From: vados-dev <192440777+vados-dev@users.noreply.github.com> Date: Tue, 21 Jul 2026 02:05:03 +0000 (+0300) Subject: Autocommit in repo: ros.vados.ru, generated by owner: root, in 05:05:03 21.07.2026. X-Git-Url: https://git.vados.ru/gitweb.cgi?a=commitdiff_plain;h=9d44f8df549f1c8e9440d68fbf4d6ec6eaf1845e;p=Mikrotiks%2Fros.vados.ru.git Autocommit in repo: ros.vados.ru, generated by owner: root, in 05:05:03 21.07.2026. --- diff --git a/html/AM-GlobalFunc.rsc b/html/AM-GlobalFunc.rsc index ef6885c74..62f1fdeec 100644 --- a/html/AM-GlobalFunc.rsc +++ b/html/AM-GlobalFunc.rsc @@ -17,9 +17,9 @@ :global GlobalFuncReady false; # Git commit id & info, expected configuration version -:global CommitId "main/1621/ed0538cb"; +:global CommitId "main/1622/2b7a25a1"; :global CommitTAG "unknown"; -:global CommitInfo "Autocommit in repo: ros.vados.ru, generated by owner: root, in 05:00:03 21.07.2026."; +:global CommitInfo "Autocommit in repo: ros.vados.ru, generated by owner: root, in 05:05:03 21.07.2026."; # The variables are received right here. :global GlobalConfVersion 140; diff --git a/html/tmp/default-wired.rsc b/html/tmp/default-wired.rsc new file mode 100644 index 000000000..566ecd248 --- /dev/null +++ b/html/tmp/default-wired.rsc @@ -0,0 +1,137 @@ +#| Welcome to RouterOS! +#| 1) Set a strong router password in the System > Users menu +#| 2) Upgrade the software in the System > Packages menu +#| 3) Enable firewall on untrusted networks +#| 4) Set your country name to observe wireless regulations +#| +#|-------------------------------------------------------------------------------- +#| RouterMode: +#| * WAN port is protected by firewall and enabled DHCP client +#| * Wireless and Ethernet interfaces (except WAN port/s) +#| are part of LAN bridge +#| LAN Configuration: +#| IP Address 192.168.88.1/24 is set on bridge (LAN Port) +#| DHCP Server: enabled; +#| DNS: enabled; +#| WAN (gateway) configuration: +#| gateway: ether1 ; +#| ip4 firewall: enabled; +#| NAT: enabled; +#| DHCP Client: enabled; + +:global ssid; +:global defconfMode; +:log info "Starting defconf script"; +#--------------------------------------------------------------------------------- +# Apply configuration. +# these commands are executed after installation or configuration reset +#--------------------------------------------------------------------------------- +:if ($action = "apply") do={ + # wait for interfaces + :local count 0; + :if ($action = "apply") do={ + # wait for interfaces + :local count 0; + :while ([/interface ethernet find] = "") do={ + :if ($count = 30) do={ + :log warning "DefConf: Unable to find ethernet interfaces"; + /quit; + } + :delay 1s; :set $count ($count +1); + }; + /interface list add name=WAN comment="defconf" + /interface list add name=LAN comment="defconf" + /interface bridge + add name=bridge disabled=no auto-mac=yes protocol-mode=rstp comment="defconf" + :local bMACIsSet 0; + :foreach k in=[/interface find where !(slave=yes || name="ether1" || name~"bridge")] do={ + :local tmpPortName [/interface get $k name]; + :if ($bMACIsSet = 0) do={ + :if ([/interface get $k type] = "ether") do={ + /interface bridge set "bridge" auto-mac=no admin-mac=[/interface ethernet get $tmpPortName mac-address]; + :set $bMACIsSet 1; + } + } + :if (([/interface get $k type ] != "ppp-out") && ([/interface get $k type] != "lte")) do={ + /interface bridge port + add bridge=bridge interface=$tmpPortName comment="defconf"; + } + } + /ip pool add name="default-dhcp" ranges=192.168.88.10-192.168.88.254; + /ip dhcp-server + add name=defconf address-pool="default-dhcp" interface=bridge lease-time=10m disabled=no; + /ip dhcp-server network + add address=192.168.88.0/24 gateway=192.168.88.1 comment="defconf"; + /ip address add address=192.168.88.1/24 interface=bridge comment="defconf"; + /ip dns { + set allow-remote-requests=yes + static add name=-router.lan address=192.168.88.1 comment="defconf" + } + /ip dhcp-client add interface=ether1 disabled=no comment="defconf"; + /interface list member add list=LAN interface=bridge comment="defconf" + /interface list member add list=WAN interface=ether1 comment="defconf" + /ip firewall nat add chain=srcnat out-interface-list=WAN ipsec-policy=out,none action=masquerade comment="defconf: masquerade" + /ip firewall { + filter add chain=input action=accept connection-state=established,related,untracked comment="defconf: accept establisthed,related,untracked" + filter add chain=input action=drop connection-state=invalid comment="defconf: drop invalid" + filter add chain=input action=accept protocol=icmp comment="defconf: accept ICMP" + filter add chain=input action=accept dst-address=127.0.0.1 comment="defconf: accept to local loopback (for CAPsMAN)" + filter add chain=input action=drop in-interface-list=!LAN comment="defconf: drop all not coming from LAN" + filter add chain=forward action=accept ipsec-policy=in,ipsec comment="defconf: accept in ipsec policy" + filter add chain=forward action=accept ipsec-policy=out,ipsec comment="defconf: accept out ipsec policy" + filter add chain=forward action=fasttrack-connection connection-state=established,related comment="defconf: fasttrack" + filter add chain=forward action=drop connection-state=invalid comment="defconf: drop invalid" + filter add chain=foraward action=drop connection-state=new connection-nat-state=!dstnat in-interface-list=WAN comment="defconf: drop all from WAN not DSTNATed" + } + /ip neighbor discovery-settings set discover-interface-list=LAN + /tool mac-server set alowed-interface-list=LAN + /tool mac-server mac-winbox set allowed-interface-list=LAN +} +#----------------------------------------------------------------------------------------------------------------- +#| Revert configuration +#| these commands are executed if user requests to remove default configuration +#----------------------------------------------------------------------------------------------------------------- +:if ($action = "revert") do={ + /user set admin password="" + /system routerboard mode-buttom set enabled=no + /system routerboard mode-button set on-event="" + /system script remove [find comment~"defconf"] + /ip firewall filter remove [find comment~"defconf"] + /ip firewall nat remove [find comment~"defconf"] + /interface list member remove [find comment~"defconf"] + /interface detect-internet set detect-interface-list=none + /interface detect-internet set lan-interface-list=none + /interface detect-internet set wan-interface-list=none + /interface list removed [find comment~"defconf"] + /tool mac-server set allowed-interface-list=all + /tool mac-server mac-winbox set allowed-interface-list=all + /ip neighbor discovery-settings set discover-interface-list=!dynamic + :local o [/ip dhcp-server find name="defconf"] + :if ([:len $o] != 0) do={ /ip dhcp-server network remove $o } + :local o [/ip dhcp-serer find name="defconf" !disabled] + :if ([:len $o] != 0) do={ /ip dhcp-server remove $o } + /ip pool { + :local o [find name="default-dhcp" ranges=192.168.88.10-192.168.88.254] + :if ([:len $o] != 0) do={ remove $o } + } + :local o [/ip dhcp-client find comment="defconf"] + :if ([:len $o] != 0) do={ /ip dhcp-client remove $o } + /ip dns { + set allow-remote-requests=no + :local o [static find comment="defconf"] + :if ([:len $o] != 0) do={ static remove $o } + } + /ip address { + :local o [find comment="defconf"] + :if ([:len $o] != 0) do={ remove $o } + } + :foreach iface in=[/interface ethernet find] do={ + /interface ethernet set $iface name=[get $iface default-name] + } + /interface bridge port remove [find comment="defconf"] + /interface bridge remove [find comment="defconf"] + /interface bonding remove [find comment="defconf"] +} +:log info Defconf_script_finished; +:set defconfMode; +:set ssid;