c3492b804fd34fbbb2e561d3f213d4a87f44e 100644 (file)
--- a/html/mod/AM-Certs-By-Ident.rsc
+++ b/html/mod/AM-Certs-By-Ident.rsc
@@ -1,133 +1,133 @@
-#!rsc by Vados
-# RouterOS script: AM-Certs-By-Ident
-# Script comment: Download custom Certificates By Routers Identity 
-# Copyright (c) 2005-2026 Vados <vados@vados.ru>
-#
-#
-# requires RouterOS, version=7.19
-# requires device-mode, fetch
-#
-# :local ScriptName [ :jobname ];
-#
-# CloudFlare
-#/tool/fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobalRootCA.crt.pem;
-#/certificate/import file-name=DigiCertGlobalRootCA.crt.pem passphrase="";
-#/tool/ fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt.pem;
-#/certificate/import file-name=DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt.pem passphrase="";
-# Quad9
-#/tool/fetch mode=https url="https://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-1.crt.pem"
-#/certificate/import file-name=DigiCertGlobalG3TLSECCSHA3842020CA1-1.crt.pem  passphrase="";
-
-:global GlobalScriptsUrl;
-:local UrlSuffix [/system/identity/get name];
-:local UrlDir "certs/";
-:local CertUrl ($GlobalScriptsUrl . $UrlDir . $UrlSuffix ."/");
-
-:log error $CertUrl;
-
-:local CertName "DigiCert-Global-Root-CA.pem";
-/tool/fetch mode=https url=($CertUrl . $CertName);
-/certificate/import file-name=$CertName passphrase="";
-/certificate/set name="DigiCert-Global-Root-CA" [ find where common-name="DigiCert Global Root CA" ];
-
-:set CertName "DigiCert-Assured-ID-Root-CA.pem";
-/tool/fetch mode=https url=($CertUrl . $CertName);
-/certificate/import file-name=$CertName passphrase="";
-/certificate/set name="DigiCert-Assured-ID-Root-CA" [ find where common-name="DigiCert Assured ID Root CA" ];
-
-:set CertName "DigiCert-Assured-ID-Root-G2.pem";
-/tool/fetch mode=https url=($CertUrl . $CertName);
-/certificate/import file-name=$CertName passphrase="";
-/certificate/set name="DigiCert-Assured-ID-Root-G2" [ find where common-name="DigiCert Assured ID Root G3" ];
-
-:set CertName "DigiCert-Assured-ID-Root-G3.pem";
-/tool/fetch mode=https url=($CertUrl . $CertName);
-/certificate/import file-name=$CertName passphrase="";
-/certificate/set name="DigiCert-Assured-ID-Root-G3" [ find where common-name="DigiCert Assured ID Root G3" ];
-
-:set CertName "DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1.pem";
-/tool/fetch mode=https url=($CertUrl . $CertName);
-/certificate/import file-name=$CertName passphrase="";
-/certificate/set name="DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1" [ find where common-name="DigiCert Global G2 TLS RSA SHA256 2020 CA1" ];
-
-:set CertName "DigiCert-Global-G3-TLS-ECC-SHA384-2020-CA1.pem";
-/tool/fetch mode=https url=($CertUrl . $CertName);
-/certificate/import file-name=$CertName passphrase="";
-/certificate/set name="DigiCert-Global-G3-TLS-ECC-SHA384-2020-CA1" [ find where common-name="DigiCert Global G3 TLS ECC SHA384 2020 CA1" ];
-
-:set CertName "DigiCert-Global-Root-G2.pem";
-/tool/fetch mode=https url=($CertUrl . $CertName);
-/certificate/import file-name=$CertName passphrase="";
-/certificate/set name="DigiCert-Global-Root-G2" [ find where common-name="DigiCert Global Root G2" ];
-
-:set CertName "DigiCert-Global-Root-G3.pem";
-/tool/fetch mode=https url=($CertUrl . $CertName);
-/certificate/import file-name=$CertName passphrase="";
-/certificate/set name="DigiCert-Global-Root-G3" [ find where common-name="DigiCert Global Root G3" ];
-
-:set CertName "DigiCert-TLS-ECC-P384-Root-G5.pem";
-/tool/fetch mode=https url=($CertUrl . $CertName);
-/certificate/import file-name=$CertName passphrase="";
-/certificate/set name="DigiCert-TLS-ECC-P384-Root-G5" [ find where common-name="DigiCert TLS ECC P384 Root G5" ];
-
-:set CertName "DigiCert-TLS-RSA4096-Root-G5.pem";
-/tool/fetch mode=https url=($CertUrl . $CertName);
-/certificate/import file-name=$CertName passphrase="";
-/certificate/set name="DigiCert-TLS-RSA4096-Root-G5" [ find where common-name="DigiCert TLS RSA4096 Root G5" ];
-
-:set CertName "DigiCert-Trusted-Root-G4.pem";
-/tool/fetch mode=https url=($CertUrl . $CertName);
-/certificate/import file-name=$CertName passphrase="";
-/certificate/set name="DigiCert-Trusted-Root-G4" [ find where common-name="DigiCert Trusted Root G4" ];
-
-:set CertName "GTS-Root-R4.pem";
-/tool/fetch mode=https url=($CertUrl . $CertName);
-/certificate/import file-name=$CertName passphrase="";
-/certificate/set name="GTS-Root-R4" [ find where common-name="GTS Root R4" ];
-
-:set CertName "Go-Daddy-Root-Certificate-Authority-G2.pem";
-/tool/fetch mode=https url=($CertUrl . $CertName);
-/certificate/import file-name=$CertName passphrase="";
-/certificate/set name="Go-Daddy-Root-Certificate-Authority-G2" [ find where common-name="Go Daddy Root Certificate Authority - G2" ];
-
-:set CertName "ISRG-Root-X1.pem";
-/tool/fetch mode=https url=($CertUrl . $CertName);
-/certificate/import file-name=$CertName passphrase="";
-/certificate/set name="ISRG-Root-X1" [ find where common-name="ISRG Root X1" ];
-
-:set CertName "Root-YE.pem";
-/tool/fetch mode=https url=($CertUrl . $CertName);
-/certificate/import file-name=$CertName passphrase="";
-/certificate/set name="Root-YE" [ find where common-name="Root YE" ];
-
-:set CertName "Starfield-Root-Certificate-Authority-G2.pem";
-/tool/fetch mode=https url=($CertUrl . $CertName);
-/certificate/import file-name=$CertName passphrase="";
-/certificate/set name="Starfield-Root-Certificate-Authority-G2" [ find where common-name="Starfield Root Certificate Authority - G2" ];
-
-:set CertName "USERTrust-RSA-Certification-Authority.pem";
-/tool/fetch mode=https url=($CertUrl . $CertName);
-/certificate/import file-name=$CertName passphrase="";
-/certificate/set name="USERTrust-RSA-Certification-Authority" [ find where common-name="USERTrust RSA Certification Authority" ];
-
-#/certificate/import file-name=$CertName passphrase="";
-#/certificate/import file-name=$CertName passphrase="";
-#:set CertName "GTS-Root-RX.pem";
-#/tool/fetch mode=https url=($AmScriptsUrl . "certs/" . $CertName);
-#/certificate/import file-name=$CertName passphrase="";
-#internet
-#/certificate/import file-name=$CertName passphrase="";
-#:set CertName "ISRG-Root-X2.pem";
-#/tool/fetch mode=https url=($AmScriptsUrl . "certs/" . $CertName);
-#/certificate/import file-name=$CertName passphrase="";
-
-
-#/ip/dns/set allow-remote-requests=yes doh-max-concurrent-queries=100 doh-max-server-connections=20 use-doh-server=https://security.cloudflare-dns.com/dns-query verify-doh-cert=yes;
-#/ip/dns/static remove [find where address=1.1.1.1];
-#/ip/dns/static add address=1.1.1.1 name=security.cloudflare-dns.com comment="cloudflare-dns IPv4 1";
-#/ip/dns/ static remove  [find where address=1.0.0.1];
-#/ip/dns/static add address=1.0.0.1 name=security.cloudflare-dns.com comment="cloudflare-dns IPv4 2"
-#/ip dns static add address=2606:4700:4700::1111 name=security.cloudflare-dns.com type=AAAA
-#/ip dns static add address=2606:4700:4700::1001 name=security.cloudflare-dns.com type=AAAA
-#/ip/dns set servers="1.0.0.1, 8.8.4.4";
+#!rsc by Vados\r
+# RouterOS script: AM-Certs-By-Ident\r
+# Script comment: Download custom Certificates By Routers Identity \r
+# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r
+#\r
+#\r
+# requires RouterOS, version=7.19\r
+# requires device-mode, fetch\r
+#\r
+# :local ScriptName [ :jobname ];\r
+#\r
+# CloudFlare\r
+#/tool/fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobalRootCA.crt.pem;\r
+#/certificate/import file-name=DigiCertGlobalRootCA.crt.pem passphrase="";\r
+#/tool/ fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt.pem;\r
+#/certificate/import file-name=DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt.pem passphrase="";\r
+# Quad9\r
+#/tool/fetch mode=https url="https://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-1.crt.pem"\r
+#/certificate/import file-name=DigiCertGlobalG3TLSECCSHA3842020CA1-1.crt.pem  passphrase="";\r
+\r
+:global GlobalScriptsUrl;\r
+:local UrlSuffix [/system/identity/get name];\r
+:local UrlDir "certs/";\r
+:local CertUrl ($GlobalScriptsUrl . $UrlDir . $UrlSuffix ."/");\r
+\r
+:log error $CertUrl;\r
+\r
+:local CertName "DigiCert-Global-Root-CA.pem";\r
+/tool/fetch mode=https url=($CertUrl . $CertName);\r
+/certificate/import file-name=$CertName passphrase="";\r
+/certificate/set name="DigiCert-Global-Root-CA" [ find where common-name="DigiCert Global Root CA" ];\r
+\r
+:set CertName "DigiCert-Assured-ID-Root-CA.pem";\r
+/tool/fetch mode=https url=($CertUrl . $CertName);\r
+/certificate/import file-name=$CertName passphrase="";\r
+/certificate/set name="DigiCert-Assured-ID-Root-CA" [ find where common-name="DigiCert Assured ID Root CA" ];\r
+\r
+:set CertName "DigiCert-Assured-ID-Root-G2.pem";\r
+/tool/fetch mode=https url=($CertUrl . $CertName);\r
+/certificate/import file-name=$CertName passphrase="";\r
+/certificate/set name="DigiCert-Assured-ID-Root-G2" [ find where common-name="DigiCert Assured ID Root G3" ];\r
+\r
+:set CertName "DigiCert-Assured-ID-Root-G3.pem";\r
+/tool/fetch mode=https url=($CertUrl . $CertName);\r
+/certificate/import file-name=$CertName passphrase="";\r
+/certificate/set name="DigiCert-Assured-ID-Root-G3" [ find where common-name="DigiCert Assured ID Root G3" ];\r
+\r
+:set CertName "DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1.pem";\r
+/tool/fetch mode=https url=($CertUrl . $CertName);\r
+/certificate/import file-name=$CertName passphrase="";\r
+/certificate/set name="DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1" [ find where common-name="DigiCert Global G2 TLS RSA SHA256 2020 CA1" ];\r
+\r
+:set CertName "DigiCert-Global-G3-TLS-ECC-SHA384-2020-CA1.pem";\r
+/tool/fetch mode=https url=($CertUrl . $CertName);\r
+/certificate/import file-name=$CertName passphrase="";\r
+/certificate/set name="DigiCert-Global-G3-TLS-ECC-SHA384-2020-CA1" [ find where common-name="DigiCert Global G3 TLS ECC SHA384 2020 CA1" ];\r
+\r
+:set CertName "DigiCert-Global-Root-G2.pem";\r
+/tool/fetch mode=https url=($CertUrl . $CertName);\r
+/certificate/import file-name=$CertName passphrase="";\r
+/certificate/set name="DigiCert-Global-Root-G2" [ find where common-name="DigiCert Global Root G2" ];\r
+\r
+:set CertName "DigiCert-Global-Root-G3.pem";\r
+/tool/fetch mode=https url=($CertUrl . $CertName);\r
+/certificate/import file-name=$CertName passphrase="";\r
+/certificate/set name="DigiCert-Global-Root-G3" [ find where common-name="DigiCert Global Root G3" ];\r
+\r
+:set CertName "DigiCert-TLS-ECC-P384-Root-G5.pem";\r
+/tool/fetch mode=https url=($CertUrl . $CertName);\r
+/certificate/import file-name=$CertName passphrase="";\r
+/certificate/set name="DigiCert-TLS-ECC-P384-Root-G5" [ find where common-name="DigiCert TLS ECC P384 Root G5" ];\r
+\r
+:set CertName "DigiCert-TLS-RSA4096-Root-G5.pem";\r
+/tool/fetch mode=https url=($CertUrl . $CertName);\r
+/certificate/import file-name=$CertName passphrase="";\r
+/certificate/set name="DigiCert-TLS-RSA4096-Root-G5" [ find where common-name="DigiCert TLS RSA4096 Root G5" ];\r
+\r
+:set CertName "DigiCert-Trusted-Root-G4.pem";\r
+/tool/fetch mode=https url=($CertUrl . $CertName);\r
+/certificate/import file-name=$CertName passphrase="";\r
+/certificate/set name="DigiCert-Trusted-Root-G4" [ find where common-name="DigiCert Trusted Root G4" ];\r
+\r
+:set CertName "GTS-Root-R4.pem";\r
+/tool/fetch mode=https url=($CertUrl . $CertName);\r
+/certificate/import file-name=$CertName passphrase="";\r
+/certificate/set name="GTS-Root-R4" [ find where common-name="GTS Root R4" ];\r
+\r
+:set CertName "Go-Daddy-Root-Certificate-Authority-G2.pem";\r
+/tool/fetch mode=https url=($CertUrl . $CertName);\r
+/certificate/import file-name=$CertName passphrase="";\r
+/certificate/set name="Go-Daddy-Root-Certificate-Authority-G2" [ find where common-name="Go Daddy Root Certificate Authority - G2" ];\r
+\r
+:set CertName "ISRG-Root-X1.pem";\r
+/tool/fetch mode=https url=($CertUrl . $CertName);\r
+/certificate/import file-name=$CertName passphrase="";\r
+/certificate/set name="ISRG-Root-X1" [ find where common-name="ISRG Root X1" ];\r
+\r
+:set CertName "Root-YE.pem";\r
+/tool/fetch mode=https url=($CertUrl . $CertName);\r
+/certificate/import file-name=$CertName passphrase="";\r
+/certificate/set name="Root-YE" [ find where common-name="Root YE" ];\r
+\r
+:set CertName "Starfield-Root-Certificate-Authority-G2.pem";\r
+/tool/fetch mode=https url=($CertUrl . $CertName);\r
+/certificate/import file-name=$CertName passphrase="";\r
+/certificate/set name="Starfield-Root-Certificate-Authority-G2" [ find where common-name="Starfield Root Certificate Authority - G2" ];\r
+\r
+:set CertName "USERTrust-RSA-Certification-Authority.pem";\r
+/tool/fetch mode=https url=($CertUrl . $CertName);\r
+/certificate/import file-name=$CertName passphrase="";\r
+/certificate/set name="USERTrust-RSA-Certification-Authority" [ find where common-name="USERTrust RSA Certification Authority" ];\r
+\r
+#/certificate/import file-name=$CertName passphrase="";\r
+#/certificate/import file-name=$CertName passphrase="";\r
+#:set CertName "GTS-Root-RX.pem";\r
+#/tool/fetch mode=https url=($AmScriptsUrl . "certs/" . $CertName);\r
+#/certificate/import file-name=$CertName passphrase="";\r
+#internet\r
+#/certificate/import file-name=$CertName passphrase="";\r
+#:set CertName "ISRG-Root-X2.pem";\r
+#/tool/fetch mode=https url=($AmScriptsUrl . "certs/" . $CertName);\r
+#/certificate/import file-name=$CertName passphrase="";\r
+\r
+\r
+#/ip/dns/set allow-remote-requests=yes doh-max-concurrent-queries=100 doh-max-server-connections=20 use-doh-server=https://security.cloudflare-dns.com/dns-query verify-doh-cert=yes;\r
+#/ip/dns/static remove [find where address=1.1.1.1];\r
+#/ip/dns/static add address=1.1.1.1 name=security.cloudflare-dns.com comment="cloudflare-dns IPv4 1";\r
+#/ip/dns/ static remove  [find where address=1.0.0.1];\r
+#/ip/dns/static add address=1.0.0.1 name=security.cloudflare-dns.com comment="cloudflare-dns IPv4 2"\r
+#/ip dns static add address=2606:4700:4700::1111 name=security.cloudflare-dns.com type=AAAA\r
+#/ip dns static add address=2606:4700:4700::1001 name=security.cloudflare-dns.com type=AAAA\r
+#/ip/dns set servers="1.0.0.1, 8.8.4.4";\r
 #/ip/dns set servers="";
\ No newline at end of file